@constructive-sdk/cli 0.30.0 → 0.30.2

package/api/orm/models/index.d.ts

@@ -47,5 +47,5 @@ export { DatabaseModel } from './database';
 export { RlsSettingModel } from './rlsSetting';
 export { SqlActionModel } from './sqlAction';
 export { DatabaseSettingModel } from './databaseSetting';
-export { WebauthnSettingModel } from './webauthnSetting';
 export { AstMigrationModel } from './astMigration';
+export { WebauthnSettingModel } from './webauthnSetting';

package/api/orm/models/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AstMigrationModel = exports.WebauthnSettingModel = exports.DatabaseSettingModel = exports.SqlActionModel = exports.RlsSettingModel = exports.DatabaseModel = exports.PubkeySettingModel = exports.NodeTypeRegistryModel = exports.MigrateFileModel = exports.ApiSettingModel = exports.AppModel = exports.SiteModel = exports.ApiModel = exports.DatabaseTransferModel = exports.PartitionModel = exports.TriggerFunctionModel = exports.CorsSettingModel = exports.SiteThemeModel = exports.SiteModuleModel = exports.SiteMetadatumModel = exports.DomainModel = exports.ApiModuleModel = exports.ApiSchemaModel = exports.CompositeTypeModel = exports.EnumModel = exports.DefaultPrivilegeModel = exports.SchemaGrantModel = exports.EmbeddingChunkModel = exports.ViewRuleModel = exports.ViewGrantModel = exports.ViewTableModel = exports.ViewModel = exports.UniqueConstraintModel = exports.TriggerModel = exports.TableGrantModel = exports.PrimaryKeyConstraintModel = exports.PolicyModel = exports.IndexModel = exports.FullTextSearchModel = exports.ForeignKeyConstraintModel = exports.SpatialRelationModel = exports.FieldModel = exports.CheckConstraintModel = exports.TableModel = exports.SchemaModel = exports.FunctionModel = void 0;
+exports.WebauthnSettingModel = exports.AstMigrationModel = exports.DatabaseSettingModel = exports.SqlActionModel = exports.RlsSettingModel = exports.DatabaseModel = exports.PubkeySettingModel = exports.NodeTypeRegistryModel = exports.MigrateFileModel = exports.ApiSettingModel = exports.AppModel = exports.SiteModel = exports.ApiModel = exports.DatabaseTransferModel = exports.PartitionModel = exports.TriggerFunctionModel = exports.CorsSettingModel = exports.SiteThemeModel = exports.SiteModuleModel = exports.SiteMetadatumModel = exports.DomainModel = exports.ApiModuleModel = exports.ApiSchemaModel = exports.CompositeTypeModel = exports.EnumModel = exports.DefaultPrivilegeModel = exports.SchemaGrantModel = exports.EmbeddingChunkModel = exports.ViewRuleModel = exports.ViewGrantModel = exports.ViewTableModel = exports.ViewModel = exports.UniqueConstraintModel = exports.TriggerModel = exports.TableGrantModel = exports.PrimaryKeyConstraintModel = exports.PolicyModel = exports.IndexModel = exports.FullTextSearchModel = exports.ForeignKeyConstraintModel = exports.SpatialRelationModel = exports.FieldModel = exports.CheckConstraintModel = exports.TableModel = exports.SchemaModel = exports.FunctionModel = void 0;
 /**
  * Models barrel export
  * @generated by @constructive-io/graphql-codegen
@@ -94,7 +94,7 @@ var sqlAction_1 = require("./sqlAction");
 Object.defineProperty(exports, "SqlActionModel", { enumerable: true, get: function () { return sqlAction_1.SqlActionModel; } });
 var databaseSetting_1 = require("./databaseSetting");
 Object.defineProperty(exports, "DatabaseSettingModel", { enumerable: true, get: function () { return databaseSetting_1.DatabaseSettingModel; } });
-var webauthnSetting_1 = require("./webauthnSetting");
-Object.defineProperty(exports, "WebauthnSettingModel", { enumerable: true, get: function () { return webauthnSetting_1.WebauthnSettingModel; } });
 var astMigration_1 = require("./astMigration");
 Object.defineProperty(exports, "AstMigrationModel", { enumerable: true, get: function () { return astMigration_1.AstMigrationModel; } });
+var webauthnSetting_1 = require("./webauthnSetting");
+Object.defineProperty(exports, "WebauthnSettingModel", { enumerable: true, get: function () { return webauthnSetting_1.WebauthnSettingModel; } });

package/api/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { AcceptDatabaseTransferInput, CancelDatabaseTransferInput, RejectDatabaseTransferInput, ProvisionDatabaseWithUserInput, BootstrapUserInput, SetFieldOrderInput, ApplyRlsInput, CreateUserDatabaseInput, ProvisionBucketInput, AcceptDatabaseTransferPayload, CancelDatabaseTransferPayload, RejectDatabaseTransferPayload, ProvisionDatabaseWithUserPayload, BootstrapUserPayload, SetFieldOrderPayload, ApplyRlsPayload, CreateUserDatabasePayload, ProvisionBucketPayload, AcceptDatabaseTransferPayloadSelect, CancelDatabaseTransferPayloadSelect, RejectDatabaseTransferPayloadSelect, ProvisionDatabaseWithUserPayloadSelect, BootstrapUserPayloadSelect, SetFieldOrderPayloadSelect, ApplyRlsPayloadSelect, CreateUserDatabasePayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
+import type { AcceptDatabaseTransferInput, CancelDatabaseTransferInput, RejectDatabaseTransferInput, SetFieldOrderInput, ApplyRlsInput, RequestDatabaseInput, ProvisionBucketInput, AcceptDatabaseTransferPayload, CancelDatabaseTransferPayload, RejectDatabaseTransferPayload, SetFieldOrderPayload, ApplyRlsPayload, RequestDatabasePayload, ProvisionBucketPayload, AcceptDatabaseTransferPayloadSelect, CancelDatabaseTransferPayloadSelect, RejectDatabaseTransferPayloadSelect, SetFieldOrderPayloadSelect, ApplyRlsPayloadSelect, RequestDatabasePayloadSelect, ProvisionBucketPayloadSelect } from '../input-types';
 export interface AcceptDatabaseTransferVariables {
     input: AcceptDatabaseTransferInput;
 }
@@ -16,12 +16,6 @@ export interface CancelDatabaseTransferVariables {
 export interface RejectDatabaseTransferVariables {
     input: RejectDatabaseTransferInput;
 }
-export interface ProvisionDatabaseWithUserVariables {
-    input: ProvisionDatabaseWithUserInput;
-}
-export interface BootstrapUserVariables {
-    input: BootstrapUserInput;
-}
 export interface SetFieldOrderVariables {
     input: SetFieldOrderInput;
 }
@@ -29,26 +23,17 @@ export interface ApplyRlsVariables {
     input: ApplyRlsInput;
 }
 /**
- * Variables for createUserDatabase
- * Creates a new user database with all required modules, permissions, and RLS policies.
+ * Variables for requestDatabase
+ * Requests a database and returns a ticket (database_provision_module row) to poll.
 
-Parameters:
-  - database_name: Name for the new database (required)
-  - owner_id: UUID of the owner user (required)
-  - include_invites: Include invite system (default: true)
-  - include_groups: Include group-level memberships (default: false)
-  - include_levels: Include events/analytics (default: false)
-  - bitlen: Bit length for permission masks (default: 64)
-  - tokens_expiration: Token expiration interval (default: 30 days)
-
-Returns the database_id UUID of the newly created database.
+Pass exactly one of preset_slug or modules. The pool, presets, and owner bootstrap are private implementation details: a warm pool hit fulfills the ticket immediately (fulfilled_at set, deferred owner bootstrap), otherwise the database is cold-provisioned with exactly the requested modules. Poll the ticket until status = 'completed'; it then carries database_id and fulfilled_at.
 
 Example usage:
-  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid);
-  SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true);  -- with invites and groups
+  SELECT * FROM metaschema_public.request_database('my_app', 'example.com', preset_slug := 'full');
+  SELECT * FROM metaschema_public.request_database('my_app', 'example.com', modules := '["users_module", "emails_module"]'::jsonb);
  */
-export interface CreateUserDatabaseVariables {
-    input: CreateUserDatabaseInput;
+export interface RequestDatabaseVariables {
+    input: RequestDatabaseInput;
 }
 /**
  * Variables for provisionBucket
@@ -76,16 +61,6 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, RejectDatabaseTransferPayloadSelect>) => QueryBuilder<{
         rejectDatabaseTransfer: InferSelectResult<RejectDatabaseTransferPayload, S> | null;
     }>;
-    provisionDatabaseWithUser: <S extends ProvisionDatabaseWithUserPayloadSelect>(args: ProvisionDatabaseWithUserVariables, options: {
-        select: S;
-    } & StrictSelect<S, ProvisionDatabaseWithUserPayloadSelect>) => QueryBuilder<{
-        provisionDatabaseWithUser: InferSelectResult<ProvisionDatabaseWithUserPayload, S> | null;
-    }>;
-    bootstrapUser: <S extends BootstrapUserPayloadSelect>(args: BootstrapUserVariables, options: {
-        select: S;
-    } & StrictSelect<S, BootstrapUserPayloadSelect>) => QueryBuilder<{
-        bootstrapUser: InferSelectResult<BootstrapUserPayload, S> | null;
-    }>;
     setFieldOrder: <S extends SetFieldOrderPayloadSelect>(args: SetFieldOrderVariables, options: {
         select: S;
     } & StrictSelect<S, SetFieldOrderPayloadSelect>) => QueryBuilder<{
@@ -96,10 +71,10 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, ApplyRlsPayloadSelect>) => QueryBuilder<{
         applyRls: InferSelectResult<ApplyRlsPayload, S> | null;
     }>;
-    createUserDatabase: <S extends CreateUserDatabasePayloadSelect>(args: CreateUserDatabaseVariables, options: {
+    requestDatabase: <S extends RequestDatabasePayloadSelect>(args: RequestDatabaseVariables, options: {
         select: S;
-    } & StrictSelect<S, CreateUserDatabasePayloadSelect>) => QueryBuilder<{
-        createUserDatabase: InferSelectResult<CreateUserDatabasePayload, S> | null;
+    } & StrictSelect<S, RequestDatabasePayloadSelect>) => QueryBuilder<{
+        requestDatabase: InferSelectResult<RequestDatabasePayload, S> | null;
     }>;
     provisionBucket: <S extends ProvisionBucketPayloadSelect>(args: ProvisionBucketVariables, options: {
         select: S;

package/api/orm/mutation/index.js

@@ -41,30 +41,6 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'RejectDatabaseTransferPayload'),
         }),
-        provisionDatabaseWithUser: (args, options) => new query_builder_1.QueryBuilder({
-            client,
-            operation: 'mutation',
-            operationName: 'ProvisionDatabaseWithUser',
-            fieldName: 'provisionDatabaseWithUser',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'ProvisionDatabaseWithUser', 'provisionDatabaseWithUser', options.select, args, [
-                {
-                    name: 'input',
-                    type: 'ProvisionDatabaseWithUserInput!',
-                },
-            ], input_types_1.connectionFieldsMap, 'ProvisionDatabaseWithUserPayload'),
-        }),
-        bootstrapUser: (args, options) => new query_builder_1.QueryBuilder({
-            client,
-            operation: 'mutation',
-            operationName: 'BootstrapUser',
-            fieldName: 'bootstrapUser',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'BootstrapUser', 'bootstrapUser', options.select, args, [
-                {
-                    name: 'input',
-                    type: 'BootstrapUserInput!',
-                },
-            ], input_types_1.connectionFieldsMap, 'BootstrapUserPayload'),
-        }),
         setFieldOrder: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -89,17 +65,17 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'ApplyRlsPayload'),
         }),
-        createUserDatabase: (args, options) => new query_builder_1.QueryBuilder({
+        requestDatabase: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
-            operationName: 'CreateUserDatabase',
-            fieldName: 'createUserDatabase',
-            ...(0, query_builder_1.buildCustomDocument)('mutation', 'CreateUserDatabase', 'createUserDatabase', options.select, args, [
+            operationName: 'RequestDatabase',
+            fieldName: 'requestDatabase',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'RequestDatabase', 'requestDatabase', options.select, args, [
                 {
                     name: 'input',
-                    type: 'CreateUserDatabaseInput!',
+                    type: 'RequestDatabaseInput!',
                 },
-            ], input_types_1.connectionFieldsMap, 'CreateUserDatabasePayload'),
+            ], input_types_1.connectionFieldsMap, 'RequestDatabasePayload'),
         }),
         provisionBucket: (args, options) => new query_builder_1.QueryBuilder({
             client,

package/auth/cli/commands/delete-principal.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI command for mutation deletePrincipal
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/{config/cli/commands/org-secrets-rotate.js → auth/cli/commands/delete-principal.js}

@@ -5,7 +5,7 @@ const utils_1 = require("../utils");
 exports.default = async (argv, prompter, _options) => {
     try {
         if (argv.help || argv.h) {
-            console.log('org-secrets-rotate - orgSecretsRotate\n\nUsage: org-secrets-rotate [OPTIONS]\n');
+            console.log('delete-principal - deletePrincipal\n\nUsage: delete-principal [OPTIONS]\n');
             process.exit(0);
         }
         const answers = await prompter.prompt(argv, [
@@ -20,14 +20,14 @@ exports.default = async (argv, prompter, _options) => {
         const parsedAnswers = (0, utils_1.unflattenDotNotation)(answers);
         const selectFields = (0, utils_1.buildSelectFromPaths)(argv.select ?? 'clientMutationId');
         const result = await client.mutation
-            .orgSecretsRotate(parsedAnswers, {
+            .deletePrincipal(parsedAnswers, {
             select: selectFields,
         })
             .execute();
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
-        console.error('Failed: orgSecretsRotate');
+        console.error('Failed: deletePrincipal');
         if (error instanceof Error) {
             console.error(error.message);
         }

package/auth/cli/commands/principal-scope-override.js

@@ -15,7 +15,8 @@ const fieldSchema = {
     principalId: 'uuid',
     membershipType: 'int',
     allowedMask: 'string',
-    isAdmin: 'boolean',
+    useAdminOwner: 'boolean',
+    isActive: 'boolean',
     isReadOnly: 'boolean',
 };
 const usage = '\nprincipal-scope-override <command>\n\nCommands:\n  list                  List principalScopeOverride records\n  find-first            Find first matching principalScopeOverride record\n  create                Create a new principalScopeOverride\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\n  --help, -h            Show this help message\n';
@@ -60,7 +61,8 @@ async function handleList(argv, _prompter) {
             principalId: true,
             membershipType: true,
             allowedMask: true,
-            isAdmin: true,
+            useAdminOwner: true,
+            isActive: true,
             isReadOnly: true,
         };
         const findManyArgs = (0, utils_1.parseFindManyArgs)(argv, defaultSelect);
@@ -85,7 +87,8 @@ async function handleFindFirst(argv, _prompter) {
             principalId: true,
             membershipType: true,
             allowedMask: true,
-            isAdmin: true,
+            useAdminOwner: true,
+            isActive: true,
             isReadOnly: true,
         };
         const findFirstArgs = (0, utils_1.parseFindFirstArgs)(argv, defaultSelect);
@@ -124,8 +127,14 @@ async function handleCreate(argv, prompter) {
             },
             {
                 type: 'boolean',
-                name: 'isAdmin',
-                message: 'isAdmin',
+                name: 'useAdminOwner',
+                message: 'useAdminOwner',
+                required: true,
+            },
+            {
+                type: 'boolean',
+                name: 'isActive',
+                message: 'isActive',
                 required: true,
             },
             {
@@ -144,7 +153,8 @@ async function handleCreate(argv, prompter) {
                 principalId: cleanedData.principalId,
                 membershipType: cleanedData.membershipType,
                 allowedMask: cleanedData.allowedMask,
-                isAdmin: cleanedData.isAdmin,
+                useAdminOwner: cleanedData.useAdminOwner,
+                isActive: cleanedData.isActive,
                 isReadOnly: cleanedData.isReadOnly,
             },
             select: {
@@ -154,7 +164,8 @@ async function handleCreate(argv, prompter) {
                 principalId: true,
                 membershipType: true,
                 allowedMask: true,
-                isAdmin: true,
+                useAdminOwner: true,
+                isActive: true,
                 isReadOnly: true,
             },
         })

package/auth/cli/commands/principal.d.ts

@@ -3,6 +3,6 @@
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
-import { CLIOptions, Inquirerer } from "inquirerer";
+import { CLIOptions, Inquirerer } from 'inquirerer';
 declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
 export default _default;

package/auth/cli/commands/principal.js

@@ -9,17 +9,17 @@ const inquirerer_1 = require("inquirerer");
 const executor_1 = require("../executor");
 const utils_1 = require("../utils");
 const fieldSchema = {
-    id: "uuid",
-    createdAt: "string",
-    updatedAt: "string",
-    ownerId: "uuid",
-    userId: "uuid",
-    name: "string",
-    allowedMask: "string",
-    isReadOnly: "boolean",
-    bypassStepUp: "boolean"
+    id: 'uuid',
+    createdAt: 'string',
+    updatedAt: 'string',
+    ownerId: 'uuid',
+    userId: 'uuid',
+    name: 'string',
+    useAdminOwner: 'boolean',
+    isReadOnly: 'boolean',
+    bypassStepUp: 'boolean',
 };
-const usage = "\nprincipal <command>\n\nCommands:\n  list                  List principal records\n  find-first            Find first matching principal record\n  create                Create a new principal\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\n  --help, -h            Show this help message\n";
+const usage = '\nprincipal <command>\n\nCommands:\n  list                  List principal records\n  find-first            Find first matching principal record\n  create                Create a new principal\n\nList Options:\n  --limit <n>           Max number of records to return (forward pagination)\n  --last <n>            Number of records from the end (backward pagination)\n  --after <cursor>      Cursor for forward pagination\n  --before <cursor>     Cursor for backward pagination\n  --offset <n>          Number of records to skip\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.name.equalTo foo)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\nFind-First Options:\n  --select <fields>     Comma-separated list of fields to return\n  --where.<field>.<op>  Filter (dot-notation, e.g. --where.status.equalTo active)\n  --condition.<f>.<op>  Condition filter (dot-notation)\n  --orderBy <values>    Comma-separated ordering values (e.g. NAME_ASC,CREATED_AT_DESC)\n\n  --help, -h            Show this help message\n';
 exports.default = async (argv, prompter, _options) => {
     if (argv.help || argv.h) {
         console.log(usage);
@@ -27,23 +27,25 @@ exports.default = async (argv, prompter, _options) => {
     }
     const { first: subcommand, newArgv } = (0, inquirerer_1.extractFirst)(argv);
     if (!subcommand) {
-        const answer = await prompter.prompt(argv, [{
-                type: "autocomplete",
-                name: "subcommand",
-                message: "What do you want to do?",
-                options: ["list", "find-first", "create"]
-            }]);
+        const answer = await prompter.prompt(argv, [
+            {
+                type: 'autocomplete',
+                name: 'subcommand',
+                message: 'What do you want to do?',
+                options: ['list', 'find-first', 'create'],
+            },
+        ]);
         return handleTableSubcommand(answer.subcommand, newArgv, prompter);
     }
     return handleTableSubcommand(subcommand, newArgv, prompter);
 };
 async function handleTableSubcommand(subcommand, argv, prompter) {
     switch (subcommand) {
-        case "list":
+        case 'list':
             return handleList(argv, prompter);
-        case "find-first":
+        case 'find-first':
             return handleFindFirst(argv, prompter);
-        case "create":
+        case 'create':
             return handleCreate(argv, prompter);
         default:
             console.log(usage);
@@ -59,9 +61,9 @@ async function handleList(argv, _prompter) {
             ownerId: true,
             userId: true,
             name: true,
-            allowedMask: true,
+            useAdminOwner: true,
             isReadOnly: true,
-            bypassStepUp: true
+            bypassStepUp: true,
         };
         const findManyArgs = (0, utils_1.parseFindManyArgs)(argv, defaultSelect);
         const client = (0, executor_1.getClient)();
@@ -69,7 +71,7 @@ async function handleList(argv, _prompter) {
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
-        console.error("Failed to list records.");
+        console.error('Failed to list records.');
         if (error instanceof Error) {
             console.error(error.message);
         }
@@ -85,9 +87,9 @@ async function handleFindFirst(argv, _prompter) {
             ownerId: true,
             userId: true,
             name: true,
-            allowedMask: true,
+            useAdminOwner: true,
             isReadOnly: true,
-            bypassStepUp: true
+            bypassStepUp: true,
         };
         const findFirstArgs = (0, utils_1.parseFindFirstArgs)(argv, defaultSelect);
         const client = (0, executor_1.getClient)();
@@ -95,7 +97,7 @@ async function handleFindFirst(argv, _prompter) {
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
-        console.error("Failed to find record.");
+        console.error('Failed to find record.');
         if (error instanceof Error) {
             console.error(error.message);
         }
@@ -104,48 +106,56 @@ async function handleFindFirst(argv, _prompter) {
 }
 async function handleCreate(argv, prompter) {
     try {
-        const rawAnswers = await prompter.prompt(argv, [{
-                type: "text",
-                name: "ownerId",
-                message: "ownerId",
-                required: true
-            }, {
-                type: "text",
-                name: "userId",
-                message: "userId",
-                required: true
-            }, {
-                type: "text",
-                name: "name",
-                message: "name",
-                required: true
-            }, {
-                type: "text",
-                name: "allowedMask",
-                message: "allowedMask",
-                required: true
-            }, {
-                type: "boolean",
-                name: "isReadOnly",
-                message: "isReadOnly",
-                required: true
-            }, {
-                type: "boolean",
-                name: "bypassStepUp",
-                message: "bypassStepUp",
-                required: true
-            }]);
+        const rawAnswers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'ownerId',
+                message: 'ownerId',
+                required: true,
+            },
+            {
+                type: 'text',
+                name: 'userId',
+                message: 'userId',
+                required: true,
+            },
+            {
+                type: 'text',
+                name: 'name',
+                message: 'name',
+                required: true,
+            },
+            {
+                type: 'boolean',
+                name: 'useAdminOwner',
+                message: 'useAdminOwner',
+                required: true,
+            },
+            {
+                type: 'boolean',
+                name: 'isReadOnly',
+                message: 'isReadOnly',
+                required: true,
+            },
+            {
+                type: 'boolean',
+                name: 'bypassStepUp',
+                message: 'bypassStepUp',
+                required: true,
+            },
+        ]);
         const answers = (0, utils_1.coerceAnswers)(rawAnswers, fieldSchema);
         const cleanedData = (0, utils_1.stripUndefined)(answers, fieldSchema);
         const client = (0, executor_1.getClient)();
-        const result = await client.principal.create({
+        const result = await client.principal
+            .create({
             data: {
                 ownerId: cleanedData.ownerId,
                 userId: cleanedData.userId,
                 name: cleanedData.name,
-                allowedMask: cleanedData.allowedMask,
+                useAdminOwner: cleanedData.useAdminOwner,
                 isReadOnly: cleanedData.isReadOnly,
-                bypassStepUp: cleanedData.bypassStepUp
+                bypassStepUp: cleanedData.bypassStepUp,
             },
             select: {
                 id: true,
@@ -154,15 +164,16 @@ async function handleCreate(argv, prompter) {
                 ownerId: true,
                 userId: true,
                 name: true,
-                allowedMask: true,
+                useAdminOwner: true,
                 isReadOnly: true,
-                bypassStepUp: true
-            }
-        }).execute();
+                bypassStepUp: true,
+            },
+        })
+            .execute();
         console.log(JSON.stringify(result, null, 2));
     }
     catch (error) {
-        console.error("Failed to create record.");
+        console.error('Failed to create record.');
         if (error instanceof Error) {
             console.error(error.message);
         }

package/auth/cli/commands.js

@@ -34,6 +34,7 @@ const sign_out_1 = __importDefault(require("./commands/sign-out"));
 const send_account_deletion_email_1 = __importDefault(require("./commands/send-account-deletion-email"));
 const check_password_1 = __importDefault(require("./commands/check-password"));
 const delete_org_principal_1 = __importDefault(require("./commands/delete-org-principal"));
+const delete_principal_1 = __importDefault(require("./commands/delete-principal"));
 const disconnect_account_1 = __importDefault(require("./commands/disconnect-account"));
 const revoke_api_key_1 = __importDefault(require("./commands/revoke-api-key"));
 const revoke_session_1 = __importDefault(require("./commands/revoke-session"));
@@ -45,13 +46,13 @@ const set_password_1 = __importDefault(require("./commands/set-password"));
 const verify_email_1 = __importDefault(require("./commands/verify-email"));
 const provision_new_user_1 = __importDefault(require("./commands/provision-new-user"));
 const reset_password_1 = __importDefault(require("./commands/reset-password"));
+const create_org_principal_1 = __importDefault(require("./commands/create-org-principal"));
 const sign_in_cross_origin_1 = __importDefault(require("./commands/sign-in-cross-origin"));
 const sign_in_sms_otp_1 = __importDefault(require("./commands/sign-in-sms-otp"));
 const sign_up_sms_1 = __importDefault(require("./commands/sign-up-sms"));
 const sign_up_1 = __importDefault(require("./commands/sign-up"));
 const sign_in_1 = __importDefault(require("./commands/sign-in"));
 const link_identity_1 = __importDefault(require("./commands/link-identity"));
-const create_org_principal_1 = __importDefault(require("./commands/create-org-principal"));
 const extend_token_expires_1 = __importDefault(require("./commands/extend-token-expires"));
 const create_org_api_key_1 = __importDefault(require("./commands/create-org-api-key"));
 const create_api_key_1 = __importDefault(require("./commands/create-api-key"));
@@ -84,6 +85,7 @@ const createCommandMap = () => ({
     'send-account-deletion-email': send_account_deletion_email_1.default,
     'check-password': check_password_1.default,
     'delete-org-principal': delete_org_principal_1.default,
+    'delete-principal': delete_principal_1.default,
     'disconnect-account': disconnect_account_1.default,
     'revoke-api-key': revoke_api_key_1.default,
     'revoke-session': revoke_session_1.default,
@@ -95,13 +97,13 @@ const createCommandMap = () => ({
     'verify-email': verify_email_1.default,
     'provision-new-user': provision_new_user_1.default,
     'reset-password': reset_password_1.default,
+    'create-org-principal': create_org_principal_1.default,
     'sign-in-cross-origin': sign_in_cross_origin_1.default,
     'sign-in-sms-otp': sign_in_sms_otp_1.default,
     'sign-up-sms': sign_up_sms_1.default,
     'sign-up': sign_up_1.default,
     'sign-in': sign_in_1.default,
     'link-identity': link_identity_1.default,
-    'create-org-principal': create_org_principal_1.default,
     'extend-token-expires': extend_token_expires_1.default,
     'create-org-api-key': create_org_api_key_1.default,
     'create-api-key': create_api_key_1.default,
@@ -110,7 +112,7 @@ const createCommandMap = () => ({
     'send-verification-email': send_verification_email_1.default,
     'provision-bucket': provision_bucket_1.default,
 });
-const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  audit-log-auth       auditLogAuth CRUD operations\n  identity-provider    identityProvider CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  user                 user CRUD operations\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  current-user         currentUser\n  sign-out             signOut\n  send-account-deletion-email sendAccountDeletionEmail\n  check-password       checkPassword\n  delete-org-principal deleteOrgPrincipal\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  confirm-delete-account confirmDeleteAccount\n  revoke-org-api-key   revokeOrgApiKey\n  set-password         setPassword\n  verify-email         verifyEmail\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-sms-otp      signInSmsOtp\n  sign-up-sms          signUpSms\n  sign-up              signUp\n  sign-in              signIn\n  link-identity        linkIdentity\n  create-org-principal createOrgPrincipal\n  extend-token-expires extendTokenExpires\n  create-org-api-key   createOrgApiKey\n  create-api-key       createApiKey\n  request-cross-origin-token requestCrossOriginToken\n  forgot-password      forgotPassword\n  send-verification-email sendVerificationEmail\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
+const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  email                email CRUD operations\n  phone-number         phoneNumber CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  audit-log-auth       auditLogAuth CRUD operations\n  identity-provider    identityProvider CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  user                 user CRUD operations\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  current-ip-address   currentIpAddress\n  require-step-up      requireStepUp\n  current-user         currentUser\n  sign-out             signOut\n  send-account-deletion-email sendAccountDeletionEmail\n  check-password       checkPassword\n  delete-org-principal deleteOrgPrincipal\n  delete-principal     deletePrincipal\n  disconnect-account   disconnectAccount\n  revoke-api-key       revokeApiKey\n  revoke-session       revokeSession\n  verify-password      verifyPassword\n  verify-totp          verifyTotp\n  confirm-delete-account confirmDeleteAccount\n  revoke-org-api-key   revokeOrgApiKey\n  set-password         setPassword\n  verify-email         verifyEmail\n  provision-new-user   provisionNewUser\n  reset-password       resetPassword\n  create-org-principal createOrgPrincipal\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-sms-otp      signInSmsOtp\n  sign-up-sms          signUpSms\n  sign-up              signUp\n  sign-in              signIn\n  link-identity        linkIdentity\n  extend-token-expires extendTokenExpires\n  create-org-api-key   createOrgApiKey\n  create-api-key       createApiKey\n  request-cross-origin-token requestCrossOriginToken\n  forgot-password      forgotPassword\n  send-verification-email sendVerificationEmail\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
 const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/auth/cli/executor.d.ts

@@ -61,6 +61,11 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").DeleteOrgPrincipalPayloadSelect>) => import("../orm").QueryBuilder<{
             deleteOrgPrincipal: import("../orm").InferSelectResult<import("../orm/input-types").DeleteOrgPrincipalPayload, S> | null;
         }>;
+        deletePrincipal: <S extends import("../orm/input-types").DeletePrincipalPayloadSelect>(args: import("../orm/mutation").DeletePrincipalVariables, options: {
+            select: S;
+        } & import("../orm").StrictSelect<S, import("../orm/input-types").DeletePrincipalPayloadSelect>) => import("../orm").QueryBuilder<{
+            deletePrincipal: import("../orm").InferSelectResult<import("../orm/input-types").DeletePrincipalPayload, S> | null;
+        }>;
         disconnectAccount: <S extends import("../orm/input-types").DisconnectAccountPayloadSelect>(args: import("../orm/mutation").DisconnectAccountVariables, options: {
             select: S;
         } & import("../orm").StrictSelect<S, import("../orm/input-types").DisconnectAccountPayloadSelect>) => import("../orm").QueryBuilder<{
@@ -116,6 +121,11 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").ResetPasswordPayloadSelect>) => import("../orm").QueryBuilder<{
             resetPassword: import("../orm").InferSelectResult<import("../orm/input-types").ResetPasswordPayload, S> | null;
         }>;
+        createOrgPrincipal: <S extends import("../orm/input-types").CreateOrgPrincipalPayloadSelect>(args: import("../orm/mutation").CreateOrgPrincipalVariables, options: {
+            select: S;
+        } & import("../orm").StrictSelect<S, import("../orm/input-types").CreateOrgPrincipalPayloadSelect>) => import("../orm").QueryBuilder<{
+            createOrgPrincipal: import("../orm").InferSelectResult<import("../orm/input-types").CreateOrgPrincipalPayload, S> | null;
+        }>;
         signInCrossOrigin: <S extends import("../orm/input-types").SignInCrossOriginPayloadSelect>(args: import("../orm/mutation").SignInCrossOriginVariables, options: {
             select: S;
         } & import("../orm").StrictSelect<S, import("../orm/input-types").SignInCrossOriginPayloadSelect>) => import("../orm").QueryBuilder<{
@@ -146,11 +156,6 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").LinkIdentityPayloadSelect>) => import("../orm").QueryBuilder<{
             linkIdentity: import("../orm").InferSelectResult<import("../orm/input-types").LinkIdentityPayload, S> | null;
         }>;
-        createOrgPrincipal: <S extends import("../orm/input-types").CreateOrgPrincipalPayloadSelect>(args: import("../orm/mutation").CreateOrgPrincipalVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").CreateOrgPrincipalPayloadSelect>) => import("../orm").QueryBuilder<{
-            createOrgPrincipal: import("../orm").InferSelectResult<import("../orm/input-types").CreateOrgPrincipalPayload, S> | null;
-        }>;
         extendTokenExpires: <S extends import("../orm/input-types").ExtendTokenExpiresPayloadSelect>(args: import("../orm/mutation").ExtendTokenExpiresVariables, options: {
             select: S;
         } & import("../orm").StrictSelect<S, import("../orm/input-types").ExtendTokenExpiresPayloadSelect>) => import("../orm").QueryBuilder<{