Add an origin to the customer's allowlist and reconcile the buckets. The origin is canonicalized (lower-cased scheme/host) before storage.
Remove an origin from the customer's allowlist and reconcile the buckets.
Push the aggregate origin allowlist (all customers' origins merged with the base origins) onto both entity-document buckets' CORS configuration.
Standalone repair entrypoint: opens its own transaction, acquires the
advisory lock, and reconciles. create/update/delete do NOT call
this — they run the reconcile INLINE within their own mutation tx (via
reconcileWithin) so the row write and the CORS write are atomic.
Optionalorigin?: stringExact-match filter on the canonical origin
Optionalpage?: numberDefaults to 1
OptionalpageSize?: numberDefaults to 50
The customer's allowlisted origins, ordered by origin, paginated.
Replace an allowlist entry's origin and reconcile the buckets.
Manage the per-customer origin allowlist and reconcile the aggregate allowlist onto the entity-document S3 buckets' CORS configuration.