@tailor-platform/sdk 2.2.0 → 2.3.0

package/CHANGELOG.md

@@ -1,5 +1,120 @@
 # @tailor-platform/sdk
 
+## 2.3.0
+
+### Minor Changes
+
+- [#2041](https://github.com/tailor-platform/sdk/pull/2041) [`0d2d542`](https://github.com/tailor-platform/sdk/commit/0d2d5420935a5f1f43f367f58837943fb49ad2dc) Thanks [@dqn](https://github.com/dqn)! - Add `tailor setup renovate` to generate a Renovate config that extends Tailor's shared preset without overwriting existing or customized configuration.
+
+- [#2043](https://github.com/tailor-platform/sdk/pull/2043) [`2524e2f`](https://github.com/tailor-platform/sdk/commit/2524e2f0fff830c3ae8978d3136d6a7f0d22e0fe) Thanks [@dqn](https://github.com/dqn)! - Allow generated GitHub workflows to fail on unsuppressed setup drift when the `TAILOR_PLATFORM_FAIL_ON_DRIFT` repository variable is set to `true`. Execution and configuration errors in the drift check now fail regardless of this variable. Re-run the relevant `tailor setup` command after upgrading to regenerate the workflow.
+
+- [#2035](https://github.com/tailor-platform/sdk/pull/2035) [`a928959`](https://github.com/tailor-platform/sdk/commit/a9289591359449da4157eb98a28c4beef14bc121) Thanks [@dqn](https://github.com/dqn)! - Convert a TailorDB field to a type that cannot be applied in place without writing the migrations by hand. `tailor tailordb migration generate` now offers to carry the values through a temporary field and writes both migrations for you; you supply the conversion expression. Non-interactive runs opt in per field with `--expand-contract "Type.field"`, and still fail without it.
+  
+  Writes that land on the field while the conversion runs are dropped rather than converted, so stop writing to it first on a live workspace. Array-cardinality changes, unique fields, and fields named by an index, relationship, permission, or type-level script remain manual.
+
+- [#2033](https://github.com/tailor-platform/sdk/pull/2033) [`d5801fc`](https://github.com/tailor-platform/sdk/commit/d5801fc94419359cfea2c3973b0d43333324510d) Thanks [@dqn](https://github.com/dqn)! - Support more TailorDB field type changes as single in-place migrations: `integer` now converts to `string` and `decimal`, `float` to `string` and `decimal`, `decimal` to `float`, and `boolean` to `string`. A `float` field that is already unique keeps to the 3-step migration when converting to `decimal`, because rounding to the target scale can merge distinct values.
+
+- [#1991](https://github.com/tailor-platform/sdk/pull/1991) [`dcc66a6`](https://github.com/tailor-platform/sdk/commit/dcc66a61861cf4d94c6081e46d8fd9053d9f81e5) Thanks [@dqn](https://github.com/dqn)! - Renaming a TailorDB field no longer silently drops the field's data: `tailordb migration generate` now detects rename candidates and records a confirmed rename as a single breaking `field_renamed` change with a scaffolded data-copy script, instead of decomposing it into a removal plus an addition. Note: older SDK versions cannot read a `diff.json` that contains a `field_renamed` change and stop with a validation error.
+
+- [#2026](https://github.com/tailor-platform/sdk/pull/2026) [`1346b75`](https://github.com/tailor-platform/sdk/commit/1346b75c1f3e2dd41297db18c6e7b8e676e01f77) Thanks [@dqn](https://github.com/dqn)! - Renaming a TailorDB type no longer silently drops its records: `tailordb migration generate` now detects type rename candidates and records a confirmed rename as a single breaking `type_renamed` change with a scaffolded id-preserving data-copy script, instead of decomposing it into a removal plus an addition (confirm interactively, or via `--rename "OldType:NewType"` / `--drop "Type"` in non-interactive runs). Note: older SDK versions cannot read a `diff.json` that contains a `type_renamed` change and stop with a validation error.
+
+- [#1933](https://github.com/tailor-platform/sdk/pull/1933) [`89b5647`](https://github.com/tailor-platform/sdk/commit/89b5647c21624b3782af4e8bf3a0de39b10b1ed0) Thanks [@toiroakr](https://github.com/toiroakr)! - Support wait point keys with runtime values. Write `$paramName` in a key passed to `createWaitPoints`' `define` and the param names become the argument of `.with()`, which builds the concrete key:
+  
+  ```typescript
+  export const { lineApproval } = createWaitPoints((define) => ({
+    lineApproval: define.for("line-approval-$lineId")<{ message: string }, { approved: boolean }>(),
+  }));
+  
+  await lineApproval.with({ lineId: line.id }).wait({ message: "Please approve" });
+  ```
+  
+  This makes it possible for one execution to suspend on the same logical wait point more than once at a time — one approval per order line, one per approver — which previously failed because a suspension with that key was already pending. A parameterized wait point exposes only `.with()`, so the unsubstituted key can never be waited on. `mockWorkflow().waitPointWith(definition, params)` gives typed mocks for one binding.
+  
+  The key has to come before the `Payload` / `Result` type arguments, because TypeScript stops inferring it as a literal type once those are given explicitly, and the param names can only be read off a literal. `createWaitPoint` takes its type arguments first, so it cannot type `$params`; `deploy` rejects such a key and points at `createWaitPoints`. Its own signature is unchanged.
+  
+  Wait point keys are now checked by `deploy` instead of failing when the job creates the suspension. Keys must match `[a-z0-9-]`, be 3 to 63 characters long, and start and end with `[a-z0-9]`. A key that never worked — a camelCase `createWaitPoints` property name, say — was rejected by the platform once the job ran; `deploy` now reports it before anything is deployed. Inside `createWaitPoints`, pass a valid key to `define` to keep the property name you read at the call site:
+  
+  ```typescript
+  managerApproval: define.for("manager-approval")<{ amount: number }, { approved: boolean }>(),
+  ```
+  
+  This works for a key without `$params` too, which is the way to keep a property name that reads well at the call site while the key stays within the platform grammar.
+
+### Patch Changes
+
+- [#2025](https://github.com/tailor-platform/sdk/pull/2025) [`2574bdd`](https://github.com/tailor-platform/sdk/commit/2574bdd69947b0f6e050c3c0af224fc3f18c6435) Thanks [@dqn](https://github.com/dqn)! - Treat `migrate.test.ts` as a migration artifact: `tailordb migration rebaseline` now removes a test-only migration directory together with the history it belongs to, and aborts when one is added while its confirmation prompt is open.
+
+- [#2012](https://github.com/tailor-platform/sdk/pull/2012) [`8826675`](https://github.com/tailor-platform/sdk/commit/88266754543c0975609274f0905c3a5b19cb9538) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): lock file maintenance
+
+- [#2014](https://github.com/tailor-platform/sdk/pull/2014) [`3852f3a`](https://github.com/tailor-platform/sdk/commit/3852f3a71dc5235c979b596cf23f1b252e3a3532) Thanks [@renovate](https://github.com/apps/renovate)! - chore(deps): update dependency tsx to v4.23.10
+
+- [#2018](https://github.com/tailor-platform/sdk/pull/2018) [`6d13888`](https://github.com/tailor-platform/sdk/commit/6d13888b0fa07d078076ad3df9f3992f61419d6b) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @toiroakr/lines-db to v0.12.0
+
+- [#2042](https://github.com/tailor-platform/sdk/pull/2042) [`6ee6584`](https://github.com/tailor-platform/sdk/commit/6ee65841670880986b392dabc69c06b1a2f3988f) Thanks [@dqn](https://github.com/dqn)! - Retry machine-user access token requests after transient connection timeouts.
+
+- [#2032](https://github.com/tailor-platform/sdk/pull/2032) [`b173a0d`](https://github.com/tailor-platform/sdk/commit/b173a0de53c5235b8c201bc8c671ebf812953d1c) Thanks [@dqn](https://github.com/dqn)! - Workflows generated by `tailor setup preview` now include a `tailor-drift-check` step, so preview-only repositories audit their generated workflows in CI like branch, tag, and coordinator workflows already do. The check is warning-only and never fails the job. `tailor setup check` reports targets generated with an older template as outdated; re-run the matching `tailor setup` subcommand to regenerate them.
+
+- [#2034](https://github.com/tailor-platform/sdk/pull/2034) [`413f6cb`](https://github.com/tailor-platform/sdk/commit/413f6cbf8faefefb155869f14e0ea76e939c1b41) Thanks [@dqn](https://github.com/dqn)! - Name the serial-column constraint in `db.insertInto(...).values({ ... })` and `.set({ ... })` errors, where TypeScript previously truncated the explanation away
+
+- [#2051](https://github.com/tailor-platform/sdk/pull/2051) [`a3b980d`](https://github.com/tailor-platform/sdk/commit/a3b980da849c28b5faf985469fdde4a193ec269f) Thanks [@toiroakr](https://github.com/toiroakr)! - Fix `tailordb deploy`/`migrate` failing with `type_hook.create.expr: must be at most 10000 characters` on TailorDB types with many field hooks. The generated hook scripts are now optimized to avoid duplication.
+  
+  Since generated hook/validate script text changes for any type with hooks, the first `tailordb migration generate` after upgrading will report a script update for those types even without any code changes on your side — this is expected and required for the fix to take effect.
+
+- [#2049](https://github.com/tailor-platform/sdk/pull/2049) [`b3b2aae`](https://github.com/tailor-platform/sdk/commit/b3b2aae05a63e2514cdd796d9a8b16bf458f1fcd) Thanks [@dqn](https://github.com/dqn)! - TailorDB schema snapshots now keep their tables under a `tables` key instead of `types`, completing the `db.type()` → `db.table()` rename. Committed migration histories keep replaying: a legacy `types` key in `schema.json` is still read and moved on load, so no migration files need editing. Migration file format version is now 5 and this SDK reads versions 1 through 5.
+  
+  Code that imports `SchemaSnapshot` or `NormalizedSchemaSnapshot` from `@tailor-platform/sdk/cli` and reads `snapshot.types` no longer compiles:
+  
+  ```ts
+  Object.keys(snapshot.types); // before
+  Object.keys(snapshot.tables); // after
+  ```
+  
+  This also applies to the snapshots returned by `compareSnapshots`, `createSnapshotFromLocalTypes`, `reconstructSnapshotFromMigrations`, and `compareLocalTypesWithSnapshot`.
+  
+  The `types` key on parsed TailorDB service config is a different thing and is unchanged.
+
+- [#2044](https://github.com/tailor-platform/sdk/pull/2044) [`8a5cc3f`](https://github.com/tailor-platform/sdk/commit/8a5cc3fe9a5f53f0128857f095c9b995f86c7408) Thanks [@dqn](https://github.com/dqn)! - TailorDB migration diffs now describe table-level changes as `table_*` instead of `type_*`, completing the `db.type()` → `db.table()` rename. Migration histories written by earlier versions keep working: `type_*` change kinds in committed `diff.json` files are still read and normalized on load, so no migration files need editing. Migration file format version is now 3 and this SDK reads versions 1 through 3. CLI diff output reads `[Table]` and `table(s) added` where it previously read `[Type]` and `type(s) added`.
+  
+  Code that imports `MigrationDiff` / `DiffChange` from `@tailor-platform/sdk/cli` and compares `change.kind` against a renamed spelling no longer compiles, because the discriminant literal is gone from the union:
+  
+  | Old spelling             | New spelling              |
+  | ------------------------ | ------------------------- |
+  | `type_added`             | `table_added`             |
+  | `type_removed`           | `table_removed`           |
+  | `type_renamed`           | `table_renamed`           |
+  | `type_modified`          | `table_modified`          |
+  | `type_settings_modified` | `table_settings_modified` |
+  | `type_scripts_modified`  | `table_scripts_modified`  |
+  
+  Update those comparisons to the new spelling. Reading `diff.json` files is unaffected.
+
+- [#2045](https://github.com/tailor-platform/sdk/pull/2045) [`c468a23`](https://github.com/tailor-platform/sdk/commit/c468a2327025dea9c3b5f8d0554010f5efba9211) Thanks [@dqn](https://github.com/dqn)! - TailorDB migration diffs now name the table they describe with `tableName` instead of `typeName`, and a rename records `previousTableName` instead of `previousTypeName`, continuing the `db.type()` → `db.table()` rename. Migration histories written by earlier versions keep replaying: the legacy field names in committed `diff.json` files are still read and normalized on load, across change entries, breaking changes, and warnings, so no migration files need editing. Migration file format version is now 4 and this SDK reads versions 1 through 4.
+  
+  Code that imports `MigrationDiff` / `DiffChange` / `BreakingChangeInfo` from `@tailor-platform/sdk/cli` and reads the renamed properties no longer compiles:
+  
+  | Old spelling                 | New spelling                  |
+  | ---------------------------- | ----------------------------- |
+  | `change.typeName`            | `change.tableName`            |
+  | `change.previousTypeName`    | `change.previousTableName`    |
+  | `breakingChanges[].typeName` | `breakingChanges[].tableName` |
+  | `warnings[].typeName`        | `warnings[].tableName`        |
+  
+  Update those reads to the new spelling. `tailor tailordb migration validate --json` renames the same key wherever it appears in its output, so anything parsing that JSON needs the same update.
+  
+  The `typeName` field on executor record triggers, the `.typeName()` field builder, and the file-runtime `typeName` argument are unrelated and unchanged.
+
+- [#2052](https://github.com/tailor-platform/sdk/pull/2052) [`a31d362`](https://github.com/tailor-platform/sdk/commit/a31d362d4d7386a2f3dcce06f3c53c78537ffcec) Thanks [@toiroakr](https://github.com/toiroakr)! - Isolate the SDK test suite (every vitest project except e2e) from TAILOR_\* environment variables exported by the developer's shell, so tests pass regardless of local CLI configuration.
+
+- [#2022](https://github.com/tailor-platform/sdk/pull/2022) [`4eb5302`](https://github.com/tailor-platform/sdk/commit/4eb530251e2480cd8179325fe43950c5cab5b954) Thanks [@dqn](https://github.com/dqn)! - Fail `deploy` and `tailordb migration validate` when a migration has both a recorded `--no-script` acknowledgment and a `migrate.ts`, instead of warning and running the script against the committed record. The error names the two ways out: rerun `tailordb migration script <n>` to clear the stale acknowledgment (the script then runs on the next deploy), or delete `migrate.ts` to keep the skip.
+
+- [#2027](https://github.com/tailor-platform/sdk/pull/2027) [`794bab7`](https://github.com/tailor-platform/sdk/commit/794bab7ffec4c63f30a8b7a305bb34443573fbec) Thanks [@dqn](https://github.com/dqn)! - Reload user modules (config, tailordb types, workflows, resolvers, executors, HTTP adapters) on every `deploy()` run, so calling the programmatic `deploy()` repeatedly in one Node process picks up file changes and re-registers wait point keys instead of silently reusing modules cached by an earlier run.
+
+- [#2023](https://github.com/tailor-platform/sdk/pull/2023) [`9dc826f`](https://github.com/tailor-platform/sdk/commit/9dc826fc0a83aa926de5b07245513f67c1ace877) Thanks [@dqn](https://github.com/dqn)! - Guide users through the v2 type-only import requirement. The CLI loads TypeScript by stripping types from each file in isolation, so a plain import of a type-only export fails at load time with `SyntaxError: ... does not provide an export named '<name>'` and no indication that the import form is the cause.
+  
+  - The CLI now appends a suggestion to that error: import the name with `import type` and set `"verbatimModuleSyntax": true` in tsconfig.json to catch violations at typecheck.
+  - Projects scaffolded by `tailor init` now enable `verbatimModuleSyntax` in their tsconfig.json, so new projects catch violations at typecheck instead of at load time.
+  - The v2 migration guide gains a `v2/type-only-imports` entry documenting the requirement, the failure mode, and the migration steps, offered by `tailor upgrade` when crossing the v2 boundary.
+
 ## 2.2.0
 
 ### Minor Changes

package/dist/application-BZfk4HKm.mjs

@@ -0,0 +1,3 @@
+import { n as generatePluginFilesIfNeeded, r as loadApplication, t as defineApplication } from "./application-F-nl107y.mjs";
+
+export { defineApplication, generatePluginFilesIfNeeded };

package/dist/{application-BpLeawBg.mjs → application-F-nl107y.mjs}

@@ -1,10 +1,11 @@
 import { n as isSdkBranded } from "./brand-Eo4pLXPJ.mjs";
+import { n as getScopedWaitPoints } from "./wait-point-registry-TL99zotw.mjs";
 import { t as assertDefined } from "./assert-DBxo8jPo.mjs";
 import { a as parseBoolean, n as logger, r as styles } from "./logger-DSdExfor.mjs";
-import { a as AuthConfigSchema, c as stripTailorDBTypeBuilderHelpers, d as applyRelationMetadataToFieldConfig, f as buildRelationInfo, g as functionSchema, h as loadFilesWithIgnores, l as TailorDBServiceConfigSchema, m as validateRelationConfig, n as loadExecutor, o as AuthInvokerSchema, p as processRelationMetadata, s as TailorFieldSchema, t as createExecutorService, u as TailorDBTypeSchema } from "./service-goqlJJgA.mjs";
+import { a as AuthConfigSchema, b as functionSchema, c as stripTailorDBTypeBuilderHelpers, d as applyRelationMetadataToFieldConfig, f as buildRelationInfo, h as loadFilesWithIgnores, l as TailorDBServiceConfigSchema, m as validateRelationConfig, n as loadExecutor, o as AuthInvokerSchema, p as processRelationMetadata, s as TailorFieldSchema, t as createExecutorService, u as TailorDBTypeSchema, y as importUserModule } from "./service-C_WpbKHu.mjs";
 import { t as multiline } from "./multiline-sfHpTZZK.mjs";
 import { t as userAgent } from "./user-agent-Bgsszb5I.mjs";
-import { t as createCLIError } from "./errors-CWj21238.mjs";
+import { t as createCLIError } from "./errors-BVb6vYGy.mjs";
 import { n as isNodeBuiltinImport, t as getNodeBuiltinMessage } from "./node-builtins-CmaL2Cbq.mjs";
 import { t as isPluginGeneratedType } from "./type-source-DH_LH20p.mjs";
 import { createRequire } from "node:module";
@@ -16,7 +17,6 @@ import { create } from "@bufbuild/protobuf";
 import * as fs from "node:fs";
 import { readFileSync } from "node:fs";
 import { MethodOptions_IdempotencyLevel } from "@bufbuild/protobuf/wkt";
-import { pathToFileURL } from "node:url";
 import { OAuth2Client } from "@badgateway/oauth2-client";
 import { Code, ConnectError, createClient } from "@connectrpc/connect";
 import pLimit from "p-limit";
@@ -253,7 +253,7 @@ function retryInterceptor() {
 	return (next) => async (req) => {
 		if (req.stream) return await next(req);
 		let lastError;
-		for (let i = 0; i < 3; i++) {
+		for (let i = 0; i < MAX_RETRY_ATTEMPTS; i++) {
 			if (i > 0) await waitRetryBackoff(i);
 			try {
 				return await next(req);
@@ -397,6 +397,8 @@ function synthesizeEmptyUnaryResponse(req) {
 * response was lost), which is what triggers the `already_exists` race.
 */
 const RETRY_BASE_DELAY_MS = 500;
+/** Maximum number of attempts, including the initial one, for a retried request. */
+const MAX_RETRY_ATTEMPTS = 3;
 /**
 * Wait for an exponential backoff delay with jitter.
 * @param attempt - Current retry attempt number (1-based)
@@ -631,14 +633,15 @@ async function fetchMachineUserToken(url, clientId, clientSecret) {
 	formData.append("grant_type", "client_credentials");
 	formData.append("client_id", clientId);
 	formData.append("client_secret", clientSecret);
-	const resp = await fetch(tokenEndpoint, {
+	const request = {
 		method: "POST",
 		headers: {
 			"User-Agent": await userAgent(),
 			"Content-Type": "application/x-www-form-urlencoded"
 		},
 		body: formData
-	});
+	};
+	const resp = await withConnectTimeoutRetry("machine user token request", () => fetch(tokenEndpoint, request));
 	if (!resp.ok) {
 		const body = await resp.text().catch(() => "");
 		throw new Error(`Failed to fetch machine user token: ${resp.status} ${resp.statusText} ${body.slice(0, 500)}`);
@@ -650,6 +653,29 @@ async function fetchMachineUserToken(url, clientId, clientSecret) {
 		expires_in: z.number()
 	}).parse(rawJson);
 }
+function isUndiciConnectTimeout(error) {
+	if (!(error instanceof TypeError)) return false;
+	const cause = error.cause;
+	return cause instanceof Error && "code" in cause && cause.code === "UND_ERR_CONNECT_TIMEOUT";
+}
+/**
+* Retry a request that failed before the connection was established.
+*
+* Only `UND_ERR_CONNECT_TIMEOUT` is retried: the request provably never reached
+* the server, so replaying it cannot duplicate a server-side effect.
+* @param label - Request description for the retry debug log
+* @param send - Sends the request; called once per attempt
+* @returns The first successful result
+*/
+async function withConnectTimeoutRetry(label, send) {
+	for (let attempt = 1;; attempt++) try {
+		return await send();
+	} catch (error) {
+		if (!isUndiciConnectTimeout(error) || attempt >= MAX_RETRY_ATTEMPTS) throw error;
+		logger.debug(`retry: ${label} attempt ${attempt} failed with UND_ERR_CONNECT_TIMEOUT; retrying`);
+		await waitRetryBackoff(attempt);
+	}
+}
 /**
 * Fetch an OAuth2 token for a platform machine user via client_credentials grant.
 * @param clientId - Client ID for the platform machine user
@@ -658,12 +684,13 @@ async function fetchMachineUserToken(url, clientId, clientSecret) {
 * @returns OAuth2 token
 */
 async function fetchPlatformMachineUserToken(clientId, clientSecret, config) {
-	return await new OAuth2Client({
+	const server = getPlatformBaseUrl(config);
+	return await withConnectTimeoutRetry("platform machine user token request", () => new OAuth2Client({
 		clientId,
 		clientSecret,
-		server: getPlatformBaseUrl(config),
+		server,
 		discoveryEndpoint: oauth2DiscoveryEndpoint
-	}).clientCredentials();
+	}).clientCredentials());
 }
 /**
 * Close the global HTTP connection pool to prevent libuv UV_HANDLE_CLOSING
@@ -2579,6 +2606,7 @@ const tailorPrincipalMap = makePrincipalExpr({
 		attributeList: "$raw.attributes ?? []"
 	}
 });
+const PRINCIPAL_VAR = "_principal";
 /**
 * Parse `wrapped` and return the first property of the top-level parenthesized
 * object expression, or `undefined` if it does not parse as one.
@@ -2630,17 +2658,17 @@ function formatScriptContext(kind, context) {
 const convertToScriptExpr = (fn, kind, context) => {
 	const precompiledExpr = getPrecompiledScriptExpr(fn);
 	if (precompiledExpr) return precompiledExpr;
-	return assertParsableExpression(`(${stringifyFunction(fn)})(${kind === "validate" ? `{ value: _value }` : kind === "hooks.create" ? `{ input: _value, invoker: ${tailorPrincipalMap}, now: _now }` : `{ input: _value, oldValue: _oldValue, invoker: ${tailorPrincipalMap}, now: _now }`})`, formatScriptContext(kind, context));
+	return assertParsableExpression(`(${stringifyFunction(fn)})(${kind === "validate" ? `{ value: _value }` : kind === "hooks.create" ? `{ input: _value, invoker: ${PRINCIPAL_VAR}, now: _now }` : `{ input: _value, oldValue: _oldValue, invoker: ${PRINCIPAL_VAR}, now: _now }`})`, formatScriptContext(kind, context));
 };
 const convertTypeHookToExpr = (fn) => {
 	const precompiledExpr = getPrecompiledScriptExpr(fn);
 	if (precompiledExpr) return precompiledExpr;
-	return assertParsableExpression(`(${stringifyFunction(fn)})({ input: _input, oldRecord: _oldRecord, invoker: ${tailorPrincipalMap}, now: _now })`, "type-hook");
+	return assertParsableExpression(`(${stringifyFunction(fn)})({ input: _input, oldRecord: _oldRecord, invoker: ${PRINCIPAL_VAR}, now: _now })`, "type-hook");
 };
 const convertTypeValidateToExpr = (fn) => {
 	const precompiledExpr = getPrecompiledScriptExpr(fn);
 	if (precompiledExpr) return precompiledExpr;
-	return assertParsableExpression(`(${stringifyFunction(fn)})({ newRecord: _newRecord, oldRecord: _oldRecord, invoker: ${tailorPrincipalMap} }, __issues)`, "type-validate");
+	return assertParsableExpression(`(${stringifyFunction(fn)})({ newRecord: _newRecord, oldRecord: _oldRecord, invoker: ${PRINCIPAL_VAR} }, __issues)`, "type-validate");
 };
 /**
 * Parse TailorDBField into OperatorFieldConfig.
@@ -3386,7 +3414,7 @@ async function bundleScriptTarget(args) {
 	const context = `${kind} in ${sourceFilePath}`;
 	const fnSource = stringifyFunction(fn);
 	if ((kind === "typeValidate" || kind === "validate") && fn.constructor.name === "AsyncFunction") throw new Error(`${context} must be synchronous — the generated validator runs synchronously, so issues reported after an await are silently lost. Remove the async keyword.`);
-	const argsObject = kind === "hooks.create" ? `{ input: _value, invoker: ${tailorPrincipalMap}, now: _now }` : kind === "hooks.update" ? `{ input: _value, oldValue: _oldValue, invoker: ${tailorPrincipalMap}, now: _now }` : kind === "validate" ? `{ value: _value }` : kind === "typeHook" ? `{ input: _input, oldRecord: _oldRecord, invoker: ${tailorPrincipalMap}, now: _now }` : `{ newRecord: _newRecord, oldRecord: _oldRecord, invoker: ${tailorPrincipalMap} }, __issues`;
+	const argsObject = kind === "hooks.create" ? `{ input: _value, invoker: ${PRINCIPAL_VAR}, now: _now }` : kind === "hooks.update" ? `{ input: _value, oldValue: _oldValue, invoker: ${PRINCIPAL_VAR}, now: _now }` : kind === "validate" ? `{ value: _value }` : kind === "typeHook" ? `{ input: _input, oldRecord: _oldRecord, invoker: ${PRINCIPAL_VAR}, now: _now }` : `{ newRecord: _newRecord, oldRecord: _oldRecord, invoker: ${PRINCIPAL_VAR} }, __issues`;
 	const inlineExpr = assertParsableExpression(`(${fnSource})(${argsObject})`, context);
 	const freeVars = findUndefinedReferences(`const __fn = ${fnSource};`);
 	if (freeVars.size === 0) return inlineExpr;
@@ -3650,7 +3678,7 @@ function createTailorDBService(params) {
 		rawTypes[typeFile] = createRawTypesByName();
 		const loadedTypes = createRawTypesByName();
 		try {
-			const module = await import(pathToFileURL(typeFile).href);
+			const module = await importUserModule(typeFile);
 			for (const exportName of Object.keys(module)) {
 				const exportedValue = module[exportName];
 				const result = TailorDBTypeSchema.safeParse(stripTailorDBTypeBuilderHelpers(exportedValue));
@@ -3666,10 +3694,11 @@ function createTailorDBService(params) {
 					filePath: typeFile,
 					exportName
 				});
-				if (exportedValue.plugins && Array.isArray(exportedValue.plugins) && exportedValue.plugins.length > 0) {
-					pluginAttachments.set(exportedValue.name, [...exportedValue.plugins]);
-					logger.log(`  Plugin attachments: ${styles.info(exportedValue.plugins.map((p) => p.pluginId).join(", "))}`);
-					await processPluginsForType(exportedValue, exportedValue.plugins, typeFile);
+				const rawType = exportedValue;
+				if (rawType.plugins && Array.isArray(rawType.plugins) && rawType.plugins.length > 0) {
+					pluginAttachments.set(rawType.name, [...rawType.plugins]);
+					logger.log(`  Plugin attachments: ${styles.info(rawType.plugins.map((p) => p.pluginId).join(", "))}`);
+					await processPluginsForType(rawType, rawType.plugins, typeFile);
 				}
 			}
 		} catch (error) {
@@ -4437,7 +4466,7 @@ async function loadAdapterFiles(config, baseDir) {
 }
 async function loadAdapterFromFile(filePath) {
 	try {
-		const module = await import(pathToFileURL(filePath).href);
+		const module = await importUserModule(filePath);
 		if (!isSdkBranded(module.default, "http-adapter")) {
 			const named = Object.entries(module).find(([exportName, value]) => exportName !== "default" && isSdkBranded(value, "http-adapter"));
 			if (named) throw new Error(`HTTP adapter must be the default export, but it is exported as \`${named[0]}\`. Re-export it: \`export default createHttpAdapter({...})\`.`);
@@ -4533,7 +4562,7 @@ const ResolverSchema = z.strictObject({
 * @returns Parsed resolver or null if invalid
 */
 async function loadResolver(resolverFilePath) {
-	const resolver = (await import(pathToFileURL(resolverFilePath).href)).default;
+	const resolver = (await importUserModule(resolverFilePath)).default;
 	const parseResult = ResolverSchema.safeParse(resolver);
 	if (!parseResult.success) return null;
 	return parseResult.data;
@@ -4718,7 +4747,7 @@ function createResolverService(namespace, config, baseDir) {
 	});
 	const loadResolverForFile = async (resolverFile) => {
 		try {
-			const resolverModule = await import(pathToFileURL(resolverFile).href);
+			const resolverModule = await importUserModule(resolverFile);
 			const result = ResolverSchema.safeParse(resolverModule.default);
 			if (result.success) {
 				const relativePath = path.relative(process.cwd(), resolverFile);
@@ -5260,7 +5289,7 @@ async function loadFileContent(filePath) {
 	const jobs = [];
 	let workflow = null;
 	try {
-		const module = await import(pathToFileURL(filePath).href);
+		const module = await importUserModule(filePath);
 		for (const [exportName, exportValue] of Object.entries(module)) {
 			if (exportName === "default") {
 				const workflowResult = WorkflowSchema.safeParse(stripRuntimeStart(exportValue));
@@ -5530,6 +5559,65 @@ const StaticWebsiteSchema = z.strictObject({
 	customDomains: z.array(z.string()).optional().describe("Custom domains for the static website")
 }).brand("StaticWebsiteConfig");
 
+//#endregion
+//#region src/parser/service/workflow/wait-point-key.ts
+const KEY_REGEX = /^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/;
+const LITERAL_SEGMENT_REGEX = /^[a-z0-9]+$/;
+const PARAM_NAME_REGEX = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const MAX_KEY_LENGTH = 63;
+const KEY_GRAMMAR = "[a-z0-9-] (3-63 characters; must start and end with [a-z0-9])";
+/**
+* Check one declared wait point key against the key rules.
+*
+* The declaration matters: only `createWaitPoints`' `define` receives the key
+* before the type arguments, so only there can TypeScript read the `$params`
+* off the key literal.
+* @param waitPoint - A key as declared, with the declaration it came from
+* @returns The rule the key breaks, or undefined when the key is usable
+*/
+function checkWaitPointKey(waitPoint) {
+	const { key, declaredBy } = waitPoint;
+	const segments = key.split("-");
+	const paramSegments = segments.filter((segment) => segment.startsWith("$") && segment.length > 1);
+	if (paramSegments.length > 0 && declaredBy !== "define") return declaredBy === "property" ? `Invalid wait point key "${key}": $params cannot come from a property name. Pass the key to define instead, e.g. define.for("${key}")<Payload, Result>().` : `Invalid wait point key "${key}": createWaitPoint takes its type arguments first, which stops TypeScript inferring the key as a literal, so it cannot type the $params. Declare it through createWaitPoints instead: createWaitPoints((define) => ({ myWaitPoint: define.for("${key}")<Payload, Result>() })).`;
+	const seen = /* @__PURE__ */ new Set();
+	let literals = 0;
+	for (const segment of segments) {
+		if (segment.startsWith("$")) {
+			const name = segment.slice(1);
+			if (!PARAM_NAME_REGEX.test(name)) return `Invalid wait point key "${key}": "${segment}" is not a usable parameter name. Use letters, digits and underscores, starting with a letter or underscore.`;
+			if (seen.has(name)) return `Invalid wait point key "${key}": parameter "$${name}" appears more than once.`;
+			seen.add(name);
+			continue;
+		}
+		if (segment === "") continue;
+		if (!LITERAL_SEGMENT_REGEX.test(segment)) return `Invalid wait point key "${key}": segment "${segment}" may only contain [a-z0-9]. Wait point keys accept ${KEY_GRAMMAR}, with $params standing in for runtime values.`;
+		literals += 1;
+	}
+	if (literals === 0 && paramSegments.length > 0) return key.startsWith("-") || key.endsWith("-") ? `Invalid wait point key "${key}": must match ${KEY_GRAMMAR}.` : `Invalid wait point key "${key}": it needs at least one literal segment alongside its $params, otherwise the key carries no identity of its own and can collide with an unrelated wait point.`;
+	if (paramSegments.length === 0) return KEY_REGEX.test(key) ? void 0 : `Invalid wait point key "${key}": must match ${KEY_GRAMMAR}.`;
+	const shortest = segments.map((segment) => segment.startsWith("$") ? "0" : segment).join("-");
+	if (shortest.length > MAX_KEY_LENGTH) return `Wait point key "${key}" cannot fit in ${MAX_KEY_LENGTH} characters: even single-character parameter values produce ${shortest.length}.`;
+	return KEY_REGEX.test(shortest) ? void 0 : `Invalid wait point key "${key}": must match ${KEY_GRAMMAR}.`;
+}
+/**
+* Check every declared wait point key, reporting each broken rule once.
+* @param waitPoints - The keys declared across the project, as registered
+* @returns One message per distinct declaration that breaks a rule
+*/
+function collectWaitPointKeyFailures(waitPoints) {
+	const failures = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const waitPoint of waitPoints) {
+		const identity = `${waitPoint.declaredBy} ${waitPoint.key}`;
+		if (seen.has(identity)) continue;
+		seen.add(identity);
+		const failure = checkWaitPointKey(waitPoint);
+		if (failure) failures.push(failure);
+	}
+	return failures;
+}
+
 //#endregion
 //#region src/cli/services/application.ts
 function defineTailorDB(config, baseDir, pluginManager) {
@@ -5803,6 +5891,11 @@ function generatePluginFilesIfNeeded(pluginManager, tailorDBServices, configPath
 		executorGenerator: generatePluginExecutorFiles
 	});
 }
+function assertWaitPointKeys() {
+	const failures = collectWaitPointKeyFailures(getScopedWaitPoints());
+	if (failures.length === 0) return;
+	throw new Error(failures.join("\n"));
+}
 /**
 * Load and fully initialize a Tailor application.
 * This performs all I/O-heavy operations: loading types, processing plugins,
@@ -5895,6 +5988,7 @@ async function loadApplication(params) {
 		await executorService.loadExecutors();
 		if (pluginExecutorFiles.length > 0) await executorService.loadPluginExecutorFiles([...pluginExecutorFiles]);
 	}
+	assertWaitPointKeys();
 	if (workflowService) workflowService.printLoadedWorkflows();
 	if (httpAdapterService) httpAdapterService.printLoadedAdapters();
 	logger.newline();
@@ -5921,5 +6015,5 @@ async function loadApplication(params) {
 }
 
 //#endregion
-export { createApplyLimiter as $, getDistDir as A, fetchUserInfo as B, composeFunctionTreeshakeOptions as C, getPluginGenerationDependencies as D, createBundleLog as E, fetchAll as F, initOAuth2Client as G, getOAuth2ClientId as H, fetchAllTolerant as I, isNotFoundError as J, initOperatorClient as K, fetchMachineUserToken as L, hashFile as M, closeConnectionPool as N, hasGenerationHooks as O, defaultPlatformBaseUrl as P, byName as Q, fetchPaged as R, platformBundleDefinePlugin as S, resolveBundleLogLevel as T, getOrNull as U, getConsoleBaseUrl as V, getPlatformBaseUrl as W, rememberPlatformConfigForToken as X, normalizeBaseUrl as Y, resolveStaticWebsiteUrls as Z, assertUniqueTailorDBTypeNamesWithExternal as _, resolveInlineSourcemap as a, createTsconfigPathsPlugin as b, WorkflowJobSchema as c, HTTP_METHODS as d, LOG_LEVELS as et, INVOKER_EXPR as f, assertUniqueLocalTailorDBTypeNames as g, buildResolverPermissionAndInputCheckExpr as h, resolverBundleKey as i, hashContent as j, createBundleCache as k, resolveResolverDefaultPermissionForFile as l, buildResolverOperationHookExpr as m, generatePluginFilesIfNeeded as n, getApplicationAuthNamespace as o, buildExecutorArgsExpr as p, isDefaultPlatform as q, loadApplication as r, WorkflowJobFunctionExecutionPolicySchema as s, defineApplication as t, ResolverSchema as u, stringifyFunction as v, createLogLevelTreeshakeOptions as w, resolveTSConfigWithFallback as x, createGeneratedEntryResolverPlugin as y, fetchPlatformMachineUserToken as z };
-//# sourceMappingURL=application-BpLeawBg.mjs.map
+export { resolveStaticWebsiteUrls as $, hasGenerationHooks as A, fetchPaged as B, resolveTSConfigWithFallback as C, resolveBundleLogLevel as D, createLogLevelTreeshakeOptions as E, closeConnectionPool as F, getOrNull as G, fetchUserInfo as H, defaultPlatformBaseUrl as I, initOperatorClient as J, getPlatformBaseUrl as K, fetchAll as L, getDistDir as M, hashContent as N, createBundleLog as O, hashFile as P, rememberPlatformConfigForToken as Q, fetchAllTolerant as R, createTsconfigPathsPlugin as S, composeFunctionTreeshakeOptions as T, getConsoleBaseUrl as U, fetchPlatformMachineUserToken as V, getOAuth2ClientId as W, isNotFoundError as X, isDefaultPlatform as Y, normalizeBaseUrl as Z, assertUniqueTailorDBTypeNamesWithExternal as _, resolveInlineSourcemap as a, tailorPrincipalMap as b, WorkflowJobSchema as c, HTTP_METHODS as d, byName as et, INVOKER_EXPR as f, assertUniqueLocalTailorDBTypeNames as g, buildResolverPermissionAndInputCheckExpr as h, resolverBundleKey as i, createBundleCache as j, getPluginGenerationDependencies as k, resolveResolverDefaultPermissionForFile as l, buildResolverOperationHookExpr as m, generatePluginFilesIfNeeded as n, LOG_LEVELS as nt, getApplicationAuthNamespace as o, buildExecutorArgsExpr as p, initOAuth2Client as q, loadApplication as r, WorkflowJobFunctionExecutionPolicySchema as s, defineApplication as t, createApplyLimiter as tt, ResolverSchema as u, PRINCIPAL_VAR as v, platformBundleDefinePlugin as w, createGeneratedEntryResolverPlugin as x, stringifyFunction as y, fetchMachineUserToken as z };
+//# sourceMappingURL=application-F-nl107y.mjs.map