Anmol1696 · Oct 20, 2026 · Oct 20, 2026
diff --git a/.agents/skills/cli-admin/references/provision-bucket.md b/.agents/skills/cli-admin/references/provision-bucket.md
@@ -3,10 +3,11 @@
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
 Reconcile an S3 bucket for a logical bucket in the database.
-Reads the bucket config via RLS, then enqueues the same
-storage:provision_bucket job used by the INSERT trigger. This is
-idempotent for an already-reconciled bucket; enqueue failures become
-GraphQL errors.
+Records the request on the bucket row via RLS; the bucket's job
+trigger then enqueues the same storage:provision_bucket job used on
+INSERT, and repeated requests collapse into one pending job. This is
+idempotent for an already-reconciled bucket; failures become GraphQL
+errors.
 
 ## Usage
 

diff --git a/.agents/skills/cli-agent/references/provision-bucket.md b/.agents/skills/cli-agent/references/provision-bucket.md
@@ -3,10 +3,11 @@
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
 Reconcile an S3 bucket for a logical bucket in the database.
-Reads the bucket config via RLS, then enqueues the same
-storage:provision_bucket job used by the INSERT trigger. This is
-idempotent for an already-reconciled bucket; enqueue failures become
-GraphQL errors.
+Records the request on the bucket row via RLS; the bucket's job
+trigger then enqueues the same storage:provision_bucket job used on
+INSERT, and repeated requests collapse into one pending job. This is
+idempotent for an already-reconciled bucket; failures become GraphQL
+errors.
 
 ## Usage
 

diff --git a/.agents/skills/cli-api/SKILL.md b/.agents/skills/cli-api/SKILL.md
@@ -1,13 +1,13 @@
 ---
 name: cli-api
-description: CLI tool (csdk) for the api API — provides CRUD commands for 92 tables and 46 custom operations
+description: CLI tool (csdk) for the api API — provides CRUD commands for 90 tables and 49 custom operations
 ---
 
 # cli-api
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the api API — provides CRUD commands for 92 tables and 46 custom operations
+CLI tool (csdk) for the api API — provides CRUD commands for 90 tables and 49 custom operations
 
 ## Usage
 
@@ -85,7 +85,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [full-text-search](references/full-text-search.md)
 - [function](references/function.md)
 - [get-site-previews-record](references/get-site-previews-record.md)
-- [hostname-binding](references/hostname-binding.md)
 - [identity-provider-registry](references/identity-provider-registry.md)
 - [index](references/index.md)
 - [list-suspended-databases-record](references/list-suspended-databases-record.md)
@@ -120,7 +119,6 @@ See the `references/` directory for detailed per-entity API documentation:
 - [pubkey-setting](references/pubkey-setting.md)
 - [redirect](references/redirect.md)
 - [rls-setting](references/rls-setting.md)
-- [route-binding](references/route-binding.md)
 - [route](references/route.md)
 - [schema](references/schema.md)
 - [schema-grant](references/schema-grant.md)
@@ -150,6 +148,7 @@ See the `references/` directory for detailed per-entity API documentation:
 - [webauthn-setting](references/webauthn-setting.md)
 - [api-schema-names](references/api-schema-names.md)
 - [apply-registry-defaults](references/apply-registry-defaults.md)
+- [email-shared-account](references/email-shared-account.md)
 - [get-site-preview-commit](references/get-site-preview-commit.md)
 - [get-site-release-manifest](references/get-site-release-manifest.md)
 - [page-published](references/page-published.md)
@@ -168,6 +167,7 @@ See the `references/` directory for detailed per-entity API documentation:
 - [accept-database-transfer](references/accept-database-transfer.md)
 - [apply-rls](references/apply-rls.md)
 - [cancel-database-transfer](references/cancel-database-transfer.md)
+- [create-function-from-source](references/create-function-from-source.md)
 - [delete-site-preview](references/delete-site-preview.md)
 - [domains-assign-subdomain](references/domains-assign-subdomain.md)
 - [mint-site-preview-token](references/mint-site-preview-token.md)
@@ -194,3 +194,4 @@ See the `references/` directory for detailed per-entity API documentation:
 - [sites-provision-static-site](references/sites-provision-static-site.md)
 - [suspend-database](references/suspend-database.md)
 - [unsuspend-database](references/unsuspend-database.md)
+- [update-function-from-source](references/update-function-from-source.md)
diff --git a/.agents/skills/cli-api/references/create-function-from-source.md b/.agents/skills/cli-api/references/create-function-from-source.md
@@ -0,0 +1,19 @@
+# createFunctionFromSource
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Creates a `Function` from its `CREATE FUNCTION` source text.
+
+## Usage
+
+```bash
+csdk create-function-from-source --input.apiExposed <Boolean> --input.clientMutationId <String> --input.databaseId <UUID> --input.schemaId <UUID> --input.source <String>
+```
+
+## Examples
+
+### Run createFunctionFromSource
+
+```bash
+csdk create-function-from-source --input.apiExposed <Boolean> --input.clientMutationId <String> --input.databaseId <UUID> --input.schemaId <UUID> --input.source <String>
+```
diff --git a/.agents/skills/cli-api/references/email-shared-account.md b/.agents/skills/cli-api/references/email-shared-account.md
@@ -0,0 +1,19 @@
+# emailSharedAccount
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Execute the emailSharedAccount query
+
+## Usage
+
+```bash
+csdk email-shared-account
+```
+
+## Examples
+
+### Run emailSharedAccount
+
+```bash
+csdk email-shared-account
+```
diff --git a/.agents/skills/cli-api/references/managed-domain.md b/.agents/skills/cli-api/references/managed-domain.md
@@ -12,8 +12,8 @@ csdk managed-domain list --where.<field>.<op> <value> --orderBy <values>
 csdk managed-domain list --limit 10 --after <cursor>
 csdk managed-domain find-first --where.<field>.<op> <value>
 csdk managed-domain get --id <UUID>
-csdk managed-domain create --databaseId <UUID> --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
-csdk managed-domain update --id <UUID> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--databaseId <UUID>] [--domain <String>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk managed-domain create --databaseId <UUID> --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk managed-domain update --id <UUID> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--databaseId <UUID>] [--domain <String>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
 csdk managed-domain delete --id <UUID>
 ```
 
@@ -58,7 +58,7 @@ csdk managed-domain list --where.id.equalTo <value> --orderBy ID_ASC
 ### Create a managedDomain
 
 ```bash
-csdk managed-domain create --databaseId <UUID> --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk managed-domain create --databaseId <UUID> --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
 ```
 
 ### Get a managedDomain by id

diff --git a/.agents/skills/cli-api/references/platform-managed-domain.md b/.agents/skills/cli-api/references/platform-managed-domain.md
@@ -12,8 +12,8 @@ csdk platform-managed-domain list --where.<field>.<op> <value> --orderBy <values
 csdk platform-managed-domain list --limit 10 --after <cursor>
 csdk platform-managed-domain find-first --where.<field>.<op> <value>
 csdk platform-managed-domain get --id <UUID>
-csdk platform-managed-domain create --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
-csdk platform-managed-domain update --id <UUID> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--domain <String>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk platform-managed-domain create --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk platform-managed-domain update --id <UUID> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--domain <String>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
 csdk platform-managed-domain delete --id <UUID>
 ```
 
@@ -58,7 +58,7 @@ csdk platform-managed-domain list --where.id.equalTo <value> --orderBy ID_ASC
 ### Create a platformManagedDomain
 
 ```bash
-csdk platform-managed-domain create --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
+csdk platform-managed-domain create --domain <String> [--allowPublicUsage <Boolean>] [--annotations <JSON>] [--certStatus <String>] [--createdByPrincipal <UUID>] [--isWildcard <Boolean>] [--publicPort <Int>] [--tlsReadyAt <Datetime>] [--tlsStatus <String>] [--updatedByPrincipal <UUID>] [--verificationStatus <String>] [--verifiedAt <Datetime>]
 ```
 
 ### Get a platformManagedDomain by id

diff --git a/.agents/skills/cli-api/references/provision-bucket.md b/.agents/skills/cli-api/references/provision-bucket.md
@@ -3,10 +3,11 @@
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
 Reconcile an S3 bucket for a logical bucket in the database.
-Reads the bucket config via RLS, then enqueues the same
-storage:provision_bucket job used by the INSERT trigger. This is
-idempotent for an already-reconciled bucket; enqueue failures become
-GraphQL errors.
+Records the request on the bucket row via RLS; the bucket's job
+trigger then enqueues the same storage:provision_bucket job used on
+INSERT, and repeated requests collapse into one pending job. This is
+idempotent for an already-reconciled bucket; failures become GraphQL
+errors.
 
 ## Usage
 

diff --git a/.agents/skills/cli-api/references/unique-constraint.md b/.agents/skills/cli-api/references/unique-constraint.md
@@ -12,8 +12,8 @@ csdk unique-constraint list --where.<field>.<op> <value> --orderBy <values>
 csdk unique-constraint list --limit 10 --after <cursor>
 csdk unique-constraint find-first --where.<field>.<op> <value>
 csdk unique-constraint get --id <UUID>
-csdk unique-constraint create --fieldIds <UUID> --tableId <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--smartTags <JSON>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
-csdk unique-constraint update --id <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--fieldIds <UUID>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--smartTags <JSON>] [--tableId <UUID>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
+csdk unique-constraint create --fieldIds <UUID> --tableId <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--nullsNotDistinct <Boolean>] [--smartTags <JSON>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
+csdk unique-constraint update --id <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--fieldIds <UUID>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--nullsNotDistinct <Boolean>] [--smartTags <JSON>] [--tableId <UUID>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
 csdk unique-constraint delete --id <UUID>
 ```
 
@@ -58,7 +58,7 @@ csdk unique-constraint list --where.id.equalTo <value> --orderBy ID_ASC
 ### Create a uniqueConstraint
 
 ```bash
-csdk unique-constraint create --fieldIds <UUID> --tableId <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--smartTags <JSON>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
+csdk unique-constraint create --fieldIds <UUID> --tableId <UUID> [--category <ObjectCategory>] [--databaseId <UUID>] [--description <String>] [--initiallyDeferred <Boolean>] [--isDeferrable <Boolean>] [--name <String>] [--nullsNotDistinct <Boolean>] [--smartTags <JSON>] [--tags <String>] [--type <String>] [--withoutOverlaps <Boolean>]
 ```
 
 ### Get a uniqueConstraint by id

diff --git a/.agents/skills/cli-api/references/update-function-from-source.md b/.agents/skills/cli-api/references/update-function-from-source.md
@@ -0,0 +1,19 @@
+# updateFunctionFromSource
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Replaces a `Function`'s definition from its source text; its database, schema and exposure are unchanged.
+
+## Usage
+
+```bash
+csdk update-function-from-source --input.clientMutationId <String> --input.id <UUID> --input.source <String>
+```
+
+## Examples
+
+### Run updateFunctionFromSource
+
+```bash
+csdk update-function-from-source --input.clientMutationId <String> --input.id <UUID> --input.source <String>
+```
diff --git a/.agents/skills/cli-auth/references/provision-bucket.md b/.agents/skills/cli-auth/references/provision-bucket.md
@@ -3,10 +3,11 @@
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
 Reconcile an S3 bucket for a logical bucket in the database.
-Reads the bucket config via RLS, then enqueues the same
-storage:provision_bucket job used by the INSERT trigger. This is
-idempotent for an already-reconciled bucket; enqueue failures become
-GraphQL errors.
+Records the request on the bucket row via RLS; the bucket's job
+trigger then enqueues the same storage:provision_bucket job used on
+INSERT, and repeated requests collapse into one pending job. This is
+idempotent for an already-reconciled bucket; failures become GraphQL
+errors.
 
 ## Usage
 

diff --git a/.agents/skills/cli-auth/references/request-magic-link.md b/.agents/skills/cli-auth/references/request-magic-link.md
@@ -7,13 +7,13 @@ Execute the requestMagicLink mutation
 ## Usage
 
 ```bash
-csdk request-magic-link --input.clientMutationId <String> --input.email <String>
+csdk request-magic-link --input.clientMutationId <String> --input.email <String> --input.next <String>
 ```
 
 ## Examples
 
 ### Run requestMagicLink
 
 ```bash
-csdk request-magic-link --input.clientMutationId <String> --input.email <String>
+csdk request-magic-link --input.clientMutationId <String> --input.email <String> --input.next <String>
 ```
diff --git a/.agents/skills/cli-auth/references/sign-up.md b/.agents/skills/cli-auth/references/sign-up.md
@@ -7,13 +7,13 @@ Execute the signUp mutation
 ## Usage
 
 ```bash
-csdk sign-up --input.clientMutationId <String> --input.credentialKind <String> --input.csrfToken <String> --input.deviceToken <String> --input.email <String> --input.inviteToken <String> --input.password <String> --input.rememberMe <Boolean>
+csdk sign-up --input.clientMutationId <String> --input.csrfToken <String> --input.email <String> --input.inviteToken <String> --input.password <String>
 ```
 
 ## Examples
 
 ### Run signUp
 
 ```bash
-csdk sign-up --input.clientMutationId <String> --input.credentialKind <String> --input.csrfToken <String> --input.deviceToken <String> --input.email <String> --input.inviteToken <String> --input.password <String> --input.rememberMe <Boolean>
+csdk sign-up --input.clientMutationId <String> --input.csrfToken <String> --input.email <String> --input.inviteToken <String> --input.password <String>
 ```
diff --git a/.agents/skills/cli-compute/references/function-invocation.md b/.agents/skills/cli-compute/references/function-invocation.md
@@ -12,8 +12,8 @@ csdk function-invocation list --where.<field>.<op> <value> --orderBy <values>
 csdk function-invocation list --limit 10 --after <cursor>
 csdk function-invocation find-first --where.<field>.<op> <value>
 csdk function-invocation get --id <UUID>
-csdk function-invocation create --channel <String> --databaseId <UUID> --taskIdentifier <String> [--actorId <UUID>] [--apiBindingId <UUID>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>]
-csdk function-invocation update --id <UUID> [--actorId <UUID>] [--apiBindingId <UUID>] [--channel <String>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--databaseId <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>] [--taskIdentifier <String>]
+csdk function-invocation create --channel <String> --databaseId <UUID> --taskIdentifier <String> [--actorId <UUID>] [--apiBindingId <UUID>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--jobKey <String>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--queueName <String>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>]
+csdk function-invocation update --id <UUID> [--actorId <UUID>] [--apiBindingId <UUID>] [--channel <String>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--databaseId <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--jobKey <String>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--queueName <String>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>] [--taskIdentifier <String>]
 csdk function-invocation delete --id <UUID>
 ```
 
@@ -58,7 +58,7 @@ csdk function-invocation list --where.id.equalTo <value> --orderBy ID_ASC
 ### Create a functionInvocation
 
 ```bash
-csdk function-invocation create --channel <String> --databaseId <UUID> --taskIdentifier <String> [--actorId <UUID>] [--apiBindingId <UUID>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>]
+csdk function-invocation create --channel <String> --databaseId <UUID> --taskIdentifier <String> [--actorId <UUID>] [--apiBindingId <UUID>] [--completedAt <Datetime>] [--createdByPrincipal <UUID>] [--definitionScope <String>] [--durationMs <Int>] [--entityId <UUID>] [--entityType <String>] [--error <String>] [--functionDefinitionId <UUID>] [--graphExecutionId <UUID>] [--jobId <BigInt>] [--jobKey <String>] [--organizationId <UUID>] [--parentInvocationId <UUID>] [--payload <JSON>] [--principalId <UUID>] [--provenance <JSON>] [--queueName <String>] [--result <JSON>] [--startedAt <Datetime>] [--status <String>]
 ```
 
 ### Get a functionInvocation by id