@tailor-platform/sdk 1.30.0 → 1.31.0

package/CHANGELOG.md

@@ -1,5 +1,57 @@
 # @tailor-platform/sdk
 
+## 1.31.0
+
+### Minor Changes
+
+- [#793](https://github.com/tailor-platform/sdk/pull/793) [`517ed78`](https://github.com/tailor-platform/sdk/commit/517ed782e1c4705b981822422cdd97541bddeeef) Thanks [@dqn](https://github.com/dqn)! - Add Bun runtime support for CLI and expand CI test matrix
+
+  - Detect Bun/Deno runtimes and skip tsx registration for native TypeScript execution
+  - Use dynamic import for connect-node transport to support Bun runtime
+  - Expand CI smoke tests across OS, Node version, package manager, and runtime combinations
+
+- [#746](https://github.com/tailor-platform/sdk/pull/746) [`b9113a0`](https://github.com/tailor-platform/sdk/commit/b9113a08698edcd03deae0bf7354701a59f4d76d) Thanks [@toiroakr](https://github.com/toiroakr)! - Add opt-in secure token storage via OS keyring (macOS Keychain, Windows Credential Manager, Linux Secret Service). Set `TAILOR_USE_KEYRING=1` to enable. Default behavior remains unchanged (file-based V1 config) for backward compatibility with older SDK versions.
+
+### Patch Changes
+
+- [#806](https://github.com/tailor-platform/sdk/pull/806) [`cfe2c4b`](https://github.com/tailor-platform/sdk/commit/cfe2c4b194acf8bae674e8c1030a40cf2cb29ba9) Thanks [@toiroakr](https://github.com/toiroakr)! - Add documentation for `typeName` on enum/object fields and `pickFields`/`omitFields` on TailorDBType
+
+- [#807](https://github.com/tailor-platform/sdk/pull/807) [`13ad5cd`](https://github.com/tailor-platform/sdk/commit/13ad5cd4027c4fc5925a8934050b68d1a51cb41c) Thanks [@toiroakr](https://github.com/toiroakr)! - Remove unused `required` option from `FieldOptions` and dead `requiredExplicit` field from `FieldMetadata`
+
+- [#744](https://github.com/tailor-platform/sdk/pull/744) [`5d2ab24`](https://github.com/tailor-platform/sdk/commit/5d2ab24393507b7333cfd3e4cdd2ec10e34abd44) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency @typescript/native-preview to v7.0.0-dev.20260320.1
+
+- [#768](https://github.com/tailor-platform/sdk/pull/768) [`2d984a3`](https://github.com/tailor-platform/sdk/commit/2d984a3b798cd14bf9958eb89ad229a70b2c45c4) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @bufbuild/protobuf to v2.11.0
+
+- [#774](https://github.com/tailor-platform/sdk/pull/774) [`a9160f4`](https://github.com/tailor-platform/sdk/commit/a9160f42dea8a8f62247e3bb4b2ffc307f50f33e) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @opentelemetry/exporter-trace-otlp-proto to v0.213.0
+
+- [#777](https://github.com/tailor-platform/sdk/pull/777) [`cea90ef`](https://github.com/tailor-platform/sdk/commit/cea90ef1485fdcbc9e605cb34e48cdb55ef2a558) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency globals to v17.4.0
+
+- [#783](https://github.com/tailor-platform/sdk/pull/783) [`858316f`](https://github.com/tailor-platform/sdk/commit/858316fa565031c77ea8e98890313c41d4c43d13) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency pkg-pr-new to v0.0.66
+
+- [#785](https://github.com/tailor-platform/sdk/pull/785) [`8dcaac5`](https://github.com/tailor-platform/sdk/commit/8dcaac5420aec0cc7f193019cac80faaf0994c1b) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency ora to v9.3.0
+
+- [#797](https://github.com/tailor-platform/sdk/pull/797) [`4863518`](https://github.com/tailor-platform/sdk/commit/4863518cb4b465aa8d8a794d3e333c8cf86da529) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency tsdown to v0.21.4
+
+- [#798](https://github.com/tailor-platform/sdk/pull/798) [`e95f0a3`](https://github.com/tailor-platform/sdk/commit/e95f0a311732908191671942dab3ccd2be8319bb) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency typescript-eslint to v8.57.1
+
+- [#801](https://github.com/tailor-platform/sdk/pull/801) [`030539d`](https://github.com/tailor-platform/sdk/commit/030539d0f568c5b5c0a4c7acafe303ea2d5a56dd) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): lock file maintenance
+
+- [#802](https://github.com/tailor-platform/sdk/pull/802) [`27f2908`](https://github.com/tailor-platform/sdk/commit/27f2908536a540e3707af983c7fef49cb4a4dcc8) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update anthropics/claude-code-action action to v1.0.77
+
+- [#810](https://github.com/tailor-platform/sdk/pull/810) [`c16d87c`](https://github.com/tailor-platform/sdk/commit/c16d87cc7d9ef210230cb3e366bd6569e8f646a7) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency @tailor-platform/function-types to v0.8.3
+
+- [#811](https://github.com/tailor-platform/sdk/pull/811) [`5fc6e4b`](https://github.com/tailor-platform/sdk/commit/5fc6e4b32736828cea7453d0cc2b66dec9808946) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency aquaproj/aqua to v2.57.1
+
+- [#812](https://github.com/tailor-platform/sdk/pull/812) [`1af673e`](https://github.com/tailor-platform/sdk/commit/1af673e978cd2642d6c9a8ef8c075dfc1098cb3c) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency turbo to v2.8.20
+
+- [#815](https://github.com/tailor-platform/sdk/pull/815) [`d1b6d92`](https://github.com/tailor-platform/sdk/commit/d1b6d929f1317790b7fa4d7e2ea73580042c92f5) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @inquirer/prompts to v8.3.2
+
+- [#816](https://github.com/tailor-platform/sdk/pull/816) [`dc3fc6e`](https://github.com/tailor-platform/sdk/commit/dc3fc6e99b11252232c9960cca705cd213cec11b) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency rolldown to v1.0.0-rc.10
+
+- [#817](https://github.com/tailor-platform/sdk/pull/817) [`951ec13`](https://github.com/tailor-platform/sdk/commit/951ec13ea44ef3545a76e84e3e46779601ee5871) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency aquaproj/aqua-registry to v4.487.0
+
+- [#818](https://github.com/tailor-platform/sdk/pull/818) [`25bbd17`](https://github.com/tailor-platform/sdk/commit/25bbd178609c7a102301c847c067483addcbf5df) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency knip to v5.88.1
+
 ## 1.30.0
 
 ### Minor Changes

package/README.md

@@ -30,6 +30,8 @@ npm install @tailor-platform/sdk
 yarn add @tailor-platform/sdk
 # OR
 pnpm add @tailor-platform/sdk
+# OR
+bun add @tailor-platform/sdk
 ```
 
 ## Quick Start
@@ -95,5 +97,5 @@ See [Create Tailor Platform SDK](https://github.com/tailor-platform/sdk/tree/mai
 
 ## Requirements
 
-- Node.js 22 or later
+- Node.js 22 or later (or Bun)
 - A Tailor Platform account ([request access](https://www.tailor.tech/demo))

package/dist/{application-DAQVP9CS.mjs → application-B2-PymMz.mjs}

@@ -1,9 +1,9 @@
 import "./chunk-DEt8GZDa.mjs";
 import "./brand-GZnI4eYb.mjs";
 import "./logger-CqezTedh.mjs";
-import "./client-CZmQBXAY.mjs";
+import "./client-DfdgRZlQ.mjs";
 import "./package-json-D3x2nBPB.mjs";
-import { n as generatePluginFilesIfNeeded, r as loadApplication, t as defineApplication } from "./application-Bf8SUAtR.mjs";
+import { n as generatePluginFilesIfNeeded, r as loadApplication, t as defineApplication } from "./application-CASjzt3W.mjs";
 import "./seed-CWkIDWMb.mjs";
 import "./file-utils-Bctuzn3x.mjs";
 import "./kysely-type-B_IecdK9.mjs";

package/dist/{application-Bf8SUAtR.mjs → application-CASjzt3W.mjs}

@@ -1,6 +1,7 @@
 import { n as isSdkBranded } from "./brand-GZnI4eYb.mjs";
 import { n as logger, r as styles } from "./logger-CqezTedh.mjs";
-import { c as initOAuth2Client } from "./client-CZmQBXAY.mjs";
+import { l as initOAuth2Client } from "./client-DfdgRZlQ.mjs";
+import { t as readPackageJson } from "./package-json-D3x2nBPB.mjs";
 import { n as seedPlugin, r as isPluginGeneratedType, t as SeedGeneratorID } from "./seed-CWkIDWMb.mjs";
 import { n as enumConstantsPlugin, t as EnumConstantsGeneratorID } from "./enum-constants-D1nfn0qD.mjs";
 import { n as fileUtilsPlugin, t as FileUtilsGeneratorID } from "./file-utils-Bctuzn3x.mjs";
@@ -18,6 +19,7 @@ import * as os from "node:os";
 import { parseTOML, parseYAML, stringifyYAML } from "confbox";
 import { findUpSync } from "find-up-simple";
 import ml from "multiline-ts";
+import { lt } from "semver";
 import { xdgConfig } from "xdg-basedir";
 import * as rolldown from "rolldown";
 import * as fs from "node:fs/promises";
@@ -25,18 +27,112 @@ import { parseSync } from "oxc-parser";
 import * as inflection from "inflection";
 import * as globals from "globals";
 
+//#region src/cli/shared/token-store.ts
+const SERVICE_NAME = "tailor-platform-cli";
+let entryClass;
+async function getEntryClass() {
+	if (entryClass !== void 0) return entryClass;
+	try {
+		const mod = await import("@napi-rs/keyring");
+		const probe = new mod.Entry(SERVICE_NAME, "__probe__");
+		probe.setPassword("probe");
+		probe.deletePassword();
+		entryClass = mod.Entry;
+	} catch {
+		logger.warn("System keyring is not available. Tokens will be stored in the config file. Set TAILOR_PLATFORM_TOKEN environment variable for CI environments.");
+		entryClass = false;
+	}
+	return entryClass;
+}
+/**
+* Check whether the OS keyring is available and functional.
+* @returns true if keyring is available
+*/
+async function isKeyringAvailable() {
+	return await getEntryClass() !== false;
+}
+/**
+* Load tokens from the OS keyring for a given account.
+* @param account - User identifier (e.g. email or client ID)
+* @returns Token data or undefined if not found or keyring unavailable
+*/
+async function loadKeyringTokens(account) {
+	const Entry = await getEntryClass();
+	if (!Entry) return void 0;
+	try {
+		const raw = new Entry(SERVICE_NAME, account).getPassword();
+		if (raw === null) return void 0;
+		return JSON.parse(raw);
+	} catch {
+		return;
+	}
+}
+/**
+* Save tokens to the OS keyring for a given account.
+* @param account - User identifier (e.g. email or client ID)
+* @param tokens - Token data to store
+*/
+async function saveKeyringTokens(account, tokens) {
+	const Entry = await getEntryClass();
+	if (!Entry) return;
+	new Entry(SERVICE_NAME, account).setPassword(JSON.stringify(tokens));
+}
+/**
+* Delete tokens from the OS keyring for a given account.
+* @param account - User identifier (e.g. email or client ID)
+*/
+async function deleteKeyringTokens(account) {
+	const Entry = await getEntryClass();
+	if (!Entry) return;
+	try {
+		new Entry(SERVICE_NAME, account).deletePassword();
+	} catch {}
+}
+
+//#endregion
 //#region src/cli/shared/context.ts
-const pfConfigSchema = z.object({
+const pfProfileSchema = z.object({
+	user: z.string(),
+	workspace_id: z.string()
+});
+const pfUserSchemaV1 = z.object({
+	access_token: z.string(),
+	refresh_token: z.string().optional(),
+	token_expires_at: z.string()
+});
+const pfUserKeyringSchema = z.object({
+	storage: z.literal("keyring"),
+	token_expires_at: z.string()
+});
+const pfUserFileSchema = z.object({
+	storage: z.literal("file"),
+	token_expires_at: z.string(),
+	access_token: z.string(),
+	refresh_token: z.string().optional()
+});
+const pfUserSchemaV2 = z.discriminatedUnion("storage", [pfUserKeyringSchema, pfUserFileSchema]);
+const pfConfigSchemaV1 = z.object({
 	version: z.literal(1),
-	users: z.partialRecord(z.string(), z.object({
-		access_token: z.string(),
-		refresh_token: z.string().optional(),
-		token_expires_at: z.string()
-	})),
-	profiles: z.partialRecord(z.string(), z.object({
-		user: z.string(),
-		workspace_id: z.string()
-	})),
+	users: z.partialRecord(z.string(), pfUserSchemaV1),
+	profiles: z.partialRecord(z.string(), pfProfileSchema),
+	current_user: z.string().nullable()
+});
+const LATEST_CONFIG_VERSION = 2;
+const V2_MIN_SDK_VERSION = "1.29.0";
+const semverSchema = z.templateLiteral([
+	z.number().int(),
+	".",
+	z.number().int(),
+	".",
+	z.number().int()
+]);
+const pfConfigSchemaV2 = z.object({
+	version: z.literal(LATEST_CONFIG_VERSION),
+	min_sdk_version: semverSchema,
+	latest_version: z.number().int().optional(),
+	latest_min_sdk_version: semverSchema.optional(),
+	users: z.partialRecord(z.string(), pfUserSchemaV2),
+	profiles: z.partialRecord(z.string(), pfProfileSchema),
 	current_user: z.string().nullable()
 });
 function platformConfigPath() {
@@ -44,34 +140,104 @@ function platformConfigPath() {
 	return path.join(xdgConfig, "tailor-platform", "config.yaml");
 }
 /**
-* Read Tailor Platform CLI configuration, migrating from tailorctl if necessary.
+* Migrate a v1 config to v2.
+* Tokens are kept in the config file (storage: "file") during migration.
+* They will be moved to the OS keyring on next login or token refresh.
+* @param v1Config - v1 configuration to migrate
+* @returns Migrated v2 configuration
+*/
+function migrateV1ToV2(v1Config) {
+	const users = {};
+	for (const [name, v1User] of Object.entries(v1Config.users)) {
+		if (!v1User) continue;
+		users[name] = {
+			access_token: v1User.access_token,
+			refresh_token: v1User.refresh_token,
+			token_expires_at: v1User.token_expires_at,
+			storage: "file"
+		};
+	}
+	return {
+		version: LATEST_CONFIG_VERSION,
+		min_sdk_version: V2_MIN_SDK_VERSION,
+		users,
+		profiles: v1Config.profiles,
+		current_user: v1Config.current_user
+	};
+}
+/**
+* Read Tailor Platform CLI configuration, migrating from tailorctl or v1 if necessary.
 * @returns Parsed platform configuration
 */
-function readPlatformConfig() {
+async function readPlatformConfig() {
 	const configPath = platformConfigPath();
 	if (!fs$1.existsSync(configPath)) {
 		logger.warn(`Config not found at ${configPath}, migrating from tailorctl config...`);
 		const tcConfig = readTailorctlConfig();
-		const pfConfig = tcConfig ? fromTailorctlConfig(tcConfig) : {
+		const v1Config = tcConfig ? fromTailorctlConfig(tcConfig) : {
 			version: 1,
 			users: {},
 			profiles: {},
 			current_user: null
 		};
-		writePlatformConfig(pfConfig);
-		return pfConfig;
+		writePlatformConfig(v1Config);
+		return migrateV1ToV2(v1Config);
 	}
 	const rawConfig = parseYAML(fs$1.readFileSync(configPath, "utf-8"));
-	return pfConfigSchema.parse(rawConfig);
+	const version = rawConfig != null && typeof rawConfig === "object" && "version" in rawConfig ? rawConfig.version : void 0;
+	if (typeof version === "number" && version > LATEST_CONFIG_VERSION) {
+		const minSdk = "min_sdk_version" in rawConfig ? String(rawConfig.min_sdk_version) : void 0;
+		const updateHint = minSdk ? `Please update your SDK to >= ${minSdk}: pnpm update @tailor-platform/sdk` : "Please update your SDK: pnpm update @tailor-platform/sdk";
+		throw new Error(ml`
+      Config file uses version ${String(version)}, but this SDK only supports up to version ${String(LATEST_CONFIG_VERSION)}.
+      ${updateHint}
+    `);
+	}
+	const v2Result = pfConfigSchemaV2.safeParse(rawConfig);
+	if (v2Result.success) {
+		if (v2Result.data.latest_min_sdk_version) {
+			if (lt((await readPackageJson()).version ?? "0.0.0", v2Result.data.latest_min_sdk_version)) logger.warn(ml`
+          A newer config version (${String(v2Result.data.latest_version)}) is available.
+          Please update your SDK to >= ${v2Result.data.latest_min_sdk_version}: pnpm update @tailor-platform/sdk
+        `);
+		}
+		return v2Result.data;
+	}
+	const v1Result = pfConfigSchemaV1.safeParse(rawConfig);
+	if (v1Result.success) return migrateV1ToV2(v1Result.data);
+	throw new Error(ml`
+    Failed to parse config file at ${configPath}.
+    The file may be corrupted or created by an incompatible SDK version.
+  `);
+}
+function toV1ForDisk(config) {
+	const users = {};
+	for (const [name, entry] of Object.entries(config.users)) {
+		if (!entry || entry.storage === "keyring") continue;
+		users[name] = {
+			access_token: entry.access_token,
+			refresh_token: entry.refresh_token,
+			token_expires_at: entry.token_expires_at
+		};
+	}
+	return {
+		version: 1,
+		users,
+		profiles: config.profiles,
+		current_user: config.current_user
+	};
 }
 /**
 * Write Tailor Platform CLI configuration to disk.
+* By default, V2 configs are converted to V1 for backward compatibility.
+* Set TAILOR_USE_KEYRING to write V2 format (required for keyring storage).
 * @param config - Platform configuration to write
 */
 function writePlatformConfig(config) {
 	const configPath = platformConfigPath();
 	fs$1.mkdirSync(path.dirname(configPath), { recursive: true });
-	fs$1.writeFileSync(configPath, stringifyYAML(config));
+	const diskConfig = config.version === 2 && !process.env.TAILOR_USE_KEYRING ? toV1ForDisk(config) : config;
+	fs$1.writeFileSync(configPath, stringifyYAML(diskConfig));
 }
 const tcContextConfigSchema = z.object({
 	username: z.string().optional(),
@@ -127,12 +293,12 @@ function validateUUID(value, source) {
 * @param opts - Workspace and profile options
 * @returns Resolved workspace ID
 */
-function loadWorkspaceId(opts) {
+async function loadWorkspaceId(opts) {
 	if (opts?.workspaceId) return validateUUID(opts.workspaceId, "--workspace-id option");
 	if (process.env.TAILOR_PLATFORM_WORKSPACE_ID) return validateUUID(process.env.TAILOR_PLATFORM_WORKSPACE_ID, "TAILOR_PLATFORM_WORKSPACE_ID environment variable");
 	const profile = opts?.profile || process.env.TAILOR_PLATFORM_PROFILE;
 	if (profile) {
-		const wsId = readPlatformConfig().profiles[profile]?.workspace_id;
+		const wsId = (await readPlatformConfig()).profiles[profile]?.workspace_id;
 		if (!wsId) throw new Error(`Profile "${profile}" not found`);
 		return validateUUID(wsId, `profile "${profile}"`);
 	}
@@ -154,7 +320,7 @@ async function loadAccessToken(opts) {
 		logger.warn("TAILOR_TOKEN is deprecated. Please use TAILOR_PLATFORM_TOKEN instead.");
 		return process.env.TAILOR_TOKEN;
 	}
-	const pfConfig = readPlatformConfig();
+	const pfConfig = await readPlatformConfig();
 	let user;
 	const profile = opts?.useProfile ? opts.profile || process.env.TAILOR_PLATFORM_PROFILE : void 0;
 	if (profile) {
@@ -172,19 +338,71 @@ async function loadAccessToken(opts) {
 	return await fetchLatestToken(pfConfig, user);
 }
 /**
+* Resolve the actual token values for a user, reading from keyring or config as appropriate.
+* @param userEntry - User entry from the config
+* @param user - User identifier
+* @returns Access token and optional refresh token
+*/
+async function resolveTokens(userEntry, user) {
+	if (userEntry.storage === "keyring") {
+		const tokens = await loadKeyringTokens(user);
+		if (!tokens) throw new Error(ml`
+        Credentials not found in OS keyring for "${user}".
+        Please run 'tailor-sdk login' and try again.
+      `);
+		return tokens;
+	}
+	return {
+		accessToken: userEntry.access_token,
+		refreshToken: userEntry.refresh_token
+	};
+}
+/**
+* Save tokens for a user, writing to keyring or config as appropriate.
+* @param config - Platform config
+* @param user - User identifier
+* @param tokens - Token data to save
+* @param tokens.accessToken
+* @param tokens.refreshToken
+* @param expiresAt - Token expiration date
+*/
+async function saveUserTokens(config, user, tokens, expiresAt) {
+	if (process.env.TAILOR_USE_KEYRING && await isKeyringAvailable()) {
+		await saveKeyringTokens(user, tokens);
+		config.users[user] = {
+			token_expires_at: expiresAt,
+			storage: "keyring"
+		};
+	} else config.users[user] = {
+		access_token: tokens.accessToken,
+		refresh_token: tokens.refreshToken,
+		token_expires_at: expiresAt,
+		storage: "file"
+	};
+}
+/**
+* Delete tokens for a user from keyring if applicable.
+* @param config - Platform config
+* @param user - User identifier
+*/
+async function deleteUserTokens(config, user) {
+	if (config.users[user]?.storage === "keyring") await deleteKeyringTokens(user);
+}
+/**
 * Fetch the latest access token, refreshing if necessary.
 * @param config - Platform config
 * @param user - User name
 * @returns Latest access token
 */
 async function fetchLatestToken(config, user) {
-	const tokens = config.users[user];
-	if (!tokens) throw new Error(ml`
+	const userEntry = config.users[user];
+	if (!userEntry) throw new Error(ml`
       User "${user}" not found.
       Please verify your user name and login using 'tailor-sdk login' command.
     `);
-	if (new Date(tokens.token_expires_at) > /* @__PURE__ */ new Date()) return tokens.access_token;
-	if (!tokens.refresh_token) throw new Error(ml`
+	const tokens = await resolveTokens(userEntry, user);
+	if (new Date(userEntry.token_expires_at) > /* @__PURE__ */ new Date()) return tokens.accessToken;
+	if (!tokens.refreshToken) throw new Error(ml`
       Token expired.
       Please run 'tailor-sdk login' and try again.
     `);
@@ -192,9 +410,9 @@ async function fetchLatestToken(config, user) {
 	let resp;
 	try {
 		resp = await client.refreshToken({
-			accessToken: tokens.access_token,
-			refreshToken: tokens.refresh_token,
-			expiresAt: Date.parse(tokens.token_expires_at)
+			accessToken: tokens.accessToken,
+			refreshToken: tokens.refreshToken,
+			expiresAt: Date.parse(userEntry.token_expires_at)
 		});
 	} catch {
 		throw new Error(ml`
@@ -202,11 +420,11 @@ async function fetchLatestToken(config, user) {
       Please run 'tailor-sdk login' and try again.
     `);
 	}
-	config.users[user] = {
-		access_token: resp.accessToken,
-		refresh_token: resp.refreshToken,
-		token_expires_at: new Date(resp.expiresAt).toISOString()
-	};
+	const newExpiresAt = new Date(resp.expiresAt).toISOString();
+	await saveUserTokens(config, user, {
+		accessToken: resp.accessToken,
+		refreshToken: resp.refreshToken ?? void 0
+	}, newExpiresAt);
 	writePlatformConfig(config);
 	return resp.accessToken;
 }
@@ -4717,5 +4935,5 @@ async function loadApplication(params) {
 }
 
 //#endregion
-export { writePlatformConfig as S, hashFile as _, loadConfig as a, loadWorkspaceId as b, ExecutorSchema as c, TailorDBTypeSchema as d, stringifyFunction as f, getDistDir as g, createBundleCache as h, resolveInlineSourcemap as i, OAuth2ClientSchema as l, loadFilesWithIgnores as m, generatePluginFilesIfNeeded as n, WorkflowJobSchema as o, tailorUserMap as p, loadApplication as r, createExecutorService as s, defineApplication as t, ResolverSchema as u, fetchLatestToken as v, readPlatformConfig as x, loadAccessToken as y };
-//# sourceMappingURL=application-Bf8SUAtR.mjs.map
+export { resolveTokens as C, readPlatformConfig as S, writePlatformConfig as T, hashFile as _, loadConfig as a, loadAccessToken as b, ExecutorSchema as c, TailorDBTypeSchema as d, stringifyFunction as f, getDistDir as g, createBundleCache as h, resolveInlineSourcemap as i, OAuth2ClientSchema as l, loadFilesWithIgnores as m, generatePluginFilesIfNeeded as n, WorkflowJobSchema as o, tailorUserMap as p, loadApplication as r, createExecutorService as s, defineApplication as t, ResolverSchema as u, deleteUserTokens as v, saveUserTokens as w, loadWorkspaceId as x, fetchLatestToken as y };
+//# sourceMappingURL=application-CASjzt3W.mjs.map