@tailor-platform/sdk 1.19.0 → 1.20.0

package/dist/{update-Cr5c7h1r.mjs → update-DkpWgrzL.mjs}

@@ -1,7 +1,7 @@
 import { t as db } from "./schema-D5Cpd8fQ.mjs";
-import { $ as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, A as TailorDBGQLPermission_Operator, B as ExecutorTargetType, C as platformBaseUrl, D as WorkflowExecution_Status, E as WorkspacePlatformUserRole, F as PipelineResolver_OperationType, G as AuthOAuth2Client_GrantType, H as AuthIDPConfig_AuthType, I as IdPLang, J as AuthSCIMAttribute_Uniqueness, K as AuthSCIMAttribute_Mutability, L as FunctionExecution_Status, M as TailorDBType_Permission_Operator, N as TailorDBType_Permission_Permit, O as WorkflowJobExecution_Status, P as TailorDBType_PermitAction, Q as UserProfileProviderConfig_UserProfileProviderType, S as initOperatorClient, T as userAgent, U as AuthInvokerSchema, V as ExecutorTriggerType, W as AuthOAuth2Client_ClientType, Y as AuthSCIMConfig_AuthorizationType, Z as TenantProviderConfig_TenantProviderType, _ as writePlatformConfig, a as buildExecutorArgsExpr, at as Subgraph_ServiceType, c as createExecutorService, ct as symbols, et as ConditionSchema, f as loadAccessToken, g as readPlatformConfig, h as loadWorkspaceId, i as loadConfig, it as ApplicationSchemaUpdateAttemptStatus, j as TailorDBGQLPermission_Permit, k as TailorDBGQLPermission_Action, l as OAuth2ClientSchema, m as loadOrganizationId, n as generatePluginFilesIfNeeded, nt as FilterSchema, o as buildResolverOperationHookExpr, ot as logger, p as loadFolderId, q as AuthSCIMAttribute_Type, r as loadApplication, rt as PageDirection, s as getDistDir, st as styles, t as defineApplication, tt as Condition_Operator, u as stringifyFunction, v as fetchAll, w as resolveStaticWebsiteUrls, y as fetchMachineUserToken, z as ExecutorJobStatus } from "./application-A6PZjujv.mjs";
-import { t as readPackageJson } from "./package-json-DUY2kB6z.mjs";
-import { r as withSpan } from "./telemetry-rFq0QdvJ.mjs";
+import { $ as TenantProviderConfig_TenantProviderType, A as WorkflowJobExecution_Status, D as userAgent, E as resolveStaticWebsiteUrls, F as TailorDBType_Permission_Permit, G as AuthInvokerSchema, H as ExecutorTargetType, I as TailorDBType_PermitAction, J as AuthSCIMAttribute_Mutability, K as AuthOAuth2Client_ClientType, L as PipelineResolver_OperationType, M as TailorDBGQLPermission_Operator, N as TailorDBGQLPermission_Permit, O as WorkspacePlatformUserRole, P as TailorDBType_Permission_Operator, R as IdPLang, T as platformBaseUrl, U as ExecutorTriggerType, V as ExecutorJobStatus, W as AuthIDPConfig_AuthType, X as AuthSCIMAttribute_Uniqueness, Y as AuthSCIMAttribute_Type, Z as AuthSCIMConfig_AuthorizationType, _ as loadWorkspaceId, a as buildExecutorArgsExpr, at as PageDirection, b as fetchAll, c as OAuth2ClientSchema, ct as logger, d as getDistDir, et as UserProfileProviderConfig_UserProfileProviderType, f as hashFile, g as loadOrganizationId, h as loadFolderId, i as loadConfig, it as FilterSchema, j as TailorDBGQLPermission_Action, k as WorkflowExecution_Status, l as stringifyFunction, lt as styles, m as loadAccessToken, n as generatePluginFilesIfNeeded, nt as ConditionSchema, o as buildResolverOperationHookExpr, ot as ApplicationSchemaUpdateAttemptStatus, q as AuthOAuth2Client_GrantType, r as loadApplication, rt as Condition_Operator, s as createExecutorService, st as Subgraph_ServiceType, t as defineApplication, tt as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, u as createBundleCache, ut as symbols, v as readPlatformConfig, w as initOperatorClient, x as fetchMachineUserToken, y as writePlatformConfig, z as FunctionExecution_Status } from "./application-Bli2ieqY.mjs";
+import { t as readPackageJson } from "./package-json-3H5gfhA4.mjs";
+import { r as withSpan } from "./telemetry-DuBhnd0X.mjs";
 import { createRequire } from "node:module";
 import { arg, defineCommand, runCommand } from "politty";
 import { z } from "zod";
@@ -14,20 +14,21 @@ import { getBorderCharacters, table } from "table";
 import { ValueSchema, timestampDate } from "@bufbuild/protobuf/wkt";
 import { Code, ConnectError } from "@connectrpc/connect";
 import { resolveTSConfig } from "pkg-types";
+import { findUpSync } from "find-up-simple";
 import ml from "multiline-ts";
+import * as crypto from "node:crypto";
 import * as inflection from "inflection";
 import * as fs$1 from "node:fs/promises";
 import { glob } from "node:fs/promises";
 import * as rolldown from "rolldown";
 import { create, fromJson, toJson } from "@bufbuild/protobuf";
-import * as crypto from "node:crypto";
 import ora from "ora";
 import { setTimeout as setTimeout$1 } from "timers/promises";
 import { spawn } from "node:child_process";
 import { watch } from "chokidar";
 import * as madgeModule from "madge";
 
-//#region src/cli/utils/errors.ts
+//#region src/cli/shared/errors.ts
 /**
 * Type guard to check if an error is a CLIError
 * @param error - Error to check
@@ -38,7 +39,7 @@ function isCLIError(error) {
 }
 
 //#endregion
-//#region src/cli/args.ts
+//#region src/cli/shared/args.ts
 const unitToMs = {
 	ms: 1,
 	s: 1e3,
@@ -161,7 +162,7 @@ const withCommonArgs = (handler) => async (args) => {
 	try {
 		if ("json" in args && typeof args.json === "boolean") logger.jsonMode = args.json;
 		loadEnvFiles(args["env-file"], args["env-file-if-exists"]);
-		const { initTelemetry } = await import("./telemetry-9A1BZqbl.mjs");
+		const { initTelemetry } = await import("./telemetry-Dhzj9Ncm.mjs");
 		await initTelemetry();
 		await handler(args);
 	} catch (error) {
@@ -174,14 +175,14 @@ const withCommonArgs = (handler) => async (args) => {
 		} else logger.error(`Unknown error: ${error}`);
 		process.exit(1);
 	} finally {
-		const { shutdownTelemetry } = await import("./telemetry-9A1BZqbl.mjs");
+		const { shutdownTelemetry } = await import("./telemetry-Dhzj9Ncm.mjs");
 		await shutdownTelemetry();
 	}
 	process.exit(0);
 };
 
 //#endregion
-//#region src/cli/api.ts
+//#region src/cli/commands/api.ts
 /**
 * Call Tailor Platform API endpoints directly.
 * If the endpoint doesn't contain "/", it defaults to `tailor.v1.OperatorService/{endpoint}`.
@@ -241,7 +242,190 @@ const apiCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/type-generator.ts
+//#region src/cli/cache/types.ts
+const cacheOutputFileSchema = z.object({
+	outputPath: z.string(),
+	contentHash: z.string()
+});
+const cacheEntrySchema = z.object({
+	kind: z.literal("bundle"),
+	inputHash: z.string(),
+	dependencyPaths: z.array(z.string()),
+	outputFiles: z.array(cacheOutputFileSchema),
+	createdAt: z.string()
+});
+const cacheManifestSchema = z.object({
+	version: z.literal(1),
+	sdkVersion: z.string(),
+	lockfileHash: z.string().optional(),
+	entries: z.record(z.string(), cacheEntrySchema)
+});
+
+//#endregion
+//#region src/cli/cache/store.ts
+const MANIFEST_FILENAME = "manifest.json";
+const BUNDLES_DIR = "bundles";
+/**
+* Create a cache store for manifest persistence and bundle output storage.
+* @param config - Cache configuration specifying the cache directory
+* @returns A CacheStore instance
+*/
+function createCacheStore(config) {
+	let cachedManifest = null;
+	function manifestPath() {
+		return path.join(config.cacheDir, MANIFEST_FILENAME);
+	}
+	function bundlesDir() {
+		return path.join(config.cacheDir, BUNDLES_DIR);
+	}
+	function bundlePath(cacheKey) {
+		return path.join(bundlesDir(), `${cacheKey.replaceAll(":", "_")}.js`);
+	}
+	function loadManifest() {
+		try {
+			const raw = fs$2.readFileSync(manifestPath(), "utf-8");
+			const result = cacheManifestSchema.safeParse(JSON.parse(raw));
+			if (!result.success) {
+				cachedManifest = void 0;
+				return;
+			}
+			cachedManifest = result.data;
+			return cachedManifest;
+		} catch {
+			cachedManifest = void 0;
+			return;
+		}
+	}
+	function getCurrentManifest() {
+		if (cachedManifest === null) loadManifest();
+		return cachedManifest ?? void 0;
+	}
+	function ensureManifestLoaded() {
+		if (cachedManifest === null) loadManifest();
+		if (cachedManifest == null) cachedManifest = {
+			version: 1,
+			sdkVersion: "",
+			entries: {}
+		};
+		return cachedManifest;
+	}
+	function saveManifest(manifest) {
+		fs$2.mkdirSync(config.cacheDir, { recursive: true });
+		const target = manifestPath();
+		const tmpFile = path.join(config.cacheDir, `.manifest.${process.pid}.tmp`);
+		try {
+			fs$2.writeFileSync(tmpFile, JSON.stringify(manifest, null, 2), "utf-8");
+			fs$2.renameSync(tmpFile, target);
+		} catch (e) {
+			try {
+				fs$2.rmSync(tmpFile, { force: true });
+			} catch {}
+			throw e;
+		}
+		cachedManifest = manifest;
+	}
+	function getEntry(key) {
+		return ensureManifestLoaded().entries[key];
+	}
+	function setEntry(key, entry) {
+		const manifest = ensureManifestLoaded();
+		manifest.entries[key] = entry;
+	}
+	function deleteEntry(key) {
+		const manifest = ensureManifestLoaded();
+		delete manifest.entries[key];
+	}
+	function storeBundleOutput(cacheKey, sourcePath) {
+		const dir = bundlesDir();
+		fs$2.mkdirSync(dir, { recursive: true });
+		fs$2.copyFileSync(sourcePath, bundlePath(cacheKey));
+		const mapSource = `${sourcePath}.map`;
+		const cachedMapPath = `${bundlePath(cacheKey)}.map`;
+		if (fs$2.existsSync(mapSource)) fs$2.copyFileSync(mapSource, cachedMapPath);
+		else fs$2.rmSync(cachedMapPath, { force: true });
+	}
+	function restoreBundleOutput(cacheKey, targetPath) {
+		const cached = bundlePath(cacheKey);
+		const targetDir = path.dirname(targetPath);
+		fs$2.mkdirSync(targetDir, { recursive: true });
+		try {
+			fs$2.copyFileSync(cached, targetPath);
+		} catch (e) {
+			if (e.code === "ENOENT") return false;
+			throw e;
+		}
+		const cachedMap = `${cached}.map`;
+		if (fs$2.existsSync(cachedMap)) fs$2.copyFileSync(cachedMap, `${targetPath}.map`);
+		return true;
+	}
+	function clean() {
+		fs$2.rmSync(config.cacheDir, {
+			recursive: true,
+			force: true
+		});
+		cachedManifest = null;
+	}
+	return {
+		loadManifest,
+		getCurrentManifest,
+		saveManifest,
+		getEntry,
+		setEntry,
+		deleteEntry,
+		storeBundleOutput,
+		restoreBundleOutput,
+		clean
+	};
+}
+
+//#endregion
+//#region src/cli/cache/manager.ts
+/**
+* Create a CacheManager that orchestrates cache operations.
+* @param options - Configuration for the cache manager
+* @returns A CacheManager instance
+*/
+function createCacheManager(options) {
+	if (!(options.enabled ?? true)) return {
+		enabled: false,
+		bundleCache: {
+			tryRestore() {
+				return false;
+			},
+			save() {}
+		},
+		finalize() {}
+	};
+	const store = createCacheStore({ cacheDir: options.cacheDir ?? path.resolve(getDistDir(), "cache") });
+	const existingManifest = store.loadManifest();
+	if (existingManifest) {
+		if (existingManifest.sdkVersion !== options.sdkVersion) {
+			logger.debug(`Cache invalidated: SDK version changed from ${existingManifest.sdkVersion} to ${options.sdkVersion}`);
+			store.clean();
+		} else if (existingManifest.lockfileHash !== options.lockfileHash) {
+			logger.debug("Cache invalidated: lockfile changed");
+			store.clean();
+		}
+	}
+	return {
+		enabled: true,
+		bundleCache: createBundleCache(store),
+		finalize() {
+			const manifest = store.getCurrentManifest() ?? {
+				version: 1,
+				sdkVersion: options.sdkVersion,
+				lockfileHash: options.lockfileHash,
+				entries: {}
+			};
+			manifest.sdkVersion = options.sdkVersion;
+			manifest.lockfileHash = options.lockfileHash;
+			store.saveManifest(manifest);
+		}
+	};
+}
+
+//#endregion
+//#region src/cli/shared/type-generator.ts
 /**
 * Extract attribute definitions from the app config for user-defined typing.
 * @param config - Application config to inspect
@@ -696,38 +880,7 @@ function copyMetadataToExtendedType(original, extended) {
 }
 
 //#endregion
-//#region src/cli/apply/services/label.ts
-/**
-* Build TRN prefix for a workspace.
-* @param workspaceId - Workspace ID
-* @returns TRN prefix string
-*/
-function trnPrefix(workspaceId) {
-	return `trn:v1:workspace:${workspaceId}`;
-}
-const sdkNameLabelKey = "sdk-name";
-/**
-* Build metadata request with SDK labels.
-* @param trn - Target TRN
-* @param appName - Application name label
-* @param existingLabels - Existing labels to preserve (optional)
-* @returns Metadata request
-*/
-async function buildMetaRequest(trn$7, appName, existingLabels) {
-	const packageJson = await readPackageJson();
-	const sdkVersion = packageJson.version ? `v${packageJson.version.replace(/\./g, "-")}` : "unknown";
-	return {
-		trn: trn$7,
-		labels: {
-			...existingLabels ?? {},
-			[sdkNameLabelKey]: appName,
-			"sdk-version": sdkVersion
-		}
-	};
-}
-
-//#endregion
-//#region src/cli/apply/services/index.ts
+//#region src/cli/commands/apply/change-set.ts
 /**
 * Create a new ChangeSet for tracking resource changes.
 * @param title - Title for the change set
@@ -758,7 +911,38 @@ function createChangeSet(title) {
 }
 
 //#endregion
-//#region src/cli/apply/services/application.ts
+//#region src/cli/commands/apply/label.ts
+/**
+* Build TRN prefix for a workspace.
+* @param workspaceId - Workspace ID
+* @returns TRN prefix string
+*/
+function trnPrefix(workspaceId) {
+	return `trn:v1:workspace:${workspaceId}`;
+}
+const sdkNameLabelKey = "sdk-name";
+/**
+* Build metadata request with SDK labels.
+* @param trn - Target TRN
+* @param appName - Application name label
+* @param existingLabels - Existing labels to preserve (optional)
+* @returns Metadata request
+*/
+async function buildMetaRequest(trn$7, appName, existingLabels) {
+	const packageJson = await readPackageJson();
+	const sdkVersion = packageJson.version ? `v${packageJson.version.replace(/\./g, "-")}` : "unknown";
+	return {
+		trn: trn$7,
+		labels: {
+			...existingLabels ?? {},
+			[sdkNameLabelKey]: appName,
+			"sdk-version": sdkVersion
+		}
+	};
+}
+
+//#endregion
+//#region src/cli/commands/apply/application.ts
 /**
 * Apply application changes for the given phase.
 * @param client - Operator client instance
@@ -895,7 +1079,7 @@ function protoSubgraph(subgraph) {
 }
 
 //#endregion
-//#region src/cli/apply/services/idp.ts
+//#region src/cli/commands/apply/idp.ts
 /**
 * Build the vault name for an IdP client.
 * @param namespaceName - IdP namespace name
@@ -1066,7 +1250,8 @@ async function planServices$3(client, workspaceId, appName, idps) {
 					authorization,
 					lang,
 					userAuthPolicy,
-					publishUserEvents: idp.publishUserEvents
+					publishUserEvents: idp.publishUserEvents,
+					disableGqlOperations: convertGqlOperationsToDisable(idp.gqlOperations)
 				},
 				metaRequest
 			});
@@ -1079,7 +1264,8 @@ async function planServices$3(client, workspaceId, appName, idps) {
 				authorization,
 				lang,
 				userAuthPolicy,
-				publishUserEvents: idp.publishUserEvents
+				publishUserEvents: idp.publishUserEvents,
+				disableGqlOperations: convertGqlOperationsToDisable(idp.gqlOperations)
 			},
 			metaRequest
 		});
@@ -1179,9 +1365,19 @@ function convertLang(lang) {
 		default: return IdPLang.UNSPECIFIED;
 	}
 }
+function convertGqlOperationsToDisable(gqlOperations) {
+	if (!gqlOperations) return;
+	return {
+		create: gqlOperations.create === false,
+		update: gqlOperations.update === false,
+		delete: gqlOperations.delete === false,
+		read: gqlOperations.read === false,
+		sendPasswordResetEmail: gqlOperations.sendPasswordResetEmail === false
+	};
+}
 
 //#endregion
-//#region src/cli/apply/services/auth.ts
+//#region src/cli/commands/apply/auth.ts
 /**
 * Apply auth-related changes for the given phase.
 * @param client - Operator client instance
@@ -2072,7 +2268,7 @@ function protoSCIMAttribute(attr) {
 }
 
 //#endregion
-//#region src/cli/apply/services/confirm.ts
+//#region src/cli/commands/apply/confirm.ts
 /**
 * Confirm reassignment of resources when owner conflicts are detected.
 * @param conflicts - Detected owner conflicts
@@ -2157,7 +2353,7 @@ async function confirmImportantResourceDeletion(resources, yes) {
 }
 
 //#endregion
-//#region src/cli/apply/services/function-registry.ts
+//#region src/cli/commands/apply/function-registry.ts
 const CHUNK_SIZE = 64 * 1024;
 /**
 * Compute SHA-256 content hash for a script string.
@@ -2399,7 +2595,7 @@ async function applyFunctionRegistry(client, workspaceId, result, phase = "creat
 }
 
 //#endregion
-//#region src/cli/apply/services/executor.ts
+//#region src/cli/commands/apply/executor.ts
 /**
 * Apply executor-related changes for the given phase.
 * @param client - Operator client instance
@@ -2658,7 +2854,7 @@ function protoExecutor(appName, executor, env) {
 }
 
 //#endregion
-//#region src/cli/apply/services/resolver.ts
+//#region src/cli/commands/apply/resolver.ts
 const SCALAR_TYPE_MAP = {
 	uuid: {
 		kind: "ScalarType",
@@ -2952,7 +3148,7 @@ function protoFields(fields, baseName, isInput) {
 }
 
 //#endregion
-//#region src/cli/apply/services/staticwebsite.ts
+//#region src/cli/commands/apply/staticwebsite.ts
 /**
 * Apply static website changes for the given phase.
 * @param client - Operator client instance
@@ -3069,7 +3265,7 @@ async function planStaticWebsite(context) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/config.ts
+//#region src/cli/commands/tailordb/migrate/config.ts
 /**
 * Migration configuration utilities
 */
@@ -3102,7 +3298,7 @@ function getNamespacesWithMigrations(config, configDir) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/diff-calculator.ts
+//#region src/cli/commands/tailordb/migrate/diff-calculator.ts
 /**
 * Current schema snapshot format version
 */
@@ -3260,7 +3456,7 @@ function formatDiffSummary(diff) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/snapshot.ts
+//#region src/cli/commands/tailordb/migrate/snapshot.ts
 /**
 * Schema snapshot management for TailorDB migrations
 */
@@ -4350,7 +4546,7 @@ function formatSchemaDrifts(drifts) {
 }
 
 //#endregion
-//#region src/cli/bundler/migration/migration-bundler.ts
+//#region src/cli/commands/tailordb/migrate/bundler.ts
 /**
 * Migration script bundler for TailorDB migrations
 *
@@ -4428,7 +4624,7 @@ async function bundleMigrationScript(sourceFile, namespace, migrationNumber) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/types.ts
+//#region src/cli/commands/tailordb/migrate/types.ts
 /**
 * Prefix added to migration numbers in labels (required because migration names start with numbers)
 */
@@ -4450,7 +4646,7 @@ function parseMigrationLabelNumber(label) {
 }
 
 //#endregion
-//#region src/cli/utils/script-executor.ts
+//#region src/cli/shared/script-executor.ts
 /**
 * Script execution service for TestExecScript API
 *
@@ -4525,7 +4721,7 @@ async function executeScript(options) {
 }
 
 //#endregion
-//#region src/cli/apply/services/tailordb/migration.ts
+//#region src/cli/commands/apply/tailordb/migration.ts
 /**
 * Migration execution service for TailorDB migrations
 *
@@ -4703,7 +4899,7 @@ function groupMigrationsByNamespace(migrations) {
 }
 
 //#endregion
-//#region src/cli/apply/services/tailordb/index.ts
+//#region src/cli/commands/apply/tailordb/index.ts
 /**
 * Fetch all TailorDB types from remote for a namespace
 * @param {OperatorClient} client - Operator client instance
@@ -5811,7 +6007,7 @@ function formatMigrationCheckResults(results) {
 }
 
 //#endregion
-//#region src/cli/apply/services/workflow.ts
+//#region src/cli/commands/apply/workflow.ts
 /**
 * Apply workflow changes for the given phase.
 * @param client - Operator client instance
@@ -6001,7 +6197,7 @@ async function planWorkflow(client, workspaceId, appName, workflows, mainJobDeps
 }
 
 //#endregion
-//#region src/cli/apply/index.ts
+//#region src/cli/commands/apply/apply.ts
 /**
 * Apply the configured application to the Tailor platform.
 * @param options - Options for apply execution
@@ -6014,16 +6210,43 @@ async function apply(options) {
 			const { config: config$1, plugins } = await withSpan("build.loadConfig", () => loadConfig(options?.configPath));
 			const dryRun$1 = options?.dryRun ?? false;
 			const buildOnly$1 = options?.buildOnly ?? process.env.TAILOR_PLATFORM_SDK_BUILD_ONLY === "true";
+			const noCache = options?.noCache ?? false;
+			const packageJson = await readPackageJson();
+			const cacheDir = path.resolve(getDistDir(), "cache");
+			if (options?.cleanCache) {
+				fs$2.rmSync(cacheDir, {
+					recursive: true,
+					force: true
+				});
+				logger.info("Bundle cache cleaned");
+			}
+			const configDir = path.dirname(config$1.path);
+			const lockfilePath = findUpSync("pnpm-lock.yaml", { cwd: configDir }) ?? findUpSync("package-lock.json", { cwd: configDir }) ?? findUpSync("yarn.lock", { cwd: configDir }) ?? findUpSync("bun.lock", { cwd: configDir });
+			const cacheManager = createCacheManager({
+				enabled: !noCache,
+				cacheDir,
+				sdkVersion: packageJson.version ?? "unknown",
+				lockfileHash: lockfilePath ? hashFile(lockfilePath) : void 0
+			});
 			let pluginManager;
 			if (plugins.length > 0) pluginManager = new PluginManager(plugins);
 			await withSpan("build.generateUserTypes", () => generateUserTypes({
 				config: config$1,
 				configPath: config$1.path
 			}));
-			const { application: application$1, workflowBuildResult: workflowBuildResult$1 } = await withSpan("build.loadApplication", () => loadApplication({
-				config: config$1,
-				pluginManager
-			}));
+			let application$1;
+			let workflowBuildResult$1;
+			try {
+				const result = await withSpan("build.loadApplication", () => loadApplication({
+					config: config$1,
+					pluginManager,
+					bundleCache: cacheManager.bundleCache
+				}));
+				application$1 = result.application;
+				workflowBuildResult$1 = result.workflowBuildResult;
+			} finally {
+				cacheManager.finalize();
+			}
 			return {
 				config: config$1,
 				plugins,
@@ -6177,33 +6400,9 @@ async function apply(options) {
 		logger.success("Successfully applied changes.");
 	});
 }
-const applyCommand = defineCommand({
-	name: "apply",
-	description: "Apply Tailor configuration to deploy your application.",
-	args: z.object({
-		...commonArgs,
-		...deploymentArgs,
-		...confirmationArgs,
-		"dry-run": arg(z.boolean().optional(), {
-			alias: "d",
-			description: "Run the command without making any changes"
-		}),
-		"no-schema-check": arg(z.boolean().optional(), { description: "Skip schema diff check against migration snapshots" })
-	}),
-	run: withCommonArgs(async (args) => {
-		await apply({
-			workspaceId: args["workspace-id"],
-			profile: args.profile,
-			configPath: args.config,
-			dryRun: args["dry-run"],
-			yes: args.yes,
-			noSchemaCheck: args["no-schema-check"]
-		});
-	})
-});
 
 //#endregion
-//#region src/cli/executor/status.ts
+//#region src/cli/commands/executor/status.ts
 /**
 * Colorize executor job status string.
 * @param status - Executor job status string
@@ -6293,7 +6492,7 @@ function executorTriggerTypeToString(triggerType) {
 }
 
 //#endregion
-//#region src/cli/executor/transform.ts
+//#region src/cli/commands/executor/transform.ts
 function executorJobStatusToString(status) {
 	switch (status) {
 		case ExecutorJobStatus.PENDING: return "PENDING";
@@ -6460,7 +6659,7 @@ function toExecutorInfo(executor) {
 }
 
 //#endregion
-//#region src/cli/executor/get.ts
+//#region src/cli/commands/executor/get.ts
 const nameArgs$1 = { name: arg(z.string(), {
 	positional: true,
 	description: "Executor name"
@@ -6520,7 +6719,7 @@ const getCommand$3 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/utils/format.ts
+//#region src/cli/shared/format.ts
 /**
 * Format a protobuf Timestamp to ISO string.
 * @param timestamp - Protobuf timestamp
@@ -6566,7 +6765,7 @@ function humanizeRelativeTime(value) {
 }
 
 //#endregion
-//#region src/cli/utils/function-execution.ts
+//#region src/cli/shared/function-execution.ts
 /**
 * Convert function execution status enum to string.
 * @param status - Function execution status enum value
@@ -6582,7 +6781,7 @@ function functionExecutionStatusToString(status) {
 }
 
 //#endregion
-//#region src/cli/workflow/args.ts
+//#region src/cli/commands/workflow/args.ts
 const nameArgs = { name: arg(z.string(), {
 	positional: true,
 	description: "Workflow name"
@@ -6603,7 +6802,7 @@ const waitArgs = {
 };
 
 //#endregion
-//#region src/cli/workflow/status.ts
+//#region src/cli/commands/workflow/status.ts
 /**
 * Check if workflow execution status is terminal.
 * @param status - Workflow execution status enum value
@@ -6614,7 +6813,7 @@ function isWorkflowExecutionTerminalStatus(status) {
 }
 
 //#endregion
-//#region src/cli/workflow/transform.ts
+//#region src/cli/commands/workflow/transform.ts
 /**
 * Convert a workflow execution status enum to a string.
 * @param status - Workflow execution status
@@ -6706,7 +6905,7 @@ function toWorkflowExecutionInfo(execution) {
 }
 
 //#endregion
-//#region src/cli/workflow/executions.ts
+//#region src/cli/commands/workflow/executions.ts
 function sleep$1(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -6951,7 +7150,7 @@ const executionsCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workflow/get.ts
+//#region src/cli/commands/workflow/get.ts
 /**
 * Resolve a workflow definition by name.
 * @param client - Operator client
@@ -7004,7 +7203,7 @@ const getCommand$2 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workflow/start.ts
+//#region src/cli/commands/workflow/start.ts
 function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -7206,7 +7405,7 @@ const startCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/executor/jobs.ts
+//#region src/cli/commands/executor/jobs.ts
 function formatTime(date) {
 	return date.toLocaleTimeString("en-US", { hour12: false });
 }
@@ -7585,7 +7784,7 @@ const jobsCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/executor/list.ts
+//#region src/cli/commands/executor/list.ts
 /**
 * List executors in the workspace and return CLI-friendly info.
 * @param options - Executor listing options
@@ -7634,7 +7833,7 @@ const listCommand$6 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/executor/trigger.ts
+//#region src/cli/commands/executor/trigger.ts
 /**
 * Schema for JSON string validation (object only)
 * Transforms the string to a parsed object
@@ -7847,7 +8046,7 @@ The \`--logs\` option displays logs from the downstream execution when available
 });
 
 //#endregion
-//#region src/cli/executor/webhook.ts
+//#region src/cli/commands/executor/webhook.ts
 /**
 * Build the webhook URL for an executor.
 * @param workspaceId - Workspace ID
@@ -7915,7 +8114,7 @@ const webhookCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/generator/types.ts
+//#region src/cli/commands/generate/types.ts
 /**
 * Type guard to check if a generator has a specific dependency.
 * @template D
@@ -7928,7 +8127,7 @@ function hasDependency(generator, dependency) {
 }
 
 //#endregion
-//#region src/cli/generator/watch/index.ts
+//#region src/cli/commands/generate/watch/index.ts
 /**
 * Error codes.
 */
@@ -8306,7 +8505,7 @@ function createDependencyWatcher(options = {}) {
 }
 
 //#endregion
-//#region src/cli/generator/index.ts
+//#region src/cli/commands/generate/service.ts
 /**
 * Creates a generation manager.
 * @param params - Parameters for creating the generation manager
@@ -8752,30 +8951,9 @@ async function generate$1(options) {
 	await manager.generate(watch$1);
 	if (watch$1) await manager.watch();
 }
-const generateCommand$1 = defineCommand({
-	name: "generate",
-	description: "Generate files using Tailor configuration.",
-	args: z.object({
-		...commonArgs,
-		config: arg(z.string().default("tailor.config.ts"), {
-			alias: "c",
-			description: "Path to SDK config file"
-		}),
-		watch: arg(z.boolean().default(false), {
-			alias: "W",
-			description: "Watch for type/resolver changes and regenerate"
-		})
-	}),
-	run: withCommonArgs(async (args) => {
-		await generate$1({
-			configPath: args.config,
-			watch: args.watch
-		});
-	})
-});
 
 //#endregion
-//#region src/cli/machineuser/list.ts
+//#region src/cli/commands/machineuser/list.ts
 /**
 * Map a MachineUser protobuf message to CLI-friendly info.
 * @param user - Machine user resource
@@ -8843,7 +9021,7 @@ const listCommand$5 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/machineuser/token.ts
+//#region src/cli/commands/machineuser/token.ts
 /**
 * Get a machine user access token for the current application.
 * @param options - Token retrieval options
@@ -8908,7 +9086,7 @@ const tokenCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/oauth2client/transform.ts
+//#region src/cli/commands/oauth2client/transform.ts
 const grantTypeToString = (grantType) => {
 	switch (grantType) {
 		case AuthOAuth2Client_GrantType.AUTHORIZATION_CODE: return "authorization_code";
@@ -8949,7 +9127,7 @@ function toOAuth2ClientCredentials(client) {
 }
 
 //#endregion
-//#region src/cli/oauth2client/get.ts
+//#region src/cli/commands/oauth2client/get.ts
 /**
 * Get OAuth2 client credentials for the current application.
 * @param options - OAuth2 client lookup options
@@ -9006,7 +9184,7 @@ const getCommand$1 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/oauth2client/list.ts
+//#region src/cli/commands/oauth2client/list.ts
 /**
 * List OAuth2 clients for the current application.
 * @param options - OAuth2 client listing options
@@ -9056,7 +9234,7 @@ const listCommand$4 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/remove.ts
+//#region src/cli/commands/remove.ts
 async function loadOptions$9(options) {
 	const client = await initOperatorClient(await loadAccessToken({
 		useProfile: true,
@@ -9148,7 +9326,7 @@ const removeCommand$1 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/show.ts
+//#region src/cli/commands/show.ts
 function applicationInfo(app) {
 	return {
 		name: app.name,
@@ -9209,7 +9387,7 @@ const showCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/utils/beta.ts
+//#region src/cli/shared/beta.ts
 /**
 * Warn that a feature is in beta.
 * @param {string} featureName - Name of the beta feature (e.g., "tailordb erd", "tailordb migration")
@@ -9220,7 +9398,7 @@ function logBetaWarning(featureName) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/db-types-generator.ts
+//#region src/cli/commands/tailordb/migrate/db-types-generator.ts
 /**
 * DB types generator for TailorDB migrations
 *
@@ -9463,7 +9641,7 @@ async function writeDbTypesFile(snapshot, migrationsDir, migrationNumber, diff)
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/template-generator.ts
+//#region src/cli/commands/tailordb/migrate/template-generator.ts
 /**
 * Template generator for TailorDB migrations
 *
@@ -9663,7 +9841,7 @@ function generateChangeScript(change) {
 }
 
 //#endregion
-//#region src/cli/tailordb/migrate/generate.ts
+//#region src/cli/commands/tailordb/migrate/generate.ts
 /**
 * Generate command for TailorDB migrations
 *
@@ -9728,7 +9906,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication: defineApplication$1 } = await import("./application-nPS5veK6.mjs");
+	const { defineApplication: defineApplication$1 } = await import("./application-CZdieD3K.mjs");
 	const application = defineApplication$1({
 		config,
 		pluginManager
@@ -9885,7 +10063,7 @@ const generateCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/tailordb/truncate.ts
+//#region src/cli/commands/tailordb/truncate.ts
 async function truncateSingleType(options, client) {
 	await client.truncateTailorDBType({
 		workspaceId: options.workspaceId,
@@ -10051,7 +10229,7 @@ const truncateCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workflow/list.ts
+//#region src/cli/commands/workflow/list.ts
 /**
 * List workflows in the workspace and return CLI-friendly info.
 * @param options - Workflow listing options
@@ -10097,7 +10275,7 @@ const listCommand$3 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workflow/resume.ts
+//#region src/cli/commands/workflow/resume.ts
 /**
 * Resume a suspended workflow execution and return a handle to wait for completion.
 * @param options - Resume options
@@ -10172,7 +10350,7 @@ const resumeCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/app/transform.ts
+//#region src/cli/commands/workspace/app/transform.ts
 const statusToString = (status) => {
 	switch (status) {
 		case GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus.OK: return "ok";
@@ -10209,7 +10387,7 @@ const appHealthInfo = (name, health) => {
 };
 
 //#endregion
-//#region src/cli/workspace/app/health.ts
+//#region src/cli/commands/workspace/app/health.ts
 const healthOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10267,7 +10445,7 @@ const healthCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/app/list.ts
+//#region src/cli/commands/workspace/app/list.ts
 const listAppsOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10339,7 +10517,7 @@ const listCommand$2 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/transform.ts
+//#region src/cli/commands/workspace/transform.ts
 const workspaceInfo = (workspace) => {
 	return {
 		id: workspace.id,
@@ -10359,7 +10537,7 @@ const workspaceDetails = (workspace) => {
 };
 
 //#endregion
-//#region src/cli/workspace/create.ts
+//#region src/cli/commands/workspace/create.ts
 /**
 * Schema for workspace creation options
 * - name: 3-63 chars, lowercase alphanumeric and hyphens, cannot start/end with hyphen
@@ -10474,7 +10652,7 @@ const createCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/delete.ts
+//#region src/cli/commands/workspace/delete.ts
 const deleteWorkspaceOptionsSchema = z.object({ workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }) });
 async function loadOptions$6(options) {
 	const result = deleteWorkspaceOptionsSchema.safeParse(options);
@@ -10531,7 +10709,7 @@ const deleteCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/get.ts
+//#region src/cli/commands/workspace/get.ts
 const getWorkspaceOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional()
@@ -10581,7 +10759,7 @@ const getCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/list.ts
+//#region src/cli/commands/workspace/list.ts
 /**
 * List workspaces with an optional limit.
 * @param options - Workspace listing options
@@ -10627,7 +10805,7 @@ const listCommand$1 = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/restore.ts
+//#region src/cli/commands/workspace/restore.ts
 const restoreWorkspaceOptionsSchema = z.object({ workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }) });
 async function loadOptions$4(options) {
 	const result = restoreWorkspaceOptionsSchema.safeParse(options);
@@ -10671,7 +10849,7 @@ const restoreCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/user/transform.ts
+//#region src/cli/commands/workspace/user/transform.ts
 const roleToString = (role) => {
 	switch (role) {
 		case WorkspacePlatformUserRole.ADMIN: return "admin";
@@ -10702,7 +10880,7 @@ const validRoles = [
 ];
 
 //#endregion
-//#region src/cli/workspace/user/invite.ts
+//#region src/cli/commands/workspace/user/invite.ts
 const inviteUserOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10759,7 +10937,7 @@ const inviteCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/user/list.ts
+//#region src/cli/commands/workspace/user/list.ts
 const listUsersOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10827,7 +11005,7 @@ const listCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/user/remove.ts
+//#region src/cli/commands/workspace/user/remove.ts
 const removeUserOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10883,7 +11061,7 @@ const removeCommand = defineCommand({
 });
 
 //#endregion
-//#region src/cli/workspace/user/update.ts
+//#region src/cli/commands/workspace/user/update.ts
 const updateUserOptionsSchema = z.object({
 	workspaceId: z.uuid({ message: "workspace-id must be a valid UUID" }).optional(),
 	profile: z.string().optional(),
@@ -10940,5 +11118,5 @@ const updateCommand = defineCommand({
 });
 
 //#endregion
-export { jobsCommand as $, generateCommand as A, getMigrationDirPath as At, getMachineUserToken as B, getNamespacesWithMigrations as Bt, resumeCommand as C, MIGRATE_FILE_NAME as Ct, truncate as D, createSnapshotFromLocalTypes as Dt, listWorkflows as E, compareSnapshots as Et, removeCommand$1 as F, loadDiff as Ft, generateCommand$1 as G, commonArgs as Gt, listCommand$5 as H, generateUserTypes as Ht, listCommand$4 as I, reconstructSnapshotFromMigrations as It, triggerCommand as J, jsonArgs as Jt, listWebhookExecutors as K, confirmationArgs as Kt, listOAuth2Clients as L, formatDiffSummary as Lt, show as M, getMigrationFiles as Mt, showCommand as N, getNextMigrationNumber as Nt, truncateCommand as O, formatMigrationNumber as Ot, remove as P, isValidMigrationNumber as Pt, getExecutorJob as Q, getCommand$1 as R, formatMigrationDiff as Rt, healthCommand as S, INITIAL_SCHEMA_NUMBER as St, listCommand$3 as T, compareLocalTypesWithSnapshot as Tt, listMachineUsers as U, apiCall as Ut, tokenCommand as V, trnPrefix as Vt, generate$1 as W, apiCommand as Wt, listCommand$6 as X, workspaceArgs as Xt, triggerExecutor as Y, withCommonArgs as Yt, listExecutors as Z, createCommand as _, MIGRATION_LABEL_KEY as _t, listCommand as a, getWorkflow as at, listCommand$2 as b, DB_TYPES_FILE_NAME as bt, inviteUser as c, listWorkflowExecutions as ct, listCommand$1 as d, getCommand$3 as dt, listExecutorJobs as et, listWorkspaces as f, getExecutor as ft, deleteWorkspace as g, waitForExecution$1 as gt, deleteCommand as h, executeScript as ht, removeUser as i, getCommand$2 as it, logBetaWarning as j, getMigrationFilePath as jt, generate as k, getLatestMigrationNumber as kt, restoreCommand as l, functionExecutionStatusToString as lt, getWorkspace as m, applyCommand as mt, updateUser as n, startCommand as nt, listUsers as o, executionsCommand as ot, getCommand as p, apply as pt, webhookCommand as q, deploymentArgs as qt, removeCommand as r, startWorkflow as rt, inviteCommand as s, getWorkflowExecution as st, updateCommand as t, watchExecutorJob as tt, restoreWorkspace as u, formatKeyValueTable as ut, createWorkspace as v, parseMigrationLabelNumber as vt, resumeWorkflow as w, SCHEMA_FILE_NAME as wt, getAppHealth as x, DIFF_FILE_NAME as xt, listApps as y, bundleMigrationScript as yt, getOAuth2Client as z, hasChanges as zt };
-//# sourceMappingURL=update-Cr5c7h1r.mjs.map
+export { listExecutorJobs as $, generateCommand as A, getMigrationFiles as At, getMachineUserToken as B, generateUserTypes as Bt, resumeCommand as C, compareLocalTypesWithSnapshot as Ct, truncate as D, getLatestMigrationNumber as Dt, listWorkflows as E, formatMigrationNumber as Et, removeCommand$1 as F, formatDiffSummary as Ft, listWebhookExecutors as G, deploymentArgs as Gt, listCommand$5 as H, apiCommand as Ht, listCommand$4 as I, formatMigrationDiff as It, triggerExecutor as J, workspaceArgs as Jt, webhookCommand as K, jsonArgs as Kt, listOAuth2Clients as L, hasChanges as Lt, show as M, isValidMigrationNumber as Mt, showCommand as N, loadDiff as Nt, truncateCommand as O, getMigrationDirPath as Ot, remove as P, reconstructSnapshotFromMigrations as Pt, jobsCommand as Q, getCommand$1 as R, getNamespacesWithMigrations as Rt, healthCommand as S, SCHEMA_FILE_NAME as St, listCommand$3 as T, createSnapshotFromLocalTypes as Tt, listMachineUsers as U, commonArgs as Ut, tokenCommand as V, apiCall as Vt, generate$1 as W, confirmationArgs as Wt, listExecutors as X, listCommand$6 as Y, getExecutorJob as Z, createCommand as _, bundleMigrationScript as _t, listCommand as a, executionsCommand as at, listCommand$2 as b, INITIAL_SCHEMA_NUMBER as bt, inviteUser as c, functionExecutionStatusToString as ct, listCommand$1 as d, getExecutor as dt, watchExecutorJob as et, listWorkspaces as f, apply as ft, deleteWorkspace as g, parseMigrationLabelNumber as gt, deleteCommand as h, MIGRATION_LABEL_KEY as ht, removeUser as i, getWorkflow as it, logBetaWarning as j, getNextMigrationNumber as jt, generate as k, getMigrationFilePath as kt, restoreCommand as l, formatKeyValueTable as lt, getWorkspace as m, waitForExecution$1 as mt, updateUser as n, startWorkflow as nt, listUsers as o, getWorkflowExecution as ot, getCommand as p, executeScript as pt, triggerCommand as q, withCommonArgs as qt, removeCommand as r, getCommand$2 as rt, inviteCommand as s, listWorkflowExecutions as st, updateCommand as t, startCommand as tt, restoreWorkspace as u, getCommand$3 as ut, createWorkspace as v, DB_TYPES_FILE_NAME as vt, resumeWorkflow as w, compareSnapshots as wt, getAppHealth as x, MIGRATE_FILE_NAME as xt, listApps as y, DIFF_FILE_NAME as yt, getOAuth2Client as z, trnPrefix as zt };
+//# sourceMappingURL=update-DkpWgrzL.mjs.map