@tailor-platform/sdk 1.17.1 → 1.19.0

package/dist/{types-CZZBCaxB.d.mts → types-CblXasFV.d.mts}

@@ -534,8 +534,8 @@ declare const RawPermissionsSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodString, z.ZodBoolean, z.ZodArray<z.ZodString>, z.ZodArray<z.ZodBoolean>]>], null>>>>;
     actions: z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
       create: "create";
-      delete: "delete";
       update: "update";
+      delete: "delete";
       aggregate: "aggregate";
       bulkUpsert: "bulkUpsert";
       read: "read";
@@ -677,11 +677,12 @@ declare const TailorFieldSchema: z.ZodObject<{
   type: z.ZodEnum<{
     string: "string";
     boolean: "boolean";
-    date: "date";
-    enum: "enum";
     uuid: "uuid";
     integer: "integer";
     float: "float";
+    decimal: "decimal";
+    enum: "enum";
+    date: "date";
     datetime: "datetime";
     time: "time";
     nested: "nested";
@@ -710,11 +711,12 @@ declare const ResolverSchema: z.ZodObject<{
     type: z.ZodEnum<{
       string: "string";
       boolean: "boolean";
-      date: "date";
-      enum: "enum";
       uuid: "uuid";
       integer: "integer";
       float: "float";
+      decimal: "decimal";
+      enum: "enum";
+      date: "date";
       datetime: "datetime";
       time: "time";
       nested: "nested";
@@ -740,11 +742,12 @@ declare const ResolverSchema: z.ZodObject<{
     type: z.ZodEnum<{
       string: "string";
       boolean: "boolean";
-      date: "date";
-      enum: "enum";
       uuid: "uuid";
       integer: "integer";
       float: "float";
+      decimal: "decimal";
+      enum: "enum";
+      date: "date";
       datetime: "datetime";
       time: "time";
       nested: "nested";
@@ -905,11 +908,12 @@ type Validators<F extends Record<string, {
 }>> = ValidatorsBase<F, "id">;
 //#endregion
 //#region src/configure/types/types.d.ts
-type TailorFieldType = "uuid" | "string" | "boolean" | "integer" | "float" | "enum" | "date" | "datetime" | "time" | "nested";
+type TailorFieldType = "uuid" | "string" | "boolean" | "integer" | "float" | "decimal" | "enum" | "date" | "datetime" | "time" | "nested";
 type TailorToTs = {
   string: string;
   integer: number;
   float: number;
+  decimal: string;
   boolean: boolean;
   uuid: string;
   date: string;
@@ -1074,6 +1078,7 @@ interface DBFieldMetadata extends FieldMetadata {
   hooks?: Hook<any, any>;
   serial?: SerialConfig;
   relation?: boolean;
+  scale?: number;
 }
 interface DefinedDBFieldMetadata extends DefinedFieldMetadata {
   index?: boolean;
@@ -1145,1107 +1150,1461 @@ interface TypeFeatures {
   gqlOperations?: GqlOperationsConfig;
 }
 //#endregion
-//#region src/parser/plugin-config/types.d.ts
-type TypeConfigRequired<PluginConfig = unknown> = boolean | ((pluginConfig: PluginConfig | undefined) => boolean);
-/**
- * Interface for plugin configuration mapping.
- * Extend this interface via declaration merging to add typed plugin configs.
- *
- * The `Fields` type parameter provides field names from the type being configured,
- * enabling type-safe field references in plugin configs.
- * @example
- * ```typescript
- * // In your plugin package or types file:
- * declare module "@tailor-platform/sdk" {
- *   interface PluginConfigs<Fields extends string> {
- *     "@my-company/i18n": {
- *       labels: Partial<Record<Fields, { ja: string; en: string }>>;
- *     };
- *   }
- * }
- * ```
- */
-interface PluginConfigs<Fields extends string = string> {}
-/**
- * Plugin attachment stored on TailorAnyDBType instances.
- * This is the configuration passed via `.plugin()` method.
- */
-interface PluginAttachment {
-  pluginId: string;
-  config: unknown;
-}
-/**
- * Context passed to plugin's process method
- */
-interface PluginProcessContext<TypeConfig = unknown, PluginConfig = unknown> {
-  /** The raw TailorDB type being processed */
-  type: TailorAnyDBType;
-  /** Per-type configuration passed via .plugin() method */
-  typeConfig: TypeConfig;
-  /** Plugin-level configuration passed via definePlugins() */
-  pluginConfig: PluginConfig;
-  /** Namespace of the TailorDB type */
-  namespace: string;
-}
-/**
- * Context passed to plugin's processNamespace method.
- * Used for plugins that operate on a namespace without requiring a source type.
- */
-interface PluginNamespaceProcessContext<PluginConfig = unknown> {
-  /** Plugin-level configuration passed via definePlugins() */
-  pluginConfig: PluginConfig;
-  /** Target namespace for generated types */
-  namespace: string;
-}
-/**
- * Interface representing a TailorDB type for plugin output.
- * This interface is satisfied by db.type() instances.
- */
-interface TailorDBTypeForPlugin {
-  /** The name of the type */
-  readonly name: string;
-  /** The field definitions */
-  readonly fields: Record<string, unknown>;
-}
-/**
- * Type generated by a plugin - use db.type() to create these.
- */
-type PluginGeneratedType = TailorDBTypeForPlugin;
-/**
- * Map of generated types keyed by kind identifier.
- * The kind is used to generate distinct TypeScript type files for each generated type.
- * @example
- * ```typescript
- * {
- *   request: changeRequest,
- *   step: changeStep,
- *   approval: changeApproval,
- * }
- * ```
- */
-type PluginGeneratedTypes = Record<string, PluginGeneratedType>;
-/**
- * Resolver definition generated by a plugin.
- * Fields can be TailorDB field instances or raw field definitions.
- */
-interface PluginGeneratedResolver {
-  name: string;
-  operation: "query" | "mutation";
-  inputFields?: Record<string, unknown>;
-  outputFields: Record<string, unknown>;
-  /** Function body code as string */
-  body: string;
-}
-/**
- * Record trigger configuration for plugin-generated executors
- */
-interface PluginRecordTriggerConfig {
-  kind: "recordCreated" | "recordUpdated" | "recordDeleted";
-  /** TailorDB type name for record triggers */
-  typeName: string;
-}
-/**
- * Schedule trigger configuration for plugin-generated executors
- */
-interface PluginScheduleTriggerConfig {
-  kind: "schedule";
-  /** Cron expression */
-  cron: string;
-  /** Timezone (defaults to UTC) */
-  timezone?: string;
-}
-/**
- * Incoming webhook trigger configuration for plugin-generated executors
- */
-interface PluginIncomingWebhookTriggerConfig {
-  kind: "incomingWebhook";
-}
-/**
- * Trigger configuration for plugin-generated executors
- */
-type PluginTriggerConfig = PluginRecordTriggerConfig | PluginScheduleTriggerConfig | PluginIncomingWebhookTriggerConfig;
-/**
- * Inject value types supported for plugin executor injection.
- * These values are serialized as const declarations in the generated file.
- */
-type PluginInjectValue = string | number | boolean | null;
-/**
- * Inject map for plugin executor.
- * Keys become const variable names in the generated file.
- */
-type PluginInjectMap = Record<string, PluginInjectValue>;
-/**
- * Function operation configuration for plugin-generated executors
- */
-interface PluginFunctionOperationConfig {
-  kind: "function";
-  /** Function body code as string */
-  body: string;
-  /**
-   * Variables to inject into the generated file scope.
-   * These become const declarations at the top of the generated file,
-   * allowing the function body to reference them.
-   * @example { namespace: "tailordb", historyTypeName: "CustomerHistory" }
-   */
-  inject?: PluginInjectMap;
-}
-/**
- * GraphQL operation configuration for plugin-generated executors
- */
-interface PluginGraphQLOperationConfig {
-  kind: "graphql";
-  /** GraphQL query string */
-  query: string;
-  /** App name for the GraphQL endpoint */
-  appName?: string;
-  /**
-   * Variables expression as a string function.
-   * Receives the executor args object and returns the variables object.
-   * @example "(args) => ({ input: { recordId: args.newRecord.id } })"
-   */
-  variables?: string;
-}
-/**
- * Webhook operation configuration for plugin-generated executors
- */
-interface PluginWebhookOperationConfig {
-  kind: "webhook";
-  /** Webhook URL */
-  url: string;
-}
-/**
- * Workflow operation configuration for plugin-generated executors
- */
-interface PluginWorkflowOperationConfig {
-  kind: "workflow";
-  /** Workflow name */
-  workflowName: string;
-}
-/**
- * Operation configuration for plugin-generated executors
- */
-type PluginOperationConfig = PluginFunctionOperationConfig | PluginGraphQLOperationConfig | PluginWebhookOperationConfig | PluginWorkflowOperationConfig;
-/**
- * Context value types for plugin executor context.
- * Supports primitive values and type references.
- */
-type PluginExecutorContextValue = TailorAnyDBType | string | number | boolean | null | undefined;
-/**
- * Base executor context that can include type references and other values.
- * Type objects (TailorAnyDBType) will be handled specially by the generator
- * to create appropriate import statements.
- *
- * Plugin authors should extend this interface for their specific context needs.
- */
-interface PluginExecutorContextBase {
-  /** Source type that the plugin is attached to. Null for namespace executors. */
-  sourceType: TailorAnyDBType | null;
-  /** TailorDB namespace for data operations */
-  namespace: string;
-}
-/**
- * Flexible executor context type that allows additional properties.
- * Used as the context type in PluginGeneratedExecutorWithFile.
- */
-type PluginExecutorContext = PluginExecutorContextBase & {
-  [key: string]: PluginExecutorContextValue;
-};
-/**
- * Module shape returned by plugin executor resolve().
- * The concrete context type is intentionally erased at this boundary.
- */
-interface PluginExecutorModule {
-  default: unknown;
-}
-/**
- * Executor definition with dynamic import reference (new format).
- * Used with withPluginContext for type-safe executor definitions in separate files.
- */
-interface PluginGeneratedExecutorWithFile<Ctx = PluginExecutorContext> {
-  /** Executor name (used for generated file name) */
-  name: string;
-  /**
-   * Resolver function for the executor module.
-   * Should return a dynamic import to the executor file.
-   * Relative import specifiers are resolved from the plugin's importPath base.
-   * @example `async () => await import("./executors/on-create")`
-   */
-  resolve: () => Promise<PluginExecutorModule>;
-  /**
-   * Context to pass to the executor factory.
-   * Can include TailorAnyDBType objects - these will be handled specially
-   * by the generator to create appropriate import statements.
-   */
-  context: Ctx;
-}
-/**
- * Executor definition generated by a plugin (legacy format).
- * @deprecated Use PluginGeneratedExecutorWithFile with withPluginContext instead.
- */
-interface PluginGeneratedExecutorLegacy {
-  name: string;
-  description?: string;
-  trigger: PluginTriggerConfig;
-  operation: PluginOperationConfig;
-}
-/**
- * Executor definition generated by a plugin.
- * Supports both legacy format (inline trigger/operation) and new format (executorFile/context).
- */
-type PluginGeneratedExecutor = PluginGeneratedExecutorWithFile | PluginGeneratedExecutorLegacy;
-/**
- * Extension options for modifying the source type
- */
-interface PluginExtends {
-  /**
-   * Fields to add to the source type.
-   * These fields will be merged into the original type's fields.
-   * Existing fields (from original definition or earlier plugins) take precedence.
-   */
-  fields?: Record<string, TailorAnyDBField>;
-}
-/**
- * Base output returned by a plugin's process method.
- * Used by both processType and processNamespace.
- */
-interface PluginOutput {
+//#region src/parser/generator-config/types.d.ts
+type GeneratorConfig = z.input<typeof BaseGeneratorConfigSchema>;
+//#endregion
+//#region src/parser/generator-config/index.d.ts
+declare const BaseGeneratorConfigSchema: z.ZodUnion<readonly [z.ZodTuple<[z.ZodLiteral<"@tailor-platform/kysely-type">, z.ZodObject<{
+  distPath: z.ZodString;
+}, z.core.$strip>], null>, z.ZodTuple<[z.ZodLiteral<"@tailor-platform/seed">, z.ZodObject<{
+  distPath: z.ZodString;
+  machineUserName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>], null>, z.ZodTuple<[z.ZodLiteral<"@tailor-platform/enum-constants">, z.ZodObject<{
+  distPath: z.ZodString;
+}, z.core.$strip>], null>, z.ZodTuple<[z.ZodLiteral<"@tailor-platform/file-utils">, z.ZodObject<{
+  distPath: z.ZodString;
+}, z.core.$strip>], null>, z.ZodObject<{
+  id: z.ZodString;
+  description: z.ZodString;
+  dependencies: z.ZodArray<z.ZodEnum<{
+    executor: "executor";
+    tailordb: "tailordb";
+    resolver: "resolver";
+  }>>;
+  processType: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+  processResolver: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+  processExecutor: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+  processTailorDBNamespace: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+  processResolverNamespace: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+  aggregate: z.ZodFunction<z.core.$ZodFunctionArgs, z.ZodAny>;
+}, z.core.$strip>]>;
+//#endregion
+//#region src/parser/service/auth/schema.d.ts
+declare const AuthInvokerSchema: z.ZodObject<{
+  namespace: z.ZodString;
+  machineUserName: z.ZodString;
+}, z.core.$strip>;
+declare const OIDCSchema: z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"OIDC">;
+  clientID: z.ZodString;
+  clientSecret: z.ZodObject<{
+    vaultName: z.ZodString;
+    secretKey: z.ZodString;
+  }, z.core.$strip>;
+  providerURL: z.ZodString;
+  issuerURL: z.ZodOptional<z.ZodString>;
+  usernameClaim: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const SAMLSchema: z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"SAML">;
+  enableSignRequest: z.ZodDefault<z.ZodBoolean>;
+  metadataURL: z.ZodOptional<z.ZodString>;
+  rawMetadata: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const IDTokenSchema: z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"IDToken">;
+  providerURL: z.ZodString;
+  issuerURL: z.ZodOptional<z.ZodString>;
+  clientID: z.ZodString;
+  usernameClaim: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const BuiltinIdPSchema: z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"BuiltInIdP">;
+  namespace: z.ZodString;
+  clientName: z.ZodString;
+}, z.core.$strip>;
+declare const IdProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"OIDC">;
+  clientID: z.ZodString;
+  clientSecret: z.ZodObject<{
+    vaultName: z.ZodString;
+    secretKey: z.ZodString;
+  }, z.core.$strip>;
+  providerURL: z.ZodString;
+  issuerURL: z.ZodOptional<z.ZodString>;
+  usernameClaim: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"SAML">;
+  enableSignRequest: z.ZodDefault<z.ZodBoolean>;
+  metadataURL: z.ZodOptional<z.ZodString>;
+  rawMetadata: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"IDToken">;
+  providerURL: z.ZodString;
+  issuerURL: z.ZodOptional<z.ZodString>;
+  clientID: z.ZodString;
+  usernameClaim: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  name: z.ZodString;
+  kind: z.ZodLiteral<"BuiltInIdP">;
+  namespace: z.ZodString;
+  clientName: z.ZodString;
+}, z.core.$strip>], "kind">;
+declare const OAuth2ClientGrantTypeSchema: z.ZodUnion<readonly [z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>;
+declare const OAuth2ClientSchema: z.ZodObject<{
+  description: z.ZodOptional<z.ZodString>;
+  grantTypes: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>>>;
+  redirectURIs: z.ZodArray<z.ZodUnion<readonly [z.ZodTemplateLiteral<`https://${string}`>, z.ZodTemplateLiteral<`http://${string}`>, z.ZodTemplateLiteral<`${string}:url`>, z.ZodTemplateLiteral<`${string}:url/${string}`>]>>;
+  clientType: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"confidential">, z.ZodLiteral<"public">, z.ZodLiteral<"browser">]>>;
+  accessTokenLifetimeSeconds: z.ZodPipe<z.ZodOptional<z.ZodNumber>, z.ZodTransform<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>>;
+  refreshTokenLifetimeSeconds: z.ZodPipe<z.ZodOptional<z.ZodNumber>, z.ZodTransform<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>>;
+  requireDpop: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+declare const SCIMAuthorizationSchema: z.ZodObject<{
+  type: z.ZodUnion<readonly [z.ZodLiteral<"oauth2">, z.ZodLiteral<"bearer">]>;
+  bearerSecret: z.ZodOptional<z.ZodObject<{
+    vaultName: z.ZodString;
+    secretKey: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const SCIMAttributeTypeSchema: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
+declare const SCIMAttributeSchema: z.ZodObject<{
+  type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
+  required: z.ZodOptional<z.ZodBoolean>;
+  multiValued: z.ZodOptional<z.ZodBoolean>;
+  uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
+  canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+  subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
+}, z.core.$strip>;
+declare const SCIMAttributeMappingSchema: z.ZodObject<{
+  tailorDBField: z.ZodString;
+  scimPath: z.ZodString;
+}, z.core.$strip>;
+declare const SCIMResourceSchema: z.ZodObject<{
+  name: z.ZodString;
+  tailorDBNamespace: z.ZodString;
+  tailorDBType: z.ZodString;
+  coreSchema: z.ZodObject<{
+    name: z.ZodString;
+    attributes: z.ZodArray<z.ZodObject<{
+      type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
+      required: z.ZodOptional<z.ZodBoolean>;
+      multiValued: z.ZodOptional<z.ZodBoolean>;
+      uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
+      canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+      subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
+    }, z.core.$strip>>;
+  }, z.core.$strip>;
+  attributeMapping: z.ZodArray<z.ZodObject<{
+    tailorDBField: z.ZodString;
+    scimPath: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const SCIMSchema: z.ZodObject<{
+  machineUserName: z.ZodString;
+  authorization: z.ZodObject<{
+    type: z.ZodUnion<readonly [z.ZodLiteral<"oauth2">, z.ZodLiteral<"bearer">]>;
+    bearerSecret: z.ZodOptional<z.ZodObject<{
+      vaultName: z.ZodString;
+      secretKey: z.ZodString;
+    }, z.core.$strip>>;
+  }, z.core.$strip>;
+  resources: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    tailorDBNamespace: z.ZodString;
+    tailorDBType: z.ZodString;
+    coreSchema: z.ZodObject<{
+      name: z.ZodString;
+      attributes: z.ZodArray<z.ZodObject<{
+        type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        multiValued: z.ZodOptional<z.ZodBoolean>;
+        uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
+        canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
+      }, z.core.$strip>>;
+    }, z.core.$strip>;
+    attributeMapping: z.ZodArray<z.ZodObject<{
+      tailorDBField: z.ZodString;
+      scimPath: z.ZodString;
+    }, z.core.$strip>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const TenantProviderSchema: z.ZodObject<{
+  namespace: z.ZodString;
+  type: z.ZodString;
+  signatureField: z.ZodString;
+}, z.core.$strip>;
+//#endregion
+//#region src/parser/service/auth/types.d.ts
+type AuthInvoker = z.output<typeof AuthInvokerSchema>;
+type AuthInvokerWithName<M extends string> = Omit<AuthInvoker, "machineUserName"> & {
+  machineUserName: M;
+};
+type OIDC = z.output<typeof OIDCSchema>;
+type SAML = z.output<typeof SAMLSchema>;
+type IDToken = z.output<typeof IDTokenSchema>;
+type BuiltinIdP = z.output<typeof BuiltinIdPSchema>;
+type IdProviderConfig = z.output<typeof IdProviderSchema>;
+type OAuth2ClientGrantType = z.output<typeof OAuth2ClientGrantTypeSchema>;
+type OAuth2ClientInput = z.input<typeof OAuth2ClientSchema>;
+type SCIMAuthorization = z.output<typeof SCIMAuthorizationSchema>;
+type SCIMAttributeType = z.output<typeof SCIMAttributeTypeSchema>;
+type SCIMAttribute = z.output<typeof SCIMAttributeSchema>;
+type SCIMAttributeMapping = z.output<typeof SCIMAttributeMappingSchema>;
+type SCIMResource = z.output<typeof SCIMResourceSchema>;
+type SCIMConfig = z.output<typeof SCIMSchema>;
+type TenantProviderConfig = z.output<typeof TenantProviderSchema>;
+type ValueOperand = string | boolean | string[] | boolean[];
+type AuthAttributeValue = ValueOperand | null | undefined;
+type UserFieldKeys<User extends TailorDBInstance> = keyof output<User> & string;
+type FieldDefined<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = User["fields"][Key] extends {
+  _defined: infer Defined;
+} ? Defined : never;
+type FieldOutput<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = output<User>[Key];
+type FieldIsRequired<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = undefined extends FieldOutput<User, Key> ? false : true;
+type FieldIsOfType<User extends TailorDBInstance, Key extends UserFieldKeys<User>, Type extends string> = FieldDefined<User, Key> extends {
+  type: Type;
+} ? true : false;
+type FieldIsArray<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
+  array: true;
+} ? true : false;
+type FieldIsUnique<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
+  unique: true;
+} ? true : false;
+type FieldSupportsValueOperand<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldOutput<User, Key> extends ValueOperand | null | undefined ? true : false;
+type UsernameFieldKey<User extends TailorDBInstance> = IsAny<User> extends true ? string : { [K in UserFieldKeys<User>]: FieldIsRequired<User, K> extends true ? FieldIsOfType<User, K, "string"> extends true ? FieldIsArray<User, K> extends true ? never : FieldIsUnique<User, K> extends true ? K : never : never : never }[UserFieldKeys<User>];
+type UserAttributeKey<User extends TailorDBInstance> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldSupportsValueOperand<User, K> extends true ? FieldIsOfType<User, K, "datetime" | "date" | "time"> extends true ? never : K : never }[UserFieldKeys<User>];
+type UserAttributeListKey<User extends TailorDBInstance> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldIsOfType<User, K, "uuid"> extends true ? FieldIsArray<User, K> extends true ? never : K : never }[UserFieldKeys<User>];
+type UserAttributeMap<User extends TailorDBInstance> = { [K in UserAttributeKey<User>]?: true };
+type DisallowExtraKeys<T, Allowed extends PropertyKey> = T & { [K in Exclude<keyof T, Allowed>]: never };
+type AttributeListValue<User extends TailorDBInstance, Key extends UserAttributeListKey<User>> = Key extends keyof output<User> ? output<User>[Key] : never;
+type AttributeListToTuple<User extends TailorDBInstance, AttributeList$1 extends readonly UserAttributeListKey<User>[]> = { [Index in keyof AttributeList$1]: AttributeList$1[Index] extends UserAttributeListKey<User> ? AttributeListValue<User, AttributeList$1[Index]> : never };
+type AttributeMapSelectedKeys<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>> = Extract<{ [K in keyof AttributeMap$1]-?: undefined extends AttributeMap$1[K] ? never : K }[keyof AttributeMap$1], UserAttributeKey<User>>;
+type UserProfile<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[]> = {
   /**
-   * Additional TailorDB types to generate, keyed by kind identifier.
-   * The kind is used to generate distinct TypeScript type files.
-   * @example { request: changeRequest, step: changeStep }
+   * TailorDB namespace where the user type is defined.
+   *
+   * Usually auto-resolved, so you don't need to specify this.
+   * Required only when multiple TailorDBs exist and the type is in an external TailorDB.
    */
-  types?: PluginGeneratedTypes;
-  /** Additional resolvers to generate */
-  resolvers?: PluginGeneratedResolver[];
-  /** Additional executors to generate */
-  executors?: PluginGeneratedExecutor[];
-}
-/**
- * Output returned by a plugin's processType method.
- * Extends PluginOutput with the ability to add fields to the source type.
- */
-interface TypePluginOutput extends PluginOutput {
-  /** Extensions to apply to the source type */
-  extends?: PluginExtends;
-}
+  namespace?: string;
+  type: User;
+  usernameField: UsernameFieldKey<User>;
+  attributes?: DisallowExtraKeys<AttributeMap$1, UserAttributeKey<User>>;
+  attributeList?: AttributeList$1;
+};
+type MachineUserAttributeFields = Record<string, TailorField<DefinedFieldMetadata, unknown, FieldMetadata, TailorFieldType>>;
+type TailorFieldOutputValue<Field> = Field extends TailorField<DefinedFieldMetadata, infer Output, FieldMetadata, TailorFieldType> ? Output : never;
+type MachineUserAttributeValues<Fields extends MachineUserAttributeFields> = { [K in keyof Fields]: TailorFieldOutputValue<Fields[K]> extends ValueOperand | null | undefined ? TailorFieldOutputValue<Fields[K]> : never };
+type MachineUserFromAttributes<Fields extends MachineUserAttributeFields> = (keyof Fields extends never ? {
+  attributes?: never;
+} : {
+  attributes: DisallowExtraKeys<MachineUserAttributeValues<Fields>, keyof Fields>;
+}) & {
+  attributeList?: string[];
+};
+type MachineUser<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User> = UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[] = [], MachineUserAttributes extends MachineUserAttributeFields | undefined = undefined> = IsAny<MachineUserAttributes> extends true ? IsAny<User> extends true ? {
+  attributes: Record<string, AuthAttributeValue>;
+  attributeList?: string[];
+} : (AttributeMapSelectedKeys<User, AttributeMap$1> extends never ? {
+  attributes?: never;
+} : {
+  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap$1>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap$1>>]?: never };
+}) & ([] extends AttributeList$1 ? {
+  attributeList?: never;
+} : {
+  attributeList: AttributeListToTuple<User, AttributeList$1>;
+}) : [MachineUserAttributes] extends [MachineUserAttributeFields] ? MachineUserFromAttributes<MachineUserAttributes> : IsAny<User> extends true ? {
+  attributes: Record<string, AuthAttributeValue>;
+  attributeList?: string[];
+} : (AttributeMapSelectedKeys<User, AttributeMap$1> extends never ? {
+  attributes?: never;
+} : {
+  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap$1>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap$1>>]?: never };
+}) & ([] extends AttributeList$1 ? {
+  attributeList?: never;
+} : {
+  attributeList: AttributeListToTuple<User, AttributeList$1>;
+});
+type AuthServiceInput<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[], MachineUserNames extends string, MachineUserAttributes extends MachineUserAttributeFields | undefined = MachineUserAttributeFields | undefined> = {
+  userProfile?: UserProfile<User, AttributeMap$1, AttributeList$1>;
+  machineUserAttributes?: MachineUserAttributes;
+  machineUsers?: Record<MachineUserNames, MachineUser<User, AttributeMap$1, AttributeList$1, MachineUserAttributes>>;
+  oauth2Clients?: Record<string, OAuth2ClientInput>;
+  idProvider?: IdProviderConfig;
+  scim?: SCIMConfig;
+  tenantProvider?: TenantProviderConfig;
+  publishSessionEvents?: boolean;
+};
+declare const authDefinitionBrand: unique symbol;
+type AuthDefinitionBrand = {
+  readonly [authDefinitionBrand]: true;
+};
+type DefinedAuth<Name extends string, Config, MachineUserNames extends string> = Config & {
+  name: Name;
+  invoker<M extends MachineUserNames>(machineUser: M): AuthInvokerWithName<M>;
+} & AuthDefinitionBrand;
+type AuthExternalConfig = {
+  name: string;
+  external: true;
+};
+type AuthServiceInputLoose = AuthServiceInput<any, any, any, string, any>;
+type AuthOwnConfig = DefinedAuth<string, AuthServiceInputLoose, string>;
+type AuthConfig = AuthOwnConfig | AuthExternalConfig;
+//#endregion
+//#region src/parser/service/executor/schema.d.ts
+declare const RecordTriggerSchema: z.ZodObject<{
+  kind: z.ZodEnum<{
+    recordCreated: "recordCreated";
+    recordUpdated: "recordUpdated";
+    recordDeleted: "recordDeleted";
+  }>;
+  typeName: z.ZodString;
+  condition: z.ZodOptional<z.ZodCustom<Function, Function>>;
+}, z.core.$strip>;
+declare const ResolverExecutedTriggerSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"resolverExecuted">;
+  resolverName: z.ZodString;
+  condition: z.ZodOptional<z.ZodCustom<Function, Function>>;
+}, z.core.$strip>;
+declare const ScheduleTriggerSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"schedule">;
+  cron: z.ZodString;
+  timezone: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+declare const IncomingWebhookTriggerSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"incomingWebhook">;
+}, z.core.$strip>;
+declare const IdpUserTriggerSchema: z.ZodObject<{
+  kind: z.ZodEnum<{
+    idpUserCreated: "idpUserCreated";
+    idpUserUpdated: "idpUserUpdated";
+    idpUserDeleted: "idpUserDeleted";
+  }>;
+}, z.core.$strip>;
+declare const AuthAccessTokenTriggerSchema: z.ZodObject<{
+  kind: z.ZodEnum<{
+    authAccessTokenIssued: "authAccessTokenIssued";
+    authAccessTokenRefreshed: "authAccessTokenRefreshed";
+    authAccessTokenRevoked: "authAccessTokenRevoked";
+  }>;
+}, z.core.$strip>;
+declare const FunctionOperationSchema: z.ZodObject<{
+  kind: z.ZodEnum<{
+    function: "function";
+    jobFunction: "jobFunction";
+  }>;
+  body: z.ZodCustom<Function, Function>;
+  authInvoker: z.ZodOptional<z.ZodObject<{
+    namespace: z.ZodString;
+    machineUserName: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const GqlOperationSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"graphql">;
+  appName: z.ZodOptional<z.ZodString>;
+  query: z.ZodPipe<z.ZodTransform<string, unknown>, z.ZodString>;
+  variables: z.ZodOptional<z.ZodCustom<Function, Function>>;
+  authInvoker: z.ZodOptional<z.ZodObject<{
+    namespace: z.ZodString;
+    machineUserName: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const WebhookOperationSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"webhook">;
+  url: z.ZodCustom<Function, Function>;
+  requestBody: z.ZodOptional<z.ZodCustom<Function, Function>>;
+  headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    vault: z.ZodString;
+    key: z.ZodString;
+  }, z.core.$strip>]>>>;
+}, z.core.$strip>;
+declare const WorkflowOperationSchema: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodObject<{
+  kind: z.ZodLiteral<"workflow">;
+  workflowName: z.ZodString;
+  args: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodCustom<Function, Function>]>>;
+  authInvoker: z.ZodOptional<z.ZodObject<{
+    namespace: z.ZodString;
+    machineUserName: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>>;
+declare const ExecutorSchema: z.ZodObject<{
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  disabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+  trigger: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodEnum<{
+      recordCreated: "recordCreated";
+      recordUpdated: "recordUpdated";
+      recordDeleted: "recordDeleted";
+    }>;
+    typeName: z.ZodString;
+    condition: z.ZodOptional<z.ZodCustom<Function, Function>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"resolverExecuted">;
+    resolverName: z.ZodString;
+    condition: z.ZodOptional<z.ZodCustom<Function, Function>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"schedule">;
+    cron: z.ZodString;
+    timezone: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"incomingWebhook">;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodEnum<{
+      idpUserCreated: "idpUserCreated";
+      idpUserUpdated: "idpUserUpdated";
+      idpUserDeleted: "idpUserDeleted";
+    }>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodEnum<{
+      authAccessTokenIssued: "authAccessTokenIssued";
+      authAccessTokenRefreshed: "authAccessTokenRefreshed";
+      authAccessTokenRevoked: "authAccessTokenRevoked";
+    }>;
+  }, z.core.$strip>], "kind">;
+  operation: z.ZodUnion<readonly [z.ZodObject<{
+    kind: z.ZodEnum<{
+      function: "function";
+      jobFunction: "jobFunction";
+    }>;
+    body: z.ZodCustom<Function, Function>;
+    authInvoker: z.ZodOptional<z.ZodObject<{
+      namespace: z.ZodString;
+      machineUserName: z.ZodString;
+    }, z.core.$strip>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"graphql">;
+    appName: z.ZodOptional<z.ZodString>;
+    query: z.ZodPipe<z.ZodTransform<string, unknown>, z.ZodString>;
+    variables: z.ZodOptional<z.ZodCustom<Function, Function>>;
+    authInvoker: z.ZodOptional<z.ZodObject<{
+      namespace: z.ZodString;
+      machineUserName: z.ZodString;
+    }, z.core.$strip>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"webhook">;
+    url: z.ZodCustom<Function, Function>;
+    requestBody: z.ZodOptional<z.ZodCustom<Function, Function>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+      vault: z.ZodString;
+      key: z.ZodString;
+    }, z.core.$strip>]>>>;
+  }, z.core.$strip>, z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodObject<{
+    kind: z.ZodLiteral<"workflow">;
+    workflowName: z.ZodString;
+    args: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodCustom<Function, Function>]>>;
+    authInvoker: z.ZodOptional<z.ZodObject<{
+      namespace: z.ZodString;
+      machineUserName: z.ZodString;
+    }, z.core.$strip>>;
+  }, z.core.$strip>>]>;
+}, z.core.$strip>;
+//#endregion
+//#region src/parser/service/executor/types.d.ts
+type RecordTrigger = z.infer<typeof RecordTriggerSchema>;
+type ResolverExecutedTrigger = z.infer<typeof ResolverExecutedTriggerSchema>;
+type ScheduleTriggerInput = z.input<typeof ScheduleTriggerSchema>;
+type IncomingWebhookTrigger = z.infer<typeof IncomingWebhookTriggerSchema>;
+type IdpUserTrigger = z.infer<typeof IdpUserTriggerSchema>;
+type AuthAccessTokenTrigger = z.infer<typeof AuthAccessTokenTriggerSchema>;
+type FunctionOperation = z.infer<typeof FunctionOperationSchema>;
+type GqlOperation = z.infer<typeof GqlOperationSchema>;
+type WebhookOperation = z.infer<typeof WebhookOperationSchema>;
+type WorkflowOperation = z.infer<typeof WorkflowOperationSchema>;
+type Executor = z.infer<typeof ExecutorSchema>;
+type ExecutorInput = z.input<typeof ExecutorSchema>;
+type ExecutorServiceConfig = {
+  files: string[];
+  ignores?: string[];
+};
+type ExecutorServiceInput = ExecutorServiceConfig;
+//#endregion
+//#region src/parser/plugin-config/generation-types.d.ts
 /**
- * Output returned by a plugin's processNamespace method.
- * Alias for PluginOutput (namespace plugins cannot extend a source type).
+ * A single generated file to write to disk.
  */
-type NamespacePluginOutput = PluginOutput;
+interface GeneratedFile {
+  path: string;
+  content: string;
+  skipIfExists?: boolean;
+  executable?: boolean;
+}
 /**
- * Plugin interface that all plugins must implement.
- * @template TypeConfig - Type for per-type configuration passed via .plugin() method
- * @template PluginConfig - Type for plugin-level configuration passed via definePlugins()
+ * Result returned by generation-time hooks.
  */
-interface Plugin<TypeConfig = unknown, PluginConfig = unknown> {
-  /** Unique identifier for the plugin */
-  readonly id: string;
-  /** Human-readable description of the plugin */
-  readonly description: string;
-  /**
-   * Import path for this plugin's public API.
-   * Used by code generators to create correct import statements
-   * (e.g., plugin executors and seed schema generation).
-   */
-  readonly importPath: string;
-  /**
-   * Controls whether per-type plugin config is required when attaching via .plugin().
-   * If a function is provided, it receives pluginConfig from definePlugins().
-   * Default is optional when not provided.
-   */
-  readonly typeConfigRequired?: TypeConfigRequired<PluginConfig>;
-  /**
-   * Plugin-level configuration passed via definePlugins().
-   * This config is stored when the plugin is registered and made available
-   * to both processType() and processNamespace() methods.
-   */
-  readonly pluginConfig?: PluginConfig;
-  /**
-   * Process a single TailorDB type and generate outputs.
-   * This method is called for each type that has this plugin attached via .plugin().
-   * @param context - Context containing the type, config, pluginConfig, and namespace
-   * @returns Plugin output with generated types, resolvers, and executors
-   */
-  processType?(context: PluginProcessContext<TypeConfig, PluginConfig>): TypePluginOutput | Promise<TypePluginOutput>;
-  /**
-   * Process plugin for a namespace without requiring a source type.
-   * This method is called once per namespace for plugins configured via definePlugins().
-   * Use this for plugins that generate types independently of user-defined types.
-   * @param context - Context containing the plugin config, namespace, and types
-   * @returns Plugin output with generated types, resolvers, and executors
-   */
-  processNamespace?(context: PluginNamespaceProcessContext<PluginConfig>): NamespacePluginOutput | Promise<NamespacePluginOutput>;
+interface GeneratorResult {
+  files: GeneratedFile[];
+  errors?: string[];
 }
-//#endregion
-//#region src/configure/services/tailordb/schema.d.ts
-interface RelationConfig<S extends RelationType, T extends TailorDBType$1> {
-  type: S;
-  toward: {
-    type: T;
-    as?: string;
-    key?: keyof T["fields"] & string;
+/**
+ * Auth configuration available to generation-time hooks.
+ */
+interface GeneratorAuthInput {
+  name: string;
+  userProfile?: {
+    typeName: string;
+    namespace: string;
+    usernameField: string;
   };
-  backward?: string;
+  machineUsers?: Record<string, {
+    attributes: Record<string, unknown>;
+  }>;
+  oauth2Clients?: Record<string, OAuth2ClientInput>;
+  idProvider?: IdProviderConfig;
 }
-type RelationSelfConfig = {
-  type: RelationType;
-  toward: {
-    type: "self";
-    as?: string;
-    key?: string;
-  };
-  backward?: string;
-};
-type TailorAnyDBField = TailorDBField<any, any>;
-type TailorAnyDBType = TailorDBType$1<any, any>;
 /**
- * TailorDBField interface representing a database field with extended metadata.
- * Extends TailorField with database-specific features like relations, indexes, and hooks.
+ * Namespace-level TailorDB data available to generation-time hooks.
  */
-interface TailorDBField<Defined extends DefinedDBFieldMetadata, Output> extends Omit<TailorField<Defined, Output, DBFieldMetadata, Defined["type"]>, "description" | "validate"> {
-  /** Returns a shallow copy of the raw relation config if set */
-  readonly rawRelation: Readonly<RawRelationConfig> | undefined;
-  /**
-   * Set a description for the field
-   * @param description - The description text
-   * @returns The field with updated metadata
-   */
-  description<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    description: unknown;
-  } ? never : TailorField<CurrentDefined, Output>, description: string): TailorDBField<Prettify<CurrentDefined & {
-    description: true;
-  }>, Output>;
-  /**
-   * Define a relation to another type.
-   * Relation types: "n-1" (many-to-one), "1-1" (one-to-one), "keyOnly" (key only).
-   * Aliases "manyToOne", "oneToOne", and "N-1" are also accepted.
-   * @example db.uuid().relation({ type: "n-1", toward: { type: otherModel } })
-   * @example db.uuid().relation({ type: "1-1", toward: { type: profile } })
-   */
-  relation<S extends RelationType, T extends TailorAnyDBType, CurrentDefined extends Defined>(this: CurrentDefined extends {
-    relation: unknown;
-  } ? never : TailorDBField<CurrentDefined, Output>, config: RelationConfig<S, T>): TailorDBField<S extends "oneToOne" | "1-1" ? Prettify<CurrentDefined & {
-    unique: true;
-    index: true;
-    relation: true;
-  }> : Prettify<CurrentDefined & {
-    index: true;
-    relation: true;
-  }>, Output>;
-  /**
-   * Define a self-referencing relation
-   */
-  relation<S extends RelationSelfConfig, CurrentDefined extends Defined>(this: CurrentDefined extends {
-    relation: unknown;
-  } ? never : TailorDBField<CurrentDefined, Output>, config: S): TailorDBField<S["type"] extends "oneToOne" | "1-1" ? Prettify<CurrentDefined & {
-    unique: true;
-    index: true;
-    relation: true;
-  }> : Prettify<CurrentDefined & {
-    index: true;
-    relation: true;
-  }>, Output>;
-  /**
-   * Add an index to the field
-   */
-  index<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    index: unknown;
-  } ? never : CurrentDefined extends {
-    array: true;
-  } ? never : TailorDBField<CurrentDefined, Output>): TailorDBField<Prettify<CurrentDefined & {
-    index: true;
-  }>, Output>;
-  /**
-   * Make the field unique (also adds an index)
-   */
-  unique<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    unique: unknown;
-  } ? never : CurrentDefined extends {
-    array: true;
-  } ? never : TailorDBField<CurrentDefined, Output>): TailorDBField<Prettify<CurrentDefined & {
-    unique: true;
-    index: true;
-  }>, Output>;
-  /**
-   * Enable vector search on the field (string type only)
-   */
-  vector<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    vector: unknown;
-  } ? never : CurrentDefined extends {
-    type: "string";
-    array: false;
-  } ? TailorDBField<CurrentDefined, Output> : never): TailorDBField<Prettify<CurrentDefined & {
-    vector: true;
-  }>, Output>;
-  /**
-   * Add hooks for create/update operations on this field.
-   * The hook function receives `{ value, data, user }` and returns the computed value.
-   * @example db.string().hooks({ create: ({ data }) => data.firstName + " " + data.lastName })
-   * @example db.datetime().hooks({ create: () => new Date(), update: () => new Date() })
-   */
-  hooks<CurrentDefined extends Defined, const H extends Hook<unknown, Output>>(this: CurrentDefined extends {
-    hooks: unknown;
-  } ? never : CurrentDefined extends {
-    type: "nested";
-  } ? never : TailorDBField<CurrentDefined, Output>, hooks: H): TailorDBField<Prettify<CurrentDefined & {
-    hooks?: {
-      create: H extends {
-        create: unknown;
-      } ? true : false;
-      update: H extends {
-        update: unknown;
-      } ? true : false;
-    };
-    serial: false;
-  }>, Output>;
-  /**
-   * Add validation functions to the field.
-   * Accepts a function or a tuple of [function, errorMessage].
-   * Prefer the tuple form for diagnosable errors.
-   * @example
-   * // Function form (default error message):
-   * db.int().validate(({ value }) => value >= 0)
-   * @example
-   * // Tuple form with custom error message (recommended):
-   * db.string().validate([({ value }) => value.length >= 8, "Must be at least 8 characters"])
-   */
-  validate<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    validate: unknown;
-  } ? never : TailorDBField<CurrentDefined, Output>, ...validate: FieldValidateInput<Output>[]): TailorDBField<Prettify<CurrentDefined & {
-    validate: true;
-  }>, Output>;
-  /**
-   * Configure serial/auto-increment behavior
-   */
-  serial<CurrentDefined extends Defined>(this: CurrentDefined extends {
-    serial: unknown;
-  } ? never : Output extends null ? never : CurrentDefined extends {
-    type: "integer" | "string";
-    array: false;
-  } ? TailorDBField<CurrentDefined, Output> : never, config: SerialConfig<CurrentDefined["type"] & ("integer" | "string")>): TailorDBField<Prettify<CurrentDefined & {
-    serial: true;
-    hooks: {
-      create: false;
-      update: false;
-    };
-  }>, Output>;
-  /**
-   * Clone the field with optional overrides for field options
-   * @param options - Optional field options to override
-   * @returns A new TailorDBField instance with the same configuration
-   */
-  clone<const NewOpt extends FieldOptions>(options?: NewOpt): TailorDBField<Prettify<Omit<Defined, "array"> & {
-    array: NewOpt extends {
-      array: true;
-    } ? true : Defined["array"];
-  }>, FieldOutput$1<TailorToTs[Defined["type"]], NewOpt>>;
+interface TailorDBNamespaceData {
+  /** Namespace name */
+  namespace: string;
+  /** All TailorDB types in this namespace, keyed by type name */
+  types: Record<string, TailorDBType>;
+  /** Source info for each type (file path, export name, plugin info) */
+  sourceInfo: ReadonlyMap<string, TypeSourceInfoEntry>;
+  /** Plugin attachments configured on each type via .plugin() method */
+  pluginAttachments: ReadonlyMap<string, readonly PluginAttachment[]>;
 }
 /**
- * Create a UUID field.
- * @param options - Field configuration options
- * @returns A UUID field
- * @example db.uuid()
- * @example db.uuid({ optional: true })
+ * Namespace-level resolver data available to generation-time hooks.
  */
-declare function uuid<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "uuid";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+interface ResolverNamespaceData {
+  /** Namespace name */
+  namespace: string;
+  /** All resolvers in this namespace, keyed by resolver name */
+  resolvers: Record<string, Resolver>;
+}
 /**
- * Create a string field.
- * @param options - Field configuration options
- * @returns A string field
- * @example db.string()
- * @example db.string({ optional: true })
+ * Context passed to plugin's onTailorDBReady hook.
+ * Called after all TailorDB types are loaded and finalized.
+ * @template PluginConfig - Plugin-level configuration type
+ */
+interface TailorDBReadyContext<PluginConfig = unknown> {
+  /** All TailorDB namespaces with their types and metadata */
+  tailordb: TailorDBNamespaceData[];
+  /** Auth configuration */
+  auth?: GeneratorAuthInput;
+  /** Base directory for generated files */
+  baseDir: string;
+  /** Path to tailor.config.ts */
+  configPath: string;
+  /** Plugin-level configuration passed via definePlugins() */
+  pluginConfig: PluginConfig;
+}
+/**
+ * Context passed to plugin's onResolverReady hook.
+ * Called after all resolvers are loaded and finalized.
+ * @template PluginConfig - Plugin-level configuration type
+ */
+interface ResolverReadyContext<PluginConfig = unknown> {
+  /** All TailorDB namespaces with their types and metadata */
+  tailordb: TailorDBNamespaceData[];
+  /** All resolver namespaces with their resolvers */
+  resolvers: ResolverNamespaceData[];
+  /** Auth configuration */
+  auth?: GeneratorAuthInput;
+  /** Base directory for generated files */
+  baseDir: string;
+  /** Path to tailor.config.ts */
+  configPath: string;
+  /** Plugin-level configuration passed via definePlugins() */
+  pluginConfig: PluginConfig;
+}
+/**
+ * Context passed to plugin's onExecutorReady hook.
+ * Called after all executors are loaded and finalized.
+ * @template PluginConfig - Plugin-level configuration type
+ */
+interface ExecutorReadyContext<PluginConfig = unknown> {
+  /** All TailorDB namespaces with their types and metadata */
+  tailordb: TailorDBNamespaceData[];
+  /** All resolver namespaces with their resolvers */
+  resolvers: ResolverNamespaceData[];
+  /** All executors, keyed by executor name */
+  executors: Record<string, Executor>;
+  /** Auth configuration */
+  auth?: GeneratorAuthInput;
+  /** Base directory for generated files */
+  baseDir: string;
+  /** Path to tailor.config.ts */
+  configPath: string;
+  /** Plugin-level configuration passed via definePlugins() */
+  pluginConfig: PluginConfig;
+}
+//#endregion
+//#region src/parser/plugin-config/types.d.ts
+type TypeConfigRequired<PluginConfig = unknown> = boolean | ((pluginConfig: PluginConfig | undefined) => boolean);
+/**
+ * Interface for plugin configuration mapping.
+ * Extend this interface via declaration merging to add typed plugin configs.
+ *
+ * The `Fields` type parameter provides field names from the type being configured,
+ * enabling type-safe field references in plugin configs.
+ * @example
+ * ```typescript
+ * // In your plugin package or types file:
+ * declare module "@tailor-platform/sdk" {
+ *   interface PluginConfigs<Fields extends string> {
+ *     "@my-company/i18n": {
+ *       labels: Partial<Record<Fields, { ja: string; en: string }>>;
+ *     };
+ *   }
+ * }
+ * ```
  */
-declare function string<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "string";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+interface PluginConfigs<Fields extends string = string> {}
 /**
- * Create a boolean field.
- * Note: The method name is `bool` but creates a `boolean` type field.
- * @param options - Field configuration options
- * @returns A boolean field
- * @example db.bool()
- * @example db.bool({ optional: true })
+ * Plugin attachment stored on TailorAnyDBType instances.
+ * This is the configuration passed via `.plugin()` method.
  */
-declare function bool<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "boolean";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<boolean, Opt> | null : ArrayFieldOutput<boolean, Opt>>;
+interface PluginAttachment {
+  pluginId: string;
+  config: unknown;
+}
 /**
- * Create an integer field.
- * @param options - Field configuration options
- * @returns An integer field
- * @example db.int()
- * @example db.int({ optional: true })
+ * Context passed to plugin's process method
  */
-declare function int<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "integer";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>>;
+interface PluginProcessContext<TypeConfig = unknown, PluginConfig = unknown> {
+  /** The raw TailorDB type being processed */
+  type: TailorAnyDBType;
+  /** Per-type configuration passed via .plugin() method */
+  typeConfig: TypeConfig;
+  /** Plugin-level configuration passed via definePlugins() */
+  pluginConfig: PluginConfig;
+  /** Namespace of the TailorDB type */
+  namespace: string;
+}
 /**
- * Create a float (decimal number) field.
- * @param options - Field configuration options
- * @returns A float field
- * @example db.float()
- * @example db.float({ optional: true })
+ * Context passed to plugin's onNamespaceLoaded hook.
+ * Used for plugins that operate on a namespace without requiring a source type.
  */
-declare function float<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "float";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>>;
+interface PluginNamespaceProcessContext<PluginConfig = unknown> {
+  /** Plugin-level configuration passed via definePlugins() */
+  pluginConfig: PluginConfig;
+  /** Target namespace for generated types */
+  namespace: string;
+}
 /**
- * Create a date field (date only, no time component).
- * Format: "yyyy-MM-dd"
- * @param options - Field configuration options
- * @returns A date field
- * @example db.date()
+ * Interface representing a TailorDB type for plugin output.
+ * This interface is satisfied by db.type() instances.
  */
-declare function date<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "date";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+interface TailorDBTypeForPlugin {
+  /** The name of the type */
+  readonly name: string;
+  /** The field definitions */
+  readonly fields: Record<string, unknown>;
+}
 /**
- * Create a datetime field (date and time).
- * Format: ISO 8601 "yyyy-MM-ddTHH:mm:ssZ"
- * @param options - Field configuration options
- * @returns A datetime field
- * @example db.datetime()
+ * Type generated by a plugin - use db.type() to create these.
  */
-declare function datetime<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "datetime";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<string | Date, Opt> | null : ArrayFieldOutput<string | Date, Opt>>;
+type PluginGeneratedType = TailorDBTypeForPlugin;
 /**
- * Create a time field (time only, no date component).
- * Format: "HH:mm"
- * @param options - Field configuration options
- * @returns A time field
- * @example db.time()
+ * Map of generated types keyed by kind identifier.
+ * The kind is used to generate distinct TypeScript type files for each generated type.
+ * @example
+ * ```typescript
+ * {
+ *   request: changeRequest,
+ *   step: changeStep,
+ *   approval: changeApproval,
+ * }
+ * ```
  */
-declare function time<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
-  type: "time";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+type PluginGeneratedTypes = Record<string, PluginGeneratedType>;
 /**
- * Create an enum field with a fixed set of allowed string values.
- * @param values - Array of allowed string values, or array of `{ value, description }` objects
- * @param options - Field configuration options
- * @returns An enum field
- * @example db.enum(["active", "inactive", "suspended"])
- * @example db.enum(["small", "medium", "large"], { optional: true })
+ * Resolver definition generated by a plugin.
+ * Fields can be TailorDB field instances or raw field definitions.
  */
-declare function _enum<const V extends AllowedValues, const Opt extends FieldOptions>(values: V, options?: Opt): TailorDBField<{
-  type: "enum";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, FieldOutput$1<AllowedValuesOutput<V>, Opt>>;
+interface PluginGeneratedResolver {
+  name: string;
+  operation: "query" | "mutation";
+  inputFields?: Record<string, unknown>;
+  outputFields: Record<string, unknown>;
+  /** Function body code as string */
+  body: string;
+}
 /**
- * Create a nested object field with sub-fields.
- * @param fields - Record of nested field definitions
- * @param options - Field configuration options
- * @returns A nested object field
- * @example db.object({ street: db.string(), city: db.string(), zip: db.string() })
- * @example db.object({ name: db.string() }, { optional: true })
+ * Record trigger configuration for plugin-generated executors
  */
-declare function object<const F extends Record<string, TailorAnyDBField> & ExcludeNestedDBFields<F>, const Opt extends FieldOptions>(fields: F, options?: Opt): TailorDBField<{
-  type: "nested";
-  array: Opt extends {
-    array: true;
-  } ? true : false;
-}, FieldOutput$1<InferFieldsOutput<F>, Opt>>;
+interface PluginRecordTriggerConfig {
+  kind: "recordCreated" | "recordUpdated" | "recordDeleted";
+  /** TailorDB type name for record triggers */
+  typeName: string;
+}
 /**
- * TailorDBType interface representing a database type definition with fields, permissions, and settings.
+ * Schedule trigger configuration for plugin-generated executors
  */
-interface TailorDBType$1<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributeMap> {
-  readonly name: string;
-  readonly fields: Fields;
-  readonly _output: InferFieldsOutput<Fields>;
-  _description?: string;
-  /** Returns metadata for the type */
-  readonly metadata: TailorDBTypeMetadata;
+interface PluginScheduleTriggerConfig {
+  kind: "schedule";
+  /** Cron expression */
+  cron: string;
+  /** Timezone (defaults to UTC) */
+  timezone?: string;
+}
+/**
+ * Incoming webhook trigger configuration for plugin-generated executors
+ */
+interface PluginIncomingWebhookTriggerConfig {
+  kind: "incomingWebhook";
+}
+/**
+ * Trigger configuration for plugin-generated executors
+ */
+type PluginTriggerConfig = PluginRecordTriggerConfig | PluginScheduleTriggerConfig | PluginIncomingWebhookTriggerConfig;
+/**
+ * Inject value types supported for plugin executor injection.
+ * These values are serialized as const declarations in the generated file.
+ */
+type PluginInjectValue = string | number | boolean | null;
+/**
+ * Inject map for plugin executor.
+ * Keys become const variable names in the generated file.
+ */
+type PluginInjectMap = Record<string, PluginInjectValue>;
+/**
+ * Function operation configuration for plugin-generated executors
+ */
+interface PluginFunctionOperationConfig {
+  kind: "function";
+  /** Function body code as string */
+  body: string;
   /**
-   * Add hooks for fields at the type level.
-   * Each key is a field name, and the value defines create/update hooks.
-   * @example
-   * db.type("Order", {
-   *   total: db.float(),
-   *   tax: db.float(),
-   *   ...db.fields.timestamps(),
-   * }).hooks({
-   *   tax: { create: ({ data }) => data.total * 0.1, update: ({ data }) => data.total * 0.1 },
-   * })
+   * Variables to inject into the generated file scope.
+   * These become const declarations at the top of the generated file,
+   * allowing the function body to reference them.
+   * @example { namespace: "tailordb", historyTypeName: "CustomerHistory" }
    */
-  hooks(hooks: Hooks<Fields>): TailorDBType$1<Fields, User>;
+  inject?: PluginInjectMap;
+}
+/**
+ * GraphQL operation configuration for plugin-generated executors
+ */
+interface PluginGraphQLOperationConfig {
+  kind: "graphql";
+  /** GraphQL query string */
+  query: string;
+  /** App name for the GraphQL endpoint */
+  appName?: string;
   /**
-   * Add validators for fields at the type level.
-   * Each key is a field name, and the value is a validator or array of validators.
-   * Prefer the tuple form [function, message] for diagnosable errors.
-   * @example
-   * db.type("User", { email: db.string() }).validate({
-   *   email: [({ value }) => value.includes("@"), "Email must contain @"],
-   * })
+   * Variables expression as a string function.
+   * Receives the executor args object and returns the variables object.
+   * @example "(args) => ({ input: { recordId: args.newRecord.id } })"
    */
-  validate(validators: Validators<Fields>): TailorDBType$1<Fields, User>;
+  variables?: string;
+}
+/**
+ * Webhook operation configuration for plugin-generated executors
+ */
+interface PluginWebhookOperationConfig {
+  kind: "webhook";
+  /** Webhook URL */
+  url: string;
+}
+/**
+ * Workflow operation configuration for plugin-generated executors
+ */
+interface PluginWorkflowOperationConfig {
+  kind: "workflow";
+  /** Workflow name */
+  workflowName: string;
+}
+/**
+ * Operation configuration for plugin-generated executors
+ */
+type PluginOperationConfig = PluginFunctionOperationConfig | PluginGraphQLOperationConfig | PluginWebhookOperationConfig | PluginWorkflowOperationConfig;
+/**
+ * Context value types for plugin executor context.
+ * Supports primitive values and type references.
+ */
+type PluginExecutorContextValue = TailorAnyDBType | string | number | boolean | null | undefined;
+/**
+ * Base executor context that can include type references and other values.
+ * Type objects (TailorAnyDBType) will be handled specially by the generator
+ * to create appropriate import statements.
+ *
+ * Plugin authors should extend this interface for their specific context needs.
+ */
+interface PluginExecutorContextBase {
+  /** Source type that the plugin is attached to. Null for namespace executors. */
+  sourceType: TailorAnyDBType | null;
+  /** TailorDB namespace for data operations */
+  namespace: string;
+}
+/**
+ * Flexible executor context type that allows additional properties.
+ * Used as the context type in PluginGeneratedExecutorWithFile.
+ */
+type PluginExecutorContext = PluginExecutorContextBase & {
+  [key: string]: PluginExecutorContextValue;
+};
+/**
+ * Module shape returned by plugin executor resolve().
+ * The concrete context type is intentionally erased at this boundary.
+ */
+interface PluginExecutorModule {
+  default: unknown;
+}
+/**
+ * Executor definition with dynamic import reference (new format).
+ * Used with withPluginContext for type-safe executor definitions in separate files.
+ */
+interface PluginGeneratedExecutorWithFile<Ctx = PluginExecutorContext> {
+  /** Executor name (used for generated file name) */
+  name: string;
   /**
-   * Configure type features
+   * Resolver function for the executor module.
+   * Should return a dynamic import to the executor file.
+   * Relative import specifiers are resolved from the plugin's importPath base.
+   * @example `async () => await import("./executors/on-create")`
    */
-  features(features: Omit<TypeFeatures, "pluralForm">): TailorDBType$1<Fields, User>;
+  resolve: () => Promise<PluginExecutorModule>;
   /**
-   * Define composite indexes
+   * Context to pass to the executor factory.
+   * Can include TailorAnyDBType objects - these will be handled specially
+   * by the generator to create appropriate import statements.
    */
-  indexes(...indexes: IndexDef<TailorDBType$1<Fields, User>>[]): TailorDBType$1<Fields, User>;
+  context: Ctx;
+}
+/**
+ * Executor definition generated by a plugin (legacy format).
+ * @deprecated Use PluginGeneratedExecutorWithFile with withPluginContext instead.
+ */
+interface PluginGeneratedExecutorLegacy {
+  name: string;
+  description?: string;
+  trigger: PluginTriggerConfig;
+  operation: PluginOperationConfig;
+}
+/**
+ * Executor definition generated by a plugin.
+ * Supports both legacy format (inline trigger/operation) and new format (executorFile/context).
+ */
+type PluginGeneratedExecutor = PluginGeneratedExecutorWithFile | PluginGeneratedExecutorLegacy;
+/**
+ * Extension options for modifying the source type
+ */
+interface PluginExtends {
   /**
-   * Define file fields
+   * Fields to add to the source type.
+   * These fields will be merged into the original type's fields.
+   * Existing fields (from original definition or earlier plugins) take precedence.
    */
-  files<const F extends string>(files: Record<F, string> & Partial<Record<keyof output<TailorDBType$1<Fields, User>>, never>>): TailorDBType$1<Fields, User>;
+  fields?: Record<string, TailorAnyDBField>;
+}
+/**
+ * Base output returned by a plugin's definition-time hooks.
+ * Used by both onTypeLoaded and onNamespaceLoaded.
+ */
+interface PluginOutput {
   /**
-   * Set record-level permissions for create, read, update, and delete operations.
-   * Prefer object format with explicit `conditions` and `permit` for readability.
-   * For update operations, use `newRecord` and `oldRecord` operands.
-   * @example
-   * .permission({
-   *   create: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
-   *   read: [{ conditions: [[{ record: "isPublic" }, "=", true]], permit: true }],
-   *   update: [{ conditions: [[{ newRecord: "ownerId" }, "=", { user: "id" }]], permit: true }],
-   *   delete: [{ conditions: [[{ record: "ownerId" }, "=", { user: "id" }]], permit: true }],
-   * })
+   * Additional TailorDB types to generate, keyed by kind identifier.
+   * The kind is used to generate distinct TypeScript type files.
+   * @example { request: changeRequest, step: changeStep }
    */
-  permission<U$1 extends object = User, P$1 extends TailorTypePermission<U$1, output<TailorDBType$1<Fields, User>>> = TailorTypePermission<U$1, output<TailorDBType$1<Fields, User>>>>(permission: P$1): TailorDBType$1<Fields, U$1>;
+  types?: PluginGeneratedTypes;
+  /** Additional resolvers to generate */
+  resolvers?: PluginGeneratedResolver[];
+  /** Additional executors to generate */
+  executors?: PluginGeneratedExecutor[];
+}
+/**
+ * Output returned by a plugin's onTypeLoaded hook.
+ * Extends PluginOutput with the ability to add fields to the source type.
+ */
+interface TypePluginOutput extends PluginOutput {
+  /** Extensions to apply to the source type */
+  extends?: PluginExtends;
+}
+/**
+ * Output returned by a plugin's onNamespaceLoaded hook.
+ * Alias for PluginOutput (namespace plugins cannot extend a source type).
+ */
+type NamespacePluginOutput = PluginOutput;
+/**
+ * Plugin interface that all plugins must implement.
+ * Plugins can hook into two lifecycle phases:
+ * - **Definition-time hooks** (`onTypeLoaded`, `onNamespaceLoaded`): Generate TailorDB types, resolvers, and executors
+ * - **Generation-time hooks** (`onTailorDBReady`, `onResolverReady`, `onExecutorReady`): Process finalized artifacts and produce output files
+ * @template TypeConfig - Type for per-type configuration passed via .plugin() method
+ * @template PluginConfig - Type for plugin-level configuration passed via definePlugins()
+ */
+interface Plugin<TypeConfig = unknown, PluginConfig = unknown> {
+  /** Unique identifier for the plugin */
+  readonly id: string;
+  /** Human-readable description of the plugin */
+  readonly description: string;
   /**
-   * Set GraphQL-level permissions controlling access to GraphQL operations.
-   * @example
-   * .gqlPermission([
-   *   {
-   *     conditions: [[{ user: "_loggedIn" }, "=", true]],
-   *     actions: "all",
-   *     permit: true,
-   *   },
-   * ])
+   * Import path for this plugin's public API.
+   * Used by code generators to create correct import statements
+   * (e.g., plugin executors and seed schema generation).
+   * Required when plugin has definition-time hooks (onTypeLoaded/onNamespaceLoaded).
+   * Optional for generation-only plugins.
    */
-  gqlPermission<U$1 extends object = User, P$1 extends TailorTypeGqlPermission<U$1> = TailorTypeGqlPermission<U$1>>(permission: P$1): TailorDBType$1<Fields, U$1>;
+  readonly importPath?: string;
   /**
-   * Set type description
+   * Controls whether per-type plugin config is required when attaching via .plugin().
+   * If a function is provided, it receives pluginConfig from definePlugins().
+   * Default is optional when not provided.
    */
-  description(description: string): TailorDBType$1<Fields, User>;
+  readonly typeConfigRequired?: TypeConfigRequired<PluginConfig>;
   /**
-   * Pick specific fields from the type
+   * Plugin-level configuration passed via definePlugins().
+   * This config is stored when the plugin is registered and made available
+   * to all hook methods.
    */
-  pickFields<K$1 extends keyof Fields, const Opt extends FieldOptions>(keys: K$1[], options: Opt): { [P in K$1]: Fields[P$1] extends TailorDBField<infer D, infer _O> ? TailorDBField<Omit<D, "array"> & {
-    array: Opt extends {
-      array: true;
-    } ? true : D["array"];
-  }, FieldOutput$1<TailorToTs[D["type"]], Opt>> : never };
+  readonly pluginConfig?: PluginConfig;
   /**
-   * Omit specific fields from the type
+   * Process a single TailorDB type and generate outputs.
+   * Called for each type that has this plugin attached via .plugin().
+   * @param context - Context containing the type, config, pluginConfig, and namespace
+   * @returns Plugin output with generated types, resolvers, and executors
    */
-  omitFields<K$1 extends keyof Fields>(keys: K$1[]): Omit<Fields, K$1>;
+  onTypeLoaded?(context: PluginProcessContext<TypeConfig, PluginConfig>): TypePluginOutput | Promise<TypePluginOutput>;
   /**
-   * Plugin attachments for this type
-   */
-  readonly plugins: PluginAttachment[];
+   * Process plugin for a namespace without requiring a source type.
+   * Called once per namespace for plugins configured via definePlugins().
+   * Use this for plugins that generate types independently of user-defined types.
+   * @param context - Context containing the plugin config and namespace
+   * @returns Plugin output with generated types, resolvers, and executors
+   */
+  onNamespaceLoaded?(context: PluginNamespaceProcessContext<PluginConfig>): NamespacePluginOutput | Promise<NamespacePluginOutput>;
   /**
-   * Attach a plugin to this type
-   * @param config - Plugin configuration in the format { pluginId: config }
-   * @returns The type with the plugin attached
+   * Called after all TailorDB types are loaded and finalized.
+   * Receives all TailorDB namespaces and their types.
+   * @param context - Context containing all TailorDB data, auth, and output paths
+   * @returns Generated files and optional errors
    */
-  plugin<P$1 extends keyof PluginConfigs<keyof Fields & string>>(config: { [K in P$1]: PluginConfigs<keyof Fields & string>[K$1] }): TailorDBType$1<Fields, User>;
+  onTailorDBReady?(context: TailorDBReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
+  /**
+   * Called after all resolvers are loaded and finalized.
+   * Receives all TailorDB data plus resolver data.
+   * @param context - Context containing TailorDB data, resolvers, auth, and output paths
+   * @returns Generated files and optional errors
+   */
+  onResolverReady?(context: ResolverReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
+  /**
+   * Called after all executors are loaded and finalized.
+   * Receives all TailorDB data, resolver data, plus executor data.
+   * @param context - Context containing all service data, auth, and output paths
+   * @returns Generated files and optional errors
+   */
+  onExecutorReady?(context: ExecutorReadyContext<PluginConfig>): GeneratorResult | Promise<GeneratorResult>;
 }
-type TailorDBInstance<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributeMap> = TailorDBType$1<Fields, User>;
-declare const idField: TailorDBField<{
+//#endregion
+//#region src/configure/services/tailordb/schema.d.ts
+interface RelationConfig<S extends RelationType, T extends TailorDBType$1> {
+  type: S;
+  toward: {
+    type: T;
+    as?: string;
+    key?: keyof T["fields"] & string;
+  };
+  backward?: string;
+}
+type RelationSelfConfig = {
+  type: RelationType;
+  toward: {
+    type: "self";
+    as?: string;
+    key?: string;
+  };
+  backward?: string;
+};
+type TailorAnyDBField = TailorDBField<any, any>;
+type TailorAnyDBType = TailorDBType$1<any, any>;
+/**
+ * TailorDBField interface representing a database field with extended metadata.
+ * Extends TailorField with database-specific features like relations, indexes, and hooks.
+ */
+interface TailorDBField<Defined extends DefinedDBFieldMetadata, Output> extends Omit<TailorField<Defined, Output, DBFieldMetadata, Defined["type"]>, "description" | "validate"> {
+  /** Returns a shallow copy of the raw relation config if set */
+  readonly rawRelation: Readonly<RawRelationConfig> | undefined;
+  /**
+   * Set a description for the field
+   * @param description - The description text
+   * @returns The field with updated metadata
+   */
+  description<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    description: unknown;
+  } ? never : TailorField<CurrentDefined, Output>, description: string): TailorDBField<Prettify<CurrentDefined & {
+    description: true;
+  }>, Output>;
+  /**
+   * Define a relation to another type.
+   * Relation types: "n-1" (many-to-one), "1-1" (one-to-one), "keyOnly" (key only).
+   * Aliases "manyToOne", "oneToOne", and "N-1" are also accepted.
+   * @example db.uuid().relation({ type: "n-1", toward: { type: otherModel } })
+   * @example db.uuid().relation({ type: "1-1", toward: { type: profile } })
+   */
+  relation<S extends RelationType, T extends TailorAnyDBType, CurrentDefined extends Defined>(this: CurrentDefined extends {
+    relation: unknown;
+  } ? never : TailorDBField<CurrentDefined, Output>, config: RelationConfig<S, T>): TailorDBField<S extends "oneToOne" | "1-1" ? Prettify<CurrentDefined & {
+    unique: true;
+    index: true;
+    relation: true;
+  }> : Prettify<CurrentDefined & {
+    index: true;
+    relation: true;
+  }>, Output>;
+  /**
+   * Define a self-referencing relation
+   */
+  relation<S extends RelationSelfConfig, CurrentDefined extends Defined>(this: CurrentDefined extends {
+    relation: unknown;
+  } ? never : TailorDBField<CurrentDefined, Output>, config: S): TailorDBField<S["type"] extends "oneToOne" | "1-1" ? Prettify<CurrentDefined & {
+    unique: true;
+    index: true;
+    relation: true;
+  }> : Prettify<CurrentDefined & {
+    index: true;
+    relation: true;
+  }>, Output>;
+  /**
+   * Add an index to the field
+   */
+  index<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    index: unknown;
+  } ? never : CurrentDefined extends {
+    array: true;
+  } ? never : TailorDBField<CurrentDefined, Output>): TailorDBField<Prettify<CurrentDefined & {
+    index: true;
+  }>, Output>;
+  /**
+   * Make the field unique (also adds an index)
+   */
+  unique<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    unique: unknown;
+  } ? never : CurrentDefined extends {
+    array: true;
+  } ? never : TailorDBField<CurrentDefined, Output>): TailorDBField<Prettify<CurrentDefined & {
+    unique: true;
+    index: true;
+  }>, Output>;
+  /**
+   * Enable vector search on the field (string type only)
+   */
+  vector<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    vector: unknown;
+  } ? never : CurrentDefined extends {
+    type: "string";
+    array: false;
+  } ? TailorDBField<CurrentDefined, Output> : never): TailorDBField<Prettify<CurrentDefined & {
+    vector: true;
+  }>, Output>;
+  /**
+   * Add hooks for create/update operations on this field.
+   * The hook function receives `{ value, data, user }` and returns the computed value.
+   * @example db.string().hooks({ create: ({ data }) => data.firstName + " " + data.lastName })
+   * @example db.datetime().hooks({ create: () => new Date(), update: () => new Date() })
+   */
+  hooks<CurrentDefined extends Defined, const H extends Hook<unknown, Output>>(this: CurrentDefined extends {
+    hooks: unknown;
+  } ? never : CurrentDefined extends {
+    type: "nested";
+  } ? never : TailorDBField<CurrentDefined, Output>, hooks: H): TailorDBField<Prettify<CurrentDefined & {
+    hooks?: {
+      create: H extends {
+        create: unknown;
+      } ? true : false;
+      update: H extends {
+        update: unknown;
+      } ? true : false;
+    };
+    serial: false;
+  }>, Output>;
+  /**
+   * Add validation functions to the field.
+   * Accepts a function or a tuple of [function, errorMessage].
+   * Prefer the tuple form for diagnosable errors.
+   * @example
+   * // Function form (default error message):
+   * db.int().validate(({ value }) => value >= 0)
+   * @example
+   * // Tuple form with custom error message (recommended):
+   * db.string().validate([({ value }) => value.length >= 8, "Must be at least 8 characters"])
+   */
+  validate<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    validate: unknown;
+  } ? never : TailorDBField<CurrentDefined, Output>, ...validate: FieldValidateInput<Output>[]): TailorDBField<Prettify<CurrentDefined & {
+    validate: true;
+  }>, Output>;
+  /**
+   * Configure serial/auto-increment behavior
+   */
+  serial<CurrentDefined extends Defined>(this: CurrentDefined extends {
+    serial: unknown;
+  } ? never : Output extends null ? never : CurrentDefined extends {
+    type: "integer" | "string";
+    array: false;
+  } ? TailorDBField<CurrentDefined, Output> : never, config: SerialConfig<CurrentDefined["type"] & ("integer" | "string")>): TailorDBField<Prettify<CurrentDefined & {
+    serial: true;
+    hooks: {
+      create: false;
+      update: false;
+    };
+  }>, Output>;
+  /**
+   * Clone the field with optional overrides for field options
+   * @param options - Optional field options to override
+   * @returns A new TailorDBField instance with the same configuration
+   */
+  clone<const NewOpt extends FieldOptions>(options?: NewOpt): TailorDBField<Prettify<Omit<Defined, "array"> & {
+    array: NewOpt extends {
+      array: true;
+    } ? true : Defined["array"];
+  }>, FieldOutput$1<TailorToTs[Defined["type"]], NewOpt>>;
+}
+/**
+ * Create a UUID field.
+ * @param options - Field configuration options
+ * @returns A UUID field
+ * @example db.uuid()
+ * @example db.uuid({ optional: true })
+ */
+declare function uuid<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
   type: "uuid";
-  array: false;
-}, string>;
-type idField = typeof idField;
-type DBType<F extends {
-  id?: never;
-} & Record<string, TailorAnyDBField>> = TailorDBInstance<{
-  id: idField;
-} & F>;
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
 /**
- * Creates a new database type with the specified fields.
- * An `id` field (UUID) is automatically added to every type.
- * @param name - The name of the type, or a tuple of [name, pluralForm]
- * @param fields - The field definitions for the type
- * @returns A new TailorDBType instance
- * @example
- * export const user = db.type("User", {
- *   name: db.string(),
- *   email: db.string(),
- *   age: db.int({ optional: true }),
- *   role: db.enum(["admin", "member"]),
- *   ...db.fields.timestamps(),
- * });
- * // Always export both the value and type:
- * export type user = typeof user;
+ * Create a string field.
+ * @param options - Field configuration options
+ * @returns A string field
+ * @example db.string()
+ * @example db.string({ optional: true })
  */
-declare function dbType<const F extends {
-  id?: never;
-} & Record<string, TailorAnyDBField>>(name: string | [string, string], fields: F): DBType<F>;
+declare function string<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "string";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
 /**
- * Creates a new database type with the specified fields and description.
- * An `id` field (UUID) is automatically added to every type.
- * @param name - The name of the type, or a tuple of [name, pluralForm]
- * @param description - A description of the type
- * @param fields - The field definitions for the type
- * @returns A new TailorDBType instance
+ * Create a boolean field.
+ * Note: The method name is `bool` but creates a `boolean` type field.
+ * @param options - Field configuration options
+ * @returns A boolean field
+ * @example db.bool()
+ * @example db.bool({ optional: true })
  */
-declare function dbType<const F extends {
-  id?: never;
-} & Record<string, TailorAnyDBField>>(name: string | [string, string], description: string, fields: F): DBType<F>;
-declare const db: {
-  type: typeof dbType;
-  uuid: typeof uuid;
-  string: typeof string;
-  bool: typeof bool;
-  int: typeof int;
-  float: typeof float;
-  date: typeof date;
-  datetime: typeof datetime;
-  time: typeof time;
-  enum: typeof _enum;
-  object: typeof object;
-  fields: {
-    /**
-     * Creates standard timestamp fields (createdAt, updatedAt) with auto-hooks.
-     * createdAt is set on create, updatedAt is set on update.
-     * @returns An object with createdAt and updatedAt fields
-     * @example
-     * const model = db.type("Model", {
-     *   name: db.string(),
-     *   ...db.fields.timestamps(),
-     * });
-     */
-    timestamps: () => {
-      createdAt: TailorDBField<{
-        type: "datetime";
-        array: false;
-        hooks?: {
-          create: true;
-          update: false;
-        } | undefined;
-        serial: false;
-        description: true;
-      }, string | Date>;
-      updatedAt: TailorDBField<{
-        type: "datetime";
-        array: false;
-        hooks?: {
-          create: false;
-          update: true;
-        } | undefined;
-        serial: false;
-        description: true;
-      }, string | Date | null>;
-    };
-  };
-};
-//#endregion
-//#region src/parser/service/auth/schema.d.ts
-declare const AuthInvokerSchema: z.ZodObject<{
-  namespace: z.ZodString;
-  machineUserName: z.ZodString;
-}, z.core.$strip>;
-declare const OIDCSchema: z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"OIDC">;
-  clientID: z.ZodString;
-  clientSecret: z.ZodObject<{
-    vaultName: z.ZodString;
-    secretKey: z.ZodString;
-  }, z.core.$strip>;
-  providerURL: z.ZodString;
-  issuerURL: z.ZodOptional<z.ZodString>;
-  usernameClaim: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-declare const SAMLSchema: z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"SAML">;
-  enableSignRequest: z.ZodDefault<z.ZodBoolean>;
-  metadataURL: z.ZodOptional<z.ZodString>;
-  rawMetadata: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-declare const IDTokenSchema: z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"IDToken">;
-  providerURL: z.ZodString;
-  issuerURL: z.ZodOptional<z.ZodString>;
-  clientID: z.ZodString;
-  usernameClaim: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-declare const BuiltinIdPSchema: z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"BuiltInIdP">;
-  namespace: z.ZodString;
-  clientName: z.ZodString;
-}, z.core.$strip>;
-declare const IdProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"OIDC">;
-  clientID: z.ZodString;
-  clientSecret: z.ZodObject<{
-    vaultName: z.ZodString;
-    secretKey: z.ZodString;
-  }, z.core.$strip>;
-  providerURL: z.ZodString;
-  issuerURL: z.ZodOptional<z.ZodString>;
-  usernameClaim: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"SAML">;
-  enableSignRequest: z.ZodDefault<z.ZodBoolean>;
-  metadataURL: z.ZodOptional<z.ZodString>;
-  rawMetadata: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"IDToken">;
-  providerURL: z.ZodString;
-  issuerURL: z.ZodOptional<z.ZodString>;
-  clientID: z.ZodString;
-  usernameClaim: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-  name: z.ZodString;
-  kind: z.ZodLiteral<"BuiltInIdP">;
-  namespace: z.ZodString;
-  clientName: z.ZodString;
-}, z.core.$strip>], "kind">;
-declare const OAuth2ClientGrantTypeSchema: z.ZodUnion<readonly [z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>;
-declare const OAuth2ClientSchema: z.ZodObject<{
-  description: z.ZodOptional<z.ZodString>;
-  grantTypes: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>>>;
-  redirectURIs: z.ZodArray<z.ZodUnion<readonly [z.ZodTemplateLiteral<`https://${string}`>, z.ZodTemplateLiteral<`http://${string}`>, z.ZodTemplateLiteral<`${string}:url`>, z.ZodTemplateLiteral<`${string}:url/${string}`>]>>;
-  clientType: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"confidential">, z.ZodLiteral<"public">, z.ZodLiteral<"browser">]>>;
-  accessTokenLifetimeSeconds: z.ZodPipe<z.ZodOptional<z.ZodNumber>, z.ZodTransform<{
-    seconds: bigint;
-    nanos: number;
-  } | undefined, number | undefined>>;
-  refreshTokenLifetimeSeconds: z.ZodPipe<z.ZodOptional<z.ZodNumber>, z.ZodTransform<{
-    seconds: bigint;
-    nanos: number;
-  } | undefined, number | undefined>>;
-  requireDpop: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-declare const SCIMAuthorizationSchema: z.ZodObject<{
-  type: z.ZodUnion<readonly [z.ZodLiteral<"oauth2">, z.ZodLiteral<"bearer">]>;
-  bearerSecret: z.ZodOptional<z.ZodObject<{
-    vaultName: z.ZodString;
-    secretKey: z.ZodString;
-  }, z.core.$strip>>;
-}, z.core.$strip>;
-declare const SCIMAttributeTypeSchema: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
-declare const SCIMAttributeSchema: z.ZodObject<{
-  type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
-  name: z.ZodString;
-  description: z.ZodOptional<z.ZodString>;
-  mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
-  required: z.ZodOptional<z.ZodBoolean>;
-  multiValued: z.ZodOptional<z.ZodBoolean>;
-  uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
-  canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-  subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
-}, z.core.$strip>;
-declare const SCIMAttributeMappingSchema: z.ZodObject<{
-  tailorDBField: z.ZodString;
-  scimPath: z.ZodString;
-}, z.core.$strip>;
-declare const SCIMResourceSchema: z.ZodObject<{
-  name: z.ZodString;
-  tailorDBNamespace: z.ZodString;
-  tailorDBType: z.ZodString;
-  coreSchema: z.ZodObject<{
-    name: z.ZodString;
-    attributes: z.ZodArray<z.ZodObject<{
-      type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
-      name: z.ZodString;
-      description: z.ZodOptional<z.ZodString>;
-      mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
-      required: z.ZodOptional<z.ZodBoolean>;
-      multiValued: z.ZodOptional<z.ZodBoolean>;
-      uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
-      canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-      subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
-    }, z.core.$strip>>;
-  }, z.core.$strip>;
-  attributeMapping: z.ZodArray<z.ZodObject<{
-    tailorDBField: z.ZodString;
-    scimPath: z.ZodString;
-  }, z.core.$strip>>;
-}, z.core.$strip>;
-declare const SCIMSchema: z.ZodObject<{
-  machineUserName: z.ZodString;
-  authorization: z.ZodObject<{
-    type: z.ZodUnion<readonly [z.ZodLiteral<"oauth2">, z.ZodLiteral<"bearer">]>;
-    bearerSecret: z.ZodOptional<z.ZodObject<{
-      vaultName: z.ZodString;
-      secretKey: z.ZodString;
-    }, z.core.$strip>>;
-  }, z.core.$strip>;
-  resources: z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
-    tailorDBNamespace: z.ZodString;
-    tailorDBType: z.ZodString;
-    coreSchema: z.ZodObject<{
-      name: z.ZodString;
-      attributes: z.ZodArray<z.ZodObject<{
-        type: z.ZodUnion<readonly [z.ZodLiteral<"string">, z.ZodLiteral<"number">, z.ZodLiteral<"boolean">, z.ZodLiteral<"datetime">, z.ZodLiteral<"complex">]>;
-        name: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-        mutability: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"readOnly">, z.ZodLiteral<"readWrite">, z.ZodLiteral<"writeOnly">]>>;
-        required: z.ZodOptional<z.ZodBoolean>;
-        multiValued: z.ZodOptional<z.ZodBoolean>;
-        uniqueness: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"none">, z.ZodLiteral<"server">, z.ZodLiteral<"global">]>>;
-        canonicalValues: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        subAttributes: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject< /*elided*/any, z.core.$strip>>>>;
-      }, z.core.$strip>>;
-    }, z.core.$strip>;
-    attributeMapping: z.ZodArray<z.ZodObject<{
-      tailorDBField: z.ZodString;
-      scimPath: z.ZodString;
-    }, z.core.$strip>>;
-  }, z.core.$strip>>;
-}, z.core.$strip>;
-declare const TenantProviderSchema: z.ZodObject<{
-  namespace: z.ZodString;
-  type: z.ZodString;
-  signatureField: z.ZodString;
-}, z.core.$strip>;
-//#endregion
-//#region src/parser/service/auth/types.d.ts
-type AuthInvoker = z.output<typeof AuthInvokerSchema>;
-type AuthInvokerWithName<M extends string> = Omit<AuthInvoker, "machineUserName"> & {
-  machineUserName: M;
-};
-type OIDC = z.output<typeof OIDCSchema>;
-type SAML = z.output<typeof SAMLSchema>;
-type IDToken = z.output<typeof IDTokenSchema>;
-type BuiltinIdP = z.output<typeof BuiltinIdPSchema>;
-type IdProviderConfig = z.output<typeof IdProviderSchema>;
-type OAuth2ClientGrantType = z.output<typeof OAuth2ClientGrantTypeSchema>;
-type OAuth2ClientInput = z.input<typeof OAuth2ClientSchema>;
-type SCIMAuthorization = z.output<typeof SCIMAuthorizationSchema>;
-type SCIMAttributeType = z.output<typeof SCIMAttributeTypeSchema>;
-type SCIMAttribute = z.output<typeof SCIMAttributeSchema>;
-type SCIMAttributeMapping = z.output<typeof SCIMAttributeMappingSchema>;
-type SCIMResource = z.output<typeof SCIMResourceSchema>;
-type SCIMConfig = z.output<typeof SCIMSchema>;
-type TenantProviderConfig = z.output<typeof TenantProviderSchema>;
-type ValueOperand = string | boolean | string[] | boolean[];
-type AuthAttributeValue = ValueOperand | null | undefined;
-type UserFieldKeys<User extends TailorDBInstance> = keyof output<User> & string;
-type FieldDefined<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = User["fields"][Key] extends {
-  _defined: infer Defined;
-} ? Defined : never;
-type FieldOutput<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = output<User>[Key];
-type FieldIsRequired<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = undefined extends FieldOutput<User, Key> ? false : true;
-type FieldIsOfType<User extends TailorDBInstance, Key extends UserFieldKeys<User>, Type extends string> = FieldDefined<User, Key> extends {
-  type: Type;
-} ? true : false;
-type FieldIsArray<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
-  array: true;
-} ? true : false;
-type FieldIsUnique<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
-  unique: true;
-} ? true : false;
-type FieldSupportsValueOperand<User extends TailorDBInstance, Key extends UserFieldKeys<User>> = FieldOutput<User, Key> extends ValueOperand | null | undefined ? true : false;
-type UsernameFieldKey<User extends TailorDBInstance> = IsAny<User> extends true ? string : { [K in UserFieldKeys<User>]: FieldIsRequired<User, K> extends true ? FieldIsOfType<User, K, "string"> extends true ? FieldIsArray<User, K> extends true ? never : FieldIsUnique<User, K> extends true ? K : never : never : never }[UserFieldKeys<User>];
-type UserAttributeKey<User extends TailorDBInstance> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldSupportsValueOperand<User, K> extends true ? FieldIsOfType<User, K, "datetime" | "date" | "time"> extends true ? never : K : never }[UserFieldKeys<User>];
-type UserAttributeListKey<User extends TailorDBInstance> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldIsOfType<User, K, "uuid"> extends true ? FieldIsArray<User, K> extends true ? never : K : never }[UserFieldKeys<User>];
-type UserAttributeMap<User extends TailorDBInstance> = { [K in UserAttributeKey<User>]?: true };
-type DisallowExtraKeys<T, Allowed extends PropertyKey> = T & { [K in Exclude<keyof T, Allowed>]: never };
-type AttributeListValue<User extends TailorDBInstance, Key extends UserAttributeListKey<User>> = Key extends keyof output<User> ? output<User>[Key] : never;
-type AttributeListToTuple<User extends TailorDBInstance, AttributeList$1 extends readonly UserAttributeListKey<User>[]> = { [Index in keyof AttributeList$1]: AttributeList$1[Index] extends UserAttributeListKey<User> ? AttributeListValue<User, AttributeList$1[Index]> : never };
-type AttributeMapSelectedKeys<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>> = Extract<{ [K in keyof AttributeMap$1]-?: undefined extends AttributeMap$1[K] ? never : K }[keyof AttributeMap$1], UserAttributeKey<User>>;
-type UserProfile<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[]> = {
+declare function bool<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "boolean";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<boolean, Opt> | null : ArrayFieldOutput<boolean, Opt>>;
+/**
+ * Create an integer field.
+ * @param options - Field configuration options
+ * @returns An integer field
+ * @example db.int()
+ * @example db.int({ optional: true })
+ */
+declare function int<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "integer";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>>;
+/**
+ * Create a float (decimal number) field.
+ * @param options - Field configuration options
+ * @returns A float field
+ * @example db.float()
+ * @example db.float({ optional: true })
+ */
+declare function float<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "float";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>>;
+interface DecimalFieldOptions extends FieldOptions {
+  scale?: number;
+}
+/**
+ * Create a decimal field (stored as string for precision).
+ * @param options - Field configuration options including optional scale (0-12)
+ * @returns A decimal field
+ * @example db.decimal()
+ * @example db.decimal({ scale: 2 })
+ * @example db.decimal({ scale: 2, optional: true })
+ */
+declare function decimal<const Opt extends DecimalFieldOptions>(options?: Opt): TailorDBField<{
+  type: "decimal";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+/**
+ * Create a date field (date only, no time component).
+ * Format: "yyyy-MM-dd"
+ * @param options - Field configuration options
+ * @returns A date field
+ * @example db.date()
+ */
+declare function date<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "date";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+/**
+ * Create a datetime field (date and time).
+ * Format: ISO 8601 "yyyy-MM-ddTHH:mm:ssZ"
+ * @param options - Field configuration options
+ * @returns A datetime field
+ * @example db.datetime()
+ */
+declare function datetime<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "datetime";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string | Date, Opt> | null : ArrayFieldOutput<string | Date, Opt>>;
+/**
+ * Create a time field (time only, no date component).
+ * Format: "HH:mm"
+ * @param options - Field configuration options
+ * @returns A time field
+ * @example db.time()
+ */
+declare function time<const Opt extends FieldOptions>(options?: Opt): TailorDBField<{
+  type: "time";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>>;
+/**
+ * Create an enum field with a fixed set of allowed string values.
+ * @param values - Array of allowed string values, or array of `{ value, description }` objects
+ * @param options - Field configuration options
+ * @returns An enum field
+ * @example db.enum(["active", "inactive", "suspended"])
+ * @example db.enum(["small", "medium", "large"], { optional: true })
+ */
+declare function _enum<const V extends AllowedValues, const Opt extends FieldOptions>(values: V, options?: Opt): TailorDBField<{
+  type: "enum";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, FieldOutput$1<AllowedValuesOutput<V>, Opt>>;
+/**
+ * Create a nested object field with sub-fields.
+ * @param fields - Record of nested field definitions
+ * @param options - Field configuration options
+ * @returns A nested object field
+ * @example db.object({ street: db.string(), city: db.string(), zip: db.string() })
+ * @example db.object({ name: db.string() }, { optional: true })
+ */
+declare function object<const F extends Record<string, TailorAnyDBField> & ExcludeNestedDBFields<F>, const Opt extends FieldOptions>(fields: F, options?: Opt): TailorDBField<{
+  type: "nested";
+  array: Opt extends {
+    array: true;
+  } ? true : false;
+}, FieldOutput$1<InferFieldsOutput<F>, Opt>>;
+/**
+ * TailorDBType interface representing a database type definition with fields, permissions, and settings.
+ */
+interface TailorDBType$1<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributeMap> {
+  readonly name: string;
+  readonly fields: Fields;
+  readonly _output: InferFieldsOutput<Fields>;
+  _description?: string;
+  /** Returns metadata for the type */
+  readonly metadata: TailorDBTypeMetadata;
   /**
-   * TailorDB namespace where the user type is defined.
-   *
-   * Usually auto-resolved, so you don't need to specify this.
-   * Required only when multiple TailorDBs exist and the type is in an external TailorDB.
+   * Add hooks for fields at the type level.
+   * Each key is a field name, and the value defines create/update hooks.
+   * @example
+   * db.type("Order", {
+   *   total: db.float(),
+   *   tax: db.float(),
+   *   ...db.fields.timestamps(),
+   * }).hooks({
+   *   tax: { create: ({ data }) => data.total * 0.1, update: ({ data }) => data.total * 0.1 },
+   * })
    */
-  namespace?: string;
-  type: User;
-  usernameField: UsernameFieldKey<User>;
-  attributes?: DisallowExtraKeys<AttributeMap$1, UserAttributeKey<User>>;
-  attributeList?: AttributeList$1;
-};
-type MachineUserAttributeFields = Record<string, TailorField<DefinedFieldMetadata, unknown, FieldMetadata, TailorFieldType>>;
-type TailorFieldOutputValue<Field> = Field extends TailorField<DefinedFieldMetadata, infer Output, FieldMetadata, TailorFieldType> ? Output : never;
-type MachineUserAttributeValues<Fields extends MachineUserAttributeFields> = { [K in keyof Fields]: TailorFieldOutputValue<Fields[K]> extends ValueOperand | null | undefined ? TailorFieldOutputValue<Fields[K]> : never };
-type MachineUserFromAttributes<Fields extends MachineUserAttributeFields> = (keyof Fields extends never ? {
-  attributes?: never;
-} : {
-  attributes: DisallowExtraKeys<MachineUserAttributeValues<Fields>, keyof Fields>;
-}) & {
-  attributeList?: string[];
-};
-type MachineUser<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User> = UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[] = [], MachineUserAttributes extends MachineUserAttributeFields | undefined = undefined> = IsAny<MachineUserAttributes> extends true ? IsAny<User> extends true ? {
-  attributes: Record<string, AuthAttributeValue>;
-  attributeList?: string[];
-} : (AttributeMapSelectedKeys<User, AttributeMap$1> extends never ? {
-  attributes?: never;
-} : {
-  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap$1>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap$1>>]?: never };
-}) & ([] extends AttributeList$1 ? {
-  attributeList?: never;
-} : {
-  attributeList: AttributeListToTuple<User, AttributeList$1>;
-}) : [MachineUserAttributes] extends [MachineUserAttributeFields] ? MachineUserFromAttributes<MachineUserAttributes> : IsAny<User> extends true ? {
-  attributes: Record<string, AuthAttributeValue>;
-  attributeList?: string[];
-} : (AttributeMapSelectedKeys<User, AttributeMap$1> extends never ? {
-  attributes?: never;
-} : {
-  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap$1>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap$1>>]?: never };
-}) & ([] extends AttributeList$1 ? {
-  attributeList?: never;
-} : {
-  attributeList: AttributeListToTuple<User, AttributeList$1>;
-});
-type AuthServiceInput<User extends TailorDBInstance, AttributeMap$1 extends UserAttributeMap<User>, AttributeList$1 extends UserAttributeListKey<User>[], MachineUserNames extends string, MachineUserAttributes extends MachineUserAttributeFields | undefined = MachineUserAttributeFields | undefined> = {
-  userProfile?: UserProfile<User, AttributeMap$1, AttributeList$1>;
-  machineUserAttributes?: MachineUserAttributes;
-  machineUsers?: Record<MachineUserNames, MachineUser<User, AttributeMap$1, AttributeList$1, MachineUserAttributes>>;
-  oauth2Clients?: Record<string, OAuth2ClientInput>;
-  idProvider?: IdProviderConfig;
-  scim?: SCIMConfig;
-  tenantProvider?: TenantProviderConfig;
-  publishSessionEvents?: boolean;
-};
-declare const authDefinitionBrand: unique symbol;
-type AuthDefinitionBrand = {
-  readonly [authDefinitionBrand]: true;
-};
-type DefinedAuth<Name extends string, Config, MachineUserNames extends string> = Config & {
-  name: Name;
-  invoker<M extends MachineUserNames>(machineUser: M): AuthInvokerWithName<M>;
-} & AuthDefinitionBrand;
-type AuthExternalConfig = {
-  name: string;
-  external: true;
+  hooks(hooks: Hooks<Fields>): TailorDBType$1<Fields, User>;
+  /**
+   * Add validators for fields at the type level.
+   * Each key is a field name, and the value is a validator or array of validators.
+   * Prefer the tuple form [function, message] for diagnosable errors.
+   * @example
+   * db.type("User", { email: db.string() }).validate({
+   *   email: [({ value }) => value.includes("@"), "Email must contain @"],
+   * })
+   */
+  validate(validators: Validators<Fields>): TailorDBType$1<Fields, User>;
+  /**
+   * Configure type features
+   */
+  features(features: Omit<TypeFeatures, "pluralForm">): TailorDBType$1<Fields, User>;
+  /**
+   * Define composite indexes
+   */
+  indexes(...indexes: IndexDef<TailorDBType$1<Fields, User>>[]): TailorDBType$1<Fields, User>;
+  /**
+   * Define file fields
+   */
+  files<const F extends string>(files: Record<F, string> & Partial<Record<keyof output<TailorDBType$1<Fields, User>>, never>>): TailorDBType$1<Fields, User>;
+  /**
+   * Set record-level permissions for create, read, update, and delete operations.
+   * Prefer object format with explicit `conditions` and `permit` for readability.
+   * For update operations, use `newRecord` and `oldRecord` operands.
+   * @example
+   * .permission({
+   *   create: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+   *   read: [{ conditions: [[{ record: "isPublic" }, "=", true]], permit: true }],
+   *   update: [{ conditions: [[{ newRecord: "ownerId" }, "=", { user: "id" }]], permit: true }],
+   *   delete: [{ conditions: [[{ record: "ownerId" }, "=", { user: "id" }]], permit: true }],
+   * })
+   */
+  permission<U$1 extends object = User, P$1 extends TailorTypePermission<U$1, output<TailorDBType$1<Fields, User>>> = TailorTypePermission<U$1, output<TailorDBType$1<Fields, User>>>>(permission: P$1): TailorDBType$1<Fields, U$1>;
+  /**
+   * Set GraphQL-level permissions controlling access to GraphQL operations.
+   * @example
+   * .gqlPermission([
+   *   {
+   *     conditions: [[{ user: "_loggedIn" }, "=", true]],
+   *     actions: "all",
+   *     permit: true,
+   *   },
+   * ])
+   */
+  gqlPermission<U$1 extends object = User, P$1 extends TailorTypeGqlPermission<U$1> = TailorTypeGqlPermission<U$1>>(permission: P$1): TailorDBType$1<Fields, U$1>;
+  /**
+   * Set type description
+   */
+  description(description: string): TailorDBType$1<Fields, User>;
+  /**
+   * Pick specific fields from the type
+   */
+  pickFields<K$1 extends keyof Fields, const Opt extends FieldOptions>(keys: K$1[], options: Opt): { [P in K$1]: Fields[P$1] extends TailorDBField<infer D, infer _O> ? TailorDBField<Omit<D, "array"> & {
+    array: Opt extends {
+      array: true;
+    } ? true : D["array"];
+  }, FieldOutput$1<TailorToTs[D["type"]], Opt>> : never };
+  /**
+   * Omit specific fields from the type
+   */
+  omitFields<K$1 extends keyof Fields>(keys: K$1[]): Omit<Fields, K$1>;
+  /**
+   * Plugin attachments for this type
+   */
+  readonly plugins: PluginAttachment[];
+  /**
+   * Attach a plugin to this type
+   * @param config - Plugin configuration in the format { pluginId: config }
+   * @returns The type with the plugin attached
+   */
+  plugin<P$1 extends keyof PluginConfigs<keyof Fields & string>>(config: { [K in P$1]: PluginConfigs<keyof Fields & string>[K$1] }): TailorDBType$1<Fields, User>;
+}
+type TailorDBInstance<Fields extends Record<string, TailorAnyDBField> = any, User extends object = InferredAttributeMap> = TailorDBType$1<Fields, User>;
+declare const idField: TailorDBField<{
+  type: "uuid";
+  array: false;
+}, string>;
+type idField = typeof idField;
+type DBType<F extends {
+  id?: never;
+} & Record<string, TailorAnyDBField>> = TailorDBInstance<{
+  id: idField;
+} & F>;
+/**
+ * Creates a new database type with the specified fields.
+ * An `id` field (UUID) is automatically added to every type.
+ * @param name - The name of the type, or a tuple of [name, pluralForm]
+ * @param fields - The field definitions for the type
+ * @returns A new TailorDBType instance
+ * @example
+ * export const user = db.type("User", {
+ *   name: db.string(),
+ *   email: db.string(),
+ *   age: db.int({ optional: true }),
+ *   role: db.enum(["admin", "member"]),
+ *   ...db.fields.timestamps(),
+ * });
+ * // Always export both the value and type:
+ * export type user = typeof user;
+ */
+declare function dbType<const F extends {
+  id?: never;
+} & Record<string, TailorAnyDBField>>(name: string | [string, string], fields: F): DBType<F>;
+/**
+ * Creates a new database type with the specified fields and description.
+ * An `id` field (UUID) is automatically added to every type.
+ * @param name - The name of the type, or a tuple of [name, pluralForm]
+ * @param description - A description of the type
+ * @param fields - The field definitions for the type
+ * @returns A new TailorDBType instance
+ */
+declare function dbType<const F extends {
+  id?: never;
+} & Record<string, TailorAnyDBField>>(name: string | [string, string], description: string, fields: F): DBType<F>;
+declare const db: {
+  type: typeof dbType;
+  uuid: typeof uuid;
+  string: typeof string;
+  bool: typeof bool;
+  int: typeof int;
+  float: typeof float;
+  decimal: typeof decimal;
+  date: typeof date;
+  datetime: typeof datetime;
+  time: typeof time;
+  enum: typeof _enum;
+  object: typeof object;
+  fields: {
+    /**
+     * Creates standard timestamp fields (createdAt, updatedAt) with auto-hooks.
+     * createdAt is set on create, updatedAt is set on update.
+     * @returns An object with createdAt and updatedAt fields
+     * @example
+     * const model = db.type("Model", {
+     *   name: db.string(),
+     *   ...db.fields.timestamps(),
+     * });
+     */
+    timestamps: () => {
+      createdAt: TailorDBField<{
+        type: "datetime";
+        array: false;
+        hooks?: {
+          create: true;
+          update: false;
+        } | undefined;
+        serial: false;
+        description: true;
+      }, string | Date>;
+      updatedAt: TailorDBField<{
+        type: "datetime";
+        array: false;
+        hooks?: {
+          create: false;
+          update: true;
+        } | undefined;
+        serial: false;
+        description: true;
+      }, string | Date | null>;
+    };
+  };
 };
-type AuthServiceInputLoose = AuthServiceInput<any, any, any, string, any>;
-type AuthOwnConfig = DefinedAuth<string, AuthServiceInputLoose, string>;
-type AuthConfig = AuthOwnConfig | AuthExternalConfig;
 //#endregion
 //#region src/parser/service/tailordb/types.d.ts
 /**
@@ -2343,6 +2702,7 @@ interface OperatorFieldConfig {
     maxValue?: number;
     format?: string;
   };
+  scale?: number;
   fields?: Record<string, OperatorFieldConfig>;
 }
 type GqlPermissionAction = "read" | "create" | "update" | "delete" | "aggregate" | "bulkUpsert";
@@ -2438,5 +2798,5 @@ interface TailorDBType {
   files?: TailorDBTypeMetadata["files"];
 }
 //#endregion
-export { unsafeAllowAllTypePermission as $, TailorDBField as A, PluginGeneratedExecutor as B, UserAttributeKey as C, unauthenticatedTailorUser as Ct, ValueOperand as D, UsernameFieldKey as E, TailorDBServiceInput as Et, Plugin as F, PluginOutput as G, PluginGeneratedResolver as H, PluginAttachment as I, TypePluginOutput as J, PluginProcessContext as K, PluginConfigs as L, TailorDBType$1 as M, db as N, TailorAnyDBField as O, NamespacePluginOutput as P, unsafeAllowAllGqlPermission as Q, PluginExecutorContext as R, TenantProviderConfig as S, TailorUser as St, UserAttributeMap as T, AllowedValuesOutput as Tt, PluginGeneratedType as U, PluginGeneratedExecutorWithFile as V, PluginNamespaceProcessContext as W, TailorTypeGqlPermission as X, PermissionCondition as Y, TailorTypePermission as Z, SCIMAttributeMapping as _, Env as _t, AuthInvoker as a, TailorFieldType as at, SCIMConfig as b, AttributeList as bt, BuiltinIdP as c, QueryType as ct, IdProviderConfig as d, ResolverInput as dt, ArrayFieldOutput as et, OAuth2ClientGrantType as f, ResolverServiceConfig as ft, SCIMAttribute as g, output as gt, SAML as h, JsonCompatible as ht, AuthExternalConfig as i, FieldOutput$1 as it, TailorDBInstance as j, TailorAnyDBType as k, DefinedAuth as l, Resolver as lt, OIDC as m, InferFieldsOutput as mt, TypeSourceInfoEntry as n, FieldMetadata as nt, AuthOwnConfig as o, TailorAnyField as ot, OAuth2ClientInput as p, ResolverServiceInput as pt, TailorDBTypeForPlugin as q, AuthConfig as r, FieldOptions as rt, AuthServiceInput as s, TailorField as st, TailorDBType as t, DefinedFieldMetadata as tt, IDToken as u, ResolverExternalConfig as ut, SCIMAttributeType as v, TailorEnv as vt, UserAttributeListKey as w, AllowedValues as wt, SCIMResource as x, AttributeMap as xt, SCIMAuthorization as y, TailorActor as yt, PluginExecutorContextBase as z };
-//# sourceMappingURL=types-CZZBCaxB.d.mts.map
+export { OAuth2ClientGrantType as $, AuthAccessTokenTrigger as A, Resolver as At, ResolverExecutedTrigger as B, TailorActor as Bt, TypePluginOutput as C, FieldMetadata as Ct, ResolverReadyContext as D, TailorAnyField as Dt, ResolverNamespaceData as E, TailorFieldType as Et, FunctionOperation as F, InferFieldsOutput as Ft, AuthExternalConfig as G, AllowedValues as Gt, WebhookOperation as H, AttributeMap as Ht, GqlOperation as I, JsonCompatible as It, AuthServiceInput as J, AuthInvoker as K, AllowedValuesOutput as Kt, IdpUserTrigger as L, output as Lt, ExecutorInput as M, ResolverInput as Mt, ExecutorServiceConfig as N, ResolverServiceConfig as Nt, TailorDBNamespaceData as O, TailorField as Ot, ExecutorServiceInput as P, ResolverServiceInput as Pt, IdProviderConfig as Q, IncomingWebhookTrigger as R, Env as Rt, TailorDBTypeForPlugin as S, DefinedFieldMetadata as St, GeneratorResult as T, FieldOutput$1 as Tt, WorkflowOperation as U, TailorUser as Ut, ScheduleTriggerInput as V, AttributeList as Vt, AuthConfig as W, unauthenticatedTailorUser as Wt, DefinedAuth as X, BuiltinIdP as Y, IDToken as Z, PluginGeneratedResolver as _, TailorTypeGqlPermission as _t, TailorDBField as a, SCIMAttributeType as at, PluginOutput as b, unsafeAllowAllTypePermission as bt, db as c, SCIMResource as ct, PluginAttachment as d, UserAttributeListKey as dt, OAuth2ClientInput as et, PluginConfigs as f, UserAttributeMap as ft, PluginGeneratedExecutorWithFile as g, PermissionCondition as gt, PluginGeneratedExecutor as h, GeneratorConfig as ht, TailorAnyDBType as i, SCIMAttributeMapping as it, Executor as j, ResolverExternalConfig as jt, TailorDBReadyContext as k, QueryType as kt, NamespacePluginOutput as l, TenantProviderConfig as lt, PluginExecutorContextBase as m, ValueOperand as mt, TypeSourceInfoEntry as n, SAML as nt, TailorDBInstance as o, SCIMAuthorization as ot, PluginExecutorContext as p, UsernameFieldKey as pt, AuthOwnConfig as q, TailorDBServiceInput as qt, TailorAnyDBField as r, SCIMAttribute as rt, TailorDBType$1 as s, SCIMConfig as st, TailorDBType as t, OIDC as tt, Plugin as u, UserAttributeKey as ut, PluginGeneratedType as v, TailorTypePermission as vt, ExecutorReadyContext as w, FieldOptions as wt, PluginProcessContext as x, ArrayFieldOutput as xt, PluginNamespaceProcessContext as y, unsafeAllowAllGqlPermission as yt, RecordTrigger as z, TailorEnv as zt };
+//# sourceMappingURL=types-CblXasFV.d.mts.map