@constructive-io/sdk 0.30.0 → 0.30.2

package/api/orm/models/index.d.ts

@@ -47,5 +47,5 @@ export { DatabaseModel } from './database';
 export { RlsSettingModel } from './rlsSetting';
 export { SqlActionModel } from './sqlAction';
 export { DatabaseSettingModel } from './databaseSetting';
-export { WebauthnSettingModel } from './webauthnSetting';
 export { AstMigrationModel } from './astMigration';
+export { WebauthnSettingModel } from './webauthnSetting';

package/api/orm/models/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AstMigrationModel = exports.WebauthnSettingModel = exports.DatabaseSettingModel = exports.SqlActionModel = exports.RlsSettingModel = exports.DatabaseModel = exports.PubkeySettingModel = exports.NodeTypeRegistryModel = exports.MigrateFileModel = exports.ApiSettingModel = exports.AppModel = exports.SiteModel = exports.ApiModel = exports.DatabaseTransferModel = exports.PartitionModel = exports.TriggerFunctionModel = exports.CorsSettingModel = exports.SiteThemeModel = exports.SiteModuleModel = exports.SiteMetadatumModel = exports.DomainModel = exports.ApiModuleModel = exports.ApiSchemaModel = exports.CompositeTypeModel = exports.EnumModel = exports.DefaultPrivilegeModel = exports.SchemaGrantModel = exports.EmbeddingChunkModel = exports.ViewRuleModel = exports.ViewGrantModel = exports.ViewTableModel = exports.ViewModel = exports.UniqueConstraintModel = exports.TriggerModel = exports.TableGrantModel = exports.PrimaryKeyConstraintModel = exports.PolicyModel = exports.IndexModel = exports.FullTextSearchModel = exports.ForeignKeyConstraintModel = exports.SpatialRelationModel = exports.FieldModel = exports.CheckConstraintModel = exports.TableModel = exports.SchemaModel = exports.FunctionModel = void 0;
+exports.WebauthnSettingModel = exports.AstMigrationModel = exports.DatabaseSettingModel = exports.SqlActionModel = exports.RlsSettingModel = exports.DatabaseModel = exports.PubkeySettingModel = exports.NodeTypeRegistryModel = exports.MigrateFileModel = exports.ApiSettingModel = exports.AppModel = exports.SiteModel = exports.ApiModel = exports.DatabaseTransferModel = exports.PartitionModel = exports.TriggerFunctionModel = exports.CorsSettingModel = exports.SiteThemeModel = exports.SiteModuleModel = exports.SiteMetadatumModel = exports.DomainModel = exports.ApiModuleModel = exports.ApiSchemaModel = exports.CompositeTypeModel = exports.EnumModel = exports.DefaultPrivilegeModel = exports.SchemaGrantModel = exports.EmbeddingChunkModel = exports.ViewRuleModel = exports.ViewGrantModel = exports.ViewTableModel = exports.ViewModel = exports.UniqueConstraintModel = exports.TriggerModel = exports.TableGrantModel = exports.PrimaryKeyConstraintModel = exports.PolicyModel = exports.IndexModel = exports.FullTextSearchModel = exports.ForeignKeyConstraintModel = exports.SpatialRelationModel = exports.FieldModel = exports.CheckConstraintModel = exports.TableModel = exports.SchemaModel = exports.FunctionModel = void 0;
 /**
  * Models barrel export
  * @generated by @constructive-io/graphql-codegen
@@ -94,7 +94,7 @@ var sqlAction_1 = require("./sqlAction");
 Object.defineProperty(exports, "SqlActionModel", { enumerable: true, get: function () { return sqlAction_1.SqlActionModel; } });
 var databaseSetting_1 = require("./databaseSetting");
 Object.defineProperty(exports, "DatabaseSettingModel", { enumerable: true, get: function () { return databaseSetting_1.DatabaseSettingModel; } });
-var webauthnSetting_1 = require("./webauthnSetting");
-Object.defineProperty(exports, "WebauthnSettingModel", { enumerable: true, get: function () { return webauthnSetting_1.WebauthnSettingModel; } });
 var astMigration_1 = require("./astMigration");
 Object.defineProperty(exports, "AstMigrationModel", { enumerable: true, get: function () { return astMigration_1.AstMigrationModel; } });
+var webauthnSetting_1 = require("./webauthnSetting");
+Object.defineProperty(exports, "WebauthnSettingModel", { enumerable: true, get: function () { return webauthnSetting_1.WebauthnSettingModel; } });

package/api/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { AcceptDatabaseTransferInput, CancelDatabaseTransferInput, RejectDatabaseTransferInput, ProvisionDatabaseWithUserInput, BootstrapUserInput, SetFieldOrderInput, ApplyRlsInput, CreateUserDatabaseInput, ProvisionBucketInput, AcceptDatabaseTransferPayload, CancelDatabaseTransferPayload, RejectDatabaseTransferPayload, ProvisionDatabaseWithUserPayload, BootstrapUserPayload, SetFieldOrderPayload, ApplyRlsPayload, CreateUserDatabasePayload, ProvisionBucketPayload, AcceptDatabaseTransferPayloadSelect, CancelDatabaseTransferPayloadSelect, RejectDatabaseTransferPayloadSelect, ProvisionDatabaseWithUserPayloadSelect, BootstrapUserPayloadSelect, SetFieldOrderPayloadSelect, ApplyRlsPayloadSelect, CreateUserDatabasePayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
+import type { AcceptDatabaseTransferInput, CancelDatabaseTransferInput, RejectDatabaseTransferInput, SetFieldOrderInput, ApplyRlsInput, RequestDatabaseInput, ProvisionBucketInput, AcceptDatabaseTransferPayload, CancelDatabaseTransferPayload, RejectDatabaseTransferPayload, SetFieldOrderPayload, ApplyRlsPayload, RequestDatabasePayload, ProvisionBucketPayload, AcceptDatabaseTransferPayloadSelect, CancelDatabaseTransferPayloadSelect, RejectDatabaseTransferPayloadSelect, SetFieldOrderPayloadSelect, ApplyRlsPayloadSelect, RequestDatabasePayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface AcceptDatabaseTransferVariables {
     input: AcceptDatabaseTransferInput;
 }
@@ -16,12 +16,6 @@ export interface CancelDatabaseTransferVariables {
 export interface RejectDatabaseTransferVariables {
     input: RejectDatabaseTransferInput;
 }
-export interface ProvisionDatabaseWithUserVariables {
-    input: ProvisionDatabaseWithUserInput;
-}
-export interface BootstrapUserVariables {
-    input: BootstrapUserInput;
-}
 export interface SetFieldOrderVariables {
     input: SetFieldOrderInput;
 }
@@ -29,26 +23,17 @@ export interface ApplyRlsVariables {
     input: ApplyRlsInput;
 }
 /**
- * Variables for createUserDatabase
- * Creates a new user database with all required modules, permissions, and RLS policies.
+ * Variables for requestDatabase
+ * Requests a database and returns a ticket (database_provision_module row) to poll.
 
-Parameters:
-  - database_name: Name for the new database (required)
-  - owner_id: UUID of the owner user (required)
-  - include_invites: Include invite system (default: true)
-  - include_groups: Include group-level memberships (default: false)
-  - include_levels: Include events/analytics (default: false)
-  - bitlen: Bit length for permission masks (default: 64)
-  - tokens_expiration: Token expiration interval (default: 30 days)
-
-Returns the database_id UUID of the newly created database.
+Pass exactly one of preset_slug or modules. The pool, presets, and owner bootstrap are private implementation details: a warm pool hit fulfills the ticket immediately (fulfilled_at set, deferred owner bootstrap), otherwise the database is cold-provisioned with exactly the requested modules. Poll the ticket until status = 'completed'; it then carries database_id and fulfilled_at.
 
 Example usage:
-  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);
-  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups
+  SELECT * FROM metaschema_public.request_database('my_app', 'example.com', preset_slug := 'full');
+  SELECT * FROM metaschema_public.request_database('my_app', 'example.com', modules := '["users_module", "emails_module"]'::jsonb);
  */
-export interface CreateUserDatabaseVariables {
-    input: CreateUserDatabaseInput;
+export interface RequestDatabaseVariables {
+    input: RequestDatabaseInput;
 }
 /**
  * Variables for provisionBucket
@@ -76,16 +61,6 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, RejectDatabaseTransferPayloadSelect>) => QueryBuilder<{
         rejectDatabaseTransfer: InferSelectResult<RejectDatabaseTransferPayload, S> | null;
     }>;
-    provisionDatabaseWithUser: <S extends ProvisionDatabaseWithUserPayloadSelect>(args: ProvisionDatabaseWithUserVariables, options: {
-        select: S;
-    } & StrictSelect<S, ProvisionDatabaseWithUserPayloadSelect>) => QueryBuilder<{
-        provisionDatabaseWithUser: InferSelectResult<ProvisionDatabaseWithUserPayload, S> | null;
-    }>;
-    bootstrapUser: <S extends BootstrapUserPayloadSelect>(args: BootstrapUserVariables, options: {
-        select: S;
-    } & StrictSelect<S, BootstrapUserPayloadSelect>) => QueryBuilder<{
-        bootstrapUser: InferSelectResult<BootstrapUserPayload, S> | null;
-    }>;
     setFieldOrder: <S extends SetFieldOrderPayloadSelect>(args: SetFieldOrderVariables, options: {
         select: S;
     } & StrictSelect<S, SetFieldOrderPayloadSelect>) => QueryBuilder<{
@@ -96,10 +71,10 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, ApplyRlsPayloadSelect>) => QueryBuilder<{
         applyRls: InferSelectResult<ApplyRlsPayload, S> | null;
     }>;
-    createUserDatabase: <S extends CreateUserDatabasePayloadSelect>(args: CreateUserDatabaseVariables, options: {
+    requestDatabase: <S extends RequestDatabasePayloadSelect>(args: RequestDatabaseVariables, options: {
         select: S;
-    } & StrictSelect<S, CreateUserDatabasePayloadSelect>) => QueryBuilder<{
-        createUserDatabase: InferSelectResult<CreateUserDatabasePayload, S> | null;
+    } & StrictSelect<S, RequestDatabasePayloadSelect>) => QueryBuilder<{
+        requestDatabase: InferSelectResult<RequestDatabasePayload, S> | null;
     }>;
     provisionBucket: <S extends ProvisionBucketPayloadSelect>(args: ProvisionBucketVariables, options: {
         select: S;

package/api/orm/mutation/index.js

@@ -41,30 +41,6 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'RejectDatabaseTransferPayload'),
         }),
-        provisionDatabaseWithUser: (args, options) => new query_builder_1.QueryBuilder({
-            client,
-            operation: 'mutation',
-            operationName: 'ProvisionDatabaseWithUser',
-            fieldName: 'provisionDatabaseWithUser',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ProvisionDatabaseWithUser', 'provisionDatabaseWithUser', options.select, args, [
-                {
-                    name: 'input',
-                    type: 'ProvisionDatabaseWithUserInput!',
-                },
-            ], input_types_1.connectionFieldsMap, 'ProvisionDatabaseWithUserPayload'),
-        }),
-        bootstrapUser: (args, options) => new query_builder_1.QueryBuilder({
-            client,
-            operation: 'mutation',
-            operationName: 'BootstrapUser',
-            fieldName: 'bootstrapUser',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'BootstrapUser', 'bootstrapUser', options.select, args, [
-                {
-                    name: 'input',
-                    type: 'BootstrapUserInput!',
-                },
-            ], input_types_1.connectionFieldsMap, 'BootstrapUserPayload'),
-        }),
         setFieldOrder: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -89,17 +65,17 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'ApplyRlsPayload'),
         }),
-        createUserDatabase: (args, options) => new query_builder_1.QueryBuilder({
+        requestDatabase: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
-            operationName: 'CreateUserDatabase',
-            fieldName: 'createUserDatabase',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'CreateUserDatabase', 'createUserDatabase', options.select, args, [
+            operationName: 'RequestDatabase',
+            fieldName: 'requestDatabase',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'RequestDatabase', 'requestDatabase', options.select, args, [
                 {
                     name: 'input',
-                    type: 'CreateUserDatabaseInput!',
+                    type: 'RequestDatabaseInput!',
                 },
-            ], input_types_1.connectionFieldsMap, 'CreateUserDatabasePayload'),
+            ], input_types_1.connectionFieldsMap, 'RequestDatabasePayload'),
         }),
         provisionBucket: (args, options) => new query_builder_1.QueryBuilder({
             client,

package/auth/orm/index.d.ts

@@ -104,6 +104,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").DeleteOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
             deleteOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").DeleteOrgPrincipalPayload, S> | null;
         }>;
+        deletePrincipal: <S extends import("./input-types").DeletePrincipalPayloadSelect>(args: import("./mutation").DeletePrincipalVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").DeletePrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            deletePrincipal: import("./select-types").InferSelectResult<import("./input-types").DeletePrincipalPayload, S> | null;
+        }>;
         disconnectAccount: <S extends import("./input-types").DisconnectAccountPayloadSelect>(args: import("./mutation").DisconnectAccountVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").DisconnectAccountPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -159,6 +164,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").ResetPasswordPayloadSelect>) => import("./query-builder").QueryBuilder<{
             resetPassword: import("./select-types").InferSelectResult<import("./input-types").ResetPasswordPayload, S> | null;
         }>;
+        createOrgPrincipal: <S extends import("./input-types").CreateOrgPrincipalPayloadSelect>(args: import("./mutation").CreateOrgPrincipalVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").CreateOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
+            createOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").CreateOrgPrincipalPayload, S> | null;
+        }>;
         signInCrossOrigin: <S extends import("./input-types").SignInCrossOriginPayloadSelect>(args: import("./mutation").SignInCrossOriginVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").SignInCrossOriginPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -189,11 +199,6 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").LinkIdentityPayloadSelect>) => import("./query-builder").QueryBuilder<{
             linkIdentity: import("./select-types").InferSelectResult<import("./input-types").LinkIdentityPayload, S> | null;
         }>;
-        createOrgPrincipal: <S extends import("./input-types").CreateOrgPrincipalPayloadSelect>(args: import("./mutation").CreateOrgPrincipalVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").CreateOrgPrincipalPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            createOrgPrincipal: import("./select-types").InferSelectResult<import("./input-types").CreateOrgPrincipalPayload, S> | null;
-        }>;
         extendTokenExpires: <S extends import("./input-types").ExtendTokenExpiresPayloadSelect>(args: import("./mutation").ExtendTokenExpiresVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").ExtendTokenExpiresPayloadSelect>) => import("./query-builder").QueryBuilder<{

package/auth/orm/input-types.d.ts

@@ -244,8 +244,8 @@ export interface Principal {
     userId?: string | null;
     /** Human-readable label for this principal (e.g., billing-bot, ci-deploy-key) */
     name?: string | null;
-    /** Permission bitmask subset; all-1s means inherit all parent permissions */
-    allowedMask?: string | null;
+    /** Whether this principal inherits admin/owner privileges from the owner */
+    useAdminOwner?: boolean | null;
     /** Whether this principal is restricted to read-only operations */
     isReadOnly?: boolean | null;
     /** Whether this principal bypasses MFA step-up requirements */
@@ -272,10 +272,12 @@ export interface PrincipalScopeOverride {
     principalId?: string | null;
     /** The scope level (membership_type) this override restricts */
     membershipType?: number | null;
-    /** Permission bitmask for this scope; AND-masked with parent permissions during cascade */
+    /** Optional permission mask; AND-masked with parent permissions during cascade. NULL means no extra mask. */
     allowedMask?: string | null;
-    /** Whether this principal has admin access at this scope (default true = inherit from parent) */
-    isAdmin?: boolean | null;
+    /** Whether this principal inherits admin/owner at this scope (default true = inherit from parent) */
+    useAdminOwner?: boolean | null;
+    /** Whether this scope is active for this principal; false disables all access at this scope */
+    isActive?: boolean | null;
     /** Whether this principal is restricted to read-only at this scope */
     isReadOnly?: boolean | null;
 }
@@ -501,7 +503,7 @@ export type PrincipalSelect = {
     ownerId?: boolean;
     userId?: boolean;
     name?: boolean;
-    allowedMask?: boolean;
+    useAdminOwner?: boolean;
     isReadOnly?: boolean;
     bypassStepUp?: boolean;
     owner?: {
@@ -547,7 +549,8 @@ export type PrincipalScopeOverrideSelect = {
     principalId?: boolean;
     membershipType?: boolean;
     allowedMask?: boolean;
-    isAdmin?: boolean;
+    useAdminOwner?: boolean;
+    isActive?: boolean;
     isReadOnly?: boolean;
     principal?: {
         select: PrincipalSelect;
@@ -737,8 +740,8 @@ export interface PrincipalFilter {
     userId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
-    /** Filter by the object’s `allowedMask` field. */
-    allowedMask?: BitStringFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Filter by the object’s `bypassStepUp` field. */
@@ -801,8 +804,10 @@ export interface PrincipalScopeOverrideFilter {
     membershipType?: IntFilter;
     /** Filter by the object’s `allowedMask` field. */
     allowedMask?: BitStringFilter;
-    /** Filter by the object’s `isAdmin` field. */
-    isAdmin?: BooleanFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
+    /** Filter by the object’s `isActive` field. */
+    isActive?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Checks for all expressions in this list. */
@@ -1116,9 +1121,9 @@ export interface UserFilter {
      */
     unifiedSearch?: string;
 }
-export type PrincipalOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC';
+export type PrincipalOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC';
 export type PrincipalEntityOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC';
-export type PrincipalScopeOverrideOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'IS_ADMIN_ASC' | 'IS_ADMIN_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC';
+export type PrincipalScopeOverrideOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC' | 'IS_ACTIVE_ASC' | 'IS_ACTIVE_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC';
 export type EmailOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'EMAIL_ASC' | 'EMAIL_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 export type PhoneNumberOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CC_ASC' | 'CC_DESC' | 'NUMBER_ASC' | 'NUMBER_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 export type CryptoAddressOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'ADDRESS_ASC' | 'ADDRESS_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
@@ -1135,7 +1140,7 @@ export interface CreatePrincipalInput {
         ownerId: string;
         userId: string;
         name?: string;
-        allowedMask?: string;
+        useAdminOwner?: boolean;
         isReadOnly?: boolean;
         bypassStepUp?: boolean;
     };
@@ -1144,7 +1149,7 @@ export interface PrincipalPatch {
     ownerId?: string | null;
     userId?: string | null;
     name?: string | null;
-    allowedMask?: string | null;
+    useAdminOwner?: boolean | null;
     isReadOnly?: boolean | null;
     bypassStepUp?: boolean | null;
 }
@@ -1185,7 +1190,8 @@ export interface CreatePrincipalScopeOverrideInput {
         principalId: string;
         membershipType?: number;
         allowedMask?: string;
-        isAdmin?: boolean;
+        useAdminOwner?: boolean;
+        isActive?: boolean;
         isReadOnly?: boolean;
     };
 }
@@ -1193,7 +1199,8 @@ export interface PrincipalScopeOverridePatch {
     principalId?: string | null;
     membershipType?: number | null;
     allowedMask?: string | null;
-    isAdmin?: boolean | null;
+    useAdminOwner?: boolean | null;
+    isActive?: boolean | null;
     isReadOnly?: boolean | null;
 }
 export interface UpdatePrincipalScopeOverrideInput {
@@ -1546,6 +1553,14 @@ export interface ResetPasswordInput {
     resetToken?: string;
     newPassword?: string;
 }
+export interface CreateOrgPrincipalInput {
+    clientMutationId?: string;
+    name?: string;
+    orgId?: string;
+    useAdminOwner?: boolean;
+    isReadOnly?: boolean;
+    bypassStepUp?: boolean;
+}
 export interface SignInCrossOriginInput {
     clientMutationId?: string;
     token?: string;
@@ -1591,14 +1606,6 @@ export interface LinkIdentityInput {
     identifier: string;
     details?: Record<string, unknown>;
 }
-export interface CreateOrgPrincipalInput {
-    clientMutationId?: string;
-    name?: string;
-    orgId?: string;
-    allowedMask?: string;
-    isReadOnly?: boolean;
-    bypassStepUp?: boolean;
-}
 export interface ExtendTokenExpiresInput {
     clientMutationId?: string;
     amount?: IntervalInput;
@@ -2232,8 +2239,10 @@ export interface PrincipalScopeOverrideFilter {
     membershipType?: IntFilter;
     /** Filter by the object’s `allowedMask` field. */
     allowedMask?: BitStringFilter;
-    /** Filter by the object’s `isAdmin` field. */
-    isAdmin?: BooleanFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
+    /** Filter by the object’s `isActive` field. */
+    isActive?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Checks for all expressions in this list. */
@@ -2259,8 +2268,8 @@ export interface PrincipalFilter {
     userId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
-    /** Filter by the object’s `allowedMask` field. */
-    allowedMask?: BitStringFilter;
+    /** Filter by the object’s `useAdminOwner` field. */
+    useAdminOwner?: BooleanFilter;
     /** Filter by the object’s `isReadOnly` field. */
     isReadOnly?: BooleanFilter;
     /** Filter by the object’s `bypassStepUp` field. */
@@ -2867,6 +2876,14 @@ export type DeleteOrgPrincipalPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface DeletePrincipalPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type DeletePrincipalPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface DisconnectAccountPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -2955,6 +2972,14 @@ export type ResetPasswordPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface CreateOrgPrincipalPayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
+export type CreateOrgPrincipalPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface SignInCrossOriginPayload {
     clientMutationId?: string | null;
     result?: SignInCrossOriginRecord | null;
@@ -3013,14 +3038,6 @@ export type LinkIdentityPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface CreateOrgPrincipalPayload {
-    clientMutationId?: string | null;
-    result?: string | null;
-}
-export type CreateOrgPrincipalPayloadSelect = {
-    clientMutationId?: boolean;
-    result?: boolean;
-};
 export interface ExtendTokenExpiresPayload {
     clientMutationId?: string | null;
     result?: ExtendTokenExpiresRecord[] | null;
@@ -3103,14 +3120,6 @@ export type CreatePrincipalPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface DeletePrincipalPayload {
-    clientMutationId?: string | null;
-    result?: boolean | null;
-}
-export type DeletePrincipalPayloadSelect = {
-    clientMutationId?: boolean;
-    result?: boolean;
-};
 export interface CreatePrincipalEntityPayload {
     clientMutationId?: string | null;
     /** The `PrincipalEntity` that was created by this mutation. */

package/auth/orm/models/principal.d.ts

@@ -5,7 +5,7 @@
  */
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
-import type { ConnectionResult, FindManyArgs, FindFirstArgs, CreateArgs, DeleteArgs, InferSelectResult, StrictSelect } from '../select-types';
+import type { ConnectionResult, FindManyArgs, FindFirstArgs, CreateArgs, InferSelectResult, StrictSelect } from '../select-types';
 import type { PrincipalWithRelations, PrincipalSelect, PrincipalFilter, PrincipalOrderBy, CreatePrincipalInput } from '../input-types';
 export declare class PrincipalModel {
     private client;
@@ -33,13 +33,4 @@ export declare class PrincipalModel {
             principal: InferSelectResult<PrincipalWithRelations, S>;
         };
     }>;
-    delete<S extends PrincipalSelect>(args: DeleteArgs<{
-        principalId: string;
-    }, S> & {
-        select: S;
-    } & StrictSelect<S, PrincipalSelect>): QueryBuilder<{
-        deletePrincipal: {
-            principal: InferSelectResult<PrincipalWithRelations, S>;
-        };
-    }>;
 }

package/auth/orm/models/principal.js

@@ -76,18 +76,5 @@ class PrincipalModel {
             variables,
         });
     }
-    delete(args) {
-        const { document, variables } = (0, query_builder_1.buildDeleteByPkDocument)('Principal', 'deletePrincipal', 'principal', {
-            principalId: args.where.principalId,
-        }, 'DeletePrincipalInput', args.select, input_types_1.connectionFieldsMap);
-        return new query_builder_1.QueryBuilder({
-            client: this.client,
-            operation: 'mutation',
-            operationName: 'Principal',
-            fieldName: 'deletePrincipal',
-            document,
-            variables,
-        });
-    }
 }
 exports.PrincipalModel = PrincipalModel;

package/auth/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, DeleteOrgPrincipalInput, DisconnectAccountInput, RevokeApiKeyInput, RevokeSessionInput, VerifyPasswordInput, VerifyTotpInput, ConfirmDeleteAccountInput, RevokeOrgApiKeyInput, SetPasswordInput, VerifyEmailInput, ProvisionNewUserInput, ResetPasswordInput, SignInCrossOriginInput, SignInSmsOtpInput, SignUpSmsInput, SignUpInput, SignInInput, LinkIdentityInput, CreateOrgPrincipalInput, ExtendTokenExpiresInput, CreateOrgApiKeyInput, CreateApiKeyInput, RequestCrossOriginTokenInput, ForgotPasswordInput, SendVerificationEmailInput, ProvisionBucketInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, DeleteOrgPrincipalPayload, DisconnectAccountPayload, RevokeApiKeyPayload, RevokeSessionPayload, VerifyPasswordPayload, VerifyTotpPayload, ConfirmDeleteAccountPayload, RevokeOrgApiKeyPayload, SetPasswordPayload, VerifyEmailPayload, ProvisionNewUserPayload, ResetPasswordPayload, SignInCrossOriginPayload, SignInSmsOtpPayload, SignUpSmsPayload, SignUpPayload, SignInPayload, LinkIdentityPayload, CreateOrgPrincipalPayload, ExtendTokenExpiresPayload, CreateOrgApiKeyPayload, CreateApiKeyPayload, RequestCrossOriginTokenPayload, ForgotPasswordPayload, SendVerificationEmailPayload, ProvisionBucketPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, DeleteOrgPrincipalPayloadSelect, DisconnectAccountPayloadSelect, RevokeApiKeyPayloadSelect, RevokeSessionPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect, ConfirmDeleteAccountPayloadSelect, RevokeOrgApiKeyPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ProvisionNewUserPayloadSelect, ResetPasswordPayloadSelect, SignInCrossOriginPayloadSelect, SignInSmsOtpPayloadSelect, SignUpSmsPayloadSelect, SignUpPayloadSelect, SignInPayloadSelect, LinkIdentityPayloadSelect, CreateOrgPrincipalPayloadSelect, ExtendTokenExpiresPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateApiKeyPayloadSelect, RequestCrossOriginTokenPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
+import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, DeleteOrgPrincipalInput, DeletePrincipalInput, DisconnectAccountInput, RevokeApiKeyInput, RevokeSessionInput, VerifyPasswordInput, VerifyTotpInput, ConfirmDeleteAccountInput, RevokeOrgApiKeyInput, SetPasswordInput, VerifyEmailInput, ProvisionNewUserInput, ResetPasswordInput, CreateOrgPrincipalInput, SignInCrossOriginInput, SignInSmsOtpInput, SignUpSmsInput, SignUpInput, SignInInput, LinkIdentityInput, ExtendTokenExpiresInput, CreateOrgApiKeyInput, CreateApiKeyInput, RequestCrossOriginTokenInput, ForgotPasswordInput, SendVerificationEmailInput, ProvisionBucketInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, DeleteOrgPrincipalPayload, DeletePrincipalPayload, DisconnectAccountPayload, RevokeApiKeyPayload, RevokeSessionPayload, VerifyPasswordPayload, VerifyTotpPayload, ConfirmDeleteAccountPayload, RevokeOrgApiKeyPayload, SetPasswordPayload, VerifyEmailPayload, ProvisionNewUserPayload, ResetPasswordPayload, CreateOrgPrincipalPayload, SignInCrossOriginPayload, SignInSmsOtpPayload, SignUpSmsPayload, SignUpPayload, SignInPayload, LinkIdentityPayload, ExtendTokenExpiresPayload, CreateOrgApiKeyPayload, CreateApiKeyPayload, RequestCrossOriginTokenPayload, ForgotPasswordPayload, SendVerificationEmailPayload, ProvisionBucketPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, DeleteOrgPrincipalPayloadSelect, DeletePrincipalPayloadSelect, DisconnectAccountPayloadSelect, RevokeApiKeyPayloadSelect, RevokeSessionPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect, ConfirmDeleteAccountPayloadSelect, RevokeOrgApiKeyPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ProvisionNewUserPayloadSelect, ResetPasswordPayloadSelect, CreateOrgPrincipalPayloadSelect, SignInCrossOriginPayloadSelect, SignInSmsOtpPayloadSelect, SignUpSmsPayloadSelect, SignUpPayloadSelect, SignInPayloadSelect, LinkIdentityPayloadSelect, ExtendTokenExpiresPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateApiKeyPayloadSelect, RequestCrossOriginTokenPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface SignOutVariables {
     input: SignOutInput;
 }
@@ -19,6 +19,9 @@ export interface CheckPasswordVariables {
 export interface DeleteOrgPrincipalVariables {
     input: DeleteOrgPrincipalInput;
 }
+export interface DeletePrincipalVariables {
+    input: DeletePrincipalInput;
+}
 export interface DisconnectAccountVariables {
     input: DisconnectAccountInput;
 }
@@ -52,6 +55,9 @@ export interface ProvisionNewUserVariables {
 export interface ResetPasswordVariables {
     input: ResetPasswordInput;
 }
+export interface CreateOrgPrincipalVariables {
+    input: CreateOrgPrincipalInput;
+}
 export interface SignInCrossOriginVariables {
     input: SignInCrossOriginInput;
 }
@@ -70,9 +76,6 @@ export interface SignInVariables {
 export interface LinkIdentityVariables {
     input: LinkIdentityInput;
 }
-export interface CreateOrgPrincipalVariables {
-    input: CreateOrgPrincipalInput;
-}
 export interface ExtendTokenExpiresVariables {
     input: ExtendTokenExpiresInput;
 }
@@ -122,6 +125,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, DeleteOrgPrincipalPayloadSelect>) => QueryBuilder<{
         deleteOrgPrincipal: InferSelectResult<DeleteOrgPrincipalPayload, S> | null;
     }>;
+    deletePrincipal: <S extends DeletePrincipalPayloadSelect>(args: DeletePrincipalVariables, options: {
+        select: S;
+    } & StrictSelect<S, DeletePrincipalPayloadSelect>) => QueryBuilder<{
+        deletePrincipal: InferSelectResult<DeletePrincipalPayload, S> | null;
+    }>;
     disconnectAccount: <S extends DisconnectAccountPayloadSelect>(args: DisconnectAccountVariables, options: {
         select: S;
     } & StrictSelect<S, DisconnectAccountPayloadSelect>) => QueryBuilder<{
@@ -177,6 +185,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, ResetPasswordPayloadSelect>) => QueryBuilder<{
         resetPassword: InferSelectResult<ResetPasswordPayload, S> | null;
     }>;
+    createOrgPrincipal: <S extends CreateOrgPrincipalPayloadSelect>(args: CreateOrgPrincipalVariables, options: {
+        select: S;
+    } & StrictSelect<S, CreateOrgPrincipalPayloadSelect>) => QueryBuilder<{
+        createOrgPrincipal: InferSelectResult<CreateOrgPrincipalPayload, S> | null;
+    }>;
     signInCrossOrigin: <S extends SignInCrossOriginPayloadSelect>(args: SignInCrossOriginVariables, options: {
         select: S;
     } & StrictSelect<S, SignInCrossOriginPayloadSelect>) => QueryBuilder<{
@@ -207,11 +220,6 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, LinkIdentityPayloadSelect>) => QueryBuilder<{
         linkIdentity: InferSelectResult<LinkIdentityPayload, S> | null;
     }>;
-    createOrgPrincipal: <S extends CreateOrgPrincipalPayloadSelect>(args: CreateOrgPrincipalVariables, options: {
-        select: S;
-    } & StrictSelect<S, CreateOrgPrincipalPayloadSelect>) => QueryBuilder<{
-        createOrgPrincipal: InferSelectResult<CreateOrgPrincipalPayload, S> | null;
-    }>;
     extendTokenExpires: <S extends ExtendTokenExpiresPayloadSelect>(args: ExtendTokenExpiresVariables, options: {
         select: S;
     } & StrictSelect<S, ExtendTokenExpiresPayloadSelect>) => QueryBuilder<{

package/auth/orm/mutation/index.js

@@ -53,6 +53,18 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'DeleteOrgPrincipalPayload'),
         }),
+        deletePrincipal: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'DeletePrincipal',
+            fieldName: 'deletePrincipal',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'DeletePrincipal', 'deletePrincipal', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'DeletePrincipalInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'DeletePrincipalPayload'),
+        }),
         disconnectAccount: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -185,6 +197,18 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'ResetPasswordPayload'),
         }),
+        createOrgPrincipal: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'CreateOrgPrincipal',
+            fieldName: 'createOrgPrincipal',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'CreateOrgPrincipal', 'createOrgPrincipal', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'CreateOrgPrincipalInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'CreateOrgPrincipalPayload'),
+        }),
         signInCrossOrigin: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -257,18 +281,6 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'LinkIdentityPayload'),
         }),
-        createOrgPrincipal: (args, options) => new query_builder_1.QueryBuilder({
-            client,
-            operation: 'mutation',
-            operationName: 'CreateOrgPrincipal',
-            fieldName: 'createOrgPrincipal',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'CreateOrgPrincipal', 'createOrgPrincipal', options.select, args, [
-                {
-                    name: 'input',
-                    type: 'CreateOrgPrincipalInput!',
-                },
-            ], input_types_1.connectionFieldsMap, 'CreateOrgPrincipalPayload'),
-        }),
         extendTokenExpires: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',