@tailor-platform/create-sdk 2.13.1 → 2.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/package.json +3 -3
- package/templates/executor/package.json +1 -1
- package/templates/generators/package.json +2 -2
- package/templates/hello-world/README.md +7 -0
- package/templates/hello-world/package.json +1 -1
- package/templates/hello-world/src/db/user.ts +2 -0
- package/templates/inventory-management/package.json +1 -1
- package/templates/multi-application/README.md +9 -0
- package/templates/multi-application/package.json +1 -1
- package/templates/resolver/package.json +1 -1
- package/templates/static-web-site/package.json +1 -1
- package/templates/tailordb/package.json +1 -1
- package/templates/workflow/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
1
|
# @tailor-platform/create-sdk
|
|
2
2
|
|
|
3
|
+
## 2.14.1
|
|
4
|
+
|
|
5
|
+
No changes in this release.
|
|
6
|
+
|
|
7
|
+
## 2.14.0
|
|
8
|
+
|
|
9
|
+
### Patch Changes
|
|
10
|
+
|
|
11
|
+
- [#2270](https://github.com/tailor-platform/sdk/pull/2270) [`1023fc5`](https://github.com/tailor-platform/sdk/commit/1023fc5f12462a2753a4452760c9ed2e0fa7bc07) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Document why the `hello-world` template ships with fully open permissions: `src/db/user.ts` now explains that the template defines no auth and that production projects should define conditions in `.permission()` / `.gqlPermission()`, and the README gained a Security section listing the open `unsafeAllowAll*Permission` grants and the `allowAnonymous` resolver default that must be replaced before real use.
|
|
12
|
+
|
|
13
|
+
- [#2270](https://github.com/tailor-platform/sdk/pull/2270) [`bc46936`](https://github.com/tailor-platform/sdk/commit/bc4693632116451935a83fb7b39d487c66e3a093) Thanks [@tailor-bobbin](https://github.com/apps/tailor-bobbin)! - Document why the `multi-application` template ships with fully open permissions: the README gained a Security section listing the open `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission` grants on the `User` and `AdminNote` tables and pointing at the TailorDB Permission documentation for what to replace them with.
|
|
14
|
+
|
|
3
15
|
## 2.13.1
|
|
4
16
|
|
|
5
17
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tailor-platform/create-sdk",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.14.1",
|
|
4
4
|
"description": "A CLI tool to quickly create a new Tailor Platform SDK project",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -20,7 +20,7 @@
|
|
|
20
20
|
"@clack/prompts": "1.7.0",
|
|
21
21
|
"execa": "10.0.1",
|
|
22
22
|
"picocolors": "1.1.1",
|
|
23
|
-
"pkg-types": "2.3.
|
|
23
|
+
"pkg-types": "2.3.2",
|
|
24
24
|
"politty": "0.11.9",
|
|
25
25
|
"zod": "4.5.4"
|
|
26
26
|
},
|
|
@@ -29,7 +29,7 @@
|
|
|
29
29
|
"eslint-plugin-zod": "4.12.0",
|
|
30
30
|
"oxlint": "1.81.0",
|
|
31
31
|
"oxlint-tsgolint": "7.0.2001",
|
|
32
|
-
"tsdown": "0.
|
|
32
|
+
"tsdown": "0.23.0",
|
|
33
33
|
"typescript": "6.0.3"
|
|
34
34
|
},
|
|
35
35
|
"scripts": {
|
|
@@ -18,8 +18,8 @@
|
|
|
18
18
|
},
|
|
19
19
|
"devDependencies": {
|
|
20
20
|
"@tailor-platform/eslint-plugin-sdk": "0.2.3",
|
|
21
|
-
"@tailor-platform/sdk": "2.
|
|
22
|
-
"@tailor-platform/sdk-plugin-seed": "0.2.
|
|
21
|
+
"@tailor-platform/sdk": "2.14.1",
|
|
22
|
+
"@tailor-platform/sdk-plugin-seed": "0.2.8",
|
|
23
23
|
"@types/node": "24.13.3",
|
|
24
24
|
"oxfmt": "0.66.0",
|
|
25
25
|
"oxlint": "1.81.0",
|
|
@@ -49,6 +49,13 @@ query {
|
|
|
49
49
|
# }
|
|
50
50
|
```
|
|
51
51
|
|
|
52
|
+
## Security
|
|
53
|
+
|
|
54
|
+
This template is a tutorial project: it defines no auth, and its permissions are fully open so you can deploy and query it right away. Replace both of the following before using it for anything real:
|
|
55
|
+
|
|
56
|
+
- `src/db/user.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `User` table. Define conditions that match your requirements instead — see the [TailorDB Permission documentation](https://docs.tailor.tech/guides/tailordb/permission).
|
|
57
|
+
- `tailor.config.ts` sets `defaultPermission: "allowAnonymous"` for `main-resolver`, so its resolvers are callable without a token.
|
|
58
|
+
|
|
52
59
|
## Scripts
|
|
53
60
|
|
|
54
61
|
In the project directory, you can run:
|
|
@@ -14,5 +14,7 @@ export const user = db
|
|
|
14
14
|
.features({
|
|
15
15
|
gqlOperations: "query",
|
|
16
16
|
})
|
|
17
|
+
// This template defines no auth, so its data is public by design.
|
|
18
|
+
// In production, define conditions in .permission() / .gqlPermission() instead.
|
|
17
19
|
.permission(unsafeAllowAllTypePermission)
|
|
18
20
|
.gqlPermission(unsafeAllowAllGqlPermission);
|
|
@@ -33,6 +33,15 @@ This deploys both applications in order: `user` first, then `admin`.
|
|
|
33
33
|
- Two applications (`user` and `admin`) exist in your workspace
|
|
34
34
|
- In `admin` application's GraphQL Playground, `User` type from `shared-db` is available
|
|
35
35
|
|
|
36
|
+
## Security
|
|
37
|
+
|
|
38
|
+
This template is a tutorial project: its permissions are fully open so you can deploy and query it right away. Replace both of the following before using it for anything real:
|
|
39
|
+
|
|
40
|
+
- `apps/user/db/user.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `User` table.
|
|
41
|
+
- `apps/admin/db/adminNote.ts` grants `unsafeAllowAllTypePermission` / `unsafeAllowAllGqlPermission`, which allow every operation on the `AdminNote` table.
|
|
42
|
+
|
|
43
|
+
Define conditions that match your requirements instead — see the [TailorDB Permission documentation](https://docs.tailor.tech/guides/tailordb/permission).
|
|
44
|
+
|
|
36
45
|
## Scripts
|
|
37
46
|
|
|
38
47
|
- `deploy`: Deploy all applications to Tailor Platform
|