@constructive-sdk/cli 0.20.9 → 0.21.0

package/esm/public/cli/commands.js

@@ -137,6 +137,7 @@ import userConnectedAccountCmd from './commands/user-connected-account';
 import commitCmd from './commands/commit';
 import pubkeySettingCmd from './commands/pubkey-setting';
 import rateLimitsModuleCmd from './commands/rate-limits-module';
+import usageSnapshotCmd from './commands/usage-snapshot';
 import appMembershipDefaultCmd from './commands/app-membership-default';
 import orgMembershipDefaultCmd from './commands/org-membership-default';
 import rlsSettingCmd from './commands/rls-setting';
@@ -358,6 +359,7 @@ const createCommandMap = () => ({
     commit: commitCmd,
     'pubkey-setting': pubkeySettingCmd,
     'rate-limits-module': rateLimitsModuleCmd,
+    'usage-snapshot': usageSnapshotCmd,
     'app-membership-default': appMembershipDefaultCmd,
     'org-membership-default': orgMembershipDefaultCmd,
     'rls-setting': rlsSettingCmd,
@@ -446,7 +448,7 @@ const createCommandMap = () => ({
     'provision-table': provisionTableCmd,
     'provision-bucket': provisionBucketCmd,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  object               object CRUD operations\n  app-level-requirement appLevelRequirement CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  partition            partition CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  levels-module        levelsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  secrets-module       secretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  app-step             appStep CRUD operations\n  app-achievement      appAchievement CRUD operations\n  app-level            appLevel CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  agent-thread         agentThread CRUD operations\n  agent-message        agentMessage CRUD operations\n  agent-task           agentTask CRUD operations\n  role-type            roleType CRUD operations\n  identity-provider    identityProvider CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  membership-type      membershipType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  commit               commit CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  rls-module           rlsModule CRUD operations\n  database-setting     databaseSetting CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  billing-module       billingModule CRUD operations\n  ast-migration        astMigration CRUD operations\n  user                 user CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  app-membership       appMembership CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  steps-achieved       stepsAchieved\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  steps-required       Reads and enables pagination through a set of `AppLevelRequirement`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Six phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include levels/achievements (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  object               object CRUD operations\n  app-level-requirement appLevelRequirement CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  partition            partition CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  levels-module        levelsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  secrets-module       secretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  app-step             appStep CRUD operations\n  app-achievement      appAchievement CRUD operations\n  app-level            appLevel CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  agent-thread         agentThread CRUD operations\n  agent-message        agentMessage CRUD operations\n  agent-task           agentTask CRUD operations\n  role-type            roleType CRUD operations\n  identity-provider    identityProvider CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  membership-type      membershipType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  commit               commit CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  usage-snapshot       usageSnapshot CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  rls-module           rlsModule CRUD operations\n  database-setting     databaseSetting CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  billing-module       billingModule CRUD operations\n  ast-migration        astMigration CRUD operations\n  user                 user CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  app-membership       appMembership CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  steps-achieved       stepsAchieved\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  steps-required       Reads and enables pagination through a set of `AppLevelRequirement`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Six phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include levels/achievements (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
 export const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/esm/public/cli/executor.d.ts

@@ -131,6 +131,7 @@ export declare function getClient(contextName?: string): {
     commit: import("..").CommitModel;
     pubkeySetting: import("..").PubkeySettingModel;
     rateLimitsModule: import("..").RateLimitsModuleModel;
+    usageSnapshot: import("..").UsageSnapshotModel;
     appMembershipDefault: import("..").AppMembershipDefaultModel;
     orgMembershipDefault: import("..").OrgMembershipDefaultModel;
     rlsSetting: import("..").RlsSettingModel;

package/esm/public/orm/index.d.ts

@@ -130,6 +130,7 @@ import { UserConnectedAccountModel } from './models/userConnectedAccount';
 import { CommitModel } from './models/commit';
 import { PubkeySettingModel } from './models/pubkeySetting';
 import { RateLimitsModuleModel } from './models/rateLimitsModule';
+import { UsageSnapshotModel } from './models/usageSnapshot';
 import { AppMembershipDefaultModel } from './models/appMembershipDefault';
 import { OrgMembershipDefaultModel } from './models/orgMembershipDefault';
 import { RlsSettingModel } from './models/rlsSetting';
@@ -310,6 +311,7 @@ export declare function createClient(config: OrmClientConfig): {
     commit: CommitModel;
     pubkeySetting: PubkeySettingModel;
     rateLimitsModule: RateLimitsModuleModel;
+    usageSnapshot: UsageSnapshotModel;
     appMembershipDefault: AppMembershipDefaultModel;
     orgMembershipDefault: OrgMembershipDefaultModel;
     rlsSetting: RlsSettingModel;

package/esm/public/orm/index.js

@@ -135,6 +135,7 @@ import { UserConnectedAccountModel } from './models/userConnectedAccount';
 import { CommitModel } from './models/commit';
 import { PubkeySettingModel } from './models/pubkeySetting';
 import { RateLimitsModuleModel } from './models/rateLimitsModule';
+import { UsageSnapshotModel } from './models/usageSnapshot';
 import { AppMembershipDefaultModel } from './models/appMembershipDefault';
 import { OrgMembershipDefaultModel } from './models/orgMembershipDefault';
 import { RlsSettingModel } from './models/rlsSetting';
@@ -318,6 +319,7 @@ export function createClient(config) {
         commit: new CommitModel(client),
         pubkeySetting: new PubkeySettingModel(client),
         rateLimitsModule: new RateLimitsModuleModel(client),
+        usageSnapshot: new UsageSnapshotModel(client),
         appMembershipDefault: new AppMembershipDefaultModel(client),
         orgMembershipDefault: new OrgMembershipDefaultModel(client),
         rlsSetting: new RlsSettingModel(client),

package/esm/public/orm/input-types.d.ts

@@ -2521,6 +2521,20 @@ export interface RateLimitsModule {
     ipRateLimitsTable?: string | null;
     rateLimitsTable?: string | null;
 }
+/** Periodic snapshot of a single metric for a database. Collected by the snapshot_usage() cron job in constructive-limits. Each row records one metric measurement (e.g. reads, writes, storage_bytes) at a point in time, with optional dimensions for sub-metric breakdowns. */
+export interface UsageSnapshot {
+    /** The database this snapshot belongs to. References metaschema_public.database.id but declared without an FK constraint — the snapshot collector runs in a platform context where the FK would add overhead without value. */
+    databaseId?: string | null;
+    /** Identifier for the metric being measured (e.g. 'reads', 'writes', 'storage_bytes', 'compute_time_ms'). */
+    metricName?: string | null;
+    /** The measured value at the time of capture. Interpretation depends on metric_name (count, bytes, milliseconds, etc.). */
+    metricValue?: string | null;
+    /** Optional sub-metric breakdowns as key-value pairs (e.g. {"query_type": "select"} for reads). Empty object when no breakdown is needed. */
+    dimensions?: Record<string, unknown> | null;
+    /** When this snapshot was taken. Defaults to the current timestamp; the snapshot collector may override this for backdated imports. */
+    capturedAt?: string | null;
+    id: string;
+}
 /** Default membership settings per entity, controlling initial approval and verification state for new members */
 export interface AppMembershipDefault {
     id: string;
@@ -3628,6 +3642,8 @@ export interface RateLimitsModuleRelations {
     rateLimitsTableByRateLimitsTableId?: Table | null;
     schema?: Schema | null;
 }
+export interface UsageSnapshotRelations {
+}
 export interface AppMembershipDefaultRelations {
 }
 export interface OrgMembershipDefaultRelations {
@@ -3917,6 +3933,7 @@ export type UserConnectedAccountWithRelations = UserConnectedAccount & UserConne
 export type CommitWithRelations = Commit & CommitRelations;
 export type PubkeySettingWithRelations = PubkeySetting & PubkeySettingRelations;
 export type RateLimitsModuleWithRelations = RateLimitsModule & RateLimitsModuleRelations;
+export type UsageSnapshotWithRelations = UsageSnapshot & UsageSnapshotRelations;
 export type AppMembershipDefaultWithRelations = AppMembershipDefault & AppMembershipDefaultRelations;
 export type OrgMembershipDefaultWithRelations = OrgMembershipDefault & OrgMembershipDefaultRelations;
 export type RlsSettingWithRelations = RlsSetting & RlsSettingRelations;
@@ -7330,6 +7347,14 @@ export type RateLimitsModuleSelect = {
         select: SchemaSelect;
     };
 };
+export type UsageSnapshotSelect = {
+    databaseId?: boolean;
+    metricName?: boolean;
+    metricValue?: boolean;
+    dimensions?: boolean;
+    capturedAt?: boolean;
+    id?: boolean;
+};
 export type AppMembershipDefaultSelect = {
     id?: boolean;
     createdAt?: boolean;
@@ -13088,6 +13113,26 @@ export interface RateLimitsModuleFilter {
     /** Filter by the object’s `schema` relation. */
     schema?: SchemaFilter;
 }
+export interface UsageSnapshotFilter {
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
+    /** Filter by the object’s `metricName` field. */
+    metricName?: StringFilter;
+    /** Filter by the object’s `metricValue` field. */
+    metricValue?: BigIntFilter;
+    /** Filter by the object’s `dimensions` field. */
+    dimensions?: JSONFilter;
+    /** Filter by the object’s `capturedAt` field. */
+    capturedAt?: DatetimeFilter;
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Checks for all expressions in this list. */
+    and?: UsageSnapshotFilter[];
+    /** Checks for any expressions in this list. */
+    or?: UsageSnapshotFilter[];
+    /** Negates the expression. */
+    not?: UsageSnapshotFilter;
+}
 export interface AppMembershipDefaultFilter {
     /** Filter by the object’s `id` field. */
     id?: UUIDFilter;
@@ -14206,6 +14251,7 @@ export type UserConnectedAccountOrderBy = 'NATURAL' | 'ID_ASC' | 'ID_DESC' | 'OW
 export type CommitOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'MESSAGE_ASC' | 'MESSAGE_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'STORE_ID_ASC' | 'STORE_ID_DESC' | 'PARENT_IDS_ASC' | 'PARENT_IDS_DESC' | 'AUTHOR_ID_ASC' | 'AUTHOR_ID_DESC' | 'COMMITTER_ID_ASC' | 'COMMITTER_ID_DESC' | 'TREE_ID_ASC' | 'TREE_ID_DESC' | 'DATE_ASC' | 'DATE_DESC';
 export type PubkeySettingOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'CRYPTO_NETWORK_ASC' | 'CRYPTO_NETWORK_DESC' | 'USER_FIELD_ASC' | 'USER_FIELD_DESC' | 'SIGN_UP_WITH_KEY_FUNCTION_ID_ASC' | 'SIGN_UP_WITH_KEY_FUNCTION_ID_DESC' | 'SIGN_IN_REQUEST_CHALLENGE_FUNCTION_ID_ASC' | 'SIGN_IN_REQUEST_CHALLENGE_FUNCTION_ID_DESC' | 'SIGN_IN_RECORD_FAILURE_FUNCTION_ID_ASC' | 'SIGN_IN_RECORD_FAILURE_FUNCTION_ID_DESC' | 'SIGN_IN_WITH_CHALLENGE_FUNCTION_ID_ASC' | 'SIGN_IN_WITH_CHALLENGE_FUNCTION_ID_DESC';
 export type RateLimitsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'RATE_LIMIT_SETTINGS_TABLE_ID_ASC' | 'RATE_LIMIT_SETTINGS_TABLE_ID_DESC' | 'IP_RATE_LIMITS_TABLE_ID_ASC' | 'IP_RATE_LIMITS_TABLE_ID_DESC' | 'RATE_LIMITS_TABLE_ID_ASC' | 'RATE_LIMITS_TABLE_ID_DESC' | 'RATE_LIMIT_SETTINGS_TABLE_ASC' | 'RATE_LIMIT_SETTINGS_TABLE_DESC' | 'IP_RATE_LIMITS_TABLE_ASC' | 'IP_RATE_LIMITS_TABLE_DESC' | 'RATE_LIMITS_TABLE_ASC' | 'RATE_LIMITS_TABLE_DESC';
+export type UsageSnapshotOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'METRIC_NAME_ASC' | 'METRIC_NAME_DESC' | 'METRIC_VALUE_ASC' | 'METRIC_VALUE_DESC' | 'DIMENSIONS_ASC' | 'DIMENSIONS_DESC' | 'CAPTURED_AT_ASC' | 'CAPTURED_AT_DESC' | 'ID_ASC' | 'ID_DESC';
 export type AppMembershipDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'IS_APPROVED_ASC' | 'IS_APPROVED_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC';
 export type OrgMembershipDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'IS_APPROVED_ASC' | 'IS_APPROVED_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC';
 export type RlsSettingOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'AUTHENTICATE_SCHEMA_ID_ASC' | 'AUTHENTICATE_SCHEMA_ID_DESC' | 'ROLE_SCHEMA_ID_ASC' | 'ROLE_SCHEMA_ID_DESC' | 'AUTHENTICATE_FUNCTION_ID_ASC' | 'AUTHENTICATE_FUNCTION_ID_DESC' | 'AUTHENTICATE_STRICT_FUNCTION_ID_ASC' | 'AUTHENTICATE_STRICT_FUNCTION_ID_DESC' | 'CURRENT_ROLE_FUNCTION_ID_ASC' | 'CURRENT_ROLE_FUNCTION_ID_DESC' | 'CURRENT_ROLE_ID_FUNCTION_ID_ASC' | 'CURRENT_ROLE_ID_FUNCTION_ID_DESC' | 'CURRENT_USER_AGENT_FUNCTION_ID_ASC' | 'CURRENT_USER_AGENT_FUNCTION_ID_DESC' | 'CURRENT_IP_ADDRESS_FUNCTION_ID_ASC' | 'CURRENT_IP_ADDRESS_FUNCTION_ID_DESC';
@@ -18427,6 +18473,32 @@ export interface DeleteRateLimitsModuleInput {
     clientMutationId?: string;
     id: string;
 }
+export interface CreateUsageSnapshotInput {
+    clientMutationId?: string;
+    usageSnapshot: {
+        databaseId: string;
+        metricName: string;
+        metricValue?: string;
+        dimensions?: Record<string, unknown>;
+        capturedAt?: string;
+    };
+}
+export interface UsageSnapshotPatch {
+    databaseId?: string | null;
+    metricName?: string | null;
+    metricValue?: string | null;
+    dimensions?: Record<string, unknown> | null;
+    capturedAt?: string | null;
+}
+export interface UpdateUsageSnapshotInput {
+    clientMutationId?: string;
+    id: string;
+    usageSnapshotPatch: UsageSnapshotPatch;
+}
+export interface DeleteUsageSnapshotInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface CreateAppMembershipDefaultInput {
     clientMutationId?: string;
     appMembershipDefault: {
@@ -33570,6 +33642,51 @@ export type DeleteRateLimitsModulePayloadSelect = {
         select: RateLimitsModuleEdgeSelect;
     };
 };
+export interface CreateUsageSnapshotPayload {
+    clientMutationId?: string | null;
+    /** The `UsageSnapshot` that was created by this mutation. */
+    usageSnapshot?: UsageSnapshot | null;
+    usageSnapshotEdge?: UsageSnapshotEdge | null;
+}
+export type CreateUsageSnapshotPayloadSelect = {
+    clientMutationId?: boolean;
+    usageSnapshot?: {
+        select: UsageSnapshotSelect;
+    };
+    usageSnapshotEdge?: {
+        select: UsageSnapshotEdgeSelect;
+    };
+};
+export interface UpdateUsageSnapshotPayload {
+    clientMutationId?: string | null;
+    /** The `UsageSnapshot` that was updated by this mutation. */
+    usageSnapshot?: UsageSnapshot | null;
+    usageSnapshotEdge?: UsageSnapshotEdge | null;
+}
+export type UpdateUsageSnapshotPayloadSelect = {
+    clientMutationId?: boolean;
+    usageSnapshot?: {
+        select: UsageSnapshotSelect;
+    };
+    usageSnapshotEdge?: {
+        select: UsageSnapshotEdgeSelect;
+    };
+};
+export interface DeleteUsageSnapshotPayload {
+    clientMutationId?: string | null;
+    /** The `UsageSnapshot` that was deleted by this mutation. */
+    usageSnapshot?: UsageSnapshot | null;
+    usageSnapshotEdge?: UsageSnapshotEdge | null;
+}
+export type DeleteUsageSnapshotPayloadSelect = {
+    clientMutationId?: boolean;
+    usageSnapshot?: {
+        select: UsageSnapshotSelect;
+    };
+    usageSnapshotEdge?: {
+        select: UsageSnapshotEdgeSelect;
+    };
+};
 export interface CreateAppMembershipDefaultPayload {
     clientMutationId?: string | null;
     /** The `AppMembershipDefault` that was created by this mutation. */
@@ -35836,6 +35953,18 @@ export type RateLimitsModuleEdgeSelect = {
         select: RateLimitsModuleSelect;
     };
 };
+/** A `UsageSnapshot` edge in the connection. */
+export interface UsageSnapshotEdge {
+    cursor?: string | null;
+    /** The `UsageSnapshot` at the end of the edge. */
+    node?: UsageSnapshot | null;
+}
+export type UsageSnapshotEdgeSelect = {
+    cursor?: boolean;
+    node?: {
+        select: UsageSnapshotSelect;
+    };
+};
 /** A `AppMembershipDefault` edge in the connection. */
 export interface AppMembershipDefaultEdge {
     cursor?: string | null;

package/esm/public/orm/models/index.d.ts

@@ -134,6 +134,7 @@ export { UserConnectedAccountModel } from './userConnectedAccount';
 export { CommitModel } from './commit';
 export { PubkeySettingModel } from './pubkeySetting';
 export { RateLimitsModuleModel } from './rateLimitsModule';
+export { UsageSnapshotModel } from './usageSnapshot';
 export { AppMembershipDefaultModel } from './appMembershipDefault';
 export { OrgMembershipDefaultModel } from './orgMembershipDefault';
 export { RlsSettingModel } from './rlsSetting';

package/esm/public/orm/models/index.js

@@ -134,6 +134,7 @@ export { UserConnectedAccountModel } from './userConnectedAccount';
 export { CommitModel } from './commit';
 export { PubkeySettingModel } from './pubkeySetting';
 export { RateLimitsModuleModel } from './rateLimitsModule';
+export { UsageSnapshotModel } from './usageSnapshot';
 export { AppMembershipDefaultModel } from './appMembershipDefault';
 export { OrgMembershipDefaultModel } from './orgMembershipDefault';
 export { RlsSettingModel } from './rlsSetting';

package/esm/public/orm/models/usageSnapshot.d.ts

@@ -0,0 +1,56 @@
+/**
+ * UsageSnapshot model for ORM client
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { OrmClient } from '../client';
+import { QueryBuilder } from '../query-builder';
+import type { ConnectionResult, FindManyArgs, FindFirstArgs, CreateArgs, UpdateArgs, DeleteArgs, InferSelectResult, StrictSelect } from '../select-types';
+import type { UsageSnapshotWithRelations, UsageSnapshotSelect, UsageSnapshotFilter, UsageSnapshotOrderBy, CreateUsageSnapshotInput, UsageSnapshotPatch } from '../input-types';
+export declare class UsageSnapshotModel {
+    private client;
+    constructor(client: OrmClient);
+    findMany<S extends UsageSnapshotSelect>(args: FindManyArgs<S, UsageSnapshotFilter, UsageSnapshotOrderBy> & {
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        usageSnapshots: ConnectionResult<InferSelectResult<UsageSnapshotWithRelations, S>>;
+    }>;
+    findFirst<S extends UsageSnapshotSelect>(args: FindFirstArgs<S, UsageSnapshotFilter> & {
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        usageSnapshots: {
+            nodes: InferSelectResult<UsageSnapshotWithRelations, S>[];
+        };
+    }>;
+    findOne<S extends UsageSnapshotSelect>(args: {
+        id: string;
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        usageSnapshot: InferSelectResult<UsageSnapshotWithRelations, S> | null;
+    }>;
+    create<S extends UsageSnapshotSelect>(args: CreateArgs<S, CreateUsageSnapshotInput['usageSnapshot']> & {
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        createUsageSnapshot: {
+            usageSnapshot: InferSelectResult<UsageSnapshotWithRelations, S>;
+        };
+    }>;
+    update<S extends UsageSnapshotSelect>(args: UpdateArgs<S, {
+        id: string;
+    }, UsageSnapshotPatch> & {
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        updateUsageSnapshot: {
+            usageSnapshot: InferSelectResult<UsageSnapshotWithRelations, S>;
+        };
+    }>;
+    delete<S extends UsageSnapshotSelect>(args: DeleteArgs<{
+        id: string;
+    }, S> & {
+        select: S;
+    } & StrictSelect<S, UsageSnapshotSelect>): QueryBuilder<{
+        deleteUsageSnapshot: {
+            usageSnapshot: InferSelectResult<UsageSnapshotWithRelations, S>;
+        };
+    }>;
+}

package/esm/public/orm/models/usageSnapshot.js

@@ -0,0 +1,96 @@
+import { QueryBuilder, buildFindManyDocument, buildFindFirstDocument, buildCreateDocument, buildUpdateByPkDocument, buildDeleteByPkDocument, } from '../query-builder';
+import { connectionFieldsMap } from '../input-types';
+export class UsageSnapshotModel {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    findMany(args) {
+        const { document, variables } = buildFindManyDocument('UsageSnapshot', 'usageSnapshots', args.select, {
+            where: args?.where,
+            orderBy: args?.orderBy,
+            first: args?.first,
+            last: args?.last,
+            after: args?.after,
+            before: args?.before,
+            offset: args?.offset,
+        }, 'UsageSnapshotFilter', 'UsageSnapshotOrderBy', connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'query',
+            operationName: 'UsageSnapshot',
+            fieldName: 'usageSnapshots',
+            document,
+            variables,
+        });
+    }
+    findFirst(args) {
+        const { document, variables } = buildFindFirstDocument('UsageSnapshot', 'usageSnapshots', args.select, {
+            where: args?.where,
+        }, 'UsageSnapshotFilter', connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'query',
+            operationName: 'UsageSnapshot',
+            fieldName: 'usageSnapshots',
+            document,
+            variables,
+        });
+    }
+    findOne(args) {
+        const { document, variables } = buildFindManyDocument('UsageSnapshot', 'usageSnapshots', args.select, {
+            where: {
+                id: {
+                    equalTo: args.id,
+                },
+            },
+            first: 1,
+        }, 'UsageSnapshotFilter', 'UsageSnapshotOrderBy', connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'query',
+            operationName: 'UsageSnapshot',
+            fieldName: 'usageSnapshot',
+            document,
+            variables,
+            transform: (data) => ({
+                usageSnapshot: data.usageSnapshots?.nodes?.[0] ?? null,
+            }),
+        });
+    }
+    create(args) {
+        const { document, variables } = buildCreateDocument('UsageSnapshot', 'createUsageSnapshot', 'usageSnapshot', args.select, args.data, 'CreateUsageSnapshotInput', connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'mutation',
+            operationName: 'UsageSnapshot',
+            fieldName: 'createUsageSnapshot',
+            document,
+            variables,
+        });
+    }
+    update(args) {
+        const { document, variables } = buildUpdateByPkDocument('UsageSnapshot', 'updateUsageSnapshot', 'usageSnapshot', args.select, args.where.id, args.data, 'UpdateUsageSnapshotInput', 'id', 'usageSnapshotPatch', connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'mutation',
+            operationName: 'UsageSnapshot',
+            fieldName: 'updateUsageSnapshot',
+            document,
+            variables,
+        });
+    }
+    delete(args) {
+        const { document, variables } = buildDeleteByPkDocument('UsageSnapshot', 'deleteUsageSnapshot', 'usageSnapshot', {
+            id: args.where.id,
+        }, 'DeleteUsageSnapshotInput', args.select, connectionFieldsMap);
+        return new QueryBuilder({
+            client: this.client,
+            operation: 'mutation',
+            operationName: 'UsageSnapshot',
+            fieldName: 'deleteUsageSnapshot',
+            document,
+            variables,
+        });
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-sdk/cli",
-  "version": "0.20.9",
+  "version": "0.21.0",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive CLI SDK - Auto-generated GraphQL CLI with ORM client, context management, and interactive prompts",
   "main": "index.js",
@@ -46,21 +46,21 @@
   ],
   "dependencies": {
     "@0no-co/graphql.web": "^1.1.2",
-    "@constructive-io/graphql-query": "^3.22.0",
-    "@constructive-io/graphql-types": "^3.8.0",
+    "@constructive-io/graphql-query": "^3.23.0",
+    "@constructive-io/graphql-types": "^3.9.0",
     "appstash": "^0.7.0",
-    "gql-ast": "^3.8.0",
+    "gql-ast": "^3.9.0",
     "graphql": "16.13.0",
     "inquirerer": "^4.7.0",
     "nested-obj": "^0.2.2",
     "yanse": "^0.2.1"
   },
   "devDependencies": {
-    "@constructive-io/graphql-codegen": "^4.39.1",
+    "@constructive-io/graphql-codegen": "^4.40.0",
     "@types/node": "^22.19.11",
     "makage": "^0.3.0",
     "tsx": "^4.19.0",
     "typescript": "^5.9.3"
   },
-  "gitHead": "b54aef52c81be35a53e771003939d447aa34ba35"
+  "gitHead": "c665e2443ec98da61e9f372cf663cb9973afef4b"
 }

package/public/cli/commands/usage-snapshot.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI commands for UsageSnapshot
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;