@tailor-platform/sdk 2.0.0-next.1 → 2.0.0-next.10

package/dist/seed-jf3008-h.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"seed-jf3008-h.mjs","names":["ml"],"sources":["../src/plugin/builtin/seed/idp-user-processor.ts","../src/plugin/builtin/seed/lines-db-processor.ts","../src/plugin/builtin/seed/seed-type-processor.ts","../src/plugin/builtin/seed/index.ts"],"sourcesContent":["import ml from \"@/utils/multiline\";\nimport type { GeneratorAuthInput } from \"@/plugin/types\";\n\nexport interface IdpUserMetadata {\n  name: \"_User\";\n  dependencies: string[];\n  dataFile: string;\n  idpNamespace: string;\n  schema: {\n    usernameField: string;\n    userTypeName: string;\n  };\n}\n\n/**\n * Processes auth configuration to generate IdP user seed metadata\n * @param auth - Auth configuration from generator\n * @returns IdP user metadata or undefined if not applicable\n */\nexport function processIdpUser(auth: GeneratorAuthInput): IdpUserMetadata | undefined {\n  // Only process if idProvider is BuiltInIdP and userProfile is defined\n  if (auth.idProvider?.kind !== \"BuiltInIdP\" || !auth.userProfile) {\n    return undefined;\n  }\n\n  const { typeName, usernameField } = auth.userProfile;\n\n  return {\n    name: \"_User\",\n    dependencies: [typeName],\n    dataFile: \"data/_User.jsonl\",\n    idpNamespace: auth.idProvider.namespace,\n    schema: {\n      usernameField,\n      userTypeName: typeName,\n    },\n  };\n}\n\n/**\n * Generates the server-side IDP seed script code for testExecScript execution.\n * Uses the global tailor.idp.Client - no bundling required.\n * @param idpNamespace - The IDP namespace name\n * @returns Script code string\n */\nexport function generateIdpSeedScriptCode(idpNamespace: string): string {\n  return ml /* ts */ `\n    export async function main(input) {\n      const client = new tailor.idp.Client({ namespace: \"${idpNamespace}\" });\n      const errors = [];\n      let processed = 0;\n\n      for (let i = 0; i < input.users.length; i++) {\n        try {\n          await client.createUser(input.users[i]);\n          processed++;\n          console.log(\\`[_User] \\${i + 1}/\\${input.users.length}: \\${input.users[i].name}\\`);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          errors.push(\\`Row \\${i} (\\${input.users[i].name}): \\${message}\\`);\n          console.error(\\`[_User] Row \\${i} failed: \\${message}\\`);\n        }\n      }\n\n      return {\n        success: errors.length === 0,\n        processed,\n        errors,\n      };\n    }\n  `;\n}\n\n/**\n * Generates the server-side IDP truncation script code for testExecScript execution.\n * Lists all users with pagination and deletes each one.\n * @param idpNamespace - The IDP namespace name\n * @returns Script code string\n */\nexport function generateIdpTruncateScriptCode(idpNamespace: string): string {\n  return ml /* ts */ `\n    export async function main() {\n      const client = new tailor.idp.Client({ namespace: \"${idpNamespace}\" });\n      const errors = [];\n      let deleted = 0;\n\n      // List all users with pagination\n      let after = undefined;\n      const allUsers = [];\n      do {\n        const response = await client.users(after ? { after } : undefined);\n        allUsers.push(...(response.users || []));\n        after = response.nextPageToken;\n      } while (after);\n\n      console.log(\\`Found \\${allUsers.length} IDP users to delete\\`);\n\n      for (const user of allUsers) {\n        try {\n          await client.deleteUser(user.id);\n          deleted++;\n          console.log(\\`[_User] Deleted \\${deleted}/\\${allUsers.length}: \\${user.name}\\`);\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          errors.push(\\`User \\${user.id} (\\${user.name}): \\${message}\\`);\n          console.error(\\`[_User] Delete failed for \\${user.name}: \\${message}\\`);\n        }\n      }\n\n      return {\n        success: errors.length === 0,\n        deleted,\n        total: allUsers.length,\n        errors,\n      };\n    }\n  `;\n}\n\ntype GenerateIdpUserSchemaFileOptions = {\n  usernameField: string;\n  userTypeName: string;\n  /**\n   * When `true` (default), emit a foreign key from `_User.name` to the\n   * userProfile type's username field so that seed validation rejects `_User`\n   * rows without a matching userProfile row. Set to `false` to seed `_User`\n   * rows that do not yet have a corresponding userProfile row.\n   */\n  includeUserProfileFK?: boolean;\n};\n\n/**\n * Generates the schema file content for IdP users. Emits the\n * `_User.name -> <userProfile>.<usernameField>` foreign key by default; pass\n * `includeUserProfileFK: false` to omit it (e.g. when seeding `_User` rows\n * that do not yet have a corresponding userProfile row).\n * @param options - Schema generation options\n * @param options.usernameField - Username field name\n * @param options.userTypeName - TailorDB user type name\n * @param options.includeUserProfileFK - Whether to emit the `_User -> userProfile` foreign key (default `true`)\n * @returns Schema file contents\n */\nexport function generateIdpUserSchemaFile(options: GenerateIdpUserSchemaFileOptions): string {\n  const { usernameField, userTypeName, includeUserProfileFK = true } = options;\n  const schemaBody = includeUserProfileFK\n    ? ml`\n      primaryKey: \"name\",\n      indexes: [\n        { name: \"_user_name_unique_idx\", columns: [\"name\"], unique: true },\n      ],\n      foreignKeys: [\n        {\n          column: \"name\",\n          references: {\n            table: \"${userTypeName}\",\n            column: \"${usernameField}\",\n          },\n        },\n      ],\n    `\n    : ml`\n      primaryKey: \"name\",\n      indexes: [\n        { name: \"_user_name_unique_idx\", columns: [\"name\"], unique: true },\n      ],\n    `;\n\n  return ml /* ts */ `\n    import { t } from \"@tailor-platform/sdk\";\n    import { defineSchema } from \"@tailor-platform/sdk/seed\";\n    import { createStandardSchema } from \"@tailor-platform/sdk/test\";\n\n    const schemaType = t.object({\n      name: t.string(),\n      password: t.string(),\n    });\n\n    // Simple identity hook for _User (no TailorDB backing type)\n    const hook = <T>(data: unknown) => data as T;\n\n    export const schema = defineSchema(\n      createStandardSchema(schemaType, hook),\n      {\n        ${schemaBody}\n      }\n    );\n\n    `;\n}\n","import { isPluginGeneratedType } from \"@/parser/service/tailordb/type-source\";\nimport ml from \"@/utils/multiline\";\nimport type { LinesDbMetadata } from \"./types\";\nimport type {\n  PluginGeneratedTypeSource,\n  TailorDBType,\n  TypeSourceInfoEntry,\n} from \"@/parser/service/tailordb/types\";\nimport type { ForeignKeyDefinition, IndexDefinition } from \"@toiroakr/lines-db\";\n\n/**\n * Processes TailorDB types to generate lines-db metadata\n * @param type - Parsed TailorDB type\n * @param source - Source file info\n * @returns Generated lines-db metadata\n */\nexport function processLinesDb(type: TailorDBType, source: TypeSourceInfoEntry): LinesDbMetadata {\n  if (isPluginGeneratedType(source)) {\n    // Plugin-generated type\n    return processLinesDbForPluginType(type, source);\n  }\n\n  // User-defined type\n  if (!source.filePath) {\n    throw new Error(`Missing source info for type ${type.name}`);\n  }\n  if (!source.exportName) {\n    throw new Error(`Missing export name for type ${type.name}`);\n  }\n\n  const { optionalFields, omitFields, indexes, foreignKeys } = extractFieldMetadata(type);\n\n  return {\n    typeName: type.name,\n    exportName: source.exportName,\n    importPath: source.filePath,\n    optionalFields,\n    omitFields,\n    foreignKeys,\n    indexes,\n  };\n}\n\n/**\n * Process lines-db metadata for plugin-generated types\n * @param type - Parsed TailorDB type\n * @param source - Plugin-generated type source info\n * @returns Generated lines-db metadata with plugin source\n */\nfunction processLinesDbForPluginType(\n  type: TailorDBType,\n  source: PluginGeneratedTypeSource,\n): LinesDbMetadata {\n  const { optionalFields, omitFields, indexes, foreignKeys } = extractFieldMetadata(type);\n\n  return {\n    typeName: type.name,\n    exportName: source.exportName,\n    importPath: \"\",\n    optionalFields,\n    omitFields,\n    foreignKeys,\n    indexes,\n    pluginSource: source,\n  };\n}\n\n/**\n * Extract field metadata from TailorDB type\n * @param type - Parsed TailorDB type\n * @returns Field metadata including optional fields, omit fields, indexes, and foreign keys\n */\nfunction extractFieldMetadata(type: TailorDBType): {\n  optionalFields: string[];\n  omitFields: string[];\n  indexes: IndexDefinition[];\n  foreignKeys: ForeignKeyDefinition[];\n} {\n  const optionalFields = [\"id\"]; // id is always optional\n  const omitFields: string[] = [];\n  const indexes: IndexDefinition[] = [];\n  const foreignKeys: ForeignKeyDefinition[] = [];\n\n  // Find fields with hooks.create or serial\n  for (const [fieldName, field] of Object.entries(type.fields)) {\n    if (field.config.hooks?.create) {\n      optionalFields.push(fieldName);\n    }\n    // Serial fields are auto-generated, so they should be optional in seed data\n    if (field.config.serial) {\n      omitFields.push(fieldName);\n    }\n    if (field.config.unique) {\n      indexes.push({\n        name: `${type.name.toLowerCase()}_${fieldName}_unique_idx`,\n        columns: [fieldName],\n        unique: true,\n      });\n    }\n  }\n\n  // Extract indexes\n  if (type.indexes) {\n    for (const [indexName, indexDef] of Object.entries(type.indexes)) {\n      indexes.push({\n        name: indexName,\n        columns: indexDef.fields,\n        unique: indexDef.unique,\n      });\n    }\n  }\n\n  // Extract foreign keys from relations\n  for (const [fieldName, field] of Object.entries(type.fields)) {\n    if (field.relation) {\n      foreignKeys.push({\n        column: fieldName,\n        references: {\n          table: field.relation.targetType,\n          column: field.relation.key,\n        },\n      });\n    }\n  }\n\n  return { optionalFields, omitFields, indexes, foreignKeys };\n}\n\n/**\n * Generate schema options code for lines-db\n * @param foreignKeys - Foreign key definitions\n * @param indexes - Index definitions\n * @returns Schema options code string\n */\nfunction generateSchemaOptions(\n  foreignKeys: ForeignKeyDefinition[],\n  indexes: IndexDefinition[],\n): string {\n  const schemaOptions: string[] = [];\n\n  if (foreignKeys.length > 0) {\n    schemaOptions.push(`foreignKeys: [`);\n    foreignKeys.forEach((fk) => {\n      schemaOptions.push(`  ${JSON.stringify(fk)},`);\n    });\n    schemaOptions.push(`],`);\n  }\n\n  if (indexes.length > 0) {\n    schemaOptions.push(`indexes: [`);\n    indexes.forEach((index) => {\n      schemaOptions.push(`  ${JSON.stringify(index)},`);\n    });\n    schemaOptions.push(\"],\");\n  }\n\n  return schemaOptions.length > 0\n    ? [\"\\n  {\", ...schemaOptions.map((option) => `    ${option}`), \"  }\"].join(\"\\n\")\n    : \"\";\n}\n\n/**\n * Generates the schema file content for lines-db (for user-defined types with import)\n * @param metadata - lines-db metadata\n * @param importPath - Import path for the TailorDB type\n * @returns Schema file contents\n */\nexport function generateLinesDbSchemaFile(metadata: LinesDbMetadata, importPath: string): string {\n  const { exportName, optionalFields, omitFields, foreignKeys, indexes } = metadata;\n\n  const schemaTypeCode = ml /* ts */ `\n    const schemaType = t.object({\n      ...${exportName}.pickFields(${JSON.stringify(optionalFields)}, { optional: true }),\n      ...${exportName}.omitFields(${JSON.stringify([...optionalFields, ...omitFields])}),\n    });\n    `;\n\n  const schemaOptionsCode = generateSchemaOptions(foreignKeys, indexes);\n\n  return ml /* ts */ `\n    import { t } from \"@tailor-platform/sdk\";\n    import { defineSchema } from \"@tailor-platform/sdk/seed\";\n    import { createTailorDBHook, createStandardSchema } from \"@tailor-platform/sdk/test\";\n    import { ${exportName} } from \"${importPath}\";\n\n    ${schemaTypeCode}\n\n    const hook = createTailorDBHook(${exportName});\n\n    export const schema = defineSchema(\n      createStandardSchema(schemaType, hook),${schemaOptionsCode}\n    );\n\n    `;\n}\n\n/**\n * Parameters for generating plugin-type schema file\n */\nexport interface PluginSchemaParams {\n  /** Relative path from schema output to tailor.config.ts */\n  configImportPath: string;\n  /** Relative import path to the original type file (for type-attached plugins) */\n  originalImportPath?: string;\n}\n\n/**\n * Generates the schema file content using getGeneratedType API\n * (for plugin-generated types)\n * @param metadata - lines-db metadata (must have pluginSource)\n * @param params - Plugin import paths\n * @returns Schema file contents\n */\nexport function generateLinesDbSchemaFileWithPluginAPI(\n  metadata: LinesDbMetadata,\n  params: PluginSchemaParams,\n): string {\n  const { typeName, exportName, optionalFields, omitFields, foreignKeys, indexes, pluginSource } =\n    metadata;\n\n  if (!pluginSource) {\n    throw new Error(`pluginSource is required for plugin-generated type \"${typeName}\"`);\n  }\n\n  const { configImportPath, originalImportPath } = params;\n\n  const schemaTypeCode = ml /* ts */ `\n    const schemaType = t.object({\n      ...${exportName}.pickFields(${JSON.stringify(optionalFields)}, { optional: true }),\n      ...${exportName}.omitFields(${JSON.stringify([...optionalFields, ...omitFields])}),\n    });\n    `;\n\n  const schemaOptionsCode = generateSchemaOptions(foreignKeys, indexes);\n\n  // Type-attached plugin (e.g., changeset): import original type and use getGeneratedType(configPath, pluginId, type, kind)\n  if (pluginSource.originalExportName && originalImportPath && pluginSource.generatedTypeKind) {\n    return ml /* ts */ `\n    import { join } from \"node:path\";\n    import { t } from \"@tailor-platform/sdk\";\n    import { getGeneratedType } from \"@tailor-platform/sdk/plugin\";\n    import { defineSchema } from \"@tailor-platform/sdk/seed\";\n    import { createTailorDBHook, createStandardSchema } from \"@tailor-platform/sdk/test\";\n    import { ${pluginSource.originalExportName} } from \"${originalImportPath}\";\n\n    const configPath = join(import.meta.dirname, \"${configImportPath}\");\n    const ${exportName} = await getGeneratedType(configPath, \"${pluginSource.pluginId}\", ${pluginSource.originalExportName}, \"${pluginSource.generatedTypeKind}\");\n\n    ${schemaTypeCode}\n\n    const hook = createTailorDBHook(${exportName});\n\n    export const schema = defineSchema(\n      createStandardSchema(schemaType, hook),${schemaOptionsCode}\n    );\n\n    `;\n  }\n\n  // Namespace plugin (e.g., audit-log): use getGeneratedType(configPath, pluginId, null, kind)\n  // For namespace plugins, generatedTypeKind is required\n  if (!pluginSource.generatedTypeKind) {\n    throw new Error(\n      `Namespace plugin \"${pluginSource.pluginId}\" must provide generatedTypeKind for type \"${typeName}\"`,\n    );\n  }\n\n  return ml /* ts */ `\n    import { join } from \"node:path\";\n    import { t } from \"@tailor-platform/sdk\";\n    import { getGeneratedType } from \"@tailor-platform/sdk/plugin\";\n    import { defineSchema } from \"@tailor-platform/sdk/seed\";\n    import { createTailorDBHook, createStandardSchema } from \"@tailor-platform/sdk/test\";\n\n    const configPath = join(import.meta.dirname, \"${configImportPath}\");\n    const ${exportName} = await getGeneratedType(configPath, \"${pluginSource.pluginId}\", null, \"${pluginSource.generatedTypeKind}\");\n\n    ${schemaTypeCode}\n\n    const hook = createTailorDBHook(${exportName});\n\n    export const schema = defineSchema(\n      createStandardSchema(schemaType, hook),${schemaOptionsCode}\n    );\n\n    `;\n}\n","import type { SeedTypeInfo } from \"./types\";\nimport type { TailorDBType } from \"@/parser/service/tailordb/types\";\n\n/**\n * Processes TailorDB types to extract seed type information\n * @param type - Parsed TailorDB type\n * @param namespace - Namespace of the type\n * @returns Seed type information\n */\nexport function processSeedTypeInfo(type: TailorDBType, namespace: string): SeedTypeInfo {\n  // Extract dependencies from relations (including keyOnly which only sets foreignKeyType)\n  const dependencies: Set<string> = new Set();\n  const selfRefFields: string[] = [];\n\n  for (const [fieldName, field] of Object.entries(type.fields)) {\n    const targetType = field.relation?.targetType ?? field.config.foreignKeyType;\n    if (!targetType) continue;\n\n    if (targetType === type.name) {\n      selfRefFields.push(fieldName);\n    } else {\n      dependencies.add(targetType);\n    }\n  }\n\n  return {\n    name: type.name,\n    namespace,\n    dependencies: Array.from(dependencies),\n    selfRefFields,\n    dataFile: `data/${type.name}.jsonl`,\n  };\n}\n","import * as path from \"pathe\";\nimport { assertDefined } from \"@/utils/assert\";\nimport ml from \"@/utils/multiline\";\nimport {\n  processIdpUser,\n  generateIdpUserSchemaFile,\n  generateIdpSeedScriptCode,\n  generateIdpTruncateScriptCode,\n} from \"./idp-user-processor\";\nimport {\n  processLinesDb,\n  generateLinesDbSchemaFile,\n  generateLinesDbSchemaFileWithPluginAPI,\n  type PluginSchemaParams,\n} from \"./lines-db-processor\";\nimport { processSeedTypeInfo } from \"./seed-type-processor\";\nimport type { Plugin, GeneratorResult, TailorDBReadyContext } from \"@/plugin/types\";\n\n/** Unique identifier for the seed generator plugin. */\nexport const SeedGeneratorID = \"@tailor-platform/seed\";\n\ntype DisableIdpUserSyncDirections = {\n  /**\n   * Skip emitting the foreign key from `<userProfile>.<usernameField>` to\n   * `_User.name`. Defaults to `false` (FK emitted).\n   *\n   * Set to `true` to seed pre-registration states such as\n   * invited-but-not-registered users.\n   */\n  userToIdp?: boolean;\n  /**\n   * Skip emitting the foreign key from `_User.name` to\n   * `<userProfile>.<usernameField>`. Defaults to `false` (FK emitted).\n   *\n   * Set to `true` to seed `_User` rows that do not yet have a corresponding\n   * userProfile row.\n   */\n  idpToUser?: boolean;\n};\n\ntype SeedPluginOptions = {\n  distPath: string;\n  machineUserName?: string;\n  /**\n   * Disable individual `_User <-> userProfile` foreign keys emitted into\n   * the generated seed schema. Both directions are emitted by default.\n   *\n   * Set a direction to `true` to relax it — for example to seed invited\n   * users that do not yet have an IdP credential.\n   */\n  disableIdpUserSync?: DisableIdpUserSyncDirections;\n};\n\nfunction resolveIdpUserSyncFKs(option: SeedPluginOptions[\"disableIdpUserSync\"]): {\n  emitUserToIdpFK: boolean;\n  emitIdpToUserFK: boolean;\n} {\n  return {\n    emitUserToIdpFK: !(option?.userToIdp ?? false),\n    emitIdpToUserFK: !(option?.idpToUser ?? false),\n  };\n}\n\ntype NamespaceConfig = {\n  namespace: string;\n  types: string[];\n  dependencies: Record<string, string[]>;\n  selfRefTypes: string[];\n};\n\n/**\n * Generate the IdP user seed function code using tailor.idp.Client via testExecScript\n * @param hasIdpUser - Whether IdP user is included\n * @param idpNamespace - The IDP namespace name\n * @returns JavaScript code for IdP user seeding function\n */\nfunction generateIdpUserSeedFunction(hasIdpUser: boolean, idpNamespace: string | null): string {\n  if (!hasIdpUser || !idpNamespace) return \"\";\n\n  const scriptCode = generateIdpSeedScriptCode(idpNamespace);\n\n  return ml`\n    // Seed _User via tailor.idp.Client (server-side)\n    const seedIdpUser = async () => {\n      console.log(styleText(\"cyan\", \"  Seeding _User via tailor.idp.Client...\"));\n      const dataDir = join(configDir, \"data\");\n      const data = loadSeedData(dataDir, [\"_User\"]);\n      const rows = data[\"_User\"] || [];\n      if (rows.length === 0) {\n        console.log(styleText(\"dim\", \"    No _User data to seed\"));\n        return { success: true };\n      }\n      console.log(styleText(\"dim\", \\`    Processing \\${rows.length} _User records...\\`));\n\n      const idpSeedCode = \\/* js *\\/\\`${scriptCode.replace(/`/g, \"\\\\`\").replace(/\\$/g, \"\\\\$\")}\\`;\n\n      const result = await executeScript({\n        client: operatorClient,\n        workspaceId,\n        name: \"seed-idp-user.ts\",\n        code: idpSeedCode,\n        arg: JSON.stringify({ users: rows }),\n        invoker: {\n          namespace: authNamespace,\n          machineUserName,\n        },\n      });\n\n      if (result.logs) {\n        for (const line of result.logs.split(\"\\\\n\").filter(Boolean)) {\n          console.log(styleText(\"dim\", \\`    \\${line}\\`));\n        }\n      }\n\n      if (result.success) {\n        let parsed;\n        try {\n          parsed = JSON.parse(result.result || \"{}\");\n        } catch (e) {\n          console.error(styleText(\"red\", \\`    ✗ Failed to parse seed result: \\${e.message}\\`));\n          return { success: false };\n        }\n\n        if (parsed.processed) {\n          console.log(styleText(\"green\", \\`    ✓ _User: \\${parsed.processed} rows processed\\`));\n        }\n\n        if (!parsed.success) {\n          const errors = Array.isArray(parsed.errors) ? parsed.errors : [];\n          for (const err of errors) {\n            console.error(styleText(\"red\", \\`    ✗ \\${err}\\`));\n          }\n          return { success: false };\n        }\n\n        return { success: true };\n      } else {\n        console.error(styleText(\"red\", \\`    ✗ Seed failed: \\${result.error}\\`));\n        return { success: false };\n      }\n    };\n  `;\n}\n\n/**\n * Generate the IdP user seed call code\n * @param hasIdpUser - Whether IdP user is included\n * @returns JavaScript code for calling IdP user seeding\n */\nfunction generateIdpUserSeedCall(hasIdpUser: boolean): string {\n  if (!hasIdpUser) return \"\";\n\n  return ml`\n    // Seed _User if included and not skipped\n    const shouldSeedUser = !skipIdp && (!entitiesToProcess || entitiesToProcess.includes(\"_User\"));\n    if (hasIdpUser && shouldSeedUser) {\n      const result = await seedIdpUser();\n      if (!result.success) {\n        allSuccess = false;\n      }\n    }\n  `;\n}\n\n/**\n * Generate the IdP user truncation function code using tailor.idp.Client via testExecScript\n * @param hasIdpUser - Whether IdP user is included\n * @param idpNamespace - The IDP namespace name\n * @returns JavaScript code for IdP user truncation function\n */\nfunction generateIdpUserTruncateFunction(hasIdpUser: boolean, idpNamespace: string | null): string {\n  if (!hasIdpUser || !idpNamespace) return \"\";\n\n  const scriptCode = generateIdpTruncateScriptCode(idpNamespace);\n\n  return ml`\n    // Truncate _User via tailor.idp.Client (server-side)\n    const truncateIdpUser = async () => {\n      console.log(styleText(\"cyan\", \"Truncating _User via tailor.idp.Client...\"));\n\n      const idpTruncateCode = \\/* js *\\/\\`${scriptCode.replace(/`/g, \"\\\\`\").replace(/\\$/g, \"\\\\$\")}\\`;\n\n      const result = await executeScript({\n        client: operatorClient,\n        workspaceId,\n        name: \"truncate-idp-user.ts\",\n        code: idpTruncateCode,\n        arg: JSON.stringify({}),\n        invoker: {\n          namespace: authNamespace,\n          machineUserName,\n        },\n      });\n\n      if (result.logs) {\n        for (const line of result.logs.split(\"\\\\n\").filter(Boolean)) {\n          console.log(styleText(\"dim\", \\`  \\${line}\\`));\n        }\n      }\n\n      if (result.success) {\n        let parsed;\n        try {\n          parsed = JSON.parse(result.result || \"{}\");\n        } catch (e) {\n          console.error(styleText(\"red\", \\`  ✗ Failed to parse truncation result: \\${e.message}\\`));\n          return { success: false };\n        }\n\n        if (parsed.deleted !== undefined) {\n          console.log(styleText(\"green\", \\`  ✓ _User: \\${parsed.deleted} users deleted\\`));\n        }\n\n        if (!parsed.success) {\n          const errors = Array.isArray(parsed.errors) ? parsed.errors : [];\n          for (const err of errors) {\n            console.error(styleText(\"red\", \\`  ✗ \\${err}\\`));\n          }\n          return { success: false };\n        }\n\n        return { success: true };\n      } else {\n        console.error(styleText(\"red\", \\`  ✗ Truncation failed: \\${result.error}\\`));\n        return { success: false };\n      }\n    };\n  `;\n}\n\n/**\n * Generate the IdP user truncation call code within the truncate block\n * @param hasIdpUser - Whether IdP user is included\n * @returns JavaScript code for calling IdP user truncation\n */\nfunction generateIdpUserTruncateCall(hasIdpUser: boolean): string {\n  if (!hasIdpUser) return \"\";\n\n  return ml`\n    // Truncate _User if applicable\n    const shouldTruncateUser = !skipIdp && !hasNamespace && (!hasTypes || entitiesToProcess.includes(\"_User\"));\n    if (hasIdpUser && shouldTruncateUser) {\n      const truncResult = await truncateIdpUser();\n      if (!truncResult.success) {\n        console.error(styleText(\"red\", \"IDP user truncation failed.\"));\n        process.exit(1);\n      }\n    }\n  `;\n}\n\n/**\n * Generates the exec.mjs script content using testExecScript API for TailorDB types\n * and tailor.idp.Client for _User (IdP managed)\n * @param defaultMachineUserName - Default machine user name from generator config (can be overridden at runtime)\n * @param relativeConfigPath - Config path relative to exec script\n * @param namespaceConfigs - Namespace configurations with types and dependencies\n * @param hasIdpUser - Whether _User is included\n * @param idpNamespace - The IDP namespace name, or null if not applicable\n * @returns exec.mjs file contents\n */\nfunction generateExecScript(\n  defaultMachineUserName: string | undefined,\n  relativeConfigPath: string,\n  namespaceConfigs: NamespaceConfig[],\n  hasIdpUser: boolean,\n  idpNamespace: string | null,\n): string {\n  // Generate namespaceEntities object\n  const namespaceEntitiesEntries = namespaceConfigs\n    .map(({ namespace, types }) => {\n      const entitiesFormatted = types.map((e) => `        \"${e}\",`).join(\"\\n\");\n      return `      \"${namespace}\": [\\n${entitiesFormatted}\\n      ]`;\n    })\n    .join(\",\\n\");\n\n  // Generate dependency map for each namespace\n  const namespaceDepsEntries = namespaceConfigs\n    .map(({ namespace, dependencies }) => {\n      const depsObj = Object.entries(dependencies)\n        .map(([type, deps]) => `        \"${type}\": [${deps.map((d) => `\"${d}\"`).join(\", \")}]`)\n        .join(\",\\n\");\n      return `      \"${namespace}\": {\\n${depsObj}\\n      }`;\n    })\n    .join(\",\\n\");\n\n  // Generate self-referencing types map for each namespace\n  const namespaceSelfRefEntries = namespaceConfigs\n    .map(({ namespace, selfRefTypes }) => {\n      const formatted = selfRefTypes.map((t) => `\"${t}\"`).join(\", \");\n      return `      \"${namespace}\": [${formatted}]`;\n    })\n    .join(\",\\n\");\n\n  return ml /* js */ `\n    /**\n     * @generated\n     * This file is auto-generated by @tailor-platform/sdk's seedPlugin.\n     * Do not edit by hand: changes will be overwritten on the next \\`sdk generate\\`.\n     */\n    import { readFileSync } from \"node:fs\";\n    import { join, isAbsolute } from \"node:path\";\n    import { parseArgs, styleText } from \"node:util\";\n    import { createInterface } from \"node:readline\";\n    import {\n      show,\n      truncate,\n      bundleSeedScript,\n      chunkSeedData,\n      executeScript,\n      initOperatorClient,\n      loadAccessToken,\n      loadWorkspaceId,\n    } from \"@tailor-platform/sdk/cli\";\n\n    // Handle \"validate\" subcommand before parseArgs\n    const subcommand = process.argv[2];\n    if (subcommand === \"validate\") {\n      const { validateSeedData } = await import(\"@tailor-platform/sdk/seed\");\n      const validateArgs = parseArgs({\n        args: process.argv.slice(3),\n        options: {\n          verbose: { type: \"boolean\", short: \"v\", default: false },\n          help: { type: \"boolean\", short: \"h\", default: false },\n        },\n        allowPositionals: true,\n      });\n\n      if (validateArgs.values.help) {\n        console.log(\\`\n    Usage: node exec.mjs validate [options] [path]\n\n    Validate JSONL seed data against schema definitions.\n\n    Arguments:\n      path                      File or directory to validate (default: ./data)\n\n    Options:\n      -v, --verbose             Show verbose error output\n      -h, --help                Show help\n\n    Examples:\n      node exec.mjs validate                  # Validate all seed data\n      node exec.mjs validate ./data/User.jsonl # Validate specific file\n      node exec.mjs validate -v               # Verbose error output\n        \\`);\n        process.exit(0);\n      }\n\n      const configDir = import.meta.dirname;\n      const targetPath = validateArgs.positionals[0] || join(configDir, \"data\");\n      const resolvedPath = isAbsolute(targetPath) ? targetPath : join(process.cwd(), targetPath);\n\n      try {\n        const result = await validateSeedData({ path: resolvedPath, verbose: validateArgs.values.verbose });\n        if (result.output) console.log(result.output);\n        if (!result.valid) {\n          console.error(result.error);\n          process.exit(1);\n        }\n        process.exit(0);\n      } catch (error) {\n        console.error(styleText(\"red\", \\`Error: \\${error instanceof Error ? error.message : String(error)}\\`));\n        process.exit(1);\n      }\n    }\n\n    // Parse command-line arguments\n    const { values, positionals } = parseArgs({\n      options: {\n        \"machine-user\": { type: \"string\", short: \"m\" },\n        namespace: { type: \"string\", short: \"n\" },\n        \"skip-idp\": { type: \"boolean\", default: false },\n        truncate: { type: \"boolean\", default: false },\n        yes: { type: \"boolean\", default: false },\n        profile: { type: \"string\", short: \"p\" },\n        help: { type: \"boolean\", short: \"h\", default: false },\n      },\n      allowPositionals: true,\n    });\n\n    if (values.help) {\n      console.log(\\`\n    Usage: node exec.mjs [command] [options] [types...]\n\n    Commands:\n      validate [path]           Validate seed data against schema (default: ./data)\n\n    Options:\n      -m, --machine-user <name> Machine user name for authentication (required if not configured)\n      -n, --namespace <ns>      Process all types in specified namespace (excludes _User)\n      --skip-idp                Skip IdP user (_User) entity\n      --truncate                Truncate tables before seeding\n      --yes                     Skip confirmation prompts (for truncate)\n      -p, --profile <name>      Workspace profile name\n      -h, --help                Show help\n\n    Examples:\n      node exec.mjs -m admin                            # Process all types with machine user\n      node exec.mjs --namespace <namespace>             # Process tailordb namespace only (no _User)\n      node exec.mjs User Order                          # Process specific types only\n      node exec.mjs --skip-idp                          # Process all except _User\n      node exec.mjs --truncate                          # Truncate all tables, then seed all\n      node exec.mjs --truncate --yes                    # Truncate all tables without confirmation, then seed all\n      node exec.mjs --truncate --namespace <namespace>  # Truncate tailordb, then seed tailordb\n      node exec.mjs --truncate User Order               # Truncate User and Order, then seed them\n      node exec.mjs validate                            # Validate all seed data\n      node exec.mjs validate ./data/User.jsonl          # Validate specific file\n      \\`);\n      process.exit(0);\n    }\n\n    // Helper function to prompt for y/n confirmation\n    const promptConfirmation = (question) => {\n      const rl = createInterface({\n        input: process.stdin,\n        output: process.stdout,\n      });\n\n      return new Promise((resolve) => {\n        rl.question(styleText(\"yellow\", question), (answer) => {\n          rl.close();\n          resolve(answer.toLowerCase().trim());\n        });\n      });\n    };\n\n    const configDir = import.meta.dirname;\n    const configPath = join(configDir, \"${relativeConfigPath}\");\n\n    // Determine machine user name (CLI argument takes precedence over config default)\n    const defaultMachineUser = ${defaultMachineUserName ? `\"${defaultMachineUserName}\"` : \"undefined\"};\n    const machineUserName = values[\"machine-user\"] || defaultMachineUser;\n\n    if (!machineUserName) {\n      console.error(styleText(\"red\", \"Error: Machine user name is required.\"));\n      console.error(styleText(\"yellow\", \"Specify --machine-user <name> or configure machineUserName in generator options.\"));\n      process.exit(1);\n    }\n\n    // Entity configuration\n    const namespaceEntities = {\n${namespaceEntitiesEntries}\n    };\n    const namespaceDeps = {\n${namespaceDepsEntries}\n    };\n    const namespaceSelfRefTypes = {\n${namespaceSelfRefEntries}\n    };\n    const entities = Object.values(namespaceEntities).flat();\n    const hasIdpUser = ${String(hasIdpUser)};\n\n    // Determine which entities to process\n    let entitiesToProcess = null;\n\n    const hasNamespace = !!values.namespace;\n    const hasTypes = positionals.length > 0;\n    const skipIdp = values[\"skip-idp\"];\n\n    // Validate mutually exclusive options\n    const optionCount = [hasNamespace, hasTypes].filter(Boolean).length;\n    if (optionCount > 1) {\n      console.error(styleText(\"red\", \"Error: Options --namespace and type names are mutually exclusive.\"));\n      process.exit(1);\n    }\n\n    // --skip-idp and --namespace are redundant (namespace already excludes _User)\n    if (skipIdp && hasNamespace) {\n      console.warn(styleText(\"yellow\", \"Warning: --skip-idp is redundant with --namespace (namespace filtering already excludes _User).\"));\n    }\n\n    // Filter by namespace (automatically excludes _User as it has no namespace)\n    if (hasNamespace) {\n      const namespace = values.namespace;\n      entitiesToProcess = namespaceEntities[namespace];\n\n      if (!entitiesToProcess || entitiesToProcess.length === 0) {\n        console.error(styleText(\"red\", \\`Error: No entities found in namespace \"\\${namespace}\"\\`));\n        console.error(styleText(\"yellow\", \\`Available namespaces: \\${Object.keys(namespaceEntities).join(\", \")}\\`));\n        process.exit(1);\n      }\n\n      console.log(styleText(\"cyan\", \\`Filtering by namespace: \\${namespace}\\`));\n      console.log(styleText(\"dim\", \\`Entities: \\${entitiesToProcess.join(\", \")}\\`));\n    }\n\n    // Filter by specific types\n    if (hasTypes) {\n      const requestedTypes = positionals;\n      const notFoundTypes = [];\n      const allTypes = hasIdpUser ? [...entities, \"_User\"] : entities;\n\n      entitiesToProcess = requestedTypes.filter((type) => {\n        if (!allTypes.includes(type)) {\n          notFoundTypes.push(type);\n          return false;\n        }\n        return true;\n      });\n\n      if (notFoundTypes.length > 0) {\n        console.error(styleText(\"red\", \\`Error: The following types were not found: \\${notFoundTypes.join(\", \")}\\`));\n        console.error(styleText(\"yellow\", \\`Available types: \\${allTypes.join(\", \")}\\`));\n        process.exit(1);\n      }\n\n      console.log(styleText(\"cyan\", \\`Filtering by types: \\${entitiesToProcess.join(\", \")}\\`));\n    }\n\n    // Apply --skip-idp filter\n    if (skipIdp) {\n      if (entitiesToProcess) {\n        entitiesToProcess = entitiesToProcess.filter((entity) => entity !== \"_User\");\n      } else {\n        entitiesToProcess = entities.filter((entity) => entity !== \"_User\");\n      }\n    }\n\n    // Get application info\n    const appInfo = await show({ configPath, profile: values.profile });\n    const authNamespace = appInfo.auth;\n\n    // Initialize operator client (once for all namespaces)\n    const accessToken = await loadAccessToken({ profile: values.profile });\n    const workspaceId = await loadWorkspaceId({ profile: values.profile });\n    const operatorClient = await initOperatorClient(accessToken);\n\n    ${generateIdpUserTruncateFunction(hasIdpUser, idpNamespace)}\n\n    // Truncate tables if requested\n    if (values.truncate) {\n      const answer = values.yes ? \"y\" : await promptConfirmation(\"Are you sure you want to truncate? (y/n): \");\n      if (answer !== \"y\") {\n        console.log(styleText(\"yellow\", \"Truncate cancelled.\"));\n        process.exit(0);\n      }\n\n      console.log(styleText(\"cyan\", \"Truncating tables...\"));\n\n      try {\n        if (hasNamespace) {\n          await truncate({\n            configPath,\n            profile: values.profile,\n            namespace: values.namespace,\n          });\n        } else if (hasTypes) {\n          const typesToTruncate = entitiesToProcess.filter((t) => t !== \"_User\");\n          if (typesToTruncate.length > 0) {\n            await truncate({\n              configPath,\n              profile: values.profile,\n              types: typesToTruncate,\n            });\n          } else {\n            console.log(styleText(\"dim\", \"No TailorDB types to truncate (only _User was specified).\"));\n          }\n        } else {\n          await truncate({\n            configPath,\n            profile: values.profile,\n            all: true,\n          });\n        }\n      } catch (error) {\n        console.error(styleText(\"red\", \\`Truncate failed: \\${error.message}\\`));\n        process.exit(1);\n      }\n\n      ${generateIdpUserTruncateCall(hasIdpUser)}\n\n      console.log(styleText(\"green\", \"Truncate completed.\"));\n    }\n\n    console.log(styleText(\"cyan\", \"\\\\nStarting seed data generation...\"));\n    if (skipIdp) {\n      console.log(styleText(\"dim\", \\`  Skipping IdP user (_User)\\`));\n    }\n\n    // Load seed data from JSONL files\n    const loadSeedData = (dataDir, typeNames) => {\n      const data = {};\n      for (const typeName of typeNames) {\n        const jsonlPath = join(dataDir, \\`\\${typeName}.jsonl\\`);\n        try {\n          const content = readFileSync(jsonlPath, \"utf-8\").trim();\n          if (content) {\n            data[typeName] = content.split(\"\\\\n\").map((line) => JSON.parse(line));\n          } else {\n            data[typeName] = [];\n          }\n        } catch (error) {\n          if (error.code === \"ENOENT\") {\n            data[typeName] = [];\n          } else {\n            throw error;\n          }\n        }\n      }\n      return data;\n    };\n\n    // Topological sort for dependency order\n    const topologicalSort = (types, deps) => {\n      const visited = new Set();\n      const result = [];\n\n      const visit = (type) => {\n        if (visited.has(type)) return;\n        visited.add(type);\n        const typeDeps = deps[type] || [];\n        for (const dep of typeDeps) {\n          if (types.includes(dep)) {\n            visit(dep);\n          }\n        }\n        result.push(type);\n      };\n\n      for (const type of types) {\n        visit(type);\n      }\n      return result;\n    };\n\n    // Seed TailorDB types via testExecScript\n    const seedViaTestExecScript = async (namespace, typesToSeed, deps, selfRefTypes) => {\n      const dataDir = join(configDir, \"data\");\n      const sortedTypes = topologicalSort(typesToSeed, deps);\n      const data = loadSeedData(dataDir, sortedTypes);\n\n      // Skip if no data\n      const typesWithData = sortedTypes.filter((t) => data[t] && data[t].length > 0);\n      if (typesWithData.length === 0) {\n        console.log(styleText(\"dim\", \\`  [\\${namespace}] No data to seed\\`));\n        return { success: true, processed: {} };\n      }\n\n      console.log(styleText(\"cyan\", \\`  [\\${namespace}] Seeding \\${typesWithData.length} types via Kysely batch insert...\\`));\n\n      // Bundle seed script\n      const bundled = await bundleSeedScript(namespace, typesWithData);\n\n      // Chunk seed data to fit within gRPC message size limits\n      const chunks = chunkSeedData({\n        data,\n        order: sortedTypes,\n        codeByteSize: new TextEncoder().encode(bundled.bundledCode).length,\n      });\n\n      if (chunks.length === 0) {\n        console.log(styleText(\"dim\", \\`  [\\${namespace}] No data to seed\\`));\n        return { success: true, processed: {} };\n      }\n\n      if (chunks.length > 1) {\n        console.log(styleText(\"dim\", \\`    Split into \\${chunks.length} chunks\\`));\n      }\n\n      const allProcessed = {};\n      let hasError = false;\n      const allErrors = [];\n\n      for (const chunk of chunks) {\n        if (chunks.length > 1) {\n          console.log(styleText(\"dim\", \\`    Chunk \\${chunk.index + 1}/\\${chunk.total}: \\${chunk.order.join(\", \")}\\`));\n        }\n\n        // Execute seed script for this chunk\n        const result = await executeScript({\n          client: operatorClient,\n          workspaceId,\n          name: \\`seed-\\${namespace}.ts\\`,\n          code: bundled.bundledCode,\n          arg: JSON.stringify({ data: chunk.data, order: chunk.order, selfRefTypes }),\n          invoker: {\n            namespace: authNamespace,\n            machineUserName,\n          },\n        });\n\n        // Parse result and display logs\n        if (result.logs) {\n          for (const line of result.logs.split(\"\\\\n\").filter(Boolean)) {\n            console.log(styleText(\"dim\", \\`    \\${line}\\`));\n          }\n        }\n\n        if (result.success) {\n          let parsed;\n          try {\n            const parsedResult = JSON.parse(result.result || \"{}\");\n            parsed = parsedResult && typeof parsedResult === \"object\" ? parsedResult : {};\n          } catch (error) {\n            const message = error instanceof Error ? error.message : String(error);\n            console.error(styleText(\"red\", \\`    ✗ Failed to parse seed result: \\${message}\\`));\n            hasError = true;\n            allErrors.push(message);\n            continue;\n          }\n\n          const processed = parsed.processed || {};\n          for (const [type, count] of Object.entries(processed)) {\n            allProcessed[type] = (allProcessed[type] || 0) + count;\n            console.log(styleText(\"green\", \\`    ✓ \\${type}: \\${count} rows inserted\\`));\n          }\n\n          if (!parsed.success) {\n            const errors = Array.isArray(parsed.errors) ? parsed.errors : [];\n            const errorMessage =\n              errors.length > 0 ? errors.join(\"\\\\n        \") : \"Seed script reported failure\";\n            console.error(styleText(\"red\", \\`    ✗ Seed failed:\\\\n        \\${errorMessage}\\`));\n            hasError = true;\n            allErrors.push(errorMessage);\n          }\n        } else {\n          console.error(styleText(\"red\", \\`    ✗ Seed failed: \\${result.error}\\`));\n          hasError = true;\n          allErrors.push(result.error);\n        }\n      }\n\n      if (hasError) {\n        return { success: false, error: allErrors.join(\"\\\\n\") };\n      }\n      return { success: true, processed: allProcessed };\n    };\n\n    ${generateIdpUserSeedFunction(hasIdpUser, idpNamespace)}\n\n    // Main execution\n    try {\n      let allSuccess = true;\n\n      // Determine which namespaces and types to process\n      const namespacesToProcess = hasNamespace\n        ? [values.namespace]\n        : Object.keys(namespaceEntities);\n\n      for (const namespace of namespacesToProcess) {\n        const nsTypes = namespaceEntities[namespace] || [];\n        const nsDeps = namespaceDeps[namespace] || {};\n        const nsSelfRefTypes = namespaceSelfRefTypes[namespace] || [];\n\n        // Filter types if specific types requested\n        let typesToSeed = entitiesToProcess\n          ? nsTypes.filter((t) => entitiesToProcess.includes(t))\n          : nsTypes;\n\n        if (typesToSeed.length === 0) continue;\n\n        const result = await seedViaTestExecScript(namespace, typesToSeed, nsDeps, nsSelfRefTypes);\n        if (!result.success) {\n          allSuccess = false;\n        }\n      }\n\n      ${generateIdpUserSeedCall(hasIdpUser)}\n\n      if (allSuccess) {\n        console.log(styleText(\"green\", \"\\\\n✓ Seed data generation completed successfully\"));\n      } else {\n        console.error(styleText(\"red\", \"\\\\n✗ Seed data generation completed with errors\"));\n        process.exit(1);\n      }\n    } catch (error) {\n      console.error(styleText(\"red\", \\`\\\\n✗ Seed data generation failed: \\${error.message}\\`));\n      process.exit(1);\n    }\n\n    `;\n}\n\n/**\n * Plugin that generates seed data files with Kysely batch insert and tailor.idp.Client for _User.\n * @param options - Plugin options\n * @param options.distPath - Output directory path for generated seed files\n * @param options.machineUserName - Default machine user name for authentication\n * @param options.disableIdpUserSync - Skip emitting individual `_User <-> userProfile` foreign keys. Both directions are emitted by default; set a direction to `true` to relax that side.\n * @returns Plugin instance with onTailorDBReady hook\n */\nexport function seedPlugin(options: SeedPluginOptions): Plugin<unknown, SeedPluginOptions> {\n  return {\n    id: SeedGeneratorID,\n    description: \"Generates seed data files (Kysely batch insert + tailor.idp.Client for _User)\",\n    pluginConfig: options,\n\n    async onTailorDBReady(ctx: TailorDBReadyContext<SeedPluginOptions>): Promise<GeneratorResult> {\n      const files: GeneratorResult[\"files\"] = [];\n      const namespaceConfigs: NamespaceConfig[] = [];\n\n      // Process IdP user early so we can add reverse FK to the user profile type\n      const idpUser = ctx.auth ? (processIdpUser(ctx.auth) ?? null) : null;\n      const hasIdpUser = idpUser !== null;\n      const idpUserSyncFKs = resolveIdpUserSyncFKs(ctx.pluginConfig.disableIdpUserSync);\n\n      for (const ns of ctx.tailordb) {\n        const types: string[] = [];\n        const dependencies: Record<string, string[]> = {};\n        const selfRefTypes: string[] = [];\n\n        for (const [typeName, type] of Object.entries(ns.types)) {\n          const source = assertDefined(\n            ns.sourceInfo.get(typeName),\n            `source info missing for type: ${typeName}`,\n          );\n          const typeInfo = processSeedTypeInfo(type, ns.namespace);\n          const linesDb = processLinesDb(type, source);\n\n          // Add reverse FK from userProfile type to _User (opt-out via disableIdpUserSync.userToIdp: true)\n          if (\n            idpUserSyncFKs.emitUserToIdpFK &&\n            idpUser &&\n            typeName === idpUser.schema.userTypeName\n          ) {\n            linesDb.foreignKeys.push({\n              column: idpUser.schema.usernameField,\n              references: {\n                table: \"_User\",\n                column: \"name\",\n              },\n            });\n          }\n\n          types.push(typeInfo.name);\n          dependencies[typeInfo.name] = typeInfo.dependencies;\n          if (typeInfo.selfRefFields.length > 0) {\n            selfRefTypes.push(typeInfo.name);\n          }\n\n          // Generate empty JSONL data file\n          files.push({\n            path: path.join(ctx.pluginConfig.distPath, typeInfo.dataFile),\n            content: \"\",\n            skipIfExists: true,\n          });\n\n          const schemaOutputPath = path.join(\n            ctx.pluginConfig.distPath,\n            \"data\",\n            `${linesDb.typeName}.schema.ts`,\n          );\n\n          // Plugin-generated type: use getGeneratedType API\n          if (linesDb.pluginSource && linesDb.pluginSource.pluginImportPath) {\n            // Build original type import path\n            let originalImportPath: string | undefined;\n            if (linesDb.pluginSource.originalFilePath && linesDb.pluginSource.originalExportName) {\n              const relativePath = path.relative(\n                path.dirname(schemaOutputPath),\n                linesDb.pluginSource.originalFilePath,\n              );\n              originalImportPath = relativePath.replace(/\\.ts$/, \"\").startsWith(\".\")\n                ? relativePath.replace(/\\.ts$/, \"\")\n                : `./${relativePath.replace(/\\.ts$/, \"\")}`;\n            }\n\n            // Compute relative path from schema output to config file\n            const configImportPath = path.relative(path.dirname(schemaOutputPath), ctx.configPath);\n\n            const params: PluginSchemaParams = {\n              configImportPath,\n              originalImportPath,\n            };\n\n            const schemaContent = generateLinesDbSchemaFileWithPluginAPI(linesDb, params);\n\n            files.push({\n              path: schemaOutputPath,\n              content: schemaContent,\n            });\n          } else {\n            // User-defined type: import from source file\n            const relativePath = path.relative(path.dirname(schemaOutputPath), linesDb.importPath);\n            const typeImportPath = relativePath.replace(/\\.ts$/, \"\").startsWith(\".\")\n              ? relativePath.replace(/\\.ts$/, \"\")\n              : `./${relativePath.replace(/\\.ts$/, \"\")}`;\n            const schemaContent = generateLinesDbSchemaFile(linesDb, typeImportPath);\n\n            files.push({\n              path: schemaOutputPath,\n              content: schemaContent,\n            });\n          }\n        }\n\n        namespaceConfigs.push({\n          namespace: ns.namespace,\n          types,\n          dependencies,\n          selfRefTypes,\n        });\n      }\n\n      if (idpUser) {\n        // Generate empty JSONL data file\n        files.push({\n          path: path.join(ctx.pluginConfig.distPath, idpUser.dataFile),\n          content: \"\",\n          skipIfExists: true,\n        });\n\n        // Generate schema file with foreign key (opt-out via disableIdpUserSync.idpToUser: true)\n        files.push({\n          path: path.join(ctx.pluginConfig.distPath, \"data\", `${idpUser.name}.schema.ts`),\n          content: generateIdpUserSchemaFile({\n            usernameField: idpUser.schema.usernameField,\n            userTypeName: idpUser.schema.userTypeName,\n            includeUserProfileFK: idpUserSyncFKs.emitIdpToUserFK,\n          }),\n        });\n      }\n\n      // Generate exec.mjs (machineUserName can be provided at runtime if not configured)\n      const relativeConfigPath = path.relative(ctx.pluginConfig.distPath, ctx.configPath);\n      files.push({\n        path: path.join(ctx.pluginConfig.distPath, \"exec.mjs\"),\n        content: generateExecScript(\n          ctx.pluginConfig.machineUserName,\n          relativeConfigPath,\n          namespaceConfigs,\n          hasIdpUser,\n          idpUser?.idpNamespace ?? null,\n        ),\n      });\n\n      return { files };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAmBA,SAAgB,eAAe,MAAuD;CAEpF,IAAI,KAAK,YAAY,SAAS,gBAAgB,CAAC,KAAK,aAClD;CAGF,MAAM,EAAE,UAAU,kBAAkB,KAAK;CAEzC,OAAO;EACL,MAAM;EACN,cAAc,CAAC,QAAQ;EACvB,UAAU;EACV,cAAc,KAAK,WAAW;EAC9B,QAAQ;GACN;GACA,cAAc;EAChB;CACF;AACF;;;;;;;AAQA,SAAgB,0BAA0B,cAA8B;CACtE,OAAO,SAAY;;2DAEsC,aAAa;;;;;;;;;;;;;;;;;;;;;;;AAuBxE;;;;;;;AAQA,SAAgB,8BAA8B,cAA8B;CAC1E,OAAO,SAAY;;2DAEsC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCxE;;;;;;;;;;;;AAyBA,SAAgB,0BAA0B,SAAmD;CAC3F,MAAM,EAAE,eAAe,cAAc,uBAAuB,SAAS;CAwBrE,OAAO,SAAY;;;;;;;;;;;;;;;;UAvBA,uBACf,SAAE;;;;;;;;;sBASc,aAAa;uBACZ,cAAc;;;;QAK/B,SAAE;;;;;MAuBa;;;;;AAKrB;;;;;;;;;;AC5KA,SAAgB,eAAe,MAAoB,QAA8C;CAC/F,IAAI,sBAAsB,MAAM,GAE9B,OAAO,4BAA4B,MAAM,MAAM;CAIjD,IAAI,CAAC,OAAO,UACV,MAAM,IAAI,MAAM,gCAAgC,KAAK,MAAM;CAE7D,IAAI,CAAC,OAAO,YACV,MAAM,IAAI,MAAM,gCAAgC,KAAK,MAAM;CAG7D,MAAM,EAAE,gBAAgB,YAAY,SAAS,gBAAgB,qBAAqB,IAAI;CAEtF,OAAO;EACL,UAAU,KAAK;EACf,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB;EACA;EACA;EACA;CACF;AACF;;;;;;;AAQA,SAAS,4BACP,MACA,QACiB;CACjB,MAAM,EAAE,gBAAgB,YAAY,SAAS,gBAAgB,qBAAqB,IAAI;CAEtF,OAAO;EACL,UAAU,KAAK;EACf,YAAY,OAAO;EACnB,YAAY;EACZ;EACA;EACA;EACA;EACA,cAAc;CAChB;AACF;;;;;;AAOA,SAAS,qBAAqB,MAK5B;CACA,MAAM,iBAAiB,CAAC,IAAI;CAC5B,MAAM,aAAuB,CAAC;CAC9B,MAAM,UAA6B,CAAC;CACpC,MAAM,cAAsC,CAAC;CAG7C,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,KAAK,MAAM,GAAG;EAC5D,IAAI,MAAM,OAAO,OAAO,QACtB,eAAe,KAAK,SAAS;EAG/B,IAAI,MAAM,OAAO,QACf,WAAW,KAAK,SAAS;EAE3B,IAAI,MAAM,OAAO,QACf,QAAQ,KAAK;GACX,MAAM,GAAG,KAAK,KAAK,YAAY,EAAE,GAAG,UAAU;GAC9C,SAAS,CAAC,SAAS;GACnB,QAAQ;EACV,CAAC;CAEL;CAGA,IAAI,KAAK,SACP,KAAK,MAAM,CAAC,WAAW,aAAa,OAAO,QAAQ,KAAK,OAAO,GAC7D,QAAQ,KAAK;EACX,MAAM;EACN,SAAS,SAAS;EAClB,QAAQ,SAAS;CACnB,CAAC;CAKL,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,KAAK,MAAM,GACzD,IAAI,MAAM,UACR,YAAY,KAAK;EACf,QAAQ;EACR,YAAY;GACV,OAAO,MAAM,SAAS;GACtB,QAAQ,MAAM,SAAS;EACzB;CACF,CAAC;CAIL,OAAO;EAAE;EAAgB;EAAY;EAAS;CAAY;AAC5D;;;;;;;AAQA,SAAS,sBACP,aACA,SACQ;CACR,MAAM,gBAA0B,CAAC;CAEjC,IAAI,YAAY,SAAS,GAAG;EAC1B,cAAc,KAAK,gBAAgB;EACnC,YAAY,SAAS,OAAO;GAC1B,cAAc,KAAK,KAAK,KAAK,UAAU,EAAE,EAAE,EAAE;EAC/C,CAAC;EACD,cAAc,KAAK,IAAI;CACzB;CAEA,IAAI,QAAQ,SAAS,GAAG;EACtB,cAAc,KAAK,YAAY;EAC/B,QAAQ,SAAS,UAAU;GACzB,cAAc,KAAK,KAAK,KAAK,UAAU,KAAK,EAAE,EAAE;EAClD,CAAC;EACD,cAAc,KAAK,IAAI;CACzB;CAEA,OAAO,cAAc,SAAS,IAC1B;EAAC;EAAS,GAAG,cAAc,KAAK,WAAW,OAAO,QAAQ;EAAG;CAAK,CAAC,CAAC,KAAK,IAAI,IAC7E;AACN;;;;;;;AAQA,SAAgB,0BAA0B,UAA2B,YAA4B;CAC/F,MAAM,EAAE,YAAY,gBAAgB,YAAY,aAAa,YAAY;CAWzE,OAAO,SAAY;;;;eAIN,WAAW,WAAW,WAAW;;MAE1C,AAfmBA,SAAY;;WAE1B,WAAW,cAAc,KAAK,UAAU,cAAc,EAAE;WACxD,WAAW,cAAc,KAAK,UAAU,CAAC,GAAG,gBAAgB,GAAG,UAAU,CAAC,EAAE;;MAYlE;;sCAEiB,WAAW;;;+CAVrB,sBAAsB,aAAa,OAaA,EAAE;;;;AAIjE;;;;;;;;AAmBA,SAAgB,uCACd,UACA,QACQ;CACR,MAAM,EAAE,UAAU,YAAY,gBAAgB,YAAY,aAAa,SAAS,iBAC9E;CAEF,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,uDAAuD,SAAS,EAAE;CAGpF,MAAM,EAAE,kBAAkB,uBAAuB;CAEjD,MAAM,iBAAiB,SAAY;;WAE1B,WAAW,cAAc,KAAK,UAAU,cAAc,EAAE;WACxD,WAAW,cAAc,KAAK,UAAU,CAAC,GAAG,gBAAgB,GAAG,UAAU,CAAC,EAAE;;;CAIrF,MAAM,oBAAoB,sBAAsB,aAAa,OAAO;CAGpE,IAAI,aAAa,sBAAsB,sBAAsB,aAAa,mBACxE,OAAO,SAAY;;;;;;eAMR,aAAa,mBAAmB,WAAW,mBAAmB;;oDAEzB,iBAAiB;YACzD,WAAW,yCAAyC,aAAa,SAAS,KAAK,aAAa,mBAAmB,KAAK,aAAa,kBAAkB;;MAEzJ,eAAe;;sCAEiB,WAAW;;;+CAGF,kBAAkB;;;;CAQ/D,IAAI,CAAC,aAAa,mBAChB,MAAM,IAAI,MACR,qBAAqB,aAAa,SAAS,6CAA6C,SAAS,EACnG;CAGF,OAAO,SAAY;;;;;;;oDAO+B,iBAAiB;YACzD,WAAW,yCAAyC,aAAa,SAAS,YAAY,aAAa,kBAAkB;;MAE3H,eAAe;;sCAEiB,WAAW;;;+CAGF,kBAAkB;;;;AAIjE;;;;;;;;;;ACrRA,SAAgB,oBAAoB,MAAoB,WAAiC;CAEvF,MAAM,+BAA4B,IAAI,IAAI;CAC1C,MAAM,gBAA0B,CAAC;CAEjC,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,KAAK,MAAM,GAAG;EAC5D,MAAM,aAAa,MAAM,UAAU,cAAc,MAAM,OAAO;EAC9D,IAAI,CAAC,YAAY;EAEjB,IAAI,eAAe,KAAK,MACtB,cAAc,KAAK,SAAS;OAE5B,aAAa,IAAI,UAAU;CAE/B;CAEA,OAAO;EACL,MAAM,KAAK;EACX;EACA,cAAc,MAAM,KAAK,YAAY;EACrC;EACA,UAAU,QAAQ,KAAK,KAAK;CAC9B;AACF;;;;;ACbA,MAAa,kBAAkB;AAkC/B,SAAS,sBAAsB,QAG7B;CACA,OAAO;EACL,iBAAiB,EAAE,QAAQ,aAAa;EACxC,iBAAiB,EAAE,QAAQ,aAAa;CAC1C;AACF;;;;;;;AAeA,SAAS,4BAA4B,YAAqB,cAAqC;CAC7F,IAAI,CAAC,cAAc,CAAC,cAAc,OAAO;CAIzC,OAAO,SAAE;;;;;;;;;;;;;wCAFU,0BAA0B,YAeE,CAAC,CAAC,QAAQ,MAAM,KAAK,CAAC,CAAC,QAAQ,OAAO,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgD9F;;;;;;AAOA,SAAS,wBAAwB,YAA6B;CAC5D,IAAI,CAAC,YAAY,OAAO;CAExB,OAAO,SAAE;;;;;;;;;;AAUX;;;;;;;AAQA,SAAS,gCAAgC,YAAqB,cAAqC;CACjG,IAAI,CAAC,cAAc,CAAC,cAAc,OAAO;CAIzC,OAAO,SAAE;;;;;4CAFU,8BAA8B,YAOE,CAAC,CAAC,QAAQ,MAAM,KAAK,CAAC,CAAC,QAAQ,OAAO,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDlG;;;;;;AAOA,SAAS,4BAA4B,YAA6B;CAChE,IAAI,CAAC,YAAY,OAAO;CAExB,OAAO,SAAE;;;;;;;;;;;AAWX;;;;;;;;;;;AAYA,SAAS,mBACP,wBACA,oBACA,kBACA,YACA,cACQ;CAER,MAAM,2BAA2B,iBAC9B,KAAK,EAAE,WAAW,YAAY;EAE7B,OAAO,UAAU,UAAU,QADD,MAAM,KAAK,MAAM,YAAY,EAAE,GAAG,CAAC,CAAC,KAAK,IAChB,EAAE;CACvD,CAAC,CAAC,CACD,KAAK,KAAK;CAGb,MAAM,uBAAuB,iBAC1B,KAAK,EAAE,WAAW,mBAAmB;EAIpC,OAAO,UAAU,UAAU,QAHX,OAAO,QAAQ,YAAY,CAAC,CACzC,KAAK,CAAC,MAAM,UAAU,YAAY,KAAK,MAAM,KAAK,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CACrF,KAAK,KACiC,EAAE;CAC7C,CAAC,CAAC,CACD,KAAK,KAAK;CAGb,MAAM,0BAA0B,iBAC7B,KAAK,EAAE,WAAW,mBAAmB;EAEpC,OAAO,UAAU,UAAU,MADT,aAAa,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAChB,EAAE;CAC7C,CAAC,CAAC,CACD,KAAK,KAAK;CAEb,OAAO,SAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CAsIqB,mBAAmB;;;iCAG5B,yBAAyB,IAAI,uBAAuB,KAAK,YAAY;;;;;;;;;;;EAWpG,yBAAyB;;;EAGzB,qBAAqB;;;EAGrB,wBAAwB;;;yBAGD,OAAO,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6EtC,gCAAgC,YAAY,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA0CxD,4BAA4B,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA+J1C,4BAA4B,YAAY,YAAY,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA6BpD,wBAAwB,UAAU,EAAE;;;;;;;;;;;;;;AAc5C;;;;;;;;;AAUA,SAAgB,WAAW,SAAgE;CACzF,OAAO;EACL,IAAI;EACJ,aAAa;EACb,cAAc;EAEd,MAAM,gBAAgB,KAAwE;GAC5F,MAAM,QAAkC,CAAC;GACzC,MAAM,mBAAsC,CAAC;GAG7C,MAAM,UAAU,IAAI,OAAQ,eAAe,IAAI,IAAI,KAAK,OAAQ;GAChE,MAAM,aAAa,YAAY;GAC/B,MAAM,iBAAiB,sBAAsB,IAAI,aAAa,kBAAkB;GAEhF,KAAK,MAAM,MAAM,IAAI,UAAU;IAC7B,MAAM,QAAkB,CAAC;IACzB,MAAM,eAAyC,CAAC;IAChD,MAAM,eAAyB,CAAC;IAEhC,KAAK,MAAM,CAAC,UAAU,SAAS,OAAO,QAAQ,GAAG,KAAK,GAAG;KACvD,MAAM,SAAS,cACb,GAAG,WAAW,IAAI,QAAQ,GAC1B,iCAAiC,UACnC;KACA,MAAM,WAAW,oBAAoB,MAAM,GAAG,SAAS;KACvD,MAAM,UAAU,eAAe,MAAM,MAAM;KAG3C,IACE,eAAe,mBACf,WACA,aAAa,QAAQ,OAAO,cAE5B,QAAQ,YAAY,KAAK;MACvB,QAAQ,QAAQ,OAAO;MACvB,YAAY;OACV,OAAO;OACP,QAAQ;MACV;KACF,CAAC;KAGH,MAAM,KAAK,SAAS,IAAI;KACxB,aAAa,SAAS,QAAQ,SAAS;KACvC,IAAI,SAAS,cAAc,SAAS,GAClC,aAAa,KAAK,SAAS,IAAI;KAIjC,MAAM,KAAK;MACT,MAAM,KAAK,KAAK,IAAI,aAAa,UAAU,SAAS,QAAQ;MAC5D,SAAS;MACT,cAAc;KAChB,CAAC;KAED,MAAM,mBAAmB,KAAK,KAC5B,IAAI,aAAa,UACjB,QACA,GAAG,QAAQ,SAAS,WACtB;KAGA,IAAI,QAAQ,gBAAgB,QAAQ,aAAa,kBAAkB;MAEjE,IAAI;MACJ,IAAI,QAAQ,aAAa,oBAAoB,QAAQ,aAAa,oBAAoB;OACpF,MAAM,eAAe,KAAK,SACxB,KAAK,QAAQ,gBAAgB,GAC7B,QAAQ,aAAa,gBACvB;OACA,qBAAqB,aAAa,QAAQ,SAAS,EAAE,CAAC,CAAC,WAAW,GAAG,IACjE,aAAa,QAAQ,SAAS,EAAE,IAChC,KAAK,aAAa,QAAQ,SAAS,EAAE;MAC3C;MAUA,MAAM,gBAAgB,uCAAuC,SAAS;OAJpE,kBAHuB,KAAK,SAAS,KAAK,QAAQ,gBAAgB,GAAG,IAAI,UAG1D;OACf;MAGyE,CAAC;MAE5E,MAAM,KAAK;OACT,MAAM;OACN,SAAS;MACX,CAAC;KACH,OAAO;MAEL,MAAM,eAAe,KAAK,SAAS,KAAK,QAAQ,gBAAgB,GAAG,QAAQ,UAAU;MAIrF,MAAM,gBAAgB,0BAA0B,SAHzB,aAAa,QAAQ,SAAS,EAAE,CAAC,CAAC,WAAW,GAAG,IACnE,aAAa,QAAQ,SAAS,EAAE,IAChC,KAAK,aAAa,QAAQ,SAAS,EAAE,GAC8B;MAEvE,MAAM,KAAK;OACT,MAAM;OACN,SAAS;MACX,CAAC;KACH;IACF;IAEA,iBAAiB,KAAK;KACpB,WAAW,GAAG;KACd;KACA;KACA;IACF,CAAC;GACH;GAEA,IAAI,SAAS;IAEX,MAAM,KAAK;KACT,MAAM,KAAK,KAAK,IAAI,aAAa,UAAU,QAAQ,QAAQ;KAC3D,SAAS;KACT,cAAc;IAChB,CAAC;IAGD,MAAM,KAAK;KACT,MAAM,KAAK,KAAK,IAAI,aAAa,UAAU,QAAQ,GAAG,QAAQ,KAAK,WAAW;KAC9E,SAAS,0BAA0B;MACjC,eAAe,QAAQ,OAAO;MAC9B,cAAc,QAAQ,OAAO;MAC7B,sBAAsB,eAAe;KACvC,CAAC;IACH,CAAC;GACH;GAGA,MAAM,qBAAqB,KAAK,SAAS,IAAI,aAAa,UAAU,IAAI,UAAU;GAClF,MAAM,KAAK;IACT,MAAM,KAAK,KAAK,IAAI,aAAa,UAAU,UAAU;IACrD,SAAS,mBACP,IAAI,aAAa,iBACjB,oBACA,kBACA,YACA,SAAS,gBAAgB,IAC3B;GACF,CAAC;GAED,OAAO,EAAE,MAAM;EACjB;CACF;AACF"}

package/dist/service-CCL8ruDf.mjs

@@ -1,459 +0,0 @@
-import { n as isSdkBranded } from "./brand-Eo4pLXPJ.mjs";
-import { n as logger, r as styles } from "./logger-CxF-Ex5d.mjs";
-import { z } from "zod";
-import * as fs from "node:fs";
-import * as path from "pathe";
-import { pathToFileURL } from "node:url";
-
-//#region src/parser/service/common.ts
-const functionSchema = z.custom((val) => typeof val === "function");
-
-//#endregion
-//#region src/cli/services/file-loader.ts
-const DEFAULT_IGNORE_PATTERNS = ["**/*.test.ts", "**/*.spec.ts"];
-/**
-* Load files matching the given patterns, excluding files that match ignore patterns.
-* By default, test files (*.test.ts, *.spec.ts) are excluded unless ignores is explicitly specified.
-* @param config - Configuration with files patterns and optional ignores patterns
-* @returns Array of absolute file paths
-*/
-function loadFilesWithIgnores(config) {
-	const ignorePatterns = config.ignores ?? DEFAULT_IGNORE_PATTERNS;
-	const ignoreFiles = /* @__PURE__ */ new Set();
-	for (const ignorePattern of ignorePatterns) {
-		const absoluteIgnorePattern = path.resolve(process.cwd(), ignorePattern);
-		try {
-			fs.globSync(absoluteIgnorePattern).forEach((file) => ignoreFiles.add(file));
-		} catch (error) {
-			logger.warn(`Failed to glob ignore pattern "${ignorePattern}": ${String(error)}`);
-		}
-	}
-	const files = [];
-	for (const pattern of config.files) {
-		const absolutePattern = path.resolve(process.cwd(), pattern);
-		try {
-			const filteredFiles = fs.globSync(absolutePattern).filter((file) => !ignoreFiles.has(file));
-			files.push(...filteredFiles);
-		} catch (error) {
-			logger.warn(`Failed to glob pattern "${pattern}": ${String(error)}`);
-		}
-	}
-	return files;
-}
-
-//#endregion
-//#region src/parser/service/auth-connection/schema.ts
-const AuthConnectionOAuth2ConfigSchema = z.object({
-	providerUrl: z.string().describe("OAuth2 provider URL"),
-	issuerUrl: z.string().describe("OAuth2 issuer URL"),
-	clientId: z.string().describe("OAuth2 client ID"),
-	clientSecret: z.string().describe("OAuth2 client secret"),
-	authUrl: z.string().optional().describe("OAuth2 authorization endpoint override"),
-	tokenUrl: z.string().optional().describe("OAuth2 token endpoint override")
-});
-const AuthConnectionConfigSchema = z.object({ type: z.literal("oauth2").describe("Connection type") }).and(AuthConnectionOAuth2ConfigSchema);
-
-//#endregion
-//#region src/parser/service/field/schema.ts
-const TailorFieldTypeSchema = z.enum([
-	"uuid",
-	"string",
-	"boolean",
-	"integer",
-	"float",
-	"decimal",
-	"enum",
-	"date",
-	"datetime",
-	"time",
-	"nested"
-]);
-const AllowedValueSchema = z.object({
-	value: z.string().describe("The allowed value"),
-	description: z.string().optional().describe("Description of the allowed value")
-});
-const FieldMetadataSchema = z.object({
-	required: z.boolean().optional().describe("Whether the field is required"),
-	array: z.boolean().optional().describe("Whether the field is an array"),
-	description: z.string().optional().describe("Field description"),
-	allowedValues: z.array(AllowedValueSchema).optional().describe("Allowed values for enum fields"),
-	hooks: z.object({
-		create: functionSchema.optional().describe("Hook function called on creation"),
-		update: functionSchema.optional().describe("Hook function called on update")
-	}).optional().describe("Lifecycle hooks"),
-	typeName: z.string().optional().describe("Type name for nested or enum fields")
-});
-const TailorFieldSchema = z.object({
-	type: TailorFieldTypeSchema.describe("Field data type"),
-	metadata: FieldMetadataSchema.describe("Field metadata configuration"),
-	get fields() {
-		return z.record(z.string(), TailorFieldSchema);
-	}
-});
-
-//#endregion
-//#region src/parser/service/auth/schema.ts
-const AuthInvokerObjectSchema = z.object({
-	namespace: z.string().describe("Auth namespace"),
-	machineUserName: z.string().describe("Machine user name for authentication")
-});
-const AuthInvokerSchema = z.union([z.string().describe("Machine user name (namespace auto-resolved from auth service)"), AuthInvokerObjectSchema]);
-const secretValueSchema = z.object({
-	vaultName: z.string().describe("Vault name containing the secret"),
-	secretKey: z.string().describe("Key of the secret in the vault")
-});
-const OIDCSchema = z.object({
-	name: z.string().describe("Identity provider name"),
-	kind: z.literal("OIDC"),
-	clientID: z.string().describe("OAuth2 client ID"),
-	clientSecret: secretValueSchema.describe("OAuth2 client secret"),
-	providerURL: z.string().describe("OIDC provider URL"),
-	issuerURL: z.string().optional().describe("OIDC issuer URL (defaults to providerURL)"),
-	usernameClaim: z.string().optional().describe("JWT claim to use as username")
-});
-const SAMLSchema = z.object({
-	name: z.string().describe("Identity provider name"),
-	kind: z.literal("SAML"),
-	enableSignRequest: z.boolean().default(false).describe("Enable signing of SAML requests"),
-	metadataURL: z.string().optional().describe("URL to fetch SAML metadata (mutually exclusive with rawMetadata)"),
-	rawMetadata: z.string().optional().describe("Raw SAML metadata XML (mutually exclusive with metadataURL)"),
-	defaultRedirectURL: z.string().optional().describe("URL to redirect to when SAML ACS receives a response with an empty RelayState.")
-}).refine((value) => {
-	return value.metadataURL !== void 0 !== (value.rawMetadata !== void 0);
-}, "Provide either metadataURL or rawMetadata");
-const IDTokenSchema = z.object({
-	name: z.string().describe("Identity provider name"),
-	kind: z.literal("IDToken"),
-	providerURL: z.string().describe("ID token provider URL"),
-	issuerURL: z.string().optional().describe("ID token issuer URL"),
-	clientID: z.string().describe("Client ID for ID token validation"),
-	usernameClaim: z.string().optional().describe("JWT claim to use as username")
-});
-const BuiltinIdPSchema = z.object({
-	name: z.string().describe("Identity provider name"),
-	kind: z.literal("BuiltInIdP"),
-	namespace: z.string().describe("IdP namespace"),
-	clientName: z.string().describe("OAuth2 client name in the IdP")
-});
-const IdProviderSchema = z.discriminatedUnion("kind", [
-	OIDCSchema,
-	SAMLSchema,
-	IDTokenSchema,
-	BuiltinIdPSchema
-]);
-const OAuth2ClientGrantTypeSchema = z.union([z.literal("authorization_code"), z.literal("refresh_token")]).describe("OAuth2 grant type");
-const OAuth2ClientSchema = z.object({
-	description: z.string().optional().describe("Client description"),
-	grantTypes: z.array(OAuth2ClientGrantTypeSchema).default(["authorization_code", "refresh_token"]).describe("Allowed OAuth2 grant types"),
-	redirectURIs: z.array(z.union([
-		z.templateLiteral(["https://", z.string()]),
-		z.templateLiteral(["http://", z.string()]),
-		z.templateLiteral([z.string(), ":url"]),
-		z.templateLiteral([
-			z.string(),
-			":url/",
-			z.string()
-		])
-	])).describe("Allowed redirect URIs"),
-	clientType: z.union([
-		z.literal("confidential"),
-		z.literal("public"),
-		z.literal("browser")
-	]).optional().describe("OAuth2 client type"),
-	accessTokenLifetimeSeconds: z.number().int().min(60, "Minimum access token lifetime is 60 seconds").max(86400, "Maximum access token lifetime is 1 day (86400 seconds)").optional().describe("Access token lifetime in seconds (60-86400)").transform((val) => val ? {
-		seconds: BigInt(val),
-		nanos: 0
-	} : void 0),
-	refreshTokenLifetimeSeconds: z.number().int().min(60, "Minimum refresh token lifetime is 60 seconds").max(604800, "Maximum refresh token lifetime is 7 days (604800 seconds)").optional().describe("Refresh token lifetime in seconds (60-604800)").transform((val) => val ? {
-		seconds: BigInt(val),
-		nanos: 0
-	} : void 0),
-	requireDpop: z.boolean().optional().describe("Require DPoP (Demonstrating Proof-of-Possession) for token requests")
-}).refine((data) => !(data.clientType === "browser" && data.requireDpop === true), {
-	message: "requireDpop cannot be set to true for browser clients as they don't support DPoP",
-	path: ["requireDpop"]
-});
-const SCIMAuthorizationSchema = z.object({
-	type: z.union([z.literal("oauth2"), z.literal("bearer")]).describe("SCIM authorization type"),
-	bearerSecret: secretValueSchema.optional().describe("Bearer token secret (required for bearer type)")
-});
-const SCIMAttributeTypeSchema = z.union([
-	z.literal("string"),
-	z.literal("number"),
-	z.literal("boolean"),
-	z.literal("datetime"),
-	z.literal("complex")
-]).describe("SCIM attribute data type");
-const SCIMAttributeSchema = z.object({
-	type: SCIMAttributeTypeSchema.describe("Attribute data type"),
-	name: z.string().describe("Attribute name"),
-	description: z.string().optional().describe("Attribute description"),
-	mutability: z.union([
-		z.literal("readOnly"),
-		z.literal("readWrite"),
-		z.literal("writeOnly")
-	]).optional().describe("Attribute mutability"),
-	required: z.boolean().optional().describe("Whether the attribute is required"),
-	multiValued: z.boolean().optional().describe("Whether the attribute can have multiple values"),
-	uniqueness: z.union([
-		z.literal("none"),
-		z.literal("server"),
-		z.literal("global")
-	]).optional().describe("Uniqueness constraint"),
-	canonicalValues: z.array(z.string()).nullable().optional().describe("List of canonical values"),
-	get subAttributes() {
-		return z.array(SCIMAttributeSchema).nullable().optional();
-	}
-});
-const SCIMSchemaSchema = z.object({
-	name: z.string().describe("SCIM schema name"),
-	attributes: z.array(SCIMAttributeSchema).describe("Schema attributes")
-});
-const SCIMAttributeMappingSchema = z.object({
-	tailorDBField: z.string().describe("TailorDB field name to map to"),
-	scimPath: z.string().describe("SCIM attribute path")
-});
-const SCIMResourceSchema = z.object({
-	name: z.string().describe("SCIM resource name"),
-	tailorDBNamespace: z.string().describe("TailorDB namespace for the resource"),
-	tailorDBType: z.string().describe("TailorDB type name for the resource"),
-	coreSchema: SCIMSchemaSchema.describe("Core SCIM schema definition"),
-	attributeMapping: z.array(SCIMAttributeMappingSchema).describe("Attribute mapping configuration")
-});
-const SCIMSchema = z.object({
-	machineUserName: z.string().describe("Machine user name for SCIM operations"),
-	authorization: SCIMAuthorizationSchema.describe("SCIM authorization configuration"),
-	resources: z.array(SCIMResourceSchema).describe("SCIM resource definitions")
-});
-const TenantProviderSchema = z.object({
-	namespace: z.string().describe("TailorDB namespace for the tenant type"),
-	type: z.string().describe("TailorDB type name for tenants"),
-	signatureField: z.string().describe("Field used as the tenant signature")
-});
-const UserProfileSchema = z.object({
-	namespace: z.string().optional().describe("TailorDB namespace where the user type is defined"),
-	type: z.object({
-		name: z.string(),
-		fields: z.any(),
-		metadata: z.any(),
-		hooks: z.any(),
-		validate: z.any(),
-		features: z.any(),
-		indexes: z.any(),
-		files: z.any(),
-		permission: z.any(),
-		gqlPermission: z.any(),
-		_output: z.any()
-	}),
-	usernameField: z.string(),
-	attributes: z.record(z.string(), z.literal(true)).optional(),
-	attributeList: z.array(z.string()).optional()
-});
-const ValueOperandSchema = z.union([
-	z.string(),
-	z.boolean(),
-	z.array(z.string()),
-	z.array(z.boolean())
-]);
-const MachineUserSchema = z.object({
-	attributes: z.record(z.string(), ValueOperandSchema).optional(),
-	attributeList: z.array(z.uuid()).optional()
-});
-const BeforeLoginHookSchema = z.object({
-	handler: z.function(),
-	invoker: z.string()
-});
-const AuthConfigBaseSchema = z.object({
-	name: z.string().describe("Auth service name"),
-	hooks: z.object({ beforeLogin: BeforeLoginHookSchema.optional().describe("Before login auth hook") }).optional().describe("Auth hooks"),
-	machineUsers: z.record(z.string(), MachineUserSchema).optional().describe("Machine user definitions"),
-	oauth2Clients: z.record(z.string(), OAuth2ClientSchema).optional().describe("OAuth2 client definitions"),
-	idProvider: IdProviderSchema.optional().describe("Identity provider configuration"),
-	scim: SCIMSchema.optional().describe("SCIM provisioning configuration"),
-	tenantProvider: TenantProviderSchema.optional().describe("Multi-tenant provider configuration"),
-	connections: z.record(z.string(), AuthConnectionConfigSchema).optional().describe("Auth connection definitions for external OAuth2 providers"),
-	publishSessionEvents: z.boolean().optional().describe("Enable publishing session events")
-});
-const AuthConfigSchema = z.xor([AuthConfigBaseSchema.extend({
-	userProfile: UserProfileSchema.optional().describe("User profile configuration"),
-	machineUserAttributes: z.undefined().optional()
-}), AuthConfigBaseSchema.extend({
-	userProfile: z.undefined().optional(),
-	machineUserAttributes: z.record(z.string(), TailorFieldSchema).describe("Machine user attribute fields")
-})], { error: (iss) => {
-	if (iss.code !== "invalid_union") return void 0;
-	if (iss.errors.length < 2) return void 0;
-	if (iss.errors.every((variantErrors) => variantErrors.every((e) => e.path.length === 1 && (e.path[0] === "userProfile" || e.path[0] === "machineUserAttributes")))) return "Specify either `userProfile` or `machineUserAttributes`, not both.";
-} }).brand("AuthConfig");
-
-//#endregion
-//#region src/parser/service/executor/schema.ts
-const TailorDBTriggerSchema = z.object({
-	kind: z.literal("tailordb").describe("TailorDB record event trigger"),
-	events: z.array(z.enum([
-		"tailordb.type_record.created",
-		"tailordb.type_record.updated",
-		"tailordb.type_record.deleted"
-	])).min(1).transform((arr) => [...new Set(arr)]).describe("TailorDB event types to trigger on"),
-	typeName: z.string().describe("TailorDB type name to watch for events"),
-	condition: functionSchema.optional().describe("Condition function to filter events")
-});
-const ResolverExecutedTriggerSchema = z.object({
-	kind: z.literal("resolverExecuted"),
-	resolverName: z.string().describe("Name of the resolver to trigger on"),
-	condition: functionSchema.optional().describe("Condition function to filter events")
-});
-const ScheduleTriggerSchema = z.object({
-	kind: z.literal("schedule"),
-	cron: z.string().describe("CRON expression for the schedule"),
-	timezone: z.string().optional().default("UTC").describe("Timezone for the CRON schedule (default: UTC)")
-});
-const IncomingWebhookTriggerResponseSchema = z.object({
-	body: functionSchema.optional().describe("Function returning the response body"),
-	statusCode: z.number().int().optional().describe("HTTP status code for the response")
-});
-const IncomingWebhookTriggerSchema = z.object({
-	kind: z.literal("incomingWebhook"),
-	response: IncomingWebhookTriggerResponseSchema.optional().describe("Response configuration")
-});
-const IdpUserTriggerSchema = z.object({
-	kind: z.literal("idpUser").describe("IdP user event trigger"),
-	events: z.array(z.enum([
-		"idp.user.created",
-		"idp.user.updated",
-		"idp.user.deleted"
-	])).min(1).transform((arr) => [...new Set(arr)]).describe("IdP user event types to trigger on"),
-	idp: z.string().optional().describe("IdP namespace name to subscribe to. If omitted, the project's only IdP is used; throws when multiple IdPs exist.")
-});
-const AuthAccessTokenTriggerSchema = z.object({
-	kind: z.literal("authAccessToken").describe("Auth access token event trigger"),
-	events: z.array(z.enum([
-		"auth.access_token.issued",
-		"auth.access_token.refreshed",
-		"auth.access_token.revoked"
-	])).min(1).transform((arr) => [...new Set(arr)]).describe("Auth access token event types to trigger on")
-});
-const TriggerSchema = z.discriminatedUnion("kind", [
-	TailorDBTriggerSchema,
-	ResolverExecutedTriggerSchema,
-	ScheduleTriggerSchema,
-	IncomingWebhookTriggerSchema,
-	IdpUserTriggerSchema,
-	AuthAccessTokenTriggerSchema
-]);
-const FunctionOperationSchema = z.object({
-	kind: z.enum(["function", "jobFunction"]),
-	body: functionSchema.describe("Function implementation"),
-	authInvoker: AuthInvokerSchema.optional().describe("Auth invoker for the function execution")
-});
-const GqlOperationSchema = z.object({
-	kind: z.literal("graphql"),
-	appName: z.string().optional().describe("Target application name for the GraphQL query"),
-	query: z.preprocess((val) => String(val), z.string().describe("GraphQL query string")),
-	variables: functionSchema.optional().describe("Function to compute GraphQL variables"),
-	authInvoker: AuthInvokerSchema.optional().describe("Auth invoker for the GraphQL execution")
-});
-const WebhookOperationSchema = z.object({
-	kind: z.literal("webhook"),
-	url: functionSchema.describe("Function returning the webhook URL"),
-	requestBody: functionSchema.optional().describe("Function to compute the request body"),
-	headers: z.record(z.string(), z.union([z.string(), z.object({
-		vault: z.string(),
-		key: z.string()
-	})])).optional().describe("HTTP headers for the webhook request")
-});
-const WorkflowOperationSchema = z.preprocess((val) => {
-	if (val == null || typeof val !== "object" || !("workflow" in val) || typeof val.workflow !== "object" || val.workflow === null) return val;
-	const { workflow, ...rest } = val;
-	return {
-		...rest,
-		workflowName: workflow.name
-	};
-}, z.object({
-	kind: z.literal("workflow"),
-	workflowName: z.string().describe("Name of the workflow to execute"),
-	args: z.union([z.record(z.string(), z.unknown()), functionSchema]).optional().describe("Arguments to pass to the workflow"),
-	authInvoker: AuthInvokerSchema.optional().describe("Auth invoker for the workflow execution")
-}));
-const OperationSchema = z.union([
-	FunctionOperationSchema,
-	GqlOperationSchema,
-	WebhookOperationSchema,
-	WorkflowOperationSchema
-]);
-const ExecutorSchema = z.object({
-	name: z.string().describe("Executor name"),
-	description: z.string().optional().describe("Executor description"),
-	disabled: z.boolean().optional().default(false).describe("Whether the executor is disabled"),
-	trigger: TriggerSchema.describe("Event trigger configuration"),
-	operation: OperationSchema.describe("Operation to execute when triggered")
-});
-
-//#endregion
-//#region src/cli/services/executor/service.ts
-/**
-* Creates a new ExecutorService instance.
-* @param params - Parameters for creating the service
-* @returns A new ExecutorService instance
-*/
-function createExecutorService(params) {
-	const { config } = params;
-	const executors = {};
-	const pluginExecutors = [];
-	let loadPromise;
-	const loadExecutorForFile = async (executorFile) => {
-		try {
-			const executorModule = await import(pathToFileURL(executorFile).href);
-			const result = ExecutorSchema.safeParse(executorModule.default);
-			if (result.success) {
-				const relativePath = path.relative(process.cwd(), executorFile);
-				logger.log(`Executor: ${styles.successBright(`"${result.data.name}"`)} loaded from ${styles.path(relativePath)}`);
-				executors[executorFile] = result.data;
-				return result.data;
-			}
-			if (isSdkBranded(executorModule.default, "executor")) throw result.error;
-		} catch (error) {
-			const relativePath = path.relative(process.cwd(), executorFile);
-			logger.error(`Failed to load executor from ${styles.bold(relativePath)}`);
-			logger.error(String(error));
-			throw error;
-		}
-	};
-	return {
-		config,
-		get executors() {
-			return executors;
-		},
-		get pluginExecutors() {
-			return pluginExecutors;
-		},
-		loadExecutors: async () => {
-			if (!loadPromise) loadPromise = (async () => {
-				if (config.files.length === 0) return;
-				const executorFiles = loadFilesWithIgnores(config);
-				logger.newline();
-				logger.log(`Found ${styles.highlight(executorFiles.length.toString())} executor files`);
-				await Promise.all(executorFiles.map((executorFile) => loadExecutorForFile(executorFile)));
-				return executors;
-			})();
-			return loadPromise;
-		},
-		loadPluginExecutorFiles: async (filePaths) => {
-			if (filePaths.length === 0) return;
-			logger.newline();
-			logger.log(`Loading ${styles.highlight(filePaths.length.toString())} plugin-generated executor files`);
-			for (const filePath of filePaths) {
-				const executor = await loadExecutorForFile(filePath);
-				if (executor) pluginExecutors.push({
-					executor,
-					pluginId: "plugin-generated",
-					sourceTypeName: void 0
-				});
-			}
-		}
-	};
-}
-
-//#endregion
-export { TailorFieldSchema as a, AuthInvokerSchema as i, ExecutorSchema as n, loadFilesWithIgnores as o, AuthConfigSchema as r, functionSchema as s, createExecutorService as t };
-//# sourceMappingURL=service-CCL8ruDf.mjs.map