@tailor-platform/sdk 2.0.0 → 2.1.0

package/dist/runtime/globals.d.mts

@@ -78,11 +78,4 @@ declare global {
     name: "TailorErrors";
     errors: TailorErrorItem[];
   }
-  /**
-   * Single-message error raised by the Tailor Platform Function runtime.
-   */
-  class TailorErrorMessage extends Error {
-    constructor(message: string);
-    name: "TailorErrorMessage";
-  }
 }

package/dist/runtime/workflow.d.mts

@@ -6,10 +6,8 @@
  * At runtime this delegates to `globalThis.tailor.workflow`. Use `mockWorkflow`
  * from `@tailor-platform/sdk/vitest` to mock these calls in unit tests.
  *
- * The canonical names (`startWorkflow`, `execJobFunction`,
- * `resumeWorkflowExecution`) mirror the public `tailor.v1` RPC vocabulary:
- * `Exec*` is a blocking call that returns the job's result, while `Start*`
- * returns only an execution ID.
+ * `execJobFunction` blocks until the job finishes and returns its result, while
+ * `startWorkflow` returns only an execution ID.
  * @example
  * import { workflow } from "@tailor-platform/sdk/runtime";
  *
@@ -69,9 +67,6 @@ interface PlatformWorkflowAPI {
   resumeWorkflowExecution(executionId: string): Promise<string>;
   /**
    * Executes a job function and returns its result via durable suspend/replay.
-   *
-   * Canonical name under the platform verb convention: `Exec*` blocks and
-   * returns the job's result, while `Start*` returns only an execution ID.
    * @param jobName - Job name as defined in the workflow
    * @param args - Arguments forwarded to the job
    * @param options - Optional execution options (e.g. `executionPolicyKey`)

package/dist/utils/test/index.d.mts

@@ -8,6 +8,9 @@ import { StandardSchemaV1 } from "@standard-schema/spec";
  * - Uses existing id from data if provided, otherwise generates UUID for id fields
  * - Recursively processes nested types
  * - Executes hooks.create for fields with create hooks
+ * - Takes each field from the data's own properties, so a field named after a
+ *   member of `Object` such as `toString` is read from the record rather than
+ *   from the prototype
  * @template T - The output type of the hook function
  * @param type - TailorDB type definition
  * @returns A function that transforms input data according to field hooks

package/dist/utils/test/index.mjs

@@ -1,9 +1,20 @@
 //#region src/utils/test/index.ts
+function setField(record, key, value) {
+	Object.defineProperty(record, key, {
+		value,
+		enumerable: true,
+		writable: true,
+		configurable: true
+	});
+}
 /**
 * Creates a hook function that processes TailorDB type fields
 * - Uses existing id from data if provided, otherwise generates UUID for id fields
 * - Recursively processes nested types
 * - Executes hooks.create for fields with create hooks
+* - Takes each field from the data's own properties, so a field named after a
+*   member of `Object` such as `toString` is read from the record rather than
+*   from the prototype
 * @template T - The output type of the hook function
 * @param type - TailorDB type definition
 * @returns A function that transforms input data according to field hooks
@@ -13,25 +24,26 @@ function createTailorDBHook(type) {
 		const obj = data && typeof data === "object" ? data : void 0;
 		const hooked = Object.entries(type.fields).reduce((hooked, [key, value]) => {
 			const field = value;
-			if (key === "id") hooked[key] = obj?.[key] ?? crypto.randomUUID();
+			const input = obj && Object.hasOwn(obj, key) ? obj[key] : void 0;
+			let hookedValue;
+			if (key === "id") hookedValue = input ?? crypto.randomUUID();
 			else if (field.type === "nested") {
 				const nestedHook = createTailorDBHook({ fields: field.fields });
-				if (field.metadata.array) {
-					const nestedValue = obj?.[key];
-					hooked[key] = Array.isArray(nestedValue) ? nestedValue.map((item) => nestedHook(item, now)) : nestedValue;
-				} else hooked[key] = nestedHook(obj?.[key], now);
+				if (field.metadata.array) hookedValue = Array.isArray(input) ? input.map((item) => nestedHook(item, now)) : input;
+				else hookedValue = nestedHook(input, now);
 			} else if (field.metadata.hooks?.create) {
-				hooked[key] = field.metadata.hooks.create({
-					input: obj?.[key],
+				hookedValue = field.metadata.hooks.create({
+					input,
 					invoker: null,
 					now
 				});
-				if (hooked[key] instanceof Date) hooked[key] = hooked[key].toISOString();
-			} else if (obj) hooked[key] = obj[key];
-			if (hooked[key] == null && field.metadata.default !== void 0) {
+				if (hookedValue instanceof Date) hookedValue = hookedValue.toISOString();
+			} else hookedValue = input;
+			if (hookedValue == null && field.metadata.default !== void 0) {
 				const isTimeType = field.type === "datetime" || field.type === "date" || field.type === "time";
-				hooked[key] = field.metadata.default === "now" && isTimeType ? now.toISOString() : field.metadata.default;
+				hookedValue = field.metadata.default === "now" && isTimeType ? now.toISOString() : field.metadata.default;
 			}
+			setField(hooked, key, hookedValue);
 			return hooked;
 		}, {});
 		if (type.metadata?.typeHook?.create) {
@@ -41,7 +53,7 @@ function createTailorDBHook(type) {
 				invoker: null,
 				now
 			});
-			if (overrides && typeof overrides === "object") for (const [key, value] of Object.entries(overrides)) hooked[key] = value instanceof Date ? value.toISOString() : value;
+			if (overrides && typeof overrides === "object") for (const [key, value] of Object.entries(overrides)) setField(hooked, key, value instanceof Date ? value.toISOString() : value);
 		}
 		if (type.metadata?.typeValidate) {
 			const { id: _id, ...newRecord } = hooked;

package/dist/utils/test/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/utils/test/index.ts"],"sourcesContent":["import type { output } from \"#/configure/index\";\nimport type { TailorDBType } from \"#/configure/services/tailordb/schema\";\nimport type { TailorField } from \"#/configure/types/type\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\n/**\n * Creates a hook function that processes TailorDB type fields\n * - Uses existing id from data if provided, otherwise generates UUID for id fields\n * - Recursively processes nested types\n * - Executes hooks.create for fields with create hooks\n * @template T - The output type of the hook function\n * @param type - TailorDB type definition\n * @returns A function that transforms input data according to field hooks\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function createTailorDBHook<T extends TailorDBType<any, any>>(type: T) {\n  return (data: unknown, now: Date = new Date()) => {\n    const obj = data && typeof data === \"object\" ? (data as Record<string, unknown>) : undefined;\n    const hooked = Object.entries(type.fields).reduce(\n      (hooked, [key, value]) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        const field = value as TailorField<any, any, any>;\n        if (key === \"id\") {\n          hooked[key] = obj?.[key] ?? crypto.randomUUID();\n        } else if (field.type === \"nested\") {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          const nestedHook = createTailorDBHook({ fields: field.fields } as any);\n          if (field.metadata.array) {\n            const nestedValue = obj?.[key];\n            hooked[key] = Array.isArray(nestedValue)\n              ? nestedValue.map((item) => nestedHook(item, now))\n              : nestedValue;\n          } else {\n            hooked[key] = nestedHook(obj?.[key], now);\n          }\n        } else if (field.metadata.hooks?.create) {\n          hooked[key] = field.metadata.hooks.create({\n            input: obj?.[key],\n            invoker: null,\n            now,\n          });\n          if (hooked[key] instanceof Date) {\n            hooked[key] = hooked[key].toISOString();\n          }\n        } else if (obj) {\n          hooked[key] = obj[key];\n        }\n        if (hooked[key] == null && field.metadata.default !== undefined) {\n          const isTimeType =\n            field.type === \"datetime\" || field.type === \"date\" || field.type === \"time\";\n          hooked[key] =\n            field.metadata.default === \"now\" && isTimeType\n              ? now.toISOString()\n              : field.metadata.default;\n        }\n        return hooked;\n      },\n      {} as Record<string, unknown>,\n    );\n\n    // oxlint-disable-next-line typescript/no-unnecessary-condition -- metadata absent in recursive nested calls\n    if (type.metadata?.typeHook?.create) {\n      const { id: _id, ...typeHookInput } = hooked;\n      // oxlint-disable-next-line typescript/no-unsafe-function-type\n      const overrides = (type.metadata.typeHook.create as Function)({\n        input: typeHookInput,\n        invoker: null,\n        now,\n      });\n      if (overrides && typeof overrides === \"object\") {\n        for (const [key, value] of Object.entries(overrides as Record<string, unknown>)) {\n          hooked[key] = value instanceof Date ? value.toISOString() : value;\n        }\n      }\n    }\n\n    // oxlint-disable-next-line typescript/no-unnecessary-condition -- metadata absent in recursive nested calls\n    if (type.metadata?.typeValidate) {\n      const { id: _id, ...newRecord } = hooked;\n      // oxlint-disable-next-line typescript/no-unsafe-function-type\n      (type.metadata.typeValidate as Function)(\n        { newRecord, oldRecord: null, invoker: null },\n        (field: string, message: string) => {\n          throw new Error(`Validation failed on field '${field}': ${message}`);\n        },\n      );\n    }\n\n    return hooked as Partial<output<T>>;\n  };\n}\n\n/**\n * Creates the standard schema definition for lines-db\n * This returns the first argument for defineSchema with the ~standard section\n * @template T - The output type after validation\n * @param schemaType - TailorDB field schema for validation\n * @param hook - Hook function to transform data before validation\n * @returns Schema object with ~standard section for defineSchema\n */\nexport function createStandardSchema<T = Record<string, unknown>>(\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  schemaType: TailorField<any, T>,\n  hook: (data: unknown) => Partial<T>,\n) {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"@tailor-platform/sdk\",\n      validate: (value: unknown) => {\n        const hooked = hook(value);\n        const result = schemaType.parse({\n          value: hooked,\n          data: hooked,\n          invoker: null,\n        });\n        if (result.issues) {\n          return result;\n        }\n        return { value: hooked as T };\n      },\n    },\n  } as const satisfies StandardSchemaV1<T>;\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAgB,mBAAqD,MAAS;CAC5E,QAAQ,MAAe,sBAAY,IAAI,KAAK,MAAM;EAChD,MAAM,MAAM,QAAQ,OAAO,SAAS,WAAY,OAAmC;EACnF,MAAM,SAAS,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,QACxC,QAAQ,CAAC,KAAK,WAAW;GAExB,MAAM,QAAQ;GACd,IAAI,QAAQ,MACV,OAAO,OAAO,MAAM,QAAQ,OAAO,WAAW;QACzC,IAAI,MAAM,SAAS,UAAU;IAElC,MAAM,aAAa,mBAAmB,EAAE,QAAQ,MAAM,OAAO,CAAQ;IACrE,IAAI,MAAM,SAAS,OAAO;KACxB,MAAM,cAAc,MAAM;KAC1B,OAAO,OAAO,MAAM,QAAQ,WAAW,IACnC,YAAY,KAAK,SAAS,WAAW,MAAM,GAAG,CAAC,IAC/C;IACN,OACE,OAAO,OAAO,WAAW,MAAM,MAAM,GAAG;GAE5C,OAAO,IAAI,MAAM,SAAS,OAAO,QAAQ;IACvC,OAAO,OAAO,MAAM,SAAS,MAAM,OAAO;KACxC,OAAO,MAAM;KACb,SAAS;KACT;IACF,CAAC;IACD,IAAI,OAAO,gBAAgB,MACzB,OAAO,OAAO,OAAO,IAAI,CAAC,YAAY;GAE1C,OAAO,IAAI,KACT,OAAO,OAAO,IAAI;GAEpB,IAAI,OAAO,QAAQ,QAAQ,MAAM,SAAS,YAAY,QAAW;IAC/D,MAAM,aACJ,MAAM,SAAS,cAAc,MAAM,SAAS,UAAU,MAAM,SAAS;IACvE,OAAO,OACL,MAAM,SAAS,YAAY,SAAS,aAChC,IAAI,YAAY,IAChB,MAAM,SAAS;GACvB;GACA,OAAO;EACT,GACA,CAAC,CACH;EAGA,IAAI,KAAK,UAAU,UAAU,QAAQ;GACnC,MAAM,EAAE,IAAI,KAAK,GAAG,kBAAkB;GAEtC,MAAM,YAAa,KAAK,SAAS,SAAS,OAAoB;IAC5D,OAAO;IACP,SAAS;IACT;GACF,CAAC;GACD,IAAI,aAAa,OAAO,cAAc,UACpC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAoC,GAC5E,OAAO,OAAO,iBAAiB,OAAO,MAAM,YAAY,IAAI;EAGlE;EAGA,IAAI,KAAK,UAAU,cAAc;GAC/B,MAAM,EAAE,IAAI,KAAK,GAAG,cAAc;GAElC,AAAC,KAAK,SAAS,aACb;IAAE;IAAW,WAAW;IAAM,SAAS;GAAK,IAC3C,OAAe,YAAoB;IAClC,MAAM,IAAI,MAAM,+BAA+B,MAAM,KAAK,SAAS;GACrE,CACF;EACF;EAEA,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,qBAEd,YACA,MACA;CACA,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,SAAS,KAAK,KAAK;GACzB,MAAM,SAAS,WAAW,MAAM;IAC9B,OAAO;IACP,MAAM;IACN,SAAS;GACX,CAAC;GACD,IAAI,OAAO,QACT,OAAO;GAET,OAAO,EAAE,OAAO,OAAY;EAC9B;CACF,EACF;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/utils/test/index.ts"],"sourcesContent":["import type { output } from \"#/configure/index\";\nimport type { TailorDBType } from \"#/configure/services/tailordb/schema\";\nimport type { TailorField } from \"#/configure/types/type\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\n// Not `record[key] = value`: assigning to `__proto__` goes through the inherited\n// setter, which mutates the prototype instead of recording the field and leaves\n// no own property behind for the value to be read from.\nfunction setField(record: Record<string, unknown>, key: string, value: unknown): void {\n  Object.defineProperty(record, key, {\n    value,\n    enumerable: true,\n    writable: true,\n    configurable: true,\n  });\n}\n\n/**\n * Creates a hook function that processes TailorDB type fields\n * - Uses existing id from data if provided, otherwise generates UUID for id fields\n * - Recursively processes nested types\n * - Executes hooks.create for fields with create hooks\n * - Takes each field from the data's own properties, so a field named after a\n *   member of `Object` such as `toString` is read from the record rather than\n *   from the prototype\n * @template T - The output type of the hook function\n * @param type - TailorDB type definition\n * @returns A function that transforms input data according to field hooks\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function createTailorDBHook<T extends TailorDBType<any, any>>(type: T) {\n  return (data: unknown, now: Date = new Date()) => {\n    const obj = data && typeof data === \"object\" ? (data as Record<string, unknown>) : undefined;\n    const hooked = Object.entries(type.fields).reduce(\n      (hooked, [key, value]) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        const field = value as TailorField<any, any, any>;\n        // `Object.hasOwn`, not `obj?.[key]`: a field named after an Object member\n        // such as `toString` would otherwise read the inherited value.\n        const input = obj && Object.hasOwn(obj, key) ? obj[key] : undefined;\n        let hookedValue: unknown;\n        if (key === \"id\") {\n          hookedValue = input ?? crypto.randomUUID();\n        } else if (field.type === \"nested\") {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          const nestedHook = createTailorDBHook({ fields: field.fields } as any);\n          if (field.metadata.array) {\n            hookedValue = Array.isArray(input) ? input.map((item) => nestedHook(item, now)) : input;\n          } else {\n            hookedValue = nestedHook(input, now);\n          }\n        } else if (field.metadata.hooks?.create) {\n          hookedValue = field.metadata.hooks.create({ input, invoker: null, now });\n          if (hookedValue instanceof Date) {\n            hookedValue = hookedValue.toISOString();\n          }\n        } else {\n          hookedValue = input;\n        }\n        if (hookedValue == null && field.metadata.default !== undefined) {\n          const isTimeType =\n            field.type === \"datetime\" || field.type === \"date\" || field.type === \"time\";\n          hookedValue =\n            field.metadata.default === \"now\" && isTimeType\n              ? now.toISOString()\n              : field.metadata.default;\n        }\n        // Set even when there is no value: the key carrying `undefined` is what\n        // tells a schema inferred from the record that the column is nullable,\n        // and it shadows a same-named member of `Object.prototype`.\n        setField(hooked, key, hookedValue);\n        return hooked;\n      },\n      {} as Record<string, unknown>,\n    );\n\n    // oxlint-disable-next-line typescript/no-unnecessary-condition -- metadata absent in recursive nested calls\n    if (type.metadata?.typeHook?.create) {\n      const { id: _id, ...typeHookInput } = hooked;\n      // oxlint-disable-next-line typescript/no-unsafe-function-type\n      const overrides = (type.metadata.typeHook.create as Function)({\n        input: typeHookInput,\n        invoker: null,\n        now,\n      });\n      if (overrides && typeof overrides === \"object\") {\n        for (const [key, value] of Object.entries(overrides as Record<string, unknown>)) {\n          setField(hooked, key, value instanceof Date ? value.toISOString() : value);\n        }\n      }\n    }\n\n    // oxlint-disable-next-line typescript/no-unnecessary-condition -- metadata absent in recursive nested calls\n    if (type.metadata?.typeValidate) {\n      const { id: _id, ...newRecord } = hooked;\n      // oxlint-disable-next-line typescript/no-unsafe-function-type\n      (type.metadata.typeValidate as Function)(\n        { newRecord, oldRecord: null, invoker: null },\n        (field: string, message: string) => {\n          throw new Error(`Validation failed on field '${field}': ${message}`);\n        },\n      );\n    }\n\n    return hooked as Partial<output<T>>;\n  };\n}\n\n/**\n * Creates the standard schema definition for lines-db\n * This returns the first argument for defineSchema with the ~standard section\n * @template T - The output type after validation\n * @param schemaType - TailorDB field schema for validation\n * @param hook - Hook function to transform data before validation\n * @returns Schema object with ~standard section for defineSchema\n */\nexport function createStandardSchema<T = Record<string, unknown>>(\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  schemaType: TailorField<any, T>,\n  hook: (data: unknown) => Partial<T>,\n) {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"@tailor-platform/sdk\",\n      validate: (value: unknown) => {\n        const hooked = hook(value);\n        const result = schemaType.parse({\n          value: hooked,\n          data: hooked,\n          invoker: null,\n        });\n        if (result.issues) {\n          return result;\n        }\n        return { value: hooked as T };\n      },\n    },\n  } as const satisfies StandardSchemaV1<T>;\n}\n"],"mappings":";AAQA,SAAS,SAAS,QAAiC,KAAa,OAAsB;CACpF,OAAO,eAAe,QAAQ,KAAK;EACjC;EACA,YAAY;EACZ,UAAU;EACV,cAAc;CAChB,CAAC;AACH;;;;;;;;;;;;;AAeA,SAAgB,mBAAqD,MAAS;CAC5E,QAAQ,MAAe,sBAAY,IAAI,KAAK,MAAM;EAChD,MAAM,MAAM,QAAQ,OAAO,SAAS,WAAY,OAAmC;EACnF,MAAM,SAAS,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,QACxC,QAAQ,CAAC,KAAK,WAAW;GAExB,MAAM,QAAQ;GAGd,MAAM,QAAQ,OAAO,OAAO,OAAO,KAAK,GAAG,IAAI,IAAI,OAAO;GAC1D,IAAI;GACJ,IAAI,QAAQ,MACV,cAAc,SAAS,OAAO,WAAW;QACpC,IAAI,MAAM,SAAS,UAAU;IAElC,MAAM,aAAa,mBAAmB,EAAE,QAAQ,MAAM,OAAO,CAAQ;IACrE,IAAI,MAAM,SAAS,OACjB,cAAc,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,SAAS,WAAW,MAAM,GAAG,CAAC,IAAI;SAElF,cAAc,WAAW,OAAO,GAAG;GAEvC,OAAO,IAAI,MAAM,SAAS,OAAO,QAAQ;IACvC,cAAc,MAAM,SAAS,MAAM,OAAO;KAAE;KAAO,SAAS;KAAM;IAAI,CAAC;IACvE,IAAI,uBAAuB,MACzB,cAAc,YAAY,YAAY;GAE1C,OACE,cAAc;GAEhB,IAAI,eAAe,QAAQ,MAAM,SAAS,YAAY,QAAW;IAC/D,MAAM,aACJ,MAAM,SAAS,cAAc,MAAM,SAAS,UAAU,MAAM,SAAS;IACvE,cACE,MAAM,SAAS,YAAY,SAAS,aAChC,IAAI,YAAY,IAChB,MAAM,SAAS;GACvB;GAIA,SAAS,QAAQ,KAAK,WAAW;GACjC,OAAO;EACT,GACA,CAAC,CACH;EAGA,IAAI,KAAK,UAAU,UAAU,QAAQ;GACnC,MAAM,EAAE,IAAI,KAAK,GAAG,kBAAkB;GAEtC,MAAM,YAAa,KAAK,SAAS,SAAS,OAAoB;IAC5D,OAAO;IACP,SAAS;IACT;GACF,CAAC;GACD,IAAI,aAAa,OAAO,cAAc,UACpC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAoC,GAC5E,SAAS,QAAQ,KAAK,iBAAiB,OAAO,MAAM,YAAY,IAAI,KAAK;EAG/E;EAGA,IAAI,KAAK,UAAU,cAAc;GAC/B,MAAM,EAAE,IAAI,KAAK,GAAG,cAAc;GAElC,AAAC,KAAK,SAAS,aACb;IAAE;IAAW,WAAW;IAAM,SAAS;GAAK,IAC3C,OAAe,YAAoB;IAClC,MAAM,IAAI,MAAM,+BAA+B,MAAM,KAAK,SAAS;GACrE,CACF;EACF;EAEA,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,qBAEd,YACA,MACA;CACA,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,SAAS,KAAK,KAAK;GACzB,MAAM,SAAS,WAAW,MAAM;IAC9B,OAAO;IACP,MAAM;IACN,SAAS;GACX,CAAC;GACD,IAAI,OAAO,QACT,OAAO;GAET,OAAO,EAAE,OAAO,OAAY;EAC9B;CACF,EACF;AACF"}

package/dist/vitest/environment.mjs

@@ -1,4 +1,4 @@
-import { n as cleanupPlatformGlobals, r as installPlatformGlobals, t as RUNTIME_FLAG_KEY } from "../globals-TfAVItuK.mjs";
+import { n as cleanupPlatformGlobals, r as installPlatformGlobals, t as RUNTIME_FLAG_KEY } from "../globals-B2nlxBrz.mjs";
 import * as globals from "globals";
 
 //#region src/vitest/environment.ts

package/dist/vitest/mocks/file.d.mts

@@ -46,10 +46,10 @@ declare function mockFile(options?: MockFileOptions): {
   calls: FileCall[];
   clear(): void;
   reset(): void;
-  delete: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<void>>;
   upload: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string, data: string | ArrayBuffer | Uint8Array | number[], options?: FileUploadOptions) => Promise<FileUploadResponse>>;
   download: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadResponse>>;
   downloadAsBase64: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadAsBase64Response>>;
+  delete: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<void>>;
   getMetadata: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileMetadata>>;
   downloadStream: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadStreamResponse>>;
   uploadStream: Mock<(namespace: string, typeName: string, fieldName: string, recordId: string, readableStream: ReadableStream<Uint8Array | ArrayBuffer>, options?: FileUploadStreamOptions) => Promise<FileUploadResponse>>;

package/dist/vitest/setup.mjs

@@ -1,4 +1,4 @@
-import { t as RUNTIME_FLAG_KEY } from "../globals-TfAVItuK.mjs";
+import { t as RUNTIME_FLAG_KEY } from "../globals-B2nlxBrz.mjs";
 import { t as mockSecretmanager } from "../secretmanager-IY4UvinW.mjs";
 import { pathToFileURL } from "node:url";
 import { afterEach, beforeAll, beforeEach } from "vitest";

package/dist/workflow-Bamae_Yc.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-Bamae_Yc.mjs","names":[],"sources":["../src/runtime/workflow.ts"],"sourcesContent":["/**\n * Workflow utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.workflow` runtime API.\n * At runtime this delegates to `globalThis.tailor.workflow`. Use `mockWorkflow`\n * from `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n *\n * The canonical names (`startWorkflow`, `execJobFunction`,\n * `resumeWorkflowExecution`) mirror the public `tailor.v1` RPC vocabulary:\n * `Exec*` is a blocking call that returns the job's result, while `Start*`\n * returns only an execution ID.\n * @example\n * import { workflow } from \"@tailor-platform/sdk/runtime\";\n *\n * const executionId = await workflow.startWorkflow(\"myWorkflow\", { data: \"value\" });\n */\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n/**\n * Specifies the machine user that should be used to execute the workflow.\n * This allows workflows to run with specific authentication context.\n */\nexport interface Invoker {\n  /** The namespace where the machine user is defined */\n  namespace: string;\n  /** The name of the machine user to use for workflow execution */\n  machineUserName: string;\n}\n\n/** Options for {@link startWorkflow}. */\nexport interface StartWorkflowOptions {\n  /** Optional authentication invoker to specify which machine user should execute the workflow */\n  authInvoker?: Invoker;\n}\n\ndeclare const executionPolicyKeyBrand: unique symbol;\n\n/**\n * A concrete runtime key produced by an execution policy instance — either an\n * exact-match policy's `.key`, or a wildcard policy's `.keyFor(suffix)` (see\n * `defineWorkflowExecutionPolicies`). Branded so an arbitrary string that\n * wasn't derived from a declared policy can't be passed as `executionPolicyKey`.\n */\nexport type ExecutionPolicyKey = string & { readonly [executionPolicyKeyBrand]: never };\n\n/** Options for {@link execJobFunction}. */\nexport interface ExecJobFunctionOptions {\n  /**\n   * Execution policy key matched by the platform against the policies\n   * declared with `defineWorkflowExecutionPolicies` in `tailor.config.ts`.\n   */\n  executionPolicyKey?: ExecutionPolicyKey;\n}\n\n/**\n * Platform API surface for `tailor.workflow`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.workflow`.\n */\nexport interface PlatformWorkflowAPI {\n  /**\n   * Starts a workflow and returns its execution ID.\n   * @param workflowName - Workflow name as defined in tailor.config\n   * @param args - Arguments forwarded to the workflow's main job\n   * @param options - Optional start options (e.g. `authInvoker`)\n   * @returns The execution ID of the started workflow\n   */\n  startWorkflow(workflowName: string, args?: any, options?: StartWorkflowOptions): Promise<string>;\n\n  /**\n   * Resumes a failed or pending-retry workflow execution and returns its execution ID.\n   * @param executionId - The execution to resume\n   * @returns The execution ID of the resumed workflow\n   */\n  resumeWorkflowExecution(executionId: string): Promise<string>;\n\n  /**\n   * Executes a job function and returns its result via durable suspend/replay.\n   *\n   * Canonical name under the platform verb convention: `Exec*` blocks and\n   * returns the job's result, while `Start*` returns only an execution ID.\n   * @param jobName - Job name as defined in the workflow\n   * @param args - Arguments forwarded to the job\n   * @param options - Optional execution options (e.g. `executionPolicyKey`)\n   * @returns The job's return value\n   */\n  execJobFunction(jobName: string, args?: any, options?: ExecJobFunctionOptions): any;\n\n  /**\n   * Suspends the current workflow execution and waits for an external signal to resume.\n   * @param key - Wait point key\n   * @param payload - Optional payload to record with the wait point\n   * @returns The payload supplied by the corresponding `resolve` call\n   */\n  wait(key: string, payload?: any): any;\n\n  /**\n   * Resolves a waiting workflow execution, causing it to resume.\n   * @param executionId - The execution to resume\n   * @param key - Wait point key to resolve\n   * @param callback - Callback receiving the wait payload; its return value is forwarded to `wait`\n   * @returns A promise that resolves once the resolve has been recorded\n   */\n  resolve(executionId: string, key: string, callback: (waitPayload: any) => any): Promise<void>;\n}\n\nconst api = (): PlatformWorkflowAPI =>\n  (globalThis as unknown as { tailor: { workflow: PlatformWorkflowAPI } }).tailor.workflow;\n\n/**\n * See {@link PlatformWorkflowAPI.startWorkflow}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.startWorkflow}\n * @returns The execution ID of the started workflow\n */\nconst startWorkflow: PlatformWorkflowAPI[\"startWorkflow\"] = (...args) =>\n  api().startWorkflow(...args);\n\n/**\n * See {@link PlatformWorkflowAPI.resumeWorkflowExecution}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.resumeWorkflowExecution}\n * @returns The execution ID of the resumed workflow\n */\nconst resumeWorkflowExecution: PlatformWorkflowAPI[\"resumeWorkflowExecution\"] = (...args) =>\n  api().resumeWorkflowExecution(...args);\n\n/**\n * See {@link PlatformWorkflowAPI.execJobFunction}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.execJobFunction}\n * @returns The job's return value\n */\nconst execJobFunction: PlatformWorkflowAPI[\"execJobFunction\"] = (...args) =>\n  api().execJobFunction(...args);\n\nconst wait: PlatformWorkflowAPI[\"wait\"] = (...args) => api().wait(...args);\n\nconst resolve: PlatformWorkflowAPI[\"resolve\"] = (...args) => api().resolve(...args);\n\n/** Runtime wrapper namespace for `tailor.workflow`. */\nexport const workflow = {\n  startWorkflow,\n  resumeWorkflowExecution,\n  execJobFunction,\n  wait,\n  resolve,\n} as const satisfies PlatformWorkflowAPI;\n"],"mappings":";AA0GA,MAAM,YACH,WAAwE,OAAO;;;;;;AAOlF,MAAM,iBAAuD,GAAG,SAC9D,IAAI,CAAC,CAAC,cAAc,GAAG,IAAI;;;;;;AAO7B,MAAM,2BAA2E,GAAG,SAClF,IAAI,CAAC,CAAC,wBAAwB,GAAG,IAAI;;;;;;AAOvC,MAAM,mBAA2D,GAAG,SAClE,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;AAE/B,MAAM,QAAqC,GAAG,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI;AAEzE,MAAM,WAA2C,GAAG,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAI;;AAGlF,MAAa,WAAW;CACtB;CACA;CACA;CACA;CACA;AACF"}
+{"version":3,"file":"workflow-Bamae_Yc.mjs","names":[],"sources":["../src/runtime/workflow.ts"],"sourcesContent":["/**\n * Workflow utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.workflow` runtime API.\n * At runtime this delegates to `globalThis.tailor.workflow`. Use `mockWorkflow`\n * from `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n *\n * `execJobFunction` blocks until the job finishes and returns its result, while\n * `startWorkflow` returns only an execution ID.\n * @example\n * import { workflow } from \"@tailor-platform/sdk/runtime\";\n *\n * const executionId = await workflow.startWorkflow(\"myWorkflow\", { data: \"value\" });\n */\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n/**\n * Specifies the machine user that should be used to execute the workflow.\n * This allows workflows to run with specific authentication context.\n */\nexport interface Invoker {\n  /** The namespace where the machine user is defined */\n  namespace: string;\n  /** The name of the machine user to use for workflow execution */\n  machineUserName: string;\n}\n\n/** Options for {@link startWorkflow}. */\nexport interface StartWorkflowOptions {\n  /** Optional authentication invoker to specify which machine user should execute the workflow */\n  authInvoker?: Invoker;\n}\n\ndeclare const executionPolicyKeyBrand: unique symbol;\n\n/**\n * A concrete runtime key produced by an execution policy instance — either an\n * exact-match policy's `.key`, or a wildcard policy's `.keyFor(suffix)` (see\n * `defineWorkflowExecutionPolicies`). Branded so an arbitrary string that\n * wasn't derived from a declared policy can't be passed as `executionPolicyKey`.\n */\nexport type ExecutionPolicyKey = string & { readonly [executionPolicyKeyBrand]: never };\n\n/** Options for {@link execJobFunction}. */\nexport interface ExecJobFunctionOptions {\n  /**\n   * Execution policy key matched by the platform against the policies\n   * declared with `defineWorkflowExecutionPolicies` in `tailor.config.ts`.\n   */\n  executionPolicyKey?: ExecutionPolicyKey;\n}\n\n/**\n * Platform API surface for `tailor.workflow`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.workflow`.\n */\nexport interface PlatformWorkflowAPI {\n  /**\n   * Starts a workflow and returns its execution ID.\n   * @param workflowName - Workflow name as defined in tailor.config\n   * @param args - Arguments forwarded to the workflow's main job\n   * @param options - Optional start options (e.g. `authInvoker`)\n   * @returns The execution ID of the started workflow\n   */\n  startWorkflow(workflowName: string, args?: any, options?: StartWorkflowOptions): Promise<string>;\n\n  /**\n   * Resumes a failed or pending-retry workflow execution and returns its execution ID.\n   * @param executionId - The execution to resume\n   * @returns The execution ID of the resumed workflow\n   */\n  resumeWorkflowExecution(executionId: string): Promise<string>;\n\n  /**\n   * Executes a job function and returns its result via durable suspend/replay.\n   * @param jobName - Job name as defined in the workflow\n   * @param args - Arguments forwarded to the job\n   * @param options - Optional execution options (e.g. `executionPolicyKey`)\n   * @returns The job's return value\n   */\n  execJobFunction(jobName: string, args?: any, options?: ExecJobFunctionOptions): any;\n\n  /**\n   * Suspends the current workflow execution and waits for an external signal to resume.\n   * @param key - Wait point key\n   * @param payload - Optional payload to record with the wait point\n   * @returns The payload supplied by the corresponding `resolve` call\n   */\n  wait(key: string, payload?: any): any;\n\n  /**\n   * Resolves a waiting workflow execution, causing it to resume.\n   * @param executionId - The execution to resume\n   * @param key - Wait point key to resolve\n   * @param callback - Callback receiving the wait payload; its return value is forwarded to `wait`\n   * @returns A promise that resolves once the resolve has been recorded\n   */\n  resolve(executionId: string, key: string, callback: (waitPayload: any) => any): Promise<void>;\n}\n\nconst api = (): PlatformWorkflowAPI =>\n  (globalThis as unknown as { tailor: { workflow: PlatformWorkflowAPI } }).tailor.workflow;\n\n/**\n * See {@link PlatformWorkflowAPI.startWorkflow}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.startWorkflow}\n * @returns The execution ID of the started workflow\n */\nconst startWorkflow: PlatformWorkflowAPI[\"startWorkflow\"] = (...args) =>\n  api().startWorkflow(...args);\n\n/**\n * See {@link PlatformWorkflowAPI.resumeWorkflowExecution}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.resumeWorkflowExecution}\n * @returns The execution ID of the resumed workflow\n */\nconst resumeWorkflowExecution: PlatformWorkflowAPI[\"resumeWorkflowExecution\"] = (...args) =>\n  api().resumeWorkflowExecution(...args);\n\n/**\n * See {@link PlatformWorkflowAPI.execJobFunction}.\n * @param args - Forwarded to {@link PlatformWorkflowAPI.execJobFunction}\n * @returns The job's return value\n */\nconst execJobFunction: PlatformWorkflowAPI[\"execJobFunction\"] = (...args) =>\n  api().execJobFunction(...args);\n\nconst wait: PlatformWorkflowAPI[\"wait\"] = (...args) => api().wait(...args);\n\nconst resolve: PlatformWorkflowAPI[\"resolve\"] = (...args) => api().resolve(...args);\n\n/** Runtime wrapper namespace for `tailor.workflow`. */\nexport const workflow = {\n  startWorkflow,\n  resumeWorkflowExecution,\n  execJobFunction,\n  wait,\n  resolve,\n} as const satisfies PlatformWorkflowAPI;\n"],"mappings":";AAqGA,MAAM,YACH,WAAwE,OAAO;;;;;;AAOlF,MAAM,iBAAuD,GAAG,SAC9D,IAAI,CAAC,CAAC,cAAc,GAAG,IAAI;;;;;;AAO7B,MAAM,2BAA2E,GAAG,SAClF,IAAI,CAAC,CAAC,wBAAwB,GAAG,IAAI;;;;;;AAOvC,MAAM,mBAA2D,GAAG,SAClE,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;AAE/B,MAAM,QAAqC,GAAG,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI;AAEzE,MAAM,WAA2C,GAAG,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAI;;AAGlF,MAAa,WAAW;CACtB;CACA;CACA;CACA;CACA;AACF"}

package/docs/configuration.md

@@ -69,6 +69,7 @@ export default defineConfig({
   resolver: {
     "my-resolver": {
       files: ["resolver/**/*.ts"],
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
     },
   },
   executor: {
@@ -84,6 +85,8 @@ export default defineConfig({
 
 **ignores**: Glob patterns to exclude files. Optional. By default, `**/*.test.ts` and `**/*.spec.ts` are automatically ignored. If you explicitly specify `ignores`, the default patterns will not be applied. Use `ignores: []` to include all files including test files.
 
+**defaultPermission** (resolver namespaces only): Access requirement applied to every resolver in the namespace that declares no `permission` of its own. Optional, and takes the same values as a resolver's own `permission`. See [Namespace-wide default](./services/resolver.md#namespace-wide-default-defaultpermission).
+
 **Pattern resolution**: `files` and `ignores` patterns are resolved relative to the directory of the `tailor.config.ts` file that declares them, not the directory you run the command from. This matters when deploying [multiple configs](./cli/application.md#deploy) together — each config's patterns only match files under its own directory. If a config's _relative_ patterns match nothing under its own directory, the SDK falls back to resolving them from the directory you ran the command from and logs a warning (this fallback doesn't apply to already-absolute patterns, since their resolution can't change). Update such patterns to be relative to the config's own directory — this fallback will be removed in v2.
 
 ### Bundling

package/docs/migration/v2.md

@@ -97,7 +97,7 @@ npx tailor-sdk-skills
 After:
 
 ```sh
-tailor skills add
+npx @tailor-platform/sdk skills add
 ```
 
 <details>
@@ -107,7 +107,10 @@ tailor skills add
 The standalone tailor-sdk-skills binary is removed in v2; call the skills add
 subcommand on the main tailor CLI instead. Replace any remaining
 tailor-sdk-skills invocations the codemod did not rewrite with
-`tailor skills add`.
+`tailor skills add`, or `npx @tailor-platform/sdk skills add` when the
+invocation runs through a package runner (npx, bunx, pnpm/yarn dlx, npm exec)
+— those resolve a package name, and `npx tailor` reaches an unrelated
+`tailor` package on npm.
 ```
 
 </details>
@@ -1401,7 +1404,7 @@ CLI plugin (@tailor-platform/sdk-plugin-seed) replaces it:
   typically fork the runner and await a hand-rolled Promise around
   `child.on("close", ...)`). The plugin is a CLI-dispatched binary rather
   than a forkable JS module, so call it synchronously instead —
-  `execSync("npx tailor seed apply", { env, stdio: "inherit" })` — keeping
+  `execSync("npx @tailor-platform/sdk seed apply", { env, stdio: "inherit" })` — keeping
   the original `env` and `stdio` forwarding, and unwind the surrounding
   Promise wrapper (drop the now-unused `await`, and the `async` keyword when
   nothing else in the function awaits). Note that `execSync` throws on a

package/docs/quickstart.md

@@ -33,13 +33,13 @@ cd example-app
 Before deploying your app, you need to create a workspace:
 
 ```bash
-npx tailor login
-npx tailor workspace create --name <workspace-name> --region <workspace-region>
-npx tailor workspace list
+npx @tailor-platform/sdk login
+npx @tailor-platform/sdk workspace create --name <workspace-name> --region <workspace-region>
+npx @tailor-platform/sdk workspace list
 
 # Or with Bun:
-# bunx tailor login
-# bunx tailor workspace create --name <workspace-name> --region <workspace-region>
+# bun tailor login
+# bun tailor workspace create --name <workspace-name> --region <workspace-region>
 
 # OR
 # Create a new workspace using Tailor Platform Console

package/docs/services/resolver.md

@@ -406,6 +406,38 @@ Besides a policy array, `permission` also accepts:
 
 This check is based on `context.user`, the original caller, so it still applies even when `authInvoker` swaps in a machine user for database access.
 
+### Namespace-wide default (`defaultPermission`)
+
+Declaring `permission` on every resolver is the only way to close a whole namespace, and one file that forgets it is enough to leave an opening. Declare `defaultPermission` on the resolver namespace in your config instead, and it applies to every resolver in that namespace:
+
+```typescript
+export default defineConfig({
+  name: "my-app",
+  resolver: {
+    "main-resolver": {
+      files: ["./src/resolver/*.ts"],
+      defaultPermission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
+    },
+  },
+});
+```
+
+`defaultPermission` takes the same values as a resolver's own `permission`, including `"allowAnonymous"` — use that to record that a namespace is public by design rather than by oversight.
+
+A resolver's own `permission` **replaces** the namespace default rather than adding to it, so a single resolver opts out of a namespace-wide requirement explicitly:
+
+```typescript
+export default createResolver({
+  name: "healthCheck",
+  operation: "query",
+  permission: "allowAnonymous", // reachable even though the namespace requires a login
+  output: t.string(),
+  body: () => "ok",
+});
+```
+
+When a namespace declares no `defaultPermission` and some of its resolvers declare no `permission` either, `generate` and `deploy` warn that those resolvers are reachable by anonymous callers. Declaring either one silences the warning.
+
 ## Authentication
 
 Specify an `invoker` to execute the resolver with machine user credentials. Pass the machine user name as a plain string — it is type-narrowed to the names you defined in your auth config:

package/docs/testing.md

@@ -59,7 +59,7 @@ export default defineConfig({
 
 1. **Node.js module blocking** — `import { randomBytes } from "node:crypto"` in production code throws an error with a suggestion for the Web Standard API alternative (`globalThis.crypto`). Test files (`*.test.ts`, `*.spec.ts`) are exempt.
 2. **Node.js globals removal** — Only globals available in the platform runtime are kept (whitelist). `Buffer`, `global`, `setImmediate`, `__dirname`, `__filename`, `performance`, and others are removed.
-3. **Platform API mocks** — the platform error classes (`TailorErrors`, `TailorErrorMessage`, `TailorDBFileError`) and `tailor.context` are always available. The other namespaces (`tailordb.Client`, `tailor.workflow`, `tailor.secretmanager`, …) are mocked when you acquire the corresponding `mockX()` — see below.
+3. **Platform API mocks** — the platform error classes (`TailorErrors`, `TailorDBFileError`) and `tailor.context` are always available. The other namespaces (`tailordb.Client`, `tailor.workflow`, `tailor.secretmanager`, …) are mocked when you acquire the corresponding `mockX()` — see below.
 
 ### Acquiring mocks with `using`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/sdk",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Tailor Platform SDK - The SDK to work with Tailor Platform",
   "license": "MIT",
   "repository": {
@@ -168,17 +168,17 @@
     "@secretlint/secretlint-rule-preset-recommend": "13.0.4",
     "@standard-schema/spec": "1.1.0",
     "@tailor-platform/function-kysely-tailordb": "0.1.3",
-    "@toiroakr/lines-db": "0.10.1",
+    "@toiroakr/lines-db": "0.11.0",
     "@toiroakr/read-multiline": "0.4.1",
     "@urql/core": "6.0.3",
-    "amaro": "1.1.10",
+    "amaro": "1.1.11",
     "chalk": "5.6.2",
     "confbox": "0.2.4",
     "date-fns": "4.4.0",
     "es-toolkit": "1.50.0",
     "find-up-simple": "1.0.1",
     "get-east-asian-width": "1.6.0",
-    "get-tsconfig": "4.14.0",
+    "get-tsconfig": "4.14.1",
     "globals": "17.8.0",
     "graphql": "17.0.2",
     "inflection": "3.0.2",
@@ -207,7 +207,7 @@
     "@types/semver": "7.7.1",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "@vitest/coverage-v8": "4.1.10",
-    "eslint-plugin-zod": "4.7.0",
+    "eslint-plugin-zod": "4.9.0",
     "oxfmt": "0.61.0",
     "oxlint": "1.76.0",
     "oxlint-tsgolint": "7.0.2001",