@constructive-sdk/cli 0.30.0 → 0.30.1

package/esm/modules/cli/commands/user-credentials-module.js

@@ -9,10 +9,10 @@ import { coerceAnswers, parseFindFirstArgs, parseFindManyArgs, stripUndefined }
 const fieldSchema = {
     id: 'uuid',
     databaseId: 'uuid',
+    entityField: 'string',
     schemaId: 'uuid',
     tableId: 'uuid',
     tableName: 'string',
-    apiName: 'string',
     privateApiName: 'string',
 };
 const usage = '\nuser-credentials-module <command>\n\nCommands:\n  list                  List userCredentialsModule records\n  find-first            Find first matching userCredentialsModule record\n  get                   Get a userCredentialsModule by ID\n  create                Create a new userCredentialsModule\n  update                Update an existing userCredentialsModule\n  delete                Delete a userCredentialsModule\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\n  --help, -h            Show this help message\n';
@@ -59,10 +59,10 @@ async function handleList(argv, _prompter) {
         const defaultSelect = {
             id: true,
             databaseId: true,
+            entityField: true,
             schemaId: true,
             tableId: true,
             tableName: true,
-            apiName: true,
             privateApiName: true,
         };
         const findManyArgs = parseFindManyArgs(argv, defaultSelect);
@@ -83,10 +83,10 @@ async function handleFindFirst(argv, _prompter) {
         const defaultSelect = {
             id: true,
             databaseId: true,
+            entityField: true,
             schemaId: true,
             tableId: true,
             tableName: true,
-            apiName: true,
             privateApiName: true,
         };
         const findFirstArgs = parseFindFirstArgs(argv, defaultSelect);
@@ -119,10 +119,10 @@ async function handleGet(argv, prompter) {
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,
-                apiName: true,
                 privateApiName: true,
             },
         })
@@ -146,6 +146,13 @@ async function handleCreate(argv, prompter) {
                 message: 'databaseId',
                 required: true,
             },
+            {
+                type: 'text',
+                name: 'entityField',
+                message: 'entityField',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'schemaId',
@@ -167,13 +174,6 @@ async function handleCreate(argv, prompter) {
                 required: false,
                 skipPrompt: true,
             },
-            {
-                type: 'text',
-                name: 'apiName',
-                message: 'apiName',
-                required: false,
-                skipPrompt: true,
-            },
             {
                 type: 'text',
                 name: 'privateApiName',
@@ -189,19 +189,19 @@ async function handleCreate(argv, prompter) {
             .create({
             data: {
                 databaseId: cleanedData.databaseId,
+                entityField: cleanedData.entityField,
                 schemaId: cleanedData.schemaId,
                 tableId: cleanedData.tableId,
                 tableName: cleanedData.tableName,
-                apiName: cleanedData.apiName,
                 privateApiName: cleanedData.privateApiName,
             },
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,
-                apiName: true,
                 privateApiName: true,
             },
         })
@@ -231,6 +231,13 @@ async function handleUpdate(argv, prompter) {
                 message: 'databaseId',
                 required: false,
             },
+            {
+                type: 'text',
+                name: 'entityField',
+                message: 'entityField',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'schemaId',
@@ -252,13 +259,6 @@ async function handleUpdate(argv, prompter) {
                 required: false,
                 skipPrompt: true,
             },
-            {
-                type: 'text',
-                name: 'apiName',
-                message: 'apiName',
-                required: false,
-                skipPrompt: true,
-            },
             {
                 type: 'text',
                 name: 'privateApiName',
@@ -277,19 +277,19 @@ async function handleUpdate(argv, prompter) {
             },
             data: {
                 databaseId: cleanedData.databaseId,
+                entityField: cleanedData.entityField,
                 schemaId: cleanedData.schemaId,
                 tableId: cleanedData.tableId,
                 tableName: cleanedData.tableName,
-                apiName: cleanedData.apiName,
                 privateApiName: cleanedData.privateApiName,
             },
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,
-                apiName: true,
                 privateApiName: true,
             },
         })

package/esm/modules/cli/commands/user-state-module.js

@@ -9,6 +9,7 @@ import { coerceAnswers, parseFindFirstArgs, parseFindManyArgs, stripUndefined }
 const fieldSchema = {
     id: 'uuid',
     databaseId: 'uuid',
+    entityField: 'string',
     schemaId: 'uuid',
     tableId: 'uuid',
     tableName: 'string',
@@ -57,6 +58,7 @@ async function handleList(argv, _prompter) {
         const defaultSelect = {
             id: true,
             databaseId: true,
+            entityField: true,
             schemaId: true,
             tableId: true,
             tableName: true,
@@ -79,6 +81,7 @@ async function handleFindFirst(argv, _prompter) {
         const defaultSelect = {
             id: true,
             databaseId: true,
+            entityField: true,
             schemaId: true,
             tableId: true,
             tableName: true,
@@ -113,6 +116,7 @@ async function handleGet(argv, prompter) {
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,
@@ -138,6 +142,13 @@ async function handleCreate(argv, prompter) {
                 message: 'databaseId',
                 required: true,
             },
+            {
+                type: 'text',
+                name: 'entityField',
+                message: 'entityField',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'schemaId',
@@ -167,6 +178,7 @@ async function handleCreate(argv, prompter) {
             .create({
             data: {
                 databaseId: cleanedData.databaseId,
+                entityField: cleanedData.entityField,
                 schemaId: cleanedData.schemaId,
                 tableId: cleanedData.tableId,
                 tableName: cleanedData.tableName,
@@ -174,6 +186,7 @@ async function handleCreate(argv, prompter) {
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,
@@ -205,6 +218,13 @@ async function handleUpdate(argv, prompter) {
                 message: 'databaseId',
                 required: false,
             },
+            {
+                type: 'text',
+                name: 'entityField',
+                message: 'entityField',
+                required: false,
+                skipPrompt: true,
+            },
             {
                 type: 'text',
                 name: 'schemaId',
@@ -237,6 +257,7 @@ async function handleUpdate(argv, prompter) {
             },
             data: {
                 databaseId: cleanedData.databaseId,
+                entityField: cleanedData.entityField,
                 schemaId: cleanedData.schemaId,
                 tableId: cleanedData.tableId,
                 tableName: cleanedData.tableName,
@@ -244,6 +265,7 @@ async function handleUpdate(argv, prompter) {
             select: {
                 id: true,
                 databaseId: true,
+                entityField: true,
                 schemaId: true,
                 tableId: true,
                 tableName: true,

package/esm/modules/cli/commands.js

@@ -8,23 +8,21 @@ import contextCmd from './commands/context';
 import authCmd from './commands/auth';
 import defaultIdsModuleCmd from './commands/default-ids-module';
 import membershipTypesModuleCmd from './commands/membership-types-module';
-import userStateModuleCmd from './commands/user-state-module';
 import sessionSecretsModuleCmd from './commands/session-secrets-module';
-import configSecretsOrgModuleCmd from './commands/config-secrets-org-module';
 import devicesModuleCmd from './commands/devices-module';
 import i18NModuleCmd from './commands/i-18-n-module';
-import userCredentialsModuleCmd from './commands/user-credentials-module';
 import userSettingsModuleCmd from './commands/user-settings-module';
-import configSecretsUserModuleCmd from './commands/config-secrets-user-module';
+import userStateModuleCmd from './commands/user-state-module';
+import userCredentialsModuleCmd from './commands/user-credentials-module';
 import connectedAccountsModuleCmd from './commands/connected-accounts-module';
 import emailsModuleCmd from './commands/emails-module';
 import phoneNumbersModuleCmd from './commands/phone-numbers-module';
 import rateLimitsModuleCmd from './commands/rate-limits-module';
 import usersModuleCmd from './commands/users-module';
 import webauthnCredentialsModuleCmd from './commands/webauthn-credentials-module';
+import configSecretsUserModuleCmd from './commands/config-secrets-user-module';
 import cryptoAddressesModuleCmd from './commands/crypto-addresses-module';
 import denormalizedTableFieldCmd from './commands/denormalized-table-field';
-import identityProvidersModuleCmd from './commands/identity-providers-module';
 import rlsModuleCmd from './commands/rls-module';
 import blueprintCmd from './commands/blueprint';
 import blueprintTemplateCmd from './commands/blueprint-template';
@@ -32,40 +30,47 @@ import blueprintConstructionCmd from './commands/blueprint-construction';
 import cryptoAuthModuleCmd from './commands/crypto-auth-module';
 import sessionsModuleCmd from './commands/sessions-module';
 import secureTableProvisionCmd from './commands/secure-table-provision';
-import databaseProvisionModuleCmd from './commands/database-provision-module';
-import configSecretsModuleCmd from './commands/config-secrets-module';
+import identityProvidersModuleCmd from './commands/identity-providers-module';
+import integrationProvidersModuleCmd from './commands/integration-providers-module';
+import dbPoolConfigCmd from './commands/db-pool-config';
+import realtimeModuleCmd from './commands/realtime-module';
+import infraSecretsModuleCmd from './commands/infra-secrets-module';
+import internalSecretsModuleCmd from './commands/internal-secrets-module';
+import dbPresetModuleCmd from './commands/db-preset-module';
 import graphModuleCmd from './commands/graph-module';
-import merkleStoreModuleCmd from './commands/merkle-store-module';
 import rateLimitMetersModuleCmd from './commands/rate-limit-meters-module';
-import realtimeModuleCmd from './commands/realtime-module';
+import infraConfigModuleCmd from './commands/infra-config-module';
 import webauthnAuthModuleCmd from './commands/webauthn-auth-module';
-import functionInvocationModuleCmd from './commands/function-invocation-module';
+import principalAuthModuleCmd from './commands/principal-auth-module';
+import dbPoolCmd from './commands/db-pool';
 import functionModuleCmd from './commands/function-module';
+import merkleStoreModuleCmd from './commands/merkle-store-module';
+import databaseProvisionModuleCmd from './commands/database-provision-module';
+import functionInvocationModuleCmd from './commands/function-invocation-module';
 import invitesModuleCmd from './commands/invites-module';
-import principalAuthModuleCmd from './commands/principal-auth-module';
+import namespaceModuleCmd from './commands/namespace-module';
+import plansModuleCmd from './commands/plans-module';
 import computeLogModuleCmd from './commands/compute-log-module';
 import inferenceLogModuleCmd from './commands/inference-log-module';
-import namespaceModuleCmd from './commands/namespace-module';
-import resourceModuleCmd from './commands/resource-module';
 import storageLogModuleCmd from './commands/storage-log-module';
 import transferLogModuleCmd from './commands/transfer-log-module';
-import functionDeploymentModuleCmd from './commands/function-deployment-module';
-import plansModuleCmd from './commands/plans-module';
 import billingProviderModuleCmd from './commands/billing-provider-module';
-import dbUsageModuleCmd from './commands/db-usage-module';
+import functionDeploymentModuleCmd from './commands/function-deployment-module';
+import permissionsModuleCmd from './commands/permissions-module';
 import graphExecutionModuleCmd from './commands/graph-execution-module';
 import hierarchyModuleCmd from './commands/hierarchy-module';
-import permissionsModuleCmd from './commands/permissions-module';
 import notificationsModuleCmd from './commands/notifications-module';
+import relationProvisionCmd from './commands/relation-provision';
 import profilesModuleCmd from './commands/profiles-module';
 import billingModuleCmd from './commands/billing-module';
-import relationProvisionCmd from './commands/relation-provision';
+import resourceModuleCmd from './commands/resource-module';
 import userAuthModuleCmd from './commands/user-auth-module';
+import dbUsageModuleCmd from './commands/db-usage-module';
 import agentModuleCmd from './commands/agent-module';
 import limitsModuleCmd from './commands/limits-module';
-import membershipsModuleCmd from './commands/memberships-module';
 import entityTypeProvisionCmd from './commands/entity-type-provision';
 import storageModuleCmd from './commands/storage-module';
+import membershipsModuleCmd from './commands/memberships-module';
 import eventsModuleCmd from './commands/events-module';
 import resolveBlueprintFieldCmd from './commands/resolve-blueprint-field';
 import resolveBlueprintTableCmd from './commands/resolve-blueprint-table';
@@ -84,23 +89,21 @@ const createCommandMap = () => ({
     auth: authCmd,
     'default-ids-module': defaultIdsModuleCmd,
     'membership-types-module': membershipTypesModuleCmd,
-    'user-state-module': userStateModuleCmd,
     'session-secrets-module': sessionSecretsModuleCmd,
-    'config-secrets-org-module': configSecretsOrgModuleCmd,
     'devices-module': devicesModuleCmd,
     'i-18-n-module': i18NModuleCmd,
-    'user-credentials-module': userCredentialsModuleCmd,
     'user-settings-module': userSettingsModuleCmd,
-    'config-secrets-user-module': configSecretsUserModuleCmd,
+    'user-state-module': userStateModuleCmd,
+    'user-credentials-module': userCredentialsModuleCmd,
     'connected-accounts-module': connectedAccountsModuleCmd,
     'emails-module': emailsModuleCmd,
     'phone-numbers-module': phoneNumbersModuleCmd,
     'rate-limits-module': rateLimitsModuleCmd,
     'users-module': usersModuleCmd,
     'webauthn-credentials-module': webauthnCredentialsModuleCmd,
+    'config-secrets-user-module': configSecretsUserModuleCmd,
     'crypto-addresses-module': cryptoAddressesModuleCmd,
     'denormalized-table-field': denormalizedTableFieldCmd,
-    'identity-providers-module': identityProvidersModuleCmd,
     'rls-module': rlsModuleCmd,
     blueprint: blueprintCmd,
     'blueprint-template': blueprintTemplateCmd,
@@ -108,40 +111,47 @@ const createCommandMap = () => ({
     'crypto-auth-module': cryptoAuthModuleCmd,
     'sessions-module': sessionsModuleCmd,
     'secure-table-provision': secureTableProvisionCmd,
-    'database-provision-module': databaseProvisionModuleCmd,
-    'config-secrets-module': configSecretsModuleCmd,
+    'identity-providers-module': identityProvidersModuleCmd,
+    'integration-providers-module': integrationProvidersModuleCmd,
+    'db-pool-config': dbPoolConfigCmd,
+    'realtime-module': realtimeModuleCmd,
+    'infra-secrets-module': infraSecretsModuleCmd,
+    'internal-secrets-module': internalSecretsModuleCmd,
+    'db-preset-module': dbPresetModuleCmd,
     'graph-module': graphModuleCmd,
-    'merkle-store-module': merkleStoreModuleCmd,
     'rate-limit-meters-module': rateLimitMetersModuleCmd,
-    'realtime-module': realtimeModuleCmd,
+    'infra-config-module': infraConfigModuleCmd,
     'webauthn-auth-module': webauthnAuthModuleCmd,
-    'function-invocation-module': functionInvocationModuleCmd,
+    'principal-auth-module': principalAuthModuleCmd,
+    'db-pool': dbPoolCmd,
     'function-module': functionModuleCmd,
+    'merkle-store-module': merkleStoreModuleCmd,
+    'database-provision-module': databaseProvisionModuleCmd,
+    'function-invocation-module': functionInvocationModuleCmd,
     'invites-module': invitesModuleCmd,
-    'principal-auth-module': principalAuthModuleCmd,
+    'namespace-module': namespaceModuleCmd,
+    'plans-module': plansModuleCmd,
     'compute-log-module': computeLogModuleCmd,
     'inference-log-module': inferenceLogModuleCmd,
-    'namespace-module': namespaceModuleCmd,
-    'resource-module': resourceModuleCmd,
     'storage-log-module': storageLogModuleCmd,
     'transfer-log-module': transferLogModuleCmd,
-    'function-deployment-module': functionDeploymentModuleCmd,
-    'plans-module': plansModuleCmd,
     'billing-provider-module': billingProviderModuleCmd,
-    'db-usage-module': dbUsageModuleCmd,
+    'function-deployment-module': functionDeploymentModuleCmd,
+    'permissions-module': permissionsModuleCmd,
     'graph-execution-module': graphExecutionModuleCmd,
     'hierarchy-module': hierarchyModuleCmd,
-    'permissions-module': permissionsModuleCmd,
     'notifications-module': notificationsModuleCmd,
+    'relation-provision': relationProvisionCmd,
     'profiles-module': profilesModuleCmd,
     'billing-module': billingModuleCmd,
-    'relation-provision': relationProvisionCmd,
+    'resource-module': resourceModuleCmd,
     'user-auth-module': userAuthModuleCmd,
+    'db-usage-module': dbUsageModuleCmd,
     'agent-module': agentModuleCmd,
     'limits-module': limitsModuleCmd,
-    'memberships-module': membershipsModuleCmd,
     'entity-type-provision': entityTypeProvisionCmd,
     'storage-module': storageModuleCmd,
+    'memberships-module': membershipsModuleCmd,
     'events-module': eventsModuleCmd,
     'resolve-blueprint-field': resolveBlueprintFieldCmd,
     'resolve-blueprint-table': resolveBlueprintTableCmd,
@@ -156,7 +166,7 @@ const createCommandMap = () => ({
     'provision-relation': provisionRelationCmd,
     'provision-bucket': provisionBucketCmd,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  default-ids-module   defaultIdsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  config-secrets-org-module configSecretsOrgModule CRUD operations\n  devices-module       devicesModule CRUD operations\n  i-18-n-module        i18NModule CRUD operations\n  user-credentials-module userCredentialsModule CRUD operations\n  user-settings-module userSettingsModule CRUD operations\n  config-secrets-user-module configSecretsUserModule CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  emails-module        emailsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  users-module         usersModule CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  rls-module           rlsModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  config-secrets-module configSecretsModule CRUD operations\n  graph-module         graphModule CRUD operations\n  merkle-store-module  merkleStoreModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  function-invocation-module functionInvocationModule CRUD operations\n  function-module      functionModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  principal-auth-module principalAuthModule CRUD operations\n  compute-log-module   computeLogModule CRUD operations\n  inference-log-module inferenceLogModule CRUD operations\n  namespace-module     namespaceModule CRUD operations\n  resource-module      resourceModule CRUD operations\n  storage-log-module   storageLogModule CRUD operations\n  transfer-log-module  transferLogModule CRUD operations\n  function-deployment-module functionDeploymentModule CRUD operations\n  plans-module         plansModule CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  db-usage-module      dbUsageModule CRUD operations\n  graph-execution-module graphExecutionModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  billing-module       billingModule CRUD operations\n  relation-provision   relationProvision CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  agent-module         agentModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  storage-module       storageModule CRUD operations\n  events-module        eventsModule CRUD operations\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security. When a prefix already exists (e.g., 'org'), the entry extends the existing entity type instead of creating a new one; if a storage[] key is present, it provisions entity-scoped storage for that type. (0.5) scope-based storage: each storage[] entry has an optional scope ('app' or 'org' only). App-scoped storage seeds buckets at migration time. Org-scoped storage resolves the org membership type, creates org_buckets/org_files with owner_id, and seeds buckets per-entity via an AFTER INSERT trigger on the users table. When function_module is installed, a private functions bucket is auto-injected into org-scoped or entity-scoped storage entries. (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred). After provisioning, optional smart_tags (jsonb object) on the table entry are applied via metaschema.append_table_smart_tags(), and optional smart_tags on individual field entries are applied via metaschema.append_field_smart_tags(). (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  default-ids-module   defaultIdsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  devices-module       devicesModule CRUD operations\n  i-18-n-module        i18NModule CRUD operations\n  user-settings-module userSettingsModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  user-credentials-module userCredentialsModule CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  emails-module        emailsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  users-module         usersModule CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  config-secrets-user-module configSecretsUserModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  rls-module           rlsModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  integration-providers-module integrationProvidersModule CRUD operations\n  db-pool-config       dbPoolConfig CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  infra-secrets-module infraSecretsModule CRUD operations\n  internal-secrets-module internalSecretsModule CRUD operations\n  db-preset-module     dbPresetModule CRUD operations\n  graph-module         graphModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  infra-config-module  infraConfigModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  principal-auth-module principalAuthModule CRUD operations\n  db-pool              dbPool CRUD operations\n  function-module      functionModule CRUD operations\n  merkle-store-module  merkleStoreModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  function-invocation-module functionInvocationModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  namespace-module     namespaceModule CRUD operations\n  plans-module         plansModule CRUD operations\n  compute-log-module   computeLogModule CRUD operations\n  inference-log-module inferenceLogModule CRUD operations\n  storage-log-module   storageLogModule CRUD operations\n  transfer-log-module  transferLogModule CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  function-deployment-module functionDeploymentModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  graph-execution-module graphExecutionModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  relation-provision   relationProvision CRUD operations\n  profiles-module      profilesModule CRUD operations\n  billing-module       billingModule CRUD operations\n  resource-module      resourceModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  db-usage-module      dbUsageModule CRUD operations\n  agent-module         agentModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  storage-module       storageModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  events-module        eventsModule CRUD operations\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security. When a prefix already exists (e.g., 'org'), the entry extends the existing entity type instead of creating a new one; if a storage[] key is present, it provisions entity-scoped storage for that type. (0.5) scope-based storage: each storage[] entry has an optional scope ('app' or 'org' only). App-scoped storage seeds buckets at migration time. Org-scoped storage resolves the org membership type, creates org_buckets/org_files with owner_id, and seeds buckets per-entity via an AFTER INSERT trigger on the users table. When function_module is installed, a private functions bucket is auto-injected into org-scoped or entity-scoped storage entries. (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred). After provisioning, optional smart_tags (jsonb object) on the table entry are applied via metaschema.append_table_smart_tags(), and optional smart_tags on individual field entries are applied via metaschema.append_field_smart_tags(). (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
 export const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/esm/modules/cli/executor.d.ts

@@ -2,23 +2,21 @@ export declare const getStore: () => import("appstash").ConfigStore;
 export declare function getClient(contextName?: string): {
     defaultIdsModule: import("..").DefaultIdsModuleModel;
     membershipTypesModule: import("..").MembershipTypesModuleModel;
-    userStateModule: import("..").UserStateModuleModel;
     sessionSecretsModule: import("..").SessionSecretsModuleModel;
-    configSecretsOrgModule: import("..").ConfigSecretsOrgModuleModel;
     devicesModule: import("..").DevicesModuleModel;
     i18NModule: import("..").I18NModuleModel;
-    userCredentialsModule: import("..").UserCredentialsModuleModel;
     userSettingsModule: import("..").UserSettingsModuleModel;
-    configSecretsUserModule: import("..").ConfigSecretsUserModuleModel;
+    userStateModule: import("..").UserStateModuleModel;
+    userCredentialsModule: import("..").UserCredentialsModuleModel;
     connectedAccountsModule: import("..").ConnectedAccountsModuleModel;
     emailsModule: import("..").EmailsModuleModel;
     phoneNumbersModule: import("..").PhoneNumbersModuleModel;
     rateLimitsModule: import("..").RateLimitsModuleModel;
     usersModule: import("..").UsersModuleModel;
     webauthnCredentialsModule: import("..").WebauthnCredentialsModuleModel;
+    configSecretsUserModule: import("..").ConfigSecretsUserModuleModel;
     cryptoAddressesModule: import("..").CryptoAddressesModuleModel;
     denormalizedTableField: import("..").DenormalizedTableFieldModel;
-    identityProvidersModule: import("..").IdentityProvidersModuleModel;
     rlsModule: import("..").RlsModuleModel;
     blueprint: import("..").BlueprintModel;
     blueprintTemplate: import("..").BlueprintTemplateModel;
@@ -26,40 +24,47 @@ export declare function getClient(contextName?: string): {
     cryptoAuthModule: import("..").CryptoAuthModuleModel;
     sessionsModule: import("..").SessionsModuleModel;
     secureTableProvision: import("..").SecureTableProvisionModel;
-    databaseProvisionModule: import("..").DatabaseProvisionModuleModel;
-    configSecretsModule: import("..").ConfigSecretsModuleModel;
+    identityProvidersModule: import("..").IdentityProvidersModuleModel;
+    integrationProvidersModule: import("..").IntegrationProvidersModuleModel;
+    dbPoolConfig: import("..").DbPoolConfigModel;
+    realtimeModule: import("..").RealtimeModuleModel;
+    infraSecretsModule: import("..").InfraSecretsModuleModel;
+    internalSecretsModule: import("..").InternalSecretsModuleModel;
+    dbPresetModule: import("..").DbPresetModuleModel;
     graphModule: import("..").GraphModuleModel;
-    merkleStoreModule: import("..").MerkleStoreModuleModel;
     rateLimitMetersModule: import("..").RateLimitMetersModuleModel;
-    realtimeModule: import("..").RealtimeModuleModel;
+    infraConfigModule: import("..").InfraConfigModuleModel;
     webauthnAuthModule: import("..").WebauthnAuthModuleModel;
-    functionInvocationModule: import("..").FunctionInvocationModuleModel;
+    principalAuthModule: import("..").PrincipalAuthModuleModel;
+    dbPool: import("..").DbPoolModel;
     functionModule: import("..").FunctionModuleModel;
+    merkleStoreModule: import("..").MerkleStoreModuleModel;
+    databaseProvisionModule: import("..").DatabaseProvisionModuleModel;
+    functionInvocationModule: import("..").FunctionInvocationModuleModel;
     invitesModule: import("..").InvitesModuleModel;
-    principalAuthModule: import("..").PrincipalAuthModuleModel;
+    namespaceModule: import("..").NamespaceModuleModel;
+    plansModule: import("..").PlansModuleModel;
     computeLogModule: import("..").ComputeLogModuleModel;
     inferenceLogModule: import("..").InferenceLogModuleModel;
-    namespaceModule: import("..").NamespaceModuleModel;
-    resourceModule: import("..").ResourceModuleModel;
     storageLogModule: import("..").StorageLogModuleModel;
     transferLogModule: import("..").TransferLogModuleModel;
-    functionDeploymentModule: import("..").FunctionDeploymentModuleModel;
-    plansModule: import("..").PlansModuleModel;
     billingProviderModule: import("..").BillingProviderModuleModel;
-    dbUsageModule: import("..").DbUsageModuleModel;
+    functionDeploymentModule: import("..").FunctionDeploymentModuleModel;
+    permissionsModule: import("..").PermissionsModuleModel;
     graphExecutionModule: import("..").GraphExecutionModuleModel;
     hierarchyModule: import("..").HierarchyModuleModel;
-    permissionsModule: import("..").PermissionsModuleModel;
     notificationsModule: import("..").NotificationsModuleModel;
+    relationProvision: import("..").RelationProvisionModel;
     profilesModule: import("..").ProfilesModuleModel;
     billingModule: import("..").BillingModuleModel;
-    relationProvision: import("..").RelationProvisionModel;
+    resourceModule: import("..").ResourceModuleModel;
     userAuthModule: import("..").UserAuthModuleModel;
+    dbUsageModule: import("..").DbUsageModuleModel;
     agentModule: import("..").AgentModuleModel;
     limitsModule: import("..").LimitsModuleModel;
-    membershipsModule: import("..").MembershipsModuleModel;
     entityTypeProvision: import("..").EntityTypeProvisionModel;
     storageModule: import("..").StorageModuleModel;
+    membershipsModule: import("..").MembershipsModuleModel;
     eventsModule: import("..").EventsModuleModel;
     query: {
         resolveBlueprintField: (args: import("../orm/query").ResolveBlueprintFieldVariables, options?: {