@constructive-io/sdk 0.12.22 → 0.13.0

package/admin/orm/index.d.ts

@@ -162,5 +162,20 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").SubmitOrgInviteCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
             submitOrgInviteCode: import("./select-types").InferSelectResult<import("./input-types").SubmitOrgInviteCodePayload, S> | null;
         }>;
+        requestUploadUrl: <S extends import("./input-types").RequestUploadUrlPayloadSelect>(args: import("./mutation").RequestUploadUrlVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").RequestUploadUrlPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            requestUploadUrl: import("./select-types").InferSelectResult<import("./input-types").RequestUploadUrlPayload, S> | null;
+        }>;
+        confirmUpload: <S extends import("./input-types").ConfirmUploadPayloadSelect>(args: import("./mutation").ConfirmUploadVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ConfirmUploadPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            confirmUpload: import("./select-types").InferSelectResult<import("./input-types").ConfirmUploadPayload, S> | null;
+        }>;
+        provisionBucket: <S extends import("./input-types").ProvisionBucketPayloadSelect>(args: import("./mutation").ProvisionBucketVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionBucketPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            provisionBucket: import("./select-types").InferSelectResult<import("./input-types").ProvisionBucketPayload, S> | null;
+        }>;
     };
 };

package/admin/orm/input-types.d.ts

@@ -2570,6 +2570,26 @@ export interface SubmitOrgInviteCodeInput {
     clientMutationId?: string;
     token?: string;
 }
+export interface RequestUploadUrlInput {
+    /** Bucket key (e.g., "public", "private") */
+    bucketKey: string;
+    /** SHA-256 content hash computed by the client (hex-encoded, 64 chars) */
+    contentHash: string;
+    /** MIME type of the file (e.g., "image/png") */
+    contentType: string;
+    /** File size in bytes */
+    size: number;
+    /** Original filename (optional, for display and Content-Disposition) */
+    filename?: string;
+}
+export interface ConfirmUploadInput {
+    /** The file ID returned by requestUploadUrl */
+    fileId: string;
+}
+export interface ProvisionBucketInput {
+    /** The logical bucket key (e.g., "public", "private") */
+    bucketKey: string;
+}
 /** A filter to be used against ConstructiveInternalTypeImage fields. All fields are combined with a logical ‘and.’ */
 export interface ConstructiveInternalTypeImageFilter {
     /** Is null (if `true` is specified) or is not null (if `false` is specified). */
@@ -2755,6 +2775,60 @@ export type SubmitOrgInviteCodePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface RequestUploadUrlPayload {
+    /** Presigned PUT URL (null if file was deduplicated) */
+    uploadUrl?: string | null;
+    /** The file ID (existing if deduplicated, new if fresh upload) */
+    fileId: string;
+    /** The S3 object key */
+    key: string;
+    /** Whether this file was deduplicated (already exists with same hash) */
+    deduplicated: boolean;
+    /** Presigned URL expiry time (null if deduplicated) */
+    expiresAt?: string | null;
+}
+export type RequestUploadUrlPayloadSelect = {
+    uploadUrl?: boolean;
+    fileId?: boolean;
+    key?: boolean;
+    deduplicated?: boolean;
+    expiresAt?: boolean;
+};
+export interface ConfirmUploadPayload {
+    /** The confirmed file ID */
+    fileId: string;
+    /** New file status */
+    status: string;
+    /** Whether confirmation succeeded */
+    success: boolean;
+}
+export type ConfirmUploadPayloadSelect = {
+    fileId?: boolean;
+    status?: boolean;
+    success?: boolean;
+};
+export interface ProvisionBucketPayload {
+    /** Whether provisioning succeeded */
+    success: boolean;
+    /** The S3 bucket name that was provisioned */
+    bucketName: string;
+    /** The access type applied */
+    accessType: string;
+    /** The storage provider used */
+    provider: string;
+    /** The S3 endpoint (null for AWS S3 default) */
+    endpoint?: string | null;
+    /** Error message if provisioning failed */
+    error?: string | null;
+}
+export type ProvisionBucketPayloadSelect = {
+    success?: boolean;
+    bucketName?: boolean;
+    accessType?: boolean;
+    provider?: boolean;
+    endpoint?: boolean;
+    error?: boolean;
+};
 export interface CreateAppPermissionPayload {
     clientMutationId?: string | null;
     /** The `AppPermission` that was created by this mutation. */

package/admin/orm/mutation/index.d.ts

@@ -6,13 +6,42 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { SubmitInviteCodeInput, SubmitOrgInviteCodeInput, SubmitInviteCodePayload, SubmitOrgInviteCodePayload, SubmitInviteCodePayloadSelect, SubmitOrgInviteCodePayloadSelect } from '../input-types';
+import type { SubmitInviteCodeInput, SubmitOrgInviteCodeInput, RequestUploadUrlInput, ConfirmUploadInput, ProvisionBucketInput, SubmitInviteCodePayload, SubmitOrgInviteCodePayload, RequestUploadUrlPayload, ConfirmUploadPayload, ProvisionBucketPayload, SubmitInviteCodePayloadSelect, SubmitOrgInviteCodePayloadSelect, RequestUploadUrlPayloadSelect, ConfirmUploadPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface SubmitInviteCodeVariables {
     input: SubmitInviteCodeInput;
 }
 export interface SubmitOrgInviteCodeVariables {
     input: SubmitOrgInviteCodeInput;
 }
+/**
+ * Variables for requestUploadUrl
+ * Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+ */
+export interface RequestUploadUrlVariables {
+    input: RequestUploadUrlInput;
+}
+/**
+ * Variables for confirmUpload
+ * Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+ */
+export interface ConfirmUploadVariables {
+    input: ConfirmUploadInput;
+}
+/**
+ * Variables for provisionBucket
+ * Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+ */
+export interface ProvisionBucketVariables {
+    input: ProvisionBucketInput;
+}
 export declare function createMutationOperations(client: OrmClient): {
     submitInviteCode: <S extends SubmitInviteCodePayloadSelect>(args: SubmitInviteCodeVariables, options: {
         select: S;
@@ -24,4 +53,19 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SubmitOrgInviteCodePayloadSelect>) => QueryBuilder<{
         submitOrgInviteCode: InferSelectResult<SubmitOrgInviteCodePayload, S> | null;
     }>;
+    requestUploadUrl: <S extends RequestUploadUrlPayloadSelect>(args: RequestUploadUrlVariables, options: {
+        select: S;
+    } & StrictSelect<S, RequestUploadUrlPayloadSelect>) => QueryBuilder<{
+        requestUploadUrl: InferSelectResult<RequestUploadUrlPayload, S> | null;
+    }>;
+    confirmUpload: <S extends ConfirmUploadPayloadSelect>(args: ConfirmUploadVariables, options: {
+        select: S;
+    } & StrictSelect<S, ConfirmUploadPayloadSelect>) => QueryBuilder<{
+        confirmUpload: InferSelectResult<ConfirmUploadPayload, S> | null;
+    }>;
+    provisionBucket: <S extends ProvisionBucketPayloadSelect>(args: ProvisionBucketVariables, options: {
+        select: S;
+    } & StrictSelect<S, ProvisionBucketPayloadSelect>) => QueryBuilder<{
+        provisionBucket: InferSelectResult<ProvisionBucketPayload, S> | null;
+    }>;
 };

package/admin/orm/mutation/index.js

@@ -29,5 +29,41 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'SubmitOrgInviteCodePayload'),
         }),
+        requestUploadUrl: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'RequestUploadUrl',
+            fieldName: 'requestUploadUrl',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'RequestUploadUrl', 'requestUploadUrl', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'RequestUploadUrlInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'RequestUploadUrlPayload'),
+        }),
+        confirmUpload: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ConfirmUpload',
+            fieldName: 'confirmUpload',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ConfirmUpload', 'confirmUpload', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ConfirmUploadInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'ConfirmUploadPayload'),
+        }),
+        provisionBucket: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ProvisionBucket',
+            fieldName: 'provisionBucket',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ProvisionBucket', 'provisionBucket', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ProvisionBucketInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'ProvisionBucketPayload'),
+        }),
     };
 }

package/auth/orm/index.d.ts

@@ -147,5 +147,20 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").VerifyTotpPayloadSelect>) => import("./query-builder").QueryBuilder<{
             verifyTotp: import("./select-types").InferSelectResult<import("./input-types").VerifyTotpPayload, S> | null;
         }>;
+        requestUploadUrl: <S extends import("./input-types").RequestUploadUrlPayloadSelect>(args: import("./mutation").RequestUploadUrlVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").RequestUploadUrlPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            requestUploadUrl: import("./select-types").InferSelectResult<import("./input-types").RequestUploadUrlPayload, S> | null;
+        }>;
+        confirmUpload: <S extends import("./input-types").ConfirmUploadPayloadSelect>(args: import("./mutation").ConfirmUploadVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ConfirmUploadPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            confirmUpload: import("./select-types").InferSelectResult<import("./input-types").ConfirmUploadPayload, S> | null;
+        }>;
+        provisionBucket: <S extends import("./input-types").ProvisionBucketPayloadSelect>(args: import("./mutation").ProvisionBucketVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionBucketPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            provisionBucket: import("./select-types").InferSelectResult<import("./input-types").ProvisionBucketPayload, S> | null;
+        }>;
     };
 };

package/auth/orm/input-types.d.ts

@@ -937,6 +937,26 @@ export interface VerifyTotpInput {
     clientMutationId?: string;
     totpValue: string;
 }
+export interface RequestUploadUrlInput {
+    /** Bucket key (e.g., "public", "private") */
+    bucketKey: string;
+    /** SHA-256 content hash computed by the client (hex-encoded, 64 chars) */
+    contentHash: string;
+    /** MIME type of the file (e.g., "image/png") */
+    contentType: string;
+    /** File size in bytes */
+    size: number;
+    /** Original filename (optional, for display and Content-Disposition) */
+    filename?: string;
+}
+export interface ConfirmUploadInput {
+    /** The file ID returned by requestUploadUrl */
+    fileId: string;
+}
+export interface ProvisionBucketInput {
+    /** The logical bucket key (e.g., "public", "private") */
+    bucketKey: string;
+}
 /** A filter to be used against ConstructiveInternalTypeEmail fields. All fields are combined with a logical ‘and.’ */
 export interface ConstructiveInternalTypeEmailFilter {
     /** Is null (if `true` is specified) or is not null (if `false` is specified). */
@@ -1882,6 +1902,60 @@ export type VerifyTotpPayloadSelect = {
         select: SessionSelect;
     };
 };
+export interface RequestUploadUrlPayload {
+    /** Presigned PUT URL (null if file was deduplicated) */
+    uploadUrl?: string | null;
+    /** The file ID (existing if deduplicated, new if fresh upload) */
+    fileId: string;
+    /** The S3 object key */
+    key: string;
+    /** Whether this file was deduplicated (already exists with same hash) */
+    deduplicated: boolean;
+    /** Presigned URL expiry time (null if deduplicated) */
+    expiresAt?: string | null;
+}
+export type RequestUploadUrlPayloadSelect = {
+    uploadUrl?: boolean;
+    fileId?: boolean;
+    key?: boolean;
+    deduplicated?: boolean;
+    expiresAt?: boolean;
+};
+export interface ConfirmUploadPayload {
+    /** The confirmed file ID */
+    fileId: string;
+    /** New file status */
+    status: string;
+    /** Whether confirmation succeeded */
+    success: boolean;
+}
+export type ConfirmUploadPayloadSelect = {
+    fileId?: boolean;
+    status?: boolean;
+    success?: boolean;
+};
+export interface ProvisionBucketPayload {
+    /** Whether provisioning succeeded */
+    success: boolean;
+    /** The S3 bucket name that was provisioned */
+    bucketName: string;
+    /** The access type applied */
+    accessType: string;
+    /** The storage provider used */
+    provider: string;
+    /** The S3 endpoint (null for AWS S3 default) */
+    endpoint?: string | null;
+    /** Error message if provisioning failed */
+    error?: string | null;
+}
+export type ProvisionBucketPayloadSelect = {
+    success?: boolean;
+    bucketName?: boolean;
+    accessType?: boolean;
+    provider?: boolean;
+    endpoint?: boolean;
+    error?: boolean;
+};
 export interface CreateEmailPayload {
     clientMutationId?: string | null;
     /** The `Email` that was created by this mutation. */

package/auth/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, ConfirmDeleteAccountInput, SetPasswordInput, VerifyEmailInput, ResetPasswordInput, SignInOneTimeTokenInput, SignInInput, SignUpInput, OneTimeTokenInput, ExtendTokenExpiresInput, ForgotPasswordInput, SendVerificationEmailInput, VerifyPasswordInput, VerifyTotpInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, ConfirmDeleteAccountPayload, SetPasswordPayload, VerifyEmailPayload, ResetPasswordPayload, SignInOneTimeTokenPayload, SignInPayload, SignUpPayload, OneTimeTokenPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, SendVerificationEmailPayload, VerifyPasswordPayload, VerifyTotpPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, ConfirmDeleteAccountPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ResetPasswordPayloadSelect, SignInOneTimeTokenPayloadSelect, SignInPayloadSelect, SignUpPayloadSelect, OneTimeTokenPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect } from '../input-types';
+import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, ConfirmDeleteAccountInput, SetPasswordInput, VerifyEmailInput, ResetPasswordInput, SignInOneTimeTokenInput, SignInInput, SignUpInput, OneTimeTokenInput, ExtendTokenExpiresInput, ForgotPasswordInput, SendVerificationEmailInput, VerifyPasswordInput, VerifyTotpInput, RequestUploadUrlInput, ConfirmUploadInput, ProvisionBucketInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, ConfirmDeleteAccountPayload, SetPasswordPayload, VerifyEmailPayload, ResetPasswordPayload, SignInOneTimeTokenPayload, SignInPayload, SignUpPayload, OneTimeTokenPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, SendVerificationEmailPayload, VerifyPasswordPayload, VerifyTotpPayload, RequestUploadUrlPayload, ConfirmUploadPayload, ProvisionBucketPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, ConfirmDeleteAccountPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ResetPasswordPayloadSelect, SignInOneTimeTokenPayloadSelect, SignInPayloadSelect, SignUpPayloadSelect, OneTimeTokenPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect, RequestUploadUrlPayloadSelect, ConfirmUploadPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface SignOutVariables {
     input: SignOutInput;
 }
@@ -55,6 +55,35 @@ export interface VerifyPasswordVariables {
 export interface VerifyTotpVariables {
     input: VerifyTotpInput;
 }
+/**
+ * Variables for requestUploadUrl
+ * Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+ */
+export interface RequestUploadUrlVariables {
+    input: RequestUploadUrlInput;
+}
+/**
+ * Variables for confirmUpload
+ * Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+ */
+export interface ConfirmUploadVariables {
+    input: ConfirmUploadInput;
+}
+/**
+ * Variables for provisionBucket
+ * Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+ */
+export interface ProvisionBucketVariables {
+    input: ProvisionBucketInput;
+}
 export declare function createMutationOperations(client: OrmClient): {
     signOut: <S extends SignOutPayloadSelect>(args: SignOutVariables, options: {
         select: S;
@@ -136,4 +165,19 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, VerifyTotpPayloadSelect>) => QueryBuilder<{
         verifyTotp: InferSelectResult<VerifyTotpPayload, S> | null;
     }>;
+    requestUploadUrl: <S extends RequestUploadUrlPayloadSelect>(args: RequestUploadUrlVariables, options: {
+        select: S;
+    } & StrictSelect<S, RequestUploadUrlPayloadSelect>) => QueryBuilder<{
+        requestUploadUrl: InferSelectResult<RequestUploadUrlPayload, S> | null;
+    }>;
+    confirmUpload: <S extends ConfirmUploadPayloadSelect>(args: ConfirmUploadVariables, options: {
+        select: S;
+    } & StrictSelect<S, ConfirmUploadPayloadSelect>) => QueryBuilder<{
+        confirmUpload: InferSelectResult<ConfirmUploadPayload, S> | null;
+    }>;
+    provisionBucket: <S extends ProvisionBucketPayloadSelect>(args: ProvisionBucketVariables, options: {
+        select: S;
+    } & StrictSelect<S, ProvisionBucketPayloadSelect>) => QueryBuilder<{
+        provisionBucket: InferSelectResult<ProvisionBucketPayload, S> | null;
+    }>;
 };

package/auth/orm/mutation/index.js

@@ -197,5 +197,41 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'VerifyTotpPayload'),
         }),
+        requestUploadUrl: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'RequestUploadUrl',
+            fieldName: 'requestUploadUrl',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'RequestUploadUrl', 'requestUploadUrl', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'RequestUploadUrlInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'RequestUploadUrlPayload'),
+        }),
+        confirmUpload: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ConfirmUpload',
+            fieldName: 'confirmUpload',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ConfirmUpload', 'confirmUpload', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ConfirmUploadInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'ConfirmUploadPayload'),
+        }),
+        provisionBucket: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ProvisionBucket',
+            fieldName: 'provisionBucket',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ProvisionBucket', 'provisionBucket', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ProvisionBucketInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'ProvisionBucketPayload'),
+        }),
     };
 }

package/esm/admin/orm/index.d.ts

@@ -162,5 +162,20 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").SubmitOrgInviteCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
             submitOrgInviteCode: import("./select-types").InferSelectResult<import("./input-types").SubmitOrgInviteCodePayload, S> | null;
         }>;
+        requestUploadUrl: <S extends import("./input-types").RequestUploadUrlPayloadSelect>(args: import("./mutation").RequestUploadUrlVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").RequestUploadUrlPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            requestUploadUrl: import("./select-types").InferSelectResult<import("./input-types").RequestUploadUrlPayload, S> | null;
+        }>;
+        confirmUpload: <S extends import("./input-types").ConfirmUploadPayloadSelect>(args: import("./mutation").ConfirmUploadVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ConfirmUploadPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            confirmUpload: import("./select-types").InferSelectResult<import("./input-types").ConfirmUploadPayload, S> | null;
+        }>;
+        provisionBucket: <S extends import("./input-types").ProvisionBucketPayloadSelect>(args: import("./mutation").ProvisionBucketVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionBucketPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            provisionBucket: import("./select-types").InferSelectResult<import("./input-types").ProvisionBucketPayload, S> | null;
+        }>;
     };
 };

package/esm/admin/orm/input-types.d.ts

@@ -2570,6 +2570,26 @@ export interface SubmitOrgInviteCodeInput {
     clientMutationId?: string;
     token?: string;
 }
+export interface RequestUploadUrlInput {
+    /** Bucket key (e.g., "public", "private") */
+    bucketKey: string;
+    /** SHA-256 content hash computed by the client (hex-encoded, 64 chars) */
+    contentHash: string;
+    /** MIME type of the file (e.g., "image/png") */
+    contentType: string;
+    /** File size in bytes */
+    size: number;
+    /** Original filename (optional, for display and Content-Disposition) */
+    filename?: string;
+}
+export interface ConfirmUploadInput {
+    /** The file ID returned by requestUploadUrl */
+    fileId: string;
+}
+export interface ProvisionBucketInput {
+    /** The logical bucket key (e.g., "public", "private") */
+    bucketKey: string;
+}
 /** A filter to be used against ConstructiveInternalTypeImage fields. All fields are combined with a logical ‘and.’ */
 export interface ConstructiveInternalTypeImageFilter {
     /** Is null (if `true` is specified) or is not null (if `false` is specified). */
@@ -2755,6 +2775,60 @@ export type SubmitOrgInviteCodePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface RequestUploadUrlPayload {
+    /** Presigned PUT URL (null if file was deduplicated) */
+    uploadUrl?: string | null;
+    /** The file ID (existing if deduplicated, new if fresh upload) */
+    fileId: string;
+    /** The S3 object key */
+    key: string;
+    /** Whether this file was deduplicated (already exists with same hash) */
+    deduplicated: boolean;
+    /** Presigned URL expiry time (null if deduplicated) */
+    expiresAt?: string | null;
+}
+export type RequestUploadUrlPayloadSelect = {
+    uploadUrl?: boolean;
+    fileId?: boolean;
+    key?: boolean;
+    deduplicated?: boolean;
+    expiresAt?: boolean;
+};
+export interface ConfirmUploadPayload {
+    /** The confirmed file ID */
+    fileId: string;
+    /** New file status */
+    status: string;
+    /** Whether confirmation succeeded */
+    success: boolean;
+}
+export type ConfirmUploadPayloadSelect = {
+    fileId?: boolean;
+    status?: boolean;
+    success?: boolean;
+};
+export interface ProvisionBucketPayload {
+    /** Whether provisioning succeeded */
+    success: boolean;
+    /** The S3 bucket name that was provisioned */
+    bucketName: string;
+    /** The access type applied */
+    accessType: string;
+    /** The storage provider used */
+    provider: string;
+    /** The S3 endpoint (null for AWS S3 default) */
+    endpoint?: string | null;
+    /** Error message if provisioning failed */
+    error?: string | null;
+}
+export type ProvisionBucketPayloadSelect = {
+    success?: boolean;
+    bucketName?: boolean;
+    accessType?: boolean;
+    provider?: boolean;
+    endpoint?: boolean;
+    error?: boolean;
+};
 export interface CreateAppPermissionPayload {
     clientMutationId?: string | null;
     /** The `AppPermission` that was created by this mutation. */

package/esm/admin/orm/mutation/index.d.ts

@@ -6,13 +6,42 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { SubmitInviteCodeInput, SubmitOrgInviteCodeInput, SubmitInviteCodePayload, SubmitOrgInviteCodePayload, SubmitInviteCodePayloadSelect, SubmitOrgInviteCodePayloadSelect } from '../input-types';
+import type { SubmitInviteCodeInput, SubmitOrgInviteCodeInput, RequestUploadUrlInput, ConfirmUploadInput, ProvisionBucketInput, SubmitInviteCodePayload, SubmitOrgInviteCodePayload, RequestUploadUrlPayload, ConfirmUploadPayload, ProvisionBucketPayload, SubmitInviteCodePayloadSelect, SubmitOrgInviteCodePayloadSelect, RequestUploadUrlPayloadSelect, ConfirmUploadPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface SubmitInviteCodeVariables {
     input: SubmitInviteCodeInput;
 }
 export interface SubmitOrgInviteCodeVariables {
     input: SubmitOrgInviteCodeInput;
 }
+/**
+ * Variables for requestUploadUrl
+ * Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+ */
+export interface RequestUploadUrlVariables {
+    input: RequestUploadUrlInput;
+}
+/**
+ * Variables for confirmUpload
+ * Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+ */
+export interface ConfirmUploadVariables {
+    input: ConfirmUploadInput;
+}
+/**
+ * Variables for provisionBucket
+ * Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+ */
+export interface ProvisionBucketVariables {
+    input: ProvisionBucketInput;
+}
 export declare function createMutationOperations(client: OrmClient): {
     submitInviteCode: <S extends SubmitInviteCodePayloadSelect>(args: SubmitInviteCodeVariables, options: {
         select: S;
@@ -24,4 +53,19 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SubmitOrgInviteCodePayloadSelect>) => QueryBuilder<{
         submitOrgInviteCode: InferSelectResult<SubmitOrgInviteCodePayload, S> | null;
     }>;
+    requestUploadUrl: <S extends RequestUploadUrlPayloadSelect>(args: RequestUploadUrlVariables, options: {
+        select: S;
+    } & StrictSelect<S, RequestUploadUrlPayloadSelect>) => QueryBuilder<{
+        requestUploadUrl: InferSelectResult<RequestUploadUrlPayload, S> | null;
+    }>;
+    confirmUpload: <S extends ConfirmUploadPayloadSelect>(args: ConfirmUploadVariables, options: {
+        select: S;
+    } & StrictSelect<S, ConfirmUploadPayloadSelect>) => QueryBuilder<{
+        confirmUpload: InferSelectResult<ConfirmUploadPayload, S> | null;
+    }>;
+    provisionBucket: <S extends ProvisionBucketPayloadSelect>(args: ProvisionBucketVariables, options: {
+        select: S;
+    } & StrictSelect<S, ProvisionBucketPayloadSelect>) => QueryBuilder<{
+        provisionBucket: InferSelectResult<ProvisionBucketPayload, S> | null;
+    }>;
 };

package/esm/admin/orm/mutation/index.js

@@ -26,5 +26,41 @@ export function createMutationOperations(client) {
                 },
             ], connectionFieldsMap, 'SubmitOrgInviteCodePayload'),
         }),
+        requestUploadUrl: (args, options) => new QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'RequestUploadUrl',
+            fieldName: 'requestUploadUrl',
+            ...buildCustomDocument('mutation', 'RequestUploadUrl', 'requestUploadUrl', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'RequestUploadUrlInput!',
+                },
+            ], connectionFieldsMap, 'RequestUploadUrlPayload'),
+        }),
+        confirmUpload: (args, options) => new QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ConfirmUpload',
+            fieldName: 'confirmUpload',
+            ...buildCustomDocument('mutation', 'ConfirmUpload', 'confirmUpload', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ConfirmUploadInput!',
+                },
+            ], connectionFieldsMap, 'ConfirmUploadPayload'),
+        }),
+        provisionBucket: (args, options) => new QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'ProvisionBucket',
+            fieldName: 'provisionBucket',
+            ...buildCustomDocument('mutation', 'ProvisionBucket', 'provisionBucket', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'ProvisionBucketInput!',
+                },
+            ], connectionFieldsMap, 'ProvisionBucketPayload'),
+        }),
     };
 }