@constructive-sdk/cli 0.25.9 → 0.25.11

package/auth/orm/input-types.d.ts

@@ -359,7 +359,7 @@ export interface User {
     searchTsvRank?: number | null;
     /** TRGM similarity when searching `displayName`. Returns null when no trgm search filter is active. */
     displayNameTrgmSimilarity?: number | null;
-    /** Composite search relevance score (0..1, higher = more relevant). Computed by normalizing and averaging all active search signals. Supports per-table weight customization via @searchConfig smart tag. Returns null when no search filters are active. */
+    /** Composite search relevance score (0..1, higher = more relevant). Computed using Reciprocal Rank Fusion (RRF) across all active search signals. Supports per-table weight customization via @searchConfig smart tag. Returns null when no search filters are active. */
     searchScore?: number | null;
 }
 export interface ConnectionResult<T> {
@@ -1119,6 +1119,22 @@ export interface SignInCrossOriginInput {
     token?: string;
     credentialKind?: string;
 }
+export interface SignInSmsOtpInput {
+    clientMutationId?: string;
+    phone?: string;
+    code?: string;
+    credentialKind?: string;
+    rememberMe?: boolean;
+    deviceToken?: string;
+}
+export interface SignUpSmsInput {
+    clientMutationId?: string;
+    phone?: string;
+    code?: string;
+    credentialKind?: string;
+    rememberMe?: boolean;
+    deviceToken?: string;
+}
 export interface SignUpInput {
     clientMutationId?: string;
     email?: string;
@@ -1137,6 +1153,12 @@ export interface SignInInput {
     csrfToken?: string;
     deviceToken?: string;
 }
+export interface LinkIdentityInput {
+    clientMutationId?: string;
+    service: string;
+    identifier: string;
+    details?: Record<string, unknown>;
+}
 export interface ExtendTokenExpiresInput {
     clientMutationId?: string;
     amount?: IntervalInput;
@@ -1511,6 +1533,132 @@ export interface TrgmSearchInput {
     /** Minimum similarity threshold (0.0 to 1.0). Higher = stricter matching. Default is 0.3. */
     threshold?: number;
 }
+/** An input for mutations affecting `Email` */
+export interface EmailInput {
+    id?: string;
+    ownerId?: string;
+    /** The email address */
+    email: ConstructiveInternalTypeEmail;
+    /** Whether the email address has been verified via confirmation link */
+    isVerified?: boolean;
+    /** Whether this is the user's primary email address */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this email (e.g. "Work", "Personal"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** An input for mutations affecting `PhoneNumber` */
+export interface PhoneNumberInput {
+    id?: string;
+    ownerId?: string;
+    /** Country calling code (e.g. +1, +44) */
+    cc: string;
+    /** The phone number without country code */
+    number: string;
+    /** Whether the phone number has been verified via SMS code */
+    isVerified?: boolean;
+    /** Whether this is the user's primary phone number */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this phone number (e.g. "Mobile", "Work"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** An input for mutations affecting `CryptoAddress` */
+export interface CryptoAddressInput {
+    id?: string;
+    ownerId?: string;
+    /** The cryptocurrency wallet address, validated against network-specific patterns */
+    address: string;
+    /** Whether ownership of this address has been cryptographically verified */
+    isVerified?: boolean;
+    /** Whether this is the user's primary cryptocurrency address */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this address (e.g. "Main wallet", "Hardware wallet"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** An input for mutations affecting `WebauthnCredential` */
+export interface WebauthnCredentialInput {
+    id?: string;
+    ownerId?: string;
+    /** Base64url-encoded credential ID returned by the authenticator. Globally unique per WebAuthn spec. */
+    credentialId: string;
+    /** COSE-encoded public key bytes from the authenticator attestation. */
+    publicKey: Base64EncodedBinary;
+    /** Monotonic signature counter. Strict-increase check during sign-in detects cloned credentials. 0 means the authenticator does not implement a counter. */
+    signCount?: string;
+    /** Random per-user handle sent to authenticators as user.id. Privacy-preserving; NOT the internal user UUID. */
+    webauthnUserId: string;
+    /** Authenticator transport hints (e.g. usb, nfc, ble, internal, hybrid). Used to hint browser UI during sign-in. */
+    transports?: string[];
+    /** Either 'singleDevice' (hardware-bound) or 'multiDevice' (synced passkey). Enforced by CHECK constraint below. */
+    credentialDeviceType: string;
+    /** Whether this credential is eligible for backup (syncing) per the authenticator's flags at registration. */
+    backupEligible?: boolean;
+    /** Current backup state; updated on each successful sign-in assertion. */
+    backupState?: boolean;
+    /** User-provided label for this credential (e.g. "YubiKey 5C", "iPhone 15"). Renamed via rename_passkey. */
+    name?: string;
+    /** Timestamp of the most recent successful sign-in assertion using this credential. */
+    lastUsedAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** An input for mutations affecting `AuditLogAuth` */
+export interface AuditLogAuthInput {
+    createdAt?: string;
+    /** Unique identifier for each audit event (uuidv7 provides temporal ordering) */
+    id?: string;
+    /** Type of authentication event (e.g. sign_in, sign_up, password_change, verify_email) */
+    event: string;
+    /** User who performed the authentication action; NULL if user was deleted */
+    actorId?: string;
+    /** Request origin (domain) where the auth event occurred */
+    origin?: ConstructiveInternalTypeOrigin;
+    /** Browser or client user-agent string from the request */
+    userAgent?: string;
+    /** IP address of the client that initiated the auth event */
+    ipAddress?: string;
+    /** Whether the authentication attempt succeeded */
+    success: boolean;
+}
+/** An input for mutations affecting `IdentityProvider` */
+export interface IdentityProviderInput {
+    slug?: string;
+    kind?: string;
+    displayName?: string;
+    enabled?: boolean;
+    isBuiltIn?: boolean;
+}
+/** An input for mutations affecting `RoleType` */
+export interface RoleTypeInput {
+    id: number;
+    name: string;
+}
+/** An input for mutations affecting `UserConnectedAccount` */
+export interface UserConnectedAccountInput {
+    id?: string;
+    ownerId?: string;
+    service?: string;
+    identifier?: string;
+    details?: Record<string, unknown>;
+    isVerified?: boolean;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** An input for mutations affecting `User` */
+export interface UserInput {
+    id?: string;
+    username?: string;
+    displayName?: string;
+    profilePicture?: ConstructiveInternalTypeImage;
+    type?: number;
+    createdAt?: string;
+    updatedAt?: string;
+}
 /** An interval of time that has passed where the smallest distinct unit is a second. */
 export interface IntervalInput {
     /**
@@ -2157,6 +2305,26 @@ export type SignInCrossOriginPayloadSelect = {
         select: SignInCrossOriginRecordSelect;
     };
 };
+export interface SignInSmsOtpPayload {
+    clientMutationId?: string | null;
+    result?: SignInSmsOtpRecord | null;
+}
+export type SignInSmsOtpPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: {
+        select: SignInSmsOtpRecordSelect;
+    };
+};
+export interface SignUpSmsPayload {
+    clientMutationId?: string | null;
+    result?: SignUpSmsRecord | null;
+}
+export type SignUpSmsPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: {
+        select: SignUpSmsRecordSelect;
+    };
+};
 export interface SignUpPayload {
     clientMutationId?: string | null;
     result?: SignUpRecord | null;
@@ -2177,6 +2345,14 @@ export type SignInPayloadSelect = {
         select: SignInRecordSelect;
     };
 };
+export interface LinkIdentityPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type LinkIdentityPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface ExtendTokenExpiresPayload {
     clientMutationId?: string | null;
     result?: ExtendTokenExpiresRecord[] | null;
@@ -2594,6 +2770,26 @@ export type SignInCrossOriginRecordSelect = {
     isVerified?: boolean;
     totpEnabled?: boolean;
 };
+export interface SignInSmsOtpRecord {
+    userId?: string | null;
+    accessToken?: string | null;
+    accessTokenExpiresAt?: string | null;
+}
+export type SignInSmsOtpRecordSelect = {
+    userId?: boolean;
+    accessToken?: boolean;
+    accessTokenExpiresAt?: boolean;
+};
+export interface SignUpSmsRecord {
+    userId?: string | null;
+    accessToken?: string | null;
+    accessTokenExpiresAt?: string | null;
+}
+export type SignUpSmsRecordSelect = {
+    userId?: boolean;
+    accessToken?: boolean;
+    accessTokenExpiresAt?: boolean;
+};
 export interface SignUpRecord {
     id?: string | null;
     userId?: string | null;

package/auth/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, DisconnectAccountInput, RevokeApiKeyInput, RevokeSessionInput, VerifyPasswordInput, VerifyTotpInput, ConfirmDeleteAccountInput, SetPasswordInput, VerifyEmailInput, ProvisionNewUserInput, ResetPasswordInput, SignInCrossOriginInput, SignUpInput, SignInInput, ExtendTokenExpiresInput, CreateApiKeyInput, RequestCrossOriginTokenInput, ForgotPasswordInput, SendVerificationEmailInput, ProvisionBucketInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, DisconnectAccountPayload, RevokeApiKeyPayload, RevokeSessionPayload, VerifyPasswordPayload, VerifyTotpPayload, ConfirmDeleteAccountPayload, SetPasswordPayload, VerifyEmailPayload, ProvisionNewUserPayload, ResetPasswordPayload, SignInCrossOriginPayload, SignUpPayload, SignInPayload, ExtendTokenExpiresPayload, CreateApiKeyPayload, RequestCrossOriginTokenPayload, ForgotPasswordPayload, SendVerificationEmailPayload, ProvisionBucketPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, DisconnectAccountPayloadSelect, RevokeApiKeyPayloadSelect, RevokeSessionPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect, ConfirmDeleteAccountPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ProvisionNewUserPayloadSelect, ResetPasswordPayloadSelect, SignInCrossOriginPayloadSelect, SignUpPayloadSelect, SignInPayloadSelect, ExtendTokenExpiresPayloadSelect, CreateApiKeyPayloadSelect, RequestCrossOriginTokenPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
+import type { SignOutInput, SendAccountDeletionEmailInput, CheckPasswordInput, DisconnectAccountInput, RevokeApiKeyInput, RevokeSessionInput, VerifyPasswordInput, VerifyTotpInput, ConfirmDeleteAccountInput, SetPasswordInput, VerifyEmailInput, ProvisionNewUserInput, ResetPasswordInput, SignInCrossOriginInput, SignInSmsOtpInput, SignUpSmsInput, SignUpInput, SignInInput, LinkIdentityInput, ExtendTokenExpiresInput, CreateApiKeyInput, RequestCrossOriginTokenInput, ForgotPasswordInput, SendVerificationEmailInput, ProvisionBucketInput, SignOutPayload, SendAccountDeletionEmailPayload, CheckPasswordPayload, DisconnectAccountPayload, RevokeApiKeyPayload, RevokeSessionPayload, VerifyPasswordPayload, VerifyTotpPayload, ConfirmDeleteAccountPayload, SetPasswordPayload, VerifyEmailPayload, ProvisionNewUserPayload, ResetPasswordPayload, SignInCrossOriginPayload, SignInSmsOtpPayload, SignUpSmsPayload, SignUpPayload, SignInPayload, LinkIdentityPayload, ExtendTokenExpiresPayload, CreateApiKeyPayload, RequestCrossOriginTokenPayload, ForgotPasswordPayload, SendVerificationEmailPayload, ProvisionBucketPayload, SignOutPayloadSelect, SendAccountDeletionEmailPayloadSelect, CheckPasswordPayloadSelect, DisconnectAccountPayloadSelect, RevokeApiKeyPayloadSelect, RevokeSessionPayloadSelect, VerifyPasswordPayloadSelect, VerifyTotpPayloadSelect, ConfirmDeleteAccountPayloadSelect, SetPasswordPayloadSelect, VerifyEmailPayloadSelect, ProvisionNewUserPayloadSelect, ResetPasswordPayloadSelect, SignInCrossOriginPayloadSelect, SignInSmsOtpPayloadSelect, SignUpSmsPayloadSelect, SignUpPayloadSelect, SignInPayloadSelect, LinkIdentityPayloadSelect, ExtendTokenExpiresPayloadSelect, CreateApiKeyPayloadSelect, RequestCrossOriginTokenPayloadSelect, ForgotPasswordPayloadSelect, SendVerificationEmailPayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface SignOutVariables {
     input: SignOutInput;
 }
@@ -49,12 +49,21 @@ export interface ResetPasswordVariables {
 export interface SignInCrossOriginVariables {
     input: SignInCrossOriginInput;
 }
+export interface SignInSmsOtpVariables {
+    input: SignInSmsOtpInput;
+}
+export interface SignUpSmsVariables {
+    input: SignUpSmsInput;
+}
 export interface SignUpVariables {
     input: SignUpInput;
 }
 export interface SignInVariables {
     input: SignInInput;
 }
+export interface LinkIdentityVariables {
+    input: LinkIdentityInput;
+}
 export interface ExtendTokenExpiresVariables {
     input: ExtendTokenExpiresInput;
 }
@@ -151,6 +160,16 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SignInCrossOriginPayloadSelect>) => QueryBuilder<{
         signInCrossOrigin: InferSelectResult<SignInCrossOriginPayload, S> | null;
     }>;
+    signInSmsOtp: <S extends SignInSmsOtpPayloadSelect>(args: SignInSmsOtpVariables, options: {
+        select: S;
+    } & StrictSelect<S, SignInSmsOtpPayloadSelect>) => QueryBuilder<{
+        signInSmsOtp: InferSelectResult<SignInSmsOtpPayload, S> | null;
+    }>;
+    signUpSms: <S extends SignUpSmsPayloadSelect>(args: SignUpSmsVariables, options: {
+        select: S;
+    } & StrictSelect<S, SignUpSmsPayloadSelect>) => QueryBuilder<{
+        signUpSms: InferSelectResult<SignUpSmsPayload, S> | null;
+    }>;
     signUp: <S extends SignUpPayloadSelect>(args: SignUpVariables, options: {
         select: S;
     } & StrictSelect<S, SignUpPayloadSelect>) => QueryBuilder<{
@@ -161,6 +180,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SignInPayloadSelect>) => QueryBuilder<{
         signIn: InferSelectResult<SignInPayload, S> | null;
     }>;
+    linkIdentity: <S extends LinkIdentityPayloadSelect>(args: LinkIdentityVariables, options: {
+        select: S;
+    } & StrictSelect<S, LinkIdentityPayloadSelect>) => QueryBuilder<{
+        linkIdentity: InferSelectResult<LinkIdentityPayload, S> | null;
+    }>;
     extendTokenExpires: <S extends ExtendTokenExpiresPayloadSelect>(args: ExtendTokenExpiresVariables, options: {
         select: S;
     } & StrictSelect<S, ExtendTokenExpiresPayloadSelect>) => QueryBuilder<{

package/auth/orm/mutation/index.js

@@ -173,6 +173,30 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'SignInCrossOriginPayload'),
         }),
+        signInSmsOtp: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'SignInSmsOtp',
+            fieldName: 'signInSmsOtp',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'SignInSmsOtp', 'signInSmsOtp', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'SignInSmsOtpInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'SignInSmsOtpPayload'),
+        }),
+        signUpSms: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'SignUpSms',
+            fieldName: 'signUpSms',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'SignUpSms', 'signUpSms', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'SignUpSmsInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'SignUpSmsPayload'),
+        }),
         signUp: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -197,6 +221,18 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'SignInPayload'),
         }),
+        linkIdentity: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'LinkIdentity',
+            fieldName: 'linkIdentity',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'LinkIdentity', 'linkIdentity', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'LinkIdentityInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'LinkIdentityPayload'),
+        }),
         extendTokenExpires: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',

package/esm/admin/cli/commands/app-admin-grant.js

@@ -147,7 +147,8 @@ async function handleCreate(argv, prompter) {
                 type: 'text',
                 name: 'actorId',
                 message: 'actorId',
-                required: true,
+                required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',
@@ -208,6 +209,7 @@ async function handleUpdate(argv, prompter) {
                 name: 'actorId',
                 message: 'actorId',
                 required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',

package/esm/admin/cli/commands/app-grant.js

@@ -158,7 +158,8 @@ async function handleCreate(argv, prompter) {
                 type: 'text',
                 name: 'actorId',
                 message: 'actorId',
-                required: true,
+                required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',
@@ -228,6 +229,7 @@ async function handleUpdate(argv, prompter) {
                 name: 'actorId',
                 message: 'actorId',
                 required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',

package/esm/admin/cli/commands/app-invite.js

@@ -8,7 +8,9 @@ import { getClient } from '../executor';
 import { coerceAnswers, parseFindFirstArgs, parseFindManyArgs, stripUndefined } from '../utils';
 const fieldSchema = {
     id: 'uuid',
+    channel: 'string',
     email: 'string',
+    phone: 'string',
     senderId: 'uuid',
     inviteToken: 'string',
     inviteValid: 'boolean',
@@ -64,7 +66,9 @@ async function handleList(argv, _prompter) {
     try {
         const defaultSelect = {
             id: true,
+            channel: true,
             email: true,
+            phone: true,
             senderId: true,
             inviteToken: true,
             inviteValid: true,
@@ -94,7 +98,9 @@ async function handleFindFirst(argv, _prompter) {
     try {
         const defaultSelect = {
             id: true,
+            channel: true,
             email: true,
+            phone: true,
             senderId: true,
             inviteToken: true,
             inviteValid: true,
@@ -136,7 +142,9 @@ async function handleGet(argv, prompter) {
             id: answers.id,
             select: {
                 id: true,
+                channel: true,
                 email: true,
+                phone: true,
                 senderId: true,
                 inviteToken: true,
                 inviteValid: true,
@@ -164,6 +172,13 @@ async function handleGet(argv, prompter) {
 async function handleCreate(argv, prompter) {
     try {
         const rawAnswers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'channel',
+                message: 'channel',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'email',
@@ -171,6 +186,13 @@ async function handleCreate(argv, prompter) {
                 required: false,
                 skipPrompt: true,
             },
+            {
+                type: 'text',
+                name: 'phone',
+                message: 'phone',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'senderId',
@@ -241,7 +263,9 @@ async function handleCreate(argv, prompter) {
         const result = await client.appInvite
             .create({
             data: {
+                channel: cleanedData.channel,
                 email: cleanedData.email,
+                phone: cleanedData.phone,
                 senderId: cleanedData.senderId,
                 inviteToken: cleanedData.inviteToken,
                 inviteValid: cleanedData.inviteValid,
@@ -254,7 +278,9 @@ async function handleCreate(argv, prompter) {
             },
             select: {
                 id: true,
+                channel: true,
                 email: true,
+                phone: true,
                 senderId: true,
                 inviteToken: true,
                 inviteValid: true,
@@ -288,6 +314,13 @@ async function handleUpdate(argv, prompter) {
                 message: 'id',
                 required: true,
             },
+            {
+                type: 'text',
+                name: 'channel',
+                message: 'channel',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'email',
@@ -295,6 +328,13 @@ async function handleUpdate(argv, prompter) {
                 required: false,
                 skipPrompt: true,
             },
+            {
+                type: 'text',
+                name: 'phone',
+                message: 'phone',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'senderId',
@@ -368,7 +408,9 @@ async function handleUpdate(argv, prompter) {
                 id: answers.id,
             },
             data: {
+                channel: cleanedData.channel,
                 email: cleanedData.email,
+                phone: cleanedData.phone,
                 senderId: cleanedData.senderId,
                 inviteToken: cleanedData.inviteToken,
                 inviteValid: cleanedData.inviteValid,
@@ -381,7 +423,9 @@ async function handleUpdate(argv, prompter) {
             },
             select: {
                 id: true,
+                channel: true,
                 email: true,
+                phone: true,
                 senderId: true,
                 inviteToken: true,
                 inviteValid: true,

package/esm/admin/cli/commands/app-owner-grant.js

@@ -147,7 +147,8 @@ async function handleCreate(argv, prompter) {
                 type: 'text',
                 name: 'actorId',
                 message: 'actorId',
-                required: true,
+                required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',
@@ -208,6 +209,7 @@ async function handleUpdate(argv, prompter) {
                 name: 'actorId',
                 message: 'actorId',
                 required: false,
+                skipPrompt: true,
             },
             {
                 type: 'text',

package/esm/admin/cli/commands/app-permission-default-grant.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI commands for AppPermissionDefaultGrant
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;