@tailor-platform/create-sdk 2.0.0 → 2.1.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @tailor-platform/create-sdk
 
+## 2.1.0
+
+## 2.0.1
+
+### Patch Changes
+
+- [#1957](https://github.com/tailor-platform/sdk/pull/1957) [`a465547`](https://github.com/tailor-platform/sdk/commit/a465547df712ca8c607c1e42cf12c15fe3e830d1) Thanks [@toiroakr](https://github.com/toiroakr)! - Invoke the CLI as `npx @tailor-platform/sdk <command>` wherever an invocation is written for you. `npx` resolves a command it cannot find locally as a package name, so `npx tailor` fell through to an unrelated `tailor` package on npm whenever the SDK was not installed in the project — including in CI, where npm installs without prompting. Omitting the version specifier keeps using the project's installed SDK when there is one.
+  
+  - Setup examples in the README, the quickstart, and the scaffolded project READMEs now use the package-runner form. Bun examples use `bun tailor <command>`, which resolves the local binary without fetching from the registry.
+  - Workflows generated by `tailor setup` use `npx @tailor-platform/sdk` for npm projects and `bun run tailor` for Bun projects. `tailor setup check` reports the template as outdated so existing projects regenerate; re-run `tailor setup` to pick it up.
+  - The `v2/seed-exec-to-cli-plugin` and `v2/sdk-skills-shim` codemods write the package-runner form when the invocation they produce goes through a runner that installs from the registry (`npx`, `bunx`, `pnpm`/`yarn dlx`, `npm exec`). A runner that resolves project binaries, such as `pnpm exec`, still gets the bare `tailor` binary.
+
 ## 2.0.0
 
 ### Major Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/create-sdk",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "A CLI tool to quickly create a new Tailor Platform SDK project",
   "license": "MIT",
   "repository": {
@@ -18,7 +18,7 @@
   "type": "module",
   "dependencies": {
     "@clack/prompts": "1.7.0",
-    "execa": "10.0.0",
+    "execa": "10.0.1",
     "picocolors": "1.1.1",
     "pkg-types": "2.3.1",
     "politty": "0.11.6",
@@ -26,7 +26,7 @@
   },
   "devDependencies": {
     "@types/node": "24.13.3",
-    "eslint-plugin-zod": "4.7.0",
+    "eslint-plugin-zod": "4.9.0",
     "oxlint": "1.76.0",
     "oxlint-tsgolint": "7.0.2001",
     "tsdown": "0.22.14",

package/templates/executor/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/executor/tailor.config.ts

@@ -38,7 +38,14 @@ export default defineConfig({
   }),
   idp: [idp],
   db: { "main-db": { files: ["./src/db/*.ts"] } },
-  resolver: { "main-resolver": { files: ["./src/resolver/*.ts"] } },
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      // Every resolver in this namespace requires an authenticated caller.
+      // A single resolver opts out with `permission: "allowAnonymous"`.
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
   executor: { files: ["./src/executor/*.ts"] },
   workflow: { files: ["./src/workflow/*.ts"] },
 });

package/templates/generators/package.json

@@ -18,8 +18,8 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
-    "@tailor-platform/sdk-plugin-seed": "0.1.0",
+    "@tailor-platform/sdk": "2.1.0",
+    "@tailor-platform/sdk-plugin-seed": "0.1.1",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/generators/tailor.config.ts

@@ -31,7 +31,14 @@ export default defineConfig({
   }),
   idp: [idp],
   db: { "main-db": { files: ["./src/db/*.ts"] } },
-  resolver: { "main-resolver": { files: ["./src/resolver/*.ts"] } },
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      // Every resolver in this namespace requires an authenticated caller.
+      // A single resolver opts out with `permission: "allowAnonymous"`.
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
 });
 
 export const plugins = definePlugins(

package/templates/hello-world/README.md

@@ -9,9 +9,9 @@ This project was bootstrapped with [Create Tailor Platform SDK](https://www.npmj
 1. Create a new workspace:
 
 ```bash
-npx tailor login
-npx tailor workspace create --name <workspace-name> --region <workspace-region>
-npx tailor workspace list
+npx @tailor-platform/sdk login
+npx @tailor-platform/sdk workspace create --name <workspace-name> --region <workspace-region>
+npx @tailor-platform/sdk workspace list
 # For yarn: yarn tailor <command>
 # For pnpm: pnpm tailor <command>
 # For bun: bun tailor <command>

package/templates/hello-world/package.json

@@ -14,7 +14,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/hello-world/tailor.config.ts

@@ -4,7 +4,13 @@ import { kyselyTypePlugin } from "@tailor-platform/sdk/plugin/kysely-type";
 export default defineConfig({
   name: "hello-world",
   db: { "main-db": { files: [`./src/db/*.ts`] } },
-  resolver: { "main-resolver": { files: [`./src/resolvers/**/*.ts`] } },
+  resolver: {
+    "main-resolver": {
+      files: [`./src/resolvers/**/*.ts`],
+      // This template defines no auth, so its resolvers are public by design.
+      defaultPermission: "allowAnonymous",
+    },
+  },
 });
 
 export const plugins = definePlugins(

package/templates/inventory-management/README.md

@@ -9,9 +9,9 @@ This project was bootstrapped with [Create Tailor Platform SDK](https://www.npmj
 1. Create a new workspace:
 
 ```bash
-npx tailor login
-npx tailor workspace create --name <workspace-name> --region <workspace-region>
-npx tailor workspace list
+npx @tailor-platform/sdk login
+npx @tailor-platform/sdk workspace create --name <workspace-name> --region <workspace-region>
+npx @tailor-platform/sdk workspace list
 # For yarn: yarn tailor <command>
 # For pnpm: pnpm tailor <command>
 # For bun: bun tailor <command>
@@ -36,9 +36,9 @@ npm run deploy -- --workspace-id <your-workspace-id>
 
 ```bash
 # Get Manager's token
-npx tailor machineuser token manager --workspace-id <your-workspace-id>
+npx @tailor-platform/sdk machineuser token manager --workspace-id <your-workspace-id>
 # Get Staff's token
-npx tailor machineuser token staff --workspace-id <your-workspace-id>
+npx @tailor-platform/sdk machineuser token staff --workspace-id <your-workspace-id>
 ```
 
 ## Features

package/templates/inventory-management/package.json

@@ -14,7 +14,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/inventory-management/tailor.config.ts

@@ -5,7 +5,14 @@ import { user } from "./src/db/user";
 export default defineConfig({
   name: "inventory-management",
   db: { "main-db": { files: [`./src/db/*.ts`] } },
-  resolver: { "main-resolver": { files: [`./src/resolver/*.ts`] } },
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      // Every resolver in this namespace requires an authenticated caller.
+      // A single resolver opts out with `permission: "allowAnonymous"`.
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
   auth: defineAuth("main-auth", {
     userProfile: {
       type: user,

package/templates/multi-application/README.md

@@ -16,8 +16,8 @@ This project contains two applications: `user` and `admin`.
 1. Create a new workspace:
 
 ```bash
-npx tailor login
-npx tailor workspace create --name <workspace-name> --region <workspace-region>
+npx @tailor-platform/sdk login
+npx @tailor-platform/sdk workspace create --name <workspace-name> --region <workspace-region>
 ```
 
 2. Deploy the project:

package/templates/multi-application/package.json

@@ -15,7 +15,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/resolver/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/resolver/src/resolver/add.ts

@@ -3,6 +3,9 @@ import { createResolver, t } from "@tailor-platform/sdk";
 const resolver = createResolver({
   name: "add",
   operation: "query",
+  // Overrides the namespace's `defaultPermission`: this resolver reads no
+  // data, so anonymous callers are allowed.
+  permission: "allowAnonymous",
   input: {
     left: t.int(),
     right: t.int(),

package/templates/resolver/tailor.config.ts

@@ -20,7 +20,14 @@ export default defineConfig({
     },
   }),
   db: { "main-db": { files: ["./src/db/*.ts"] } },
-  resolver: { "main-resolver": { files: ["./src/resolver/*.ts"] } },
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      // Every resolver in this namespace requires an authenticated caller.
+      // A single resolver opts out with `permission: "allowAnonymous"`.
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
 });
 
 export const plugins = definePlugins(kyselyTypePlugin({ distPath: "./src/generated/db.ts" }));

package/templates/static-web-site/package.json

@@ -14,7 +14,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/tailordb/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",

package/templates/workflow/package.json

@@ -17,7 +17,7 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.0",
-    "@tailor-platform/sdk": "2.0.0",
+    "@tailor-platform/sdk": "2.1.0",
     "@types/node": "24.13.3",
     "graphql": "17.0.2",
     "graphql-request": "7.4.0",

package/templates/workflow/tailor.config.ts

@@ -16,7 +16,14 @@ export default defineConfig({
     },
   }),
   db: { "main-db": { files: ["./src/db/*.ts"] } },
-  resolver: { "main-resolver": { files: ["./src/resolver/*.ts"] } },
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      // Every resolver in this namespace requires an authenticated caller.
+      // A single resolver opts out with `permission: "allowAnonymous"`.
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
   workflow: { files: ["./src/workflow/*.ts"] },
 });