@gelabs/ovr 0.2.2 → 0.4.0

package/dist/ui-components-ui/dropdown-menu.js

@@ -1,238 +1,3 @@
 "use client";
-import { cn } from '../chunk-77QBZC7J.js';
-import { Menu } from '@base-ui/react/menu';
-import { ChevronRightIcon, CheckIcon } from 'lucide-react';
-import { jsx, jsxs } from 'react/jsx-runtime';
-
-function DropdownMenu({ ...props }) {
-  return /* @__PURE__ */ jsx(Menu.Root, { "data-slot": "dropdown-menu", ...props });
-}
-function DropdownMenuPortal({ ...props }) {
-  return /* @__PURE__ */ jsx(Menu.Portal, { "data-slot": "dropdown-menu-portal", ...props });
-}
-function DropdownMenuTrigger({ ...props }) {
-  return /* @__PURE__ */ jsx(Menu.Trigger, { "data-slot": "dropdown-menu-trigger", ...props });
-}
-function DropdownMenuContent({
-  align = "start",
-  alignOffset = 0,
-  side = "bottom",
-  sideOffset = 4,
-  className,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(Menu.Portal, { children: /* @__PURE__ */ jsx(
-    Menu.Positioner,
-    {
-      className: "isolate z-50 outline-none",
-      align,
-      alignOffset,
-      side,
-      sideOffset,
-      children: /* @__PURE__ */ jsx(
-        Menu.Popup,
-        {
-          "data-slot": "dropdown-menu-content",
-          className: cn("z-50 max-h-(--available-height) w-(--anchor-width) min-w-32 origin-(--transform-origin) overflow-x-hidden overflow-y-auto rounded-lg bg-popover p-1 text-popover-foreground shadow-md ring-1 ring-foreground/10 duration-100 outline-none data-[side=bottom]:slide-in-from-top-2 data-[side=inline-end]:slide-in-from-left-2 data-[side=inline-start]:slide-in-from-right-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:overflow-hidden data-closed:fade-out-0 data-closed:zoom-out-95", className),
-          ...props
-        }
-      )
-    }
-  ) });
-}
-function DropdownMenuGroup({ ...props }) {
-  return /* @__PURE__ */ jsx(Menu.Group, { "data-slot": "dropdown-menu-group", ...props });
-}
-function DropdownMenuLabel({
-  className,
-  inset,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    Menu.GroupLabel,
-    {
-      "data-slot": "dropdown-menu-label",
-      "data-inset": inset,
-      className: cn(
-        "px-1.5 py-1 text-xs font-medium text-muted-foreground data-inset:pl-7",
-        className
-      ),
-      ...props
-    }
-  );
-}
-function DropdownMenuItem({
-  className,
-  inset,
-  variant = "default",
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    Menu.Item,
-    {
-      "data-slot": "dropdown-menu-item",
-      "data-inset": inset,
-      "data-variant": variant,
-      className: cn(
-        "group/dropdown-menu-item relative flex cursor-default items-center gap-1.5 rounded-md px-1.5 py-1 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground data-inset:pl-7 data-[variant=destructive]:text-destructive data-[variant=destructive]:focus:bg-destructive/10 data-[variant=destructive]:focus:text-destructive dark:data-[variant=destructive]:focus:bg-destructive/20 data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 data-[variant=destructive]:*:[svg]:text-destructive",
-        className
-      ),
-      ...props
-    }
-  );
-}
-function DropdownMenuSub({ ...props }) {
-  return /* @__PURE__ */ jsx(Menu.SubmenuRoot, { "data-slot": "dropdown-menu-sub", ...props });
-}
-function DropdownMenuSubTrigger({
-  className,
-  inset,
-  children,
-  ...props
-}) {
-  return /* @__PURE__ */ jsxs(
-    Menu.SubmenuTrigger,
-    {
-      "data-slot": "dropdown-menu-sub-trigger",
-      "data-inset": inset,
-      className: cn(
-        "flex cursor-default items-center gap-1.5 rounded-md px-1.5 py-1 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground data-inset:pl-7 data-popup-open:bg-accent data-popup-open:text-accent-foreground data-open:bg-accent data-open:text-accent-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        className
-      ),
-      ...props,
-      children: [
-        children,
-        /* @__PURE__ */ jsx(ChevronRightIcon, { className: "ml-auto" })
-      ]
-    }
-  );
-}
-function DropdownMenuSubContent({
-  align = "start",
-  alignOffset = -3,
-  side = "right",
-  sideOffset = 0,
-  className,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    DropdownMenuContent,
-    {
-      "data-slot": "dropdown-menu-sub-content",
-      className: cn("w-auto min-w-[96px] rounded-lg bg-popover p-1 text-popover-foreground shadow-lg ring-1 ring-foreground/10 duration-100 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95", className),
-      align,
-      alignOffset,
-      side,
-      sideOffset,
-      ...props
-    }
-  );
-}
-function DropdownMenuCheckboxItem({
-  className,
-  children,
-  checked,
-  inset,
-  ...props
-}) {
-  return /* @__PURE__ */ jsxs(
-    Menu.CheckboxItem,
-    {
-      "data-slot": "dropdown-menu-checkbox-item",
-      "data-inset": inset,
-      className: cn(
-        "relative flex cursor-default items-center gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground focus:**:text-accent-foreground data-inset:pl-7 data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        className
-      ),
-      checked,
-      ...props,
-      children: [
-        /* @__PURE__ */ jsx(
-          "span",
-          {
-            className: "pointer-events-none absolute right-2 flex items-center justify-center",
-            "data-slot": "dropdown-menu-checkbox-item-indicator",
-            children: /* @__PURE__ */ jsx(Menu.CheckboxItemIndicator, { children: /* @__PURE__ */ jsx(
-              CheckIcon,
-              {}
-            ) })
-          }
-        ),
-        children
-      ]
-    }
-  );
-}
-function DropdownMenuRadioGroup({ ...props }) {
-  return /* @__PURE__ */ jsx(
-    Menu.RadioGroup,
-    {
-      "data-slot": "dropdown-menu-radio-group",
-      ...props
-    }
-  );
-}
-function DropdownMenuRadioItem({
-  className,
-  children,
-  inset,
-  ...props
-}) {
-  return /* @__PURE__ */ jsxs(
-    Menu.RadioItem,
-    {
-      "data-slot": "dropdown-menu-radio-item",
-      "data-inset": inset,
-      className: cn(
-        "relative flex cursor-default items-center gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground focus:**:text-accent-foreground data-inset:pl-7 data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        className
-      ),
-      ...props,
-      children: [
-        /* @__PURE__ */ jsx(
-          "span",
-          {
-            className: "pointer-events-none absolute right-2 flex items-center justify-center",
-            "data-slot": "dropdown-menu-radio-item-indicator",
-            children: /* @__PURE__ */ jsx(Menu.RadioItemIndicator, { children: /* @__PURE__ */ jsx(
-              CheckIcon,
-              {}
-            ) })
-          }
-        ),
-        children
-      ]
-    }
-  );
-}
-function DropdownMenuSeparator({
-  className,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    Menu.Separator,
-    {
-      "data-slot": "dropdown-menu-separator",
-      className: cn("-mx-1 my-1 h-px bg-border", className),
-      ...props
-    }
-  );
-}
-function DropdownMenuShortcut({
-  className,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    "span",
-    {
-      "data-slot": "dropdown-menu-shortcut",
-      className: cn(
-        "ml-auto text-xs tracking-widest text-muted-foreground group-focus/dropdown-menu-item:text-accent-foreground",
-        className
-      ),
-      ...props
-    }
-  );
-}
-
-export { DropdownMenu, DropdownMenuCheckboxItem, DropdownMenuContent, DropdownMenuGroup, DropdownMenuItem, DropdownMenuLabel, DropdownMenuPortal, DropdownMenuRadioGroup, DropdownMenuRadioItem, DropdownMenuSeparator, DropdownMenuShortcut, DropdownMenuSub, DropdownMenuSubContent, DropdownMenuSubTrigger, DropdownMenuTrigger };
+export { DropdownMenu, DropdownMenuCheckboxItem, DropdownMenuContent, DropdownMenuGroup, DropdownMenuItem, DropdownMenuLabel, DropdownMenuPortal, DropdownMenuRadioGroup, DropdownMenuRadioItem, DropdownMenuSeparator, DropdownMenuShortcut, DropdownMenuSub, DropdownMenuSubContent, DropdownMenuSubTrigger, DropdownMenuTrigger } from '../chunk-V7VQVDWS.js';
+import '../chunk-77QBZC7J.js';

package/dist/ui-components-ui/sheet.js

@@ -1,127 +1,4 @@
 "use client";
-import { Button } from '../chunk-I4WDVYHX.js';
-import { cn } from '../chunk-77QBZC7J.js';
-import { Dialog } from '@base-ui/react/dialog';
-import { XIcon } from 'lucide-react';
-import { jsx, jsxs } from 'react/jsx-runtime';
-
-function Sheet({ ...props }) {
-  return /* @__PURE__ */ jsx(Dialog.Root, { "data-slot": "sheet", ...props });
-}
-function SheetTrigger({ ...props }) {
-  return /* @__PURE__ */ jsx(Dialog.Trigger, { "data-slot": "sheet-trigger", ...props });
-}
-function SheetClose({ ...props }) {
-  return /* @__PURE__ */ jsx(Dialog.Close, { "data-slot": "sheet-close", ...props });
-}
-function SheetPortal({ ...props }) {
-  return /* @__PURE__ */ jsx(Dialog.Portal, { "data-slot": "sheet-portal", ...props });
-}
-function SheetOverlay({ className, ...props }) {
-  return /* @__PURE__ */ jsx(
-    Dialog.Backdrop,
-    {
-      "data-slot": "sheet-overlay",
-      className: cn(
-        "fixed inset-0 z-50 bg-black/10 transition-opacity duration-150 data-ending-style:opacity-0 data-starting-style:opacity-0 supports-backdrop-filter:backdrop-blur-xs",
-        className
-      ),
-      ...props
-    }
-  );
-}
-function SheetContent({
-  className,
-  children,
-  side = "right",
-  showCloseButton = true,
-  ...props
-}) {
-  return /* @__PURE__ */ jsxs(SheetPortal, { children: [
-    /* @__PURE__ */ jsx(SheetOverlay, {}),
-    /* @__PURE__ */ jsxs(
-      Dialog.Popup,
-      {
-        "data-slot": "sheet-content",
-        "data-side": side,
-        className: cn(
-          "fixed z-50 flex flex-col gap-4 bg-popover bg-clip-padding text-sm text-popover-foreground shadow-lg transition duration-200 ease-in-out data-ending-style:opacity-0 data-starting-style:opacity-0 data-[side=bottom]:inset-x-0 data-[side=bottom]:bottom-0 data-[side=bottom]:h-auto data-[side=bottom]:border-t data-[side=bottom]:data-ending-style:translate-y-[2.5rem] data-[side=bottom]:data-starting-style:translate-y-[2.5rem] data-[side=left]:inset-y-0 data-[side=left]:left-0 data-[side=left]:h-full data-[side=left]:w-3/4 data-[side=left]:border-r data-[side=left]:data-ending-style:translate-x-[-2.5rem] data-[side=left]:data-starting-style:translate-x-[-2.5rem] data-[side=right]:inset-y-0 data-[side=right]:right-0 data-[side=right]:h-full data-[side=right]:w-3/4 data-[side=right]:border-l data-[side=right]:data-ending-style:translate-x-[2.5rem] data-[side=right]:data-starting-style:translate-x-[2.5rem] data-[side=top]:inset-x-0 data-[side=top]:top-0 data-[side=top]:h-auto data-[side=top]:border-b data-[side=top]:data-ending-style:translate-y-[-2.5rem] data-[side=top]:data-starting-style:translate-y-[-2.5rem] data-[side=left]:sm:max-w-sm data-[side=right]:sm:max-w-sm",
-          className
-        ),
-        ...props,
-        children: [
-          children,
-          showCloseButton && /* @__PURE__ */ jsxs(
-            Dialog.Close,
-            {
-              "data-slot": "sheet-close",
-              render: /* @__PURE__ */ jsx(
-                Button,
-                {
-                  variant: "ghost",
-                  className: "absolute top-3 right-3",
-                  size: "icon-sm"
-                }
-              ),
-              children: [
-                /* @__PURE__ */ jsx(
-                  XIcon,
-                  {}
-                ),
-                /* @__PURE__ */ jsx("span", { className: "sr-only", children: "Close" })
-              ]
-            }
-          )
-        ]
-      }
-    )
-  ] });
-}
-function SheetHeader({ className, ...props }) {
-  return /* @__PURE__ */ jsx(
-    "div",
-    {
-      "data-slot": "sheet-header",
-      className: cn("flex flex-col gap-0.5 p-4", className),
-      ...props
-    }
-  );
-}
-function SheetFooter({ className, ...props }) {
-  return /* @__PURE__ */ jsx(
-    "div",
-    {
-      "data-slot": "sheet-footer",
-      className: cn("mt-auto flex flex-col gap-2 p-4", className),
-      ...props
-    }
-  );
-}
-function SheetTitle({ className, ...props }) {
-  return /* @__PURE__ */ jsx(
-    Dialog.Title,
-    {
-      "data-slot": "sheet-title",
-      className: cn(
-        "font-heading text-base font-medium text-foreground",
-        className
-      ),
-      ...props
-    }
-  );
-}
-function SheetDescription({
-  className,
-  ...props
-}) {
-  return /* @__PURE__ */ jsx(
-    Dialog.Description,
-    {
-      "data-slot": "sheet-description",
-      className: cn("text-sm text-muted-foreground", className),
-      ...props
-    }
-  );
-}
-
-export { Sheet, SheetClose, SheetContent, SheetDescription, SheetFooter, SheetHeader, SheetTitle, SheetTrigger };
+export { Sheet, SheetClose, SheetContent, SheetDescription, SheetFooter, SheetHeader, SheetTitle, SheetTrigger } from '../chunk-3YKVH4Y7.js';
+import '../chunk-I4WDVYHX.js';
+import '../chunk-77QBZC7J.js';

package/dist/ui-config.d.ts

@@ -1,7 +1,7 @@
 import * as React from 'react';
 import { b as OvrConfig } from './schema-CdsFQxIg.js';
 import { a as Formatters } from './format-C7MSwUHK.js';
-import { D as Dictionary } from './types-CtBC5-TW.js';
+import { D as Dictionary } from './types-B8MopM4b.js';
 import 'zod';
 import './types.js';
 

package/dist/ui-config.js

@@ -1,3 +1,3 @@
 "use client";
-export { OvrConfigProvider, ThemeProvider, useCopy, useFormatters, useOvrConfig, useTheme } from './chunk-E2D7QT6N.js';
-import './chunk-B634JHKZ.js';
+export { OvrConfigProvider, ThemeProvider, useCopy, useFormatters, useOvrConfig, useTheme } from './chunk-TJSNVTVB.js';
+import './chunk-BI4EGLPG.js';

package/dist/ui-server.d.ts

@@ -1,6 +1,6 @@
 import { b as OvrConfig } from './schema-CdsFQxIg.js';
 import { a as Formatters } from './format-C7MSwUHK.js';
-import { D as Dictionary, C as CopyOverrides } from './types-CtBC5-TW.js';
+import { D as Dictionary, C as CopyOverrides } from './types-B8MopM4b.js';
 import 'zod';
 import './types.js';
 

package/dist/ui-server.js

@@ -1,5 +1,5 @@
-import { mergeCopy } from './chunk-5YYR37CF.js';
-import { createFormatters } from './chunk-B634JHKZ.js';
+import { mergeCopy } from './chunk-DJMUW5T2.js';
+import { createFormatters } from './chunk-BI4EGLPG.js';
 import 'server-only';
 
 var current = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gelabs/ovr",
-  "version": "0.2.2",
+  "version": "0.4.0",
   "description": "The @gelabs/ovr SDK — one self-contained package over the OVR (Online Ordinance Violation Receipt) platform. A standalone per-LGU app installs ONLY this package and imports from @gelabs/ovr/{config,core,data,runtime,auth,ui,...}; the seven @gelabs/ovr-* implementation packages are bundled in at build time.",
   "type": "module",
   "license": "UNLICENSED",
@@ -158,14 +158,14 @@
     "react-dom": "19.2.4",
     "tsup": "^8.4.0",
     "typescript": "^5",
-    "@gelabs/ovr-types": "0.0.0",
     "@gelabs/ovr-config": "0.0.0",
-    "@gelabs/ovr-data": "0.0.0",
-    "@gelabs/ovr-ui": "0.0.0",
     "@gelabs/ovr-offline": "0.0.0",
     "@gelabs/ovr-core": "0.0.0",
-    "@gelabs/ovr-auth": "0.0.0",
-    "@gelabs/ovr-runtime": "0.0.0"
+    "@gelabs/ovr-ui": "0.0.0",
+    "@gelabs/ovr-types": "0.0.0",
+    "@gelabs/ovr-data": "0.0.0",
+    "@gelabs/ovr-runtime": "0.0.0",
+    "@gelabs/ovr-auth": "0.0.0"
   },
   "scripts": {
     "build": "tsup && node scripts/copy-assets.mjs",

package/prisma/migrations/20260622010000_add_super_admin_role/migration.sql

@@ -0,0 +1,3 @@
+-- AlterEnum
+-- GE-013 RBAC: add the SUPER_ADMIN tier (manages accounts) above ADMIN/ENFORCER.
+ALTER TYPE "UserRole" ADD VALUE 'SUPER_ADMIN';

package/prisma/migrations/20260622020000_add_apprehending_enforcer/migration.sql

@@ -0,0 +1,4 @@
+-- AlterTable
+-- GE-011: record the apprehending enforcer account (+ snapshot name) on a ticket.
+ALTER TABLE "Ticket" ADD COLUMN "apprehendingEnforcerId" TEXT;
+ALTER TABLE "Ticket" ADD COLUMN "apprehendingEnforcerName" TEXT;

package/prisma/migrations/20260622030000_custom_roles/migration.sql

@@ -0,0 +1,30 @@
+-- GE-013 (custom roles): roles + permissions become editable DATA.
+
+-- CreateTable
+CREATE TABLE "Role" (
+    "name" TEXT NOT NULL,
+    "label" TEXT NOT NULL,
+    "isSystem" BOOLEAN NOT NULL DEFAULT false,
+    "permissions" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "Role_pkey" PRIMARY KEY ("name")
+);
+
+-- Seed the system roles up-front (they must exist before the FK below, and so
+-- existing User.role values 'ENFORCER'/'ADMIN'/'SUPER_ADMIN' satisfy it).
+INSERT INTO "Role" ("name", "label", "isSystem", "permissions", "updatedAt") VALUES
+  ('SUPER_ADMIN', 'Super Admin',   true, ARRAY['dashboard:view','tickets:view','tickets:create','accounts:manage','roles:manage'], CURRENT_TIMESTAMP),
+  ('ADMIN',       'Administrator', true, ARRAY['dashboard:view','tickets:view','tickets:create'], CURRENT_TIMESTAMP),
+  ('ENFORCER',    'Enforcer',      true, ARRAY['tickets:view','tickets:create'], CURRENT_TIMESTAMP);
+
+-- Convert User.role from the UserRole enum to a TEXT foreign key into Role.name.
+ALTER TABLE "User" ALTER COLUMN "role" DROP DEFAULT;
+ALTER TABLE "User" ALTER COLUMN "role" TYPE TEXT USING "role"::text;
+ALTER TABLE "User" ALTER COLUMN "role" SET DEFAULT 'ENFORCER';
+
+-- AddForeignKey
+ALTER TABLE "User" ADD CONSTRAINT "User_role_fkey" FOREIGN KEY ("role") REFERENCES "Role"("name") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- DropEnum (no longer referenced)
+DROP TYPE "UserRole";

package/prisma/migrations/20260622040000_add_activity_log/migration.sql

@@ -0,0 +1,18 @@
+-- CreateTable
+-- GE-022: append-only audit trail of account actions.
+CREATE TABLE "ActivityLog" (
+    "id" TEXT NOT NULL,
+    "actorId" TEXT,
+    "actorUsername" TEXT,
+    "action" TEXT NOT NULL,
+    "summary" TEXT NOT NULL,
+    "targetType" TEXT,
+    "targetId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "ActivityLog_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "ActivityLog_action_idx" ON "ActivityLog"("action");
+CREATE INDEX "ActivityLog_actorId_idx" ON "ActivityLog"("actorId");
+CREATE INDEX "ActivityLog_createdAt_idx" ON "ActivityLog"("createdAt");

package/prisma/migrations/20260622050000_violation_catalog_management/migration.sql

@@ -0,0 +1,5 @@
+-- GE-031 (violation catalog management): soft-delete + edit tracking.
+-- `active` lets admins archive a violation (hidden from issuance) while keeping
+-- it resolvable for already-issued tickets. Existing rows default to active.
+ALTER TABLE "ViolationCatalog" ADD COLUMN "active" BOOLEAN NOT NULL DEFAULT true;
+ALTER TABLE "ViolationCatalog" ADD COLUMN "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP;

package/prisma/schema.prisma

@@ -42,11 +42,6 @@ enum PaymentStatus {
   CONTESTED
 }
 
-enum UserRole {
-  ENFORCER
-  ADMIN
-}
-
 model Officer {
   id      String  @id // slug, e.g. "off-novelo"
   name    String // "NOVELO, RAYMUNDO V."
@@ -66,8 +61,10 @@ model ViolationCatalog {
   category  ViolationCategory
   basicFine Decimal           @db.Decimal(12, 2)
   legalText String?
+  active    Boolean           @default(true) // GE-031: false = archived (hidden from issuance)
 
   createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
 }
 
 model Ticket {
@@ -94,6 +91,12 @@ model Ticket {
   remarks          String?
   issuedBy         String?
 
+  // GE-011: the enforcer ACCOUNT who apprehended (+ snapshot name for display).
+  // Soft reference to User.id — intentionally NOT a hard FK so the attribution
+  // survives if the account is later renamed or removed.
+  apprehendingEnforcerId   String?
+  apprehendingEnforcerName String?
+
   officerId String
   officer   Officer @relation(fields: [officerId], references: [id])
 
@@ -141,12 +144,30 @@ model Payment {
   paidAt      DateTime
 }
 
+// A role + its permission set (GE-013, custom roles). Permission keys come from
+// the SDK catalog (@gelabs/ovr-types PERMISSION_CATALOG); the mapping is data.
+model Role {
+  name        String   @id // "SUPER_ADMIN" / "ENFORCER" / custom slug e.g. "cashier"
+  label       String // display name shown in the UI
+  isSystem    Boolean  @default(false) // system roles can't be renamed or deleted
+  permissions String[] // granted Permission keys
+
+  users User[]
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+}
+
 model User {
-  id           String   @id @default(cuid())
-  username     String   @unique
+  id           String  @id @default(cuid())
+  username     String  @unique
   passwordHash String
-  role         UserRole @default(ENFORCER)
-  active       Boolean  @default(true)
+
+  // Role is DATA now (see model Role): a string FK so custom roles are allowed.
+  role    String @default("ENFORCER")
+  roleRef Role   @relation(fields: [role], references: [name])
+
+  active Boolean @default(true)
 
   // Links a login to an enforcer (so issued tickets can attribute the officer).
   officerId String?  @unique
@@ -154,3 +175,21 @@ model User {
 
   createdAt DateTime @default(now())
 }
+
+// Audit trail (GE-022): who did what, when. Append-only. Actor is a SOFT
+// reference (snapshot username) so entries survive account deletion.
+model ActivityLog {
+  id            String  @id @default(cuid())
+  actorId       String?
+  actorUsername String?
+  action        String // e.g. "auth.login", "account.create", "role.update"
+  summary       String // human-readable one-liner
+  targetType    String? // "account" | "role" | "ticket" | …
+  targetId      String?
+
+  createdAt DateTime @default(now())
+
+  @@index([action])
+  @@index([actorId])
+  @@index([createdAt])
+}