@tailor-platform/sdk 1.35.2 → 1.37.0

package/dist/{crash-report-CPkI2-cp.mjs.map → crash-report-CDQ2JvgR.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"crash-report-CPkI2-cp.mjs","names":[],"sources":["../src/cli/crash-report/config.ts","../src/cli/crash-report/writer.ts","../src/cli/crash-report/sender.ts","../src/cli/crash-report/sanitize.ts","../src/cli/crash-report/report.ts","../src/cli/crash-report/index.ts"],"sourcesContent":["import * as path from \"pathe\";\nimport { isCI } from \"std-env\";\nimport { xdgConfig } from \"xdg-basedir\";\n\nexport interface CrashReportConfig {\n  readonly localEnabled: boolean;\n  readonly remoteEnabled: boolean;\n  readonly localDir: string;\n}\n\n/**\n * Parse crash report configuration from environment variables.\n * Local crash log writing is enabled by default (opt-out via TAILOR_CRASH_REPORTS_LOCAL=off).\n * Remote sending is disabled by default (opt-in via TAILOR_CRASH_REPORTS_REMOTE=on).\n * Both are auto-disabled in CI environments.\n * @returns Crash report configuration\n */\nexport function parseCrashReportConfig(): CrashReportConfig {\n  if (isCI) {\n    return {\n      localEnabled: false,\n      remoteEnabled: false,\n      localDir: \"\",\n    };\n  }\n\n  const localEnabled = (process.env.TAILOR_CRASH_REPORTS_LOCAL ?? \"on\").toLowerCase() !== \"off\";\n  const remoteEnabled = (process.env.TAILOR_CRASH_REPORTS_REMOTE ?? \"off\").toLowerCase() === \"on\";\n  const localDir = xdgConfig ? path.join(xdgConfig, \"tailor-platform\", \"crash-reports\") : \"\";\n\n  return {\n    localEnabled: localEnabled && localDir !== \"\",\n    remoteEnabled,\n    localDir,\n  };\n}\n","import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\nimport type { CrashReport } from \"./report\";\n\nconst MAX_CRASH_FILES = 10;\n\n/** Marker line that separates human-readable content from the JSON footer. */\nexport const JSON_FOOTER_MARKER = \"--- JSON ---\";\n\n/** File extension for crash log files. */\nexport const CRASH_LOG_EXTENSION = \".crash.log\";\n\n/**\n * Format a CrashReport as human-readable text for local crash log files.\n * @param report - Crash report to format\n * @returns Formatted text content\n */\nexport function formatCrashReport(report: CrashReport): string {\n  const lines = [\n    `Crash Report: ${report.id}`,\n    `Timestamp: ${report.timestamp}`,\n    `Error Type: ${report.errorType}`,\n    \"\",\n    \"--- Environment ---\",\n    `SDK Version: ${report.sdkVersion}`,\n    `Node Version: ${report.nodeVersion}`,\n    `OS: ${report.osPlatform} ${report.osRelease}`,\n    `Arch: ${report.arch}`,\n    \"\",\n    \"--- Command ---\",\n    `Command: ${report.command}`,\n    `Arguments: ${JSON.stringify(report.argv)}`,\n    \"\",\n    \"--- Error ---\",\n    `Name: ${report.errorName}`,\n    `Message: ${report.errorMessage}`,\n    \"\",\n    \"--- Stack Trace ---\",\n    report.stackTrace || \"(no stack trace available)\",\n    \"\",\n    JSON_FOOTER_MARKER,\n    JSON.stringify(report),\n    \"\",\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * Generate a filename for a crash log file.\n * Format: {timestamp}-{shortId}.crash.log\n * @param report - Crash report to generate filename for\n * @returns Filename string\n */\nfunction generateFilename(report: CrashReport): string {\n  const safeTimestamp = report.timestamp.replace(/[:.]/g, \"-\");\n  const shortId = report.id.slice(0, 8);\n  return `${safeTimestamp}-${shortId}${CRASH_LOG_EXTENSION}`;\n}\n\n/**\n * Remove old crash log files, keeping only the most recent ones.\n * @param dir - Crash log directory\n */\nfunction cleanupOldFiles(dir: string): void {\n  try {\n    const files = fs\n      .readdirSync(dir)\n      .filter((f) => f.endsWith(CRASH_LOG_EXTENSION))\n      .sort()\n      .reverse();\n\n    for (const file of files.slice(MAX_CRASH_FILES)) {\n      fs.unlinkSync(path.join(dir, file));\n    }\n  } catch {\n    // Best-effort cleanup, ignore errors\n  }\n}\n\n/**\n * Write a crash report to a local file.\n * Creates the directory if it doesn't exist. Keeps only the last 10 crash files.\n * Never throws - returns the file path on success or undefined on failure.\n * @param report - Crash report to write\n * @param dir - Directory to write the crash log file to\n * @returns File path on success, undefined on failure\n */\nexport function writeCrashReport(report: CrashReport, dir: string): string | undefined {\n  try {\n    fs.mkdirSync(dir, { recursive: true });\n\n    const filename = generateFilename(report);\n    const filePath = path.join(dir, filename);\n    const content = formatCrashReport(report);\n\n    fs.writeFileSync(filePath, content, \"utf-8\");\n    cleanupOldFiles(dir);\n\n    return filePath;\n  } catch {\n    return undefined;\n  }\n}\n","import type { CrashReport } from \"./report\";\n\nconst SEND_TIMEOUT_MS = 5000;\nconst PRODUCTION_ENDPOINT = \"https://sdk-error-tracking-926vh9t4cl.erp.dev/query\";\n\nconst SUBMIT_MUTATION = `\nmutation SubmitCrashReport(\n  $id: String!\n  $timestamp: String!\n  $sdkVersion: String!\n  $nodeVersion: String!\n  $osPlatform: String!\n  $osRelease: String!\n  $arch: String!\n  $command: String!\n  $argv: [String]\n  $errorName: String!\n  $errorMessage: String!\n  $stackTrace: String\n  $errorType: String!\n  $userId: String\n  $userEmail: String\n) {\n  submitCrashReport(\n    id: $id\n    timestamp: $timestamp\n    sdkVersion: $sdkVersion\n    nodeVersion: $nodeVersion\n    osPlatform: $osPlatform\n    osRelease: $osRelease\n    arch: $arch\n    command: $command\n    argv: $argv\n    errorName: $errorName\n    errorMessage: $errorMessage\n    stackTrace: $stackTrace\n    errorType: $errorType\n    userId: $userId\n    userEmail: $userEmail\n  ) {\n    success\n  }\n}`;\n\n/**\n * Send a crash report to the remote endpoint via GraphQL mutation.\n * Best-effort: never throws, returns boolean success.\n * @param report - Crash report to send\n * @param ua - User-Agent header value\n * @returns true if the request succeeded, false otherwise\n */\nexport async function sendCrashReport(report: CrashReport, ua: string): Promise<boolean> {\n  try {\n    const endpoint = process.env.TAILOR_CRASH_REPORT_ENDPOINT || PRODUCTION_ENDPOINT;\n    const response = await fetch(endpoint, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": ua,\n      },\n      body: JSON.stringify({\n        query: SUBMIT_MUTATION,\n        variables: report,\n      }),\n      signal: AbortSignal.timeout(SEND_TIMEOUT_MS),\n    });\n\n    if (!response.ok) return false;\n\n    const data = (await response.json()) as {\n      errors?: unknown[];\n      data?: { submitCrashReport: { success: boolean } };\n    };\n    if (data.errors?.length) return false;\n    return data.data?.submitCrashReport.success === true;\n  } catch {\n    return false;\n  }\n}\n","import * as os from \"node:os\";\n\nconst HOME_DIR = os.homedir();\n\n// Patterns for sanitization (global variants for use with .replace())\nconst UUID_PATTERN = /\\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\b/gi;\nconst LONG_HEX_PATTERN = /\\b[0-9a-fA-F]{32,}\\b/g;\nconst EMAIL_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/g;\nconst ABSOLUTE_PATH_PATTERN = /(?:\\/(?:[\\w.@\\- ]+\\/)+[\\w.@\\- ]+)/g;\nconst WINDOWS_PATH_PATTERN = /(?:[A-Za-z]:\\\\(?:[\\w.@\\- ]+\\\\)+[\\w.@\\- ]+)/g;\nconst URL_QUERY_PATTERN = /[?&][^?\\s]*/g;\n\n// Non-global variants for single-match .test() calls (avoids lastIndex state issues)\nconst EMAIL_TEST_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/;\nconst WINDOWS_DRIVE_TEST_PATTERN = /^[A-Za-z]:\\\\/;\n\n// SDK package path marker for relative paths\nconst SDK_PACKAGE_MARKER = \"packages/sdk/\";\n\nfunction lastSegment(filePath: string, separator: string): string {\n  return filePath.split(separator).pop() ?? filePath;\n}\n\n/**\n * Sanitize a stack trace by replacing absolute paths with relative SDK paths.\n * External paths are replaced with `<external>/filename.ext`.\n * Home directories are replaced with `~/<redacted>/`.\n * @param stack - Raw stack trace string\n * @returns Sanitized stack trace\n */\nexport function sanitizeStackTrace(stack: string): string {\n  // V8 stack traces start with \"ErrorType: message\\n    at ...\".\n  // The error message may span multiple lines before the first \"    at \" frame.\n  // Apply message sanitization to all message lines so secrets embedded in\n  // multiline error messages are redacted consistently with errorMessage.\n  const firstFrameIndex = stack.search(/\\n\\s+at /);\n  let result: string;\n  if (firstFrameIndex !== -1) {\n    result = sanitizeMessage(stack.slice(0, firstFrameIndex)) + stack.slice(firstFrameIndex);\n  } else {\n    result = sanitizeMessage(stack);\n  }\n\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => {\n    const sdkIndex = match.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return match.slice(sdkIndex);\n    }\n\n    if (match.startsWith(HOME_DIR)) {\n      return `~/<redacted>/${lastSegment(match, \"/\")}`;\n    }\n\n    return `<external>/${lastSegment(match, \"/\")}`;\n  });\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => {\n    const normalized = match.replace(/\\\\/g, \"/\");\n    const sdkIndex = normalized.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return normalized.slice(sdkIndex);\n    }\n    return `<external>/${lastSegment(match, \"\\\\\")}`;\n  });\n  return result;\n}\n\n/**\n * Sanitize an error message by redacting sensitive information.\n * Redacts: UUIDs, long hex tokens, email addresses, absolute paths, URL query strings.\n * @param message - Raw error message\n * @returns Sanitized error message\n */\nexport function sanitizeMessage(message: string): string {\n  let result = message;\n  // Strip serialized request/response bodies that may contain secrets\n  result = result.replace(/\\nRequest:\\s*[\\s\\S]*$/, \"\\nRequest: <redacted>\");\n  result = result.replace(UUID_PATTERN, \"<uuid>\");\n  result = result.replace(LONG_HEX_PATTERN, \"<redacted>\");\n  result = result.replace(EMAIL_PATTERN, \"<email>\");\n  result = result.replace(URL_QUERY_PATTERN, \"?<redacted>\");\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"/\")}`);\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"\\\\\")}`);\n\n  return result;\n}\n\n/**\n * Sanitize process.argv by keeping command/subcommand names and redacting\n * values of sensitive flags.\n * @param argv - Raw process.argv array\n * @returns Sanitized argv array\n */\nexport function sanitizeArgv(argv: string[]): string[] {\n  const result: string[] = [];\n  let redactNext = false;\n\n  for (const arg of argv) {\n    if (redactNext) {\n      // If the next token is itself a flag, treat it as a new flag rather\n      // than consuming it as the previous flag's value. This avoids leaking\n      // the *next* flag's value (e.g., `--verbose --workspace-id secret`\n      // would otherwise expose `secret`).\n      if (!arg.startsWith(\"-\")) {\n        result.push(\"<redacted>\");\n        redactNext = false;\n        continue;\n      }\n      redactNext = false;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      // --flag=value: keep flag name, redact value\n      const eqIndex = arg.indexOf(\"=\");\n      if (eqIndex !== -1) {\n        result.push(`${arg.slice(0, eqIndex)}=<redacted>`);\n        continue;\n      }\n\n      // --flag / -f: keep flag name, redact next arg as its value\n      result.push(arg);\n      redactNext = true;\n      continue;\n    }\n\n    // Redact absolute paths\n    if (arg.startsWith(\"/\") && arg.includes(\"/\", 1)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact Windows-style absolute paths\n    if (WINDOWS_DRIVE_TEST_PATTERN.test(arg)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact email addresses\n    if (EMAIL_TEST_PATTERN.test(arg)) {\n      result.push(\"<email>\");\n      continue;\n    }\n\n    result.push(arg);\n  }\n\n  return result;\n}\n","import * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { parseYAML } from \"confbox\";\nimport * as path from \"pathe\";\nimport { xdgConfig } from \"xdg-basedir\";\nimport { sanitizeArgv, sanitizeMessage, sanitizeStackTrace } from \"./sanitize\";\n\nexport type ErrorType = \"uncaughtException\" | \"unhandledRejection\" | \"handledError\";\n\nexport interface CrashReport {\n  id: string;\n  timestamp: string;\n  sdkVersion: string;\n  nodeVersion: string;\n  osPlatform: string;\n  osRelease: string;\n  arch: string;\n  command: string;\n  argv: string[];\n  errorName: string;\n  errorMessage: string;\n  stackTrace: string;\n  errorType: ErrorType;\n  userId: string | null;\n  userEmail: string | null;\n}\n\ninterface BuildCrashReportOptions {\n  error: unknown;\n  sdkVersion: string;\n  errorType: ErrorType;\n}\n\n// Maximum subcommand depth to keep (e.g., \"tailordb migrate generate\" = 3 tokens).\n// Positional arguments beyond this are potentially sensitive user input.\n// Accepted trade-off: plain-text positional args that don't match known patterns\n// (UUIDs, hex tokens, emails, paths) pass through to `command` and `argv`.\n// Full redaction would require embedding the CLI command tree here, which is fragile.\nconst MAX_COMMAND_TOKENS = 3;\n\n/**\n * Parse the command name from process.argv.\n * Extracts up to MAX_COMMAND_TOKENS non-flag arguments after the script name.\n * @returns Parsed command string\n */\nfunction parseCommand(): string {\n  const args = process.argv.slice(2);\n  const commandParts: string[] = [];\n  for (const arg of args) {\n    if (arg.startsWith(\"-\") || commandParts.length >= MAX_COMMAND_TOKENS) break;\n    commandParts.push(arg);\n  }\n  return commandParts.join(\" \") || \"<unknown>\";\n}\n\n/**\n * Build a CrashReport data structure from an error and context.\n * All sensitive data is sanitized before inclusion.\n * @param options - Error, SDK version, and crash type\n * @returns Sanitized crash report\n */\nexport function buildCrashReport(options: BuildCrashReportOptions): CrashReport {\n  const { error, sdkVersion, errorType } = options;\n\n  const isError = error instanceof Error;\n  const rawMessage = isError ? error.message : String(error);\n  const rawStack = isError && error.stack ? error.stack : \"\";\n  const errorName = isError ? error.name : \"UnknownError\";\n\n  const currentUser = readCurrentUser();\n\n  return {\n    id: crypto.randomUUID(),\n    timestamp: new Date().toISOString(),\n    sdkVersion,\n    nodeVersion: process.version,\n    osPlatform: process.platform,\n    osRelease: os.release(),\n    arch: process.arch,\n    command: sanitizeMessage(parseCommand()),\n    argv: sanitizeArgv(process.argv),\n    errorName,\n    errorMessage: sanitizeMessage(rawMessage),\n    stackTrace: sanitizeStackTrace(rawStack),\n    errorType,\n    userId: currentUser,\n    userEmail: currentUser,\n  };\n}\n\n/**\n * Read current_user from Tailor Platform config without side effects.\n * Unlike readPlatformConfig(), this never triggers migration or logs warnings.\n * @returns The current user email, or null if unavailable\n */\nfunction readCurrentUser(): string | null {\n  try {\n    if (!xdgConfig) return null;\n    const configPath = path.join(xdgConfig, \"tailor-platform\", \"config.yaml\");\n    if (!fs.existsSync(configPath)) return null;\n    const raw = parseYAML(fs.readFileSync(configPath, \"utf-8\")) as { current_user?: string | null };\n    return raw?.current_user ?? null;\n  } catch {\n    return null;\n  }\n}\n","import { logger } from \"@/cli/shared/logger\";\nimport { readPackageJson } from \"@/cli/shared/package-json\";\nimport { parseCrashReportConfig } from \"./config\";\nimport { buildCrashReport, type ErrorType } from \"./report\";\nimport { sendCrashReport } from \"./sender\";\nimport { writeCrashReport } from \"./writer\";\n\n/**\n * Report an unexpected crash. Writes a local crash log file and optionally\n * sends the report to a remote endpoint. Displays a user-facing message\n * with the crash log path and a command to submit the report.\n *\n * Never throws - all errors are silently caught.\n * @param error - The error that caused the crash\n * @param errorType - How the error was caught\n */\nexport async function reportCrash(error: unknown, errorType: ErrorType): Promise<void> {\n  try {\n    const config = parseCrashReportConfig();\n    if (!config.localEnabled && !config.remoteEnabled) return;\n\n    const packageJson = await readPackageJson();\n    const sdkVersion = packageJson.version ?? \"unknown\";\n\n    const report = buildCrashReport({ error, sdkVersion, errorType });\n\n    if (config.localEnabled) {\n      const filePath = writeCrashReport(report, config.localDir);\n      if (filePath) {\n        logger.log(\n          [\n            \"\",\n            \"An unexpected error occurred. A crash report has been saved to:\",\n            `  ${filePath}`,\n            \"\",\n            \"To submit this report:\",\n            `  tailor-sdk crash-report send --file \"${filePath}\"`,\n          ].join(\"\\n\"),\n        );\n      }\n    }\n\n    if (config.remoteEnabled) {\n      // Lazy import: client.ts pulls in heavy dependencies (OAuth2, Connect, Protobuf)\n      // that should not be loaded on the startup critical path via initCrashReporting().\n      const { userAgent } = await import(\"@/cli/shared/client\");\n      const ua = await userAgent();\n      await sendCrashReport(report, ua);\n    }\n  } catch {\n    // Never throw from crash reporting\n  }\n}\n\n/**\n * Register global uncaughtException and unhandledRejection handlers.\n * These catch errors outside the normal cleanup flow (e.g., during\n * argument parsing). Should be called once at CLI startup before runMain.\n */\nexport function initCrashReporting(): void {\n  const config = parseCrashReportConfig();\n  if (!config.localEnabled && !config.remoteEnabled) return;\n\n  const handleFatal = (error: unknown, errorType: ErrorType) => {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error(message);\n    void reportCrash(error, errorType).finally(() => {\n      process.exit(1);\n    });\n  };\n\n  process.on(\"uncaughtException\", (error) => handleFatal(error, \"uncaughtException\"));\n  process.on(\"unhandledRejection\", (reason) => handleFatal(reason, \"unhandledRejection\"));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,yBAA4C;AAC1D,KAAI,KACF,QAAO;EACL,cAAc;EACd,eAAe;EACf,UAAU;EACX;CAGH,MAAM,gBAAgB,QAAQ,IAAI,8BAA8B,MAAM,aAAa,KAAK;CACxF,MAAM,iBAAiB,QAAQ,IAAI,+BAA+B,OAAO,aAAa,KAAK;CAC3F,MAAM,WAAW,YAAY,KAAK,KAAK,WAAW,mBAAmB,gBAAgB,GAAG;AAExF,QAAO;EACL,cAAc,gBAAgB,aAAa;EAC3C;EACA;EACD;;;;;AC9BH,MAAM,kBAAkB;;AAGxB,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;;;;;AAOnC,SAAgB,kBAAkB,QAA6B;AA2B7D,QA1Bc;EACZ,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,eAAe,OAAO;EACtB;EACA;EACA,gBAAgB,OAAO;EACvB,iBAAiB,OAAO;EACxB,OAAO,OAAO,WAAW,GAAG,OAAO;EACnC,SAAS,OAAO;EAChB;EACA;EACA,YAAY,OAAO;EACnB,cAAc,KAAK,UAAU,OAAO,KAAK;EACzC;EACA;EACA,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB;EACA;EACA,OAAO,cAAc;EACrB;EACA;EACA,KAAK,UAAU,OAAO;EACtB;EACD,CACY,KAAK,KAAK;;;;;;;;AASzB,SAAS,iBAAiB,QAA6B;AAGrD,QAAO,GAFe,OAAO,UAAU,QAAQ,SAAS,IAAI,CAEpC,GADR,OAAO,GAAG,MAAM,GAAG,EAAE,GACA;;;;;;AAOvC,SAAS,gBAAgB,KAAmB;AAC1C,KAAI;EACF,MAAM,QAAQ,GACX,YAAY,IAAI,CAChB,QAAQ,MAAM,EAAE,SAAS,oBAAoB,CAAC,CAC9C,MAAM,CACN,SAAS;AAEZ,OAAK,MAAM,QAAQ,MAAM,MAAM,gBAAgB,CAC7C,IAAG,WAAW,KAAK,KAAK,KAAK,KAAK,CAAC;SAE/B;;;;;;;;;;AAaV,SAAgB,iBAAiB,QAAqB,KAAiC;AACrF,KAAI;AACF,KAAG,UAAU,KAAK,EAAE,WAAW,MAAM,CAAC;EAEtC,MAAM,WAAW,iBAAiB,OAAO;EACzC,MAAM,WAAW,KAAK,KAAK,KAAK,SAAS;EACzC,MAAM,UAAU,kBAAkB,OAAO;AAEzC,KAAG,cAAc,UAAU,SAAS,QAAQ;AAC5C,kBAAgB,IAAI;AAEpB,SAAO;SACD;AACN;;;;;;AClGJ,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAE5B,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CxB,eAAsB,gBAAgB,QAAqB,IAA8B;AACvF,KAAI;EACF,MAAM,WAAW,QAAQ,IAAI,gCAAgC;EAC7D,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,cAAc;IACf;GACD,MAAM,KAAK,UAAU;IACnB,OAAO;IACP,WAAW;IACZ,CAAC;GACF,QAAQ,YAAY,QAAQ,gBAAgB;GAC7C,CAAC;AAEF,MAAI,CAAC,SAAS,GAAI,QAAO;EAEzB,MAAM,OAAQ,MAAM,SAAS,MAAM;AAInC,MAAI,KAAK,QAAQ,OAAQ,QAAO;AAChC,SAAO,KAAK,MAAM,kBAAkB,YAAY;SAC1C;AACN,SAAO;;;;;;AC1EX,MAAM,WAAW,GAAG,SAAS;AAG7B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAG1B,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAGnC,MAAM,qBAAqB;AAE3B,SAAS,YAAY,UAAkB,WAA2B;AAChE,QAAO,SAAS,MAAM,UAAU,CAAC,KAAK,IAAI;;;;;;;;;AAU5C,SAAgB,mBAAmB,OAAuB;CAKxD,MAAM,kBAAkB,MAAM,OAAO,WAAW;CAChD,IAAI;AACJ,KAAI,oBAAoB,GACtB,UAAS,gBAAgB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,MAAM,MAAM,gBAAgB;KAExF,UAAS,gBAAgB,MAAM;AAGjC,UAAS,OAAO,QAAQ,wBAAwB,UAAU;EACxD,MAAM,WAAW,MAAM,QAAQ,mBAAmB;AAClD,MAAI,aAAa,GACf,QAAO,MAAM,MAAM,SAAS;AAG9B,MAAI,MAAM,WAAW,SAAS,CAC5B,QAAO,gBAAgB,YAAY,OAAO,IAAI;AAGhD,SAAO,cAAc,YAAY,OAAO,IAAI;GAC5C;AACF,UAAS,OAAO,QAAQ,uBAAuB,UAAU;EACvD,MAAM,aAAa,MAAM,QAAQ,OAAO,IAAI;EAC5C,MAAM,WAAW,WAAW,QAAQ,mBAAmB;AACvD,MAAI,aAAa,GACf,QAAO,WAAW,MAAM,SAAS;AAEnC,SAAO,cAAc,YAAY,OAAO,KAAK;GAC7C;AACF,QAAO;;;;;;;;AAST,SAAgB,gBAAgB,SAAyB;CACvD,IAAI,SAAS;AAEb,UAAS,OAAO,QAAQ,yBAAyB,wBAAwB;AACzE,UAAS,OAAO,QAAQ,cAAc,SAAS;AAC/C,UAAS,OAAO,QAAQ,kBAAkB,aAAa;AACvD,UAAS,OAAO,QAAQ,eAAe,UAAU;AACjD,UAAS,OAAO,QAAQ,mBAAmB,cAAc;AACzD,UAAS,OAAO,QAAQ,wBAAwB,UAAU,UAAU,YAAY,OAAO,IAAI,GAAG;AAC9F,UAAS,OAAO,QAAQ,uBAAuB,UAAU,UAAU,YAAY,OAAO,KAAK,GAAG;AAE9F,QAAO;;;;;;;;AAST,SAAgB,aAAa,MAA0B;CACrD,MAAM,SAAmB,EAAE;CAC3B,IAAI,aAAa;AAEjB,MAAK,MAAM,OAAO,MAAM;AACtB,MAAI,YAAY;AAKd,OAAI,CAAC,IAAI,WAAW,IAAI,EAAE;AACxB,WAAO,KAAK,aAAa;AACzB,iBAAa;AACb;;AAEF,gBAAa;;AAGf,MAAI,IAAI,WAAW,IAAI,EAAE;GAEvB,MAAM,UAAU,IAAI,QAAQ,IAAI;AAChC,OAAI,YAAY,IAAI;AAClB,WAAO,KAAK,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,aAAa;AAClD;;AAIF,UAAO,KAAK,IAAI;AAChB,gBAAa;AACb;;AAIF,MAAI,IAAI,WAAW,IAAI,IAAI,IAAI,SAAS,KAAK,EAAE,EAAE;AAC/C,UAAO,KAAK,SAAS;AACrB;;AAIF,MAAI,2BAA2B,KAAK,IAAI,EAAE;AACxC,UAAO,KAAK,SAAS;AACrB;;AAIF,MAAI,mBAAmB,KAAK,IAAI,EAAE;AAChC,UAAO,KAAK,UAAU;AACtB;;AAGF,SAAO,KAAK,IAAI;;AAGlB,QAAO;;;;;AC1GT,MAAM,qBAAqB;;;;;;AAO3B,SAAS,eAAuB;CAC9B,MAAM,OAAO,QAAQ,KAAK,MAAM,EAAE;CAClC,MAAM,eAAyB,EAAE;AACjC,MAAK,MAAM,OAAO,MAAM;AACtB,MAAI,IAAI,WAAW,IAAI,IAAI,aAAa,UAAU,mBAAoB;AACtE,eAAa,KAAK,IAAI;;AAExB,QAAO,aAAa,KAAK,IAAI,IAAI;;;;;;;;AASnC,SAAgB,iBAAiB,SAA+C;CAC9E,MAAM,EAAE,OAAO,YAAY,cAAc;CAEzC,MAAM,UAAU,iBAAiB;CACjC,MAAM,aAAa,UAAU,MAAM,UAAU,OAAO,MAAM;CAC1D,MAAM,WAAW,WAAW,MAAM,QAAQ,MAAM,QAAQ;CACxD,MAAM,YAAY,UAAU,MAAM,OAAO;CAEzC,MAAM,cAAc,iBAAiB;AAErC,QAAO;EACL,IAAI,OAAO,YAAY;EACvB,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC;EACA,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,WAAW,GAAG,SAAS;EACvB,MAAM,QAAQ;EACd,SAAS,gBAAgB,cAAc,CAAC;EACxC,MAAM,aAAa,QAAQ,KAAK;EAChC;EACA,cAAc,gBAAgB,WAAW;EACzC,YAAY,mBAAmB,SAAS;EACxC;EACA,QAAQ;EACR,WAAW;EACZ;;;;;;;AAQH,SAAS,kBAAiC;AACxC,KAAI;AACF,MAAI,CAAC,UAAW,QAAO;EACvB,MAAM,aAAa,KAAK,KAAK,WAAW,mBAAmB,cAAc;AACzE,MAAI,CAAC,GAAG,WAAW,WAAW,CAAE,QAAO;AAEvC,SADY,UAAU,GAAG,aAAa,YAAY,QAAQ,CAAC,EAC/C,gBAAgB;SACtB;AACN,SAAO;;;;;;;;;;;;;;;ACxFX,eAAsB,YAAY,OAAgB,WAAqC;AACrF,KAAI;EACF,MAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,cAAe;EAKnD,MAAM,SAAS,iBAAiB;GAAE;GAAO,aAHrB,MAAM,iBAAiB,EACZ,WAAW;GAEW;GAAW,CAAC;AAEjE,MAAI,OAAO,cAAc;GACvB,MAAM,WAAW,iBAAiB,QAAQ,OAAO,SAAS;AAC1D,OAAI,SACF,QAAO,IACL;IACE;IACA;IACA,KAAK;IACL;IACA;IACA,0CAA0C,SAAS;IACpD,CAAC,KAAK,KAAK,CACb;;AAIL,MAAI,OAAO,eAAe;GAGxB,MAAM,EAAE,cAAc,MAAM,OAAO;AAEnC,SAAM,gBAAgB,QADX,MAAM,WAAW,CACK;;SAE7B;;;;;;;AAUV,SAAgB,qBAA2B;CACzC,MAAM,SAAS,wBAAwB;AACvC,KAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,cAAe;CAEnD,MAAM,eAAe,OAAgB,cAAyB;EAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,SAAO,MAAM,QAAQ;AACrB,EAAK,YAAY,OAAO,UAAU,CAAC,cAAc;AAC/C,WAAQ,KAAK,EAAE;IACf;;AAGJ,SAAQ,GAAG,sBAAsB,UAAU,YAAY,OAAO,oBAAoB,CAAC;AACnF,SAAQ,GAAG,uBAAuB,WAAW,YAAY,QAAQ,qBAAqB,CAAC"}
+{"version":3,"file":"crash-report-CDQ2JvgR.mjs","names":[],"sources":["../src/cli/crash-report/config.ts","../src/cli/crash-report/writer.ts","../src/cli/crash-report/sender.ts","../src/cli/crash-report/sanitize.ts","../src/cli/crash-report/report.ts","../src/cli/crash-report/index.ts"],"sourcesContent":["import * as path from \"pathe\";\nimport { isCI } from \"std-env\";\nimport { xdgConfig } from \"xdg-basedir\";\n\nexport interface CrashReportConfig {\n  readonly localEnabled: boolean;\n  readonly remoteEnabled: boolean;\n  readonly localDir: string;\n}\n\n/**\n * Parse crash report configuration from environment variables.\n * Local crash log writing is enabled by default (opt-out via TAILOR_CRASH_REPORTS_LOCAL=off).\n * Remote sending is disabled by default (opt-in via TAILOR_CRASH_REPORTS_REMOTE=on).\n * Both are auto-disabled in CI environments.\n * @returns Crash report configuration\n */\nexport function parseCrashReportConfig(): CrashReportConfig {\n  if (isCI) {\n    return {\n      localEnabled: false,\n      remoteEnabled: false,\n      localDir: \"\",\n    };\n  }\n\n  const localEnabled = (process.env.TAILOR_CRASH_REPORTS_LOCAL ?? \"on\").toLowerCase() !== \"off\";\n  const remoteEnabled = (process.env.TAILOR_CRASH_REPORTS_REMOTE ?? \"off\").toLowerCase() === \"on\";\n  const localDir = xdgConfig ? path.join(xdgConfig, \"tailor-platform\", \"crash-reports\") : \"\";\n\n  return {\n    localEnabled: localEnabled && localDir !== \"\",\n    remoteEnabled,\n    localDir,\n  };\n}\n","import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\nimport type { CrashReport } from \"./report\";\n\nconst MAX_CRASH_FILES = 10;\n\n/** Marker line that separates human-readable content from the JSON footer. */\nexport const JSON_FOOTER_MARKER = \"--- JSON ---\";\n\n/** File extension for crash log files. */\nexport const CRASH_LOG_EXTENSION = \".crash.log\";\n\n/**\n * Format a CrashReport as human-readable text for local crash log files.\n * @param report - Crash report to format\n * @returns Formatted text content\n */\nexport function formatCrashReport(report: CrashReport): string {\n  const lines = [\n    `Crash Report: ${report.id}`,\n    `Timestamp: ${report.timestamp}`,\n    `Error Type: ${report.errorType}`,\n    \"\",\n    \"--- Environment ---\",\n    `SDK Version: ${report.sdkVersion}`,\n    `Node Version: ${report.nodeVersion}`,\n    `OS: ${report.osPlatform} ${report.osRelease}`,\n    `Arch: ${report.arch}`,\n    \"\",\n    \"--- Command ---\",\n    `Command: ${report.command}`,\n    `Arguments: ${JSON.stringify(report.argv)}`,\n    \"\",\n    \"--- Error ---\",\n    `Name: ${report.errorName}`,\n    `Message: ${report.errorMessage}`,\n    \"\",\n    \"--- Stack Trace ---\",\n    report.stackTrace || \"(no stack trace available)\",\n    \"\",\n    JSON_FOOTER_MARKER,\n    JSON.stringify(report),\n    \"\",\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * Generate a filename for a crash log file.\n * Format: {timestamp}-{shortId}.crash.log\n * @param report - Crash report to generate filename for\n * @returns Filename string\n */\nfunction generateFilename(report: CrashReport): string {\n  const safeTimestamp = report.timestamp.replace(/[:.]/g, \"-\");\n  const shortId = report.id.slice(0, 8);\n  return `${safeTimestamp}-${shortId}${CRASH_LOG_EXTENSION}`;\n}\n\n/**\n * Remove old crash log files, keeping only the most recent ones.\n * @param dir - Crash log directory\n */\nfunction cleanupOldFiles(dir: string): void {\n  try {\n    const files = fs\n      .readdirSync(dir)\n      .filter((f) => f.endsWith(CRASH_LOG_EXTENSION))\n      .sort()\n      .reverse();\n\n    for (const file of files.slice(MAX_CRASH_FILES)) {\n      fs.unlinkSync(path.join(dir, file));\n    }\n  } catch {\n    // Best-effort cleanup, ignore errors\n  }\n}\n\n/**\n * Write a crash report to a local file.\n * Creates the directory if it doesn't exist. Keeps only the last 10 crash files.\n * Never throws - returns the file path on success or undefined on failure.\n * @param report - Crash report to write\n * @param dir - Directory to write the crash log file to\n * @returns File path on success, undefined on failure\n */\nexport function writeCrashReport(report: CrashReport, dir: string): string | undefined {\n  try {\n    fs.mkdirSync(dir, { recursive: true });\n\n    const filename = generateFilename(report);\n    const filePath = path.join(dir, filename);\n    const content = formatCrashReport(report);\n\n    fs.writeFileSync(filePath, content, \"utf-8\");\n    cleanupOldFiles(dir);\n\n    return filePath;\n  } catch {\n    return undefined;\n  }\n}\n","import type { CrashReport } from \"./report\";\n\nconst SEND_TIMEOUT_MS = 5000;\nconst PRODUCTION_ENDPOINT = \"https://sdk-error-tracking-926vh9t4cl.erp.dev/query\";\n\nconst SUBMIT_MUTATION = `\nmutation SubmitCrashReport(\n  $id: String!\n  $timestamp: String!\n  $sdkVersion: String!\n  $nodeVersion: String!\n  $osPlatform: String!\n  $osRelease: String!\n  $arch: String!\n  $command: String!\n  $argv: [String]\n  $errorName: String!\n  $errorMessage: String!\n  $stackTrace: String\n  $errorType: String!\n  $userId: String\n  $userEmail: String\n) {\n  submitCrashReport(\n    id: $id\n    timestamp: $timestamp\n    sdkVersion: $sdkVersion\n    nodeVersion: $nodeVersion\n    osPlatform: $osPlatform\n    osRelease: $osRelease\n    arch: $arch\n    command: $command\n    argv: $argv\n    errorName: $errorName\n    errorMessage: $errorMessage\n    stackTrace: $stackTrace\n    errorType: $errorType\n    userId: $userId\n    userEmail: $userEmail\n  ) {\n    success\n  }\n}`;\n\n/**\n * Send a crash report to the remote endpoint via GraphQL mutation.\n * Best-effort: never throws, returns boolean success.\n * @param report - Crash report to send\n * @param ua - User-Agent header value\n * @returns true if the request succeeded, false otherwise\n */\nexport async function sendCrashReport(report: CrashReport, ua: string): Promise<boolean> {\n  try {\n    const endpoint = process.env.TAILOR_CRASH_REPORT_ENDPOINT || PRODUCTION_ENDPOINT;\n    const response = await fetch(endpoint, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": ua,\n      },\n      body: JSON.stringify({\n        query: SUBMIT_MUTATION,\n        variables: report,\n      }),\n      signal: AbortSignal.timeout(SEND_TIMEOUT_MS),\n    });\n\n    if (!response.ok) return false;\n\n    const data = (await response.json()) as {\n      errors?: unknown[];\n      data?: { submitCrashReport: { success: boolean } };\n    };\n    if (data.errors?.length) return false;\n    return data.data?.submitCrashReport.success === true;\n  } catch {\n    return false;\n  }\n}\n","import * as os from \"node:os\";\n\nconst HOME_DIR = os.homedir();\n\n// Patterns for sanitization (global variants for use with .replace())\nconst UUID_PATTERN = /\\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\b/gi;\nconst LONG_HEX_PATTERN = /\\b[0-9a-fA-F]{32,}\\b/g;\nconst EMAIL_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/g;\nconst ABSOLUTE_PATH_PATTERN = /(?:\\/(?:[\\w.@\\- ]+\\/)+[\\w.@\\- ]+)/g;\nconst WINDOWS_PATH_PATTERN = /(?:[A-Za-z]:\\\\(?:[\\w.@\\- ]+\\\\)+[\\w.@\\- ]+)/g;\nconst URL_QUERY_PATTERN = /[?&][^?\\s]*/g;\n\n// Non-global variants for single-match .test() calls (avoids lastIndex state issues)\nconst EMAIL_TEST_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/;\nconst WINDOWS_DRIVE_TEST_PATTERN = /^[A-Za-z]:\\\\/;\n\n// SDK package path marker for relative paths\nconst SDK_PACKAGE_MARKER = \"packages/sdk/\";\n\nfunction lastSegment(filePath: string, separator: string): string {\n  return filePath.split(separator).pop() ?? filePath;\n}\n\n/**\n * Sanitize a stack trace by replacing absolute paths with relative SDK paths.\n * External paths are replaced with `<external>/filename.ext`.\n * Home directories are replaced with `~/<redacted>/`.\n * @param stack - Raw stack trace string\n * @returns Sanitized stack trace\n */\nexport function sanitizeStackTrace(stack: string): string {\n  // V8 stack traces start with \"ErrorType: message\\n    at ...\".\n  // The error message may span multiple lines before the first \"    at \" frame.\n  // Apply message sanitization to all message lines so secrets embedded in\n  // multiline error messages are redacted consistently with errorMessage.\n  const firstFrameIndex = stack.search(/\\n\\s+at /);\n  let result: string;\n  if (firstFrameIndex !== -1) {\n    result = sanitizeMessage(stack.slice(0, firstFrameIndex)) + stack.slice(firstFrameIndex);\n  } else {\n    result = sanitizeMessage(stack);\n  }\n\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => {\n    const sdkIndex = match.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return match.slice(sdkIndex);\n    }\n\n    if (match.startsWith(HOME_DIR)) {\n      return `~/<redacted>/${lastSegment(match, \"/\")}`;\n    }\n\n    return `<external>/${lastSegment(match, \"/\")}`;\n  });\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => {\n    const normalized = match.replace(/\\\\/g, \"/\");\n    const sdkIndex = normalized.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return normalized.slice(sdkIndex);\n    }\n    return `<external>/${lastSegment(match, \"\\\\\")}`;\n  });\n  return result;\n}\n\n/**\n * Sanitize an error message by redacting sensitive information.\n * Redacts: UUIDs, long hex tokens, email addresses, absolute paths, URL query strings.\n * @param message - Raw error message\n * @returns Sanitized error message\n */\nexport function sanitizeMessage(message: string): string {\n  let result = message;\n  // Strip serialized request/response bodies that may contain secrets\n  result = result.replace(/\\nRequest:\\s*[\\s\\S]*$/, \"\\nRequest: <redacted>\");\n  result = result.replace(UUID_PATTERN, \"<uuid>\");\n  result = result.replace(LONG_HEX_PATTERN, \"<redacted>\");\n  result = result.replace(EMAIL_PATTERN, \"<email>\");\n  result = result.replace(URL_QUERY_PATTERN, \"?<redacted>\");\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"/\")}`);\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"\\\\\")}`);\n\n  return result;\n}\n\n/**\n * Sanitize process.argv by keeping command/subcommand names and redacting\n * values of sensitive flags.\n * @param argv - Raw process.argv array\n * @returns Sanitized argv array\n */\nexport function sanitizeArgv(argv: string[]): string[] {\n  const result: string[] = [];\n  let redactNext = false;\n\n  for (const arg of argv) {\n    if (redactNext) {\n      // If the next token is itself a flag, treat it as a new flag rather\n      // than consuming it as the previous flag's value. This avoids leaking\n      // the *next* flag's value (e.g., `--verbose --workspace-id secret`\n      // would otherwise expose `secret`).\n      if (!arg.startsWith(\"-\")) {\n        result.push(\"<redacted>\");\n        redactNext = false;\n        continue;\n      }\n      redactNext = false;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      // --flag=value: keep flag name, redact value\n      const eqIndex = arg.indexOf(\"=\");\n      if (eqIndex !== -1) {\n        result.push(`${arg.slice(0, eqIndex)}=<redacted>`);\n        continue;\n      }\n\n      // --flag / -f: keep flag name, redact next arg as its value\n      result.push(arg);\n      redactNext = true;\n      continue;\n    }\n\n    // Redact absolute paths\n    if (arg.startsWith(\"/\") && arg.includes(\"/\", 1)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact Windows-style absolute paths\n    if (WINDOWS_DRIVE_TEST_PATTERN.test(arg)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact email addresses\n    if (EMAIL_TEST_PATTERN.test(arg)) {\n      result.push(\"<email>\");\n      continue;\n    }\n\n    result.push(arg);\n  }\n\n  return result;\n}\n","import * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { parseYAML } from \"confbox\";\nimport * as path from \"pathe\";\nimport { xdgConfig } from \"xdg-basedir\";\nimport { sanitizeArgv, sanitizeMessage, sanitizeStackTrace } from \"./sanitize\";\n\nexport type ErrorType = \"uncaughtException\" | \"unhandledRejection\" | \"handledError\";\n\nexport interface CrashReport {\n  id: string;\n  timestamp: string;\n  sdkVersion: string;\n  nodeVersion: string;\n  osPlatform: string;\n  osRelease: string;\n  arch: string;\n  command: string;\n  argv: string[];\n  errorName: string;\n  errorMessage: string;\n  stackTrace: string;\n  errorType: ErrorType;\n  userId: string | null;\n  userEmail: string | null;\n}\n\ninterface BuildCrashReportOptions {\n  error: unknown;\n  sdkVersion: string;\n  errorType: ErrorType;\n}\n\n// Maximum subcommand depth to keep (e.g., \"tailordb migrate generate\" = 3 tokens).\n// Positional arguments beyond this are potentially sensitive user input.\n// Accepted trade-off: plain-text positional args that don't match known patterns\n// (UUIDs, hex tokens, emails, paths) pass through to `command` and `argv`.\n// Full redaction would require embedding the CLI command tree here, which is fragile.\nconst MAX_COMMAND_TOKENS = 3;\n\n/**\n * Parse the command name from process.argv.\n * Extracts up to MAX_COMMAND_TOKENS non-flag arguments after the script name.\n * @returns Parsed command string\n */\nfunction parseCommand(): string {\n  const args = process.argv.slice(2);\n  const commandParts: string[] = [];\n  for (const arg of args) {\n    if (arg.startsWith(\"-\") || commandParts.length >= MAX_COMMAND_TOKENS) break;\n    commandParts.push(arg);\n  }\n  return commandParts.join(\" \") || \"<unknown>\";\n}\n\n/**\n * Build a CrashReport data structure from an error and context.\n * All sensitive data is sanitized before inclusion.\n * @param options - Error, SDK version, and crash type\n * @returns Sanitized crash report\n */\nexport function buildCrashReport(options: BuildCrashReportOptions): CrashReport {\n  const { error, sdkVersion, errorType } = options;\n\n  const isError = error instanceof Error;\n  const rawMessage = isError ? error.message : String(error);\n  const rawStack = isError && error.stack ? error.stack : \"\";\n  const errorName = isError ? error.name : \"UnknownError\";\n\n  const currentUser = readCurrentUser();\n\n  return {\n    id: crypto.randomUUID(),\n    timestamp: new Date().toISOString(),\n    sdkVersion,\n    nodeVersion: process.version,\n    osPlatform: process.platform,\n    osRelease: os.release(),\n    arch: process.arch,\n    command: sanitizeMessage(parseCommand()),\n    argv: sanitizeArgv(process.argv),\n    errorName,\n    errorMessage: sanitizeMessage(rawMessage),\n    stackTrace: sanitizeStackTrace(rawStack),\n    errorType,\n    userId: currentUser,\n    userEmail: currentUser,\n  };\n}\n\n/**\n * Read current_user from Tailor Platform config without side effects.\n * Unlike readPlatformConfig(), this never triggers migration or logs warnings.\n * @returns The current user email, or null if unavailable\n */\nfunction readCurrentUser(): string | null {\n  try {\n    if (!xdgConfig) return null;\n    const configPath = path.join(xdgConfig, \"tailor-platform\", \"config.yaml\");\n    if (!fs.existsSync(configPath)) return null;\n    const raw = parseYAML(fs.readFileSync(configPath, \"utf-8\")) as { current_user?: string | null };\n    return raw?.current_user ?? null;\n  } catch {\n    return null;\n  }\n}\n","import { logger } from \"@/cli/shared/logger\";\nimport { readPackageJson } from \"@/cli/shared/package-json\";\nimport { parseCrashReportConfig } from \"./config\";\nimport { buildCrashReport, type ErrorType } from \"./report\";\nimport { sendCrashReport } from \"./sender\";\nimport { writeCrashReport } from \"./writer\";\n\n/**\n * Report an unexpected crash. Writes a local crash log file and optionally\n * sends the report to a remote endpoint. Displays a user-facing message\n * with the crash log path and a command to submit the report.\n *\n * Never throws - all errors are silently caught.\n * @param error - The error that caused the crash\n * @param errorType - How the error was caught\n */\nexport async function reportCrash(error: unknown, errorType: ErrorType): Promise<void> {\n  try {\n    const config = parseCrashReportConfig();\n    if (!config.localEnabled && !config.remoteEnabled) return;\n\n    const packageJson = await readPackageJson();\n    const sdkVersion = packageJson.version ?? \"unknown\";\n\n    const report = buildCrashReport({ error, sdkVersion, errorType });\n\n    if (config.localEnabled) {\n      const filePath = writeCrashReport(report, config.localDir);\n      if (filePath) {\n        logger.log(\n          [\n            \"\",\n            \"An unexpected error occurred. A crash report has been saved to:\",\n            `  ${filePath}`,\n            \"\",\n            \"To submit this report:\",\n            `  tailor-sdk crash-report send --file \"${filePath}\"`,\n          ].join(\"\\n\"),\n        );\n      }\n    }\n\n    if (config.remoteEnabled) {\n      // Lazy import: client.ts pulls in heavy dependencies (OAuth2, Connect, Protobuf)\n      // that should not be loaded on the startup critical path via initCrashReporting().\n      const { userAgent } = await import(\"@/cli/shared/client\");\n      const ua = await userAgent();\n      await sendCrashReport(report, ua);\n    }\n  } catch {\n    // Never throw from crash reporting\n  }\n}\n\n/**\n * Register global uncaughtException and unhandledRejection handlers.\n * These catch errors outside the normal cleanup flow (e.g., during\n * argument parsing). Should be called once at CLI startup before runMain.\n */\nexport function initCrashReporting(): void {\n  const config = parseCrashReportConfig();\n  if (!config.localEnabled && !config.remoteEnabled) return;\n\n  const handleFatal = (error: unknown, errorType: ErrorType) => {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error(message);\n    void reportCrash(error, errorType).finally(() => {\n      process.exit(1);\n    });\n  };\n\n  process.on(\"uncaughtException\", (error) => handleFatal(error, \"uncaughtException\"));\n  process.on(\"unhandledRejection\", (reason) => handleFatal(reason, \"unhandledRejection\"));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,yBAA4C;AAC1D,KAAI,KACF,QAAO;EACL,cAAc;EACd,eAAe;EACf,UAAU;EACX;CAGH,MAAM,gBAAgB,QAAQ,IAAI,8BAA8B,MAAM,aAAa,KAAK;CACxF,MAAM,iBAAiB,QAAQ,IAAI,+BAA+B,OAAO,aAAa,KAAK;CAC3F,MAAM,WAAW,YAAY,KAAK,KAAK,WAAW,mBAAmB,gBAAgB,GAAG;AAExF,QAAO;EACL,cAAc,gBAAgB,aAAa;EAC3C;EACA;EACD;;;;;AC9BH,MAAM,kBAAkB;;AAGxB,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;;;;;AAOnC,SAAgB,kBAAkB,QAA6B;AA2B7D,QA1Bc;EACZ,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,eAAe,OAAO;EACtB;EACA;EACA,gBAAgB,OAAO;EACvB,iBAAiB,OAAO;EACxB,OAAO,OAAO,WAAW,GAAG,OAAO;EACnC,SAAS,OAAO;EAChB;EACA;EACA,YAAY,OAAO;EACnB,cAAc,KAAK,UAAU,OAAO,KAAK;EACzC;EACA;EACA,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB;EACA;EACA,OAAO,cAAc;EACrB;EACA;EACA,KAAK,UAAU,OAAO;EACtB;EACD,CACY,KAAK,KAAK;;;;;;;;AASzB,SAAS,iBAAiB,QAA6B;AAGrD,QAAO,GAFe,OAAO,UAAU,QAAQ,SAAS,IAAI,CAEpC,GADR,OAAO,GAAG,MAAM,GAAG,EAAE,GACA;;;;;;AAOvC,SAAS,gBAAgB,KAAmB;AAC1C,KAAI;EACF,MAAM,QAAQ,GACX,YAAY,IAAI,CAChB,QAAQ,MAAM,EAAE,SAAS,oBAAoB,CAAC,CAC9C,MAAM,CACN,SAAS;AAEZ,OAAK,MAAM,QAAQ,MAAM,MAAM,gBAAgB,CAC7C,IAAG,WAAW,KAAK,KAAK,KAAK,KAAK,CAAC;SAE/B;;;;;;;;;;AAaV,SAAgB,iBAAiB,QAAqB,KAAiC;AACrF,KAAI;AACF,KAAG,UAAU,KAAK,EAAE,WAAW,MAAM,CAAC;EAEtC,MAAM,WAAW,iBAAiB,OAAO;EACzC,MAAM,WAAW,KAAK,KAAK,KAAK,SAAS;EACzC,MAAM,UAAU,kBAAkB,OAAO;AAEzC,KAAG,cAAc,UAAU,SAAS,QAAQ;AAC5C,kBAAgB,IAAI;AAEpB,SAAO;SACD;AACN;;;;;;AClGJ,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAE5B,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CxB,eAAsB,gBAAgB,QAAqB,IAA8B;AACvF,KAAI;EACF,MAAM,WAAW,QAAQ,IAAI,gCAAgC;EAC7D,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,cAAc;IACf;GACD,MAAM,KAAK,UAAU;IACnB,OAAO;IACP,WAAW;IACZ,CAAC;GACF,QAAQ,YAAY,QAAQ,gBAAgB;GAC7C,CAAC;AAEF,MAAI,CAAC,SAAS,GAAI,QAAO;EAEzB,MAAM,OAAQ,MAAM,SAAS,MAAM;AAInC,MAAI,KAAK,QAAQ,OAAQ,QAAO;AAChC,SAAO,KAAK,MAAM,kBAAkB,YAAY;SAC1C;AACN,SAAO;;;;;;AC1EX,MAAM,WAAW,GAAG,SAAS;AAG7B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAG1B,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAGnC,MAAM,qBAAqB;AAE3B,SAAS,YAAY,UAAkB,WAA2B;AAChE,QAAO,SAAS,MAAM,UAAU,CAAC,KAAK,IAAI;;;;;;;;;AAU5C,SAAgB,mBAAmB,OAAuB;CAKxD,MAAM,kBAAkB,MAAM,OAAO,WAAW;CAChD,IAAI;AACJ,KAAI,oBAAoB,GACtB,UAAS,gBAAgB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,MAAM,MAAM,gBAAgB;KAExF,UAAS,gBAAgB,MAAM;AAGjC,UAAS,OAAO,QAAQ,wBAAwB,UAAU;EACxD,MAAM,WAAW,MAAM,QAAQ,mBAAmB;AAClD,MAAI,aAAa,GACf,QAAO,MAAM,MAAM,SAAS;AAG9B,MAAI,MAAM,WAAW,SAAS,CAC5B,QAAO,gBAAgB,YAAY,OAAO,IAAI;AAGhD,SAAO,cAAc,YAAY,OAAO,IAAI;GAC5C;AACF,UAAS,OAAO,QAAQ,uBAAuB,UAAU;EACvD,MAAM,aAAa,MAAM,QAAQ,OAAO,IAAI;EAC5C,MAAM,WAAW,WAAW,QAAQ,mBAAmB;AACvD,MAAI,aAAa,GACf,QAAO,WAAW,MAAM,SAAS;AAEnC,SAAO,cAAc,YAAY,OAAO,KAAK;GAC7C;AACF,QAAO;;;;;;;;AAST,SAAgB,gBAAgB,SAAyB;CACvD,IAAI,SAAS;AAEb,UAAS,OAAO,QAAQ,yBAAyB,wBAAwB;AACzE,UAAS,OAAO,QAAQ,cAAc,SAAS;AAC/C,UAAS,OAAO,QAAQ,kBAAkB,aAAa;AACvD,UAAS,OAAO,QAAQ,eAAe,UAAU;AACjD,UAAS,OAAO,QAAQ,mBAAmB,cAAc;AACzD,UAAS,OAAO,QAAQ,wBAAwB,UAAU,UAAU,YAAY,OAAO,IAAI,GAAG;AAC9F,UAAS,OAAO,QAAQ,uBAAuB,UAAU,UAAU,YAAY,OAAO,KAAK,GAAG;AAE9F,QAAO;;;;;;;;AAST,SAAgB,aAAa,MAA0B;CACrD,MAAM,SAAmB,EAAE;CAC3B,IAAI,aAAa;AAEjB,MAAK,MAAM,OAAO,MAAM;AACtB,MAAI,YAAY;AAKd,OAAI,CAAC,IAAI,WAAW,IAAI,EAAE;AACxB,WAAO,KAAK,aAAa;AACzB,iBAAa;AACb;;AAEF,gBAAa;;AAGf,MAAI,IAAI,WAAW,IAAI,EAAE;GAEvB,MAAM,UAAU,IAAI,QAAQ,IAAI;AAChC,OAAI,YAAY,IAAI;AAClB,WAAO,KAAK,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,aAAa;AAClD;;AAIF,UAAO,KAAK,IAAI;AAChB,gBAAa;AACb;;AAIF,MAAI,IAAI,WAAW,IAAI,IAAI,IAAI,SAAS,KAAK,EAAE,EAAE;AAC/C,UAAO,KAAK,SAAS;AACrB;;AAIF,MAAI,2BAA2B,KAAK,IAAI,EAAE;AACxC,UAAO,KAAK,SAAS;AACrB;;AAIF,MAAI,mBAAmB,KAAK,IAAI,EAAE;AAChC,UAAO,KAAK,UAAU;AACtB;;AAGF,SAAO,KAAK,IAAI;;AAGlB,QAAO;;;;;AC1GT,MAAM,qBAAqB;;;;;;AAO3B,SAAS,eAAuB;CAC9B,MAAM,OAAO,QAAQ,KAAK,MAAM,EAAE;CAClC,MAAM,eAAyB,EAAE;AACjC,MAAK,MAAM,OAAO,MAAM;AACtB,MAAI,IAAI,WAAW,IAAI,IAAI,aAAa,UAAU,mBAAoB;AACtE,eAAa,KAAK,IAAI;;AAExB,QAAO,aAAa,KAAK,IAAI,IAAI;;;;;;;;AASnC,SAAgB,iBAAiB,SAA+C;CAC9E,MAAM,EAAE,OAAO,YAAY,cAAc;CAEzC,MAAM,UAAU,iBAAiB;CACjC,MAAM,aAAa,UAAU,MAAM,UAAU,OAAO,MAAM;CAC1D,MAAM,WAAW,WAAW,MAAM,QAAQ,MAAM,QAAQ;CACxD,MAAM,YAAY,UAAU,MAAM,OAAO;CAEzC,MAAM,cAAc,iBAAiB;AAErC,QAAO;EACL,IAAI,OAAO,YAAY;EACvB,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC;EACA,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,WAAW,GAAG,SAAS;EACvB,MAAM,QAAQ;EACd,SAAS,gBAAgB,cAAc,CAAC;EACxC,MAAM,aAAa,QAAQ,KAAK;EAChC;EACA,cAAc,gBAAgB,WAAW;EACzC,YAAY,mBAAmB,SAAS;EACxC;EACA,QAAQ;EACR,WAAW;EACZ;;;;;;;AAQH,SAAS,kBAAiC;AACxC,KAAI;AACF,MAAI,CAAC,UAAW,QAAO;EACvB,MAAM,aAAa,KAAK,KAAK,WAAW,mBAAmB,cAAc;AACzE,MAAI,CAAC,GAAG,WAAW,WAAW,CAAE,QAAO;AAEvC,SADY,UAAU,GAAG,aAAa,YAAY,QAAQ,CAAC,EAC/C,gBAAgB;SACtB;AACN,SAAO;;;;;;;;;;;;;;;ACxFX,eAAsB,YAAY,OAAgB,WAAqC;AACrF,KAAI;EACF,MAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,cAAe;EAKnD,MAAM,SAAS,iBAAiB;GAAE;GAAO,aAHrB,MAAM,iBAAiB,EACZ,WAAW;GAEW;GAAW,CAAC;AAEjE,MAAI,OAAO,cAAc;GACvB,MAAM,WAAW,iBAAiB,QAAQ,OAAO,SAAS;AAC1D,OAAI,SACF,QAAO,IACL;IACE;IACA;IACA,KAAK;IACL;IACA;IACA,0CAA0C,SAAS;IACpD,CAAC,KAAK,KAAK,CACb;;AAIL,MAAI,OAAO,eAAe;GAGxB,MAAM,EAAE,cAAc,MAAM,OAAO;AAEnC,SAAM,gBAAgB,QADX,MAAM,WAAW,CACK;;SAE7B;;;;;;;AAUV,SAAgB,qBAA2B;CACzC,MAAM,SAAS,wBAAwB;AACvC,KAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,cAAe;CAEnD,MAAM,eAAe,OAAgB,cAAyB;EAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,SAAO,MAAM,QAAQ;AACrB,EAAK,YAAY,OAAO,UAAU,CAAC,cAAc;AAC/C,WAAQ,KAAK,EAAE;IACf;;AAGJ,SAAQ,GAAG,sBAAsB,UAAU,YAAY,OAAO,oBAAoB,CAAC;AACnF,SAAQ,GAAG,uBAAuB,WAAW,YAAY,QAAQ,qBAAqB,CAAC"}

package/dist/{crash-report-Bd2T8BhU.mjs → crash-report-aHnky_xH.mjs}

@@ -1,4 +1,4 @@
 
-import { n as reportCrash, t as initCrashReporting } from "./crash-report-CPkI2-cp.mjs";
+import { n as reportCrash, t as initCrashReporting } from "./crash-report-CDQ2JvgR.mjs";
 
 export { reportCrash };

package/dist/{enum-constants-DI85-fPE.mjs → enum-constants-Dx82rSjf.mjs}

@@ -114,4 +114,4 @@ function enumConstantsPlugin(options) {
 
 //#endregion
 export { enumConstantsPlugin as n, EnumConstantsGeneratorID as t };
-//# sourceMappingURL=enum-constants-DI85-fPE.mjs.map
+//# sourceMappingURL=enum-constants-Dx82rSjf.mjs.map

package/dist/{enum-constants-DI85-fPE.mjs.map → enum-constants-Dx82rSjf.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"enum-constants-DI85-fPE.mjs","names":[],"sources":["../src/plugin/builtin/enum-constants/generate-enum-constants.ts","../src/plugin/builtin/enum-constants/process-enum-type.ts","../src/plugin/builtin/enum-constants/index.ts"],"sourcesContent":["import type { EnumDefinition } from \"./types\";\n\n/**\n * Generate enum constant definitions from collected metadata.\n * @param allEnums - All collected enum definitions\n * @returns Generated enum constant definitions\n */\nexport function generateUnifiedEnumConstants(allEnums: EnumDefinition[]): string {\n  if (allEnums.length === 0) {\n    return \"\";\n  }\n\n  const enumMap = new Map<string, EnumDefinition>();\n  for (const enumDef of allEnums) {\n    enumMap.set(enumDef.name, enumDef);\n  }\n\n  const enumDefs = Array.from(enumMap.values())\n    .map((e) => {\n      const members = e.values\n        .map((v) => {\n          const key = v.value.replace(/[-\\s]/g, \"_\");\n          return `  \"${key}\": \"${v.value}\"`;\n        })\n        .join(\",\\n\");\n\n      const hasDescriptions = e.values.some((v) => v.description);\n      let jsDoc = \"\";\n      if (e.fieldDescription || hasDescriptions) {\n        const lines: string[] = [];\n\n        if (e.fieldDescription) {\n          lines.push(` * ${e.fieldDescription}`);\n          if (hasDescriptions) {\n            lines.push(\" *\");\n          }\n        }\n\n        if (hasDescriptions) {\n          const propertyDocs = e.values.map((v) => {\n            const key = v.value.replace(/[-\\s]/g, \"_\");\n            return ` * @property ${[key, v.description].filter(Boolean).join(\" - \")}`;\n          });\n          lines.push(...propertyDocs);\n        }\n\n        if (lines.length > 0) {\n          jsDoc = `/**\\n${lines.join(\"\\n\")}\\n */\\n`;\n        }\n      }\n\n      const constDef = `${jsDoc}export const ${e.name} = {\\n${members}\\n} as const;`;\n      const typeDef = `export type ${e.name} = (typeof ${e.name})[keyof typeof ${e.name}];`;\n      return `${constDef}\\n${typeDef}`;\n    })\n    .join(\"\\n\\n\");\n\n  if (!enumDefs) {\n    return \"\";\n  }\n\n  return enumDefs + \"\\n\";\n}\n","import type { EnumConstantMetadata } from \"./types\";\nimport type { TailorDBType } from \"@/types/tailordb\";\n\nfunction capitalizeFirst(str: string): string {\n  return str.charAt(0).toUpperCase() + str.slice(1);\n}\n\nfunction collectEnums(type: TailorDBType): EnumConstantMetadata[\"enums\"] {\n  const enums: EnumConstantMetadata[\"enums\"] = [];\n\n  for (const [fieldName, parsedField] of Object.entries(type.fields)) {\n    if (parsedField.config.type === \"enum\" && parsedField.config.allowedValues) {\n      const enumTypeName = `${type.name}${capitalizeFirst(fieldName)}`;\n      enums.push({\n        name: enumTypeName,\n        values: parsedField.config.allowedValues,\n        fieldDescription: parsedField.config.description,\n      });\n    }\n\n    // Process nested fields\n    if (parsedField.config.type === \"nested\" && parsedField.config.fields) {\n      for (const [nestedFieldName, nestedFieldConfig] of Object.entries(\n        parsedField.config.fields,\n      )) {\n        if (nestedFieldConfig.type === \"enum\" && nestedFieldConfig.allowedValues) {\n          const fullFieldName = `${fieldName}${capitalizeFirst(nestedFieldName)}`;\n          const enumTypeName = `${type.name}${capitalizeFirst(fullFieldName)}`;\n          enums.push({\n            name: enumTypeName,\n            values: nestedFieldConfig.allowedValues,\n            fieldDescription: nestedFieldConfig.description,\n          });\n        }\n      }\n    }\n  }\n\n  return enums;\n}\n\n/**\n * Process a TailorDB type and extract enum metadata.\n * @param type - The parsed TailorDB type to process\n * @returns Enum constant metadata for the type\n */\nexport async function processEnumType(type: TailorDBType): Promise<EnumConstantMetadata> {\n  const enums = collectEnums(type);\n\n  return {\n    name: type.name,\n    enums,\n  };\n}\n","import { generateUnifiedEnumConstants } from \"./generate-enum-constants\";\nimport { processEnumType } from \"./process-enum-type\";\nimport type { EnumDefinition } from \"./types\";\nimport type { Plugin } from \"@/types/plugin\";\nimport type { GeneratorResult, TailorDBReadyContext } from \"@/types/plugin-generation\";\n\n/** Unique identifier for the enum constants generator plugin. */\nexport const EnumConstantsGeneratorID = \"@tailor-platform/enum-constants\";\n\ntype EnumConstantsPluginOptions = {\n  distPath: string;\n};\n\n/**\n * Plugin that generates enum constants from TailorDB type definitions.\n * @param options - Plugin options\n * @param options.distPath - Output file path for generated constants\n * @returns Plugin instance with onTailorDBReady hook\n */\nexport function enumConstantsPlugin(\n  options: EnumConstantsPluginOptions,\n): Plugin<unknown, EnumConstantsPluginOptions> {\n  return {\n    id: EnumConstantsGeneratorID,\n    description: \"Generates enum constants from TailorDB type definitions\",\n    pluginConfig: options,\n\n    async onTailorDBReady(\n      ctx: TailorDBReadyContext<EnumConstantsPluginOptions>,\n    ): Promise<GeneratorResult> {\n      const allEnums: EnumDefinition[] = [];\n\n      for (const ns of ctx.tailordb) {\n        for (const type of Object.values(ns.types)) {\n          const metadata = await processEnumType(type);\n          allEnums.push(...metadata.enums);\n        }\n      }\n\n      const files: GeneratorResult[\"files\"] = [];\n      if (allEnums.length > 0) {\n        const content = generateUnifiedEnumConstants(allEnums);\n        files.push({\n          path: ctx.pluginConfig.distPath,\n          content,\n        });\n      }\n\n      return { files };\n    },\n  };\n}\n"],"mappings":";;;;;;;AAOA,SAAgB,6BAA6B,UAAoC;AAC/E,KAAI,SAAS,WAAW,EACtB,QAAO;CAGT,MAAM,0BAAU,IAAI,KAA6B;AACjD,MAAK,MAAM,WAAW,SACpB,SAAQ,IAAI,QAAQ,MAAM,QAAQ;CAGpC,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,CAAC,CAC1C,KAAK,MAAM;EACV,MAAM,UAAU,EAAE,OACf,KAAK,MAAM;AAEV,UAAO,MADK,EAAE,MAAM,QAAQ,UAAU,IAAI,CACzB,MAAM,EAAE,MAAM;IAC/B,CACD,KAAK,MAAM;EAEd,MAAM,kBAAkB,EAAE,OAAO,MAAM,MAAM,EAAE,YAAY;EAC3D,IAAI,QAAQ;AACZ,MAAI,EAAE,oBAAoB,iBAAiB;GACzC,MAAM,QAAkB,EAAE;AAE1B,OAAI,EAAE,kBAAkB;AACtB,UAAM,KAAK,MAAM,EAAE,mBAAmB;AACtC,QAAI,gBACF,OAAM,KAAK,KAAK;;AAIpB,OAAI,iBAAiB;IACnB,MAAM,eAAe,EAAE,OAAO,KAAK,MAAM;AAEvC,YAAO,gBAAgB,CADX,EAAE,MAAM,QAAQ,UAAU,IAAI,EACb,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,KAAK,MAAM;MACvE;AACF,UAAM,KAAK,GAAG,aAAa;;AAG7B,OAAI,MAAM,SAAS,EACjB,SAAQ,QAAQ,MAAM,KAAK,KAAK,CAAC;;AAMrC,SAAO,GAFU,GAAG,MAAM,eAAe,EAAE,KAAK,QAAQ,QAAQ,eAE7C,IADH,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK;GAElF,CACD,KAAK,OAAO;AAEf,KAAI,CAAC,SACH,QAAO;AAGT,QAAO,WAAW;;;;;AC1DpB,SAAS,gBAAgB,KAAqB;AAC5C,QAAO,IAAI,OAAO,EAAE,CAAC,aAAa,GAAG,IAAI,MAAM,EAAE;;AAGnD,SAAS,aAAa,MAAmD;CACvE,MAAM,QAAuC,EAAE;AAE/C,MAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,KAAK,OAAO,EAAE;AAClE,MAAI,YAAY,OAAO,SAAS,UAAU,YAAY,OAAO,eAAe;GAC1E,MAAM,eAAe,GAAG,KAAK,OAAO,gBAAgB,UAAU;AAC9D,SAAM,KAAK;IACT,MAAM;IACN,QAAQ,YAAY,OAAO;IAC3B,kBAAkB,YAAY,OAAO;IACtC,CAAC;;AAIJ,MAAI,YAAY,OAAO,SAAS,YAAY,YAAY,OAAO,QAC7D;QAAK,MAAM,CAAC,iBAAiB,sBAAsB,OAAO,QACxD,YAAY,OAAO,OACpB,CACC,KAAI,kBAAkB,SAAS,UAAU,kBAAkB,eAAe;IACxE,MAAM,gBAAgB,GAAG,YAAY,gBAAgB,gBAAgB;IACrE,MAAM,eAAe,GAAG,KAAK,OAAO,gBAAgB,cAAc;AAClE,UAAM,KAAK;KACT,MAAM;KACN,QAAQ,kBAAkB;KAC1B,kBAAkB,kBAAkB;KACrC,CAAC;;;;AAMV,QAAO;;;;;;;AAQT,eAAsB,gBAAgB,MAAmD;CACvF,MAAM,QAAQ,aAAa,KAAK;AAEhC,QAAO;EACL,MAAM,KAAK;EACX;EACD;;;;;;AC7CH,MAAa,2BAA2B;;;;;;;AAYxC,SAAgB,oBACd,SAC6C;AAC7C,QAAO;EACL,IAAI;EACJ,aAAa;EACb,cAAc;EAEd,MAAM,gBACJ,KAC0B;GAC1B,MAAM,WAA6B,EAAE;AAErC,QAAK,MAAM,MAAM,IAAI,SACnB,MAAK,MAAM,QAAQ,OAAO,OAAO,GAAG,MAAM,EAAE;IAC1C,MAAM,WAAW,MAAM,gBAAgB,KAAK;AAC5C,aAAS,KAAK,GAAG,SAAS,MAAM;;GAIpC,MAAM,QAAkC,EAAE;AAC1C,OAAI,SAAS,SAAS,GAAG;IACvB,MAAM,UAAU,6BAA6B,SAAS;AACtD,UAAM,KAAK;KACT,MAAM,IAAI,aAAa;KACvB;KACD,CAAC;;AAGJ,UAAO,EAAE,OAAO;;EAEnB"}
+{"version":3,"file":"enum-constants-Dx82rSjf.mjs","names":[],"sources":["../src/plugin/builtin/enum-constants/generate-enum-constants.ts","../src/plugin/builtin/enum-constants/process-enum-type.ts","../src/plugin/builtin/enum-constants/index.ts"],"sourcesContent":["import type { EnumDefinition } from \"./types\";\n\n/**\n * Generate enum constant definitions from collected metadata.\n * @param allEnums - All collected enum definitions\n * @returns Generated enum constant definitions\n */\nexport function generateUnifiedEnumConstants(allEnums: EnumDefinition[]): string {\n  if (allEnums.length === 0) {\n    return \"\";\n  }\n\n  const enumMap = new Map<string, EnumDefinition>();\n  for (const enumDef of allEnums) {\n    enumMap.set(enumDef.name, enumDef);\n  }\n\n  const enumDefs = Array.from(enumMap.values())\n    .map((e) => {\n      const members = e.values\n        .map((v) => {\n          const key = v.value.replace(/[-\\s]/g, \"_\");\n          return `  \"${key}\": \"${v.value}\"`;\n        })\n        .join(\",\\n\");\n\n      const hasDescriptions = e.values.some((v) => v.description);\n      let jsDoc = \"\";\n      if (e.fieldDescription || hasDescriptions) {\n        const lines: string[] = [];\n\n        if (e.fieldDescription) {\n          lines.push(` * ${e.fieldDescription}`);\n          if (hasDescriptions) {\n            lines.push(\" *\");\n          }\n        }\n\n        if (hasDescriptions) {\n          const propertyDocs = e.values.map((v) => {\n            const key = v.value.replace(/[-\\s]/g, \"_\");\n            return ` * @property ${[key, v.description].filter(Boolean).join(\" - \")}`;\n          });\n          lines.push(...propertyDocs);\n        }\n\n        if (lines.length > 0) {\n          jsDoc = `/**\\n${lines.join(\"\\n\")}\\n */\\n`;\n        }\n      }\n\n      const constDef = `${jsDoc}export const ${e.name} = {\\n${members}\\n} as const;`;\n      const typeDef = `export type ${e.name} = (typeof ${e.name})[keyof typeof ${e.name}];`;\n      return `${constDef}\\n${typeDef}`;\n    })\n    .join(\"\\n\\n\");\n\n  if (!enumDefs) {\n    return \"\";\n  }\n\n  return enumDefs + \"\\n\";\n}\n","import type { EnumConstantMetadata } from \"./types\";\nimport type { TailorDBType } from \"@/types/tailordb\";\n\nfunction capitalizeFirst(str: string): string {\n  return str.charAt(0).toUpperCase() + str.slice(1);\n}\n\nfunction collectEnums(type: TailorDBType): EnumConstantMetadata[\"enums\"] {\n  const enums: EnumConstantMetadata[\"enums\"] = [];\n\n  for (const [fieldName, parsedField] of Object.entries(type.fields)) {\n    if (parsedField.config.type === \"enum\" && parsedField.config.allowedValues) {\n      const enumTypeName = `${type.name}${capitalizeFirst(fieldName)}`;\n      enums.push({\n        name: enumTypeName,\n        values: parsedField.config.allowedValues,\n        fieldDescription: parsedField.config.description,\n      });\n    }\n\n    // Process nested fields\n    if (parsedField.config.type === \"nested\" && parsedField.config.fields) {\n      for (const [nestedFieldName, nestedFieldConfig] of Object.entries(\n        parsedField.config.fields,\n      )) {\n        if (nestedFieldConfig.type === \"enum\" && nestedFieldConfig.allowedValues) {\n          const fullFieldName = `${fieldName}${capitalizeFirst(nestedFieldName)}`;\n          const enumTypeName = `${type.name}${capitalizeFirst(fullFieldName)}`;\n          enums.push({\n            name: enumTypeName,\n            values: nestedFieldConfig.allowedValues,\n            fieldDescription: nestedFieldConfig.description,\n          });\n        }\n      }\n    }\n  }\n\n  return enums;\n}\n\n/**\n * Process a TailorDB type and extract enum metadata.\n * @param type - The parsed TailorDB type to process\n * @returns Enum constant metadata for the type\n */\nexport async function processEnumType(type: TailorDBType): Promise<EnumConstantMetadata> {\n  const enums = collectEnums(type);\n\n  return {\n    name: type.name,\n    enums,\n  };\n}\n","import { generateUnifiedEnumConstants } from \"./generate-enum-constants\";\nimport { processEnumType } from \"./process-enum-type\";\nimport type { EnumDefinition } from \"./types\";\nimport type { Plugin } from \"@/types/plugin\";\nimport type { GeneratorResult, TailorDBReadyContext } from \"@/types/plugin-generation\";\n\n/** Unique identifier for the enum constants generator plugin. */\nexport const EnumConstantsGeneratorID = \"@tailor-platform/enum-constants\";\n\ntype EnumConstantsPluginOptions = {\n  distPath: string;\n};\n\n/**\n * Plugin that generates enum constants from TailorDB type definitions.\n * @param options - Plugin options\n * @param options.distPath - Output file path for generated constants\n * @returns Plugin instance with onTailorDBReady hook\n */\nexport function enumConstantsPlugin(\n  options: EnumConstantsPluginOptions,\n): Plugin<unknown, EnumConstantsPluginOptions> {\n  return {\n    id: EnumConstantsGeneratorID,\n    description: \"Generates enum constants from TailorDB type definitions\",\n    pluginConfig: options,\n\n    async onTailorDBReady(\n      ctx: TailorDBReadyContext<EnumConstantsPluginOptions>,\n    ): Promise<GeneratorResult> {\n      const allEnums: EnumDefinition[] = [];\n\n      for (const ns of ctx.tailordb) {\n        for (const type of Object.values(ns.types)) {\n          const metadata = await processEnumType(type);\n          allEnums.push(...metadata.enums);\n        }\n      }\n\n      const files: GeneratorResult[\"files\"] = [];\n      if (allEnums.length > 0) {\n        const content = generateUnifiedEnumConstants(allEnums);\n        files.push({\n          path: ctx.pluginConfig.distPath,\n          content,\n        });\n      }\n\n      return { files };\n    },\n  };\n}\n"],"mappings":";;;;;;;AAOA,SAAgB,6BAA6B,UAAoC;AAC/E,KAAI,SAAS,WAAW,EACtB,QAAO;CAGT,MAAM,0BAAU,IAAI,KAA6B;AACjD,MAAK,MAAM,WAAW,SACpB,SAAQ,IAAI,QAAQ,MAAM,QAAQ;CAGpC,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,CAAC,CAC1C,KAAK,MAAM;EACV,MAAM,UAAU,EAAE,OACf,KAAK,MAAM;AAEV,UAAO,MADK,EAAE,MAAM,QAAQ,UAAU,IAAI,CACzB,MAAM,EAAE,MAAM;IAC/B,CACD,KAAK,MAAM;EAEd,MAAM,kBAAkB,EAAE,OAAO,MAAM,MAAM,EAAE,YAAY;EAC3D,IAAI,QAAQ;AACZ,MAAI,EAAE,oBAAoB,iBAAiB;GACzC,MAAM,QAAkB,EAAE;AAE1B,OAAI,EAAE,kBAAkB;AACtB,UAAM,KAAK,MAAM,EAAE,mBAAmB;AACtC,QAAI,gBACF,OAAM,KAAK,KAAK;;AAIpB,OAAI,iBAAiB;IACnB,MAAM,eAAe,EAAE,OAAO,KAAK,MAAM;AAEvC,YAAO,gBAAgB,CADX,EAAE,MAAM,QAAQ,UAAU,IAAI,EACb,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,KAAK,MAAM;MACvE;AACF,UAAM,KAAK,GAAG,aAAa;;AAG7B,OAAI,MAAM,SAAS,EACjB,SAAQ,QAAQ,MAAM,KAAK,KAAK,CAAC;;AAMrC,SAAO,GAFU,GAAG,MAAM,eAAe,EAAE,KAAK,QAAQ,QAAQ,eAE7C,IADH,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK;GAElF,CACD,KAAK,OAAO;AAEf,KAAI,CAAC,SACH,QAAO;AAGT,QAAO,WAAW;;;;;AC1DpB,SAAS,gBAAgB,KAAqB;AAC5C,QAAO,IAAI,OAAO,EAAE,CAAC,aAAa,GAAG,IAAI,MAAM,EAAE;;AAGnD,SAAS,aAAa,MAAmD;CACvE,MAAM,QAAuC,EAAE;AAE/C,MAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,KAAK,OAAO,EAAE;AAClE,MAAI,YAAY,OAAO,SAAS,UAAU,YAAY,OAAO,eAAe;GAC1E,MAAM,eAAe,GAAG,KAAK,OAAO,gBAAgB,UAAU;AAC9D,SAAM,KAAK;IACT,MAAM;IACN,QAAQ,YAAY,OAAO;IAC3B,kBAAkB,YAAY,OAAO;IACtC,CAAC;;AAIJ,MAAI,YAAY,OAAO,SAAS,YAAY,YAAY,OAAO,QAC7D;QAAK,MAAM,CAAC,iBAAiB,sBAAsB,OAAO,QACxD,YAAY,OAAO,OACpB,CACC,KAAI,kBAAkB,SAAS,UAAU,kBAAkB,eAAe;IACxE,MAAM,gBAAgB,GAAG,YAAY,gBAAgB,gBAAgB;IACrE,MAAM,eAAe,GAAG,KAAK,OAAO,gBAAgB,cAAc;AAClE,UAAM,KAAK;KACT,MAAM;KACN,QAAQ,kBAAkB;KAC1B,kBAAkB,kBAAkB;KACrC,CAAC;;;;AAMV,QAAO;;;;;;;AAQT,eAAsB,gBAAgB,MAAmD;CACvF,MAAM,QAAQ,aAAa,KAAK;AAEhC,QAAO;EACL,MAAM,KAAK;EACX;EACD;;;;;;AC7CH,MAAa,2BAA2B;;;;;;;AAYxC,SAAgB,oBACd,SAC6C;AAC7C,QAAO;EACL,IAAI;EACJ,aAAa;EACb,cAAc;EAEd,MAAM,gBACJ,KAC0B;GAC1B,MAAM,WAA6B,EAAE;AAErC,QAAK,MAAM,MAAM,IAAI,SACnB,MAAK,MAAM,QAAQ,OAAO,OAAO,GAAG,MAAM,EAAE;IAC1C,MAAM,WAAW,MAAM,gBAAgB,KAAK;AAC5C,aAAS,KAAK,GAAG,SAAS,MAAM;;GAIpC,MAAM,QAAkC,EAAE;AAC1C,OAAI,SAAS,SAAS,GAAG;IACvB,MAAM,UAAU,6BAA6B,SAAS;AACtD,UAAM,KAAK;KACT,MAAM,IAAI,aAAa;KACvB;KACD,CAAC;;AAGJ,UAAO,EAAE,OAAO;;EAEnB"}

package/dist/env-04IQXqsl.d.mts

@@ -0,0 +1,30 @@
+/// <reference types="@tailor-platform/function-types" />
+import { lt as InferredAttributeList, ut as InferredAttributeMap } from "./plugin-D6P4g_2L.mjs";
+
+//#region src/configure/types/actor.d.ts
+/** User type enum values from the Tailor Platform server. */
+type TailorActorType = "USER_TYPE_USER" | "USER_TYPE_MACHINE_USER" | "USER_TYPE_UNSPECIFIED";
+/** Represents an actor in event triggers. */
+type TailorActor = {
+  /** The ID of the workspace the user belongs to. */workspaceId: string; /** The ID of the user. */
+  userId: string;
+  /**
+   * A map of the user's attributes.
+   * Maps from server's `attributeMap` field.
+   */
+  attributes: InferredAttributeMap | null;
+  /**
+   * A list of the user's attributes.
+   * Maps from server's `attributes` field.
+   */
+  attributeList: InferredAttributeList; /** The type of the user. */
+  userType: TailorActorType;
+};
+//#endregion
+//#region src/configure/types/env.d.ts
+interface Env {}
+/** Represents environment variables in the Tailor platform. */
+type TailorEnv = keyof Env extends never ? Record<string, string> : Env;
+//#endregion
+export { TailorEnv as n, TailorActor as r, Env as t };
+//# sourceMappingURL=env-04IQXqsl.d.mts.map

package/dist/{file-utils-C4rXlOVt.mjs → file-utils-DeWpvq3T.mjs}

@@ -138,4 +138,4 @@ function fileUtilsPlugin(options) {
 
 //#endregion
 export { fileUtilsPlugin as n, FileUtilsGeneratorID as t };
-//# sourceMappingURL=file-utils-C4rXlOVt.mjs.map
+//# sourceMappingURL=file-utils-DeWpvq3T.mjs.map

package/dist/{file-utils-C4rXlOVt.mjs.map → file-utils-DeWpvq3T.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"file-utils-C4rXlOVt.mjs","names":[],"sources":["../src/plugin/builtin/file-utils/generate-file-utils.ts","../src/plugin/builtin/file-utils/process-file-type.ts","../src/plugin/builtin/file-utils/index.ts"],"sourcesContent":["import multiline from \"multiline-ts\";\nimport type { FileUtilMetadata } from \"./types\";\n\n/**\n * Generate unified file utility functions from collected metadata.\n * @param namespaceData - Namespace data with file utility metadata\n * @returns Generated file utility code\n */\nexport function generateUnifiedFileUtils(\n  namespaceData: { namespace: string; types: FileUtilMetadata[] }[],\n): string {\n  if (namespaceData.length === 0) {\n    return \"\";\n  }\n\n  // Collect all types with their namespace\n  const typeNamespaceMap = new Map<string, string>();\n  const typeFieldsMap = new Map<string, string[]>();\n\n  for (const { namespace, types } of namespaceData) {\n    for (const type of types) {\n      typeNamespaceMap.set(type.name, namespace);\n      typeFieldsMap.set(type.name, type.fileFields);\n    }\n  }\n\n  if (typeNamespaceMap.size === 0) {\n    return \"\";\n  }\n\n  // Generate interface fields\n  const interfaceFields = Array.from(typeFieldsMap.entries())\n    .map(([typeName, fields]) => {\n      const fieldNamesUnion = fields.map((field) => `\"${field}\"`).join(\" | \");\n      return `  ${typeName}: {\\n    fields: ${fieldNamesUnion};\\n  };`;\n    })\n    .join(\"\\n\");\n\n  const interfaceDefinition =\n    multiline /* ts */ `\n      export interface TypeWithFiles {\n      ${interfaceFields}\n      }\n    ` + \"\\n\";\n\n  // Generate namespaces object\n  const namespaceEntries = Array.from(typeNamespaceMap.entries())\n    .map(([typeName, namespace]) => `  ${typeName}: \"${namespace}\"`)\n    .join(\",\\n\");\n\n  const namespacesDefinition =\n    multiline /* ts */ `\n      const namespaces: Record<keyof TypeWithFiles, string> = {\n      ${namespaceEntries},\n      };\n    ` + \"\\n\";\n\n  // Generate downloadFile helper function\n  const downloadFunction =\n    multiline /* ts */ `\n      export async function downloadFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ) {\n        return await tailordb.file.download(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate uploadFile helper function\n  const uploadFunction =\n    multiline /* ts */ `\n      export async function uploadFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n        data: string | ArrayBuffer | Uint8Array<ArrayBufferLike> | number[],\n        options?: FileUploadOptions,\n      ): Promise<FileUploadResponse> {\n        return await tailordb.file.upload(namespaces[type], type, field, recordId, data, options);\n      }\n    ` + \"\\n\";\n\n  // Generate deleteFile helper function\n  const deleteFunction =\n    multiline /* ts */ `\n      export async function deleteFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<void> {\n        return await tailordb.file.delete(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate getFileMetadata helper function\n  const getMetadataFunction =\n    multiline /* ts */ `\n      export async function getFileMetadata<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<FileMetadata> {\n        return await tailordb.file.getMetadata(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate openFileDownloadStream helper function\n  const openDownloadStreamFunction =\n    multiline /* ts */ `\n      export async function openFileDownloadStream<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<FileStreamIterator> {\n        return await tailordb.file.openDownloadStream(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  return [\n    interfaceDefinition,\n    namespacesDefinition,\n    downloadFunction,\n    uploadFunction,\n    deleteFunction,\n    getMetadataFunction,\n    openDownloadStreamFunction,\n  ].join(\"\\n\");\n}\n","import type { FileUtilMetadata } from \"./types\";\nimport type { TailorDBType } from \"@/types/tailordb\";\n\n/**\n * Process a TailorDB type and extract file field metadata.\n * @param type - The parsed TailorDB type to process\n * @returns File utility metadata for the type\n */\nexport async function processFileType(type: TailorDBType): Promise<FileUtilMetadata> {\n  const fileFields: string[] = [];\n\n  if (type.files) {\n    for (const fileFieldName of Object.keys(type.files)) {\n      fileFields.push(fileFieldName);\n    }\n  }\n\n  return {\n    name: type.name,\n    fileFields,\n  };\n}\n","import { generateUnifiedFileUtils } from \"./generate-file-utils\";\nimport { processFileType } from \"./process-file-type\";\nimport type { FileUtilMetadata } from \"./types\";\nimport type { Plugin } from \"@/types/plugin\";\nimport type { GeneratorResult, TailorDBReadyContext } from \"@/types/plugin-generation\";\n\n/** Unique identifier for the file utilities generator plugin. */\nexport const FileUtilsGeneratorID = \"@tailor-platform/file-utils\";\n\ntype FileUtilsPluginOptions = {\n  distPath: string;\n};\n\n/**\n * Plugin that generates TypeWithFiles interface from TailorDB type definitions.\n * @param options - Plugin options\n * @param options.distPath - Output file path for generated file utilities\n * @returns Plugin instance with onTailorDBReady hook\n */\nexport function fileUtilsPlugin(\n  options: FileUtilsPluginOptions,\n): Plugin<unknown, FileUtilsPluginOptions> {\n  return {\n    id: FileUtilsGeneratorID,\n    description: \"Generates TypeWithFiles interface from TailorDB type definitions\",\n    pluginConfig: options,\n\n    async onTailorDBReady(\n      ctx: TailorDBReadyContext<FileUtilsPluginOptions>,\n    ): Promise<GeneratorResult> {\n      const namespaceData: { namespace: string; types: FileUtilMetadata[] }[] = [];\n\n      for (const ns of ctx.tailordb) {\n        const typesWithFiles: FileUtilMetadata[] = [];\n\n        for (const type of Object.values(ns.types)) {\n          const metadata = await processFileType(type);\n          if (metadata.fileFields.length > 0) {\n            typesWithFiles.push(metadata);\n          }\n        }\n\n        if (typesWithFiles.length > 0) {\n          namespaceData.push({\n            namespace: ns.namespace,\n            types: typesWithFiles,\n          });\n        }\n      }\n\n      const files: GeneratorResult[\"files\"] = [];\n      if (namespaceData.length > 0) {\n        const content = generateUnifiedFileUtils(namespaceData);\n        if (content) {\n          files.push({\n            path: ctx.pluginConfig.distPath,\n            content,\n          });\n        }\n      }\n\n      return { files };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,yBACd,eACQ;AACR,KAAI,cAAc,WAAW,EAC3B,QAAO;CAIT,MAAM,mCAAmB,IAAI,KAAqB;CAClD,MAAM,gCAAgB,IAAI,KAAuB;AAEjD,MAAK,MAAM,EAAE,WAAW,WAAW,cACjC,MAAK,MAAM,QAAQ,OAAO;AACxB,mBAAiB,IAAI,KAAK,MAAM,UAAU;AAC1C,gBAAc,IAAI,KAAK,MAAM,KAAK,WAAW;;AAIjD,KAAI,iBAAiB,SAAS,EAC5B,QAAO;AA4FT,QAAO;EAhFL,EAAmB;;QARG,MAAM,KAAK,cAAc,SAAS,CAAC,CACxD,KAAK,CAAC,UAAU,YAAY;AAE3B,UAAO,KAAK,SAAS,mBADG,OAAO,KAAK,UAAU,IAAI,MAAM,GAAG,CAAC,KAAK,MAAM,CACf;IACxD,CACD,KAAK,KAAK,CAKS;;QAEhB;EAQJ,EAAmB;;QALI,MAAM,KAAK,iBAAiB,SAAS,CAAC,CAC5D,KAAK,CAAC,UAAU,eAAe,KAAK,SAAS,KAAK,UAAU,GAAG,CAC/D,KAAK,MAAM,CAKS;;QAEjB;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;;;QAUf;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;QAQf;EAUL,CAAC,KAAK,KAAK;;;;;;;;;;ACvHd,eAAsB,gBAAgB,MAA+C;CACnF,MAAM,aAAuB,EAAE;AAE/B,KAAI,KAAK,MACP,MAAK,MAAM,iBAAiB,OAAO,KAAK,KAAK,MAAM,CACjD,YAAW,KAAK,cAAc;AAIlC,QAAO;EACL,MAAM,KAAK;EACX;EACD;;;;;;ACbH,MAAa,uBAAuB;;;;;;;AAYpC,SAAgB,gBACd,SACyC;AACzC,QAAO;EACL,IAAI;EACJ,aAAa;EACb,cAAc;EAEd,MAAM,gBACJ,KAC0B;GAC1B,MAAM,gBAAoE,EAAE;AAE5E,QAAK,MAAM,MAAM,IAAI,UAAU;IAC7B,MAAM,iBAAqC,EAAE;AAE7C,SAAK,MAAM,QAAQ,OAAO,OAAO,GAAG,MAAM,EAAE;KAC1C,MAAM,WAAW,MAAM,gBAAgB,KAAK;AAC5C,SAAI,SAAS,WAAW,SAAS,EAC/B,gBAAe,KAAK,SAAS;;AAIjC,QAAI,eAAe,SAAS,EAC1B,eAAc,KAAK;KACjB,WAAW,GAAG;KACd,OAAO;KACR,CAAC;;GAIN,MAAM,QAAkC,EAAE;AAC1C,OAAI,cAAc,SAAS,GAAG;IAC5B,MAAM,UAAU,yBAAyB,cAAc;AACvD,QAAI,QACF,OAAM,KAAK;KACT,MAAM,IAAI,aAAa;KACvB;KACD,CAAC;;AAIN,UAAO,EAAE,OAAO;;EAEnB"}
+{"version":3,"file":"file-utils-DeWpvq3T.mjs","names":[],"sources":["../src/plugin/builtin/file-utils/generate-file-utils.ts","../src/plugin/builtin/file-utils/process-file-type.ts","../src/plugin/builtin/file-utils/index.ts"],"sourcesContent":["import multiline from \"multiline-ts\";\nimport type { FileUtilMetadata } from \"./types\";\n\n/**\n * Generate unified file utility functions from collected metadata.\n * @param namespaceData - Namespace data with file utility metadata\n * @returns Generated file utility code\n */\nexport function generateUnifiedFileUtils(\n  namespaceData: { namespace: string; types: FileUtilMetadata[] }[],\n): string {\n  if (namespaceData.length === 0) {\n    return \"\";\n  }\n\n  // Collect all types with their namespace\n  const typeNamespaceMap = new Map<string, string>();\n  const typeFieldsMap = new Map<string, string[]>();\n\n  for (const { namespace, types } of namespaceData) {\n    for (const type of types) {\n      typeNamespaceMap.set(type.name, namespace);\n      typeFieldsMap.set(type.name, type.fileFields);\n    }\n  }\n\n  if (typeNamespaceMap.size === 0) {\n    return \"\";\n  }\n\n  // Generate interface fields\n  const interfaceFields = Array.from(typeFieldsMap.entries())\n    .map(([typeName, fields]) => {\n      const fieldNamesUnion = fields.map((field) => `\"${field}\"`).join(\" | \");\n      return `  ${typeName}: {\\n    fields: ${fieldNamesUnion};\\n  };`;\n    })\n    .join(\"\\n\");\n\n  const interfaceDefinition =\n    multiline /* ts */ `\n      export interface TypeWithFiles {\n      ${interfaceFields}\n      }\n    ` + \"\\n\";\n\n  // Generate namespaces object\n  const namespaceEntries = Array.from(typeNamespaceMap.entries())\n    .map(([typeName, namespace]) => `  ${typeName}: \"${namespace}\"`)\n    .join(\",\\n\");\n\n  const namespacesDefinition =\n    multiline /* ts */ `\n      const namespaces: Record<keyof TypeWithFiles, string> = {\n      ${namespaceEntries},\n      };\n    ` + \"\\n\";\n\n  // Generate downloadFile helper function\n  const downloadFunction =\n    multiline /* ts */ `\n      export async function downloadFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ) {\n        return await tailordb.file.download(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate uploadFile helper function\n  const uploadFunction =\n    multiline /* ts */ `\n      export async function uploadFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n        data: string | ArrayBuffer | Uint8Array<ArrayBufferLike> | number[],\n        options?: FileUploadOptions,\n      ): Promise<FileUploadResponse> {\n        return await tailordb.file.upload(namespaces[type], type, field, recordId, data, options);\n      }\n    ` + \"\\n\";\n\n  // Generate deleteFile helper function\n  const deleteFunction =\n    multiline /* ts */ `\n      export async function deleteFile<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<void> {\n        return await tailordb.file.delete(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate getFileMetadata helper function\n  const getMetadataFunction =\n    multiline /* ts */ `\n      export async function getFileMetadata<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<FileMetadata> {\n        return await tailordb.file.getMetadata(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  // Generate openFileDownloadStream helper function\n  const openDownloadStreamFunction =\n    multiline /* ts */ `\n      export async function openFileDownloadStream<T extends keyof TypeWithFiles>(\n        type: T,\n        field: TypeWithFiles[T][\"fields\"],\n        recordId: string,\n      ): Promise<FileStreamIterator> {\n        return await tailordb.file.openDownloadStream(namespaces[type], type, field, recordId);\n      }\n    ` + \"\\n\";\n\n  return [\n    interfaceDefinition,\n    namespacesDefinition,\n    downloadFunction,\n    uploadFunction,\n    deleteFunction,\n    getMetadataFunction,\n    openDownloadStreamFunction,\n  ].join(\"\\n\");\n}\n","import type { FileUtilMetadata } from \"./types\";\nimport type { TailorDBType } from \"@/types/tailordb\";\n\n/**\n * Process a TailorDB type and extract file field metadata.\n * @param type - The parsed TailorDB type to process\n * @returns File utility metadata for the type\n */\nexport async function processFileType(type: TailorDBType): Promise<FileUtilMetadata> {\n  const fileFields: string[] = [];\n\n  if (type.files) {\n    for (const fileFieldName of Object.keys(type.files)) {\n      fileFields.push(fileFieldName);\n    }\n  }\n\n  return {\n    name: type.name,\n    fileFields,\n  };\n}\n","import { generateUnifiedFileUtils } from \"./generate-file-utils\";\nimport { processFileType } from \"./process-file-type\";\nimport type { FileUtilMetadata } from \"./types\";\nimport type { Plugin } from \"@/types/plugin\";\nimport type { GeneratorResult, TailorDBReadyContext } from \"@/types/plugin-generation\";\n\n/** Unique identifier for the file utilities generator plugin. */\nexport const FileUtilsGeneratorID = \"@tailor-platform/file-utils\";\n\ntype FileUtilsPluginOptions = {\n  distPath: string;\n};\n\n/**\n * Plugin that generates TypeWithFiles interface from TailorDB type definitions.\n * @param options - Plugin options\n * @param options.distPath - Output file path for generated file utilities\n * @returns Plugin instance with onTailorDBReady hook\n */\nexport function fileUtilsPlugin(\n  options: FileUtilsPluginOptions,\n): Plugin<unknown, FileUtilsPluginOptions> {\n  return {\n    id: FileUtilsGeneratorID,\n    description: \"Generates TypeWithFiles interface from TailorDB type definitions\",\n    pluginConfig: options,\n\n    async onTailorDBReady(\n      ctx: TailorDBReadyContext<FileUtilsPluginOptions>,\n    ): Promise<GeneratorResult> {\n      const namespaceData: { namespace: string; types: FileUtilMetadata[] }[] = [];\n\n      for (const ns of ctx.tailordb) {\n        const typesWithFiles: FileUtilMetadata[] = [];\n\n        for (const type of Object.values(ns.types)) {\n          const metadata = await processFileType(type);\n          if (metadata.fileFields.length > 0) {\n            typesWithFiles.push(metadata);\n          }\n        }\n\n        if (typesWithFiles.length > 0) {\n          namespaceData.push({\n            namespace: ns.namespace,\n            types: typesWithFiles,\n          });\n        }\n      }\n\n      const files: GeneratorResult[\"files\"] = [];\n      if (namespaceData.length > 0) {\n        const content = generateUnifiedFileUtils(namespaceData);\n        if (content) {\n          files.push({\n            path: ctx.pluginConfig.distPath,\n            content,\n          });\n        }\n      }\n\n      return { files };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,yBACd,eACQ;AACR,KAAI,cAAc,WAAW,EAC3B,QAAO;CAIT,MAAM,mCAAmB,IAAI,KAAqB;CAClD,MAAM,gCAAgB,IAAI,KAAuB;AAEjD,MAAK,MAAM,EAAE,WAAW,WAAW,cACjC,MAAK,MAAM,QAAQ,OAAO;AACxB,mBAAiB,IAAI,KAAK,MAAM,UAAU;AAC1C,gBAAc,IAAI,KAAK,MAAM,KAAK,WAAW;;AAIjD,KAAI,iBAAiB,SAAS,EAC5B,QAAO;AA4FT,QAAO;EAhFL,EAAmB;;QARG,MAAM,KAAK,cAAc,SAAS,CAAC,CACxD,KAAK,CAAC,UAAU,YAAY;AAE3B,UAAO,KAAK,SAAS,mBADG,OAAO,KAAK,UAAU,IAAI,MAAM,GAAG,CAAC,KAAK,MAAM,CACf;IACxD,CACD,KAAK,KAAK,CAKS;;QAEhB;EAQJ,EAAmB;;QALI,MAAM,KAAK,iBAAiB,SAAS,CAAC,CAC5D,KAAK,CAAC,UAAU,eAAe,KAAK,SAAS,KAAK,UAAU,GAAG,CAC/D,KAAK,MAAM,CAKS;;QAEjB;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;;;QAUf;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;QAQf;EAIJ,EAAmB;;;;;;;;QAQf;EAUL,CAAC,KAAK,KAAK;;;;;;;;;;ACvHd,eAAsB,gBAAgB,MAA+C;CACnF,MAAM,aAAuB,EAAE;AAE/B,KAAI,KAAK,MACP,MAAK,MAAM,iBAAiB,OAAO,KAAK,KAAK,MAAM,CACjD,YAAW,KAAK,cAAc;AAIlC,QAAO;EACL,MAAM,KAAK;EACX;EACD;;;;;;ACbH,MAAa,uBAAuB;;;;;;;AAYpC,SAAgB,gBACd,SACyC;AACzC,QAAO;EACL,IAAI;EACJ,aAAa;EACb,cAAc;EAEd,MAAM,gBACJ,KAC0B;GAC1B,MAAM,gBAAoE,EAAE;AAE5E,QAAK,MAAM,MAAM,IAAI,UAAU;IAC7B,MAAM,iBAAqC,EAAE;AAE7C,SAAK,MAAM,QAAQ,OAAO,OAAO,GAAG,MAAM,EAAE;KAC1C,MAAM,WAAW,MAAM,gBAAgB,KAAK;AAC5C,SAAI,SAAS,WAAW,SAAS,EAC/B,gBAAe,KAAK,SAAS;;AAIjC,QAAI,eAAe,SAAS,EAC1B,eAAc,KAAK;KACjB,WAAW,GAAG;KACd,OAAO;KACR,CAAC;;GAIN,MAAM,QAAkC,EAAE;AAC1C,OAAI,cAAc,SAAS,GAAG;IAC5B,MAAM,UAAU,yBAAyB,cAAc;AACvD,QAAI,QACF,OAAM,KAAK;KACT,MAAM,IAAI,aAAa;KACvB;KACD,CAAC;;AAIN,UAAO,EAAE,OAAO;;EAEnB"}

package/dist/{index-DTJkkO-t.d.mts → index-BUT18Kak.d.mts}

@@ -1,5 +1,5 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as Plugin } from "./plugin-D8hKE6rZ.mjs";
+import { n as Plugin } from "./plugin-D6P4g_2L.mjs";
 
 //#region src/plugin/builtin/kysely-type/index.d.ts
 /** Unique identifier for the Kysely type generator plugin. */
@@ -16,4 +16,4 @@ type KyselyTypePluginOptions = {
 declare function kyselyTypePlugin(options: KyselyTypePluginOptions): Plugin<unknown, KyselyTypePluginOptions>;
 //#endregion
 export { kyselyTypePlugin as n, KyselyGeneratorID as t };
-//# sourceMappingURL=index-DTJkkO-t.d.mts.map
+//# sourceMappingURL=index-BUT18Kak.d.mts.map

package/dist/{index--9iVDOXn.d.mts → index-BVJQLjyN.d.mts}

@@ -1,12 +1,24 @@
 /// <reference types="@tailor-platform/function-types" />
-import { $ as FieldOptions, At as TailorDBTrigger$1, Ct as ExecutorInput, Dt as IncomingWebhookTrigger$1, Et as IdpUserTrigger$1, F as UserAttributeListKey, H as TailorDBInstance, I as UserAttributeMap, Mt as WorkflowOperation$1, Nt as AuthInvoker$1, Ot as ResolverExecutedTrigger$1, Q as FieldMetadata, Tt as GqlOperation$1, U as TailorDBType, X as ArrayFieldOutput, Z as DefinedFieldMetadata, at as JsonCompatible, bt as GeneratorConfig, ct as TailorEnv, et as FieldOutput, ft as TailorUser, ht as AllowedValuesOutput, it as InferFieldsOutput, j as DefinedAuth, jt as WebhookOperation$1, k as AuthServiceInput, kt as ScheduleTriggerInput, lt as TailorActor, mt as AllowedValues, n as Plugin, nt as TailorAnyField, ot as output$1, rt as TailorField, tt as TailorFieldType, vt as Resolver, wt as FunctionOperation$1, xt as AuthAccessTokenTrigger$1, yt as ResolverInput } from "./plugin-D8hKE6rZ.mjs";
-import { b as IdPInput, g as IdpDefinitionBrand, n as AppConfig, t as RetryPolicy } from "./workflow.generated-DMt8PNVd.mjs";
+import { $ as FieldOptions, At as WebhookOperation$1, Ct as FunctionOperation$1, Dt as ResolverExecutedTrigger$1, Et as IncomingWebhookTrigger$1, F as UserAttributeListKey, H as TailorDBInstance, I as UserAttributeMap, Mt as AuthInvoker$1, Ot as ScheduleTriggerInput, Q as FieldMetadata, St as ExecutorInput, Tt as IdpUserTrigger$1, U as TailorDBType, X as ArrayFieldOutput, Z as DefinedFieldMetadata, _t as Resolver, at as JsonCompatible, bt as AuthAccessTokenTrigger$1, dt as TailorUser, et as FieldOutput, it as InferFieldsOutput, j as DefinedAuth, jt as WorkflowOperation$1, k as AuthServiceInput, kt as TailorDBTrigger$1, mt as AllowedValuesOutput, n as Plugin, nt as TailorAnyField, ot as output$1, pt as AllowedValues, rt as TailorField, tt as TailorFieldType, ut as InferredAttributeMap, vt as ResolverInput, wt as GqlOperation$1, yt as GeneratorConfig } from "./plugin-D6P4g_2L.mjs";
+import { n as TailorEnv, r as TailorActor } from "./env-04IQXqsl.mjs";
+import { _ as IdpDefinitionBrand, g as IdPUserField, n as AppConfig, t as RetryPolicy, x as IdPInput } from "./workflow.generated-Bj_DVqGh.mjs";
 import * as _$zod from "zod";
 import { JsonPrimitive, Jsonifiable, Jsonify } from "type-fest";
 import { Client } from "@urql/core";
 import { StandardCRON } from "ts-cron-validator";
 import * as _$zod_v4_core0 from "zod/v4/core";
 
+//#region src/configure/types/machine-user.d.ts
+interface MachineUserNameRegistry {}
+/**
+ * Machine user name.
+ *
+ * When `tailor.d.ts` is generated (via `tailor-sdk apply`/`generate`), this is narrowed
+ * to the union of defined machine user names. When no machine users are registered yet,
+ * falls back to `string` to avoid blocking editing before the first generate run.
+ */
+type MachineUserName = keyof MachineUserNameRegistry extends never ? string : keyof MachineUserNameRegistry & string;
+//#endregion
 //#region src/configure/services/auth/index.d.ts
 type MachineUserAttributeFields = Record<string, TailorField<DefinedFieldMetadata, unknown, FieldMetadata, TailorFieldType>>;
 type PlaceholderUser = TailorDBInstance<Record<string, never>, Record<string, never>>;
@@ -59,10 +71,11 @@ type NormalizedOutput<Output extends TailorAnyField | Record<string, TailorAnyFi
   type: "nested";
   array: false;
 }, InferFieldsOutput<Extract<Output, Record<string, TailorAnyField>>>>;
-type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Output extends TailorAnyField | Record<string, TailorAnyField>> = Omit<ResolverInput, "input" | "output" | "body"> & Readonly<{
+type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Output extends TailorAnyField | Record<string, TailorAnyField>> = Omit<ResolverInput, "input" | "output" | "body" | "authInvoker"> & Readonly<{
   input?: Input;
   output: NormalizedOutput<Output>;
   body: (context: Context<Input>) => OutputType<Output> | Promise<OutputType<Output>>;
+  authInvoker?: AuthInvoker<string> | MachineUserName;
 }>;
 /**
  * Create a resolver definition for the Tailor SDK.
@@ -102,10 +115,11 @@ type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Ou
  *   }),
  * });
  */
-declare function createResolver<Input extends Record<string, TailorAnyField> | undefined = undefined, Output extends TailorAnyField | Record<string, TailorAnyField> = TailorAnyField>(config: Omit<ResolverInput, "input" | "output" | "body"> & Readonly<{
+declare function createResolver<Input extends Record<string, TailorAnyField> | undefined = undefined, Output extends TailorAnyField | Record<string, TailorAnyField> = TailorAnyField>(config: Omit<ResolverInput, "input" | "output" | "body" | "authInvoker"> & Readonly<{
   input?: Input;
   output: Output;
   body: (context: Context<Input>) => OutputType<Output> | Promise<OutputType<Output>>;
+  authInvoker?: AuthInvoker<string> | MachineUserName;
 }>): ResolverReturn<Input, Output>;
 type ResolverConfig = ReturnType<typeof createResolver<any, any>>;
 //#endregion
@@ -267,7 +281,7 @@ interface Workflow<Job extends WorkflowJob<any, any, any> = WorkflowJob<any, any
   mainJob: Job;
   retryPolicy?: RetryPolicy;
   trigger: (args: Parameters<Job["trigger"]>[0], options?: {
-    authInvoker: AuthInvoker<string>;
+    authInvoker: AuthInvoker<string> | MachineUserName;
   }) => Promise<string>;
 }
 interface WorkflowDefinition<Job extends WorkflowJob<any, any, any>> {
@@ -304,14 +318,16 @@ declare function createWorkflow<Job extends WorkflowJob<any, any, any>>(config:
 //#endregion
 //#region src/configure/services/executor/operation.d.ts
 /** Function-based executor operation. The body receives the trigger args. */
-type FunctionOperation<Args> = Omit<FunctionOperation$1, "body"> & {
+type FunctionOperation<Args> = Omit<FunctionOperation$1, "body" | "authInvoker"> & {
   body: (args: Args) => void | Promise<void>;
+  authInvoker?: AuthInvoker<string> | MachineUserName;
 };
 type UrqlOperationArgs = Parameters<Client["query"] | Client["mutation"]>;
 /** GraphQL-based executor operation. Executes a GraphQL query or mutation. */
-type GqlOperation<Args> = Omit<GqlOperation$1, "query" | "variables"> & {
+type GqlOperation<Args> = Omit<GqlOperation$1, "query" | "variables" | "authInvoker"> & {
   query: UrqlOperationArgs[0];
   variables?: (args: Args) => UrqlOperationArgs[1];
+  authInvoker?: AuthInvoker<string> | MachineUserName;
 };
 type RequestHeader = "A-IM" | "Accept" | "Accept-Additions" | "Accept-CH" | "Accept-Charset" | "Accept-Datetime" | "Accept-Encoding" | "Accept-Features" | "Accept-Language" | "Accept-Patch" | "Accept-Post" | "Accept-Ranges" | "Accept-Signature" | "Access-Control" | "Access-Control-Allow-Credentials" | "Access-Control-Allow-Headers" | "Access-Control-Allow-Methods" | "Access-Control-Allow-Origin" | "Access-Control-Expose-Headers" | "Access-Control-Max-Age" | "Access-Control-Request-Headers" | "Access-Control-Request-Method" | "Age" | "Allow" | "ALPN" | "Alt-Svc" | "Alt-Used" | "Alternates" | "AMP-Cache-Transform" | "Apply-To-Redirect-Ref" | "Authentication-Control" | "Authentication-Info" | "Authorization" | "Available-Dictionary" | "C-Ext" | "C-Man" | "C-Opt" | "C-PEP" | "C-PEP-Info" | "Cache-Control" | "Cache-Status" | "Cal-Managed-ID" | "CalDAV-Timezones" | "Capsule-Protocol" | "CDN-Cache-Control" | "CDN-Loop" | "Cert-Not-After" | "Cert-Not-Before" | "Clear-Site-Data" | "Client-Cert" | "Client-Cert-Chain" | "Close" | "CMCD-Object" | "CMCD-Request" | "CMCD-Session" | "CMCD-Status" | "CMSD-Dynamic" | "CMSD-Static" | "Concealed-Auth-Export" | "Configuration-Context" | "Connection" | "Content-Base" | "Content-Digest" | "Content-Disposition" | "Content-Encoding" | "Content-ID" | "Content-Language" | "Content-Length" | "Content-Location" | "Content-MD5" | "Content-Range" | "Content-Script-Type" | "Content-Security-Policy" | "Content-Security-Policy-Report-Only" | "Content-Style-Type" | "Content-Type" | "Content-Version" | "Cookie" | "Cookie2" | "Cross-Origin-Embedder-Policy" | "Cross-Origin-Embedder-Policy-Report-Only" | "Cross-Origin-Opener-Policy" | "Cross-Origin-Opener-Policy-Report-Only" | "Cross-Origin-Resource-Policy" | "CTA-Common-Access-Token" | "DASL" | "Date" | "DAV" | "Default-Style" | "Delta-Base" | "Deprecation" | "Depth" | "Derived-From" | "Destination" | "Differential-ID" | "Dictionary-ID" | "Digest" | "DPoP" | "DPoP-Nonce" | "Early-Data" | "EDIINT-Features" | "ETag" | "Expect" | "Expect-CT" | "Expires" | "Ext" | "Forwarded" | "From" | "GetProfile" | "Hobareg" | "Host" | "HTTP2-Settings" | "If" | "If-Match" | "If-Modified-Since" | "If-None-Match" | "If-Range" | "If-Schedule-Tag-Match" | "If-Unmodified-Since" | "IM" | "Include-Referred-Token-Binding-ID" | "Isolation" | "Keep-Alive" | "Label" | "Last-Event-ID" | "Last-Modified" | "Link" | "Link-Template" | "Location" | "Lock-Token" | "Man" | "Max-Forwards" | "Memento-Datetime" | "Meter" | "Method-Check" | "Method-Check-Expires" | "MIME-Version" | "Negotiate" | "NEL" | "OData-EntityId" | "OData-Isolation" | "OData-MaxVersion" | "OData-Version" | "Opt" | "Optional-WWW-Authenticate" | "Ordering-Type" | "Origin" | "Origin-Agent-Cluster" | "OSCORE" | "OSLC-Core-Version" | "Overwrite" | "P3P" | "PEP" | "PEP-Info" | "Permissions-Policy" | "PICS-Label" | "Ping-From" | "Ping-To" | "Position" | "Pragma" | "Prefer" | "Preference-Applied" | "Priority" | "ProfileObject" | "Protocol" | "Protocol-Info" | "Protocol-Query" | "Protocol-Request" | "Proxy-Authenticate" | "Proxy-Authentication-Info" | "Proxy-Authorization" | "Proxy-Features" | "Proxy-Instruction" | "Proxy-Status" | "Public" | "Public-Key-Pins" | "Public-Key-Pins-Report-Only" | "Range" | "Redirect-Ref" | "Referer" | "Referer-Root" | "Referrer-Policy" | "Refresh" | "Repeatability-Client-ID" | "Repeatability-First-Sent" | "Repeatability-Request-ID" | "Repeatability-Result" | "Replay-Nonce" | "Reporting-Endpoints" | "Repr-Digest" | "Retry-After" | "Safe" | "Schedule-Reply" | "Schedule-Tag" | "Sec-GPC" | "Sec-Purpose" | "Sec-Token-Binding" | "Sec-WebSocket-Accept" | "Sec-WebSocket-Extensions" | "Sec-WebSocket-Key" | "Sec-WebSocket-Protocol" | "Sec-WebSocket-Version" | "Security-Scheme" | "Server" | "Server-Timing" | "Set-Cookie" | "Set-Cookie2" | "SetProfile" | "Signature" | "Signature-Input" | "SLUG" | "SoapAction" | "Status-URI" | "Strict-Transport-Security" | "Sunset" | "Surrogate-Capability" | "Surrogate-Control" | "TCN" | "TE" | "Timeout" | "Timing-Allow-Origin" | "Topic" | "Traceparent" | "Tracestate" | "Trailer" | "Transfer-Encoding" | "TTL" | "Upgrade" | "Urgency" | "URI" | "Use-As-Dictionary" | "User-Agent" | "Variant-Vary" | "Vary" | "Via" | "Want-Content-Digest" | "Want-Digest" | "Want-Repr-Digest" | "Warning" | "WWW-Authenticate" | "X-Content-Type-Options" | "X-Frame-Options" | (string & {});
 /** Outbound webhook executor operation. Sends HTTP requests to external URLs. */
@@ -332,7 +348,7 @@ type WorkflowInput$1<W extends Workflow> = Parameters<W["trigger"]>[0];
 type WorkflowOperation<Args, W extends Workflow = Workflow> = Omit<WorkflowOperation$1, "workflowName" | "args" | "authInvoker"> & {
   workflow: W;
   args?: WorkflowInput$1<W> | ((args: Args) => WorkflowInput$1<W>);
-  authInvoker?: AuthInvoker<string>;
+  authInvoker?: AuthInvoker<string> | MachineUserName;
 };
 type Operation<Args> = FunctionOperation<Args> | GqlOperation<Args> | WebhookOperation<Args> | WorkflowOperation<Args>;
 //#endregion
@@ -647,7 +663,7 @@ type Executor<T extends Trigger<unknown>, O> = O extends {
     kind: "workflow";
     workflow: W;
     args?: WorkflowInput<W> | ((args: TriggerArgs<T>) => WorkflowInput<W>);
-    authInvoker?: AuthInvoker<string>;
+    authInvoker?: AuthInvoker<string> | MachineUserName;
   };
 } : ExecutorBase<T> & {
   operation: O;
@@ -697,6 +713,74 @@ declare function createExecutor<Args, O extends Operation<Args> | {
   workflow: Workflow;
 }>(config: Executor<Trigger<Args>, O>): Executor<Trigger<Args>, O>;
 //#endregion
+//#region src/configure/services/idp/permission.d.ts
+type EqualityOperator = "=" | "!=";
+type ContainsOperator = "in" | "not in";
+type StringFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string ? K : never }[keyof User];
+type StringArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string[] ? K : never }[keyof User];
+type BooleanFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean ? K : never }[keyof User];
+type BooleanArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean[] ? K : never }[keyof User];
+type UserStringOperand<User extends object = InferredAttributeMap> = {
+  user: StringFieldKeys<User> | "id";
+};
+type UserStringArrayOperand<User extends object = InferredAttributeMap> = {
+  user: StringArrayFieldKeys<User>;
+};
+type UserBooleanOperand<User extends object = InferredAttributeMap> = {
+  user: BooleanFieldKeys<User> | "_loggedIn";
+};
+type UserBooleanArrayOperand<User extends object = InferredAttributeMap> = {
+  user: BooleanArrayFieldKeys<User>;
+};
+type IdPUserOperand<Update extends boolean = false> = Update extends true ? {
+  oldIdpUser: IdPUserField;
+} | {
+  newIdpUser: IdPUserField;
+} : {
+  idpUser: IdPUserField;
+};
+type StringEqualityCondition<User extends object, Update extends boolean> = readonly [string, EqualityOperator, string] | readonly [UserStringOperand<User>, EqualityOperator, string] | readonly [string, EqualityOperator, UserStringOperand<User>] | readonly [IdPUserOperand<Update>, EqualityOperator, string | UserStringOperand<User> | IdPUserOperand<Update>] | readonly [string | UserStringOperand<User>, EqualityOperator, IdPUserOperand<Update>];
+type BooleanEqualityCondition<User extends object, Update extends boolean> = readonly [boolean, EqualityOperator, boolean] | readonly [UserBooleanOperand<User>, EqualityOperator, boolean] | readonly [boolean, EqualityOperator, UserBooleanOperand<User>] | readonly [IdPUserOperand<Update>, EqualityOperator, boolean | UserBooleanOperand<User> | IdPUserOperand<Update>] | readonly [boolean | UserBooleanOperand<User>, EqualityOperator, IdPUserOperand<Update>];
+type EqualityCondition<User extends object = InferredAttributeMap, Update extends boolean = boolean> = StringEqualityCondition<User, Update> | BooleanEqualityCondition<User, Update>;
+type StringContainsCondition<User extends object, Update extends boolean> = readonly [string, ContainsOperator, string[]] | readonly [UserStringOperand<User>, ContainsOperator, string[]] | readonly [string, ContainsOperator, UserStringArrayOperand<User>] | readonly [IdPUserOperand<Update>, ContainsOperator, string[] | UserStringArrayOperand<User>];
+type BooleanContainsCondition<User extends object, Update extends boolean> = readonly [boolean, ContainsOperator, boolean[]] | readonly [UserBooleanOperand<User>, ContainsOperator, boolean[]] | readonly [boolean, ContainsOperator, UserBooleanArrayOperand<User>] | readonly [IdPUserOperand<Update>, ContainsOperator, boolean[] | UserBooleanArrayOperand<User>];
+type ContainsCondition<User extends object = InferredAttributeMap, Update extends boolean = boolean> = StringContainsCondition<User, Update> | BooleanContainsCondition<User, Update>;
+type IdPPermissionCondition<User extends object = InferredAttributeMap, Update extends boolean = boolean> = EqualityCondition<User, Update> | ContainsCondition<User, Update>;
+type IdPActionPermission<User extends object = InferredAttributeMap, Update extends boolean = boolean> = {
+  conditions: IdPPermissionCondition<User, Update> | readonly IdPPermissionCondition<User, Update>[];
+  description?: string | undefined;
+  permit?: boolean;
+} | readonly [...IdPPermissionCondition<User, Update>, ...([] | [boolean])] | readonly [...IdPPermissionCondition<User, Update>[], ...([] | [boolean])];
+/**
+ * Per-operation permission policies for an IdP service.
+ * Defines create, read, update, delete, and sendPasswordResetEmail permissions.
+ *
+ * For update operations, use `newIdpUser`/`oldIdpUser` operands instead of `idpUser`.
+ * @example
+ * const permission: IdPPermission = {
+ *   create: [{ conditions: [[{ user: "role" }, "=", "ADMIN"]], permit: true }],
+ *   read: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+ *   update: [{ conditions: [[{ newIdpUser: "name" }, "=", { user: "id" }]], permit: true }],
+ *   delete: [{ conditions: [[{ user: "role" }, "=", "ADMIN"]], permit: true }],
+ *   sendPasswordResetEmail: [{ conditions: [], permit: true }],
+ * };
+ */
+type IdPPermission<User extends object = InferredAttributeMap> = {
+  create: readonly IdPActionPermission<User, false>[];
+  read: readonly IdPActionPermission<User, false>[];
+  update: readonly IdPActionPermission<User, true>[];
+  delete: readonly IdPActionPermission<User, false>[];
+  sendPasswordResetEmail: readonly IdPActionPermission<User, false>[];
+};
+/**
+ * Grants full IdP permission access without any conditions.
+ *
+ * Unsafe and intended only for local development, prototyping, or tests.
+ * Do not use this in production environments, as it effectively disables
+ * authorization checks.
+ */
+declare const unsafeAllowAllIdPPermission: IdPPermission;
+//#endregion
 //#region src/configure/services/idp/index.d.ts
 /**
  * Define an IdP service configuration for the Tailor SDK.
@@ -705,8 +789,9 @@ declare function createExecutor<Args, O extends Operation<Args> | {
  * @param config - IdP configuration
  * @returns Defined IdP service
  */
-declare function defineIdp<const TClients extends string[]>(name: string, config: Omit<IdPInput, "name" | "clients"> & {
+declare function defineIdp<const TClients extends string[]>(name: string, config: Omit<IdPInput, "name" | "clients" | "permission"> & {
   clients: TClients;
+  permission?: IdPPermission;
 }): {
   readonly name: string;
   readonly provider: (providerName: string, clientName: TClients[number]) => {
@@ -746,6 +831,7 @@ declare function defineIdp<const TClients extends string[]>(name: string, config
     passwordResetSubject?: string | undefined;
   } | undefined;
   readonly clients: TClients;
+  readonly permission?: IdPPermission;
 } & IdpDefinitionBrand;
 //#endregion
 //#region src/configure/config.d.ts
@@ -869,5 +955,5 @@ declare namespace t {
   type infer<T> = TailorOutput<T>;
 }
 //#endregion
-export { createWorkflow as $, ResolverExecutedArgs as A, idpUserUpdatedTrigger as B, IdpUserCreatedArgs as C, RecordCreatedArgs as D, IdpUserUpdatedArgs as E, authAccessTokenRevokedTrigger as F, resolverExecutedTrigger as G, recordDeletedTrigger as H, authAccessTokenTrigger as I, Operation as J, FunctionOperation as K, idpUserCreatedTrigger as L, TailorDBTrigger as M, authAccessTokenIssuedTrigger as N, RecordDeletedArgs as O, authAccessTokenRefreshedTrigger as P, WorkflowConfig as Q, idpUserDeletedTrigger as R, IdpUserArgs as S, IdpUserTrigger as T, recordTrigger as U, recordCreatedTrigger as V, recordUpdatedTrigger as W, WorkflowOperation as X, WebhookOperation as Y, Workflow as Z, AuthAccessTokenArgs as _, defineGenerators as a, createWorkflowJob as at, AuthAccessTokenRevokedArgs as b, createExecutor as c, AuthInvoker as ct, IncomingWebhookRequest as d, WORKFLOW_TEST_ENV_KEY as et, IncomingWebhookTrigger as f, scheduleTrigger as g, ScheduleTrigger as h, defineConfig as i, WorkflowJobOutput as it, ResolverExecutedTrigger as j, RecordUpdatedArgs as k, Trigger as l, defineAuth as lt, ScheduleArgs as m, output as n, WorkflowJobContext as nt, definePlugins as o, QueryType as ot, incomingWebhookTrigger as p, GqlOperation as q, t as r, WorkflowJobInput as rt, defineIdp as s, createResolver as st, infer as t, WorkflowJob as tt, IncomingWebhookArgs as u, AuthAccessTokenIssuedArgs as v, IdpUserDeletedArgs as w, AuthAccessTokenTrigger as x, AuthAccessTokenRefreshedArgs as y, idpUserTrigger as z };
-//# sourceMappingURL=index--9iVDOXn.d.mts.map
+export { WorkflowOperation as $, RecordCreatedArgs as A, idpUserCreatedTrigger as B, AuthAccessTokenRevokedArgs as C, IdpUserDeletedArgs as D, IdpUserCreatedArgs as E, TailorDBTrigger as F, recordDeletedTrigger as G, idpUserTrigger as H, authAccessTokenIssuedTrigger as I, resolverExecutedTrigger as J, recordTrigger as K, authAccessTokenRefreshedTrigger as L, RecordUpdatedArgs as M, ResolverExecutedArgs as N, IdpUserTrigger as O, ResolverExecutedTrigger as P, WebhookOperation as Q, authAccessTokenRevokedTrigger as R, AuthAccessTokenRefreshedArgs as S, IdpUserArgs as T, idpUserUpdatedTrigger as U, idpUserDeletedTrigger as V, recordCreatedTrigger as W, GqlOperation as X, FunctionOperation as Y, Operation as Z, ScheduleArgs as _, defineGenerators as a, WorkflowJobContext as at, AuthAccessTokenArgs as b, IdPPermission as c, createWorkflowJob as ct, createExecutor as d, AuthInvoker as dt, Workflow as et, Trigger as f, defineAuth as ft, incomingWebhookTrigger as g, IncomingWebhookTrigger as h, defineConfig as i, WorkflowJob as it, RecordDeletedArgs as j, IdpUserUpdatedArgs as k, IdPPermissionCondition as l, QueryType as lt, IncomingWebhookRequest as m, MachineUserNameRegistry as mt, output as n, createWorkflow as nt, definePlugins as o, WorkflowJobInput as ot, IncomingWebhookArgs as p, MachineUserName as pt, recordUpdatedTrigger as q, t as r, WORKFLOW_TEST_ENV_KEY as rt, defineIdp as s, WorkflowJobOutput as st, infer as t, WorkflowConfig as tt, unsafeAllowAllIdPPermission as u, createResolver as ut, ScheduleTrigger as v, AuthAccessTokenTrigger as w, AuthAccessTokenIssuedArgs as x, scheduleTrigger as y, authAccessTokenTrigger as z };
+//# sourceMappingURL=index-BVJQLjyN.d.mts.map

package/dist/{index-D4pBPp65.d.mts → index-C3kcXHXJ.d.mts}

@@ -1,5 +1,5 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as Plugin } from "./plugin-D8hKE6rZ.mjs";
+import { n as Plugin } from "./plugin-D6P4g_2L.mjs";
 
 //#region src/plugin/builtin/file-utils/index.d.ts
 /** Unique identifier for the file utilities generator plugin. */
@@ -16,4 +16,4 @@ type FileUtilsPluginOptions = {
 declare function fileUtilsPlugin(options: FileUtilsPluginOptions): Plugin<unknown, FileUtilsPluginOptions>;
 //#endregion
 export { fileUtilsPlugin as n, FileUtilsGeneratorID as t };
-//# sourceMappingURL=index-D4pBPp65.d.mts.map
+//# sourceMappingURL=index-C3kcXHXJ.d.mts.map

package/dist/{index-niQ9Qblw.d.mts → index-CeS4FA9o.d.mts}

@@ -1,5 +1,5 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as Plugin } from "./plugin-D8hKE6rZ.mjs";
+import { n as Plugin } from "./plugin-D6P4g_2L.mjs";
 
 //#region src/plugin/builtin/enum-constants/index.d.ts
 /** Unique identifier for the enum constants generator plugin. */
@@ -16,4 +16,4 @@ type EnumConstantsPluginOptions = {
 declare function enumConstantsPlugin(options: EnumConstantsPluginOptions): Plugin<unknown, EnumConstantsPluginOptions>;
 //#endregion
 export { enumConstantsPlugin as n, EnumConstantsGeneratorID as t };
-//# sourceMappingURL=index-niQ9Qblw.d.mts.map
+//# sourceMappingURL=index-CeS4FA9o.d.mts.map

package/dist/{index-qVqjEYnr.d.mts → index-DnIg_LfT.d.mts}

@@ -1,5 +1,5 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as Plugin } from "./plugin-D8hKE6rZ.mjs";
+import { n as Plugin } from "./plugin-D6P4g_2L.mjs";
 
 //#region src/plugin/builtin/seed/index.d.ts
 /** Unique identifier for the seed generator plugin. */
@@ -18,4 +18,4 @@ type SeedPluginOptions = {
 declare function seedPlugin(options: SeedPluginOptions): Plugin<unknown, SeedPluginOptions>;
 //#endregion
 export { seedPlugin as n, SeedGeneratorID as t };
-//# sourceMappingURL=index-qVqjEYnr.d.mts.map
+//# sourceMappingURL=index-DnIg_LfT.d.mts.map

package/dist/{interceptor-f7slMkCC.mjs → interceptor-dSNiQq71.mjs}

@@ -31,4 +31,4 @@ function createTracingInterceptor() {
 
 //#endregion
 export { createTracingInterceptor };
-//# sourceMappingURL=interceptor-f7slMkCC.mjs.map
+//# sourceMappingURL=interceptor-dSNiQq71.mjs.map

package/dist/{interceptor-f7slMkCC.mjs.map → interceptor-dSNiQq71.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"interceptor-f7slMkCC.mjs","names":[],"sources":["../src/cli/telemetry/interceptor.ts"],"sourcesContent":["import { trace, SpanStatusCode } from \"@opentelemetry/api\";\nimport type { Interceptor } from \"@connectrpc/connect\";\n\n/**\n * Create a Connect-RPC interceptor that records OTLP spans for each RPC call.\n * When no TracerProvider is registered, the OTel API automatically provides\n * noop spans with zero overhead.\n * @returns Tracing interceptor\n */\nexport function createTracingInterceptor(): Interceptor {\n  return (next) => async (req) => {\n    const tracer = trace.getTracer(\"tailor-sdk\");\n\n    return tracer.startActiveSpan(`rpc.${req.method.name}`, async (span) => {\n      span.setAttribute(\"rpc.method\", req.method.name);\n      span.setAttribute(\"rpc.service\", \"OperatorService\");\n      span.setAttribute(\"rpc.system\", \"connect-rpc\");\n\n      try {\n        const response = await next(req);\n        span.setStatus({ code: SpanStatusCode.OK });\n        return response;\n      } catch (error) {\n        span.setStatus({ code: SpanStatusCode.ERROR });\n        if (error instanceof Error) {\n          span.recordException(error);\n        }\n        throw error;\n      } finally {\n        span.end();\n      }\n    });\n  };\n}\n"],"mappings":";;;;;;;;;;AASA,SAAgB,2BAAwC;AACtD,SAAQ,SAAS,OAAO,QAAQ;AAG9B,SAFe,MAAM,UAAU,aAAa,CAE9B,gBAAgB,OAAO,IAAI,OAAO,QAAQ,OAAO,SAAS;AACtE,QAAK,aAAa,cAAc,IAAI,OAAO,KAAK;AAChD,QAAK,aAAa,eAAe,kBAAkB;AACnD,QAAK,aAAa,cAAc,cAAc;AAE9C,OAAI;IACF,MAAM,WAAW,MAAM,KAAK,IAAI;AAChC,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,OAAO;AACd,SAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAC9C,QAAI,iBAAiB,MACnB,MAAK,gBAAgB,MAAM;AAE7B,UAAM;aACE;AACR,SAAK,KAAK;;IAEZ"}
+{"version":3,"file":"interceptor-dSNiQq71.mjs","names":[],"sources":["../src/cli/telemetry/interceptor.ts"],"sourcesContent":["import { trace, SpanStatusCode } from \"@opentelemetry/api\";\nimport type { Interceptor } from \"@connectrpc/connect\";\n\n/**\n * Create a Connect-RPC interceptor that records OTLP spans for each RPC call.\n * When no TracerProvider is registered, the OTel API automatically provides\n * noop spans with zero overhead.\n * @returns Tracing interceptor\n */\nexport function createTracingInterceptor(): Interceptor {\n  return (next) => async (req) => {\n    const tracer = trace.getTracer(\"tailor-sdk\");\n\n    return tracer.startActiveSpan(`rpc.${req.method.name}`, async (span) => {\n      span.setAttribute(\"rpc.method\", req.method.name);\n      span.setAttribute(\"rpc.service\", \"OperatorService\");\n      span.setAttribute(\"rpc.system\", \"connect-rpc\");\n\n      try {\n        const response = await next(req);\n        span.setStatus({ code: SpanStatusCode.OK });\n        return response;\n      } catch (error) {\n        span.setStatus({ code: SpanStatusCode.ERROR });\n        if (error instanceof Error) {\n          span.recordException(error);\n        }\n        throw error;\n      } finally {\n        span.end();\n      }\n    });\n  };\n}\n"],"mappings":";;;;;;;;;;AASA,SAAgB,2BAAwC;AACtD,SAAQ,SAAS,OAAO,QAAQ;AAG9B,SAFe,MAAM,UAAU,aAAa,CAE9B,gBAAgB,OAAO,IAAI,OAAO,QAAQ,OAAO,SAAS;AACtE,QAAK,aAAa,cAAc,IAAI,OAAO,KAAK;AAChD,QAAK,aAAa,eAAe,kBAAkB;AACnD,QAAK,aAAa,cAAc,cAAc;AAE9C,OAAI;IACF,MAAM,WAAW,MAAM,KAAK,IAAI;AAChC,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,OAAO;AACd,SAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAC9C,QAAI,iBAAiB,MACnB,MAAK,gBAAgB,MAAM;AAE7B,UAAM;aACE;AACR,SAAK,KAAK;;IAEZ"}

package/dist/{job-CPKYCk_e.mjs → job-DkAklmE4.mjs}

@@ -1,5 +1,5 @@
 
-import { t as brandValue } from "./brand-0SscafcY.mjs";
+import { t as brandValue } from "./brand-D-d15jx3.mjs";
 
 //#region src/configure/services/workflow/job.ts
 /**
@@ -51,4 +51,4 @@ const createWorkflowJob = (config) => {
 
 //#endregion
 export { createWorkflowJob as n, WORKFLOW_TEST_ENV_KEY as t };
-//# sourceMappingURL=job-CPKYCk_e.mjs.map
+//# sourceMappingURL=job-DkAklmE4.mjs.map