@almadar/std 16.235.0 → 16.236.0

package/behaviors/registry/infra/atoms/std-approval-gate.orb

@@ -555,14 +555,6 @@
               "tier": "policy",
               "type": "[string]"
             },
-            "autoApproveBelowThreshold": {
-              "default": true,
-              "description": "When true, auto-approves requests below the threshold without queuing. v1.0 declarative only.",
-              "label": "Skip review queue for low-value requests?",
-              "synonyms": "auto approve, skip review, bypass queue, automatic approval",
-              "tier": "policy",
-              "type": "boolean"
-            },
             "blockSelfApproval": {
               "default": false,
               "description": "When on, a reviewer cannot APPROVE a request they submitted themselves (requestedBy = the viewer's id) — enforced by the APPROVE transition guard, from the button or from the bus. Requires hosts to stamp requestedBy at request creation. DENY stays allowed on your own request (denying your own request withdraws it). Off by default.",
@@ -579,24 +571,69 @@
               "tier": "policy",
               "type": "boolean"
             },
-            "escalationHours": {
-              "default": 0.0,
-              "description": "Hours a request can sit pending before escalating. v1.0 declarative only.",
-              "label": "Escalate after how many hours pending?",
-              "synonyms": "escalation time, SLA hours, pending timeout, escalate after",
-              "tier": "policy",
-              "type": "number"
-            },
-            "escalationRoles": {
-              "default": [],
-              "description": "Roles notified on escalation (compose sibling std-notify-on-event to deliver).",
+            "itemActions": {
+              "default": [
+                {
+                  "event": "OPEN_SUBJECT",
+                  "icon": "eye",
+                  "label": "View",
+                  "variant": "ghost"
+                },
+                {
+                  "event": "APPROVE",
+                  "icon": "check",
+                  "label": "Approve",
+                  "variant": "primary"
+                },
+                {
+                  "event": "DENY",
+                  "icon": "x",
+                  "label": "Deny",
+                  "variant": "danger"
+                }
+              ],
+              "description": "Actions offered on each row; give an item `roles` to show it only to those viewer roles.",
               "items": {
-                "type": "string"
+                "properties": {
+                  "event": {
+                    "name": "event",
+                    "required": false,
+                    "type": "event"
+                  },
+                  "icon": {
+                    "name": "icon",
+                    "required": false,
+                    "type": "string"
+                  },
+                  "label": {
+                    "name": "label",
+                    "required": true,
+                    "type": "string"
+                  },
+                  "roles": {
+                    "items": {
+                      "type": "string"
+                    },
+                    "name": "roles",
+                    "required": false,
+                    "type": "array"
+                  },
+                  "variant": {
+                    "name": "variant",
+                    "required": false,
+                    "type": "string"
+                  },
+                  "when": {
+                    "name": "when",
+                    "required": false,
+                    "type": "object"
+                  }
+                },
+                "type": "object"
               },
-              "label": "Who gets notified when a request escalates?",
-              "synonyms": "escalation contacts, escalate to, notify roles, escalated approver",
-              "tier": "policy",
-              "type": "[string]"
+              "label": "Row actions",
+              "tier": "presentation",
+              "type": "[ItemAction]"
             },
             "reviewSlot": {
               "default": "modal",
@@ -620,19 +657,11 @@
                 "card-rows"
               ]
             },
-            "threshold": {
-              "default": 0.0,
-              "description": "Requests whose gated value is below this threshold are auto-approved. v1.0 declarative only.",
-              "label": "Auto-approve below this value",
-              "synonyms": "auto approve amount, skip review under, threshold, limit",
-              "tier": "policy",
-              "type": "number"
-            },
-            "valueField": {
+            "viewerRole": {
               "default": "",
-              "description": "Payload field name to compare against threshold (e.g. 'amount' on a RefundRequested event). v1.0 declarative only.",
-              "label": "Value field",
-              "tier": "internal",
+              "description": "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show.",
+              "label": "Viewer's role",
+              "tier": "policy",
               "type": "string"
             }
           },
@@ -1068,19 +1097,6 @@
           "id": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
-          "listens": [
-            {
-              "event": "CLOSE",
-              "eventId": "evt_01KXG04EZ0MS01J775W2VPESMJ",
-              "source": {
-                "kind": "trait",
-                "trait": "CloseButton",
-                "traitId": "trt_01KY21K6QCRRFVK1BRAD774HXP"
-              },
-              "triggers": "CLOSE",
-              "triggersId": "evt_01KXG04EZ0MS01J775W2VPESMJ"
-            }
-          ],
           "name": "ApprovalGateReview",
           "scope": "collection",
           "stateMachine": {
@@ -1732,24 +1748,38 @@
                           ],
                           "gap": "sm",
                           "itemActions": [
-                            {
-                              "event": "OPEN_SUBJECT",
-                              "icon": "eye",
-                              "label": "View",
-                              "variant": "ghost"
-                            },
-                            {
-                              "event": "APPROVE",
-                              "icon": "check",
-                              "label": "Approve",
-                              "variant": "primary"
-                            },
-                            {
-                              "event": "DENY",
-                              "icon": "x",
-                              "label": "Deny",
-                              "variant": "danger"
-                            }
+                            "array/filter",
+                            "@config.itemActions",
+                            [
+                              "fn",
+                              "action",
+                              [
+                                "or",
+                                [
+                                  "=",
+                                  [
+                                    "array/len",
+                                    [
+                                      "object/get",
+                                      "@action",
+                                      "roles",
+                                      []
+                                    ]
+                                  ],
+                                  0.0
+                                ],
+                                [
+                                  "array/includes",
+                                  [
+                                    "object/get",
+                                    "@action",
+                                    "roles",
+                                    []
+                                  ],
+                                  "@config.viewerRole"
+                                ]
+                              ]
+                            ]
                           ],
                           "look": "@config.tableLook",
                           "type": "data-grid"
@@ -2322,6 +2352,33 @@
             "name": "notes",
             "type": "string"
           }
+        ],
+        "ItemAction": [
+          {
+            "name": "label",
+            "required": true,
+            "type": "string"
+          },
+          {
+            "name": "event",
+            "type": "event"
+          },
+          {
+            "name": "variant",
+            "type": "string"
+          },
+          {
+            "name": "icon",
+            "type": "string"
+          },
+          {
+            "name": "roles",
+            "type": "[string]"
+          },
+          {
+            "name": "when",
+            "type": "SExpr"
+          }
         ]
       },
       "uses": [

package/behaviors/registry/infra/atoms/std-audit-capture.orb

@@ -219,14 +219,6 @@
               "label": "Skip fields",
               "tier": "internal",
               "type": "[string]"
-            },
-            "retentionDays": {
-              "default": 2555.0,
-              "description": "Number of days to retain audit entries. Default 2555 ≈ 7 years, typical for compliance.",
-              "label": "How long should the audit log be kept (days)?",
-              "synonyms": "log retention, keep for, audit expiry, retention period, log lifetime",
-              "tier": "policy",
-              "type": "number"
             }
           },
           "effectRow": [

package/behaviors/registry/infra/atoms/std-cache-aside.orb

@@ -664,36 +664,6 @@
                 "mascot"
               ]
             },
-            "evictionPolicy": {
-              "default": "lru",
-              "description": "How entries are evicted when the cache fills: least-recently-used, least-frequently-used, first-in-first-out, or TTL-only (never evict early).",
-              "label": "Eviction policy",
-              "synonyms": "cache replacement, eviction strategy",
-              "tier": "domain",
-              "type": "string",
-              "values": [
-                "lru",
-                "lfu",
-                "fifo",
-                "ttl-only"
-              ]
-            },
-            "maxCacheSize": {
-              "default": 1000.0,
-              "description": "Hard cap on cached entries before eviction. 0 = unlimited.",
-              "label": "Max cache entries",
-              "synonyms": "cache capacity, max entries",
-              "tier": "domain",
-              "type": "number"
-            },
-            "staleWhileRevalidate": {
-              "default": true,
-              "description": "When true, serve stale entries to consumers while a background refresh fetches fresh data. Reduces latency at the cost of brief staleness.",
-              "label": "Serve stale while revalidating",
-              "synonyms": "SWR, stale serving",
-              "tier": "domain",
-              "type": "boolean"
-            },
             "tableLook": {
               "default": "dense",
               "description": "Layer 2 visual treatment for the data table rendered by this atom.",
@@ -707,14 +677,6 @@
                 "borderless",
                 "card-rows"
               ]
-            },
-            "ttlSeconds": {
-              "default": 300.0,
-              "description": "Cache entry time-to-live before it goes stale. Default 5 minutes. Shorter = fresher/real-time data; longer = stable/long-lived caching.",
-              "label": "TTL (seconds)",
-              "synonyms": "expiration, time to live, cache duration, freshness, real-time (short) vs long-lived (long)",
-              "tier": "domain",
-              "type": "number"
             }
           },
           "effectRow": [
@@ -840,52 +802,6 @@
           "id": "trt_01KXG04F55S5PADBPNQBRKZ61W",
           "linkedEntity": "CacheEntry",
           "linkedEntityId": "ent_01KXG04F55MM0AG8Z1VNK7P7GC",
-          "listens": [
-            {
-              "event": "FETCH",
-              "eventId": "evt_01KXG04F59GQA60R8NNM16CHYM",
-              "source": {
-                "kind": "trait",
-                "trait": "FetchButton",
-                "traitId": "trt_01KY21K6RV0SVSYTA7PW3Y7FWJ"
-              },
-              "triggers": "FETCH",
-              "triggersId": "evt_01KXG04F59GQA60R8NNM16CHYM"
-            },
-            {
-              "event": "INVALIDATE",
-              "eventId": "evt_01KXG04F59871HBKNA1CFXHGC8",
-              "source": {
-                "kind": "trait",
-                "trait": "InvalidateButton",
-                "traitId": "trt_01KY21K6RV9KCJPHN7TH89H5H6"
-              },
-              "triggers": "INVALIDATE",
-              "triggersId": "evt_01KXG04F59871HBKNA1CFXHGC8"
-            },
-            {
-              "event": "REFRESH",
-              "eventId": "evt_01KXG04F59548SN2QBGQCZG3PS",
-              "source": {
-                "kind": "trait",
-                "trait": "RefreshButton",
-                "traitId": "trt_01KY21K6RVWV8R7CVN6ZGQH4HM"
-              },
-              "triggers": "REFRESH",
-              "triggersId": "evt_01KXG04F59548SN2QBGQCZG3PS"
-            },
-            {
-              "event": "FETCH",
-              "eventId": "evt_01KXG04F59GQA60R8NNM16CHYM",
-              "source": {
-                "kind": "trait",
-                "trait": "RetryButton",
-                "traitId": "trt_01KY21K6RVH5V0JTE08BK40SEE"
-              },
-              "triggers": "FETCH",
-              "triggersId": "evt_01KXG04F59GQA60R8NNM16CHYM"
-            }
-          ],
           "name": "CacheEntryCacheManager",
           "scope": "collection",
           "stateMachine": {

package/behaviors/registry/infra/atoms/std-circuit-breaker.orb

@@ -598,14 +598,6 @@
         {
           "category": "interaction",
           "config": {
-            "cooldownSeconds": {
-              "default": 30.0,
-              "description": "Seconds the circuit stays open before transitioning to half-open and probing for recovery.",
-              "label": "Cooldown (seconds)",
-              "synonyms": "reset timeout, open duration",
-              "tier": "domain",
-              "type": "number"
-            },
             "failureThreshold": {
               "default": 5.0,
               "description": "Number of consecutive failures before the circuit opens and starts rejecting requests.",
@@ -614,28 +606,6 @@
               "tier": "domain",
               "type": "number"
             },
-            "fallbackBehavior": {
-              "default": "reject",
-              "description": "What to return to callers while the circuit is open: reject = fail-fast/strict, cached-response = graceful degrade with stale data, queue = retry-later/no data loss, static-default = safe placeholder.",
-              "label": "Fallback behavior",
-              "synonyms": "open-state response, degraded mode, fail-fast vs graceful degrade",
-              "tier": "domain",
-              "type": "string",
-              "values": [
-                "reject",
-                "cached-response",
-                "queue",
-                "static-default"
-              ]
-            },
-            "halfOpenRequests": {
-              "default": 1.0,
-              "description": "Probe requests allowed through in the half-open state before deciding to close or re-open. Lower = cautious single-probe recovery; higher = aggressive parallel re-validation.",
-              "label": "Half-open probe requests",
-              "synonyms": "probe count, recovery test size, probe aggressiveness, recovery test volume, cautious vs fast recovery",
-              "tier": "domain",
-              "type": "number"
-            },
             "statLook": {
               "default": "elevated",
               "description": "Layer 2 visual treatment for stat / KPI cards.",
@@ -748,19 +718,6 @@
           "id": "trt_01KXG04F88F6CFDN4MZDSXGV7C",
           "linkedEntity": "ServiceNode",
           "linkedEntityId": "ent_01KXG04F88V6RHXAD0TY79RRYT",
-          "listens": [
-            {
-              "event": "RESET",
-              "eventId": "evt_01KXG04F88THE8SC261CSAPF8M",
-              "source": {
-                "kind": "trait",
-                "trait": "ResetButton",
-                "traitId": "trt_01KXZ44Y5HJGMGHVZ5CX1F7ZZA"
-              },
-              "triggers": "RESET",
-              "triggersId": "evt_01KXG04F88THE8SC261CSAPF8M"
-            }
-          ],
           "name": "ServiceNodeCircuitBreaker",
           "scope": "collection",
           "stateMachine": {
@@ -882,7 +839,7 @@
                   [
                     "set",
                     "@entity.threshold",
-                    5.0
+                    "@config.failureThreshold"
                   ],
                   [
                     "fetch",

package/behaviors/registry/infra/atoms/std-data-erasure.orb

@@ -430,18 +430,6 @@
           ],
           "category": "interaction",
           "config": {
-            "anonymizeVsDelete": {
-              "default": "anonymize",
-              "description": "anonymize = scrub PII fields and keep row for audit; delete = remove the row entirely.",
-              "label": "Anonymize or fully delete the record?",
-              "synonyms": "deletion mode, anonymize, delete, scrub or remove, retention mode",
-              "tier": "policy",
-              "type": "string",
-              "values": [
-                "anonymize",
-                "delete"
-              ]
-            },
             "enabled": {
               "default": false,
               "description": "Let people request that their data be permanently removed. Off by default.",
@@ -450,24 +438,52 @@
               "tier": "policy",
               "type": "boolean"
             },
-            "gracePeriodDays": {
-              "default": 30.0,
-              "description": "Days between request submission and execution. The subject can cancel during this window.",
-              "label": "How many days before deletion is carried out?",
-              "synonyms": "grace period, cancellation window, deletion delay, days before delete",
-              "tier": "policy",
-              "type": "number"
-            },
-            "piiFields": {
-              "default": [],
-              "description": "Fields the target atom nulls when anonymizing (e.g. email, name, phone).",
+            "itemActions": {
+              "default": [
+                {
+                  "event": "CANCEL_ERASURE",
+                  "icon": "x",
+                  "label": "Cancel",
+                  "variant": "secondary"
+                }
+              ],
+              "description": "Actions offered on each row; give an item `roles` to show it only to those viewer roles.",
               "items": {
-                "type": "string"
+                "properties": {
+                  "event": {
+                    "name": "event",
+                    "required": false,
+                    "type": "event"
+                  },
+                  "icon": {
+                    "name": "icon",
+                    "required": false,
+                    "type": "string"
+                  },
+                  "label": {
+                    "name": "label",
+                    "required": true,
+                    "type": "string"
+                  },
+                  "roles": {
+                    "items": {
+                      "type": "string"
+                    },
+                    "name": "roles",
+                    "required": false,
+                    "type": "array"
+                  },
+                  "variant": {
+                    "name": "variant",
+                    "required": false,
+                    "type": "string"
+                  }
+                },
+                "type": "object"
               },
-              "label": "Which fields contain personal data to scrub?",
-              "synonyms": "PII fields, personal data fields, sensitive fields, fields to scrub",
-              "tier": "policy",
-              "type": "[string]"
+              "label": "Row actions",
+              "tier": "presentation",
+              "type": "[ItemAction]"
             },
             "reviewSlot": {
               "default": "modal",
@@ -497,6 +513,13 @@
               "label": "Target entity",
               "tier": "internal",
               "type": "string"
+            },
+            "viewerRole": {
+              "default": "",
+              "description": "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show.",
+              "label": "Viewer's role",
+              "tier": "policy",
+              "type": "string"
             }
           },
           "effectRow": [
@@ -860,19 +883,6 @@
           "id": "trt_01KXG04FAWMAHG21RA4ACWNW6M",
           "linkedEntity": "ErasureRequest",
           "linkedEntityId": "ent_01KXG04FAW4SF8DY2X8EECV9VA",
-          "listens": [
-            {
-              "event": "CLOSE",
-              "eventId": "evt_01KXG04FAZYDMK8PB921PY4G9M",
-              "source": {
-                "kind": "trait",
-                "trait": "CloseButton",
-                "traitId": "trt_01KY21K6VWQNK3V47V9KX0HNQP"
-              },
-              "triggers": "CLOSE",
-              "triggersId": "evt_01KXG04FAZYDMK8PB921PY4G9M"
-            }
-          ],
           "name": "ErasureWorkflow",
           "scope": "collection",
           "stateMachine": {
@@ -1321,12 +1331,16 @@
                     "set",
                     "@entity.targetEntity",
                     [
-                      "object/get",
+                      "str/default",
                       [
-                        "array/first",
-                        "@payload.data"
+                        "object/get",
+                        [
+                          "array/first",
+                          "@payload.data"
+                        ],
+                        "targetEntity"
                       ],
-                      "targetEntity"
+                      "@config.targetEntity"
                     ]
                   ],
                   [
@@ -1477,12 +1491,16 @@
                     "set",
                     "@entity.targetEntity",
                     [
-                      "object/get",
+                      "str/default",
                       [
-                        "array/first",
-                        "@payload.data"
+                        "object/get",
+                        [
+                          "array/first",
+                          "@payload.data"
+                        ],
+                        "targetEntity"
                       ],
-                      "targetEntity"
+                      "@config.targetEntity"
                     ]
                   ],
                   [
@@ -1622,12 +1640,38 @@
                           ],
                           "gap": "sm",
                           "itemActions": [
-                            {
-                              "event": "CANCEL_ERASURE",
-                              "icon": "x",
-                              "label": "Cancel",
-                              "variant": "secondary"
-                            }
+                            "array/filter",
+                            "@config.itemActions",
+                            [
+                              "fn",
+                              "action",
+                              [
+                                "or",
+                                [
+                                  "=",
+                                  [
+                                    "array/len",
+                                    [
+                                      "object/get",
+                                      "@action",
+                                      "roles",
+                                      []
+                                    ]
+                                  ],
+                                  0.0
+                                ],
+                                [
+                                  "array/includes",
+                                  [
+                                    "object/get",
+                                    "@action",
+                                    "roles",
+                                    []
+                                  ],
+                                  "@config.viewerRole"
+                                ]
+                              ]
+                            ]
                           ],
                           "look": "@config.tableLook",
                           "type": "data-grid"
@@ -1849,6 +1893,31 @@
           }
         }
       ],
+      "types": {
+        "ItemAction": [
+          {
+            "name": "label",
+            "required": true,
+            "type": "string"
+          },
+          {
+            "name": "event",
+            "type": "event"
+          },
+          {
+            "name": "variant",
+            "type": "string"
+          },
+          {
+            "name": "icon",
+            "type": "string"
+          },
+          {
+            "name": "roles",
+            "type": "[string]"
+          }
+        ]
+      },
       "uses": [
         {
           "as": "Spinner",