@tailor-platform/sdk 2.8.0 → 2.11.0

package/dist/configure/services/aigateway/index.d.mts

@@ -1,6 +1,4 @@
-import { AuthNamespaceName } from "../../types/auth-namespace-name.mjs";
 import { AIGatewayConfig, AIGatewayDefinitionBrand, AIGatewayServiceInput } from "./types.mjs";
-import "../../index.mjs";
 //#region src/configure/services/aigateway/index.d.ts
 /**
  * Define an AI Gateway configuration for the Tailor SDK.
@@ -11,7 +9,7 @@ import "../../index.mjs";
 declare function defineAIGateway(name: string, config: Omit<AIGatewayServiceInput, "name">): {
   readonly name: string;
   readonly cors?: string[] | undefined;
-  readonly authNamespace?: AuthNamespaceName;
+  readonly authNamespace?: import("@tailor-platform/sdk").AuthNamespaceName;
 } & AIGatewayDefinitionBrand;
 //#endregion
 export { type AIGatewayConfig, defineAIGateway };

package/dist/configure/services/idp/index.d.mts

@@ -52,7 +52,7 @@ declare function defineIdp<const TClients extends string[]>(name: string, config
     requestMfaSettingsUrl?: boolean | undefined;
     unenrollMfa?: boolean | undefined;
   } | undefined;
-  readonly emailConfig?: IdPEmailConfig;
+  readonly emailConfig?: import("@tailor-platform/sdk").IdPEmailConfig;
   readonly clients: TClients;
   readonly permission?: IdPPermission;
 } & IdpDefinitionBrand;

package/dist/configure/services/resolver/resolver.d.mts

@@ -3,8 +3,8 @@ import { InferFieldsOutput, output } from "../../../types/helpers.mjs";
 import { MachineUserName } from "../auth/types.mjs";
 import { ResolverInput } from "../../../types/resolver.generated.mjs";
 import { ResolverPermission } from "./permission.mjs";
-import { TailorAnyField, TailorField } from "../../types/type.mjs";
 import "../../types/machine-user.mjs";
+import { TailorAnyField, TailorField } from "../../types/type.mjs";
 //#region src/configure/services/resolver/resolver.d.ts
 type Context<Input extends Record<string, TailorAnyField> | undefined> = {
   input: Input extends Record<string, TailorAnyField> ? InferFieldsOutput<Input> : never;

package/dist/configure/services/tailordb/schema.d.mts

@@ -1,10 +1,10 @@
 import { FieldOptions, FieldOutput, FieldValidateInput, TailorFieldType, TailorToTs } from "../../types/field.types.mjs";
 import { InferredAttributes } from "../../../runtime/types.mjs";
-import { InferFieldsOutput, TypeLevelError, output } from "../../../types/helpers.mjs";
+import { InferFieldsOutput, IsUnion, TypeLevelError, UnionToIntersection, output } from "../../../types/helpers.mjs";
 import { DBFieldMetadata, DefinedDBFieldMetadata, ExcludeDefaultedDBFields, ExcludeHookedDBFields, ExcludeNestedDBFields, Hook, IndexDef, RelationType, SerialConfig, TailorDBField as TailorDBField$1, TailorDBType as TailorDBType$1, TypeFeatures, TypeHook, TypeValidateFn, UpdateHookFn } from "./types.mjs";
 import { AllowedValues, AllowedValuesOutput } from "../../types/field.mjs";
 import { FieldParseArgs } from "../../../runtime/field-parse.mjs";
-import { PluginConfigs } from "../../../plugin/types.mjs";
+import { PluginConfigs, PluginFieldExtensions } from "../../../plugin/types.mjs";
 import { TailorTypeGqlPermission, TailorTypePermission } from "./permission.mjs";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/configure/services/tailordb/schema.d.ts
@@ -123,6 +123,15 @@ type WithDBTypeMetadata<Defined extends DefinedDBTypeMetadata, Key extends keyof
 type DBTypeDuplicateInputGuard<Defined extends DefinedDBTypeMetadata, Key extends keyof DefinedDBTypeMetadata, Input, Message extends string> = IsAny<Defined> extends true ? Input : Defined extends Record<Key, unknown> ? TypeLevelError<Message> : Input;
 type DBTypeDuplicateRestGuard<Defined extends DefinedDBTypeMetadata, Key extends keyof DefinedDBTypeMetadata, Input extends unknown[], Message extends string> = IsAny<Defined> extends true ? Input : Defined extends Record<Key, unknown> ? [TypeLevelError<Message>, ...TypeLevelError<Message>[]] : Input;
 type FileKeyConflictError<Fields extends Record<string, TailorAnyDBField>, User extends object> = Partial<Record<keyof output<TailorDBType<Fields, User>> & string, TypeLevelError<"file keys cannot use existing field names">>>;
+type PluginFieldExtensionFor<Fields extends Record<string, TailorAnyDBField>, Id extends string, IdConfig> = Id extends keyof PluginFieldExtensions<keyof Fields & string, IdConfig> ? PluginFieldExtensions<keyof Fields & string, IdConfig>[Id] : Record<never, never>;
+type PluginFieldExtensionsUnion<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>> = { [Id in keyof Config & string]: PluginFieldExtensionFor<Fields, Id, Config[Id]>; }[keyof Config & string];
+type AllExtensionKeys<Ext> = Ext extends unknown ? keyof Ext : never;
+type PluginFieldExtensionShapeError<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>, Id extends string> = PluginFieldExtensionFor<Fields, Id, Config[Id & keyof Config]> extends Record<string, TailorAnyDBField> ? false : true;
+type PluginFieldConflict<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>, Id extends string, FileKeys extends string> = [AllExtensionKeys<PluginFieldExtensionFor<Fields, Id, Config[Id & keyof Config]>> & (keyof Fields | FileKeys | AllExtensionKeys<PluginFieldExtensionsUnion<Fields, Omit<Config, Id>>>)] extends [never] ? false : true;
+type PluginConfigExcessProps<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>, Id extends string> = Record<Exclude<keyof Config[Id & keyof Config], keyof PluginConfigs<keyof Fields & string>[Id & keyof PluginConfigs<keyof Fields & string>]>, never>;
+type PluginExtendedFields<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>> = IsAny<Fields> extends true ? Fields // For `Config = {}`, PluginFieldExtensionsUnion is `never`, and
+ : Fields & UnionToIntersection<PluginFieldExtensionsUnion<Fields, Config>>;
+type PluginConfigGuard<Fields extends Record<string, TailorAnyDBField>, Config extends Record<string, unknown>, FileKeys extends string> = IsAny<Fields> extends true ? unknown : { [K in keyof Config]: K extends keyof PluginConfigs<keyof Fields & string> ? IsUnion<Config[K]> extends true ? TypeLevelError<"plugin config must be a single object literal, not a union — assign the config to a variable first if it comes from a conditional expression"> : PluginFieldExtensionShapeError<Fields, Config, K & string> extends true ? TypeLevelError<"PluginFieldExtensions entry must be a Record<string, TailorAnyDBField>"> : PluginFieldConflict<Fields, Config, K & string, FileKeys> extends true ? TypeLevelError<"plugin field extension conflicts with an existing field, a file key declared via .files(), or another plugin's field"> : PluginConfigs<keyof Fields & string>[K] & PluginConfigExcessProps<Fields, Config, K & string> : TypeLevelError<"unknown plugin id">; };
 type DBFieldDescriptionFn<Defined extends DefinedDBFieldMetadata, Output, Nested extends Record<string, TailorAnyDBField>> = (description: string) => TailorDBField<WithDBFieldDescription<Defined>, Output, Nested>;
 type DBFieldRelationFn<Defined extends DefinedDBFieldMetadata, Output, Nested extends Record<string, TailorAnyDBField>> = {
   <S extends RelationType, T extends TailorAnyDBType>(config: RelationConfig<S, T>): TailorDBField<WithDBFieldRelation<Defined, S>, Output, Nested>;
@@ -258,22 +267,22 @@ interface TailorDBField<Defined extends DefinedDBFieldMetadata = DefinedDBFieldM
  * Full TailorDBType interface with builder methods.
  * Extends the minimal structural interface from types/ with fluent API methods.
  */
-interface TailorDBType<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributes, Defined extends DefinedDBTypeMetadata = any> extends TailorDBType$1<Fields, User> {
+interface TailorDBType<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributes, Defined extends DefinedDBTypeMetadata = any, FileKeys extends string = never> extends TailorDBType$1<Fields, User> {
   _description?: string;
-  hooks(hook: DBTypeDuplicateInputGuard<Defined, "hooks", TypeHook<Fields>, ".hooks() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "hooks">>;
-  validate(fn: DBTypeDuplicateInputGuard<Defined, "validate", TypeValidateFn<Fields>, ".validate() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "validate">>;
-  features(features: DBTypeDuplicateInputGuard<Defined, "features", Omit<TypeFeatures, "pluralForm">, ".features() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "features">>;
-  indexes(...indexes: DBTypeDuplicateRestGuard<Defined, "indexes", IndexDef<TailorDBType<Fields, User, Defined>>[], ".indexes() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "indexes">>;
-  files<const F extends string>(files: DBTypeDuplicateInputGuard<Defined, "files", Record<F, string> & FileKeyConflictError<Fields, User>, ".files() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "files">>;
-  permission<U extends object = User, P extends TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>> = TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>>>(permission: DBTypeDuplicateInputGuard<Defined, "permission", P, ".permission() has already been set">): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, "permission">>;
-  gqlPermission<U extends object = User, P extends TailorTypeGqlPermission<U> = TailorTypeGqlPermission<U>>(permission: DBTypeDuplicateInputGuard<Defined, "gqlPermission", P, ".gqlPermission() has already been set">): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, "gqlPermission">>;
-  description(description: DBTypeDuplicateInputGuard<Defined, "description", string, ".description() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "description">>;
+  hooks(hook: DBTypeDuplicateInputGuard<Defined, "hooks", TypeHook<Fields>, ".hooks() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "hooks">, FileKeys>;
+  validate(fn: DBTypeDuplicateInputGuard<Defined, "validate", TypeValidateFn<Fields>, ".validate() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "validate">, FileKeys>;
+  features(features: DBTypeDuplicateInputGuard<Defined, "features", Omit<TypeFeatures, "pluralForm">, ".features() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "features">, FileKeys>;
+  indexes(...indexes: DBTypeDuplicateRestGuard<Defined, "indexes", IndexDef<TailorDBType<Fields, User, Defined, FileKeys>>[], ".indexes() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "indexes">, FileKeys>;
+  files<const F extends string>(files: DBTypeDuplicateInputGuard<Defined, "files", Record<F, string> & FileKeyConflictError<Fields, User>, ".files() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "files">, FileKeys | F>;
+  permission<U extends object = User, P extends TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>> = TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>>>(permission: DBTypeDuplicateInputGuard<Defined, "permission", P, ".permission() has already been set">): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, "permission">, FileKeys>;
+  gqlPermission<U extends object = User, P extends TailorTypeGqlPermission<U> = TailorTypeGqlPermission<U>>(permission: DBTypeDuplicateInputGuard<Defined, "gqlPermission", P, ".gqlPermission() has already been set">): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, "gqlPermission">, FileKeys>;
+  description(description: DBTypeDuplicateInputGuard<Defined, "description", string, ".description() has already been set">): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, "description">, FileKeys>;
   pickFields<K extends keyof Fields>(keys: K[]): Pick<Fields, K>;
   pickFields<K extends keyof Fields, const Opt extends FieldOptions>(keys: K[], options: Opt & DBFieldsCloneOptionsGuard<Fields, K, Opt>): { [P in K]: Fields[P] extends TailorDBField<infer D, infer O> ? TailorDBField<WithDBFieldCloneOptions<D, Opt>, DBFieldCloneOutput<O, Opt>> : never; };
   omitFields<K extends keyof Fields>(keys: K[]): Omit<Fields, K>;
-  plugin<P extends keyof PluginConfigs<keyof Fields & string>>(config: { [K in P]: PluginConfigs<keyof Fields & string>[K]; }): TailorDBType<Fields, User, Defined>;
+  plugin<const Config extends Record<string, unknown>>(config: Config & PluginConfigGuard<Fields, Config, FileKeys>): TailorDBType<PluginExtendedFields<Fields, Config>, User, Defined, FileKeys>;
 }
-type TailorDBInstance<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributes, Defined extends DefinedDBTypeMetadata = any> = TailorDBType<Fields, User, Defined>;
+type TailorDBInstance<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributes, Defined extends DefinedDBTypeMetadata = any, FileKeys extends string = never> = TailorDBType<Fields, User, Defined, FileKeys>;
 interface RelationConfig<S extends RelationType, T extends TailorDBType> {
   type: S;
   toward: {

package/dist/configure/types/index.d.mts

@@ -1,5 +1,5 @@
 import { MachineUserName, MachineUserNameRegistry } from "../services/auth/types.mjs";
 import { AllowedValues, AllowedValuesOutput } from "./field.mjs";
-import { TailorAnyField, TailorField } from "./type.mjs";
 import "./machine-user.mjs";
+import { TailorAnyField, TailorField } from "./type.mjs";
 export { AllowedValues, AllowedValuesOutput, type MachineUserName, type MachineUserNameRegistry, TailorAnyField, TailorField };

package/dist/idp-G_ojPBB5.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"idp-G_ojPBB5.mjs","names":["#impl"],"sources":["../src/runtime/idp.ts"],"sourcesContent":["/**\n * IDP (Identity Provider) utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.idp` runtime API.\n * At runtime this delegates to `globalThis.tailor.idp`. Use `mockIdp` from\n * `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n * @example\n * import { idp } from \"@tailor-platform/sdk/runtime\";\n *\n * const client = new idp.Client({ namespace: \"my-namespace\" });\n * const { users } = await client.users({ first: 10 });\n */\n\n/** Configuration object for `idp.Client`. */\nexport interface ClientConfig {\n  namespace: string;\n}\n\n/** User record returned by IDP operations. */\nexport interface User {\n  id: string;\n  name: string;\n  disabled: boolean;\n  createdAt?: string;\n  /**\n   * True when the user has at least one enrolled MFA second factor. False when\n   * the namespace has MFA disabled or the user has not enrolled a factor.\n   */\n  mfaEnrolled: boolean;\n  /**\n   * Enrolled MFA second factor IDs. Pass an entry into\n   * `idp.Client.unenrollMfa()` to remove that factor.\n   */\n  mfaFactorIds: string[];\n}\n\n/** Filter options for `idp.Client.users()`. */\nexport interface UserQuery {\n  /** Filter by user IDs */\n  ids?: string[];\n  /** Filter by user names */\n  names?: string[];\n}\n\n/** Pagination/filter options for `idp.Client.users()`. */\nexport interface ListUsersOptions {\n  /** Maximum number of users to return */\n  first?: number;\n  /** Page token for pagination */\n  after?: string;\n  /** Query filter for users */\n  query?: UserQuery;\n}\n\n/** Response shape for `idp.Client.users()`. */\nexport interface ListUsersResponse {\n  users: User[];\n  nextPageToken: string | null;\n  totalCount: number;\n}\n\n/** Input for `idp.Client.createUser()`. */\nexport interface CreateUserInput {\n  /** The user's name (typically email) */\n  name: string;\n  /** The user's password. If omitted, the user is created without a password (cannot log in with any password). */\n  password?: string;\n  /** Whether the user is disabled */\n  disabled?: boolean;\n}\n\n/** Input for `idp.Client.updateUser()`. */\nexport interface UpdateUserInput {\n  /** The user's ID */\n  id: string;\n  /** New name for the user */\n  name?: string;\n  /** New password for the user. Cannot be used with clearPassword. */\n  password?: string;\n  /** If true, remove the user's password. Cannot be used with password. */\n  clearPassword?: boolean;\n  /** New disabled status for the user */\n  disabled?: boolean;\n}\n\n/** Input for `idp.Client.sendPasswordResetEmail()`. */\nexport interface SendPasswordResetEmailInput {\n  /** The ID of the user */\n  userId: string;\n  /** The URI to redirect to after password reset */\n  redirectUri: string;\n  /** The sender display name. Defaults to 'Tailor Platform IdP'. */\n  fromName?: string;\n  /** The email subject line. Defaults to the localized default subject. */\n  subject?: string;\n}\n\n/** Input for `idp.Client.unenrollMfa()`. */\nexport interface UnenrollMfaInput {\n  /** The ID of the user whose factor will be unenrolled. */\n  userId: string;\n  /**\n   * The ID of the factor to unenroll. Factor IDs are exposed on the user\n   * record (see {@link User.mfaFactorIds}).\n   */\n  mfaFactorId: string;\n}\n\n/** Instance methods exposed by `tailor.idp.Client`. */\nexport interface IdpClientInstance {\n  users(options?: ListUsersOptions): Promise<ListUsersResponse>;\n  user(userId: string): Promise<User>;\n  userByName(name: string): Promise<User>;\n  createUser(input: CreateUserInput): Promise<User>;\n  updateUser(input: UpdateUserInput): Promise<User>;\n  deleteUser(userId: string): Promise<boolean>;\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean>;\n  unenrollMfa(input: UnenrollMfaInput): Promise<boolean>;\n}\n\n/**\n * Constructor shape for `tailor.idp.Client`.\n * @internal\n */\nexport interface IdpClientConstructor {\n  new (config: ClientConfig): IdpClientInstance;\n}\n\n/**\n * Platform API surface for `tailor.idp`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.idp`.\n * @internal\n */\nexport interface TailorIdpAPI {\n  Client: IdpClientConstructor;\n}\n\n/**\n * IDP Client for user management operations.\n *\n * Wraps the platform-provided `tailor.idp.Client` and exposes the same surface.\n */\nclass Client {\n  #impl: IdpClientInstance;\n\n  constructor(config: ClientConfig) {\n    this.#impl = new (globalThis as unknown as { tailor: { idp: TailorIdpAPI } }).tailor.idp.Client(\n      config,\n    );\n  }\n\n  /**\n   * List users in the namespace with optional filtering and pagination.\n   * @param options - Pagination and filter options\n   * @returns Page of users with `nextPageToken` and `totalCount`\n   */\n  users(options?: ListUsersOptions): Promise<ListUsersResponse> {\n    return this.#impl.users(options);\n  }\n\n  /**\n   * Get a user by ID.\n   * @param userId - IDP user ID\n   * @returns The matching user\n   */\n  user(userId: string): Promise<User> {\n    return this.#impl.user(userId);\n  }\n\n  /**\n   * Get a user by name.\n   * @param name - IDP user name\n   * @returns The matching user\n   */\n  userByName(name: string): Promise<User> {\n    return this.#impl.userByName(name);\n  }\n\n  /**\n   * Create a new user.\n   * @param input - User attributes\n   * @returns The newly created user\n   */\n  createUser(input: CreateUserInput): Promise<User> {\n    return this.#impl.createUser(input);\n  }\n\n  /**\n   * Update an existing user.\n   * @param input - User ID plus attributes to update\n   * @returns The updated user\n   */\n  updateUser(input: UpdateUserInput): Promise<User> {\n    return this.#impl.updateUser(input);\n  }\n\n  /**\n   * Delete a user by ID.\n   * @param userId - IDP user ID\n   * @returns `true` when the user was deleted\n   */\n  deleteUser(userId: string): Promise<boolean> {\n    return this.#impl.deleteUser(userId);\n  }\n\n  /**\n   * Send a password reset email to a user.\n   * @param input - Target user ID and redirect URI\n   * @returns `true` when the email was queued\n   */\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean> {\n    return this.#impl.sendPasswordResetEmail(input);\n  }\n\n  /**\n   * Unenroll an MFA factor from a user.\n   * @param input - Target user ID and factor ID (see {@link User.mfaFactorIds})\n   * @returns `true` when the factor was removed\n   */\n  unenrollMfa(input: UnenrollMfaInput): Promise<boolean> {\n    return this.#impl.unenrollMfa(input);\n  }\n}\n\n// Keep the object typed to the public API so the private wrapper class does not leak into d.ts.\n/** Runtime API for `tailor.idp`. */\nexport const idp: TailorIdpAPI = { Client };\n"],"mappings":"AAkOA,MAAa,EAAoB,CAAE,YApFtB,CACX,GAEA,YAAY,EAAsB,CAChC,KAAKA,GAAQ,IAAK,WAA4D,OAAO,IAAI,OACvF,CACF,CACF,CAOA,MAAM,EAAwD,CAC5D,OAAO,KAAKA,GAAM,MAAM,CAAO,CACjC,CAOA,KAAK,EAA+B,CAClC,OAAO,KAAKA,GAAM,KAAK,CAAM,CAC/B,CAOA,WAAW,EAA6B,CACtC,OAAO,KAAKA,GAAM,WAAW,CAAI,CACnC,CAOA,WAAW,EAAuC,CAChD,OAAO,KAAKA,GAAM,WAAW,CAAK,CACpC,CAOA,WAAW,EAAuC,CAChD,OAAO,KAAKA,GAAM,WAAW,CAAK,CACpC,CAOA,WAAW,EAAkC,CAC3C,OAAO,KAAKA,GAAM,WAAW,CAAM,CACrC,CAOA,uBAAuB,EAAsD,CAC3E,OAAO,KAAKA,GAAM,uBAAuB,CAAK,CAChD,CAOA,YAAY,EAA2C,CACrD,OAAO,KAAKA,GAAM,YAAY,CAAK,CACrC,CACF,CAI0C"}
+{"version":3,"file":"idp-G_ojPBB5.mjs","names":[],"sources":["../src/runtime/idp.ts"],"sourcesContent":["/**\n * IDP (Identity Provider) utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.idp` runtime API.\n * At runtime this delegates to `globalThis.tailor.idp`. Use `mockIdp` from\n * `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n * @example\n * import { idp } from \"@tailor-platform/sdk/runtime\";\n *\n * const client = new idp.Client({ namespace: \"my-namespace\" });\n * const { users } = await client.users({ first: 10 });\n */\n\n/** Configuration object for `idp.Client`. */\nexport interface ClientConfig {\n  namespace: string;\n}\n\n/** User record returned by IDP operations. */\nexport interface User {\n  id: string;\n  name: string;\n  disabled: boolean;\n  createdAt?: string;\n  /**\n   * True when the user has at least one enrolled MFA second factor. False when\n   * the namespace has MFA disabled or the user has not enrolled a factor.\n   */\n  mfaEnrolled: boolean;\n  /**\n   * Enrolled MFA second factor IDs. Pass an entry into\n   * `idp.Client.unenrollMfa()` to remove that factor.\n   */\n  mfaFactorIds: string[];\n}\n\n/** Filter options for `idp.Client.users()`. */\nexport interface UserQuery {\n  /** Filter by user IDs */\n  ids?: string[];\n  /** Filter by user names */\n  names?: string[];\n}\n\n/** Pagination/filter options for `idp.Client.users()`. */\nexport interface ListUsersOptions {\n  /** Maximum number of users to return */\n  first?: number;\n  /** Page token for pagination */\n  after?: string;\n  /** Query filter for users */\n  query?: UserQuery;\n}\n\n/** Response shape for `idp.Client.users()`. */\nexport interface ListUsersResponse {\n  users: User[];\n  nextPageToken: string | null;\n  totalCount: number;\n}\n\n/** Input for `idp.Client.createUser()`. */\nexport interface CreateUserInput {\n  /** The user's name (typically email) */\n  name: string;\n  /** The user's password. If omitted, the user is created without a password (cannot log in with any password). */\n  password?: string;\n  /** Whether the user is disabled */\n  disabled?: boolean;\n}\n\n/** Input for `idp.Client.updateUser()`. */\nexport interface UpdateUserInput {\n  /** The user's ID */\n  id: string;\n  /** New name for the user */\n  name?: string;\n  /** New password for the user. Cannot be used with clearPassword. */\n  password?: string;\n  /** If true, remove the user's password. Cannot be used with password. */\n  clearPassword?: boolean;\n  /** New disabled status for the user */\n  disabled?: boolean;\n}\n\n/** Input for `idp.Client.sendPasswordResetEmail()`. */\nexport interface SendPasswordResetEmailInput {\n  /** The ID of the user */\n  userId: string;\n  /** The URI to redirect to after password reset */\n  redirectUri: string;\n  /** The sender display name. Defaults to 'Tailor Platform IdP'. */\n  fromName?: string;\n  /** The email subject line. Defaults to the localized default subject. */\n  subject?: string;\n}\n\n/** Input for `idp.Client.unenrollMfa()`. */\nexport interface UnenrollMfaInput {\n  /** The ID of the user whose factor will be unenrolled. */\n  userId: string;\n  /**\n   * The ID of the factor to unenroll. Factor IDs are exposed on the user\n   * record (see {@link User.mfaFactorIds}).\n   */\n  mfaFactorId: string;\n}\n\n/** Instance methods exposed by `tailor.idp.Client`. */\nexport interface IdpClientInstance {\n  users(options?: ListUsersOptions): Promise<ListUsersResponse>;\n  user(userId: string): Promise<User>;\n  userByName(name: string): Promise<User>;\n  createUser(input: CreateUserInput): Promise<User>;\n  updateUser(input: UpdateUserInput): Promise<User>;\n  deleteUser(userId: string): Promise<boolean>;\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean>;\n  unenrollMfa(input: UnenrollMfaInput): Promise<boolean>;\n}\n\n/**\n * Constructor shape for `tailor.idp.Client`.\n * @internal\n */\nexport interface IdpClientConstructor {\n  new (config: ClientConfig): IdpClientInstance;\n}\n\n/**\n * Platform API surface for `tailor.idp`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.idp`.\n * @internal\n */\nexport interface TailorIdpAPI {\n  Client: IdpClientConstructor;\n}\n\n/**\n * IDP Client for user management operations.\n *\n * Wraps the platform-provided `tailor.idp.Client` and exposes the same surface.\n */\nclass Client {\n  #impl: IdpClientInstance;\n\n  constructor(config: ClientConfig) {\n    this.#impl = new (globalThis as unknown as { tailor: { idp: TailorIdpAPI } }).tailor.idp.Client(\n      config,\n    );\n  }\n\n  /**\n   * List users in the namespace with optional filtering and pagination.\n   * @param options - Pagination and filter options\n   * @returns Page of users with `nextPageToken` and `totalCount`\n   */\n  users(options?: ListUsersOptions): Promise<ListUsersResponse> {\n    return this.#impl.users(options);\n  }\n\n  /**\n   * Get a user by ID.\n   * @param userId - IDP user ID\n   * @returns The matching user\n   */\n  user(userId: string): Promise<User> {\n    return this.#impl.user(userId);\n  }\n\n  /**\n   * Get a user by name.\n   * @param name - IDP user name\n   * @returns The matching user\n   */\n  userByName(name: string): Promise<User> {\n    return this.#impl.userByName(name);\n  }\n\n  /**\n   * Create a new user.\n   * @param input - User attributes\n   * @returns The newly created user\n   */\n  createUser(input: CreateUserInput): Promise<User> {\n    return this.#impl.createUser(input);\n  }\n\n  /**\n   * Update an existing user.\n   * @param input - User ID plus attributes to update\n   * @returns The updated user\n   */\n  updateUser(input: UpdateUserInput): Promise<User> {\n    return this.#impl.updateUser(input);\n  }\n\n  /**\n   * Delete a user by ID.\n   * @param userId - IDP user ID\n   * @returns `true` when the user was deleted\n   */\n  deleteUser(userId: string): Promise<boolean> {\n    return this.#impl.deleteUser(userId);\n  }\n\n  /**\n   * Send a password reset email to a user.\n   * @param input - Target user ID and redirect URI\n   * @returns `true` when the email was queued\n   */\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean> {\n    return this.#impl.sendPasswordResetEmail(input);\n  }\n\n  /**\n   * Unenroll an MFA factor from a user.\n   * @param input - Target user ID and factor ID (see {@link User.mfaFactorIds})\n   * @returns `true` when the factor was removed\n   */\n  unenrollMfa(input: UnenrollMfaInput): Promise<boolean> {\n    return this.#impl.unenrollMfa(input);\n  }\n}\n\n// Keep the object typed to the public API so the private wrapper class does not leak into d.ts.\n/** Runtime API for `tailor.idp`. */\nexport const idp: TailorIdpAPI = { Client };\n"],"mappings":"AAkOA,MAAa,EAAoB,CAAE,YApFtB,CACX,GAEA,YAAY,EAAsB,CAChC,KAAK,GAAQ,IAAK,WAA4D,OAAO,IAAI,OACvF,CACF,CACF,CAOA,MAAM,EAAwD,CAC5D,OAAO,KAAK,GAAM,MAAM,CAAO,CACjC,CAOA,KAAK,EAA+B,CAClC,OAAO,KAAK,GAAM,KAAK,CAAM,CAC/B,CAOA,WAAW,EAA6B,CACtC,OAAO,KAAK,GAAM,WAAW,CAAI,CACnC,CAOA,WAAW,EAAuC,CAChD,OAAO,KAAK,GAAM,WAAW,CAAK,CACpC,CAOA,WAAW,EAAuC,CAChD,OAAO,KAAK,GAAM,WAAW,CAAK,CACpC,CAOA,WAAW,EAAkC,CAC3C,OAAO,KAAK,GAAM,WAAW,CAAM,CACrC,CAOA,uBAAuB,EAAsD,CAC3E,OAAO,KAAK,GAAM,uBAAuB,CAAK,CAChD,CAOA,YAAY,EAA2C,CACrD,OAAO,KAAK,GAAM,YAAY,CAAK,CACrC,CACF,CAI0C"}

package/dist/plugin/builtin/seed/index.mjs

@@ -1 +1 @@
-import{n as e,t}from"../../../seed-DwqRFdqP.mjs";export{t as SeedGeneratorID,e as seedPlugin};
+import{n as e,t}from"../../../seed-CMkupmX8.mjs";export{t as SeedGeneratorID,e as seedPlugin};

package/dist/plugin/types.d.mts

@@ -119,6 +119,15 @@ type TableConfigRequired<PluginConfig = unknown> = boolean | ((pluginConfig: Plu
  * Extend this interface via declaration merging to add typed plugin configs.
  */
 interface PluginConfigs<Fields extends string = string> {}
+/**
+ * Registry mapping a plugin's `id` literal to the fields it injects into the
+ * attached table's static type, computed from the literal per-call config
+ * passed to `.plugin()`. Extend this interface via declaration merging, keyed
+ * by the same `id` used in {@link PluginConfigs}. The value must be a
+ * `Record<string, TailorAnyDBField>` of the fields to add — it is merged
+ * into the table's existing fields, not a replacement for them.
+ */
+interface PluginFieldExtensions<Fields extends string = string, Config = unknown> {}
 /**
  * Registry mapping a plugin's `id` literal to its plugin-level config type.
  * Extend via declaration merging, keyed by the `id` string, from the
@@ -216,34 +225,35 @@ interface PluginGeneratedExecutorLegacy {
   operation: PluginOperationConfig;
 }
 type PluginGeneratedExecutor = PluginGeneratedExecutorWithFile | PluginGeneratedExecutorLegacy;
-interface PluginExtends {
-  fields?: Record<string, TailorAnyDBField>;
+interface PluginExtends<FieldExtension extends Record<string, TailorAnyDBField>> {
+  fields?: FieldExtension;
 }
 interface PluginOutput {
   tables?: PluginGeneratedTables;
   resolvers?: PluginGeneratedResolver[];
   executors?: PluginGeneratedExecutor[];
 }
-interface TablePluginOutput extends PluginOutput {
-  extends?: PluginExtends;
+interface TablePluginOutput<FieldExtension extends Record<string, TailorAnyDBField> = Record<string, TailorAnyDBField>> extends PluginOutput {
+  extends?: PluginExtends<FieldExtension>;
 }
 type NamespacePluginOutput = PluginOutput;
 /**
  * Plugin interface that all plugins must implement.
  * @template TableConfig - Type for per-table configuration passed via .plugin() method
  * @template PluginConfig - Type for plugin-level configuration passed via definePlugins()
+ * @template FieldExtension - Type of the fields injected into the attached table via `extends.fields`. Should match the corresponding {@link PluginFieldExtensions} entry.
  */
-interface Plugin<TableConfig = unknown, PluginConfig = unknown> {
+interface Plugin<TableConfig = unknown, PluginConfig = unknown, FieldExtension extends Record<string, TailorAnyDBField> = Record<string, TailorAnyDBField>> {
   readonly id: string;
   readonly description: string;
   readonly importPath?: string;
   readonly tableConfigRequired?: TableConfigRequired<PluginConfig>;
   readonly pluginConfig?: PluginConfig;
-  onTableLoaded?(context: PluginTableProcessContext<TableConfig, PluginConfig>): TablePluginOutput | Promise<TablePluginOutput>;
+  onTableLoaded?(context: PluginTableProcessContext<TableConfig, PluginConfig>): TablePluginOutput<FieldExtension> | Promise<TablePluginOutput<FieldExtension>>;
   onNamespaceLoaded?(context: PluginNamespaceProcessContext<PluginConfig>): NamespacePluginOutput | Promise<NamespacePluginOutput>;
   onTailorDBReady?(context: TailorDBReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
   onResolverReady?(context: ResolverReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
   onExecutorReady?(context: ExecutorReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
 }
 //#endregion
-export { ExecutorReadyContext, GeneratorAuthInput, GeneratorResult, NamespacePluginOutput, Plugin, type PluginAttachment, PluginConfigRegistry, PluginConfigs, PluginExecutorContext, PluginExecutorContextBase, PluginGeneratedExecutor, PluginGeneratedExecutorLegacy, PluginGeneratedExecutorWithFile, PluginGeneratedResolver, PluginGeneratedTable, PluginInjectMap, PluginNamespaceProcessContext, PluginOperationConfig, PluginOutput, PluginTableProcessContext, PluginTriggerConfig, ResolverNamespaceData, ResolverReadyContext, TableConfigRequired, TablePluginOutput, TailorDBNamespaceData, TailorDBReadyContext, TailorDBTableForPlugin };
+export { ExecutorReadyContext, GeneratorAuthInput, GeneratorResult, NamespacePluginOutput, Plugin, type PluginAttachment, PluginConfigRegistry, PluginConfigs, PluginExecutorContext, PluginExecutorContextBase, PluginFieldExtensions, PluginGeneratedExecutor, PluginGeneratedExecutorLegacy, PluginGeneratedExecutorWithFile, PluginGeneratedResolver, PluginGeneratedTable, PluginInjectMap, PluginNamespaceProcessContext, PluginOperationConfig, PluginOutput, PluginTableProcessContext, PluginTriggerConfig, ResolverNamespaceData, ResolverReadyContext, TableConfigRequired, TablePluginOutput, TailorDBNamespaceData, TailorDBReadyContext, TailorDBTableForPlugin };