README.md

csdk CLI

Setup

# Create a context pointing at your GraphQL endpoint
csdk context create production --endpoint https://api.example.com/graphql

# Set the active context
csdk context use production

# Authenticate
csdk auth set-token <your-token>

Commands

Command	Description
context	Manage API contexts (endpoints)
auth	Manage authentication tokens
config	Manage config key-value store (per-context)
org-get-managers-record	orgGetManagersRecord CRUD operations
org-get-subordinates-record	orgGetSubordinatesRecord CRUD operations
get-all-record	getAllRecord CRUD operations
object	object CRUD operations
app-permission	appPermission CRUD operations
org-permission	orgPermission CRUD operations
app-level-requirement	appLevelRequirement CRUD operations
database	database CRUD operations
schema	schema CRUD operations
table	table CRUD operations
check-constraint	checkConstraint CRUD operations
field	field CRUD operations
spatial-relation	spatialRelation CRUD operations
foreign-key-constraint	foreignKeyConstraint CRUD operations
full-text-search	fullTextSearch CRUD operations
index	index CRUD operations
policy	policy CRUD operations
primary-key-constraint	primaryKeyConstraint CRUD operations
table-grant	tableGrant CRUD operations
trigger	trigger CRUD operations
unique-constraint	uniqueConstraint CRUD operations
view	view CRUD operations
view-table	viewTable CRUD operations
view-grant	viewGrant CRUD operations
view-rule	viewRule CRUD operations
embedding-chunk	embeddingChunk CRUD operations
secure-table-provision	secureTableProvision CRUD operations
relation-provision	relationProvision CRUD operations
session-secrets-module	sessionSecretsModule CRUD operations
identity-providers-module	identityProvidersModule CRUD operations
schema-grant	schemaGrant CRUD operations
default-privilege	defaultPrivilege CRUD operations
enum	enum CRUD operations
api-schema	apiSchema CRUD operations
api-module	apiModule CRUD operations
domain	domain CRUD operations
site-metadatum	siteMetadatum CRUD operations
site-module	siteModule CRUD operations
site-theme	siteTheme CRUD operations
trigger-function	triggerFunction CRUD operations
database-transfer	databaseTransfer CRUD operations
api	api CRUD operations
site	site CRUD operations
app	app CRUD operations
connected-accounts-module	connectedAccountsModule CRUD operations
crypto-addresses-module	cryptoAddressesModule CRUD operations
crypto-auth-module	cryptoAuthModule CRUD operations
default-ids-module	defaultIdsModule CRUD operations
denormalized-table-field	denormalizedTableField CRUD operations
emails-module	emailsModule CRUD operations
encrypted-secrets-module	encryptedSecretsModule CRUD operations
invites-module	invitesModule CRUD operations
levels-module	levelsModule CRUD operations
limits-module	limitsModule CRUD operations
membership-types-module	membershipTypesModule CRUD operations
memberships-module	membershipsModule CRUD operations
permissions-module	permissionsModule CRUD operations
phone-numbers-module	phoneNumbersModule CRUD operations
profiles-module	profilesModule CRUD operations
secrets-module	secretsModule CRUD operations
sessions-module	sessionsModule CRUD operations
user-auth-module	userAuthModule CRUD operations
users-module	usersModule CRUD operations
blueprint	blueprint CRUD operations
blueprint-template	blueprintTemplate CRUD operations
blueprint-construction	blueprintConstruction CRUD operations
storage-module	storageModule CRUD operations
entity-type-provision	entityTypeProvision CRUD operations
webauthn-credentials-module	webauthnCredentialsModule CRUD operations
webauthn-auth-module	webauthnAuthModule CRUD operations
notifications-module	notificationsModule CRUD operations
database-provision-module	databaseProvisionModule CRUD operations
app-admin-grant	appAdminGrant CRUD operations
app-owner-grant	appOwnerGrant CRUD operations
app-grant	appGrant CRUD operations
org-membership	orgMembership CRUD operations
org-member	orgMember CRUD operations
org-admin-grant	orgAdminGrant CRUD operations
org-owner-grant	orgOwnerGrant CRUD operations
org-member-profile	orgMemberProfile CRUD operations
org-grant	orgGrant CRUD operations
org-chart-edge	orgChartEdge CRUD operations
org-chart-edge-grant	orgChartEdgeGrant CRUD operations
org-permission-default	orgPermissionDefault CRUD operations
app-limit	appLimit CRUD operations
org-limit	orgLimit CRUD operations
app-step	appStep CRUD operations
app-achievement	appAchievement CRUD operations
app-level	appLevel CRUD operations
email	email CRUD operations
phone-number	phoneNumber CRUD operations
crypto-address	cryptoAddress CRUD operations
webauthn-credential	webauthnCredential CRUD operations
app-invite	appInvite CRUD operations
app-claimed-invite	appClaimedInvite CRUD operations
org-invite	orgInvite CRUD operations
org-claimed-invite	orgClaimedInvite CRUD operations
audit-log	auditLog CRUD operations
app-permission-default	appPermissionDefault CRUD operations
identity-provider	identityProvider CRUD operations
ref	ref CRUD operations
store	store CRUD operations
role-type	roleType CRUD operations
migrate-file	migrateFile CRUD operations
app-limit-default	appLimitDefault CRUD operations
org-limit-default	orgLimitDefault CRUD operations
devices-module	devicesModule CRUD operations
user-connected-account	userConnectedAccount CRUD operations
app-membership-default	appMembershipDefault CRUD operations
org-membership-default	orgMembershipDefault CRUD operations
commit	commit CRUD operations
rate-limits-module	rateLimitsModule CRUD operations
membership-type	membershipType CRUD operations
rls-module	rlsModule CRUD operations
sql-action	sqlAction CRUD operations
org-membership-setting	orgMembershipSetting CRUD operations
user	user CRUD operations
ast-migration	astMigration CRUD operations
app-membership	appMembership CRUD operations
hierarchy-module	hierarchyModule CRUD operations
current-user-id	currentUserId
current-user-agent	currentUserAgent
current-ip-address	currentIpAddress
require-step-up	requireStepUp
app-permissions-get-padded-mask	appPermissionsGetPaddedMask
org-permissions-get-padded-mask	orgPermissionsGetPaddedMask
steps-achieved	stepsAchieved
rev-parse	revParse
resolve-blueprint-field	Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. "location") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.
org-is-manager-of	orgIsManagerOf
app-permissions-get-mask	appPermissionsGetMask
org-permissions-get-mask	orgPermissionsGetMask
resolve-blueprint-table	Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.
app-permissions-get-mask-by-names	appPermissionsGetMaskByNames
org-permissions-get-mask-by-names	orgPermissionsGetMaskByNames
get-all-objects-from-root	Reads and enables pagination through a set of Object.
get-path-objects-from-root	Reads and enables pagination through a set of Object.
get-object-at-path	getObjectAtPath
app-permissions-get-by-mask	Reads and enables pagination through a set of AppPermission.
org-permissions-get-by-mask	Reads and enables pagination through a set of OrgPermission.
steps-required	Reads and enables pagination through a set of AppLevelRequirement.
current-user	currentUser
send-account-deletion-email	sendAccountDeletionEmail
sign-out	signOut
accept-database-transfer	acceptDatabaseTransfer
cancel-database-transfer	cancelDatabaseTransfer
reject-database-transfer	rejectDatabaseTransfer
disconnect-account	disconnectAccount
revoke-api-key	revokeApiKey
revoke-session	revokeSession
verify-password	verifyPassword
verify-totp	verifyTotp
submit-app-invite-code	submitAppInviteCode
submit-org-invite-code	submitOrgInviteCode
check-password	checkPassword
confirm-delete-account	confirmDeleteAccount
set-password	setPassword
verify-email	verifyEmail
freeze-objects	freezeObjects
init-empty-repo	initEmptyRepo
construct-blueprint	Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Six phases: (0) entity_type_provision for each membership_type entry — provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.
provision-new-user	provisionNewUser
reset-password	resetPassword
remove-node-at-path	removeNodeAtPath
copy-template-to-blueprint	Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.
provision-spatial-relation	Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin ↔ param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist — this is a metadata-only insert.
bootstrap-user	bootstrapUser
set-field-order	setFieldOrder
provision-unique-constraint	Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.
provision-full-text-search	Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.
provision-index	Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.
set-data-at-path	setDataAtPath
set-props-and-commit	setPropsAndCommit
provision-database-with-user	provisionDatabaseWithUser
insert-node-at-path	insertNodeAtPath
update-node-at-path	updateNodeAtPath
set-and-commit	setAndCommit
provision-relation	Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).
apply-rls	applyRls
sign-in-cross-origin	signInCrossOrigin
create-user-database	Creates a new user database with all required modules, permissions, and RLS policies.

Parameters:

• database_name: Name for the new database (required)
• owner_id: UUID of the owner user (required)
• include_invites: Include invite system (default: true)
• include_groups: Include group-level memberships (default: false)
• include_levels: Include levels/achievements (default: false)
• bitlen: Bit length for permission masks (default: 64)
• tokens_expiration: Token expiration interval (default: 30 days)

Returns the database_id UUID of the newly created database.

Example usage: SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid); SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true); -- with invites and groups | | extend-token-expires | extendTokenExpires | | create-api-key | createApiKey | | sign-up | signUp | | request-cross-origin-token | requestCrossOriginToken | | sign-in | signIn | | provision-table | Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields). | | send-verification-email | sendVerificationEmail | | forgot-password | forgotPassword | | request-upload-url | Request a presigned URL for uploading a file directly to S3. Client computes SHA-256 of the file content and provides it here. If a file with the same hash already exists (dedup), returns the existing file ID and deduplicated=true with no uploadUrl. | | confirm-upload | Confirm that a file has been uploaded to S3. Verifies the object exists in S3, checks content-type, and transitions the file status from 'pending' to 'ready'. | | provision-bucket | Provision an S3 bucket for a logical bucket in the database. Reads the bucket config via RLS, then creates and configures the S3 bucket with the appropriate privacy policies, CORS rules, and lifecycle settings. |

Infrastructure Commands

context

Manage named API contexts (kubectl-style).

Subcommand	Description
create <name> --endpoint <url>	Create a new context
list	List all contexts
use <name>	Set the active context
current	Show current context
delete <name>	Delete a context

Configuration is stored at ~/.csdk/config/.

auth

Manage authentication tokens per context.

Subcommand	Description
set-token <token>	Store bearer token for current context
status	Show auth status across all contexts
logout	Remove credentials for current context

config

Manage per-context key-value configuration variables.

Subcommand	Description
get <key>	Get a config value
set <key> <value>	Set a config value
list	List all config values
delete <key>	Delete a config value

Variables are scoped to the active context and stored at ~/.csdk/config/.

Table Commands

org-get-managers-record

CRUD operations for OrgGetManagersRecord records.

Subcommand	Description
list	List all orgGetManagersRecord records
find-first	Find first matching orgGetManagersRecord record
get	Get a orgGetManagersRecord by id
create	Create a new orgGetManagersRecord
update	Update an existing orgGetManagersRecord
delete	Delete a orgGetManagersRecord

Fields:

Field	Type
userId	UUID
depth	Int

Required create fields: userId, depth

org-get-subordinates-record

CRUD operations for OrgGetSubordinatesRecord records.

Subcommand	Description
list	List all orgGetSubordinatesRecord records
find-first	Find first matching orgGetSubordinatesRecord record
get	Get a orgGetSubordinatesRecord by id
create	Create a new orgGetSubordinatesRecord
update	Update an existing orgGetSubordinatesRecord
delete	Delete a orgGetSubordinatesRecord

Fields:

Field	Type
userId	UUID
depth	Int

Required create fields: userId, depth

get-all-record

CRUD operations for GetAllRecord records.

Subcommand	Description
list	List all getAllRecord records
find-first	Find first matching getAllRecord record
get	Get a getAllRecord by id
create	Create a new getAllRecord
update	Update an existing getAllRecord
delete	Delete a getAllRecord

Fields:

Field	Type
path	String
data	JSON

Required create fields: path, data

object

CRUD operations for Object records.

Subcommand	Description
list	List all object records
find-first	Find first matching object record
get	Get a object by id
create	Create a new object
update	Update an existing object
delete	Delete a object

Fields:

Field	Type
hashUuid	UUID
id	UUID
databaseId	UUID
kids	UUID
ktree	String
data	JSON
frzn	Boolean
createdAt	Datetime

Required create fields: databaseId Optional create fields (backend defaults): kids, ktree, data, frzn

app-permission

CRUD operations for AppPermission records.

Subcommand	Description
list	List all appPermission records
find-first	Find first matching appPermission record
get	Get a appPermission by id
create	Create a new appPermission
update	Update an existing appPermission
delete	Delete a appPermission

Fields:

Field	Type
id	UUID
name	String
bitnum	Int
bitstr	BitString
description	String

Optional create fields (backend defaults): name, bitnum, bitstr, description

org-permission

CRUD operations for OrgPermission records.

Subcommand	Description
list	List all orgPermission records
find-first	Find first matching orgPermission record
get	Get a orgPermission by id
create	Create a new orgPermission
update	Update an existing orgPermission
delete	Delete a orgPermission

Fields:

Field	Type
id	UUID
name	String
bitnum	Int
bitstr	BitString
description	String

Optional create fields (backend defaults): name, bitnum, bitstr, description

app-level-requirement

CRUD operations for AppLevelRequirement records.

Subcommand	Description
list	List all appLevelRequirement records
find-first	Find first matching appLevelRequirement record
get	Get a appLevelRequirement by id
create	Create a new appLevelRequirement
update	Update an existing appLevelRequirement
delete	Delete a appLevelRequirement

Fields:

Field	Type
id	UUID
name	String
level	String
description	String
requiredCount	Int
priority	Int
createdAt	Datetime
updatedAt	Datetime

Required create fields: name, level Optional create fields (backend defaults): description, requiredCount, priority

database

CRUD operations for Database records.

Subcommand	Description
list	List all database records
find-first	Find first matching database record
get	Get a database by id
create	Create a new database
update	Update an existing database
delete	Delete a database

Fields:

Field	Type
id	UUID
ownerId	UUID
schemaHash	String
name	String
label	String
hash	UUID
createdAt	Datetime
updatedAt	Datetime

Optional create fields (backend defaults): ownerId, schemaHash, name, label, hash

schema

CRUD operations for Schema records.

Subcommand	Description
list	List all schema records
find-first	Find first matching schema record
get	Get a schema by id
create	Create a new schema
update	Update an existing schema
delete	Delete a schema

Fields:

Field	Type
id	UUID
databaseId	UUID
name	String
schemaName	String
label	String
description	String
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
isPublic	Boolean
createdAt	Datetime
updatedAt	Datetime

Required create fields: databaseId, name, schemaName Optional create fields (backend defaults): label, description, smartTags, category, module, scope, tags, isPublic

table

CRUD operations for Table records.

Subcommand	Description
list	List all table records
find-first	Find first matching table record
get	Get a table by id
create	Create a new table
update	Update an existing table
delete	Delete a table

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
name	String
label	String
description	String
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
useRls	Boolean
timestamps	Boolean
peoplestamps	Boolean
pluralName	String
singularName	String
tags	String
inheritsId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: schemaId, name Optional create fields (backend defaults): databaseId, label, description, smartTags, category, module, scope, useRls, timestamps, peoplestamps, pluralName, singularName, tags, inheritsId

check-constraint

CRUD operations for CheckConstraint records.

Subcommand	Description
list	List all checkConstraint records
find-first	Find first matching checkConstraint record
get	Get a checkConstraint by id
create	Create a new checkConstraint
update	Update an existing checkConstraint
delete	Delete a checkConstraint

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
type	String
fieldIds	UUID
expr	JSON
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldIds Optional create fields (backend defaults): databaseId, name, type, expr, smartTags, category, module, scope, tags

field

CRUD operations for Field records.

Subcommand	Description
list	List all field records
find-first	Find first matching field record
get	Get a field by id
create	Create a new field
update	Update an existing field
delete	Delete a field

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
label	String
description	String
smartTags	JSON
isRequired	Boolean
apiRequired	Boolean
defaultValue	String
defaultValueAst	JSON
type	String
fieldOrder	Int
regexp	String
chk	JSON
chkExpr	JSON
min	Float
max	Float
tags	String
category	ObjectCategory
module	String
scope	Int
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, name, type Optional create fields (backend defaults): databaseId, label, description, smartTags, isRequired, apiRequired, defaultValue, defaultValueAst, fieldOrder, regexp, chk, chkExpr, min, max, tags, category, module, scope

spatial-relation

CRUD operations for SpatialRelation records.

Subcommand	Description
list	List all spatialRelation records
find-first	Find first matching spatialRelation record
get	Get a spatialRelation by id
create	Create a new spatialRelation
update	Update an existing spatialRelation
delete	Delete a spatialRelation

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
fieldId	UUID
refTableId	UUID
refFieldId	UUID
name	String
operator	String
paramName	String
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldId, refTableId, refFieldId, name, operator Optional create fields (backend defaults): databaseId, paramName, category, module, scope, tags

foreign-key-constraint

CRUD operations for ForeignKeyConstraint records.

Subcommand	Description
list	List all foreignKeyConstraint records
find-first	Find first matching foreignKeyConstraint record
get	Get a foreignKeyConstraint by id
create	Create a new foreignKeyConstraint
update	Update an existing foreignKeyConstraint
delete	Delete a foreignKeyConstraint

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
description	String
smartTags	JSON
type	String
fieldIds	UUID
refTableId	UUID
refFieldIds	UUID
deleteAction	String
updateAction	String
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldIds, refTableId, refFieldIds Optional create fields (backend defaults): databaseId, name, description, smartTags, type, deleteAction, updateAction, category, module, scope, tags

full-text-search

CRUD operations for FullTextSearch records.

Subcommand	Description
list	List all fullTextSearch records
find-first	Find first matching fullTextSearch record
get	Get a fullTextSearch by id
create	Create a new fullTextSearch
update	Update an existing fullTextSearch
delete	Delete a fullTextSearch

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
fieldId	UUID
fieldIds	UUID
weights	String
langs	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldId, fieldIds, weights, langs Optional create fields (backend defaults): databaseId

index

CRUD operations for Index records.

Subcommand	Description
list	List all index records
find-first	Find first matching index record
get	Get a index by id
create	Create a new index
update	Update an existing index
delete	Delete a index

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
fieldIds	UUID
includeFieldIds	UUID
accessMethod	String
indexParams	JSON
whereClause	JSON
isUnique	Boolean
options	JSON
opClasses	String
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: databaseId, tableId Optional create fields (backend defaults): name, fieldIds, includeFieldIds, accessMethod, indexParams, whereClause, isUnique, options, opClasses, smartTags, category, module, scope, tags

policy

CRUD operations for Policy records.

Subcommand	Description
list	List all policy records
find-first	Find first matching policy record
get	Get a policy by id
create	Create a new policy
update	Update an existing policy
delete	Delete a policy

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
granteeName	String
privilege	String
permissive	Boolean
disabled	Boolean
policyType	String
data	JSON
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId Optional create fields (backend defaults): databaseId, name, granteeName, privilege, permissive, disabled, policyType, data, smartTags, category, module, scope, tags

primary-key-constraint

CRUD operations for PrimaryKeyConstraint records.

Subcommand	Description
list	List all primaryKeyConstraint records
find-first	Find first matching primaryKeyConstraint record
get	Get a primaryKeyConstraint by id
create	Create a new primaryKeyConstraint
update	Update an existing primaryKeyConstraint
delete	Delete a primaryKeyConstraint

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
type	String
fieldIds	UUID
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldIds Optional create fields (backend defaults): databaseId, name, type, smartTags, category, module, scope, tags

table-grant

CRUD operations for TableGrant records.

Subcommand	Description
list	List all tableGrant records
find-first	Find first matching tableGrant record
get	Get a tableGrant by id
create	Create a new tableGrant
update	Update an existing tableGrant
delete	Delete a tableGrant

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
privilege	String
granteeName	String
fieldIds	UUID
isGrant	Boolean
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, privilege, granteeName Optional create fields (backend defaults): databaseId, fieldIds, isGrant

trigger

CRUD operations for Trigger records.

Subcommand	Description
list	List all trigger records
find-first	Find first matching trigger record
get	Get a trigger by id
create	Create a new trigger
update	Update an existing trigger
delete	Delete a trigger

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
event	String
functionName	String
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, name Optional create fields (backend defaults): databaseId, event, functionName, smartTags, category, module, scope, tags

unique-constraint

CRUD operations for UniqueConstraint records.

Subcommand	Description
list	List all uniqueConstraint records
find-first	Find first matching uniqueConstraint record
get	Get a uniqueConstraint by id
create	Create a new uniqueConstraint
update	Update an existing uniqueConstraint
delete	Delete a uniqueConstraint

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
name	String
description	String
smartTags	JSON
type	String
fieldIds	UUID
category	ObjectCategory
module	String
scope	Int
tags	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId, fieldIds Optional create fields (backend defaults): databaseId, name, description, smartTags, type, category, module, scope, tags

view

CRUD operations for View records.

Subcommand	Description
list	List all view records
find-first	Find first matching view record
get	Get a view by id
create	Create a new view
update	Update an existing view
delete	Delete a view

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
name	String
tableId	UUID
viewType	String
data	JSON
filterType	String
filterData	JSON
securityInvoker	Boolean
isReadOnly	Boolean
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String

Required create fields: schemaId, name, viewType Optional create fields (backend defaults): databaseId, tableId, data, filterType, filterData, securityInvoker, isReadOnly, smartTags, category, module, scope, tags

view-table

CRUD operations for ViewTable records.

Subcommand	Description
list	List all viewTable records
find-first	Find first matching viewTable record
get	Get a viewTable by id
create	Create a new viewTable
update	Update an existing viewTable
delete	Delete a viewTable

Fields:

Field	Type
id	UUID
viewId	UUID
tableId	UUID
joinOrder	Int

Required create fields: viewId, tableId Optional create fields (backend defaults): joinOrder

view-grant

CRUD operations for ViewGrant records.

Subcommand	Description
list	List all viewGrant records
find-first	Find first matching viewGrant record
get	Get a viewGrant by id
create	Create a new viewGrant
update	Update an existing viewGrant
delete	Delete a viewGrant

Fields:

Field	Type
id	UUID
databaseId	UUID
viewId	UUID
granteeName	String
privilege	String
withGrantOption	Boolean
isGrant	Boolean

Required create fields: viewId, granteeName, privilege Optional create fields (backend defaults): databaseId, withGrantOption, isGrant

view-rule

CRUD operations for ViewRule records.

Subcommand	Description
list	List all viewRule records
find-first	Find first matching viewRule record
get	Get a viewRule by id
create	Create a new viewRule
update	Update an existing viewRule
delete	Delete a viewRule

Fields:

Field	Type
id	UUID
databaseId	UUID
viewId	UUID
name	String
event	String
action	String

Required create fields: viewId, name, event Optional create fields (backend defaults): databaseId, action

embedding-chunk

CRUD operations for EmbeddingChunk records.

Subcommand	Description
list	List all embeddingChunk records
find-first	Find first matching embeddingChunk record
get	Get a embeddingChunk by id
create	Create a new embeddingChunk
update	Update an existing embeddingChunk
delete	Delete a embeddingChunk

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
embeddingFieldId	UUID
chunksTableId	UUID
chunksTableName	String
contentFieldName	String
dimensions	Int
metric	String
chunkSize	Int
chunkOverlap	Int
chunkStrategy	String
metadataFields	JSON
enqueueChunkingJob	Boolean
chunkingTaskName	String
parentFkFieldId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: tableId Optional create fields (backend defaults): databaseId, embeddingFieldId, chunksTableId, chunksTableName, contentFieldName, dimensions, metric, chunkSize, chunkOverlap, chunkStrategy, metadataFields, enqueueChunkingJob, chunkingTaskName, parentFkFieldId

secure-table-provision

CRUD operations for SecureTableProvision records.

Subcommand	Description
list	List all secureTableProvision records
find-first	Find first matching secureTableProvision record
get	Get a secureTableProvision by id
create	Create a new secureTableProvision
update	Update an existing secureTableProvision
delete	Delete a secureTableProvision

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String
nodes	JSON
useRls	Boolean
fields	JSON
grants	JSON
policies	JSON
outFields	UUID

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName, nodes, useRls, fields, grants, policies, outFields

relation-provision

CRUD operations for RelationProvision records.

Subcommand	Description
list	List all relationProvision records
find-first	Find first matching relationProvision record
get	Get a relationProvision by id
create	Create a new relationProvision
update	Update an existing relationProvision
delete	Delete a relationProvision

Fields:

Field	Type
id	UUID
databaseId	UUID
relationType	String
sourceTableId	UUID
targetTableId	UUID
fieldName	String
deleteAction	String
isRequired	Boolean
apiRequired	Boolean
junctionTableId	UUID
junctionTableName	String
junctionSchemaId	UUID
sourceFieldName	String
targetFieldName	String
useCompositeKey	Boolean
createIndex	Boolean
exposeInApi	Boolean
nodes	JSON
grants	JSON
policies	JSON
outFieldId	UUID
outJunctionTableId	UUID
outSourceFieldId	UUID
outTargetFieldId	UUID

Required create fields: databaseId, relationType, sourceTableId, targetTableId Optional create fields (backend defaults): fieldName, deleteAction, isRequired, apiRequired, junctionTableId, junctionTableName, junctionSchemaId, sourceFieldName, targetFieldName, useCompositeKey, createIndex, exposeInApi, nodes, grants, policies, outFieldId, outJunctionTableId, outSourceFieldId, outTargetFieldId

session-secrets-module

CRUD operations for SessionSecretsModule records.

Subcommand	Description
list	List all sessionSecretsModule records
find-first	Find first matching sessionSecretsModule record
get	Get a sessionSecretsModule by id
create	Create a new sessionSecretsModule
update	Update an existing sessionSecretsModule
delete	Delete a sessionSecretsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String
sessionsTableId	UUID

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName, sessionsTableId

identity-providers-module

CRUD operations for IdentityProvidersModule records.

Subcommand	Description
list	List all identityProvidersModule records
find-first	Find first matching identityProvidersModule record
get	Get a identityProvidersModule by id
create	Create a new identityProvidersModule
update	Update an existing identityProvidersModule
delete	Delete a identityProvidersModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
tableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, tableName

schema-grant

CRUD operations for SchemaGrant records.

Subcommand	Description
list	List all schemaGrant records
find-first	Find first matching schemaGrant record
get	Get a schemaGrant by id
create	Create a new schemaGrant
update	Update an existing schemaGrant
delete	Delete a schemaGrant

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
granteeName	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: schemaId, granteeName Optional create fields (backend defaults): databaseId

default-privilege

CRUD operations for DefaultPrivilege records.

Subcommand	Description
list	List all defaultPrivilege records
find-first	Find first matching defaultPrivilege record
get	Get a defaultPrivilege by id
create	Create a new defaultPrivilege
update	Update an existing defaultPrivilege
delete	Delete a defaultPrivilege

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
objectType	String
privilege	String
granteeName	String
isGrant	Boolean

Required create fields: schemaId, objectType, privilege, granteeName Optional create fields (backend defaults): databaseId, isGrant

enum

CRUD operations for Enum records.

Subcommand	Description
list	List all enum records
find-first	Find first matching enum record
get	Get a enum by id
create	Create a new enum
update	Update an existing enum
delete	Delete a enum

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
name	String
label	String
description	String
values	String
smartTags	JSON
category	ObjectCategory
module	String
scope	Int
tags	String

Required create fields: databaseId, schemaId, name Optional create fields (backend defaults): label, description, values, smartTags, category, module, scope, tags

api-schema

CRUD operations for ApiSchema records.

Subcommand	Description
list	List all apiSchema records
find-first	Find first matching apiSchema record
get	Get a apiSchema by id
create	Create a new apiSchema
update	Update an existing apiSchema
delete	Delete a apiSchema

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
apiId	UUID

Required create fields: databaseId, schemaId, apiId

api-module

CRUD operations for ApiModule records.

Subcommand	Description
list	List all apiModule records
find-first	Find first matching apiModule record
get	Get a apiModule by id
create	Create a new apiModule
update	Update an existing apiModule
delete	Delete a apiModule

Fields:

Field	Type
id	UUID
databaseId	UUID
apiId	UUID
name	String
data	JSON

Required create fields: databaseId, apiId, name, data

domain

CRUD operations for Domain records.

Subcommand	Description
list	List all domain records
find-first	Find first matching domain record
get	Get a domain by id
create	Create a new domain
update	Update an existing domain
delete	Delete a domain

Fields:

Field	Type
id	UUID
databaseId	UUID
apiId	UUID
siteId	UUID
subdomain	Hostname
domain	Hostname

Required create fields: databaseId Optional create fields (backend defaults): apiId, siteId, subdomain, domain

site-metadatum

CRUD operations for SiteMetadatum records.

Subcommand	Description
list	List all siteMetadatum records
find-first	Find first matching siteMetadatum record
get	Get a siteMetadatum by id
create	Create a new siteMetadatum
update	Update an existing siteMetadatum
delete	Delete a siteMetadatum

Fields:

Field	Type
id	UUID
databaseId	UUID
siteId	UUID
title	String
description	String
ogImage	Image

Required create fields: databaseId, siteId Optional create fields (backend defaults): title, description, ogImage

site-module

CRUD operations for SiteModule records.

Subcommand	Description
list	List all siteModule records
find-first	Find first matching siteModule record
get	Get a siteModule by id
create	Create a new siteModule
update	Update an existing siteModule
delete	Delete a siteModule

Fields:

Field	Type
id	UUID
databaseId	UUID
siteId	UUID
name	String
data	JSON

Required create fields: databaseId, siteId, name, data

site-theme

CRUD operations for SiteTheme records.

Subcommand	Description
list	List all siteTheme records
find-first	Find first matching siteTheme record
get	Get a siteTheme by id
create	Create a new siteTheme
update	Update an existing siteTheme
delete	Delete a siteTheme

Fields:

Field	Type
id	UUID
databaseId	UUID
siteId	UUID
theme	JSON

Required create fields: databaseId, siteId, theme

trigger-function

CRUD operations for TriggerFunction records.

Subcommand	Description
list	List all triggerFunction records
find-first	Find first matching triggerFunction record
get	Get a triggerFunction by id
create	Create a new triggerFunction
update	Update an existing triggerFunction
delete	Delete a triggerFunction

Fields:

Field	Type
id	UUID
databaseId	UUID
name	String
code	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: databaseId, name Optional create fields (backend defaults): code

database-transfer

CRUD operations for DatabaseTransfer records.

Subcommand	Description
list	List all databaseTransfer records
find-first	Find first matching databaseTransfer record
get	Get a databaseTransfer by id
create	Create a new databaseTransfer
update	Update an existing databaseTransfer
delete	Delete a databaseTransfer

Fields:

Field	Type
id	UUID
databaseId	UUID
targetOwnerId	UUID
sourceApproved	Boolean
targetApproved	Boolean
sourceApprovedAt	Datetime
targetApprovedAt	Datetime
status	String
initiatedBy	UUID
notes	String
expiresAt	Datetime
createdAt	Datetime
updatedAt	Datetime
completedAt	Datetime

Required create fields: databaseId, targetOwnerId, initiatedBy Optional create fields (backend defaults): sourceApproved, targetApproved, sourceApprovedAt, targetApprovedAt, status, notes, expiresAt, completedAt

api

CRUD operations for Api records.

Subcommand	Description
list	List all api records
find-first	Find first matching api record
get	Get a api by id
create	Create a new api
update	Update an existing api
delete	Delete a api

Fields:

Field	Type
id	UUID
databaseId	UUID
name	String
dbname	String
roleName	String
anonRole	String
isPublic	Boolean

Required create fields: databaseId, name Optional create fields (backend defaults): dbname, roleName, anonRole, isPublic

site

CRUD operations for Site records.

Subcommand	Description
list	List all site records
find-first	Find first matching site record
get	Get a site by id
create	Create a new site
update	Update an existing site
delete	Delete a site

Fields:

Field	Type
id	UUID
databaseId	UUID
title	String
description	String
ogImage	Image
favicon	Attachment
appleTouchIcon	Image
logo	Image
dbname	String

Required create fields: databaseId Optional create fields (backend defaults): title, description, ogImage, favicon, appleTouchIcon, logo, dbname

app

CRUD operations for App records.

Subcommand	Description
list	List all app records
find-first	Find first matching app record
get	Get a app by id
create	Create a new app
update	Update an existing app
delete	Delete a app

Fields:

Field	Type
id	UUID
databaseId	UUID
siteId	UUID
name	String
appImage	Image
appStoreLink	Url
appStoreId	String
appIdPrefix	String
playStoreLink	Url

Required create fields: databaseId, siteId Optional create fields (backend defaults): name, appImage, appStoreLink, appStoreId, appIdPrefix, playStoreLink

connected-accounts-module

CRUD operations for ConnectedAccountsModule records.

Subcommand	Description
list	List all connectedAccountsModule records
find-first	Find first matching connectedAccountsModule record
get	Get a connectedAccountsModule by id
create	Create a new connectedAccountsModule
update	Update an existing connectedAccountsModule
delete	Delete a connectedAccountsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
ownerTableId	UUID
tableName	String

Required create fields: databaseId, tableName Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, ownerTableId

crypto-addresses-module

CRUD operations for CryptoAddressesModule records.

Subcommand	Description
list	List all cryptoAddressesModule records
find-first	Find first matching cryptoAddressesModule record
get	Get a cryptoAddressesModule by id
create	Create a new cryptoAddressesModule
update	Update an existing cryptoAddressesModule
delete	Delete a cryptoAddressesModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
ownerTableId	UUID
tableName	String
cryptoNetwork	String

Required create fields: databaseId, tableName Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, ownerTableId, cryptoNetwork

crypto-auth-module

CRUD operations for CryptoAuthModule records.

Subcommand	Description
list	List all cryptoAuthModule records
find-first	Find first matching cryptoAuthModule record
get	Get a cryptoAuthModule by id
create	Create a new cryptoAuthModule
update	Update an existing cryptoAuthModule
delete	Delete a cryptoAuthModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
usersTableId	UUID
secretsTableId	UUID
sessionsTableId	UUID
sessionCredentialsTableId	UUID
addressesTableId	UUID
userField	String
cryptoNetwork	String
signInRequestChallenge	String
signInRecordFailure	String
signUpWithKey	String
signInWithChallenge	String

Required create fields: databaseId, userField Optional create fields (backend defaults): schemaId, usersTableId, secretsTableId, sessionsTableId, sessionCredentialsTableId, addressesTableId, cryptoNetwork, signInRequestChallenge, signInRecordFailure, signUpWithKey, signInWithChallenge

default-ids-module

CRUD operations for DefaultIdsModule records.

Subcommand	Description
list	List all defaultIdsModule records
find-first	Find first matching defaultIdsModule record
get	Get a defaultIdsModule by id
create	Create a new defaultIdsModule
update	Update an existing defaultIdsModule
delete	Delete a defaultIdsModule

Fields:

Field	Type
id	UUID
databaseId	UUID

Required create fields: databaseId

denormalized-table-field

CRUD operations for DenormalizedTableField records.

Subcommand	Description
list	List all denormalizedTableField records
find-first	Find first matching denormalizedTableField record
get	Get a denormalizedTableField by id
create	Create a new denormalizedTableField
update	Update an existing denormalizedTableField
delete	Delete a denormalizedTableField

Fields:

Field	Type
id	UUID
databaseId	UUID
tableId	UUID
fieldId	UUID
setIds	UUID
refTableId	UUID
refFieldId	UUID
refIds	UUID
useUpdates	Boolean
updateDefaults	Boolean
funcName	String
funcOrder	Int

Required create fields: databaseId, tableId, fieldId, refTableId, refFieldId Optional create fields (backend defaults): setIds, refIds, useUpdates, updateDefaults, funcName, funcOrder

emails-module

CRUD operations for EmailsModule records.

Subcommand	Description
list	List all emailsModule records
find-first	Find first matching emailsModule record
get	Get a emailsModule by id
create	Create a new emailsModule
update	Update an existing emailsModule
delete	Delete a emailsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
ownerTableId	UUID
tableName	String

Required create fields: databaseId, tableName Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, ownerTableId

encrypted-secrets-module

CRUD operations for EncryptedSecretsModule records.

Subcommand	Description
list	List all encryptedSecretsModule records
find-first	Find first matching encryptedSecretsModule record
get	Get a encryptedSecretsModule by id
create	Create a new encryptedSecretsModule
update	Update an existing encryptedSecretsModule
delete	Delete a encryptedSecretsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName

invites-module

CRUD operations for InvitesModule records.

Subcommand	Description
list	List all invitesModule records
find-first	Find first matching invitesModule record
get	Get a invitesModule by id
create	Create a new invitesModule
update	Update an existing invitesModule
delete	Delete a invitesModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
emailsTableId	UUID
usersTableId	UUID
invitesTableId	UUID
claimedInvitesTableId	UUID
invitesTableName	String
claimedInvitesTableName	String
submitInviteCodeFunction	String
prefix	String
membershipType	Int
entityTableId	UUID

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, emailsTableId, usersTableId, invitesTableId, claimedInvitesTableId, invitesTableName, claimedInvitesTableName, submitInviteCodeFunction, prefix, entityTableId

levels-module

CRUD operations for LevelsModule records.

Subcommand	Description
list	List all levelsModule records
find-first	Find first matching levelsModule record
get	Get a levelsModule by id
create	Create a new levelsModule
update	Update an existing levelsModule
delete	Delete a levelsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
stepsTableId	UUID
stepsTableName	String
achievementsTableId	UUID
achievementsTableName	String
levelsTableId	UUID
levelsTableName	String
levelRequirementsTableId	UUID
levelRequirementsTableName	String
completedStep	String
incompletedStep	String
tgAchievement	String
tgAchievementToggle	String
tgAchievementToggleBoolean	String
tgAchievementBoolean	String
upsertAchievement	String
tgUpdateAchievements	String
stepsRequired	String
levelAchieved	String
prefix	String
membershipType	Int
entityTableId	UUID
actorTableId	UUID

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, stepsTableId, stepsTableName, achievementsTableId, achievementsTableName, levelsTableId, levelsTableName, levelRequirementsTableId, levelRequirementsTableName, completedStep, incompletedStep, tgAchievement, tgAchievementToggle, tgAchievementToggleBoolean, tgAchievementBoolean, upsertAchievement, tgUpdateAchievements, stepsRequired, levelAchieved, prefix, entityTableId, actorTableId

limits-module

CRUD operations for LimitsModule records.

Subcommand	Description
list	List all limitsModule records
find-first	Find first matching limitsModule record
get	Get a limitsModule by id
create	Create a new limitsModule
update	Update an existing limitsModule
delete	Delete a limitsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
tableName	String
defaultTableId	UUID
defaultTableName	String
limitIncrementFunction	String
limitDecrementFunction	String
limitIncrementTrigger	String
limitDecrementTrigger	String
limitUpdateTrigger	String
limitCheckFunction	String
prefix	String
membershipType	Int
entityTableId	UUID
actorTableId	UUID

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, tableName, defaultTableId, defaultTableName, limitIncrementFunction, limitDecrementFunction, limitIncrementTrigger, limitDecrementTrigger, limitUpdateTrigger, limitCheckFunction, prefix, entityTableId, actorTableId

membership-types-module

CRUD operations for MembershipTypesModule records.

Subcommand	Description
list	List all membershipTypesModule records
find-first	Find first matching membershipTypesModule record
get	Get a membershipTypesModule by id
create	Create a new membershipTypesModule
update	Update an existing membershipTypesModule
delete	Delete a membershipTypesModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName

memberships-module

CRUD operations for MembershipsModule records.

Subcommand	Description
list	List all membershipsModule records
find-first	Find first matching membershipsModule record
get	Get a membershipsModule by id
create	Create a new membershipsModule
update	Update an existing membershipsModule
delete	Delete a membershipsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
membershipsTableId	UUID
membershipsTableName	String
membersTableId	UUID
membersTableName	String
membershipDefaultsTableId	UUID
membershipDefaultsTableName	String
membershipSettingsTableId	UUID
membershipSettingsTableName	String
grantsTableId	UUID
grantsTableName	String
actorTableId	UUID
limitsTableId	UUID
defaultLimitsTableId	UUID
permissionsTableId	UUID
defaultPermissionsTableId	UUID
sprtTableId	UUID
adminGrantsTableId	UUID
adminGrantsTableName	String
ownerGrantsTableId	UUID
ownerGrantsTableName	String
membershipType	Int
entityTableId	UUID
entityTableOwnerId	UUID
prefix	String
actorMaskCheck	String
actorPermCheck	String
entityIdsByMask	String
entityIdsByPerm	String
entityIdsFunction	String
memberProfilesTableId	UUID

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, membershipsTableId, membershipsTableName, membersTableId, membersTableName, membershipDefaultsTableId, membershipDefaultsTableName, membershipSettingsTableId, membershipSettingsTableName, grantsTableId, grantsTableName, actorTableId, limitsTableId, defaultLimitsTableId, permissionsTableId, defaultPermissionsTableId, sprtTableId, adminGrantsTableId, adminGrantsTableName, ownerGrantsTableId, ownerGrantsTableName, entityTableId, entityTableOwnerId, prefix, actorMaskCheck, actorPermCheck, entityIdsByMask, entityIdsByPerm, entityIdsFunction, memberProfilesTableId

permissions-module

CRUD operations for PermissionsModule records.

Subcommand	Description
list	List all permissionsModule records
find-first	Find first matching permissionsModule record
get	Get a permissionsModule by id
create	Create a new permissionsModule
update	Update an existing permissionsModule
delete	Delete a permissionsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
tableName	String
defaultTableId	UUID
defaultTableName	String
bitlen	Int
membershipType	Int
entityTableId	UUID
actorTableId	UUID
prefix	String
getPaddedMask	String
getMask	String
getByMask	String
getMaskByName	String

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, tableName, defaultTableId, defaultTableName, bitlen, entityTableId, actorTableId, prefix, getPaddedMask, getMask, getByMask, getMaskByName

phone-numbers-module

CRUD operations for PhoneNumbersModule records.

Subcommand	Description
list	List all phoneNumbersModule records
find-first	Find first matching phoneNumbersModule record
get	Get a phoneNumbersModule by id
create	Create a new phoneNumbersModule
update	Update an existing phoneNumbersModule
delete	Delete a phoneNumbersModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
ownerTableId	UUID
tableName	String

Required create fields: databaseId, tableName Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, ownerTableId

profiles-module

CRUD operations for ProfilesModule records.

Subcommand	Description
list	List all profilesModule records
find-first	Find first matching profilesModule record
get	Get a profilesModule by id
create	Create a new profilesModule
update	Update an existing profilesModule
delete	Delete a profilesModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
tableName	String
profilePermissionsTableId	UUID
profilePermissionsTableName	String
profileGrantsTableId	UUID
profileGrantsTableName	String
profileDefinitionGrantsTableId	UUID
profileDefinitionGrantsTableName	String
membershipType	Int
entityTableId	UUID
actorTableId	UUID
permissionsTableId	UUID
membershipsTableId	UUID
prefix	String

Required create fields: databaseId, membershipType Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, tableName, profilePermissionsTableId, profilePermissionsTableName, profileGrantsTableId, profileGrantsTableName, profileDefinitionGrantsTableId, profileDefinitionGrantsTableName, entityTableId, actorTableId, permissionsTableId, membershipsTableId, prefix

secrets-module

CRUD operations for SecretsModule records.

Subcommand	Description
list	List all secretsModule records
find-first	Find first matching secretsModule record
get	Get a secretsModule by id
create	Create a new secretsModule
update	Update an existing secretsModule
delete	Delete a secretsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName

sessions-module

CRUD operations for SessionsModule records.

Subcommand	Description
list	List all sessionsModule records
find-first	Find first matching sessionsModule record
get	Get a sessionsModule by id
create	Create a new sessionsModule
update	Update an existing sessionsModule
delete	Delete a sessionsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
sessionsTableId	UUID
sessionCredentialsTableId	UUID
authSettingsTableId	UUID
usersTableId	UUID
sessionsDefaultExpiration	Interval
sessionsTable	String
sessionCredentialsTable	String
authSettingsTable	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, sessionsTableId, sessionCredentialsTableId, authSettingsTableId, usersTableId, sessionsDefaultExpiration, sessionsTable, sessionCredentialsTable, authSettingsTable

user-auth-module

CRUD operations for UserAuthModule records.

Subcommand	Description
list	List all userAuthModule records
find-first	Find first matching userAuthModule record
get	Get a userAuthModule by id
create	Create a new userAuthModule
update	Update an existing userAuthModule
delete	Delete a userAuthModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
emailsTableId	UUID
usersTableId	UUID
secretsTableId	UUID
encryptedTableId	UUID
sessionsTableId	UUID
sessionCredentialsTableId	UUID
auditsTableId	UUID
auditsTableName	String
signInFunction	String
signUpFunction	String
signOutFunction	String
setPasswordFunction	String
resetPasswordFunction	String
forgotPasswordFunction	String
sendVerificationEmailFunction	String
verifyEmailFunction	String
verifyPasswordFunction	String
checkPasswordFunction	String
sendAccountDeletionEmailFunction	String
deleteAccountFunction	String
signInCrossOriginFunction	String
requestCrossOriginTokenFunction	String
extendTokenExpires	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, emailsTableId, usersTableId, secretsTableId, encryptedTableId, sessionsTableId, sessionCredentialsTableId, auditsTableId, auditsTableName, signInFunction, signUpFunction, signOutFunction, setPasswordFunction, resetPasswordFunction, forgotPasswordFunction, sendVerificationEmailFunction, verifyEmailFunction, verifyPasswordFunction, checkPasswordFunction, sendAccountDeletionEmailFunction, deleteAccountFunction, signInCrossOriginFunction, requestCrossOriginTokenFunction, extendTokenExpires

users-module

CRUD operations for UsersModule records.

Subcommand	Description
list	List all usersModule records
find-first	Find first matching usersModule record
get	Get a usersModule by id
create	Create a new usersModule
update	Update an existing usersModule
delete	Delete a usersModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
tableId	UUID
tableName	String
typeTableId	UUID
typeTableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, tableId, tableName, typeTableId, typeTableName

blueprint

CRUD operations for Blueprint records.

Subcommand	Description
list	List all blueprint records
find-first	Find first matching blueprint record
get	Get a blueprint by id
create	Create a new blueprint
update	Update an existing blueprint
delete	Delete a blueprint

Fields:

Field	Type
id	UUID
ownerId	UUID
databaseId	UUID
name	String
displayName	String
description	String
definition	JSON
templateId	UUID
definitionHash	UUID
tableHashes	JSON
createdAt	Datetime
updatedAt	Datetime

Required create fields: ownerId, databaseId, name, displayName, definition Optional create fields (backend defaults): description, templateId, definitionHash, tableHashes

blueprint-template

CRUD operations for BlueprintTemplate records.

Subcommand	Description
list	List all blueprintTemplate records
find-first	Find first matching blueprintTemplate record
get	Get a blueprintTemplate by id
create	Create a new blueprintTemplate
update	Update an existing blueprintTemplate
delete	Delete a blueprintTemplate

Fields:

Field	Type
id	UUID
name	String
version	String
displayName	String
description	String
ownerId	UUID
visibility	String
categories	String
tags	String
definition	JSON
definitionSchemaVersion	String
source	String
complexity	String
copyCount	Int
forkCount	Int
forkedFromId	UUID
definitionHash	UUID
tableHashes	JSON
createdAt	Datetime
updatedAt	Datetime

Required create fields: name, displayName, ownerId, definition Optional create fields (backend defaults): version, description, visibility, categories, tags, definitionSchemaVersion, source, complexity, copyCount, forkCount, forkedFromId, definitionHash, tableHashes

blueprint-construction

CRUD operations for BlueprintConstruction records.

Subcommand	Description
list	List all blueprintConstruction records
find-first	Find first matching blueprintConstruction record
get	Get a blueprintConstruction by id
create	Create a new blueprintConstruction
update	Update an existing blueprintConstruction
delete	Delete a blueprintConstruction

Fields:

Field	Type
id	UUID
blueprintId	UUID
databaseId	UUID
schemaId	UUID
status	String
errorDetails	String
tableMap	JSON
constructedDefinition	JSON
constructedAt	Datetime
createdAt	Datetime
updatedAt	Datetime

Required create fields: blueprintId, databaseId Optional create fields (backend defaults): schemaId, status, errorDetails, tableMap, constructedDefinition, constructedAt

storage-module

CRUD operations for StorageModule records.

Subcommand	Description
list	List all storageModule records
find-first	Find first matching storageModule record
get	Get a storageModule by id
create	Create a new storageModule
update	Update an existing storageModule
delete	Delete a storageModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
bucketsTableId	UUID
filesTableId	UUID
uploadRequestsTableId	UUID
bucketsTableName	String
filesTableName	String
uploadRequestsTableName	String
membershipType	Int
policies	JSON
entityTableId	UUID
endpoint	String
publicUrlPrefix	String
provider	String
allowedOrigins	String
uploadUrlExpirySeconds	Int
downloadUrlExpirySeconds	Int
defaultMaxFileSize	BigInt
maxFilenameLength	Int
cacheTtlSeconds	Int

Required create fields: databaseId Optional create fields (backend defaults): schemaId, privateSchemaId, bucketsTableId, filesTableId, uploadRequestsTableId, bucketsTableName, filesTableName, uploadRequestsTableName, membershipType, policies, entityTableId, endpoint, publicUrlPrefix, provider, allowedOrigins, uploadUrlExpirySeconds, downloadUrlExpirySeconds, defaultMaxFileSize, maxFilenameLength, cacheTtlSeconds

entity-type-provision

CRUD operations for EntityTypeProvision records.

Subcommand	Description
list	List all entityTypeProvision records
find-first	Find first matching entityTypeProvision record
get	Get a entityTypeProvision by id
create	Create a new entityTypeProvision
update	Update an existing entityTypeProvision
delete	Delete a entityTypeProvision

Fields:

Field	Type
id	UUID
databaseId	UUID
name	String
prefix	String
description	String
parentEntity	String
tableName	String
isVisible	Boolean
hasLimits	Boolean
hasProfiles	Boolean
hasLevels	Boolean
hasStorage	Boolean
storageConfig	JSON
skipEntityPolicies	Boolean
tableProvision	JSON
outMembershipType	Int
outEntityTableId	UUID
outEntityTableName	String
outInstalledModules	String
outStorageModuleId	UUID
outBucketsTableId	UUID
outFilesTableId	UUID

Required create fields: databaseId, name, prefix Optional create fields (backend defaults): description, parentEntity, tableName, isVisible, hasLimits, hasProfiles, hasLevels, hasStorage, storageConfig, skipEntityPolicies, tableProvision, outMembershipType, outEntityTableId, outEntityTableName, outInstalledModules, outStorageModuleId, outBucketsTableId, outFilesTableId

webauthn-credentials-module

CRUD operations for WebauthnCredentialsModule records.

Subcommand	Description
list	List all webauthnCredentialsModule records
find-first	Find first matching webauthnCredentialsModule record
get	Get a webauthnCredentialsModule by id
create	Create a new webauthnCredentialsModule
update	Update an existing webauthnCredentialsModule
delete	Delete a webauthnCredentialsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
tableId	UUID
ownerTableId	UUID
tableName	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, privateSchemaId, tableId, ownerTableId, tableName

webauthn-auth-module

CRUD operations for WebauthnAuthModule records.

Subcommand	Description
list	List all webauthnAuthModule records
find-first	Find first matching webauthnAuthModule record
get	Get a webauthnAuthModule by id
create	Create a new webauthnAuthModule
update	Update an existing webauthnAuthModule
delete	Delete a webauthnAuthModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
usersTableId	UUID
credentialsTableId	UUID
sessionsTableId	UUID
sessionCredentialsTableId	UUID
sessionSecretsTableId	UUID
authSettingsTableId	UUID
rpId	String
rpName	String
originAllowlist	String
attestationType	String
requireUserVerification	Boolean
residentKey	String
challengeExpiry	Interval

Required create fields: databaseId Optional create fields (backend defaults): schemaId, usersTableId, credentialsTableId, sessionsTableId, sessionCredentialsTableId, sessionSecretsTableId, authSettingsTableId, rpId, rpName, originAllowlist, attestationType, requireUserVerification, residentKey, challengeExpiry

notifications-module

CRUD operations for NotificationsModule records.

Subcommand	Description
list	List all notificationsModule records
find-first	Find first matching notificationsModule record
get	Get a notificationsModule by id
create	Create a new notificationsModule
update	Update an existing notificationsModule
delete	Delete a notificationsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
notificationsTableId	UUID
readStateTableId	UUID
preferencesTableId	UUID
channelsTableId	UUID
deliveryLogTableId	UUID
ownerTableId	UUID
userSettingsTableId	UUID
organizationSettingsTableId	UUID
hasChannels	Boolean
hasPreferences	Boolean
hasSettingsExtension	Boolean
hasDigestMetadata	Boolean
hasSubscriptions	Boolean

Required create fields: databaseId Optional create fields (backend defaults): schemaId, privateSchemaId, notificationsTableId, readStateTableId, preferencesTableId, channelsTableId, deliveryLogTableId, ownerTableId, userSettingsTableId, organizationSettingsTableId, hasChannels, hasPreferences, hasSettingsExtension, hasDigestMetadata, hasSubscriptions

database-provision-module

CRUD operations for DatabaseProvisionModule records.

Subcommand	Description
list	List all databaseProvisionModule records
find-first	Find first matching databaseProvisionModule record
get	Get a databaseProvisionModule by id
create	Create a new databaseProvisionModule
update	Update an existing databaseProvisionModule
delete	Delete a databaseProvisionModule

Fields:

Field	Type
id	UUID
databaseName	String
ownerId	UUID
subdomain	String
domain	String
modules	String
options	JSON
bootstrapUser	Boolean
status	String
errorMessage	String
databaseId	UUID
createdAt	Datetime
updatedAt	Datetime
completedAt	Datetime

Required create fields: databaseName, ownerId, domain Optional create fields (backend defaults): subdomain, modules, options, bootstrapUser, status, errorMessage, databaseId, completedAt

app-admin-grant

CRUD operations for AppAdminGrant records.

Subcommand	Description
list	List all appAdminGrant records
find-first	Find first matching appAdminGrant record
get	Get a appAdminGrant by id
create	Create a new appAdminGrant
update	Update an existing appAdminGrant
delete	Delete a appAdminGrant

Fields:

Field	Type
id	UUID
isGrant	Boolean
actorId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId Optional create fields (backend defaults): isGrant, grantorId

app-owner-grant

CRUD operations for AppOwnerGrant records.

Subcommand	Description
list	List all appOwnerGrant records
find-first	Find first matching appOwnerGrant record
get	Get a appOwnerGrant by id
create	Create a new appOwnerGrant
update	Update an existing appOwnerGrant
delete	Delete a appOwnerGrant

Fields:

Field	Type
id	UUID
isGrant	Boolean
actorId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId Optional create fields (backend defaults): isGrant, grantorId

app-grant

CRUD operations for AppGrant records.

Subcommand	Description
list	List all appGrant records
find-first	Find first matching appGrant record
get	Get a appGrant by id
create	Create a new appGrant
update	Update an existing appGrant
delete	Delete a appGrant

Fields:

Field	Type
id	UUID
permissions	BitString
isGrant	Boolean
actorId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId Optional create fields (backend defaults): permissions, isGrant, grantorId

org-membership

CRUD operations for OrgMembership records.

Subcommand	Description
list	List all orgMembership records
find-first	Find first matching orgMembership record
get	Get a orgMembership by id
create	Create a new orgMembership
update	Update an existing orgMembership
delete	Delete a orgMembership

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
createdBy	UUID
updatedBy	UUID
isApproved	Boolean
isBanned	Boolean
isDisabled	Boolean
isActive	Boolean
isExternal	Boolean
isOwner	Boolean
isAdmin	Boolean
permissions	BitString
granted	BitString
actorId	UUID
entityId	UUID
isReadOnly	Boolean
profileId	UUID

Required create fields: actorId, entityId Optional create fields (backend defaults): createdBy, updatedBy, isApproved, isBanned, isDisabled, isActive, isExternal, isOwner, isAdmin, permissions, granted, isReadOnly, profileId

org-member

CRUD operations for OrgMember records.

Subcommand	Description
list	List all orgMember records
find-first	Find first matching orgMember record
get	Get a orgMember by id
create	Create a new orgMember
update	Update an existing orgMember
delete	Delete a orgMember

Fields:

Field	Type
id	UUID
isAdmin	Boolean
actorId	UUID
entityId	UUID

Required create fields: actorId, entityId Optional create fields (backend defaults): isAdmin

org-admin-grant

CRUD operations for OrgAdminGrant records.

Subcommand	Description
list	List all orgAdminGrant records
find-first	Find first matching orgAdminGrant record
get	Get a orgAdminGrant by id
create	Create a new orgAdminGrant
update	Update an existing orgAdminGrant
delete	Delete a orgAdminGrant

Fields:

Field	Type
id	UUID
isGrant	Boolean
actorId	UUID
entityId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId, entityId Optional create fields (backend defaults): isGrant, grantorId

org-owner-grant

CRUD operations for OrgOwnerGrant records.

Subcommand	Description
list	List all orgOwnerGrant records
find-first	Find first matching orgOwnerGrant record
get	Get a orgOwnerGrant by id
create	Create a new orgOwnerGrant
update	Update an existing orgOwnerGrant
delete	Delete a orgOwnerGrant

Fields:

Field	Type
id	UUID
isGrant	Boolean
actorId	UUID
entityId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId, entityId Optional create fields (backend defaults): isGrant, grantorId

org-member-profile

CRUD operations for OrgMemberProfile records.

Subcommand	Description
list	List all orgMemberProfile records
find-first	Find first matching orgMemberProfile record
get	Get a orgMemberProfile by id
create	Create a new orgMemberProfile
update	Update an existing orgMemberProfile
delete	Delete a orgMemberProfile

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
membershipId	UUID
entityId	UUID
actorId	UUID
displayName	String
email	String
title	String
bio	String
profilePicture	Image

Required create fields: membershipId, entityId, actorId Optional create fields (backend defaults): displayName, email, title, bio, profilePicture

org-grant

CRUD operations for OrgGrant records.

Subcommand	Description
list	List all orgGrant records
find-first	Find first matching orgGrant record
get	Get a orgGrant by id
create	Create a new orgGrant
update	Update an existing orgGrant
delete	Delete a orgGrant

Fields:

Field	Type
id	UUID
permissions	BitString
isGrant	Boolean
actorId	UUID
entityId	UUID
grantorId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: actorId, entityId Optional create fields (backend defaults): permissions, isGrant, grantorId

org-chart-edge

CRUD operations for OrgChartEdge records.

Subcommand	Description
list	List all orgChartEdge records
find-first	Find first matching orgChartEdge record
get	Get a orgChartEdge by id
create	Create a new orgChartEdge
update	Update an existing orgChartEdge
delete	Delete a orgChartEdge

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
entityId	UUID
childId	UUID
parentId	UUID
positionTitle	String
positionLevel	Int

Required create fields: entityId, childId Optional create fields (backend defaults): parentId, positionTitle, positionLevel

org-chart-edge-grant

CRUD operations for OrgChartEdgeGrant records.

Subcommand	Description
list	List all orgChartEdgeGrant records
find-first	Find first matching orgChartEdgeGrant record
get	Get a orgChartEdgeGrant by id
create	Create a new orgChartEdgeGrant
update	Update an existing orgChartEdgeGrant
delete	Delete a orgChartEdgeGrant

Fields:

Field	Type
id	UUID
entityId	UUID
childId	UUID
parentId	UUID
grantorId	UUID
isGrant	Boolean
positionTitle	String
positionLevel	Int
createdAt	Datetime

Required create fields: entityId, childId Optional create fields (backend defaults): parentId, grantorId, isGrant, positionTitle, positionLevel

org-permission-default

CRUD operations for OrgPermissionDefault records.

Subcommand	Description
list	List all orgPermissionDefault records
find-first	Find first matching orgPermissionDefault record
get	Get a orgPermissionDefault by id
create	Create a new orgPermissionDefault
update	Update an existing orgPermissionDefault
delete	Delete a orgPermissionDefault

Fields:

Field	Type
id	UUID
permissions	BitString
entityId	UUID

Required create fields: entityId Optional create fields (backend defaults): permissions

app-limit

CRUD operations for AppLimit records.

Subcommand	Description
list	List all appLimit records
find-first	Find first matching appLimit record
get	Get a appLimit by id
create	Create a new appLimit
update	Update an existing appLimit
delete	Delete a appLimit

Fields:

Field	Type
id	UUID
name	String
actorId	UUID
num	Int
max	Int

Required create fields: actorId Optional create fields (backend defaults): name, num, max

org-limit

CRUD operations for OrgLimit records.

Subcommand	Description
list	List all orgLimit records
find-first	Find first matching orgLimit record
get	Get a orgLimit by id
create	Create a new orgLimit
update	Update an existing orgLimit
delete	Delete a orgLimit

Fields:

Field	Type
id	UUID
name	String
actorId	UUID
num	Int
max	Int
entityId	UUID

Required create fields: actorId, entityId Optional create fields (backend defaults): name, num, max

app-step

CRUD operations for AppStep records.

Subcommand	Description
list	List all appStep records
find-first	Find first matching appStep record
get	Get a appStep by id
create	Create a new appStep
update	Update an existing appStep
delete	Delete a appStep

Fields:

Field	Type
id	UUID
actorId	UUID
name	String
count	Int
createdAt	Datetime
updatedAt	Datetime

Required create fields: name Optional create fields (backend defaults): actorId, count

app-achievement

CRUD operations for AppAchievement records.

Subcommand	Description
list	List all appAchievement records
find-first	Find first matching appAchievement record
get	Get a appAchievement by id
create	Create a new appAchievement
update	Update an existing appAchievement
delete	Delete a appAchievement

Fields:

Field	Type
id	UUID
actorId	UUID
name	String
count	Int
createdAt	Datetime
updatedAt	Datetime

Required create fields: name Optional create fields (backend defaults): actorId, count

app-level

CRUD operations for AppLevel records.

Subcommand	Description
list	List all appLevel records
find-first	Find first matching appLevel record
get	Get a appLevel by id
create	Create a new appLevel
update	Update an existing appLevel
delete	Delete a appLevel

Fields:

Field	Type
id	UUID
name	String
description	String
image	Image
ownerId	UUID
createdAt	Datetime
updatedAt	Datetime

Required create fields: name Optional create fields (backend defaults): description, image, ownerId

email

CRUD operations for Email records.

Subcommand	Description
list	List all email records
find-first	Find first matching email record
get	Get a email by id
create	Create a new email
update	Update an existing email
delete	Delete a email

Fields:

Field	Type
id	UUID
ownerId	UUID
email	Email
isVerified	Boolean
isPrimary	Boolean
name	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: email Optional create fields (backend defaults): ownerId, isVerified, isPrimary, name

phone-number

CRUD operations for PhoneNumber records.

Subcommand	Description
list	List all phoneNumber records
find-first	Find first matching phoneNumber record
get	Get a phoneNumber by id
create	Create a new phoneNumber
update	Update an existing phoneNumber
delete	Delete a phoneNumber

Fields:

Field	Type
id	UUID
ownerId	UUID
cc	String
number	String
isVerified	Boolean
isPrimary	Boolean
name	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: cc, number Optional create fields (backend defaults): ownerId, isVerified, isPrimary, name

crypto-address

CRUD operations for CryptoAddress records.

Subcommand	Description
list	List all cryptoAddress records
find-first	Find first matching cryptoAddress record
get	Get a cryptoAddress by id
create	Create a new cryptoAddress
update	Update an existing cryptoAddress
delete	Delete a cryptoAddress

Fields:

Field	Type
id	UUID
ownerId	UUID
address	String
isVerified	Boolean
isPrimary	Boolean
name	String
createdAt	Datetime
updatedAt	Datetime

Required create fields: address Optional create fields (backend defaults): ownerId, isVerified, isPrimary, name

webauthn-credential

CRUD operations for WebauthnCredential records.

Subcommand	Description
list	List all webauthnCredential records
find-first	Find first matching webauthnCredential record
get	Get a webauthnCredential by id
create	Create a new webauthnCredential
update	Update an existing webauthnCredential
delete	Delete a webauthnCredential

Fields:

Field	Type
id	UUID
ownerId	UUID
credentialId	String
publicKey	Base64EncodedBinary
signCount	BigInt
webauthnUserId	String
transports	String
credentialDeviceType	String
backupEligible	Boolean
backupState	Boolean
name	String
lastUsedAt	Datetime
createdAt	Datetime
updatedAt	Datetime

Required create fields: credentialId, publicKey, webauthnUserId, credentialDeviceType Optional create fields (backend defaults): ownerId, signCount, transports, backupEligible, backupState, name, lastUsedAt

app-invite

CRUD operations for AppInvite records.

Subcommand	Description
list	List all appInvite records
find-first	Find first matching appInvite record
get	Get a appInvite by id
create	Create a new appInvite
update	Update an existing appInvite
delete	Delete a appInvite

Fields:

Field	Type
id	UUID
email	Email
senderId	UUID
inviteToken	String
inviteValid	Boolean
inviteLimit	Int
inviteCount	Int
multiple	Boolean
data	JSON
expiresAt	Datetime
createdAt	Datetime
updatedAt	Datetime

Optional create fields (backend defaults): email, senderId, inviteToken, inviteValid, inviteLimit, inviteCount, multiple, data, expiresAt

app-claimed-invite

CRUD operations for AppClaimedInvite records.

Subcommand	Description
list	List all appClaimedInvite records
find-first	Find first matching appClaimedInvite record
get	Get a appClaimedInvite by id
create	Create a new appClaimedInvite
update	Update an existing appClaimedInvite
delete	Delete a appClaimedInvite

Fields:

Field	Type
id	UUID
data	JSON
senderId	UUID
receiverId	UUID
createdAt	Datetime
updatedAt	Datetime

Optional create fields (backend defaults): data, senderId, receiverId

org-invite

CRUD operations for OrgInvite records.

Subcommand	Description
list	List all orgInvite records
find-first	Find first matching orgInvite record
get	Get a orgInvite by id
create	Create a new orgInvite
update	Update an existing orgInvite
delete	Delete a orgInvite

Fields:

Field	Type
id	UUID
email	Email
senderId	UUID
receiverId	UUID
inviteToken	String
inviteValid	Boolean
inviteLimit	Int
inviteCount	Int
multiple	Boolean
data	JSON
expiresAt	Datetime
createdAt	Datetime
updatedAt	Datetime
entityId	UUID

Required create fields: entityId Optional create fields (backend defaults): email, senderId, receiverId, inviteToken, inviteValid, inviteLimit, inviteCount, multiple, data, expiresAt

org-claimed-invite

CRUD operations for OrgClaimedInvite records.

Subcommand	Description
list	List all orgClaimedInvite records
find-first	Find first matching orgClaimedInvite record
get	Get a orgClaimedInvite by id
create	Create a new orgClaimedInvite
update	Update an existing orgClaimedInvite
delete	Delete a orgClaimedInvite

Fields:

Field	Type
id	UUID
data	JSON
senderId	UUID
receiverId	UUID
createdAt	Datetime
updatedAt	Datetime
entityId	UUID

Required create fields: entityId Optional create fields (backend defaults): data, senderId, receiverId

audit-log

CRUD operations for AuditLog records.

Subcommand	Description
list	List all auditLog records
find-first	Find first matching auditLog record
get	Get a auditLog by id
create	Create a new auditLog
update	Update an existing auditLog
delete	Delete a auditLog

Fields:

Field	Type
id	UUID
event	String
actorId	UUID
origin	Origin
userAgent	String
ipAddress	InternetAddress
success	Boolean
createdAt	Datetime

Required create fields: event, success Optional create fields (backend defaults): actorId, origin, userAgent, ipAddress

app-permission-default

CRUD operations for AppPermissionDefault records.

Subcommand	Description
list	List all appPermissionDefault records
find-first	Find first matching appPermissionDefault record
get	Get a appPermissionDefault by id
create	Create a new appPermissionDefault
update	Update an existing appPermissionDefault
delete	Delete a appPermissionDefault

Fields:

Field	Type
id	UUID
permissions	BitString

Optional create fields (backend defaults): permissions

identity-provider

CRUD operations for IdentityProvider records.

Subcommand	Description
list	List all identityProvider records
find-first	Find first matching identityProvider record
get	Get a identityProvider by id
create	Create a new identityProvider
update	Update an existing identityProvider
delete	Delete a identityProvider

Fields:

Field	Type
slug	String
kind	String
displayName	String
enabled	Boolean
isBuiltIn	Boolean

Optional create fields (backend defaults): slug, kind, displayName, enabled, isBuiltIn

ref

CRUD operations for Ref records.

Subcommand	Description
list	List all ref records
find-first	Find first matching ref record
get	Get a ref by id
create	Create a new ref
update	Update an existing ref
delete	Delete a ref

Fields:

Field	Type
id	UUID
name	String
databaseId	UUID
storeId	UUID
commitId	UUID

Required create fields: name, databaseId, storeId Optional create fields (backend defaults): commitId

store

CRUD operations for Store records.

Subcommand	Description
list	List all store records
find-first	Find first matching store record
get	Get a store by id
create	Create a new store
update	Update an existing store
delete	Delete a store

Fields:

Field	Type
id	UUID
name	String
databaseId	UUID
hash	UUID
createdAt	Datetime

Required create fields: name, databaseId Optional create fields (backend defaults): hash

role-type

CRUD operations for RoleType records.

Subcommand	Description
list	List all roleType records
find-first	Find first matching roleType record
get	Get a roleType by id
create	Create a new roleType
update	Update an existing roleType
delete	Delete a roleType

Fields:

Field	Type
id	Int
name	String

Required create fields: name

migrate-file

CRUD operations for MigrateFile records.

Subcommand	Description
list	List all migrateFile records
find-first	Find first matching migrateFile record
get	Get a migrateFile by id
create	Create a new migrateFile
update	Update an existing migrateFile
delete	Delete a migrateFile

Fields:

Field	Type
id	UUID
databaseId	UUID
upload	Upload

Optional create fields (backend defaults): databaseId, upload

app-limit-default

CRUD operations for AppLimitDefault records.

Subcommand	Description
list	List all appLimitDefault records
find-first	Find first matching appLimitDefault record
get	Get a appLimitDefault by id
create	Create a new appLimitDefault
update	Update an existing appLimitDefault
delete	Delete a appLimitDefault

Fields:

Field	Type
id	UUID
name	String
max	Int

Required create fields: name Optional create fields (backend defaults): max

org-limit-default

CRUD operations for OrgLimitDefault records.

Subcommand	Description
list	List all orgLimitDefault records
find-first	Find first matching orgLimitDefault record
get	Get a orgLimitDefault by id
create	Create a new orgLimitDefault
update	Update an existing orgLimitDefault
delete	Delete a orgLimitDefault

Fields:

Field	Type
id	UUID
name	String
max	Int

Required create fields: name Optional create fields (backend defaults): max

devices-module

CRUD operations for DevicesModule records.

Subcommand	Description
list	List all devicesModule records
find-first	Find first matching devicesModule record
get	Get a devicesModule by id
create	Create a new devicesModule
update	Update an existing devicesModule
delete	Delete a devicesModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
userDevicesTableId	UUID
deviceSettingsTableId	UUID
userDevicesTable	String
deviceSettingsTable	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, userDevicesTableId, deviceSettingsTableId, userDevicesTable, deviceSettingsTable

user-connected-account

CRUD operations for UserConnectedAccount records.

Subcommand	Description
list	List all userConnectedAccount records
find-first	Find first matching userConnectedAccount record
get	Get a userConnectedAccount by id
create	Create a new userConnectedAccount
update	Update an existing userConnectedAccount
delete	Delete a userConnectedAccount

Fields:

Field	Type
id	UUID
ownerId	UUID
service	String
identifier	String
details	JSON
isVerified	Boolean
createdAt	Datetime
updatedAt	Datetime

Optional create fields (backend defaults): ownerId, service, identifier, details, isVerified

app-membership-default

CRUD operations for AppMembershipDefault records.

Subcommand	Description
list	List all appMembershipDefault records
find-first	Find first matching appMembershipDefault record
get	Get a appMembershipDefault by id
create	Create a new appMembershipDefault
update	Update an existing appMembershipDefault
delete	Delete a appMembershipDefault

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
createdBy	UUID
updatedBy	UUID
isApproved	Boolean
isVerified	Boolean

Optional create fields (backend defaults): createdBy, updatedBy, isApproved, isVerified

org-membership-default

CRUD operations for OrgMembershipDefault records.

Subcommand	Description
list	List all orgMembershipDefault records
find-first	Find first matching orgMembershipDefault record
get	Get a orgMembershipDefault by id
create	Create a new orgMembershipDefault
update	Update an existing orgMembershipDefault
delete	Delete a orgMembershipDefault

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
createdBy	UUID
updatedBy	UUID
isApproved	Boolean
entityId	UUID

Required create fields: entityId Optional create fields (backend defaults): createdBy, updatedBy, isApproved

commit

CRUD operations for Commit records.

Subcommand	Description
list	List all commit records
find-first	Find first matching commit record
get	Get a commit by id
create	Create a new commit
update	Update an existing commit
delete	Delete a commit

Fields:

Field	Type
id	UUID
message	String
databaseId	UUID
storeId	UUID
parentIds	UUID
authorId	UUID
committerId	UUID
treeId	UUID
date	Datetime

Required create fields: databaseId, storeId Optional create fields (backend defaults): message, parentIds, authorId, committerId, treeId, date

rate-limits-module

CRUD operations for RateLimitsModule records.

Subcommand	Description
list	List all rateLimitsModule records
find-first	Find first matching rateLimitsModule record
get	Get a rateLimitsModule by id
create	Create a new rateLimitsModule
update	Update an existing rateLimitsModule
delete	Delete a rateLimitsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
rateLimitSettingsTableId	UUID
ipRateLimitsTableId	UUID
rateLimitsTableId	UUID
rateLimitSettingsTable	String
ipRateLimitsTable	String
rateLimitsTable	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, rateLimitSettingsTableId, ipRateLimitsTableId, rateLimitsTableId, rateLimitSettingsTable, ipRateLimitsTable, rateLimitsTable

membership-type

CRUD operations for MembershipType records.

Subcommand	Description
list	List all membershipType records
find-first	Find first matching membershipType record
get	Get a membershipType by id
create	Create a new membershipType
update	Update an existing membershipType
delete	Delete a membershipType

Fields:

Field	Type
id	Int
name	String
description	String
prefix	String
parentMembershipType	Int
hasUsersTableEntry	Boolean

Required create fields: name, description, prefix Optional create fields (backend defaults): parentMembershipType, hasUsersTableEntry

rls-module

CRUD operations for RlsModule records.

Subcommand	Description
list	List all rlsModule records
find-first	Find first matching rlsModule record
get	Get a rlsModule by id
create	Create a new rlsModule
update	Update an existing rlsModule
delete	Delete a rlsModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
sessionCredentialsTableId	UUID
sessionsTableId	UUID
usersTableId	UUID
authenticate	String
authenticateStrict	String
currentRole	String
currentRoleId	String

Required create fields: databaseId Optional create fields (backend defaults): schemaId, privateSchemaId, sessionCredentialsTableId, sessionsTableId, usersTableId, authenticate, authenticateStrict, currentRole, currentRoleId

sql-action

CRUD operations for SqlAction records.

Subcommand	Description
list	List all sqlAction records
find-first	Find first matching sqlAction record
get	Get a sqlAction by id
create	Create a new sqlAction
update	Update an existing sqlAction
delete	Delete a sqlAction

Fields:

Field	Type
id	Int
name	String
databaseId	UUID
deploy	String
deps	String
payload	JSON
content	String
revert	String
verify	String
createdAt	Datetime
action	String
actionId	UUID
actorId	UUID

Optional create fields (backend defaults): name, databaseId, deploy, deps, payload, content, revert, verify, action, actionId, actorId

org-membership-setting

CRUD operations for OrgMembershipSetting records.

Subcommand	Description
list	List all orgMembershipSetting records
find-first	Find first matching orgMembershipSetting record
get	Get a orgMembershipSetting by id
create	Create a new orgMembershipSetting
update	Update an existing orgMembershipSetting
delete	Delete a orgMembershipSetting

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
createdBy	UUID
updatedBy	UUID
entityId	UUID
deleteMemberCascadeChildren	Boolean
createChildCascadeOwners	Boolean
createChildCascadeAdmins	Boolean
createChildCascadeMembers	Boolean
allowExternalMembers	Boolean
populateMemberEmail	Boolean

Required create fields: entityId Optional create fields (backend defaults): createdBy, updatedBy, deleteMemberCascadeChildren, createChildCascadeOwners, createChildCascadeAdmins, createChildCascadeMembers, allowExternalMembers, populateMemberEmail

user

CRUD operations for User records.

Subcommand	Description
list	List all user records
find-first	Find first matching user record
search <query>	Search user records
get	Get a user by id
create	Create a new user
update	Update an existing user
delete	Delete a user

Fields:

Field	Type
id	UUID
username	String
displayName	String
profilePicture	Image
searchTsv	FullText
type	Int
createdAt	Datetime
updatedAt	Datetime
searchTsvRank	Float
displayNameTrgmSimilarity	Float
searchScore	Float

Optional create fields (backend defaults): username, displayName, profilePicture, type

Unified Search API fields: searchTsv, displayNameTrgmSimilarity, searchScore Fields provided by the Unified Search plugin. Includes full-text search (tsvector/BM25), trigram similarity scores, and the combined searchScore. Computed fields are read-only and cannot be set in create/update operations.

Search Examples:

Full-text search via tsvector (searchTsv):

csdk user list --where.searchTsv "search query" --select title,tsvRank

Fuzzy search via trigram similarity (trgmDisplayName):

csdk user list --where.trgmDisplayName.value "approximate query" --where.trgmDisplayName.threshold 0.3 --select title,displayNameTrgmSimilarity

Composite search (unifiedSearch dispatches to all text adapters):

csdk user list --where.unifiedSearch "search query" --select title,tsvRank,displayNameTrgmSimilarity,searchScore

Search with pagination and field projection:

csdk user list --where.unifiedSearch "query" --limit 10 --select id,title,searchScore
csdk user search "query" --limit 10 --select id,title,searchScore

ast-migration

CRUD operations for AstMigration records.

Subcommand	Description
list	List all astMigration records
find-first	Find first matching astMigration record
get	Get a astMigration by id
create	Create a new astMigration
update	Update an existing astMigration
delete	Delete a astMigration

Fields:

Field	Type
id	Int
databaseId	UUID
name	String
requires	String
payload	JSON
deploys	String
deploy	JSON
revert	JSON
verify	JSON
createdAt	Datetime
action	String
actionId	UUID
actorId	UUID

Optional create fields (backend defaults): databaseId, name, requires, payload, deploys, deploy, revert, verify, action, actionId, actorId

app-membership

CRUD operations for AppMembership records.

Subcommand	Description
list	List all appMembership records
find-first	Find first matching appMembership record
get	Get a appMembership by id
create	Create a new appMembership
update	Update an existing appMembership
delete	Delete a appMembership

Fields:

Field	Type
id	UUID
createdAt	Datetime
updatedAt	Datetime
createdBy	UUID
updatedBy	UUID
isApproved	Boolean
isBanned	Boolean
isDisabled	Boolean
isVerified	Boolean
isActive	Boolean
isExternal	Boolean
isOwner	Boolean
isAdmin	Boolean
permissions	BitString
granted	BitString
actorId	UUID
profileId	UUID

Required create fields: actorId Optional create fields (backend defaults): createdBy, updatedBy, isApproved, isBanned, isDisabled, isVerified, isActive, isExternal, isOwner, isAdmin, permissions, granted, profileId

hierarchy-module

CRUD operations for HierarchyModule records.

Subcommand	Description
list	List all hierarchyModule records
find-first	Find first matching hierarchyModule record
get	Get a hierarchyModule by id
create	Create a new hierarchyModule
update	Update an existing hierarchyModule
delete	Delete a hierarchyModule

Fields:

Field	Type
id	UUID
databaseId	UUID
schemaId	UUID
privateSchemaId	UUID
chartEdgesTableId	UUID
chartEdgesTableName	String
hierarchySprtTableId	UUID
hierarchySprtTableName	String
chartEdgeGrantsTableId	UUID
chartEdgeGrantsTableName	String
entityTableId	UUID
usersTableId	UUID
prefix	String
privateSchemaName	String
sprtTableName	String
rebuildHierarchyFunction	String
getSubordinatesFunction	String
getManagersFunction	String
isManagerOfFunction	String
createdAt	Datetime

Required create fields: databaseId, entityTableId, usersTableId Optional create fields (backend defaults): schemaId, privateSchemaId, chartEdgesTableId, chartEdgesTableName, hierarchySprtTableId, hierarchySprtTableName, chartEdgeGrantsTableId, chartEdgeGrantsTableName, prefix, privateSchemaName, sprtTableName, rebuildHierarchyFunction, getSubordinatesFunction, getManagersFunction, isManagerOfFunction

Custom Operations

current-user-id

currentUserId

• Type: query
• Arguments: none

current-user-agent

currentUserAgent

• Type: query
• Arguments: none

current-ip-address

currentIpAddress

• Type: query
• Arguments: none

require-step-up

requireStepUp

• Type: query

• Arguments:

  Argument	Type
  --stepUpType	String

app-permissions-get-padded-mask

appPermissionsGetPaddedMask

• Type: query

• Arguments:

  Argument	Type
  --mask	BitString

org-permissions-get-padded-mask

orgPermissionsGetPaddedMask

• Type: query

• Arguments:

  Argument	Type
  --mask	BitString

steps-achieved

stepsAchieved

• Type: query

• Arguments:

  Argument	Type
  --level	String
  --roleId	UUID

rev-parse

revParse

• Type: query

• Arguments:

  Argument	Type
  --dbId	UUID
  --storeId	UUID
  --refname	String

resolve-blueprint-field

Resolves a field_name within a given table_id to a field_id. Throws if no match is found. Used by construct_blueprint to translate user-authored field names (e.g. "location") into field UUIDs for downstream provisioning procedures. table_id must already be resolved (via resolve_blueprint_table) before calling this.

• Type: query

• Arguments:

  Argument	Type
  --databaseId	UUID
  --tableId	UUID
  --fieldName	String

org-is-manager-of

orgIsManagerOf

• Type: query

• Arguments:

  Argument	Type
  --pEntityId	UUID
  --pManagerId	UUID
  --pUserId	UUID
  --pMaxDepth	Int

app-permissions-get-mask

appPermissionsGetMask

• Type: query

• Arguments:

  Argument	Type
  --ids	UUID

org-permissions-get-mask

orgPermissionsGetMask

• Type: query

• Arguments:

  Argument	Type
  --ids	UUID

resolve-blueprint-table

Resolves a table_name (with optional schema_name) to a table_id. Resolution order: (1) if schema_name provided, exact lookup via metaschema_public.schema.name + metaschema_public.table; (2) check local table_map (tables created in current blueprint); (3) search metaschema_public.table by name across all schemas; (4) if multiple matches, throw ambiguous error asking for schema_name; (5) if no match, throw not-found error.

• Type: query

• Arguments:

  Argument	Type
  --databaseId	UUID
  --tableName	String
  --schemaName	String
  --tableMap	JSON
  --defaultSchemaId	UUID

app-permissions-get-mask-by-names

appPermissionsGetMaskByNames

• Type: query

• Arguments:

  Argument	Type
  --names	String

org-permissions-get-mask-by-names

orgPermissionsGetMaskByNames

• Type: query

• Arguments:

  Argument	Type
  --names	String

get-all-objects-from-root

Reads and enables pagination through a set of Object.

• Type: query

• Arguments:

  Argument	Type
  --databaseId	UUID
  --id	UUID
  --first	Int
  --offset	Int
  --after	Cursor

get-path-objects-from-root

Reads and enables pagination through a set of Object.

• Type: query

• Arguments:

  Argument	Type
  --databaseId	UUID
  --id	UUID
  --path	String
  --first	Int
  --offset	Int
  --after	Cursor

get-object-at-path

getObjectAtPath

• Type: query

• Arguments:

  Argument	Type
  --dbId	UUID
  --storeId	UUID
  --path	String
  --refname	String

app-permissions-get-by-mask

Reads and enables pagination through a set of AppPermission.

• Type: query

• Arguments:

  Argument	Type
  --mask	BitString
  --first	Int
  --offset	Int
  --after	Cursor

org-permissions-get-by-mask

Reads and enables pagination through a set of OrgPermission.

• Type: query

• Arguments:

  Argument	Type
  --mask	BitString
  --first	Int
  --offset	Int
  --after	Cursor

steps-required

Reads and enables pagination through a set of AppLevelRequirement.

• Type: query

• Arguments:

  Argument	Type
  --level	String
  --roleId	UUID
  --first	Int
  --offset	Int
  --after	Cursor

current-user

currentUser

• Type: query
• Arguments: none

send-account-deletion-email

sendAccountDeletionEmail

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String

sign-out

signOut

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String

accept-database-transfer

acceptDatabaseTransfer

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.transferId	UUID

cancel-database-transfer

cancelDatabaseTransfer

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.transferId	UUID

reject-database-transfer

rejectDatabaseTransfer

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.transferId	UUID

disconnect-account

disconnectAccount

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.accountId	UUID (required)

revoke-api-key

revokeApiKey

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.keyId	UUID (required)

revoke-session

revokeSession

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.sessionId	UUID (required)

verify-password

verifyPassword

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.password	String (required)

verify-totp

verifyTotp

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.totpValue	String (required)

submit-app-invite-code

submitAppInviteCode

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.token	String

submit-org-invite-code

submitOrgInviteCode

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.token	String

check-password

checkPassword

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.password	String

confirm-delete-account

confirmDeleteAccount

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.userId	UUID
  --input.token	String

set-password

setPassword

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.currentPassword	String
  --input.newPassword	String

verify-email

verifyEmail

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.emailId	UUID
  --input.token	String

freeze-objects

freezeObjects

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.id	UUID

init-empty-repo

initEmptyRepo

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.storeId	UUID

construct-blueprint

Executes a blueprint definition by delegating to provision_* procedures. Creates a blueprint_construction record to track the attempt. Six phases: (0) entity_type_provision for each membership_type entry — provisions entity tables, membership modules, and security, (1) provision_table() for each table with nodes[], fields[], policies[], and grants (table-level indexes/fts/unique_constraints are deferred), (2) provision_relation() for each relation, (3) provision_index() for top-level + deferred indexes, (4) provision_full_text_search() for top-level + deferred FTS, (5) provision_unique_constraint() for top-level + deferred unique constraints. Phase 0 entity tables are added to the table_map so subsequent phases can reference them by name. Table-level indexes/fts/unique_constraints are deferred to phases 3-5 so they can reference columns created by relations in phase 2. Returns the construction record ID on success, NULL on failure.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.blueprintId	UUID
  --input.schemaId	UUID

provision-new-user

provisionNewUser

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	String
  --input.password	String

reset-password

resetPassword

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.roleId	UUID
  --input.resetToken	String
  --input.newPassword	String

remove-node-at-path

removeNodeAtPath

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.root	UUID
  --input.path	String

copy-template-to-blueprint

Creates a new blueprint by copying a template definition. Checks visibility: owners can always copy their own templates, others require public visibility. Increments the template copy_count. Returns the new blueprint ID.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.templateId	UUID
  --input.databaseId	UUID
  --input.ownerId	UUID
  --input.nameOverride	String
  --input.displayNameOverride	String

provision-spatial-relation

Idempotent provisioner for metaschema_public.spatial_relation. Inserts a row declaring a spatial predicate between two geometry/geography columns (owner and target). Called from construct_blueprint when a relation entry has $type=RelationSpatial. Graceful: re-running with the same (source_table_id, name) returns the existing id without modifying the row. Operator whitelist and st_dwithin ↔ param_name pairing are enforced by the spatial_relation table CHECKs. Both fields must already exist — this is a metadata-only insert.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.pDatabaseId	UUID
  --input.pSourceTableId	UUID
  --input.pSourceFieldId	UUID
  --input.pTargetTableId	UUID
  --input.pTargetFieldId	UUID
  --input.pName	String
  --input.pOperator	String
  --input.pParamName	String

bootstrap-user

bootstrapUser

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.targetDatabaseId	UUID
  --input.password	String
  --input.isAdmin	Boolean
  --input.isOwner	Boolean
  --input.username	String
  --input.displayName	String
  --input.returnApiKey	Boolean

set-field-order

setFieldOrder

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.fieldIds	UUID

provision-unique-constraint

Creates a unique constraint on a table. Accepts a jsonb definition with columns (array of field names). Graceful: skips if the exact same unique constraint already exists.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.tableId	UUID
  --input.definition	JSON

provision-full-text-search

Creates a full-text search configuration on a table. Accepts a jsonb definition with field (tsvector column name) and sources (array of {field, weight, lang}). Graceful: skips if FTS config already exists for the same (table_id, field_id). Returns the fts_id.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.tableId	UUID
  --input.definition	JSON

provision-index

Creates an index on a table. Accepts a jsonb definition with columns (array of names or single column string), access_method (default BTREE), is_unique, op_classes, options, and name (auto-generated if omitted). Graceful: skips if an index with the same (table_id, field_ids, access_method) already exists. Returns the index_id.

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.tableId	UUID
  --input.definition	JSON

set-data-at-path

setDataAtPath

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.root	UUID
  --input.path	String
  --input.data	JSON

set-props-and-commit

setPropsAndCommit

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.storeId	UUID
  --input.refname	String
  --input.path	String
  --input.data	JSON

provision-database-with-user

provisionDatabaseWithUser

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.pDatabaseName	String
  --input.pDomain	String
  --input.pSubdomain	String
  --input.pModules	String
  --input.pOptions	JSON

insert-node-at-path

insertNodeAtPath

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.root	UUID
  --input.path	String
  --input.data	JSON
  --input.kids	UUID
  --input.ktree	String

update-node-at-path

updateNodeAtPath

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.root	UUID
  --input.path	String
  --input.data	JSON
  --input.kids	UUID
  --input.ktree	String

set-and-commit

setAndCommit

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.dbId	UUID
  --input.storeId	UUID
  --input.refname	String
  --input.path	String
  --input.data	JSON
  --input.kids	UUID
  --input.ktree	String

provision-relation

Composable relation provisioning: creates FK fields, indexes, unique constraints, and junction tables depending on the relation_type. Supports RelationBelongsTo, RelationHasOne, RelationHasMany, and RelationManyToMany. ManyToMany uses provision_table() internally for junction table creation with full node/grant/policy support. All operations are graceful (skip existing). Returns (out_field_id, out_junction_table_id, out_source_field_id, out_target_field_id).

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.relationType	String
  --input.sourceTableId	UUID
  --input.targetTableId	UUID
  --input.fieldName	String
  --input.deleteAction	String
  --input.isRequired	Boolean
  --input.apiRequired	Boolean
  --input.createIndex	Boolean
  --input.junctionTableId	UUID
  --input.junctionTableName	String
  --input.junctionSchemaId	UUID
  --input.sourceFieldName	String
  --input.targetFieldName	String
  --input.useCompositeKey	Boolean
  --input.exposeInApi	Boolean
  --input.nodes	JSON
  --input.grants	JSON
  --input.policies	JSON

apply-rls

applyRls

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.tableId	UUID
  --input.grants	JSON
  --input.policyType	String
  --input.vars	JSON
  --input.fieldIds	UUID
  --input.permissive	Boolean
  --input.name	String

sign-in-cross-origin

signInCrossOrigin

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.token	String
  --input.credentialKind	String

create-user-database

Creates a new user database with all required modules, permissions, and RLS policies.

Parameters:

• database_name: Name for the new database (required)
• owner_id: UUID of the owner user (required)
• include_invites: Include invite system (default: true)
• include_groups: Include group-level memberships (default: false)
• include_levels: Include levels/achievements (default: false)
• bitlen: Bit length for permission masks (default: 64)
• tokens_expiration: Token expiration interval (default: 30 days)

Returns the database_id UUID of the newly created database.

Example usage: SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid); SELECT metaschema_public.create_user_database('my_app', 'a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11'::uuid, true, true); -- with invites and groups

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseName	String
  --input.ownerId	UUID
  --input.includeInvites	Boolean
  --input.includeGroups	Boolean
  --input.includeLevels	Boolean
  --input.bitlen	Int
  --input.tokensExpiration	IntervalInput

extend-token-expires

extendTokenExpires

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.amount	IntervalInput

create-api-key

createApiKey

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.keyName	String
  --input.accessLevel	String
  --input.mfaLevel	String
  --input.expiresIn	IntervalInput

sign-up

signUp

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	String
  --input.password	String
  --input.rememberMe	Boolean
  --input.credentialKind	String
  --input.csrfToken	String

request-cross-origin-token

requestCrossOriginToken

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	String
  --input.password	String
  --input.origin	Origin
  --input.rememberMe	Boolean

sign-in

signIn

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	String
  --input.password	String
  --input.rememberMe	Boolean
  --input.credentialKind	String
  --input.csrfToken	String
  --input.deviceToken	String

provision-table

Composable table provisioning: creates or finds a table, then creates fields (so Data* modules can reference them), applies N nodes (Data* modules), enables RLS, creates grants, creates N policies, and optionally creates table-level indexes/full_text_searches/unique_constraints. All operations are graceful (skip existing). Accepts multiple nodes and multiple policies per call, unlike secure_table_provision which is limited to one of each. Returns (out_table_id, out_fields).

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.databaseId	UUID
  --input.schemaId	UUID
  --input.tableName	String
  --input.tableId	UUID
  --input.nodes	JSON
  --input.fields	JSON
  --input.policies	JSON
  --input.grants	JSON
  --input.useRls	Boolean
  --input.indexes	JSON
  --input.fullTextSearches	JSON
  --input.uniqueConstraints	JSON
  --input.description	String

send-verification-email

sendVerificationEmail

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	Email

forgot-password

forgotPassword

• Type: mutation

• Arguments:

  Argument	Type
  --input.clientMutationId	String
  --input.email	Email

request-upload-url

Request a presigned URL for uploading a file directly to S3. Client computes SHA-256 of the file content and provides it here. If a file with the same hash already exists (dedup), returns the existing file ID and deduplicated=true with no uploadUrl.

• Type: mutation

• Arguments:

  Argument	Type
  --input.bucketKey	String (required)
  --input.ownerId	UUID
  --input.contentHash	String (required)
  --input.contentType	String (required)
  --input.size	Int (required)
  --input.filename	String

confirm-upload

Confirm that a file has been uploaded to S3. Verifies the object exists in S3, checks content-type, and transitions the file status from 'pending' to 'ready'.

• Type: mutation

• Arguments:

  Argument	Type
  --input.fileId	UUID (required)

provision-bucket

Provision an S3 bucket for a logical bucket in the database. Reads the bucket config via RLS, then creates and configures the S3 bucket with the appropriate privacy policies, CORS rules, and lifecycle settings.

• Type: mutation

• Arguments:

  Argument	Type
  --input.bucketKey	String (required)
  --input.ownerId	UUID

Output

All commands output JSON to stdout. Pipe to jq for formatting:

csdk car list | jq '.[]'
csdk car get --id <uuid> | jq '.'

Non-Interactive Mode

Use --no-tty to skip all interactive prompts (useful for scripts and CI):

csdk --no-tty car create --name "Sedan" --year 2024

---

Built by the Constructive team.

Disclaimer

AS DESCRIBED IN THE LICENSES, THE SOFTWARE IS PROVIDED "AS IS", AT YOUR OWN RISK, AND WITHOUT WARRANTIES OF ANY KIND.

No developer or entity involved in creating this software will be liable for any claims or damages whatsoever associated with your use, inability to use, or your interaction with other users of the code, including any direct, indirect, incidental, special, exemplary, punitive or consequential damages, or loss of profits, cryptocurrencies, tokens, or anything else of value.