fix: functions download (#5096)

* fix

* test

---------

Co-authored-by: Andrew Valleteau <[email protected]>

feat(telemetry): attach org/project groups to all CLI events (#5087)

fix: adds etl to managed schema (#5090)

fix: adds etl to managed schema (#5090)

fix(pg-delta): declarative apply error results (#5082)

* fix(pg-delta): declarative apply error results

Improve readability report for decalrative appy errors wrapping

* chore: upgrade pg-delta to alpha 13

fix: atomic parser (#5064)

* fix

* test

---------

Co-authored-by: Andrew Valleteau <[email protected]>

feat(auth): add support for configuring passkeys and webauthn (#5077)

fix(pg-delta): declarative-sync-no-declarative-dir-set (#5078)

* feat(declarative): add tests for skipping config updates when PgDelta is enabled

- These tests verify that the configuration remains unchanged when PgDelta is enabled, ensuring the declarative directory is the source of truth.
- Updated the WriteDeclarativeSchemas function to reflect the new behavior regarding PgDelta configuration.

* fix(declarative): DSL change due to upgrade

feat(plan-gate): wire billing links into remaining plan-gated commands (

#5066)

* refactor(plan-gate): check entitlements on any non-2xx, only show link when confirmed gated

Previously SuggestUpgradeOnError only triggered on 402. Many plan-gated
endpoints return 400 or 404 instead. Now checks entitlements on any
non-2xx and only sets CmdSuggestion when hasAccess is confirmed false,
preventing false positives.

* refactor(branches): rename was402 to isGated in upgrade check

Aligns variable name with the new semantics: SuggestUpgradeOnError
now checks entitlements on any non-2xx, not just 402.

* feat(sso): wire billing link into sso commands when plan-gated

Check org entitlements for auth.saml_2 on any non-2xx response from
SSO provider endpoints. Shows billing upgrade link when the feature
is confirmed gated, before falling through to existing error handling.

* feat(vanity-subdomains): wire billing link into vanity-subdomain commands when plan-gated

Check org entitlements for vanity_subdomain on any non-2xx response.
The platform API returns 400 when vanity subdomains are not available
on the org's plan; the entitlements check confirms the gate before
showing a billing upgrade link.

* docs(telemetry): clean up EventUpgradeSuggested comment

* refactor(plan-gate): use named returns for readability

* fix(plan-gate): use correct projectRef in branches/update, restrict check to 4xx

Two fixes:
- branches/update passed flags.ProjectRef instead of the local
  projectRef resolved from the branch ID, causing entitlements to
  look up the wrong org
- Restrict SuggestUpgradeOnError to 4xx client errors only (skip 2xx
  success and 5xx server errors) to avoid unnecessary API calls on
  server outages

* refactor(telemetry): extract shared TrackUpgradeSuggested helper

Replace 8 identical per-package trackUpgradeSuggested functions with a
single exported telemetry.TrackUpgradeSuggested. Avoids utils->telemetry
import cycle by keeping the helper in the telemetry package.

---------

Co-authored-by: Andrew Valleteau <[email protected]>

fix(decalrative): change default declarative/ folder to database/ (#5057

)

* fix(decalrative): change default declarative/ folder to database/

* fix: rename from database to schemas

* fix: capture declarative cmds telemetry

* Revert "fix: rename from database to schemas"

This reverts commit 90d022c.