@tailor-platform/sdk 1.75.0 → 1.76.1

package/dist/{runtime-CJ5usBOu.mjs → runtime-_vUgjiqT.mjs}

@@ -1,20 +1,20 @@
-import { t as db } from "./schema-Dl_y0m9e.mjs";
-import { $ as CreateAuthServiceRequestSchema, A as CreatePipelineServiceRequestSchema, At as Subgraph_ServiceType, C as CreateStaticWebsiteRequestSchema, D as CreateSecretManagerVaultRequestSchema, Dt as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, E as CreateSecretManagerSecretRequestSchema, Et as CreateApplicationRequestSchema, F as UpdateIdPServiceRequestSchema, G as ExecutorTriggerType, H as UpdateExecutorExecutorRequestSchema, I as IdPLang, J as CreateAuthIDPConfigRequestSchema, K as CreateAuthConnectionRequestSchema, L as IdPPermissionOperator, M as UpdatePipelineServiceRequestSchema, Mt as Condition_Operator, N as PipelineResolver_OperationType, Nt as FilterSchema, O as UpdateSecretManagerSecretRequestSchema, Ot as UpdateApplicationRequestSchema, P as CreateIdPServiceRequestSchema, Pt as PageDirection, Q as CreateAuthSCIMResourceRequestSchema, R as IdPPermissionPermit, S as AddCustomDomainRequestSchema, St as AuthSCIMConfig_AuthorizationType, Tt as UserProfileProviderConfig_UserProfileProviderType, U as ExecutorJobStatus, V as CreateExecutorExecutorRequestSchema, W as ExecutorTargetType, X as CreateAuthOAuth2ClientRequestSchema, Y as CreateAuthMachineUserRequestSchema, Z as CreateAuthSCIMConfigRequestSchema, _ as TailorDBGQLPermission_Operator, _t as AuthOAuth2Client_ClientType, a as WorkspacePlatformUserRole, at as UpdateAuthMachineUserRequestSchema, b as TailorDBType_Permission_Permit, bt as AuthSCIMAttribute_Type, c as CreateWorkflowRequestSchema, ct as UpdateAuthSCIMResourceRequestSchema, d as WorkflowExecution_Status, dt as UpdateUserProfileConfigRequestSchema, et as CreateTenantConfigRequestSchema, f as WorkflowJobExecution_Status, ft as AuthConnection_Status, g as TailorDBGQLPermission_Action, gt as AuthInvokerSchema, h as UpdateTailorDBTypeRequestSchema, ht as AuthIDPConfig_AuthType, it as UpdateAuthIDPConfigRequestSchema, j as UpdatePipelineResolverRequestSchema, jt as ConditionSchema, k as CreatePipelineResolverRequestSchema, kt as ApplicationSchemaUpdateAttemptStatus, l as UpdateWorkflowJobFunctionExecutionPolicyRequestSchema, lt as UpdateAuthServiceRequestSchema, m as CreateTailorDBTypeRequestSchema, mt as AuthHookPoint, nt as UpdateAuthConnectionRequestSchema, o as CreateWorkflowJobFunctionExecutionPolicyRequestSchema, ot as UpdateAuthOAuth2ClientRequestSchema, p as CreateTailorDBServiceRequestSchema, pt as AuthConnection_Type, q as CreateAuthHookRequestSchema, rt as UpdateAuthHookRequestSchema, s as CreateWorkflowJobFunctionRequestSchema, st as UpdateAuthSCIMConfigRequestSchema, t as OperatorService, tt as CreateUserProfileConfigRequestSchema, u as UpdateWorkflowRequestSchema, ut as UpdateTenantConfigRequestSchema, v as TailorDBGQLPermission_Permit, vt as AuthOAuth2Client_GrantType, w as UpdateStaticWebsiteRequestSchema, wt as TenantProviderConfig_TenantProviderType, x as TailorDBType_PermitAction, xt as AuthSCIMAttribute_Uniqueness, y as TailorDBType_Permission_Operator, yt as AuthSCIMAttribute_Mutability, z as FunctionExecution_Status } from "./service_pb-4unFyubn.mjs";
+import { t as db } from "./schema-DrVyN-LP.mjs";
+import { i as PageDirection, n as Condition_Operator, r as FilterSchema, t as ConditionSchema } from "./resource_pb-BRv7AMXK.mjs";
 import { t as assertDefined } from "./assert-DBxo8jPo.mjs";
 import { a as parseBoolean, i as symbols, n as logger, r as styles, t as CIPromptError } from "./logger-BEiZZ3qT.mjs";
-import { $ as getOAuth2ClientId, B as readPlatformConfig, C as createBundleCache, D as loadConfig, E as hashFile, F as loadMachineUserName, I as loadPlatformClientConfig, J as fetchMachineUserToken, K as fetchAll, M as loadAccessToken, N as loadConfigPath, Q as getConsoleBaseUrl, R as loadWorkspaceId, S as hasGenerationHooks, T as hashContent, U as writePlatformConfig, Y as fetchPaged, _ as platformBundleDefinePlugin, at as resolveStaticWebsiteUrls, d as buildExecutorArgsExpr, et as getOrNull, f as buildResolverOperationHookExpr, g as stringifyFunction, h as TailorDBTypeSchema, i as resolverBundleKey, it as isDefaultPlatform, j as hasUserTokenEntry, l as HTTP_METHODS, m as assertUniqueTailorDBTypeNamesWithExternal, n as generatePluginFilesIfNeeded, o as WorkflowJobFunctionExecutionPolicySchema, ot as byName, p as assertUniqueLocalTailorDBTypeNames, q as fetchAllTolerant, r as loadApplication, rt as initOperatorClient, t as defineApplication, tt as getPlatformBaseUrl, w as getDistDir, x as getPluginGenerationDependencies, z as platformConfigFromProfile } from "./application-DYshsH-K.mjs";
+import { $ as getOAuth2ClientId, B as readPlatformConfig, C as createBundleCache, Ct as toPageDirection, D as loadConfig, E as hashFile, F as loadMachineUserName, I as loadPlatformClientConfig, J as fetchMachineUserToken, K as fetchAll, M as loadAccessToken, N as loadConfigPath, Q as getConsoleBaseUrl, R as loadWorkspaceId, S as hasGenerationHooks, St as resolveMachineUserInputSource, T as hashContent, U as writePlatformConfig, Y as fetchPaged, _ as platformBundleDefinePlugin, _t as organizationArgs, at as resolveStaticWebsiteUrls, bt as parseDuration, ct as configArg, d as buildExecutorArgsExpr, dt as durationArg, et as getOrNull, f as buildResolverOperationHookExpr, ft as folderArgs, g as stringifyFunction, gt as orderArg, h as TailorDBTypeSchema, ht as nonNegativeIntArg, i as resolverBundleKey, it as isDefaultPlatform, j as hasUserTokenEntry, l as HTTP_METHODS, lt as confirmationArgs, m as assertUniqueTailorDBTypeNamesWithExternal, n as generatePluginFilesIfNeeded, o as WorkflowJobFunctionExecutionPolicySchema, ot as byName, p as assertUniqueLocalTailorDBTypeNames, q as fetchAllTolerant, r as loadApplication, rt as initOperatorClient, t as defineApplication, tt as getPlatformBaseUrl, ut as deploymentArgs, vt as pagedLogArgs, w as getDistDir, wt as workspaceArgs, x as getPluginGenerationDependencies, xt as positiveIntArg, yt as paginationArgs, z as platformConfigFromProfile } from "./application-BUfYmf0O.mjs";
 import { o as loadFilesWithIgnores, t as createExecutorService } from "./service-BCRJ-3NV.mjs";
 import { t as multiline } from "./multiline-sfHpTZZK.mjs";
 import { t as readPackageJson } from "./package-json-8b0O9TlX.mjs";
 import { i as userAgent } from "./secret-file-VSVGy1V0.mjs";
 import { n as isCLIError, t as createCLIError } from "./errors-Dtf2WPaW.mjs";
+import { $ as CreateAuthServiceRequestSchema, A as CreatePipelineServiceRequestSchema, At as Subgraph_ServiceType, C as CreateStaticWebsiteRequestSchema, D as CreateSecretManagerVaultRequestSchema, Dt as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, E as CreateSecretManagerSecretRequestSchema, Et as CreateApplicationRequestSchema, F as UpdateIdPServiceRequestSchema, G as ExecutorTriggerType, H as UpdateExecutorExecutorRequestSchema, I as IdPLang, J as CreateAuthIDPConfigRequestSchema, K as CreateAuthConnectionRequestSchema, L as IdPPermissionOperator, M as UpdatePipelineServiceRequestSchema, N as PipelineResolver_OperationType, O as UpdateSecretManagerSecretRequestSchema, Ot as UpdateApplicationRequestSchema, P as CreateIdPServiceRequestSchema, Q as CreateAuthSCIMResourceRequestSchema, R as IdPPermissionPermit, S as AddCustomDomainRequestSchema, St as AuthSCIMConfig_AuthorizationType, Tt as UserProfileProviderConfig_UserProfileProviderType, U as ExecutorJobStatus, V as CreateExecutorExecutorRequestSchema, W as ExecutorTargetType, X as CreateAuthOAuth2ClientRequestSchema, Y as CreateAuthMachineUserRequestSchema, Z as CreateAuthSCIMConfigRequestSchema, _ as TailorDBGQLPermission_Operator, _t as AuthOAuth2Client_ClientType, a as WorkspacePlatformUserRole, at as UpdateAuthMachineUserRequestSchema, b as TailorDBType_Permission_Permit, bt as AuthSCIMAttribute_Type, c as CreateWorkflowRequestSchema, ct as UpdateAuthSCIMResourceRequestSchema, d as WorkflowExecution_Status, dt as UpdateUserProfileConfigRequestSchema, et as CreateTenantConfigRequestSchema, f as WorkflowJobExecution_Status, ft as AuthConnection_Status, g as TailorDBGQLPermission_Action, gt as AuthInvokerSchema, h as UpdateTailorDBTypeRequestSchema, ht as AuthIDPConfig_AuthType, it as UpdateAuthIDPConfigRequestSchema, j as UpdatePipelineResolverRequestSchema, k as CreatePipelineResolverRequestSchema, kt as ApplicationSchemaUpdateAttemptStatus, l as UpdateWorkflowJobFunctionExecutionPolicyRequestSchema, lt as UpdateAuthServiceRequestSchema, m as CreateTailorDBTypeRequestSchema, mt as AuthHookPoint, nt as UpdateAuthConnectionRequestSchema, o as CreateWorkflowJobFunctionExecutionPolicyRequestSchema, ot as UpdateAuthOAuth2ClientRequestSchema, p as CreateTailorDBServiceRequestSchema, pt as AuthConnection_Type, q as CreateAuthHookRequestSchema, rt as UpdateAuthHookRequestSchema, s as CreateWorkflowJobFunctionRequestSchema, st as UpdateAuthSCIMConfigRequestSchema, t as OperatorService, tt as CreateUserProfileConfigRequestSchema, u as UpdateWorkflowRequestSchema, ut as UpdateTenantConfigRequestSchema, v as TailorDBGQLPermission_Permit, vt as AuthOAuth2Client_GrantType, w as UpdateStaticWebsiteRequestSchema, wt as TenantProviderConfig_TenantProviderType, x as TailorDBType_PermitAction, xt as AuthSCIMAttribute_Uniqueness, y as TailorDBType_Permission_Operator, yt as AuthSCIMAttribute_Mutability, z as FunctionExecution_Status } from "./service_pb-B5w9rjPY.mjs";
 import { r as withSpan } from "./telemetry-CdqJEzkj.mjs";
 import { arg, createDefineCommand, defineCommand, runCommand } from "politty";
 import { z } from "zod";
 import { ScalarType, create, fromJson, toJson } from "@bufbuild/protobuf";
 import * as fs$1 from "node:fs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { parseEnv } from "node:util";
 import { ValueSchema, timestampDate } from "@bufbuild/protobuf/wkt";
 import * as path from "pathe";
 import { formatDistanceToNowStrict } from "date-fns";
@@ -47,240 +47,6 @@ import { createPrompt } from "@toiroakr/read-multiline";
 import { astVisitor, parse } from "pgsql-ast-parser";
 import { parse as parse$1 } from "@0no-co/graphql.web";
 
-//#region src/cli/shared/args.ts
-const unitToMs = {
-	ms: 1,
-	s: 1e3,
-	m: 60 * 1e3
-};
-const durationPattern = /^(\d+)(ms|s|m)$/;
-/**
-* Schema for duration string validation (e.g., "3s", "500ms", "1m")
-* Only validates format; use parseDuration() to convert to milliseconds
-*/
-const durationArg = z.string().refine((val) => durationPattern.test(val), { message: "Invalid duration format. Expected format: '3s', '500ms', '1m'" }).refine((val) => {
-	const match = val.match(durationPattern);
-	if (!match) return false;
-	const digits = match[1];
-	return digits !== void 0 && parseInt(digits, 10) > 0;
-}, { message: "Duration must be greater than 0" });
-/**
-* Parse a validated duration string into milliseconds
-* @param duration - Duration string (e.g., "3s", "500ms", "1m")
-* @returns Duration in milliseconds
-*/
-function parseDuration(duration) {
-	const match = assertDefined(duration.match(durationPattern), `invalid duration format: ${duration}`);
-	const value = parseInt(assertDefined(match[1], "duration digits group missing"), 10);
-	const unit = assertDefined(match[2], "duration unit group missing");
-	return value * unitToMs[unit];
-}
-/**
-* Schema for positive integer validation (from string input)
-* Transforms the string to a number
-*/
-const positiveIntArg = z.coerce.number().int().positive();
-/**
-* Schema for non-negative integer validation (from string input).
-* Accepts 0 (used for `--limit 0` to disable the limit).
-*/
-const nonNegativeIntArg = z.coerce.number().int().nonnegative();
-/**
-* Schema for sort order (`asc` or `desc`).
-*/
-const orderArg = z.enum(["asc", "desc"]);
-/**
-* Translate a CLI `--order` value into the proto `PageDirection` enum.
-* Returns `undefined` when the user did not specify an order so that
-* callers can omit the field and fall back to the server default.
-* @param order - Order string from CLI args (`"asc"` | `"desc"` | undefined)
-* @returns PageDirection, or undefined when `order` is undefined
-*/
-function toPageDirection(order) {
-	if (order === void 0) return void 0;
-	return order === "asc" ? PageDirection.ASC : PageDirection.DESC;
-}
-/**
-* Load env files from parsed arguments.
-* Processes --env-file first, then --env-file-if-exists.
-*
-* Follows Node.js --env-file behavior:
-* - Variables already set in the environment are NOT overwritten
-* - Variables from later files override those from earlier files
-* @param envFiles - Required env file path(s) that must exist
-* @param envFilesIfExists - Optional env file path(s) that are loaded if they exist
-*/
-function loadEnvFiles(envFiles, envFilesIfExists) {
-	const originalEnvKeys = new Set(Object.keys(process.env));
-	const load = (files, required) => {
-		for (const file of [files ?? []].flat()) {
-			const envPath = path.resolve(process.cwd(), file);
-			if (!fs$1.existsSync(envPath)) {
-				if (required) throw new Error(`Environment file not found: ${envPath}`);
-				continue;
-			}
-			const parsed = parseEnv(fs$1.readFileSync(envPath, "utf-8"));
-			for (const [key, value] of Object.entries(parsed)) {
-				if (originalEnvKeys.has(key)) continue;
-				process.env[key] = value;
-			}
-		}
-	};
-	load(envFiles, true);
-	load(envFilesIfExists, false);
-}
-/**
-* Common arguments for all CLI commands
-*
-* NOTE: --env-file and --env-file-if-exists collide with Node.js flags due to a bug
-* (https://github.com/nodejs/node/issues/54232). Node.js parses these even after the
-* script path, causing warnings (twice due to tsx loader).
-*/
-const commonArgs = {
-	"env-file": arg(z.string().optional(), {
-		alias: "e",
-		description: "Path to the environment file (error if not found)",
-		completion: {
-			type: "file",
-			matcher: [".env.*", ".env"]
-		}
-	}),
-	"env-file-if-exists": arg(z.string().optional(), {
-		description: "Path to the environment file (ignored if not found)",
-		completion: {
-			type: "file",
-			matcher: [".env.*", ".env"]
-		},
-		effect: (_value, { args }) => {
-			loadEnvFiles(args["env-file"], args["env-file-if-exists"]);
-		}
-	}),
-	verbose: arg(z.boolean().default(false), {
-		description: "Enable verbose logging",
-		effect: (value) => {
-			verboseMode = value;
-		}
-	}),
-	json: arg(z.boolean().default(false), {
-		alias: "j",
-		description: "Output as JSON",
-		effect: (value) => {
-			logger.jsonMode = value;
-		}
-	})
-};
-/**
-* Arguments for commands that require workspace context
-*/
-const workspaceArgs = {
-	"workspace-id": arg(z.string().optional(), {
-		alias: "w",
-		description: "Workspace ID",
-		env: "TAILOR_PLATFORM_WORKSPACE_ID",
-		completion: { type: "none" }
-	}),
-	profile: arg(z.string().optional(), {
-		alias: "p",
-		description: "Workspace profile",
-		env: "TAILOR_PLATFORM_PROFILE",
-		completion: { type: "none" }
-	})
-};
-/**
-* Shared config arg for commands that accept a config file path
-*/
-const configArg = { config: arg(z.string().default("tailor.config.ts"), {
-	alias: "c",
-	description: "Path to SDK config file",
-	env: "TAILOR_PLATFORM_SDK_CONFIG_PATH",
-	completion: {
-		type: "file",
-		extensions: ["ts"]
-	}
-}) };
-/**
-* Shared config arg for commands that accept one or more comma-separated config file paths
-*/
-const multiConfigArg = { config: arg(z.string().default("tailor.config.ts"), {
-	alias: "c",
-	description: "Path to SDK config file. Use comma-separated paths to deploy multiple apps together.",
-	env: "TAILOR_PLATFORM_SDK_CONFIG_PATH",
-	completion: {
-		type: "file",
-		extensions: ["ts"]
-	}
-}) };
-/**
-* Arguments for commands that interact with deployed resources (includes config)
-*/
-const deploymentArgs = {
-	...workspaceArgs,
-	...configArg
-};
-/**
-* Arguments for commands that require confirmation
-*/
-const confirmationArgs = { yes: arg(z.boolean().default(false), {
-	alias: "y",
-	description: "Skip confirmation prompts"
-}) };
-/**
-* Arguments for commands that require organization context
-*/
-const organizationArgs = { "organization-id": arg(z.string(), {
-	alias: "o",
-	description: "Organization ID",
-	env: "TAILOR_PLATFORM_ORGANIZATION_ID",
-	completion: { type: "none" }
-}) };
-/**
-* Arguments for list commands that accept `--order` / `--limit`. Sort
-* order defaults to `desc` (newest first) because most callers want the
-* latest items; pass `--order asc` to opt in to ascending order. The
-* limit is unbounded by default so existing invocations keep returning
-* every item; pass `--limit N` to cap the result size.
-* @param defaultOrder - Default value for `--order` (defaults to `"desc"`)
-* @returns Argument shape suitable for spreading into a command schema
-*/
-const paginationArgs = (defaultOrder = "desc") => ({
-	order: arg(orderArg.default(defaultOrder), { description: "Sort order (asc or desc)" }),
-	limit: arg(nonNegativeIntArg.optional(), {
-		alias: "l",
-		description: "Maximum number of items to return (0 or omit: unlimited)"
-	})
-});
-/**
-* Arguments for time-series log list commands. Defaults to newest-first
-* (`desc`) and a 50-item cap so that listing stays responsive on busy
-* workspaces. Pass `--limit 0` to disable the cap and fetch all entries.
-*/
-const pagedLogArgs = {
-	order: arg(orderArg.default("desc"), { description: "Sort order (asc or desc)" }),
-	limit: arg(nonNegativeIntArg.default(50), {
-		alias: "l",
-		description: "Maximum number of items to return (0: unlimited)"
-	})
-};
-/**
-* Arguments for commands that require folder context
-*/
-const folderArgs = { "folder-id": arg(z.string(), {
-	alias: "f",
-	description: "Folder ID",
-	env: "TAILOR_PLATFORM_FOLDER_ID",
-	completion: { type: "none" }
-}) };
-let verboseMode = false;
-/**
-* Returns whether verbose mode is enabled.
-* Used by the global cleanup handler which doesn't have access to parsed args.
-* @returns Whether verbose mode is enabled
-*/
-function isVerbose() {
-	return verboseMode;
-}
-
-//#endregion
 //#region src/cli/shared/command.ts
 /**
 * defineCommand with global args type (CommonArgsType).
@@ -13936,6 +13702,7 @@ async function startWorkflowCore(options) {
 async function startWorkflowByName(options) {
 	const machineUser = await loadMachineUserName({
 		machineUser: options.machineUser,
+		machineUserSource: options.machineUserSource,
 		profile: options.profile
 	});
 	if (!machineUser) throw new Error("Machine user is required. Specify --machine-user, set TAILOR_PLATFORM_MACHINE_USER_NAME, or set a profile default with 'tailor-sdk profile update <profile> --machine-user <name>'.");
@@ -13998,6 +13765,7 @@ const startCommand = defineAppCommand({
 		const { executionId, wait } = await startWorkflowByName({
 			name: args.name,
 			machineUser: args["machine-user"],
+			machineUserSource: resolveMachineUserInputSource(args["machine-user"]),
 			arg: args.arg,
 			workspaceId: args["workspace-id"],
 			profile: args.profile,
@@ -15938,14 +15706,10 @@ const listCommand$7 = defineAppCommand({
 
 //#endregion
 //#region src/cli/commands/machineuser/token.ts
-/**
-* Get a machine user access token for the current application.
-* @param options - Token retrieval options
-* @returns Machine user token info
-*/
-async function getMachineUserToken(options) {
+async function getMachineUserTokenInternal(options) {
 	const name = await loadMachineUserName({
 		machineUser: options.name,
+		machineUserSource: options.nameSource,
 		profile: options.profile
 	});
 	if (!name) throw new Error("Machine user is required. Provide the NAME positional argument, set TAILOR_PLATFORM_MACHINE_USER_NAME, or set a profile default with 'tailor-sdk profile update <profile> --machine-user <name>'.");
@@ -15975,6 +15739,14 @@ async function getMachineUserToken(options) {
 		expiresAt: expiresAt.toISOString()
 	};
 }
+/**
+* Get a machine user access token for the current application.
+* @param options - Token retrieval options
+* @returns Machine user token info
+*/
+async function getMachineUserToken(options) {
+	return await getMachineUserTokenInternal(options);
+}
 const tokenCommand = defineAppCommand({
 	name: "token",
 	description: "Get an access token for a machine user.",
@@ -15982,13 +15754,13 @@ const tokenCommand = defineAppCommand({
 		...deploymentArgs,
 		name: arg(z.string().optional(), {
 			positional: true,
-			description: "Machine user name. Falls back to the active profile's default machine user.",
-			env: "TAILOR_PLATFORM_MACHINE_USER_NAME"
+			description: "Machine user name. Falls back to TAILOR_PLATFORM_MACHINE_USER_NAME, then the active profile's default machine user."
 		})
 	}).strict(),
 	run: async (args) => {
-		const token = await getMachineUserToken({
+		const token = await getMachineUserTokenInternal({
 			name: args.name,
+			nameSource: resolveMachineUserInputSource(args.name, process.argv.slice(2), { valueIsExplicit: args.name !== void 0 }),
 			workspaceId: args["workspace-id"],
 			profile: args.profile,
 			configPath: args.config
@@ -17521,7 +17293,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication } = await import("./application-BJKNlv8c.mjs");
+	const { defineApplication } = await import("./application-DbvD5UUz.mjs");
 	const application = defineApplication({
 		config,
 		pluginManager
@@ -19208,7 +18980,8 @@ const queryBaseOptionsSchema = z.object({
 	profile: z.string().optional(),
 	configPath: z.string().optional(),
 	engine: queryEngineSchema,
-	machineUser: z.string().optional()
+	machineUser: z.string().optional(),
+	machineUserSource: z.enum(["option", "env"]).optional()
 });
 const queryOptionsSchema = queryBaseOptionsSchema.extend({ query: z.string() });
 async function getNamespaceFromSqlQuery(workspaceId, query, client, namespaces) {
@@ -19233,6 +19006,7 @@ async function loadOptions(options) {
 	if (!result.success) throw new Error(assertDefined(result.error.issues[0], "validation error missing issues").message);
 	const machineUser = await loadMachineUserName({
 		machineUser: result.data.machineUser,
+		machineUserSource: result.data.machineUserSource,
 		profile: result.data.profile
 	});
 	if (!machineUser) throw new Error("Machine user is required. Specify --machine-user, set TAILOR_PLATFORM_MACHINE_USER_NAME, or set a profile default with 'tailor-sdk profile update <profile> --machine-user <name>'.");
@@ -19653,7 +19427,8 @@ const queryCommand = defineAppCommand({
 			profile: args.profile,
 			configPath: args.config,
 			engine: args.engine,
-			machineUser: args["machine-user"]
+			machineUser: args["machine-user"],
+			machineUserSource: resolveMachineUserInputSource(args["machine-user"])
 		};
 		if (mode.mode === "abort") {
 			logger.info("Editor closed without a query. Nothing was executed.");
@@ -19785,5 +19560,5 @@ function isDeno() {
 }
 
 //#endregion
-export { getOrganization as $, compareSnapshotWithRemote as $t, listCommand$3 as A, apiCommand as An, getExecutorWaitFailureMessage as At, show as B, pagedLogArgs as Bn, listWorkflowExecutions as Bt, listCommand$2 as C, hasChanges as Cn, listWebhookExecutors as Ct, waitWorkflowExecution as D, PluginManager as Dn, listCommand$9 as Dt, waitCommand as E, sdkNameLabelKey as En, triggerExecutor as Et, generateCommand as F, configArg as Fn, startWorkflow as Ft, removeCommand$1 as G, deploy as Gt, extractOwnedNamespaces as H, toPageDirection as Hn, formatKeyValueTable as Ht, generateMigrationScript as I, confirmationArgs as In, getCommand$5 as It, organizationTree as J, waitForExecution as Jt, updateCommand$1 as K, ensureConfigId as Kt, writeDbTypesFile as L, deploymentArgs as Ln, getWorkflow as Lt, truncate as M, assertWritable as Mn, listExecutorJobs as Mt, truncateCommand as N, defineAppCommand as Nn, watchExecutorJob as Nt, resumeCommand as O, generateUserTypes as On, listExecutors as Ot, generate as P, commonArgs as Pn, startCommand as Pt, getCommand$1 as Q, parseMigrationLabelNumber as Qt, getConfiguredEditorCommand as R, isVerbose as Rn, executionsCommand as Rt, listApps as S, formatMigrationDiff as Sn, getFunctionRegistry as St, healthCommand as T, resourceTrn as Tn, triggerCommand as Tt, logBetaWarning as U, workspaceArgs as Un, getCommand$6 as Ut, showCommand as V, paginationArgs as Vn, functionExecutionStatusToString as Vt, remove as W, getExecutor as Wt, listCommand$4 as X, MIGRATION_LABEL_KEY as Xt, treeCommand as Y, bundleMigrationScript as Yt, listOrganizations as Z, handleOptionalToRequiredError as Zt, getWorkspace as _, loadDiff as _n, listMachineUsers as _t, updateUser as a, MIGRATE_FILE_NAME as an, getFolder as at, createCommand as b, parseMigrationNumberArg as bn, listFunctionRegistries as bt, listCommand as c, compareLocalTypesWithSnapshot as cn, createCommand$1 as ct, inviteUser as d, getLatestMigrationNumber as dn, listOAuth2Clients as dt, generateAllTypeManifestsFromSnapshot as en, updateCommand$2 as et, restoreCommand as f, getMigrationDirPath as fn, getCommand$3 as ft, getCommand as g, isValidMigrationNumber as gn, listCommand$7 as gt, listWorkspaces as h, getNextMigrationNumber as hn, tokenCommand as ht, updateCommand as i, INITIAL_SCHEMA_NUMBER as in, getCommand$2 as it, listWorkflows as j, apiCall as jn, jobsCommand as jt, resumeWorkflow as k, prompt as kn, getExecutorJob as kt, listUsers as l, compareSnapshots as ln, createFolder as lt, listCommand$1 as m, getMigrationFiles as mn, getMachineUserToken as mt, query as n, DB_TYPES_FILE_NAME as nn, listCommand$5 as nt, removeCommand as o, SCHEMA_FILE_NAME as on, deleteCommand$1 as ot, restoreWorkspace as p, getMigrationFilePath as pn, getOAuth2Client as pt, updateOrganization as q, executeScript as qt, queryCommand as r, DIFF_FILE_NAME as rn, listFolders as rt, removeUser as s, assertValidMigrationFiles as sn, deleteFolder as st, isNativeTypeScriptRuntime as t, protoGqlPermission as tn, updateFolder as tt, inviteCommand as u, createSnapshotFromLocalTypes as un, listCommand$6 as ut, deleteCommand as v, reconstructSnapshotFromMigrations as vn, generate$1 as vt, getAppHealth as w, getNamespacesWithMigrations as wn, webhookCommand as wt, createWorkspace as x, formatDiffSummary as xn, getCommand$4 as xt, deleteWorkspace as y, formatMigrationNumber as yn, listCommand$8 as yt, openInConfiguredEditor as z, multiConfigArg as zn, getWorkflowExecution as zt };
-//# sourceMappingURL=runtime-CJ5usBOu.mjs.map
+export { getOrganization as $, compareSnapshotWithRemote as $t, listCommand$3 as A, apiCommand as An, getExecutorWaitFailureMessage as At, show as B, listWorkflowExecutions as Bt, listCommand$2 as C, hasChanges as Cn, listWebhookExecutors as Ct, waitWorkflowExecution as D, PluginManager as Dn, listCommand$9 as Dt, waitCommand as E, sdkNameLabelKey as En, triggerExecutor as Et, generateCommand as F, startWorkflow as Ft, removeCommand$1 as G, deploy as Gt, extractOwnedNamespaces as H, formatKeyValueTable as Ht, generateMigrationScript as I, getCommand$5 as It, organizationTree as J, waitForExecution as Jt, updateCommand$1 as K, ensureConfigId as Kt, writeDbTypesFile as L, getWorkflow as Lt, truncate as M, assertWritable as Mn, listExecutorJobs as Mt, truncateCommand as N, defineAppCommand as Nn, watchExecutorJob as Nt, resumeCommand as O, generateUserTypes as On, listExecutors as Ot, generate as P, startCommand as Pt, getCommand$1 as Q, parseMigrationLabelNumber as Qt, getConfiguredEditorCommand as R, executionsCommand as Rt, listApps as S, formatMigrationDiff as Sn, getFunctionRegistry as St, healthCommand as T, resourceTrn as Tn, triggerCommand as Tt, logBetaWarning as U, getCommand$6 as Ut, showCommand as V, functionExecutionStatusToString as Vt, remove as W, getExecutor as Wt, listCommand$4 as X, MIGRATION_LABEL_KEY as Xt, treeCommand as Y, bundleMigrationScript as Yt, listOrganizations as Z, handleOptionalToRequiredError as Zt, getWorkspace as _, loadDiff as _n, listMachineUsers as _t, updateUser as a, MIGRATE_FILE_NAME as an, getFolder as at, createCommand as b, parseMigrationNumberArg as bn, listFunctionRegistries as bt, listCommand as c, compareLocalTypesWithSnapshot as cn, createCommand$1 as ct, inviteUser as d, getLatestMigrationNumber as dn, listOAuth2Clients as dt, generateAllTypeManifestsFromSnapshot as en, updateCommand$2 as et, restoreCommand as f, getMigrationDirPath as fn, getCommand$3 as ft, getCommand as g, isValidMigrationNumber as gn, listCommand$7 as gt, listWorkspaces as h, getNextMigrationNumber as hn, tokenCommand as ht, updateCommand as i, INITIAL_SCHEMA_NUMBER as in, getCommand$2 as it, listWorkflows as j, apiCall as jn, jobsCommand as jt, resumeWorkflow as k, prompt as kn, getExecutorJob as kt, listUsers as l, compareSnapshots as ln, createFolder as lt, listCommand$1 as m, getMigrationFiles as mn, getMachineUserToken as mt, query as n, DB_TYPES_FILE_NAME as nn, listCommand$5 as nt, removeCommand as o, SCHEMA_FILE_NAME as on, deleteCommand$1 as ot, restoreWorkspace as p, getMigrationFilePath as pn, getOAuth2Client as pt, updateOrganization as q, executeScript as qt, queryCommand as r, DIFF_FILE_NAME as rn, listFolders as rt, removeUser as s, assertValidMigrationFiles as sn, deleteFolder as st, isNativeTypeScriptRuntime as t, protoGqlPermission as tn, updateFolder as tt, inviteCommand as u, createSnapshotFromLocalTypes as un, listCommand$6 as ut, deleteCommand as v, reconstructSnapshotFromMigrations as vn, generate$1 as vt, getAppHealth as w, getNamespacesWithMigrations as wn, webhookCommand as wt, createWorkspace as x, formatDiffSummary as xn, getCommand$4 as xt, deleteWorkspace as y, formatMigrationNumber as yn, listCommand$8 as yt, openInConfiguredEditor as z, getWorkflowExecution as zt };
+//# sourceMappingURL=runtime-_vUgjiqT.mjs.map