@tailor-platform/sdk 1.76.1 → 1.78.0

package/dist/{schema-DrVyN-LP.mjs → schema-U6DxoZ8D.mjs}

@@ -1,7 +1,207 @@
-import { n as mapAllowedValues, t as parseInternal } from "./field-runtime-9bfXBAOK.mjs";
 import { t as brandValue } from "./brand-Eo4pLXPJ.mjs";
 import { cloneDeep } from "es-toolkit";
 
+//#region src/configure/types/field.ts
+/**
+* Normalize allowed values into EnumValue objects with descriptions.
+* @param values - Allowed values as strings or EnumValue objects
+* @returns Normalized allowed values
+*/
+function mapAllowedValues(values) {
+	return values.map((value) => {
+		if (typeof value === "string") return {
+			value,
+			description: ""
+		};
+		return {
+			...value,
+			description: value.description ?? ""
+		};
+	});
+}
+
+//#endregion
+//#region src/configure/types/field-runtime.ts
+const regex = {
+	uuid: /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,
+	date: /^(?<year>\d{4})-(?<month>\d{2})-(?<day>\d{2})$/,
+	time: /^(?<hour>\d{2}):(?<minute>\d{2})$/,
+	datetime: /^(?<year>\d{4})-(?<month>\d{2})-(?<day>\d{2})T(?<hour>\d{2}):(?<minute>\d{2}):(?<second>\d{2})(\.(?<millisec>\d{3}))?Z$/,
+	decimal: /^-?(\d+\.?\d*|\.\d+)([eE][+-]?\d+)?$/
+};
+function validateBaseValue(args) {
+	const { field, value, pathArray, issues } = args;
+	const path = pathArray.length > 0 ? pathArray : void 0;
+	const initialIssueCount = issues.length;
+	switch (field.type) {
+		case "string":
+			if (typeof value !== "string") issues.push({
+				message: `Expected a string: received ${String(value)}`,
+				path
+			});
+			break;
+		case "integer":
+			if (typeof value !== "number" || !Number.isInteger(value)) issues.push({
+				message: `Expected an integer: received ${String(value)}`,
+				path
+			});
+			break;
+		case "float":
+			if (typeof value !== "number" || !Number.isFinite(value)) issues.push({
+				message: `Expected a number: received ${String(value)}`,
+				path
+			});
+			break;
+		case "boolean":
+			if (typeof value !== "boolean") issues.push({
+				message: `Expected a boolean: received ${String(value)}`,
+				path
+			});
+			break;
+		case "uuid":
+			if (typeof value !== "string" || !regex.uuid.test(value)) issues.push({
+				message: `Expected a valid UUID: received ${String(value)}`,
+				path
+			});
+			break;
+		case "date":
+			if (typeof value !== "string" || !regex.date.test(value)) issues.push({
+				message: `Expected to match "yyyy-MM-dd" format: received ${String(value)}`,
+				path
+			});
+			break;
+		case "datetime":
+			if (typeof value !== "string" || !regex.datetime.test(value)) issues.push({
+				message: `Expected to match ISO format: received ${String(value)}`,
+				path
+			});
+			break;
+		case "time":
+			if (typeof value !== "string" || !regex.time.test(value)) issues.push({
+				message: `Expected to match "HH:mm" format: received ${String(value)}`,
+				path
+			});
+			break;
+		case "decimal":
+			if (typeof value !== "string" || !regex.decimal.test(value)) issues.push({
+				message: `Expected a decimal string: received ${String(value)}`,
+				path
+			});
+			break;
+		case "enum":
+			if (field._metadata.allowedValues) {
+				const allowedValues = field._metadata.allowedValues.map((v) => v.value);
+				if (typeof value !== "string" || !allowedValues.includes(value)) issues.push({
+					message: `Must be one of [${allowedValues.join(", ")}]: received ${String(value)}`,
+					path
+				});
+			}
+			break;
+		case "nested": {
+			if (typeof value !== "object" || value === null || Array.isArray(value) || value instanceof Date) {
+				issues.push({
+					message: `Expected an object: received ${String(value)}`,
+					path
+				});
+				return false;
+			}
+			let nestedBaseValid = true;
+			for (const [fieldName, nestedField] of Object.entries(field.fields)) {
+				const fieldValue = value[fieldName];
+				if (!validateBaseField({
+					...args,
+					field: nestedField,
+					value: fieldValue,
+					pathArray: pathArray.concat(fieldName)
+				})) nestedBaseValid = false;
+			}
+			return nestedBaseValid;
+		}
+	}
+	return issues.length === initialIssueCount;
+}
+function validateCustomValue(args, validateFns) {
+	const { value, data, user, pathArray, issues } = args;
+	const path = pathArray.length > 0 ? pathArray : void 0;
+	for (const validateInput of validateFns) {
+		const { fn, message } = typeof validateInput === "function" ? {
+			fn: validateInput,
+			message: "Validation failed"
+		} : {
+			fn: validateInput[0],
+			message: validateInput[1]
+		};
+		if (!fn({
+			value,
+			data,
+			user
+		})) issues.push({
+			message,
+			path
+		});
+	}
+}
+function validateBaseField(args) {
+	const { field, value, pathArray, issues } = args;
+	const path = pathArray.length > 0 ? pathArray : void 0;
+	const isNullOrUndefined = value === null || value === void 0;
+	if (field._metadata.required && isNullOrUndefined) {
+		issues.push({
+			message: "Required field is missing",
+			path
+		});
+		return false;
+	}
+	if (!field._metadata.required && isNullOrUndefined) return true;
+	let baseValid = true;
+	if (field._metadata.array) {
+		if (!Array.isArray(value)) {
+			issues.push({
+				message: "Expected an array",
+				path
+			});
+			return false;
+		}
+		for (let i = 0; i < value.length; i++) if (!validateBaseValue({
+			...args,
+			value: value[i],
+			pathArray: pathArray.concat(`[${i}]`)
+		})) baseValid = false;
+	} else baseValid = validateBaseValue(args);
+	return baseValid;
+}
+function validateCustomField(args) {
+	const { field, value, pathArray } = args;
+	if (value === null || value === void 0) return;
+	if (field.type === "nested") {
+		const records = field._metadata.array ? value : [value];
+		for (let i = 0; i < records.length; i++) {
+			const record = records[i];
+			const recordPath = field._metadata.array ? pathArray.concat(`[${i}]`) : pathArray;
+			for (const [fieldName, nestedField] of Object.entries(field.fields)) validateCustomField({
+				...args,
+				field: nestedField,
+				value: record[fieldName],
+				pathArray: recordPath.concat(fieldName)
+			});
+		}
+	}
+	const validateFns = field._metadata.validate;
+	if (validateFns?.length) validateCustomValue(args, validateFns);
+}
+function parseInternal(args) {
+	const { value } = args;
+	const issues = [];
+	const validationArgs = {
+		...args,
+		issues
+	};
+	if (validateBaseField(validationArgs)) validateCustomField(validationArgs);
+	if (issues.length > 0) return { issues };
+	return { value: value ?? null };
+}
+
+//#endregion
 //#region src/configure/services/tailordb/schema.ts
 function isRelationSelfConfig(config) {
 	return config.toward.type === "self";
@@ -94,6 +294,7 @@ function createTailorDBFieldRuntime(type, options, fields, values) {
 			return cloneWith({ serial: config });
 		},
 		clone(cloneOptions) {
+			if (this._metadata.validate?.length && cloneOptions?.array !== void 0 && cloneOptions.array !== (this._metadata.array === true)) throw new Error("Cannot change the array option on a field with custom validation");
 			let clonedFields = fields;
 			if (fields) {
 				const cloned = {};
@@ -435,5 +636,5 @@ timestamps: () => ({
 };
 
 //#endregion
-export { db as t };
-//# sourceMappingURL=schema-DrVyN-LP.mjs.map
+export { parseInternal as n, mapAllowedValues as r, db as t };
+//# sourceMappingURL=schema-U6DxoZ8D.mjs.map

package/dist/schema-U6DxoZ8D.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-U6DxoZ8D.mjs","names":["parseInternal","parseFieldInternal"],"sources":["../src/configure/types/field.ts","../src/configure/types/field-runtime.ts","../src/configure/services/tailordb/schema.ts"],"sourcesContent":["import type { EnumValue } from \"#/configure/types/field.types\";\n\nexport type AllowedValues = readonly [string | EnumValue, ...(string | EnumValue)[]];\n\n/**\n * Normalize allowed values into EnumValue objects with descriptions.\n * @param values - Allowed values as strings or EnumValue objects\n * @returns Normalized allowed values\n */\nexport function mapAllowedValues(values: AllowedValues): EnumValue[] {\n  return values.map((value) => {\n    if (typeof value === \"string\") {\n      return { value, description: \"\" };\n    }\n    return { ...value, description: value.description ?? \"\" };\n  });\n}\n\nexport type AllowedValuesOutput<V extends AllowedValues> = V[number] extends infer T\n  ? T extends string\n    ? T\n    : T extends { value: infer K }\n      ? K\n      : never\n  : never;\n","import type { FieldMetadata, TailorFieldType } from \"#/configure/types/field.types\";\nimport type { TailorUser } from \"#/runtime/types\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nconst regex = {\n  uuid: /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,\n  date: /^(?<year>\\d{4})-(?<month>\\d{2})-(?<day>\\d{2})$/,\n  time: /^(?<hour>\\d{2}):(?<minute>\\d{2})$/,\n  datetime:\n    /^(?<year>\\d{4})-(?<month>\\d{2})-(?<day>\\d{2})T(?<hour>\\d{2}):(?<minute>\\d{2}):(?<second>\\d{2})(\\.(?<millisec>\\d{3}))?Z$/,\n  decimal: /^-?(\\d+\\.?\\d*|\\.\\d+)([eE][+-]?\\d+)?$/,\n} as const;\n\nexport type FieldParseArgs = {\n  value: unknown;\n  data: unknown;\n  user: TailorUser;\n};\n\nexport type FieldParseInternalArgs = {\n  value: unknown;\n  data: unknown;\n  user: TailorUser;\n  pathArray: string[];\n};\n\nexport type FieldRuntime<T extends TailorFieldType = TailorFieldType> = {\n  readonly type: T;\n  readonly fields: Record<string, FieldRuntime>;\n  _metadata: FieldMetadata;\n  _parseInternal(args: FieldParseInternalArgs): StandardSchemaV1.Result<unknown>;\n};\n\ntype FieldParseRuntimeArgs<T extends TailorFieldType> = FieldParseInternalArgs & {\n  field: FieldRuntime<T>;\n};\n\ntype FieldValidationArgs<T extends TailorFieldType> = FieldParseRuntimeArgs<T> & {\n  issues: StandardSchemaV1.Issue[];\n};\n\nfunction validateBaseValue<T extends TailorFieldType>(args: FieldValidationArgs<T>): boolean {\n  const { field, value, pathArray, issues } = args;\n  const path = pathArray.length > 0 ? pathArray : undefined;\n  const initialIssueCount = issues.length;\n\n  switch (field.type) {\n    case \"string\":\n      if (typeof value !== \"string\") {\n        issues.push({\n          message: `Expected a string: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n\n    case \"integer\":\n      if (typeof value !== \"number\" || !Number.isInteger(value)) {\n        issues.push({\n          message: `Expected an integer: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n\n    case \"float\":\n      if (typeof value !== \"number\" || !Number.isFinite(value)) {\n        issues.push({\n          message: `Expected a number: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n\n    case \"boolean\":\n      if (typeof value !== \"boolean\") {\n        issues.push({\n          message: `Expected a boolean: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n\n    case \"uuid\":\n      if (typeof value !== \"string\" || !regex.uuid.test(value)) {\n        issues.push({\n          message: `Expected a valid UUID: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n    case \"date\":\n      if (typeof value !== \"string\" || !regex.date.test(value)) {\n        issues.push({\n          message: `Expected to match \"yyyy-MM-dd\" format: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n    case \"datetime\":\n      if (typeof value !== \"string\" || !regex.datetime.test(value)) {\n        issues.push({\n          message: `Expected to match ISO format: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n    case \"time\":\n      if (typeof value !== \"string\" || !regex.time.test(value)) {\n        issues.push({\n          message: `Expected to match \"HH:mm\" format: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n    case \"decimal\":\n      if (typeof value !== \"string\" || !regex.decimal.test(value)) {\n        issues.push({\n          message: `Expected a decimal string: received ${String(value)}`,\n          path,\n        });\n      }\n      break;\n\n    case \"enum\":\n      if (field._metadata.allowedValues) {\n        const allowedValues = field._metadata.allowedValues.map((v) => v.value);\n        if (typeof value !== \"string\" || !allowedValues.includes(value)) {\n          issues.push({\n            message: `Must be one of [${allowedValues.join(\", \")}]: received ${String(value)}`,\n            path,\n          });\n        }\n      }\n      break;\n\n    case \"nested\": {\n      // Runtime input may not match the declared field type.\n      // oxlint-disable typescript/no-unnecessary-condition\n      if (\n        typeof value !== \"object\" ||\n        value === null ||\n        Array.isArray(value) ||\n        value instanceof Date\n      ) {\n        // oxlint-enable typescript/no-unnecessary-condition\n        issues.push({\n          message: `Expected an object: received ${String(value)}`,\n          path,\n        });\n        return false;\n      }\n\n      let nestedBaseValid = true;\n      for (const [fieldName, nestedField] of Object.entries(field.fields)) {\n        const fieldValue = (value as Record<string, unknown>)[fieldName];\n        if (\n          !validateBaseField({\n            ...args,\n            field: nestedField,\n            value: fieldValue,\n            pathArray: pathArray.concat(fieldName),\n          })\n        ) {\n          nestedBaseValid = false;\n        }\n      }\n      return nestedBaseValid;\n    }\n  }\n\n  return issues.length === initialIssueCount;\n}\n\nfunction validateCustomValue<T extends TailorFieldType>(\n  args: FieldValidationArgs<T>,\n  validateFns: NonNullable<FieldMetadata[\"validate\"]>,\n): void {\n  const { value, data, user, pathArray, issues } = args;\n  const path = pathArray.length > 0 ? pathArray : undefined;\n\n  for (const validateInput of validateFns) {\n    const { fn, message } =\n      typeof validateInput === \"function\"\n        ? { fn: validateInput, message: \"Validation failed\" }\n        : { fn: validateInput[0], message: validateInput[1] };\n\n    if (!fn({ value, data, user })) {\n      issues.push({\n        message,\n        path,\n      });\n    }\n  }\n}\n\nfunction validateBaseField<T extends TailorFieldType>(args: FieldValidationArgs<T>): boolean {\n  const { field, value, pathArray, issues } = args;\n  const path = pathArray.length > 0 ? pathArray : undefined;\n\n  const isNullOrUndefined = value === null || value === undefined;\n  if (field._metadata.required && isNullOrUndefined) {\n    issues.push({\n      message: \"Required field is missing\",\n      path,\n    });\n    return false;\n  }\n\n  if (!field._metadata.required && isNullOrUndefined) {\n    return true;\n  }\n\n  let baseValid = true;\n  if (field._metadata.array) {\n    if (!Array.isArray(value)) {\n      issues.push({\n        message: \"Expected an array\",\n        path,\n      });\n      return false;\n    }\n\n    for (let i = 0; i < value.length; i++) {\n      if (\n        !validateBaseValue({\n          ...args,\n          value: value[i],\n          pathArray: pathArray.concat(`[${i}]`),\n        })\n      ) {\n        baseValid = false;\n      }\n    }\n  } else {\n    baseValid = validateBaseValue(args);\n  }\n\n  return baseValid;\n}\n\nfunction validateCustomField<T extends TailorFieldType>(args: FieldValidationArgs<T>): void {\n  const { field, value, pathArray } = args;\n  if (value === null || value === undefined) {\n    return;\n  }\n\n  if (field.type === \"nested\") {\n    const records = field._metadata.array\n      ? (value as Record<string, unknown>[])\n      : [value as Record<string, unknown>];\n\n    for (let i = 0; i < records.length; i++) {\n      const record = records[i] as Record<string, unknown>;\n      const recordPath = field._metadata.array ? pathArray.concat(`[${i}]`) : pathArray;\n      for (const [fieldName, nestedField] of Object.entries(field.fields)) {\n        validateCustomField({\n          ...args,\n          field: nestedField,\n          value: record[fieldName],\n          pathArray: recordPath.concat(fieldName),\n        });\n      }\n    }\n  }\n\n  const validateFns = field._metadata.validate;\n  if (validateFns?.length) {\n    validateCustomValue(args, validateFns);\n  }\n}\n\nexport function parseInternal<T extends TailorFieldType, Output>(\n  args: FieldParseRuntimeArgs<T>,\n): StandardSchemaV1.Result<Output> {\n  const { value } = args;\n  const issues: StandardSchemaV1.Issue[] = [];\n  const validationArgs = { ...args, issues };\n  const baseValid = validateBaseField(validationArgs);\n  if (baseValid) {\n    validateCustomField(validationArgs);\n  }\n  if (issues.length > 0) {\n    return { issues };\n  }\n\n  return { value: (value ?? null) as Output };\n}\n","import { cloneDeep } from \"es-toolkit\";\nimport {\n  type AllowedValues,\n  type AllowedValuesOutput,\n  mapAllowedValues,\n} from \"#/configure/types/field\";\nimport {\n  parseInternal as parseFieldInternal,\n  type FieldParseArgs,\n  type FieldParseInternalArgs,\n} from \"#/configure/types/field-runtime\";\nimport { brandValue } from \"#/utils/brand\";\nimport type {\n  TailorDBField as TailorDBFieldBase,\n  TailorDBType as TailorDBTypeBase,\n  DBFieldMetadata,\n  DefinedDBFieldMetadata,\n  SerialConfig,\n  IndexDef,\n  TailorDBTypeMetadata,\n  RawRelationConfig,\n  RelationType,\n} from \"#/configure/services/tailordb/types\";\nimport type {\n  FieldOptions,\n  FieldOutput,\n  TailorFieldType,\n  TailorToTs,\n  FieldValidateInput,\n  ValidateConfig,\n  Validators,\n} from \"#/configure/types/field.types\";\nimport type { PluginAttachment, PluginConfigs } from \"#/plugin/types\";\nimport type { InferredAttributeMap } from \"#/runtime/types\";\nimport type { output, InferFieldsOutput, TypeLevelError } from \"#/types/helpers\";\nimport type { RawPermissions } from \"#/types/tailordb.generated\";\nimport type { TailorTypeGqlPermission, TailorTypePermission } from \"./permission\";\nimport type { Hook, Hooks, ExcludeNestedDBFields, TypeFeatures } from \"./types\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\n// Erased DB fields stay assignable across builder method-state changes.\n// oxlint-disable-next-line no-explicit-any\ntype AnyBuilderMethod = any;\n\nexport type TailorAnyDBField = Omit<\n  TailorDBFieldBase<AnyBuilderMethod, AnyBuilderMethod>,\n  \"fields\"\n> & {\n  readonly fields: Record<string, AnyBuilderMethod>;\n  _metadata: DBFieldMetadata;\n  parse: AnyBuilderMethod;\n  _parseInternal: AnyBuilderMethod;\n  readonly typeName: TypeLevelError<string>;\n  description: AnyBuilderMethod;\n  relation: AnyBuilderMethod;\n  index: AnyBuilderMethod;\n  unique: AnyBuilderMethod;\n  vector: AnyBuilderMethod;\n  hooks: AnyBuilderMethod;\n  validate: AnyBuilderMethod;\n  serial: AnyBuilderMethod;\n  clone: AnyBuilderMethod;\n};\n\n// Helper alias\n// oxlint-disable-next-line no-explicit-any\nexport type TailorAnyDBType = TailorDBType<any, any, any>;\n\ntype IsAny<T> = 0 extends 1 & T ? true : false;\ntype DBFieldTypeNameMethod<Defined extends DefinedDBFieldMetadata> =\n  IsAny<Defined> extends true\n    ? TypeLevelError<string>\n    : TypeLevelError<\"typeName cannot be used on TailorDB fields\">;\n\ntype WithDBFieldDescription<Defined> = Defined & { description: true };\ntype WithDBFieldRelation<Defined, S extends RelationType | RelationSelfConfig> = S extends\n  | \"oneToOne\"\n  | \"1-1\"\n  ? Defined & { unique: true; index: true; relation: true }\n  : S extends { type: \"oneToOne\" | \"1-1\" }\n    ? Defined & { unique: true; index: true; relation: true }\n    : Defined & { index: true; relation: true };\ntype WithDBFieldIndex<Defined> = Defined & { index: true };\ntype WithDBFieldUnique<Defined> = Defined & { unique: true; index: true };\ntype WithDBFieldVector<Defined> = Defined & { vector: true };\ntype WithDBFieldHooks<Defined, H> = Defined & {\n  hooks: {\n    create: H extends { create: unknown } ? true : false;\n    update: H extends { update: unknown } ? true : false;\n  };\n  serial: false;\n};\ntype WithDBFieldValidate<Defined> = Defined & { validate: true };\ntype WithDBFieldSerial<Defined> = Defined & {\n  serial: true;\n  hooks: { create: false; update: false };\n};\ntype WithDBFieldCloneOptions<Defined extends DefinedDBFieldMetadata, NewOpt extends FieldOptions> =\n  IsAny<Defined> extends true\n    ? Defined\n    : Omit<Defined, \"array\"> & {\n        array: NewOpt extends { array: true } ? true : Defined[\"array\"];\n      };\ntype DBFieldCloneOptions<Defined extends DefinedDBFieldMetadata> = Omit<FieldOptions, \"array\"> & {\n  array?: Defined extends { validate: unknown } ? Defined[\"array\"] : boolean;\n};\ntype InvalidValidatedArrayCloneKeys<\n  Fields extends Record<string, TailorAnyDBField>,\n  K extends keyof Fields,\n  Opt extends FieldOptions,\n> = Opt extends { array: infer ArrayOption }\n  ? {\n      [P in K]: Fields[P] extends TailorDBField<infer Defined, infer _Output>\n        ? Defined extends { validate: unknown }\n          ? ArrayOption extends Defined[\"array\"]\n            ? never\n            : P\n          : never\n        : never;\n    }[K]\n  : never;\ntype DBFieldsCloneOptionsGuard<\n  Fields extends Record<string, TailorAnyDBField>,\n  K extends keyof Fields,\n  Opt extends FieldOptions,\n> = [InvalidValidatedArrayCloneKeys<Fields, K, Opt>] extends [never]\n  ? unknown\n  : TypeLevelError<\"array cannot be changed on fields with custom validation\">;\ntype DefinedDBTypeMetadata = {\n  hooks?: true;\n  validate?: true;\n  features?: true;\n  indexes?: true;\n  files?: true;\n  permission?: true;\n  gqlPermission?: true;\n  description?: true;\n};\ntype WithDBTypeMetadata<\n  Defined extends DefinedDBTypeMetadata,\n  Key extends keyof DefinedDBTypeMetadata,\n> = Defined & Record<Key, true>;\ntype DBTypeDuplicateInputGuard<\n  Defined extends DefinedDBTypeMetadata,\n  Key extends keyof DefinedDBTypeMetadata,\n  Input,\n  Message extends string,\n> =\n  IsAny<Defined> extends true\n    ? Input\n    : Defined extends Record<Key, unknown>\n      ? TypeLevelError<Message>\n      : Input;\ntype DBTypeDuplicateRestGuard<\n  Defined extends DefinedDBTypeMetadata,\n  Key extends keyof DefinedDBTypeMetadata,\n  Input extends unknown[],\n  Message extends string,\n> =\n  IsAny<Defined> extends true\n    ? Input\n    : Defined extends Record<Key, unknown>\n      ? [TypeLevelError<Message>, ...TypeLevelError<Message>[]]\n      : Input;\ntype FileKeyConflictError<\n  Fields extends Record<string, TailorAnyDBField>,\n  User extends object,\n> = Partial<\n  Record<\n    keyof output<TailorDBType<Fields, User>> & string,\n    TypeLevelError<\"file keys cannot use existing field names\">\n  >\n>;\ntype DBFieldDescriptionFn<Defined extends DefinedDBFieldMetadata, Output> = (\n  description: string,\n) => TailorDBField<WithDBFieldDescription<Defined>, Output>;\ntype DBFieldRelationFn<Defined extends DefinedDBFieldMetadata, Output> = {\n  <S extends RelationType, T extends TailorAnyDBType>(\n    config: RelationConfig<S, T>,\n  ): TailorDBField<WithDBFieldRelation<Defined, S>, Output>;\n  <S extends RelationSelfConfig>(config: S): TailorDBField<WithDBFieldRelation<Defined, S>, Output>;\n};\ntype DBFieldIndexFn<Defined extends DefinedDBFieldMetadata, Output> = () => TailorDBField<\n  WithDBFieldIndex<Defined>,\n  Output\n>;\ntype DBFieldUniqueFn<Defined extends DefinedDBFieldMetadata, Output> = () => TailorDBField<\n  WithDBFieldUnique<Defined>,\n  Output\n>;\ntype DBFieldVectorFn<Defined extends DefinedDBFieldMetadata, Output> = () => TailorDBField<\n  WithDBFieldVector<Defined>,\n  Output\n>;\ntype DBFieldHooksFn<Defined extends DefinedDBFieldMetadata, Output> = <\n  const H extends Hook<unknown, Output>,\n>(\n  hooks: H,\n) => TailorDBField<WithDBFieldHooks<Defined, H>, Output>;\ntype DBFieldValidateFn<Defined extends DefinedDBFieldMetadata, Output> = (\n  ...validate: FieldValidateInput<Output>[]\n) => TailorDBField<WithDBFieldValidate<Defined>, Output>;\ntype DBFieldSerialFn<Defined extends DefinedDBFieldMetadata, Output> = (\n  config: SerialConfig<Defined[\"type\"] & (\"integer\" | \"string\")>,\n) => TailorDBField<WithDBFieldSerial<Defined>, Output>;\ntype DBFieldDescriptionMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldDescriptionFn<Defined, Output>\n    : Defined extends { description: unknown }\n      ? TypeLevelError<\".description() has already been set\">\n      : DBFieldDescriptionFn<Defined, Output>;\ntype DBFieldRelationMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldRelationFn<Defined, Output>\n    : Defined extends { relation: unknown }\n      ? TypeLevelError<\".relation() has already been set\">\n      : DBFieldRelationFn<Defined, Output>;\ntype DBFieldArrayCheck<A extends boolean, Ok, Msg extends string> = A extends true\n  ? TypeLevelError<Msg>\n  : Ok;\ntype DBFieldIndexMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldIndexFn<Defined, Output>\n    : Defined extends { index: unknown }\n      ? TypeLevelError<\".index() has already been set\">\n      : DBFieldArrayCheck<\n          Defined[\"array\"],\n          DBFieldIndexFn<Defined, Output>,\n          \"index cannot be set on array fields\"\n        >;\ntype DBFieldUniqueMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldUniqueFn<Defined, Output>\n    : Defined extends { unique: unknown }\n      ? TypeLevelError<\".unique() has already been set\">\n      : DBFieldArrayCheck<\n          Defined[\"array\"],\n          DBFieldUniqueFn<Defined, Output>,\n          \"unique cannot be set on array fields\"\n        >;\ntype DBFieldVectorMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldVectorFn<Defined, Output>\n    : Defined extends { vector: unknown }\n      ? TypeLevelError<\".vector() has already been set\">\n      : Defined extends { type: \"string\"; array: false }\n        ? DBFieldVectorFn<Defined, Output>\n        : TypeLevelError<\"vector can only be set on non-array string fields\">;\ntype DBFieldHooksMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldHooksFn<Defined, Output>\n    : Defined extends {\n          serial: true;\n          hooks: { create: false; update: false };\n        }\n      ? TypeLevelError<\"hooks cannot be set after serial\">\n      : Defined extends {\n            hooks: unknown;\n          }\n        ? TypeLevelError<\".hooks() has already been set\">\n        : Defined extends { type: \"nested\" }\n          ? TypeLevelError<\"hooks cannot be set on nested type fields\">\n          : DBFieldHooksFn<Defined, Output>;\ntype DBFieldValidateMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldValidateFn<Defined, Output>\n    : Defined extends { validate: unknown }\n      ? TypeLevelError<\".validate() has already been set\">\n      : DBFieldValidateFn<Defined, Output>;\ntype DBFieldSerialMethod<Defined extends DefinedDBFieldMetadata, Output> =\n  IsAny<Defined> extends true\n    ? DBFieldSerialFn<Defined, Output>\n    : Defined extends { serial: true }\n      ? TypeLevelError<\".serial() has already been set\">\n      : Defined extends { serial: false }\n        ? TypeLevelError<\"serial cannot be set after hooks\">\n        : IsAny<Output> extends true\n          ? Defined extends { type: \"integer\" | \"string\"; array: false }\n            ? DBFieldSerialFn<Defined, Output>\n            : TypeLevelError<\"serial can only be set on non-array integer or string fields\">\n          : null extends Output\n            ? TypeLevelError<\"serial can only be set on non-array integer or string fields\">\n            : Defined extends { type: \"integer\" | \"string\"; array: false }\n              ? DBFieldSerialFn<Defined, Output>\n              : TypeLevelError<\"serial can only be set on non-array integer or string fields\">;\n/**\n * Full TailorDBField interface with builder methods.\n * Extends the minimal structural interface from types/ with fluent API methods.\n */\nexport interface TailorDBField<\n  Defined extends DefinedDBFieldMetadata = DefinedDBFieldMetadata,\n  // oxlint-disable-next-line no-explicit-any\n  Output = any,\n> extends Omit<TailorDBFieldBase<Defined, Output>, \"fields\"> {\n  readonly fields: Record<string, TailorAnyDBField>;\n  _metadata: DBFieldMetadata;\n\n  /**\n   * Parse and validate a value against this field's validation rules\n   */\n  parse(args: FieldParseArgs): StandardSchemaV1.Result<Output>;\n\n  /**\n   * Internal parse method that tracks field path for nested validation\n   * @private\n   */\n  _parseInternal(args: FieldParseInternalArgs): StandardSchemaV1.Result<Output>;\n\n  /**\n   * typeName is not available on TailorDB fields.\n   * Use typeName on pipeline fields (t.enum / t.object) instead.\n   */\n  typeName: DBFieldTypeNameMethod<Defined>;\n\n  /**\n   * Set a description for the field\n   */\n  description: DBFieldDescriptionMethod<Defined, Output>;\n\n  /**\n   * Define a relation to another type.\n   */\n  relation: DBFieldRelationMethod<Defined, Output>;\n\n  /**\n   * Add an index to the field\n   */\n  index: DBFieldIndexMethod<Defined, Output>;\n\n  /**\n   * Make the field unique (also adds an index)\n   */\n  unique: DBFieldUniqueMethod<Defined, Output>;\n\n  /**\n   * Enable vector search on the field (string type only)\n   */\n  vector: DBFieldVectorMethod<Defined, Output>;\n\n  /**\n   * Add hooks for create/update operations on this field.\n   */\n  hooks: DBFieldHooksMethod<Defined, Output>;\n\n  /**\n   * Add validation functions to the field.\n   *\n   * Validators receive `{ value, data, user }` and run after hooks and\n   * built-in type validation; they are skipped when built-in validation\n   * fails. For array fields, `value` is the complete array.\n   */\n  validate: DBFieldValidateMethod<Defined, Output>;\n\n  /**\n   * Configure serial/auto-increment behavior\n   */\n  serial: DBFieldSerialMethod<Defined, Output>;\n\n  /**\n   * Clone the field with optional overrides for field options.\n   * The `array` option cannot change on fields with custom validation.\n   */\n  clone<const NewOpt extends DBFieldCloneOptions<Defined>>(\n    options?: NewOpt,\n  ): TailorDBField<\n    WithDBFieldCloneOptions<Defined, NewOpt>,\n    FieldOutput<TailorToTs[Defined[\"type\"]], NewOpt>\n  >;\n}\n\n/**\n * Full TailorDBType interface with builder methods.\n * Extends the minimal structural interface from types/ with fluent API methods.\n */\nexport interface TailorDBType<\n  // oxlint-disable-next-line no-explicit-any\n  Fields extends Record<string, TailorAnyDBField> = any,\n  User extends object = InferredAttributeMap,\n  // oxlint-disable-next-line no-explicit-any\n  Defined extends DefinedDBTypeMetadata = any,\n> extends TailorDBTypeBase<Fields, User> {\n  _description?: string;\n\n  hooks(\n    hooks: DBTypeDuplicateInputGuard<\n      Defined,\n      \"hooks\",\n      Hooks<Fields>,\n      \".hooks() has already been set\"\n    >,\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"hooks\">>;\n  validate(\n    validators: DBTypeDuplicateInputGuard<\n      Defined,\n      \"validate\",\n      Validators<Fields>,\n      \".validate() has already been set\"\n    >,\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"validate\">>;\n  features(\n    features: DBTypeDuplicateInputGuard<\n      Defined,\n      \"features\",\n      Omit<TypeFeatures, \"pluralForm\">,\n      \".features() has already been set\"\n    >,\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"features\">>;\n  indexes(\n    ...indexes: DBTypeDuplicateRestGuard<\n      Defined,\n      \"indexes\",\n      IndexDef<TailorDBType<Fields, User, Defined>>[],\n      \".indexes() has already been set\"\n    >\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"indexes\">>;\n  files<const F extends string>(\n    files: DBTypeDuplicateInputGuard<\n      Defined,\n      \"files\",\n      Record<F, string> & FileKeyConflictError<Fields, User>,\n      \".files() has already been set\"\n    >,\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"files\">>;\n  permission<\n    U extends object = User,\n    P extends TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>> =\n      TailorTypePermission<U, output<TailorDBType<Fields, User, Defined>>>,\n  >(\n    permission: DBTypeDuplicateInputGuard<\n      Defined,\n      \"permission\",\n      P,\n      \".permission() has already been set\"\n    >,\n  ): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, \"permission\">>;\n  gqlPermission<\n    U extends object = User,\n    P extends TailorTypeGqlPermission<U> = TailorTypeGqlPermission<U>,\n  >(\n    permission: DBTypeDuplicateInputGuard<\n      Defined,\n      \"gqlPermission\",\n      P,\n      \".gqlPermission() has already been set\"\n    >,\n  ): TailorDBType<Fields, U, WithDBTypeMetadata<Defined, \"gqlPermission\">>;\n  description(\n    description: DBTypeDuplicateInputGuard<\n      Defined,\n      \"description\",\n      string,\n      \".description() has already been set\"\n    >,\n  ): TailorDBType<Fields, User, WithDBTypeMetadata<Defined, \"description\">>;\n  pickFields<K extends keyof Fields>(keys: K[]): Pick<Fields, K>;\n  pickFields<K extends keyof Fields, const Opt extends FieldOptions>(\n    keys: K[],\n    options: Opt & DBFieldsCloneOptionsGuard<Fields, K, Opt>,\n  ): {\n    [P in K]: Fields[P] extends TailorDBField<infer D, infer _O>\n      ? TailorDBField<WithDBFieldCloneOptions<D, Opt>, FieldOutput<TailorToTs[D[\"type\"]], Opt>>\n      : never;\n  };\n  omitFields<K extends keyof Fields>(keys: K[]): Omit<Fields, K>;\n  plugin<P extends keyof PluginConfigs<keyof Fields & string>>(config: {\n    [K in P]: PluginConfigs<keyof Fields & string>[K];\n  }): TailorDBType<Fields, User, Defined>;\n}\n\nexport type TailorDBInstance<\n  // oxlint-disable-next-line no-explicit-any\n  Fields extends Record<string, TailorAnyDBField> = any,\n  User extends object = InferredAttributeMap,\n  // oxlint-disable-next-line no-explicit-any\n  Defined extends DefinedDBTypeMetadata = any,\n> = TailorDBType<Fields, User, Defined>;\n\ninterface RelationConfig<S extends RelationType, T extends TailorDBType> {\n  type: S;\n  toward: {\n    type: T;\n    as?: string;\n    key?: keyof T[\"fields\"] & string;\n  };\n  backward?: string;\n}\n\n// Special config variant for self-referencing relations\ntype RelationSelfConfig = {\n  type: RelationType;\n  toward: {\n    type: \"self\";\n    as?: string;\n    key?: string;\n  };\n  backward?: string;\n};\n\nfunction isRelationSelfConfig(\n  config: RelationConfig<RelationType, TailorDBType> | RelationSelfConfig,\n): config is RelationSelfConfig {\n  return config.toward.type === \"self\";\n}\n\ntype DBFieldDefined<T extends TailorFieldType, Opt extends FieldOptions> = {\n  type: T;\n  array: Opt extends { array: true } ? true : false;\n};\ntype DBFieldOutput<\n  T extends TailorFieldType,\n  Opt extends FieldOptions,\n  OutputBase = TailorToTs[T],\n> = FieldOutput<OutputBase, Opt>;\ntype TailorDBFieldInstance<\n  T extends TailorFieldType,\n  Opt extends FieldOptions,\n  OutputBase = TailorToTs[T],\n> = TailorDBField<DBFieldDefined<T, Opt>, DBFieldOutput<T, Opt, OutputBase>>;\ntype TailorDBFieldRuntimeInstance<\n  T extends TailorFieldType,\n  Opt extends FieldOptions,\n  OutputBase = TailorToTs[T],\n> = TailorDBFieldRuntime<DBFieldDefined<T, Opt>, DBFieldOutput<T, Opt, OutputBase>>;\ntype TailorDBFieldRuntime<Defined extends DefinedDBFieldMetadata, Output> = Omit<\n  TailorDBFieldBase<Defined, Output>,\n  \"fields\"\n> & {\n  readonly fields: Record<string, TailorAnyDBField>;\n  _metadata: DBFieldMetadata;\n  description(description: string): object;\n  typeName(typeName: string): object;\n  validate(...validate: FieldValidateInput<Output>[]): object;\n  relation(config: RelationConfig<RelationType, TailorDBType> | RelationSelfConfig): object;\n  index(): object;\n  unique(): object;\n  vector(): object;\n  hooks(hooks: Hook<unknown, Output>): object;\n  serial(config: SerialConfig): object;\n  clone(options?: FieldOptions): TailorDBFieldRuntime<DefinedDBFieldMetadata, AnyBuilderMethod>;\n  parse(args: FieldParseArgs): StandardSchemaV1.Result<Output>;\n  _parseInternal(args: FieldParseInternalArgs): StandardSchemaV1.Result<Output>;\n  _setRawRelation(relation: RawRelationConfig): void;\n};\n\n/**\n * Creates a new TailorDBField instance.\n * @param type - Field type\n * @param options - Field options\n * @param fields - Nested fields for object-like types\n * @param values - Allowed values for enum-like fields\n * @returns A new TailorDBField\n */\nfunction createTailorDBField<\n  const T extends TailorFieldType,\n  const TOptions extends FieldOptions,\n  const OutputBase = TailorToTs[T],\n>(\n  type: T,\n  options?: TOptions,\n  fields?: Record<string, TailorAnyDBField>,\n  values?: AllowedValues,\n): TailorDBFieldInstance<T, TOptions, OutputBase>;\nfunction createTailorDBField<const T extends TailorFieldType, const TOptions extends FieldOptions>(\n  type: T,\n  options?: TOptions,\n  fields?: Record<string, TailorAnyDBField>,\n  values?: AllowedValues,\n): object {\n  return createTailorDBFieldRuntime(type, options, fields, values);\n}\n\nfunction createTailorDBFieldRuntime<\n  const T extends TailorFieldType,\n  const TOptions extends FieldOptions,\n  const OutputBase = TailorToTs[T],\n>(\n  type: T,\n  options?: TOptions,\n  fields?: Record<string, TailorAnyDBField>,\n  values?: AllowedValues,\n): TailorDBFieldRuntimeInstance<T, TOptions, OutputBase> {\n  type FieldValue = DBFieldOutput<T, TOptions, OutputBase>;\n  type FieldType = TailorDBFieldRuntimeInstance<T, TOptions, OutputBase>;\n\n  const _metadata: DBFieldMetadata = { required: true };\n  let _rawRelation: RawRelationConfig | undefined;\n\n  if (options) {\n    if (options.optional === true) {\n      _metadata.required = false;\n    }\n    if (options.array === true) {\n      _metadata.array = true;\n    }\n  }\n  if (values) {\n    _metadata.allowedValues = mapAllowedValues(values);\n  }\n\n  function parseInternal(args: FieldParseInternalArgs): StandardSchemaV1.Result<FieldValue> {\n    return parseFieldInternal<T, FieldValue>({\n      ...args,\n      field,\n    });\n  }\n\n  function cloneWith(metadataUpdates: Partial<DBFieldMetadata>) {\n    const cloned = field.clone();\n    Object.assign(cloned._metadata, metadataUpdates);\n    return cloned;\n  }\n\n  const field: FieldType = {\n    type,\n    fields: fields ?? {},\n    _defined: undefined as unknown as DBFieldDefined<T, TOptions>,\n    _output: undefined as FieldValue,\n    _metadata,\n\n    get metadata() {\n      return { ...this._metadata };\n    },\n\n    get rawRelation(): Readonly<RawRelationConfig> | undefined {\n      return _rawRelation ? { ..._rawRelation, toward: { ..._rawRelation.toward } } : undefined;\n    },\n\n    description(description: string) {\n      return cloneWith({ description });\n    },\n\n    typeName(typeName: string) {\n      return cloneWith({ typeName });\n    },\n\n    validate(...validateInputs: FieldValidateInput<FieldValue>[]) {\n      return cloneWith({ validate: validateInputs });\n    },\n\n    parse(args: FieldParseArgs): StandardSchemaV1.Result<FieldValue> {\n      return parseInternal({\n        value: args.value,\n        data: args.data,\n        user: args.user,\n        pathArray: [],\n      });\n    },\n\n    _parseInternal: parseInternal,\n\n    // TailorDBField specific methods\n    relation(config: RelationConfig<RelationType, TailorDBType> | RelationSelfConfig) {\n      const cloned = field.clone();\n      const targetType = isRelationSelfConfig(config) ? \"self\" : config.toward.type.name;\n      cloned._setRawRelation({\n        type: config.type,\n        toward: {\n          type: targetType,\n          as: config.toward.as,\n          key: config.toward.key,\n        },\n        backward: config.backward,\n      });\n      return cloned;\n    },\n\n    index() {\n      return cloneWith({ index: true });\n    },\n\n    unique() {\n      return cloneWith({ unique: true, index: true });\n    },\n\n    vector() {\n      return cloneWith({ vector: true });\n    },\n\n    hooks(hooks: Hook<unknown, FieldValue>) {\n      return cloneWith({ hooks });\n    },\n\n    serial(config: SerialConfig) {\n      return cloneWith({ serial: config });\n    },\n\n    clone(cloneOptions?: FieldOptions) {\n      if (\n        this._metadata.validate?.length &&\n        cloneOptions?.array !== undefined &&\n        cloneOptions.array !== (this._metadata.array === true)\n      ) {\n        throw new Error(\"Cannot change the array option on a field with custom validation\");\n      }\n\n      // Deep clone nested object fields if present\n      let clonedFields = fields;\n      if (fields) {\n        const cloned: Record<string, TailorAnyDBField> = {};\n        for (const [key, field] of Object.entries(fields)) {\n          cloned[key] = field.clone();\n        }\n        clonedFields = cloned;\n      }\n\n      // Create a new field with cloned configuration\n      const clonedField = createTailorDBFieldRuntime(type, options, clonedFields, values);\n\n      // Deep copy metadata using cloneDeep (preserves function references)\n      Object.assign(clonedField._metadata, cloneDeep(this._metadata));\n\n      // Apply new options if provided\n      if (cloneOptions) {\n        if (cloneOptions.optional !== undefined) {\n          clonedField._metadata.required = !cloneOptions.optional;\n        }\n        if (cloneOptions.array !== undefined) {\n          clonedField._metadata.array = cloneOptions.array;\n        }\n      }\n\n      // Copy raw relation if exists\n      if (_rawRelation) {\n        clonedField._setRawRelation(cloneDeep(_rawRelation));\n      }\n\n      return clonedField;\n    },\n\n    _setRawRelation(relation: RawRelationConfig) {\n      _rawRelation = relation;\n    },\n  };\n\n  return field;\n}\n\nconst createField = createTailorDBField;\n\n/**\n * Create a UUID field.\n * @param options - Field configuration options\n * @returns A UUID field\n * @example db.uuid()\n * @example db.uuid({ optional: true })\n */\nfunction uuid<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"uuid\", options);\n}\n\n/**\n * Create a string field.\n * @param options - Field configuration options\n * @returns A string field\n * @example db.string()\n * @example db.string({ optional: true })\n */\nfunction string<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"string\", options);\n}\n\n/**\n * Create a boolean field.\n * Note: The method name is `bool` but creates a `boolean` type field.\n * @param options - Field configuration options\n * @returns A boolean field\n * @example db.bool()\n * @example db.bool({ optional: true })\n */\nfunction bool<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"boolean\", options);\n}\n\n/**\n * Create an integer field.\n * @param options - Field configuration options\n * @returns An integer field\n * @example db.int()\n * @example db.int({ optional: true })\n */\nfunction int<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"integer\", options);\n}\n\n/**\n * Create a float (decimal number) field.\n * @param options - Field configuration options\n * @returns A float field\n * @example db.float()\n * @example db.float({ optional: true })\n */\nfunction float<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"float\", options);\n}\n\ninterface DecimalFieldOptions extends FieldOptions {\n  scale?: number;\n}\n\n/**\n * Create a decimal field (stored as string for precision).\n * @param options - Field configuration options including optional scale (0-12)\n * @returns A decimal field\n * @example db.decimal()\n * @example db.decimal({ scale: 2 })\n * @example db.decimal({ scale: 2, optional: true })\n */\nfunction decimal<const Opt extends DecimalFieldOptions>(options?: Opt) {\n  if (options?.scale !== undefined) {\n    if (!Number.isInteger(options.scale) || options.scale < 0 || options.scale > 12) {\n      throw new Error(\"scale must be an integer between 0 and 12\");\n    }\n  }\n  const field = createField(\"decimal\", options);\n  if (options?.scale !== undefined) {\n    field._metadata.scale = options.scale;\n  }\n  return field;\n}\n\n/**\n * Create a date field (date only, no time component).\n * Format: \"yyyy-MM-dd\"\n * @param options - Field configuration options\n * @returns A date field\n * @example db.date()\n */\nfunction date<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"date\", options);\n}\n\n/**\n * Create a datetime field (date and time).\n * Format: ISO 8601 \"yyyy-MM-ddTHH:mm:ssZ\"\n * @param options - Field configuration options\n * @returns A datetime field\n * @example db.datetime()\n */\nfunction datetime<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"datetime\", options);\n}\n\n/**\n * Create a time field (time only, no date component).\n * Format: \"HH:mm\"\n * @param options - Field configuration options\n * @returns A time field\n * @example db.time()\n */\nfunction time<const Opt extends FieldOptions>(options?: Opt) {\n  return createField(\"time\", options);\n}\n\n/**\n * Create an enum field with a fixed set of allowed string values.\n * @param values - Array of allowed string values, or array of `{ value, description }` objects\n * @param options - Field configuration options\n * @returns An enum field\n * @example db.enum([\"active\", \"inactive\", \"suspended\"])\n * @example db.enum([\"small\", \"medium\", \"large\"], { optional: true })\n */\nfunction _enum<const V extends AllowedValues, const Opt extends FieldOptions>(\n  values: V,\n  options?: Opt,\n): TailorDBField<\n  { type: \"enum\"; array: Opt extends { array: true } ? true : false },\n  FieldOutput<AllowedValuesOutput<V>, Opt>\n> {\n  return createField<\"enum\", Opt, AllowedValuesOutput<V>>(\"enum\", options, undefined, values);\n}\n\n/**\n * Create a nested object field with sub-fields.\n * @param fields - Record of nested field definitions\n * @param options - Field configuration options\n * @returns A nested object field\n * @example db.object({ street: db.string(), city: db.string(), zip: db.string() })\n * @example db.object({ name: db.string() }, { optional: true })\n */\nfunction object<\n  const F extends Record<string, TailorAnyDBField> & ExcludeNestedDBFields<F>,\n  const Opt extends FieldOptions,\n>(fields: F, options?: Opt) {\n  return createField(\"nested\", options, fields) as unknown as TailorDBField<\n    { type: \"nested\"; array: Opt extends { array: true } ? true : false },\n    FieldOutput<InferFieldsOutput<F>, Opt>\n  >;\n}\n\n/**\n * Creates a new TailorDBType instance.\n * @param name - Type name\n * @param fields - Field definitions\n * @param options - Type options\n * @param options.pluralForm - Optional plural form\n * @param options.description - Optional description\n * @returns A new TailorDBType\n */\nfunction createTailorDBType<\n  // oxlint-disable-next-line no-explicit-any\n  const Fields extends Record<string, TailorAnyDBField> = any,\n  User extends object = InferredAttributeMap,\n>(\n  name: string,\n  fields: Fields,\n  options: { pluralForm?: string; description?: string },\n): TailorDBType<Fields, User, DefinedDBTypeMetadata> {\n  let _description = options.description;\n  let _settings: TypeFeatures = {};\n  let _indexes: IndexDef<TailorDBType<Fields, User, DefinedDBTypeMetadata>>[] = [];\n  const _permissions: RawPermissions = {};\n  let _files: Record<string, string> = {};\n  const _plugins: PluginAttachment[] = [];\n  const _definedMethods = new Set<keyof DefinedDBTypeMetadata>();\n  if (options.description !== undefined) {\n    _definedMethods.add(\"description\");\n  }\n\n  function runMethodOnce<T>(method: keyof DefinedDBTypeMetadata, action: () => T): T {\n    if (_definedMethods.has(method)) {\n      throw new Error(`.${method}() has already been set`);\n    }\n    const result = action();\n    _definedMethods.add(method);\n    return result;\n  }\n  type TypeAfter<Key extends keyof DefinedDBTypeMetadata> = TailorDBType<\n    Fields,\n    User,\n    WithDBTypeMetadata<DefinedDBTypeMetadata, Key>\n  >;\n  type TypeAfterUser<\n    NextUser extends object,\n    Key extends keyof DefinedDBTypeMetadata,\n  > = TailorDBType<Fields, NextUser, WithDBTypeMetadata<DefinedDBTypeMetadata, Key>>;\n\n  if (options.pluralForm) {\n    if (name === options.pluralForm) {\n      throw new Error(`The name and the plural form must be different. name=${name}`);\n    }\n    _settings.pluralForm = options.pluralForm;\n  }\n\n  const dbType: TailorDBType<Fields, User, DefinedDBTypeMetadata> = {\n    name,\n    fields: { ...fields },\n    _output: null as unknown as InferFieldsOutput<Fields>,\n    _description,\n\n    get metadata(): TailorDBTypeMetadata {\n      // Convert indexes to the format expected by the manifest\n      const indexes: Record<string, { fields: string[]; unique?: boolean }> = {};\n      if (_indexes.length > 0) {\n        _indexes.forEach((index) => {\n          const fieldNames = index.fields.map((field) => String(field));\n          const key = index.name || `idx_${fieldNames.join(\"_\")}`;\n          indexes[key] = {\n            fields: fieldNames,\n            unique: index.unique,\n          };\n        });\n      }\n\n      return {\n        name: this.name,\n        description: _description,\n        settings: _settings,\n        permissions: _permissions,\n        files: _files,\n        ...(Object.keys(indexes).length > 0 && { indexes }),\n      };\n    },\n\n    hooks(hooks: Hooks<Fields>): TypeAfter<\"hooks\"> {\n      return runMethodOnce(\"hooks\", () => {\n        // `Hooks<Fields>` is strongly typed, but `Object.entries()` loses that information.\n        // oxlint-disable-next-line no-explicit-any\n        Object.entries(hooks).forEach(([fieldName, fieldHooks]: [string, any]) => {\n          const field = this.fields[fieldName];\n          if (field === undefined) throw new Error(`field not found: ${fieldName}`);\n          (this.fields as Record<string, TailorAnyDBField>)[fieldName] = (\n            field as TailorAnyDBField\n          ).hooks(fieldHooks);\n        });\n        return this as TypeAfter<\"hooks\">;\n      });\n    },\n\n    validate(validators: Validators<Fields>): TypeAfter<\"validate\"> {\n      return runMethodOnce(\"validate\", () => {\n        Object.entries(validators).forEach(([fieldName, fieldValidators]) => {\n          const field = this.fields[fieldName] as TailorAnyDBField;\n\n          const validators = fieldValidators as\n            | FieldValidateInput<unknown>\n            | FieldValidateInput<unknown>[];\n\n          const isValidateConfig = (v: unknown): v is ValidateConfig<unknown> => {\n            return Array.isArray(v) && v.length === 2 && typeof v[1] === \"string\";\n          };\n\n          let updatedField: TailorAnyDBField;\n          if (Array.isArray(validators)) {\n            if (isValidateConfig(validators)) {\n              updatedField = field.validate(validators);\n            } else {\n              updatedField = field.validate(...validators);\n            }\n          } else {\n            updatedField = field.validate(validators);\n          }\n          (this.fields as Record<string, TailorAnyDBField>)[fieldName] = updatedField;\n        });\n        return this as TypeAfter<\"validate\">;\n      });\n    },\n\n    features(features: Omit<TypeFeatures, \"pluralForm\">): TypeAfter<\"features\"> {\n      return runMethodOnce(\"features\", () => {\n        _settings = {\n          ..._settings,\n          ...features,\n        };\n        return this as TypeAfter<\"features\">;\n      });\n    },\n\n    indexes(\n      ...indexes: IndexDef<TailorDBType<Fields, User, DefinedDBTypeMetadata>>[]\n    ): TypeAfter<\"indexes\"> {\n      return runMethodOnce(\"indexes\", () => {\n        _indexes = indexes;\n        return this as TypeAfter<\"indexes\">;\n      });\n    },\n\n    files<const F extends string>(\n      files: Record<F, string> & FileKeyConflictError<Fields, User>,\n    ): TypeAfter<\"files\"> {\n      return runMethodOnce(\"files\", () => {\n        _files = files;\n        return this as TypeAfter<\"files\">;\n      });\n    },\n\n    permission<\n      U extends object = User,\n      P extends TailorTypePermission<U, output<TailorDBType<Fields, User, DefinedDBTypeMetadata>>> =\n        TailorTypePermission<U, output<TailorDBType<Fields, User, DefinedDBTypeMetadata>>>,\n    >(permission: P): TypeAfterUser<U, \"permission\"> {\n      return runMethodOnce(\"permission\", () => {\n        const ret = this as unknown as TypeAfterUser<U, \"permission\">;\n        _permissions.record = permission as RawPermissions[\"record\"];\n        return ret;\n      });\n    },\n\n    gqlPermission<\n      U extends object = User,\n      P extends TailorTypeGqlPermission<U> = TailorTypeGqlPermission<U>,\n    >(permission: P): TypeAfterUser<U, \"gqlPermission\"> {\n      return runMethodOnce(\"gqlPermission\", () => {\n        const ret = this as unknown as TypeAfterUser<U, \"gqlPermission\">;\n        _permissions.gql = permission as RawPermissions[\"gql\"];\n        return ret;\n      });\n    },\n\n    description(description: string): TypeAfter<\"description\"> {\n      return runMethodOnce(\"description\", () => {\n        _description = description;\n        this._description = description;\n        return this as TypeAfter<\"description\">;\n      });\n    },\n\n    pickFields<K extends keyof Fields, const Opt extends FieldOptions>(keys: K[], options?: Opt) {\n      const result = {} as Record<K, TailorAnyDBField>;\n      for (const key of keys) {\n        const field = this.fields[key] as TailorAnyDBField;\n        if (options) {\n          result[key] = field.clone(options);\n        } else {\n          result[key] = field;\n        }\n      }\n      // oxlint-disable-next-line no-explicit-any\n      return result as any;\n    },\n\n    omitFields<K extends keyof Fields>(keys: K[]): Omit<Fields, K> {\n      const keysSet = new Set(keys);\n      const result = {} as Record<string, TailorAnyDBField>;\n      for (const key in this.fields) {\n        if (Object.hasOwn(this.fields, key) && !keysSet.has(key as unknown as K)) {\n          result[key] = this.fields[key] as TailorAnyDBField;\n        }\n      }\n      return result as Omit<Fields, K>;\n    },\n\n    get plugins(): PluginAttachment[] {\n      return _plugins;\n    },\n\n    plugin<P extends keyof PluginConfigs<keyof Fields & string>>(config: {\n      [K in P]: PluginConfigs<keyof Fields & string>[K];\n    }): TailorDBType<Fields, User, AnyBuilderMethod> {\n      for (const [pluginId, pluginConfig] of Object.entries(config)) {\n        _plugins.push({ pluginId, config: pluginConfig });\n      }\n      return this;\n    },\n  };\n\n  return brandValue(dbType, \"tailordb-type\");\n}\n\nconst idField = uuid();\ntype idField = typeof idField;\ntype DBType<\n  F extends { id?: never } & Record<string, TailorAnyDBField>,\n  Defined extends DefinedDBTypeMetadata = DefinedDBTypeMetadata,\n> = TailorDBInstance<{ id: idField } & F, InferredAttributeMap, Defined>;\n\n/**\n * Creates a new database type with the specified fields.\n * An `id` field (UUID) is automatically added to every type.\n * @param name - The name of the type, or a tuple of [name, pluralForm]\n * @param fields - The field definitions for the type\n * @returns A new TailorDBType instance\n * @example\n * export const user = db.type(\"User\", {\n *   name: db.string(),\n *   email: db.string(),\n *   age: db.int({ optional: true }),\n *   role: db.enum([\"admin\", \"member\"]),\n *   ...db.fields.timestamps(),\n * });\n * // Always export both the value and type:\n * export type user = typeof user;\n */\nfunction dbType<const F extends { id?: never } & Record<string, TailorAnyDBField>>(\n  name: string | [string, string],\n  fields: F,\n): DBType<F>;\n/**\n * Creates a new database type with the specified fields and description.\n * An `id` field (UUID) is automatically added to every type.\n * @param name - The name of the type, or a tuple of [name, pluralForm]\n * @param description - A description of the type\n * @param fields - The field definitions for the type\n * @returns A new TailorDBType instance\n */\nfunction dbType<const F extends { id?: never } & Record<string, TailorAnyDBField>>(\n  name: string | [string, string],\n  description: string,\n  fields: F,\n): DBType<F, WithDBTypeMetadata<DefinedDBTypeMetadata, \"description\">>;\nfunction dbType<const F extends { id?: never } & Record<string, TailorAnyDBField>>(\n  name: string | [string, string],\n  fieldsOrDescription: string | F,\n  fields?: F,\n): DBType<F> | DBType<F, WithDBTypeMetadata<DefinedDBTypeMetadata, \"description\">> {\n  const typeName = Array.isArray(name) ? name[0] : name;\n  const pluralForm = Array.isArray(name) ? name[1] : undefined;\n\n  let description: string | undefined;\n  let fieldDef: F;\n  if (typeof fieldsOrDescription === \"string\") {\n    description = fieldsOrDescription;\n    fieldDef = fields as F;\n  } else {\n    fieldDef = fieldsOrDescription;\n  }\n  return createTailorDBType<{ id: idField } & F>(\n    typeName,\n    {\n      id: idField,\n      ...fieldDef,\n    },\n    { pluralForm, description },\n  ) as DBType<F>;\n}\n\n/** TailorDB schema builder utilities for defining types and fields. */\nexport const db = {\n  type: dbType,\n  uuid,\n  string,\n  bool,\n  int,\n  float,\n  decimal,\n  date,\n  datetime,\n  time,\n  enum: _enum,\n  object,\n  fields: {\n    /**\n     * Creates standard timestamp fields (createdAt, updatedAt) with auto-hooks.\n     * createdAt is set on create, updatedAt is set on update.\n     * A user-specified createdAt is respected when provided (e.g. seeding historical\n     * records); the current time is used only when the value is omitted.\n     * @returns An object with createdAt and updatedAt fields\n     * @example\n     * const model = db.type(\"Model\", {\n     *   name: db.string(),\n     *   ...db.fields.timestamps(),\n     * });\n     */\n    timestamps: () => ({\n      createdAt: datetime()\n        .hooks({ create: ({ value }) => value ?? new Date() })\n        .description(\"Record creation timestamp\"),\n      updatedAt: datetime({ optional: true })\n        .hooks({ update: () => new Date() })\n        .description(\"Record last update timestamp\"),\n    }),\n  },\n};\n"],"mappings":";;;;;;;;;AASA,SAAgB,iBAAiB,QAAoC;CACnE,OAAO,OAAO,KAAK,UAAU;EAC3B,IAAI,OAAO,UAAU,UACnB,OAAO;GAAE;GAAO,aAAa;EAAG;EAElC,OAAO;GAAE,GAAG;GAAO,aAAa,MAAM,eAAe;EAAG;CAC1D,CAAC;AACH;;;;ACZA,MAAM,QAAQ;CACZ,MAAM;CACN,MAAM;CACN,MAAM;CACN,UACE;CACF,SAAS;AACX;AA8BA,SAAS,kBAA6C,MAAuC;CAC3F,MAAM,EAAE,OAAO,OAAO,WAAW,WAAW;CAC5C,MAAM,OAAO,UAAU,SAAS,IAAI,YAAY;CAChD,MAAM,oBAAoB,OAAO;CAEjC,QAAQ,MAAM,MAAd;EACE,KAAK;GACH,IAAI,OAAO,UAAU,UACnB,OAAO,KAAK;IACV,SAAS,+BAA+B,OAAO,KAAK;IACpD;GACF,CAAC;GAEH;EAEF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,GACtD,OAAO,KAAK;IACV,SAAS,iCAAiC,OAAO,KAAK;IACtD;GACF,CAAC;GAEH;EAEF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,OAAO,KAAK;IACV,SAAS,+BAA+B,OAAO,KAAK;IACpD;GACF,CAAC;GAEH;EAEF,KAAK;GACH,IAAI,OAAO,UAAU,WACnB,OAAO,KAAK;IACV,SAAS,gCAAgC,OAAO,KAAK;IACrD;GACF,CAAC;GAEH;EAEF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,KAAK,GACrD,OAAO,KAAK;IACV,SAAS,mCAAmC,OAAO,KAAK;IACxD;GACF,CAAC;GAEH;EACF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,KAAK,GACrD,OAAO,KAAK;IACV,SAAS,mDAAmD,OAAO,KAAK;IACxE;GACF,CAAC;GAEH;EACF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,SAAS,KAAK,KAAK,GACzD,OAAO,KAAK;IACV,SAAS,0CAA0C,OAAO,KAAK;IAC/D;GACF,CAAC;GAEH;EACF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,KAAK,GACrD,OAAO,KAAK;IACV,SAAS,8CAA8C,OAAO,KAAK;IACnE;GACF,CAAC;GAEH;EACF,KAAK;GACH,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,KAAK,GACxD,OAAO,KAAK;IACV,SAAS,uCAAuC,OAAO,KAAK;IAC5D;GACF,CAAC;GAEH;EAEF,KAAK;GACH,IAAI,MAAM,UAAU,eAAe;IACjC,MAAM,gBAAgB,MAAM,UAAU,cAAc,KAAK,MAAM,EAAE,KAAK;IACtE,IAAI,OAAO,UAAU,YAAY,CAAC,cAAc,SAAS,KAAK,GAC5D,OAAO,KAAK;KACV,SAAS,mBAAmB,cAAc,KAAK,IAAI,EAAE,cAAc,OAAO,KAAK;KAC/E;IACF,CAAC;GAEL;GACA;EAEF,KAAK,UAAU;GAGb,IACE,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAQ,KAAK,KACnB,iBAAiB,MACjB;IAEA,OAAO,KAAK;KACV,SAAS,gCAAgC,OAAO,KAAK;KACrD;IACF,CAAC;IACD,OAAO;GACT;GAEA,IAAI,kBAAkB;GACtB,KAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,MAAM,MAAM,GAAG;IACnE,MAAM,aAAc,MAAkC;IACtD,IACE,CAAC,kBAAkB;KACjB,GAAG;KACH,OAAO;KACP,OAAO;KACP,WAAW,UAAU,OAAO,SAAS;IACvC,CAAC,GAED,kBAAkB;GAEtB;GACA,OAAO;EACT;CACF;CAEA,OAAO,OAAO,WAAW;AAC3B;AAEA,SAAS,oBACP,MACA,aACM;CACN,MAAM,EAAE,OAAO,MAAM,MAAM,WAAW,WAAW;CACjD,MAAM,OAAO,UAAU,SAAS,IAAI,YAAY;CAEhD,KAAK,MAAM,iBAAiB,aAAa;EACvC,MAAM,EAAE,IAAI,YACV,OAAO,kBAAkB,aACrB;GAAE,IAAI;GAAe,SAAS;EAAoB,IAClD;GAAE,IAAI,cAAc;GAAI,SAAS,cAAc;EAAG;EAExD,IAAI,CAAC,GAAG;GAAE;GAAO;GAAM;EAAK,CAAC,GAC3B,OAAO,KAAK;GACV;GACA;EACF,CAAC;CAEL;AACF;AAEA,SAAS,kBAA6C,MAAuC;CAC3F,MAAM,EAAE,OAAO,OAAO,WAAW,WAAW;CAC5C,MAAM,OAAO,UAAU,SAAS,IAAI,YAAY;CAEhD,MAAM,oBAAoB,UAAU,QAAQ,UAAU;CACtD,IAAI,MAAM,UAAU,YAAY,mBAAmB;EACjD,OAAO,KAAK;GACV,SAAS;GACT;EACF,CAAC;EACD,OAAO;CACT;CAEA,IAAI,CAAC,MAAM,UAAU,YAAY,mBAC/B,OAAO;CAGT,IAAI,YAAY;CAChB,IAAI,MAAM,UAAU,OAAO;EACzB,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;GACzB,OAAO,KAAK;IACV,SAAS;IACT;GACF,CAAC;GACD,OAAO;EACT;EAEA,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,IACE,CAAC,kBAAkB;GACjB,GAAG;GACH,OAAO,MAAM;GACb,WAAW,UAAU,OAAO,IAAI,EAAE,EAAE;EACtC,CAAC,GAED,YAAY;CAGlB,OACE,YAAY,kBAAkB,IAAI;CAGpC,OAAO;AACT;AAEA,SAAS,oBAA+C,MAAoC;CAC1F,MAAM,EAAE,OAAO,OAAO,cAAc;CACpC,IAAI,UAAU,QAAQ,UAAU,QAC9B;CAGF,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,UAAU,MAAM,UAAU,QAC3B,QACD,CAAC,KAAgC;EAErC,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;GACvC,MAAM,SAAS,QAAQ;GACvB,MAAM,aAAa,MAAM,UAAU,QAAQ,UAAU,OAAO,IAAI,EAAE,EAAE,IAAI;GACxE,KAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,MAAM,MAAM,GAChE,oBAAoB;IAClB,GAAG;IACH,OAAO;IACP,OAAO,OAAO;IACd,WAAW,WAAW,OAAO,SAAS;GACxC,CAAC;EAEL;CACF;CAEA,MAAM,cAAc,MAAM,UAAU;CACpC,IAAI,aAAa,QACf,oBAAoB,MAAM,WAAW;AAEzC;AAEA,SAAgB,cACd,MACiC;CACjC,MAAM,EAAE,UAAU;CAClB,MAAM,SAAmC,CAAC;CAC1C,MAAM,iBAAiB;EAAE,GAAG;EAAM;CAAO;CAEzC,IADkB,kBAAkB,cACxB,GACV,oBAAoB,cAAc;CAEpC,IAAI,OAAO,SAAS,GAClB,OAAO,EAAE,OAAO;CAGlB,OAAO,EAAE,OAAQ,SAAS,KAAgB;AAC5C;;;;ACmNA,SAAS,qBACP,QAC8B;CAC9B,OAAO,OAAO,OAAO,SAAS;AAChC;AA4DA,SAAS,oBACP,MACA,SACA,QACA,QACQ;CACR,OAAO,2BAA2B,MAAM,SAAS,QAAQ,MAAM;AACjE;AAEA,SAAS,2BAKP,MACA,SACA,QACA,QACuD;CAIvD,MAAM,YAA6B,EAAE,UAAU,KAAK;CACpD,IAAI;CAEJ,IAAI,SAAS;EACX,IAAI,QAAQ,aAAa,MACvB,UAAU,WAAW;EAEvB,IAAI,QAAQ,UAAU,MACpB,UAAU,QAAQ;CAEtB;CACA,IAAI,QACF,UAAU,gBAAgB,iBAAiB,MAAM;CAGnD,SAASA,gBAAc,MAAmE;EACxF,OAAOC,cAAkC;GACvC,GAAG;GACH;EACF,CAAC;CACH;CAEA,SAAS,UAAU,iBAA2C;EAC5D,MAAM,SAAS,MAAM,MAAM;EAC3B,OAAO,OAAO,OAAO,WAAW,eAAe;EAC/C,OAAO;CACT;CAEA,MAAM,QAAmB;EACvB;EACA,QAAQ,UAAU,CAAC;EACnB,UAAU;EACV,SAAS;EACT;EAEA,IAAI,WAAW;GACb,OAAO,EAAE,GAAG,KAAK,UAAU;EAC7B;EAEA,IAAI,cAAuD;GACzD,OAAO,eAAe;IAAE,GAAG;IAAc,QAAQ,EAAE,GAAG,aAAa,OAAO;GAAE,IAAI;EAClF;EAEA,YAAY,aAAqB;GAC/B,OAAO,UAAU,EAAE,YAAY,CAAC;EAClC;EAEA,SAAS,UAAkB;GACzB,OAAO,UAAU,EAAE,SAAS,CAAC;EAC/B;EAEA,SAAS,GAAG,gBAAkD;GAC5D,OAAO,UAAU,EAAE,UAAU,eAAe,CAAC;EAC/C;EAEA,MAAM,MAA2D;GAC/D,OAAOD,gBAAc;IACnB,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX,WAAW,CAAC;GACd,CAAC;EACH;EAEA,gBAAgBA;EAGhB,SAAS,QAAyE;GAChF,MAAM,SAAS,MAAM,MAAM;GAC3B,MAAM,aAAa,qBAAqB,MAAM,IAAI,SAAS,OAAO,OAAO,KAAK;GAC9E,OAAO,gBAAgB;IACrB,MAAM,OAAO;IACb,QAAQ;KACN,MAAM;KACN,IAAI,OAAO,OAAO;KAClB,KAAK,OAAO,OAAO;IACrB;IACA,UAAU,OAAO;GACnB,CAAC;GACD,OAAO;EACT;EAEA,QAAQ;GACN,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;EAClC;EAEA,SAAS;GACP,OAAO,UAAU;IAAE,QAAQ;IAAM,OAAO;GAAK,CAAC;EAChD;EAEA,SAAS;GACP,OAAO,UAAU,EAAE,QAAQ,KAAK,CAAC;EACnC;EAEA,MAAM,OAAkC;GACtC,OAAO,UAAU,EAAE,MAAM,CAAC;EAC5B;EAEA,OAAO,QAAsB;GAC3B,OAAO,UAAU,EAAE,QAAQ,OAAO,CAAC;EACrC;EAEA,MAAM,cAA6B;GACjC,IACE,KAAK,UAAU,UAAU,UACzB,cAAc,UAAU,UACxB,aAAa,WAAW,KAAK,UAAU,UAAU,OAEjD,MAAM,IAAI,MAAM,kEAAkE;GAIpF,IAAI,eAAe;GACnB,IAAI,QAAQ;IACV,MAAM,SAA2C,CAAC;IAClD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAC9C,OAAO,OAAO,MAAM,MAAM;IAE5B,eAAe;GACjB;GAGA,MAAM,cAAc,2BAA2B,MAAM,SAAS,cAAc,MAAM;GAGlF,OAAO,OAAO,YAAY,WAAW,UAAU,KAAK,SAAS,CAAC;GAG9D,IAAI,cAAc;IAChB,IAAI,aAAa,aAAa,QAC5B,YAAY,UAAU,WAAW,CAAC,aAAa;IAEjD,IAAI,aAAa,UAAU,QACzB,YAAY,UAAU,QAAQ,aAAa;GAE/C;GAGA,IAAI,cACF,YAAY,gBAAgB,UAAU,YAAY,CAAC;GAGrD,OAAO;EACT;EAEA,gBAAgB,UAA6B;GAC3C,eAAe;EACjB;CACF;CAEA,OAAO;AACT;AAEA,MAAM,cAAc;;;;;;;;AASpB,SAAS,KAAqC,SAAe;CAC3D,OAAO,YAAY,QAAQ,OAAO;AACpC;;;;;;;;AASA,SAAS,OAAuC,SAAe;CAC7D,OAAO,YAAY,UAAU,OAAO;AACtC;;;;;;;;;AAUA,SAAS,KAAqC,SAAe;CAC3D,OAAO,YAAY,WAAW,OAAO;AACvC;;;;;;;;AASA,SAAS,IAAoC,SAAe;CAC1D,OAAO,YAAY,WAAW,OAAO;AACvC;;;;;;;;AASA,SAAS,MAAsC,SAAe;CAC5D,OAAO,YAAY,SAAS,OAAO;AACrC;;;;;;;;;AAcA,SAAS,QAA+C,SAAe;CACrE,IAAI,SAAS,UAAU,QACrB;MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ,KAAK,QAAQ,QAAQ,IAC3E,MAAM,IAAI,MAAM,2CAA2C;CAC7D;CAEF,MAAM,QAAQ,YAAY,WAAW,OAAO;CAC5C,IAAI,SAAS,UAAU,QACrB,MAAM,UAAU,QAAQ,QAAQ;CAElC,OAAO;AACT;;;;;;;;AASA,SAAS,KAAqC,SAAe;CAC3D,OAAO,YAAY,QAAQ,OAAO;AACpC;;;;;;;;AASA,SAAS,SAAyC,SAAe;CAC/D,OAAO,YAAY,YAAY,OAAO;AACxC;;;;;;;;AASA,SAAS,KAAqC,SAAe;CAC3D,OAAO,YAAY,QAAQ,OAAO;AACpC;;;;;;;;;AAUA,SAAS,MACP,QACA,SAIA;CACA,OAAO,YAAiD,QAAQ,SAAS,QAAW,MAAM;AAC5F;;;;;;;;;AAUA,SAAS,OAGP,QAAW,SAAe;CAC1B,OAAO,YAAY,UAAU,SAAS,MAAM;AAI9C;;;;;;;;;;AAWA,SAAS,mBAKP,MACA,QACA,SACmD;CACnD,IAAI,eAAe,QAAQ;CAC3B,IAAI,YAA0B,CAAC;CAC/B,IAAI,WAA0E,CAAC;CAC/E,MAAM,eAA+B,CAAC;CACtC,IAAI,SAAiC,CAAC;CACtC,MAAM,WAA+B,CAAC;CACtC,MAAM,kCAAkB,IAAI,IAAiC;CAC7D,IAAI,QAAQ,gBAAgB,QAC1B,gBAAgB,IAAI,aAAa;CAGnC,SAAS,cAAiB,QAAqC,QAAoB;EACjF,IAAI,gBAAgB,IAAI,MAAM,GAC5B,MAAM,IAAI,MAAM,IAAI,OAAO,wBAAwB;EAErD,MAAM,SAAS,OAAO;EACtB,gBAAgB,IAAI,MAAM;EAC1B,OAAO;CACT;CAWA,IAAI,QAAQ,YAAY;EACtB,IAAI,SAAS,QAAQ,YACnB,MAAM,IAAI,MAAM,wDAAwD,MAAM;EAEhF,UAAU,aAAa,QAAQ;CACjC;CA8KA,OAAO,WAAW;EA3KhB;EACA,QAAQ,EAAE,GAAG,OAAO;EACpB,SAAS;EACT;EAEA,IAAI,WAAiC;GAEnC,MAAM,UAAkE,CAAC;GACzE,IAAI,SAAS,SAAS,GACpB,SAAS,SAAS,UAAU;IAC1B,MAAM,aAAa,MAAM,OAAO,KAAK,UAAU,OAAO,KAAK,CAAC;IAC5D,MAAM,MAAM,MAAM,QAAQ,OAAO,WAAW,KAAK,GAAG;IACpD,QAAQ,OAAO;KACb,QAAQ;KACR,QAAQ,MAAM;IAChB;GACF,CAAC;GAGH,OAAO;IACL,MAAM,KAAK;IACX,aAAa;IACb,UAAU;IACV,aAAa;IACb,OAAO;IACP,GAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,KAAK,EAAE,QAAQ;GACnD;EACF;EAEA,MAAM,OAA0C;GAC9C,OAAO,cAAc,eAAe;IAGlC,OAAO,QAAQ,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,gBAA+B;KACxE,MAAM,QAAQ,KAAK,OAAO;KAC1B,IAAI,UAAU,QAAW,MAAM,IAAI,MAAM,oBAAoB,WAAW;KACxE,AAAC,KAAK,OAA4C,aAChD,MACA,MAAM,UAAU;IACpB,CAAC;IACD,OAAO;GACT,CAAC;EACH;EAEA,SAAS,YAAuD;GAC9D,OAAO,cAAc,kBAAkB;IACrC,OAAO,QAAQ,UAAU,CAAC,CAAC,SAAS,CAAC,WAAW,qBAAqB;KACnE,MAAM,QAAQ,KAAK,OAAO;KAE1B,MAAM,aAAa;KAInB,MAAM,oBAAoB,MAA6C;MACrE,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,EAAE,OAAO;KAC/D;KAEA,IAAI;KACJ,IAAI,MAAM,QAAQ,UAAU,GAC1B,IAAI,iBAAiB,UAAU,GAC7B,eAAe,MAAM,SAAS,UAAU;UAExC,eAAe,MAAM,SAAS,GAAG,UAAU;UAG7C,eAAe,MAAM,SAAS,UAAU;KAE1C,AAAC,KAAK,OAA4C,aAAa;IACjE,CAAC;IACD,OAAO;GACT,CAAC;EACH;EAEA,SAAS,UAAmE;GAC1E,OAAO,cAAc,kBAAkB;IACrC,YAAY;KACV,GAAG;KACH,GAAG;IACL;IACA,OAAO;GACT,CAAC;EACH;EAEA,QACE,GAAG,SACmB;GACtB,OAAO,cAAc,iBAAiB;IACpC,WAAW;IACX,OAAO;GACT,CAAC;EACH;EAEA,MACE,OACoB;GACpB,OAAO,cAAc,eAAe;IAClC,SAAS;IACT,OAAO;GACT,CAAC;EACH;EAEA,WAIE,YAA+C;GAC/C,OAAO,cAAc,oBAAoB;IACvC,MAAM,MAAM;IACZ,aAAa,SAAS;IACtB,OAAO;GACT,CAAC;EACH;EAEA,cAGE,YAAkD;GAClD,OAAO,cAAc,uBAAuB;IAC1C,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,OAAO;GACT,CAAC;EACH;EAEA,YAAY,aAA+C;GACzD,OAAO,cAAc,qBAAqB;IACxC,eAAe;IACf,KAAK,eAAe;IACpB,OAAO;GACT,CAAC;EACH;EAEA,WAAmE,MAAW,SAAe;GAC3F,MAAM,SAAS,CAAC;GAChB,KAAK,MAAM,OAAO,MAAM;IACtB,MAAM,QAAQ,KAAK,OAAO;IAC1B,IAAI,SACF,OAAO,OAAO,MAAM,MAAM,OAAO;SAEjC,OAAO,OAAO;GAElB;GAEA,OAAO;EACT;EAEA,WAAmC,MAA4B;GAC7D,MAAM,UAAU,IAAI,IAAI,IAAI;GAC5B,MAAM,SAAS,CAAC;GAChB,KAAK,MAAM,OAAO,KAAK,QACrB,IAAI,OAAO,OAAO,KAAK,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,GAAmB,GACrE,OAAO,OAAO,KAAK,OAAO;GAG9B,OAAO;EACT;EAEA,IAAI,UAA8B;GAChC,OAAO;EACT;EAEA,OAA6D,QAEZ;GAC/C,KAAK,MAAM,CAAC,UAAU,iBAAiB,OAAO,QAAQ,MAAM,GAC1D,SAAS,KAAK;IAAE;IAAU,QAAQ;GAAa,CAAC;GAElD,OAAO;EACT;CAGqB,GAAG,eAAe;AAC3C;AAEA,MAAM,UAAU,KAAK;AAyCrB,SAAS,OACP,MACA,qBACA,QACiF;CACjF,MAAM,WAAW,MAAM,QAAQ,IAAI,IAAI,KAAK,KAAK;CACjD,MAAM,aAAa,MAAM,QAAQ,IAAI,IAAI,KAAK,KAAK;CAEnD,IAAI;CACJ,IAAI;CACJ,IAAI,OAAO,wBAAwB,UAAU;EAC3C,cAAc;EACd,WAAW;CACb,OACE,WAAW;CAEb,OAAO,mBACL,UACA;EACE,IAAI;EACJ,GAAG;CACL,GACA;EAAE;EAAY;CAAY,CAC5B;AACF;;AAGA,MAAa,KAAK;CAChB,MAAM;CACN;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,MAAM;CACN;CACA,QAAQ;;;;;;;;;;;;;AAaN,mBAAmB;EACjB,WAAW,SAAS,CAAC,CAClB,MAAM,EAAE,SAAS,EAAE,YAAY,yBAAS,IAAI,KAAK,EAAE,CAAC,CAAC,CACrD,YAAY,2BAA2B;EAC1C,WAAW,SAAS,EAAE,UAAU,KAAK,CAAC,CAAC,CACpC,MAAM,EAAE,8BAAc,IAAI,KAAK,EAAE,CAAC,CAAC,CACnC,YAAY,8BAA8B;CAC/C,GACF;AACF"}

package/dist/{secret-file-VSVGy1V0.mjs → secret-file-DBqZhjFQ.mjs}

@@ -1,31 +1,6 @@
-import { t as readPackageJson } from "./package-json-8b0O9TlX.mjs";
 import * as fs from "node:fs";
 import * as path from "pathe";
 
-//#region src/cli/shared/user-agent.ts
-/**
-* Build the User-Agent string from an already-known SDK version, without
-* touching the filesystem. Use this when the caller has resolved the version
-* (e.g. crash reporting already reads `package.json`) to avoid a redundant read.
-* @param version - SDK version string
-* @returns User-Agent header value
-*/
-function userAgentFromVersion(version) {
-	return `tailor-sdk/${version}`;
-}
-/**
-* Build the User-Agent string for CLI requests.
-*
-* Lives in its own module (rather than `client.ts`) so callers that only need
-* the UA — e.g. crash reporting — do not pull in the operator client's heavy
-* OAuth2/Connect/Protobuf dependencies, and so importing it never forms a cycle.
-* @returns User-Agent header value
-*/
-async function userAgent() {
-	return userAgentFromVersion((await readPackageJson()).version ?? "unknown");
-}
-
-//#endregion
 //#region src/cli/shared/secret-file.ts
 const DIR_MODE = 448;
 const FILE_MODE = 384;
@@ -85,5 +60,5 @@ function tightenSecretFilePermissions(filePath) {
 }
 
 //#endregion
-export { userAgentFromVersion as a, userAgent as i, tightenSecretFilePermissions as n, writeSecretFile as r, ensureSecretDir as t };
-//# sourceMappingURL=secret-file-VSVGy1V0.mjs.map
+export { tightenSecretFilePermissions as n, writeSecretFile as r, ensureSecretDir as t };
+//# sourceMappingURL=secret-file-DBqZhjFQ.mjs.map

package/dist/{secret-file-VSVGy1V0.mjs.map → secret-file-DBqZhjFQ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"secret-file-VSVGy1V0.mjs","names":[],"sources":["../src/cli/shared/user-agent.ts","../src/cli/shared/secret-file.ts"],"sourcesContent":["import { readPackageJson } from \"./package-json\";\n\n/**\n * Build the User-Agent string from an already-known SDK version, without\n * touching the filesystem. Use this when the caller has resolved the version\n * (e.g. crash reporting already reads `package.json`) to avoid a redundant read.\n * @param version - SDK version string\n * @returns User-Agent header value\n */\nexport function userAgentFromVersion(version: string): string {\n  return `tailor-sdk/${version}`;\n}\n\n/**\n * Build the User-Agent string for CLI requests.\n *\n * Lives in its own module (rather than `client.ts`) so callers that only need\n * the UA — e.g. crash reporting — do not pull in the operator client's heavy\n * OAuth2/Connect/Protobuf dependencies, and so importing it never forms a cycle.\n * @returns User-Agent header value\n */\nexport async function userAgent() {\n  const packageJson = await readPackageJson();\n  return userAgentFromVersion(packageJson.version ?? \"unknown\");\n}\n","import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\n\nconst DIR_MODE = 0o700;\nconst FILE_MODE = 0o600;\n\n/**\n * Best-effort chmod that only fires when the current mode differs from the\n * target. No-op on Windows (where POSIX mode bits are advisory and ACLs\n * govern access) and on missing paths / permission errors.\n * @param target - Path to chmod\n * @param mode - Desired POSIX mode bits\n */\nfunction chmodIfDifferent(target: string, mode: number): void {\n  if (process.platform === \"win32\") return;\n  try {\n    if ((fs.statSync(target).mode & 0o777) !== mode) {\n      fs.chmodSync(target, mode);\n    }\n  } catch {\n    // Missing path or permission error — best-effort.\n  }\n}\n\n/**\n * Write a file that may contain secrets with restrictive permissions.\n * Creates the parent directory with 0o700 and the file with 0o600 on POSIX\n * systems so other users on the host cannot read access tokens, refresh\n * tokens, or crash report payloads. On Windows the POSIX mode bits are\n * effectively ignored and ACLs govern access, so the chmod calls are\n * best-effort and silently skipped.\n * @param filePath - Absolute path to write\n * @param content - File content\n */\nexport function writeSecretFile(filePath: string, content: string | Buffer): void {\n  ensureSecretDir(path.dirname(filePath));\n  fs.writeFileSync(filePath, content, { mode: FILE_MODE });\n  chmodIfDifferent(filePath, FILE_MODE);\n}\n\n/**\n * Ensure a directory exists with 0o700 permissions on POSIX systems.\n * `mkdirSync({ recursive: true })` does not chmod existing directories,\n * so this also tightens permissions on directories that were previously\n * created with looser modes.\n * @param dir - Directory path\n */\nexport function ensureSecretDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: DIR_MODE });\n  chmodIfDifferent(dir, DIR_MODE);\n}\n\n/**\n * Tighten an existing file and its parent directory to secret-file modes\n * (0o600 / 0o700) if they are looser. Used by read paths that may not\n * trigger a subsequent write, so that legacy world-readable files are\n * still secured the next time the CLI runs. Silent no-op on Windows and\n * on missing files / permission errors.\n * @param filePath - Absolute path that should be 0o600 and live under a 0o700 directory\n */\nexport function tightenSecretFilePermissions(filePath: string): void {\n  chmodIfDifferent(filePath, FILE_MODE);\n  chmodIfDifferent(path.dirname(filePath), DIR_MODE);\n}\n"],"mappings":";;;;;;;;;;;;AASA,SAAgB,qBAAqB,SAAyB;CAC5D,OAAO,cAAc;AACvB;;;;;;;;;AAUA,eAAsB,YAAY;CAEhC,OAAO,sBAAqB,MADF,gBAAgB,EACH,CAAC,WAAW,SAAS;AAC9D;;;;ACrBA,MAAM,WAAW;AACjB,MAAM,YAAY;;;;;;;;AASlB,SAAS,iBAAiB,QAAgB,MAAoB;CAC5D,IAAI,QAAQ,aAAa,SAAS;CAClC,IAAI;EACF,KAAK,GAAG,SAAS,MAAM,CAAC,CAAC,OAAO,SAAW,MACzC,GAAG,UAAU,QAAQ,IAAI;CAE7B,QAAQ,CAER;AACF;;;;;;;;;;;AAYA,SAAgB,gBAAgB,UAAkB,SAAgC;CAChF,gBAAgB,KAAK,QAAQ,QAAQ,CAAC;CACtC,GAAG,cAAc,UAAU,SAAS,EAAE,MAAM,UAAU,CAAC;CACvD,iBAAiB,UAAU,SAAS;AACtC;;;;;;;;AASA,SAAgB,gBAAgB,KAAmB;CACjD,GAAG,UAAU,KAAK;EAAE,WAAW;EAAM,MAAM;CAAS,CAAC;CACrD,iBAAiB,KAAK,QAAQ;AAChC;;;;;;;;;AAUA,SAAgB,6BAA6B,UAAwB;CACnE,iBAAiB,UAAU,SAAS;CACpC,iBAAiB,KAAK,QAAQ,QAAQ,GAAG,QAAQ;AACnD"}
+{"version":3,"file":"secret-file-DBqZhjFQ.mjs","names":[],"sources":["../src/cli/shared/secret-file.ts"],"sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\n\nconst DIR_MODE = 0o700;\nconst FILE_MODE = 0o600;\n\n/**\n * Best-effort chmod that only fires when the current mode differs from the\n * target. No-op on Windows (where POSIX mode bits are advisory and ACLs\n * govern access) and on missing paths / permission errors.\n * @param target - Path to chmod\n * @param mode - Desired POSIX mode bits\n */\nfunction chmodIfDifferent(target: string, mode: number): void {\n  if (process.platform === \"win32\") return;\n  try {\n    if ((fs.statSync(target).mode & 0o777) !== mode) {\n      fs.chmodSync(target, mode);\n    }\n  } catch {\n    // Missing path or permission error — best-effort.\n  }\n}\n\n/**\n * Write a file that may contain secrets with restrictive permissions.\n * Creates the parent directory with 0o700 and the file with 0o600 on POSIX\n * systems so other users on the host cannot read access tokens, refresh\n * tokens, or crash report payloads. On Windows the POSIX mode bits are\n * effectively ignored and ACLs govern access, so the chmod calls are\n * best-effort and silently skipped.\n * @param filePath - Absolute path to write\n * @param content - File content\n */\nexport function writeSecretFile(filePath: string, content: string | Buffer): void {\n  ensureSecretDir(path.dirname(filePath));\n  fs.writeFileSync(filePath, content, { mode: FILE_MODE });\n  chmodIfDifferent(filePath, FILE_MODE);\n}\n\n/**\n * Ensure a directory exists with 0o700 permissions on POSIX systems.\n * `mkdirSync({ recursive: true })` does not chmod existing directories,\n * so this also tightens permissions on directories that were previously\n * created with looser modes.\n * @param dir - Directory path\n */\nexport function ensureSecretDir(dir: string): void {\n  fs.mkdirSync(dir, { recursive: true, mode: DIR_MODE });\n  chmodIfDifferent(dir, DIR_MODE);\n}\n\n/**\n * Tighten an existing file and its parent directory to secret-file modes\n * (0o600 / 0o700) if they are looser. Used by read paths that may not\n * trigger a subsequent write, so that legacy world-readable files are\n * still secured the next time the CLI runs. Silent no-op on Windows and\n * on missing files / permission errors.\n * @param filePath - Absolute path that should be 0o600 and live under a 0o700 directory\n */\nexport function tightenSecretFilePermissions(filePath: string): void {\n  chmodIfDifferent(filePath, FILE_MODE);\n  chmodIfDifferent(path.dirname(filePath), DIR_MODE);\n}\n"],"mappings":";;;;AAGA,MAAM,WAAW;AACjB,MAAM,YAAY;;;;;;;;AASlB,SAAS,iBAAiB,QAAgB,MAAoB;CAC5D,IAAI,QAAQ,aAAa,SAAS;CAClC,IAAI;EACF,KAAK,GAAG,SAAS,MAAM,CAAC,CAAC,OAAO,SAAW,MACzC,GAAG,UAAU,QAAQ,IAAI;CAE7B,QAAQ,CAER;AACF;;;;;;;;;;;AAYA,SAAgB,gBAAgB,UAAkB,SAAgC;CAChF,gBAAgB,KAAK,QAAQ,QAAQ,CAAC;CACtC,GAAG,cAAc,UAAU,SAAS,EAAE,MAAM,UAAU,CAAC;CACvD,iBAAiB,UAAU,SAAS;AACtC;;;;;;;;AASA,SAAgB,gBAAgB,KAAmB;CACjD,GAAG,UAAU,KAAK;EAAE,WAAW;EAAM,MAAM;CAAS,CAAC;CACrD,iBAAiB,KAAK,QAAQ;AAChC;;;;;;;;;AAUA,SAAgB,6BAA6B,UAAwB;CACnE,iBAAiB,UAAU,SAAS;CACpC,iBAAiB,KAAK,QAAQ,QAAQ,GAAG,QAAQ;AACnD"}

package/dist/{secretmanager-Bd45j7an.mjs → secretmanager-IY4UvinW.mjs}

@@ -30,29 +30,38 @@ const SECRET_STORE = Symbol("tailorSecretStore");
 * inherited (cloned) from the currently-installed mock on acquisition and
 * restored on dispose, so secrets seeded outside the test survive across
 * `using` scopes while per-test `setSecrets()` overrides stay isolated.
+* @param options - Initial Secret Manager fixtures
 * @returns Disposable SecretManager mock control object
 * @example
 * ```typescript
 * import { mockSecretmanager } from "@tailor-platform/sdk/vitest";
 *
 * test("reads secrets from vault", async () => {
-*   using sm = mockSecretmanager();
-*   sm.setSecrets({ "my-vault": { API_KEY: "sk-123" } });
+*   using sm = mockSecretmanager({ secrets: { "my-vault": { API_KEY: "sk-123" } } });
+*   sm.setSecret("my-vault", "API_KEY", "replacement");
 *   // …
 * });
 * ```
 */
-function mockSecretmanager() {
+function mockSecretmanager(options = {}) {
 	const root = tailorRoot();
 	const prev = root.secretmanager;
 	const holder = { store: structuredClone(prev?.[SECRET_STORE]?.store ?? {}) };
-	const getSecret = vi.fn(async (vault, name) => holder.store[vault]?.[name]);
-	const getSecrets = vi.fn(async (vault, names) => {
+	for (const [vault, secrets] of Object.entries(options.secrets ?? {})) holder.store[vault] = {
+		...holder.store[vault],
+		...secrets
+	};
+	async function defaultGetSecret(vault, name) {
+		return holder.store[vault]?.[name];
+	}
+	async function defaultGetSecrets(vault, names) {
 		const vaultData = holder.store[vault] ?? {};
 		const result = {};
 		for (const name of names) if (name in vaultData) result[name] = assertDefined(vaultData[name], `vault entry missing for: ${name}`);
 		return result;
-	});
+	}
+	const getSecret = vi.fn(defaultGetSecret);
+	const getSecrets = vi.fn(defaultGetSecrets);
 	root.secretmanager = {
 		getSecret,
 		getSecrets,
@@ -66,6 +75,24 @@ function mockSecretmanager() {
 		setSecrets(secrets) {
 			holder.store = secrets;
 		},
+		setSecret(vault, name, value) {
+			holder.store = {
+				...holder.store,
+				[vault]: {
+					...holder.store[vault],
+					[name]: value
+				}
+			};
+		},
+		mergeSecrets(vault, secrets) {
+			holder.store = {
+				...holder.store,
+				[vault]: {
+					...holder.store[vault],
+					...secrets
+				}
+			};
+		},
 		get calls() {
 			return [...getSecret.mock.calls.map((args, i) => ({
 				order: getSecret.mock.invocationCallOrder[i] ?? 0,
@@ -83,10 +110,16 @@ function mockSecretmanager() {
 				}
 			}))].toSorted((a, b) => a.order - b.order).map((e) => e.call);
 		},
-		reset() {
-			holder.store = {};
+		clear() {
 			getSecret.mockClear();
 			getSecrets.mockClear();
+		},
+		reset() {
+			holder.store = {};
+			getSecret.mockReset();
+			getSecret.mockImplementation(defaultGetSecret);
+			getSecrets.mockReset();
+			getSecrets.mockImplementation(defaultGetSecrets);
 		}
 	}, () => {
 		root.secretmanager = prev;
@@ -95,4 +128,4 @@ function mockSecretmanager() {
 
 //#endregion
 export { withDispose as i, tailorRoot as n, tailordbRoot as r, mockSecretmanager as t };
-//# sourceMappingURL=secretmanager-Bd45j7an.mjs.map
+//# sourceMappingURL=secretmanager-IY4UvinW.mjs.map

package/dist/secretmanager-IY4UvinW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretmanager-IY4UvinW.mjs","names":[],"sources":["../src/vitest/mocks/shared.ts","../src/vitest/mocks/secretmanager.ts"],"sourcesContent":["// ---------------------------------------------------------------------------\n// Shared helpers\n// ---------------------------------------------------------------------------\n\n// Attach a non-enumerable `Symbol.dispose` to a facade so it works with `using`.\nexport function withDispose<T extends object>(facade: T, dispose: () => void): T & Disposable {\n  Object.defineProperty(facade, Symbol.dispose, {\n    value: dispose,\n    enumerable: false,\n    writable: true,\n    configurable: true,\n  });\n  return facade as T & Disposable;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function tailorRoot(): Record<string, any> {\n  const g = globalThis as Record<string, unknown>;\n  if (!g.tailor) {\n    // Ensure the container (and the always-present context stub) exists even if\n    // the base globals were not installed (e.g. a unit test that only acquires\n    // a single mock without the tailor-runtime environment).\n    g.tailor = { context: { getInvoker: () => null } };\n  }\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  return g.tailor as Record<string, any>;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function tailordbRoot(): Record<string, any> {\n  const g = globalThis as Record<string, unknown>;\n  if (!g.tailordb) {\n    g.tailordb = {};\n  }\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  return g.tailordb as Record<string, any>;\n}\n","import { vi } from \"vitest\";\nimport { assertDefined } from \"#/utils/assert\";\nimport { tailorRoot, withDispose } from \"./shared\";\n\ninterface SecretCall {\n  method: \"getSecret\" | \"getSecrets\";\n  vault: string;\n  name?: string;\n  names?: readonly string[];\n}\n\n/** Initial fixtures for a Secret Manager mock. */\nexport interface MockSecretmanagerOptions {\n  /** Secrets to merge over fixtures inherited from the currently installed mock. */\n  secrets?: Record<string, Record<string, string>>;\n}\n\n// ---------------------------------------------------------------------------\n// SecretManager Mock\n// ---------------------------------------------------------------------------\n\n// Hidden accessor key used to inherit the previous scope's secret store on\n// acquisition (so secrets seeded once outside tests — e.g. from tailor.config.ts\n// via setup.ts — remain visible) while still isolating per-test overrides.\nconst SECRET_STORE = Symbol(\"tailorSecretStore\");\n\n/**\n * Acquire a disposable mock for `tailor.secretmanager`. The secret store is\n * inherited (cloned) from the currently-installed mock on acquisition and\n * restored on dispose, so secrets seeded outside the test survive across\n * `using` scopes while per-test `setSecrets()` overrides stay isolated.\n * @param options - Initial Secret Manager fixtures\n * @returns Disposable SecretManager mock control object\n * @example\n * ```typescript\n * import { mockSecretmanager } from \"@tailor-platform/sdk/vitest\";\n *\n * test(\"reads secrets from vault\", async () => {\n *   using sm = mockSecretmanager({ secrets: { \"my-vault\": { API_KEY: \"sk-123\" } } });\n *   sm.setSecret(\"my-vault\", \"API_KEY\", \"replacement\");\n *   // …\n * });\n * ```\n */\nexport function mockSecretmanager(options: MockSecretmanagerOptions = {}) {\n  const root = tailorRoot();\n  const prev = root.secretmanager;\n\n  const holder: { store: Record<string, Record<string, string>> } = {\n    // prior mock state may be absent\n    // oxlint-disable-next-line typescript/no-unnecessary-condition\n    store: structuredClone((prev?.[SECRET_STORE]?.store as typeof holder.store) ?? {}),\n  };\n  for (const [vault, secrets] of Object.entries(options.secrets ?? {})) {\n    holder.store[vault] = { ...holder.store[vault], ...secrets };\n  }\n\n  async function defaultGetSecret(vault: string, name: string): Promise<string | undefined> {\n    return holder.store[vault]?.[name];\n  }\n\n  async function defaultGetSecrets<const T extends readonly string[]>(\n    vault: string,\n    names: T,\n  ): Promise<Partial<Record<T[number], string>>> {\n    const vaultData = holder.store[vault] ?? {};\n    const result: Record<string, string> = {};\n    for (const name of names) {\n      if (name in vaultData) {\n        result[name] = assertDefined(vaultData[name], `vault entry missing for: ${name}`);\n      }\n    }\n    return result as Partial<Record<T[number], string>>;\n  }\n\n  const getSecret = vi.fn(defaultGetSecret);\n  const getSecrets = vi.fn(defaultGetSecrets);\n\n  root.secretmanager = { getSecret, getSecrets, [SECRET_STORE]: holder };\n\n  const facade = {\n    /** The `getSecret` `vi.fn`. */\n    getSecret,\n    /** The `getSecrets` `vi.fn`. */\n    getSecrets,\n\n    setSecrets(secrets: Record<string, Record<string, string>>): void {\n      holder.store = secrets;\n    },\n\n    setSecret(vault: string, name: string, value: string): void {\n      holder.store = {\n        ...holder.store,\n        [vault]: { ...holder.store[vault], [name]: value },\n      };\n    },\n\n    mergeSecrets(vault: string, secrets: Record<string, string>): void {\n      holder.store = {\n        ...holder.store,\n        [vault]: { ...holder.store[vault], ...secrets },\n      };\n    },\n\n    get calls(): SecretCall[] {\n      // Merge both methods' calls back into chronological order via vi.fn's\n      // global invocationCallOrder, so a test mixing getSecret/getSecrets sees\n      // them in the order they actually ran (not all getSecret, then all getSecrets).\n      const entries: { order: number; call: SecretCall }[] = [\n        ...getSecret.mock.calls.map((args, i) => ({\n          order: getSecret.mock.invocationCallOrder[i] ?? 0,\n          call: { method: \"getSecret\" as const, vault: args[0] as string, name: args[1] as string },\n        })),\n        ...getSecrets.mock.calls.map((args, i) => ({\n          order: getSecrets.mock.invocationCallOrder[i] ?? 0,\n          call: {\n            method: \"getSecrets\" as const,\n            vault: args[0] as string,\n            names: args[1] as readonly string[],\n          },\n        })),\n      ];\n      return entries.toSorted((a, b) => a.order - b.order).map((e) => e.call);\n    },\n\n    clear(): void {\n      getSecret.mockClear();\n      getSecrets.mockClear();\n    },\n\n    reset(): void {\n      holder.store = {};\n      getSecret.mockReset();\n      getSecret.mockImplementation(defaultGetSecret);\n      getSecrets.mockReset();\n      getSecrets.mockImplementation(defaultGetSecrets);\n    },\n  };\n\n  return withDispose(facade, () => {\n    root.secretmanager = prev;\n  });\n}\n"],"mappings":";;;;AAKA,SAAgB,YAA8B,QAAW,SAAqC;CAC5F,OAAO,eAAe,QAAQ,OAAO,SAAS;EAC5C,OAAO;EACP,YAAY;EACZ,UAAU;EACV,cAAc;CAChB,CAAC;CACD,OAAO;AACT;AAGA,SAAgB,aAAkC;CAChD,MAAM,IAAI;CACV,IAAI,CAAC,EAAE,QAIL,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,KAAK,EAAE;CAGnD,OAAO,EAAE;AACX;AAGA,SAAgB,eAAoC;CAClD,MAAM,IAAI;CACV,IAAI,CAAC,EAAE,UACL,EAAE,WAAW,CAAC;CAGhB,OAAO,EAAE;AACX;;;;ACZA,MAAM,eAAe,OAAO,mBAAmB;;;;;;;;;;;;;;;;;;;AAoB/C,SAAgB,kBAAkB,UAAoC,CAAC,GAAG;CACxE,MAAM,OAAO,WAAW;CACxB,MAAM,OAAO,KAAK;CAElB,MAAM,SAA4D,EAGhE,OAAO,gBAAiB,OAAO,aAAa,EAAE,SAAiC,CAAC,CAAC,EACnF;CACA,KAAK,MAAM,CAAC,OAAO,YAAY,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,GACjE,OAAO,MAAM,SAAS;EAAE,GAAG,OAAO,MAAM;EAAQ,GAAG;CAAQ;CAG7D,eAAe,iBAAiB,OAAe,MAA2C;EACxF,OAAO,OAAO,MAAM,MAAM,GAAG;CAC/B;CAEA,eAAe,kBACb,OACA,OAC6C;EAC7C,MAAM,YAAY,OAAO,MAAM,UAAU,CAAC;EAC1C,MAAM,SAAiC,CAAC;EACxC,KAAK,MAAM,QAAQ,OACjB,IAAI,QAAQ,WACV,OAAO,QAAQ,cAAc,UAAU,OAAO,4BAA4B,MAAM;EAGpF,OAAO;CACT;CAEA,MAAM,YAAY,GAAG,GAAG,gBAAgB;CACxC,MAAM,aAAa,GAAG,GAAG,iBAAiB;CAE1C,KAAK,gBAAgB;EAAE;EAAW;GAAa,eAAe;CAAO;CA6DrE,OAAO,YAAY;;EAzDjB;;EAEA;EAEA,WAAW,SAAuD;GAChE,OAAO,QAAQ;EACjB;EAEA,UAAU,OAAe,MAAc,OAAqB;GAC1D,OAAO,QAAQ;IACb,GAAG,OAAO;KACT,QAAQ;KAAE,GAAG,OAAO,MAAM;MAAS,OAAO;IAAM;GACnD;EACF;EAEA,aAAa,OAAe,SAAuC;GACjE,OAAO,QAAQ;IACb,GAAG,OAAO;KACT,QAAQ;KAAE,GAAG,OAAO,MAAM;KAAQ,GAAG;IAAQ;GAChD;EACF;EAEA,IAAI,QAAsB;GAkBxB,OAAO,CAbL,GAAG,UAAU,KAAK,MAAM,KAAK,MAAM,OAAO;IACxC,OAAO,UAAU,KAAK,oBAAoB,MAAM;IAChD,MAAM;KAAE,QAAQ;KAAsB,OAAO,KAAK;KAAc,MAAM,KAAK;IAAa;GAC1F,EAAE,GACF,GAAG,WAAW,KAAK,MAAM,KAAK,MAAM,OAAO;IACzC,OAAO,WAAW,KAAK,oBAAoB,MAAM;IACjD,MAAM;KACJ,QAAQ;KACR,OAAO,KAAK;KACZ,OAAO,KAAK;IACd;GACF,EAAE,CAES,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;EACxE;EAEA,QAAc;GACZ,UAAU,UAAU;GACpB,WAAW,UAAU;EACvB;EAEA,QAAc;GACZ,OAAO,QAAQ,CAAC;GAChB,UAAU,UAAU;GACpB,UAAU,mBAAmB,gBAAgB;GAC7C,WAAW,UAAU;GACrB,WAAW,mBAAmB,iBAAiB;EACjD;CAGsB,SAAS;EAC/B,KAAK,gBAAgB;CACvB,CAAC;AACH"}

package/dist/seed/index.d.mts

@@ -1,8 +1,9 @@
 import { ForeignKeyDefinition, IndexDefinition, defineSchema } from "@toiroakr/lines-db";
-
 //#region src/seed/index.d.ts
 type ValidateSeedDataOptions = {
-  /** Resolved absolute path to a data directory or a .jsonl file */path: string; /** Show verbose error output */
+  /** Resolved absolute path to a data directory or a .jsonl file */
+  path: string;
+  /** Show verbose error output */
   verbose?: boolean;
 };
 type ValidateSeedResult = {

package/dist/{seed-fm0LeYP2.mjs → seed-DFFigL8V.mjs}

@@ -1,5 +1,6 @@
 import { t as assertDefined } from "./assert-DBxo8jPo.mjs";
 import { t as multiline } from "./multiline-sfHpTZZK.mjs";
+import { t as isPluginGeneratedType } from "./type-source-DH_LH20p.mjs";
 import * as path from "pathe";
 
 //#region src/plugin/builtin/seed/idp-user-processor.ts
@@ -155,17 +156,6 @@ function generateIdpUserSchemaFile(options) {
     `;
 }
 
-//#endregion
-//#region src/parser/service/tailordb/type-source.ts
-/**
-* Checks if a type source is generated by a plugin.
-* @param source - The type source entry to check.
-* @returns True if the source was generated by a plugin.
-*/
-function isPluginGeneratedType(source) {
-	return source.pluginId !== void 0;
-}
-
 //#endregion
 //#region src/plugin/builtin/seed/lines-db-processor.ts
 /**
@@ -1177,5 +1167,5 @@ function seedPlugin(options) {
 }
 
 //#endregion
-export { seedPlugin as n, isPluginGeneratedType as r, SeedGeneratorID as t };
-//# sourceMappingURL=seed-fm0LeYP2.mjs.map
+export { seedPlugin as n, SeedGeneratorID as t };
+//# sourceMappingURL=seed-DFFigL8V.mjs.map