@tailor-platform/sdk 2.0.0-next.0 → 2.0.0-next.2

package/docs/cli/completion.md

@@ -41,6 +41,9 @@ tailor-sdk completion [options] [shell]
 | `--instructions` | `-i`  | Show installation instructions                                                                                                       | No       | `false` |
 | `--loader`       | -     | Print just the rc loader snippet (bash/zsh). Add it to ~/.bashrc or ~/.zshrc; it auto-regenerates the cache when the binary changes. | No       | `false` |
 | `--install`      | -     | Write the completion script to its on-disk cache (bash/zsh) or autoload location (fish) instead of printing it.                      | No       | `false` |
+| `--static`       | -     | Generate the legacy static completion script with command metadata baked in.                                                         | No       | `false` |
+| `--dispatcher`   | -     | Generate the runtime dispatcher completion script. This is the default.                                                              | No       | `false` |
+| `--worker`       | -     | Generate an internal static worker artifact for dispatcher mode.                                                                     | No       | `false` |
 
 <!-- politty:command:completion:options:end -->
 

package/docs/cli/crashreport.md

@@ -12,8 +12,6 @@ Commands for managing crash reports.
 
 Manage crash reports.
 
-**Aliases:** `crash-report`
-
 <!-- politty:command:crashreport:description:end -->
 
 <!-- politty:command:crashreport:usage:start -->

package/docs/cli/executor.md

@@ -179,6 +179,7 @@ tailor-sdk executor jobs [options] <executor-name> [job-id]
 | `--attempts`                    | -     | Show job attempts (only with job ID) (detail mode only)                                               | No       | `false`  | -                              |
 | `--wait`                        | `-W`  | Wait for job completion and downstream execution (workflow/function) if applicable (detail mode only) | No       | `false`  | -                              |
 | `--interval <INTERVAL>`         | `-i`  | Polling interval when using --wait (e.g., '3s', '500ms', '1m')                                        | No       | `"3s"`   | -                              |
+| `--timeout <TIMEOUT>`           | `-t`  | Maximum time to wait when using --wait (e.g., '30s', '5m')                                            | No       | `"5m"`   | -                              |
 | `--order <ORDER>`               | -     | Sort order (asc or desc)                                                                              | No       | `"desc"` | -                              |
 | `--limit <LIMIT>`               | -     | Maximum number of jobs to list (0: unlimited, default: 50) (list mode only)                           | No       | `50`     | -                              |
 | `--logs`                        | `-l`  | Display function execution logs after completion (requires --wait)                                    | No       | `false`  | -                              |
@@ -283,6 +284,7 @@ tailor-sdk executor trigger [options] <executor-name>
 | `--header <HEADER>`             | `-H`  | Request header (format: 'Key: Value', can be specified multiple times)             | No       | -       | -                              |
 | `--wait`                        | `-W`  | Wait for job completion and downstream execution (workflow/function) if applicable | No       | `false` | -                              |
 | `--interval <INTERVAL>`         | `-i`  | Polling interval when using --wait (e.g., '3s', '500ms', '1m')                     | No       | `"3s"`  | -                              |
+| `--timeout <TIMEOUT>`           | `-t`  | Maximum time to wait when using --wait (e.g., '30s', '5m')                         | No       | `"5m"`  | -                              |
 | `--logs`                        | `-l`  | Display function execution logs after completion (requires --wait)                 | No       | `false` | -                              |
 
 <!-- politty:command:executor trigger:options:end -->
@@ -323,6 +325,57 @@ $ tailor-sdk executor trigger my-executor -W -l
 
 <!-- politty:command:executor trigger:examples:end -->
 
+**Shell automation**
+
+Trigger an executor and wait for the executor job plus any downstream workflow or
+function execution:
+
+```bash
+tailor-sdk executor trigger daily-workflow \
+  --wait \
+  --timeout 5m \
+  --interval 5s \
+  --json
+```
+
+Wait for an existing job when another process already captured the job ID:
+
+```bash
+tailor-sdk executor jobs daily-workflow "$job_id" \
+  --wait \
+  --timeout 5m \
+  --logs \
+  --json
+```
+
+**Programmatic API**
+
+Import your executor definition and pass it to the typed API:
+
+```ts
+import { triggerExecutor, watchExecutorJob } from "@tailor-platform/sdk/cli";
+import dailyWorkflow from "../executors/dailyWorkflow";
+
+const { jobId } = await triggerExecutor({
+  executor: dailyWorkflow,
+});
+
+if (!jobId) {
+  throw new Error("Executor trigger did not return a job ID");
+}
+
+const result = await watchExecutorJob({
+  executor: dailyWorkflow,
+  jobId,
+  timeout: 5 * 60 * 1000,
+  interval: 5000,
+});
+
+if (result.timedOut) {
+  throw new Error(`Executor job ${result.job.id} timed out at ${result.job.status}`);
+}
+```
+
 <!-- politty:command:executor trigger:notes:start -->
 
 **Notes**

package/docs/cli/function.md

@@ -209,7 +209,7 @@ $ tailor-sdk function logs <execution-id> --json
 
 When viewing a specific execution that failed, the command displays error details with the stack trace mapped back to your original source files (clickable file links and code snippets, matching `function test-run` output).
 
-Stack traces stay accurate even after later redeploys, because the trace is resolved against the exact build that produced the execution. If that build is no longer available, the command falls back to a plain-text error display.
+Stack traces are mapped only when the execution includes a content hash for the exact build that ran. If the content hash is missing or the build is no longer available, the command falls back to a plain-text error display.
 
 <!-- politty:command:function logs:notes:end -->
 

package/docs/cli/setup.md

@@ -10,7 +10,7 @@ Commands for setting up project infrastructure.
 
 <!-- politty:command:setup:description:start -->
 
-Set up project infrastructure.
+Generate a CI deploy workflow for your project. (beta)
 
 <!-- politty:command:setup:description:end -->
 
@@ -19,18 +19,36 @@ Set up project infrastructure.
 **Usage**
 
 ```
-tailor-sdk setup [command]
+tailor-sdk setup [options] [command]
 ```
 
 <!-- politty:command:setup:usage:end -->
 
+<!-- politty:command:setup:options:start -->
+
+**Options**
+
+| Option                              | Alias | Description                                                                                                                                       | Required | Default    |
+| ----------------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | ---------- |
+| `--provider <PROVIDER>`             | `-p`  | CI provider to generate for (only 'github' is supported)                                                                                          | No       | `"github"` |
+| `--workspace-name <WORKSPACE_NAME>` | `-n`  | Workspace name (defaults to the config 'name')                                                                                                    | No       | -          |
+| `--branch <BRANCH>`                 | -     | Branch target: deploy trigger branch (defaults to the detected default branch). Tag target: tag-reachability guard branch (no guard when omitted) | No       | -          |
+| `--tag`                             | -     | Generate a tag target (deploy on tag push)                                                                                                        | No       | `false`    |
+| `--tag-pattern <TAG_PATTERN>`       | -     | Tag glob to match (requires --tag; defaults to v\*)                                                                                               | No       | -          |
+| `--environment <ENVIRONMENT>`       | -     | GitHub Environment for the plan/deploy jobs (defaults to the workspace name)                                                                      | No       | -          |
+| `--no-plan`                         | -     | Disable the plan job for a branch target (cannot be combined with --tag)                                                                          | No       | `false`    |
+| `--dir <DIR>`                       | `-d`  | App directory (for monorepo setups)                                                                                                               | No       | `"."`      |
+| `--force`                           | -     | Discard hand edits / take over unmanaged files and regenerate                                                                                     | No       | `false`    |
+
+<!-- politty:command:setup:options:end -->
+
 <!-- politty:command:setup:subcommands:start -->
 
 **Commands**
 
-| Command                         | Description                                       |
-| ------------------------------- | ------------------------------------------------- |
-| [`setup github`](#setup-github) | Generate a GitHub Actions deploy workflow. (beta) |
+| Command                       | Description                                                                      |
+| ----------------------------- | -------------------------------------------------------------------------------- |
+| [`setup check`](#setup-check) | Audit generated workflows for drift against the current config/repo (read-only). |
 
 <!-- politty:command:setup:subcommands:end -->
 
@@ -39,50 +57,34 @@ tailor-sdk setup [command]
 See [Global Options](../cli-reference.md#global-options) for options available to all commands.
 
 <!-- politty:command:setup:global-options-link:end -->
-<!-- politty:command:setup github:heading:start -->
 
-### setup github
+<!-- politty:command:setup check:heading:start -->
+
+### setup check
 
-<!-- politty:command:setup github:heading:end -->
+<!-- politty:command:setup check:heading:end -->
 
-<!-- politty:command:setup github:description:start -->
+<!-- politty:command:setup check:description:start -->
 
-Generate a GitHub Actions deploy workflow. (beta)
+Audit generated workflows for drift against the current config/repo (read-only).
 
-<!-- politty:command:setup github:description:end -->
+<!-- politty:command:setup check:description:end -->
 
-<!-- politty:command:setup github:usage:start -->
+<!-- politty:command:setup check:usage:start -->
 
 **Usage**
 
 ```
-tailor-sdk setup github [options]
+tailor-sdk setup check
 ```
 
-<!-- politty:command:setup github:usage:end -->
-
-<!-- politty:command:setup github:options:start -->
-
-**Options**
-
-| Option                              | Alias | Description                                                                                                                                       | Required | Default |
-| ----------------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | ------- |
-| `--workspace-name <WORKSPACE_NAME>` | `-n`  | Workspace name (defaults to the config 'name')                                                                                                    | No       | -       |
-| `--branch <BRANCH>`                 | -     | Branch target: deploy trigger branch (defaults to the detected default branch). Tag target: tag-reachability guard branch (no guard when omitted) | No       | -       |
-| `--tag`                             | -     | Generate a tag target (deploy on tag push)                                                                                                        | No       | `false` |
-| `--tag-pattern <TAG_PATTERN>`       | -     | Tag glob to match (requires --tag; defaults to v\*)                                                                                               | No       | -       |
-| `--environment <ENVIRONMENT>`       | -     | GitHub Environment for the plan/deploy jobs (defaults to the workspace name)                                                                      | No       | -       |
-| `--no-plan`                         | -     | Disable the plan job for a branch target (cannot be combined with --tag)                                                                          | No       | `false` |
-| `--dir <DIR>`                       | `-d`  | App directory (for monorepo setups)                                                                                                               | No       | `"."`   |
-| `--force`                           | -     | Discard hand edits / take over unmanaged files and regenerate                                                                                     | No       | `false` |
-
-<!-- politty:command:setup github:options:end -->
+<!-- politty:command:setup check:usage:end -->
 
-<!-- politty:command:setup github:global-options-link:start -->
+<!-- politty:command:setup check:global-options-link:start -->
 
 See [Global Options](../cli-reference.md#global-options) for options available to all commands.
 
-<!-- politty:command:setup github:global-options-link:end -->
+<!-- politty:command:setup check:global-options-link:end -->
 
 ## Further reading
 

package/docs/cli/user.md

@@ -201,9 +201,9 @@ tailor-sdk user switch <user>
 
 **Arguments**
 
-| Argument | Description | Required |
-| -------- | ----------- | -------- |
-| `user`   | User email  | Yes      |
+| Argument | Description                                  | Required |
+| -------- | -------------------------------------------- | -------- |
+| `user`   | User email address or machine user client ID | Yes      |
 
 <!-- politty:command:user switch:arguments:end -->
 

package/docs/cli/workflow.md

@@ -33,6 +33,7 @@ tailor-sdk workflow [command]
 | [`workflow list`](#workflow-list)             | List all workflows in the workspace.           |
 | [`workflow get`](#workflow-get)               | Get workflow details.                          |
 | [`workflow start`](#workflow-start)           | Start a workflow execution.                    |
+| [`workflow wait`](#workflow-wait)             | Wait for a workflow execution.                 |
 | [`workflow executions`](#workflow-executions) | List or get workflow executions.               |
 | [`workflow resume`](#workflow-resume)         | Resume a failed or pending workflow execution. |
 
@@ -175,8 +176,10 @@ tailor-sdk workflow start [options] <name>
 | `--machine-user <MACHINE_USER>` | `-m`  | Machine user name. Falls back to the active profile's default machine user. | No       | -                    | `TAILOR_PLATFORM_MACHINE_USER_NAME` |
 | `--arg <ARG>`                   | `-a`  | Workflow argument (JSON string)                                             | No       | -                    | -                                   |
 | `--wait`                        | `-W`  | Wait for execution to complete                                              | No       | `false`              | -                                   |
-| `--interval <INTERVAL>`         | `-i`  | Polling interval when using --wait (e.g., '3s', '500ms', '1m')              | No       | `"3s"`               | -                                   |
-| `--logs`                        | `-l`  | Display job execution logs after completion (requires --wait)               | No       | `false`              | -                                   |
+| `--interval <INTERVAL>`         | `-i`  | Polling interval when waiting (e.g., '3s', '500ms', '1m')                   | No       | `"3s"`               | -                                   |
+| `--timeout <TIMEOUT>`           | `-t`  | Maximum time to wait (e.g., '30s', '10m')                                   | No       | `"10m"`              | -                                   |
+| `--until <UNTIL>`               | `-u`  | Wait target (success, suspended, terminal)                                  | No       | `"terminal"`         | -                                   |
+| `--logs`                        | `-l`  | Display job execution logs after completion                                 | No       | `false`              | -                                   |
 
 <!-- politty:command:workflow start:options:end -->
 
@@ -185,6 +188,136 @@ tailor-sdk workflow start [options] <name>
 See [Global Options](../cli-reference.md#global-options) for options available to all commands.
 
 <!-- politty:command:workflow start:global-options-link:end -->
+<!-- politty:command:workflow wait:heading:start -->
+
+### workflow wait
+
+<!-- politty:command:workflow wait:heading:end -->
+
+<!-- politty:command:workflow wait:description:start -->
+
+Wait for a workflow execution.
+
+<!-- politty:command:workflow wait:description:end -->
+
+<!-- politty:command:workflow wait:usage:start -->
+
+**Usage**
+
+```
+tailor-sdk workflow wait [options] <execution-id>
+```
+
+<!-- politty:command:workflow wait:usage:end -->
+
+<!-- politty:command:workflow wait:arguments:start -->
+
+**Arguments**
+
+| Argument       | Description  | Required |
+| -------------- | ------------ | -------- |
+| `execution-id` | Execution ID | Yes      |
+
+<!-- politty:command:workflow wait:arguments:end -->
+
+<!-- politty:command:workflow wait:options:start -->
+
+**Options**
+
+| Option                          | Alias | Description                                               | Required | Default      | Env                            |
+| ------------------------------- | ----- | --------------------------------------------------------- | -------- | ------------ | ------------------------------ |
+| `--workspace-id <WORKSPACE_ID>` | `-w`  | Workspace ID                                              | No       | -            | `TAILOR_PLATFORM_WORKSPACE_ID` |
+| `--profile <PROFILE>`           | `-p`  | Workspace profile                                         | No       | -            | `TAILOR_PLATFORM_PROFILE`      |
+| `--interval <INTERVAL>`         | `-i`  | Polling interval when waiting (e.g., '3s', '500ms', '1m') | No       | `"3s"`       | -                              |
+| `--timeout <TIMEOUT>`           | `-t`  | Maximum time to wait (e.g., '30s', '10m')                 | No       | `"10m"`      | -                              |
+| `--until <UNTIL>`               | `-u`  | Wait target (success, suspended, terminal)                | No       | `"terminal"` | -                              |
+| `--logs`                        | `-l`  | Display job execution logs after completion               | No       | `false`      | -                              |
+
+<!-- politty:command:workflow wait:options:end -->
+
+<!-- politty:command:workflow wait:global-options-link:start -->
+
+See [Global Options](../cli-reference.md#global-options) for options available to all commands.
+
+<!-- politty:command:workflow wait:global-options-link:end -->
+
+<!-- politty:command:workflow wait:examples:start -->
+
+**Examples**
+
+**Wait for workflow success**
+
+```bash
+$ tailor-sdk workflow wait execution-id --until success --timeout 10m --json
+```
+
+**Wait for a workflow wait point**
+
+```bash
+$ tailor-sdk workflow wait execution-id --until suspended --timeout 6m --logs --json
+```
+
+**Wait for success, failure, or suspension**
+
+```bash
+$ tailor-sdk workflow wait execution-id --until terminal
+```
+
+<!-- politty:command:workflow wait:examples:end -->
+
+**Shell automation**
+
+Capture the execution ID from `workflow start` and wait for the same run from a
+separate command:
+
+```bash
+execution_id="$(
+  tailor-sdk workflow start order-workflow --json | jq -r '.executionId'
+)"
+
+tailor-sdk workflow wait "$execution_id" \
+  --until success \
+  --timeout 10m \
+  --interval 5s \
+  --json
+```
+
+Wait until a workflow reaches a wait point, such as an approval step:
+
+```bash
+tailor-sdk workflow wait "$execution_id" \
+  --until suspended \
+  --timeout 6m \
+  --logs \
+  --json
+```
+
+**Programmatic API**
+
+Use `waitWorkflowExecution` when a script already has an execution ID and needs
+the same waiter behavior as the CLI:
+
+```ts
+import { waitWorkflowExecution } from "@tailor-platform/sdk/cli";
+
+const executionId = process.env.EXECUTION_ID;
+
+if (!executionId) {
+  throw new Error("EXECUTION_ID is required");
+}
+
+const result = await waitWorkflowExecution({
+  executionId,
+  until: "success",
+  timeout: 10 * 60 * 1000,
+  interval: 5000,
+});
+
+if (result.timedOut) {
+  throw new Error(`Workflow ${result.id} timed out at ${result.status}`);
+}
+```
+
 <!-- politty:command:workflow executions:heading:start -->
 
 ### workflow executions
@@ -221,17 +354,19 @@ tailor-sdk workflow executions [options] [execution-id]
 
 **Options**
 
-| Option                            | Alias | Description                                                    | Required | Default  | Env                            |
-| --------------------------------- | ----- | -------------------------------------------------------------- | -------- | -------- | ------------------------------ |
-| `--workspace-id <WORKSPACE_ID>`   | `-w`  | Workspace ID                                                   | No       | -        | `TAILOR_PLATFORM_WORKSPACE_ID` |
-| `--profile <PROFILE>`             | `-p`  | Workspace profile                                              | No       | -        | `TAILOR_PLATFORM_PROFILE`      |
-| `--order <ORDER>`                 | -     | Sort order (asc or desc)                                       | No       | `"desc"` | -                              |
-| `--limit <LIMIT>`                 | `-l`  | Maximum number of items to return (0: unlimited)               | No       | `50`     | -                              |
-| `--workflow-name <WORKFLOW_NAME>` | `-n`  | Filter by workflow name (list mode only)                       | No       | -        | -                              |
-| `--status <STATUS>`               | `-s`  | Filter by status (list mode only)                              | No       | -        | -                              |
-| `--wait`                          | `-W`  | Wait for execution to complete                                 | No       | `false`  | -                              |
-| `--interval <INTERVAL>`           | `-i`  | Polling interval when using --wait (e.g., '3s', '500ms', '1m') | No       | `"3s"`   | -                              |
-| `--logs`                          | -     | Display job execution logs (detail mode only)                  | No       | `false`  | -                              |
+| Option                            | Alias | Description                                               | Required | Default      | Env                            |
+| --------------------------------- | ----- | --------------------------------------------------------- | -------- | ------------ | ------------------------------ |
+| `--workspace-id <WORKSPACE_ID>`   | `-w`  | Workspace ID                                              | No       | -            | `TAILOR_PLATFORM_WORKSPACE_ID` |
+| `--profile <PROFILE>`             | `-p`  | Workspace profile                                         | No       | -            | `TAILOR_PLATFORM_PROFILE`      |
+| `--order <ORDER>`                 | -     | Sort order (asc or desc)                                  | No       | `"desc"`     | -                              |
+| `--limit <LIMIT>`                 | `-l`  | Maximum number of items to return (0: unlimited)          | No       | `50`         | -                              |
+| `--workflow-name <WORKFLOW_NAME>` | `-n`  | Filter by workflow name (list mode only)                  | No       | -            | -                              |
+| `--status <STATUS>`               | `-s`  | Filter by status (list mode only)                         | No       | -            | -                              |
+| `--wait`                          | `-W`  | Wait for execution to complete                            | No       | `false`      | -                              |
+| `--interval <INTERVAL>`           | `-i`  | Polling interval when waiting (e.g., '3s', '500ms', '1m') | No       | `"3s"`       | -                              |
+| `--timeout <TIMEOUT>`             | `-t`  | Maximum time to wait (e.g., '30s', '10m')                 | No       | `"10m"`      | -                              |
+| `--until <UNTIL>`                 | `-u`  | Wait target (success, suspended, terminal)                | No       | `"terminal"` | -                              |
+| `--logs`                          | -     | Display job execution logs (detail mode only)             | No       | `false`      | -                              |
 
 <!-- politty:command:workflow executions:options:end -->
 
@@ -276,13 +411,15 @@ tailor-sdk workflow resume [options] <execution-id>
 
 **Options**
 
-| Option                          | Alias | Description                                                    | Required | Default | Env                            |
-| ------------------------------- | ----- | -------------------------------------------------------------- | -------- | ------- | ------------------------------ |
-| `--workspace-id <WORKSPACE_ID>` | `-w`  | Workspace ID                                                   | No       | -       | `TAILOR_PLATFORM_WORKSPACE_ID` |
-| `--profile <PROFILE>`           | `-p`  | Workspace profile                                              | No       | -       | `TAILOR_PLATFORM_PROFILE`      |
-| `--wait`                        | `-W`  | Wait for execution to complete                                 | No       | `false` | -                              |
-| `--interval <INTERVAL>`         | `-i`  | Polling interval when using --wait (e.g., '3s', '500ms', '1m') | No       | `"3s"`  | -                              |
-| `--logs`                        | `-l`  | Display job execution logs after completion (requires --wait)  | No       | `false` | -                              |
+| Option                          | Alias | Description                                               | Required | Default      | Env                            |
+| ------------------------------- | ----- | --------------------------------------------------------- | -------- | ------------ | ------------------------------ |
+| `--workspace-id <WORKSPACE_ID>` | `-w`  | Workspace ID                                              | No       | -            | `TAILOR_PLATFORM_WORKSPACE_ID` |
+| `--profile <PROFILE>`           | `-p`  | Workspace profile                                         | No       | -            | `TAILOR_PLATFORM_PROFILE`      |
+| `--wait`                        | `-W`  | Wait for execution to complete                            | No       | `false`      | -                              |
+| `--interval <INTERVAL>`         | `-i`  | Polling interval when waiting (e.g., '3s', '500ms', '1m') | No       | `"3s"`       | -                              |
+| `--timeout <TIMEOUT>`           | `-t`  | Maximum time to wait (e.g., '30s', '10m')                 | No       | `"10m"`      | -                              |
+| `--until <UNTIL>`               | `-u`  | Wait target (success, suspended, terminal)                | No       | `"terminal"` | -                              |
+| `--logs`                        | `-l`  | Display job execution logs after completion               | No       | `false`      | -                              |
 
 <!-- politty:command:workflow resume:options:end -->
 

package/docs/cli/workspace.md

@@ -79,7 +79,7 @@ tailor-sdk workspace create [options]
 | `--organization-id <ORGANIZATION_ID>` | `-o`  | Organization ID to workspace associate with                                                                 | No       | -         | `TAILOR_PLATFORM_ORGANIZATION_ID` |
 | `--folder-id <FOLDER_ID>`             | `-f`  | Folder ID to workspace associate with                                                                       | No       | -         | `TAILOR_PLATFORM_FOLDER_ID`       |
 | `--profile-name <PROFILE_NAME>`       | `-p`  | Profile name to create                                                                                      | No       | -         | -                                 |
-| `--profile-user <PROFILE_USER>`       | -     | User email for the profile (defaults to current user)                                                       | No       | -         | -                                 |
+| `--profile-user <PROFILE_USER>`       | -     | User email address or machine user client ID for the profile (defaults to current user)                     | No       | -         | -                                 |
 | `--permission <PERMISSION>`           | -     | Profile permission (requires --profile-name). 'read' blocks all write commands while the profile is active. | No       | `"write"` | -                                 |
 
 <!-- politty:command:workspace create:options:end -->
@@ -243,7 +243,7 @@ tailor-sdk profile create [options] <name>
 
 | Option                                            | Alias | Description                                                                                                                            | Required | Default   |
 | ------------------------------------------------- | ----- | -------------------------------------------------------------------------------------------------------------------------------------- | -------- | --------- |
-| `--user <USER>`                                   | `-u`  | User email                                                                                                                             | Yes      | -         |
+| `--user <USER>`                                   | `-u`  | User email address or machine user client ID                                                                                           | Yes      | -         |
 | `--workspace-id <WORKSPACE_ID>`                   | `-w`  | Workspace ID                                                                                                                           | Yes      | -         |
 | `--permission <PERMISSION>`                       | -     | Profile permission. 'read' blocks all write commands while the profile is active.                                                      | No       | `"write"` |
 | `--machine-user <MACHINE_USER>`                   | `-m`  | Default machine user name for application-data commands (query, workflow start, function test-run, machineuser token).                 | No       | -         |
@@ -324,7 +324,7 @@ tailor-sdk profile update [options] <name>
 
 | Option                                            | Alias | Description                                                                                                                                                           | Required | Default |
 | ------------------------------------------------- | ----- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | ------- |
-| `--user <USER>`                                   | `-u`  | New user email                                                                                                                                                        | No       | -       |
+| `--user <USER>`                                   | `-u`  | New user email address or machine user client ID                                                                                                                      | No       | -       |
 | `--workspace-id <WORKSPACE_ID>`                   | `-w`  | New workspace ID                                                                                                                                                      | No       | -       |
 | `--permission <PERMISSION>`                       | -     | Profile permission. 'read' blocks all write commands; 'write' lifts the restriction.                                                                                  | No       | -       |
 | `--machine-user <MACHINE_USER>`                   | `-m`  | Default machine user name for application-data commands (query, workflow start, function test-run, machineuser token). Pass an empty string to clear.                 | No       | -       |

package/docs/cli-reference.md

@@ -65,23 +65,24 @@ tailor-sdk deploy --env-file .env --env-file .env.production
 
 You can use environment variables to configure workspace and authentication:
 
-| Variable                                     | Description                                                                                       |
-| -------------------------------------------- | ------------------------------------------------------------------------------------------------- |
-| `TAILOR_PLATFORM_WORKSPACE_ID`               | Workspace ID for deployment commands                                                              |
-| `TAILOR_PLATFORM_ORGANIZATION_ID`            | Organization ID for organization commands                                                         |
-| `TAILOR_PLATFORM_FOLDER_ID`                  | Folder ID for folder commands                                                                     |
-| `TAILOR_PLATFORM_TOKEN`                      | Authentication token (alternative to `login`)                                                     |
-| `TAILOR_TOKEN`                               | **Deprecated.** Use `TAILOR_PLATFORM_TOKEN` instead                                               |
-| `TAILOR_PLATFORM_PROFILE`                    | Workspace profile name                                                                            |
-| `TAILOR_PLATFORM_SDK_CONFIG_PATH`            | Path to SDK config file                                                                           |
-| `TAILOR_PLATFORM_SDK_DTS_PATH`               | Output path for generated `tailor.d.ts` type definition file                                      |
-| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_ID`     | Client ID for `login --machine-user`                                                              |
-| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_SECRET` | Client secret for `login --machine-user`                                                          |
-| `TAILOR_PLATFORM_MACHINE_USER_NAME`          | Default machine user name for `query`, `workflow start`, `function test-run`, `machineuser token` |
-| `TAILOR_BUNDLE_CONCURRENCY`                  | Max concurrent bundle workers for `deploy` (resolvers/executors/workflows). Defaults to CPU count |
-| `VISUAL` / `EDITOR`                          | Preferred editor for commands that open files (e.g., `vim`, `code`, `nano`)                       |
-| `TAILOR_CRASH_REPORTS_LOCAL`                 | Local crash log writing: `on` (default) or `off`                                                  |
-| `TAILOR_CRASH_REPORTS_REMOTE`                | Automatic crash report submission: `off` (default) or `on`                                        |
+| Variable                                     | Description                                                                                                  |
+| -------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
+| `TAILOR_PLATFORM_WORKSPACE_ID`               | Workspace ID for deployment commands                                                                         |
+| `TAILOR_PLATFORM_ORGANIZATION_ID`            | Organization ID for organization commands                                                                    |
+| `TAILOR_PLATFORM_FOLDER_ID`                  | Folder ID for folder commands                                                                                |
+| `TAILOR_PLATFORM_TOKEN`                      | Authentication token (alternative to `login`)                                                                |
+| `TAILOR_TOKEN`                               | **Deprecated.** Use `TAILOR_PLATFORM_TOKEN` instead                                                          |
+| `TAILOR_PLATFORM_PROFILE`                    | Workspace profile name                                                                                       |
+| `TAILOR_PLATFORM_SDK_CONFIG_PATH`            | Path to SDK config file                                                                                      |
+| `TAILOR_PLATFORM_SDK_DTS_PATH`               | Output path for generated `tailor.d.ts` type definition file                                                 |
+| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_ID`     | Client ID for `login --machine-user`                                                                         |
+| `TAILOR_PLATFORM_MACHINE_USER_CLIENT_SECRET` | Client secret for `login --machine-user`                                                                     |
+| `TAILOR_PLATFORM_MACHINE_USER_NAME`          | Default machine user name for `query`, `workflow start`, `function test-run`, `machineuser token`            |
+| `TAILOR_BUNDLE_CONCURRENCY`                  | Max concurrent bundle workers for `deploy` (resolvers/executors/workflows). Defaults to CPU count            |
+| `TAILOR_APPLY_CONCURRENCY`                   | Max concurrent unary platform RPCs during `apply`/`deploy` (streaming uploads are not gated). Defaults to 16 |
+| `VISUAL` / `EDITOR`                          | Preferred editor for commands that open files (e.g., `vim`, `code`, `nano`)                                  |
+| `TAILOR_CRASH_REPORTS_LOCAL`                 | Local crash log writing: `on` (default) or `off`                                                             |
+| `TAILOR_CRASH_REPORTS_REMOTE`                | Automatic crash report submission: `off` (default) or `on`                                                   |
 
 ### Authentication Token Priority
 
@@ -92,6 +93,10 @@ Token resolution follows this priority order:
 3. Profile specified via `--profile` option or `TAILOR_PLATFORM_PROFILE`
 4. Current user from platform config (`~/.config/tailor-platform/config.yaml`)
 
+`tailor-sdk login` stores local CLI login tokens in the OS keyring by default
+when available. If the keyring is unavailable, tokens are stored in the platform
+config file.
+
 ### Workspace ID Priority
 
 Workspace ID resolution follows this priority order:
@@ -222,6 +227,7 @@ Commands for managing workflows and executions.
 | [workflow list](./cli/workflow.md#workflow-list)             | List all workflows in the workspace.           |
 | [workflow get](./cli/workflow.md#workflow-get)               | Get workflow details.                          |
 | [workflow start](./cli/workflow.md#workflow-start)           | Start a workflow execution.                    |
+| [workflow wait](./cli/workflow.md#workflow-wait)             | Wait for a workflow execution.                 |
 | [workflow executions](./cli/workflow.md#workflow-executions) | List or get workflow executions.               |
 | [workflow resume](./cli/workflow.md#workflow-resume)         | Resume a failed or pending workflow execution. |
 
@@ -287,9 +293,9 @@ Commands for managing crash reports.
 
 Commands for setting up project infrastructure.
 
-| Command                                     | Description                                       |
-| ------------------------------------------- | ------------------------------------------------- |
-| [setup github](./cli/setup.md#setup-github) | Generate a GitHub Actions deploy workflow. (beta) |
+| Command                                   | Description                                                                      |
+| ----------------------------------------- | -------------------------------------------------------------------------------- |
+| [setup check](./cli/setup.md#setup-check) | Audit generated workflows for drift against the current config/repo (read-only). |
 
 ### [Upgrade Commands](./cli/upgrade.md)
 

package/docs/configuration.md

@@ -294,5 +294,3 @@ export const plugins = definePlugins(
   enumConstantsPlugin({ distPath: "./generated/enums.ts" }),
 );
 ```
-
-See [Generators](./generator/index.md) for legacy `defineGenerators()` documentation.