@constructive-sdk/cli 1.20.2 → 1.20.4

package/modules/cli/commands.js

@@ -20,12 +20,15 @@ const billing_provider_module_1 = __importDefault(require("./commands/billing-pr
 const blueprint_1 = __importDefault(require("./commands/blueprint"));
 const blueprint_construction_1 = __importDefault(require("./commands/blueprint-construction"));
 const blueprint_template_1 = __importDefault(require("./commands/blueprint-template"));
+const capabilities_module_1 = __importDefault(require("./commands/capabilities-module"));
 const catalog_module_1 = __importDefault(require("./commands/catalog-module"));
+const cluster_module_1 = __importDefault(require("./commands/cluster-module"));
 const compute_log_module_1 = __importDefault(require("./commands/compute-log-module"));
-const config_secrets_user_module_1 = __importDefault(require("./commands/config-secrets-user-module"));
 const connected_accounts_module_1 = __importDefault(require("./commands/connected-accounts-module"));
+const content_preset_module_1 = __importDefault(require("./commands/content-preset-module"));
 const crypto_addresses_module_1 = __importDefault(require("./commands/crypto-addresses-module"));
 const crypto_auth_module_1 = __importDefault(require("./commands/crypto-auth-module"));
+const data_capabilities_field_1 = __importDefault(require("./commands/data-capabilities-field"));
 const database_provision_module_1 = __importDefault(require("./commands/database-provision-module"));
 const database_settings_module_1 = __importDefault(require("./commands/database-settings-module"));
 const db_pool_config_1 = __importDefault(require("./commands/db-pool-config"));
@@ -36,32 +39,37 @@ const default_ids_module_1 = __importDefault(require("./commands/default-ids-mod
 const denormalized_table_field_1 = __importDefault(require("./commands/denormalized-table-field"));
 const devices_module_1 = __importDefault(require("./commands/devices-module"));
 const domain_module_1 = __importDefault(require("./commands/domain-module"));
+const email_sender_module_1 = __importDefault(require("./commands/email-sender-module"));
 const emails_module_1 = __importDefault(require("./commands/emails-module"));
 const entity_type_provision_1 = __importDefault(require("./commands/entity-type-provision"));
 const events_module_1 = __importDefault(require("./commands/events-module"));
+const file_ref_field_1 = __importDefault(require("./commands/file-ref-field"));
 const function_deployment_module_1 = __importDefault(require("./commands/function-deployment-module"));
 const function_invocation_module_1 = __importDefault(require("./commands/function-invocation-module"));
 const function_module_1 = __importDefault(require("./commands/function-module"));
 const graph_execution_module_1 = __importDefault(require("./commands/graph-execution-module"));
 const graph_module_1 = __importDefault(require("./commands/graph-module"));
 const hierarchy_module_1 = __importDefault(require("./commands/hierarchy-module"));
-const http_route_module_1 = __importDefault(require("./commands/http-route-module"));
 const i_18_n_module_1 = __importDefault(require("./commands/i-18-n-module"));
 const identity_providers_module_1 = __importDefault(require("./commands/identity-providers-module"));
+const image_module_1 = __importDefault(require("./commands/image-module"));
 const inference_log_module_1 = __importDefault(require("./commands/inference-log-module"));
 const infra_config_module_1 = __importDefault(require("./commands/infra-config-module"));
 const infra_secrets_module_1 = __importDefault(require("./commands/infra-secrets-module"));
 const integration_providers_module_1 = __importDefault(require("./commands/integration-providers-module"));
+const internal_config_module_1 = __importDefault(require("./commands/internal-config-module"));
 const internal_secrets_module_1 = __importDefault(require("./commands/internal-secrets-module"));
 const invites_module_1 = __importDefault(require("./commands/invites-module"));
+const k_8_s_admission_module_1 = __importDefault(require("./commands/k-8-s-admission-module"));
 const limits_module_1 = __importDefault(require("./commands/limits-module"));
+const machine_module_1 = __importDefault(require("./commands/machine-module"));
 const membership_types_module_1 = __importDefault(require("./commands/membership-types-module"));
 const memberships_module_1 = __importDefault(require("./commands/memberships-module"));
 const merkle_store_module_1 = __importDefault(require("./commands/merkle-store-module"));
 const namespace_module_1 = __importDefault(require("./commands/namespace-module"));
 const notifications_module_1 = __importDefault(require("./commands/notifications-module"));
+const oauth_requests_module_1 = __importDefault(require("./commands/oauth-requests-module"));
 const pages_module_1 = __importDefault(require("./commands/pages-module"));
-const permissions_module_1 = __importDefault(require("./commands/permissions-module"));
 const phone_numbers_module_1 = __importDefault(require("./commands/phone-numbers-module"));
 const plans_module_1 = __importDefault(require("./commands/plans-module"));
 const principal_auth_module_1 = __importDefault(require("./commands/principal-auth-module"));
@@ -69,10 +77,13 @@ const profiles_module_1 = __importDefault(require("./commands/profiles-module"))
 const rate_limit_meters_module_1 = __importDefault(require("./commands/rate-limit-meters-module"));
 const rate_limits_module_1 = __importDefault(require("./commands/rate-limits-module"));
 const realtime_module_1 = __importDefault(require("./commands/realtime-module"));
+const refusal_log_module_1 = __importDefault(require("./commands/refusal-log-module"));
 const relation_provision_1 = __importDefault(require("./commands/relation-provision"));
+const repository_module_1 = __importDefault(require("./commands/repository-module"));
 const resource_module_1 = __importDefault(require("./commands/resource-module"));
 const rls_module_1 = __importDefault(require("./commands/rls-module"));
 const route_module_1 = __importDefault(require("./commands/route-module"));
+const scope_types_module_1 = __importDefault(require("./commands/scope-types-module"));
 const secure_table_provision_1 = __importDefault(require("./commands/secure-table-provision"));
 const session_secrets_module_1 = __importDefault(require("./commands/session-secrets-module"));
 const sessions_module_1 = __importDefault(require("./commands/sessions-module"));
@@ -83,23 +94,15 @@ const transfer_log_module_1 = __importDefault(require("./commands/transfer-log-m
 const user_auth_module_1 = __importDefault(require("./commands/user-auth-module"));
 const user_credentials_module_1 = __importDefault(require("./commands/user-credentials-module"));
 const user_settings_module_1 = __importDefault(require("./commands/user-settings-module"));
+const user_settings_security_module_1 = __importDefault(require("./commands/user-settings-security-module"));
 const user_state_module_1 = __importDefault(require("./commands/user-state-module"));
 const users_module_1 = __importDefault(require("./commands/users-module"));
 const webauthn_auth_module_1 = __importDefault(require("./commands/webauthn-auth-module"));
 const webauthn_credentials_module_1 = __importDefault(require("./commands/webauthn-credentials-module"));
 const webhook_module_1 = __importDefault(require("./commands/webhook-module"));
-const resolve_blueprint_field_1 = __importDefault(require("./commands/resolve-blueprint-field"));
-const resolve_blueprint_table_1 = __importDefault(require("./commands/resolve-blueprint-table"));
 const construct_blueprint_1 = __importDefault(require("./commands/construct-blueprint"));
 const copy_template_to_blueprint_1 = __importDefault(require("./commands/copy-template-to-blueprint"));
 const provision_bucket_1 = __importDefault(require("./commands/provision-bucket"));
-const provision_check_constraint_1 = __importDefault(require("./commands/provision-check-constraint"));
-const provision_full_text_search_1 = __importDefault(require("./commands/provision-full-text-search"));
-const provision_index_1 = __importDefault(require("./commands/provision-index"));
-const provision_relation_1 = __importDefault(require("./commands/provision-relation"));
-const provision_spatial_relation_1 = __importDefault(require("./commands/provision-spatial-relation"));
-const provision_table_1 = __importDefault(require("./commands/provision-table"));
-const provision_unique_constraint_1 = __importDefault(require("./commands/provision-unique-constraint"));
 const createCommandMap = () => ({
     context: context_1.default,
     auth: auth_1.default,
@@ -111,12 +114,15 @@ const createCommandMap = () => ({
     blueprint: blueprint_1.default,
     'blueprint-construction': blueprint_construction_1.default,
     'blueprint-template': blueprint_template_1.default,
+    'capabilities-module': capabilities_module_1.default,
     'catalog-module': catalog_module_1.default,
+    'cluster-module': cluster_module_1.default,
     'compute-log-module': compute_log_module_1.default,
-    'config-secrets-user-module': config_secrets_user_module_1.default,
     'connected-accounts-module': connected_accounts_module_1.default,
+    'content-preset-module': content_preset_module_1.default,
     'crypto-addresses-module': crypto_addresses_module_1.default,
     'crypto-auth-module': crypto_auth_module_1.default,
+    'data-capabilities-field': data_capabilities_field_1.default,
     'database-provision-module': database_provision_module_1.default,
     'database-settings-module': database_settings_module_1.default,
     'db-pool-config': db_pool_config_1.default,
@@ -127,32 +133,37 @@ const createCommandMap = () => ({
     'denormalized-table-field': denormalized_table_field_1.default,
     'devices-module': devices_module_1.default,
     'domain-module': domain_module_1.default,
+    'email-sender-module': email_sender_module_1.default,
     'emails-module': emails_module_1.default,
     'entity-type-provision': entity_type_provision_1.default,
     'events-module': events_module_1.default,
+    'file-ref-field': file_ref_field_1.default,
     'function-deployment-module': function_deployment_module_1.default,
     'function-invocation-module': function_invocation_module_1.default,
     'function-module': function_module_1.default,
     'graph-execution-module': graph_execution_module_1.default,
     'graph-module': graph_module_1.default,
     'hierarchy-module': hierarchy_module_1.default,
-    'http-route-module': http_route_module_1.default,
     'i-18-n-module': i_18_n_module_1.default,
     'identity-providers-module': identity_providers_module_1.default,
+    'image-module': image_module_1.default,
     'inference-log-module': inference_log_module_1.default,
     'infra-config-module': infra_config_module_1.default,
     'infra-secrets-module': infra_secrets_module_1.default,
     'integration-providers-module': integration_providers_module_1.default,
+    'internal-config-module': internal_config_module_1.default,
     'internal-secrets-module': internal_secrets_module_1.default,
     'invites-module': invites_module_1.default,
+    'k-8-s-admission-module': k_8_s_admission_module_1.default,
     'limits-module': limits_module_1.default,
+    'machine-module': machine_module_1.default,
     'membership-types-module': membership_types_module_1.default,
     'memberships-module': memberships_module_1.default,
     'merkle-store-module': merkle_store_module_1.default,
     'namespace-module': namespace_module_1.default,
     'notifications-module': notifications_module_1.default,
+    'oauth-requests-module': oauth_requests_module_1.default,
     'pages-module': pages_module_1.default,
-    'permissions-module': permissions_module_1.default,
     'phone-numbers-module': phone_numbers_module_1.default,
     'plans-module': plans_module_1.default,
     'principal-auth-module': principal_auth_module_1.default,
@@ -160,10 +171,13 @@ const createCommandMap = () => ({
     'rate-limit-meters-module': rate_limit_meters_module_1.default,
     'rate-limits-module': rate_limits_module_1.default,
     'realtime-module': realtime_module_1.default,
+    'refusal-log-module': refusal_log_module_1.default,
     'relation-provision': relation_provision_1.default,
+    'repository-module': repository_module_1.default,
     'resource-module': resource_module_1.default,
     'rls-module': rls_module_1.default,
     'route-module': route_module_1.default,
+    'scope-types-module': scope_types_module_1.default,
     'secure-table-provision': secure_table_provision_1.default,
     'session-secrets-module': session_secrets_module_1.default,
     'sessions-module': sessions_module_1.default,
@@ -174,25 +188,17 @@ const createCommandMap = () => ({
     'user-auth-module': user_auth_module_1.default,
     'user-credentials-module': user_credentials_module_1.default,
     'user-settings-module': user_settings_module_1.default,
+    'user-settings-security-module': user_settings_security_module_1.default,
     'user-state-module': user_state_module_1.default,
     'users-module': users_module_1.default,
     'webauthn-auth-module': webauthn_auth_module_1.default,
     'webauthn-credentials-module': webauthn_credentials_module_1.default,
     'webhook-module': webhook_module_1.default,
-    'resolve-blueprint-field': resolve_blueprint_field_1.default,
-    'resolve-blueprint-table': resolve_blueprint_table_1.default,
     'construct-blueprint': construct_blueprint_1.default,
     'copy-template-to-blueprint': copy_template_to_blueprint_1.default,
     'provision-bucket': provision_bucket_1.default,
-    'provision-check-constraint': provision_check_constraint_1.default,
-    'provision-full-text-search': provision_full_text_search_1.default,
-    'provision-index': provision_index_1.default,
-    'provision-relation': provision_relation_1.default,
-    'provision-spatial-relation': provision_spatial_relation_1.default,
-    'provision-table': provision_table_1.default,
-    'provision-unique-constraint': provision_unique_constraint_1.default,
 });
-const usage = "\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  agent-module         agentModule CRUD operations\n  api-surface-module   apiSurfaceModule CRUD operations\n  app-module           appModule CRUD operations\n  billing-module       billingModule CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  catalog-module       catalogModule CRUD operations\n  compute-log-module   computeLogModule CRUD operations\n  config-secrets-user-module configSecretsUserModule CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  database-settings-module databaseSettingsModule CRUD operations\n  db-pool-config       dbPoolConfig CRUD operations\n  db-pool              dbPool CRUD operations\n  db-preset-module     dbPresetModule CRUD operations\n  db-usage-module      dbUsageModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  devices-module       devicesModule CRUD operations\n  domain-module        domainModule CRUD operations\n  emails-module        emailsModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  events-module        eventsModule CRUD operations\n  function-deployment-module functionDeploymentModule CRUD operations\n  function-invocation-module functionInvocationModule CRUD operations\n  function-module      functionModule CRUD operations\n  graph-execution-module graphExecutionModule CRUD operations\n  graph-module         graphModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  http-route-module    httpRouteModule CRUD operations\n  i-18-n-module        i18NModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  inference-log-module inferenceLogModule CRUD operations\n  infra-config-module  infraConfigModule CRUD operations\n  infra-secrets-module infraSecretsModule CRUD operations\n  integration-providers-module integrationProvidersModule CRUD operations\n  internal-secrets-module internalSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  merkle-store-module  merkleStoreModule CRUD operations\n  namespace-module     namespaceModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  pages-module         pagesModule CRUD operations\n  permissions-module   permissionsModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  plans-module         plansModule CRUD operations\n  principal-auth-module principalAuthModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  relation-provision   relationProvision CRUD operations\n  resource-module      resourceModule CRUD operations\n  rls-module           rlsModule CRUD operations\n  route-module         routeModule CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  site-surface-module  siteSurfaceModule CRUD operations\n  storage-log-module   storageLogModule CRUD operations\n  storage-module       storageModule CRUD operations\n  transfer-log-module  transferLogModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  user-credentials-module userCredentialsModule CRUD operations\n  user-settings-module userSettingsModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  users-module         usersModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webhook-module       webhookModule CRUD operations\n  resolve-blueprint-field Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. \"location\") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.\n  resolve-blueprint-table Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security. When a prefix already exists (e.g., 'org'), the entry extends the existing entity type instead of creating a new one; if a storage[] key is present, it provisions entity-scoped storage for that type. (0.5) scope-based storage: each storage[] entry has an optional scope ('app' or 'org' only). App-scoped storage seeds buckets at migration time. Org-scoped storage resolves the org membership type, creates org_buckets/org_files with owner_id, and seeds buckets per-entity via an AFTER INSERT trigger on the users table. When function_module is installed, a private functions bucket is auto-injected into org-scoped or entity-scoped storage entries. (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred). After provisioning, optional smart_tags (jsonb object) on the table entry are applied via metaschema.append_table_smart_tags(), and optional smart_tags on individual field entries are applied via metaschema.append_field_smart_tags(). (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-bucket     Provision an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then creates and configures\nthe S3 bucket with the appropriate privacy policies, CORS rules,\nand lifecycle settings.\n  provision-check-constraint Creates a check constraint on a table from a $type + data blueprint definition. Supports: CheckOneOf (enum validation via = ANY(ARRAY[...])), CheckGreaterThan (single-column > value or cross-column), CheckLessThan (single-column < value or cross-column), CheckNotEqual (cross-column inequality). Builds AST expressions via ast_helpers and inserts into metaschema_public.check_constraint. Graceful: skips if a constraint with the same name already exists.\n  provision-full-text-search Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.\n  provision-index      Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.\n  provision-relation   Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).\n  provision-spatial-relation Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin \u2194 param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist \u2014 this is a metadata-only insert.\n  provision-table      Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).\n  provision-unique-constraint Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n";
+const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  agent-module         agentModule CRUD operations\n  api-surface-module   apiSurfaceModule CRUD operations\n  app-module           appModule CRUD operations\n  billing-module       billingModule CRUD operations\n  billing-provider-module billingProviderModule CRUD operations\n  blueprint            blueprint CRUD operations\n  blueprint-construction blueprintConstruction CRUD operations\n  blueprint-template   blueprintTemplate CRUD operations\n  capabilities-module  capabilitiesModule CRUD operations\n  catalog-module       catalogModule CRUD operations\n  cluster-module       clusterModule CRUD operations\n  compute-log-module   computeLogModule CRUD operations\n  connected-accounts-module connectedAccountsModule CRUD operations\n  content-preset-module contentPresetModule CRUD operations\n  crypto-addresses-module cryptoAddressesModule CRUD operations\n  crypto-auth-module   cryptoAuthModule CRUD operations\n  data-capabilities-field dataCapabilitiesField CRUD operations\n  database-provision-module databaseProvisionModule CRUD operations\n  database-settings-module databaseSettingsModule CRUD operations\n  db-pool-config       dbPoolConfig CRUD operations\n  db-pool              dbPool CRUD operations\n  db-preset-module     dbPresetModule CRUD operations\n  db-usage-module      dbUsageModule CRUD operations\n  default-ids-module   defaultIdsModule CRUD operations\n  denormalized-table-field denormalizedTableField CRUD operations\n  devices-module       devicesModule CRUD operations\n  domain-module        domainModule CRUD operations\n  email-sender-module  emailSenderModule CRUD operations\n  emails-module        emailsModule CRUD operations\n  entity-type-provision entityTypeProvision CRUD operations\n  events-module        eventsModule CRUD operations\n  file-ref-field       fileRefField CRUD operations\n  function-deployment-module functionDeploymentModule CRUD operations\n  function-invocation-module functionInvocationModule CRUD operations\n  function-module      functionModule CRUD operations\n  graph-execution-module graphExecutionModule CRUD operations\n  graph-module         graphModule CRUD operations\n  hierarchy-module     hierarchyModule CRUD operations\n  i-18-n-module        i18NModule CRUD operations\n  identity-providers-module identityProvidersModule CRUD operations\n  image-module         imageModule CRUD operations\n  inference-log-module inferenceLogModule CRUD operations\n  infra-config-module  infraConfigModule CRUD operations\n  infra-secrets-module infraSecretsModule CRUD operations\n  integration-providers-module integrationProvidersModule CRUD operations\n  internal-config-module internalConfigModule CRUD operations\n  internal-secrets-module internalSecretsModule CRUD operations\n  invites-module       invitesModule CRUD operations\n  k-8-s-admission-module k8sAdmissionModule CRUD operations\n  limits-module        limitsModule CRUD operations\n  machine-module       machineModule CRUD operations\n  membership-types-module membershipTypesModule CRUD operations\n  memberships-module   membershipsModule CRUD operations\n  merkle-store-module  merkleStoreModule CRUD operations\n  namespace-module     namespaceModule CRUD operations\n  notifications-module notificationsModule CRUD operations\n  oauth-requests-module oauthRequestsModule CRUD operations\n  pages-module         pagesModule CRUD operations\n  phone-numbers-module phoneNumbersModule CRUD operations\n  plans-module         plansModule CRUD operations\n  principal-auth-module principalAuthModule CRUD operations\n  profiles-module      profilesModule CRUD operations\n  rate-limit-meters-module rateLimitMetersModule CRUD operations\n  rate-limits-module   rateLimitsModule CRUD operations\n  realtime-module      realtimeModule CRUD operations\n  refusal-log-module   refusalLogModule CRUD operations\n  relation-provision   relationProvision CRUD operations\n  repository-module    repositoryModule CRUD operations\n  resource-module      resourceModule CRUD operations\n  rls-module           rlsModule CRUD operations\n  route-module         routeModule CRUD operations\n  scope-types-module   scopeTypesModule CRUD operations\n  secure-table-provision secureTableProvision CRUD operations\n  session-secrets-module sessionSecretsModule CRUD operations\n  sessions-module      sessionsModule CRUD operations\n  site-surface-module  siteSurfaceModule CRUD operations\n  storage-log-module   storageLogModule CRUD operations\n  storage-module       storageModule CRUD operations\n  transfer-log-module  transferLogModule CRUD operations\n  user-auth-module     userAuthModule CRUD operations\n  user-credentials-module userCredentialsModule CRUD operations\n  user-settings-module userSettingsModule CRUD operations\n  user-settings-security-module userSettingsSecurityModule CRUD operations\n  user-state-module    userStateModule CRUD operations\n  users-module         usersModule CRUD operations\n  webauthn-auth-module webauthnAuthModule CRUD operations\n  webauthn-credentials-module webauthnCredentialsModule CRUD operations\n  webhook-module       webhookModule CRUD operations\n  construct-blueprint  Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Eight phases: (0) entity_type_provision for each membership_type entry \u2014 provisions entity tables, membership modules, and security. When a prefix already exists (e.g., \'org\'), the entry extends the existing entity type instead of creating a new one; if a storage[] key is present, it provisions entity-scoped storage for that type. (0.5) scope-based storage: each storage[] entry has an optional scope (\'app\' or \'org\' only). App-scoped storage seeds buckets at migration time. Org-scoped storage resolves the org membership type, creates org_buckets/org_files with owner_id, and seeds buckets per-entity via an AFTER INSERT trigger on the users table. When function_module is installed, a private functions bucket is auto-injected into org-scoped or entity-scoped storage entries. (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints/check_constraints are deferred). A table entry either names its table (table_name plus optional schema_name) or references one an installed module generated ("module": {"type": "agent", "scope": "org", "table": "message"}), which resolves through the module row\'s recorded table ids and raises when it matches nothing instead of creating an empty table. After provisioning, optional smart_tags (jsonb object) on the table entry are applied via metaschema.append_table_smart_tags(), and optional smart_tags on individual field entries are applied via metaschema.append_field_smart_tags(). (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints, (6) provision_check_constraint() for top-level + deferred check constraints, (7) seed achievements from definition.achievements[] \u2014 resolves events_module by entity_prefix and creates INSERT actions for levels, level_requirements, and achievement_rewards tables. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level entries are deferred to phases 3-6 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.\n  copy-template-to-blueprint Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.\n  provision-bucket     Reconcile an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then enqueues the same\nstorage:provision_bucket job used by the INSERT trigger. This is\nidempotent for an already-reconciled bucket; enqueue failures become\nGraphQL errors.\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
 const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/modules/cli/executor.d.ts

@@ -8,12 +8,15 @@ export declare function getClient(contextName?: string): {
     blueprint: import("../orm").BlueprintModel;
     blueprintConstruction: import("../orm").BlueprintConstructionModel;
     blueprintTemplate: import("../orm").BlueprintTemplateModel;
+    capabilitiesModule: import("../orm").CapabilitiesModuleModel;
     catalogModule: import("../orm").CatalogModuleModel;
+    clusterModule: import("../orm").ClusterModuleModel;
     computeLogModule: import("../orm").ComputeLogModuleModel;
-    configSecretsUserModule: import("../orm").ConfigSecretsUserModuleModel;
     connectedAccountsModule: import("../orm").ConnectedAccountsModuleModel;
+    contentPresetModule: import("../orm").ContentPresetModuleModel;
     cryptoAddressesModule: import("../orm").CryptoAddressesModuleModel;
     cryptoAuthModule: import("../orm").CryptoAuthModuleModel;
+    dataCapabilitiesField: import("../orm").DataCapabilitiesFieldModel;
     databaseProvisionModule: import("../orm").DatabaseProvisionModuleModel;
     databaseSettingsModule: import("../orm").DatabaseSettingsModuleModel;
     dbPoolConfig: import("../orm").DbPoolConfigModel;
@@ -24,32 +27,37 @@ export declare function getClient(contextName?: string): {
     denormalizedTableField: import("../orm").DenormalizedTableFieldModel;
     devicesModule: import("../orm").DevicesModuleModel;
     domainModule: import("../orm").DomainModuleModel;
+    emailSenderModule: import("../orm").EmailSenderModuleModel;
     emailsModule: import("../orm").EmailsModuleModel;
     entityTypeProvision: import("../orm").EntityTypeProvisionModel;
     eventsModule: import("../orm").EventsModuleModel;
+    fileRefField: import("../orm").FileRefFieldModel;
     functionDeploymentModule: import("../orm").FunctionDeploymentModuleModel;
     functionInvocationModule: import("../orm").FunctionInvocationModuleModel;
     functionModule: import("../orm").FunctionModuleModel;
     graphExecutionModule: import("../orm").GraphExecutionModuleModel;
     graphModule: import("../orm").GraphModuleModel;
     hierarchyModule: import("../orm").HierarchyModuleModel;
-    httpRouteModule: import("../orm").HttpRouteModuleModel;
     i18NModule: import("../orm").I18NModuleModel;
     identityProvidersModule: import("../orm").IdentityProvidersModuleModel;
+    imageModule: import("../orm").ImageModuleModel;
     inferenceLogModule: import("../orm").InferenceLogModuleModel;
     infraConfigModule: import("../orm").InfraConfigModuleModel;
     infraSecretsModule: import("../orm").InfraSecretsModuleModel;
     integrationProvidersModule: import("../orm").IntegrationProvidersModuleModel;
+    internalConfigModule: import("../orm").InternalConfigModuleModel;
     internalSecretsModule: import("../orm").InternalSecretsModuleModel;
     invitesModule: import("../orm").InvitesModuleModel;
+    k8sAdmissionModule: import("../orm").K8sAdmissionModuleModel;
     limitsModule: import("../orm").LimitsModuleModel;
+    machineModule: import("../orm").MachineModuleModel;
     membershipTypesModule: import("../orm").MembershipTypesModuleModel;
     membershipsModule: import("../orm").MembershipsModuleModel;
     merkleStoreModule: import("../orm").MerkleStoreModuleModel;
     namespaceModule: import("../orm").NamespaceModuleModel;
     notificationsModule: import("../orm").NotificationsModuleModel;
+    oauthRequestsModule: import("../orm").OauthRequestsModuleModel;
     pagesModule: import("../orm").PagesModuleModel;
-    permissionsModule: import("../orm").PermissionsModuleModel;
     phoneNumbersModule: import("../orm").PhoneNumbersModuleModel;
     plansModule: import("../orm").PlansModuleModel;
     principalAuthModule: import("../orm").PrincipalAuthModuleModel;
@@ -57,10 +65,13 @@ export declare function getClient(contextName?: string): {
     rateLimitMetersModule: import("../orm").RateLimitMetersModuleModel;
     rateLimitsModule: import("../orm").RateLimitsModuleModel;
     realtimeModule: import("../orm").RealtimeModuleModel;
+    refusalLogModule: import("../orm").RefusalLogModuleModel;
     relationProvision: import("../orm").RelationProvisionModel;
+    repositoryModule: import("../orm").RepositoryModuleModel;
     resourceModule: import("../orm").ResourceModuleModel;
     rlsModule: import("../orm").RlsModuleModel;
     routeModule: import("../orm").RouteModuleModel;
+    scopeTypesModule: import("../orm").ScopeTypesModuleModel;
     secureTableProvision: import("../orm").SecureTableProvisionModel;
     sessionSecretsModule: import("../orm").SessionSecretsModuleModel;
     sessionsModule: import("../orm").SessionsModuleModel;
@@ -71,23 +82,12 @@ export declare function getClient(contextName?: string): {
     userAuthModule: import("../orm").UserAuthModuleModel;
     userCredentialsModule: import("../orm").UserCredentialsModuleModel;
     userSettingsModule: import("../orm").UserSettingsModuleModel;
+    userSettingsSecurityModule: import("../orm").UserSettingsSecurityModuleModel;
     userStateModule: import("../orm").UserStateModuleModel;
     usersModule: import("../orm").UsersModuleModel;
     webauthnAuthModule: import("../orm").WebauthnAuthModuleModel;
     webauthnCredentialsModule: import("../orm").WebauthnCredentialsModuleModel;
     webhookModule: import("../orm").WebhookModuleModel;
-    query: {
-        resolveBlueprintField: (args: import("../orm/query").ResolveBlueprintFieldVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("../orm").QueryBuilder<{
-            resolveBlueprintField: string | null;
-        }>;
-        resolveBlueprintTable: (args: import("../orm/query").ResolveBlueprintTableVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("../orm").QueryBuilder<{
-            resolveBlueprintTable: string | null;
-        }>;
-    };
     mutation: {
         constructBlueprint: <S extends import("../orm/input-types").ConstructBlueprintPayloadSelect>(args: import("../orm/mutation").ConstructBlueprintVariables, options: {
             select: S;
@@ -104,40 +104,5 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionBucketPayloadSelect>) => import("../orm").QueryBuilder<{
             provisionBucket: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionBucketPayload, S> | null;
         }>;
-        provisionCheckConstraint: <S extends import("../orm/input-types").ProvisionCheckConstraintPayloadSelect>(args: import("../orm/mutation").ProvisionCheckConstraintVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionCheckConstraintPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionCheckConstraint: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionCheckConstraintPayload, S> | null;
-        }>;
-        provisionFullTextSearch: <S extends import("../orm/input-types").ProvisionFullTextSearchPayloadSelect>(args: import("../orm/mutation").ProvisionFullTextSearchVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionFullTextSearchPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionFullTextSearch: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionFullTextSearchPayload, S> | null;
-        }>;
-        provisionIndex: <S extends import("../orm/input-types").ProvisionIndexPayloadSelect>(args: import("../orm/mutation").ProvisionIndexVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionIndexPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionIndex: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionIndexPayload, S> | null;
-        }>;
-        provisionRelation: <S extends import("../orm/input-types").ProvisionRelationPayloadSelect>(args: import("../orm/mutation").ProvisionRelationVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionRelationPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionRelation: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionRelationPayload, S> | null;
-        }>;
-        provisionSpatialRelation: <S extends import("../orm/input-types").ProvisionSpatialRelationPayloadSelect>(args: import("../orm/mutation").ProvisionSpatialRelationVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionSpatialRelationPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionSpatialRelation: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionSpatialRelationPayload, S> | null;
-        }>;
-        provisionTable: <S extends import("../orm/input-types").ProvisionTablePayloadSelect>(args: import("../orm/mutation").ProvisionTableVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionTablePayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionTable: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionTablePayload, S> | null;
-        }>;
-        provisionUniqueConstraint: <S extends import("../orm/input-types").ProvisionUniqueConstraintPayloadSelect>(args: import("../orm/mutation").ProvisionUniqueConstraintVariables, options: {
-            select: S;
-        } & import("../orm").StrictSelect<S, import("../orm/input-types").ProvisionUniqueConstraintPayloadSelect>) => import("../orm").QueryBuilder<{
-            provisionUniqueConstraint: import("../orm").InferSelectResult<import("../orm/input-types").ProvisionUniqueConstraintPayload, S> | null;
-        }>;
     };
 };

package/modules/orm/index.d.ts

@@ -7,12 +7,15 @@ import { BillingProviderModuleModel } from './models/billingProviderModule';
 import { BlueprintModel } from './models/blueprint';
 import { BlueprintConstructionModel } from './models/blueprintConstruction';
 import { BlueprintTemplateModel } from './models/blueprintTemplate';
+import { CapabilitiesModuleModel } from './models/capabilitiesModule';
 import { CatalogModuleModel } from './models/catalogModule';
+import { ClusterModuleModel } from './models/clusterModule';
 import { ComputeLogModuleModel } from './models/computeLogModule';
-import { ConfigSecretsUserModuleModel } from './models/configSecretsUserModule';
 import { ConnectedAccountsModuleModel } from './models/connectedAccountsModule';
+import { ContentPresetModuleModel } from './models/contentPresetModule';
 import { CryptoAddressesModuleModel } from './models/cryptoAddressesModule';
 import { CryptoAuthModuleModel } from './models/cryptoAuthModule';
+import { DataCapabilitiesFieldModel } from './models/dataCapabilitiesField';
 import { DatabaseProvisionModuleModel } from './models/databaseProvisionModule';
 import { DatabaseSettingsModuleModel } from './models/databaseSettingsModule';
 import { DbPoolConfigModel } from './models/dbPoolConfig';
@@ -23,32 +26,37 @@ import { DefaultIdsModuleModel } from './models/defaultIdsModule';
 import { DenormalizedTableFieldModel } from './models/denormalizedTableField';
 import { DevicesModuleModel } from './models/devicesModule';
 import { DomainModuleModel } from './models/domainModule';
+import { EmailSenderModuleModel } from './models/emailSenderModule';
 import { EmailsModuleModel } from './models/emailsModule';
 import { EntityTypeProvisionModel } from './models/entityTypeProvision';
 import { EventsModuleModel } from './models/eventsModule';
+import { FileRefFieldModel } from './models/fileRefField';
 import { FunctionDeploymentModuleModel } from './models/functionDeploymentModule';
 import { FunctionInvocationModuleModel } from './models/functionInvocationModule';
 import { FunctionModuleModel } from './models/functionModule';
 import { GraphExecutionModuleModel } from './models/graphExecutionModule';
 import { GraphModuleModel } from './models/graphModule';
 import { HierarchyModuleModel } from './models/hierarchyModule';
-import { HttpRouteModuleModel } from './models/httpRouteModule';
 import { I18NModuleModel } from './models/i18NModule';
 import { IdentityProvidersModuleModel } from './models/identityProvidersModule';
+import { ImageModuleModel } from './models/imageModule';
 import { InferenceLogModuleModel } from './models/inferenceLogModule';
 import { InfraConfigModuleModel } from './models/infraConfigModule';
 import { InfraSecretsModuleModel } from './models/infraSecretsModule';
 import { IntegrationProvidersModuleModel } from './models/integrationProvidersModule';
+import { InternalConfigModuleModel } from './models/internalConfigModule';
 import { InternalSecretsModuleModel } from './models/internalSecretsModule';
 import { InvitesModuleModel } from './models/invitesModule';
+import { K8sAdmissionModuleModel } from './models/k8sAdmissionModule';
 import { LimitsModuleModel } from './models/limitsModule';
+import { MachineModuleModel } from './models/machineModule';
 import { MembershipTypesModuleModel } from './models/membershipTypesModule';
 import { MembershipsModuleModel } from './models/membershipsModule';
 import { MerkleStoreModuleModel } from './models/merkleStoreModule';
 import { NamespaceModuleModel } from './models/namespaceModule';
 import { NotificationsModuleModel } from './models/notificationsModule';
+import { OauthRequestsModuleModel } from './models/oauthRequestsModule';
 import { PagesModuleModel } from './models/pagesModule';
-import { PermissionsModuleModel } from './models/permissionsModule';
 import { PhoneNumbersModuleModel } from './models/phoneNumbersModule';
 import { PlansModuleModel } from './models/plansModule';
 import { PrincipalAuthModuleModel } from './models/principalAuthModule';
@@ -56,10 +64,13 @@ import { ProfilesModuleModel } from './models/profilesModule';
 import { RateLimitMetersModuleModel } from './models/rateLimitMetersModule';
 import { RateLimitsModuleModel } from './models/rateLimitsModule';
 import { RealtimeModuleModel } from './models/realtimeModule';
+import { RefusalLogModuleModel } from './models/refusalLogModule';
 import { RelationProvisionModel } from './models/relationProvision';
+import { RepositoryModuleModel } from './models/repositoryModule';
 import { ResourceModuleModel } from './models/resourceModule';
 import { RlsModuleModel } from './models/rlsModule';
 import { RouteModuleModel } from './models/routeModule';
+import { ScopeTypesModuleModel } from './models/scopeTypesModule';
 import { SecureTableProvisionModel } from './models/secureTableProvision';
 import { SessionSecretsModuleModel } from './models/sessionSecretsModule';
 import { SessionsModuleModel } from './models/sessionsModule';
@@ -70,6 +81,7 @@ import { TransferLogModuleModel } from './models/transferLogModule';
 import { UserAuthModuleModel } from './models/userAuthModule';
 import { UserCredentialsModuleModel } from './models/userCredentialsModule';
 import { UserSettingsModuleModel } from './models/userSettingsModule';
+import { UserSettingsSecurityModuleModel } from './models/userSettingsSecurityModule';
 import { UserStateModuleModel } from './models/userStateModule';
 import { UsersModuleModel } from './models/usersModule';
 import { WebauthnAuthModuleModel } from './models/webauthnAuthModule';
@@ -80,7 +92,6 @@ export { GraphQLRequestError, FetchAdapter } from './client';
 export { QueryBuilder } from './query-builder';
 export * from './select-types';
 export * from './models';
-export { createQueryOperations } from './query';
 export { createMutationOperations } from './mutation';
 /**
  * Create an ORM client instance
@@ -114,12 +125,15 @@ export declare function createClient(config: OrmClientConfig): {
     blueprint: BlueprintModel;
     blueprintConstruction: BlueprintConstructionModel;
     blueprintTemplate: BlueprintTemplateModel;
+    capabilitiesModule: CapabilitiesModuleModel;
     catalogModule: CatalogModuleModel;
+    clusterModule: ClusterModuleModel;
     computeLogModule: ComputeLogModuleModel;
-    configSecretsUserModule: ConfigSecretsUserModuleModel;
     connectedAccountsModule: ConnectedAccountsModuleModel;
+    contentPresetModule: ContentPresetModuleModel;
     cryptoAddressesModule: CryptoAddressesModuleModel;
     cryptoAuthModule: CryptoAuthModuleModel;
+    dataCapabilitiesField: DataCapabilitiesFieldModel;
     databaseProvisionModule: DatabaseProvisionModuleModel;
     databaseSettingsModule: DatabaseSettingsModuleModel;
     dbPoolConfig: DbPoolConfigModel;
@@ -130,32 +144,37 @@ export declare function createClient(config: OrmClientConfig): {
     denormalizedTableField: DenormalizedTableFieldModel;
     devicesModule: DevicesModuleModel;
     domainModule: DomainModuleModel;
+    emailSenderModule: EmailSenderModuleModel;
     emailsModule: EmailsModuleModel;
     entityTypeProvision: EntityTypeProvisionModel;
     eventsModule: EventsModuleModel;
+    fileRefField: FileRefFieldModel;
     functionDeploymentModule: FunctionDeploymentModuleModel;
     functionInvocationModule: FunctionInvocationModuleModel;
     functionModule: FunctionModuleModel;
     graphExecutionModule: GraphExecutionModuleModel;
     graphModule: GraphModuleModel;
     hierarchyModule: HierarchyModuleModel;
-    httpRouteModule: HttpRouteModuleModel;
     i18NModule: I18NModuleModel;
     identityProvidersModule: IdentityProvidersModuleModel;
+    imageModule: ImageModuleModel;
     inferenceLogModule: InferenceLogModuleModel;
     infraConfigModule: InfraConfigModuleModel;
     infraSecretsModule: InfraSecretsModuleModel;
     integrationProvidersModule: IntegrationProvidersModuleModel;
+    internalConfigModule: InternalConfigModuleModel;
     internalSecretsModule: InternalSecretsModuleModel;
     invitesModule: InvitesModuleModel;
+    k8sAdmissionModule: K8sAdmissionModuleModel;
     limitsModule: LimitsModuleModel;
+    machineModule: MachineModuleModel;
     membershipTypesModule: MembershipTypesModuleModel;
     membershipsModule: MembershipsModuleModel;
     merkleStoreModule: MerkleStoreModuleModel;
     namespaceModule: NamespaceModuleModel;
     notificationsModule: NotificationsModuleModel;
+    oauthRequestsModule: OauthRequestsModuleModel;
     pagesModule: PagesModuleModel;
-    permissionsModule: PermissionsModuleModel;
     phoneNumbersModule: PhoneNumbersModuleModel;
     plansModule: PlansModuleModel;
     principalAuthModule: PrincipalAuthModuleModel;
@@ -163,10 +182,13 @@ export declare function createClient(config: OrmClientConfig): {
     rateLimitMetersModule: RateLimitMetersModuleModel;
     rateLimitsModule: RateLimitsModuleModel;
     realtimeModule: RealtimeModuleModel;
+    refusalLogModule: RefusalLogModuleModel;
     relationProvision: RelationProvisionModel;
+    repositoryModule: RepositoryModuleModel;
     resourceModule: ResourceModuleModel;
     rlsModule: RlsModuleModel;
     routeModule: RouteModuleModel;
+    scopeTypesModule: ScopeTypesModuleModel;
     secureTableProvision: SecureTableProvisionModel;
     sessionSecretsModule: SessionSecretsModuleModel;
     sessionsModule: SessionsModuleModel;
@@ -177,23 +199,12 @@ export declare function createClient(config: OrmClientConfig): {
     userAuthModule: UserAuthModuleModel;
     userCredentialsModule: UserCredentialsModuleModel;
     userSettingsModule: UserSettingsModuleModel;
+    userSettingsSecurityModule: UserSettingsSecurityModuleModel;
     userStateModule: UserStateModuleModel;
     usersModule: UsersModuleModel;
     webauthnAuthModule: WebauthnAuthModuleModel;
     webauthnCredentialsModule: WebauthnCredentialsModuleModel;
     webhookModule: WebhookModuleModel;
-    query: {
-        resolveBlueprintField: (args: import("./query").ResolveBlueprintFieldVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("./query-builder").QueryBuilder<{
-            resolveBlueprintField: string | null;
-        }>;
-        resolveBlueprintTable: (args: import("./query").ResolveBlueprintTableVariables, options?: {
-            select?: Record<string, unknown>;
-        }) => import("./query-builder").QueryBuilder<{
-            resolveBlueprintTable: string | null;
-        }>;
-    };
     mutation: {
         constructBlueprint: <S extends import("./input-types").ConstructBlueprintPayloadSelect>(args: import("./mutation").ConstructBlueprintVariables, options: {
             select: S;
@@ -210,40 +221,5 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionBucketPayloadSelect>) => import("./query-builder").QueryBuilder<{
             provisionBucket: import("./select-types").InferSelectResult<import("./input-types").ProvisionBucketPayload, S> | null;
         }>;
-        provisionCheckConstraint: <S extends import("./input-types").ProvisionCheckConstraintPayloadSelect>(args: import("./mutation").ProvisionCheckConstraintVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionCheckConstraintPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionCheckConstraint: import("./select-types").InferSelectResult<import("./input-types").ProvisionCheckConstraintPayload, S> | null;
-        }>;
-        provisionFullTextSearch: <S extends import("./input-types").ProvisionFullTextSearchPayloadSelect>(args: import("./mutation").ProvisionFullTextSearchVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionFullTextSearchPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionFullTextSearch: import("./select-types").InferSelectResult<import("./input-types").ProvisionFullTextSearchPayload, S> | null;
-        }>;
-        provisionIndex: <S extends import("./input-types").ProvisionIndexPayloadSelect>(args: import("./mutation").ProvisionIndexVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionIndexPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionIndex: import("./select-types").InferSelectResult<import("./input-types").ProvisionIndexPayload, S> | null;
-        }>;
-        provisionRelation: <S extends import("./input-types").ProvisionRelationPayloadSelect>(args: import("./mutation").ProvisionRelationVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionRelationPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionRelation: import("./select-types").InferSelectResult<import("./input-types").ProvisionRelationPayload, S> | null;
-        }>;
-        provisionSpatialRelation: <S extends import("./input-types").ProvisionSpatialRelationPayloadSelect>(args: import("./mutation").ProvisionSpatialRelationVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionSpatialRelationPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionSpatialRelation: import("./select-types").InferSelectResult<import("./input-types").ProvisionSpatialRelationPayload, S> | null;
-        }>;
-        provisionTable: <S extends import("./input-types").ProvisionTablePayloadSelect>(args: import("./mutation").ProvisionTableVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionTablePayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionTable: import("./select-types").InferSelectResult<import("./input-types").ProvisionTablePayload, S> | null;
-        }>;
-        provisionUniqueConstraint: <S extends import("./input-types").ProvisionUniqueConstraintPayloadSelect>(args: import("./mutation").ProvisionUniqueConstraintVariables, options: {
-            select: S;
-        } & import("./select-types").StrictSelect<S, import("./input-types").ProvisionUniqueConstraintPayloadSelect>) => import("./query-builder").QueryBuilder<{
-            provisionUniqueConstraint: import("./select-types").InferSelectResult<import("./input-types").ProvisionUniqueConstraintPayload, S> | null;
-        }>;
     };
 };