@tailor-platform/sdk 1.24.0 → 1.25.1

package/dist/{query-CV5n7DRd.mjs → query-D3UyoG68.mjs}

@@ -1,10 +1,11 @@
-import { t as db } from "./schema-0ByCZ2Ym.mjs";
-import { $ as AuthSCIMAttribute_Mutability, A as platformBaseUrl, B as TailorDBType_Permission_Permit, C as readPlatformConfig, E as fetchMachineUserToken, F as WorkflowJobExecution_Status, H as PipelineResolver_OperationType, I as TailorDBGQLPermission_Action, J as ExecutorTriggerType, K as ExecutorJobStatus, L as TailorDBGQLPermission_Operator, M as userAgent, N as WorkspacePlatformUserRole, P as WorkflowExecution_Status, Q as AuthOAuth2Client_GrantType, R as TailorDBGQLPermission_Permit, S as loadWorkspaceId, T as fetchAll, U as IdPLang, V as TailorDBType_PermitAction, W as FunctionExecution_Status, X as AuthInvokerSchema, Y as AuthIDPConfig_AuthType, Z as AuthOAuth2Client_ClientType, _ as hashFile, a as loadConfig, at as UserProfileProviderConfig_UserProfileProviderType, b as loadFolderId, ct as Condition_Operator, d as TailorDBTypeSchema, dt as ApplicationSchemaUpdateAttemptStatus, et as AuthSCIMAttribute_Type, f as stringifyFunction, ft as Subgraph_ServiceType, g as getDistDir, h as createBundleCache, ht as symbols, it as TenantProviderConfig_TenantProviderType, j as resolveStaticWebsiteUrls, k as initOperatorClient, l as OAuth2ClientSchema, lt as FilterSchema, m as loadFilesWithIgnores, mt as styles, n as generatePluginFilesIfNeeded, nt as AuthSCIMConfig_AuthorizationType, ot as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, p as tailorUserMap, pt as logger, q as ExecutorTargetType, r as loadApplication, s as createExecutorService, st as ConditionSchema, t as defineApplication, tt as AuthSCIMAttribute_Uniqueness, ut as PageDirection, w as writePlatformConfig, x as loadOrganizationId, y as loadAccessToken, z as TailorDBType_Permission_Operator } from "./application-DThE2HW7.mjs";
-import { t as readPackageJson } from "./package-json-4G3gLWMd.mjs";
-import { r as withSpan } from "./telemetry-BPviAbME.mjs";
+import { t as db } from "./schema-Fbfeq9gi.mjs";
+import { $ as AuthSCIMAttribute_Mutability, A as platformBaseUrl, B as TailorDBType_Permission_Permit, C as readPlatformConfig, E as fetchMachineUserToken, F as WorkflowJobExecution_Status, H as PipelineResolver_OperationType, I as TailorDBGQLPermission_Action, J as ExecutorTriggerType, K as ExecutorJobStatus, L as TailorDBGQLPermission_Operator, M as userAgent, N as WorkspacePlatformUserRole, P as WorkflowExecution_Status, Q as AuthOAuth2Client_GrantType, R as TailorDBGQLPermission_Permit, S as loadWorkspaceId, T as fetchAll, U as IdPLang, V as TailorDBType_PermitAction, W as FunctionExecution_Status, X as AuthInvokerSchema, Y as AuthIDPConfig_AuthType, Z as AuthOAuth2Client_ClientType, _ as hashFile, a as loadConfig, at as UserProfileProviderConfig_UserProfileProviderType, b as loadFolderId, ct as Condition_Operator, d as TailorDBTypeSchema, dt as ApplicationSchemaUpdateAttemptStatus, et as AuthSCIMAttribute_Type, f as stringifyFunction, ft as Subgraph_ServiceType, g as getDistDir, h as createBundleCache, ht as symbols, it as TenantProviderConfig_TenantProviderType, j as resolveStaticWebsiteUrls, k as initOperatorClient, l as OAuth2ClientSchema, lt as FilterSchema, m as loadFilesWithIgnores, mt as styles, n as generatePluginFilesIfNeeded, nt as AuthSCIMConfig_AuthorizationType, ot as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, p as tailorUserMap, pt as logger, q as ExecutorTargetType, r as loadApplication, s as createExecutorService, st as ConditionSchema, t as defineApplication, tt as AuthSCIMAttribute_Uniqueness, ut as PageDirection, w as writePlatformConfig, x as loadOrganizationId, y as loadAccessToken, z as TailorDBType_Permission_Operator } from "./application-iRp2OYMz.mjs";
+import { t as readPackageJson } from "./package-json-DnbGCOkg.mjs";
+import { r as withSpan } from "./telemetry-d_lgTL33.mjs";
 import { arg, defineCommand, runCommand } from "politty";
 import { z } from "zod";
 import * as fs$1 from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { parseEnv } from "node:util";
 import * as path from "pathe";
 import chalk from "chalk";
@@ -17,6 +18,7 @@ import { tmpdir } from "node:os";
 import { findUpSync } from "find-up-simple";
 import ml from "multiline-ts";
 import * as crypto from "node:crypto";
+import { createHash } from "node:crypto";
 import { pathToFileURL } from "node:url";
 import * as inflection from "inflection";
 import * as rolldown from "rolldown";
@@ -213,7 +215,7 @@ const withCommonArgs = (handler) => async (args) => {
 	try {
 		if ("json" in args && typeof args.json === "boolean") logger.jsonMode = args.json;
 		loadEnvFiles(args["env-file"], args["env-file-if-exists"]);
-		const { initTelemetry } = await import("./telemetry-Dq5FZUH0.mjs");
+		const { initTelemetry } = await import("./telemetry-J6dpByo2.mjs");
 		await initTelemetry();
 		await handler(args);
 	} catch (error) {
@@ -226,7 +228,7 @@ const withCommonArgs = (handler) => async (args) => {
 		} else logger.error(`Unknown error: ${error}`);
 		process.exit(1);
 	} finally {
-		const { shutdownTelemetry } = await import("./telemetry-Dq5FZUH0.mjs");
+		const { shutdownTelemetry } = await import("./telemetry-J6dpByo2.mjs");
 		await shutdownTelemetry();
 	}
 	process.exit(0);
@@ -3251,6 +3253,257 @@ function protoFields(fields, baseName, isInput) {
 	});
 }
 
+//#endregion
+//#region src/cli/commands/apply/secrets-state.ts
+const SecretsStateSchema = z.object({ vaults: z.record(z.string(), z.record(z.string(), z.string())) });
+/**
+* Get the file path for the secrets state JSON.
+* @returns Absolute path to secrets-state.json
+*/
+function getSecretsStatePath() {
+	return path.join(getDistDir(), "secrets-state.json");
+}
+/**
+* Load secrets hash state from disk.
+* @returns Persisted state, or empty state if file is missing or corrupted
+*/
+function loadSecretsState() {
+	const filePath = getSecretsStatePath();
+	if (!existsSync(filePath)) return { vaults: {} };
+	try {
+		const raw = readFileSync(filePath, "utf-8");
+		return SecretsStateSchema.parse(JSON.parse(raw));
+	} catch {
+		return { vaults: {} };
+	}
+}
+/**
+* Save secrets hash state to disk.
+* @param state - The secrets state to persist
+*/
+function saveSecretsState(state) {
+	const filePath = getSecretsStatePath();
+	mkdirSync(path.dirname(filePath), { recursive: true });
+	writeFileSync(filePath, JSON.stringify(state, null, 2), "utf-8");
+}
+/**
+* Compute SHA-256 hex digest of a value.
+* @param value - The string to hash
+* @returns Hex-encoded SHA-256 hash
+*/
+function hashValue(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+
+//#endregion
+//#region src/cli/commands/apply/secret-manager.ts
+/**
+* Plan secret manager changes based on current and desired state.
+* @param context - Planning context
+* @returns Planned changes for vaults and secrets
+*/
+async function planSecretManager(context) {
+	const { client, workspaceId, application, forRemoval } = context;
+	const secretVaults = forRemoval ? [] : application.secrets;
+	const vaultChangeSet = createChangeSet("Secret Manager vaults");
+	const secretChangeSet = createChangeSet("Secret Manager secrets");
+	const conflicts = [];
+	const unmanaged = [];
+	const resourceOwners = /* @__PURE__ */ new Set();
+	const existingVaultList = await fetchAll(async (pageToken, maxPageSize) => {
+		try {
+			const { vaults, nextPageToken } = await client.listSecretManagerVaults({
+				workspaceId,
+				pageToken,
+				pageSize: maxPageSize
+			});
+			return [vaults, nextPageToken];
+		} catch (error) {
+			if (error instanceof ConnectError && error.code === Code.NotFound) return [[], ""];
+			throw error;
+		}
+	});
+	const existingVaults = {};
+	await Promise.all(existingVaultList.map(async (resource) => {
+		const { metadata } = await client.getMetadata({ trn: vaultTrn(workspaceId, resource.name) });
+		existingVaults[resource.name] = {
+			resource,
+			label: metadata?.labels[sdkNameLabelKey]
+		};
+	}));
+	const state = loadSecretsState();
+	await Promise.all(secretVaults.map(async (vault) => {
+		const vaultName = vault.vaultName;
+		const existing = existingVaults[vaultName];
+		if (existing) {
+			if (!existing.label) unmanaged.push({
+				resourceType: "Secret Manager vault",
+				resourceName: vaultName
+			});
+			else if (existing.label !== application.name) conflicts.push({
+				resourceType: "Secret Manager vault",
+				resourceName: vaultName,
+				currentOwner: existing.label
+			});
+			vaultChangeSet.updates.push({
+				name: vaultName,
+				workspaceId
+			});
+			delete existingVaults[vaultName];
+		} else vaultChangeSet.creates.push({
+			name: vaultName,
+			workspaceId
+		});
+		let existingSecrets = [];
+		if (existing) existingSecrets = (await fetchAll(async (pageToken, maxPageSize) => {
+			try {
+				const { secrets, nextPageToken } = await client.listSecretManagerSecrets({
+					workspaceId,
+					secretmanagerVaultName: vaultName,
+					pageToken,
+					pageSize: maxPageSize
+				});
+				return [secrets, nextPageToken];
+			} catch (error) {
+				if (error instanceof ConnectError && error.code === Code.NotFound) return [[], ""];
+				throw error;
+			}
+		})).map((s) => s.name);
+		const existingSet = new Set(existingSecrets);
+		for (const secret of vault.secrets) if (existingSet.has(secret.name)) {
+			if (hashValue(secret.value) !== state.vaults[vaultName]?.[secret.name]) secretChangeSet.updates.push({
+				name: `${vaultName}/${secret.name}`,
+				secretName: secret.name,
+				workspaceId,
+				vaultName,
+				value: secret.value
+			});
+			existingSet.delete(secret.name);
+		} else secretChangeSet.creates.push({
+			name: `${vaultName}/${secret.name}`,
+			secretName: secret.name,
+			workspaceId,
+			vaultName,
+			value: secret.value
+		});
+		for (const orphanName of existingSet) secretChangeSet.deletes.push({
+			name: `${vaultName}/${orphanName}`,
+			secretName: orphanName,
+			workspaceId,
+			vaultName
+		});
+	}));
+	for (const [name, entry] of Object.entries(existingVaults)) {
+		if (!entry) continue;
+		const label = entry.label;
+		if (label && label !== application.name) resourceOwners.add(label);
+		if (label === application.name) {
+			const secrets = await fetchAll(async (pageToken, maxPageSize) => {
+				try {
+					const { secrets: secrets$1, nextPageToken } = await client.listSecretManagerSecrets({
+						workspaceId,
+						secretmanagerVaultName: name,
+						pageToken,
+						pageSize: maxPageSize
+					});
+					return [secrets$1, nextPageToken];
+				} catch (error) {
+					if (error instanceof ConnectError && error.code === Code.NotFound) return [[], ""];
+					throw error;
+				}
+			});
+			for (const secret of secrets) secretChangeSet.deletes.push({
+				name: `${name}/${secret.name}`,
+				secretName: secret.name,
+				workspaceId,
+				vaultName: name
+			});
+			vaultChangeSet.deletes.push({
+				name,
+				workspaceId
+			});
+		}
+	}
+	vaultChangeSet.print();
+	secretChangeSet.print();
+	return {
+		vaultChangeSet,
+		secretChangeSet,
+		conflicts,
+		unmanaged,
+		resourceOwners
+	};
+}
+function vaultTrn(workspaceId, name) {
+	return `trn:v1:workspace:${workspaceId}:vault:${name}`;
+}
+/**
+* Apply secret manager changes for the given phase.
+* @param client - Operator client instance
+* @param result - Planned secret changes
+* @param phase - Apply phase
+* @param application - Application to read secrets from for hash state persistence
+* @returns Promise that resolves when secret changes are applied
+*/
+async function applySecretManager(client, result, phase = "create-update", application) {
+	const { vaultChangeSet, secretChangeSet } = result;
+	if (phase === "create-update") {
+		await Promise.all(vaultChangeSet.creates.map(async (create$1) => {
+			await client.createSecretManagerVault({
+				workspaceId: create$1.workspaceId,
+				secretmanagerVaultName: create$1.name
+			});
+			if (application) {
+				const metaRequest = await buildMetaRequest(vaultTrn(create$1.workspaceId, create$1.name), application.name);
+				await client.setMetadata(metaRequest);
+			}
+		}));
+		if (application) await Promise.all(vaultChangeSet.updates.map(async (update) => {
+			const metaRequest = await buildMetaRequest(vaultTrn(update.workspaceId, update.name), application.name);
+			await client.setMetadata(metaRequest);
+		}));
+		await Promise.all(secretChangeSet.creates.map((create$1) => client.createSecretManagerSecret({
+			workspaceId: create$1.workspaceId,
+			secretmanagerVaultName: create$1.vaultName,
+			secretmanagerSecretName: create$1.secretName,
+			secretmanagerSecretValue: create$1.value
+		})));
+		await Promise.all(secretChangeSet.updates.map((update) => client.updateSecretManagerSecret({
+			workspaceId: update.workspaceId,
+			secretmanagerVaultName: update.vaultName,
+			secretmanagerSecretName: update.secretName,
+			secretmanagerSecretValue: update.value
+		})));
+		if (application) {
+			const state = loadSecretsState();
+			for (const vault of application.secrets) {
+				if (!state.vaults[vault.vaultName]) state.vaults[vault.vaultName] = {};
+				for (const secret of vault.secrets) state.vaults[vault.vaultName][secret.name] = hashValue(secret.value);
+			}
+			saveSecretsState(state);
+		}
+	} else if (phase === "delete") {
+		await Promise.all(secretChangeSet.deletes.map((del) => client.deleteSecretManagerSecret({
+			workspaceId: del.workspaceId,
+			secretmanagerVaultName: del.vaultName,
+			secretmanagerSecretName: del.secretName
+		})));
+		await Promise.all(vaultChangeSet.deletes.map((del) => client.deleteSecretManagerVault({
+			workspaceId: del.workspaceId,
+			secretmanagerVaultName: del.name
+		})));
+		if (secretChangeSet.deletes.length > 0 || vaultChangeSet.deletes.length > 0) {
+			const state = loadSecretsState();
+			for (const del of secretChangeSet.deletes) if (state.vaults[del.vaultName]) {
+				delete state.vaults[del.vaultName][del.secretName];
+				if (Object.keys(state.vaults[del.vaultName]).length === 0) delete state.vaults[del.vaultName];
+			}
+			for (const del of vaultChangeSet.deletes) delete state.vaults[del.name];
+			saveSecretsState(state);
+		}
+	}
+}
+
 //#endregion
 //#region src/cli/commands/apply/staticwebsite.ts
 /**
@@ -6382,7 +6635,7 @@ async function apply(options) {
 		const functionEntries = collectFunctionEntries(application, workflowService?.jobs ?? []);
 		const dryRun = options?.dryRun ?? false;
 		const yes = options?.yes ?? false;
-		const { functionRegistry, tailorDB, staticWebsite, idp, auth, pipeline, app, executor, workflow } = await withSpan("plan", async () => {
+		const { functionRegistry, tailorDB, staticWebsite, idp, auth, pipeline, app, executor, workflow, secretManager } = await withSpan("plan", async () => {
 			const ctx = {
 				client,
 				workspaceId,
@@ -6391,7 +6644,7 @@ async function apply(options) {
 				config,
 				noSchemaCheck: options?.noSchemaCheck
 			};
-			const [functionRegistry$1, tailorDB$1, staticWebsite$1, idp$1, auth$1, pipeline$1, app$1, executor$1, workflow$1] = await Promise.all([
+			const [functionRegistry$1, tailorDB$1, staticWebsite$1, idp$1, auth$1, pipeline$1, app$1, executor$1, workflow$1, secretManager$1] = await Promise.all([
 				withSpan("plan.functionRegistry", () => planFunctionRegistry(client, workspaceId, application.name, functionEntries)),
 				withSpan("plan.tailorDB", () => planTailorDB(ctx)),
 				withSpan("plan.staticWebsite", () => planStaticWebsite(ctx)),
@@ -6400,7 +6653,8 @@ async function apply(options) {
 				withSpan("plan.pipeline", () => planPipeline(ctx)),
 				withSpan("plan.application", () => planApplication(ctx)),
 				withSpan("plan.executor", () => planExecutor(ctx)),
-				withSpan("plan.workflow", () => planWorkflow(client, workspaceId, application.name, workflowService?.workflows ?? {}, workflowBuildResult?.mainJobDeps ?? {}))
+				withSpan("plan.workflow", () => planWorkflow(client, workspaceId, application.name, workflowService?.workflows ?? {}, workflowBuildResult?.mainJobDeps ?? {})),
+				withSpan("plan.secretManager", () => planSecretManager(ctx))
 			]);
 			return {
 				functionRegistry: functionRegistry$1,
@@ -6411,7 +6665,8 @@ async function apply(options) {
 				pipeline: pipeline$1,
 				app: app$1,
 				executor: executor$1,
-				workflow: workflow$1
+				workflow: workflow$1,
+				secretManager: secretManager$1
 			};
 		});
 		await withSpan("confirm", async () => {
@@ -6423,7 +6678,8 @@ async function apply(options) {
 				...auth.conflicts,
 				...pipeline.conflicts,
 				...executor.conflicts,
-				...workflow.conflicts
+				...workflow.conflicts,
+				...secretManager.conflicts
 			];
 			await confirmOwnerConflict(allConflicts, application.name, yes);
 			await confirmUnmanagedResources([
@@ -6434,7 +6690,8 @@ async function apply(options) {
 				...auth.unmanaged,
 				...pipeline.unmanaged,
 				...executor.unmanaged,
-				...workflow.unmanaged
+				...workflow.unmanaged,
+				...secretManager.unmanaged
 			], application.name, yes);
 			const importantDeletions = [];
 			for (const del of tailorDB.changeSet.type.deletes) importantDeletions.push({
@@ -6453,6 +6710,14 @@ async function apply(options) {
 				resourceType: "OAuth2 client (client type change)",
 				resourceName: replace.name
 			});
+			for (const del of secretManager.vaultChangeSet.deletes) importantDeletions.push({
+				resourceType: "Secret Manager vault",
+				resourceName: del.name
+			});
+			for (const del of secretManager.secretChangeSet.deletes) importantDeletions.push({
+				resourceType: "Secret Manager secret",
+				resourceName: del.name
+			});
 			await confirmImportantResourceDeletion(importantDeletions, yes);
 			const resourceOwners = new Set([
 				...functionRegistry.resourceOwners,
@@ -6462,7 +6727,8 @@ async function apply(options) {
 				...auth.resourceOwners,
 				...pipeline.resourceOwners,
 				...executor.resourceOwners,
-				...workflow.resourceOwners
+				...workflow.resourceOwners,
+				...secretManager.resourceOwners
 			]);
 			const emptyApps = [...new Set(allConflicts.map((c) => c.currentOwner))].filter((owner) => !resourceOwners.has(owner));
 			for (const emptyApp of emptyApps) app.deletes.push({
@@ -6478,6 +6744,7 @@ async function apply(options) {
 			return;
 		}
 		await withSpan("apply.createUpdateServices", async () => {
+			await applySecretManager(client, secretManager, "create-update", application);
 			await applyFunctionRegistry(client, workspaceId, functionRegistry, "create-update");
 			await applyStaticWebsite(client, staticWebsite, "create-update");
 			await applyIdP(client, idp, "create-update");
@@ -6499,6 +6766,7 @@ async function apply(options) {
 			await applyWorkflow(client, workflow, "delete");
 			await applyExecutor(client, executor, "delete");
 			await applyStaticWebsite(client, staticWebsite, "delete");
+			await applySecretManager(client, secretManager, "delete");
 		});
 		await withSpan("apply.deleteApplication", () => applyApplication(client, app, "delete"));
 		await withSpan("apply.deleteSubgraphServices", async () => {
@@ -9400,7 +9668,8 @@ async function execRemove(client, workspaceId, application, config, confirm) {
 	const executor = await planExecutor(ctx);
 	const workflow = await planWorkflow(client, workspaceId, application.name, {}, {});
 	const functionRegistry = await planFunctionRegistry(client, workspaceId, application.name, []);
-	if (tailorDB.changeSet.service.deletes.length === 0 && staticWebsite.changeSet.deletes.length === 0 && idp.changeSet.service.deletes.length === 0 && auth.changeSet.service.deletes.length === 0 && pipeline.changeSet.service.deletes.length === 0 && app.deletes.length === 0 && executor.changeSet.deletes.length === 0 && workflow.changeSet.deletes.length === 0 && functionRegistry.changeSet.deletes.length === 0) return;
+	const secretManager = await planSecretManager(ctx);
+	if (tailorDB.changeSet.service.deletes.length === 0 && staticWebsite.changeSet.deletes.length === 0 && idp.changeSet.service.deletes.length === 0 && auth.changeSet.service.deletes.length === 0 && pipeline.changeSet.service.deletes.length === 0 && app.deletes.length === 0 && executor.changeSet.deletes.length === 0 && workflow.changeSet.deletes.length === 0 && functionRegistry.changeSet.deletes.length === 0 && secretManager.vaultChangeSet.deletes.length === 0 && secretManager.secretChangeSet.deletes.length === 0) return;
 	if (confirm) await confirm();
 	await applyWorkflow(client, workflow, "delete");
 	await applyExecutor(client, executor, "delete");
@@ -9415,6 +9684,7 @@ async function execRemove(client, workspaceId, application, config, confirm) {
 	await applyTailorDB(client, tailorDB, "delete-resources");
 	await applyTailorDB(client, tailorDB, "delete-services");
 	await applyFunctionRegistry(client, workspaceId, functionRegistry, "delete");
+	await applySecretManager(client, secretManager, "delete");
 }
 /**
 * Remove all resources managed by the current application.
@@ -10101,7 +10371,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication: defineApplication$1 } = await import("./application-P1by1htu.mjs");
+	const { defineApplication: defineApplication$1 } = await import("./application-B4ORumjE.mjs");
 	const application = defineApplication$1({
 		config,
 		pluginManager
@@ -12275,4 +12545,4 @@ function printGqlResult(result, options = {}) {
 
 //#endregion
 export { getExecutorJob as $, truncateCommand as A, getMigrationDirPath as At, getCommand$1 as B, getNamespacesWithMigrations as Bt, getAppHealth as C, MIGRATE_FILE_NAME as Ct, listCommand$3 as D, createSnapshotFromLocalTypes as Dt, resumeWorkflow as E, compareSnapshots as Et, showCommand as F, loadDiff as Ft, listMachineUsers as G, commonArgs as Gt, getMachineUserToken as H, generateUserTypes as Ht, remove as I, reconstructSnapshotFromMigrations as It, webhookCommand as J, jsonArgs as Jt, generate$1 as K, confirmationArgs as Kt, removeCommand$1 as L, formatDiffSummary as Lt, generateCommand as M, getMigrationFiles as Mt, logBetaWarning as N, getNextMigrationNumber as Nt, listWorkflows as O, formatMigrationNumber as Ot, show as P, isValidMigrationNumber as Pt, listExecutors as Q, listCommand$4 as R, formatMigrationDiff as Rt, listCommand$2 as S, INITIAL_SCHEMA_NUMBER as St, resumeCommand as T, compareLocalTypesWithSnapshot as Tt, tokenCommand as U, apiCall as Ut, getOAuth2Client as V, trnPrefix as Vt, listCommand$5 as W, apiCommand as Wt, triggerExecutor as X, workspaceArgs as Xt, triggerCommand as Y, withCommonArgs as Yt, listCommand$6 as Z, deleteCommand as _, MIGRATION_LABEL_KEY as _t, removeCommand as a, getCommand$2 as at, createWorkspace as b, DB_TYPES_FILE_NAME as bt, listUsers as c, getWorkflowExecution as ct, restoreCommand as d, formatKeyValueTable as dt, jobsCommand as et, restoreWorkspace as f, getCommand$3 as ft, getWorkspace as g, waitForExecution$1 as gt, getCommand as h, executeScript as ht, updateUser as i, startWorkflow as it, generate as j, getMigrationFilePath as jt, truncate as k, getLatestMigrationNumber as kt, inviteCommand as l, listWorkflowExecutions as lt, listWorkspaces as m, apply as mt, queryCommand as n, watchExecutorJob as nt, removeUser as o, getWorkflow as ot, listCommand$1 as p, getExecutor as pt, listWebhookExecutors as q, deploymentArgs as qt, updateCommand as r, startCommand as rt, listCommand as s, executionsCommand as st, query as t, listExecutorJobs as tt, inviteUser as u, functionExecutionStatusToString as ut, deleteWorkspace as v, parseMigrationLabelNumber as vt, healthCommand as w, SCHEMA_FILE_NAME as wt, listApps as x, DIFF_FILE_NAME as xt, createCommand as y, bundleMigrationScript as yt, listOAuth2Clients as z, hasChanges as zt };
-//# sourceMappingURL=query-CV5n7DRd.mjs.map
+//# sourceMappingURL=query-D3UyoG68.mjs.map