@constructive-io/react 0.28.0 → 0.28.2

package/api/types.d.ts

@@ -45,6 +45,7 @@ export interface Table {
     pluralName: string | null;
     singularName: string | null;
     tags: string[] | null;
+    stepUp: unknown | null;
     partitioned: boolean | null;
     partitionStrategy: string | null;
     partitionKeyNames: string[] | null;
@@ -78,6 +79,8 @@ export interface Field {
     isRequired: boolean | null;
     apiRequired: boolean | null;
     defaultValue: unknown | null;
+    generationExpression: unknown | null;
+    generationType: string | null;
     type: unknown | null;
     fieldOrder: number | null;
     regexp: string | null;
@@ -165,6 +168,7 @@ export interface Policy {
     disabled: boolean | null;
     policyType: string | null;
     data: unknown | null;
+    withCheck: unknown | null;
     smartTags: unknown | null;
     category: ObjectCategory | null;
     tags: string[] | null;
@@ -501,6 +505,7 @@ export interface Database {
     name: string | null;
     label: string | null;
     hash: string | null;
+    platform: boolean | null;
     createdAt: string | null;
     updatedAt: string | null;
 }
@@ -550,6 +555,21 @@ export interface DatabaseSetting {
     labels: unknown | null;
     annotations: unknown | null;
 }
+export interface AstMigration {
+    id: number | null;
+    databaseId: string | null;
+    name: string | null;
+    requires: string[] | null;
+    payload: unknown | null;
+    deploys: string | null;
+    deploy: unknown | null;
+    revert: unknown | null;
+    verify: unknown | null;
+    createdAt: string | null;
+    action: string | null;
+    actionId: string | null;
+    actorId: string | null;
+}
 export interface WebauthnSetting {
     id: string | null;
     databaseId: string | null;
@@ -570,21 +590,6 @@ export interface WebauthnSetting {
     residentKey: string | null;
     challengeExpirySeconds: string | null;
 }
-export interface AstMigration {
-    id: number | null;
-    databaseId: string | null;
-    name: string | null;
-    requires: string[] | null;
-    payload: unknown | null;
-    deploys: string | null;
-    deploy: unknown | null;
-    revert: unknown | null;
-    verify: unknown | null;
-    createdAt: string | null;
-    action: string | null;
-    actionId: string | null;
-    actorId: string | null;
-}
 export interface StringFilter {
     isNull?: boolean;
     equalTo?: string;

package/auth/hooks/mutation-keys.d.ts

@@ -86,6 +86,7 @@ export declare const customMutationKeys: {
     /** Mutation key for sendAccountDeletionEmail */ readonly sendAccountDeletionEmail: (identifier?: string) => readonly ["mutation", "sendAccountDeletionEmail", string] | readonly ["mutation", "sendAccountDeletionEmail"];
     /** Mutation key for checkPassword */ readonly checkPassword: (identifier?: string) => readonly ["mutation", "checkPassword", string] | readonly ["mutation", "checkPassword"];
     /** Mutation key for deleteOrgPrincipal */ readonly deleteOrgPrincipal: (identifier?: string) => readonly ["mutation", "deleteOrgPrincipal", string] | readonly ["mutation", "deleteOrgPrincipal"];
+    /** Mutation key for deletePrincipal */ readonly deletePrincipal: (identifier?: string) => readonly ["mutation", "deletePrincipal", string] | readonly ["mutation", "deletePrincipal"];
     /** Mutation key for disconnectAccount */ readonly disconnectAccount: (identifier?: string) => readonly ["mutation", "disconnectAccount", string] | readonly ["mutation", "disconnectAccount"];
     /** Mutation key for revokeApiKey */ readonly revokeApiKey: (identifier?: string) => readonly ["mutation", "revokeApiKey", string] | readonly ["mutation", "revokeApiKey"];
     /** Mutation key for revokeSession */ readonly revokeSession: (identifier?: string) => readonly ["mutation", "revokeSession", string] | readonly ["mutation", "revokeSession"];
@@ -97,13 +98,13 @@ export declare const customMutationKeys: {
     /** Mutation key for verifyEmail */ readonly verifyEmail: (identifier?: string) => readonly ["mutation", "verifyEmail", string] | readonly ["mutation", "verifyEmail"];
     /** Mutation key for provisionNewUser */ readonly provisionNewUser: (identifier?: string) => readonly ["mutation", "provisionNewUser", string] | readonly ["mutation", "provisionNewUser"];
     /** Mutation key for resetPassword */ readonly resetPassword: (identifier?: string) => readonly ["mutation", "resetPassword", string] | readonly ["mutation", "resetPassword"];
+    /** Mutation key for createOrgPrincipal */ readonly createOrgPrincipal: (identifier?: string) => readonly ["mutation", "createOrgPrincipal", string] | readonly ["mutation", "createOrgPrincipal"];
     /** Mutation key for signInCrossOrigin */ readonly signInCrossOrigin: (identifier?: string) => readonly ["mutation", "signInCrossOrigin", string] | readonly ["mutation", "signInCrossOrigin"];
     /** Mutation key for signInSmsOtp */ readonly signInSmsOtp: (identifier?: string) => readonly ["mutation", "signInSmsOtp", string] | readonly ["mutation", "signInSmsOtp"];
     /** Mutation key for signUpSms */ readonly signUpSms: (identifier?: string) => readonly ["mutation", "signUpSms", string] | readonly ["mutation", "signUpSms"];
     /** Mutation key for signUp */ readonly signUp: (identifier?: string) => readonly ["mutation", "signUp", string] | readonly ["mutation", "signUp"];
     /** Mutation key for signIn */ readonly signIn: (identifier?: string) => readonly ["mutation", "signIn", string] | readonly ["mutation", "signIn"];
     /** Mutation key for linkIdentity */ readonly linkIdentity: (identifier?: string) => readonly ["mutation", "linkIdentity", string] | readonly ["mutation", "linkIdentity"];
-    /** Mutation key for createOrgPrincipal */ readonly createOrgPrincipal: (identifier?: string) => readonly ["mutation", "createOrgPrincipal", string] | readonly ["mutation", "createOrgPrincipal"];
     /** Mutation key for extendTokenExpires */ readonly extendTokenExpires: (identifier?: string) => readonly ["mutation", "extendTokenExpires", string] | readonly ["mutation", "extendTokenExpires"];
     /** Mutation key for createOrgApiKey */ readonly createOrgApiKey: (identifier?: string) => readonly ["mutation", "createOrgApiKey", string] | readonly ["mutation", "createOrgApiKey"];
     /** Mutation key for createApiKey */ readonly createApiKey: (identifier?: string) => readonly ["mutation", "createApiKey", string] | readonly ["mutation", "createApiKey"];
@@ -218,6 +219,7 @@ export declare const mutationKeys: {
         /** Mutation key for sendAccountDeletionEmail */ readonly sendAccountDeletionEmail: (identifier?: string) => readonly ["mutation", "sendAccountDeletionEmail", string] | readonly ["mutation", "sendAccountDeletionEmail"];
         /** Mutation key for checkPassword */ readonly checkPassword: (identifier?: string) => readonly ["mutation", "checkPassword", string] | readonly ["mutation", "checkPassword"];
         /** Mutation key for deleteOrgPrincipal */ readonly deleteOrgPrincipal: (identifier?: string) => readonly ["mutation", "deleteOrgPrincipal", string] | readonly ["mutation", "deleteOrgPrincipal"];
+        /** Mutation key for deletePrincipal */ readonly deletePrincipal: (identifier?: string) => readonly ["mutation", "deletePrincipal", string] | readonly ["mutation", "deletePrincipal"];
         /** Mutation key for disconnectAccount */ readonly disconnectAccount: (identifier?: string) => readonly ["mutation", "disconnectAccount", string] | readonly ["mutation", "disconnectAccount"];
         /** Mutation key for revokeApiKey */ readonly revokeApiKey: (identifier?: string) => readonly ["mutation", "revokeApiKey", string] | readonly ["mutation", "revokeApiKey"];
         /** Mutation key for revokeSession */ readonly revokeSession: (identifier?: string) => readonly ["mutation", "revokeSession", string] | readonly ["mutation", "revokeSession"];
@@ -229,13 +231,13 @@ export declare const mutationKeys: {
         /** Mutation key for verifyEmail */ readonly verifyEmail: (identifier?: string) => readonly ["mutation", "verifyEmail", string] | readonly ["mutation", "verifyEmail"];
         /** Mutation key for provisionNewUser */ readonly provisionNewUser: (identifier?: string) => readonly ["mutation", "provisionNewUser", string] | readonly ["mutation", "provisionNewUser"];
         /** Mutation key for resetPassword */ readonly resetPassword: (identifier?: string) => readonly ["mutation", "resetPassword", string] | readonly ["mutation", "resetPassword"];
+        /** Mutation key for createOrgPrincipal */ readonly createOrgPrincipal: (identifier?: string) => readonly ["mutation", "createOrgPrincipal", string] | readonly ["mutation", "createOrgPrincipal"];
         /** Mutation key for signInCrossOrigin */ readonly signInCrossOrigin: (identifier?: string) => readonly ["mutation", "signInCrossOrigin", string] | readonly ["mutation", "signInCrossOrigin"];
         /** Mutation key for signInSmsOtp */ readonly signInSmsOtp: (identifier?: string) => readonly ["mutation", "signInSmsOtp", string] | readonly ["mutation", "signInSmsOtp"];
         /** Mutation key for signUpSms */ readonly signUpSms: (identifier?: string) => readonly ["mutation", "signUpSms", string] | readonly ["mutation", "signUpSms"];
         /** Mutation key for signUp */ readonly signUp: (identifier?: string) => readonly ["mutation", "signUp", string] | readonly ["mutation", "signUp"];
         /** Mutation key for signIn */ readonly signIn: (identifier?: string) => readonly ["mutation", "signIn", string] | readonly ["mutation", "signIn"];
         /** Mutation key for linkIdentity */ readonly linkIdentity: (identifier?: string) => readonly ["mutation", "linkIdentity", string] | readonly ["mutation", "linkIdentity"];
-        /** Mutation key for createOrgPrincipal */ readonly createOrgPrincipal: (identifier?: string) => readonly ["mutation", "createOrgPrincipal", string] | readonly ["mutation", "createOrgPrincipal"];
         /** Mutation key for extendTokenExpires */ readonly extendTokenExpires: (identifier?: string) => readonly ["mutation", "extendTokenExpires", string] | readonly ["mutation", "extendTokenExpires"];
         /** Mutation key for createOrgApiKey */ readonly createOrgApiKey: (identifier?: string) => readonly ["mutation", "createOrgApiKey", string] | readonly ["mutation", "createOrgApiKey"];
         /** Mutation key for createApiKey */ readonly createApiKey: (identifier?: string) => readonly ["mutation", "createApiKey", string] | readonly ["mutation", "createApiKey"];

package/auth/hooks/mutation-keys.js

@@ -115,6 +115,9 @@ exports.customMutationKeys = {
     /** Mutation key for deleteOrgPrincipal */ deleteOrgPrincipal: (identifier) => identifier
         ? ['mutation', 'deleteOrgPrincipal', identifier]
         : ['mutation', 'deleteOrgPrincipal'],
+    /** Mutation key for deletePrincipal */ deletePrincipal: (identifier) => identifier
+        ? ['mutation', 'deletePrincipal', identifier]
+        : ['mutation', 'deletePrincipal'],
     /** Mutation key for disconnectAccount */ disconnectAccount: (identifier) => identifier
         ? ['mutation', 'disconnectAccount', identifier]
         : ['mutation', 'disconnectAccount'],
@@ -148,6 +151,9 @@ exports.customMutationKeys = {
     /** Mutation key for resetPassword */ resetPassword: (identifier) => identifier
         ? ['mutation', 'resetPassword', identifier]
         : ['mutation', 'resetPassword'],
+    /** Mutation key for createOrgPrincipal */ createOrgPrincipal: (identifier) => identifier
+        ? ['mutation', 'createOrgPrincipal', identifier]
+        : ['mutation', 'createOrgPrincipal'],
     /** Mutation key for signInCrossOrigin */ signInCrossOrigin: (identifier) => identifier
         ? ['mutation', 'signInCrossOrigin', identifier]
         : ['mutation', 'signInCrossOrigin'],
@@ -162,9 +168,6 @@ exports.customMutationKeys = {
     /** Mutation key for linkIdentity */ linkIdentity: (identifier) => identifier
         ? ['mutation', 'linkIdentity', identifier]
         : ['mutation', 'linkIdentity'],
-    /** Mutation key for createOrgPrincipal */ createOrgPrincipal: (identifier) => identifier
-        ? ['mutation', 'createOrgPrincipal', identifier]
-        : ['mutation', 'createOrgPrincipal'],
     /** Mutation key for extendTokenExpires */ extendTokenExpires: (identifier) => identifier
         ? ['mutation', 'extendTokenExpires', identifier]
         : ['mutation', 'extendTokenExpires'],

package/auth/hooks/mutations/index.d.ts

@@ -4,7 +4,6 @@
  * DO NOT EDIT - changes will be overwritten
  */
 export * from './useCreatePrincipalMutation';
-export * from './useDeletePrincipalMutation';
 export * from './useCreatePrincipalEntityMutation';
 export * from './useUpdatePrincipalEntityMutation';
 export * from './useDeletePrincipalEntityMutation';
@@ -37,6 +36,7 @@ export * from './useSignOutMutation';
 export * from './useSendAccountDeletionEmailMutation';
 export * from './useCheckPasswordMutation';
 export * from './useDeleteOrgPrincipalMutation';
+export * from './useDeletePrincipalMutation';
 export * from './useDisconnectAccountMutation';
 export * from './useRevokeApiKeyMutation';
 export * from './useRevokeSessionMutation';
@@ -48,13 +48,13 @@ export * from './useSetPasswordMutation';
 export * from './useVerifyEmailMutation';
 export * from './useProvisionNewUserMutation';
 export * from './useResetPasswordMutation';
+export * from './useCreateOrgPrincipalMutation';
 export * from './useSignInCrossOriginMutation';
 export * from './useSignInSmsOtpMutation';
 export * from './useSignUpSmsMutation';
 export * from './useSignUpMutation';
 export * from './useSignInMutation';
 export * from './useLinkIdentityMutation';
-export * from './useCreateOrgPrincipalMutation';
 export * from './useExtendTokenExpiresMutation';
 export * from './useCreateOrgApiKeyMutation';
 export * from './useCreateApiKeyMutation';

package/auth/hooks/mutations/index.js

@@ -20,7 +20,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * DO NOT EDIT - changes will be overwritten
  */
 __exportStar(require("./useCreatePrincipalMutation"), exports);
-__exportStar(require("./useDeletePrincipalMutation"), exports);
 __exportStar(require("./useCreatePrincipalEntityMutation"), exports);
 __exportStar(require("./useUpdatePrincipalEntityMutation"), exports);
 __exportStar(require("./useDeletePrincipalEntityMutation"), exports);
@@ -53,6 +52,7 @@ __exportStar(require("./useSignOutMutation"), exports);
 __exportStar(require("./useSendAccountDeletionEmailMutation"), exports);
 __exportStar(require("./useCheckPasswordMutation"), exports);
 __exportStar(require("./useDeleteOrgPrincipalMutation"), exports);
+__exportStar(require("./useDeletePrincipalMutation"), exports);
 __exportStar(require("./useDisconnectAccountMutation"), exports);
 __exportStar(require("./useRevokeApiKeyMutation"), exports);
 __exportStar(require("./useRevokeSessionMutation"), exports);
@@ -64,13 +64,13 @@ __exportStar(require("./useSetPasswordMutation"), exports);
 __exportStar(require("./useVerifyEmailMutation"), exports);
 __exportStar(require("./useProvisionNewUserMutation"), exports);
 __exportStar(require("./useResetPasswordMutation"), exports);
+__exportStar(require("./useCreateOrgPrincipalMutation"), exports);
 __exportStar(require("./useSignInCrossOriginMutation"), exports);
 __exportStar(require("./useSignInSmsOtpMutation"), exports);
 __exportStar(require("./useSignUpSmsMutation"), exports);
 __exportStar(require("./useSignUpMutation"), exports);
 __exportStar(require("./useSignInMutation"), exports);
 __exportStar(require("./useLinkIdentityMutation"), exports);
-__exportStar(require("./useCreateOrgPrincipalMutation"), exports);
 __exportStar(require("./useExtendTokenExpiresMutation"), exports);
 __exportStar(require("./useCreateOrgApiKeyMutation"), exports);
 __exportStar(require("./useCreateApiKeyMutation"), exports);

package/auth/hooks/mutations/useDeletePrincipalMutation.d.ts

@@ -1,38 +1,20 @@
 /**
- * Scoped sub-identities (API keys and agents) with precomputed SPRT
+ * Custom mutation hook for deletePrincipal
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
 import type { UseMutationOptions, UseMutationResult } from '@tanstack/react-query';
-import type { PrincipalSelect, PrincipalWithRelations } from '../../orm/input-types';
+import type { DeletePrincipalVariables } from '../../orm/mutation';
+import type { DeletePrincipalPayloadSelect, DeletePrincipalPayload } from '../../orm/input-types';
 import type { InferSelectResult, HookStrictSelect } from '../../orm/select-types';
-export type { PrincipalSelect, PrincipalWithRelations } from '../../orm/input-types';
-/**
- * Scoped sub-identities (API keys and agents) with precomputed SPRT
- *
- * @example
- * ```tsx
- * const { mutate, isPending } = useDeletePrincipalMutation({
- *   selection: { fields: { id: true } },
- * });
- *
- * mutate({ principalId: 'value-to-delete' });
- * ```
- */
-export declare function useDeletePrincipalMutation<S extends PrincipalSelect>(params: {
+export type { DeletePrincipalVariables } from '../../orm/mutation';
+export type { DeletePrincipalPayloadSelect } from '../../orm/input-types';
+export declare function useDeletePrincipalMutation<S extends DeletePrincipalPayloadSelect>(params: {
     selection: {
-        fields: S & PrincipalSelect;
-    } & HookStrictSelect<NoInfer<S>, PrincipalSelect>;
+        fields: S & DeletePrincipalPayloadSelect;
+    } & HookStrictSelect<NoInfer<S>, DeletePrincipalPayloadSelect>;
 } & Omit<UseMutationOptions<{
-    deletePrincipal: {
-        principal: InferSelectResult<PrincipalWithRelations, S>;
-    };
-}, Error, {
-    principalId: string;
-}>, 'mutationFn'>): UseMutationResult<{
-    deletePrincipal: {
-        principal: InferSelectResult<PrincipalWithRelations, S>;
-    };
-}, Error, {
-    principalId: string;
-}>;
+    deletePrincipal: InferSelectResult<DeletePrincipalPayload, S> | null;
+}, Error, DeletePrincipalVariables>, 'mutationFn'>): UseMutationResult<{
+    deletePrincipal: InferSelectResult<DeletePrincipalPayload, S> | null;
+}, Error, DeletePrincipalVariables>;

package/auth/hooks/mutations/useDeletePrincipalMutation.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Scoped sub-identities (API keys and agents) with precomputed SPRT
+ * Custom mutation hook for deletePrincipal
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
@@ -9,31 +9,18 @@ exports.useDeletePrincipalMutation = useDeletePrincipalMutation;
 const react_query_1 = require("@tanstack/react-query");
 const client_1 = require("../client");
 const selection_1 = require("../selection");
-const query_keys_1 = require("../query-keys");
 const mutation_keys_1 = require("../mutation-keys");
 function useDeletePrincipalMutation(params) {
     const args = (0, selection_1.buildSelectionArgs)(params.selection);
     const { selection: _selection, ...mutationOptions } = params ?? {};
     void _selection;
-    const queryClient = (0, react_query_1.useQueryClient)();
     return (0, react_query_1.useMutation)({
-        mutationKey: mutation_keys_1.principalMutationKeys.all,
-        mutationFn: ({ principalId }) => (0, client_1.getClient)()
-            .principal.delete({
-            where: {
-                principalId,
-            },
+        mutationKey: mutation_keys_1.customMutationKeys.deletePrincipal(),
+        mutationFn: (variables) => (0, client_1.getClient)()
+            .mutation.deletePrincipal(variables, {
             select: args.select,
         })
             .unwrap(),
-        onSuccess: (_, variables) => {
-            queryClient.removeQueries({
-                queryKey: query_keys_1.principalKeys.detail(variables.principalId),
-            });
-            queryClient.invalidateQueries({
-                queryKey: query_keys_1.principalKeys.lists(),
-            });
-        },
         ...mutationOptions,
     });
 }

package/auth/orm/index.d.ts

@@ -104,6 +104,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").DeleteOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
             deleteOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").DeleteOrgPrincipalPayload, S> | null;
         }>;
+        deletePrincipal: <S extends import("./input-types").DeletePrincipalPayloadSelect>(args: import("./mutation").DeletePrincipalVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").DeletePrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            deletePrincipal: import("./select-types").InferSelectResult<import("./input-types").DeletePrincipalPayload, S> | null;
+        }>;
         disconnectAccount: <S extends import("./input-types").DisconnectAccountPayloadSelect>(args: import("./mutation").DisconnectAccountVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").DisconnectAccountPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -159,6 +164,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").ResetPasswordPayloadSelect>) => import("./query-builder").QueryBuilder<{
             resetPassword: import("./select-types").InferSelectResult<import("./input-types").ResetPasswordPayload, S> | null;
         }>;
+        createOrgPrincipal: <S extends import("./input-types").CreateOrgPrincipalPayloadSelect>(args: import("./mutation").CreateOrgPrincipalVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").CreateOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            createOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").CreateOrgPrincipalPayload, S> | null;
+        }>;
         signInCrossOrigin: <S extends import("./input-types").SignInCrossOriginPayloadSelect>(args: import("./mutation").SignInCrossOriginVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").SignInCrossOriginPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -189,11 +199,6 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").LinkIdentityPayloadSelect>) => import("./query-builder").QueryBuilder<{
             linkIdentity: import("./select-types").InferSelectResult<import("./input-types").LinkIdentityPayload, S> | null;
         }>;
-        createOrgPrincipal: <S extends import("./input-types").CreateOrgPrincipalPayloadSelect>(args: import("./mutation").CreateOrgPrincipalVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").CreateOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            createOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").CreateOrgPrincipalPayload, S> | null;
-        }>;
         extendTokenExpires: <S extends import("./input-types").ExtendTokenExpiresPayloadSelect>(args: import("./mutation").ExtendTokenExpiresVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").ExtendTokenExpiresPayloadSelect>) => import("./query-builder").QueryBuilder<{

package/auth/orm/input-types.d.ts

@@ -244,8 +244,8 @@ export interface Principal {
     userId?: string | null;
     /** Human-readable label for this principal (e.g., billing-bot, ci-deploy-key) */
     name?: string | null;
-    /** Permission bitmask subset; all-1s means inherit all parent permissions */
-    allowedMask?: string | null;
+    /** Whether this principal inherits admin/owner privileges from the owner */
+    useAdminOwner?: boolean | null;
     /** Whether this principal is restricted to read-only operations */
     isReadOnly?: boolean | null;
     /** Whether this principal bypasses MFA step-up requirements */
@@ -272,10 +272,12 @@ export interface PrincipalScopeOverride {
     principalId?: string | null;
     /** The scope level (membership_type) this override restricts */
     membershipType?: number | null;
-    /** Permission bitmask for this scope; AND-masked with parent permissions during cascade */
+    /** Optional permission mask; AND-masked with parent permissions during cascade. NULL means no extra mask. */
     allowedMask?: string | null;
-    /** Whether this principal has admin access at this scope (default true = inherit from parent) */
-    isAdmin?: boolean | null;
+    /** Whether this principal inherits admin/owner at this scope (default true = inherit from parent) */
+    useAdminOwner?: boolean | null;
+    /** Whether this scope is active for this principal; false disables all access at this scope */
+    isActive?: boolean | null;
     /** Whether this principal is restricted to read-only at this scope */
     isReadOnly?: boolean | null;
 }
@@ -501,7 +503,7 @@ export type PrincipalSelect = {
     ownerId?: boolean;
     userId?: boolean;
     name?: boolean;
-    allowedMask?: boolean;
+    useAdminOwner?: boolean;
     isReadOnly?: boolean;
     bypassStepUp?: boolean;
     owner?: {
@@ -547,7 +549,8 @@ export type PrincipalScopeOverrideSelect = {
     principalId?: boolean;
     membershipType?: boolean;
     allowedMask?: boolean;
-    isAdmin?: boolean;
+    useAdminOwner?: boolean;
+    isActive?: boolean;
     isReadOnly?: boolean;
     principal?: {
         select: PrincipalSelect;
@@ -737,8 +740,8 @@ export interface PrincipalFilter {
     userId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
-    /** Filter by the object’s `allowedMask` field. */
-    allowedMask?: BitStringFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Filter by the object’s `bypassStepUp` field. */
@@ -801,8 +804,10 @@ export interface PrincipalScopeOverrideFilter {
     membershipType?: IntFilter;
     /** Filter by the object’s `allowedMask` field. */
     allowedMask?: BitStringFilter;
-    /** Filter by the object’s `isAdmin` field. */
-    isAdmin?: BooleanFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
+    /** Filter by the object’s `isActive` field. */
+    isActive?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Checks for all expressions in this list. */
@@ -1116,9 +1121,9 @@ export interface UserFilter {
      */
     unifiedSearch?: string;
 }
-export type PrincipalOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC';
+export type PrincipalOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC';
 export type PrincipalEntityOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC';
-export type PrincipalScopeOverrideOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'IS_ADMIN_ASC' | 'IS_ADMIN_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC';
+export type PrincipalScopeOverrideOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC' | 'IS_ACTIVE_ASC' | 'IS_ACTIVE_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC';
 export type EmailOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'EMAIL_ASC' | 'EMAIL_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 export type PhoneNumberOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CC_ASC' | 'CC_DESC' | 'NUMBER_ASC' | 'NUMBER_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 export type CryptoAddressOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'ADDRESS_ASC' | 'ADDRESS_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
@@ -1135,7 +1140,7 @@ export interface CreatePrincipalInput {
         ownerId: string;
         userId: string;
         name?: string;
-        allowedMask?: string;
+        useAdminOwner?: boolean;
         isReadOnly?: boolean;
         bypassStepUp?: boolean;
     };
@@ -1144,7 +1149,7 @@ export interface PrincipalPatch {
     ownerId?: string | null;
     userId?: string | null;
     name?: string | null;
-    allowedMask?: string | null;
+    useAdminOwner?: boolean | null;
     isReadOnly?: boolean | null;
     bypassStepUp?: boolean | null;
 }
@@ -1185,7 +1190,8 @@ export interface CreatePrincipalScopeOverrideInput {
         principalId: string;
         membershipType?: number;
         allowedMask?: string;
-        isAdmin?: boolean;
+        useAdminOwner?: boolean;
+        isActive?: boolean;
         isReadOnly?: boolean;
     };
 }
@@ -1193,7 +1199,8 @@ export interface PrincipalScopeOverridePatch {
     principalId?: string | null;
     membershipType?: number | null;
     allowedMask?: string | null;
-    isAdmin?: boolean | null;
+    useAdminOwner?: boolean | null;
+    isActive?: boolean | null;
     isReadOnly?: boolean | null;
 }
 export interface UpdatePrincipalScopeOverrideInput {
@@ -1546,6 +1553,14 @@ export interface ResetPasswordInput {
     resetToken?: string;
     newPassword?: string;
 }
+export interface CreateOrgPrincipalInput {
+    clientMutationId?: string;
+    name?: string;
+    orgId?: string;
+    useAdminOwner?: boolean;
+    isReadOnly?: boolean;
+    bypassStepUp?: boolean;
+}
 export interface SignInCrossOriginInput {
     clientMutationId?: string;
     token?: string;
@@ -1591,14 +1606,6 @@ export interface LinkIdentityInput {
     identifier: string;
     details?: Record<string, unknown>;
 }
-export interface CreateOrgPrincipalInput {
-    clientMutationId?: string;
-    name?: string;
-    orgId?: string;
-    allowedMask?: string;
-    isReadOnly?: boolean;
-    bypassStepUp?: boolean;
-}
 export interface ExtendTokenExpiresInput {
     clientMutationId?: string;
     amount?: IntervalInput;
@@ -2232,8 +2239,10 @@ export interface PrincipalScopeOverrideFilter {
     membershipType?: IntFilter;
     /** Filter by the object’s `allowedMask` field. */
     allowedMask?: BitStringFilter;
-    /** Filter by the object’s `isAdmin` field. */
-    isAdmin?: BooleanFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
+    /** Filter by the object’s `isActive` field. */
+    isActive?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Checks for all expressions in this list. */
@@ -2259,8 +2268,8 @@ export interface PrincipalFilter {
     userId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
-    /** Filter by the object’s `allowedMask` field. */
-    allowedMask?: BitStringFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Filter by the object’s `bypassStepUp` field. */
@@ -2867,6 +2876,14 @@ export type DeleteOrgPrincipalPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface DeletePrincipalPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type DeletePrincipalPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface DisconnectAccountPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -2955,6 +2972,14 @@ export type ResetPasswordPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface CreateOrgPrincipalPayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
+export type CreateOrgPrincipalPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface SignInCrossOriginPayload {
     clientMutationId?: string | null;
     result?: SignInCrossOriginRecord | null;
@@ -3013,14 +3038,6 @@ export type LinkIdentityPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface CreateOrgPrincipalPayload {
-    clientMutationId?: string | null;
-    result?: string | null;
-}
-export type CreateOrgPrincipalPayloadSelect = {
-    clientMutationId?: boolean;
-    result?: boolean;
-};
 export interface ExtendTokenExpiresPayload {
     clientMutationId?: string | null;
     result?: ExtendTokenExpiresRecord[] | null;
@@ -3103,14 +3120,6 @@ export type CreatePrincipalPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface DeletePrincipalPayload {
-    clientMutationId?: string | null;
-    result?: boolean | null;
-}
-export type DeletePrincipalPayloadSelect = {
-    clientMutationId?: boolean;
-    result?: boolean;
-};
 export interface CreatePrincipalEntityPayload {
     clientMutationId?: string | null;
     /** The `PrincipalEntity` that was created by this mutation. */

package/auth/orm/models/principal.d.ts

@@ -5,7 +5,7 @@
  */
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
-import type { ConnectionResult, FindManyArgs, FindFirstArgs, CreateArgs, DeleteArgs, InferSelectResult, StrictSelect } from '../select-types';
+import type { ConnectionResult, FindManyArgs, FindFirstArgs, CreateArgs, InferSelectResult, StrictSelect } from '../select-types';
 import type { PrincipalWithRelations, PrincipalSelect, PrincipalFilter, PrincipalOrderBy, CreatePrincipalInput } from '../input-types';
 export declare class PrincipalModel {
     private client;
@@ -33,13 +33,4 @@ export declare class PrincipalModel {
             principal: InferSelectResult<PrincipalWithRelations, S>;
         };
     }>;
-    delete<S extends PrincipalSelect>(args: DeleteArgs<{
-        principalId: string;
-    }, S> & {
-        select: S;
-    } & StrictSelect<S, PrincipalSelect>): QueryBuilder<{
-        deletePrincipal: {
-            principal: InferSelectResult<PrincipalWithRelations, S>;
-        };
-    }>;
 }

package/auth/orm/models/principal.js

@@ -76,18 +76,5 @@ class PrincipalModel {
             variables,
         });
     }
-    delete(args) {
-        const { document, variables } = (0, query_builder_1.buildDeleteByPkDocument)('Principal', 'deletePrincipal', 'principal', {
-            principalId: args.where.principalId,
-        }, 'DeletePrincipalInput', args.select, input_types_1.connectionFieldsMap);
-        return new query_builder_1.QueryBuilder({
-            client: this.client,
-            operation: 'mutation',
-            operationName: 'Principal',
-            fieldName: 'deletePrincipal',
-            document,
-            variables,
-        });
-    }
 }
 exports.PrincipalModel = PrincipalModel;