@tailor-platform/sdk 1.78.0 → 1.80.0

package/dist/vitest/mocks/workflow.d.mts

@@ -1,18 +1,12 @@
 import { TailorEnv } from "../../runtime/types.mjs";
-import { TriggerJobFunctionOptions } from "../../runtime/workflow.mjs";
+import { StartJobFunctionOptions, StartWorkflowOptions } from "../../runtime/workflow.mjs";
 import { WorkflowJob } from "../../configure/services/workflow/job.mjs";
 import { Workflow } from "../../configure/services/workflow/workflow.mjs";
 import { WaitPointInstance } from "../../configure/services/workflow/wait-point.mjs";
 import { Mock } from "vitest";
 //#region src/vitest/mocks/workflow.d.ts
-type JobHandler = (jobName: string, args: unknown, options?: TriggerJobFunctionOptions) => unknown;
-type TriggerWorkflowOptions = {
-  authInvoker?: {
-    namespace: string;
-    machineUserName: string;
-  };
-};
-type TriggerHandlerFn = (workflowName: string, args: unknown, options?: TriggerWorkflowOptions) => string;
+type JobHandler = (jobName: string, args: unknown, options?: StartJobFunctionOptions) => unknown;
+type TriggerHandlerFn = (workflowName: string, args: unknown, options?: StartWorkflowOptions) => string;
 type ResumeHandlerFn = (executionId: string) => string;
 type WaitHandlerFn = (key: string, payload: unknown) => unknown;
 type ResolveHandler = (executionId: string, key: string, callback: (payload: unknown) => unknown) => unknown | Promise<unknown>;
@@ -23,12 +17,17 @@ type SetWaitHandler = {
 interface TriggeredJob {
   jobName: string;
   args: unknown;
-  options?: TriggerJobFunctionOptions;
+  options?: StartJobFunctionOptions;
 }
 type WaitPayload<Payload> = [Payload] extends [undefined] ? undefined : Payload;
 /**
  * Acquire a disposable mock for workflow operations (`tailor.workflow`).
  * Restored on dispose.
+ *
+ * Canonical names (`startWorkflow`, `startJobFunction`, `resumeWorkflowExecution`)
+ * and their frozen aliases (`triggerWorkflow`, `triggerJobFunction`, `resumeWorkflow`)
+ * share the same underlying `vi.fn`, so calls through either name are recorded
+ * once and handlers configured on either name apply to both.
  * @returns Disposable workflow mock control object
  * @example
  * ```typescript
@@ -44,11 +43,26 @@ type WaitPayload<Payload> = [Payload] extends [undefined] ? undefined : Payload;
  * ```
  */
 declare function mockWorkflow(): {
-  /** The `triggerJobFunction` `vi.fn`. */
-  triggerJobFunction: Mock<(jobName: string, args?: unknown, _options?: TriggerJobFunctionOptions) => unknown>;
-  /** The `triggerWorkflow` `vi.fn`. */
-  triggerWorkflow: Mock<(workflowName: string, args?: unknown, _options?: TriggerWorkflowOptions) => Promise<string>>;
-  /** The `resumeWorkflow` `vi.fn`. */
+  /** The `startJobFunction` `vi.fn`. */
+  startJobFunction: Mock<(jobName: string, args?: unknown, _options?: StartJobFunctionOptions) => unknown>;
+  /**
+   * Frozen alias of `startJobFunction` (same `vi.fn` reference).
+   * @deprecated Use `startJobFunction` instead.
+   */
+  triggerJobFunction: Mock<(jobName: string, args?: unknown, _options?: StartJobFunctionOptions) => unknown>;
+  /** The `startWorkflow` `vi.fn`. */
+  startWorkflow: Mock<(workflowName: string, args?: unknown, _options?: StartWorkflowOptions) => Promise<string>>;
+  /**
+   * Frozen alias of `startWorkflow` (same `vi.fn` reference).
+   * @deprecated Use `startWorkflow` instead.
+   */
+  triggerWorkflow: Mock<(workflowName: string, args?: unknown, _options?: StartWorkflowOptions) => Promise<string>>;
+  /** The `resumeWorkflowExecution` `vi.fn`. */
+  resumeWorkflowExecution: Mock<(executionId: string) => Promise<string>>;
+  /**
+   * Frozen alias of `resumeWorkflowExecution` (same `vi.fn` reference).
+   * @deprecated Use `resumeWorkflowExecution` instead.
+   */
   resumeWorkflow: Mock<(executionId: string) => Promise<string>>;
   /** The `wait` `vi.fn`. */
   wait: Mock<(_key: string, _payload?: unknown) => unknown>;

package/dist/vitest/setup.mjs

@@ -1,4 +1,4 @@
-import { t as RUNTIME_FLAG_KEY } from "../globals-CvizbGLY.mjs";
+import { t as RUNTIME_FLAG_KEY } from "../globals-B-n_3uYu.mjs";
 import { t as mockSecretmanager } from "../secretmanager-IY4UvinW.mjs";
 import { pathToFileURL } from "node:url";
 import { afterEach, beforeAll, beforeEach } from "vitest";

package/dist/workflow-CkIDJpdg.mjs

@@ -0,0 +1,69 @@
+import { t as __exportAll } from "./rolldown-runtime-DXywRVcq.mjs";
+
+//#region src/runtime/workflow.ts
+var workflow_exports = /* @__PURE__ */ __exportAll({
+	resolve: () => resolve,
+	resumeWorkflow: () => resumeWorkflow,
+	resumeWorkflowExecution: () => resumeWorkflowExecution,
+	startJobFunction: () => startJobFunction,
+	startWorkflow: () => startWorkflow,
+	triggerJobFunction: () => triggerJobFunction,
+	triggerWorkflow: () => triggerWorkflow,
+	wait: () => wait
+});
+const api = () => globalThis.tailor.workflow;
+/**
+* See {@link TailorWorkflowAPI.startWorkflow}.
+* @param args - Forwarded to {@link TailorWorkflowAPI.startWorkflow}
+* @returns The execution ID of the started workflow
+*/
+const startWorkflow = (...args) => api().startWorkflow(...args);
+/**
+* Frozen alias for {@link startWorkflow}. Kept for backward compatibility.
+* @deprecated Use {@link startWorkflow} instead.
+* @param args - Forwarded to {@link TailorWorkflowAPI.triggerWorkflow}
+* @returns The execution ID of the triggered workflow
+*/
+const triggerWorkflow = (...args) => api().triggerWorkflow(...args);
+/**
+* See {@link TailorWorkflowAPI.resumeWorkflowExecution}.
+* @param args - Forwarded to {@link TailorWorkflowAPI.resumeWorkflowExecution}
+* @returns The execution ID of the resumed workflow
+*/
+const resumeWorkflowExecution = (...args) => api().resumeWorkflowExecution(...args);
+/**
+* Frozen alias for {@link resumeWorkflowExecution}. Kept for backward compatibility.
+* @deprecated Use {@link resumeWorkflowExecution} instead.
+* @param args - Forwarded to {@link TailorWorkflowAPI.resumeWorkflow}
+* @returns The execution ID of the resumed workflow
+*/
+const resumeWorkflow = (...args) => api().resumeWorkflow(...args);
+/**
+* See {@link TailorWorkflowAPI.startJobFunction}.
+* @param args - Forwarded to {@link TailorWorkflowAPI.startJobFunction}
+* @returns The job's return value
+*/
+const startJobFunction = (...args) => api().startJobFunction(...args);
+/**
+* Frozen alias for {@link startJobFunction}. Kept for backward compatibility.
+* @deprecated Use {@link startJobFunction} instead.
+* @param args - Forwarded to {@link TailorWorkflowAPI.triggerJobFunction}
+* @returns The job's return value
+*/
+const triggerJobFunction = (...args) => api().triggerJobFunction(...args);
+/**
+* See {@link TailorWorkflowAPI.wait}.
+* @param args - Forwarded to {@link TailorWorkflowAPI.wait}
+* @returns The payload supplied by the corresponding `resolve` call
+*/
+const wait = (...args) => api().wait(...args);
+/**
+* See {@link TailorWorkflowAPI.resolve}.
+* @param args - Forwarded to {@link TailorWorkflowAPI.resolve}
+* @returns A promise that resolves once the resolve has been recorded
+*/
+const resolve = (...args) => api().resolve(...args);
+
+//#endregion
+export { startWorkflow as a, wait as c, startJobFunction as i, workflow_exports as l, resumeWorkflow as n, triggerJobFunction as o, resumeWorkflowExecution as r, triggerWorkflow as s, resolve as t };
+//# sourceMappingURL=workflow-CkIDJpdg.mjs.map

package/dist/workflow-CkIDJpdg.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-CkIDJpdg.mjs","names":[],"sources":["../src/runtime/workflow.ts"],"sourcesContent":["/**\n * Workflow utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.workflow` runtime API.\n * At runtime this delegates to `globalThis.tailor.workflow`. Use `mockWorkflow`\n * from `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n *\n * The canonical names (`startWorkflow`, `startJobFunction`,\n * `resumeWorkflowExecution`) mirror the public `tailor.v1` RPC vocabulary.\n * The pre-alignment names (`triggerWorkflow`, `triggerJobFunction`,\n * `resumeWorkflow`) are kept as frozen aliases that reference the same platform\n * implementations, so existing code continues to work unchanged.\n * @example\n * import { workflow } from \"@tailor-platform/sdk/runtime\";\n *\n * const executionId = await workflow.startWorkflow(\"myWorkflow\", { data: \"value\" });\n */\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n/**\n * Specifies the machine user that should be used to execute the workflow.\n * This allows workflows to run with specific authentication context.\n */\nexport interface AuthInvoker {\n  /** The namespace where the machine user is defined */\n  namespace: string;\n  /** The name of the machine user to use for workflow execution */\n  machineUserName: string;\n}\n\n/** Options for {@link startWorkflow}. */\nexport interface StartWorkflowOptions {\n  /** Optional authentication invoker to specify which machine user should execute the workflow */\n  authInvoker?: AuthInvoker;\n}\n\n/**\n * Frozen alias for {@link StartWorkflowOptions}. Kept for backward compatibility.\n * @deprecated Use {@link StartWorkflowOptions} instead.\n */\nexport type TriggerWorkflowOptions = StartWorkflowOptions;\n\ndeclare const executionPolicyKeyBrand: unique symbol;\n\n/**\n * A concrete runtime key produced by an execution policy instance — either an\n * exact-match policy's `.key`, or a wildcard policy's `.keyFor(suffix)` (see\n * `defineWorkflowExecutionPolicies`). Branded so an arbitrary string that\n * wasn't derived from a declared policy can't be passed as `executionPolicyKey`.\n */\nexport type ExecutionPolicyKey = string & { readonly [executionPolicyKeyBrand]: never };\n\n/** Options for {@link startJobFunction}. */\nexport interface StartJobFunctionOptions {\n  /**\n   * Execution policy key matched by the platform against the policies\n   * declared with `defineWorkflowExecutionPolicies` in `tailor.config.ts`.\n   */\n  executionPolicyKey?: ExecutionPolicyKey;\n}\n\n/**\n * Frozen alias for {@link StartJobFunctionOptions}. Kept for backward compatibility.\n * @deprecated Use {@link StartJobFunctionOptions} instead.\n */\nexport type TriggerJobFunctionOptions = StartJobFunctionOptions;\n\n/**\n * Platform API surface for `tailor.workflow`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.workflow`.\n *\n * Each method below is also re-exported as a top-level named export from this\n * module so callers can either `import * as workflow from\n * \"@tailor-platform/sdk/runtime/workflow\"` or pick individual methods.\n */\nexport interface TailorWorkflowAPI {\n  /**\n   * Starts a workflow and returns its execution ID.\n   *\n   * Canonical name that mirrors the `tailor.v1` RPC vocabulary.\n   * {@link triggerWorkflow} is a frozen alias that resolves to the same\n   * platform implementation.\n   * @param workflowName - Workflow name as defined in tailor.config\n   * @param args - Arguments forwarded to the workflow's main job\n   * @param options - Optional start options (e.g. `authInvoker`)\n   * @returns The execution ID of the started workflow\n   */\n  startWorkflow(workflowName: string, args?: any, options?: StartWorkflowOptions): Promise<string>;\n\n  /**\n   * Frozen alias for {@link startWorkflow}. Kept for backward compatibility.\n   * @deprecated Use {@link startWorkflow} instead.\n   */\n  triggerWorkflow(\n    workflowName: string,\n    args?: any,\n    options?: TriggerWorkflowOptions,\n  ): Promise<string>;\n\n  /**\n   * Resumes a failed or pending-retry workflow execution and returns its execution ID.\n   *\n   * Canonical name that mirrors the `tailor.v1` RPC vocabulary.\n   * {@link resumeWorkflow} is a frozen alias that resolves to the same\n   * platform implementation.\n   * @param executionId - The execution to resume\n   * @returns The execution ID of the resumed workflow\n   */\n  resumeWorkflowExecution(executionId: string): Promise<string>;\n\n  /**\n   * Frozen alias for {@link resumeWorkflowExecution}. Kept for backward compatibility.\n   * @deprecated Use {@link resumeWorkflowExecution} instead.\n   */\n  resumeWorkflow(executionId: string): Promise<string>;\n\n  /**\n   * Starts a job function and returns its result.\n   *\n   * Canonical name that mirrors the `tailor.v1` RPC vocabulary.\n   * {@link triggerJobFunction} is a frozen alias that resolves to the same\n   * platform implementation.\n   * @param jobName - Job name as defined in the workflow\n   * @param args - Arguments forwarded to the job\n   * @param options - Optional start options (e.g. `executionPolicyKey`)\n   * @returns The job's return value\n   */\n  startJobFunction(jobName: string, args?: any, options?: StartJobFunctionOptions): any;\n\n  /**\n   * Frozen alias for {@link startJobFunction}. Kept for backward compatibility.\n   * @deprecated Use {@link startJobFunction} instead.\n   */\n  triggerJobFunction(jobName: string, args?: any, options?: TriggerJobFunctionOptions): any;\n\n  /**\n   * Suspends the current workflow execution and waits for an external signal to resume.\n   * @param key - Wait point key\n   * @param payload - Optional payload to record with the wait point\n   * @returns The payload supplied by the corresponding `resolve` call\n   */\n  wait(key: string, payload?: any): any;\n\n  /**\n   * Resolves a waiting workflow execution, causing it to resume.\n   * @param executionId - The execution to resume\n   * @param key - Wait point key to resolve\n   * @param callback - Callback receiving the wait payload; its return value is forwarded to `wait`\n   * @returns A promise that resolves once the resolve has been recorded\n   */\n  resolve(executionId: string, key: string, callback: (waitPayload: any) => any): Promise<void>;\n}\n\nconst api = (): TailorWorkflowAPI =>\n  (globalThis as { tailor: { workflow: TailorWorkflowAPI } }).tailor.workflow;\n\n/**\n * See {@link TailorWorkflowAPI.startWorkflow}.\n * @param args - Forwarded to {@link TailorWorkflowAPI.startWorkflow}\n * @returns The execution ID of the started workflow\n */\nexport const startWorkflow: TailorWorkflowAPI[\"startWorkflow\"] = (...args) =>\n  api().startWorkflow(...args);\n\n/**\n * Frozen alias for {@link startWorkflow}. Kept for backward compatibility.\n * @deprecated Use {@link startWorkflow} instead.\n * @param args - Forwarded to {@link TailorWorkflowAPI.triggerWorkflow}\n * @returns The execution ID of the triggered workflow\n */\nexport const triggerWorkflow: TailorWorkflowAPI[\"triggerWorkflow\"] = (...args) =>\n  api().triggerWorkflow(...args);\n\n/**\n * See {@link TailorWorkflowAPI.resumeWorkflowExecution}.\n * @param args - Forwarded to {@link TailorWorkflowAPI.resumeWorkflowExecution}\n * @returns The execution ID of the resumed workflow\n */\nexport const resumeWorkflowExecution: TailorWorkflowAPI[\"resumeWorkflowExecution\"] = (...args) =>\n  api().resumeWorkflowExecution(...args);\n\n/**\n * Frozen alias for {@link resumeWorkflowExecution}. Kept for backward compatibility.\n * @deprecated Use {@link resumeWorkflowExecution} instead.\n * @param args - Forwarded to {@link TailorWorkflowAPI.resumeWorkflow}\n * @returns The execution ID of the resumed workflow\n */\nexport const resumeWorkflow: TailorWorkflowAPI[\"resumeWorkflow\"] = (...args) =>\n  api().resumeWorkflow(...args);\n\n/**\n * See {@link TailorWorkflowAPI.startJobFunction}.\n * @param args - Forwarded to {@link TailorWorkflowAPI.startJobFunction}\n * @returns The job's return value\n */\nexport const startJobFunction: TailorWorkflowAPI[\"startJobFunction\"] = (...args) =>\n  api().startJobFunction(...args);\n\n/**\n * Frozen alias for {@link startJobFunction}. Kept for backward compatibility.\n * @deprecated Use {@link startJobFunction} instead.\n * @param args - Forwarded to {@link TailorWorkflowAPI.triggerJobFunction}\n * @returns The job's return value\n */\nexport const triggerJobFunction: TailorWorkflowAPI[\"triggerJobFunction\"] = (...args) =>\n  api().triggerJobFunction(...args);\n\n/**\n * See {@link TailorWorkflowAPI.wait}.\n * @param args - Forwarded to {@link TailorWorkflowAPI.wait}\n * @returns The payload supplied by the corresponding `resolve` call\n */\nexport const wait: TailorWorkflowAPI[\"wait\"] = (...args) => api().wait(...args);\n\n/**\n * See {@link TailorWorkflowAPI.resolve}.\n * @param args - Forwarded to {@link TailorWorkflowAPI.resolve}\n * @returns A promise that resolves once the resolve has been recorded\n */\nexport const resolve: TailorWorkflowAPI[\"resolve\"] = (...args) => api().resolve(...args);\n"],"mappings":";;;;;;;;;;;;;AA0JA,MAAM,YACH,WAA2D,OAAO;;;;;;AAOrE,MAAa,iBAAqD,GAAG,SACnE,IAAI,CAAC,CAAC,cAAc,GAAG,IAAI;;;;;;;AAQ7B,MAAa,mBAAyD,GAAG,SACvE,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;;;;;;AAO/B,MAAa,2BAAyE,GAAG,SACvF,IAAI,CAAC,CAAC,wBAAwB,GAAG,IAAI;;;;;;;AAQvC,MAAa,kBAAuD,GAAG,SACrE,IAAI,CAAC,CAAC,eAAe,GAAG,IAAI;;;;;;AAO9B,MAAa,oBAA2D,GAAG,SACzE,IAAI,CAAC,CAAC,iBAAiB,GAAG,IAAI;;;;;;;AAQhC,MAAa,sBAA+D,GAAG,SAC7E,IAAI,CAAC,CAAC,mBAAmB,GAAG,IAAI;;;;;;AAOlC,MAAa,QAAmC,GAAG,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI;;;;;;AAO9E,MAAa,WAAyC,GAAG,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAI"}

package/docs/cli/application.md

@@ -133,6 +133,8 @@ tailor-sdk deploy --config apps/buyer/tailor.config.ts,apps/supplier/tailor.conf
 
 When multiple configs are provided, `deploy` creates or updates all configured services first, then updates the applications. This lets one application reference resources owned by another config with `external: true` during the same deploy.
 
+Each config's `files` and `ignores` patterns (see [Service Configuration](../configuration.md#service-configuration)) resolve relative to that config's own directory, not the directory you ran `deploy` from. For example, `apps/buyer/tailor.config.ts` declaring `files: ["db/**/*.ts"]` loads files from `apps/buyer/db/`, independent of where `apps/supplier/tailor.config.ts`'s patterns resolve. If a config's relative patterns match nothing under its own directory, the SDK falls back to the invocation directory and logs a warning (see [Service Configuration](../configuration.md#service-configuration) for details).
+
 **Migration Handling:**
 
 When migrations are configured (`db.tailordb.migration` in config), the `deploy` command automatically:
@@ -144,6 +146,10 @@ When migrations are configured (`db.tailordb.migration` in config), the `deploy`
 
 See [Automatic Migration Execution](../services/tailordb-migration.md#automatic-migration-execution) for details on automatic migration execution.
 
+**Concurrent Deploys:**
+
+Deploys that target the same workspace and application from the same project directory are serialized while secrets and auth connections are updated: one deploy proceeds and the other waits for it to finish. A deploy that cannot proceed within 5 minutes fails with an error, which normally means another deploy is still running. If a previous deploy was interrupted, the next deploy recovers automatically within about a minute. Deploys to different workspaces or applications are not affected.
+
 **Schema Check:**
 
 By default, `deploy` performs two verification steps:

package/docs/cli-reference.md

@@ -65,27 +65,27 @@ tailor-sdk deploy --env-file .env --env-file .env.production
 
 You can use environment variables to configure workspace and authentication:
 
-| Variable                                     | Description                                                                                                  |
-| -------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
-| `TAILOR_PLATFORM_WORKSPACE_ID`               | Workspace ID for deployment commands                                                                         |
-| `TAILOR_PLATFORM_ORGANIZATION_ID`            | Organization ID for organization commands                                                                    |
-| `TAILOR_PLATFORM_FOLDER_ID`                  | Folder ID for folder commands                                                                                |
-| `TAILOR_PLATFORM_TOKEN`                      | Authentication token (alternative to `login`)                                                                |
-| `TAILOR_TOKEN`                               | **Deprecated.** Use `TAILOR_PLATFORM_TOKEN` instead                                                          |
-| `TAILOR_PLATFORM_PROFILE`                    | Workspace profile name                                                                                       |
-| `TAILOR_PLATFORM_SDK_CONFIG_PATH`            | Path to SDK config file                                                                                      |
-| `TAILOR_PLATFORM_SDK_DTS_PATH`               | Output path for generated `tailor.d.ts` type definition file                                                 |
-| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_ID`     | Client ID for `login --machine-user`                                                                         |
-| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_SECRET` | Client secret for `login --machine-user`                                                                     |
-| `TAILOR_PLATFORM_MACHINE_USER_NAME`          | Default machine user name for `query`, `workflow start`, `function test-run`, `machineuser token`            |
-| `TAILOR_PLATFORM_URL`                        | Platform API base URL. Saved into profiles created with `profile create --platform-url`                      |
-| `TAILOR_PLATFORM_OAUTH2_CLIENT_ID`           | OAuth2 client ID for user login. Saved into profiles created with `profile create --oauth2-client-id`        |
-| `TAILOR_PLATFORM_CONSOLE_URL`                | Console base URL. Saved into profiles created with `profile create --console-url`                            |
-| `TAILOR_BUNDLE_CONCURRENCY`                  | Max concurrent bundle workers for `deploy` (resolvers/executors/workflows). Defaults to CPU count            |
-| `TAILOR_APPLY_CONCURRENCY`                   | Max concurrent unary platform RPCs during `apply`/`deploy` (streaming uploads are not gated). Defaults to 16 |
-| `VISUAL` / `EDITOR`                          | Preferred editor for commands that open files (e.g., `vim`, `code`, `nano`)                                  |
-| `TAILOR_CRASH_REPORTS_LOCAL`                 | Local crash log writing: `on` (default) or `off`                                                             |
-| `TAILOR_CRASH_REPORTS_REMOTE`                | Automatic crash report submission: `off` (default) or `on`                                                   |
+| Variable                                     | Description                                                                                           |
+| -------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
+| `TAILOR_PLATFORM_WORKSPACE_ID`               | Workspace ID for deployment commands                                                                  |
+| `TAILOR_PLATFORM_ORGANIZATION_ID`            | Organization ID for organization commands                                                             |
+| `TAILOR_PLATFORM_FOLDER_ID`                  | Folder ID for folder commands                                                                         |
+| `TAILOR_PLATFORM_TOKEN`                      | Authentication token (alternative to `login`)                                                         |
+| `TAILOR_TOKEN`                               | **Deprecated.** Use `TAILOR_PLATFORM_TOKEN` instead                                                   |
+| `TAILOR_PLATFORM_PROFILE`                    | Workspace profile name                                                                                |
+| `TAILOR_PLATFORM_SDK_CONFIG_PATH`            | Path to SDK config file                                                                               |
+| `TAILOR_PLATFORM_SDK_DTS_PATH`               | Output path for generated `tailor.d.ts` type definition file                                          |
+| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_ID`     | Client ID for `login --machine-user`                                                                  |
+| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_SECRET` | Client secret for `login --machine-user`                                                              |
+| `TAILOR_PLATFORM_MACHINE_USER_NAME`          | Default machine user name for `query`, `workflow start`, `function test-run`, `machineuser token`     |
+| `TAILOR_PLATFORM_URL`                        | Platform API base URL. Saved into profiles created with `profile create --platform-url`               |
+| `TAILOR_PLATFORM_OAUTH2_CLIENT_ID`           | OAuth2 client ID for user login. Saved into profiles created with `profile create --oauth2-client-id` |
+| `TAILOR_PLATFORM_CONSOLE_URL`                | Console base URL. Saved into profiles created with `profile create --console-url`                     |
+| `TAILOR_BUNDLE_CONCURRENCY`                  | Max concurrent bundle workers for `deploy` (resolvers/executors/workflows). Defaults to CPU count     |
+| `TAILOR_APPLY_CONCURRENCY`                   | Max concurrent platform RPCs during `apply`/`deploy`. Defaults to 16                                  |
+| `VISUAL` / `EDITOR`                          | Preferred editor for commands that open files (e.g., `vim`, `code`, `nano`)                           |
+| `TAILOR_CRASH_REPORTS_LOCAL`                 | Local crash log writing: `on` (default) or `off`                                                      |
+| `TAILOR_CRASH_REPORTS_REMOTE`                | Automatic crash report submission: `off` (default) or `on`                                            |
 
 ### Authentication Token Priority
 

package/docs/configuration.md

@@ -82,6 +82,8 @@ export default defineConfig({
 
 **ignores**: Glob patterns to exclude files. Optional. By default, `**/*.test.ts` and `**/*.spec.ts` are automatically ignored. If you explicitly specify `ignores`, the default patterns will not be applied. Use `ignores: []` to include all files including test files.
 
+**Pattern resolution**: `files` and `ignores` patterns are resolved relative to the directory of the `tailor.config.ts` file that declares them, not the directory you run the command from. This matters when deploying [multiple configs](./cli/application.md#deploy) together — each config's patterns only match files under its own directory. If a config's _relative_ patterns match nothing under its own directory, the SDK falls back to resolving them from the directory you ran the command from and logs a warning (this fallback doesn't apply to already-absolute patterns, since their resolution can't change). Update such patterns to be relative to the config's own directory — this fallback will be removed in v2.
+
 ### External Resources
 
 You can reference resources managed by Terraform or other SDK projects to include them in your application's subgraph. External resources are not deployed by this project but can be used for shared access across multiple applications.

package/docs/runtime.md

@@ -31,7 +31,7 @@ const token = await authconnection.getConnectionToken("google");
 const client = new idp.Client({ namespace: "my-namespace" });
 const { users } = await client.users({ first: 10 });
 
-const executionId = await workflow.triggerWorkflow("approval", { reportId });
+const executionId = await workflow.startWorkflow("approval", { reportId });
 
 const invoker = context.getInvoker();
 
@@ -79,7 +79,7 @@ The runtime entry re-exports the following namespaces. Detailed signatures, para
 - `secretmanager` — secret-vault access (`getSecret`, `getSecrets`)
 - `authconnection` — OAuth-style connection tokens (`getConnectionToken`)
 - `idp` — IdP user management (`new Client({ namespace })`)
-- `workflow` — workflow & job control (`triggerWorkflow`, `resumeWorkflow`, `triggerJobFunction`, `wait`, `resolve`)
+- `workflow` — workflow & job control (`startWorkflow`, `resumeWorkflowExecution`, `startJobFunction`, `wait`, `resolve`; the pre-alignment names `triggerWorkflow`, `resumeWorkflow`, `triggerJobFunction` are kept as frozen aliases)
 - `context` — execution context (`getInvoker`)
 - `file` — `tailordb.file` BLOB API (`upload`, `download`, `downloadAsBase64`, `delete`, `getMetadata`, `downloadStream`, `uploadStream`, `openDownloadStream` _(deprecated)_)
 - `aigateway` — AI Gateway URL resolution (`get`)

package/docs/services/auth.md

@@ -107,7 +107,7 @@ userProfile: {
 
 **usernameField**: The field in the TailorDB type used as the username. This field must have a unique constraint (`.unique()`) since it is used to uniquely identify users.
 
-**attributes**: Specifies which fields from the TailorDB type are used as user attributes. Set to `true` to enable a field. Enabled attributes must be assigned values in all machine user definitions. Only fields with ValueOperand types (string, boolean, string[], boolean[]) can be used as attributes. The `id` field and datetime/date/time types are excluded.
+**attributes**: Specifies which fields from the TailorDB type are used as user attributes. Set to `true` to enable a field. Machine user definitions must assign values to attributes derived from required fields; attributes derived from optional fields may be omitted (see [Machine Users](#machine-users)). Only fields with ValueOperand types (string, boolean, string[], boolean[]) can be used as attributes. The `id` field and datetime/date/time types are excluded.
 
 ## Attribute List
 
@@ -200,7 +200,7 @@ machineUsers: {
 },
 ```
 
-**attributes**: Values for attributes enabled in `userProfile.attributes` (or all fields defined in `machineUserAttributes` when `userProfile` is omitted). All enabled fields must be set here. These values are accessible via `user.attributes`:
+**attributes**: Values for attributes enabled in `userProfile.attributes` (or fields defined in `machineUserAttributes` when `userProfile` is omitted). Attribute keys mirror the field's optionality: attributes derived from required fields must be set, while attributes derived from optional fields may be omitted. Setting an attribute to `null` or `undefined` is equivalent to omitting it — the attribute is deployed as unset. These values are accessible via `user.attributes`:
 
 ```typescript
 // In a resolver

package/docs/services/tailordb.md

@@ -672,6 +672,8 @@ Configure Permission and GQLPermission. For details, see the [TailorDB Permissio
 
 **Important**: Following the secure-by-default principle, all operations are denied if permissions are not configured. You must explicitly grant permissions for each operation (create, read, update, delete).
 
+`generate`/`deploy` reject a type that has no `.permission()`, or no `.gqlPermission()` while GraphQL operations are enabled for it (see [GraphQL Operations](#graphql-operations) above). Disable GraphQL exposure entirely with `.features({ gqlOperations: { create: false, update: false, delete: false, read: false } })` if a type only needs record-level permission.
+
 ```typescript
 db.type("User", {
   name: db.string(),

package/docs/services/workflow.md

@@ -401,7 +401,7 @@ An exact-key policy applies to dispatches whose runtime key equals the policy ke
 
 ### Referencing a Policy from a Workflow
 
-Pass the runtime key through the `executionPolicyKey` option on `job.trigger()` or `tailor.workflow.triggerJobFunction()`. For exact-key policies, use `<policy>.key` directly — it's typed so only a value that came from a declared policy can be passed. For wildcard policies (`matchType: "prefix"`), there is no `<policy>.key` — call `<policy>.keyFor(suffix)` to build the concrete key. `keyFor` joins the prefix and suffix with `.` by default; override it with `separator` — the second argument to `defineWorkflowExecutionPolicies` (applies to every policy in the group), or a `def` field on a single `defineWorkflowExecutionPolicy`.
+Pass the runtime key through the `executionPolicyKey` option on `job.trigger()` or `tailor.workflow.startJobFunction()` (or its frozen alias `triggerJobFunction`). For exact-key policies, use `<policy>.key` directly — it's typed so only a value that came from a declared policy can be passed. For wildcard policies (`matchType: "prefix"`), there is no `<policy>.key` — call `<policy>.keyFor(suffix)` to build the concrete key. `keyFor` joins the prefix and suffix with `.` by default; override it with `separator` — the second argument to `defineWorkflowExecutionPolicies` (applies to every policy in the group), or a `def` field on a single `defineWorkflowExecutionPolicy`.
 
 ```typescript
 import { createWorkflowJob } from "@tailor-platform/sdk";
@@ -427,7 +427,7 @@ export const mainJob = createWorkflowJob({
 });
 ```
 
-The same `executionPolicyKey` option is available on `tailor.workflow.triggerJobFunction(name, args, options)` for jobs invoked by name.
+The same `executionPolicyKey` option is available on `tailor.workflow.startJobFunction(name, args, options)` (or the frozen alias `tailor.workflow.triggerJobFunction`) for jobs invoked by name.
 
 ## Triggering a Workflow from a Resolver
 

package/docs/testing.md

@@ -598,7 +598,7 @@ describe("resolveApproval resolver", () => {
 
 #### Resolvers that resume failed workflows
 
-Resolvers or executors that call `workflow.resumeWorkflow(executionId)` delegate to `tailor.workflow.resumeWorkflow` at runtime. With the `tailor-runtime` environment active, use `mockWorkflow().setResumeHandler` to control the returned execution ID and inspect `resumeWorkflow.mock.calls`:
+Resolvers or executors that call `workflow.resumeWorkflowExecution(executionId)` delegate to `tailor.workflow.resumeWorkflowExecution` at runtime. With the `tailor-runtime` environment active, use `mockWorkflow().setResumeHandler` to control the returned execution ID and inspect `resumeWorkflowExecution.mock.calls`:
 
 ```typescript
 import { unauthenticatedTailorUser } from "@tailor-platform/sdk/test";
@@ -618,7 +618,7 @@ describe("retryFailedWorkflow resolver", () => {
     });
 
     expect(result).toEqual({ resumedExecutionId: "exec-resumed-123" });
-    expect(wf.resumeWorkflow.mock.calls).toEqual([["exec-failed-456"]]);
+    expect(wf.resumeWorkflowExecution.mock.calls).toEqual([["exec-failed-456"]]);
   });
 });
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/sdk",
-  "version": "1.78.0",
+  "version": "1.80.0",
   "description": "Tailor Platform SDK - The SDK to work with Tailor Platform",
   "license": "MIT",
   "repository": {
@@ -159,7 +159,7 @@
     "@opentelemetry/resources": "2.9.0",
     "@opentelemetry/sdk-trace-node": "2.9.0",
     "@opentelemetry/semantic-conventions": "1.43.0",
-    "@oxc-project/types": "0.139.0",
+    "@oxc-project/types": "0.140.0",
     "@standard-schema/spec": "1.1.0",
     "@tailor-platform/function-kysely-tailordb": "0.1.3",
     "@toiroakr/lines-db": "0.10.1",
@@ -171,10 +171,11 @@
     "date-fns": "4.4.0",
     "es-toolkit": "1.49.0",
     "find-up-simple": "1.0.1",
+    "get-tsconfig": "4.14.0",
     "globals": "17.7.0",
     "graphql": "17.0.2",
     "inflection": "3.0.2",
-    "kysely": "0.29.3",
+    "kysely": "0.29.4",
     "madge": "8.0.0",
     "mime-types": "3.0.2",
     "open": "11.0.0",
@@ -190,7 +191,7 @@
     "std-env": "4.2.0",
     "table": "6.9.0",
     "ts-cron-validator": "1.1.5",
-    "tsx": "4.23.0",
+    "tsx": "4.23.1",
     "type-fest": "5.8.0",
     "undici": "8.7.0",
     "xdg-basedir": "5.1.0",
@@ -206,9 +207,9 @@
     "@vitest/coverage-v8": "4.1.10",
     "oxfmt": "0.58.0",
     "oxlint": "1.73.0",
-    "oxlint-tsgolint": "0.24.0",
+    "oxlint-tsgolint": "0.25.0",
     "sonda": "0.14.0",
-    "tsdown": "0.22.5",
+    "tsdown": "0.22.7",
     "typescript": "6.0.3",
     "vitest": "4.1.10",
     "zinfer": "0.2.5",