@tailor-platform/create-sdk 2.0.0-next.8 → 2.0.0

package/CHANGELOG.md

@@ -1,5 +1,169 @@
 # @tailor-platform/create-sdk
 
+## 2.0.0
+
+### Major Changes
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`1a055c9`](https://github.com/tailor-platform/sdk/commit/1a055c9909ac951f807fc2249c9abc1d5805398f) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename the TailorDB schema builder from `db.type()` to `db.table()`.
+  
+  Update TailorDB definitions:
+  
+  ```diff
+   import { db } from "@tailor-platform/sdk";
+  
+  -export const user = db.type("User", {
+  +export const user = db.table("User", {
+     name: db.string(),
+   });
+  ```
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`3dcd82d`](https://github.com/tailor-platform/sdk/commit/3dcd82d54d6c059df90f2dc4788a7059fe4004ab) Thanks [@toiroakr](https://github.com/toiroakr)! - Restore Tailor field outputs for UUID, date, datetime, time, and decimal fields to plain string-compatible types and remove the strict scalar string migration guidance.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`a3bd9fb`](https://github.com/tailor-platform/sdk/commit/a3bd9fb1c22d7062c8627c80ebc5ebb3b1db0dc3) Thanks [@toiroakr](https://github.com/toiroakr)! - Set `db.fields.timestamps()` `updatedAt` when records are created and make the generated field non-null. `createdAt` keeps its existing create-time behavior, while `updatedAt` keeps its update-time behavior and now also gets a create hook that preserves provided values and falls back to the current time.
+  
+  Update create-sdk templates so scaffolded projects use the new non-null `updatedAt` Kysely types and seed schemas.
+  
+  Existing TailorDB schemas that already use this helper will change `updatedAt` from optional to required. Backfill existing records that have `updatedAt: null` before applying the schema change.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`eeb235d`](https://github.com/tailor-platform/sdk/commit/eeb235debe910c05f755f036486878e7c763cb7e) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename `defineWaitPoint` and `defineWaitPoints` to `createWaitPoint` and `createWaitPoints`.
+  
+  These functions create runtime instances with `.wait()` and `.resolve()` methods that call the platform API at runtime, so the `create*` prefix is more accurate. Update any usages:
+  
+  ```diff
+  -import { defineWaitPoint, defineWaitPoints } from "@tailor-platform/sdk";
+  +import { createWaitPoint, createWaitPoints } from "@tailor-platform/sdk";
+  
+  -export const approval = defineWaitPoint<Payload, Result>("approval");
+  +export const approval = createWaitPoint<Payload, Result>("approval");
+  
+  -export const waitPoints = defineWaitPoints((define) => ({ ... }));
+  +export const waitPoints = createWaitPoints((define) => ({ ... }));
+  ```
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`93b68ac`](https://github.com/tailor-platform/sdk/commit/93b68ace83dcb0af2a8b0afa8aa3336cb18c818b) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename `Workflow.trigger()` (returned by `createWorkflow()`) and `WorkflowJob.trigger()` (returned by `createWorkflowJob()`) to `.start()`, aligning the SDK's ergonomic verb with the platform's `start*` RPC vocabulary:
+  
+  ```diff
+   const inventory = checkInventory.trigger({ orderId: input.orderId });
+  +const inventory = checkInventory.start({ orderId: input.orderId });
+  
+  -const workflowRunId = await orderProcessingWorkflow.trigger(args, { invoker: "manager" });
+  +const workflowRunId = await orderProcessingWorkflow.start(args, { invoker: "manager" });
+  ```
+  
+  `mockWorkflow()`'s `wf.job(definition)` / `wf.workflow(definition)` now return a mock of the `.start` method, and `wf.setTriggerHandler` / `wf.triggeredJobs` are renamed to `wf.setStartHandler` / `wf.startedJobs`. No codemod ships for the `.trigger()` → `.start()` call-site rename itself — see the `v2/workflow-start-rename` migration guide entry for manual migration steps.
+
+### Minor Changes
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`152a2de`](https://github.com/tailor-platform/sdk/commit/152a2de92db8565791dc1ec8aab29f2a75c94913) Thanks [@toiroakr](https://github.com/toiroakr)! - Add a lint rule (`no-execute-script-arg-stringify`) that flags passing a `JSON.stringify(...)` result as `executeScript`'s `arg` option — `executeScript` serializes `arg` internally, so a pre-stringified value silently double-encodes at runtime. Enabled in newly scaffolded projects.
+
+### Patch Changes
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`6519a54`](https://github.com/tailor-platform/sdk/commit/6519a5434f0cc664a609ef2cae2398b19cad4673) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename auth attribute module augmentation from `AttributeMap` to `Attributes`.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`039389d`](https://github.com/tailor-platform/sdk/commit/039389d17ddf3014fc53ffdb756ec6ea1425826c) Thanks [@toiroakr](https://github.com/toiroakr)! - Generate the `Env` interface in `tailor.d.ts` from the type of each `defineConfig({ env })` value instead of the value itself. The resolved value used to be written in as a literal type, so running `generate` or `deploy` with real environment variables loaded stamped those values into a file that is normally committed.
+  
+  ```diff
+   interface Env {
+  -  API_BASE: "https://api.example.com";
+  -  RETRIES: 3;
+  -  VERBOSE: true;
+  +  API_BASE: string;
+  +  RETRIES: number;
+  +  VERBOSE: boolean;
+   }
+  ```
+  
+  `env` keys that aren't valid TypeScript identifiers (for example `"API-BASE"`) are now quoted as well; previously they were emitted bare and produced a `tailor.d.ts` that failed to parse.
+  
+  Run `tailor generate` after upgrading to refresh the file. Code that relied on the literal narrowing — comparing `env.STAGE` against a literal union, for example — has to widen its own types or read the value through a local narrowing check. If a `tailor.d.ts` you already committed contains a sensitive value, treat that value as exposed and rotate it; keep secrets in [Secret Manager](https://github.com/tailor-platform/sdk/blob/main/packages/sdk/docs/services/secret.md) rather than `env`.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`cd48fda`](https://github.com/tailor-platform/sdk/commit/cd48fdab46746aa2e8f5d8dd43073e3b4832c07c) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename resolver, executor, workflow trigger, and typed workflow start machine-user options from `authInvoker` to `invoker`.
+  
+  Update create-sdk templates and the v2 auth invoker codemod to generate the new `invoker` option.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`0676403`](https://github.com/tailor-platform/sdk/commit/0676403f0c2686a9b861047af105661bf52e9d9a) Thanks [@toiroakr](https://github.com/toiroakr)! - Remove the deprecated `openDownloadStream` file streaming API. Use `downloadStream` for streamed file downloads.
+  
+  The generated file utilities now emit `downloadFileStream`, which calls `downloadStream` and returns `FileDownloadStreamResponse`, instead of the removed `openFileDownloadStream` helper.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`20aa5a9`](https://github.com/tailor-platform/sdk/commit/20aa5a95167d370b4b3cc7352cb60a22a695d673) Thanks [@toiroakr](https://github.com/toiroakr)! - Remove the APIs that were marked `@deprecated` on the way to v2, so 2.0.0 ships without deprecated aliases. Each removal has migration coverage in `tailor upgrade`:
+  
+  - `@tailor-platform/sdk/cli` no longer re-exports `kyselyTypePlugin`, `enumConstantsPlugin`, `fileUtilsPlugin`, and `seedPlugin`. Import them from `@tailor-platform/sdk/plugin/kysely-type`, `/plugin/enum-constants`, `/plugin/file-utils`, and `/plugin/seed` (codemod `v2/plugin-cli-import`).
+  - `tailor.workflow.startJobFunction` and the `StartJobFunctionOptions` type are removed; use the canonical `execJobFunction` / `ExecJobFunctionOptions` (new codemod `v2/exec-job-function-rename`). `mockWorkflow()` no longer exposes the `startJobFunction` alias — assert on its `execJobFunction` mock instead — and `v2/workflow-trigger-rename` now rewrites `triggerJobFunction` straight to `execJobFunction`.
+  - `@tailor-platform/sdk/test` no longer exports the platform-global mocks `setupTailordbMock`, `setupWorkflowMock`, `setupWaitPointMock`, `setupInvokerMock`, and `setupTailorErrorsMock`, nor the bundled-output helper `createImportMain`. Use the `tailor-runtime` environment from `@tailor-platform/sdk/vitest` with `mockTailordb` / `mockWorkflow` (migration guidance: `v2/sdk-test-mocks-to-vitest`). `createTailorDBHook`, `createStandardSchema`, and `unauthenticatedTailorUser` are unchanged.
+  - The programmatic CLI functions no longer accept name-keyed options: `GetWorkflowOptions`, `StartWorkflowOptions`, `ListWorkflowExecutionsOptions`, `GetExecutorOptions`, `TriggerExecutorOptions`, `ListExecutorJobsOptions`, `GetExecutorJobOptions`, and `WatchExecutorJobOptions` are removed along with the overloads that took them. Pass the definition itself — `startWorkflow({ workflow: myWorkflow, invoker: "admin" })`, `watchExecutorJob({ executor: myExecutor, jobId })` — which also types `arg` and `payload` from the definition (migration guidance: `v2/cli-typed-options`). The name-keyed entry points remain available as CLI commands (`tailor workflow start <name>`, `tailor executor trigger <name>`).
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`8b03f82`](https://github.com/tailor-platform/sdk/commit/8b03f827642e64f3b3af5a05ecdef405028a803a) Thanks [@toiroakr](https://github.com/toiroakr)! - Standardize SDK-owned environment variables on the `TAILOR_*` namespace.
+  
+  Replace the removed SDK-specific environment variables with their new names: `TAILOR_CONFIG_PATH`, `TAILOR_DTS_PATH`, `TAILOR_CI_ALLOW_ID_INJECTION`, `TAILOR_DEPLOY_BUILD_ONLY`, `TAILOR_BUILD_OUTPUT_DIR`, `TAILOR_SKILLS_SOURCE`, `TAILOR_TEMPLATE_SDK_VERSION`, `TAILOR_PLATFORM_URL`, `TAILOR_PLATFORM_OAUTH2_CLIENT_ID`, `TAILOR_INLINE_SOURCEMAP`, `TAILOR_QUERY_NEWLINE_ON_ENTER`, and `TAILOR_APP_LOG_LEVEL`. The deprecated `TAILOR_TOKEN` fallback is removed; use `TAILOR_PLATFORM_TOKEN`. The v2 codemod rewrites unambiguous removed SDK environment variable names and flags generic names such as `LOG_LEVEL` and `PLATFORM_URL` for manual review.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`04ca361`](https://github.com/tailor-platform/sdk/commit/04ca3619c4d2d88afe8ee3b25d4ba47ac799de51) Thanks [@toiroakr](https://github.com/toiroakr)! - Remove flat value and default exports from `@tailor-platform/sdk/runtime/*` subpath modules. Import each subpath through its self-named namespace export instead, for example `import { iconv } from "@tailor-platform/sdk/runtime/iconv"`.
+  
+  The aggregate `@tailor-platform/sdk/runtime` entry remains named-only, and its deprecated `file.deleteFile` alias is removed in favor of `file.delete`. The v2 codemod rewrites straightforward namespace-star subpath imports, flat named value imports, and aggregate `file.deleteFile` calls to the new namespace-object style.
+  
+  `TailorContextAPI` and `TailorWorkflowAPI` now describe the SDK wrapper objects. Code that types the platform-provided `globalThis.tailor.context` or `globalThis.tailor.workflow` objects directly must use `PlatformContextAPI` or `PlatformWorkflowAPI` instead.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`bf11bf8`](https://github.com/tailor-platform/sdk/commit/bf11bf8d3bad6195c86ed289c764490dc6d680ee) Thanks [@toiroakr](https://github.com/toiroakr)! - Update politty to v0.11.3
+
+## 2.0.0-next.11
+
+### Minor Changes
+
+- [#1890](https://github.com/tailor-platform/sdk/pull/1890) [`9fdacdc`](https://github.com/tailor-platform/sdk/commit/9fdacdcbbdcb18f4b324470ac34ca70215f962aa) Thanks [@toiroakr](https://github.com/toiroakr)! - Add a lint rule (`no-execute-script-arg-stringify`) that flags passing a `JSON.stringify(...)` result as `executeScript`'s `arg` option — `executeScript` serializes `arg` internally, so a pre-stringified value silently double-encodes at runtime. Enabled in newly scaffolded projects.
+
+### Patch Changes
+
+- [#1915](https://github.com/tailor-platform/sdk/pull/1915) [`dc691ec`](https://github.com/tailor-platform/sdk/commit/dc691ec1e2181400c6715233f0588a1b5150038f) Thanks [@toiroakr](https://github.com/toiroakr)! - Generate the `Env` interface in `tailor.d.ts` from the type of each `defineConfig({ env })` value instead of the value itself. The resolved value used to be written in as a literal type, so running `generate` or `deploy` with real environment variables loaded stamped those values into a file that is normally committed.
+  
+  ```diff
+   interface Env {
+  -  API_BASE: "https://api.example.com";
+  -  RETRIES: 3;
+  -  VERBOSE: true;
+  +  API_BASE: string;
+  +  RETRIES: number;
+  +  VERBOSE: boolean;
+   }
+  ```
+  
+  `env` keys that aren't valid TypeScript identifiers (for example `"API-BASE"`) are now quoted as well; previously they were emitted bare and produced a `tailor.d.ts` that failed to parse.
+  
+  Run `tailor generate` after upgrading to refresh the file. Code that relied on the literal narrowing — comparing `env.STAGE` against a literal union, for example — has to widen its own types or read the value through a local narrowing check. If a `tailor.d.ts` you already committed contains a sensitive value, treat that value as exposed and rotate it; keep secrets in [Secret Manager](https://github.com/tailor-platform/sdk/blob/main/packages/sdk/docs/services/secret.md) rather than `env`.
+
+- [#1808](https://github.com/tailor-platform/sdk/pull/1808) [`a4cdee0`](https://github.com/tailor-platform/sdk/commit/a4cdee079707105213f8e5833dcaa613f39c8464) Thanks [@toiroakr](https://github.com/toiroakr)! - Remove the APIs that were marked `@deprecated` on the way to v2, so 2.0.0 ships without deprecated aliases. Each removal has migration coverage in `tailor upgrade`:
+  
+  - `@tailor-platform/sdk/cli` no longer re-exports `kyselyTypePlugin`, `enumConstantsPlugin`, `fileUtilsPlugin`, and `seedPlugin`. Import them from `@tailor-platform/sdk/plugin/kysely-type`, `/plugin/enum-constants`, `/plugin/file-utils`, and `/plugin/seed` (codemod `v2/plugin-cli-import`).
+  - `tailor.workflow.startJobFunction` and the `StartJobFunctionOptions` type are removed; use the canonical `execJobFunction` / `ExecJobFunctionOptions` (new codemod `v2/exec-job-function-rename`). `mockWorkflow()` no longer exposes the `startJobFunction` alias — assert on its `execJobFunction` mock instead — and `v2/workflow-trigger-rename` now rewrites `triggerJobFunction` straight to `execJobFunction`.
+  - `@tailor-platform/sdk/test` no longer exports the platform-global mocks `setupTailordbMock`, `setupWorkflowMock`, `setupWaitPointMock`, `setupInvokerMock`, and `setupTailorErrorsMock`, nor the bundled-output helper `createImportMain`. Use the `tailor-runtime` environment from `@tailor-platform/sdk/vitest` with `mockTailordb` / `mockWorkflow` (migration guidance: `v2/sdk-test-mocks-to-vitest`). `createTailorDBHook`, `createStandardSchema`, and `unauthenticatedTailorUser` are unchanged.
+  - The programmatic CLI functions no longer accept name-keyed options: `GetWorkflowOptions`, `StartWorkflowOptions`, `ListWorkflowExecutionsOptions`, `GetExecutorOptions`, `TriggerExecutorOptions`, `ListExecutorJobsOptions`, `GetExecutorJobOptions`, and `WatchExecutorJobOptions` are removed along with the overloads that took them. Pass the definition itself — `startWorkflow({ workflow: myWorkflow, invoker: "admin" })`, `watchExecutorJob({ executor: myExecutor, jobId })` — which also types `arg` and `payload` from the definition (migration guidance: `v2/cli-typed-options`). The name-keyed entry points remain available as CLI commands (`tailor workflow start <name>`, `tailor executor trigger <name>`).
+
+## 2.0.0-next.10
+
+### Patch Changes
+
+- [#1837](https://github.com/tailor-platform/sdk/pull/1837) [`b74966b`](https://github.com/tailor-platform/sdk/commit/b74966bcefa499df1cbb5ef7e36ca76442658579) Thanks [@toiroakr](https://github.com/toiroakr)! - Update politty to v0.11.3
+
+## 2.0.0-next.9
+
+## 1.85.0
+
+## 1.84.0
+
+## 1.83.0
+
+## 1.82.0
+
+## 1.81.0
+
+## 1.80.1
+
+## 1.80.0
+
+### Minor Changes
+
+- [#1737](https://github.com/tailor-platform/sdk/pull/1737) [`e349b9e`](https://github.com/tailor-platform/sdk/commit/e349b9e3d9c61f324f21dea92dd08055493a2c6d) Thanks [@dqn](https://github.com/dqn)! - Add lint rules that flag the external /api prefix in HTTP adapter path patterns and permission settings that grant access unconditionally, and enable them in newly scaffolded projects.
+
+## 1.79.0
+
 ## 2.0.0-next.8
 
 ## 2.0.0-next.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/create-sdk",
-  "version": "2.0.0-next.8",
+  "version": "2.0.0",
   "description": "A CLI tool to quickly create a new Tailor Platform SDK project",
   "license": "MIT",
   "repository": {
@@ -18,18 +18,18 @@
   "type": "module",
   "dependencies": {
     "@clack/prompts": "1.7.0",
-    "execa": "9.6.1",
+    "execa": "10.0.0",
     "picocolors": "1.1.1",
     "pkg-types": "2.3.1",
-    "politty": "0.11.2",
+    "politty": "0.11.6",
     "zod": "4.4.3"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
     "eslint-plugin-zod": "4.7.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
-    "tsdown": "0.22.7",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
+    "tsdown": "0.22.14",
     "typescript": "6.0.3"
   },
   "scripts": {

package/templates/executor/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/executor/package.json

@@ -15,12 +15,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   }

package/templates/generators/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "src/seed/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/generators/README.md

@@ -7,7 +7,7 @@ Demonstrates all built-in generator plugins for the Tailor Platform SDK.
 - **kyselyTypePlugin** - Generates Kysely type definitions for type-safe database queries
 - **enumConstantsPlugin** - Generates enum constant objects from `db.enum()` fields
 - **fileUtilsPlugin** - Generates file upload/download utility functions
-- **seedPlugin** - Generates seed data templates and execution script
+- **seedPlugin** - Generates seed data templates and schemas (run them with the `tailor seed` commands from `@tailor-platform/sdk-plugin-seed`)
 
 ## Generated Files
 

package/templates/generators/package.json

@@ -6,6 +6,8 @@
   "scripts": {
     "generate": "tailor generate",
     "deploy": "tailor deploy",
+    "seed": "tailor seed apply",
+    "seed:validate": "tailor seed validate",
     "test": "vitest --project unit",
     "test:unit": "vitest --project unit",
     "format": "oxfmt --write .",
@@ -15,12 +17,13 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk-plugin-seed": "0.1.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   }

package/templates/hello-world/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/hello-world/package.json

@@ -13,12 +13,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }
 }

package/templates/inventory-management/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/inventory-management/package.json

@@ -13,12 +13,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }
 }

package/templates/multi-application/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/multi-application/package.json

@@ -14,12 +14,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }
 }

package/templates/resolver/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/resolver/package.json

@@ -15,12 +15,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   }

package/templates/resolver/tailor.d.ts

@@ -10,8 +10,8 @@ declare module "@tailor-platform/sdk" {
     __tuple?: [];
   }
   interface Env {
-    appName: "Resolver Template";
-    version: 1;
+    appName: string;
+    version: number;
   }
   interface MachineUserNameRegistry {
     admin: true;

package/templates/static-web-site/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/static-web-site/package.json

@@ -13,12 +13,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }
 }

package/templates/tailordb/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/tailordb/package.json

@@ -15,12 +15,12 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   }

package/templates/workflow/.oxlintrc.json

@@ -16,6 +16,7 @@
   "ignorePatterns": [".tailor/", "src/generated/", "tailor.d.ts"],
   "rules": {
     "tailor-sdk/no-api-prefix-in-path-pattern": "warn",
+    "tailor-sdk/no-execute-script-arg-stringify": "warn",
     "tailor-sdk/no-unconditional-permit": "warn",
     "no-case-declarations": "error",
     "no-empty": "error",

package/templates/workflow/package.json

@@ -16,14 +16,14 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@tailor-platform/eslint-plugin-sdk": "0.1.0-next.0",
-    "@tailor-platform/sdk": "2.0.0-next.8",
+    "@tailor-platform/eslint-plugin-sdk": "0.2.0",
+    "@tailor-platform/sdk": "2.0.0",
     "@types/node": "24.13.3",
     "graphql": "17.0.2",
     "graphql-request": "7.4.0",
-    "oxfmt": "0.58.0",
-    "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxfmt": "0.61.0",
+    "oxlint": "1.76.0",
+    "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   }

package/templates/generators/src/seed/exec.mjs

@@ -1,485 +0,0 @@
-/**
- * @generated
- * This file is auto-generated by @tailor-platform/sdk's seedPlugin.
- * Do not edit by hand: changes will be overwritten on the next `sdk generate`.
- */
-import { readFileSync } from "node:fs";
-import { join, isAbsolute } from "node:path";
-import { parseArgs, styleText } from "node:util";
-import { createInterface } from "node:readline";
-import {
-  show,
-  truncate,
-  bundleSeedScript,
-  chunkSeedData,
-  executeScript,
-  initOperatorClient,
-  loadAccessToken,
-  loadWorkspaceId,
-} from "@tailor-platform/sdk/cli";
-
-// Handle "validate" subcommand before parseArgs
-const subcommand = process.argv[2];
-if (subcommand === "validate") {
-  const { validateSeedData } = await import("@tailor-platform/sdk/seed");
-  const validateArgs = parseArgs({
-    args: process.argv.slice(3),
-    options: {
-      verbose: { type: "boolean", short: "v", default: false },
-      help: { type: "boolean", short: "h", default: false },
-    },
-    allowPositionals: true,
-  });
-
-  if (validateArgs.values.help) {
-    console.log(`
-Usage: node exec.mjs validate [options] [path]
-
-Validate JSONL seed data against schema definitions.
-
-Arguments:
-  path                      File or directory to validate (default: ./data)
-
-Options:
-  -v, --verbose             Show verbose error output
-  -h, --help                Show help
-
-Examples:
-  node exec.mjs validate                  # Validate all seed data
-  node exec.mjs validate ./data/User.jsonl # Validate specific file
-  node exec.mjs validate -v               # Verbose error output
-    `);
-    process.exit(0);
-  }
-
-  const configDir = import.meta.dirname;
-  const targetPath = validateArgs.positionals[0] || join(configDir, "data");
-  const resolvedPath = isAbsolute(targetPath) ? targetPath : join(process.cwd(), targetPath);
-
-  try {
-    const result = await validateSeedData({ path: resolvedPath, verbose: validateArgs.values.verbose });
-    if (result.output) console.log(result.output);
-    if (!result.valid) {
-      console.error(result.error);
-      process.exit(1);
-    }
-    process.exit(0);
-  } catch (error) {
-    console.error(styleText("red", `Error: ${error instanceof Error ? error.message : String(error)}`));
-    process.exit(1);
-  }
-}
-
-// Parse command-line arguments
-const { values, positionals } = parseArgs({
-  options: {
-    "machine-user": { type: "string", short: "m" },
-    namespace: { type: "string", short: "n" },
-    "skip-idp": { type: "boolean", default: false },
-    truncate: { type: "boolean", default: false },
-    yes: { type: "boolean", default: false },
-    profile: { type: "string", short: "p" },
-    help: { type: "boolean", short: "h", default: false },
-  },
-  allowPositionals: true,
-});
-
-if (values.help) {
-  console.log(`
-Usage: node exec.mjs [command] [options] [types...]
-
-Commands:
-  validate [path]           Validate seed data against schema (default: ./data)
-
-Options:
-  -m, --machine-user <name> Machine user name for authentication (required if not configured)
-  -n, --namespace <ns>      Process all types in specified namespace (excludes _User)
-  --skip-idp                Skip IdP user (_User) entity
-  --truncate                Truncate tables before seeding
-  --yes                     Skip confirmation prompts (for truncate)
-  -p, --profile <name>      Workspace profile name
-  -h, --help                Show help
-
-Examples:
-  node exec.mjs -m admin                            # Process all types with machine user
-  node exec.mjs --namespace <namespace>             # Process tailordb namespace only (no _User)
-  node exec.mjs User Order                          # Process specific types only
-  node exec.mjs --skip-idp                          # Process all except _User
-  node exec.mjs --truncate                          # Truncate all tables, then seed all
-  node exec.mjs --truncate --yes                    # Truncate all tables without confirmation, then seed all
-  node exec.mjs --truncate --namespace <namespace>  # Truncate tailordb, then seed tailordb
-  node exec.mjs --truncate User Order               # Truncate User and Order, then seed them
-  node exec.mjs validate                            # Validate all seed data
-  node exec.mjs validate ./data/User.jsonl          # Validate specific file
-  `);
-  process.exit(0);
-}
-
-// Helper function to prompt for y/n confirmation
-const promptConfirmation = (question) => {
-  const rl = createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(styleText("yellow", question), (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase().trim());
-    });
-  });
-};
-
-const configDir = import.meta.dirname;
-const configPath = join(configDir, "../../tailor.config.ts");
-
-// Determine machine user name (CLI argument takes precedence over config default)
-const defaultMachineUser = "admin";
-const machineUserName = values["machine-user"] || defaultMachineUser;
-
-if (!machineUserName) {
-  console.error(styleText("red", "Error: Machine user name is required."));
-  console.error(styleText("yellow", "Specify --machine-user <name> or configure machineUserName in generator options."));
-  process.exit(1);
-}
-
-// Entity configuration
-const namespaceEntities = {
-  "main-db": [
-    "Category",
-    "Order",
-    "Product",
-    "User",
-  ]
-};
-const namespaceDeps = {
-  "main-db": {
-    "Category": [],
-    "Order": ["Product", "User"],
-    "Product": ["Category"],
-    "User": []
-  }
-};
-const namespaceSelfRefTypes = {
-  "main-db": ["Category"]
-};
-const entities = Object.values(namespaceEntities).flat();
-const hasIdpUser = false;
-
-// Determine which entities to process
-let entitiesToProcess = null;
-
-const hasNamespace = !!values.namespace;
-const hasTypes = positionals.length > 0;
-const skipIdp = values["skip-idp"];
-
-// Validate mutually exclusive options
-const optionCount = [hasNamespace, hasTypes].filter(Boolean).length;
-if (optionCount > 1) {
-  console.error(styleText("red", "Error: Options --namespace and type names are mutually exclusive."));
-  process.exit(1);
-}
-
-// --skip-idp and --namespace are redundant (namespace already excludes _User)
-if (skipIdp && hasNamespace) {
-  console.warn(styleText("yellow", "Warning: --skip-idp is redundant with --namespace (namespace filtering already excludes _User)."));
-}
-
-// Filter by namespace (automatically excludes _User as it has no namespace)
-if (hasNamespace) {
-  const namespace = values.namespace;
-  entitiesToProcess = namespaceEntities[namespace];
-
-  if (!entitiesToProcess || entitiesToProcess.length === 0) {
-    console.error(styleText("red", `Error: No entities found in namespace "${namespace}"`));
-    console.error(styleText("yellow", `Available namespaces: ${Object.keys(namespaceEntities).join(", ")}`));
-    process.exit(1);
-  }
-
-  console.log(styleText("cyan", `Filtering by namespace: ${namespace}`));
-  console.log(styleText("dim", `Entities: ${entitiesToProcess.join(", ")}`));
-}
-
-// Filter by specific types
-if (hasTypes) {
-  const requestedTypes = positionals;
-  const notFoundTypes = [];
-  const allTypes = hasIdpUser ? [...entities, "_User"] : entities;
-
-  entitiesToProcess = requestedTypes.filter((type) => {
-    if (!allTypes.includes(type)) {
-      notFoundTypes.push(type);
-      return false;
-    }
-    return true;
-  });
-
-  if (notFoundTypes.length > 0) {
-    console.error(styleText("red", `Error: The following types were not found: ${notFoundTypes.join(", ")}`));
-    console.error(styleText("yellow", `Available types: ${allTypes.join(", ")}`));
-    process.exit(1);
-  }
-
-  console.log(styleText("cyan", `Filtering by types: ${entitiesToProcess.join(", ")}`));
-}
-
-// Apply --skip-idp filter
-if (skipIdp) {
-  if (entitiesToProcess) {
-    entitiesToProcess = entitiesToProcess.filter((entity) => entity !== "_User");
-  } else {
-    entitiesToProcess = entities.filter((entity) => entity !== "_User");
-  }
-}
-
-// Get application info
-const appInfo = await show({ configPath, profile: values.profile });
-const authNamespace = appInfo.auth;
-
-// Initialize operator client (once for all namespaces)
-const accessToken = await loadAccessToken({ profile: values.profile });
-const workspaceId = await loadWorkspaceId({ profile: values.profile });
-const operatorClient = await initOperatorClient(accessToken);
-
-
-
-// Truncate tables if requested
-if (values.truncate) {
-  const answer = values.yes ? "y" : await promptConfirmation("Are you sure you want to truncate? (y/n): ");
-  if (answer !== "y") {
-    console.log(styleText("yellow", "Truncate cancelled."));
-    process.exit(0);
-  }
-
-  console.log(styleText("cyan", "Truncating tables..."));
-
-  try {
-    if (hasNamespace) {
-      await truncate({
-        configPath,
-        profile: values.profile,
-        namespace: values.namespace,
-      });
-    } else if (hasTypes) {
-      const typesToTruncate = entitiesToProcess.filter((t) => t !== "_User");
-      if (typesToTruncate.length > 0) {
-        await truncate({
-          configPath,
-          profile: values.profile,
-          types: typesToTruncate,
-        });
-      } else {
-        console.log(styleText("dim", "No TailorDB types to truncate (only _User was specified)."));
-      }
-    } else {
-      await truncate({
-        configPath,
-        profile: values.profile,
-        all: true,
-      });
-    }
-  } catch (error) {
-    console.error(styleText("red", `Truncate failed: ${error.message}`));
-    process.exit(1);
-  }
-
-  
-
-  console.log(styleText("green", "Truncate completed."));
-}
-
-console.log(styleText("cyan", "\nStarting seed data generation..."));
-if (skipIdp) {
-  console.log(styleText("dim", `  Skipping IdP user (_User)`));
-}
-
-// Load seed data from JSONL files
-const loadSeedData = (dataDir, typeNames) => {
-  const data = {};
-  for (const typeName of typeNames) {
-    const jsonlPath = join(dataDir, `${typeName}.jsonl`);
-    try {
-      const content = readFileSync(jsonlPath, "utf-8").trim();
-      if (content) {
-        data[typeName] = content.split("\n").map((line) => JSON.parse(line));
-      } else {
-        data[typeName] = [];
-      }
-    } catch (error) {
-      if (error.code === "ENOENT") {
-        data[typeName] = [];
-      } else {
-        throw error;
-      }
-    }
-  }
-  return data;
-};
-
-// Topological sort for dependency order
-const topologicalSort = (types, deps) => {
-  const visited = new Set();
-  const result = [];
-
-  const visit = (type) => {
-    if (visited.has(type)) return;
-    visited.add(type);
-    const typeDeps = deps[type] || [];
-    for (const dep of typeDeps) {
-      if (types.includes(dep)) {
-        visit(dep);
-      }
-    }
-    result.push(type);
-  };
-
-  for (const type of types) {
-    visit(type);
-  }
-  return result;
-};
-
-// Seed TailorDB types via testExecScript
-const seedViaTestExecScript = async (namespace, typesToSeed, deps, selfRefTypes) => {
-  const dataDir = join(configDir, "data");
-  const sortedTypes = topologicalSort(typesToSeed, deps);
-  const data = loadSeedData(dataDir, sortedTypes);
-
-  // Skip if no data
-  const typesWithData = sortedTypes.filter((t) => data[t] && data[t].length > 0);
-  if (typesWithData.length === 0) {
-    console.log(styleText("dim", `  [${namespace}] No data to seed`));
-    return { success: true, processed: {} };
-  }
-
-  console.log(styleText("cyan", `  [${namespace}] Seeding ${typesWithData.length} types via Kysely batch insert...`));
-
-  // Bundle seed script
-  const bundled = await bundleSeedScript(namespace, typesWithData);
-
-  // Chunk seed data to fit within gRPC message size limits
-  const chunks = chunkSeedData({
-    data,
-    order: sortedTypes,
-    codeByteSize: new TextEncoder().encode(bundled.bundledCode).length,
-  });
-
-  if (chunks.length === 0) {
-    console.log(styleText("dim", `  [${namespace}] No data to seed`));
-    return { success: true, processed: {} };
-  }
-
-  if (chunks.length > 1) {
-    console.log(styleText("dim", `    Split into ${chunks.length} chunks`));
-  }
-
-  const allProcessed = {};
-  let hasError = false;
-  const allErrors = [];
-
-  for (const chunk of chunks) {
-    if (chunks.length > 1) {
-      console.log(styleText("dim", `    Chunk ${chunk.index + 1}/${chunk.total}: ${chunk.order.join(", ")}`));
-    }
-
-    // Execute seed script for this chunk
-    const result = await executeScript({
-      client: operatorClient,
-      workspaceId,
-      name: `seed-${namespace}.ts`,
-      code: bundled.bundledCode,
-      arg: { data: chunk.data, order: chunk.order, selfRefTypes },
-      invoker: {
-        namespace: authNamespace,
-        machineUserName,
-      },
-    });
-
-    // Parse result and display logs
-    if (result.logs) {
-      for (const line of result.logs.split("\n").filter(Boolean)) {
-        console.log(styleText("dim", `    ${line}`));
-      }
-    }
-
-    if (result.success) {
-      let parsed;
-      try {
-        const parsedResult = JSON.parse(result.result || "{}");
-        parsed = parsedResult && typeof parsedResult === "object" ? parsedResult : {};
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        console.error(styleText("red", `    ✗ Failed to parse seed result: ${message}`));
-        hasError = true;
-        allErrors.push(message);
-        continue;
-      }
-
-      const processed = parsed.processed || {};
-      for (const [type, count] of Object.entries(processed)) {
-        allProcessed[type] = (allProcessed[type] || 0) + count;
-        console.log(styleText("green", `    ✓ ${type}: ${count} rows inserted`));
-      }
-
-      if (!parsed.success) {
-        const errors = Array.isArray(parsed.errors) ? parsed.errors : [];
-        const errorMessage =
-          errors.length > 0 ? errors.join("\n        ") : "Seed script reported failure";
-        console.error(styleText("red", `    ✗ Seed failed:\n        ${errorMessage}`));
-        hasError = true;
-        allErrors.push(errorMessage);
-      }
-    } else {
-      console.error(styleText("red", `    ✗ Seed failed: ${result.error}`));
-      hasError = true;
-      allErrors.push(result.error);
-    }
-  }
-
-  if (hasError) {
-    return { success: false, error: allErrors.join("\n") };
-  }
-  return { success: true, processed: allProcessed };
-};
-
-
-
-// Main execution
-try {
-  let allSuccess = true;
-
-  // Determine which namespaces and types to process
-  const namespacesToProcess = hasNamespace
-    ? [values.namespace]
-    : Object.keys(namespaceEntities);
-
-  for (const namespace of namespacesToProcess) {
-    const nsTypes = namespaceEntities[namespace] || [];
-    const nsDeps = namespaceDeps[namespace] || {};
-    const nsSelfRefTypes = namespaceSelfRefTypes[namespace] || [];
-
-    // Filter types if specific types requested
-    let typesToSeed = entitiesToProcess
-      ? nsTypes.filter((t) => entitiesToProcess.includes(t))
-      : nsTypes;
-
-    if (typesToSeed.length === 0) continue;
-
-    const result = await seedViaTestExecScript(namespace, typesToSeed, nsDeps, nsSelfRefTypes);
-    if (!result.success) {
-      allSuccess = false;
-    }
-  }
-
-  
-
-  if (allSuccess) {
-    console.log(styleText("green", "\n✓ Seed data generation completed successfully"));
-  } else {
-    console.error(styleText("red", "\n✗ Seed data generation completed with errors"));
-    process.exit(1);
-  }
-} catch (error) {
-  console.error(styleText("red", `\n✗ Seed data generation failed: ${error.message}`));
-  process.exit(1);
-}