chore: update schemas from constructive-db

.agents/skills/cli-admin/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: cli-admin
-description: CLI tool (csdk) for the admin API — provides CRUD commands for 32 tables and 13 custom operations
+description: CLI tool (csdk) for the admin API — provides CRUD commands for 32 tables and 16 custom operations
 ---
 
 # cli-admin
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the admin API — provides CRUD commands for 32 tables and 13 custom operations
+CLI tool (csdk) for the admin API — provides CRUD commands for 32 tables and 16 custom operations
 
 ## Usage
 
@@ -101,3 +101,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [steps-required](references/steps-required.md)
 - [submit-invite-code](references/submit-invite-code.md)
 - [submit-org-invite-code](references/submit-org-invite-code.md)
+- [request-upload-url](references/request-upload-url.md)
+- [confirm-upload](references/confirm-upload.md)
+- [provision-bucket](references/provision-bucket.md)

.agents/skills/cli-admin/references/confirm-upload.md

@@ -0,0 +1,21 @@
+# confirmUpload
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+
+## Usage
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```
+
+## Examples
+
+### Run confirmUpload
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```

.agents/skills/cli-admin/references/provision-bucket.md

@@ -0,0 +1,22 @@
+# provisionBucket
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+
+## Usage
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```
+
+## Examples
+
+### Run provisionBucket
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```

.agents/skills/cli-admin/references/request-upload-url.md

@@ -0,0 +1,22 @@
+# requestUploadUrl
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+
+## Usage
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```
+
+## Examples
+
+### Run requestUploadUrl
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```

.agents/skills/cli-auth/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: cli-auth
-description: CLI tool (csdk) for the auth API — provides CRUD commands for 7 tables and 20 custom operations
+description: CLI tool (csdk) for the auth API — provides CRUD commands for 7 tables and 23 custom operations
 ---
 
 # cli-auth
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the auth API — provides CRUD commands for 7 tables and 20 custom operations
+CLI tool (csdk) for the auth API — provides CRUD commands for 7 tables and 23 custom operations
 
 ## Usage
 
@@ -83,3 +83,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [send-verification-email](references/send-verification-email.md)
 - [verify-password](references/verify-password.md)
 - [verify-totp](references/verify-totp.md)
+- [request-upload-url](references/request-upload-url.md)
+- [confirm-upload](references/confirm-upload.md)
+- [provision-bucket](references/provision-bucket.md)

.agents/skills/cli-auth/references/confirm-upload.md

@@ -0,0 +1,21 @@
+# confirmUpload
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+
+## Usage
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```
+
+## Examples
+
+### Run confirmUpload
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```

.agents/skills/cli-auth/references/provision-bucket.md

@@ -0,0 +1,22 @@
+# provisionBucket
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+
+## Usage
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```
+
+## Examples
+
+### Run provisionBucket
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```

.agents/skills/cli-auth/references/request-upload-url.md

@@ -0,0 +1,22 @@
+# requestUploadUrl
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+
+## Usage
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```
+
+## Examples
+
+### Run requestUploadUrl
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```

.agents/skills/cli-objects/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: cli-objects
-description: CLI tool (csdk) for the objects API — provides CRUD commands for 5 tables and 12 custom operations
+description: CLI tool (csdk) for the objects API — provides CRUD commands for 5 tables and 15 custom operations
 ---
 
 # cli-objects
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the objects API — provides CRUD commands for 5 tables and 12 custom operations
+CLI tool (csdk) for the objects API — provides CRUD commands for 5 tables and 15 custom operations
 
 ## Usage
 
@@ -73,3 +73,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [insert-node-at-path](references/insert-node-at-path.md)
 - [update-node-at-path](references/update-node-at-path.md)
 - [set-and-commit](references/set-and-commit.md)
+- [request-upload-url](references/request-upload-url.md)
+- [confirm-upload](references/confirm-upload.md)
+- [provision-bucket](references/provision-bucket.md)

.agents/skills/cli-objects/references/confirm-upload.md

@@ -0,0 +1,21 @@
+# confirmUpload
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+
+## Usage
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```
+
+## Examples
+
+### Run confirmUpload
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```

.agents/skills/cli-objects/references/provision-bucket.md

@@ -0,0 +1,22 @@
+# provisionBucket
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+
+## Usage
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```
+
+## Examples
+
+### Run provisionBucket
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```

.agents/skills/cli-objects/references/request-upload-url.md

@@ -0,0 +1,22 @@
+# requestUploadUrl
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+
+## Usage
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```
+
+## Examples
+
+### Run requestUploadUrl
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```

.agents/skills/cli-public/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: cli-public
-description: CLI tool (csdk) for the public API — provides CRUD commands for 108 tables and 61 custom operations
+description: CLI tool (csdk) for the public API — provides CRUD commands for 108 tables and 64 custom operations
 ---
 
 # cli-public
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the public API — provides CRUD commands for 108 tables and 61 custom operations
+CLI tool (csdk) for the public API — provides CRUD commands for 108 tables and 64 custom operations
 
 ## Usage
 
@@ -225,3 +225,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [forgot-password](references/forgot-password.md)
 - [verify-password](references/verify-password.md)
 - [verify-totp](references/verify-totp.md)
+- [request-upload-url](references/request-upload-url.md)
+- [confirm-upload](references/confirm-upload.md)
+- [provision-bucket](references/provision-bucket.md)

.agents/skills/cli-public/references/confirm-upload.md

@@ -0,0 +1,21 @@
+# confirmUpload
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Confirm that a file has been uploaded to S3.
+Verifies the object exists in S3, checks content-type,
+and transitions the file status from 'pending' to 'ready'.
+
+## Usage
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```
+
+## Examples
+
+### Run confirmUpload
+
+```bash
+csdk confirm-upload --input.fileId <UUID>
+```

.agents/skills/cli-public/references/provision-bucket.md

@@ -0,0 +1,22 @@
+# provisionBucket
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Provision an S3 bucket for a logical bucket in the database.
+Reads the bucket config via RLS, then creates and configures
+the S3 bucket with the appropriate privacy policies, CORS rules,
+and lifecycle settings.
+
+## Usage
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```
+
+## Examples
+
+### Run provisionBucket
+
+```bash
+csdk provision-bucket --input.bucketKey <String>
+```

.agents/skills/cli-public/references/request-upload-url.md

@@ -0,0 +1,22 @@
+# requestUploadUrl
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Request a presigned URL for uploading a file directly to S3.
+Client computes SHA-256 of the file content and provides it here.
+If a file with the same hash already exists (dedup), returns the
+existing file ID and deduplicated=true with no uploadUrl.
+
+## Usage
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```
+
+## Examples
+
+### Run requestUploadUrl
+
+```bash
+csdk request-upload-url --input.bucketKey <String> --input.contentHash <String> --input.contentType <String> --input.size <Int> --input.filename <String>
+```

.agents/skills/cli-public/references/storage-module.md

@@ -12,8 +12,8 @@ csdk storage-module list --where.<field>.<op> <value> --orderBy <values>
 csdk storage-module list --limit 10 --after <cursor>
 csdk storage-module find-first --where.<field>.<op> <value>
 csdk storage-module get --id <UUID>
-csdk storage-module create --databaseId <UUID> [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
-csdk storage-module update --id <UUID> [--databaseId <UUID>] [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
+csdk storage-module create --databaseId <UUID> [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--endpoint <String>] [--publicUrlPrefix <String>] [--provider <String>] [--allowedOrigins <String>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
+csdk storage-module update --id <UUID> [--databaseId <UUID>] [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--endpoint <String>] [--publicUrlPrefix <String>] [--provider <String>] [--allowedOrigins <String>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
 csdk storage-module delete --id <UUID>
 ```
 
@@ -58,7 +58,7 @@ csdk storage-module list --where.id.equalTo <value> --orderBy ID_ASC
 ### Create a storageModule
 
 ```bash
-csdk storage-module create --databaseId <UUID> [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
+csdk storage-module create --databaseId <UUID> [--schemaId <UUID>] [--privateSchemaId <UUID>] [--bucketsTableId <UUID>] [--filesTableId <UUID>] [--uploadRequestsTableId <UUID>] [--bucketsTableName <String>] [--filesTableName <String>] [--uploadRequestsTableName <String>] [--entityTableId <UUID>] [--endpoint <String>] [--publicUrlPrefix <String>] [--provider <String>] [--allowedOrigins <String>] [--uploadUrlExpirySeconds <Int>] [--downloadUrlExpirySeconds <Int>] [--defaultMaxFileSize <BigInt>] [--maxFilenameLength <Int>] [--cacheTtlSeconds <Int>]
 ```
 
 ### Get a storageModule by id