@tailor-platform/sdk 1.14.0 → 1.14.2

package/dist/{update-BnKKm4aR.mjs → update-Dm8ERWHJ.mjs}

@@ -1,6 +1,6 @@
-import { t as isPluginGeneratedType } from "./types-r-ZratAg.mjs";
-import { t as db } from "./schema-BmKdDzr1.mjs";
-import { a as ExecutorSchema, c as stringifyFunction, d as logger, f as styles, i as createExecutorService, l as tailorUserMap, n as WorkflowJobSchema, o as OAuth2ClientSchema, p as symbols, r as WorkflowSchema, s as ResolverSchema, t as defineApplication, u as loadFilesWithIgnores } from "./application-DnWZVbDO.mjs";
+import { t as isPluginGeneratedType } from "./types-b-ig8nW_.mjs";
+import { t as db } from "./schema-DRYB-nzA.mjs";
+import { a as ExecutorSchema, c as TailorFieldSchema, d as tailorUserMap, f as loadFilesWithIgnores, h as symbols, i as createExecutorService, l as functionSchema, m as styles, n as WorkflowJobSchema, o as OAuth2ClientSchema, p as logger, r as WorkflowSchema, s as ResolverSchema, t as defineApplication, u as stringifyFunction } from "./application-DhwHYQ3H.mjs";
 import { createRequire } from "node:module";
 import { cloneDeep } from "es-toolkit";
 import { arg, defineCommand, runCommand } from "politty";
@@ -522,7 +522,7 @@ const file_tailor_v1_function_registry = /* @__PURE__ */ fileDesc("CiF0YWlsb3Ivd
 /**
 * Describes the file tailor/v1/idp_resource.proto.
 */
-const file_tailor_v1_idp_resource = /* @__PURE__ */ fileDesc("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", [
+const file_tailor_v1_idp_resource = /* @__PURE__ */ fileDesc("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", [
 	file_buf_validate_validate,
 	file_google_api_field_behavior,
 	file_tailor_v1_resource
@@ -2736,31 +2736,25 @@ z.object({
 	resolvers: z.array(PluginGeneratedResolverSchema).optional(),
 	executors: z.array(PluginGeneratedExecutorSchema).optional()
 });
+const tailorAnyFieldSchema = z.custom((val) => TailorFieldSchema.safeParse(val).success);
 const CustomPluginSchema = z.object({
 	id: z.string(),
 	description: z.string(),
 	importPath: z.string(),
-	configSchema: z.any().optional(),
-	pluginConfigSchema: z.any().optional(),
-	pluginConfig: z.any().optional(),
-	process: z.any().optional(),
-	processNamespace: z.any().optional()
+	configSchema: tailorAnyFieldSchema.optional(),
+	pluginConfigSchema: tailorAnyFieldSchema.optional(),
+	pluginConfig: z.unknown().optional(),
+	processType: functionSchema.optional(),
+	processNamespace: functionSchema.optional(),
+	typeConfigRequired: z.union([z.boolean(), functionSchema]).optional(),
+	configTypeTemplate: z.string().optional()
 }).superRefine((plugin, ctx) => {
-	if (plugin.process && !plugin.configSchema) ctx.addIssue({
+	if (plugin.processType && !plugin.configSchema) ctx.addIssue({
 		code: z.ZodIssueCode.custom,
-		message: "process requires configSchema to be defined.",
+		message: "processType requires configSchema to be defined.",
 		path: ["configSchema"]
 	});
 }).passthrough();
-const CustomPluginTupleSchema = z.tuple([CustomPluginSchema, z.unknown()]);
-/**
-* Type guard to check if a value is a PluginBase object
-* @param value - Value to check
-* @returns True if value is a PluginBase object
-*/
-function isPluginBase(value) {
-	return CustomPluginSchema.safeParse(value).success;
-}
 function normalizePluginConfigSchema(schema) {
 	const seen = /* @__PURE__ */ new Set();
 	const stack = [schema];
@@ -2777,7 +2771,7 @@ function normalizePluginConfigSchema(schema) {
 function clonePluginConfigSchema(schema) {
 	return cloneDeep(schema);
 }
-function normalizePluginBase(plugin) {
+function normalizePlugin(plugin) {
 	let normalized = plugin;
 	if (normalized.configSchema) {
 		const clonedConfigSchema = clonePluginConfigSchema(normalized.configSchema);
@@ -2824,20 +2818,10 @@ function validatePluginConfig$1(config, schema) {
 }
 /**
 * Creates a PluginConfigSchema for custom plugins
-* @returns Plugin config schema that validates and transforms PluginBase instances
+* @returns Plugin config schema that validates and transforms Plugin instances
 */
 function createPluginConfigSchema() {
-	return z.union([CustomPluginSchema, CustomPluginTupleSchema]).transform((plugin) => {
-		if (Array.isArray(plugin)) {
-			const [first, options] = plugin;
-			if (isPluginBase(first)) return normalizePluginBase({
-				...first,
-				pluginConfig: options
-			});
-			throw new Error(`Invalid plugin configuration: expected PluginBase object`);
-		}
-		return normalizePluginBase(plugin);
-	}).brand("Plugin");
+	return CustomPluginSchema.transform((plugin) => normalizePlugin(plugin)).brand("Plugin");
 }
 
 //#endregion
@@ -3367,32 +3351,6 @@ function createKyselyGenerator(options) {
 	};
 }
 
-//#endregion
-//#region src/cli/utils/plugin-import.ts
-/**
-* Collect base directories for resolving plugin import paths.
-* @param configPath - Path to tailor.config.ts
-* @returns Ordered list of base directories
-*/
-function getPluginImportBaseDirs(configPath) {
-	if (configPath) return [path.dirname(configPath)];
-	return [process.cwd()];
-}
-/**
-* Resolve a relative plugin import path against candidate base directories.
-* @param pluginImportPath - Relative plugin import path
-* @param baseDirs - Candidate base directories
-* @returns Absolute path if found, otherwise null
-*/
-function resolveRelativePluginImportPath(pluginImportPath, baseDirs) {
-	if (!pluginImportPath.startsWith(".")) return null;
-	for (const baseDir of baseDirs) {
-		const absolutePath = path.resolve(baseDir, pluginImportPath);
-		if (fs$2.existsSync(absolutePath)) return absolutePath;
-	}
-	return null;
-}
-
 //#endregion
 //#region src/cli/generator/builtin/seed/idp-user-processor.ts
 /**
@@ -3407,12 +3365,7 @@ function processIdpUser(auth) {
 		name: "_User",
 		dependencies: [typeName],
 		dataFile: "data/_User.jsonl",
-		mutation: `mutation CreateUser($input: _CreateUserInput!) {
-  _createUser(input: $input) {
-    id
-  }
-}
-`,
+		idpNamespace: auth.idProvider.namespace,
 		schema: {
 			usernameField,
 			userTypeName: typeName
@@ -3420,6 +3373,84 @@ function processIdpUser(auth) {
 	};
 }
 /**
+* Generates the server-side IDP seed script code for testExecScript execution.
+* Uses the global tailor.idp.Client - no bundling required.
+* @param idpNamespace - The IDP namespace name
+* @returns Script code string
+*/
+function generateIdpSeedScriptCode(idpNamespace) {
+	return ml`
+    export async function main(input) {
+      const client = new tailor.idp.Client({ namespace: "${idpNamespace}" });
+      const errors = [];
+      let processed = 0;
+
+      for (let i = 0; i < input.users.length; i++) {
+        try {
+          await client.createUser(input.users[i]);
+          processed++;
+          console.log(\`[_User] \${i + 1}/\${input.users.length}: \${input.users[i].name}\`);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          errors.push(\`Row \${i} (\${input.users[i].name}): \${message}\`);
+          console.error(\`[_User] Row \${i} failed: \${message}\`);
+        }
+      }
+
+      return {
+        success: errors.length === 0,
+        processed,
+        errors,
+      };
+    }
+  `;
+}
+/**
+* Generates the server-side IDP truncation script code for testExecScript execution.
+* Lists all users with pagination and deletes each one.
+* @param idpNamespace - The IDP namespace name
+* @returns Script code string
+*/
+function generateIdpTruncateScriptCode(idpNamespace) {
+	return ml`
+    export async function main() {
+      const client = new tailor.idp.Client({ namespace: "${idpNamespace}" });
+      const errors = [];
+      let deleted = 0;
+
+      // List all users with pagination
+      let nextToken = undefined;
+      const allUsers = [];
+      do {
+        const response = await client.users(nextToken ? { nextToken } : undefined);
+        allUsers.push(...(response.users || []));
+        nextToken = response.nextToken;
+      } while (nextToken);
+
+      console.log(\`Found \${allUsers.length} IDP users to delete\`);
+
+      for (const user of allUsers) {
+        try {
+          await client.deleteUser(user.id);
+          deleted++;
+          console.log(\`[_User] Deleted \${deleted}/\${allUsers.length}: \${user.name}\`);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          errors.push(\`User \${user.id} (\${user.name}): \${message}\`);
+          console.error(\`[_User] Delete failed for \${user.name}: \${message}\`);
+        }
+      }
+
+      return {
+        success: errors.length === 0,
+        deleted,
+        total: allUsers.length,
+        errors,
+      };
+    }
+  `;
+}
+/**
 * Generates the schema file content for IdP users with foreign key
 * @param usernameField - Username field name
 * @param userTypeName - TailorDB user type name
@@ -3608,7 +3639,7 @@ function generateLinesDbSchemaFile(metadata, importPath) {
 function generateLinesDbSchemaFileWithPluginAPI(metadata, params) {
 	const { typeName, exportName, optionalFields, omitFields, foreignKeys, indexes, pluginSource } = metadata;
 	if (!pluginSource) throw new Error(`pluginSource is required for plugin-generated type "${typeName}"`);
-	const { pluginImportPath, originalImportPath } = params;
+	const { configImportPath, originalImportPath } = params;
 	const schemaTypeCode = ml`
     const schemaType = t.object({
       ...${exportName}.pickFields(${JSON.stringify(optionalFields)}, { optional: true }),
@@ -3617,13 +3648,15 @@ function generateLinesDbSchemaFileWithPluginAPI(metadata, params) {
     `;
 	const schemaOptionsCode = generateSchemaOptions(foreignKeys, indexes);
 	if (pluginSource.originalExportName && originalImportPath && pluginSource.generatedTypeKind) return ml`
+    import { join } from "node:path";
     import { t } from "@tailor-platform/sdk";
+    import { getGeneratedType } from "@tailor-platform/sdk/plugin";
     import { createTailorDBHook, createStandardSchema } from "@tailor-platform/sdk/test";
     import { defineSchema } from "@toiroakr/lines-db";
-    import { getGeneratedType } from "${pluginImportPath}";
     import { ${pluginSource.originalExportName} } from "${originalImportPath}";
 
-    const ${exportName} = getGeneratedType(${pluginSource.originalExportName}, "${pluginSource.generatedTypeKind}");
+    const configPath = join(import.meta.dirname, "${configImportPath}");
+    const ${exportName} = await getGeneratedType(configPath, "${pluginSource.pluginId}", ${pluginSource.originalExportName}, "${pluginSource.generatedTypeKind}");
 
     ${schemaTypeCode}
 
@@ -3636,12 +3669,14 @@ function generateLinesDbSchemaFileWithPluginAPI(metadata, params) {
     `;
 	if (!pluginSource.generatedTypeKind) throw new Error(`Namespace plugin "${pluginSource.pluginId}" must provide generatedTypeKind for type "${typeName}"`);
 	return ml`
+    import { join } from "node:path";
     import { t } from "@tailor-platform/sdk";
+    import { getGeneratedType } from "@tailor-platform/sdk/plugin";
     import { createTailorDBHook, createStandardSchema } from "@tailor-platform/sdk/test";
     import { defineSchema } from "@toiroakr/lines-db";
-    import { getGeneratedType } from "${pluginImportPath}";
 
-    const ${exportName} = getGeneratedType(null, "${pluginSource.generatedTypeKind}");
+    const configPath = join(import.meta.dirname, "${configImportPath}");
+    const ${exportName} = await getGeneratedType(configPath, "${pluginSource.pluginId}", null, "${pluginSource.generatedTypeKind}");
 
     ${schemaTypeCode}
 
@@ -3680,16 +3715,17 @@ function processSeedTypeInfo(type, namespace) {
 //#region src/cli/generator/builtin/seed/index.ts
 const SeedGeneratorID = "@tailor-platform/seed";
 /**
-* Generate the IdP user seed function code
+* Generate the IdP user seed function code using tailor.idp.Client via testExecScript
 * @param hasIdpUser - Whether IdP user is included
+* @param idpNamespace - The IDP namespace name
 * @returns JavaScript code for IdP user seeding function
 */
-function generateIdpUserSeedFunction(hasIdpUser) {
-	if (!hasIdpUser) return "";
+function generateIdpUserSeedFunction(hasIdpUser, idpNamespace) {
+	if (!hasIdpUser || !idpNamespace) return "";
 	return ml`
-    // Seed _User via GraphQL mutation
+    // Seed _User via tailor.idp.Client (server-side)
     const seedIdpUser = async () => {
-      console.log(styleText("cyan", "  Seeding _User via GraphQL mutation..."));
+      console.log(styleText("cyan", "  Seeding _User via tailor.idp.Client..."));
       const dataDir = join(configDir, "data");
       const data = loadSeedData(dataDir, ["_User"]);
       const rows = data["_User"] || [];
@@ -3697,34 +3733,54 @@ function generateIdpUserSeedFunction(hasIdpUser) {
         console.log(styleText("dim", "    No _User data to seed"));
         return { success: true };
       }
-      console.log(styleText("dim", \`    Processing _User...\`));
-      const mutation = \`mutation CreateUser($input: _CreateUserInput!) { _createUser(input: $input) { id } }\`;
-      let successCount = 0;
-      let failCount = 0;
-      for (let i = 0; i < rows.length; i++) {
+      console.log(styleText("dim", \`    Processing \${rows.length} _User records...\`));
+
+      const idpSeedCode = \/* js *\/\`${generateIdpSeedScriptCode(idpNamespace).replace(/`/g, "\\`").replace(/\$/g, "\\$")}\`;
+
+      const result = await executeScript({
+        client: operatorClient,
+        workspaceId,
+        name: "seed-idp-user.ts",
+        code: idpSeedCode,
+        arg: JSON.stringify({ users: rows }),
+        invoker: {
+          namespace: authNamespace,
+          machineUserName,
+        },
+      });
+
+      if (result.logs) {
+        for (const line of result.logs.split("\\n").filter(Boolean)) {
+          console.log(styleText("dim", \`    \${line}\`));
+        }
+      }
+
+      if (result.success) {
+        let parsed;
         try {
-          const response = await fetch(endpoint, {
-            method: "POST",
-            headers: { "Content-Type": "application/json", Authorization: \`Bearer \${tokenInfo.accessToken}\` },
-            body: JSON.stringify({ query: mutation, variables: { input: rows[i] } }),
-          });
-          const result = await response.json();
-          if (result.errors) {
-            failCount++;
-            console.error(styleText("red", \`    ✗ Row \${i} in _User failed: \${result.errors[0].message}\`));
-          } else {
-            successCount++;
+          parsed = JSON.parse(result.result || "{}");
+        } catch (e) {
+          console.error(styleText("red", \`    ✗ Failed to parse seed result: \${e.message}\`));
+          return { success: false };
+        }
+
+        if (parsed.processed) {
+          console.log(styleText("green", \`    ✓ _User: \${parsed.processed} rows processed\`));
+        }
+
+        if (!parsed.success) {
+          const errors = Array.isArray(parsed.errors) ? parsed.errors : [];
+          for (const err of errors) {
+            console.error(styleText("red", \`    ✗ \${err}\`));
           }
-        } catch (error) {
-          failCount++;
-          console.error(styleText("red", \`    ✗ Row \${i} in _User failed: \${error.message}\`));
+          return { success: false };
         }
+
+        return { success: true };
+      } else {
+        console.error(styleText("red", \`    ✗ Seed failed: \${result.error}\`));
+        return { success: false };
       }
-      console.log(styleText("green", \`    ✓ _User: \${successCount} rows processed\`));
-      if (failCount > 0) {
-        console.error(styleText("red", \`    ✗ _User: \${failCount} rows failed\`));
-      }
-      return { success: failCount === 0 };
     };
   `;
 }
@@ -3747,15 +3803,97 @@ function generateIdpUserSeedCall(hasIdpUser) {
   `;
 }
 /**
+* Generate the IdP user truncation function code using tailor.idp.Client via testExecScript
+* @param hasIdpUser - Whether IdP user is included
+* @param idpNamespace - The IDP namespace name
+* @returns JavaScript code for IdP user truncation function
+*/
+function generateIdpUserTruncateFunction(hasIdpUser, idpNamespace) {
+	if (!hasIdpUser || !idpNamespace) return "";
+	return ml`
+    // Truncate _User via tailor.idp.Client (server-side)
+    const truncateIdpUser = async () => {
+      console.log(styleText("cyan", "Truncating _User via tailor.idp.Client..."));
+
+      const idpTruncateCode = \/* js *\/\`${generateIdpTruncateScriptCode(idpNamespace).replace(/`/g, "\\`").replace(/\$/g, "\\$")}\`;
+
+      const result = await executeScript({
+        client: operatorClient,
+        workspaceId,
+        name: "truncate-idp-user.ts",
+        code: idpTruncateCode,
+        arg: JSON.stringify({}),
+        invoker: {
+          namespace: authNamespace,
+          machineUserName,
+        },
+      });
+
+      if (result.logs) {
+        for (const line of result.logs.split("\\n").filter(Boolean)) {
+          console.log(styleText("dim", \`  \${line}\`));
+        }
+      }
+
+      if (result.success) {
+        let parsed;
+        try {
+          parsed = JSON.parse(result.result || "{}");
+        } catch (e) {
+          console.error(styleText("red", \`  ✗ Failed to parse truncation result: \${e.message}\`));
+          return { success: false };
+        }
+
+        if (parsed.deleted !== undefined) {
+          console.log(styleText("green", \`  ✓ _User: \${parsed.deleted} users deleted\`));
+        }
+
+        if (!parsed.success) {
+          const errors = Array.isArray(parsed.errors) ? parsed.errors : [];
+          for (const err of errors) {
+            console.error(styleText("red", \`  ✗ \${err}\`));
+          }
+          return { success: false };
+        }
+
+        return { success: true };
+      } else {
+        console.error(styleText("red", \`  ✗ Truncation failed: \${result.error}\`));
+        return { success: false };
+      }
+    };
+  `;
+}
+/**
+* Generate the IdP user truncation call code within the truncate block
+* @param hasIdpUser - Whether IdP user is included
+* @returns JavaScript code for calling IdP user truncation
+*/
+function generateIdpUserTruncateCall(hasIdpUser) {
+	if (!hasIdpUser) return "";
+	return ml`
+    // Truncate _User if applicable
+    const shouldTruncateUser = !skipIdp && !hasNamespace && (!hasTypes || entitiesToProcess.includes("_User"));
+    if (hasIdpUser && shouldTruncateUser) {
+      const truncResult = await truncateIdpUser();
+      if (!truncResult.success) {
+        console.error(styleText("red", "IDP user truncation failed."));
+        process.exit(1);
+      }
+    }
+  `;
+}
+/**
 * Generates the exec.mjs script content using testExecScript API for TailorDB types
-* and GraphQL mutation for _User (IdP managed)
+* and tailor.idp.Client for _User (IdP managed)
 * @param defaultMachineUserName - Default machine user name from generator config (can be overridden at runtime)
 * @param relativeConfigPath - Config path relative to exec script
 * @param namespaceConfigs - Namespace configurations with types and dependencies
 * @param hasIdpUser - Whether _User is included
+* @param idpNamespace - The IDP namespace name, or null if not applicable
 * @returns exec.mjs file contents
 */
-function generateExecScript(defaultMachineUserName, relativeConfigPath, namespaceConfigs, hasIdpUser) {
+function generateExecScript(defaultMachineUserName, relativeConfigPath, namespaceConfigs, hasIdpUser, idpNamespace) {
 	const namespaceEntitiesEntries = namespaceConfigs.map(({ namespace, types }) => {
 		return `      "${namespace}": [\n${types.map((e) => `        "${e}",`).join("\n")}\n      ]`;
 	}).join(",\n");
@@ -3769,7 +3907,6 @@ function generateExecScript(defaultMachineUserName, relativeConfigPath, namespac
     import { createInterface } from "node:readline";
     import {
       show,
-      getMachineUserToken,
       truncate,
       bundleSeedScript,
       chunkSeedData,
@@ -3923,6 +4060,17 @@ ${namespaceDepsEntries}
       }
     }
 
+    // Get application info
+    const appInfo = await show({ configPath, profile: values.profile });
+    const authNamespace = appInfo.auth;
+
+    // Initialize operator client (once for all namespaces)
+    const accessToken = await loadAccessToken({ profile: values.profile, useProfile: true });
+    const workspaceId = await loadWorkspaceId({ profile: values.profile });
+    const operatorClient = await initOperatorClient(accessToken);
+
+    ${generateIdpUserTruncateFunction(hasIdpUser, idpNamespace)}
+
     // Truncate tables if requested
     if (values.truncate) {
       const answer = values.yes ? "y" : await promptConfirmation("Are you sure you want to truncate? (y/n): ");
@@ -3958,11 +4106,14 @@ ${namespaceDepsEntries}
             all: true,
           });
         }
-        console.log(styleText("green", "Truncate completed."));
       } catch (error) {
         console.error(styleText("red", \`Truncate failed: \${error.message}\`));
         process.exit(1);
       }
+
+      ${generateIdpUserTruncateCall(hasIdpUser)}
+
+      console.log(styleText("green", "Truncate completed."));
     }
 
     console.log(styleText("cyan", "\\nStarting seed data generation..."));
@@ -3970,18 +4121,6 @@ ${namespaceDepsEntries}
       console.log(styleText("dim", \`  Skipping IdP user (_User)\`));
     }
 
-    // Get application info
-    const appInfo = await show({ configPath, profile: values.profile });
-    const endpoint = \`\${appInfo.url}/query\`;
-    const authNamespace = appInfo.auth;
-
-    // Get machine user token
-    const tokenInfo = await getMachineUserToken({
-      name: machineUserName,
-      configPath,
-      profile: values.profile,
-    });
-
     // Load seed data from JSONL files
     const loadSeedData = (dataDir, typeNames) => {
       const data = {};
@@ -4028,11 +4167,6 @@ ${namespaceDepsEntries}
       return result;
     };
 
-    // Initialize operator client (once for all namespaces)
-    const accessToken = await loadAccessToken({ profile: values.profile, useProfile: true });
-    const workspaceId = await loadWorkspaceId({ profile: values.profile });
-    const operatorClient = await initOperatorClient(accessToken);
-
     // Seed TailorDB types via testExecScript
     const seedViaTestExecScript = async (namespace, typesToSeed, deps) => {
       const dataDir = join(configDir, "data");
@@ -4118,8 +4252,8 @@ ${namespaceDepsEntries}
           if (!parsed.success) {
             const errors = Array.isArray(parsed.errors) ? parsed.errors : [];
             const errorMessage =
-              errors.length > 0 ? errors.join("\\n") : "Seed script reported failure";
-            console.error(styleText("red", \`    ✗ Seed failed: \${errorMessage}\`));
+              errors.length > 0 ? errors.join("\\n        ") : "Seed script reported failure";
+            console.error(styleText("red", \`    ✗ Seed failed:\\n        \${errorMessage}\`));
             hasError = true;
             allErrors.push(errorMessage);
           }
@@ -4136,7 +4270,7 @@ ${namespaceDepsEntries}
       return { success: true, processed: allProcessed };
     };
 
-    ${generateIdpUserSeedFunction(hasIdpUser)}
+    ${generateIdpUserSeedFunction(hasIdpUser, idpNamespace)}
 
     // Main execution
     try {
@@ -4188,7 +4322,7 @@ ${namespaceDepsEntries}
 function createSeedGenerator(options) {
 	return {
 		id: SeedGeneratorID,
-		description: "Generates seed data files (Kysely batch insert + GraphQL mutation for _User)",
+		description: "Generates seed data files (Kysely batch insert + tailor.idp.Client for _User)",
 		dependencies: ["tailordb"],
 		processType: ({ type, source, namespace }) => {
 			return {
@@ -4199,7 +4333,6 @@ function createSeedGenerator(options) {
 		processTailorDBNamespace: ({ types }) => types,
 		aggregate: ({ input, configPath }) => {
 			const files = [];
-			const pluginImportBaseDirs = getPluginImportBaseDirs(configPath);
 			const namespaceConfigs = [];
 			for (const nsResult of input.tailordb) {
 				if (!nsResult.types) continue;
@@ -4222,14 +4355,8 @@ function createSeedGenerator(options) {
 							const relativePath = path.relative(path.dirname(schemaOutputPath), linesDb.pluginSource.originalFilePath);
 							originalImportPath = relativePath.replace(/\.ts$/, "").startsWith(".") ? relativePath.replace(/\.ts$/, "") : `./${relativePath.replace(/\.ts$/, "")}`;
 						}
-						let pluginImportPath = linesDb.pluginSource.pluginImportPath;
-						if (pluginImportPath.startsWith("./") || pluginImportPath.startsWith("../")) {
-							const resolvedPluginPath = resolveRelativePluginImportPath(pluginImportPath, pluginImportBaseDirs) ?? path.resolve(pluginImportBaseDirs[0] ?? process.cwd(), pluginImportPath);
-							const relativePluginPath = path.relative(path.dirname(schemaOutputPath), resolvedPluginPath);
-							pluginImportPath = relativePluginPath.startsWith(".") ? relativePluginPath : `./${relativePluginPath}`;
-						}
 						const schemaContent = generateLinesDbSchemaFileWithPluginAPI(linesDb, {
-							pluginImportPath,
+							configImportPath: path.relative(path.dirname(schemaOutputPath), configPath),
 							originalImportPath
 						});
 						files.push({
@@ -4268,7 +4395,7 @@ function createSeedGenerator(options) {
 			const relativeConfigPath = path.relative(options.distPath, configPath);
 			files.push({
 				path: path.join(options.distPath, "exec.mjs"),
-				content: generateExecScript(options.machineUserName, relativeConfigPath, namespaceConfigs, hasIdpUser)
+				content: generateExecScript(options.machineUserName, relativeConfigPath, namespaceConfigs, hasIdpUser, idpUser?.idpNamespace ?? null)
 			});
 			return { files };
 		}
@@ -4347,6 +4474,32 @@ async function loadConfig(configPath) {
 	};
 }
 
+//#endregion
+//#region src/cli/utils/plugin-import.ts
+/**
+* Collect base directories for resolving plugin import paths.
+* @param configPath - Path to tailor.config.ts
+* @returns Ordered list of base directories
+*/
+function getPluginImportBaseDirs(configPath) {
+	if (configPath) return [path.dirname(configPath)];
+	return [process.cwd()];
+}
+/**
+* Resolve a relative plugin import path against candidate base directories.
+* @param pluginImportPath - Relative plugin import path
+* @param baseDirs - Candidate base directories
+* @returns Absolute path if found, otherwise null
+*/
+function resolveRelativePluginImportPath(pluginImportPath, baseDirs) {
+	if (!pluginImportPath.startsWith(".")) return null;
+	for (const baseDir of baseDirs) {
+		const absolutePath = path.resolve(baseDir, pluginImportPath);
+		if (fs$2.existsSync(absolutePath)) return absolutePath;
+	}
+	return null;
+}
+
 //#endregion
 //#region src/parser/plugin-config/types.ts
 /**
@@ -5133,29 +5286,29 @@ var PluginManager = class {
 			error: `Plugin "${context.pluginId}" not found`
 		};
 		const typeConfigRequired = plugin.typeConfigRequired;
-		if ((typeof typeConfigRequired === "function" ? typeConfigRequired(plugin.pluginConfig) : typeConfigRequired === true) && (context.config === void 0 || context.config === null)) return {
+		if ((typeof typeConfigRequired === "function" ? typeConfigRequired(plugin.pluginConfig) : typeConfigRequired === true) && (context.typeConfig === void 0 || context.typeConfig === null)) return {
 			success: false,
-			error: `Plugin "${plugin.id}" requires config, but none was provided for type "${context.type.name}".`
+			error: `Plugin "${plugin.id}" requires typeConfig, but none was provided for type "${context.type.name}".`
 		};
 		if (plugin.configSchema) {
-			const validationErrors = validatePluginConfig(context.config, plugin.configSchema);
+			const validationErrors = validatePluginConfig(context.typeConfig, plugin.configSchema);
 			if (validationErrors.length > 0) {
 				const errorDetails = validationErrors.map((e) => e.field ? `${e.field}: ${e.message}` : e.message).join("; ");
 				return {
 					success: false,
-					error: `Invalid config for plugin "${plugin.id}" on type "${context.type.name}": ${errorDetails}`
+					error: `Invalid typeConfig for plugin "${plugin.id}" on type "${context.type.name}": ${errorDetails}`
 				};
 			}
 		}
-		if (!plugin.process) return {
+		if (!plugin.processType) return {
 			success: false,
-			error: `Plugin "${plugin.id}" does not support type-attached processing (missing process method). Use processNamespace via definePlugins() instead.`
+			error: `Plugin "${plugin.id}" does not support type-attached processing (missing processType method). Use processNamespace via definePlugins() instead.`
 		};
 		let output;
 		try {
-			output = await plugin.process({
+			output = await plugin.processType({
 				type: context.type,
-				config: context.config,
+				typeConfig: context.typeConfig,
 				pluginConfig: plugin.pluginConfig,
 				namespace: context.namespace
 			});
@@ -5173,7 +5326,9 @@ var PluginManager = class {
 				pluginImportPath: importPath,
 				sourceTypeName: context.type.name,
 				kind,
-				type
+				type,
+				namespace: context.namespace,
+				pluginConfig: plugin.pluginConfig
 			});
 		}
 		if (output.executors && output.executors.length > 0) for (const executor of output.executors) this.generatedExecutors.push({
@@ -5191,11 +5346,9 @@ var PluginManager = class {
 	* Process namespace plugins that don't require a source type.
 	* This method is called once per namespace for plugins with processNamespace method.
 	* @param namespace - The target namespace for generated types
-	* @param types - TailorDB types in the namespace (after type-attached processing)
-	* @param generatedTypes - Plugin-generated types in the namespace
 	* @returns Array of results with plugin outputs and configs
 	*/
-	async processNamespacePlugins(namespace, types, generatedTypes) {
+	async processNamespacePlugins(namespace) {
 		const results = [];
 		for (const [pluginId, plugin] of this.plugins) {
 			if (!plugin.processNamespace) continue;
@@ -5217,9 +5370,7 @@ var PluginManager = class {
 			}
 			const context = {
 				pluginConfig: config,
-				namespace,
-				types,
-				generatedTypes
+				namespace
 			};
 			let output;
 			try {
@@ -5257,7 +5408,9 @@ var PluginManager = class {
 						pluginImportPath: importPath,
 						sourceTypeName: "(namespace)",
 						kind,
-						type
+						type,
+						namespace,
+						pluginConfig: plugin.pluginConfig
 					});
 				}
 			}
@@ -5287,6 +5440,14 @@ var PluginManager = class {
 		return this.plugins.size;
 	}
 	/**
+	* Get a plugin by its ID
+	* @param pluginId - The plugin ID to look up
+	* @returns The plugin instance, or undefined if not found
+	*/
+	getPlugin(pluginId) {
+		return this.plugins.get(pluginId);
+	}
+	/**
 	* Get the import path for a plugin
 	* @param pluginId - The plugin ID to look up
 	* @returns The plugin's import path, or undefined if not found
@@ -14044,7 +14205,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication: defineApplication$1 } = await import("./application-DM4zTgXU.mjs");
+	const { defineApplication: defineApplication$1 } = await import("./application-BznueWxG.mjs");
 	const application = defineApplication$1({
 		config,
 		pluginManager
@@ -15255,4 +15416,4 @@ const updateCommand = defineCommand({
 
 //#endregion
 export { jobsCommand as $, initOperatorClient as $t, generateCommand as A, getMigrationFiles as At, getMachineUserToken as B, generateUserTypes as Bt, resumeCommand as C, compareLocalTypesWithSnapshot as Ct, truncate as D, getLatestMigrationNumber as Dt, listWorkflows as E, formatMigrationNumber as Et, removeCommand$1 as F, formatDiffSummary as Ft, generateCommand$1 as G, fetchLatestToken as Gt, listCommand$5 as H, getDistDir as Ht, listCommand$4 as I, formatMigrationDiff as It, triggerCommand as J, readPlatformConfig as Jt, listWebhookExecutors as K, loadAccessToken as Kt, listOAuth2Clients as L, hasChanges as Lt, show as M, isValidMigrationNumber as Mt, showCommand as N, loadDiff as Nt, truncateCommand as O, getMigrationDirPath as Ot, remove as P, reconstructSnapshotFromMigrations as Pt, getExecutorJob as Q, initOAuth2Client as Qt, getCommand$1 as R, getNamespacesWithMigrations as Rt, healthCommand as S, SCHEMA_FILE_NAME as St, listCommand$3 as T, createSnapshotFromLocalTypes as Tt, listMachineUsers as U, apiCall as Ut, tokenCommand as V, loadConfig as Vt, generate$1 as W, apiCommand as Wt, listCommand$6 as X, fetchAll as Xt, triggerExecutor as Y, writePlatformConfig as Yt, listExecutors as Z, fetchUserInfo as Zt, createCommand as _, bundleMigrationScript as _t, listCommand as a, jsonArgs as an, getWorkflow as at, listCommand$2 as b, INITIAL_SCHEMA_NUMBER as bt, inviteUser as c, listWorkflowExecutions as ct, listCommand$1 as d, apply as dt, readPackageJson as en, listExecutorJobs as et, listWorkspaces as f, applyCommand as ft, deleteWorkspace as g, parseMigrationLabelNumber as gt, deleteCommand as h, MIGRATION_LABEL_KEY as ht, removeUser as i, deploymentArgs as in, getCommand$2 as it, logBetaWarning as j, getNextMigrationNumber as jt, generate as k, getMigrationFilePath as kt, restoreCommand as l, getCommand$3 as lt, getWorkspace as m, waitForExecution$1 as mt, updateUser as n, commonArgs as nn, startCommand as nt, listUsers as o, withCommonArgs as on, executionsCommand as ot, getCommand as p, executeScript as pt, webhookCommand as q, loadWorkspaceId as qt, removeCommand as r, confirmationArgs as rn, startWorkflow as rt, inviteCommand as s, workspaceArgs as sn, getWorkflowExecution as st, updateCommand as t, PATScope as tn, watchExecutorJob as tt, restoreWorkspace as u, getExecutor as ut, createWorkspace as v, DB_TYPES_FILE_NAME as vt, resumeWorkflow as w, compareSnapshots as wt, getAppHealth as x, MIGRATE_FILE_NAME as xt, listApps as y, DIFF_FILE_NAME as yt, getOAuth2Client as z, trnPrefix as zt };
-//# sourceMappingURL=update-BnKKm4aR.mjs.map
+//# sourceMappingURL=update-Dm8ERWHJ.mjs.map