@tailor-platform/create-sdk 2.13.0 → 2.14.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @tailor-platform/create-sdk
 
+## 2.14.0
+
+### Patch Changes
+
+- [#2270](https://github.com/tailor-platform/sdk/pull/2270) [`1023fc5`](https://github.com/tailor-platform/sdk/commit/1023fc5f12462a2753a4452760c9ed2e0fa7bc07) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Document why the `hello-world` template ships with fully open permissions: `src/db/user.ts` now explains that the template defines no auth and that production projects should define conditions in `.permission()` / `.gqlPermission()`, and the README gained a Security section listing the open `unsafeAllowAll*Permission` grants and the `allowAnonymous` resolver default that must be replaced before real use.
+
+- [#2270](https://github.com/tailor-platform/sdk/pull/2270) [`bc46936`](https://github.com/tailor-platform/sdk/commit/bc4693632116451935a83fb7b39d487c66e3a093) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Document why the `multi-application` template ships with fully open permissions: the README gained a Security section listing the open `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission` grants on the `User` and `AdminNote` tables and pointing at the TailorDB Permission documentation for what to replace them with.
+
+## 2.13.1
+
+### Patch Changes
+
+- [#2263](https://github.com/tailor-platform/sdk/pull/2263) [`ec80f8c`](https://github.com/tailor-platform/sdk/commit/ec80f8c7fbb5878010cc702a6336f6cb5b3d9bfb) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Fix the `hello-world` template docs so they match the tooling the template actually ships: the README now documents `oxfmt` / `oxlint` (instead of Prettier / ESLint) and the `generate` script, and the setup commands use `npx @tailor-platform/sdk <command>`. The unused empty `.prettierrc` is no longer generated.
+
+- [#2263](https://github.com/tailor-platform/sdk/pull/2263) [`9495e4e`](https://github.com/tailor-platform/sdk/commit/9495e4e2b77a0a3e680fff22dda0cb5493756c6c) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Fix the same stale-tooling docs issue across the remaining `create-sdk` templates (executor, inventory-management, multi-application, resolver, static-web-site, tailordb, workflow): remove the unused empty `.prettierrc` files, and update the `inventory-management` / `multi-application` READMEs' Scripts sections to document `oxfmt` / `oxlint` (instead of Prettier / ESLint), matching the tooling their `package.json` actually ships. The `inventory-management` README's Scripts section also referenced a nonexistent `gen` script; it now documents the actual `generate` script.
+
 ## 2.13.0
 
 ## 2.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/create-sdk",
-  "version": "2.13.0",
+  "version": "2.14.0",
   "description": "A CLI tool to quickly create a new Tailor Platform SDK project",
   "license": "MIT",
   "repository": {
@@ -27,7 +27,7 @@
   "devDependencies": {
     "@types/node": "24.13.3",
     "eslint-plugin-zod": "4.12.0",
-    "oxlint": "1.80.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "tsdown": "0.22.14",
     "typescript": "6.0.3"

package/templates/executor/package.json

@@ -15,10 +15,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.11"

package/templates/generators/package.json

@@ -18,11 +18,11 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@tailor-platform/sdk-plugin-seed": "0.2.7",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.11"

package/templates/generators/src/seed/data/Order.schema.ts

@@ -4,8 +4,8 @@ import { createTailorDBHook, createStandardSchema } from "@tailor-platform/sdk/t
 import { order } from "../../db/order";
 
 const schemaType = t.object({
-  ...order.pickFields(["id"], { optional: true }),
-  ...order.omitFields(["id"]),
+  ...order.pickFields(["id","createdAt","updatedAt"], { optional: true }),
+  ...order.omitFields(["id","createdAt","updatedAt"]),
 });
 
 export const hook = createTailorDBHook(order);

package/templates/generators/src/seed/data/Product.schema.ts

@@ -4,8 +4,8 @@ import { createTailorDBHook, createStandardSchema } from "@tailor-platform/sdk/t
 import { product } from "../../db/product";
 
 const schemaType = t.object({
-  ...product.pickFields(["id"], { optional: true }),
-  ...product.omitFields(["id"]),
+  ...product.pickFields(["id","createdAt","updatedAt"], { optional: true }),
+  ...product.omitFields(["id","createdAt","updatedAt"]),
 });
 
 export const hook = createTailorDBHook(product);

package/templates/generators/src/seed/data/User.schema.ts

@@ -4,8 +4,8 @@ import { createTailorDBHook, createStandardSchema } from "@tailor-platform/sdk/t
 import { user } from "../../db/user";
 
 const schemaType = t.object({
-  ...user.pickFields(["id"], { optional: true }),
-  ...user.omitFields(["id"]),
+  ...user.pickFields(["id","createdAt","updatedAt"], { optional: true }),
+  ...user.omitFields(["id","createdAt","updatedAt"]),
 });
 
 export const hook = createTailorDBHook(user);

package/templates/hello-world/README.md

@@ -49,13 +49,21 @@ query {
 # }
 ```
 
+## Security
+
+This template is a tutorial project: it defines no auth, and its permissions are fully open so you can deploy and query it right away. Replace both of the following before using it for anything real:
+
+- `src/db/user.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `User` table. Define conditions that match your requirements instead — see the [TailorDB Permission documentation](https://docs.tailor.tech/guides/tailordb/permission).
+- `tailor.config.ts` sets `defaultPermission: "allowAnonymous"` for `main-resolver`, so its resolvers are callable without a token.
+
 ## Scripts
 
 In the project directory, you can run:
 
-- `deploy`: Deploy the project to Tailor Platform
-- `format`: Format the code using Prettier
-- `format:check`: Check code formatting using Prettier
-- `lint`: Lint the code using ESLint
-- `lint:fix`: Fix linting issues using ESLint
+- `deploy`: Deploy the project to Tailor Platform (`tailor deploy`)
+- `generate`: Generate types for the project (`tailor generate`)
+- `format`: Format the code using oxfmt
+- `format:check`: Check code formatting using oxfmt
+- `lint`: Lint the code using oxlint
+- `lint:fix`: Fix linting issues using oxlint
 - `typecheck`: Run TypeScript type checks

package/templates/hello-world/package.json

@@ -13,10 +13,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }

package/templates/hello-world/src/db/user.ts

@@ -14,5 +14,7 @@ export const user = db
   .features({
     gqlOperations: "query",
   })
+  // This template defines no auth, so its data is public by design.
+  // In production, define conditions in .permission() / .gqlPermission() instead.
   .permission(unsafeAllowAllTypePermission)
   .gqlPermission(unsafeAllowAllGqlPermission);

package/templates/inventory-management/README.md

@@ -55,11 +55,11 @@ npx @tailor-platform/sdk machineuser token staff --workspace-id <your-workspace-
 In the project directory, you can run:
 
 - `deploy`: Deploy the project to Tailor Platform
-- `gen`: Generate TypeScript types
-- `format`: Format the code using Prettier
-- `format:check`: Check code formatting using Prettier
-- `lint`: Lint the code using ESLint
-- `lint:fix`: Fix linting issues using ESLint
+- `generate`: Generate TypeScript types
+- `format`: Format the code using oxfmt
+- `format:check`: Check code formatting using oxfmt
+- `lint`: Lint the code using oxlint
+- `lint:fix`: Fix linting issues using oxlint
 - `typecheck`: Run TypeScript type checks
 
 ## Examples

package/templates/inventory-management/package.json

@@ -13,10 +13,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }

package/templates/multi-application/README.md

@@ -33,13 +33,22 @@ This deploys both applications in order: `user` first, then `admin`.
 - Two applications (`user` and `admin`) exist in your workspace
 - In `admin` application's GraphQL Playground, `User` type from `shared-db` is available
 
+## Security
+
+This template is a tutorial project: its permissions are fully open so you can deploy and query it right away. Replace both of the following before using it for anything real:
+
+- `apps/user/db/user.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `User` table.
+- `apps/admin/db/adminNote.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `AdminNote` table.
+
+Define conditions that match your requirements instead — see the [TailorDB Permission documentation](https://docs.tailor.tech/guides/tailordb/permission).
+
 ## Scripts
 
 - `deploy`: Deploy all applications to Tailor Platform
 - `deploy:user`: Deploy user application only
 - `deploy:admin`: Deploy admin application only
-- `format`: Format the code using Prettier
-- `format:check`: Check code formatting using Prettier
-- `lint`: Lint the code using ESLint
-- `lint:fix`: Fix linting issues using ESLint
+- `format`: Format the code using oxfmt
+- `format:check`: Check code formatting using oxfmt
+- `lint`: Lint the code using oxlint
+- `lint:fix`: Fix linting issues using oxlint
 - `typecheck`: Run TypeScript type checks

package/templates/multi-application/package.json

@@ -14,10 +14,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }

package/templates/resolver/package.json

@@ -15,10 +15,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.11"

package/templates/static-web-site/package.json

@@ -13,10 +13,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3"
   }

package/templates/tailordb/package.json

@@ -15,10 +15,10 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.11"

package/templates/workflow/package.json

@@ -16,12 +16,12 @@
   },
   "devDependencies": {
     "@tailor-platform/eslint-plugin-sdk": "0.2.3",
-    "@tailor-platform/sdk": "2.13.0",
+    "@tailor-platform/sdk": "2.14.0",
     "@types/node": "24.13.3",
     "graphql": "17.0.2",
     "graphql-request": "7.4.0",
-    "oxfmt": "0.65.0",
-    "oxlint": "1.80.0",
+    "oxfmt": "0.66.0",
+    "oxlint": "1.81.0",
     "oxlint-tsgolint": "7.0.2001",
     "typescript": "6.0.3",
     "vitest": "4.1.11"

package/templates/executor/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/hello-world/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/inventory-management/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/multi-application/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/resolver/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/static-web-site/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/tailordb/.prettierrc

@@ -1 +0,0 @@
-{}

package/templates/workflow/.prettierrc

@@ -1 +0,0 @@
-{}