@tailor-platform/sdk 1.63.0 → 1.66.0

package/dist/application-nTydHJm8.mjs

@@ -0,0 +1,4 @@
+
+import { n as generatePluginFilesIfNeeded, r as loadApplication, t as defineApplication } from "./application-DGDmL8i_.mjs";
+
+export { defineApplication, generatePluginFilesIfNeeded };

package/dist/cli/index.mjs

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 
-import { Et as AuthInvokerSchema, L as CustomDomainStatus, Nt as PATScope, Q as FunctionExecution_Type, _ as userAgent, a as fetchAll, c as fetchPlatformMachineUserToken, d as initOAuth2Client, f as initOperatorClient, l as fetchUserInfo, r as closeConnectionPool, s as fetchPaged } from "../client-CobIRHl-.mjs";
+import { Et as AuthInvokerSchema, L as CustomDomainStatus, Nt as PATScope, Q as FunctionExecution_Type, _ as userAgent, a as fetchAll, c as fetchPlatformMachineUserToken, d as initOAuth2Client, f as initOperatorClient, l as fetchUserInfo, r as closeConnectionPool, s as fetchPaged } from "../client-F0a4cWUM.mjs";
 import { t as assertDefined } from "../assert-CKfwrmCV.mjs";
 import { n as logger, r as styles } from "../logger-DpJyJvNz.mjs";
-import { $ as listCommand$10, $t as INITIAL_SCHEMA_NUMBER, An as commonArgs, At as startCommand, B as logBetaWarning, C as listCommand$13, Cn as PluginManager, Dt as jobsCommand, E as resumeCommand, En as apiCommand, F as writeDbTypesFile, Fn as pagedLogArgs, Gt as MIGRATION_LABEL_KEY, H as removeCommand$1, Ht as executeScript, I as getConfiguredEditorCommand, In as paginationArgs, Jt as compareSnapshotWithRemote, K as treeCommand, Kt as handleOptionalToRequiredError, L as openInConfiguredEditor, Ln as toPageDirection, Lt as functionExecutionStatusToString, Mn as confirmationArgs, Mt as getCommand$6, N as generateCommand$1, Nn as deploymentArgs, O as listCommand$12, On as assertWritable, P as generateMigrationScript, Pn as isVerbose, Pt as executionsCommand, Rn as workspaceArgs, Rt as formatKeyValueTable, Sn as sdkNameLabelKey, St as triggerCommand, T as healthCommand, Tn as prompt, U as updateCommand$3, Vt as deploy, Xt as protoGqlPermission, Y as getCommand$5, Yt as generateAllTypeManifestsFromSnapshot, Z as updateCommand$2, _n as formatMigrationDiff, an as createSnapshotFromLocalTypes, at as createCommand$3, b as createCommand$4, bn as ensureConfigId, c as listCommand$14, cn as getMigrationFilePath, dn as isValidMigrationNumber, f as restoreCommand, fn as loadDiff, ft as tokenCommand, g as getCommand$7, gt as listCommand$7, hn as parseMigrationNumberArg, ht as generate, i as updateCommand$4, j as truncateCommand, jn as configArg, kn as defineAppCommand, ln as getMigrationFiles, lt as getCommand$3, m as listCommand$15, mn as formatMigrationNumber, nn as assertValidMigrationFiles, o as removeCommand, on as getLatestMigrationNumber, pn as reconstructSnapshotFromMigrations, pt as listCommand$8, q as listCommand$11, qt as parseMigrationLabelNumber, r as queryCommand, rn as compareLocalTypesWithSnapshot, rt as deleteCommand$3, st as listCommand$9, t as isNativeTypeScriptRuntime, tt as getCommand$4, u as inviteCommand, v as deleteCommand$4, vn as hasChanges, vt as getCommand$2, wn as generateUserTypes, wt as listCommand$6, xn as resourceTrn, xt as webhookCommand, yn as getNamespacesWithMigrations, z as showCommand, zt as getCommand$1 } from "../runtime-CW3jcQCc.mjs";
-import { A as resolveTokens, C as loadConfig, E as loadAccessToken, M as writePlatformConfig, O as loadWorkspaceId, T as fetchLatestToken, _ as createLogLevelTreeshakeOptions, a as WorkflowJobSchema, b as getDistDir, c as INVOKER_EXPR, g as composeFunctionTreeshakeOptions, h as platformBundleDefinePlugin, i as resolveInlineSourcemap, j as saveUserTokens, k as readPlatformConfig, o as ResolverSchema, t as defineApplication, v as resolveBundleLogLevel, w as deleteUserTokens, x as hashContent$1 } from "../application-BezXGbrU.mjs";
+import { $ as listCommand$10, $t as INITIAL_SCHEMA_NUMBER, An as commonArgs, At as startCommand, B as logBetaWarning, C as listCommand$13, Cn as PluginManager, Dt as jobsCommand, E as resumeCommand, En as apiCommand, F as writeDbTypesFile, Fn as pagedLogArgs, Gt as MIGRATION_LABEL_KEY, H as removeCommand$1, Ht as executeScript, I as getConfiguredEditorCommand, In as paginationArgs, Jt as compareSnapshotWithRemote, K as treeCommand, Kt as handleOptionalToRequiredError, L as openInConfiguredEditor, Ln as toPageDirection, Lt as functionExecutionStatusToString, Mn as confirmationArgs, Mt as getCommand$6, N as generateCommand$1, Nn as deploymentArgs, O as listCommand$12, On as assertWritable, P as generateMigrationScript, Pn as isVerbose, Pt as executionsCommand, Rn as workspaceArgs, Rt as formatKeyValueTable, Sn as sdkNameLabelKey, St as triggerCommand, T as healthCommand, Tn as prompt, U as updateCommand$3, Vt as deploy, Xt as protoGqlPermission, Y as getCommand$5, Yt as generateAllTypeManifestsFromSnapshot, Z as updateCommand$2, _n as formatMigrationDiff, an as createSnapshotFromLocalTypes, at as createCommand$3, b as createCommand$4, bn as ensureConfigId, c as listCommand$14, cn as getMigrationFilePath, dn as isValidMigrationNumber, f as restoreCommand, fn as loadDiff, ft as tokenCommand, g as getCommand$7, gt as listCommand$7, hn as parseMigrationNumberArg, ht as generate, i as updateCommand$4, j as truncateCommand, jn as configArg, kn as defineAppCommand, ln as getMigrationFiles, lt as getCommand$3, m as listCommand$15, mn as formatMigrationNumber, nn as assertValidMigrationFiles, o as removeCommand, on as getLatestMigrationNumber, pn as reconstructSnapshotFromMigrations, pt as listCommand$8, q as listCommand$11, qt as parseMigrationLabelNumber, r as queryCommand, rn as compareLocalTypesWithSnapshot, rt as deleteCommand$3, st as listCommand$9, t as isNativeTypeScriptRuntime, tt as getCommand$4, u as inviteCommand, v as deleteCommand$4, vn as hasChanges, vt as getCommand$2, wn as generateUserTypes, wt as listCommand$6, xn as resourceTrn, xt as webhookCommand, yn as getNamespacesWithMigrations, z as showCommand, zt as getCommand$1 } from "../runtime-2nzOZCUb.mjs";
+import { A as readPlatformConfig, C as loadConfig, E as loadAccessToken, M as saveUserTokens, N as writePlatformConfig, O as loadMachineUserName, T as fetchLatestToken, _ as createLogLevelTreeshakeOptions, a as WorkflowJobSchema, b as getDistDir, c as INVOKER_EXPR, g as composeFunctionTreeshakeOptions, h as platformBundleDefinePlugin, i as resolveInlineSourcemap, j as resolveTokens, k as loadWorkspaceId, o as ResolverSchema, t as defineApplication, v as resolveBundleLogLevel, w as deleteUserTokens, x as hashContent$1 } from "../application-DGDmL8i_.mjs";
 import { n as ExecutorSchema } from "../service-wI3Hvrgx.mjs";
 import { t as multiline } from "../multiline-Cf9ODpr1.mjs";
 import { r as isPluginGeneratedType } from "../seed-BH2FbrPV.mjs";
 import { t as readPackageJson } from "../package-json-DcQApfPQ.mjs";
 import { n as isCLIError } from "../errors-EsY4XO6O.mjs";
-import { a as JSON_FOOTER_MARKER, i as CRASH_LOG_EXTENSION, o as parseCrashReportConfig, r as sendCrashReport, t as initCrashReporting } from "../crashreport-BhD0y14F.mjs";
+import { a as JSON_FOOTER_MARKER, i as CRASH_LOG_EXTENSION, o as parseCrashReportConfig, r as sendCrashReport, t as initCrashReporting } from "../crashreport-0EHy-ayY.mjs";
 import { arg, defineCommand, runCommand, runMain } from "politty";
 import { withCompletionCommand } from "politty/completion";
 import { z } from "zod";
@@ -1400,7 +1400,7 @@ const testRunCommand = defineAppCommand({
 		}),
 		"machine-user": arg(z.string().optional(), {
 			alias: "m",
-			description: "Machine user name for authentication",
+			description: "Machine user name for authentication. Falls back to the active profile's default machine user.",
 			env: "TAILOR_PLATFORM_MACHINE_USER_NAME"
 		}),
 		config: arg(z.string().default("tailor.config.ts"), {
@@ -1434,7 +1434,11 @@ When a \`.js\` file is provided, detection and bundling are skipped and the file
 		if (!fs$1.existsSync(filePath)) throw new Error(`File not found: ${filePath}`);
 		const { config } = await loadConfig(args.config);
 		const authNamespace = resolveAuthNamespace(config.auth);
-		const machineUserName = resolveMachineUserName(args["machine-user"], config.auth);
+		const machineUserName = await resolveMachineUserName({
+			cliMachineUser: args["machine-user"],
+			profile: args.profile,
+			authConfig: config.auth
+		});
 		const client = await initOperatorClient(await loadAccessToken({ profile: args.profile }));
 		const workspaceId = await loadWorkspaceId({
 			workspaceId: args["workspace-id"],
@@ -1542,13 +1546,18 @@ function resolveAuthNamespace(authConfig) {
 	throw new Error("Auth namespace is required. Ensure tailor.config.ts has an auth config.");
 }
 /**
-* Resolve machine user name from CLI args or config. Priority: --machine-user > first key of config.auth.machineUsers
-* @param cliMachineUser - CLI --machine-user value
-* @param authConfig - Auth configuration from tailor.config.ts
+* Resolve machine user name from CLI args, profile default, or config.
+* Priority: --machine-user / env > profile default > first key of config.auth.machineUsers > error
+* @param options - Resolution options
 * @returns Resolved machine user name
 */
-function resolveMachineUserName(cliMachineUser, authConfig) {
-	if (cliMachineUser) return cliMachineUser;
+async function resolveMachineUserName(options) {
+	const { cliMachineUser, profile, authConfig } = options;
+	const resolved = await loadMachineUserName({
+		machineUser: cliMachineUser,
+		profile
+	});
+	if (resolved) return resolved;
 	if (authConfig && !("external" in authConfig && authConfig.external)) {
 		const machineUsers = authConfig.machineUsers;
 		if (machineUsers) {
@@ -1556,7 +1565,7 @@ function resolveMachineUserName(cliMachineUser, authConfig) {
 			if (keys.length > 0) return assertDefined(keys[0], "machine user key missing");
 		}
 	}
-	throw new Error("Machine user is required. Provide --machine-user or ensure tailor.config.ts has machine users configured.");
+	throw new Error("Machine user is required. Provide --machine-user, set TAILOR_PLATFORM_MACHINE_USER_NAME, set a profile default with 'tailor-sdk profile update <profile> --machine-user <name>', or ensure tailor.config.ts has machine users configured.");
 }
 /**
 * Resolve full machine user info: name, id (from API), and attributes (from config).
@@ -1974,9 +1983,15 @@ const createCommand$2 = defineAppCommand({
 			alias: "w",
 			description: "Workspace ID"
 		}),
-		permission: arg(z.enum(["write", "read"]).default("write"), { description: "Profile permission. 'read' blocks all write commands while the profile is active." })
+		permission: arg(z.enum(["write", "read"]).default("write"), { description: "Profile permission. 'read' blocks all write commands while the profile is active." }),
+		"machine-user": arg(z.string().optional(), {
+			alias: "m",
+			description: "Default machine user name for application-data commands (query, workflow start, function test-run, machineuser token)."
+		}),
+		"machine-user-override": arg(z.enum(["allow", "deny"]).optional(), { description: "Whether the command line or TAILOR_PLATFORM_MACHINE_USER_NAME may override the profile's machine user. 'deny' requires --machine-user." })
 	}).strict(),
 	run: async (args) => {
+		if (args["machine-user-override"] === "deny" && !args["machine-user"]) throw new Error("--machine-user-override deny requires --machine-user.");
 		const config = await readPlatformConfig();
 		if (config.profiles[args.name]) throw new Error(`Profile "${args.name}" already exists.`);
 		const client = await initOperatorClient(await fetchLatestToken(config, args.user));
@@ -1990,7 +2005,9 @@ const createCommand$2 = defineAppCommand({
 		config.profiles[args.name] = {
 			user: args.user,
 			workspace_id: args["workspace-id"],
-			...args.permission === "read" ? { readonly: true } : {}
+			...args.permission === "read" ? { readonly: true } : {},
+			...args["machine-user"] ? { machine_user: args["machine-user"] } : {},
+			...args["machine-user-override"] === "deny" ? { machine_user_override: "deny" } : {}
 		};
 		writePlatformConfig(config);
 		if (!args.json) logger.success(`Profile "${args.name}" created successfully.`);
@@ -1998,7 +2015,11 @@ const createCommand$2 = defineAppCommand({
 			name: args.name,
 			user: args.user,
 			workspaceId: args["workspace-id"],
-			permission: args.permission
+			permission: args.permission,
+			...args["machine-user"] ? {
+				machineUser: args["machine-user"],
+				machineUserOverride: args["machine-user-override"] ?? "allow"
+			} : {}
 		};
 		logger.out(profileInfo);
 	}
@@ -2046,7 +2067,11 @@ const listCommand$4 = defineAppCommand({
 				name,
 				user: p.user,
 				workspaceId: p.workspace_id,
-				permission: p.readonly === true ? "read" : "write"
+				permission: p.readonly === true ? "read" : "write",
+				...p.machine_user ? {
+					machineUser: p.machine_user,
+					machineUserOverride: p.machine_user_override ?? "allow"
+				} : {}
 			};
 		});
 		logger.out(profileInfos);
@@ -2071,17 +2096,28 @@ const updateCommand$1 = defineAppCommand({
 			alias: "w",
 			description: "New workspace ID"
 		}),
-		permission: arg(z.enum(["write", "read"]).optional(), { description: "Profile permission. 'read' blocks all write commands; 'write' lifts the restriction." })
+		permission: arg(z.enum(["write", "read"]).optional(), { description: "Profile permission. 'read' blocks all write commands; 'write' lifts the restriction." }),
+		"machine-user": arg(z.string().optional(), {
+			alias: "m",
+			description: "Default machine user name for application-data commands (query, workflow start, function test-run, machineuser token). Pass an empty string to clear."
+		}),
+		"machine-user-override": arg(z.enum(["allow", "deny"]).optional(), { description: "Whether the command line or TAILOR_PLATFORM_MACHINE_USER_NAME may override the profile's machine user. 'deny' requires --machine-user; 'allow' lifts the restriction." })
 	}).strict(),
 	run: async (args) => {
 		const config = await readPlatformConfig();
 		const profile = config.profiles[args.name];
 		if (!profile) throw new Error(`Profile "${args.name}" not found.`);
-		if (!args.user && !args["workspace-id"] && args.permission === void 0) throw new Error("Please provide at least one property to update.");
+		if (!args.user && !args["workspace-id"] && args.permission === void 0 && args["machine-user"] === void 0 && args["machine-user-override"] === void 0) throw new Error("Please provide at least one property to update.");
 		const oldUser = profile.user;
 		const newUser = args.user || oldUser;
 		const oldWorkspaceId = profile.workspace_id;
 		const newWorkspaceId = args["workspace-id"] || oldWorkspaceId;
+		const finalMachineUser = args["machine-user"] === "" ? void 0 : args["machine-user"] ?? profile.machine_user;
+		const finalOverride = args["machine-user-override"] === "allow" ? void 0 : args["machine-user-override"] ?? profile.machine_user_override;
+		if ((args["machine-user"] !== void 0 || args["machine-user-override"] !== void 0) && finalOverride === "deny" && !finalMachineUser) {
+			if (args["machine-user-override"] === "deny") throw new Error("--machine-user-override deny requires --machine-user.");
+			throw new Error(`Cannot clear the machine user while machine-user-override is "deny". Also pass --machine-user-override allow.`);
+		}
 		if (args.user !== void 0 || args["workspace-id"] !== void 0) {
 			const client = await initOperatorClient(await fetchLatestToken(config, newUser));
 			if (!(await fetchAll(async (pageToken, maxPageSize) => {
@@ -2096,13 +2132,21 @@ const updateCommand$1 = defineAppCommand({
 		profile.workspace_id = newWorkspaceId;
 		if (args.permission === "read") profile.readonly = true;
 		else if (args.permission === "write") delete profile.readonly;
+		if (args["machine-user"] !== void 0) if (args["machine-user"] === "") delete profile.machine_user;
+		else profile.machine_user = args["machine-user"];
+		if (args["machine-user-override"] === "deny") profile.machine_user_override = "deny";
+		else if (args["machine-user-override"] === "allow") delete profile.machine_user_override;
 		writePlatformConfig(config);
 		if (!args.json) logger.success(`Profile "${args.name}" updated successfully`);
 		const profileInfo = {
 			name: args.name,
 			user: newUser,
 			workspaceId: newWorkspaceId,
-			permission: profile.readonly === true ? "read" : "write"
+			permission: profile.readonly === true ? "read" : "write",
+			...profile.machine_user ? {
+				machineUser: profile.machine_user,
+				machineUserOverride: profile.machine_user_override ?? "allow"
+			} : {}
 		};
 		logger.out(profileInfo);
 	}
@@ -2675,7 +2719,7 @@ var setup_npm_default = "- id: tailor-setup-node\n  uses: actions/setup-node@48b
 
 //#endregion
 //#region src/cli/commands/setup/github/setup-pnpm.yml
-var setup_pnpm_default = "- id: tailor-setup-pnpm\n  uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8\n- id: tailor-setup-node\n  uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0\n  with:\n    node-version-file: package.json\n    cache: pnpm\n- id: tailor-install\n  run: pnpm install --frozen-lockfile\n";
+var setup_pnpm_default = "- id: tailor-setup-pnpm\n  uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9\n- id: tailor-setup-node\n  uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0\n  with:\n    node-version-file: package.json\n    cache: pnpm\n- id: tailor-install\n  run: pnpm install --frozen-lockfile\n";
 
 //#endregion
 //#region src/cli/commands/setup/github/setup-yarn.yml
@@ -4763,7 +4807,7 @@ async function fetchRemoteTypes(client, workspaceId, namespace) {
 async function assertMigrationsReproduceLocalTypes(loaded, target) {
 	const { config, plugins } = loaded;
 	const pluginManager = plugins.length > 0 ? new PluginManager(plugins) : void 0;
-	const { defineApplication, generatePluginFilesIfNeeded } = await import("../application-DSXntqnV.mjs");
+	const { defineApplication, generatePluginFilesIfNeeded } = await import("../application-nTydHJm8.mjs");
 	const application = defineApplication({
 		config,
 		pluginManager
@@ -5478,7 +5522,7 @@ runMain(mainCommand, {
 				if (isVerbose() && error.stack) logger.debug(`\nStack trace:\n${error.stack}`);
 			} else logger.error(`Unknown error: ${error}`);
 			if (!isCLIError(error) && (!(error instanceof Error) || error instanceof TypeError || error instanceof RangeError)) {
-				const { reportCrash } = await import("../crashreport-D1wKBJ8N.mjs");
+				const { reportCrash } = await import("../crashreport-Bf6uT6mf.mjs");
 				await reportCrash(error, "handledError");
 			}
 		}