@happyvertical/smrt-profiles 0.54.2 → 0.54.4

package/dist/models/index.d.ts

@@ -1,19 +1,19 @@
 /**
  * SMRT model exports for profiles package
  */
-export { ApiKey, type ApiKeyOptions, type GenerateKeyResult } from './ApiKey';
-export { AuditLog, type AuditLogOptions, type AuditSource } from './AuditLog';
-export { type GenerateTokenResult, MagicLinkToken, type MagicLinkTokenOptions, } from './MagicLinkToken';
-export { NostrIdentity, type NostrIdentityOptions } from './NostrIdentity';
-export { OidcIdentity, type OidcIdentityOptions } from './OidcIdentity';
-export { OidcProfileEmailReservation, type OidcProfileEmailReservationOptions, } from './OidcProfileEmailReservation';
-export { Profile } from './Profile';
-export { isProfileLinkPlatform, normalizeProfileLinkUrl, PROFILE_LINK_MAX_LABEL_LENGTH, PROFILE_LINK_MAX_URL_LENGTH, PROFILE_LINK_PLATFORMS, ProfileLink, type ProfileLinkOptions, type ProfileLinkPlatform, } from './ProfileLink';
-export { ProfileMetadata } from './ProfileMetadata';
-export { ProfileMetafield } from './ProfileMetafield';
-export { ProfileRelationship } from './ProfileRelationship';
-export { ProfileRelationshipTerm } from './ProfileRelationshipTerm';
-export { ProfileRelationshipType } from './ProfileRelationshipType';
-export { ProfileType } from './ProfileType';
-export { Bot, Organization, Person } from './ProfileTypes';
+export { ApiKey, type ApiKeyOptions, type GenerateKeyResult } from "./ApiKey.js";
+export { AuditLog, type AuditLogOptions, type AuditSource } from "./AuditLog.js";
+export { type GenerateTokenResult, MagicLinkToken, type MagicLinkTokenOptions, } from "./MagicLinkToken.js";
+export { NostrIdentity, type NostrIdentityOptions } from "./NostrIdentity.js";
+export { OidcIdentity, type OidcIdentityOptions } from "./OidcIdentity.js";
+export { OidcProfileEmailReservation, type OidcProfileEmailReservationOptions, } from "./OidcProfileEmailReservation.js";
+export { Profile } from "./Profile.js";
+export { isProfileLinkPlatform, normalizeProfileLinkUrl, PROFILE_LINK_MAX_LABEL_LENGTH, PROFILE_LINK_MAX_URL_LENGTH, PROFILE_LINK_PLATFORMS, ProfileLink, type ProfileLinkOptions, type ProfileLinkPlatform, } from "./ProfileLink.js";
+export { ProfileMetadata } from "./ProfileMetadata.js";
+export { ProfileMetafield } from "./ProfileMetafield.js";
+export { ProfileRelationship } from "./ProfileRelationship.js";
+export { ProfileRelationshipTerm } from "./ProfileRelationshipTerm.js";
+export { ProfileRelationshipType } from "./ProfileRelationshipType.js";
+export { ProfileType } from "./ProfileType.js";
+export { Bot, Organization, Person } from "./ProfileTypes.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/models/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EACL,KAAK,mBAAmB,EACxB,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EACL,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,sBAAsB,EACtB,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAU,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,eAAY,CAAC;AAC9E,OAAO,EACL,KAAK,mBAAmB,EACxB,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,qBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAiB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAgB,CAAC;AACxE,OAAO,EACL,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,kCAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAW,CAAC;AACpC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,sBAAsB,EACtB,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,kBAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA2B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA2B,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAe,CAAC;AAE5C,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAgB,CAAC"}

package/dist/smrt-knowledge.json

@@ -3,13 +3,13 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-profiles",
-  "packageVersion": "0.54.2",
+  "packageVersion": "0.54.4",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "071d28f8d1d9fc4c521db14b193cea27305ea70f97b806e7834ee8bcb590901d",
-    "packageJson": "5c7f97df39640cf5cc86349cb51a32f5ce45b1bff4f734aef55c677f25edcda0",
-    "agents": "abb7a0e87fb7aeac9eda85e40d68e9198fc807aa8338004161dcb62923a1078c"
+    "manifest": "af2666e6116f3719ebb954c50cff67409a7b6ea217084260f2e922285850c3ba",
+    "packageJson": "ecd8c37d00698065cdaeb10a6716671b9e85b06f3a9267d3118861fe6e8e556c",
+    "agents": "6f73ea6628f32d4799d6c0f9da4ab98a2ae7c5e7e43e2554b8d874233789e170"
   },
   "exports": [
     ".",
@@ -407,166 +407,62 @@
           "returns": "Promise<AuditLog>"
         }
       ],
-      "surfaces": [
-        {
-          "kind": "api",
-          "name": "auditlogs.findByProfile",
-          "operation": "findByProfile",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/findByProfile",
-          "method": "POST"
-        },
-        {
-          "kind": "api",
-          "name": "auditlogs.findByResource",
-          "operation": "findByResource",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/findByResource",
-          "method": "POST"
-        },
+      "surfaces": [],
+      "withheldSurfaces": [
         {
           "kind": "api",
-          "name": "auditlogs.findByAction",
           "operation": "findByAction",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/findByAction",
-          "method": "POST"
-        },
-        {
-          "kind": "api",
-          "name": "auditlogs.findBySource",
-          "operation": "findBySource",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/findBySource",
-          "method": "POST"
-        },
-        {
-          "kind": "api",
-          "name": "auditlogs.findOnBehalfOf",
-          "operation": "findOnBehalfOf",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/findOnBehalfOf",
-          "method": "POST"
-        },
-        {
-          "kind": "api",
-          "name": "auditlogs.getRecentActivity",
-          "operation": "getRecentActivity",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/getRecentActivity",
-          "method": "POST"
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
           "kind": "api",
-          "name": "auditlogs.getResourceTimeline",
-          "operation": "getResourceTimeline",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-          "path": "/auditlogs/getResourceTimeline",
-          "method": "POST"
-        },
-        {
-          "kind": "cli",
-          "name": "auditlogcollection_findByProfile",
           "operation": "findByProfile",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
-          "kind": "cli",
-          "name": "auditlogcollection_findByResource",
+          "kind": "api",
           "operation": "findByResource",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
-          "kind": "cli",
-          "name": "auditlogcollection_findByAction",
-          "operation": "findByAction",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "cli",
-          "name": "auditlogcollection_findBySource",
+          "kind": "api",
           "operation": "findBySource",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
-          "kind": "cli",
-          "name": "auditlogcollection_findOnBehalfOf",
+          "kind": "api",
           "operation": "findOnBehalfOf",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
-          "kind": "cli",
-          "name": "auditlogcollection_record",
-          "operation": "record",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "cli",
-          "name": "auditlogcollection_getRecentActivity",
+          "kind": "api",
           "operation": "getRecentActivity",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
         {
-          "kind": "cli",
-          "name": "auditlogcollection_getResourceTimeline",
+          "kind": "api",
           "operation": "getResourceTimeline",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_findbyprofile",
-          "operation": "findByProfile",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_findbyresource",
-          "operation": "findByResource",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_findbyaction",
-          "operation": "findByAction",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_findbysource",
-          "operation": "findBySource",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_findonbehalfof",
-          "operation": "findOnBehalfOf",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_record",
-          "operation": "record",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_getrecentactivity",
-          "operation": "getRecentActivity",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlogcollection_getresourcetimeline",
-          "operation": "getResourceTimeline",
-          "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-        }
-      ],
-      "withheldSurfaces": [
         {
           "kind": "api",
           "operation": "record",
-          "code": "not-wireable",
-          "reason": "not routed: `options` contains a member where `Profile` is a model class instance, not JSON data",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
         }
       ],
@@ -3057,6 +2953,20 @@
           "columnType": "TEXT",
           "default": ""
         },
+        {
+          "name": "reason",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT",
+          "default": ""
+        },
+        {
+          "name": "changes",
+          "type": "json",
+          "required": false,
+          "columnType": "JSON",
+          "default": {}
+        },
         {
           "name": "resourceType",
           "type": "text",
@@ -3071,6 +2981,13 @@
           "columnType": "TEXT",
           "default": ""
         },
+        {
+          "name": "occurredAt",
+          "type": "datetime",
+          "required": false,
+          "columnType": "TIMESTAMP",
+          "default": "current_timestamp"
+        },
         {
           "name": "source",
           "type": "text",
@@ -3151,69 +3068,34 @@
         "slug",
         "context"
       ],
-      "surfaces": [
-        {
-          "kind": "api",
-          "name": "auditlogs.list",
-          "operation": "list",
-          "objectName": "@happyvertical/smrt-profiles:AuditLog",
-          "path": "/auditlogs",
-          "method": "GET"
-        },
-        {
-          "kind": "api",
-          "name": "auditlogs.get",
-          "operation": "get",
-          "objectName": "@happyvertical/smrt-profiles:AuditLog",
-          "path": "/auditlogs/[id]",
-          "method": "GET"
-        },
-        {
-          "kind": "cli",
-          "name": "auditlog_list",
-          "operation": "list",
-          "objectName": "@happyvertical/smrt-profiles:AuditLog"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlog_list",
-          "operation": "list",
-          "objectName": "@happyvertical/smrt-profiles:AuditLog"
-        },
-        {
-          "kind": "mcp",
-          "name": "auditlog_get",
-          "operation": "get",
-          "objectName": "@happyvertical/smrt-profiles:AuditLog"
-        }
-      ],
+      "surfaces": [],
       "withheldSurfaces": [
         {
           "kind": "api",
           "operation": "getEffectiveActor",
-          "code": "not-included",
-          "reason": "not listed in api.include",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLog"
         },
         {
           "kind": "api",
           "operation": "getOnBehalfOf",
-          "code": "not-included",
-          "reason": "not listed in api.include",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLog"
         },
         {
           "kind": "api",
           "operation": "getProfile",
-          "code": "not-included",
-          "reason": "not listed in api.include",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLog"
         },
         {
           "kind": "api",
           "operation": "record",
-          "code": "not-included",
-          "reason": "not listed in api.include",
+          "code": "api-disabled",
+          "reason": "api is disabled",
           "objectName": "@happyvertical/smrt-profiles:AuditLog"
         }
       ],
@@ -7594,7 +7476,7 @@
           "kind": "api",
           "operation": "recordAction",
           "code": "not-wireable",
-          "reason": "not routed: `options` contains a member where every branch of `Profile | null` is unreachable over HTTP (`Profile` is a model class instance, not JSON data)",
+          "reason": "not routed: the declared type of `options` could not be resolved by the scanner",
           "objectName": "@happyvertical/smrt-profiles:Person"
         },
         {
@@ -8690,7 +8572,7 @@
           "kind": "api",
           "operation": "recordAction",
           "code": "not-wireable",
-          "reason": "not routed: `options` contains a member where every branch of `Profile | null` is unreachable over HTTP (`Profile` is a model class instance, not JSON data)",
+          "reason": "not routed: the declared type of `options` could not be resolved by the scanner",
           "objectName": "@happyvertical/smrt-profiles:Organization"
         },
         {
@@ -9786,7 +9668,7 @@
           "kind": "api",
           "operation": "recordAction",
           "code": "not-wireable",
-          "reason": "not routed: `options` contains a member where every branch of `Profile | null` is unreachable over HTTP (`Profile` is a model class instance, not JSON data)",
+          "reason": "not routed: the declared type of `options` could not be resolved by the scanner",
           "objectName": "@happyvertical/smrt-profiles:Bot"
         },
         {
@@ -9973,158 +9855,6 @@
       "operation": "cleanupExpired",
       "objectName": "@happyvertical/smrt-profiles:ApiKeyCollection"
     },
-    {
-      "kind": "api",
-      "name": "auditlogs.findByProfile",
-      "operation": "findByProfile",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/findByProfile",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.findByResource",
-      "operation": "findByResource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/findByResource",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.findByAction",
-      "operation": "findByAction",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/findByAction",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.findBySource",
-      "operation": "findBySource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/findBySource",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.findOnBehalfOf",
-      "operation": "findOnBehalfOf",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/findOnBehalfOf",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.getRecentActivity",
-      "operation": "getRecentActivity",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/getRecentActivity",
-      "method": "POST"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.getResourceTimeline",
-      "operation": "getResourceTimeline",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection",
-      "path": "/auditlogs/getResourceTimeline",
-      "method": "POST"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_findByProfile",
-      "operation": "findByProfile",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_findByResource",
-      "operation": "findByResource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_findByAction",
-      "operation": "findByAction",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_findBySource",
-      "operation": "findBySource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_findOnBehalfOf",
-      "operation": "findOnBehalfOf",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_record",
-      "operation": "record",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_getRecentActivity",
-      "operation": "getRecentActivity",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlogcollection_getResourceTimeline",
-      "operation": "getResourceTimeline",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_findbyprofile",
-      "operation": "findByProfile",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_findbyresource",
-      "operation": "findByResource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_findbyaction",
-      "operation": "findByAction",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_findbysource",
-      "operation": "findBySource",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_findonbehalfof",
-      "operation": "findOnBehalfOf",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_record",
-      "operation": "record",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_getrecentactivity",
-      "operation": "getRecentActivity",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlogcollection_getresourcetimeline",
-      "operation": "getResourceTimeline",
-      "objectName": "@happyvertical/smrt-profiles:AuditLogCollection"
-    },
     {
       "kind": "api",
       "name": "magiclinktokens.findByTokenHash",
@@ -11325,40 +11055,6 @@
       "operation": "get",
       "objectName": "@happyvertical/smrt-profiles:ApiKey"
     },
-    {
-      "kind": "api",
-      "name": "auditlogs.list",
-      "operation": "list",
-      "objectName": "@happyvertical/smrt-profiles:AuditLog",
-      "path": "/auditlogs",
-      "method": "GET"
-    },
-    {
-      "kind": "api",
-      "name": "auditlogs.get",
-      "operation": "get",
-      "objectName": "@happyvertical/smrt-profiles:AuditLog",
-      "path": "/auditlogs/[id]",
-      "method": "GET"
-    },
-    {
-      "kind": "cli",
-      "name": "auditlog_list",
-      "operation": "list",
-      "objectName": "@happyvertical/smrt-profiles:AuditLog"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlog_list",
-      "operation": "list",
-      "objectName": "@happyvertical/smrt-profiles:AuditLog"
-    },
-    {
-      "kind": "mcp",
-      "name": "auditlog_get",
-      "operation": "get",
-      "objectName": "@happyvertical/smrt-profiles:AuditLog"
-    },
     {
       "kind": "api",
       "name": "magiclinktokens.list",
@@ -14475,5 +14171,5 @@
     "polymorphicAssociations": 0,
     "uuidColumns": 91
   },
-  "agentDoc": "# @happyvertical/smrt-profiles\n\nCentral identity system with multi-auth, relationships, controlled metadata, and audit logging.\n\n## Models\n\n- **Profile** (STI base → Bot, Organization, Person): email (optional; identity uniqueness is arbitrated by `oidc_profile_email_reservations.email_key`, not a DB constraint — legacy duplicates are tolerated and fail closed, #2359), readonly indexed `emailKey` derived with `normalizeIdentityEmail()` for adapter-independent identity lookup, `typeId` FK to ProfileType, plus a `metadata` `@oneToMany('ProfileMetadata')` relationship for controlled per-profile values.\n- **ProfileAsset**: dedicated owned-asset join in `profile_assets` with `relationship` and `sortOrder`.\n- **ProfileLink**: ordered web links in `profile_links` (`platform` from `PROFILE_LINK_PLATFORMS`, validated http(s) `url`, optional `label`, `sortOrder`). `profileId` FK is `onDelete: 'CASCADE'`. Slug is the id (never url/label, so a new link cannot adopt another row through the natural key). Write through `ProfileLinkCollection.replaceForProfile()` / `reorder()` (one transaction each; resolve the profile in the current tenant context and stamp its tenant) or `Profile.setLinks()` / `getLinks()`.\n- **Profile.isPublic**: optional public-figure flag (boolean, default false). Records the fact only; consumers decide visibility.\n- **ProfileRelationship**: bidirectional — creating one auto-creates reciprocal inverse. `contextProfileId` for tertiary relationships. `ProfileRelationshipTerm` tracks start/end dates.\n- **ProfileMetafield**: controlled vocabulary with `validationSchema`. **ProfileMetadata**: per-profile values linked to metafields. `addMetadata()` stamps new rows with the profile's `tenantId` (never rely on auto-population, which super-admin/system context skips, #3235) and resolves the metafield as profile-tenant first, then global, never another tenant's.\n- **AuditLog**: action, resourceType/Id, `source` (web/cli/ci/webhook/mcp), `onBehalfOfId` for CI pass-through identity. `allowSuperAdminBypass: true`.\n\n## Auth Methods\n\n| Model | Pattern |\n|-------|---------|\n| NostrIdentity | Encrypted keypair (AES-256-GCM). Requires `SERVER_MASTER_SECRET` env var for decryption. NIP-05 address generation. |\n| OidcIdentity | Multiple issuers (Keycloak/Google/GitHub). Lookup by `issuer + subject` pair. Transactional provisioning derives the readonly nullable unique `identityKey` and backfills legacy rows. |\n| ApiKey | SHA-256 hashed. **Plaintext returned once only** on `generate()`. `keyPrefix` for identification. Scope-based with expiry. |\n| MagicLinkToken | One-time token with expiry for passwordless auth. |\n\n## Identity Resolution\n\nAuth helpers in `src/auth/` build profiles from external identity claims:\n\n- `resolveIdentity()` — top-level dispatcher that returns/creates a Profile from Nostr signatures, OIDC claims, magic link tokens, or API keys.\n- `createProfileFromOidc(claims, provider, options)` — creates `Profile` + `OidcIdentity` for first-time OIDC sign-in using a transaction-capable root database in `options.db`.\n- `ProfileCollection.findUniqueGlobalPersonByEmail(email)` — supported\n  verified-identity lookup; fails closed on tenant-scoped, non-Person, or\n  duplicate case-insensitive matches.\n- `ProfileCollection.requireCanonicalGlobalPerson(profileId, email?)` —\n  validates an application-selected Profile against the same canonical global\n  Person invariant.\n- `ProfileCollection.reserveCanonicalIdentityEmail(profileId, email?)` —\n  validates and synchronizes the private unique\n  `oidc_profile_email_reservations.email_key` used as the database arbiter for\n  concurrent external-identity provisioning. Omitting `email` uses the\n  Profile's stored address, moving or removing an existing reservation as the\n  canonical Profile changes.\n- `createProfileFromNostr(email, nostrData)` — creates `Profile` + `NostrIdentity` for Nostr-authenticated users.\n\n## Agent (bot) profiles (#2995)\n\nAn automated agent is an author, and every authoring seam in the framework\n(`ChatMessage.senderProfileId`, `ChatParticipant.profileId`, a persona's\n`actsAsProfileId`) is a `crossPackageRef` to `Profile` — a native uuid column on\nPostgreSQL/DuckDB. A slug-style agent id is therefore not a representable author\n(`22P02`). `src/agent-profile.ts` is the owning-package API that turns one into\na real Profile so no consumer mints bot profiles itself and no uuid column is\nweakened to text:\n\n- `resolveAgentProfile(profiles, { agentId, tenantId, name? })` /\n  `resolveAgentProfileId(...)` — resolve, creating on first use, the `bot`\n  Profile an agent authors as. Idempotent and tenant-bound: identity is keyed on\n  `(tenantId, slug = agentId, context = AGENT_PROFILE_CONTEXT)`, matching the\n  model's `(tenant_id, slug, context, _meta_type)` unique key, so an agent id\n  resolves to a distinct profile per tenant and never collides with a\n  person/organization sharing the slug. Classification is the `bot` ProfileType\n  (`AGENT_PROFILE_TYPE_SLUG`), created on demand. Parallel first use converges\n  on the natural key rather than on whoever's INSERT won (each attempt re-reads\n  before and after writing), which matters because NULLs are distinct in the\n  `(tenant_id, slug, context)` unique index, so an untenanted agent is not\n  arbitrated by the database (smrt#2360). Pinned against real PostgreSQL by\n  `src/__tests__/agent-profile-postgres.test.ts`\n  (`pnpm --filter @happyvertical/smrt-profiles test:postgres`).\n\nFirst consumer: `@happyvertical/smrt-chat`'s `ChatService`.\n\n## Key Methods\n\n- `Profile.getAssets()` / `addAsset()` / `removeAsset()` and the matching `ProfileCollection` wrappers — canonical owned asset helpers backed by `profile_assets`.\n- `Profile.addMetadata(metafieldSlug, value)` / `Profile.getMetadata()` — validates against metafield schema. `ProfileCollection.batchGetMetadata()` / `batchUpdateMetadata()` for bulk reads/writes.\n- `Profile.getRelationships({ direction: 'from'|'to'|'all' })` — direction matters.\n- `Profile.getRelationshipsFrom()` / `getRelationshipsTo()` — R10-generated `@oneToMany` accessors. ProfileRelationship has two FKs back to Profile, so each `@oneToMany` annotates its inverse explicitly (`{ foreignKey: 'fromProfileId' }` / `'toProfileId'`). Return raw `ProfileRelationship[]`; use `getRelationships()` for slug/direction filtering.\n- AI: `generateBio()` (uses `smrtProfiles.profile.generateBio` prompt via `@happyvertical/smrt-prompts`), `matches(criteria)` (delegates to `is()`).\n\n## Prompt Registry\n\n`generateBio()` is registered with `@happyvertical/smrt-prompts` so tenants can override template/model/params at runtime:\n\n```typescript\nimport { smrtProfilesGenerateBioPrompt } from '@happyvertical/smrt-profiles';\n// key: 'smrtProfiles.profile.generateBio'\n```\n\n## Gotchas\n\n- **SERVER_MASTER_SECRET required** for Nostr private key decryption — centralized key management\n- **API key never returned again**: `ApiKey.generate()` returns plaintext once; only `keyPrefix` visible later\n- **OIDC unique per issuer+subject**: same subject from different issuers =\n  different identities. Both claims are opaque and case-sensitive; preserve\n  exact whitespace after using trim only to reject blank values.\n- **OIDC identity mutations are trusted-only**: generated REST, MCP, and CLI\n  surfaces are read-only. Link or update identities through transactional\n  provisioning APIs so callers cannot rebind issuer/subject authority to an\n  arbitrary Profile. Deprecated `OidcIdentity.findOrCreate()` preserves only\n  transaction-safe exact-link reuse and refuses to create new links;\n  `OidcIdentityCollection.linkToProfile()` and `Profile.linkOidcIdentity()`\n  delegate to that same non-creating compatibility path.\n- **Apply schema migrations for identity race keys**: run `smrt db:status`,\n  `smrt db:migrate`, then `smrt db:status` before deploying. Transactional OIDC\n  provisioning populates `OidcIdentity.identityKey` and\n  `oidc_profile_email_reservations`; legacy rows reserve an address only after\n  safe validation. Stop/upgrade old Profile writers, then run the public,\n  transactional and idempotent `backfillProfileEmailKeys(db)` from one deploy\n  process. Verified-email provisioning and public email-key lookup require the\n  standard `_smrt_backfills` readiness marker and fail closed immediately when\n  it is absent. This keeps table scans in the explicit deploy step; runtime\n  reads use the indexed key and validate only returned candidates.\n- **Public OIDC provisioning requires transactions**:\n  `createProfileFromOidc()` owns a root transaction or uses a savepoint on an\n  already-bound handle. Root adapters must expose `beginTransaction`;\n  transaction-only handles are ambiguous and fail closed. Pass the root\n  database for adapters without nested savepoints, including DuckDB;\n  provisioning fails before durable writes if neither path is safe. Trusted\n  framework packages use the private\n  `@happyvertical/smrt-profiles/internal/oidc-provisioning` subpath instead of\n  duplicating adapter probing, locking, or retry policy, and supply both exact\n  issuer/subject and normalized-email lock keys in deterministic order. The\n  coordinator additionally serializes every root-handle statement it owns per\n  database URL on SQLite/DuckDB — shared `_smrt_backfills` initialization, the\n  provisioning transaction, and the post-commit rebind — because those adapters\n  multiplex one native connection and cannot overlap unrelated root\n  transactions safely. **Never overlap two statements on one such handle,\n  transaction-bound or not** — no `Promise.all` over reads, not even\n  primary-key rebinds — because DuckDB fails the losing prepared statement or\n  aborts the process outright. It retries\n  bounded PostgreSQL deadlock/serialization failures. New OIDC Profiles use per-profile,\n  non-semantic slugs so duplicate display names never invoke natural-key upsert.\n  Caller-owned transactions never execute `_smrt_backfills` DDL; paths that\n  perform canonical email lookup or reservation require the table to already\n  exist or the caller must retry with the root database. Exact issuer/subject\n  reuse skips the email-key readiness-marker lookup, but root coordination still\n  initializes the shared tracker table. Caller-owned exact reuse does not\n  consult the tracker and therefore does not require that table.\n- **Profile-only OIDC linking fails closed on existing email matches**:\n  the typed canonical scenario contract is\n  `src/testing/oidcProvisioningDecisionMatrix.ts`, executed by both Profiles\n  and Users tests; keep public docs pointed at it instead of adding a second\n  behavioral table.\n  `createProfileFromOidc()` preserves exact issuer/subject reuse, including\n  legacy tenant-scoped and non-Person links, but profiles cannot prove whether a\n  User owns a same-email Profile. New identities therefore never attach to an\n  existing email match through this helper; User/session provisioning still\n  rejects unsafe linked Profiles before creating authentication state. Use\n  `UserCollection.getOrCreateFromOidc()` for owner-aware verified-email reuse and\n  its supported transaction-bound hooks. A pre-provisioned owned Person remains\n  fail-closed unless the application explicitly uses `authorizeProfileOwner`\n  to select both the canonical Profile and its existing approved sole owner;\n  the users package revalidates those IDs, emails, and identity authority in\n  the provisioning transaction.\n- **Email storage and identity matching differ**: `Profile.email` has an\n  exact-value DB constraint. Identity boundaries query readonly indexed\n  `Profile.emailKey`, derived by the shared TypeScript\n  `normalizeIdentityEmail()` helper rather than adapter-specific SQL casing or\n  trimming, and deliberately fail closed on duplicate normalized keys.\n- **Manifest objects must remain root-importable**: the non-API\n  `OidcProfileEmailReservation` model and collection are public root exports\n  because generated consumer registration imports every advertised manifest\n  symbol from `@happyvertical/smrt-profiles`. Release-pack validation imports\n  the actual generated register file from the packed tarball.\n- **Optional tenancy** on Profile; AuditLog allows super-admin bypass\n"
+  "agentDoc": "# @happyvertical/smrt-profiles\n\nCentral identity system with multi-auth, relationships, controlled metadata, and audit logging.\n\n## Models\n\n- **Profile** (STI base → Bot, Organization, Person): email (optional; identity uniqueness is arbitrated by `oidc_profile_email_reservations.email_key`, not a DB constraint — legacy duplicates are tolerated and fail closed, #2359), readonly indexed `emailKey` derived with `normalizeIdentityEmail()` for adapter-independent identity lookup, `typeId` FK to ProfileType, plus a `metadata` `@oneToMany('ProfileMetadata')` relationship for controlled per-profile values.\n- **ProfileAsset**: dedicated owned-asset join in `profile_assets` with `relationship` and `sortOrder`.\n- **ProfileLink**: ordered web links in `profile_links` (`platform` from `PROFILE_LINK_PLATFORMS`, validated http(s) `url`, optional `label`, `sortOrder`). `profileId` FK is `onDelete: 'CASCADE'`. Slug is the id (never url/label, so a new link cannot adopt another row through the natural key). Write through `ProfileLinkCollection.replaceForProfile()` / `reorder()` (one transaction each; resolve the profile in the current tenant context and stamp its tenant) or `Profile.setLinks()` / `getLinks()`.\n- **Profile.isPublic**: optional public-figure flag (boolean, default false). Records the fact only; consumers decide visibility.\n- **ProfileRelationship**: bidirectional — creating one auto-creates reciprocal inverse. `contextProfileId` for tertiary relationships. `ProfileRelationshipTerm` tracks start/end dates.\n- **ProfileMetafield**: controlled vocabulary with `validationSchema`. **ProfileMetadata**: per-profile values linked to metafields. `addMetadata()` stamps new rows with the profile's `tenantId` (never rely on auto-population, which super-admin/system context skips, #3235) and resolves the metafield as profile-tenant first, then global, never another tenant's.\n- **AuditLog**: sensitive audit persistence with actor, action, reason, before/after `changes`, indexed `occurredAt`, resourceType/Id, source, and delegated identity. No generated read routes. `createAuditWriter`, consumer-authorized `readAuditTrail`, and bounded `pruneAuditTrail` live in `src/audit-trail.ts`; see [audit contract](../../docs/content/audit-trail.md).\n\n## Auth Methods\n\n| Model | Pattern |\n|-------|---------|\n| NostrIdentity | Encrypted keypair (AES-256-GCM). Requires `SERVER_MASTER_SECRET` env var for decryption. NIP-05 address generation. |\n| OidcIdentity | Multiple issuers (Keycloak/Google/GitHub). Lookup by `issuer + subject` pair. Transactional provisioning derives the readonly nullable unique `identityKey` and backfills legacy rows. |\n| ApiKey | SHA-256 hashed. **Plaintext returned once only** on `generate()`. `keyPrefix` for identification. Scope-based with expiry. |\n| MagicLinkToken | One-time token with expiry for passwordless auth. |\n\n## Identity Resolution\n\nAuth helpers in `src/auth/` build profiles from external identity claims:\n\n- `resolveIdentity()` — top-level dispatcher that returns/creates a Profile from Nostr signatures, OIDC claims, magic link tokens, or API keys.\n- `createProfileFromOidc(claims, provider, options)` — creates `Profile` + `OidcIdentity` for first-time OIDC sign-in using a transaction-capable root database in `options.db`.\n- `ProfileCollection.findUniqueGlobalPersonByEmail(email)` — supported\n  verified-identity lookup; fails closed on tenant-scoped, non-Person, or\n  duplicate case-insensitive matches.\n- `ProfileCollection.requireCanonicalGlobalPerson(profileId, email?)` —\n  validates an application-selected Profile against the same canonical global\n  Person invariant.\n- `ProfileCollection.reserveCanonicalIdentityEmail(profileId, email?)` —\n  validates and synchronizes the private unique\n  `oidc_profile_email_reservations.email_key` used as the database arbiter for\n  concurrent external-identity provisioning. Omitting `email` uses the\n  Profile's stored address, moving or removing an existing reservation as the\n  canonical Profile changes.\n- `createProfileFromNostr(email, nostrData)` — creates `Profile` + `NostrIdentity` for Nostr-authenticated users.\n\n## Agent (bot) profiles (#2995)\n\nAn automated agent is an author, and every authoring seam in the framework\n(`ChatMessage.senderProfileId`, `ChatParticipant.profileId`, a persona's\n`actsAsProfileId`) is a `crossPackageRef` to `Profile` — a native uuid column on\nPostgreSQL/DuckDB. A slug-style agent id is therefore not a representable author\n(`22P02`). `src/agent-profile.ts` is the owning-package API that turns one into\na real Profile so no consumer mints bot profiles itself and no uuid column is\nweakened to text:\n\n- `resolveAgentProfile(profiles, { agentId, tenantId, name? })` /\n  `resolveAgentProfileId(...)` — resolve, creating on first use, the `bot`\n  Profile an agent authors as. Idempotent and tenant-bound: identity is keyed on\n  `(tenantId, slug = agentId, context = AGENT_PROFILE_CONTEXT)`, matching the\n  model's `(tenant_id, slug, context, _meta_type)` unique key, so an agent id\n  resolves to a distinct profile per tenant and never collides with a\n  person/organization sharing the slug. Classification is the `bot` ProfileType\n  (`AGENT_PROFILE_TYPE_SLUG`), created on demand. Parallel first use converges\n  on the natural key rather than on whoever's INSERT won (each attempt re-reads\n  before and after writing), which matters because NULLs are distinct in the\n  `(tenant_id, slug, context)` unique index, so an untenanted agent is not\n  arbitrated by the database (smrt#2360). Pinned against real PostgreSQL by\n  `src/__tests__/agent-profile-postgres.test.ts`\n  (`pnpm --filter @happyvertical/smrt-profiles test:postgres`).\n\nFirst consumer: `@happyvertical/smrt-chat`'s `ChatService`.\n\n## Key Methods\n\n- `Profile.getAssets()` / `addAsset()` / `removeAsset()` and the matching `ProfileCollection` wrappers — canonical owned asset helpers backed by `profile_assets`.\n- `Profile.addMetadata(metafieldSlug, value)` / `Profile.getMetadata()` — validates against metafield schema. `ProfileCollection.batchGetMetadata()` / `batchUpdateMetadata()` for bulk reads/writes.\n- `Profile.getRelationships({ direction: 'from'|'to'|'all' })` — direction matters.\n- `Profile.getRelationshipsFrom()` / `getRelationshipsTo()` — R10-generated `@oneToMany` accessors. ProfileRelationship has two FKs back to Profile, so each `@oneToMany` annotates its inverse explicitly (`{ foreignKey: 'fromProfileId' }` / `'toProfileId'`). Return raw `ProfileRelationship[]`; use `getRelationships()` for slug/direction filtering.\n- AI: `generateBio()` (uses `smrtProfiles.profile.generateBio` prompt via `@happyvertical/smrt-prompts`), `matches(criteria)` (delegates to `is()`).\n\n## Prompt Registry\n\n`generateBio()` is registered with `@happyvertical/smrt-prompts` so tenants can override template/model/params at runtime:\n\n```typescript\nimport { smrtProfilesGenerateBioPrompt } from '@happyvertical/smrt-profiles';\n// key: 'smrtProfiles.profile.generateBio'\n```\n\n## Gotchas\n\n- **SERVER_MASTER_SECRET required** for Nostr private key decryption — centralized key management\n- **API key never returned again**: `ApiKey.generate()` returns plaintext once; only `keyPrefix` visible later\n- **OIDC unique per issuer+subject**: same subject from different issuers =\n  different identities. Both claims are opaque and case-sensitive; preserve\n  exact whitespace after using trim only to reject blank values.\n- **OIDC identity mutations are trusted-only**: generated REST, MCP, and CLI\n  surfaces are read-only. Link or update identities through transactional\n  provisioning APIs so callers cannot rebind issuer/subject authority to an\n  arbitrary Profile. Deprecated `OidcIdentity.findOrCreate()` preserves only\n  transaction-safe exact-link reuse and refuses to create new links;\n  `OidcIdentityCollection.linkToProfile()` and `Profile.linkOidcIdentity()`\n  delegate to that same non-creating compatibility path.\n- **Apply schema migrations for identity race keys**: run `smrt db:status`,\n  `smrt db:migrate`, then `smrt db:status` before deploying. Transactional OIDC\n  provisioning populates `OidcIdentity.identityKey` and\n  `oidc_profile_email_reservations`; legacy rows reserve an address only after\n  safe validation. Stop/upgrade old Profile writers, then run the public,\n  transactional and idempotent `backfillProfileEmailKeys(db)` from one deploy\n  process. Verified-email provisioning and public email-key lookup require the\n  standard `_smrt_backfills` readiness marker and fail closed immediately when\n  it is absent. This keeps table scans in the explicit deploy step; runtime\n  reads use the indexed key and validate only returned candidates.\n- **Public OIDC provisioning requires transactions**:\n  `createProfileFromOidc()` owns a root transaction or uses a savepoint on an\n  already-bound handle. Root adapters must expose `beginTransaction`;\n  transaction-only handles are ambiguous and fail closed. Pass the root\n  database for adapters without nested savepoints, including DuckDB;\n  provisioning fails before durable writes if neither path is safe. Trusted\n  framework packages use the private\n  `@happyvertical/smrt-profiles/internal/oidc-provisioning` subpath instead of\n  duplicating adapter probing, locking, or retry policy, and supply both exact\n  issuer/subject and normalized-email lock keys in deterministic order. The\n  coordinator additionally serializes every root-handle statement it owns per\n  database URL on SQLite/DuckDB — shared `_smrt_backfills` initialization, the\n  provisioning transaction, and the post-commit rebind — because those adapters\n  multiplex one native connection and cannot overlap unrelated root\n  transactions safely. **Never overlap two statements on one such handle,\n  transaction-bound or not** — no `Promise.all` over reads, not even\n  primary-key rebinds — because DuckDB fails the losing prepared statement or\n  aborts the process outright. It retries\n  bounded PostgreSQL deadlock/serialization failures. New OIDC Profiles use per-profile,\n  non-semantic slugs so duplicate display names never invoke natural-key upsert.\n  Caller-owned transactions never execute `_smrt_backfills` DDL; paths that\n  perform canonical email lookup or reservation require the table to already\n  exist or the caller must retry with the root database. Exact issuer/subject\n  reuse skips the email-key readiness-marker lookup, but root coordination still\n  initializes the shared tracker table. Caller-owned exact reuse does not\n  consult the tracker and therefore does not require that table.\n- **Profile-only OIDC linking fails closed on existing email matches**:\n  the typed canonical scenario contract is\n  `src/testing/oidcProvisioningDecisionMatrix.ts`, executed by both Profiles\n  and Users tests; keep public docs pointed at it instead of adding a second\n  behavioral table.\n  `createProfileFromOidc()` preserves exact issuer/subject reuse, including\n  legacy tenant-scoped and non-Person links, but profiles cannot prove whether a\n  User owns a same-email Profile. New identities therefore never attach to an\n  existing email match through this helper; User/session provisioning still\n  rejects unsafe linked Profiles before creating authentication state. Use\n  `UserCollection.getOrCreateFromOidc()` for owner-aware verified-email reuse and\n  its supported transaction-bound hooks. A pre-provisioned owned Person remains\n  fail-closed unless the application explicitly uses `authorizeProfileOwner`\n  to select both the canonical Profile and its existing approved sole owner;\n  the users package revalidates those IDs, emails, and identity authority in\n  the provisioning transaction.\n- **Email storage and identity matching differ**: `Profile.email` has an\n  exact-value DB constraint. Identity boundaries query readonly indexed\n  `Profile.emailKey`, derived by the shared TypeScript\n  `normalizeIdentityEmail()` helper rather than adapter-specific SQL casing or\n  trimming, and deliberately fail closed on duplicate normalized keys.\n- **Manifest objects must remain root-importable**: the non-API\n  `OidcProfileEmailReservation` model and collection are public root exports\n  because generated consumer registration imports every advertised manifest\n  symbol from `@happyvertical/smrt-profiles`. Release-pack validation imports\n  the actual generated register file from the packed tarball.\n- **Optional tenancy** on Profile; AuditLog allows super-admin bypass\n"
 }