@happyvertical/smrt-fields 0.40.59 → 0.40.61

package/dist/svelte/types.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Shared types for the field-policy Svelte primitives.
+ */
+/**
+ * Props for the PolicyField headless snippet escape hatch — all the data a
+ * fully custom renderer needs.
+ */
+export interface PolicyFieldSnippetProps {
+    id: string;
+    helpId: string;
+    visible: boolean;
+    label: string | null;
+    help: string | null;
+    defaultValue: unknown;
+    required: boolean;
+    /** Resolved visibility tier from the policy. */
+    tier: 'basic' | 'advanced' | 'hidden';
+}
+/**
+ * Browser-safe subset of a generated SMRT web field definition. This mirrors
+ * the `@smrt/web` wire contract without making the reusable Svelte package
+ * depend on an application's generated virtual module.
+ */
+export interface ObjectFormFieldDefinition {
+    /**
+     * The persisted public wire types emitted by generated web collections.
+     * There is deliberately no `select` wire type: applications render
+     * select-like controls by registering a field-specific renderer for a text
+     * (or other persisted) wire field.
+     */
+    type: ObjectFormWireType;
+    required?: boolean;
+    default?: unknown;
+    description?: string;
+    ui?: {
+        basic?: boolean;
+        group?: string;
+        order?: number;
+        locked?: boolean;
+    };
+}
+/** Browser-observable scalar types emitted by a generated web collection. */
+export type ObjectFormWireType = 'text' | 'integer' | 'decimal' | 'boolean' | 'datetime' | 'json' | 'foreignKey' | 'crossPackageRef';
+/** Structural subset of a generated `SmrtWebCollectionDefinition`. */
+export interface ObjectFormCollectionDefinition {
+    /** Canonical qualified model identity, never a simple class name. */
+    objectRef: string;
+    /** Browser-safe generated field definitions. */
+    fields: Readonly<Record<string, ObjectFormFieldDefinition>>;
+}
+/** Generated custom-action client shape, intentionally independent of smrt-web. */
+export interface ObjectFormPolicyClient {
+    resolveBatch(input: {
+        objectRefs: string[];
+    }): Promise<unknown>;
+}
+/** Resolved definition and policy consumed by `ObjectForm`. */
+export interface ObjectFormResolvedSource {
+    definition: ObjectFormCollectionDefinition;
+    policy: import('../types.js').ResolvedObjectFieldPolicy;
+}
+/**
+ * Per-app source contract. The source owns generated definitions and the
+ * app's custom-action transport; ObjectForm never imports a client runtime.
+ */
+export interface ObjectFormSource {
+    load(objectRef: string): Promise<ObjectFormResolvedSource>;
+}
+/** A field selected from the safe web-definition × resolved-policy overlap. */
+export interface ObjectFormField {
+    name: string;
+    definition: ObjectFormFieldDefinition;
+    group: string | null;
+    order: number | null;
+}
+/** Props shared by built-in and app-registered ObjectForm input renderers. */
+export interface FieldInputProps {
+    id: string;
+    name: string;
+    /** Resolved human-facing label for controls whose native name is absent. */
+    label?: string | null;
+    field: ObjectFormField;
+    value: unknown;
+    required: boolean;
+    disabled: boolean;
+    onvaluechange: (value: unknown) => void;
+    /** Reports parser validity to the host form/editor. */
+    onvaliditychange?: (valid: boolean) => void;
+}
+/** Data exposed to an ObjectForm per-field snippet override. */
+export interface ObjectFormFieldSnippetProps {
+    id: string;
+    helpId: string;
+    field: ObjectFormField;
+    value: unknown;
+    required: boolean;
+    disabled: boolean;
+    setValue(value: unknown): void;
+    setValidity(valid: boolean): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/svelte/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/svelte/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;OAKG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,EAAE,CAAC,EAAE;QACH,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,6EAA6E;AAC7E,MAAM,MAAM,kBAAkB,GAC1B,MAAM,GACN,SAAS,GACT,SAAS,GACT,SAAS,GACT,UAAU,GACV,MAAM,GACN,YAAY,GACZ,iBAAiB,CAAC;AAEtB,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;CAC7D;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE;AAED,+DAA+D;AAC/D,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,8BAA8B,CAAC;IAC3C,MAAM,EAAE,OAAO,aAAa,EAAE,yBAAyB,CAAC;CACzD;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC5D;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,yBAAyB,CAAC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,gEAAgE;AAChE,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACnC"}

package/dist/svelte/types.js

@@ -0,0 +1,4 @@
+/**
+ * Shared types for the field-policy Svelte primitives.
+ */
+export {};

package/dist/types.d.ts

@@ -1,203 +1,276 @@
-import { SmrtClassOptions } from '@happyvertical/smrt-core';
-import { SmrtObjectOptions } from '@happyvertical/smrt-core';
-
-/**
- * `scopeKey` value for app-scope rows. `scopeKey` exists ONLY so the
- * `conflictColumns` unique index stays total while `tenantId`/`userId` are
- * nullable (nullable columns would allow duplicate NULL rows) — the same
- * trick as `PromptOverride.context`.
- */
-export declare const APP_FIELD_POLICY_SCOPE_KEY = "__app__";
-
-/**
- * Explain variant: merged result plus the ordered per-layer contributions for
- * each field, so admin/gear UIs (#2049/#2050) never re-derive precedence.
- * Layers are listed in application order (code, app, tenant chain root → leaf,
- * user) and contain ONLY contributions that survive into the merged result:
- * tenant ancestors discarded by a permission-inheritance break and user rows
- * suppressed by an effective org lock are omitted, so sequentially replaying
- * the listed deltas reproduces the merged policy.
- */
-export declare interface ExplainedObjectFieldPolicy extends ResolvedObjectFieldPolicy {
-    layers: Record<string, FieldPolicyLayerContribution[]>;
-}
-
-export declare const FIELD_POLICY_SCOPE_TYPES: readonly FieldPolicyScopeType[];
-
-export declare const FIELD_POLICY_VISIBILITIES: readonly FieldPolicyVisibility[];
-
-/** Result shape of the batch resolve action (`FieldPolicyCollection.resolveBatch`). */
-export declare interface FieldPolicyBatchResult {
-    policies: Record<string, ResolvedObjectFieldPolicy>;
-}
-
-/**
- * The sparse contribution of one layer (code seed or one stored row).
- *
- * `default` is boxed so an explicit JSON `null` default (meaning "default to
- * null") stays distinguishable from "this layer contributes no default".
- */
-export declare interface FieldPolicyDelta {
-    default?: {
-        value: unknown;
-    };
-    visibility?: FieldPolicyVisibility;
-    help?: string;
-    label?: string;
-    order?: number;
-    locked?: boolean;
-}
-
-/** One layer's contribution to a field's resolved policy (explain variant). */
-export declare interface FieldPolicyLayerContribution {
-    layer: 'code' | 'app' | 'tenant' | 'user';
-    /** Chain node id for `tenant` layers (root → leaf order). */
-    tenantId?: string;
-    /** User id for the `user` layer. */
-    userId?: string;
-    delta: FieldPolicyDelta;
-}
-
-export declare interface FieldPolicyOptions extends SmrtObjectOptions {
-    objectRef?: string;
-    fieldName?: string;
-    scopeType?: FieldPolicyScopeType;
-    tenantId?: string | null;
-    userId?: string | null;
-    /**
-     * ENCODED channel: an already-JSON-encoded default, exactly as the column
-     * stores it (`'"Net 30"'`, `'42'`, `'null'`), or `null` to inherit.
-     *
-     * This is the wire contract: the generated write routes hand the request
-     * body straight to the constructor, and the #2049/#2050 gear posts
-     * `JSON.stringify(draft.defaultValue)`. It must therefore keep meaning
-     * "already encoded" — auto-serializing here would double-encode every gear
-     * write.
-     *
-     * Use {@link FieldPolicyOptions.defaultValueRaw} for a plain value. The two
-     * are mutually exclusive: `'"TBD"'` and `'TBD'` are indistinguishable once
-     * a single option carries both meanings, so the channel must be explicit
-     * rather than sniffed.
-     */
-    defaultValue?: string | null;
-    /**
-     * PLAIN channel: any value, always serialized — strings included. The
-     * constructor-option twin of {@link FieldPolicy.setDefaultValue}, so
-     * `{ defaultValueRaw: 'Net 30' }` stores `'"Net 30"'` rather than the
-     * unparseable literal `Net 30`.
-     */
-    defaultValueRaw?: unknown;
-    visibility?: FieldPolicyVisibility | null;
-    help?: string | null;
-    label?: string | null;
-    displayOrder?: number | null;
-    locked?: boolean | null;
-    updatedBy?: string | null;
-}
-
-/**
- * Scope tier a {@link FieldPolicy} row belongs to.
- *
- * Resolution precedence is code seed → `app` → `tenant` (hierarchy walk,
- * root → leaf) → `user`. Unlike smrt-features (which ships only
- * `global`/`tenant`), the user tier is implemented end to end here — both
- * defaults and visibility resolve through it.
- */
-export declare type FieldPolicyScopeType = 'app' | 'tenant' | 'user';
-
-/**
- * Loader-function DI seam (NOT a container registration): the resolver calls
- * it lazily and treats `null` as "no hierarchy available" (flat-tenant
- * fallback). The default loader dynamic-imports `@happyvertical/smrt-users`
- * and returns `null` when it is not installed.
- */
-export declare type FieldPolicyTenantHierarchyLoader = (options: SmrtClassOptions) => Promise<FieldPolicyTenantHierarchyProvider | null>;
-
-/** Provider returning the root → leaf tenant chain (mirrors smrt-features). */
-export declare interface FieldPolicyTenantHierarchyProvider {
-    getChain(tenantId: string): Promise<FieldPolicyTenantNode[]>;
-}
-
-/** Minimal tenant node consumed by the hierarchy walk (mirrors smrt-features). */
-export declare interface FieldPolicyTenantNode {
-    id: string;
-    inheritPermissions: boolean;
-    cascadePermissions: boolean;
-}
-
-export declare interface FieldPolicyUsersModule {
-    TenantCollection: {
-        create(options: SmrtClassOptions): Promise<{
-            get(criteria: {
-                id: string;
-            }): Promise<FieldPolicyUsersTenantRecord | null>;
-            getAncestorsFromRoot(tenantId: string): Promise<FieldPolicyUsersTenantRecord[]>;
-        }>;
-    };
-}
-
-/**
- * Minimal structural shape of the tenant surface loaded from
- * `@happyvertical/smrt-users` by the default hierarchy loader. Only the
- * permission-cascade fields consumed by the chain walk are modeled.
- */
-export declare interface FieldPolicyUsersTenantRecord {
-    id: string;
-    inheritPermissions?: boolean;
-    cascadePermissions?: boolean;
-}
-
-/**
- * Visibility tier for a field in generated/consuming form UIs.
- *
- * - `basic`: shown before the advanced disclosure
- * - `advanced`: shown behind the advanced disclosure
- * - `hidden`: not rendered (requires the field to be optional or have a
- *   resolved default — the required-field invariant)
- */
-export declare type FieldPolicyVisibility = 'basic' | 'advanced' | 'hidden';
-
-/** Fully merged policy for a single field. */
-export declare interface ResolvedFieldPolicy {
-    fieldName: string;
-    /** True when any layer resolved a default (including an explicit null). */
-    hasDefault: boolean;
-    /** Parsed default value; `undefined` when {@link hasDefault} is false. */
-    defaultValue: unknown;
-    visibility: FieldPolicyVisibility;
-    help: string | null;
-    label: string | null;
-    order: number | null;
-    /** Grouping key — code-seed only (`ui.group`), not overridable by rows. */
-    group: string | null;
-    locked: boolean;
-    /** Mirror of the manifest required flag (nullable fields are optional). */
-    required: boolean;
-    /**
-     * True when the resolver forced `basic` visibility because the field is
-     * required and no usable default resolved (the resolver-side safety net for
-     * the required-field invariant).
-     */
-    visibilityForced?: boolean;
-}
-
-/** Merged policy for every field of one object. */
-export declare interface ResolvedObjectFieldPolicy {
-    objectRef: string;
-    fields: Record<string, ResolvedFieldPolicy>;
-}
-
-export declare interface ResolveFieldPolicyOptions {
-    tenantId?: string | null;
-    userId?: string | null;
-    /**
-     * Database holding `_smrt_field_policies`. Without it, only the code seed
-     * resolves (stored layers are skipped) — the smrt-prompts precedent.
-     */
-    db?: SmrtClassOptions['db'];
-    tenantHierarchyLoader?: FieldPolicyTenantHierarchyLoader;
-}
-
-export { SmrtClassOptions }
-
-export { }
+import { SmrtClassOptions, SmrtObjectOptions } from '@happyvertical/smrt-core';
+/**
+ * Scope tier a {@link FieldPolicy} row belongs to.
+ *
+ * Resolution precedence is code seed → `app` → `tenant` (hierarchy walk,
+ * root → leaf) → `user`. Unlike smrt-features (which ships only
+ * `global`/`tenant`), the user tier is implemented end to end here — both
+ * defaults and visibility resolve through it.
+ */
+export type FieldPolicyScopeType = 'app' | 'tenant' | 'user';
+/**
+ * Visibility tier for a field in generated/consuming form UIs.
+ *
+ * - `basic`: shown before the advanced disclosure
+ * - `advanced`: shown behind the advanced disclosure
+ * - `hidden`: not rendered (requires the field to be optional or have a
+ *   resolved default — the required-field invariant)
+ */
+export type FieldPolicyVisibility = 'basic' | 'advanced' | 'hidden';
+/**
+ * `scopeKey` value for app-scope rows. `scopeKey` exists ONLY so the
+ * `conflictColumns` unique index stays total while `tenantId`/`userId` are
+ * nullable (nullable columns would allow duplicate NULL rows) — the same
+ * trick as `PromptOverride.context`.
+ */
+export declare const APP_FIELD_POLICY_SCOPE_KEY = "__app__";
+export declare const FIELD_POLICY_SCOPE_TYPES: readonly FieldPolicyScopeType[];
+export declare const FIELD_POLICY_VISIBILITIES: readonly FieldPolicyVisibility[];
+export interface FieldPolicyOptions extends SmrtObjectOptions {
+    objectRef?: string;
+    fieldName?: string;
+    scopeType?: FieldPolicyScopeType;
+    tenantId?: string | null;
+    userId?: string | null;
+    /**
+     * ENCODED channel: an already-JSON-encoded default, exactly as the column
+     * stores it (`'"Net 30"'`, `'42'`, `'null'`), or `null` to inherit.
+     *
+     * This is the wire contract: the generated write routes hand the request
+     * body straight to the constructor, and the #2049/#2050 gear posts
+     * `JSON.stringify(draft.defaultValue)`. It must therefore keep meaning
+     * "already encoded" — auto-serializing here would double-encode every gear
+     * write.
+     *
+     * Use {@link FieldPolicyOptions.defaultValueRaw} for a plain value. The two
+     * are mutually exclusive: `'"TBD"'` and `'TBD'` are indistinguishable once
+     * a single option carries both meanings, so the channel must be explicit
+     * rather than sniffed.
+     */
+    defaultValue?: string | null;
+    /**
+     * PLAIN channel: any value, always serialized — strings included. The
+     * constructor-option twin of {@link FieldPolicy.setDefaultValue}, so
+     * `{ defaultValueRaw: 'Net 30' }` stores `'"Net 30"'` rather than the
+     * unparseable literal `Net 30`.
+     */
+    defaultValueRaw?: unknown;
+    visibility?: FieldPolicyVisibility | null;
+    help?: string | null;
+    label?: string | null;
+    displayOrder?: number | null;
+    locked?: boolean | null;
+    updatedBy?: string | null;
+}
+/**
+ * The sparse contribution of one layer (code seed or one stored row).
+ *
+ * `default` is boxed so an explicit JSON `null` default (meaning "default to
+ * null") stays distinguishable from "this layer contributes no default".
+ */
+export interface FieldPolicyDelta {
+    default?: {
+        value: unknown;
+    };
+    visibility?: FieldPolicyVisibility;
+    help?: string;
+    label?: string;
+    order?: number;
+    locked?: boolean;
+}
+/** One layer's contribution to a field's resolved policy (explain variant). */
+export interface FieldPolicyLayerContribution {
+    layer: 'code' | 'app' | 'tenant' | 'user';
+    /** Chain node id for `tenant` layers (root → leaf order). */
+    tenantId?: string;
+    /** User id for the `user` layer. */
+    userId?: string;
+    delta: FieldPolicyDelta;
+}
+/** Fully merged policy for a single field. */
+export interface ResolvedFieldPolicy {
+    fieldName: string;
+    /** True when any layer resolved a default (including an explicit null). */
+    hasDefault: boolean;
+    /** Parsed default value; `undefined` when {@link hasDefault} is false. */
+    defaultValue: unknown;
+    visibility: FieldPolicyVisibility;
+    help: string | null;
+    label: string | null;
+    order: number | null;
+    /** Grouping key — code-seed only (`ui.group`), not overridable by rows. */
+    group: string | null;
+    locked: boolean;
+    /** Mirror of the manifest required flag (nullable fields are optional). */
+    required: boolean;
+    /**
+     * True when the resolver forced `basic` visibility because the field is
+     * required and no usable default resolved (the resolver-side safety net for
+     * the required-field invariant).
+     */
+    visibilityForced?: boolean;
+}
+/** Merged policy for every field of one object. */
+export interface ResolvedObjectFieldPolicy {
+    objectRef: string;
+    fields: Record<string, ResolvedFieldPolicy>;
+}
+/**
+ * Explain variant: merged result plus the ordered per-layer contributions for
+ * each field, so admin/gear UIs (#2049/#2050) never re-derive precedence.
+ * Layers are listed in application order (code, app, tenant chain root → leaf,
+ * user) and contain ONLY contributions that survive into the merged result:
+ * tenant ancestors discarded by a permission-inheritance break and user rows
+ * suppressed by an effective org lock are omitted, so sequentially replaying
+ * the listed deltas reproduces the merged policy.
+ */
+export interface ExplainedObjectFieldPolicy extends ResolvedObjectFieldPolicy {
+    layers: Record<string, FieldPolicyLayerContribution[]>;
+}
+/** Minimal tenant node consumed by the hierarchy walk (mirrors smrt-features). */
+export interface FieldPolicyTenantNode {
+    id: string;
+    inheritPermissions: boolean;
+    cascadePermissions: boolean;
+}
+/** Provider returning the root → leaf tenant chain (mirrors smrt-features). */
+export interface FieldPolicyTenantHierarchyProvider {
+    getChain(tenantId: string): Promise<FieldPolicyTenantNode[]>;
+}
+/**
+ * Loader-function DI seam (NOT a container registration): the resolver calls
+ * it lazily and treats `null` as "no hierarchy available" (flat-tenant
+ * fallback). The default loader dynamic-imports `@happyvertical/smrt-users`
+ * and returns `null` when it is not installed.
+ */
+export type FieldPolicyTenantHierarchyLoader = (options: SmrtClassOptions) => Promise<FieldPolicyTenantHierarchyProvider | null>;
+export interface ResolveFieldPolicyOptions {
+    tenantId?: string | null;
+    userId?: string | null;
+    /**
+     * Database holding `_smrt_field_policies`. Without it, only the code seed
+     * resolves (stored layers are skipped) — the smrt-prompts precedent.
+     */
+    db?: SmrtClassOptions['db'];
+    tenantHierarchyLoader?: FieldPolicyTenantHierarchyLoader;
+    /**
+     * Internal write-validation seam: omit persisted rows while evaluating a
+     * proposed replacement. Excluded resolutions bypass the shared cache so a
+     * projected result can never poison ordinary reads.
+     */
+    excludePolicyIds?: ReadonlySet<string>;
+}
+/**
+ * Minimal structural shape of the tenant surface loaded from
+ * `@happyvertical/smrt-users` by the default hierarchy loader. Only the
+ * permission-cascade fields consumed by the chain walk are modeled.
+ */
+export interface FieldPolicyUsersTenantRecord {
+    id: string;
+    inheritPermissions?: boolean;
+    cascadePermissions?: boolean;
+}
+export interface FieldPolicyUsersModule {
+    TenantCollection: {
+        create(options: SmrtClassOptions): Promise<{
+            get(criteria: {
+                id: string;
+            }): Promise<FieldPolicyUsersTenantRecord | null>;
+            getAncestorsFromRoot(tenantId: string): Promise<FieldPolicyUsersTenantRecord[]>;
+        }>;
+    };
+}
+/** Result shape of the batch resolve action (`FieldPolicyCollection.resolveBatch`). */
+export interface FieldPolicyBatchResult {
+    policies: Record<string, ResolvedObjectFieldPolicy>;
+}
+/** A policy row safe to expose through the context-scoped gear action. */
+export interface FieldPolicyEditorRow {
+    defaultValue: string | null;
+    displayOrder: number | null;
+    fieldName: string;
+    help: string | null;
+    id: string;
+    label: string | null;
+    locked: boolean | null;
+    scopeType: FieldPolicyScopeType;
+    tenantId: string | null;
+    updatedBy: string | null;
+    userId: string | null;
+    visibility: FieldPolicyVisibility | null;
+}
+/** Context-derived authorization state for the field-policy gear. */
+export interface FieldPolicyEditorCapabilities {
+    manage: boolean;
+    personalize: boolean;
+}
+/**
+ * Gear bootstrap response. `policy` is always filtered by the public-field
+ * rail; raw rows and explanation layers appear only for scopes the caller is
+ * authorized to mutate. Row ids are present for reset/delete operations.
+ */
+export interface FieldPolicyEditorState {
+    capabilities: FieldPolicyEditorCapabilities;
+    /**
+     * For the caller's personal layer only, whether removing that layer's
+     * default still leaves a usable default at code/app/tenant precedence.
+     * This intentionally exposes no lower-layer rows or default values.
+     */
+    personalLowerDefaultUsable: Record<string, boolean>;
+    policy: ExplainedObjectFieldPolicy;
+    rows: {
+        app: FieldPolicyEditorRow[];
+        tenant: FieldPolicyEditorRow[];
+        user: FieldPolicyEditorRow[];
+    };
+}
+/** A stored organization row with the immutable audit metadata needed by #2050. */
+export interface FieldPolicyAuditRow extends FieldPolicyEditorRow {
+    objectRef: string;
+    createdAt: string | null;
+    updatedAt: string | null;
+}
+/** Why a persisted policy row is no longer usable by the live registry. */
+export type FieldPolicyDriftReason = 'unknown-object' | 'unknown-field' | 'excluded-field';
+/** Drift is deliberately identity-only: stale values are never serialized. */
+export interface FieldPolicyDriftRow {
+    id: string;
+    objectRef: string;
+    fieldName: string;
+    scopeType: FieldPolicyScopeType;
+    tenantId: string | null;
+    userId: string | null;
+    updatedBy: string | null;
+    createdAt: string | null;
+    updatedAt: string | null;
+    reason: FieldPolicyDriftReason;
+    prunable: boolean;
+}
+/**
+ * Tenant-admin catalog read surface. Foreign user rows are represented only
+ * by counts; their values and identifiers never leave the collection.
+ */
+export interface FieldPolicyAuditSnapshot {
+    orgRows: FieldPolicyAuditRow[];
+    appRows: FieldPolicyAuditRow[];
+    inheritedOrgKeys: Record<string, string[]>;
+    userOverrideCounts: Record<string, Record<string, number>>;
+    driftRows: FieldPolicyDriftRow[];
+    policies: Record<string, ExplainedObjectFieldPolicy>;
+    caller: {
+        tenantId: string | null;
+        userId: string | null;
+        canManageOrg: boolean;
+        canPersonalize: boolean;
+    };
+}
+/** Explicit 403 result used by generated custom-action transports. */
+export interface FieldPolicyEditorStateDenied {
+    code: 'permission_denied';
+    message: string;
+    ok: false;
+    status: 403;
+}
+export type FieldPolicyEditorStateResult = FieldPolicyEditorState | FieldPolicyEditorStateDenied;
+export type { SmrtClassOptions };
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,YAAY,CAAC;AAEpD,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAInE,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EAIrE,CAAC;AAEF,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,+EAA+E;AAC/E,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,0EAA0E;IAC1E,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,qBAAqB,CAAC;IAClC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,mDAAmD;AACnD,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA2B,SAAQ,yBAAyB;IAC3E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;CACxD;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAC7C,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;OAGG;IACH,EAAE,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5B,qBAAqB,CAAC,EAAE,gCAAgC,CAAC;IACzD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE;QAChB,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;YACzC,GAAG,CAAC,QAAQ,EAAE;gBACZ,EAAE,EAAE,MAAM,CAAC;aACZ,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;YACjD,oBAAoB,CAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC;SAC5C,CAAC,CAAC;KACJ,CAAC;CACH;AAED,uFAAuF;AACvF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACrD;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,oBAAoB,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1C;AAED,qEAAqE;AACrE,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,6BAA6B,CAAC;IAC5C;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,EAAE,0BAA0B,CAAC;IACnC,IAAI,EAAE;QACJ,GAAG,EAAE,oBAAoB,EAAE,CAAC;QAC5B,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC/B,IAAI,EAAE,oBAAoB,EAAE,CAAC;KAC9B,CAAC;CACH;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,eAAe,GACf,gBAAgB,CAAC;AAErB,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACrD,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,sEAAsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,CAAC;CACb;AAED,MAAM,MAAM,4BAA4B,GACpC,sBAAsB,GACtB,4BAA4B,CAAC;AAEjC,YAAY,EAAE,gBAAgB,EAAE,CAAC"}