@tailor-platform/sdk 1.66.1 → 2.0.0-next.1

package/dist/runtime/iconv.d.mts

@@ -1,2 +1,2 @@
-import { a as convert, c as encode, i as TailorIconvAPI, l as encodings, n as IconvConstructor, o as convertBuffer, r as IconvInstance, s as decode, t as Iconv } from "../iconv-kwrmd1U_.mjs";
+import { a as convert, c as encode, i as TailorIconvAPI, l as encodings, n as IconvConstructor, o as convertBuffer, r as IconvInstance, s as decode, t as Iconv } from "../iconv-Co-TOPuH.mjs";
 export { Iconv, IconvConstructor, IconvInstance, TailorIconvAPI, convert, convertBuffer, decode, encode, encodings };

package/dist/runtime/iconv.mjs

@@ -1,4 +1,3 @@
-
-import { a as encode, i as decode, n as convert, o as encodings, r as convertBuffer, t as Iconv } from "../iconv-DreIffeM.mjs";
+import { a as encode, i as decode, n as convert, o as encodings, r as convertBuffer, t as Iconv } from "../iconv-D2vi8G36.mjs";
 
 export { Iconv, convert, convertBuffer, decode, encode, encodings };

package/dist/runtime/idp.d.mts

@@ -1,2 +1,2 @@
-import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, i as IdpClientConstructor, l as TailorIdpAPI, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, t as Client, u as UpdateUserInput } from "../idp-BlBPtXJ-.mjs";
+import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, i as IdpClientConstructor, l as TailorIdpAPI, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, t as Client, u as UpdateUserInput } from "../idp-DrhVrLmV.mjs";
 export { Client, ClientConfig, CreateUserInput, IdpClientConstructor, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, TailorIdpAPI, UpdateUserInput, User, UserQuery };

package/dist/runtime/idp.mjs

@@ -1,4 +1,3 @@
-
-import { t as Client } from "../idp-Ch95ag8h.mjs";
+import { t as Client } from "../idp-BDbK5gjm.mjs";
 
 export { Client };

package/dist/runtime/index.d.mts

@@ -1,9 +1,9 @@
-import { n as authconnection_d_exports } from "../authconnection-BIYzEh2p.mjs";
-import { i as context_d_exports } from "../context-CUBwSBq4.mjs";
-import { b as file_d_exports } from "../file-BzK8z3X-.mjs";
-import { u as iconv_d_exports } from "../iconv-kwrmd1U_.mjs";
-import { p as idp_d_exports } from "../idp-BlBPtXJ-.mjs";
-import { i as secretmanager_d_exports } from "../secretmanager-CKLB3wAQ.mjs";
-import { c as workflow_d_exports } from "../workflow-CMamswkK.mjs";
-import { a as TailordbQueryResult, i as TailordbCommandType, n as TailordbClientConstructor, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-DRhMpdnA.mjs";
+import { n as authconnection_d_exports } from "../authconnection-DvUQAjQS.mjs";
+import { i as context_d_exports } from "../context-BuuIb8CC.mjs";
+import { b as file_d_exports } from "../file-BB8Vs9O_.mjs";
+import { u as iconv_d_exports } from "../iconv-Co-TOPuH.mjs";
+import { p as idp_d_exports } from "../idp-DrhVrLmV.mjs";
+import { i as secretmanager_d_exports } from "../secretmanager-B3n4KHfm.mjs";
+import { c as workflow_d_exports } from "../workflow-BbKvGLQg.mjs";
+import { a as TailordbQueryResult, i as TailordbCommandType, n as TailordbClientConstructor, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-CK7u9isy.mjs";
 export { TailorRuntime, TailordbClientConstructor, TailordbClientInstance, TailordbCommandType, TailordbQueryResult, TailordbRuntime, authconnection_d_exports as authconnection, context_d_exports as context, file_d_exports as file, iconv_d_exports as iconv, idp_d_exports as idp, secretmanager_d_exports as secretmanager, workflow_d_exports as workflow };

package/dist/runtime/index.mjs

@@ -1,10 +1,9 @@
-
-import { s as iconv_exports } from "../iconv-DreIffeM.mjs";
-import { r as secretmanager_exports } from "../secretmanager-B9h-U_8U.mjs";
-import { t as authconnection_exports } from "../authconnection-D8SJGMpj.mjs";
-import { n as idp_exports } from "../idp-Ch95ag8h.mjs";
-import { a as workflow_exports } from "../workflow--aPbA8Uq.mjs";
-import { t as context_exports } from "../context-s0lxhu8_.mjs";
-import { a as file_exports } from "../file-B58Dm-2P.mjs";
+import { s as iconv_exports } from "../iconv-D2vi8G36.mjs";
+import { r as secretmanager_exports } from "../secretmanager-BVxw3ih_.mjs";
+import { t as authconnection_exports } from "../authconnection-D2MhtTN5.mjs";
+import { n as idp_exports } from "../idp-BDbK5gjm.mjs";
+import { a as workflow_exports } from "../workflow-DgemCAz3.mjs";
+import { t as context_exports } from "../context-Bd266-ru.mjs";
+import { a as file_exports } from "../file-_oUZo76X.mjs";
 
 export { authconnection_exports as authconnection, context_exports as context, file_exports as file, iconv_exports as iconv, idp_exports as idp, secretmanager_exports as secretmanager, workflow_exports as workflow };

package/dist/runtime/secretmanager.d.mts

@@ -1,2 +1,2 @@
-import { n as getSecret, r as getSecrets, t as TailorSecretmanagerAPI } from "../secretmanager-CKLB3wAQ.mjs";
+import { n as getSecret, r as getSecrets, t as TailorSecretmanagerAPI } from "../secretmanager-B3n4KHfm.mjs";
 export { TailorSecretmanagerAPI, getSecret, getSecrets };

package/dist/runtime/secretmanager.mjs

@@ -1,4 +1,3 @@
-
-import { n as getSecrets, t as getSecret } from "../secretmanager-B9h-U_8U.mjs";
+import { n as getSecrets, t as getSecret } from "../secretmanager-BVxw3ih_.mjs";
 
 export { getSecret, getSecrets };

package/dist/runtime/workflow.d.mts

@@ -1,2 +1,2 @@
-import { a as triggerJobFunction, i as resolve, n as TailorWorkflowAPI, o as triggerWorkflow, r as TriggerWorkflowOptions, s as wait, t as AuthInvoker } from "../workflow-CMamswkK.mjs";
+import { a as triggerJobFunction, i as resolve, n as TailorWorkflowAPI, o as triggerWorkflow, r as TriggerWorkflowOptions, s as wait, t as AuthInvoker } from "../workflow-BbKvGLQg.mjs";
 export { AuthInvoker, TailorWorkflowAPI, TriggerWorkflowOptions, resolve, triggerJobFunction, triggerWorkflow, wait };

package/dist/runtime/workflow.mjs

@@ -1,4 +1,3 @@
-
-import { i as wait, n as triggerJobFunction, r as triggerWorkflow, t as resolve } from "../workflow--aPbA8Uq.mjs";
+import { i as wait, n as triggerJobFunction, r as triggerWorkflow, t as resolve } from "../workflow-DgemCAz3.mjs";
 
 export { resolve, triggerJobFunction, triggerWorkflow, wait };

package/dist/{runtime-2nzOZCUb.mjs → runtime-n9NCkjee.mjs}

@@ -1,14 +1,13 @@
-
-import { t as db } from "./schema-1msIhXwA.mjs";
-import { $ as CreateExecutorExecutorRequestSchema, A as TailorDBGQLPermission_Permit, At as AuthSCIMAttribute_Type, B as UpdateSecretManagerSecretRequestSchema, Bt as Subgraph_ServiceType, C as WorkflowExecution_Status, Ct as AuthConnection_Type, D as UpdateTailorDBTypeRequestSchema, Dt as AuthOAuth2Client_ClientType, E as CreateTailorDBTypeRequestSchema, Et as AuthInvokerSchema, F as CreateStaticWebsiteRequestSchema, Ft as UserProfileProviderConfig_UserProfileProviderType, G as PipelineResolver_OperationType, H as CreatePipelineServiceRequestSchema, Ht as Condition_Operator, I as UpdateStaticWebsiteRequestSchema, It as CreateApplicationRequestSchema, J as IdPLang, K as CreateIdPServiceRequestSchema, Lt as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, M as TailorDBType_Permission_Permit, Mt as AuthSCIMConfig_AuthorizationType, N as TailorDBType_PermitAction, O as TailorDBGQLPermission_Action, Ot as AuthOAuth2Client_GrantType, P as AddCustomDomainRequestSchema, Pt as TenantProviderConfig_TenantProviderType, R as CreateSecretManagerSecretRequestSchema, Rt as UpdateApplicationRequestSchema, S as UpdateWorkflowRequestSchema, St as UpdateUserProfileConfigRequestSchema, T as CreateTailorDBServiceRequestSchema, Tt as AuthIDPConfig_AuthType, U as UpdatePipelineResolverRequestSchema, Ut as FilterSchema, V as CreatePipelineResolverRequestSchema, Vt as ConditionSchema, W as UpdatePipelineServiceRequestSchema, Wt as PageDirection, X as IdPPermissionPermit, Y as IdPPermissionOperator, Z as FunctionExecution_Status, _ as userAgent, _t as UpdateAuthOAuth2ClientRequestSchema, a as fetchAll, at as CreateAuthHookRequestSchema, b as CreateWorkflowJobFunctionRequestSchema, bt as UpdateAuthServiceRequestSchema, ct as CreateAuthOAuth2ClientRequestSchema, dt as CreateAuthServiceRequestSchema, et as UpdateExecutorExecutorRequestSchema, f as initOperatorClient, ft as CreateTenantConfigRequestSchema, gt as UpdateAuthMachineUserRequestSchema, h as resolveStaticWebsiteUrls, ht as UpdateAuthIDPConfigRequestSchema, it as CreateAuthConnectionRequestSchema, j as TailorDBType_Permission_Operator, jt as AuthSCIMAttribute_Uniqueness, k as TailorDBGQLPermission_Operator, kt as AuthSCIMAttribute_Mutability, lt as CreateAuthSCIMConfigRequestSchema, m as platformBaseUrl, mt as UpdateAuthHookRequestSchema, nt as ExecutorTargetType, o as fetchMachineUserToken, ot as CreateAuthIDPConfigRequestSchema, pt as CreateUserProfileConfigRequestSchema, q as UpdateIdPServiceRequestSchema, rt as ExecutorTriggerType, s as fetchPaged, st as CreateAuthMachineUserRequestSchema, tt as ExecutorJobStatus, ut as CreateAuthSCIMResourceRequestSchema, v as OperatorService, vt as UpdateAuthSCIMConfigRequestSchema, w as WorkflowJobExecution_Status, wt as AuthHookPoint, x as CreateWorkflowRequestSchema, xt as UpdateTenantConfigRequestSchema, y as WorkspacePlatformUserRole, yt as UpdateAuthSCIMResourceRequestSchema, z as CreateSecretManagerVaultRequestSchema, zt as ApplicationSchemaUpdateAttemptStatus } from "./client-F0a4cWUM.mjs";
-import { t as assertDefined } from "./assert-CKfwrmCV.mjs";
-import { a as parseBoolean, i as symbols, n as logger, r as styles, t as CIPromptError } from "./logger-DpJyJvNz.mjs";
-import { A as readPlatformConfig, C as loadConfig, D as loadConfigPath, E as loadAccessToken, N as writePlatformConfig, O as loadMachineUserName, S as hashFile, b as getDistDir, d as assertUniqueLocalTailorDBTypeNames, f as assertUniqueTailorDBTypeNamesWithExternal, h as platformBundleDefinePlugin, k as loadWorkspaceId, l as buildExecutorArgsExpr, m as stringifyFunction, n as generatePluginFilesIfNeeded, p as TailorDBTypeSchema, r as loadApplication, s as HTTP_METHODS, t as defineApplication, u as buildResolverOperationHookExpr, y as createBundleCache } from "./application-DGDmL8i_.mjs";
-import { o as loadFilesWithIgnores, t as createExecutorService } from "./service-wI3Hvrgx.mjs";
-import { t as multiline } from "./multiline-Cf9ODpr1.mjs";
-import { t as readPackageJson } from "./package-json-DcQApfPQ.mjs";
-import { n as isCLIError, t as createCLIError } from "./errors-EsY4XO6O.mjs";
-import { r as withSpan } from "./telemetry-BQbbVo2t.mjs";
+import { t as db } from "./schema-BhkpP5Hw.mjs";
+import { $ as CreateExecutorExecutorRequestSchema, A as TailorDBGQLPermission_Permit, At as AuthSCIMAttribute_Type, B as UpdateSecretManagerSecretRequestSchema, Bt as Subgraph_ServiceType, C as WorkflowExecution_Status, Ct as AuthConnection_Type, D as UpdateTailorDBTypeRequestSchema, Dt as AuthOAuth2Client_ClientType, E as CreateTailorDBTypeRequestSchema, Et as AuthInvokerSchema, F as CreateStaticWebsiteRequestSchema, Ft as UserProfileProviderConfig_UserProfileProviderType, G as PipelineResolver_OperationType, H as CreatePipelineServiceRequestSchema, Ht as Condition_Operator, I as UpdateStaticWebsiteRequestSchema, It as CreateApplicationRequestSchema, J as IdPLang, K as CreateIdPServiceRequestSchema, Lt as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, M as TailorDBType_Permission_Permit, Mt as AuthSCIMConfig_AuthorizationType, N as TailorDBType_PermitAction, O as TailorDBGQLPermission_Action, Ot as AuthOAuth2Client_GrantType, P as AddCustomDomainRequestSchema, Pt as TenantProviderConfig_TenantProviderType, R as CreateSecretManagerSecretRequestSchema, Rt as UpdateApplicationRequestSchema, S as UpdateWorkflowRequestSchema, St as UpdateUserProfileConfigRequestSchema, T as CreateTailorDBServiceRequestSchema, Tt as AuthIDPConfig_AuthType, U as UpdatePipelineResolverRequestSchema, Ut as FilterSchema, V as CreatePipelineResolverRequestSchema, Vt as ConditionSchema, W as UpdatePipelineServiceRequestSchema, Wt as PageDirection, X as IdPPermissionPermit, Y as IdPPermissionOperator, Z as FunctionExecution_Status, _ as userAgent, _t as UpdateAuthOAuth2ClientRequestSchema, a as fetchAll, at as CreateAuthHookRequestSchema, b as CreateWorkflowJobFunctionRequestSchema, bt as UpdateAuthServiceRequestSchema, ct as CreateAuthOAuth2ClientRequestSchema, dt as CreateAuthServiceRequestSchema, et as UpdateExecutorExecutorRequestSchema, f as initOperatorClient, ft as CreateTenantConfigRequestSchema, gt as UpdateAuthMachineUserRequestSchema, h as resolveStaticWebsiteUrls, ht as UpdateAuthIDPConfigRequestSchema, it as CreateAuthConnectionRequestSchema, j as TailorDBType_Permission_Operator, jt as AuthSCIMAttribute_Uniqueness, k as TailorDBGQLPermission_Operator, kt as AuthSCIMAttribute_Mutability, lt as CreateAuthSCIMConfigRequestSchema, m as platformBaseUrl, mt as UpdateAuthHookRequestSchema, nt as ExecutorTargetType, o as fetchMachineUserToken, ot as CreateAuthIDPConfigRequestSchema, pt as CreateUserProfileConfigRequestSchema, q as UpdateIdPServiceRequestSchema, rt as ExecutorTriggerType, s as fetchPaged, st as CreateAuthMachineUserRequestSchema, tt as ExecutorJobStatus, ut as CreateAuthSCIMResourceRequestSchema, v as OperatorService, vt as UpdateAuthSCIMConfigRequestSchema, w as WorkflowJobExecution_Status, wt as AuthHookPoint, x as CreateWorkflowRequestSchema, xt as UpdateTenantConfigRequestSchema, y as WorkspacePlatformUserRole, yt as UpdateAuthSCIMResourceRequestSchema, z as CreateSecretManagerVaultRequestSchema, zt as ApplicationSchemaUpdateAttemptStatus } from "./client-z_oHGVNy.mjs";
+import { t as assertDefined } from "./assert-DBxo8jPo.mjs";
+import { a as parseBoolean, i as symbols, n as logger, r as styles, t as CIPromptError } from "./logger-CxF-Ex5d.mjs";
+import { A as loadAccessToken, C as getDistDir, E as loadConfig, M as loadMachineUserName, N as loadWorkspaceId, P as readPlatformConfig, R as writePlatformConfig, S as createBundleCache, T as hashFile, a as getApplicationAuthNamespace, b as getPluginGenerationDependencies, c as HTTP_METHODS, d as buildResolverOperationHookExpr, f as assertUniqueLocalTailorDBTypeNames, g as platformBundleDefinePlugin, h as stringifyFunction, j as loadConfigPath, m as TailorDBTypeSchema, n as generatePluginFilesIfNeeded, p as assertUniqueTailorDBTypeNamesWithExternal, r as loadApplication, t as defineApplication, u as buildExecutorArgsExpr, x as hasGenerationHooks } from "./application-DqS1yBg3.mjs";
+import { o as loadFilesWithIgnores, t as createExecutorService } from "./service-CCL8ruDf.mjs";
+import { t as multiline } from "./multiline-sfHpTZZK.mjs";
+import { t as readPackageJson } from "./package-json-8b0O9TlX.mjs";
+import { n as isCLIError, t as createCLIError } from "./errors-Dtf2WPaW.mjs";
+import { r as withSpan } from "./telemetry-CdqJEzkj.mjs";
 import { arg, createDefineCommand, defineCommand, runCommand } from "politty";
 import { z } from "zod";
 import { ScalarType, create, fromJson, toJson } from "@bufbuild/protobuf";
@@ -1240,35 +1239,6 @@ async function generateUserTypes(options) {
 	}
 }
 
-//#endregion
-//#region src/types/plugin-generation.ts
-/**
-* Derives generation-time dependency set from hook presence on a plugin.
-* @param plugin - The plugin object to inspect.
-* @param plugin.onTailorDBReady - Hook for TailorDB readiness.
-* @param plugin.onResolverReady - Hook for resolver readiness.
-* @param plugin.onExecutorReady - Hook for executor readiness.
-* @returns Set of dependency kinds required by the plugin.
-*/
-function getPluginGenerationDependencies(plugin) {
-	const deps = /* @__PURE__ */ new Set();
-	if (plugin.onTailorDBReady) deps.add("tailordb");
-	if (plugin.onResolverReady) deps.add("resolver");
-	if (plugin.onExecutorReady) deps.add("executor");
-	return deps;
-}
-/**
-* Checks if a plugin has any generation-time hooks.
-* @param plugin - The plugin object to inspect.
-* @param plugin.onTailorDBReady - Hook for TailorDB readiness.
-* @param plugin.onResolverReady - Hook for resolver readiness.
-* @param plugin.onExecutorReady - Hook for executor readiness.
-* @returns True if the plugin has at least one generation hook.
-*/
-function hasGenerationHooks(plugin) {
-	return !!(plugin.onTailorDBReady || plugin.onResolverReady || plugin.onExecutorReady);
-}
-
 //#endregion
 //#region src/plugin/manager.ts
 /**
@@ -4920,7 +4890,7 @@ async function readConfigId(configPath) {
 async function assertConfigIdInCI(configPath) {
 	const result = await readConfigId(configPath);
 	if (result === null) return;
-	if (!result.id) throw new Error("tailor.config.ts is missing an 'id'. CI does not auto-generate one (each run would be treated as a separate app and break resource ownership). Run 'tailor-sdk setup github' or 'tailor-sdk apply' locally and commit the injected id.");
+	if (!result.id) throw new Error("tailor.config.ts is missing an 'id'. CI does not auto-generate one (each run would be treated as a separate app and break resource ownership). Run 'tailor-sdk setup github' or 'tailor-sdk deploy' locally and commit the injected id.");
 	if (!uuidRegex.test(result.id)) throw new Error(`'id' in ${configPath} must be a UUID. To use this config for a separate app, delete it.`);
 }
 /**
@@ -5095,8 +5065,8 @@ async function confirmImportantResourceDeletion(resources, yes) {
 * Accepts either:
 * - `undefined` — returns undefined
 * - a plain string (machine user name) — expands to `{ namespace, machineUserName }` using `authNamespace`
-* - an object `{ namespace, machineUserName }` — returned as-is
-* @param authInvoker - String machine user name or object form
+* - an internal object `{ namespace, machineUserName }` — returned as-is
+* @param authInvoker - String machine user name or internal object form
 * @param authNamespace - Auth service namespace (required when authInvoker is a string)
 * @param context - Contextual label used in error messages (e.g. `resolver "foo"`)
 * @returns Object form of auth invoker, or undefined
@@ -5104,7 +5074,7 @@ async function confirmImportantResourceDeletion(resources, yes) {
 function normalizeAuthInvoker(authInvoker, authNamespace, context) {
 	if (authInvoker === void 0) return void 0;
 	if (typeof authInvoker === "string") {
-		if (!authNamespace) throw new Error(`${context} uses a string authInvoker ("${authInvoker}"), but no Auth service is configured. Configure an Auth service or use the object form { namespace, machineUserName }.`);
+		if (!authNamespace) throw new Error(`${context} uses a string authInvoker ("${authInvoker}"), but no Auth service is configured. Configure an Auth service before using authInvoker.`);
 		return {
 			namespace: authNamespace,
 			machineUserName: authInvoker
@@ -5323,8 +5293,9 @@ function resolveIdpNamespace(application, executorName, idpName) {
 	return assertDefined(application.idpServices[0], "idp service missing").name;
 }
 function resolveAuthNamespace(application) {
-	if (!application.authService) throw new Error("No Auth service configured");
-	return application.authService.config.name;
+	const authNamespace = getApplicationAuthNamespace(application);
+	if (!authNamespace) throw new Error("No Auth service configured");
+	return authNamespace;
 }
 function protoExecutor(application, executor) {
 	const appName = application.name;
@@ -5409,7 +5380,7 @@ function protoExecutor(application, executor) {
 	const target = executor.operation;
 	let targetType;
 	let targetConfig;
-	const authNamespace = application.authService?.config.name;
+	const authNamespace = getApplicationAuthNamespace(application);
 	const invokerContext = `Executor "${executor.name}"`;
 	switch (target.kind) {
 		case "webhook":
@@ -5565,7 +5536,7 @@ async function planPipeline(context) {
 	}
 	const executors = forRemoval ? [] : Object.values(await application.executorService?.loadExecutors() ?? {});
 	const { changeSet: serviceChangeSet, conflicts, unmanaged, resourceOwners } = await planServices$1(client, workspaceId, application.name, application.id, pipelines);
-	const { changeSet: resolverChangeSet } = await planResolvers(client, workspaceId, pipelines, executors, serviceChangeSet.deletes.map((del) => del.name), application.env, application.authService?.config.name, forceApplyAll);
+	const { changeSet: resolverChangeSet } = await planResolvers(client, workspaceId, pipelines, executors, serviceChangeSet.deletes.map((del) => del.name), application.env, getApplicationAuthNamespace(application), forceApplyAll);
 	return {
 		changeSet: {
 			service: serviceChangeSet,
@@ -7004,7 +6975,7 @@ function createSnapshotFieldConfig(field) {
 }
 /**
 * Create a snapshot field config from an OperatorFieldConfig (for nested fields)
-* @param {import("@/types/tailordb").OperatorFieldConfig} fieldConfig - Field configuration
+* @param {import("@/parser/service/tailordb/types").OperatorFieldConfig} fieldConfig - Field configuration
 * @returns {SnapshotFieldConfig} Snapshot field configuration
 */
 function createSnapshotFieldConfigFromOperatorConfig(fieldConfig) {
@@ -12116,6 +12087,16 @@ async function startWorkflowCore(options) {
 		throw error;
 	}
 }
+async function resolveApplicationAuthNamespace(options) {
+	const { config } = await loadConfig(options.configPath);
+	const { application } = await options.client.getApplication({
+		workspaceId: options.workspaceId,
+		applicationName: config.name
+	});
+	const authNamespace = application?.authNamespace || config.auth?.name;
+	if (!authNamespace) throw new Error(`Application ${config.name} does not have an auth configuration.`);
+	return authNamespace;
+}
 async function startWorkflowByName(options) {
 	const machineUser = await loadMachineUserName({
 		machineUser: options.machineUser,
@@ -12127,18 +12108,17 @@ async function startWorkflowByName(options) {
 		workspaceId: options.workspaceId,
 		profile: options.profile
 	});
-	const { config } = await loadConfig(options.configPath);
-	const { application } = await client.getApplication({
+	const authNamespace = await resolveApplicationAuthNamespace({
+		client,
 		workspaceId,
-		applicationName: config.name
+		configPath: options.configPath
 	});
-	if (!application?.authNamespace) throw new Error(`Application ${config.name} does not have an auth configuration.`);
 	return await startWorkflowCore({
 		client,
 		workspaceId,
 		workflowName: options.name,
 		authInvoker: {
-			namespace: application.authNamespace,
+			namespace: authNamespace,
 			machineUserName: machineUser
 		},
 		arg: options.arg,
@@ -12147,14 +12127,24 @@ async function startWorkflowByName(options) {
 }
 async function startWorkflow(options) {
 	if ("name" in options) return await startWorkflowByName(options);
+	const client = await initOperatorClient(await loadAccessToken({ profile: options.profile }));
+	const workspaceId = await loadWorkspaceId({
+		workspaceId: options.workspaceId,
+		profile: options.profile
+	});
+	const authNamespace = await resolveApplicationAuthNamespace({
+		client,
+		workspaceId,
+		configPath: options.configPath
+	});
 	return await startWorkflowCore({
-		client: await initOperatorClient(await loadAccessToken({ profile: options.profile })),
-		workspaceId: await loadWorkspaceId({
-			workspaceId: options.workspaceId,
-			profile: options.profile
-		}),
+		client,
+		workspaceId,
 		workflowName: options.workflow.name,
-		authInvoker: options.authInvoker,
+		authInvoker: {
+			namespace: authNamespace,
+			machineUserName: options.authInvoker
+		},
 		arg: options.arg,
 		interval: options.interval
 	});
@@ -12167,7 +12157,6 @@ const startCommand = defineAppCommand({
 		...nameArgs,
 		"machine-user": arg(z.string().optional(), {
 			alias: "m",
-			hiddenAlias: "machineuser",
 			description: "Machine user name. Falls back to the active profile's default machine user.",
 			env: "TAILOR_PLATFORM_MACHINE_USER_NAME"
 		}),
@@ -13042,19 +13031,6 @@ const listCommand$8 = defineAppCommand({
 	}
 });
 
-//#endregion
-//#region src/cli/commands/generate/types.ts
-/**
-* Type guard to check if a generator has a specific dependency.
-* @template D
-* @param generator - Code generator instance
-* @param dependency - Dependency kind to check
-* @returns True if the generator has the dependency
-*/
-function hasDependency(generator, dependency) {
-	return generator.dependencies.includes(dependency);
-}
-
 //#endregion
 //#region src/cli/commands/generate/watch/index.ts
 /**
@@ -13443,12 +13419,11 @@ function createDependencyWatcher(options = {}) {
 * @param params - Parameters for creating the generation manager
 * @param params.application - Application instance to generate code for
 * @param params.config - Loaded configuration
-* @param params.generators - Code generators to run
 * @param params.pluginManager - Plugin manager for processing plugins
 * @returns GenerationManager instance
 */
 function createGenerationManager(params) {
-	const { application, config, generators = [], pluginManager } = params;
+	const { application, config, pluginManager } = params;
 	const baseDir = path.join(getDistDir(), "generated");
 	fs$1.mkdirSync(baseDir, { recursive: true });
 	const services = {
@@ -13457,11 +13432,7 @@ function createGenerationManager(params) {
 		executor: {}
 	};
 	let watcher = null;
-	const generatorResults = {};
 	const generationPlugins = pluginManager?.getPluginsWithGenerationHooks() ?? [];
-	function getReadyGenerators(dep) {
-		return generators.filter((g) => g.dependencies.includes(dep));
-	}
 	function getAuthInput() {
 		const authService = application.authService;
 		if (!authService) return void 0;
@@ -13479,98 +13450,6 @@ function createGenerationManager(params) {
 			idProvider: authConfig.idProvider
 		};
 	}
-	async function processTailorDBNamespace(gen, namespace, typeInfo) {
-		const results = assertDefined(generatorResults[gen.id], `generator result not initialized for ${gen.id}`);
-		results.tailordbResults[namespace] = {};
-		if (!gen.processType) return;
-		const processType = gen.processType;
-		await Promise.allSettled(Object.entries(typeInfo.types).map(async ([typeName, type]) => {
-			try {
-				assertDefined(results.tailordbResults[namespace], `tailordb results not initialized for namespace ${namespace}`)[typeName] = await processType({
-					type,
-					namespace,
-					source: typeInfo.sourceInfo[typeName],
-					plugins: typeInfo.pluginAttachments.get(typeName) ?? []
-				});
-			} catch (error) {
-				logger.error(`Error processing type ${styles.bold(typeName)} in ${namespace} with generator ${gen.id}`);
-				logger.error(String(error));
-			}
-		}));
-		if ("processTailorDBNamespace" in gen && typeof gen.processTailorDBNamespace === "function") try {
-			results.tailordbNamespaceResults[namespace] = await gen.processTailorDBNamespace({
-				namespace,
-				types: results.tailordbResults[namespace]
-			});
-		} catch (error) {
-			logger.error(`Error processing TailorDB namespace ${styles.bold(namespace)} with generator ${gen.id}`);
-			logger.error(String(error));
-		}
-		else results.tailordbNamespaceResults[namespace] = results.tailordbResults[namespace];
-	}
-	async function processResolverNamespace(gen, namespace, resolvers) {
-		const results = assertDefined(generatorResults[gen.id], `generator result not initialized for ${gen.id}`);
-		results.resolverResults[namespace] = {};
-		if (!gen.processResolver) return;
-		const processResolver = gen.processResolver;
-		await Promise.allSettled(Object.entries(resolvers).map(async ([resolverName, resolver]) => {
-			try {
-				assertDefined(results.resolverResults[namespace], `resolver results not initialized for namespace ${namespace}`)[resolverName] = await processResolver({
-					resolver,
-					namespace
-				});
-			} catch (error) {
-				logger.error(`Error processing resolver ${styles.bold(resolverName)} in ${namespace} with generator ${gen.id}`);
-				logger.error(String(error));
-			}
-		}));
-		if ("processResolverNamespace" in gen && typeof gen.processResolverNamespace === "function") try {
-			results.resolverNamespaceResults[namespace] = await gen.processResolverNamespace({
-				namespace,
-				resolvers: results.resolverResults[namespace]
-			});
-		} catch (error) {
-			logger.error(`Error processing Resolver namespace ${styles.bold(namespace)} with generator ${gen.id}`);
-			logger.error(String(error));
-		}
-		else results.resolverNamespaceResults[namespace] = results.resolverResults[namespace];
-	}
-	async function processExecutors(gen) {
-		const results = assertDefined(generatorResults[gen.id], `generator result not initialized for ${gen.id}`);
-		if (!gen.processExecutor) return;
-		const processExecutor = gen.processExecutor;
-		await Promise.allSettled(Object.entries(services.executor).map(async ([executorId, executor]) => {
-			try {
-				results.executorResults[executorId] = await processExecutor(executor);
-			} catch (error) {
-				logger.error(`Error processing executor ${styles.bold(executor.name)} with generator ${gen.id}`);
-				logger.error(String(error));
-			}
-		}));
-	}
-	async function aggregate(gen) {
-		const results = assertDefined(generatorResults[gen.id], `generator result not initialized for ${gen.id}`);
-		const tailordbResults = [];
-		const resolverResults = [];
-		for (const [namespace, types] of Object.entries(results.tailordbNamespaceResults)) tailordbResults.push({
-			namespace,
-			types
-		});
-		for (const [namespace, resolvers] of Object.entries(results.resolverNamespaceResults)) resolverResults.push({
-			namespace,
-			resolvers
-		});
-		const input = { auth: getAuthInput() };
-		if (hasDependency(gen, "tailordb")) input.tailordb = tailordbResults;
-		if (hasDependency(gen, "resolver")) input.resolver = resolverResults;
-		if (hasDependency(gen, "executor")) input.executor = Object.values(results.executorResults);
-		const result = await gen.aggregate({
-			input,
-			baseDir: path.join(baseDir, gen.id),
-			configPath: config.path
-		});
-		await writeGeneratedFiles(gen.id, result);
-	}
 	/**
 	* Build TailorDB namespace data array from loaded services.
 	* @returns Array of TailorDB namespace data
@@ -13665,8 +13544,8 @@ function createGenerationManager(params) {
 	}
 	/**
 	* Write generated files to disk.
-	* @param sourceId - Generator or plugin ID for logging
-	* @param result - Generator result containing files to write
+	* @param sourceId - Plugin ID for logging
+	* @param result - Generation result containing files to write
 	*/
 	async function writeGeneratedFiles(sourceId, result) {
 		await Promise.all(result.files.map(async (file) => {
@@ -13700,36 +13579,6 @@ function createGenerationManager(params) {
 			});
 		}));
 	}
-	async function processGenerator(gen) {
-		generatorResults[gen.id] = {
-			tailordbResults: {},
-			resolverResults: {},
-			tailordbNamespaceResults: {},
-			resolverNamespaceResults: {},
-			executorResults: {}
-		};
-		if (hasDependency(gen, "tailordb")) for (const [namespace, types] of Object.entries(services.tailordb)) await processTailorDBNamespace(gen, namespace, types);
-		if (hasDependency(gen, "resolver")) for (const [namespace, resolvers] of Object.entries(services.resolver)) await processResolverNamespace(gen, namespace, resolvers);
-		if (hasDependency(gen, "executor")) await processExecutors(gen);
-		await aggregate(gen);
-	}
-	async function runGenerators(gens, watch) {
-		const results = await Promise.allSettled(gens.map(async (gen) => {
-			await withSpan(`generate.generator.${gen.id}`, async () => {
-				try {
-					await processGenerator(gen);
-				} catch (error) {
-					logger.error(`Error processing generator ${styles.bold(gen.id)}`);
-					logger.error(String(error));
-					if (!watch) throw error;
-				}
-			});
-		}));
-		if (!watch) {
-			const failures = results.filter((r) => r.status === "rejected");
-			if (failures.length > 0) throw new AggregateError(failures.map((f) => f.reason));
-		}
-	}
 	async function restartWatchProcess() {
 		logger.newline();
 		logger.info("Restarting watch process to clear module cache...", { mode: "stream" });
@@ -13757,14 +13606,7 @@ function createGenerationManager(params) {
 	return {
 		application,
 		baseDir,
-		generators,
 		services,
-		generatorResults,
-		processGenerator,
-		processTailorDBNamespace,
-		processResolverNamespace,
-		processExecutors,
-		aggregate,
 		async generate(watch) {
 			logger.newline();
 			logger.log(`Generation for application: ${styles.highlight(application.config.name)}`);
@@ -13809,11 +13651,9 @@ function createGenerationManager(params) {
 				await withSpan("generate.resolveAuthNamespaces", async () => authService.resolveNamespaces());
 			}
 			if (app.tailorDBServices.length > 0 || pluginExecutorFiles.length > 0) logger.newline();
-			const readyAfterTailorDB = getReadyGenerators("tailordb");
-			const hasOnTailorDBReady = generationPlugins.some((p) => p.onTailorDBReady != null);
-			if (readyAfterTailorDB.length > 0 || hasOnTailorDBReady) {
+			if (generationPlugins.some((p) => p.onTailorDBReady != null)) {
 				await withSpan("generate.onTailorDBReady", async () => {
-					await Promise.all([runGenerators(readyAfterTailorDB, watch), runPluginHook("onTailorDBReady", watch)]);
+					await runPluginHook("onTailorDBReady", watch);
 				});
 				logger.newline();
 			}
@@ -13836,11 +13676,9 @@ function createGenerationManager(params) {
 					});
 				}
 			});
-			const readyAfterResolvers = getReadyGenerators("resolver");
-			const hasOnResolverReady = generationPlugins.some((p) => p.onResolverReady != null);
-			if (readyAfterResolvers.length > 0 || hasOnResolverReady) {
+			if (generationPlugins.some((p) => p.onResolverReady != null)) {
 				await withSpan("generate.onResolversReady", async () => {
-					await Promise.all([runGenerators(readyAfterResolvers, watch), runPluginHook("onResolverReady", watch)]);
+					await runPluginHook("onResolverReady", watch);
 				});
 				logger.newline();
 			}
@@ -13854,11 +13692,9 @@ function createGenerationManager(params) {
 					services.executor[key] = executor;
 				});
 			});
-			const readyAfterExecutors = getReadyGenerators("executor");
-			const hasOnExecutorReady = generationPlugins.some((p) => p.onExecutorReady != null);
-			if (readyAfterExecutors.length > 0 || hasOnExecutorReady) {
+			if (generationPlugins.some((p) => p.onExecutorReady != null)) {
 				await withSpan("generate.onExecutorsReady", async () => {
-					await Promise.all([runGenerators(readyAfterExecutors, watch), runPluginHook("onExecutorReady", watch)]);
+					await runPluginHook("onExecutorReady", watch);
 				});
 				logger.newline();
 			}
@@ -13883,18 +13719,17 @@ function createGenerationManager(params) {
 	};
 }
 /**
-* Run code generation using the Tailor configuration and generators.
+* Run code generation using the Tailor configuration.
 * @param options - Generation options
 * @returns Promise that resolves when generation (and watch, if enabled) completes
 */
 async function generate$1(options) {
 	return withSpan("generate", async (rootSpan) => {
-		const { config, generators, plugins } = await withSpan("generate.loadConfig", async () => {
+		const { config, plugins } = await withSpan("generate.loadConfig", async () => {
 			return loadConfig(options?.configPath);
 		});
 		const watch = options?.watch ?? false;
 		rootSpan.setAttribute("generate.watch", watch);
-		rootSpan.setAttribute("generate.generators.count", generators.length);
 		await withSpan("generate.generateUserTypes", async () => generateUserTypes({
 			config,
 			configPath: config.path
@@ -13909,7 +13744,6 @@ async function generate$1(options) {
 		const manager = createGenerationManager({
 			application,
 			config,
-			generators,
 			pluginManager
 		});
 		await manager.generate(watch);
@@ -15535,7 +15369,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication } = await import("./application-nTydHJm8.mjs");
+	const { defineApplication } = await import("./application-DB2r36Et.mjs");
 	const application = defineApplication({
 		config,
 		pluginManager
@@ -16240,7 +16074,7 @@ const createCommand = defineAppCommand({
 			alias: "p",
 			description: "Profile name to create"
 		}),
-		"profile-user": arg(z.string().optional(), { description: "User email for the profile (defaults to current user)" }),
+		"profile-user": arg(z.string().optional(), { description: "User email address or machine user client ID for the profile (defaults to current user)" }),
 		permission: arg(z.enum(["write", "read"]).default("write"), { description: "Profile permission (requires --profile-name). 'read' blocks all write commands while the profile is active." })
 	}).strict(),
 	run: async (args) => {
@@ -17361,7 +17195,7 @@ async function runRepl(options) {
 	const execute = await prepareQueryExecutor(options);
 	const historyPath = getReplHistoryPath(options.engine, options.profile, options.workspaceId);
 	const validate = createReplValidator(options.engine);
-	const { highlightSqlLine, highlightGraphqlLine, replTransform } = await import("./repl-editor-CJG3sz7A.mjs");
+	const { highlightSqlLine, highlightGraphqlLine, replTransform } = await import("./repl-editor-DmGr9zMw.mjs");
 	const highlight = options.engine === "sql" ? highlightSqlLine : highlightGraphqlLine;
 	const prompt = createPrompt({
 		prefix: "",
@@ -17529,7 +17363,6 @@ const queryCommand = defineAppCommand({
 		edit: arg(z.boolean().default(false), { description: "Open a temporary file in your editor; omit to start REPL mode" }),
 		"machine-user": arg(z.string().optional(), {
 			alias: "m",
-			hiddenAlias: "machineuser",
 			description: "Machine user name for query execution. Falls back to the active profile's default machine user.",
 			env: "TAILOR_PLATFORM_MACHINE_USER_NAME"
 		}),
@@ -17696,4 +17529,4 @@ function isDeno() {
 
 //#endregion
 export { listCommand$5 as $, INITIAL_SCHEMA_NUMBER as $t, truncate as A, commonArgs as An, startCommand as At, logBetaWarning as B, getExecutor as Bt, listCommand$2 as C, PluginManager as Cn, triggerExecutor as Ct, resumeWorkflow as D, apiCall as Dn, jobsCommand as Dt, resumeCommand as E, apiCommand as En, getExecutorJob as Et, writeDbTypesFile as F, pagedLogArgs as Fn, getWorkflowExecution as Ft, organizationTree as G, MIGRATION_LABEL_KEY as Gt, removeCommand$1 as H, executeScript as Ht, getConfiguredEditorCommand as I, paginationArgs as In, listWorkflowExecutions as It, listOrganizations as J, compareSnapshotWithRemote as Jt, treeCommand as K, handleOptionalToRequiredError as Kt, openInConfiguredEditor as L, toPageDirection as Ln, functionExecutionStatusToString as Lt, generate as M, confirmationArgs as Mn, getCommand$5 as Mt, generateCommand as N, deploymentArgs as Nn, getWorkflow as Nt, listCommand$3 as O, assertWritable as On, listExecutorJobs as Ot, generateMigrationScript as P, isVerbose as Pn, executionsCommand as Pt, updateFolder as Q, DIFF_FILE_NAME as Qt, show as R, workspaceArgs as Rn, formatKeyValueTable as Rt, listApps as S, sdkNameLabelKey as Sn, triggerCommand as St, healthCommand as T, prompt as Tn, listExecutors as Tt, updateCommand$1 as U, waitForExecution$1 as Ut, remove as V, deploy as Vt, updateOrganization as W, bundleMigrationScript as Wt, getOrganization as X, protoGqlPermission as Xt, getCommand$1 as Y, generateAllTypeManifestsFromSnapshot as Yt, updateCommand$2 as Z, DB_TYPES_FILE_NAME as Zt, getWorkspace as _, formatMigrationDiff as _n, listFunctionRegistries as _t, updateUser as a, createSnapshotFromLocalTypes as an, createCommand$1 as at, createCommand as b, ensureConfigId as bn, listWebhookExecutors as bt, listCommand as c, getMigrationFilePath as cn, listOAuth2Clients as ct, inviteUser as d, isValidMigrationNumber as dn, getMachineUserToken as dt, MIGRATE_FILE_NAME as en, listFolders as et, restoreCommand as f, loadDiff as fn, tokenCommand as ft, getCommand as g, formatDiffSummary as gn, listCommand$8 as gt, listWorkspaces as h, parseMigrationNumberArg as hn, generate$1 as ht, updateCommand as i, compareSnapshots as in, deleteFolder as it, truncateCommand as j, configArg as jn, startWorkflow as jt, listWorkflows as k, defineAppCommand as kn, watchExecutorJob as kt, listUsers as l, getMigrationFiles as ln, getCommand$3 as lt, listCommand$1 as m, formatMigrationNumber as mn, listMachineUsers as mt, query as n, assertValidMigrationFiles as nn, getFolder as nt, removeCommand as o, getLatestMigrationNumber as on, createFolder as ot, restoreWorkspace as p, reconstructSnapshotFromMigrations as pn, listCommand$7 as pt, listCommand$4 as q, parseMigrationLabelNumber as qt, queryCommand as r, compareLocalTypesWithSnapshot as rn, deleteCommand$1 as rt, removeUser as s, getMigrationDirPath as sn, listCommand$6 as st, isNativeTypeScriptRuntime as t, SCHEMA_FILE_NAME as tn, getCommand$2 as tt, inviteCommand as u, getNextMigrationNumber as un, getOAuth2Client as ut, deleteCommand as v, hasChanges as vn, getCommand$4 as vt, getAppHealth as w, generateUserTypes as wn, listCommand$9 as wt, createWorkspace as x, resourceTrn as xn, webhookCommand as xt, deleteWorkspace as y, getNamespacesWithMigrations as yn, getFunctionRegistry as yt, showCommand as z, getCommand$6 as zt };
-//# sourceMappingURL=runtime-2nzOZCUb.mjs.map
+//# sourceMappingURL=runtime-n9NCkjee.mjs.map