@constructive-sdk/cli 0.23.3 → 0.24.0

package/esm/public/cli/commands.js

@@ -8,10 +8,8 @@ import contextCmd from './commands/context';
 import authCmd from './commands/auth';
 import orgGetManagersRecordCmd from './commands/org-get-managers-record';
 import orgGetSubordinatesRecordCmd from './commands/org-get-subordinates-record';
-import getAllRecordCmd from './commands/get-all-record';
 import appPermissionCmd from './commands/app-permission';
 import orgPermissionCmd from './commands/org-permission';
-import objectCmd from './commands/object';
 import databaseCmd from './commands/database';
 import schemaCmd from './commands/schema';
 import tableCmd from './commands/table';
@@ -36,6 +34,7 @@ import relationProvisionCmd from './commands/relation-provision';
 import sessionSecretsModuleCmd from './commands/session-secrets-module';
 import identityProvidersModuleCmd from './commands/identity-providers-module';
 import realtimeModuleCmd from './commands/realtime-module';
+import configSecretsOrgModuleCmd from './commands/config-secrets-org-module';
 import schemaGrantCmd from './commands/schema-grant';
 import defaultPrivilegeCmd from './commands/default-privilege';
 import enumCmd from './commands/enum';
@@ -47,9 +46,11 @@ import siteMetadatumCmd from './commands/site-metadatum';
 import siteModuleCmd from './commands/site-module';
 import siteThemeCmd from './commands/site-theme';
 import corsSettingCmd from './commands/cors-setting';
+import merkleStoreModuleCmd from './commands/merkle-store-module';
+import graphModuleCmd from './commands/graph-module';
 import triggerFunctionCmd from './commands/trigger-function';
-import databaseTransferCmd from './commands/database-transfer';
 import partitionCmd from './commands/partition';
+import databaseTransferCmd from './commands/database-transfer';
 import apiCmd from './commands/api';
 import siteCmd from './commands/site';
 import appCmd from './commands/app';
@@ -60,7 +61,7 @@ import cryptoAuthModuleCmd from './commands/crypto-auth-module';
 import defaultIdsModuleCmd from './commands/default-ids-module';
 import denormalizedTableFieldCmd from './commands/denormalized-table-field';
 import emailsModuleCmd from './commands/emails-module';
-import encryptedSecretsModuleCmd from './commands/encrypted-secrets-module';
+import configSecretsUserModuleCmd from './commands/config-secrets-user-module';
 import invitesModuleCmd from './commands/invites-module';
 import eventsModuleCmd from './commands/events-module';
 import limitsModuleCmd from './commands/limits-module';
@@ -81,6 +82,14 @@ import entityTypeProvisionCmd from './commands/entity-type-provision';
 import webauthnCredentialsModuleCmd from './commands/webauthn-credentials-module';
 import webauthnAuthModuleCmd from './commands/webauthn-auth-module';
 import notificationsModuleCmd from './commands/notifications-module';
+import inferenceLogModuleCmd from './commands/inference-log-module';
+import computeLogModuleCmd from './commands/compute-log-module';
+import transferLogModuleCmd from './commands/transfer-log-module';
+import storageLogModuleCmd from './commands/storage-log-module';
+import dbUsageModuleCmd from './commands/db-usage-module';
+import agentModuleCmd from './commands/agent-module';
+import namespaceModuleCmd from './commands/namespace-module';
+import functionModuleCmd from './commands/function-module';
 import databaseProvisionModuleCmd from './commands/database-provision-module';
 import appAdminGrantCmd from './commands/app-admin-grant';
 import appOwnerGrantCmd from './commands/app-owner-grant';
@@ -110,48 +119,41 @@ import appInviteCmd from './commands/app-invite';
 import appClaimedInviteCmd from './commands/app-claimed-invite';
 import orgInviteCmd from './commands/org-invite';
 import orgClaimedInviteCmd from './commands/org-claimed-invite';
-import auditLogCmd from './commands/audit-log';
-import agentThreadCmd from './commands/agent-thread';
-import agentMessageCmd from './commands/agent-message';
-import agentTaskCmd from './commands/agent-task';
-import roleTypeCmd from './commands/role-type';
+import auditLogAuthCmd from './commands/audit-log-auth';
 import identityProviderCmd from './commands/identity-provider';
-import refCmd from './commands/ref';
-import storeCmd from './commands/store';
 import appPermissionDefaultCmd from './commands/app-permission-default';
-import appLimitCreditCodeCmd from './commands/app-limit-credit-code';
+import roleTypeCmd from './commands/role-type';
+import migrateFileCmd from './commands/migrate-file';
+import devicesModuleCmd from './commands/devices-module';
+import appMembershipDefaultCmd from './commands/app-membership-default';
+import orgMembershipDefaultCmd from './commands/org-membership-default';
+import nodeTypeRegistryCmd from './commands/node-type-registry';
 import appLimitCapsDefaultCmd from './commands/app-limit-caps-default';
 import orgLimitCapsDefaultCmd from './commands/org-limit-caps-default';
 import appLimitCapCmd from './commands/app-limit-cap';
 import orgLimitCapCmd from './commands/org-limit-cap';
-import membershipTypeCmd from './commands/membership-type';
-import migrateFileCmd from './commands/migrate-file';
-import devicesModuleCmd from './commands/devices-module';
-import nodeTypeRegistryCmd from './commands/node-type-registry';
+import userConnectedAccountCmd from './commands/user-connected-account';
 import appLimitDefaultCmd from './commands/app-limit-default';
 import orgLimitDefaultCmd from './commands/org-limit-default';
+import appLimitCreditCodeCmd from './commands/app-limit-credit-code';
 import appLimitWarningCmd from './commands/app-limit-warning';
-import userConnectedAccountCmd from './commands/user-connected-account';
-import commitCmd from './commands/commit';
 import pubkeySettingCmd from './commands/pubkey-setting';
 import rateLimitsModuleCmd from './commands/rate-limits-module';
-import usageSnapshotCmd from './commands/usage-snapshot';
-import appMembershipDefaultCmd from './commands/app-membership-default';
-import orgMembershipDefaultCmd from './commands/org-membership-default';
+import membershipTypeCmd from './commands/membership-type';
 import rlsSettingCmd from './commands/rls-setting';
-import appLimitEventCmd from './commands/app-limit-event';
-import orgLimitEventCmd from './commands/org-limit-event';
 import rlsModuleCmd from './commands/rls-module';
 import rateLimitMetersModuleCmd from './commands/rate-limit-meters-module';
 import plansModuleCmd from './commands/plans-module';
 import sqlActionCmd from './commands/sql-action';
 import databaseSettingCmd from './commands/database-setting';
-import billingModuleCmd from './commands/billing-module';
-import astMigrationCmd from './commands/ast-migration';
-import userCmd from './commands/user';
 import orgMembershipSettingCmd from './commands/org-membership-setting';
-import webauthnSettingCmd from './commands/webauthn-setting';
+import appLimitEventCmd from './commands/app-limit-event';
+import orgLimitEventCmd from './commands/org-limit-event';
 import appMembershipCmd from './commands/app-membership';
+import userCmd from './commands/user';
+import astMigrationCmd from './commands/ast-migration';
+import webauthnSettingCmd from './commands/webauthn-setting';
+import billingModuleCmd from './commands/billing-module';
 import billingProviderModuleCmd from './commands/billing-provider-module';
 import hierarchyModuleCmd from './commands/hierarchy-module';
 import currentUserIdCmd from './commands/current-user-id';
@@ -160,19 +162,16 @@ import currentIpAddressCmd from './commands/current-ip-address';
 import requireStepUpCmd from './commands/require-step-up';
 import appPermissionsGetPaddedMaskCmd from './commands/app-permissions-get-padded-mask';
 import orgPermissionsGetPaddedMaskCmd from './commands/org-permissions-get-padded-mask';
-import revParseCmd from './commands/rev-parse';
+import applyRegistryDefaultsCmd from './commands/apply-registry-defaults';
 import resolveBlueprintFieldCmd from './commands/resolve-blueprint-field';
+import resolveBlueprintTableCmd from './commands/resolve-blueprint-table';
 import orgIsManagerOfCmd from './commands/org-is-manager-of';
 import appPermissionsGetMaskCmd from './commands/app-permissions-get-mask';
 import orgPermissionsGetMaskCmd from './commands/org-permissions-get-mask';
-import resolveBlueprintTableCmd from './commands/resolve-blueprint-table';
 import appPermissionsGetMaskByNamesCmd from './commands/app-permissions-get-mask-by-names';
 import orgPermissionsGetMaskByNamesCmd from './commands/org-permissions-get-mask-by-names';
 import appPermissionsGetByMaskCmd from './commands/app-permissions-get-by-mask';
 import orgPermissionsGetByMaskCmd from './commands/org-permissions-get-by-mask';
-import getAllObjectsFromRootCmd from './commands/get-all-objects-from-root';
-import getPathObjectsFromRootCmd from './commands/get-path-objects-from-root';
-import getObjectAtPathCmd from './commands/get-object-at-path';
 import currentUserCmd from './commands/current-user';
 import sendAccountDeletionEmailCmd from './commands/send-account-deletion-email';
 import signOutCmd from './commands/sign-out';
@@ -190,48 +189,38 @@ import checkPasswordCmd from './commands/check-password';
 import confirmDeleteAccountCmd from './commands/confirm-delete-account';
 import setPasswordCmd from './commands/set-password';
 import verifyEmailCmd from './commands/verify-email';
-import freezeObjectsCmd from './commands/freeze-objects';
-import initEmptyRepoCmd from './commands/init-empty-repo';
 import constructBlueprintCmd from './commands/construct-blueprint';
 import provisionNewUserCmd from './commands/provision-new-user';
 import resetPasswordCmd from './commands/reset-password';
-import removeNodeAtPathCmd from './commands/remove-node-at-path';
-import copyTemplateToBlueprintCmd from './commands/copy-template-to-blueprint';
-import provisionSpatialRelationCmd from './commands/provision-spatial-relation';
-import bootstrapUserCmd from './commands/bootstrap-user';
-import setFieldOrderCmd from './commands/set-field-order';
 import provisionCheckConstraintCmd from './commands/provision-check-constraint';
 import provisionUniqueConstraintCmd from './commands/provision-unique-constraint';
 import provisionFullTextSearchCmd from './commands/provision-full-text-search';
 import provisionIndexCmd from './commands/provision-index';
-import setDataAtPathCmd from './commands/set-data-at-path';
-import setPropsAndCommitCmd from './commands/set-props-and-commit';
-import provisionDatabaseWithUserCmd from './commands/provision-database-with-user';
-import insertNodeAtPathCmd from './commands/insert-node-at-path';
-import updateNodeAtPathCmd from './commands/update-node-at-path';
-import setAndCommitCmd from './commands/set-and-commit';
+import copyTemplateToBlueprintCmd from './commands/copy-template-to-blueprint';
+import provisionSpatialRelationCmd from './commands/provision-spatial-relation';
+import signInCrossOriginCmd from './commands/sign-in-cross-origin';
+import bootstrapUserCmd from './commands/bootstrap-user';
+import signUpCmd from './commands/sign-up';
+import signInCmd from './commands/sign-in';
 import provisionRelationCmd from './commands/provision-relation';
+import setFieldOrderCmd from './commands/set-field-order';
 import applyRlsCmd from './commands/apply-rls';
-import signInCrossOriginCmd from './commands/sign-in-cross-origin';
+import provisionDatabaseWithUserCmd from './commands/provision-database-with-user';
 import createUserDatabaseCmd from './commands/create-user-database';
 import extendTokenExpiresCmd from './commands/extend-token-expires';
 import createApiKeyCmd from './commands/create-api-key';
-import sendVerificationEmailCmd from './commands/send-verification-email';
-import forgotPasswordCmd from './commands/forgot-password';
-import signUpCmd from './commands/sign-up';
 import requestCrossOriginTokenCmd from './commands/request-cross-origin-token';
-import signInCmd from './commands/sign-in';
 import provisionTableCmd from './commands/provision-table';
+import sendVerificationEmailCmd from './commands/send-verification-email';
+import forgotPasswordCmd from './commands/forgot-password';
 import provisionBucketCmd from './commands/provision-bucket';
 const createCommandMap = () => ({
     context: contextCmd,
     auth: authCmd,
     'org-get-managers-record': orgGetManagersRecordCmd,
     'org-get-subordinates-record': orgGetSubordinatesRecordCmd,
-    'get-all-record': getAllRecordCmd,
     'app-permission': appPermissionCmd,
     'org-permission': orgPermissionCmd,
-    object: objectCmd,
     database: databaseCmd,
     schema: schemaCmd,
     table: tableCmd,
@@ -256,6 +245,7 @@ const createCommandMap = () => ({
     'session-secrets-module': sessionSecretsModuleCmd,
     'identity-providers-module': identityProvidersModuleCmd,
     'realtime-module': realtimeModuleCmd,
+    'config-secrets-org-module': configSecretsOrgModuleCmd,
     'schema-grant': schemaGrantCmd,
     'default-privilege': defaultPrivilegeCmd,
     enum: enumCmd,
@@ -267,9 +257,11 @@ const createCommandMap = () => ({
     'site-module': siteModuleCmd,
     'site-theme': siteThemeCmd,
     'cors-setting': corsSettingCmd,
+    'merkle-store-module': merkleStoreModuleCmd,
+    'graph-module': graphModuleCmd,
     'trigger-function': triggerFunctionCmd,
-    'database-transfer': databaseTransferCmd,
     partition: partitionCmd,
+    'database-transfer': databaseTransferCmd,
     api: apiCmd,
     site: siteCmd,
     app: appCmd,
@@ -280,7 +272,7 @@ const createCommandMap = () => ({
     'default-ids-module': defaultIdsModuleCmd,
     'denormalized-table-field': denormalizedTableFieldCmd,
     'emails-module': emailsModuleCmd,
-    'encrypted-secrets-module': encryptedSecretsModuleCmd,
+    'config-secrets-user-module': configSecretsUserModuleCmd,
     'invites-module': invitesModuleCmd,
     'events-module': eventsModuleCmd,
     'limits-module': limitsModuleCmd,
@@ -301,6 +293,14 @@ const createCommandMap = () => ({
     'webauthn-credentials-module': webauthnCredentialsModuleCmd,
     'webauthn-auth-module': webauthnAuthModuleCmd,
     'notifications-module': notificationsModuleCmd,
+    'inference-log-module': inferenceLogModuleCmd,
+    'compute-log-module': computeLogModuleCmd,
+    'transfer-log-module': transferLogModuleCmd,
+    'storage-log-module': storageLogModuleCmd,
+    'db-usage-module': dbUsageModuleCmd,
+    'agent-module': agentModuleCmd,
+    'namespace-module': namespaceModuleCmd,
+    'function-module': functionModuleCmd,
     'database-provision-module': databaseProvisionModuleCmd,
     'app-admin-grant': appAdminGrantCmd,
     'app-owner-grant': appOwnerGrantCmd,
@@ -330,48 +330,41 @@ const createCommandMap = () => ({
     'app-claimed-invite': appClaimedInviteCmd,
     'org-invite': orgInviteCmd,
     'org-claimed-invite': orgClaimedInviteCmd,
-    'audit-log': auditLogCmd,
-    'agent-thread': agentThreadCmd,
-    'agent-message': agentMessageCmd,
-    'agent-task': agentTaskCmd,
-    'role-type': roleTypeCmd,
+    'audit-log-auth': auditLogAuthCmd,
     'identity-provider': identityProviderCmd,
-    ref: refCmd,
-    store: storeCmd,
     'app-permission-default': appPermissionDefaultCmd,
-    'app-limit-credit-code': appLimitCreditCodeCmd,
+    'role-type': roleTypeCmd,
+    'migrate-file': migrateFileCmd,
+    'devices-module': devicesModuleCmd,
+    'app-membership-default': appMembershipDefaultCmd,
+    'org-membership-default': orgMembershipDefaultCmd,
+    'node-type-registry': nodeTypeRegistryCmd,
     'app-limit-caps-default': appLimitCapsDefaultCmd,
     'org-limit-caps-default': orgLimitCapsDefaultCmd,
     'app-limit-cap': appLimitCapCmd,
     'org-limit-cap': orgLimitCapCmd,
-    'membership-type': membershipTypeCmd,
-    'migrate-file': migrateFileCmd,
-    'devices-module': devicesModuleCmd,
-    'node-type-registry': nodeTypeRegistryCmd,
+    'user-connected-account': userConnectedAccountCmd,
     'app-limit-default': appLimitDefaultCmd,
     'org-limit-default': orgLimitDefaultCmd,
+    'app-limit-credit-code': appLimitCreditCodeCmd,
     'app-limit-warning': appLimitWarningCmd,
-    'user-connected-account': userConnectedAccountCmd,
-    commit: commitCmd,
     'pubkey-setting': pubkeySettingCmd,
     'rate-limits-module': rateLimitsModuleCmd,
-    'usage-snapshot': usageSnapshotCmd,
-    'app-membership-default': appMembershipDefaultCmd,
-    'org-membership-default': orgMembershipDefaultCmd,
+    'membership-type': membershipTypeCmd,
     'rls-setting': rlsSettingCmd,
-    'app-limit-event': appLimitEventCmd,
-    'org-limit-event': orgLimitEventCmd,
     'rls-module': rlsModuleCmd,
     'rate-limit-meters-module': rateLimitMetersModuleCmd,
     'plans-module': plansModuleCmd,
     'sql-action': sqlActionCmd,
     'database-setting': databaseSettingCmd,
-    'billing-module': billingModuleCmd,
-    'ast-migration': astMigrationCmd,
-    user: userCmd,
     'org-membership-setting': orgMembershipSettingCmd,
-    'webauthn-setting': webauthnSettingCmd,
+    'app-limit-event': appLimitEventCmd,
+    'org-limit-event': orgLimitEventCmd,
     'app-membership': appMembershipCmd,
+    user: userCmd,
+    'ast-migration': astMigrationCmd,
+    'webauthn-setting': webauthnSettingCmd,
+    'billing-module': billingModuleCmd,
     'billing-provider-module': billingProviderModuleCmd,
     'hierarchy-module': hierarchyModuleCmd,
     'current-user-id': currentUserIdCmd,
@@ -380,19 +373,16 @@ const createCommandMap = () => ({
     'require-step-up': requireStepUpCmd,
     'app-permissions-get-padded-mask': appPermissionsGetPaddedMaskCmd,
     'org-permissions-get-padded-mask': orgPermissionsGetPaddedMaskCmd,
-    'rev-parse': revParseCmd,
+    'apply-registry-defaults': applyRegistryDefaultsCmd,
     'resolve-blueprint-field': resolveBlueprintFieldCmd,
+    'resolve-blueprint-table': resolveBlueprintTableCmd,
     'org-is-manager-of': orgIsManagerOfCmd,
     'app-permissions-get-mask': appPermissionsGetMaskCmd,
     'org-permissions-get-mask': orgPermissionsGetMaskCmd,
-    'resolve-blueprint-table': resolveBlueprintTableCmd,
     'app-permissions-get-mask-by-names': appPermissionsGetMaskByNamesCmd,
     'org-permissions-get-mask-by-names': orgPermissionsGetMaskByNamesCmd,
     'app-permissions-get-by-mask': appPermissionsGetByMaskCmd,
     'org-permissions-get-by-mask': orgPermissionsGetByMaskCmd,
-    'get-all-objects-from-root': getAllObjectsFromRootCmd,
-    'get-path-objects-from-root': getPathObjectsFromRootCmd,
-    'get-object-at-path': getObjectAtPathCmd,
     'current-user': currentUserCmd,
     'send-account-deletion-email': sendAccountDeletionEmailCmd,
     'sign-out': signOutCmd,
@@ -410,41 +400,33 @@ const createCommandMap = () => ({
     'confirm-delete-account': confirmDeleteAccountCmd,
     'set-password': setPasswordCmd,
     'verify-email': verifyEmailCmd,
-    'freeze-objects': freezeObjectsCmd,
-    'init-empty-repo': initEmptyRepoCmd,
     'construct-blueprint': constructBlueprintCmd,
     'provision-new-user': provisionNewUserCmd,
     'reset-password': resetPasswordCmd,
-    'remove-node-at-path': removeNodeAtPathCmd,
-    'copy-template-to-blueprint': copyTemplateToBlueprintCmd,
-    'provision-spatial-relation': provisionSpatialRelationCmd,
-    'bootstrap-user': bootstrapUserCmd,
-    'set-field-order': setFieldOrderCmd,
     'provision-check-constraint': provisionCheckConstraintCmd,
     'provision-unique-constraint': provisionUniqueConstraintCmd,
     'provision-full-text-search': provisionFullTextSearchCmd,
     'provision-index': provisionIndexCmd,
-    'set-data-at-path': setDataAtPathCmd,
-    'set-props-and-commit': setPropsAndCommitCmd,
-    'provision-database-with-user': provisionDatabaseWithUserCmd,
-    'insert-node-at-path': insertNodeAtPathCmd,
-    'update-node-at-path': updateNodeAtPathCmd,
-    'set-and-commit': setAndCommitCmd,
+    'copy-template-to-blueprint': copyTemplateToBlueprintCmd,
+    'provision-spatial-relation': provisionSpatialRelationCmd,
+    'sign-in-cross-origin': signInCrossOriginCmd,
+    'bootstrap-user': bootstrapUserCmd,
+    'sign-up': signUpCmd,
+    'sign-in': signInCmd,
     'provision-relation': provisionRelationCmd,
+    'set-field-order': setFieldOrderCmd,
     'apply-rls': applyRlsCmd,
-    'sign-in-cross-origin': signInCrossOriginCmd,
+    'provision-database-with-user': provisionDatabaseWithUserCmd,
     'create-user-database': createUserDatabaseCmd,
     'extend-token-expires': extendTokenExpiresCmd,
     'create-api-key': createApiKeyCmd,
-    'send-verification-email': sendVerificationEmailCmd,
-    'forgot-password': forgotPasswordCmd,
-    'sign-up': signUpCmd,
     'request-cross-origin-token': requestCrossOriginTokenCmd,
-    'sign-in': signInCmd,
     'provision-table': provisionTableCmd,
+    'send-verification-email': sendVerificationEmailCmd,
+    'forgot-password': forgotPasswordCmd,
     'provision-bucket': provisionBucketCmd,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  get-all-record       getAllRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  object               object CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  partition            partition CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  encrypted-secrets-module encryptedSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  events-module        eventsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  org-limit-warning    orgLimitWarning CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log            auditLog CRUD operations\n  agent-thread         agentThread CRUD operations\n  agent-message        agentMessage CRUD operations\n  agent-task           agentTask CRUD operations\n  role-type            roleType CRUD operations\n  identity-provider    identityProvider CRUD operations\n  ref                  ref CRUD operations\n  store                store CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  membership-type      membershipType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  app-limit-warning    appLimitWarning CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  commit               commit CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  usage-snapshot       usageSnapshot CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  rls-module           rlsModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  database-setting     databaseSetting CRUD operations\n  billing-module       billingModule CRUD operations\n  ast-migration        astMigration CRUD operations\n  user                 user CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  app-membership       appMembership CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  rev-parse            revParse\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  get-all-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-path-objects-from-root Reads and enables pagination through a set of `Object`.\n  get-object-at-path   getObjectAtPath\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  freeze-objects       freezeObjects\n  init-empty-repo      initEmptyRepo\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security, (0.5) app-level storage, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  remove-node-at-path  removeNodeAtPath\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  bootstrap-user       bootstrapUser\n  set-field-order      setFieldOrder\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  set-data-at-path     setDataAtPath\n  set-props-and-commit setPropsAndCommit\n  provision-database-with-user provisionDatabaseWithUser\n  insert-node-at-path  insertNodeAtPath\n  update-node-at-path  updateNodeAtPath\n  set-and-commit       setAndCommit\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  apply-rls            applyRls\n  sign-in-cross-origin signInCrossOrigin\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include events/analytics (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  sign-up              signUp\n  request-cross-origin-token requestCrossOriginToken\n  sign-in              signIn\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  org-get-managers-record orgGetManagersRecord CRUD operations\n  org-get-subordinates-record orgGetSubordinatesRecord CRUD operations\n  app-permission       appPermission CRUD operations\n  org-permission       orgPermission CRUD operations\n  database             database CRUD operations\n  schema               schema CRUD operations\n  table                table CRUD operations\n  check-constraint     checkConstraint CRUD operations\n  field                field CRUD operations\n  spatial-relation     spatialRelation CRUD operations\n  foreign-key-constraint foreignKeyConstraint CRUD operations\n  full-text-search     fullTextSearch CRUD operations\n  index                index CRUD operations\n  policy               policy CRUD operations\n  primary-key-constraint primaryKeyConstraint CRUD operations\n  table-grant          tableGrant CRUD operations\n  trigger              trigger CRUD operations\n  unique-constraint    uniqueConstraint CRUD operations\n  view                 view CRUD operations\n  view-table           viewTable CRUD operations\n  view-grant           viewGrant CRUD operations\n  view-rule            viewRule CRUD operations\n  embedding-chunk      embeddingChunk CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  relation-provision   relationProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  config-secrets-org-module configSecretsOrgModule CRUD operations\n  schema-grant         schemaGrant CRUD operations\n  default-privilege    defaultPrivilege CRUD operations\n  enum                 enum CRUD operations\n  function             function CRUD operations\n  api-schema           apiSchema CRUD operations\n  api-module           apiModule CRUD operations\n  domain               domain CRUD operations\n  site-metadatum       siteMetadatum CRUD operations\n  site-module          siteModule CRUD operations\n  site-theme           siteTheme CRUD operations\n  cors-setting         corsSetting CRUD operations\n  merkle-store-module  merkleStoreModule CRUD operations\n  graph-module         graphModule CRUD operations\n  trigger-function     triggerFunction CRUD operations\n  partition            partition CRUD operations\n  database-transfer    databaseTransfer CRUD operations\n  api                  api CRUD operations\n  site                 site CRUD operations\n  app                  app CRUD operations\n  api-setting          apiSetting CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  emails-module        emailsModule CRUD operations\n  config-secrets-user-module configSecretsUserModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  events-module        eventsModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  users-module         usersModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  storage-module       storageModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  inference-log-module inferenceLogModule CRUD operations\n  compute-log-module   computeLogModule CRUD operations\n  transfer-log-module  transferLogModule CRUD operations\n  storage-log-module   storageLogModule CRUD operations\n  db-usage-module      dbUsageModule CRUD operations\n  agent-module         agentModule CRUD operations\n  namespace-module     namespaceModule CRUD operations\n  function-module      functionModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  app-admin-grant      appAdminGrant CRUD operations\n  app-owner-grant      appOwnerGrant CRUD operations\n  app-grant            appGrant CRUD operations\n  org-membership       orgMembership CRUD operations\n  org-member           orgMember CRUD operations\n  org-admin-grant      orgAdminGrant CRUD operations\n  org-owner-grant      orgOwnerGrant CRUD operations\n  org-member-profile   orgMemberProfile CRUD operations\n  org-grant            orgGrant CRUD operations\n  org-chart-edge       orgChartEdge CRUD operations\n  org-chart-edge-grant orgChartEdgeGrant CRUD operations\n  org-permission-default orgPermissionDefault CRUD operations\n  app-limit            appLimit CRUD operations\n  app-limit-credit     appLimitCredit CRUD operations\n  app-limit-credit-code-item appLimitCreditCodeItem CRUD operations\n  app-limit-credit-redemption appLimitCreditRedemption CRUD operations\n  org-limit            orgLimit CRUD operations\n  org-limit-credit     orgLimitCredit CRUD operations\n  org-limit-aggregate  orgLimitAggregate CRUD operations\n  org-limit-warning    orgLimitWarning CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  app-invite           appInvite CRUD operations\n  app-claimed-invite   appClaimedInvite CRUD operations\n  org-invite           orgInvite CRUD operations\n  org-claimed-invite   orgClaimedInvite CRUD operations\n  audit-log-auth       auditLogAuth CRUD operations\n  identity-provider    identityProvider CRUD operations\n  app-permission-default appPermissionDefault CRUD operations\n  role-type            roleType CRUD operations\n  migrate-file         migrateFile CRUD operations\n  devices-module       devicesModule CRUD operations\n  app-membership-default appMembershipDefault CRUD operations\n  org-membership-default orgMembershipDefault CRUD operations\n  node-type-registry   nodeTypeRegistry CRUD operations\n  app-limit-caps-default appLimitCapsDefault CRUD operations\n  org-limit-caps-default orgLimitCapsDefault CRUD operations\n  app-limit-cap        appLimitCap CRUD operations\n  org-limit-cap        orgLimitCap CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  app-limit-default    appLimitDefault CRUD operations\n  org-limit-default    orgLimitDefault CRUD operations\n  app-limit-credit-code appLimitCreditCode CRUD operations\n  app-limit-warning    appLimitWarning CRUD operations\n  pubkey-setting       pubkeySetting CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  membership-type      membershipType CRUD operations\n  rls-setting          rlsSetting CRUD operations\n  rls-module           rlsModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  plans-module         plansModule CRUD operations\n  sql-action           sqlAction CRUD operations\n  database-setting     databaseSetting CRUD operations\n  org-membership-setting orgMembershipSetting CRUD operations\n  app-limit-event      appLimitEvent CRUD operations\n  org-limit-event      orgLimitEvent CRUD operations\n  app-membership       appMembership CRUD operations\n  user                 user CRUD operations\n  ast-migration        astMigration CRUD operations\n  webauthn-setting     webauthnSetting CRUD operations\n  billing-module       billingModule CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  current-user-id      currentUserId\n  current-user-agent   currentUserAgent\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  app-permissions-get-padded-mask appPermissionsGetPaddedMask\n  org-permissions-get-padded-mask orgPermissionsGetPaddedMask\n  apply-registry-defaults applyRegistryDefaults\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  org-is-manager-of    orgIsManagerOf\n  app-permissions-get-mask appPermissionsGetMask\n  org-permissions-get-mask orgPermissionsGetMask\n  app-permissions-get-mask-by-names appPermissionsGetMaskByNames\n  org-permissions-get-mask-by-names orgPermissionsGetMaskByNames\n  app-permissions-get-by-mask Reads and enables pagination through a set of `AppPermission`.\n  org-permissions-get-by-mask Reads and enables pagination through a set of `OrgPermission`.\n  current-user         currentUser\n  send-account-deletion-email sendAccountDeletionEmail\n  sign-out             signOut\n  accept-database-transfer acceptDatabaseTransfer\n  cancel-database-transfer cancelDatabaseTransfer\n  reject-database-transfer rejectDatabaseTransfer\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  submit-app-invite-code submitAppInviteCode\n  submit-org-invite-code submitOrgInviteCode\n  check-password       checkPassword\n  confirm-delete-account confirmDeleteAccount\n  set-password         setPassword\n  verify-email         verifyEmail\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security. When a prefix already exists (e.g., 'org'), the entry extends the existing entity type instead of creating a new one; if a storage[] key is present, it provisions entity-scoped storage for that type. (0.5) scope-based storage: each storage[] entry has an optional scope ('app' or 'org' only). App-scoped storage seeds buckets at migration time. Org-scoped storage resolves the org membership type, creates org_buckets/org_files with owner_id, and seeds buckets per-entity via an AFTER INSERT trigger on the users table. When function_module is installed, a private functions bucket is auto-injected into org-scoped or entity-scoped storage entries. (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred). After provisioning, optional smart_tags (jsonb object) on the table entry are applied via metaschema.append_table_smart_tags(), and optional smart_tags on individual field entries are applied via metaschema.append_field_smart_tags(). (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  sign-in-cross-origin signInCrossOrigin\n  bootstrap-user       bootstrapUser\n  sign-up              signUp\n  sign-in              signIn\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  set-field-order      setFieldOrder\n  apply-rls            applyRls\n  provision-database-with-user provisionDatabaseWithUser\n  create-user-database Creates a new user database with all required modules, permissions, and RLS policies.\n\nParameters:\n  - database_name: Name for the new database (required)\n  - owner_id: UUID of the owner user (required)\n  - include_invites: Include invite system (default: true)\n  - include_groups: Include group-level memberships (default: false)\n  - include_levels: Include events/analytics (default: false)\n  - bitlen: Bit length for permission masks (default: 64)\n  - tokens_expiration: Token expiration interval (default: 30 days)\n\nReturns the database_id UUID of the newly created database.\n\nExample usage:\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);\n  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups\n\n  extend-token-expires extendTokenExpires\n  create-api-key       createApiKey\n  request-cross-origin-token requestCrossOriginToken\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  send-verification-email sendVerificationEmail\n  forgot-password      forgotPassword\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
 export const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);