@constructive-sdk/cli 0.13.4 → 0.14.1

package/public/cli/commands/user-connected-account.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * CLI commands for UserConnectedAccount
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+const inquirerer_1 = require("inquirerer");
+const executor_1 = require("../executor");
+const utils_1 = require("../utils");
+const fieldSchema = {
+    id: 'uuid',
+    ownerId: 'uuid',
+    service: 'string',
+    identifier: 'string',
+    details: 'json',
+    isVerified: 'boolean',
+    createdAt: 'string',
+    updatedAt: 'string',
+};
+const usage = '\nuser-connected-account <command>\n\nCommands:\n  list                  List userConnectedAccount records\n  find-first            Find first matching userConnectedAccount record\n  create                Create a new userConnectedAccount\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n\n  --help, -h            Show this help message\n';
+exports.default = async (argv, prompter, _options) => {
+    if (argv.help || argv.h) {
+        console.log(usage);
+        process.exit(0);
+    }
+    const { first: subcommand, newArgv } = (0, inquirerer_1.extractFirst)(argv);
+    if (!subcommand) {
+        const answer = await prompter.prompt(argv, [
+            {
+                type: 'autocomplete',
+                name: 'subcommand',
+                message: 'What do you want to do?',
+                options: ['list', 'find-first', 'create'],
+            },
+        ]);
+        return handleTableSubcommand(answer.subcommand, newArgv, prompter);
+    }
+    return handleTableSubcommand(subcommand, newArgv, prompter);
+};
+async function handleTableSubcommand(subcommand, argv, prompter) {
+    switch (subcommand) {
+        case 'list':
+            return handleList(argv, prompter);
+        case 'find-first':
+            return handleFindFirst(argv, prompter);
+        case 'create':
+            return handleCreate(argv, prompter);
+        default:
+            console.log(usage);
+            process.exit(1);
+    }
+}
+async function handleList(argv, _prompter) {
+    try {
+        const defaultSelect = {
+            id: true,
+            ownerId: true,
+            service: true,
+            identifier: true,
+            details: true,
+            isVerified: true,
+            createdAt: true,
+            updatedAt: true,
+        };
+        const findManyArgs = (0, utils_1.parseFindManyArgs)(argv, defaultSelect);
+        const client = (0, executor_1.getClient)();
+        const result = await client.userConnectedAccount.findMany(findManyArgs).execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed to list records.');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+}
+async function handleFindFirst(argv, _prompter) {
+    try {
+        const defaultSelect = {
+            id: true,
+            ownerId: true,
+            service: true,
+            identifier: true,
+            details: true,
+            isVerified: true,
+            createdAt: true,
+            updatedAt: true,
+        };
+        const findFirstArgs = (0, utils_1.parseFindFirstArgs)(argv, defaultSelect);
+        const client = (0, executor_1.getClient)();
+        const result = await client.userConnectedAccount.findFirst(findFirstArgs).execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed to find record.');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+}
+async function handleCreate(argv, prompter) {
+    try {
+        const rawAnswers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'ownerId',
+                message: 'ownerId',
+                required: false,
+                skipPrompt: true,
+            },
+            {
+                type: 'text',
+                name: 'service',
+                message: 'service',
+                required: false,
+                skipPrompt: true,
+            },
+            {
+                type: 'text',
+                name: 'identifier',
+                message: 'identifier',
+                required: false,
+                skipPrompt: true,
+            },
+            {
+                type: 'json',
+                name: 'details',
+                message: 'details',
+                required: false,
+                skipPrompt: true,
+            },
+            {
+                type: 'boolean',
+                name: 'isVerified',
+                message: 'isVerified',
+                required: false,
+                skipPrompt: true,
+            },
+        ]);
+        const answers = (0, utils_1.coerceAnswers)(rawAnswers, fieldSchema);
+        const cleanedData = (0, utils_1.stripUndefined)(answers, fieldSchema);
+        const client = (0, executor_1.getClient)();
+        const result = await client.userConnectedAccount
+            .create({
+            data: {
+                ownerId: cleanedData.ownerId,
+                service: cleanedData.service,
+                identifier: cleanedData.identifier,
+                details: cleanedData.details,
+                isVerified: cleanedData.isVerified,
+            },
+            select: {
+                id: true,
+                ownerId: true,
+                service: true,
+                identifier: true,
+                details: true,
+                isVerified: true,
+                createdAt: true,
+                updatedAt: true,
+            },
+        })
+            .execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed to create record.');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+}

package/public/cli/commands/webauthn-credentials-module.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI commands for WebauthnCredentialsModule
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/public/cli/commands/{table-template-module.js → webauthn-credentials-module.js}

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * CLI commands for TableTemplateModule
+ * CLI commands for WebauthnCredentialsModule
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
@@ -16,10 +16,8 @@ const fieldSchema = {
     tableId: 'uuid',
     ownerTableId: 'uuid',
     tableName: 'string',
-    nodeType: 'string',
-    data: 'json',
 };
-const usage = '\ntable-template-module <command>\n\nCommands:\n  list                  List tableTemplateModule records\n  find-first            Find first matching tableTemplateModule record\n  get                   Get a tableTemplateModule by ID\n  create                Create a new tableTemplateModule\n  update                Update an existing tableTemplateModule\n  delete                Delete a tableTemplateModule\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n\n  --help, -h            Show this help message\n';
+const usage = '\nwebauthn-credentials-module <command>\n\nCommands:\n  list                  List webauthnCredentialsModule records\n  find-first            Find first matching webauthnCredentialsModule record\n  get                   Get a webauthnCredentialsModule by ID\n  create                Create a new webauthnCredentialsModule\n  update                Update an existing webauthnCredentialsModule\n  delete                Delete a webauthnCredentialsModule\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n\n  --help, -h            Show this help message\n';
 exports.default = async (argv, prompter, _options) => {
     if (argv.help || argv.h) {
         console.log(usage);
@@ -68,12 +66,10 @@ async function handleList(argv, _prompter) {
             tableId: true,
             ownerTableId: true,
             tableName: true,
-            nodeType: true,
-            data: true,
         };
         const findManyArgs = (0, utils_1.parseFindManyArgs)(argv, defaultSelect);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule.findMany(findManyArgs).execute();
+        const result = await client.webauthnCredentialsModule.findMany(findManyArgs).execute();
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
@@ -94,12 +90,10 @@ async function handleFindFirst(argv, _prompter) {
             tableId: true,
             ownerTableId: true,
             tableName: true,
-            nodeType: true,
-            data: true,
         };
         const findFirstArgs = (0, utils_1.parseFindFirstArgs)(argv, defaultSelect);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule.findFirst(findFirstArgs).execute();
+        const result = await client.webauthnCredentialsModule.findFirst(findFirstArgs).execute();
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
@@ -121,7 +115,7 @@ async function handleGet(argv, prompter) {
             },
         ]);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule
+        const result = await client.webauthnCredentialsModule
             .findOne({
             id: answers.id,
             select: {
@@ -132,8 +126,6 @@ async function handleGet(argv, prompter) {
                 tableId: true,
                 ownerTableId: true,
                 tableName: true,
-                nodeType: true,
-                data: true,
             },
         })
             .execute();
@@ -188,18 +180,6 @@ async function handleCreate(argv, prompter) {
                 type: 'text',
                 name: 'tableName',
                 message: 'tableName',
-                required: true,
-            },
-            {
-                type: 'text',
-                name: 'nodeType',
-                message: 'nodeType',
-                required: true,
-            },
-            {
-                type: 'json',
-                name: 'data',
-                message: 'data',
                 required: false,
                 skipPrompt: true,
             },
@@ -207,7 +187,7 @@ async function handleCreate(argv, prompter) {
         const answers = (0, utils_1.coerceAnswers)(rawAnswers, fieldSchema);
         const cleanedData = (0, utils_1.stripUndefined)(answers, fieldSchema);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule
+        const result = await client.webauthnCredentialsModule
             .create({
             data: {
                 databaseId: cleanedData.databaseId,
@@ -216,8 +196,6 @@ async function handleCreate(argv, prompter) {
                 tableId: cleanedData.tableId,
                 ownerTableId: cleanedData.ownerTableId,
                 tableName: cleanedData.tableName,
-                nodeType: cleanedData.nodeType,
-                data: cleanedData.data,
             },
             select: {
                 id: true,
@@ -227,8 +205,6 @@ async function handleCreate(argv, prompter) {
                 tableId: true,
                 ownerTableId: true,
                 tableName: true,
-                nodeType: true,
-                data: true,
             },
         })
             .execute();
@@ -290,25 +266,13 @@ async function handleUpdate(argv, prompter) {
                 name: 'tableName',
                 message: 'tableName',
                 required: false,
-            },
-            {
-                type: 'text',
-                name: 'nodeType',
-                message: 'nodeType',
-                required: false,
-            },
-            {
-                type: 'json',
-                name: 'data',
-                message: 'data',
-                required: false,
                 skipPrompt: true,
             },
         ]);
         const answers = (0, utils_1.coerceAnswers)(rawAnswers, fieldSchema);
         const cleanedData = (0, utils_1.stripUndefined)(answers, fieldSchema);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule
+        const result = await client.webauthnCredentialsModule
             .update({
             where: {
                 id: answers.id,
@@ -320,8 +284,6 @@ async function handleUpdate(argv, prompter) {
                 tableId: cleanedData.tableId,
                 ownerTableId: cleanedData.ownerTableId,
                 tableName: cleanedData.tableName,
-                nodeType: cleanedData.nodeType,
-                data: cleanedData.data,
             },
             select: {
                 id: true,
@@ -331,8 +293,6 @@ async function handleUpdate(argv, prompter) {
                 tableId: true,
                 ownerTableId: true,
                 tableName: true,
-                nodeType: true,
-                data: true,
             },
         })
             .execute();
@@ -358,7 +318,7 @@ async function handleDelete(argv, prompter) {
         ]);
         const answers = (0, utils_1.coerceAnswers)(rawAnswers, fieldSchema);
         const client = (0, executor_1.getClient)();
-        const result = await client.tableTemplateModule
+        const result = await client.webauthnCredentialsModule
             .delete({
             where: {
                 id: answers.id,

package/public/cli/commands.js

@@ -24,6 +24,7 @@ const schema_1 = __importDefault(require("./commands/schema"));
 const table_1 = __importDefault(require("./commands/table"));
 const check_constraint_1 = __importDefault(require("./commands/check-constraint"));
 const field_1 = __importDefault(require("./commands/field"));
+const spatial_relation_1 = __importDefault(require("./commands/spatial-relation"));
 const foreign_key_constraint_1 = __importDefault(require("./commands/foreign-key-constraint"));
 const full_text_search_1 = __importDefault(require("./commands/full-text-search"));
 const index_1 = __importDefault(require("./commands/index"));
@@ -37,9 +38,9 @@ const view_table_1 = __importDefault(require("./commands/view-table"));
 const view_grant_1 = __importDefault(require("./commands/view-grant"));
 const view_rule_1 = __importDefault(require("./commands/view-rule"));
 const embedding_chunk_1 = __importDefault(require("./commands/embedding-chunk"));
-const table_template_module_1 = __importDefault(require("./commands/table-template-module"));
 const secure_table_provision_1 = __importDefault(require("./commands/secure-table-provision"));
 const relation_provision_1 = __importDefault(require("./commands/relation-provision"));
+const session_secrets_module_1 = __importDefault(require("./commands/session-secrets-module"));
 const schema_grant_1 = __importDefault(require("./commands/schema-grant"));
 const default_privilege_1 = __importDefault(require("./commands/default-privilege"));
 const enum_1 = __importDefault(require("./commands/enum"));
@@ -77,6 +78,8 @@ const blueprint_1 = __importDefault(require("./commands/blueprint"));
 const blueprint_template_1 = __importDefault(require("./commands/blueprint-template"));
 const blueprint_construction_1 = __importDefault(require("./commands/blueprint-construction"));
 const storage_module_1 = __importDefault(require("./commands/storage-module"));
+const entity_type_provision_1 = __importDefault(require("./commands/entity-type-provision"));
+const webauthn_credentials_module_1 = __importDefault(require("./commands/webauthn-credentials-module"));
 const database_provision_module_1 = __importDefault(require("./commands/database-provision-module"));
 const app_admin_grant_1 = __importDefault(require("./commands/app-admin-grant"));
 const app_owner_grant_1 = __importDefault(require("./commands/app-owner-grant"));
@@ -85,6 +88,7 @@ const org_membership_1 = __importDefault(require("./commands/org-membership"));
 const org_member_1 = __importDefault(require("./commands/org-member"));
 const org_admin_grant_1 = __importDefault(require("./commands/org-admin-grant"));
 const org_owner_grant_1 = __importDefault(require("./commands/org-owner-grant"));
+const org_member_profile_1 = __importDefault(require("./commands/org-member-profile"));
 const org_grant_1 = __importDefault(require("./commands/org-grant"));
 const org_chart_edge_1 = __importDefault(require("./commands/org-chart-edge"));
 const org_chart_edge_grant_1 = __importDefault(require("./commands/org-chart-edge-grant"));
@@ -97,7 +101,6 @@ const app_level_1 = __importDefault(require("./commands/app-level"));
 const email_1 = __importDefault(require("./commands/email"));
 const phone_number_1 = __importDefault(require("./commands/phone-number"));
 const crypto_address_1 = __importDefault(require("./commands/crypto-address"));
-const connected_account_1 = __importDefault(require("./commands/connected-account"));
 const app_invite_1 = __importDefault(require("./commands/app-invite"));
 const app_claimed_invite_1 = __importDefault(require("./commands/app-claimed-invite"));
 const org_invite_1 = __importDefault(require("./commands/org-invite"));
@@ -110,10 +113,12 @@ const role_type_1 = __importDefault(require("./commands/role-type"));
 const migrate_file_1 = __importDefault(require("./commands/migrate-file"));
 const app_limit_default_1 = __importDefault(require("./commands/app-limit-default"));
 const org_limit_default_1 = __importDefault(require("./commands/org-limit-default"));
-const membership_type_1 = __importDefault(require("./commands/membership-type"));
+const devices_module_1 = __importDefault(require("./commands/devices-module"));
+const user_connected_account_1 = __importDefault(require("./commands/user-connected-account"));
 const app_membership_default_1 = __importDefault(require("./commands/app-membership-default"));
 const commit_1 = __importDefault(require("./commands/commit"));
 const rate_limits_module_1 = __importDefault(require("./commands/rate-limits-module"));
+const membership_type_1 = __importDefault(require("./commands/membership-type"));
 const org_membership_default_1 = __importDefault(require("./commands/org-membership-default"));
 const rls_module_1 = __importDefault(require("./commands/rls-module"));
 const sql_action_1 = __importDefault(require("./commands/sql-action"));
@@ -122,12 +127,14 @@ const ast_migration_1 = __importDefault(require("./commands/ast-migration"));
 const app_membership_1 = __importDefault(require("./commands/app-membership"));
 const hierarchy_module_1 = __importDefault(require("./commands/hierarchy-module"));
 const current_user_id_1 = __importDefault(require("./commands/current-user-id"));
-const current_ip_address_1 = __importDefault(require("./commands/current-ip-address"));
 const current_user_agent_1 = __importDefault(require("./commands/current-user-agent"));
+const current_ip_address_1 = __importDefault(require("./commands/current-ip-address"));
+const require_step_up_1 = __importDefault(require("./commands/require-step-up"));
 const app_permissions_get_padded_mask_1 = __importDefault(require("./commands/app-permissions-get-padded-mask"));
 const org_permissions_get_padded_mask_1 = __importDefault(require("./commands/org-permissions-get-padded-mask"));
 const steps_achieved_1 = __importDefault(require("./commands/steps-achieved"));
 const rev_parse_1 = __importDefault(require("./commands/rev-parse"));
+const resolve_blueprint_field_1 = __importDefault(require("./commands/resolve-blueprint-field"));
 const org_is_manager_of_1 = __importDefault(require("./commands/org-is-manager-of"));
 const app_permissions_get_mask_1 = __importDefault(require("./commands/app-permissions-get-mask"));
 const org_permissions_get_mask_1 = __importDefault(require("./commands/org-permissions-get-mask"));
@@ -146,6 +153,9 @@ const sign_out_1 = __importDefault(require("./commands/sign-out"));
 const accept_database_transfer_1 = __importDefault(require("./commands/accept-database-transfer"));
 const cancel_database_transfer_1 = __importDefault(require("./commands/cancel-database-transfer"));
 const reject_database_transfer_1 = __importDefault(require("./commands/reject-database-transfer"));
+const disconnect_account_1 = __importDefault(require("./commands/disconnect-account"));
+const revoke_api_key_1 = __importDefault(require("./commands/revoke-api-key"));
+const revoke_session_1 = __importDefault(require("./commands/revoke-session"));
 const verify_password_1 = __importDefault(require("./commands/verify-password"));
 const verify_totp_1 = __importDefault(require("./commands/verify-totp"));
 const submit_app_invite_code_1 = __importDefault(require("./commands/submit-app-invite-code"));
@@ -157,9 +167,12 @@ const verify_email_1 = __importDefault(require("./commands/verify-email"));
 const freeze_objects_1 = __importDefault(require("./commands/freeze-objects"));
 const init_empty_repo_1 = __importDefault(require("./commands/init-empty-repo"));
 const construct_blueprint_1 = __importDefault(require("./commands/construct-blueprint"));
+const provision_new_user_1 = __importDefault(require("./commands/provision-new-user"));
 const reset_password_1 = __importDefault(require("./commands/reset-password"));
 const remove_node_at_path_1 = __importDefault(require("./commands/remove-node-at-path"));
 const copy_template_to_blueprint_1 = __importDefault(require("./commands/copy-template-to-blueprint"));
+const create_api_key_1 = __importDefault(require("./commands/create-api-key"));
+const provision_spatial_relation_1 = __importDefault(require("./commands/provision-spatial-relation"));
 const bootstrap_user_1 = __importDefault(require("./commands/bootstrap-user"));
 const set_field_order_1 = __importDefault(require("./commands/set-field-order"));
 const provision_unique_constraint_1 = __importDefault(require("./commands/provision-unique-constraint"));
@@ -173,12 +186,12 @@ const update_node_at_path_1 = __importDefault(require("./commands/update-node-at
 const set_and_commit_1 = __importDefault(require("./commands/set-and-commit"));
 const provision_relation_1 = __importDefault(require("./commands/provision-relation"));
 const apply_rls_1 = __importDefault(require("./commands/apply-rls"));
-const sign_in_one_time_token_1 = __importDefault(require("./commands/sign-in-one-time-token"));
+const sign_in_cross_origin_1 = __importDefault(require("./commands/sign-in-cross-origin"));
 const create_user_database_1 = __importDefault(require("./commands/create-user-database"));
 const extend_token_expires_1 = __importDefault(require("./commands/extend-token-expires"));
-const sign_in_1 = __importDefault(require("./commands/sign-in"));
 const sign_up_1 = __importDefault(require("./commands/sign-up"));
-const one_time_token_1 = __importDefault(require("./commands/one-time-token"));
+const request_cross_origin_token_1 = __importDefault(require("./commands/request-cross-origin-token"));
+const sign_in_1 = __importDefault(require("./commands/sign-in"));
 const provision_table_1 = __importDefault(require("./commands/provision-table"));
 const send_verification_email_1 = __importDefault(require("./commands/send-verification-email"));
 const forgot_password_1 = __importDefault(require("./commands/forgot-password"));
@@ -200,6 +213,7 @@ const createCommandMap = () => ({
     table: table_1.default,
     'check-constraint': check_constraint_1.default,
     field: field_1.default,
+    'spatial-relation': spatial_relation_1.default,
     'foreign-key-constraint': foreign_key_constraint_1.default,
     'full-text-search': full_text_search_1.default,
     index: index_1.default,
@@ -213,9 +227,9 @@ const createCommandMap = () => ({
     'view-grant': view_grant_1.default,
     'view-rule': view_rule_1.default,
     'embedding-chunk': embedding_chunk_1.default,
-    'table-template-module': table_template_module_1.default,
     'secure-table-provision': secure_table_provision_1.default,
     'relation-provision': relation_provision_1.default,
+    'session-secrets-module': session_secrets_module_1.default,
     'schema-grant': schema_grant_1.default,
     'default-privilege': default_privilege_1.default,
     enum: enum_1.default,
@@ -253,6 +267,8 @@ const createCommandMap = () => ({
     'blueprint-template': blueprint_template_1.default,
     'blueprint-construction': blueprint_construction_1.default,
     'storage-module': storage_module_1.default,
+    'entity-type-provision': entity_type_provision_1.default,
+    'webauthn-credentials-module': webauthn_credentials_module_1.default,
     'database-provision-module': database_provision_module_1.default,
     'app-admin-grant': app_admin_grant_1.default,
     'app-owner-grant': app_owner_grant_1.default,
@@ -261,6 +277,7 @@ const createCommandMap = () => ({
     'org-member': org_member_1.default,
     'org-admin-grant': org_admin_grant_1.default,
     'org-owner-grant': org_owner_grant_1.default,
+    'org-member-profile': org_member_profile_1.default,
     'org-grant': org_grant_1.default,
     'org-chart-edge': org_chart_edge_1.default,
     'org-chart-edge-grant': org_chart_edge_grant_1.default,
@@ -273,7 +290,6 @@ const createCommandMap = () => ({
     email: email_1.default,
     'phone-number': phone_number_1.default,
     'crypto-address': crypto_address_1.default,
-    'connected-account': connected_account_1.default,
     'app-invite': app_invite_1.default,
     'app-claimed-invite': app_claimed_invite_1.default,
     'org-invite': org_invite_1.default,
@@ -286,10 +302,12 @@ const createCommandMap = () => ({
     'migrate-file': migrate_file_1.default,
     'app-limit-default': app_limit_default_1.default,
     'org-limit-default': org_limit_default_1.default,
-    'membership-type': membership_type_1.default,
+    'devices-module': devices_module_1.default,
+    'user-connected-account': user_connected_account_1.default,
     'app-membership-default': app_membership_default_1.default,
     commit: commit_1.default,
     'rate-limits-module': rate_limits_module_1.default,
+    'membership-type': membership_type_1.default,
     'org-membership-default': org_membership_default_1.default,
     'rls-module': rls_module_1.default,
     'sql-action': sql_action_1.default,
@@ -298,12 +316,14 @@ const createCommandMap = () => ({
     'app-membership': app_membership_1.default,
     'hierarchy-module': hierarchy_module_1.default,
     'current-user-id': current_user_id_1.default,
-    'current-ip-address': current_ip_address_1.default,
     'current-user-agent': current_user_agent_1.default,
+    'current-ip-address': current_ip_address_1.default,
+    'require-step-up': require_step_up_1.default,
     'app-permissions-get-padded-mask': app_permissions_get_padded_mask_1.default,
     'org-permissions-get-padded-mask': org_permissions_get_padded_mask_1.default,
     'steps-achieved': steps_achieved_1.default,
     'rev-parse': rev_parse_1.default,
+    'resolve-blueprint-field': resolve_blueprint_field_1.default,
     'org-is-manager-of': org_is_manager_of_1.default,
     'app-permissions-get-mask': app_permissions_get_mask_1.default,
     'org-permissions-get-mask': org_permissions_get_mask_1.default,
@@ -322,6 +342,9 @@ const createCommandMap = () => ({
     'accept-database-transfer': accept_database_transfer_1.default,
     'cancel-database-transfer': cancel_database_transfer_1.default,
     'reject-database-transfer': reject_database_transfer_1.default,
+    'disconnect-account': disconnect_account_1.default,
+    'revoke-api-key': revoke_api_key_1.default,
+    'revoke-session': revoke_session_1.default,
     'verify-password': verify_password_1.default,
     'verify-totp': verify_totp_1.default,
     'submit-app-invite-code': submit_app_invite_code_1.default,
@@ -333,9 +356,12 @@ const createCommandMap = () => ({
     'freeze-objects': freeze_objects_1.default,
     'init-empty-repo': init_empty_repo_1.default,
     'construct-blueprint': construct_blueprint_1.default,
+    'provision-new-user': provision_new_user_1.default,
     'reset-password': reset_password_1.default,
     'remove-node-at-path': remove_node_at_path_1.default,
     'copy-template-to-blueprint': copy_template_to_blueprint_1.default,
+    'create-api-key': create_api_key_1.default,
+    'provision-spatial-relation': provision_spatial_relation_1.default,
     'bootstrap-user': bootstrap_user_1.default,
     'set-field-order': set_field_order_1.default,
     'provision-unique-constraint': provision_unique_constraint_1.default,
@@ -349,12 +375,12 @@ const createCommandMap = () => ({
     'set-and-commit': set_and_commit_1.default,
     'provision-relation': provision_relation_1.default,
     'apply-rls': apply_rls_1.default,
-    'sign-in-one-time-token': sign_in_one_time_token_1.default,
+    'sign-in-cross-origin': sign_in_cross_origin_1.default,
     'create-user-database': create_user_database_1.default,
     'extend-token-expires': extend_token_expires_1.default,
-    'sign-in': sign_in_1.default,
     'sign-up': sign_up_1.default,
-    'one-time-token': one_time_token_1.default,
+    'request-cross-origin-token': request_cross_origin_token_1.default,
+    'sign-in': sign_in_1.default,
     'provision-table': provision_table_1.default,
     'send-verification-email': send_verification_email_1.default,
     'forgot-password': forgot_password_1.default,
@@ -362,7 +388,7 @@ const createCommandMap = () => ({
     'confirm-upload': confirm_upload_1.default,
     'provision-bucket': provision_bucket_1.default,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  object               object CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  app-level-requirement appLevelRequirement CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  table-template-module tableTemplateModule CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  levels-module        levelsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  secrets-module       secretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  org-limit            orgLimit CRUD operations\n  app-step             appStep CRUD operations\n  app-achievement      appAchievement CRUD operations\n  app-level            appLevel CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  connected-account    connectedAccount CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  role-type            roleType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  membership-type      membershipType CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  commit               commit CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-module           rlsModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  user                 user CRUD operations\n  ast-migration        astMigration CRUD operations\n  app-membership       appMembership CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-ip-address   currentIpAddress\n  current-user-agent   currentUserAgent\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  steps-achieved       stepsAchieved\n  rev-parse            revParse\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  steps-required       Reads and enables pagination through a set of `AppLevelRequirement`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Five phases: (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Tables are identified by table_name with optional per-table schema_name. Relations use $type for relation_type with source_table/target_table. Returns the construction record ID on success, NULL on failure.\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-one-time-token signInOneTimeToken\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include levels/achievements (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  sign-in              signIn\n  sign-up              signUp\n  one-time-token       oneTimeToken\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  request-upload-url   Request a presigned URL for uploading a file directly to S3.\nClient computes SHA-256 of the file content and provides it here.\nIf a file with the same hash already exists (dedup), returns the\nexisting file ID and deduplicated=true with no uploadUrl.\n  confirm-upload       Confirm that a file has been uploaded to S3.\nVerifies the object exists in S3, checks content-type,\nand transitions the file status from 'pending' to 'ready'.\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  object               object CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  app-level-requirement appLevelRequirement CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  levels-module        levelsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  secrets-module       secretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  org-limit            orgLimit CRUD operations\n  app-step             appStep CRUD operations\n  app-achievement      appAchievement CRUD operations\n  app-level            appLevel CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  role-type            roleType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  devices-module       devicesModule CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  commit               commit CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  membership-type      membershipType CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-module           rlsModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  user                 user CRUD operations\n  ast-migration        astMigration CRUD operations\n  app-membership       appMembership CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  steps-achieved       stepsAchieved\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  steps-required       Reads and enables pagination through a set of `AppLevelRequirement`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Six phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  create-api-key       createApiKey\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include levels/achievements (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  request-upload-url   Request a presigned URL for uploading a file directly to S3.\nClient computes SHA-256 of the file content and provides it here.\nIf a file with the same hash already exists (dedup), returns the\nexisting file ID and deduplicated=true with no uploadUrl.\n  confirm-upload       Confirm that a file has been uploaded to S3.\nVerifies the object exists in S3, checks content-type,\nand transitions the file status from 'pending' to 'ready'.\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
 const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);