@constructive-sdk/cli 0.22.3 → 0.22.5

package/esm/public/cli/commands.js

@@ -12,7 +12,6 @@ import getAllRecordCmd from './commands/get-all-record';
 import appPermissionCmd from './commands/app-permission';
 import orgPermissionCmd from './commands/org-permission';
 import objectCmd from './commands/object';
-import appLevelRequirementCmd from './commands/app-level-requirement';
 import databaseCmd from './commands/database';
 import schemaCmd from './commands/schema';
 import tableCmd from './commands/table';
@@ -63,14 +62,14 @@ import denormalizedTableFieldCmd from './commands/denormalized-table-field';
 import emailsModuleCmd from './commands/emails-module';
 import encryptedSecretsModuleCmd from './commands/encrypted-secrets-module';
 import invitesModuleCmd from './commands/invites-module';
-import levelsModuleCmd from './commands/levels-module';
+import eventsModuleCmd from './commands/events-module';
 import limitsModuleCmd from './commands/limits-module';
 import membershipTypesModuleCmd from './commands/membership-types-module';
 import membershipsModuleCmd from './commands/memberships-module';
 import permissionsModuleCmd from './commands/permissions-module';
 import phoneNumbersModuleCmd from './commands/phone-numbers-module';
 import profilesModuleCmd from './commands/profiles-module';
-import secretsModuleCmd from './commands/secrets-module';
+import userStateModuleCmd from './commands/user-state-module';
 import sessionsModuleCmd from './commands/sessions-module';
 import userAuthModuleCmd from './commands/user-auth-module';
 import usersModuleCmd from './commands/users-module';
@@ -102,9 +101,7 @@ import appLimitCreditRedemptionCmd from './commands/app-limit-credit-redemption'
 import orgLimitCmd from './commands/org-limit';
 import orgLimitCreditCmd from './commands/org-limit-credit';
 import orgLimitAggregateCmd from './commands/org-limit-aggregate';
-import appStepCmd from './commands/app-step';
-import appAchievementCmd from './commands/app-achievement';
-import appLevelCmd from './commands/app-level';
+import orgLimitWarningCmd from './commands/org-limit-warning';
 import emailCmd from './commands/email';
 import phoneNumberCmd from './commands/phone-number';
 import cryptoAddressCmd from './commands/crypto-address';
@@ -133,6 +130,7 @@ import devicesModuleCmd from './commands/devices-module';
 import nodeTypeRegistryCmd from './commands/node-type-registry';
 import appLimitDefaultCmd from './commands/app-limit-default';
 import orgLimitDefaultCmd from './commands/org-limit-default';
+import appLimitWarningCmd from './commands/app-limit-warning';
 import userConnectedAccountCmd from './commands/user-connected-account';
 import commitCmd from './commands/commit';
 import pubkeySettingCmd from './commands/pubkey-setting';
@@ -144,6 +142,7 @@ import rlsSettingCmd from './commands/rls-setting';
 import appLimitEventCmd from './commands/app-limit-event';
 import orgLimitEventCmd from './commands/org-limit-event';
 import rlsModuleCmd from './commands/rls-module';
+import rateLimitMetersModuleCmd from './commands/rate-limit-meters-module';
 import plansModuleCmd from './commands/plans-module';
 import sqlActionCmd from './commands/sql-action';
 import databaseSettingCmd from './commands/database-setting';
@@ -161,7 +160,6 @@ import currentIpAddressCmd from './commands/current-ip-address';
 import requireStepUpCmd from './commands/require-step-up';
 import appPermissionsGetPaddedMaskCmd from './commands/app-permissions-get-padded-mask';
 import orgPermissionsGetPaddedMaskCmd from './commands/org-permissions-get-padded-mask';
-import stepsAchievedCmd from './commands/steps-achieved';
 import revParseCmd from './commands/rev-parse';
 import resolveBlueprintFieldCmd from './commands/resolve-blueprint-field';
 import orgIsManagerOfCmd from './commands/org-is-manager-of';
@@ -175,7 +173,6 @@ import orgPermissionsGetByMaskCmd from './commands/org-permissions-get-by-mask';
 import getAllObjectsFromRootCmd from './commands/get-all-objects-from-root';
 import getPathObjectsFromRootCmd from './commands/get-path-objects-from-root';
 import getObjectAtPathCmd from './commands/get-object-at-path';
-import stepsRequiredCmd from './commands/steps-required';
 import currentUserCmd from './commands/current-user';
 import sendAccountDeletionEmailCmd from './commands/send-account-deletion-email';
 import signOutCmd from './commands/sign-out';
@@ -235,7 +232,6 @@ const createCommandMap = () => ({
     'app-permission': appPermissionCmd,
     'org-permission': orgPermissionCmd,
     object: objectCmd,
-    'app-level-requirement': appLevelRequirementCmd,
     database: databaseCmd,
     schema: schemaCmd,
     table: tableCmd,
@@ -286,14 +282,14 @@ const createCommandMap = () => ({
     'emails-module': emailsModuleCmd,
     'encrypted-secrets-module': encryptedSecretsModuleCmd,
     'invites-module': invitesModuleCmd,
-    'levels-module': levelsModuleCmd,
+    'events-module': eventsModuleCmd,
     'limits-module': limitsModuleCmd,
     'membership-types-module': membershipTypesModuleCmd,
     'memberships-module': membershipsModuleCmd,
     'permissions-module': permissionsModuleCmd,
     'phone-numbers-module': phoneNumbersModuleCmd,
     'profiles-module': profilesModuleCmd,
-    'secrets-module': secretsModuleCmd,
+    'user-state-module': userStateModuleCmd,
     'sessions-module': sessionsModuleCmd,
     'user-auth-module': userAuthModuleCmd,
     'users-module': usersModuleCmd,
@@ -325,9 +321,7 @@ const createCommandMap = () => ({
     'org-limit': orgLimitCmd,
     'org-limit-credit': orgLimitCreditCmd,
     'org-limit-aggregate': orgLimitAggregateCmd,
-    'app-step': appStepCmd,
-    'app-achievement': appAchievementCmd,
-    'app-level': appLevelCmd,
+    'org-limit-warning': orgLimitWarningCmd,
     email: emailCmd,
     'phone-number': phoneNumberCmd,
     'crypto-address': cryptoAddressCmd,
@@ -356,6 +350,7 @@ const createCommandMap = () => ({
     'node-type-registry': nodeTypeRegistryCmd,
     'app-limit-default': appLimitDefaultCmd,
     'org-limit-default': orgLimitDefaultCmd,
+    'app-limit-warning': appLimitWarningCmd,
     'user-connected-account': userConnectedAccountCmd,
     commit: commitCmd,
     'pubkey-setting': pubkeySettingCmd,
@@ -367,6 +362,7 @@ const createCommandMap = () => ({
     'app-limit-event': appLimitEventCmd,
     'org-limit-event': orgLimitEventCmd,
     'rls-module': rlsModuleCmd,
+    'rate-limit-meters-module': rateLimitMetersModuleCmd,
     'plans-module': plansModuleCmd,
     'sql-action': sqlActionCmd,
     'database-setting': databaseSettingCmd,
@@ -384,7 +380,6 @@ const createCommandMap = () => ({
     'require-step-up': requireStepUpCmd,
     'app-permissions-get-padded-mask': appPermissionsGetPaddedMaskCmd,
     'org-permissions-get-padded-mask': orgPermissionsGetPaddedMaskCmd,
-    'steps-achieved': stepsAchievedCmd,
     'rev-parse': revParseCmd,
     'resolve-blueprint-field': resolveBlueprintFieldCmd,
     'org-is-manager-of': orgIsManagerOfCmd,
@@ -398,7 +393,6 @@ const createCommandMap = () => ({
     'get-all-objects-from-root': getAllObjectsFromRootCmd,
     'get-path-objects-from-root': getPathObjectsFromRootCmd,
     'get-object-at-path': getObjectAtPathCmd,
-    'steps-required': stepsRequiredCmd,
     'current-user': currentUserCmd,
     'send-account-deletion-email': sendAccountDeletionEmailCmd,
     'sign-out': signOutCmd,
@@ -450,7 +444,7 @@ const createCommandMap = () => ({
     'provision-table': provisionTableCmd,
     'provision-bucket': provisionBucketCmd,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  object               object CRUD operations\n  app-level-requirement appLevelRequirement CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  partition            partition CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  levels-module        levelsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  secrets-module       secretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  app-step             appStep CRUD operations\n  app-achievement      appAchievement CRUD operations\n  app-level            appLevel CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  agent-thread         agentThread CRUD operations\n  agent-message        agentMessage CRUD operations\n  agent-task           agentTask CRUD operations\n  role-type            roleType CRUD operations\n  identity-provider    identityProvider CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  membership-type      membershipType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  commit               commit CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  usage-snapshot       usageSnapshot CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  rls-module           rlsModule CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  database-setting     databaseSetting CRUD operations\n  billing-module       billingModule CRUD operations\n  ast-migration        astMigration CRUD operations\n  user                 user CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  app-membership       appMembership CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  steps-achieved       stepsAchieved\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  steps-required       Reads and enables pagination through a set of `AppLevelRequirement`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Seven phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include levels/achievements (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  object               object CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  partition            partition CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  events-module        eventsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  org-limit-warning    orgLimitWarning CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  agent-thread         agentThread CRUD operations\n  agent-message        agentMessage CRUD operations\n  agent-task           agentTask CRUD operations\n  role-type            roleType CRUD operations\n  identity-provider    identityProvider CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  membership-type      membershipType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  app-limit-warning    appLimitWarning CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  commit               commit CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  usage-snapshot       usageSnapshot CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  rls-module           rlsModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  database-setting     databaseSetting CRUD operations\n  billing-module       billingModule CRUD operations\n  ast-migration        astMigration CRUD operations\n  user                 user CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  app-membership       appMembership CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (0.5) app-level storage, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include events/analytics (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
 export const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/esm/public/cli/executor.d.ts

@@ -6,7 +6,6 @@ export declare function getClient(contextName?: string): {
     appPermission: import("..").AppPermissionModel;
     orgPermission: import("..").OrgPermissionModel;
     object: import("..").ObjectModel;
-    appLevelRequirement: import("..").AppLevelRequirementModel;
     database: import("..").DatabaseModel;
     schema: import("..").SchemaModel;
     table: import("..").TableModel;
@@ -57,14 +56,14 @@ export declare function getClient(contextName?: string): {
     emailsModule: import("..").EmailsModuleModel;
     encryptedSecretsModule: import("..").EncryptedSecretsModuleModel;
     invitesModule: import("..").InvitesModuleModel;
-    levelsModule: import("..").LevelsModuleModel;
+    eventsModule: import("..").EventsModuleModel;
     limitsModule: import("..").LimitsModuleModel;
     membershipTypesModule: import("..").MembershipTypesModuleModel;
     membershipsModule: import("..").MembershipsModuleModel;
     permissionsModule: import("..").PermissionsModuleModel;
     phoneNumbersModule: import("..").PhoneNumbersModuleModel;
     profilesModule: import("..").ProfilesModuleModel;
-    secretsModule: import("..").SecretsModuleModel;
+    userStateModule: import("..").UserStateModuleModel;
     sessionsModule: import("..").SessionsModuleModel;
     userAuthModule: import("..").UserAuthModuleModel;
     usersModule: import("..").UsersModuleModel;
@@ -96,9 +95,7 @@ export declare function getClient(contextName?: string): {
     orgLimit: import("..").OrgLimitModel;
     orgLimitCredit: import("..").OrgLimitCreditModel;
     orgLimitAggregate: import("..").OrgLimitAggregateModel;
-    appStep: import("..").AppStepModel;
-    appAchievement: import("..").AppAchievementModel;
-    appLevel: import("..").AppLevelModel;
+    orgLimitWarning: import("..").OrgLimitWarningModel;
     email: import("..").EmailModel;
     phoneNumber: import("..").PhoneNumberModel;
     cryptoAddress: import("..").CryptoAddressModel;
@@ -127,6 +124,7 @@ export declare function getClient(contextName?: string): {
     nodeTypeRegistry: import("..").NodeTypeRegistryModel;
     appLimitDefault: import("..").AppLimitDefaultModel;
     orgLimitDefault: import("..").OrgLimitDefaultModel;
+    appLimitWarning: import("..").AppLimitWarningModel;
     userConnectedAccount: import("..").UserConnectedAccountModel;
     commit: import("..").CommitModel;
     pubkeySetting: import("..").PubkeySettingModel;
@@ -138,6 +136,7 @@ export declare function getClient(contextName?: string): {
     appLimitEvent: import("..").AppLimitEventModel;
     orgLimitEvent: import("..").OrgLimitEventModel;
     rlsModule: import("..").RlsModuleModel;
+    rateLimitMetersModule: import("..").RateLimitMetersModuleModel;
     plansModule: import("..").PlansModuleModel;
     sqlAction: import("..").SqlActionModel;
     databaseSetting: import("..").DatabaseSettingModel;
@@ -180,11 +179,6 @@ export declare function getClient(contextName?: string): {
         }) => import("..").QueryBuilder<{
             orgPermissionsGetPaddedMask: string | null;
         }>;
-        stepsAchieved: (args: import("../orm/query").StepsAchievedVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("..").QueryBuilder<{
-            stepsAchieved: boolean | null;
-        }>;
         revParse: (args: import("../orm/query").RevParseVariables, options?: {
             select?: Record<string, unknown>;
         }) => import("..").QueryBuilder<{
@@ -250,11 +244,6 @@ export declare function getClient(contextName?: string): {
         } & import("..").StrictSelect<S, import("../orm/input-types").ObjectSelect>) => import("..").QueryBuilder<{
             getObjectAtPath: import("..").InferSelectResult<import("../orm/input-types").Object, S> | null;
         }>;
-        stepsRequired: (args: import("../orm/query").StepsRequiredVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("..").QueryBuilder<{
-            stepsRequired: import("../orm/input-types").AppLevelRequirementConnection | null;
-        }>;
         currentUser: <S extends import("../orm/input-types").UserSelect>(options: {
             select: S;
         } & import("..").StrictSelect<S, import("../orm/input-types").UserSelect>) => import("..").QueryBuilder<{

package/esm/public/orm/index.d.ts

@@ -5,7 +5,6 @@ import { GetAllRecordModel } from './models/getAllRecord';
 import { AppPermissionModel } from './models/appPermission';
 import { OrgPermissionModel } from './models/orgPermission';
 import { ObjectModel } from './models/object';
-import { AppLevelRequirementModel } from './models/appLevelRequirement';
 import { DatabaseModel } from './models/database';
 import { SchemaModel } from './models/schema';
 import { TableModel } from './models/table';
@@ -56,14 +55,14 @@ import { DenormalizedTableFieldModel } from './models/denormalizedTableField';
 import { EmailsModuleModel } from './models/emailsModule';
 import { EncryptedSecretsModuleModel } from './models/encryptedSecretsModule';
 import { InvitesModuleModel } from './models/invitesModule';
-import { LevelsModuleModel } from './models/levelsModule';
+import { EventsModuleModel } from './models/eventsModule';
 import { LimitsModuleModel } from './models/limitsModule';
 import { MembershipTypesModuleModel } from './models/membershipTypesModule';
 import { MembershipsModuleModel } from './models/membershipsModule';
 import { PermissionsModuleModel } from './models/permissionsModule';
 import { PhoneNumbersModuleModel } from './models/phoneNumbersModule';
 import { ProfilesModuleModel } from './models/profilesModule';
-import { SecretsModuleModel } from './models/secretsModule';
+import { UserStateModuleModel } from './models/userStateModule';
 import { SessionsModuleModel } from './models/sessionsModule';
 import { UserAuthModuleModel } from './models/userAuthModule';
 import { UsersModuleModel } from './models/usersModule';
@@ -95,9 +94,7 @@ import { AppLimitCreditRedemptionModel } from './models/appLimitCreditRedemption
 import { OrgLimitModel } from './models/orgLimit';
 import { OrgLimitCreditModel } from './models/orgLimitCredit';
 import { OrgLimitAggregateModel } from './models/orgLimitAggregate';
-import { AppStepModel } from './models/appStep';
-import { AppAchievementModel } from './models/appAchievement';
-import { AppLevelModel } from './models/appLevel';
+import { OrgLimitWarningModel } from './models/orgLimitWarning';
 import { EmailModel } from './models/email';
 import { PhoneNumberModel } from './models/phoneNumber';
 import { CryptoAddressModel } from './models/cryptoAddress';
@@ -126,6 +123,7 @@ import { DevicesModuleModel } from './models/devicesModule';
 import { NodeTypeRegistryModel } from './models/nodeTypeRegistry';
 import { AppLimitDefaultModel } from './models/appLimitDefault';
 import { OrgLimitDefaultModel } from './models/orgLimitDefault';
+import { AppLimitWarningModel } from './models/appLimitWarning';
 import { UserConnectedAccountModel } from './models/userConnectedAccount';
 import { CommitModel } from './models/commit';
 import { PubkeySettingModel } from './models/pubkeySetting';
@@ -137,6 +135,7 @@ import { RlsSettingModel } from './models/rlsSetting';
 import { AppLimitEventModel } from './models/appLimitEvent';
 import { OrgLimitEventModel } from './models/orgLimitEvent';
 import { RlsModuleModel } from './models/rlsModule';
+import { RateLimitMetersModuleModel } from './models/rateLimitMetersModule';
 import { PlansModuleModel } from './models/plansModule';
 import { SqlActionModel } from './models/sqlAction';
 import { DatabaseSettingModel } from './models/databaseSetting';
@@ -185,7 +184,6 @@ export declare function createClient(config: OrmClientConfig): {
     appPermission: AppPermissionModel;
     orgPermission: OrgPermissionModel;
     object: ObjectModel;
-    appLevelRequirement: AppLevelRequirementModel;
     database: DatabaseModel;
     schema: SchemaModel;
     table: TableModel;
@@ -236,14 +234,14 @@ export declare function createClient(config: OrmClientConfig): {
     emailsModule: EmailsModuleModel;
     encryptedSecretsModule: EncryptedSecretsModuleModel;
     invitesModule: InvitesModuleModel;
-    levelsModule: LevelsModuleModel;
+    eventsModule: EventsModuleModel;
     limitsModule: LimitsModuleModel;
     membershipTypesModule: MembershipTypesModuleModel;
     membershipsModule: MembershipsModuleModel;
     permissionsModule: PermissionsModuleModel;
     phoneNumbersModule: PhoneNumbersModuleModel;
     profilesModule: ProfilesModuleModel;
-    secretsModule: SecretsModuleModel;
+    userStateModule: UserStateModuleModel;
     sessionsModule: SessionsModuleModel;
     userAuthModule: UserAuthModuleModel;
     usersModule: UsersModuleModel;
@@ -275,9 +273,7 @@ export declare function createClient(config: OrmClientConfig): {
     orgLimit: OrgLimitModel;
     orgLimitCredit: OrgLimitCreditModel;
     orgLimitAggregate: OrgLimitAggregateModel;
-    appStep: AppStepModel;
-    appAchievement: AppAchievementModel;
-    appLevel: AppLevelModel;
+    orgLimitWarning: OrgLimitWarningModel;
     email: EmailModel;
     phoneNumber: PhoneNumberModel;
     cryptoAddress: CryptoAddressModel;
@@ -306,6 +302,7 @@ export declare function createClient(config: OrmClientConfig): {
     nodeTypeRegistry: NodeTypeRegistryModel;
     appLimitDefault: AppLimitDefaultModel;
     orgLimitDefault: OrgLimitDefaultModel;
+    appLimitWarning: AppLimitWarningModel;
     userConnectedAccount: UserConnectedAccountModel;
     commit: CommitModel;
     pubkeySetting: PubkeySettingModel;
@@ -317,6 +314,7 @@ export declare function createClient(config: OrmClientConfig): {
     appLimitEvent: AppLimitEventModel;
     orgLimitEvent: OrgLimitEventModel;
     rlsModule: RlsModuleModel;
+    rateLimitMetersModule: RateLimitMetersModuleModel;
     plansModule: PlansModuleModel;
     sqlAction: SqlActionModel;
     databaseSetting: DatabaseSettingModel;
@@ -359,11 +357,6 @@ export declare function createClient(config: OrmClientConfig): {
         }) => import("./query-builder").QueryBuilder<{
             orgPermissionsGetPaddedMask: string | null;
         }>;
-        stepsAchieved: (args: import("./query").StepsAchievedVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("./query-builder").QueryBuilder<{
-            stepsAchieved: boolean | null;
-        }>;
         revParse: (args: import("./query").RevParseVariables, options?: {
             select?: Record<string, unknown>;
         }) => import("./query-builder").QueryBuilder<{
@@ -429,11 +422,6 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").ObjectSelect>) => import("./query-builder").QueryBuilder<{
             getObjectAtPath: import("./select-types").InferSelectResult<import("./input-types").Object, S> | null;
         }>;
-        stepsRequired: (args: import("./query").StepsRequiredVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("./query-builder").QueryBuilder<{
-            stepsRequired: import("./input-types").AppLevelRequirementConnection | null;
-        }>;
         currentUser: <S extends import("./input-types").UserSelect>(options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").UserSelect>) => import("./query-builder").QueryBuilder<{

package/esm/public/orm/index.js

@@ -10,7 +10,6 @@ import { GetAllRecordModel } from './models/getAllRecord';
 import { AppPermissionModel } from './models/appPermission';
 import { OrgPermissionModel } from './models/orgPermission';
 import { ObjectModel } from './models/object';
-import { AppLevelRequirementModel } from './models/appLevelRequirement';
 import { DatabaseModel } from './models/database';
 import { SchemaModel } from './models/schema';
 import { TableModel } from './models/table';
@@ -61,14 +60,14 @@ import { DenormalizedTableFieldModel } from './models/denormalizedTableField';
 import { EmailsModuleModel } from './models/emailsModule';
 import { EncryptedSecretsModuleModel } from './models/encryptedSecretsModule';
 import { InvitesModuleModel } from './models/invitesModule';
-import { LevelsModuleModel } from './models/levelsModule';
+import { EventsModuleModel } from './models/eventsModule';
 import { LimitsModuleModel } from './models/limitsModule';
 import { MembershipTypesModuleModel } from './models/membershipTypesModule';
 import { MembershipsModuleModel } from './models/membershipsModule';
 import { PermissionsModuleModel } from './models/permissionsModule';
 import { PhoneNumbersModuleModel } from './models/phoneNumbersModule';
 import { ProfilesModuleModel } from './models/profilesModule';
-import { SecretsModuleModel } from './models/secretsModule';
+import { UserStateModuleModel } from './models/userStateModule';
 import { SessionsModuleModel } from './models/sessionsModule';
 import { UserAuthModuleModel } from './models/userAuthModule';
 import { UsersModuleModel } from './models/usersModule';
@@ -100,9 +99,7 @@ import { AppLimitCreditRedemptionModel } from './models/appLimitCreditRedemption
 import { OrgLimitModel } from './models/orgLimit';
 import { OrgLimitCreditModel } from './models/orgLimitCredit';
 import { OrgLimitAggregateModel } from './models/orgLimitAggregate';
-import { AppStepModel } from './models/appStep';
-import { AppAchievementModel } from './models/appAchievement';
-import { AppLevelModel } from './models/appLevel';
+import { OrgLimitWarningModel } from './models/orgLimitWarning';
 import { EmailModel } from './models/email';
 import { PhoneNumberModel } from './models/phoneNumber';
 import { CryptoAddressModel } from './models/cryptoAddress';
@@ -131,6 +128,7 @@ import { DevicesModuleModel } from './models/devicesModule';
 import { NodeTypeRegistryModel } from './models/nodeTypeRegistry';
 import { AppLimitDefaultModel } from './models/appLimitDefault';
 import { OrgLimitDefaultModel } from './models/orgLimitDefault';
+import { AppLimitWarningModel } from './models/appLimitWarning';
 import { UserConnectedAccountModel } from './models/userConnectedAccount';
 import { CommitModel } from './models/commit';
 import { PubkeySettingModel } from './models/pubkeySetting';
@@ -142,6 +140,7 @@ import { RlsSettingModel } from './models/rlsSetting';
 import { AppLimitEventModel } from './models/appLimitEvent';
 import { OrgLimitEventModel } from './models/orgLimitEvent';
 import { RlsModuleModel } from './models/rlsModule';
+import { RateLimitMetersModuleModel } from './models/rateLimitMetersModule';
 import { PlansModuleModel } from './models/plansModule';
 import { SqlActionModel } from './models/sqlAction';
 import { DatabaseSettingModel } from './models/databaseSetting';
@@ -193,7 +192,6 @@ export function createClient(config) {
         appPermission: new AppPermissionModel(client),
         orgPermission: new OrgPermissionModel(client),
         object: new ObjectModel(client),
-        appLevelRequirement: new AppLevelRequirementModel(client),
         database: new DatabaseModel(client),
         schema: new SchemaModel(client),
         table: new TableModel(client),
@@ -244,14 +242,14 @@ export function createClient(config) {
         emailsModule: new EmailsModuleModel(client),
         encryptedSecretsModule: new EncryptedSecretsModuleModel(client),
         invitesModule: new InvitesModuleModel(client),
-        levelsModule: new LevelsModuleModel(client),
+        eventsModule: new EventsModuleModel(client),
         limitsModule: new LimitsModuleModel(client),
         membershipTypesModule: new MembershipTypesModuleModel(client),
         membershipsModule: new MembershipsModuleModel(client),
         permissionsModule: new PermissionsModuleModel(client),
         phoneNumbersModule: new PhoneNumbersModuleModel(client),
         profilesModule: new ProfilesModuleModel(client),
-        secretsModule: new SecretsModuleModel(client),
+        userStateModule: new UserStateModuleModel(client),
         sessionsModule: new SessionsModuleModel(client),
         userAuthModule: new UserAuthModuleModel(client),
         usersModule: new UsersModuleModel(client),
@@ -283,9 +281,7 @@ export function createClient(config) {
         orgLimit: new OrgLimitModel(client),
         orgLimitCredit: new OrgLimitCreditModel(client),
         orgLimitAggregate: new OrgLimitAggregateModel(client),
-        appStep: new AppStepModel(client),
-        appAchievement: new AppAchievementModel(client),
-        appLevel: new AppLevelModel(client),
+        orgLimitWarning: new OrgLimitWarningModel(client),
         email: new EmailModel(client),
         phoneNumber: new PhoneNumberModel(client),
         cryptoAddress: new CryptoAddressModel(client),
@@ -314,6 +310,7 @@ export function createClient(config) {
         nodeTypeRegistry: new NodeTypeRegistryModel(client),
         appLimitDefault: new AppLimitDefaultModel(client),
         orgLimitDefault: new OrgLimitDefaultModel(client),
+        appLimitWarning: new AppLimitWarningModel(client),
         userConnectedAccount: new UserConnectedAccountModel(client),
         commit: new CommitModel(client),
         pubkeySetting: new PubkeySettingModel(client),
@@ -325,6 +322,7 @@ export function createClient(config) {
         appLimitEvent: new AppLimitEventModel(client),
         orgLimitEvent: new OrgLimitEventModel(client),
         rlsModule: new RlsModuleModel(client),
+        rateLimitMetersModule: new RateLimitMetersModuleModel(client),
         plansModule: new PlansModuleModel(client),
         sqlAction: new SqlActionModel(client),
         databaseSetting: new DatabaseSettingModel(client),