@tailor-platform/sdk 1.54.3 → 1.55.0

package/dist/utils/test/index.d.mts

@@ -1,6 +1,6 @@
-import { Vt as TailorInvoker } from "../../tailor-db-field-D0qg8s4U.mjs";
-import { O as TailorDBType } from "../../workflow.generated-CWi2rivQ.mjs";
-import { dt as WORKFLOW_TEST_ENV_KEY, n as output, xt as TailorField } from "../../index-DJUoIn_v.mjs";
+import { M as TailorInvoker } from "../../tailordb-BlBGmQK-.mjs";
+import { W as TailorDBType } from "../../workflow.generated-CQg1_Ami.mjs";
+import { At as TailorField, bt as WORKFLOW_TEST_ENV_KEY, n as output } from "../../index-BLsnrEtc.mjs";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 
 //#region src/utils/test/mock.d.ts

package/dist/vitest/index.d.mts

@@ -1,5 +1,5 @@
 import { n as TailorEnv } from "../env-B-g-qgE4.mjs";
-import { Kysely, OperationNodeKind } from "kysely";
+import { Kysely, OperationNode, OperationNodeKind, Transaction } from "kysely";
 import { Plugin } from "vitest/config";
 
 //#region src/vitest/mock.d.ts
@@ -285,9 +285,20 @@ declare const iconvMock: {
 //#region src/vitest/mock-kysely.d.ts
 /** A single statement executed against the mock, captured in order. */
 interface ExecutedQuery {
+  /** The Kysely operation node kind, e.g. `"SelectQueryNode"`. */
   kind: OperationNodeKind;
+  /** The compiled SQL string. */
   sql: string;
+  /** The bound parameter values, in positional order. */
   parameters: readonly unknown[];
+  /** The compiled Kysely operation node. */
+  node: OperationNode;
+  /** One `{ column: value }` map per row written by an insert. */
+  insertRows: () => Record<string, unknown>[];
+  /** The `{ column: value }` map written by a single-row insert. */
+  insertValues: () => Record<string, unknown>;
+  /** The `{ column: value }` map written by an update's SET clause. */
+  updateValues: () => Record<string, unknown>;
 }
 type MockRow = Record<string, unknown>;
 type MockResult = MockRow[] | {
@@ -297,16 +308,29 @@ type MockResult = MockRow[] | {
 type QueryResolver = (query: ExecutedQuery) => MockResult | undefined;
 /** Controls and assertions for a {@link createKyselyMock} instance. */
 interface KyselyMock<DB> {
+  /** The mock Kysely instance to run queries against. */
   db: Kysely<DB>;
+  /** Every recorded query, in execution order. */
   executedQueries: ExecutedQuery[];
+  /** Recorded SELECT queries. */
   selects: ExecutedQuery[];
+  /** Recorded INSERT queries. */
   inserts: ExecutedQuery[];
+  /** Recorded UPDATE queries. */
   updates: ExecutedQuery[];
+  /** Recorded DELETE queries. */
   deletes: ExecutedQuery[];
+  /** Stage the rows the next query returns. */
   enqueueResult: (result: MockResult) => void;
+  /** Stage the rows for several upcoming queries, consumed in order. */
   enqueueResults: (...results: MockResult[]) => void;
+  /** Set a resolver that returns rows by inspecting each query. */
   setQueryResolver: (resolver: QueryResolver) => void;
+  /** Run `fn` inside a real transaction and return its result. */
+  withTx: <R>(fn: (trx: Transaction<DB>) => Promise<R>) => Promise<R>;
+  /** Clear recorded queries and staged results. */
   reset: () => void;
+  /** Same as {@link KyselyMock.reset}; enables `using` disposal. */
   [Symbol.dispose]: () => void;
 }
 /**

package/dist/vitest/index.mjs

@@ -3,7 +3,7 @@ import { a as fileMock, d as workflowMock, l as secretmanagerMock, o as iconvMoc
 import { builtinModules } from "node:module";
 import { fileURLToPath } from "node:url";
 import { dirname, isAbsolute, matchesGlob, relative, resolve } from "node:path";
-import { Kysely, PostgresAdapter, PostgresIntrospector, PostgresQueryCompiler } from "kysely";
+import { ColumnNode, InsertQueryNode, Kysely, PostgresAdapter, PostgresIntrospector, PostgresQueryCompiler, PrimitiveValueListNode, ReferenceNode, UpdateQueryNode, ValueListNode, ValueNode, ValuesNode } from "kysely";
 
 //#region src/vitest/blocked-modules.ts
 /**
@@ -295,6 +295,53 @@ function createEnvironmentPlugin(options) {
 * type-check normally, but execution returns staged rows and records every
 * query for assertions.
 */
+function unwrapValue(node) {
+	return ValueNode.is(node) ? node.value : node;
+}
+function insertRows(node) {
+	if (!InsertQueryNode.is(node)) throw new Error(`insertRows: expected InsertQueryNode, got ${node.kind}`);
+	const columns = node.columns;
+	const valuesNode = node.values;
+	if (columns === void 0 || valuesNode === void 0 || !ValuesNode.is(valuesNode)) throw new Error("insertRows: unsupported insert shape; inspect query.node instead");
+	return valuesNode.values.map((row) => {
+		if (!PrimitiveValueListNode.is(row) && !ValueListNode.is(row)) throw new Error("insertRows: unsupported insert shape; inspect query.node instead");
+		const values = PrimitiveValueListNode.is(row) ? row.values : row.values.map(unwrapValue);
+		const result = {};
+		columns.forEach((col, i) => {
+			result[col.column.name] = values[i];
+		});
+		return result;
+	});
+}
+function insertValues(node) {
+	const rows = insertRows(node);
+	if (rows.length !== 1) throw new Error(`insertValues: query inserts ${rows.length} rows; use insertRows() for multi-row inserts`);
+	return rows[0];
+}
+function updateValues(node) {
+	if (!UpdateQueryNode.is(node)) throw new Error(`updateValues: expected UpdateQueryNode, got ${node.kind}`);
+	if (node.updates === void 0) throw new Error("updateValues: unsupported update shape; inspect query.node instead");
+	const result = {};
+	for (const update of node.updates) {
+		const col = update.column;
+		const name = ColumnNode.is(col) ? col.column.name : ReferenceNode.is(col) && ColumnNode.is(col.column) ? col.column.column.name : void 0;
+		if (name === void 0) throw new Error("updateValues: unsupported update shape; inspect query.node instead");
+		result[name] = unwrapValue(update.value);
+	}
+	return result;
+}
+function toExecutedQuery(compiledQuery) {
+	const node = compiledQuery.query;
+	return {
+		kind: node.kind,
+		sql: compiledQuery.sql,
+		parameters: compiledQuery.parameters,
+		node,
+		insertRows: () => insertRows(node),
+		insertValues: () => insertValues(node),
+		updateValues: () => updateValues(node)
+	};
+}
 function toStagedResult(result) {
 	if (Array.isArray(result)) return {
 		rows: result,
@@ -336,11 +383,7 @@ var MockConnection = class {
 		this.state = state;
 	}
 	async executeQuery(compiledQuery) {
-		const query = {
-			kind: compiledQuery.query.kind,
-			sql: compiledQuery.sql,
-			parameters: compiledQuery.parameters
-		};
+		const query = toExecutedQuery(compiledQuery);
 		this.state.executed.push(query);
 		const { rows, numAffectedRows } = this.state.next(query);
 		return {
@@ -378,13 +421,14 @@ function byKind(state, kind) {
 */
 function createKyselyMock() {
 	const state = new MockState();
+	const kysely = new Kysely({ dialect: {
+		createDriver: () => new MockDriver(state),
+		createQueryCompiler: () => new PostgresQueryCompiler(),
+		createAdapter: () => new PostgresAdapter(),
+		createIntrospector: (db) => new PostgresIntrospector(db)
+	} });
 	return {
-		db: new Kysely({ dialect: {
-			createDriver: () => new MockDriver(state),
-			createQueryCompiler: () => new PostgresQueryCompiler(),
-			createAdapter: () => new PostgresAdapter(),
-			createIntrospector: (db) => new PostgresIntrospector(db)
-		} }),
+		db: kysely,
 		get executedQueries() {
 			return state.executed;
 		},
@@ -403,6 +447,7 @@ function createKyselyMock() {
 		enqueueResult: (result) => state.enqueue(result),
 		enqueueResults: (...results) => state.enqueue(...results),
 		setQueryResolver: (resolver) => state.setResolver(resolver),
+		withTx: (fn) => kysely.transaction().execute(fn),
 		reset: () => state.reset(),
 		[Symbol.dispose]: () => state.reset()
 	};

package/dist/vitest/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/vitest/blocked-modules.ts","../../src/vitest/plugin.ts","../../src/vitest/mock-kysely.ts","../../src/vitest/index.ts"],"sourcesContent":["/**\n * Blocked Node.js built-in modules and their Web Standard API alternatives.\n *\n * The Tailor Platform runtime only provides Web Standard APIs.\n * These Node.js modules are not available and should be replaced with\n * the suggested alternatives.\n */\nimport { builtinModules } from \"node:module\";\n\n// Suggestions keyed by bare specifier. Lookup also checks with \"node:\" prefix stripped.\nconst SUGGESTIONS: Record<string, string> = {\n  crypto: \"Use the Web Crypto API (globalThis.crypto) instead.\",\n  buffer: \"Use Uint8Array or ArrayBuffer instead.\",\n  fs: \"File system access is not available in the Tailor Platform runtime.\",\n  \"fs/promises\": \"File system access is not available in the Tailor Platform runtime.\",\n  path: \"Use URL or URLPattern for path manipulation.\",\n  http: \"Use the Fetch API (globalThis.fetch) for HTTP requests instead.\",\n  https: \"Use the Fetch API (globalThis.fetch) for HTTPS requests instead.\",\n  url: \"Use the URL and URLSearchParams Web APIs instead.\",\n  util: \"Use Web Standard APIs instead.\",\n  stream: \"Use Web Streams API (ReadableStream, WritableStream, TransformStream) instead.\",\n  \"stream/web\": \"Use Web Streams API (ReadableStream, WritableStream, TransformStream) instead.\",\n  events: \"Use EventTarget instead.\",\n  zlib: \"Use CompressionStream and DecompressionStream Web APIs instead.\",\n  querystring: \"Use URLSearchParams instead.\",\n  string_decoder: \"Use TextDecoder instead.\",\n};\n\nconst BLOCKED_MODULES = new Set<string>();\nfor (const mod of builtinModules) {\n  BLOCKED_MODULES.add(mod);\n  BLOCKED_MODULES.add(`node:${mod}`);\n}\n\n/**\n * Check if a module specifier is a blocked Node.js built-in.\n * @param specifier - Module specifier to check (e.g. \"node:crypto\", \"fs\")\n * @returns Whether the specifier is blocked\n */\nexport function isBlockedModule(specifier: string): boolean {\n  return BLOCKED_MODULES.has(specifier);\n}\n\n/**\n * Get the error message for a blocked module import.\n * @param specifier - Module specifier that was blocked\n * @returns Error message with optional suggestion for the Web Standard API alternative\n */\nexport function getBlockedMessage(specifier: string): string {\n  const bare = specifier.startsWith(\"node:\") ? specifier.slice(5) : specifier;\n  const suggestion = SUGGESTIONS[bare];\n  const base = `\"${specifier}\" is not available in the Tailor Platform runtime.`;\n  return suggestion ? `${base} ${suggestion}` : base;\n}\n","import { dirname, isAbsolute, matchesGlob, relative, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { isBlockedModule, getBlockedMessage } from \"./blocked-modules\";\nimport type { Plugin } from \"vitest/config\";\n\nconst DEFAULT_TEST_INCLUDE = [\"**/*.{test,spec}.{js,mjs,cjs,ts,mts,cts,jsx,tsx}\"];\n\ninterface ExportSpecifierNode {\n  type?: string;\n  exported?: { name?: unknown } | null;\n}\n\ninterface ImportLikeNode {\n  type: string;\n  start: number;\n  end: number;\n  source?: { value?: unknown } | null;\n  specifiers?: ExportSpecifierNode[] | null;\n  exported?: { name?: unknown } | null;\n}\n\nconst IMPORT_LIKE_TYPES = new Set([\n  \"ImportDeclaration\",\n  \"ExportNamedDeclaration\",\n  \"ExportAllDeclaration\",\n]);\n\n// Re-export specifiers (`export { x as Y } from \"...\"`) accept any\n// `IdentifierName` for `Y` — including reserved words like `delete`. But\n// `export const Y = ...` requires a `BindingIdentifier`, which forbids\n// reserved words and the strict-mode-banned `arguments` / `eval`. Synthesizing\n// `export const delete = ...` would yield a syntax error, so we fall back to\n// plain `throw` for unsafe names.\nconst UNSAFE_BINDING_NAMES = new Set([\n  // ReservedWord (ES2022+)\n  \"break\",\n  \"case\",\n  \"catch\",\n  \"class\",\n  \"const\",\n  \"continue\",\n  \"debugger\",\n  \"default\",\n  \"delete\",\n  \"do\",\n  \"else\",\n  \"enum\",\n  \"export\",\n  \"extends\",\n  \"false\",\n  \"finally\",\n  \"for\",\n  \"function\",\n  \"if\",\n  \"import\",\n  \"in\",\n  \"instanceof\",\n  \"new\",\n  \"null\",\n  \"return\",\n  \"super\",\n  \"switch\",\n  \"this\",\n  \"throw\",\n  \"true\",\n  \"try\",\n  \"typeof\",\n  \"var\",\n  \"void\",\n  \"while\",\n  \"with\",\n  \"yield\",\n  // Strict-mode reserved (ESM is always strict)\n  \"let\",\n  \"static\",\n  \"implements\",\n  \"interface\",\n  \"package\",\n  \"private\",\n  \"protected\",\n  \"public\",\n  // Module-specific reserved\n  \"await\",\n  // Banned as binding names in strict mode\n  \"arguments\",\n  \"eval\",\n]);\n\nconst ID_START = /^[A-Za-z_$]/;\nconst ID_CONT = /^[A-Za-z0-9_$]*$/;\n\nfunction isSafeBindingName(name: string): boolean {\n  if (UNSAFE_BINDING_NAMES.has(name)) return false;\n  if (name.length === 0) return false;\n  // Restrict to ASCII identifiers — Unicode bindings are valid JS but rare\n  // for re-exports of node:* modules, and a regex over the full\n  // ID_Start/ID_Continue sets adds substantial weight for marginal gain.\n  return ID_START.test(name[0] ?? \"\") && ID_CONT.test(name.slice(1));\n}\n\nfunction buildBlockedReplacement(node: ImportLikeNode, message: string): string {\n  // JSON.stringify yields a fully-escaped string literal (including the\n  // surrounding quotes), so we don't need to manually handle backslashes,\n  // newlines, or other control characters that may appear in the message.\n  const literal = JSON.stringify(message);\n  const throwStmt = `throw new Error(${literal});`;\n  const throwExpr = `(() => { throw new Error(${literal}); })()`;\n\n  if (node.type === \"ExportNamedDeclaration\") {\n    const specs = node.specifiers ?? [];\n    const stubs: string[] = [];\n    for (const spec of specs) {\n      const exportedName = spec.exported?.name;\n      if (typeof exportedName !== \"string\") continue;\n      if (exportedName === \"default\") {\n        stubs.push(`export default ${throwExpr};`);\n        continue;\n      }\n      // Reserved words can be re-export names but not binding names.\n      // Bail to a plain throw rather than emit invalid syntax.\n      if (!isSafeBindingName(exportedName)) return throwStmt;\n      stubs.push(`export const ${exportedName} = ${throwExpr};`);\n    }\n    return stubs.length > 0 ? stubs.join(\" \") : throwStmt;\n  }\n\n  if (node.type === \"ExportAllDeclaration\") {\n    const exportedName = node.exported?.name;\n    if (typeof exportedName === \"string\" && isSafeBindingName(exportedName)) {\n      return `export const ${exportedName} = ${throwExpr};`;\n    }\n    return throwStmt;\n  }\n\n  return throwStmt;\n}\n\n/**\n * Vite plugin that blocks Node.js built-in module imports from production code.\n *\n * Uses the `transform` hook to walk the Rollup-provided AST of non-test source\n * files for static `node:*` imports and re-exports.\n * `ImportDeclaration` and bare `export * from \"...\"` are replaced with a\n * `throw new Error(...)` statement so the failure surfaces at evaluation time.\n * `ExportNamedDeclaration` (`export { x, y as z } from \"...\"`) and namespaced\n * `export * as ns from \"...\"` are rewritten to per-binding stub exports\n * (`export const x = (() => { throw new Error(...) })();`). The IIFE throws\n * eagerly during module evaluation (same timing as a top-level `throw`), but\n * preserving the declared export bindings ensures the surfaced error is the\n * actual \"node:* not available\" message rather than an opaque\n * \"missing export\" raised by the loader.\n * Vitest treats `node:*` as external SSR modules (skipping `resolveId`), so\n * source-level transformation is the only reliable interception point.\n * Runs in the default phase (no `enforce: \"pre\"`) so esbuild's TypeScript\n * transform strips `import type` first; only runtime imports reach this hook.\n * Node.js globals not in the platform runtime are removed by the environment (whitelist-based).\n * Test file patterns are read from the resolved Vitest config (`test.include`).\n * Vitest setup files (`test.setupFiles`) and global-setup files\n * (`test.globalSetup`) are also exempted: they run in the test runner host,\n * not in the emulated platform runtime, so they may freely use `node:*`\n * modules (e.g. `node:url` for `pathToFileURL`).\n * @returns Vite plugin\n */\nexport function createBlockPlugin(): Plugin {\n  let isTestFile: (id: string) => boolean = () => false;\n  let isUserSourceFile: (id: string) => boolean = () => false;\n\n  return {\n    name: \"tailor-runtime-block-node\",\n\n    configResolved(config) {\n      type HostFileTestConfig = {\n        include?: string[];\n        setupFiles?: string | string[];\n        globalSetup?: string | string[];\n        root?: string;\n      };\n      const testConfig = (\n        config as typeof config & {\n          test?: HostFileTestConfig & {\n            projects?: { test?: HostFileTestConfig }[];\n          };\n        }\n      ).test;\n      const root = testConfig?.root ?? config.root;\n      // Setup files and global-setup files run in the Vitest host (not the\n      // emulated runtime), so they may freely import node:* modules. Collect\n      // them from the top-level config AND from each `test.projects[i]` —\n      // per-project setup files run in the host too and would otherwise be\n      // transformed as production code, breaking node:* imports inside them.\n      const toAbsolutePaths = (value: string | string[] | undefined, baseRoot: string) =>\n        (Array.isArray(value) ? value : value ? [value] : []).map((f) => resolve(baseRoot, f));\n      const exemptHostFiles = new Set<string>([\n        ...toAbsolutePaths(testConfig?.setupFiles, root),\n        ...toAbsolutePaths(testConfig?.globalSetup, root),\n      ]);\n      // Vitest projects can each define their own `test.include` (and root).\n      // A project that uses non-default patterns (e.g. `tests/**/*.spec.ts`)\n      // must also be considered when classifying test files — otherwise its\n      // tests would be treated as production code and have node:* imports\n      // rewritten. Build a list of (root, patterns) pairs covering top-level\n      // + every project, and accept a file if any pair matches.\n      const includePairs: { root: string; patterns: string[] }[] = [\n        { root, patterns: testConfig?.include ?? DEFAULT_TEST_INCLUDE },\n      ];\n      for (const project of testConfig?.projects ?? []) {\n        const projectTest = project?.test;\n        if (!projectTest) continue;\n        const projectRoot = projectTest.root ?? root;\n        for (const f of toAbsolutePaths(projectTest.setupFiles, projectRoot)) {\n          exemptHostFiles.add(f);\n        }\n        for (const f of toAbsolutePaths(projectTest.globalSetup, projectRoot)) {\n          exemptHostFiles.add(f);\n        }\n        includePairs.push({\n          root: projectRoot,\n          patterns: projectTest.include ?? DEFAULT_TEST_INCLUDE,\n        });\n      }\n      isTestFile = (id: string) => {\n        if (exemptHostFiles.has(id)) return true;\n        return includePairs.some(({ root: r, patterns }) => {\n          const candidate = isAbsolute(id) ? relative(r, id) : id;\n          return patterns.some((pattern) => matchesGlob(candidate, pattern));\n        });\n      };\n      // Only transform files inside the project root. With pnpm workspaces,\n      // dependencies are symlinked and Vite resolves them to absolute paths\n      // outside `node_modules`, so the substring check alone is insufficient.\n      // Non-absolute ids are Vite-internal: virtual modules (`\\0...`,\n      // `virtual:...`), bare specifiers, etc. Those are never user source\n      // files and must not be parsed/transformed.\n      isUserSourceFile = (id: string) => {\n        if (!isAbsolute(id)) return false;\n        const rel = relative(root, id);\n        return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel);\n      };\n    },\n\n    transform(code, id) {\n      // Vite can pass ids with query/hash suffixes (e.g. `file.ts?import`,\n      // `file.ts?v=hash`). Strip them so exact-path lookups (Set membership,\n      // glob matching, absolute-path checks) match what callers configured.\n      const queryIdx = id.search(/[?#]/);\n      const cleanId = queryIdx === -1 ? id : id.slice(0, queryIdx);\n\n      if (isTestFile(cleanId)) return undefined;\n      if (cleanId.includes(\"node_modules\")) return undefined;\n      if (!isUserSourceFile(cleanId)) return undefined;\n\n      let ast: { body: ImportLikeNode[] };\n      try {\n        ast = this.parse(code) as unknown as { body: ImportLikeNode[] };\n      } catch {\n        // Not parseable as ESM (e.g. JSON, asset). Let other plugins handle it.\n        return undefined;\n      }\n\n      const replacements: { start: number; end: number; replacement: string }[] = [];\n      for (const node of ast.body) {\n        if (!IMPORT_LIKE_TYPES.has(node.type)) continue;\n        const specifier = node.source?.value;\n        if (typeof specifier !== \"string\") continue;\n        if (isBlockedModule(specifier)) {\n          replacements.push({\n            start: node.start,\n            end: node.end,\n            replacement: buildBlockedReplacement(node, getBlockedMessage(specifier)),\n          });\n        }\n      }\n\n      if (replacements.length === 0) return undefined;\n\n      let transformed = code;\n      for (const r of replacements.sort((a, b) => b.start - a.start)) {\n        transformed = transformed.slice(0, r.start) + r.replacement + transformed.slice(r.end);\n      }\n\n      return { code: transformed, map: null };\n    },\n  };\n}\n\nconst ENVIRONMENT_NAME = \"tailor-runtime\";\n\n/**\n * Vite plugin that resolves the tailor-runtime environment and injects setup files.\n *\n * Vitest resolves environments starting with \".\" or \"/\" as file paths.\n * This plugin rewrites `environment: \"tailor-runtime\"` to the absolute path\n * of the bundled environment module, both at the top-level and per-project.\n * It also injects the setup file that removes Vitest-dependent globals\n * (like `performance`) per-test via beforeEach/afterEach hooks.\n * @param options - Optional configuration\n * @param options.config - Path to tailor.config.ts to load SecretManager values into mock\n * @returns Vite plugin\n */\nexport function createEnvironmentPlugin(options?: { config?: string }): Plugin {\n  const currentDir = dirname(fileURLToPath(import.meta.url));\n  const environmentPath = resolve(currentDir, \"environment.mjs\");\n  const setupPath = resolve(currentDir, \"setup.mjs\");\n\n  return {\n    name: \"tailor-runtime-environment\",\n\n    config(config) {\n      const testConfig = config.test as\n        | (Record<string, unknown> & {\n            projects?: Record<string, unknown>[];\n            setupFiles?: string | string[];\n          })\n        | undefined;\n\n      // Rewrite environment name to absolute path at top-level\n      let usesTailorRuntime = false;\n      if (testConfig?.environment === ENVIRONMENT_NAME) {\n        testConfig.environment = environmentPath;\n        usesTailorRuntime = true;\n      }\n\n      // Rewrite in each project config\n      if (testConfig?.projects) {\n        for (const project of testConfig.projects) {\n          const projectTest = project.test as Record<string, unknown> | undefined;\n          if (projectTest?.environment === ENVIRONMENT_NAME) {\n            projectTest.environment = environmentPath;\n            usesTailorRuntime = true;\n          }\n        }\n      }\n\n      // Pass config path to setup.ts via env var (cross-process compatible).\n      // Always clear first, then set only when tailor-runtime is actually\n      // selected. This makes the env var deterministic across Vite config\n      // reloads (watch mode, programmatic re-init): a stale value from a\n      // prior iteration cannot make setup.ts load secrets from an old config.\n      // The leading `__` marks this as plugin-private, so deleting any\n      // pre-existing value is safe.\n      delete process.env.__TAILOR_RUNTIME_CONFIG;\n      if (options?.config && usesTailorRuntime) {\n        // Resolve against the user-provided Vite root when present (falling\n        // back to cwd). Vitest projects with a non-cwd `root` would otherwise\n        // resolve a relative options.config against the wrong directory.\n        const configRoot = (config.root as string | undefined) ?? process.cwd();\n        const configAbsPath = resolve(configRoot, options.config);\n        process.env.__TAILOR_RUNTIME_CONFIG = configAbsPath;\n      }\n\n      // Normalize a user-provided string `setupFiles` into an array so Vite's\n      // array-concat merge sees both sides as arrays (the string form would\n      // otherwise be replaced rather than concatenated by some merge paths).\n      // Vite then concatenates the user's array with our [setupPath].\n      if (testConfig && typeof testConfig.setupFiles === \"string\") {\n        testConfig.setupFiles = [testConfig.setupFiles];\n      }\n\n      return {\n        test: {\n          setupFiles: [setupPath],\n        },\n      };\n    },\n  };\n}\n","/**\n * Kysely-layer mock for unit testing.\n *\n * Builds a real Kysely instance backed by a mock driver: queries compile and\n * type-check normally, but execution returns staged rows and records every\n * query for assertions.\n */\n\nimport {\n  type CompiledQuery,\n  type DatabaseConnection,\n  type Dialect,\n  type Driver,\n  Kysely,\n  type OperationNodeKind,\n  PostgresAdapter,\n  PostgresIntrospector,\n  PostgresQueryCompiler,\n  type QueryResult,\n} from \"kysely\";\n\n/** A single statement executed against the mock, captured in order. */\nexport interface ExecutedQuery {\n  kind: OperationNodeKind;\n  sql: string;\n  parameters: readonly unknown[];\n}\n\ntype MockRow = Record<string, unknown>;\ntype MockResult = MockRow[] | { rows?: MockRow[]; numAffectedRows?: number | bigint };\ntype QueryResolver = (query: ExecutedQuery) => MockResult | undefined;\n\ninterface StagedResult {\n  rows: MockRow[];\n  numAffectedRows: bigint | undefined;\n}\n\nfunction toStagedResult(result: MockResult): StagedResult {\n  if (Array.isArray(result)) return { rows: result, numAffectedRows: undefined };\n  return {\n    rows: result.rows ?? [],\n    numAffectedRows:\n      result.numAffectedRows === undefined ? undefined : BigInt(result.numAffectedRows),\n  };\n}\n\n/** Controls and assertions for a {@link createKyselyMock} instance. */\nexport interface KyselyMock<DB> {\n  db: Kysely<DB>;\n  executedQueries: ExecutedQuery[];\n  selects: ExecutedQuery[];\n  inserts: ExecutedQuery[];\n  updates: ExecutedQuery[];\n  deletes: ExecutedQuery[];\n  enqueueResult: (result: MockResult) => void;\n  enqueueResults: (...results: MockResult[]) => void;\n  setQueryResolver: (resolver: QueryResolver) => void;\n  reset: () => void;\n  [Symbol.dispose]: () => void;\n}\n\nclass MockState {\n  readonly executed: ExecutedQuery[] = [];\n  private readonly queue: MockResult[] = [];\n  private resolver: QueryResolver | undefined;\n\n  enqueue(...results: MockResult[]): void {\n    this.queue.push(...results);\n  }\n\n  setResolver(resolver: QueryResolver): void {\n    this.resolver = resolver;\n  }\n\n  next(query: ExecutedQuery): StagedResult {\n    const resolved = this.resolver?.(query);\n    if (resolved !== undefined) return toStagedResult(resolved);\n    const queued = this.queue.shift();\n    return queued === undefined ? { rows: [], numAffectedRows: undefined } : toStagedResult(queued);\n  }\n\n  reset(): void {\n    this.executed.length = 0;\n    this.queue.length = 0;\n    this.resolver = undefined;\n  }\n}\n\nclass MockConnection implements DatabaseConnection {\n  constructor(private readonly state: MockState) {}\n\n  async executeQuery<R>(compiledQuery: CompiledQuery): Promise<QueryResult<R>> {\n    const query: ExecutedQuery = {\n      kind: compiledQuery.query.kind,\n      sql: compiledQuery.sql,\n      parameters: compiledQuery.parameters,\n    };\n    this.state.executed.push(query);\n    const { rows, numAffectedRows } = this.state.next(query);\n    return {\n      rows: rows as R[],\n      numAffectedRows: numAffectedRows ?? BigInt(rows.length),\n    };\n  }\n\n  streamQuery<R>(): AsyncIterableIterator<QueryResult<R>> {\n    throw new Error(\"createKyselyMock: streaming is not supported\");\n  }\n}\n\nclass MockDriver implements Driver {\n  constructor(private readonly state: MockState) {}\n\n  async init(): Promise<void> {}\n\n  async acquireConnection(): Promise<DatabaseConnection> {\n    return new MockConnection(this.state);\n  }\n\n  // No-ops so begin/commit/rollback never enter `executed` and pollute counts.\n  async beginTransaction(): Promise<void> {}\n  async commitTransaction(): Promise<void> {}\n  async rollbackTransaction(): Promise<void> {}\n\n  async releaseConnection(): Promise<void> {}\n  async destroy(): Promise<void> {}\n}\n\nfunction byKind(state: MockState, kind: OperationNodeKind): ExecutedQuery[] {\n  return state.executed.filter((query) => query.kind === kind);\n}\n\n/**\n * Create a mock Kysely instance for unit-testing code that runs Kysely queries.\n * Pass the namespace schema as the type argument, e.g.\n * `createKyselyMock<Namespace[\"main-db\"]>()`.\n * @returns A {@link KyselyMock} with the mock `db`, recorded queries, and result staging.\n */\nexport function createKyselyMock<DB = Record<string, never>>(): KyselyMock<DB> {\n  const state = new MockState();\n  const dialect: Dialect = {\n    createDriver: () => new MockDriver(state),\n    createQueryCompiler: () => new PostgresQueryCompiler(),\n    createAdapter: () => new PostgresAdapter(),\n    createIntrospector: (db) => new PostgresIntrospector(db),\n  };\n  const kysely = new Kysely<DB>({ dialect });\n\n  return {\n    db: kysely,\n    get executedQueries() {\n      return state.executed;\n    },\n    get selects() {\n      return byKind(state, \"SelectQueryNode\");\n    },\n    get inserts() {\n      return byKind(state, \"InsertQueryNode\");\n    },\n    get updates() {\n      return byKind(state, \"UpdateQueryNode\");\n    },\n    get deletes() {\n      return byKind(state, \"DeleteQueryNode\");\n    },\n    enqueueResult: (result) => state.enqueue(result),\n    enqueueResults: (...results) => state.enqueue(...results),\n    setQueryResolver: (resolver) => state.setResolver(resolver),\n    reset: () => state.reset(),\n    [Symbol.dispose]: () => state.reset(),\n  };\n}\n","import { createBlockPlugin, createEnvironmentPlugin } from \"./plugin\";\nimport type { Plugin } from \"vitest/config\";\n\n/**\n * Creates Vitest plugins that emulate the Tailor Platform function runtime environment.\n *\n * **Beta:** This API may change in future releases.\n *\n * ## What it does\n *\n * 1. **Node.js module blocking** (transform hook) — Imports of `node:*` modules\n *    (and bare builtins like `crypto`, `fs`) in non-test source files are replaced\n *    with code that throws an error with a suggestion for the Web Standard API alternative.\n *    Test files are exempt and can use `node:*` freely. Test file patterns are read\n *    from the resolved Vitest config (`test.include`).\n *\n * 2. **Node.js globals removal** (environment + setup) — Only globals available in the\n *    Tailor Platform runtime are kept (whitelist: ECMAScript standard, Web Standard APIs\n *    from bootstrap.js, platform mocks). All others (`Buffer`, `global`, `setImmediate`,\n *    `__dirname`, `__filename`, etc.) are removed. `performance` is removed per-test\n *    via beforeEach/afterEach since Vitest needs it during initialization.\n *\n * 3. **Platform API mocks** (environment) — All platform APIs are auto-injected with\n *    control objects: `tailordbMock`, `workflowMock`, `secretmanagerMock`,\n *    `authconnectionMock`, `idpMock`, `fileMock`, `iconvMock`. Each\n *    provides response configuration, call recording, and reset.\n *\n * 4. **Environment resolution** — Rewrites `environment: \"tailor-runtime\"` to the\n *    absolute path of the bundled environment module via the config hook.\n *\n * ## Known limitations\n *\n * - **`process`** and **`require`** are NOT removed or blocked. Vitest's internal\n *   runner depends on them. On the real Tailor Platform runtime, they do not exist.\n * - **Dynamic `import()`** of bundled files (via `createImportMain()`) bypasses\n *   the transform hook since those files are loaded through Node.js native loader.\n * ## Options\n *\n * - **`config`** — Path to `tailor.config.ts`. Loads `defineSecretManager()` values\n *   into `secretmanagerMock` so `getSecret()` returns the configured values.\n * @example\n * ```typescript\n * // vitest.config.ts\n * import { defineConfig } from \"vitest/config\";\n * import { tailorRuntime } from \"@tailor-platform/sdk/vitest\";\n *\n * export default defineConfig({\n *   plugins: [tailorRuntime({ config: \"./tailor.config.ts\" })],\n *   test: {\n *     environment: \"tailor-runtime\",\n *   },\n * });\n * ```\n * @param options - Optional configuration\n * @param options.config - Path to tailor.config.ts to load SecretManager values into mock\n * @returns Array of Vite plugins\n */\nexport function tailorRuntime(options?: { config?: string }): Plugin[] {\n  return [createBlockPlugin(), createEnvironmentPlugin(options)];\n}\n\nexport {\n  tailordbMock,\n  workflowMock,\n  secretmanagerMock,\n  authconnectionMock,\n  idpMock,\n  fileMock,\n  iconvMock,\n} from \"./mock\";\n\nexport { createKyselyMock, type KyselyMock, type ExecutedQuery } from \"./mock-kysely\";\n"],"mappings":";;;;;;;;;;;;;;;AAUA,MAAM,cAAsC;CAC1C,QAAQ;CACR,QAAQ;CACR,IAAI;CACJ,eAAe;CACf,MAAM;CACN,MAAM;CACN,OAAO;CACP,KAAK;CACL,MAAM;CACN,QAAQ;CACR,cAAc;CACd,QAAQ;CACR,MAAM;CACN,aAAa;CACb,gBAAgB;AAClB;AAEA,MAAM,kCAAkB,IAAI,IAAY;AACxC,KAAK,MAAM,OAAO,gBAAgB;CAChC,gBAAgB,IAAI,GAAG;CACvB,gBAAgB,IAAI,QAAQ,KAAK;AACnC;;;;;;AAOA,SAAgB,gBAAgB,WAA4B;CAC1D,OAAO,gBAAgB,IAAI,SAAS;AACtC;;;;;;AAOA,SAAgB,kBAAkB,WAA2B;CAE3D,MAAM,aAAa,YADN,UAAU,WAAW,OAAO,IAAI,UAAU,MAAM,CAAC,IAAI;CAElE,MAAM,OAAO,IAAI,UAAU;CAC3B,OAAO,aAAa,GAAG,KAAK,GAAG,eAAe;AAChD;;;;AChDA,MAAM,uBAAuB,CAAC,kDAAkD;AAgBhF,MAAM,oBAAoB,IAAI,IAAI;CAChC;CACA;CACA;AACF,CAAC;AAQD,MAAM,uBAAuB,IAAI,IAAI;CAEnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;AACF,CAAC;AAED,MAAM,WAAW;AACjB,MAAM,UAAU;AAEhB,SAAS,kBAAkB,MAAuB;CAChD,IAAI,qBAAqB,IAAI,IAAI,GAAG,OAAO;CAC3C,IAAI,KAAK,WAAW,GAAG,OAAO;CAI9B,OAAO,SAAS,KAAK,KAAK,MAAM,EAAE,KAAK,QAAQ,KAAK,KAAK,MAAM,CAAC,CAAC;AACnE;AAEA,SAAS,wBAAwB,MAAsB,SAAyB;CAI9E,MAAM,UAAU,KAAK,UAAU,OAAO;CACtC,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,MAAM,YAAY,4BAA4B,QAAQ;CAEtD,IAAI,KAAK,SAAS,0BAA0B;EAC1C,MAAM,QAAQ,KAAK,cAAc,CAAC;EAClC,MAAM,QAAkB,CAAC;EACzB,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,eAAe,KAAK,UAAU;GACpC,IAAI,OAAO,iBAAiB,UAAU;GACtC,IAAI,iBAAiB,WAAW;IAC9B,MAAM,KAAK,kBAAkB,UAAU,EAAE;IACzC;GACF;GAGA,IAAI,CAAC,kBAAkB,YAAY,GAAG,OAAO;GAC7C,MAAM,KAAK,gBAAgB,aAAa,KAAK,UAAU,EAAE;EAC3D;EACA,OAAO,MAAM,SAAS,IAAI,MAAM,KAAK,GAAG,IAAI;CAC9C;CAEA,IAAI,KAAK,SAAS,wBAAwB;EACxC,MAAM,eAAe,KAAK,UAAU;EACpC,IAAI,OAAO,iBAAiB,YAAY,kBAAkB,YAAY,GACpE,OAAO,gBAAgB,aAAa,KAAK,UAAU;EAErD,OAAO;CACT;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,oBAA4B;CAC1C,IAAI,mBAA4C;CAChD,IAAI,yBAAkD;CAEtD,OAAO;EACL,MAAM;EAEN,eAAe,QAAQ;GAOrB,MAAM,aACJ,OAKA;GACF,MAAM,OAAO,YAAY,QAAQ,OAAO;GAMxC,MAAM,mBAAmB,OAAsC,cAC5D,MAAM,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC,KAAK,IAAI,CAAC,GAAG,KAAK,MAAM,QAAQ,UAAU,CAAC,CAAC;GACvF,MAAM,kBAAkB,IAAI,IAAY,CACtC,GAAG,gBAAgB,YAAY,YAAY,IAAI,GAC/C,GAAG,gBAAgB,YAAY,aAAa,IAAI,CAClD,CAAC;GAOD,MAAM,eAAuD,CAC3D;IAAE;IAAM,UAAU,YAAY,WAAW;GAAqB,CAChE;GACA,KAAK,MAAM,WAAW,YAAY,YAAY,CAAC,GAAG;IAChD,MAAM,cAAc,SAAS;IAC7B,IAAI,CAAC,aAAa;IAClB,MAAM,cAAc,YAAY,QAAQ;IACxC,KAAK,MAAM,KAAK,gBAAgB,YAAY,YAAY,WAAW,GACjE,gBAAgB,IAAI,CAAC;IAEvB,KAAK,MAAM,KAAK,gBAAgB,YAAY,aAAa,WAAW,GAClE,gBAAgB,IAAI,CAAC;IAEvB,aAAa,KAAK;KAChB,MAAM;KACN,UAAU,YAAY,WAAW;IACnC,CAAC;GACH;GACA,cAAc,OAAe;IAC3B,IAAI,gBAAgB,IAAI,EAAE,GAAG,OAAO;IACpC,OAAO,aAAa,MAAM,EAAE,MAAM,GAAG,eAAe;KAClD,MAAM,YAAY,WAAW,EAAE,IAAI,SAAS,GAAG,EAAE,IAAI;KACrD,OAAO,SAAS,MAAM,YAAY,YAAY,WAAW,OAAO,CAAC;IACnE,CAAC;GACH;GAOA,oBAAoB,OAAe;IACjC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO;IAC5B,MAAM,MAAM,SAAS,MAAM,EAAE;IAC7B,OAAO,QAAQ,MAAM,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG;GAC/D;EACF;EAEA,UAAU,MAAM,IAAI;GAIlB,MAAM,WAAW,GAAG,OAAO,MAAM;GACjC,MAAM,UAAU,aAAa,KAAK,KAAK,GAAG,MAAM,GAAG,QAAQ;GAE3D,IAAI,WAAW,OAAO,GAAG,OAAO;GAChC,IAAI,QAAQ,SAAS,cAAc,GAAG,OAAO;GAC7C,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO;GAEvC,IAAI;GACJ,IAAI;IACF,MAAM,KAAK,MAAM,IAAI;GACvB,QAAQ;IAEN;GACF;GAEA,MAAM,eAAsE,CAAC;GAC7E,KAAK,MAAM,QAAQ,IAAI,MAAM;IAC3B,IAAI,CAAC,kBAAkB,IAAI,KAAK,IAAI,GAAG;IACvC,MAAM,YAAY,KAAK,QAAQ;IAC/B,IAAI,OAAO,cAAc,UAAU;IACnC,IAAI,gBAAgB,SAAS,GAC3B,aAAa,KAAK;KAChB,OAAO,KAAK;KACZ,KAAK,KAAK;KACV,aAAa,wBAAwB,MAAM,kBAAkB,SAAS,CAAC;IACzE,CAAC;GAEL;GAEA,IAAI,aAAa,WAAW,GAAG,OAAO;GAEtC,IAAI,cAAc;GAClB,KAAK,MAAM,KAAK,aAAa,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,GAC3D,cAAc,YAAY,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,cAAc,YAAY,MAAM,EAAE,GAAG;GAGvF,OAAO;IAAE,MAAM;IAAa,KAAK;GAAK;EACxC;CACF;AACF;AAEA,MAAM,mBAAmB;;;;;;;;;;;;;AAczB,SAAgB,wBAAwB,SAAuC;CAC7E,MAAM,aAAa,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;CACzD,MAAM,kBAAkB,QAAQ,YAAY,iBAAiB;CAC7D,MAAM,YAAY,QAAQ,YAAY,WAAW;CAEjD,OAAO;EACL,MAAM;EAEN,OAAO,QAAQ;GACb,MAAM,aAAa,OAAO;GAQ1B,IAAI,oBAAoB;GACxB,IAAI,YAAY,gBAAgB,kBAAkB;IAChD,WAAW,cAAc;IACzB,oBAAoB;GACtB;GAGA,IAAI,YAAY,UACd,KAAK,MAAM,WAAW,WAAW,UAAU;IACzC,MAAM,cAAc,QAAQ;IAC5B,IAAI,aAAa,gBAAgB,kBAAkB;KACjD,YAAY,cAAc;KAC1B,oBAAoB;IACtB;GACF;GAUF,OAAO,QAAQ,IAAI;GACnB,IAAI,SAAS,UAAU,mBAAmB;IAKxC,MAAM,gBAAgB,QADF,OAAO,QAA+B,QAAQ,IAAI,GAC5B,QAAQ,MAAM;IACxD,QAAQ,IAAI,0BAA0B;GACxC;GAMA,IAAI,cAAc,OAAO,WAAW,eAAe,UACjD,WAAW,aAAa,CAAC,WAAW,UAAU;GAGhD,OAAO,EACL,MAAM,EACJ,YAAY,CAAC,SAAS,EACxB,EACF;EACF;CACF;AACF;;;;;;;;;;;ACxUA,SAAS,eAAe,QAAkC;CACxD,IAAI,MAAM,QAAQ,MAAM,GAAG,OAAO;EAAE,MAAM;EAAQ,iBAAiB;CAAU;CAC7E,OAAO;EACL,MAAM,OAAO,QAAQ,CAAC;EACtB,iBACE,OAAO,oBAAoB,SAAY,SAAY,OAAO,OAAO,eAAe;CACpF;AACF;AAiBA,IAAM,YAAN,MAAgB;CACd,AAAS,WAA4B,CAAC;CACtC,AAAiB,QAAsB,CAAC;CACxC,AAAQ;CAER,QAAQ,GAAG,SAA6B;EACtC,KAAK,MAAM,KAAK,GAAG,OAAO;CAC5B;CAEA,YAAY,UAA+B;EACzC,KAAK,WAAW;CAClB;CAEA,KAAK,OAAoC;EACvC,MAAM,WAAW,KAAK,WAAW,KAAK;EACtC,IAAI,aAAa,QAAW,OAAO,eAAe,QAAQ;EAC1D,MAAM,SAAS,KAAK,MAAM,MAAM;EAChC,OAAO,WAAW,SAAY;GAAE,MAAM,CAAC;GAAG,iBAAiB;EAAU,IAAI,eAAe,MAAM;CAChG;CAEA,QAAc;EACZ,KAAK,SAAS,SAAS;EACvB,KAAK,MAAM,SAAS;EACpB,KAAK,WAAW;CAClB;AACF;AAEA,IAAM,iBAAN,MAAmD;CACpB;CAA7B,YAAY,AAAiB,OAAkB;EAAlB;CAAmB;CAEhD,MAAM,aAAgB,eAAuD;EAC3E,MAAM,QAAuB;GAC3B,MAAM,cAAc,MAAM;GAC1B,KAAK,cAAc;GACnB,YAAY,cAAc;EAC5B;EACA,KAAK,MAAM,SAAS,KAAK,KAAK;EAC9B,MAAM,EAAE,MAAM,oBAAoB,KAAK,MAAM,KAAK,KAAK;EACvD,OAAO;GACC;GACN,iBAAiB,mBAAmB,OAAO,KAAK,MAAM;EACxD;CACF;CAEA,cAAwD;EACtD,MAAM,IAAI,MAAM,8CAA8C;CAChE;AACF;AAEA,IAAM,aAAN,MAAmC;CACJ;CAA7B,YAAY,AAAiB,OAAkB;EAAlB;CAAmB;CAEhD,MAAM,OAAsB,CAAC;CAE7B,MAAM,oBAAiD;EACrD,OAAO,IAAI,eAAe,KAAK,KAAK;CACtC;CAGA,MAAM,mBAAkC,CAAC;CACzC,MAAM,oBAAmC,CAAC;CAC1C,MAAM,sBAAqC,CAAC;CAE5C,MAAM,oBAAmC,CAAC;CAC1C,MAAM,UAAyB,CAAC;AAClC;AAEA,SAAS,OAAO,OAAkB,MAA0C;CAC1E,OAAO,MAAM,SAAS,QAAQ,UAAU,MAAM,SAAS,IAAI;AAC7D;;;;;;;AAQA,SAAgB,mBAA+D;CAC7E,MAAM,QAAQ,IAAI,UAAU;CAS5B,OAAO;EACL,IAAI,IAHa,OAAW,EAAE;GAL9B,oBAAoB,IAAI,WAAW,KAAK;GACxC,2BAA2B,IAAI,sBAAsB;GACrD,qBAAqB,IAAI,gBAAgB;GACzC,qBAAqB,OAAO,IAAI,qBAAqB,EAAE;EAEnB,EAAE,CAG7B;EACT,IAAI,kBAAkB;GACpB,OAAO,MAAM;EACf;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,gBAAgB,WAAW,MAAM,QAAQ,MAAM;EAC/C,iBAAiB,GAAG,YAAY,MAAM,QAAQ,GAAG,OAAO;EACxD,mBAAmB,aAAa,MAAM,YAAY,QAAQ;EAC1D,aAAa,MAAM,MAAM;GACxB,OAAO,gBAAgB,MAAM,MAAM;CACtC;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClHA,SAAgB,cAAc,SAAyC;CACrE,OAAO,CAAC,kBAAkB,GAAG,wBAAwB,OAAO,CAAC;AAC/D"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/vitest/blocked-modules.ts","../../src/vitest/plugin.ts","../../src/vitest/mock-kysely.ts","../../src/vitest/index.ts"],"sourcesContent":["/**\n * Blocked Node.js built-in modules and their Web Standard API alternatives.\n *\n * The Tailor Platform runtime only provides Web Standard APIs.\n * These Node.js modules are not available and should be replaced with\n * the suggested alternatives.\n */\nimport { builtinModules } from \"node:module\";\n\n// Suggestions keyed by bare specifier. Lookup also checks with \"node:\" prefix stripped.\nconst SUGGESTIONS: Record<string, string> = {\n  crypto: \"Use the Web Crypto API (globalThis.crypto) instead.\",\n  buffer: \"Use Uint8Array or ArrayBuffer instead.\",\n  fs: \"File system access is not available in the Tailor Platform runtime.\",\n  \"fs/promises\": \"File system access is not available in the Tailor Platform runtime.\",\n  path: \"Use URL or URLPattern for path manipulation.\",\n  http: \"Use the Fetch API (globalThis.fetch) for HTTP requests instead.\",\n  https: \"Use the Fetch API (globalThis.fetch) for HTTPS requests instead.\",\n  url: \"Use the URL and URLSearchParams Web APIs instead.\",\n  util: \"Use Web Standard APIs instead.\",\n  stream: \"Use Web Streams API (ReadableStream, WritableStream, TransformStream) instead.\",\n  \"stream/web\": \"Use Web Streams API (ReadableStream, WritableStream, TransformStream) instead.\",\n  events: \"Use EventTarget instead.\",\n  zlib: \"Use CompressionStream and DecompressionStream Web APIs instead.\",\n  querystring: \"Use URLSearchParams instead.\",\n  string_decoder: \"Use TextDecoder instead.\",\n};\n\nconst BLOCKED_MODULES = new Set<string>();\nfor (const mod of builtinModules) {\n  BLOCKED_MODULES.add(mod);\n  BLOCKED_MODULES.add(`node:${mod}`);\n}\n\n/**\n * Check if a module specifier is a blocked Node.js built-in.\n * @param specifier - Module specifier to check (e.g. \"node:crypto\", \"fs\")\n * @returns Whether the specifier is blocked\n */\nexport function isBlockedModule(specifier: string): boolean {\n  return BLOCKED_MODULES.has(specifier);\n}\n\n/**\n * Get the error message for a blocked module import.\n * @param specifier - Module specifier that was blocked\n * @returns Error message with optional suggestion for the Web Standard API alternative\n */\nexport function getBlockedMessage(specifier: string): string {\n  const bare = specifier.startsWith(\"node:\") ? specifier.slice(5) : specifier;\n  const suggestion = SUGGESTIONS[bare];\n  const base = `\"${specifier}\" is not available in the Tailor Platform runtime.`;\n  return suggestion ? `${base} ${suggestion}` : base;\n}\n","import { dirname, isAbsolute, matchesGlob, relative, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { isBlockedModule, getBlockedMessage } from \"./blocked-modules\";\nimport type { Plugin } from \"vitest/config\";\n\nconst DEFAULT_TEST_INCLUDE = [\"**/*.{test,spec}.{js,mjs,cjs,ts,mts,cts,jsx,tsx}\"];\n\ninterface ExportSpecifierNode {\n  type?: string;\n  exported?: { name?: unknown } | null;\n}\n\ninterface ImportLikeNode {\n  type: string;\n  start: number;\n  end: number;\n  source?: { value?: unknown } | null;\n  specifiers?: ExportSpecifierNode[] | null;\n  exported?: { name?: unknown } | null;\n}\n\nconst IMPORT_LIKE_TYPES = new Set([\n  \"ImportDeclaration\",\n  \"ExportNamedDeclaration\",\n  \"ExportAllDeclaration\",\n]);\n\n// Re-export specifiers (`export { x as Y } from \"...\"`) accept any\n// `IdentifierName` for `Y` — including reserved words like `delete`. But\n// `export const Y = ...` requires a `BindingIdentifier`, which forbids\n// reserved words and the strict-mode-banned `arguments` / `eval`. Synthesizing\n// `export const delete = ...` would yield a syntax error, so we fall back to\n// plain `throw` for unsafe names.\nconst UNSAFE_BINDING_NAMES = new Set([\n  // ReservedWord (ES2022+)\n  \"break\",\n  \"case\",\n  \"catch\",\n  \"class\",\n  \"const\",\n  \"continue\",\n  \"debugger\",\n  \"default\",\n  \"delete\",\n  \"do\",\n  \"else\",\n  \"enum\",\n  \"export\",\n  \"extends\",\n  \"false\",\n  \"finally\",\n  \"for\",\n  \"function\",\n  \"if\",\n  \"import\",\n  \"in\",\n  \"instanceof\",\n  \"new\",\n  \"null\",\n  \"return\",\n  \"super\",\n  \"switch\",\n  \"this\",\n  \"throw\",\n  \"true\",\n  \"try\",\n  \"typeof\",\n  \"var\",\n  \"void\",\n  \"while\",\n  \"with\",\n  \"yield\",\n  // Strict-mode reserved (ESM is always strict)\n  \"let\",\n  \"static\",\n  \"implements\",\n  \"interface\",\n  \"package\",\n  \"private\",\n  \"protected\",\n  \"public\",\n  // Module-specific reserved\n  \"await\",\n  // Banned as binding names in strict mode\n  \"arguments\",\n  \"eval\",\n]);\n\nconst ID_START = /^[A-Za-z_$]/;\nconst ID_CONT = /^[A-Za-z0-9_$]*$/;\n\nfunction isSafeBindingName(name: string): boolean {\n  if (UNSAFE_BINDING_NAMES.has(name)) return false;\n  if (name.length === 0) return false;\n  // Restrict to ASCII identifiers — Unicode bindings are valid JS but rare\n  // for re-exports of node:* modules, and a regex over the full\n  // ID_Start/ID_Continue sets adds substantial weight for marginal gain.\n  return ID_START.test(name[0] ?? \"\") && ID_CONT.test(name.slice(1));\n}\n\nfunction buildBlockedReplacement(node: ImportLikeNode, message: string): string {\n  // JSON.stringify yields a fully-escaped string literal (including the\n  // surrounding quotes), so we don't need to manually handle backslashes,\n  // newlines, or other control characters that may appear in the message.\n  const literal = JSON.stringify(message);\n  const throwStmt = `throw new Error(${literal});`;\n  const throwExpr = `(() => { throw new Error(${literal}); })()`;\n\n  if (node.type === \"ExportNamedDeclaration\") {\n    const specs = node.specifiers ?? [];\n    const stubs: string[] = [];\n    for (const spec of specs) {\n      const exportedName = spec.exported?.name;\n      if (typeof exportedName !== \"string\") continue;\n      if (exportedName === \"default\") {\n        stubs.push(`export default ${throwExpr};`);\n        continue;\n      }\n      // Reserved words can be re-export names but not binding names.\n      // Bail to a plain throw rather than emit invalid syntax.\n      if (!isSafeBindingName(exportedName)) return throwStmt;\n      stubs.push(`export const ${exportedName} = ${throwExpr};`);\n    }\n    return stubs.length > 0 ? stubs.join(\" \") : throwStmt;\n  }\n\n  if (node.type === \"ExportAllDeclaration\") {\n    const exportedName = node.exported?.name;\n    if (typeof exportedName === \"string\" && isSafeBindingName(exportedName)) {\n      return `export const ${exportedName} = ${throwExpr};`;\n    }\n    return throwStmt;\n  }\n\n  return throwStmt;\n}\n\n/**\n * Vite plugin that blocks Node.js built-in module imports from production code.\n *\n * Uses the `transform` hook to walk the Rollup-provided AST of non-test source\n * files for static `node:*` imports and re-exports.\n * `ImportDeclaration` and bare `export * from \"...\"` are replaced with a\n * `throw new Error(...)` statement so the failure surfaces at evaluation time.\n * `ExportNamedDeclaration` (`export { x, y as z } from \"...\"`) and namespaced\n * `export * as ns from \"...\"` are rewritten to per-binding stub exports\n * (`export const x = (() => { throw new Error(...) })();`). The IIFE throws\n * eagerly during module evaluation (same timing as a top-level `throw`), but\n * preserving the declared export bindings ensures the surfaced error is the\n * actual \"node:* not available\" message rather than an opaque\n * \"missing export\" raised by the loader.\n * Vitest treats `node:*` as external SSR modules (skipping `resolveId`), so\n * source-level transformation is the only reliable interception point.\n * Runs in the default phase (no `enforce: \"pre\"`) so esbuild's TypeScript\n * transform strips `import type` first; only runtime imports reach this hook.\n * Node.js globals not in the platform runtime are removed by the environment (whitelist-based).\n * Test file patterns are read from the resolved Vitest config (`test.include`).\n * Vitest setup files (`test.setupFiles`) and global-setup files\n * (`test.globalSetup`) are also exempted: they run in the test runner host,\n * not in the emulated platform runtime, so they may freely use `node:*`\n * modules (e.g. `node:url` for `pathToFileURL`).\n * @returns Vite plugin\n */\nexport function createBlockPlugin(): Plugin {\n  let isTestFile: (id: string) => boolean = () => false;\n  let isUserSourceFile: (id: string) => boolean = () => false;\n\n  return {\n    name: \"tailor-runtime-block-node\",\n\n    configResolved(config) {\n      type HostFileTestConfig = {\n        include?: string[];\n        setupFiles?: string | string[];\n        globalSetup?: string | string[];\n        root?: string;\n      };\n      const testConfig = (\n        config as typeof config & {\n          test?: HostFileTestConfig & {\n            projects?: { test?: HostFileTestConfig }[];\n          };\n        }\n      ).test;\n      const root = testConfig?.root ?? config.root;\n      // Setup files and global-setup files run in the Vitest host (not the\n      // emulated runtime), so they may freely import node:* modules. Collect\n      // them from the top-level config AND from each `test.projects[i]` —\n      // per-project setup files run in the host too and would otherwise be\n      // transformed as production code, breaking node:* imports inside them.\n      const toAbsolutePaths = (value: string | string[] | undefined, baseRoot: string) =>\n        (Array.isArray(value) ? value : value ? [value] : []).map((f) => resolve(baseRoot, f));\n      const exemptHostFiles = new Set<string>([\n        ...toAbsolutePaths(testConfig?.setupFiles, root),\n        ...toAbsolutePaths(testConfig?.globalSetup, root),\n      ]);\n      // Vitest projects can each define their own `test.include` (and root).\n      // A project that uses non-default patterns (e.g. `tests/**/*.spec.ts`)\n      // must also be considered when classifying test files — otherwise its\n      // tests would be treated as production code and have node:* imports\n      // rewritten. Build a list of (root, patterns) pairs covering top-level\n      // + every project, and accept a file if any pair matches.\n      const includePairs: { root: string; patterns: string[] }[] = [\n        { root, patterns: testConfig?.include ?? DEFAULT_TEST_INCLUDE },\n      ];\n      for (const project of testConfig?.projects ?? []) {\n        const projectTest = project?.test;\n        if (!projectTest) continue;\n        const projectRoot = projectTest.root ?? root;\n        for (const f of toAbsolutePaths(projectTest.setupFiles, projectRoot)) {\n          exemptHostFiles.add(f);\n        }\n        for (const f of toAbsolutePaths(projectTest.globalSetup, projectRoot)) {\n          exemptHostFiles.add(f);\n        }\n        includePairs.push({\n          root: projectRoot,\n          patterns: projectTest.include ?? DEFAULT_TEST_INCLUDE,\n        });\n      }\n      isTestFile = (id: string) => {\n        if (exemptHostFiles.has(id)) return true;\n        return includePairs.some(({ root: r, patterns }) => {\n          const candidate = isAbsolute(id) ? relative(r, id) : id;\n          return patterns.some((pattern) => matchesGlob(candidate, pattern));\n        });\n      };\n      // Only transform files inside the project root. With pnpm workspaces,\n      // dependencies are symlinked and Vite resolves them to absolute paths\n      // outside `node_modules`, so the substring check alone is insufficient.\n      // Non-absolute ids are Vite-internal: virtual modules (`\\0...`,\n      // `virtual:...`), bare specifiers, etc. Those are never user source\n      // files and must not be parsed/transformed.\n      isUserSourceFile = (id: string) => {\n        if (!isAbsolute(id)) return false;\n        const rel = relative(root, id);\n        return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel);\n      };\n    },\n\n    transform(code, id) {\n      // Vite can pass ids with query/hash suffixes (e.g. `file.ts?import`,\n      // `file.ts?v=hash`). Strip them so exact-path lookups (Set membership,\n      // glob matching, absolute-path checks) match what callers configured.\n      const queryIdx = id.search(/[?#]/);\n      const cleanId = queryIdx === -1 ? id : id.slice(0, queryIdx);\n\n      if (isTestFile(cleanId)) return undefined;\n      if (cleanId.includes(\"node_modules\")) return undefined;\n      if (!isUserSourceFile(cleanId)) return undefined;\n\n      let ast: { body: ImportLikeNode[] };\n      try {\n        ast = this.parse(code) as unknown as { body: ImportLikeNode[] };\n      } catch {\n        // Not parseable as ESM (e.g. JSON, asset). Let other plugins handle it.\n        return undefined;\n      }\n\n      const replacements: { start: number; end: number; replacement: string }[] = [];\n      for (const node of ast.body) {\n        if (!IMPORT_LIKE_TYPES.has(node.type)) continue;\n        const specifier = node.source?.value;\n        if (typeof specifier !== \"string\") continue;\n        if (isBlockedModule(specifier)) {\n          replacements.push({\n            start: node.start,\n            end: node.end,\n            replacement: buildBlockedReplacement(node, getBlockedMessage(specifier)),\n          });\n        }\n      }\n\n      if (replacements.length === 0) return undefined;\n\n      let transformed = code;\n      for (const r of replacements.sort((a, b) => b.start - a.start)) {\n        transformed = transformed.slice(0, r.start) + r.replacement + transformed.slice(r.end);\n      }\n\n      return { code: transformed, map: null };\n    },\n  };\n}\n\nconst ENVIRONMENT_NAME = \"tailor-runtime\";\n\n/**\n * Vite plugin that resolves the tailor-runtime environment and injects setup files.\n *\n * Vitest resolves environments starting with \".\" or \"/\" as file paths.\n * This plugin rewrites `environment: \"tailor-runtime\"` to the absolute path\n * of the bundled environment module, both at the top-level and per-project.\n * It also injects the setup file that removes Vitest-dependent globals\n * (like `performance`) per-test via beforeEach/afterEach hooks.\n * @param options - Optional configuration\n * @param options.config - Path to tailor.config.ts to load SecretManager values into mock\n * @returns Vite plugin\n */\nexport function createEnvironmentPlugin(options?: { config?: string }): Plugin {\n  const currentDir = dirname(fileURLToPath(import.meta.url));\n  const environmentPath = resolve(currentDir, \"environment.mjs\");\n  const setupPath = resolve(currentDir, \"setup.mjs\");\n\n  return {\n    name: \"tailor-runtime-environment\",\n\n    config(config) {\n      const testConfig = config.test as\n        | (Record<string, unknown> & {\n            projects?: Record<string, unknown>[];\n            setupFiles?: string | string[];\n          })\n        | undefined;\n\n      // Rewrite environment name to absolute path at top-level\n      let usesTailorRuntime = false;\n      if (testConfig?.environment === ENVIRONMENT_NAME) {\n        testConfig.environment = environmentPath;\n        usesTailorRuntime = true;\n      }\n\n      // Rewrite in each project config\n      if (testConfig?.projects) {\n        for (const project of testConfig.projects) {\n          const projectTest = project.test as Record<string, unknown> | undefined;\n          if (projectTest?.environment === ENVIRONMENT_NAME) {\n            projectTest.environment = environmentPath;\n            usesTailorRuntime = true;\n          }\n        }\n      }\n\n      // Pass config path to setup.ts via env var (cross-process compatible).\n      // Always clear first, then set only when tailor-runtime is actually\n      // selected. This makes the env var deterministic across Vite config\n      // reloads (watch mode, programmatic re-init): a stale value from a\n      // prior iteration cannot make setup.ts load secrets from an old config.\n      // The leading `__` marks this as plugin-private, so deleting any\n      // pre-existing value is safe.\n      delete process.env.__TAILOR_RUNTIME_CONFIG;\n      if (options?.config && usesTailorRuntime) {\n        // Resolve against the user-provided Vite root when present (falling\n        // back to cwd). Vitest projects with a non-cwd `root` would otherwise\n        // resolve a relative options.config against the wrong directory.\n        const configRoot = (config.root as string | undefined) ?? process.cwd();\n        const configAbsPath = resolve(configRoot, options.config);\n        process.env.__TAILOR_RUNTIME_CONFIG = configAbsPath;\n      }\n\n      // Normalize a user-provided string `setupFiles` into an array so Vite's\n      // array-concat merge sees both sides as arrays (the string form would\n      // otherwise be replaced rather than concatenated by some merge paths).\n      // Vite then concatenates the user's array with our [setupPath].\n      if (testConfig && typeof testConfig.setupFiles === \"string\") {\n        testConfig.setupFiles = [testConfig.setupFiles];\n      }\n\n      return {\n        test: {\n          setupFiles: [setupPath],\n        },\n      };\n    },\n  };\n}\n","/**\n * Kysely-layer mock for unit testing.\n *\n * Builds a real Kysely instance backed by a mock driver: queries compile and\n * type-check normally, but execution returns staged rows and records every\n * query for assertions.\n */\n\nimport {\n  ColumnNode,\n  type CompiledQuery,\n  type DatabaseConnection,\n  type Dialect,\n  type Driver,\n  InsertQueryNode,\n  Kysely,\n  type OperationNode,\n  type OperationNodeKind,\n  PostgresAdapter,\n  PostgresIntrospector,\n  PostgresQueryCompiler,\n  PrimitiveValueListNode,\n  type QueryResult,\n  ReferenceNode,\n  type Transaction,\n  UpdateQueryNode,\n  ValueListNode,\n  ValueNode,\n  ValuesNode,\n} from \"kysely\";\n\nfunction unwrapValue(node: OperationNode): unknown {\n  return ValueNode.is(node) ? node.value : node;\n}\n\nfunction insertRows(node: OperationNode): Record<string, unknown>[] {\n  if (!InsertQueryNode.is(node)) {\n    throw new Error(`insertRows: expected InsertQueryNode, got ${node.kind}`);\n  }\n  const columns = node.columns;\n  const valuesNode = node.values;\n  if (columns === undefined || valuesNode === undefined || !ValuesNode.is(valuesNode)) {\n    throw new Error(\"insertRows: unsupported insert shape; inspect query.node instead\");\n  }\n  return valuesNode.values.map((row) => {\n    if (!PrimitiveValueListNode.is(row) && !ValueListNode.is(row)) {\n      throw new Error(\"insertRows: unsupported insert shape; inspect query.node instead\");\n    }\n    const values = PrimitiveValueListNode.is(row) ? row.values : row.values.map(unwrapValue);\n    const result: Record<string, unknown> = {};\n    columns.forEach((col, i) => {\n      result[col.column.name] = values[i];\n    });\n    return result;\n  });\n}\n\nfunction insertValues(node: OperationNode): Record<string, unknown> {\n  const rows = insertRows(node);\n  if (rows.length !== 1) {\n    throw new Error(\n      `insertValues: query inserts ${rows.length} rows; use insertRows() for multi-row inserts`,\n    );\n  }\n  return rows[0];\n}\n\nfunction updateValues(node: OperationNode): Record<string, unknown> {\n  if (!UpdateQueryNode.is(node)) {\n    throw new Error(`updateValues: expected UpdateQueryNode, got ${node.kind}`);\n  }\n  if (node.updates === undefined) {\n    throw new Error(\"updateValues: unsupported update shape; inspect query.node instead\");\n  }\n  const result: Record<string, unknown> = {};\n  for (const update of node.updates) {\n    const col = update.column;\n    const name = ColumnNode.is(col)\n      ? col.column.name\n      : ReferenceNode.is(col) && ColumnNode.is(col.column)\n        ? col.column.column.name\n        : undefined;\n    if (name === undefined) {\n      throw new Error(\"updateValues: unsupported update shape; inspect query.node instead\");\n    }\n    result[name] = unwrapValue(update.value);\n  }\n  return result;\n}\n\n/** A single statement executed against the mock, captured in order. */\nexport interface ExecutedQuery {\n  /** The Kysely operation node kind, e.g. `\"SelectQueryNode\"`. */\n  kind: OperationNodeKind;\n  /** The compiled SQL string. */\n  sql: string;\n  /** The bound parameter values, in positional order. */\n  parameters: readonly unknown[];\n  /** The compiled Kysely operation node. */\n  node: OperationNode;\n  /** One `{ column: value }` map per row written by an insert. */\n  insertRows: () => Record<string, unknown>[];\n  /** The `{ column: value }` map written by a single-row insert. */\n  insertValues: () => Record<string, unknown>;\n  /** The `{ column: value }` map written by an update's SET clause. */\n  updateValues: () => Record<string, unknown>;\n}\n\nfunction toExecutedQuery(compiledQuery: CompiledQuery): ExecutedQuery {\n  const node = compiledQuery.query;\n  return {\n    kind: node.kind,\n    sql: compiledQuery.sql,\n    parameters: compiledQuery.parameters,\n    node,\n    insertRows: () => insertRows(node),\n    insertValues: () => insertValues(node),\n    updateValues: () => updateValues(node),\n  };\n}\n\ntype MockRow = Record<string, unknown>;\ntype MockResult = MockRow[] | { rows?: MockRow[]; numAffectedRows?: number | bigint };\ntype QueryResolver = (query: ExecutedQuery) => MockResult | undefined;\n\ninterface StagedResult {\n  rows: MockRow[];\n  numAffectedRows: bigint | undefined;\n}\n\nfunction toStagedResult(result: MockResult): StagedResult {\n  if (Array.isArray(result)) return { rows: result, numAffectedRows: undefined };\n  return {\n    rows: result.rows ?? [],\n    numAffectedRows:\n      result.numAffectedRows === undefined ? undefined : BigInt(result.numAffectedRows),\n  };\n}\n\n/** Controls and assertions for a {@link createKyselyMock} instance. */\nexport interface KyselyMock<DB> {\n  /** The mock Kysely instance to run queries against. */\n  db: Kysely<DB>;\n  /** Every recorded query, in execution order. */\n  executedQueries: ExecutedQuery[];\n  /** Recorded SELECT queries. */\n  selects: ExecutedQuery[];\n  /** Recorded INSERT queries. */\n  inserts: ExecutedQuery[];\n  /** Recorded UPDATE queries. */\n  updates: ExecutedQuery[];\n  /** Recorded DELETE queries. */\n  deletes: ExecutedQuery[];\n  /** Stage the rows the next query returns. */\n  enqueueResult: (result: MockResult) => void;\n  /** Stage the rows for several upcoming queries, consumed in order. */\n  enqueueResults: (...results: MockResult[]) => void;\n  /** Set a resolver that returns rows by inspecting each query. */\n  setQueryResolver: (resolver: QueryResolver) => void;\n  /** Run `fn` inside a real transaction and return its result. */\n  withTx: <R>(fn: (trx: Transaction<DB>) => Promise<R>) => Promise<R>;\n  /** Clear recorded queries and staged results. */\n  reset: () => void;\n  /** Same as {@link KyselyMock.reset}; enables `using` disposal. */\n  [Symbol.dispose]: () => void;\n}\n\nclass MockState {\n  readonly executed: ExecutedQuery[] = [];\n  private readonly queue: MockResult[] = [];\n  private resolver: QueryResolver | undefined;\n\n  enqueue(...results: MockResult[]): void {\n    this.queue.push(...results);\n  }\n\n  setResolver(resolver: QueryResolver): void {\n    this.resolver = resolver;\n  }\n\n  next(query: ExecutedQuery): StagedResult {\n    const resolved = this.resolver?.(query);\n    if (resolved !== undefined) return toStagedResult(resolved);\n    const queued = this.queue.shift();\n    return queued === undefined ? { rows: [], numAffectedRows: undefined } : toStagedResult(queued);\n  }\n\n  reset(): void {\n    this.executed.length = 0;\n    this.queue.length = 0;\n    this.resolver = undefined;\n  }\n}\n\nclass MockConnection implements DatabaseConnection {\n  constructor(private readonly state: MockState) {}\n\n  async executeQuery<R>(compiledQuery: CompiledQuery): Promise<QueryResult<R>> {\n    const query = toExecutedQuery(compiledQuery);\n    this.state.executed.push(query);\n    const { rows, numAffectedRows } = this.state.next(query);\n    return {\n      rows: rows as R[],\n      numAffectedRows: numAffectedRows ?? BigInt(rows.length),\n    };\n  }\n\n  streamQuery<R>(): AsyncIterableIterator<QueryResult<R>> {\n    throw new Error(\"createKyselyMock: streaming is not supported\");\n  }\n}\n\nclass MockDriver implements Driver {\n  constructor(private readonly state: MockState) {}\n\n  async init(): Promise<void> {}\n\n  async acquireConnection(): Promise<DatabaseConnection> {\n    return new MockConnection(this.state);\n  }\n\n  // No-ops so begin/commit/rollback never enter `executed` and pollute counts.\n  async beginTransaction(): Promise<void> {}\n  async commitTransaction(): Promise<void> {}\n  async rollbackTransaction(): Promise<void> {}\n\n  async releaseConnection(): Promise<void> {}\n  async destroy(): Promise<void> {}\n}\n\nfunction byKind(state: MockState, kind: OperationNodeKind): ExecutedQuery[] {\n  return state.executed.filter((query) => query.kind === kind);\n}\n\n/**\n * Create a mock Kysely instance for unit-testing code that runs Kysely queries.\n * Pass the namespace schema as the type argument, e.g.\n * `createKyselyMock<Namespace[\"main-db\"]>()`.\n * @returns A {@link KyselyMock} with the mock `db`, recorded queries, and result staging.\n */\nexport function createKyselyMock<DB = Record<string, never>>(): KyselyMock<DB> {\n  const state = new MockState();\n  const dialect: Dialect = {\n    createDriver: () => new MockDriver(state),\n    createQueryCompiler: () => new PostgresQueryCompiler(),\n    createAdapter: () => new PostgresAdapter(),\n    createIntrospector: (db) => new PostgresIntrospector(db),\n  };\n  const kysely = new Kysely<DB>({ dialect });\n\n  return {\n    db: kysely,\n    get executedQueries() {\n      return state.executed;\n    },\n    get selects() {\n      return byKind(state, \"SelectQueryNode\");\n    },\n    get inserts() {\n      return byKind(state, \"InsertQueryNode\");\n    },\n    get updates() {\n      return byKind(state, \"UpdateQueryNode\");\n    },\n    get deletes() {\n      return byKind(state, \"DeleteQueryNode\");\n    },\n    enqueueResult: (result) => state.enqueue(result),\n    enqueueResults: (...results) => state.enqueue(...results),\n    setQueryResolver: (resolver) => state.setResolver(resolver),\n    withTx: (fn) => kysely.transaction().execute(fn),\n    reset: () => state.reset(),\n    [Symbol.dispose]: () => state.reset(),\n  };\n}\n","import { createBlockPlugin, createEnvironmentPlugin } from \"./plugin\";\nimport type { Plugin } from \"vitest/config\";\n\n/**\n * Creates Vitest plugins that emulate the Tailor Platform function runtime environment.\n *\n * **Beta:** This API may change in future releases.\n *\n * ## What it does\n *\n * 1. **Node.js module blocking** (transform hook) — Imports of `node:*` modules\n *    (and bare builtins like `crypto`, `fs`) in non-test source files are replaced\n *    with code that throws an error with a suggestion for the Web Standard API alternative.\n *    Test files are exempt and can use `node:*` freely. Test file patterns are read\n *    from the resolved Vitest config (`test.include`).\n *\n * 2. **Node.js globals removal** (environment + setup) — Only globals available in the\n *    Tailor Platform runtime are kept (whitelist: ECMAScript standard, Web Standard APIs\n *    from bootstrap.js, platform mocks). All others (`Buffer`, `global`, `setImmediate`,\n *    `__dirname`, `__filename`, etc.) are removed. `performance` is removed per-test\n *    via beforeEach/afterEach since Vitest needs it during initialization.\n *\n * 3. **Platform API mocks** (environment) — All platform APIs are auto-injected with\n *    control objects: `tailordbMock`, `workflowMock`, `secretmanagerMock`,\n *    `authconnectionMock`, `idpMock`, `fileMock`, `iconvMock`. Each\n *    provides response configuration, call recording, and reset.\n *\n * 4. **Environment resolution** — Rewrites `environment: \"tailor-runtime\"` to the\n *    absolute path of the bundled environment module via the config hook.\n *\n * ## Known limitations\n *\n * - **`process`** and **`require`** are NOT removed or blocked. Vitest's internal\n *   runner depends on them. On the real Tailor Platform runtime, they do not exist.\n * - **Dynamic `import()`** of bundled files (via `createImportMain()`) bypasses\n *   the transform hook since those files are loaded through Node.js native loader.\n * ## Options\n *\n * - **`config`** — Path to `tailor.config.ts`. Loads `defineSecretManager()` values\n *   into `secretmanagerMock` so `getSecret()` returns the configured values.\n * @example\n * ```typescript\n * // vitest.config.ts\n * import { defineConfig } from \"vitest/config\";\n * import { tailorRuntime } from \"@tailor-platform/sdk/vitest\";\n *\n * export default defineConfig({\n *   plugins: [tailorRuntime({ config: \"./tailor.config.ts\" })],\n *   test: {\n *     environment: \"tailor-runtime\",\n *   },\n * });\n * ```\n * @param options - Optional configuration\n * @param options.config - Path to tailor.config.ts to load SecretManager values into mock\n * @returns Array of Vite plugins\n */\nexport function tailorRuntime(options?: { config?: string }): Plugin[] {\n  return [createBlockPlugin(), createEnvironmentPlugin(options)];\n}\n\nexport {\n  tailordbMock,\n  workflowMock,\n  secretmanagerMock,\n  authconnectionMock,\n  idpMock,\n  fileMock,\n  iconvMock,\n} from \"./mock\";\n\nexport { createKyselyMock, type KyselyMock, type ExecutedQuery } from \"./mock-kysely\";\n"],"mappings":";;;;;;;;;;;;;;;AAUA,MAAM,cAAsC;CAC1C,QAAQ;CACR,QAAQ;CACR,IAAI;CACJ,eAAe;CACf,MAAM;CACN,MAAM;CACN,OAAO;CACP,KAAK;CACL,MAAM;CACN,QAAQ;CACR,cAAc;CACd,QAAQ;CACR,MAAM;CACN,aAAa;CACb,gBAAgB;AAClB;AAEA,MAAM,kCAAkB,IAAI,IAAY;AACxC,KAAK,MAAM,OAAO,gBAAgB;CAChC,gBAAgB,IAAI,GAAG;CACvB,gBAAgB,IAAI,QAAQ,KAAK;AACnC;;;;;;AAOA,SAAgB,gBAAgB,WAA4B;CAC1D,OAAO,gBAAgB,IAAI,SAAS;AACtC;;;;;;AAOA,SAAgB,kBAAkB,WAA2B;CAE3D,MAAM,aAAa,YADN,UAAU,WAAW,OAAO,IAAI,UAAU,MAAM,CAAC,IAAI;CAElE,MAAM,OAAO,IAAI,UAAU;CAC3B,OAAO,aAAa,GAAG,KAAK,GAAG,eAAe;AAChD;;;;AChDA,MAAM,uBAAuB,CAAC,kDAAkD;AAgBhF,MAAM,oBAAoB,IAAI,IAAI;CAChC;CACA;CACA;AACF,CAAC;AAQD,MAAM,uBAAuB,IAAI,IAAI;CAEnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;AACF,CAAC;AAED,MAAM,WAAW;AACjB,MAAM,UAAU;AAEhB,SAAS,kBAAkB,MAAuB;CAChD,IAAI,qBAAqB,IAAI,IAAI,GAAG,OAAO;CAC3C,IAAI,KAAK,WAAW,GAAG,OAAO;CAI9B,OAAO,SAAS,KAAK,KAAK,MAAM,EAAE,KAAK,QAAQ,KAAK,KAAK,MAAM,CAAC,CAAC;AACnE;AAEA,SAAS,wBAAwB,MAAsB,SAAyB;CAI9E,MAAM,UAAU,KAAK,UAAU,OAAO;CACtC,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,MAAM,YAAY,4BAA4B,QAAQ;CAEtD,IAAI,KAAK,SAAS,0BAA0B;EAC1C,MAAM,QAAQ,KAAK,cAAc,CAAC;EAClC,MAAM,QAAkB,CAAC;EACzB,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,eAAe,KAAK,UAAU;GACpC,IAAI,OAAO,iBAAiB,UAAU;GACtC,IAAI,iBAAiB,WAAW;IAC9B,MAAM,KAAK,kBAAkB,UAAU,EAAE;IACzC;GACF;GAGA,IAAI,CAAC,kBAAkB,YAAY,GAAG,OAAO;GAC7C,MAAM,KAAK,gBAAgB,aAAa,KAAK,UAAU,EAAE;EAC3D;EACA,OAAO,MAAM,SAAS,IAAI,MAAM,KAAK,GAAG,IAAI;CAC9C;CAEA,IAAI,KAAK,SAAS,wBAAwB;EACxC,MAAM,eAAe,KAAK,UAAU;EACpC,IAAI,OAAO,iBAAiB,YAAY,kBAAkB,YAAY,GACpE,OAAO,gBAAgB,aAAa,KAAK,UAAU;EAErD,OAAO;CACT;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,oBAA4B;CAC1C,IAAI,mBAA4C;CAChD,IAAI,yBAAkD;CAEtD,OAAO;EACL,MAAM;EAEN,eAAe,QAAQ;GAOrB,MAAM,aACJ,OAKA;GACF,MAAM,OAAO,YAAY,QAAQ,OAAO;GAMxC,MAAM,mBAAmB,OAAsC,cAC5D,MAAM,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC,KAAK,IAAI,CAAC,GAAG,KAAK,MAAM,QAAQ,UAAU,CAAC,CAAC;GACvF,MAAM,kBAAkB,IAAI,IAAY,CACtC,GAAG,gBAAgB,YAAY,YAAY,IAAI,GAC/C,GAAG,gBAAgB,YAAY,aAAa,IAAI,CAClD,CAAC;GAOD,MAAM,eAAuD,CAC3D;IAAE;IAAM,UAAU,YAAY,WAAW;GAAqB,CAChE;GACA,KAAK,MAAM,WAAW,YAAY,YAAY,CAAC,GAAG;IAChD,MAAM,cAAc,SAAS;IAC7B,IAAI,CAAC,aAAa;IAClB,MAAM,cAAc,YAAY,QAAQ;IACxC,KAAK,MAAM,KAAK,gBAAgB,YAAY,YAAY,WAAW,GACjE,gBAAgB,IAAI,CAAC;IAEvB,KAAK,MAAM,KAAK,gBAAgB,YAAY,aAAa,WAAW,GAClE,gBAAgB,IAAI,CAAC;IAEvB,aAAa,KAAK;KAChB,MAAM;KACN,UAAU,YAAY,WAAW;IACnC,CAAC;GACH;GACA,cAAc,OAAe;IAC3B,IAAI,gBAAgB,IAAI,EAAE,GAAG,OAAO;IACpC,OAAO,aAAa,MAAM,EAAE,MAAM,GAAG,eAAe;KAClD,MAAM,YAAY,WAAW,EAAE,IAAI,SAAS,GAAG,EAAE,IAAI;KACrD,OAAO,SAAS,MAAM,YAAY,YAAY,WAAW,OAAO,CAAC;IACnE,CAAC;GACH;GAOA,oBAAoB,OAAe;IACjC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO;IAC5B,MAAM,MAAM,SAAS,MAAM,EAAE;IAC7B,OAAO,QAAQ,MAAM,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG;GAC/D;EACF;EAEA,UAAU,MAAM,IAAI;GAIlB,MAAM,WAAW,GAAG,OAAO,MAAM;GACjC,MAAM,UAAU,aAAa,KAAK,KAAK,GAAG,MAAM,GAAG,QAAQ;GAE3D,IAAI,WAAW,OAAO,GAAG,OAAO;GAChC,IAAI,QAAQ,SAAS,cAAc,GAAG,OAAO;GAC7C,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO;GAEvC,IAAI;GACJ,IAAI;IACF,MAAM,KAAK,MAAM,IAAI;GACvB,QAAQ;IAEN;GACF;GAEA,MAAM,eAAsE,CAAC;GAC7E,KAAK,MAAM,QAAQ,IAAI,MAAM;IAC3B,IAAI,CAAC,kBAAkB,IAAI,KAAK,IAAI,GAAG;IACvC,MAAM,YAAY,KAAK,QAAQ;IAC/B,IAAI,OAAO,cAAc,UAAU;IACnC,IAAI,gBAAgB,SAAS,GAC3B,aAAa,KAAK;KAChB,OAAO,KAAK;KACZ,KAAK,KAAK;KACV,aAAa,wBAAwB,MAAM,kBAAkB,SAAS,CAAC;IACzE,CAAC;GAEL;GAEA,IAAI,aAAa,WAAW,GAAG,OAAO;GAEtC,IAAI,cAAc;GAClB,KAAK,MAAM,KAAK,aAAa,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,GAC3D,cAAc,YAAY,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,cAAc,YAAY,MAAM,EAAE,GAAG;GAGvF,OAAO;IAAE,MAAM;IAAa,KAAK;GAAK;EACxC;CACF;AACF;AAEA,MAAM,mBAAmB;;;;;;;;;;;;;AAczB,SAAgB,wBAAwB,SAAuC;CAC7E,MAAM,aAAa,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;CACzD,MAAM,kBAAkB,QAAQ,YAAY,iBAAiB;CAC7D,MAAM,YAAY,QAAQ,YAAY,WAAW;CAEjD,OAAO;EACL,MAAM;EAEN,OAAO,QAAQ;GACb,MAAM,aAAa,OAAO;GAQ1B,IAAI,oBAAoB;GACxB,IAAI,YAAY,gBAAgB,kBAAkB;IAChD,WAAW,cAAc;IACzB,oBAAoB;GACtB;GAGA,IAAI,YAAY,UACd,KAAK,MAAM,WAAW,WAAW,UAAU;IACzC,MAAM,cAAc,QAAQ;IAC5B,IAAI,aAAa,gBAAgB,kBAAkB;KACjD,YAAY,cAAc;KAC1B,oBAAoB;IACtB;GACF;GAUF,OAAO,QAAQ,IAAI;GACnB,IAAI,SAAS,UAAU,mBAAmB;IAKxC,MAAM,gBAAgB,QADF,OAAO,QAA+B,QAAQ,IAAI,GAC5B,QAAQ,MAAM;IACxD,QAAQ,IAAI,0BAA0B;GACxC;GAMA,IAAI,cAAc,OAAO,WAAW,eAAe,UACjD,WAAW,aAAa,CAAC,WAAW,UAAU;GAGhD,OAAO,EACL,MAAM,EACJ,YAAY,CAAC,SAAS,EACxB,EACF;EACF;CACF;AACF;;;;;;;;;;;AC9UA,SAAS,YAAY,MAA8B;CACjD,OAAO,UAAU,GAAG,IAAI,IAAI,KAAK,QAAQ;AAC3C;AAEA,SAAS,WAAW,MAAgD;CAClE,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAC1B,MAAM,IAAI,MAAM,6CAA6C,KAAK,MAAM;CAE1E,MAAM,UAAU,KAAK;CACrB,MAAM,aAAa,KAAK;CACxB,IAAI,YAAY,UAAa,eAAe,UAAa,CAAC,WAAW,GAAG,UAAU,GAChF,MAAM,IAAI,MAAM,kEAAkE;CAEpF,OAAO,WAAW,OAAO,KAAK,QAAQ;EACpC,IAAI,CAAC,uBAAuB,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,GAAG,GAC1D,MAAM,IAAI,MAAM,kEAAkE;EAEpF,MAAM,SAAS,uBAAuB,GAAG,GAAG,IAAI,IAAI,SAAS,IAAI,OAAO,IAAI,WAAW;EACvF,MAAM,SAAkC,CAAC;EACzC,QAAQ,SAAS,KAAK,MAAM;GAC1B,OAAO,IAAI,OAAO,QAAQ,OAAO;EACnC,CAAC;EACD,OAAO;CACT,CAAC;AACH;AAEA,SAAS,aAAa,MAA8C;CAClE,MAAM,OAAO,WAAW,IAAI;CAC5B,IAAI,KAAK,WAAW,GAClB,MAAM,IAAI,MACR,+BAA+B,KAAK,OAAO,8CAC7C;CAEF,OAAO,KAAK;AACd;AAEA,SAAS,aAAa,MAA8C;CAClE,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAC1B,MAAM,IAAI,MAAM,+CAA+C,KAAK,MAAM;CAE5E,IAAI,KAAK,YAAY,QACnB,MAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,MAAM,OAAO;EACnB,MAAM,OAAO,WAAW,GAAG,GAAG,IAC1B,IAAI,OAAO,OACX,cAAc,GAAG,GAAG,KAAK,WAAW,GAAG,IAAI,MAAM,IAC/C,IAAI,OAAO,OAAO,OAClB;EACN,IAAI,SAAS,QACX,MAAM,IAAI,MAAM,oEAAoE;EAEtF,OAAO,QAAQ,YAAY,OAAO,KAAK;CACzC;CACA,OAAO;AACT;AAoBA,SAAS,gBAAgB,eAA6C;CACpE,MAAM,OAAO,cAAc;CAC3B,OAAO;EACL,MAAM,KAAK;EACX,KAAK,cAAc;EACnB,YAAY,cAAc;EAC1B;EACA,kBAAkB,WAAW,IAAI;EACjC,oBAAoB,aAAa,IAAI;EACrC,oBAAoB,aAAa,IAAI;CACvC;AACF;AAWA,SAAS,eAAe,QAAkC;CACxD,IAAI,MAAM,QAAQ,MAAM,GAAG,OAAO;EAAE,MAAM;EAAQ,iBAAiB;CAAU;CAC7E,OAAO;EACL,MAAM,OAAO,QAAQ,CAAC;EACtB,iBACE,OAAO,oBAAoB,SAAY,SAAY,OAAO,OAAO,eAAe;CACpF;AACF;AA8BA,IAAM,YAAN,MAAgB;CACd,AAAS,WAA4B,CAAC;CACtC,AAAiB,QAAsB,CAAC;CACxC,AAAQ;CAER,QAAQ,GAAG,SAA6B;EACtC,KAAK,MAAM,KAAK,GAAG,OAAO;CAC5B;CAEA,YAAY,UAA+B;EACzC,KAAK,WAAW;CAClB;CAEA,KAAK,OAAoC;EACvC,MAAM,WAAW,KAAK,WAAW,KAAK;EACtC,IAAI,aAAa,QAAW,OAAO,eAAe,QAAQ;EAC1D,MAAM,SAAS,KAAK,MAAM,MAAM;EAChC,OAAO,WAAW,SAAY;GAAE,MAAM,CAAC;GAAG,iBAAiB;EAAU,IAAI,eAAe,MAAM;CAChG;CAEA,QAAc;EACZ,KAAK,SAAS,SAAS;EACvB,KAAK,MAAM,SAAS;EACpB,KAAK,WAAW;CAClB;AACF;AAEA,IAAM,iBAAN,MAAmD;CACpB;CAA7B,YAAY,AAAiB,OAAkB;EAAlB;CAAmB;CAEhD,MAAM,aAAgB,eAAuD;EAC3E,MAAM,QAAQ,gBAAgB,aAAa;EAC3C,KAAK,MAAM,SAAS,KAAK,KAAK;EAC9B,MAAM,EAAE,MAAM,oBAAoB,KAAK,MAAM,KAAK,KAAK;EACvD,OAAO;GACC;GACN,iBAAiB,mBAAmB,OAAO,KAAK,MAAM;EACxD;CACF;CAEA,cAAwD;EACtD,MAAM,IAAI,MAAM,8CAA8C;CAChE;AACF;AAEA,IAAM,aAAN,MAAmC;CACJ;CAA7B,YAAY,AAAiB,OAAkB;EAAlB;CAAmB;CAEhD,MAAM,OAAsB,CAAC;CAE7B,MAAM,oBAAiD;EACrD,OAAO,IAAI,eAAe,KAAK,KAAK;CACtC;CAGA,MAAM,mBAAkC,CAAC;CACzC,MAAM,oBAAmC,CAAC;CAC1C,MAAM,sBAAqC,CAAC;CAE5C,MAAM,oBAAmC,CAAC;CAC1C,MAAM,UAAyB,CAAC;AAClC;AAEA,SAAS,OAAO,OAAkB,MAA0C;CAC1E,OAAO,MAAM,SAAS,QAAQ,UAAU,MAAM,SAAS,IAAI;AAC7D;;;;;;;AAQA,SAAgB,mBAA+D;CAC7E,MAAM,QAAQ,IAAI,UAAU;CAO5B,MAAM,SAAS,IAAI,OAAW,EAAE;EAL9B,oBAAoB,IAAI,WAAW,KAAK;EACxC,2BAA2B,IAAI,sBAAsB;EACrD,qBAAqB,IAAI,gBAAgB;EACzC,qBAAqB,OAAO,IAAI,qBAAqB,EAAE;CAEnB,EAAE,CAAC;CAEzC,OAAO;EACL,IAAI;EACJ,IAAI,kBAAkB;GACpB,OAAO,MAAM;EACf;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,IAAI,UAAU;GACZ,OAAO,OAAO,OAAO,iBAAiB;EACxC;EACA,gBAAgB,WAAW,MAAM,QAAQ,MAAM;EAC/C,iBAAiB,GAAG,YAAY,MAAM,QAAQ,GAAG,OAAO;EACxD,mBAAmB,aAAa,MAAM,YAAY,QAAQ;EAC1D,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,EAAE;EAC/C,aAAa,MAAM,MAAM;GACxB,OAAO,gBAAgB,MAAM,MAAM;CACtC;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACzNA,SAAgB,cAAc,SAAyC;CACrE,OAAO,CAAC,kBAAkB,GAAG,wBAAwB,OAAO,CAAC;AAC/D"}

package/dist/{workflow.generated-CWi2rivQ.d.mts → workflow.generated-CQg1_Ami.d.mts}

@@ -1,5 +1,7 @@
-import { A as RelationType, Bt as InferredAttributeMap, D as DefinedDBFieldMetadata, Dt as ArrayFieldOutput, E as DBFieldMetadata, F as AuthConfig, Ft as FieldValidateInput, Ht as TailorUser, It as Validators, Jt as output, M as TailorDBServiceInput, Mt as FieldOutput, O as GqlOperationsConfig, Pt as TailorToTs, Wt as InferFieldsOutput, Y as TailorField, c as PluginConfigs, ht as BuiltinIdP, i as TailorDBType$1, j as SerialConfig, jt as FieldOptions, k as IndexDef, kt as EnumValue, qt as Prettify, r as TailorDBField$1, t as TailorAnyDBField$1 } from "./tailor-db-field-D0qg8s4U.mjs";
-import { NonEmptyObject } from "type-fest";
+import { C as FieldOutput$1, D as Validators, E as FieldValidateInput, F as InferFieldsOutput, N as TailorUser, R as Prettify, S as FieldOptions, T as TailorToTs, b as EnumValue, d as TailorDBType$1, f as DBFieldMetadata, g as TailorField, h as SerialConfig, j as InferredAttributeMap, l as TailorDBField$1, m as GqlOperationsConfig, n as RelationType, o as ValueOperand, p as DefinedDBFieldMetadata, r as TailorDBServiceInput, s as TailorAnyDBField$1, t as IndexDef, u as TailorDBInstance$1, v as ArrayFieldOutput, w as TailorFieldType, x as FieldMetadata, y as DefinedFieldMetadata, z as output } from "./tailordb-BlBGmQK-.mjs";
+import { B as IdProvider, G as SCIMAttribute, H as OAuth2ClientInput, J as SCIMConfig, L as AuthInvoker, R as BuiltinIdP, V as OAuth2Client, X as TenantProvider, r as PluginConfigs } from "./plugin-BuE5ZOnW.mjs";
+import { n as TailorEnv } from "./env-B-g-qgE4.mjs";
+import { IsAny, JsonObject, NonEmptyObject } from "type-fest";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 
 //#region src/configure/types/field.d.ts
@@ -288,7 +290,7 @@ interface TailorDBField<Defined extends DefinedDBFieldMetadata = DefinedDBFieldM
     array: NewOpt extends {
       array: true;
     } ? true : Defined["array"];
-  }>, FieldOutput<TailorToTs[Defined["type"]], NewOpt>>;
+  }>, FieldOutput$1<TailorToTs[Defined["type"]], NewOpt>>;
 }
 /**
  * Full TailorDBType interface with builder methods.
@@ -309,7 +311,7 @@ interface TailorDBType<Fields extends Record<string, TailorAnyDBField> = any, Us
     array: Opt extends {
       array: true;
     } ? true : D["array"];
-  }, FieldOutput<TailorToTs[D["type"]], Opt>> : never };
+  }, FieldOutput$1<TailorToTs[D["type"]], Opt>> : never };
   omitFields<K extends keyof Fields>(keys: K[]): Omit<Fields, K>;
   plugin<P extends keyof PluginConfigs<keyof Fields & string>>(config: { [K in P]: PluginConfigs<keyof Fields & string>[K] }): TailorDBType<Fields, User>;
 }
@@ -478,7 +480,7 @@ declare function _enum<const V extends AllowedValues, const Opt extends FieldOpt
   array: Opt extends {
     array: true;
   } ? true : false;
-}, FieldOutput<AllowedValuesOutput<V>, Opt>>;
+}, FieldOutput$1<AllowedValuesOutput<V>, Opt>>;
 /**
  * Create a nested object field with sub-fields.
  * @param fields - Record of nested field definitions
@@ -492,7 +494,7 @@ declare function object<const F extends Record<string, TailorAnyDBField> & Exclu
   array: Opt extends {
     array: true;
   } ? true : false;
-}, FieldOutput<InferFieldsOutput<F>, Opt>>;
+}, FieldOutput$1<InferFieldsOutput<F>, Opt>>;
 declare const idField: TailorDBField<{
   type: "uuid";
   array: false;
@@ -586,6 +588,157 @@ declare const db: {
   };
 };
 //#endregion
+//#region src/types/auth-connection.generated.d.ts
+type AuthConnectionOAuth2Config = {
+  /** OAuth2 provider URL */providerUrl: string; /** OAuth2 issuer URL */
+  issuerUrl: string; /** OAuth2 client ID */
+  clientId: string; /** OAuth2 client secret */
+  clientSecret: string; /** OAuth2 authorization endpoint override */
+  authUrl?: string | undefined; /** OAuth2 token endpoint override */
+  tokenUrl?: string | undefined;
+};
+type AuthConnectionConfig = {
+  type: "oauth2";
+  providerUrl: string;
+  issuerUrl: string;
+  clientId: string;
+  clientSecret: string;
+  authUrl?: string | undefined;
+  tokenUrl?: string | undefined;
+};
+//#endregion
+//#region src/types/auth.d.ts
+type OAuth2ClientGrantType = OAuth2Client["grantTypes"][number];
+type SCIMAttributeType = SCIMAttribute["type"];
+type AuthInvokerWithName<M extends string> = Omit<AuthInvoker, "machineUserName"> & {
+  machineUserName: M;
+};
+/** Result of retrieving a connection token at runtime. */
+type AuthConnectionTokenResult = {
+  access_token: string;
+  refresh_token?: string;
+  token_type?: string;
+  expiry?: string;
+};
+type AuthAttributeValue = ValueOperand | null | undefined;
+type UserFieldKeys<User extends TailorDBInstance$1> = keyof output<User> & string;
+type FieldDefined<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = User["fields"][Key] extends {
+  _defined: infer Defined;
+} ? Defined : never;
+type FieldOutput<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = output<User>[Key];
+type FieldIsRequired<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = undefined extends FieldOutput<User, Key> ? false : true;
+type FieldIsOfType<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>, Type extends string> = FieldDefined<User, Key> extends {
+  type: Type;
+} ? true : false;
+type FieldIsArray<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
+  array: true;
+} ? true : false;
+type FieldIsUnique<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = FieldDefined<User, Key> extends {
+  unique: true;
+} ? true : false;
+type FieldSupportsValueOperand<User extends TailorDBInstance$1, Key extends UserFieldKeys<User>> = FieldOutput<User, Key> extends ValueOperand | null | undefined ? true : false;
+type UsernameFieldKey<User extends TailorDBInstance$1> = IsAny<User> extends true ? string : { [K in UserFieldKeys<User>]: FieldIsRequired<User, K> extends true ? FieldIsOfType<User, K, "string"> extends true ? FieldIsArray<User, K> extends true ? never : FieldIsUnique<User, K> extends true ? K : never : never : never }[UserFieldKeys<User>];
+type UserAttributeKey<User extends TailorDBInstance$1> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldSupportsValueOperand<User, K> extends true ? FieldIsOfType<User, K, "datetime" | "date" | "time"> extends true ? never : K : never }[UserFieldKeys<User>];
+type UserAttributeListKey<User extends TailorDBInstance$1> = { [K in UserFieldKeys<User>]: K extends "id" ? never : FieldIsOfType<User, K, "uuid"> extends true ? FieldIsArray<User, K> extends true ? never : K : never }[UserFieldKeys<User>];
+type UserAttributeMap<User extends TailorDBInstance$1> = { [K in UserAttributeKey<User>]?: true };
+type DisallowExtraKeys<T, Allowed extends PropertyKey> = T & { [K in Exclude<keyof T, Allowed>]: never };
+type AttributeListValue<User extends TailorDBInstance$1, Key extends UserAttributeListKey<User>> = Key extends keyof output<User> ? output<User>[Key] : never;
+type AttributeListToTuple<User extends TailorDBInstance$1, AttributeList extends readonly UserAttributeListKey<User>[]> = { [Index in keyof AttributeList]: AttributeList[Index] extends UserAttributeListKey<User> ? AttributeListValue<User, AttributeList[Index]> : never };
+type AttributeMapSelectedKeys<User extends TailorDBInstance$1, AttributeMap extends UserAttributeMap<User>> = Extract<{ [K in keyof AttributeMap]-?: undefined extends AttributeMap[K] ? never : K }[keyof AttributeMap], UserAttributeKey<User>>;
+type UserProfile<User extends TailorDBInstance$1, AttributeMap extends UserAttributeMap<User>, AttributeList extends UserAttributeListKey<User>[]> = {
+  /**
+   * TailorDB namespace where the user type is defined.
+   *
+   * Usually auto-resolved, so you don't need to specify this.
+   * Required only when multiple TailorDBs exist and the type is in an external TailorDB.
+   */
+  namespace?: string;
+  type: User;
+  usernameField: UsernameFieldKey<User>;
+  attributes?: DisallowExtraKeys<AttributeMap, UserAttributeKey<User>>;
+  attributeList?: AttributeList;
+};
+type MachineUserAttributeFields = Record<string, TailorField<DefinedFieldMetadata, unknown, FieldMetadata, TailorFieldType>>;
+type TailorFieldOutputValue<Field> = Field extends TailorField<DefinedFieldMetadata, infer Output, FieldMetadata, TailorFieldType> ? Output : never;
+type MachineUserAttributeValues<Fields extends MachineUserAttributeFields> = { [K in keyof Fields]: TailorFieldOutputValue<Fields[K]> extends ValueOperand | null | undefined ? TailorFieldOutputValue<Fields[K]> : never };
+type MachineUserFromAttributes<Fields extends MachineUserAttributeFields> = (keyof Fields extends never ? {
+  attributes?: never;
+} : {
+  attributes: DisallowExtraKeys<MachineUserAttributeValues<Fields>, keyof Fields>;
+}) & {
+  attributeList?: string[];
+};
+type MachineUser<User extends TailorDBInstance$1, AttributeMap extends UserAttributeMap<User> = UserAttributeMap<User>, AttributeList extends UserAttributeListKey<User>[] = [], MachineUserAttributes extends MachineUserAttributeFields | undefined = undefined> = IsAny<MachineUserAttributes> extends true ? IsAny<User> extends true ? {
+  attributes: Record<string, AuthAttributeValue>;
+  attributeList?: string[];
+} : (AttributeMapSelectedKeys<User, AttributeMap> extends never ? {
+  attributes?: never;
+} : {
+  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap>>]?: never };
+}) & ([] extends AttributeList ? {
+  attributeList?: never;
+} : {
+  attributeList: AttributeListToTuple<User, AttributeList>;
+}) : [MachineUserAttributes] extends [MachineUserAttributeFields] ? MachineUserFromAttributes<MachineUserAttributes> : IsAny<User> extends true ? {
+  attributes: Record<string, AuthAttributeValue>;
+  attributeList?: string[];
+} : (AttributeMapSelectedKeys<User, AttributeMap> extends never ? {
+  attributes?: never;
+} : {
+  attributes: { [K in AttributeMapSelectedKeys<User, AttributeMap>]: K extends keyof output<User> ? output<User>[K] : never } & { [K in Exclude<keyof output<User>, AttributeMapSelectedKeys<User, AttributeMap>>]?: never };
+}) & ([] extends AttributeList ? {
+  attributeList?: never;
+} : {
+  attributeList: AttributeListToTuple<User, AttributeList>;
+});
+type BeforeLoginHookArgs = {
+  claims: JsonObject;
+  idpConfigName: string; /** Environment variables defined in `defineConfig({ env })`. */
+  env: TailorEnv;
+};
+type BeforeLoginHook<MachineUserNames extends string> = {
+  handler(args: BeforeLoginHookArgs): Promise<void>;
+  invoker: NoInfer<MachineUserNames>;
+};
+type AuthHooks<MachineUserNames extends string> = {
+  beforeLogin?: BeforeLoginHook<MachineUserNames>;
+};
+type AuthServiceInput<User extends TailorDBInstance$1, AttributeMap extends UserAttributeMap<User>, AttributeList extends UserAttributeListKey<User>[], MachineUserNames extends string, MachineUserAttributes extends MachineUserAttributeFields | undefined = MachineUserAttributeFields | undefined, ConnectionNames extends string = string> = {
+  hooks?: AuthHooks<MachineUserNames>;
+  userProfile?: UserProfile<User, AttributeMap, AttributeList>;
+  machineUserAttributes?: MachineUserAttributes;
+  machineUsers?: Record<MachineUserNames, MachineUser<User, AttributeMap, AttributeList, MachineUserAttributes>>;
+  oauth2Clients?: Record<string, OAuth2ClientInput>;
+  idProvider?: IdProvider;
+  scim?: SCIMConfig;
+  tenantProvider?: TenantProvider;
+  connections?: Record<ConnectionNames, AuthConnectionConfig>;
+  publishSessionEvents?: boolean;
+};
+declare const authDefinitionBrand: unique symbol;
+type AuthDefinitionBrand = {
+  readonly [authDefinitionBrand]: true;
+};
+type ConnectionNames<Config> = Config extends {
+  connections?: Record<infer K, unknown>;
+} ? K & string : string;
+type DefinedAuth<Name extends string, Config, MachineUserNames extends string> = Config & {
+  name: Name;
+  /**
+   * @deprecated Pass the machine user name directly as a string instead, e.g. `authInvoker: "machine-user-name"`.
+   * Using this function pulls config-layer (Node-only) dependencies into runtime bundles.
+   */
+  invoker<M extends MachineUserNames>(machineUser: M): AuthInvokerWithName<M>;
+  getConnectionToken<C extends ConnectionNames<Config>>(connectionName: C): Promise<AuthConnectionTokenResult>;
+} & AuthDefinitionBrand;
+type AuthExternalConfig = {
+  name: string;
+  external: true;
+};
+type AuthServiceInputLoose = AuthServiceInput<any, any, any, string, any>;
+type AuthOwnConfig = DefinedAuth<string, AuthServiceInputLoose, string>;
+type AuthConfig = AuthOwnConfig | AuthExternalConfig;
+//#endregion
 //#region src/types/idp.generated.d.ts
 /**
  * Configuration for GraphQL operations on IdP users.
@@ -1134,6 +1287,10 @@ type ExecutorServiceConfig = {
   ignores?: string[];
 };
 type ExecutorServiceInput = ExecutorServiceConfig;
+type HttpAdapterServiceInput = {
+  files: string[];
+  ignores?: string[];
+};
 type ResolverServiceConfig = {
   files: string[];
   ignores?: string[];
@@ -1195,6 +1352,8 @@ interface AppConfig<Auth extends AuthConfig = AuthConfig, Idp extends IdPConfig[
   executor?: ExecutorServiceInput;
   /** Workflow service configuration with workflow files. */
   workflow?: WorkflowServiceInput;
+  /** HTTP adapter service configuration with adapter files. */
+  httpAdapter?: HttpAdapterServiceInput;
   /** Static website configurations. Must be an array, e.g. `[website]`. */
   staticWebsites?: StaticWebsites;
   /** Secret Manager vault configurations. Keys are vault names, values are records of secret names to values. */
@@ -1206,6 +1365,22 @@ interface AppConfig<Auth extends AuthConfig = AuthConfig, Idp extends IdPConfig[
   inlineSourcemap?: boolean;
 }
 //#endregion
+//#region src/types/http-adapter.generated.d.ts
+type HttpAdapterConfigInput = {
+  /** Unique adapter name within the domain */name: string; /** Path pattern with segment wildcards (trailing or single-segment) */
+  pathPattern: string; /** Per-method functions that transform HTTP requests to GraphQL requests */
+  input: {
+    get?: Function | undefined;
+    post?: Function | undefined;
+    put?: Function | undefined;
+    patch?: Function | undefined;
+    delete?: Function | undefined;
+  }; /** Whether the adapter is active */
+  enabled?: boolean | undefined; /** Matching priority; the lowest value wins when multiple adapters match */
+  priority?: number | undefined; /** Function that transforms GraphQL response to HTTP response */
+  output?: Function | undefined;
+};
+//#endregion
 //#region src/types/workflow.generated.d.ts
 type RetryPolicy = {
   /** Maximum number of retries (1-10) */maxRetries: number; /** Initial backoff duration (e.g., '1s', '500ms', '1m', max 1h) */
@@ -1217,5 +1392,5 @@ type ConcurrencyPolicy = {
   /** Maximum number of concurrent executions (1-1000) */maxConcurrentExecutions: number;
 };
 //#endregion
-export { PermissionCondition as A, IdPInput as C, TailorDBInstance as D, TailorDBField as E, AllowedValues as F, AllowedValuesOutput as I, TailorTypePermission as M, unsafeAllowAllGqlPermission as N, TailorDBType as O, unsafeAllowAllTypePermission as P, IdPGqlOperationsInput as S, TailorAnyDBType as T, IdPExternalConfig as _, ExecutorServiceInput as a, IdPEmailConfig as b, ResolverServiceInput as c, StaticWebsiteConfig as d, StaticWebsiteDefinitionBrand as f, IdPConfig as g, SecretsDefinitionBrand as h, ExecutorServiceConfig as i, TailorTypeGqlPermission as j, db as k, WorkflowServiceConfig as l, SecretsConfig as m, RetryPolicy as n, ResolverExternalConfig as o, StaticWebsiteInput as p, AppConfig as r, ResolverServiceConfig as s, ConcurrencyPolicy as t, WorkflowServiceInput as u, IdPUserField as v, TailorAnyDBField as w, IdPGqlOperations as x, IdpDefinitionBrand as y };
-//# sourceMappingURL=workflow.generated-CWi2rivQ.d.mts.map
+export { BeforeLoginHookArgs as A, TailorAnyDBField as B, IdPGqlOperationsInput as C, AuthExternalConfig as D, AuthConnectionTokenResult as E, UserAttributeListKey as F, db as G, TailorDBField as H, UserAttributeMap as I, TailorTypePermission as J, PermissionCondition as K, UsernameFieldKey as L, OAuth2ClientGrantType as M, SCIMAttributeType as N, AuthOwnConfig as O, UserAttributeKey as P, AllowedValuesOutput as Q, AuthConnectionConfig as R, IdPGqlOperations as S, AuthConfig as T, TailorDBInstance as U, TailorAnyDBType as V, TailorDBType as W, unsafeAllowAllTypePermission as X, unsafeAllowAllGqlPermission as Y, AllowedValues as Z, IdPConfig as _, ExecutorServiceConfig as a, IdpDefinitionBrand as b, ResolverServiceConfig as c, WorkflowServiceInput as d, StaticWebsiteConfig as f, SecretsDefinitionBrand as g, SecretsConfig as h, AppConfig as i, DefinedAuth as j, AuthServiceInput as k, ResolverServiceInput as l, StaticWebsiteInput as m, RetryPolicy as n, ExecutorServiceInput as o, StaticWebsiteDefinitionBrand as p, TailorTypeGqlPermission as q, HttpAdapterConfigInput as r, ResolverExternalConfig as s, ConcurrencyPolicy as t, WorkflowServiceConfig as u, IdPExternalConfig as v, IdPInput as w, IdPEmailConfig as x, IdPUserField as y, AuthConnectionOAuth2Config as z };
+//# sourceMappingURL=workflow.generated-CQg1_Ami.d.mts.map