@objectstack/lint 17.0.0-rc.0 → 17.0.0-rc.1

package/dist/index.cjs

@@ -20,7 +20,14 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ACTION_BODY_WRITE_EXCLUSIONS: () => ACTION_BODY_WRITE_EXCLUSIONS,
+  ACTION_BODY_WRITE_PATTERNS: () => ACTION_BODY_WRITE_PATTERNS,
+  ACTION_BODY_WRITE_PATTERN_IDS: () => ACTION_BODY_WRITE_PATTERN_IDS,
+  ACTION_BODY_WRITE_UNKNOWN_FIELD: () => ACTION_BODY_WRITE_UNKNOWN_FIELD,
   ACTION_NAME_UNDEFINED: () => ACTION_NAME_UNDEFINED,
+  ACTION_RECORD_WRITE_DISCARDED: () => ACTION_RECORD_WRITE_DISCARDED,
+  ACTION_RECORD_WRITE_PATTERNS: () => ACTION_RECORD_WRITE_PATTERNS,
+  ACTION_RECORD_WRITE_PATTERN_IDS: () => ACTION_RECORD_WRITE_PATTERN_IDS,
   AGENT_AUTHORING_WITHDRAWN: () => AGENT_AUTHORING_WITHDRAWN,
   AI_SKILL_SURFACE_MISMATCH: () => AI_SKILL_SURFACE_MISMATCH,
   AI_SKILL_TOOL_UNRESOLVED: () => AI_SKILL_TOOL_UNRESOLVED,
@@ -47,13 +54,20 @@ __export(index_exports, {
   FIELD_GROUP_UNDECLARED: () => FIELD_GROUP_UNDECLARED,
   FILTER_TOKEN_UNKNOWN: () => FILTER_TOKEN_UNKNOWN,
   FLOW_DRAFT_STATUS_AMBIGUOUS: () => FLOW_DRAFT_STATUS_AMBIGUOUS,
+  FLOW_NODE_WRITE_UNKNOWN_FIELD: () => FLOW_NODE_WRITE_UNKNOWN_FIELD,
   FLOW_TEMPLATE_LOOKUP_TRAVERSAL: () => FLOW_TEMPLATE_LOOKUP_TRAVERSAL,
   FLOW_TEMPLATE_UNKNOWN_FIELD: () => FLOW_TEMPLATE_UNKNOWN_FIELD,
   FLOW_TRIGGER_UNKNOWN_OBJECT: () => FLOW_TRIGGER_UNKNOWN_OBJECT,
   FLOW_UPDATE_READONLY_FIELD: () => FLOW_UPDATE_READONLY_FIELD,
   FLOW_UPDATE_READONLY_WHEN_FIELD: () => FLOW_UPDATE_READONLY_WHEN_FIELD,
+  FLOW_WRITE_NODE_TYPES: () => FLOW_WRITE_NODE_TYPES,
+  FLOW_WRITE_NODE_TYPES_DEFERRED: () => FLOW_WRITE_NODE_TYPES_DEFERRED,
   FORM_COLSPAN_ABSOLUTE: () => FORM_COLSPAN_ABSOLUTE,
   FORM_FIELD_UNKNOWN: () => FORM_FIELD_UNKNOWN,
+  HOOK_BODY_WRITE_EXCLUSIONS: () => HOOK_BODY_WRITE_EXCLUSIONS,
+  HOOK_BODY_WRITE_PATTERNS: () => HOOK_BODY_WRITE_PATTERNS,
+  HOOK_BODY_WRITE_PATTERN_IDS: () => HOOK_BODY_WRITE_PATTERN_IDS,
+  HOOK_BODY_WRITE_UNKNOWN_FIELD: () => HOOK_BODY_WRITE_UNKNOWN_FIELD,
   LIST_VIEW_FILTERS_IN_VIEWS_MODE: () => LIST_VIEW_FILTERS_IN_VIEWS_MODE,
   MEASURE_AGGREGATE_INCOHERENT: () => MEASURE_AGGREGATE_INCOHERENT,
   NAV_OBJECT_UNGRANTED: () => NAV_OBJECT_UNGRANTED,
@@ -67,6 +81,7 @@ __export(index_exports, {
   REACT_CHART_AXIS_UNKNOWN: () => REACT_CHART_AXIS_UNKNOWN,
   REACT_CHART_FIELD_UNKNOWN: () => REACT_CHART_FIELD_UNKNOWN,
   REFERENCE_INTEGRITY_RULES: () => REFERENCE_INTEGRITY_RULES,
+  SEARCHABLE_FIELD_UNKNOWN: () => SEARCHABLE_FIELD_UNKNOWN,
   SECURITY_ANCHOR_HIGH_PRIVILEGE: () => SECURITY_ANCHOR_HIGH_PRIVILEGE,
   SECURITY_BOOK_AUDIENCE_UNKNOWN_SET: () => SECURITY_BOOK_AUDIENCE_UNKNOWN_SET,
   SECURITY_DELEGATION_MISSING_REASON: () => SECURITY_DELEGATION_MISSING_REASON,
@@ -99,6 +114,9 @@ __export(index_exports, {
   WIDGET_MEASURE_UNKNOWN: () => WIDGET_MEASURE_UNKNOWN,
   buildAccessMatrix: () => buildAccessMatrix,
   diffAccessMatrix: () => diffAccessMatrix,
+  extractHookBodyWriteSet: () => extractHookBodyWriteSet,
+  extractHookBodyWrites: () => extractHookBodyWrites,
+  validateActionBodyWrites: () => validateActionBodyWrites,
   validateActionNameRefs: () => validateActionNameRefs,
   validateAiAgentAuthoring: () => validateAiAgentAuthoring,
   validateAiSurfaceAffinity: () => validateAiSurfaceAffinity,
@@ -108,9 +126,11 @@ __export(index_exports, {
   validateChartBindings: () => validateChartBindings,
   validateDashboardActionRefs: () => validateDashboardActionRefs,
   validateFilterTokens: () => validateFilterTokens,
+  validateFlowNodeWrites: () => validateFlowNodeWrites,
   validateFlowTemplatePaths: () => validateFlowTemplatePaths,
   validateFlowTriggerReadiness: () => validateFlowTriggerReadiness,
   validateFormLayout: () => validateFormLayout,
+  validateHookBodyWrites: () => validateHookBodyWrites,
   validateJsxPages: () => validateJsxPages,
   validateListViewMode: () => validateListViewMode,
   validateNavAccess: () => validateNavAccess,
@@ -124,6 +144,7 @@ __export(index_exports, {
   validateRecordTitle: () => validateRecordTitle,
   validateReferenceIntegrity: () => validateReferenceIntegrity,
   validateResponsiveStyles: () => validateResponsiveStyles,
+  validateSearchableFields: () => validateSearchableFields,
   validateSecurityPosture: () => validateSecurityPosture,
   validateSeedReplaySafety: () => validateSeedReplaySafety,
   validateSeedStateMachine: () => validateSeedStateMachine,
@@ -137,7 +158,18 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/validate-widget-bindings.ts
+var import_data2 = require("@objectstack/spec/data");
+var import_ui = require("@objectstack/spec/ui");
+
+// src/system-fields.ts
 var import_data = require("@objectstack/spec/data");
+var import_system = require("@objectstack/spec/system");
+var SYSTEM_FIELDS = /* @__PURE__ */ new Set([
+  ...import_data.FIELD_GROUP_SYSTEM_FIELDS,
+  ...Object.values(import_system.SystemFieldName)
+]);
+
+// src/validate-widget-bindings.ts
 var WIDGET_DATASET_UNKNOWN = "widget-dataset-unknown";
 var WIDGET_DIMENSION_UNKNOWN = "widget-dimension-unknown";
 var WIDGET_MEASURE_UNKNOWN = "widget-measure-unknown";
@@ -168,20 +200,18 @@ function asArray(v) {
 function asStrings(v) {
   return Array.isArray(v) ? v.filter((s) => typeof s === "string") : [];
 }
-var CHART_TYPES = /* @__PURE__ */ new Set([
-  "bar",
-  "horizontal-bar",
-  "column",
-  "line",
-  "area",
-  "pie",
-  "donut",
-  "funnel",
-  "scatter",
-  "treemap",
-  "sankey",
-  "radar"
+var MEASURE_EXEMPT_CHART_TYPES = /* @__PURE__ */ new Set([
+  "gauge",
+  "solid-gauge",
+  "metric",
+  "kpi",
+  "bullet",
+  "table",
+  "pivot"
 ]);
+var CHART_TYPES = new Set(
+  import_ui.ChartTypeSchema.options.filter((t) => !MEASURE_EXEMPT_CHART_TYPES.has(t))
+);
 function levenshtein(a, b) {
   const m = a.length, n = b.length;
   let prev = Array.from({ length: n + 1 }, (_, j) => j);
@@ -227,18 +257,6 @@ function list(names) {
 }
 var DATE_RANGE_FILTER_NAME = "dateRange";
 var DATE_RANGE_DEFAULT_FIELD = "created_at";
-var SYSTEM_FIELDS = /* @__PURE__ */ new Set([
-  "id",
-  "created_at",
-  "created_by",
-  "updated_at",
-  "updated_by",
-  "owner_id",
-  "organization_id",
-  "tenant_id",
-  "user_id",
-  "deleted_at"
-]);
 function dashboardFilterDefs(dash) {
   const byName = /* @__PURE__ */ new Map();
   const dateRange = dash.dateRange;
@@ -293,7 +311,7 @@ function validateWidgetBindings(stack) {
       const aggregate = typeof m.aggregate === "string" ? m.aggregate : void 0;
       if (!field || !aggregate) continue;
       const ftype = fieldTypes.get(field);
-      if (ftype && (0, import_data.isIncoherentAggregate)(aggregate, ftype)) {
+      if (ftype && (0, import_data2.isIncoherentAggregate)(aggregate, ftype)) {
         findings.push({
           severity: "warning",
           rule: MEASURE_AGGREGATE_INCOHERENT,
@@ -472,6 +490,7 @@ function validateWidgetBindings(stack) {
 
 // src/validate-expressions.ts
 var import_formula = require("@objectstack/formula");
+var import_automation = require("@objectstack/spec/automation");
 function asArray2(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
@@ -532,37 +551,53 @@ function validateStackExpressions(stack) {
     for (const e of res.errors) issues.push({ where, message: e.message, source: e.source, severity: "error" });
     for (const w of res.warnings) issues.push({ where, message: w.message, source: w.source, severity: "warning" });
   };
+  const checkDeclaredPredicate = (where, raw) => {
+    if (raw == null) return;
+    const res = (0, import_formula.validateExpression)("predicate", raw);
+    for (const e of res.errors) issues.push({ where, message: e.message, source: e.source, severity: "error" });
+    for (const w of res.warnings) issues.push({ where, message: w.message, source: w.source, severity: "warning" });
+  };
   for (const flow of asArray2(stack.flows)) {
     const flowName = typeof flow.name === "string" ? flow.name : "(unnamed flow)";
     const nodes = Array.isArray(flow.nodes) ? flow.nodes : [];
-    const edges = Array.isArray(flow.edges) ? flow.edges : [];
     const startNode = nodes.find((n) => n.type === "start");
     const startCfg = startNode?.config ?? {};
     const objectName = typeof startCfg.objectName === "string" ? startCfg.objectName : void 0;
-    for (const node of nodes) {
-      const cfg = node.config ?? {};
-      check(`flow '${flowName}' \xB7 node '${node.id}' (${node.type}) condition`, cfg.condition, objectName);
-      if (node.type === "script") {
-        const fn = (typeof cfg.function === "string" ? cfg.function.trim() : "") || (typeof cfg.functionName === "string" ? cfg.functionName.trim() : "");
-        const action = typeof cfg.actionType === "string" ? cfg.actionType.trim() : "";
-        const inline = typeof cfg.script === "string" ? cfg.script.trim() : "";
-        if (!fn && !action && !inline) {
-          issues.push({
-            where: `flow '${flowName}' \xB7 node '${node.id}' (script) callable`,
-            message: `script node declares neither \`actionType\` nor \`function\` \u2014 it would do nothing at runtime. Name a built-in action (e.g. \`actionType: 'email'\`) or a registered function (\`function: 'my_fn'\`, registered via \`defineStack({ functions })\`).`,
-            source: JSON.stringify({ id: node.id, type: node.type, config: cfg })
-          });
-        } else if (action === "invoke_function" && !fn) {
-          issues.push({
-            where: `flow '${flowName}' \xB7 node '${node.id}' (script) callable`,
-            message: `script node uses \`actionType: 'invoke_function'\` but no \`function\` (or \`functionName\`) \u2014 it names no callable. Set \`function: 'my_fn'\` and register it via \`defineStack({ functions })\`.`,
-            source: JSON.stringify({ id: node.id, type: node.type, config: cfg })
-          });
+    for (const graph of (0, import_automation.collectFlowGraphs)(flow)) {
+      const at = graph.scope ? `flow '${flowName}' \xB7 ${graph.scope}` : `flow '${flowName}'`;
+      for (const node of graph.nodes) {
+        const cfg = node.config ?? {};
+        check(`${at} \xB7 node '${node.id}' (${node.type}) condition`, cfg.condition, objectName);
+        const nodeType = typeof node.type === "string" ? node.type : "";
+        for (const found of (0, import_automation.resolveFlowNodeExpressions)(nodeType, cfg)) {
+          if (found.entry.role !== "predicate") continue;
+          checkDeclaredPredicate(
+            `${at} \xB7 node '${node.id}' (${nodeType}) ${found.entry.label} at config.${found.path}`,
+            found.value
+          );
+        }
+        if (node.type === "script") {
+          const fn = (typeof cfg.function === "string" ? cfg.function.trim() : "") || (typeof cfg.functionName === "string" ? cfg.functionName.trim() : "");
+          const action = typeof cfg.actionType === "string" ? cfg.actionType.trim() : "";
+          const inline = typeof cfg.script === "string" ? cfg.script.trim() : "";
+          if (!fn && !action && !inline) {
+            issues.push({
+              where: `${at} \xB7 node '${node.id}' (script) callable`,
+              message: `script node declares neither \`actionType\` nor \`function\` \u2014 it would do nothing at runtime. Name a built-in action (e.g. \`actionType: 'email'\`) or a registered function (\`function: 'my_fn'\`, registered via \`defineStack({ functions })\`).`,
+              source: JSON.stringify({ id: node.id, type: node.type, config: cfg })
+            });
+          } else if (action === "invoke_function" && !fn) {
+            issues.push({
+              where: `${at} \xB7 node '${node.id}' (script) callable`,
+              message: `script node uses \`actionType: 'invoke_function'\` but no \`function\` (or \`functionName\`) \u2014 it names no callable. Set \`function: 'my_fn'\` and register it via \`defineStack({ functions })\`.`,
+              source: JSON.stringify({ id: node.id, type: node.type, config: cfg })
+            });
+          }
         }
       }
-    }
-    for (const edge of edges) {
-      check(`flow '${flowName}' \xB7 edge '${edge.id}' (${edge.source}\u2192${edge.target}) condition`, edge.condition, objectName);
+      for (const edge of graph.edges) {
+        check(`${at} \xB7 edge '${edge.id}' (${edge.source}\u2192${edge.target}) condition`, edge.condition, objectName);
+      }
     }
   }
   for (const obj of objects) {
@@ -815,6 +850,85 @@ function validateFlowTriggerReadiness(stack) {
   return findings;
 }
 
+// src/flow-walk.ts
+var import_automation2 = require("@objectstack/spec/automation");
+function isRec(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function strName(v) {
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+var REGION_SLOTS = new Map(
+  [...import_automation2.FLOW_REGION_SLOTS_BY_TYPE].map(([type, slots]) => [type, slots.map((s) => s.key)])
+);
+var REGION_CONFIG_KEYS = import_automation2.FLOW_REGION_CONFIG_KEYS;
+var MAX_REGION_DEPTH = 16;
+function flowNodeLabel(node, index) {
+  return strName(node.label) ?? strName(node.id) ?? `#${index}`;
+}
+function stripRegions(config) {
+  if (!isRec(config)) return void 0;
+  let out;
+  for (const key of Object.keys(config)) {
+    if (!REGION_CONFIG_KEYS.has(key)) continue;
+    out ?? (out = { ...config });
+    delete out[key];
+  }
+  return out ?? config;
+}
+function walkFlowNodes(flow, flowPath) {
+  const out = [];
+  if (!isRec(flow)) return out;
+  const visitList = (nodes, basePath, trail, depth) => {
+    if (!Array.isArray(nodes) || depth > MAX_REGION_DEPTH) return;
+    nodes.forEach((raw, index) => {
+      if (!isRec(raw)) return;
+      const path = `${basePath}[${index}]`;
+      out.push({
+        node: raw,
+        path,
+        localConfig: stripRegions(raw.config),
+        regionTrail: trail,
+        depth
+      });
+      const type = strName(raw.type);
+      const slots = type ? REGION_SLOTS.get(type) : void 0;
+      if (!slots || !isRec(raw.config)) return;
+      const config = raw.config;
+      const here = `${type} "${flowNodeLabel(raw, index)}"`;
+      for (const slot of slots) {
+        const value = config[slot];
+        if (slot === "branches") {
+          if (!Array.isArray(value)) continue;
+          value.forEach((branch, b) => {
+            if (!isRec(branch)) return;
+            const branchName = strName(branch.name) ?? `#${b}`;
+            visitList(
+              branch.nodes,
+              `${path}.config.branches[${b}].nodes`,
+              joinTrail(trail, `${here} \u203A branch ${branchName}`),
+              depth + 1
+            );
+          });
+          continue;
+        }
+        if (!isRec(value)) continue;
+        visitList(
+          value.nodes,
+          `${path}.config.${slot}.nodes`,
+          joinTrail(trail, `${here} \u203A ${slot}`),
+          depth + 1
+        );
+      }
+    });
+  };
+  visitList(flow.nodes, `${flowPath}.nodes`, "", 0);
+  return out;
+}
+function joinTrail(trail, segment) {
+  return trail ? `${trail} \u203A ${segment}` : segment;
+}
+
 // src/validate-flow-template-paths.ts
 var FLOW_TEMPLATE_UNKNOWN_FIELD = "flow-template-unknown-field";
 var FLOW_TEMPLATE_LOOKUP_TRAVERSAL = "flow-template-lookup-traversal";
@@ -828,19 +942,10 @@ function asArray5(v) {
   }
   return [];
 }
-var SYSTEM_FIELDS2 = /* @__PURE__ */ new Set([
-  "id",
+var IMPLICIT_HEADS = /* @__PURE__ */ new Set([
+  ...SYSTEM_FIELDS,
   "name",
   "owner",
-  "owner_id",
-  "created_at",
-  "created_by",
-  "updated_at",
-  "updated_by",
-  "organization_id",
-  "tenant_id",
-  "is_deleted",
-  "deleted_at",
   "record_type"
 ]);
 var RELATION_TYPES = /* @__PURE__ */ new Set([
@@ -970,12 +1075,13 @@ function validateFlowTemplatePaths(stack) {
     if (!obj) return;
     const fieldTypes = fieldTypesOf(obj);
     const expandSet = declaredExpandOf(flow);
-    nodes.forEach((node, nodeIndex) => {
-      if (typeof node !== "object" || !node) return;
-      const nodeLabel = typeof node.type === "string" ? node.type : typeof node.id === "string" ? node.id : `#${nodeIndex}`;
+    walkFlowNodes(flow, `flows[${flowIndex}]`).forEach(({ node, path: nodePath, regionTrail, localConfig }, walkIndex) => {
+      const nodeLabel = typeof node.type === "string" ? node.type : typeof node.id === "string" ? node.id : `#${walkIndex}`;
+      const where = regionTrail ? `flow "${flowName}" ${regionTrail} node "${nodeLabel}"` : `flow "${flowName}" node "${nodeLabel}"`;
       const nodeType = typeof node.type === "string" ? node.type : "";
       const guarded = FILTER_GUARDED_NODE_TYPES.has(nodeType);
-      const leaves = collectNodeLeaves(node, guarded);
+      const scanNode = localConfig !== void 0 && localConfig !== node.config ? { ...node, config: localConfig } : node;
+      const leaves = collectNodeLeaves(scanNode, guarded);
       if (leaves.length === 0) return;
       const seenUnknown = /* @__PURE__ */ new Set();
       const seenTraversal = /* @__PURE__ */ new Set();
@@ -985,15 +1091,15 @@ function validateFlowTemplatePaths(stack) {
           const head = rest[0];
           const hasSubPath = rest.length > 1;
           const nextIsIdentifier = hasSubPath && !/^\d+$/.test(rest[1]);
-          const isKnown = fieldTypes.has(head) || SYSTEM_FIELDS2.has(head);
+          const isKnown = fieldTypes.has(head) || IMPLICIT_HEADS.has(head);
           if (!isKnown) {
             if (seenUnknown.has(head)) continue;
             seenUnknown.add(head);
             findings.push({
               severity: inFilter ? "error" : "warning",
               rule: FLOW_TEMPLATE_UNKNOWN_FIELD,
-              where: `flow "${flowName}" node "${nodeLabel}"`,
-              path: `flows[${flowIndex}].nodes[${nodeIndex}]`,
+              where,
+              path: nodePath,
               message: inFilter ? `${nodeType} filter references '{record.${rest.join(".")}}', but '${head}' is not a field on object '${objectName}' \u2014 the token resolves to nothing, which DROPS the condition from the query instead of narrowing it. The node refuses to run at execution time (#3810).` : `template references '{record.${rest.join(".")}}', but '${head}' is not a field on object '${objectName}' \u2014 it resolves to an empty string at runtime (silently).`,
               hint: inFilter ? `Check the field name against the object's field definitions (e.g. '{record.full_name}', not '{record.full_naem}'); system columns like id/created_at/owner are also addressable. This gates the build rather than warning: an absent condition WIDENS the query, so the runtime has already decided to refuse this node.` : `Check the field name against the object's field definitions (e.g. '{record.full_name}', not '{record.full_naem}'). System columns like id/created_at/owner are also addressable.`
             });
@@ -1008,8 +1114,8 @@ function validateFlowTemplatePaths(stack) {
               findings.push({
                 severity: inFilter ? "error" : "warning",
                 rule: FLOW_TEMPLATE_LOOKUP_TRAVERSAL,
-                where: `flow "${flowName}" node "${nodeLabel}"`,
-                path: `flows[${flowIndex}].nodes[${nodeIndex}]`,
+                where,
+                path: nodePath,
                 message: inFilter ? `${nodeType} filter references '{record.${key}}', a cross-object hop through the ${headType} field '${head}' \u2014 the flow record carries '${head}' as a scalar id, not an expanded object, so the token resolves to nothing and the condition is DROPPED from the query instead of narrowing it. The node refuses to run at execution time (#3810).` : `template references '{record.${key}}', a cross-object hop through the ${headType} field '${head}' \u2014 the flow record carries '${head}' as a scalar id, not an expanded object, so this resolves to an empty string at runtime (silently).`,
                 hint: inFilter ? `Opt in to resolve it: add '${head}' to the start node's config.expand (#3475) and the engine re-reads it as the run's identity. Otherwise filter on the foreign-key id directly ('{record.${head}}'), or project the value via a formula field on '${objectName}'. This gates the build rather than warning: an absent condition WIDENS the query.` : `Opt in to resolve it: add '${head}' to the start node's config.expand (#3475) and the engine re-reads it as the run's identity. Otherwise reference the foreign-key id directly ('{record.${head}}'), or project the value via a formula field on '${objectName}'.`
               });
@@ -1073,8 +1179,8 @@ function validateReadonlyFlowWrites(stack) {
     if (flow.runAs === "system") return;
     const runAs = flow.runAs === "user" || flow.runAs === "system" ? flow.runAs : "user";
     const flowName = typeof flow.name === "string" ? flow.name : `#${flowIndex}`;
-    const nodes = Array.isArray(flow.nodes) ? flow.nodes : [];
-    nodes.forEach((node, nodeIndex) => {
+    const walked = walkFlowNodes(flow, `flows[${flowIndex}]`);
+    walked.forEach(({ node, path: nodePath, regionTrail }, walkIndex) => {
       if (node?.type !== "update_record") return;
       const config = node.config ?? {};
       const objectName = readLiteralObjectName(config);
@@ -1083,7 +1189,8 @@ function validateReadonlyFlowWrites(stack) {
       if (!fieldMap) return;
       const fields = config.fields;
       if (!fields || typeof fields !== "object" || Array.isArray(fields)) return;
-      const nodeName = typeof node.label === "string" && node.label ? node.label : typeof node.id === "string" && node.id ? node.id : `#${nodeIndex}`;
+      const nodeName = flowNodeLabel(node, walkIndex);
+      const where = regionTrail ? `flow "${flowName}" \u203A ${regionTrail} \u203A node "${nodeName}"` : `flow "${flowName}" \u203A node "${nodeName}"`;
       for (const fieldName of Object.keys(fields)) {
         const meta = fieldMap.get(fieldName);
         if (!meta) continue;
@@ -1091,8 +1198,8 @@ function validateReadonlyFlowWrites(stack) {
           findings.push({
             severity: "error",
             rule: FLOW_UPDATE_READONLY_FIELD,
-            where: `flow "${flowName}" \u203A node "${nodeName}"`,
-            path: `flows[${flowIndex}].nodes[${nodeIndex}].config.fields.${fieldName}`,
+            where,
+            path: `${nodePath}.config.fields.${fieldName}`,
             message: `writes field '${fieldName}', which object '${objectName}' declares readonly:true. Under runAs:'${runAs}' the engine silently strips readonly fields from the UPDATE payload (#2948), so this write never lands \u2014 while the step still reports success.`,
             hint: `If automation is meant to maintain this field, declare the flow runAs:'system' (the intended channel \u2014 readonly governs the end-user/API surface, not trusted system writers). Otherwise remove '${fieldName}' from this update_record node.`
           });
@@ -1100,8 +1207,8 @@ function validateReadonlyFlowWrites(stack) {
           findings.push({
             severity: "warning",
             rule: FLOW_UPDATE_READONLY_WHEN_FIELD,
-            where: `flow "${flowName}" \u203A node "${nodeName}"`,
-            path: `flows[${flowIndex}].nodes[${nodeIndex}].config.fields.${fieldName}`,
+            where,
+            path: `${nodePath}.config.fields.${fieldName}`,
             message: `writes field '${fieldName}', which object '${objectName}' declares readonlyWhen. On records where that predicate is TRUE, a runAs:'${runAs}' UPDATE strips the field (#3042), so this write may silently not land depending on the record's state.`,
             hint: `If automation must maintain this field regardless of record state, run the flow runAs:'system'. Otherwise confirm this node only targets records whose readonlyWhen predicate is FALSE.`
           });
@@ -1553,208 +1660,586 @@ function validateReactPages(stack) {
 
 // src/validate-react-page-props.ts
 var import_node_module2 = require("module");
-var import_ui = require("@objectstack/spec/ui");
-var import_meta2 = {};
-var cachedTs = null;
-function loadTypeScript() {
-  if (cachedTs) return cachedTs;
-  const anchor = typeof import_meta2 !== "undefined" && import_meta2.url ? import_meta2.url : typeof __filename !== "undefined" ? __filename : process.cwd() + "/";
-  try {
-    cachedTs = (0, import_node_module2.createRequire)(anchor)("typescript");
-  } catch (err) {
-    throw new Error(
-      `@objectstack/lint: validating a kind:'react' page requires the "typescript" package, which could not be loaded (${err instanceof Error ? err.message : String(err)}). It is a declared dependency of @objectstack/lint \u2014 if this deployment prunes packages, keep "typescript" in the image; it is only loaded when a react-source page is validated.`
-    );
+var import_ui2 = require("@objectstack/spec/ui");
+var import_data3 = require("@objectstack/spec/data");
+
+// src/validate-searchable-fields.ts
+var SEARCHABLE_FIELD_UNKNOWN = "searchable-field-unknown";
+function asArray10(v) {
+  if (Array.isArray(v)) return v;
+  if (v && typeof v === "object") {
+    return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
-  return cachedTs;
+  return [];
 }
-var asArray10 = (v) => Array.isArray(v) ? v : [];
-var BLOCKS = new Map(
-  import_ui.REACT_BLOCKS.map((b) => [
-    b.tag,
-    {
-      requiredBindings: b.interactions.filter((i) => i.required).map((i) => i.name),
-      knownProps: new Set(b.interactions.map((i) => i.name))
-    }
-  ])
-);
-function editDistance(a, b, cap = 2) {
-  if (Math.abs(a.length - b.length) > cap) return cap + 1;
-  const dp = Array.from({ length: a.length + 1 }, (_, i) => i);
-  for (let j = 1; j <= b.length; j++) {
-    let prev = dp[0];
-    dp[0] = j;
-    for (let i = 1; i <= a.length; i++) {
-      const tmp = dp[i];
-      dp[i] = Math.min(dp[i] + 1, dp[i - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
-      prev = tmp;
-    }
-  }
-  return dp[a.length];
+function isRec2(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function nearestKnown(prop, known) {
-  if (known.has(prop)) return null;
-  let best = null;
-  let bestD = 3;
-  for (const k of known) {
-    const d = editDistance(prop, k);
-    if (d < bestD) {
-      bestD = d;
-      best = k;
-    }
+function strName2(v) {
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function declaredFieldNames(obj) {
+  const fields = obj.fields;
+  if (!fields || typeof fields !== "object") return null;
+  const names = /* @__PURE__ */ new Set();
+  for (const f of asArray10(fields)) {
+    const n = strName2(f.name);
+    if (n) names.add(n);
   }
-  return bestD <= 2 ? best : null;
+  return names.size > 0 ? names : null;
 }
-var NOT_STATIC = /* @__PURE__ */ Symbol("not-static");
-function staticValue(tsc, sf, node) {
-  if (!node) return NOT_STATIC;
-  if (tsc.isParenthesizedExpression(node)) return staticValue(tsc, sf, node.expression);
-  if (tsc.isStringLiteral(node) || tsc.isNoSubstitutionTemplateLiteral(node)) return node.text;
-  if (tsc.isNumericLiteral(node)) return Number(node.text);
-  if (node.kind === tsc.SyntaxKind.TrueKeyword) return true;
-  if (node.kind === tsc.SyntaxKind.FalseKeyword) return false;
-  if (node.kind === tsc.SyntaxKind.NullKeyword) return null;
-  if (tsc.isArrayLiteralExpression(node)) {
-    const out = [];
-    for (const el of node.elements) {
-      const v = staticValue(tsc, sf, el);
-      if (v === NOT_STATIC) return NOT_STATIC;
-      out.push(v);
+function suggest2(target, known) {
+  let best;
+  let bestScore = Infinity;
+  for (const candidate of known) {
+    const d = distance(target, candidate);
+    if (d < bestScore) {
+      bestScore = d;
+      best = candidate;
     }
-    return out;
   }
-  if (tsc.isObjectLiteralExpression(node)) {
-    const out = {};
-    for (const p of node.properties) {
-      if (!tsc.isPropertyAssignment(p)) return NOT_STATIC;
-      const key = tsc.isIdentifier(p.name) || tsc.isStringLiteral(p.name) ? p.name.text : null;
-      if (key === null) return NOT_STATIC;
-      const v = staticValue(tsc, sf, p.initializer);
-      if (v === NOT_STATIC) return NOT_STATIC;
-      out[key] = v;
+  const limit = Math.max(2, Math.floor(target.length / 3));
+  return best && bestScore <= limit ? ` Did you mean "${best}"?` : "";
+}
+function distance(a, b) {
+  const m = a.length;
+  const n = b.length;
+  if (m === 0) return n;
+  if (n === 0) return m;
+  let prev = Array.from({ length: n + 1 }, (_, j) => j);
+  for (let i = 1; i <= m; i++) {
+    const curr = [i, ...new Array(n).fill(0)];
+    for (let j = 1; j <= n; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      curr[j] = Math.min(curr[j - 1] + 1, prev[j] + 1, prev[j - 1] + cost);
     }
-    return out;
+    prev = curr;
   }
-  return NOT_STATIC;
-}
-function attrValue(tsc, sf, attr) {
-  const init = attr.initializer;
-  if (!init) return true;
-  if (tsc.isStringLiteral(init)) return init.text;
-  if (tsc.isJsxExpression(init)) return staticValue(tsc, sf, init.expression);
-  return NOT_STATIC;
+  return prev[n];
 }
-var REACT_CHART_FIELD_UNKNOWN = "react-chart-field-unknown";
-var REACT_CHART_AGGREGATE_INVALID = "react-chart-aggregate-invalid";
-var REACT_CHART_AXIS_UNKNOWN = "react-chart-axis-unknown";
-var CHART_FUNCTIONS = ["count", "sum", "avg", "min", "max"];
-var SYSTEM_FIELDS3 = /* @__PURE__ */ new Set([
-  "id",
-  "created_at",
-  "created_by",
-  "updated_at",
-  "updated_by",
-  "owner_id",
-  "organization_id",
-  "tenant_id",
-  "user_id",
-  "deleted_at"
-]);
-function namedArray(v) {
-  if (Array.isArray(v)) return v.filter((x) => !!x && typeof x === "object");
-  if (v && typeof v === "object") {
-    return Object.entries(v).map(([name, def]) => ({
-      name,
-      ...def && typeof def === "object" ? def : {}
-    }));
+function indexObjectSearchTargets(stack) {
+  const fieldsByObject = /* @__PURE__ */ new Map();
+  if (!isRec2(stack)) return fieldsByObject;
+  for (const obj of asArray10(stack.objects)) {
+    const name = strName2(obj.name);
+    if (name) fieldsByObject.set(name, declaredFieldNames(obj));
   }
-  return [];
+  return fieldsByObject;
 }
-function indexObjectFields(stack) {
-  const out = /* @__PURE__ */ new Map();
-  for (const obj of namedArray(stack.objects)) {
-    const name = typeof obj.name === "string" ? obj.name : void 0;
+function checkSearchableFieldList(declared, objectName, fieldsByObject, where, path, subject) {
+  const findings = [];
+  if (!Array.isArray(declared) || declared.length === 0) return findings;
+  if (!objectName) return findings;
+  if (!fieldsByObject.has(objectName)) return findings;
+  const known = fieldsByObject.get(objectName);
+  if (!known) return findings;
+  for (let i = 0; i < declared.length; i++) {
+    const entry = declared[i];
+    const name = strName2(entry);
     if (!name) continue;
-    const names = /* @__PURE__ */ new Set();
-    for (const f of namedArray(obj.fields)) {
-      if (typeof f.name === "string" && f.name) names.add(f.name);
-    }
-    out.set(name, names);
+    if (known.has(name) || SYSTEM_FIELDS.has(name)) continue;
+    const dotted = name.includes(".");
+    findings.push({
+      severity: "error",
+      rule: SEARCHABLE_FIELD_UNKNOWN,
+      where,
+      path: `${path}[${i}]`,
+      message: `${subject} entry "${name}" is not a field on object "${objectName}". The declaration is stale: searching it can never match, and the engine silently drops it \u2014 leaving a narrower search than declared, or the auto-default set once every entry is dropped.` + (dotted ? "" : suggest2(name, known)),
+      hint: (dotted ? `'search' scans this object's own columns, so a related record's column cannot be a search target \u2014 expand the relation and search the related object, or copy the value onto a formula field here. ` : `Fix the name, or add "${name}" to ${objectName}.fields. `) + `Clients echo this declaration verbatim as the '$searchFields' override, so a stale entry becomes a 400 INVALID_FIELD on list search (#4254), not just a quietly narrowed one.` + (known.size > 0 ? ` Object fields: ${[...known].sort().join(", ")}.` : "")
+    });
   }
-  return out;
+  return findings;
 }
-var isRec = (v) => !!v && typeof v === "object" && !Array.isArray(v);
-var strOf = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
-function checkObjectChart(attrs, objectFields, findings) {
-  const { values, where, path } = attrs;
-  const push = (severity, rule, message, hint) => findings.push({ severity, rule, where, path, message, hint });
-  if (values.has("data")) return;
-  const aggregate = values.get("aggregate");
-  if (aggregate === void 0 || aggregate === NOT_STATIC) return;
-  if (!isRec(aggregate)) return;
-  const fn = strOf(aggregate.function);
-  const field = strOf(aggregate.field);
-  const groupBy = aggregate.groupBy;
-  const groupByField = strOf(groupBy) ?? (isRec(groupBy) ? strOf(groupBy.field) : void 0);
-  if (fn && !CHART_FUNCTIONS.includes(fn)) {
-    push(
-      "error",
-      REACT_CHART_AGGREGATE_INVALID,
-      `aggregate.function "${fn}" is not an aggregation this chart can run.`,
-      `Use one of: ${CHART_FUNCTIONS.join(", ")}.`
+function validateSearchableFields(stack) {
+  const findings = [];
+  if (!isRec2(stack)) return findings;
+  const objects = asArray10(stack.objects);
+  const fieldsByObject = indexObjectSearchTargets(stack);
+  const check = (declared, objectName, where, path, subject) => {
+    findings.push(
+      ...checkSearchableFieldList(declared, objectName, fieldsByObject, where, path, subject)
     );
-  } else if (fn && fn !== "count" && !field) {
-    push(
-      "error",
-      REACT_CHART_AGGREGATE_INVALID,
-      `aggregate.function "${fn}" has no "field" to aggregate.`,
-      'Add aggregate.field, or use function "count" (the only one that may omit it).'
+  };
+  for (let oi = 0; oi < objects.length; oi++) {
+    const obj = objects[oi];
+    if (!isRec2(obj)) continue;
+    const objName = strName2(obj.name);
+    const label2 = objName ? `object "${objName}"` : `objects[${oi}]`;
+    check(
+      obj.searchableFields,
+      objName,
+      label2,
+      `objects[${oi}].searchableFields`,
+      "searchableFields"
     );
+    if (isRec2(obj.listViews)) {
+      for (const [key, lv] of Object.entries(obj.listViews)) {
+        if (!isRec2(lv)) continue;
+        check(
+          lv.searchableFields,
+          // A built-in list view belongs to its object; an inline `data.object`
+          // may still retarget it (ADR-0047 allows the explicit binding).
+          listViewObject(lv) ?? objName,
+          `${label2} \u203A listViews.${key}`,
+          `objects[${oi}].listViews.${key}.searchableFields`,
+          "list-view searchableFields"
+        );
+      }
+    }
   }
-  const objectName = strOf(values.get("objectName"));
-  const known = objectName ? objectFields.get(objectName) : void 0;
-  if (objectName && known) {
-    const fieldRef = (name, prop) => {
-      if (!name) return;
-      if (name.includes(".")) return;
-      if (known.has(name) || SYSTEM_FIELDS3.has(name)) return;
-      push(
-        "error",
-        REACT_CHART_FIELD_UNKNOWN,
-        `aggregate.${prop} "${name}" is not a field on object "${objectName}" \u2014 the aggregate query has nothing to ${prop === "groupBy" ? "group by" : "aggregate"}, so the chart comes back empty.`,
-        `Fix the field name, or add "${name}" to ${objectName}.` + (known.size > 0 ? ` Object fields: ${[...known].sort().join(", ")}.` : "")
+  const views = asArray10(stack.views);
+  for (let vi = 0; vi < views.length; vi++) {
+    const view = views[vi];
+    if (!isRec2(view)) continue;
+    const viewLabel = strName2(view.name) ?? strName2(view.objectName) ?? `#${vi}`;
+    const viewObject = strName2(view.objectName) ?? strName2(view.object);
+    if (isRec2(view.list)) {
+      check(
+        view.list.searchableFields,
+        listViewObject(view.list) ?? viewObject,
+        `view "${viewLabel}" \u203A list`,
+        `views[${vi}].list.searchableFields`,
+        "list-view searchableFields"
       );
-    };
-    fieldRef(field, "field");
-    fieldRef(groupByField, "groupBy");
+    }
+    if (isRec2(view.listViews)) {
+      for (const [key, lv] of Object.entries(view.listViews)) {
+        if (!isRec2(lv)) continue;
+        check(
+          lv.searchableFields,
+          listViewObject(lv) ?? viewObject,
+          `view "${viewLabel}" \u203A listViews.${key}`,
+          `views[${vi}].listViews.${key}.searchableFields`,
+          "list-view searchableFields"
+        );
+      }
+    }
   }
-  const keys = (0, import_ui.chartAggregateResultKeys)({ field, function: fn, groupBy });
-  const columns = [keys.category, keys.value].filter((k) => !!k);
-  if (columns.length === 0) return;
-  const axisRef = (name, prop) => {
-    if (!name) return;
-    if (columns.includes(name)) return;
-    if (keys.comparison && name === keys.comparison) return;
-    push(
-      "error",
-      REACT_CHART_AXIS_UNKNOWN,
+  return findings;
+}
+function listViewObject(listView) {
+  const data = listView.data;
+  return isRec2(data) ? strName2(data.object) : void 0;
+}
+
+// src/page-walk.ts
+function isRec3(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function strName3(v) {
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+var SOURCE_AUTHORED_KINDS = /* @__PURE__ */ new Set(["html", "react", "jsx"]);
+function isSourceAuthoredPage(page) {
+  const kind = strName3(page.kind);
+  return kind !== void 0 && SOURCE_AUTHORED_KINDS.has(kind);
+}
+function walkPageComponents(page, pagePath) {
+  const out = [];
+  if (!isRec3(page) || isSourceAuthoredPage(page)) return out;
+  const pageObject = strName3(page.object);
+  const visit = (node, path, inheritedObject) => {
+    if (!isRec3(node)) return;
+    const props = isRec3(node.properties) ? node.properties : void 0;
+    const dataSource = isRec3(node.dataSource) ? node.dataSource : void 0;
+    const objectName = strName3(dataSource?.object) ?? strName3(props?.object) ?? inheritedObject;
+    out.push({ component: node, path, objectName });
+    if (!props) return;
+    if (Array.isArray(props.items)) {
+      for (let i = 0; i < props.items.length; i++) {
+        const item = props.items[i];
+        if (!isRec3(item) || !Array.isArray(item.children)) continue;
+        for (let c = 0; c < item.children.length; c++) {
+          visit(item.children[c], `${path}.properties.items[${i}].children[${c}]`, objectName);
+        }
+      }
+    }
+    if (Array.isArray(props.children)) {
+      for (let i = 0; i < props.children.length; i++) {
+        visit(props.children[i], `${path}.properties.children[${i}]`, objectName);
+      }
+    }
+    for (const key of ["body", "footer"]) {
+      const slotList = props[key];
+      if (!Array.isArray(slotList)) continue;
+      for (let i = 0; i < slotList.length; i++) {
+        visit(slotList[i], `${path}.properties.${key}[${i}]`, objectName);
+      }
+    }
+  };
+  const regions = Array.isArray(page.regions) ? page.regions : [];
+  for (let r = 0; r < regions.length; r++) {
+    const region = regions[r];
+    if (!isRec3(region) || !Array.isArray(region.components)) continue;
+    for (let c = 0; c < region.components.length; c++) {
+      visit(region.components[c], `${pagePath}.regions[${r}].components[${c}]`, pageObject);
+    }
+  }
+  const slots = isRec3(page.slots) ? page.slots : void 0;
+  if (slots) {
+    for (const [slot, value] of Object.entries(slots)) {
+      const list3 = Array.isArray(value) ? value : [value];
+      const indexed = Array.isArray(value);
+      for (let i = 0; i < list3.length; i++) {
+        visit(list3[i], `${pagePath}.slots.${slot}${indexed ? `[${i}]` : ""}`, pageObject);
+      }
+    }
+  }
+  return out;
+}
+
+// src/validate-page-field-bindings.ts
+var PAGE_FIELD_UNKNOWN = "page-field-unknown";
+function asArray11(v) {
+  if (Array.isArray(v)) return v;
+  if (v && typeof v === "object") {
+    return Object.entries(v).map(([name, def]) => ({ name, ...def }));
+  }
+  return [];
+}
+function strName4(v) {
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function isRec4(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function fieldRefsFrom(value, basePath) {
+  const out = [];
+  const one = (v, path) => {
+    const bare = strName4(v);
+    if (bare) {
+      out.push({ name: bare, path });
+      return;
+    }
+    if (!isRec4(v)) return;
+    const named = strName4(v.field) ?? strName4(v.name);
+    if (named) out.push({ name: named, path: `${path}.${strName4(v.field) ? "field" : "name"}` });
+  };
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length; i++) one(value[i], `${basePath}[${i}]`);
+  } else {
+    one(value, basePath);
+  }
+  return out;
+}
+function sortFieldRefs(value, basePath) {
+  if (typeof value === "string") {
+    const head = value.trim().split(/\s+/)[0];
+    return head ? [{ name: head, path: basePath }] : [];
+  }
+  return fieldRefsFrom(value, basePath);
+}
+var COMPONENT_FIELD_SPECS = {
+  "record:highlights": { props: ["fields"] },
+  // `sections`/`hideFields` are not in RecordDetailsProps, but every real page
+  // authors them (they survive because `properties` is unvalidated).
+  "record:details": { props: ["fields", "hideFields"], nestedSections: ["sections"] },
+  "record:path": { props: ["statusField"] },
+  "element:number": { props: ["field"] },
+  "element:filter": { props: ["fields"] },
+  "element:form": { props: ["fields"] },
+  // The schema says `displayField`; real pages author `labelField`. Accept both.
+  "element:record_picker": { props: ["displayField", "labelField", "searchFields"] }
+};
+var RELATED_LIST_TYPE = "record:related_list";
+function componentFieldRefs(type, props, basePath, sep = ".") {
+  const spec = COMPONENT_FIELD_SPECS[type];
+  if (!spec) return null;
+  const refs = [];
+  for (const key of spec.props ?? []) {
+    refs.push(...fieldRefsFrom(props[key], `${basePath}${sep}${key}`));
+  }
+  for (const key of spec.nestedSections ?? []) {
+    const sections = Array.isArray(props[key]) ? props[key] : [];
+    for (let si = 0; si < sections.length; si++) {
+      const section = sections[si];
+      if (!isRec4(section)) continue;
+      refs.push(...fieldRefsFrom(section.fields, `${basePath}${sep}${key}[${si}].fields`));
+    }
+  }
+  return refs;
+}
+function relatedListFieldRefs(props, basePath, sep = ".") {
+  const add = isRec4(props.add) ? props.add : void 0;
+  const picker = add && isRec4(add.picker) ? add.picker : void 0;
+  const at = (key) => `${basePath}${sep}${key}`;
+  return {
+    relatedObject: strName4(props.objectName),
+    related: [
+      ...fieldRefsFrom(props.columns, at("columns")),
+      ...sortFieldRefs(props.sort, at("sort")),
+      ...fieldRefsFrom(props.filter, at("filter")),
+      ...fieldRefsFrom(props.relationshipField, at("relationshipField")),
+      ...add ? fieldRefsFrom(add.linkField, at("add.linkField")) : []
+    ],
+    parent: fieldRefsFrom(props.relationshipValueField, at("relationshipValueField")),
+    pickerObject: picker ? strName4(picker.object) : void 0,
+    picker: picker ? [
+      ...fieldRefsFrom(picker.valueField, at("add.picker.valueField")),
+      ...fieldRefsFrom(picker.labelField, at("add.picker.labelField"))
+    ] : []
+  };
+}
+function indexObjectFields(stack) {
+  const objectFields = /* @__PURE__ */ new Map();
+  if (!isRec4(stack)) return objectFields;
+  for (const obj of asArray11(stack.objects)) {
+    const name = strName4(obj.name);
+    if (!name) continue;
+    const names = /* @__PURE__ */ new Set();
+    for (const f of asArray11(obj.fields)) {
+      const fn = strName4(f.name);
+      if (fn) names.add(fn);
+    }
+    objectFields.set(name, names);
+  }
+  return objectFields;
+}
+function checkFieldRefs(refs, objectName, objectFields, where, consequence = "skipped") {
+  const findings = [];
+  if (!objectName) return findings;
+  const known = objectFields.get(objectName);
+  if (!known) return findings;
+  for (const ref of refs) {
+    if (ref.name.includes(".")) continue;
+    if (known.has(ref.name) || SYSTEM_FIELDS.has(ref.name)) continue;
+    findings.push({
+      severity: consequence === "queried" ? "error" : "warning",
+      rule: PAGE_FIELD_UNKNOWN,
+      where,
+      path: ref.path,
+      message: `field "${ref.name}" is not a field on object "${objectName}" \u2014 ` + (consequence === "queried" ? 'it is used in a QUERY, so the predicate can never match: the surface renders an empty result that looks exactly like "there is no data".' : "the component silently skips it, so it never renders."),
+      hint: `Fix the field name, or add "${ref.name}" to ${objectName}. References must match the object's field names exactly.` + (known.size > 0 ? ` Object fields: ${[...known].sort().join(", ")}.` : "")
+    });
+  }
+  return findings;
+}
+function validatePageFieldBindings(stack) {
+  const findings = [];
+  if (!stack || typeof stack !== "object") return findings;
+  const objectFields = indexObjectFields(stack);
+  const pages = asArray11(stack.pages);
+  for (let pi = 0; pi < pages.length; pi++) {
+    const page = pages[pi];
+    if (!page || typeof page !== "object") continue;
+    const pageName = strName4(page.name) ?? `#${pi}`;
+    const checkRefs = (refs, objectName, where) => {
+      findings.push(...checkFieldRefs(refs, objectName, objectFields, where));
+    };
+    for (const { component, path, objectName } of walkPageComponents(page, `pages[${pi}]`)) {
+      const type = strName4(component.type);
+      const props = isRec4(component.properties) ? component.properties : void 0;
+      if (!type || !props) continue;
+      const where = `page "${pageName}" \xB7 ${type}`;
+      const base = `${path}.properties`;
+      if (type === RELATED_LIST_TYPE) {
+        const split = relatedListFieldRefs(props, base);
+        checkRefs(split.related, split.relatedObject, where);
+        checkRefs(split.parent, objectName, where);
+        checkRefs(split.picker, split.pickerObject, where);
+        continue;
+      }
+      const refs = componentFieldRefs(type, props, base);
+      if (!refs) continue;
+      checkRefs(refs, objectName, where);
+    }
+    const cfg = isRec4(page.interfaceConfig) ? page.interfaceConfig : void 0;
+    if (cfg) {
+      const cfgObject = strName4(cfg.source) ?? strName4(page.object);
+      const base = `pages[${pi}].interfaceConfig`;
+      const refs = [
+        ...fieldRefsFrom(cfg.columns, `${base}.columns`),
+        ...sortFieldRefs(cfg.sort, `${base}.sort`),
+        ...fieldRefsFrom(cfg.filterBy, `${base}.filterBy`)
+      ];
+      const userFilters = isRec4(cfg.userFilters) ? cfg.userFilters : void 0;
+      if (userFilters) {
+        refs.push(...fieldRefsFrom(userFilters.fields, `${base}.userFilters.fields`));
+      }
+      checkRefs(refs, cfgObject, `page "${pageName}" \xB7 interfaceConfig`);
+    }
+  }
+  return findings;
+}
+
+// src/validate-react-page-props.ts
+var import_meta2 = {};
+var cachedTs = null;
+function loadTypeScript() {
+  if (cachedTs) return cachedTs;
+  const anchor = typeof import_meta2 !== "undefined" && import_meta2.url ? import_meta2.url : typeof __filename !== "undefined" ? __filename : process.cwd() + "/";
+  try {
+    cachedTs = (0, import_node_module2.createRequire)(anchor)("typescript");
+  } catch (err) {
+    throw new Error(
+      `@objectstack/lint: validating a kind:'react' page requires the "typescript" package, which could not be loaded (${err instanceof Error ? err.message : String(err)}). It is a declared dependency of @objectstack/lint \u2014 if this deployment prunes packages, keep "typescript" in the image; it is only loaded when a react-source page is validated.`
+    );
+  }
+  return cachedTs;
+}
+var asArray12 = (v) => Array.isArray(v) ? v : [];
+var BLOCKS = new Map(
+  import_ui2.REACT_BLOCKS.map((b) => [
+    b.tag,
+    {
+      requiredBindings: b.interactions.filter((i) => i.required).map((i) => i.name),
+      knownProps: new Set(b.interactions.map((i) => i.name))
+    }
+  ])
+);
+function editDistance(a, b, cap = 2) {
+  if (Math.abs(a.length - b.length) > cap) return cap + 1;
+  const dp = Array.from({ length: a.length + 1 }, (_, i) => i);
+  for (let j = 1; j <= b.length; j++) {
+    let prev = dp[0];
+    dp[0] = j;
+    for (let i = 1; i <= a.length; i++) {
+      const tmp = dp[i];
+      dp[i] = Math.min(dp[i] + 1, dp[i - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
+      prev = tmp;
+    }
+  }
+  return dp[a.length];
+}
+function nearestKnown(prop, known) {
+  if (known.has(prop)) return null;
+  let best = null;
+  let bestD = 3;
+  for (const k of known) {
+    const d = editDistance(prop, k);
+    if (d < bestD) {
+      bestD = d;
+      best = k;
+    }
+  }
+  return bestD <= 2 ? best : null;
+}
+var NOT_STATIC = /* @__PURE__ */ Symbol("not-static");
+function staticValue(tsc, sf, node) {
+  if (!node) return NOT_STATIC;
+  if (tsc.isParenthesizedExpression(node)) return staticValue(tsc, sf, node.expression);
+  if (tsc.isStringLiteral(node) || tsc.isNoSubstitutionTemplateLiteral(node)) return node.text;
+  if (tsc.isNumericLiteral(node)) return Number(node.text);
+  if (node.kind === tsc.SyntaxKind.TrueKeyword) return true;
+  if (node.kind === tsc.SyntaxKind.FalseKeyword) return false;
+  if (node.kind === tsc.SyntaxKind.NullKeyword) return null;
+  if (tsc.isArrayLiteralExpression(node)) {
+    const out = [];
+    for (const el of node.elements) {
+      const v = staticValue(tsc, sf, el);
+      if (v === NOT_STATIC) return NOT_STATIC;
+      out.push(v);
+    }
+    return out;
+  }
+  if (tsc.isObjectLiteralExpression(node)) {
+    const out = {};
+    for (const p of node.properties) {
+      if (!tsc.isPropertyAssignment(p)) return NOT_STATIC;
+      const key = tsc.isIdentifier(p.name) || tsc.isStringLiteral(p.name) ? p.name.text : null;
+      if (key === null) return NOT_STATIC;
+      const v = staticValue(tsc, sf, p.initializer);
+      if (v === NOT_STATIC) return NOT_STATIC;
+      out[key] = v;
+    }
+    return out;
+  }
+  return NOT_STATIC;
+}
+function attrValue(tsc, sf, attr) {
+  const init = attr.initializer;
+  if (!init) return true;
+  if (tsc.isStringLiteral(init)) return init.text;
+  if (tsc.isJsxExpression(init)) return staticValue(tsc, sf, init.expression);
+  return NOT_STATIC;
+}
+function filterAttrValue(tsc, sf, attr) {
+  const init = attr.initializer;
+  if (!init || !tsc.isJsxExpression(init)) return NOT_STATIC;
+  const perPosition = (node) => {
+    if (!node) return NOT_STATIC;
+    if (tsc.isParenthesizedExpression(node)) return perPosition(node.expression);
+    if (tsc.isArrayLiteralExpression(node)) return node.elements.map((el) => perPosition(el));
+    return staticValue(tsc, sf, node);
+  };
+  return perPosition(init.expression);
+}
+var REACT_CHART_FIELD_UNKNOWN = "react-chart-field-unknown";
+var REACT_CHART_AGGREGATE_INVALID = "react-chart-aggregate-invalid";
+var REACT_CHART_AXIS_UNKNOWN = "react-chart-axis-unknown";
+var CHART_FUNCTIONS = ["count", "sum", "avg", "min", "max"];
+var isRec5 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var strOf = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+function checkObjectChart(attrs, objectFields, findings) {
+  const { values, where, path } = attrs;
+  const push = (severity, rule, message, hint) => findings.push({ severity, rule, where, path, message, hint });
+  if (values.has("data")) return;
+  const aggregate = values.get("aggregate");
+  if (aggregate === void 0 || aggregate === NOT_STATIC) return;
+  if (!isRec5(aggregate)) return;
+  const fn = strOf(aggregate.function);
+  const field = strOf(aggregate.field);
+  const groupBy = aggregate.groupBy;
+  const groupByField = strOf(groupBy) ?? (isRec5(groupBy) ? strOf(groupBy.field) : void 0);
+  if (fn && !CHART_FUNCTIONS.includes(fn)) {
+    push(
+      "error",
+      REACT_CHART_AGGREGATE_INVALID,
+      `aggregate.function "${fn}" is not an aggregation this chart can run.`,
+      `Use one of: ${CHART_FUNCTIONS.join(", ")}.`
+    );
+  } else if (fn && fn !== "count" && !field) {
+    push(
+      "error",
+      REACT_CHART_AGGREGATE_INVALID,
+      `aggregate.function "${fn}" has no "field" to aggregate.`,
+      'Add aggregate.field, or use function "count" (the only one that may omit it).'
+    );
+  }
+  const objectName = strOf(values.get("objectName"));
+  const known = objectName ? objectFields.get(objectName) : void 0;
+  if (objectName && known) {
+    const fieldRef = (name, prop) => {
+      if (!name) return;
+      if (name.includes(".")) return;
+      if (known.has(name) || SYSTEM_FIELDS.has(name)) return;
+      push(
+        "error",
+        REACT_CHART_FIELD_UNKNOWN,
+        `aggregate.${prop} "${name}" is not a field on object "${objectName}" \u2014 the aggregate query has nothing to ${prop === "groupBy" ? "group by" : "aggregate"}, so the chart comes back empty.`,
+        `Fix the field name, or add "${name}" to ${objectName}.` + (known.size > 0 ? ` Object fields: ${[...known].sort().join(", ")}.` : "")
+      );
+    };
+    fieldRef(field, "field");
+    fieldRef(groupByField, "groupBy");
+  }
+  const keys = (0, import_ui2.chartAggregateResultKeys)({ field, function: fn, groupBy });
+  const columns = [keys.category, keys.value].filter((k) => !!k);
+  if (columns.length === 0) return;
+  const axisRef = (name, prop) => {
+    if (!name) return;
+    if (columns.includes(name)) return;
+    if (keys.comparison && name === keys.comparison) return;
+    push(
+      "error",
+      REACT_CHART_AXIS_UNKNOWN,
       `"${name}" is not a column this aggregate returns, so the axis plots nothing. Object-bound aggregate rows are keyed by the RAW FIELD NAMES (unlike a dataset, whose rows are keyed by measure name).`,
       `Result columns: ${columns.join(", ")}` + (keys.comparison ? ` (plus "${keys.comparison}" with a comparison overlay)` : "") + `. Bind ${prop} to one of them.`
     );
   };
   const xAxisRaw = values.get("xAxis");
-  const categoryAxis = strOf(values.get("xAxisKey")) ?? strOf(xAxisRaw) ?? (isRec(xAxisRaw) ? strOf(xAxisRaw.field) : void 0);
+  const categoryAxis = strOf(values.get("xAxisKey")) ?? strOf(xAxisRaw) ?? (isRec5(xAxisRaw) ? strOf(xAxisRaw.field) : void 0);
   const categoryProp = values.has("xAxisKey") ? "xAxisKey" : "xAxis.field";
   axisRef(categoryAxis, categoryProp);
   const yAxisRaw = values.get("yAxis");
   const yAxisList = Array.isArray(yAxisRaw) ? yAxisRaw : yAxisRaw !== void 0 ? [yAxisRaw] : [];
   for (const a of yAxisList) {
-    axisRef(strOf(a) ?? (isRec(a) ? strOf(a.field) : void 0), "yAxis[].field");
+    axisRef(strOf(a) ?? (isRec5(a) ? strOf(a.field) : void 0), "yAxis[].field");
   }
   const series = values.get("series");
   if (Array.isArray(series)) {
     for (const s of series) {
-      if (!isRec(s)) continue;
+      if (!isRec5(s)) continue;
       const dataKey = strOf(s.dataKey);
       axisRef(dataKey ?? strOf(s.name), dataKey ? "series[].dataKey" : "series[].name");
     }
@@ -1768,10 +2253,156 @@ function checkObjectChart(attrs, objectFields, findings) {
     );
   }
 }
+var REACT_FIELD_SPECS = {
+  ListView: {
+    // `fields` is the React overlay's "limit/order the columns"; `columns` the
+    // spec ListView prop. Both name columns on the bound object, and a page may
+    // write either. `hiddenFields`/`fieldOrder`/`filterableFields` are schema
+    // props outside the curated contract — unadvertised but honored by the
+    // renderer, so a stale name there is drift just the same.
+    fields: ["fields", "columns", "hiddenFields", "fieldOrder", "filterableFields"],
+    sorts: ["sort"],
+    nestedFields: ["userFilters", "grouping"],
+    filterArrays: ["filters"]
+  },
+  ObjectForm: {
+    fields: ["fields"],
+    keyedByField: ["initialValues"],
+    // `groups` is FormViewSchema's legacy alias for `sections`.
+    sections: ["sections", "groups"]
+  },
+  ObjectChart: {
+    // The axes are result columns (checkObjectChart owns them); `filter` is an
+    // ordinary ObjectQL predicate over the bound object, like ListView's.
+    filterArrays: ["filter"]
+  }
+};
+var PATH_SEP = " \u203A ";
+var SCHEMA_TYPE_BY_TAG = new Map(
+  import_ui2.REACT_BLOCKS.map((b) => [b.tag, b.schemaType])
+);
+var FILTER_PROPS = new Set(
+  Object.values(REACT_FIELD_SPECS).flatMap((s) => s.filterArrays ?? [])
+);
+function readableProps(values) {
+  const out = {};
+  for (const [k, v] of values) if (v !== NOT_STATIC) out[k] = v;
+  return out;
+}
+function subformFieldRefs(value, basePath) {
+  const child = [];
+  const parent = [];
+  if (!Array.isArray(value)) return { child, parent };
+  for (let i = 0; i < value.length; i++) {
+    const sub = value[i];
+    if (!isRec5(sub)) continue;
+    const at = (key) => `${basePath}[${i}].${key}`;
+    child.push({
+      objectName: strOf(sub.childObject),
+      refs: [
+        ...fieldRefsFrom(sub.columns, at("columns")),
+        ...fieldRefsFrom(sub.relationshipField, at("relationshipField")),
+        ...fieldRefsFrom(sub.amountField, at("amountField"))
+      ]
+    });
+    parent.push(...fieldRefsFrom(sub.totalField, at("totalField")));
+  }
+  return { child, parent };
+}
+function filterFieldRefs(node, basePath, out) {
+  if (!Array.isArray(node) || node.length === 0) return;
+  const head = node[0];
+  if (typeof head === "string" && (head.toLowerCase() === "and" || head.toLowerCase() === "or")) {
+    for (let i = 1; i < node.length; i++) filterFieldRefs(node[i], `${basePath}[${i}]`, out);
+    return;
+  }
+  if (Array.isArray(head)) {
+    for (let i = 0; i < node.length; i++) filterFieldRefs(node[i], `${basePath}[${i}]`, out);
+    return;
+  }
+  if (typeof head === "string" && head.length > 0 && node.length >= 2 && typeof node[1] === "string" && import_data3.VALID_AST_OPERATORS.has(node[1].toLowerCase())) {
+    out.push({ name: head, path: `${basePath}[0]` });
+  }
+}
+function reactFieldRefs(spec, values, basePath) {
+  const own = [];
+  const queried = [];
+  const readable = (key) => {
+    const v = values.get(key);
+    return v === NOT_STATIC ? void 0 : v;
+  };
+  const at = (key) => `${basePath}${PATH_SEP}${key}`;
+  for (const key of spec.fields ?? []) {
+    own.push(...fieldRefsFrom(readable(key), at(key)));
+  }
+  for (const key of spec.sorts ?? []) {
+    own.push(...sortFieldRefs(readable(key), at(key)));
+  }
+  for (const key of spec.nestedFields ?? []) {
+    const v = readable(key);
+    if (isRec5(v)) own.push(...fieldRefsFrom(v.fields, at(`${key}.fields`)));
+  }
+  for (const key of spec.sections ?? []) {
+    const v = readable(key);
+    if (!Array.isArray(v)) continue;
+    for (let i = 0; i < v.length; i++) {
+      const section = v[i];
+      if (!isRec5(section)) continue;
+      own.push(...fieldRefsFrom(section.fields, at(`${key}[${i}].fields`)));
+    }
+  }
+  for (const key of spec.keyedByField ?? []) {
+    const v = readable(key);
+    if (!isRec5(v)) continue;
+    for (const k of Object.keys(v)) own.push({ name: k, path: at(`${key}.${k}`) });
+  }
+  for (const key of spec.filterArrays ?? []) {
+    filterFieldRefs(values.get(key), at(key), queried);
+  }
+  return { own, queried };
+}
+function checkBlockFieldProps(tag, values, objectFields, where, path) {
+  const objectName = strOf(values.get("objectName"));
+  const out = [];
+  const spec = REACT_FIELD_SPECS[tag];
+  if (spec) {
+    const { own, queried } = reactFieldRefs(spec, values, path);
+    out.push(...checkFieldRefs(own, objectName, objectFields, where));
+    out.push(...checkFieldRefs(queried, objectName, objectFields, where, "queried"));
+  }
+  if (tag === "ObjectForm") {
+    const raw = values.get("subforms");
+    const subs = subformFieldRefs(raw === NOT_STATIC ? void 0 : raw, `${path}${PATH_SEP}subforms`);
+    for (const sub of subs.child) {
+      out.push(...checkFieldRefs(sub.refs, sub.objectName, objectFields, where));
+    }
+    out.push(...checkFieldRefs(subs.parent, objectName, objectFields, where));
+  }
+  const schemaType = tag === "Block" ? strOf(values.get("type")) : SCHEMA_TYPE_BY_TAG.get(tag);
+  if (schemaType) {
+    const props = readableProps(values);
+    if (schemaType === RELATED_LIST_TYPE) {
+      const split = relatedListFieldRefs(props, path, PATH_SEP);
+      out.push(...checkFieldRefs(split.related, split.relatedObject, objectFields, where));
+      out.push(...checkFieldRefs(split.picker, split.pickerObject, objectFields, where));
+    } else if (COMPONENT_FIELD_SPECS[schemaType]) {
+      out.push(
+        ...checkFieldRefs(
+          componentFieldRefs(schemaType, props, path, PATH_SEP) ?? [],
+          objectName,
+          objectFields,
+          where
+        )
+      );
+    }
+  }
+  return out;
+}
 function validateReactPageProps(stack) {
   const findings = [];
   const objectFields = indexObjectFields(stack);
-  const pages = asArray10(stack.pages);
+  const searchTargets = indexObjectSearchTargets(stack);
+  const pages = asArray12(stack.pages);
   for (let p = 0; p < pages.length; p++) {
     const page = pages[p];
     if (!page || page.kind !== "react") continue;
@@ -1801,7 +2432,10 @@ function validateReactPageProps(stack) {
             if (tsc.isJsxAttribute(a)) {
               const propName = a.name.getText(sf);
               used.add(propName);
-              values.set(propName, attrValue(tsc, sf, a));
+              values.set(
+                propName,
+                FILTER_PROPS.has(propName) ? filterAttrValue(tsc, sf, a) : attrValue(tsc, sf, a)
+              );
             }
           }
           const where = `page "${name}" \u203A <${tag}>`;
@@ -1836,6 +2470,23 @@ function validateReactPageProps(stack) {
           if (tag === "ObjectChart" && !hasSpread) {
             checkObjectChart({ values, where, path }, objectFields, findings);
           }
+          if (tag === "ListView" && !hasSpread) {
+            findings.push(
+              ...checkSearchableFieldList(
+                values.get("searchableFields"),
+                strOf(values.get("objectName")),
+                searchTargets,
+                where,
+                `${path} \u203A searchableFields`,
+                "searchableFields"
+              )
+            );
+          }
+          if (!hasSpread) {
+            findings.push(
+              ...checkBlockFieldProps(tag, values, objectFields, where, path)
+            );
+          }
         }
       }
       tsc.forEachChild(node, visit);
@@ -1847,11 +2498,11 @@ function validateReactPageProps(stack) {
 
 // src/validate-page-source-styling.ts
 var PAGE_SOURCE_CLASSNAME = "page-source-className-tailwind";
-var asArray11 = (v) => Array.isArray(v) ? v : [];
+var asArray13 = (v) => Array.isArray(v) ? v : [];
 var CLASSNAME_ATTR = /\bclassName\s*=\s*["'{]/g;
 function validatePageSourceStyling(stack) {
   const findings = [];
-  const pages = asArray11(stack.pages);
+  const pages = asArray13(stack.pages);
   for (let p = 0; p < pages.length; p++) {
     const page = pages[p];
     if (!page) continue;
@@ -1877,10 +2528,10 @@ function validatePageSourceStyling(stack) {
 }
 
 // src/validate-record-title.ts
-var import_data2 = require("@objectstack/spec/data");
+var import_data4 = require("@objectstack/spec/data");
 var TITLE_FORMAT_RETIRED = "title-format-retired";
 var TITLE_UNRESOLVABLE = "title-unresolvable";
-function asArray12(v) {
+function asArray14(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -1889,7 +2540,7 @@ function asArray12(v) {
 }
 function validateRecordTitle(stack) {
   const findings = [];
-  const objects = asArray12(stack.objects);
+  const objects = asArray14(stack.objects);
   for (let i = 0; i < objects.length; i++) {
     const obj = objects[i];
     const objName = typeof obj.name === "string" ? obj.name : `(object ${i})`;
@@ -1905,7 +2556,7 @@ function validateRecordTitle(stack) {
         hint: `titleFormat is a render-only template the server cannot return or query, and an explicit nameField now takes precedence. For a single-field title set nameField: '<field>'. For a composite title, add a formula field (returnType: 'text') and designate it via nameField.`
       });
     }
-    const completeness = (0, import_data2.objectTitleCompleteness)(obj);
+    const completeness = (0, import_data4.objectTitleCompleteness)(obj);
     if (completeness.status === "none") {
       findings.push({
         severity: "warning",
@@ -1925,7 +2576,7 @@ var FIELD_GROUP_UNDECLARED = "field-group-undeclared";
 var FIELD_GROUP_EMPTY = "field-group-empty";
 var FIELD_GROUP_SHADOWED = "field-group-shadowed";
 var SEMANTIC_ROLE_FIELD_UNKNOWN = "semantic-role-field-unknown";
-function asArray13(v) {
+function asArray15(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -1934,7 +2585,7 @@ function asArray13(v) {
 }
 function validateSemanticRoles(stack) {
   const findings = [];
-  const objects = asArray13(stack.objects);
+  const objects = asArray15(stack.objects);
   for (let i = 0; i < objects.length; i++) {
     const obj = objects[i];
     if (!obj || typeof obj !== "object") continue;
@@ -2029,7 +2680,7 @@ function validateSemanticRoles(stack) {
 // src/validate-form-layout.ts
 var FORM_FIELD_UNKNOWN = "form-field-unknown";
 var FORM_COLSPAN_ABSOLUTE = "absolute-colspan-discouraged";
-function asArray14(v) {
+function asArray16(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2054,13 +2705,13 @@ function boundObject(view) {
 function validateFormLayout(stack) {
   const findings = [];
   const objectFields = /* @__PURE__ */ new Map();
-  for (const obj of asArray14(stack.objects)) {
+  for (const obj of asArray16(stack.objects)) {
     const name = typeof obj.name === "string" ? obj.name : void 0;
     if (!name) continue;
     const fields = obj.fields && typeof obj.fields === "object" && !Array.isArray(obj.fields) ? Object.keys(obj.fields) : [];
     objectFields.set(name, new Set(fields));
   }
-  const views = asArray14(stack.views);
+  const views = asArray16(stack.views);
   for (let i = 0; i < views.length; i++) {
     const view = views[i];
     if (!view || typeof view !== "object") continue;
@@ -2110,7 +2761,7 @@ var VISIBILITY_ALIAS_DEPRECATED = "visibility-alias-deprecated";
 var VISIBILITY_ROOT_MISLAYERED = "visibility-root-mislayered";
 var CANONICAL = "visibleWhen";
 var ALIASES = ["visibleOn", "visibility"];
-function asArray15(v) {
+function asArray17(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2172,7 +2823,7 @@ function isFieldObject(entry) {
 function validateVisibilityPredicates(stack, opts = {}) {
   const layer = opts.layer ?? "runtime";
   const findings = [];
-  const views = asArray15(stack.views);
+  const views = asArray17(stack.views);
   for (let i = 0; i < views.length; i++) {
     const view = views[i];
     if (!view || typeof view !== "object") continue;
@@ -2195,7 +2846,7 @@ function validateVisibilityPredicates(stack, opts = {}) {
       }
     }
   }
-  const pages = asArray15(stack.pages);
+  const pages = asArray17(stack.pages);
   for (let i = 0; i < pages.length; i++) {
     const page = pages[i];
     if (!page || typeof page !== "object") continue;
@@ -2219,7 +2870,7 @@ function validateVisibilityPredicates(stack, opts = {}) {
 // src/validate-capability-references.ts
 var import_security = require("@objectstack/spec/security");
 var CAPABILITY_REFERENCE_UNKNOWN = "capability-reference-unknown";
-function asArray16(v) {
+function asArray18(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2244,13 +2895,13 @@ function validateCapabilityReferences(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
   const known = new Set(import_security.PLATFORM_CAPABILITY_NAMES);
-  for (const cap of asArray16(stack.capabilities)) {
+  for (const cap of asArray18(stack.capabilities)) {
     if (typeof cap.name === "string" && cap.name.length > 0) known.add(cap.name);
   }
-  for (const ps of asArray16(stack.permissions)) {
+  for (const ps of asArray18(stack.permissions)) {
     for (const cap of asCapArray(ps.systemPermissions)) known.add(cap);
   }
-  for (const seed of asArray16(stack.data)) {
+  for (const seed of asArray18(stack.data)) {
     if (seed.object !== "sys_capability") continue;
     for (const rec of Array.isArray(seed.records) ? seed.records : []) {
       const name = rec?.name;
@@ -2269,7 +2920,7 @@ function validateCapabilityReferences(stack) {
       hint
     });
   };
-  const objects = asArray16(stack.objects);
+  const objects = asArray18(stack.objects);
   for (let i = 0; i < objects.length; i++) {
     const obj = objects[i];
     if (!obj || typeof obj !== "object") continue;
@@ -2278,27 +2929,27 @@ function validateCapabilityReferences(stack) {
     for (const { cap, key } of flattenObjectRequired(obj.requiredPermissions)) {
       flag(cap, `object "${objName}"`, `${objPath}.requiredPermissions${key ? `.${key}` : ""}`);
     }
-    const fields = asArray16(obj.fields);
+    const fields = asArray18(obj.fields);
     for (const f of fields) {
       const fname = typeof f.name === "string" ? f.name : "(field)";
       for (const cap of asCapArray(f.requiredPermissions)) {
         flag(cap, `field "${objName}.${fname}"`, `${objPath}.fields.${fname}.requiredPermissions`);
       }
     }
-    for (const [ai, action] of asArray16(obj.actions).entries()) {
+    for (const [ai, action] of asArray18(obj.actions).entries()) {
       const aName = typeof action.name === "string" ? action.name : `(action ${ai})`;
       for (const cap of asCapArray(action.requiredPermissions)) {
         flag(cap, `action "${objName}.${aName}"`, `${objPath}.actions[${ai}].requiredPermissions`);
       }
     }
   }
-  for (const [i, action] of asArray16(stack.actions).entries()) {
+  for (const [i, action] of asArray18(stack.actions).entries()) {
     const aName = typeof action.name === "string" ? action.name : `(action ${i})`;
     for (const cap of asCapArray(action.requiredPermissions)) {
       flag(cap, `action "${aName}"`, `actions[${i}].requiredPermissions`);
     }
   }
-  const apps = asArray16(stack.apps);
+  const apps = asArray18(stack.apps);
   for (let i = 0; i < apps.length; i++) {
     const app = apps[i];
     if (!app || typeof app !== "object") continue;
@@ -2325,7 +2976,7 @@ function validateCapabilityReferences(stack) {
 }
 
 // src/validate-approval-approvers.ts
-var import_automation = require("@objectstack/spec/automation");
+var import_automation3 = require("@objectstack/spec/automation");
 var import_spec = require("@objectstack/spec");
 var import_formula2 = require("@objectstack/formula");
 var APPROVAL_APPROVER_NOT_MEMBERSHIP_TIER = "approval-approver-not-membership-tier";
@@ -2347,7 +2998,7 @@ var TYPE_FIX = {
   business_unit: "department",
   bu: "department"
 };
-function asArray17(v) {
+function asArray19(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2357,16 +3008,16 @@ function asArray17(v) {
 function validateApprovalApprovers(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const flows = asArray17(stack.flows);
-  const validTypes = new Set(import_automation.ApproverType.options);
+  const flows = asArray19(stack.flows);
+  const validTypes = new Set(import_automation3.ApproverType.options);
   for (let fi = 0; fi < flows.length; fi++) {
     const flow = flows[fi];
     if (!flow || typeof flow !== "object") continue;
     const flowName = typeof flow.name === "string" ? flow.name : `(flow ${fi})`;
-    const nodes = Array.isArray(flow.nodes) ? flow.nodes : [];
-    for (let ni = 0; ni < nodes.length; ni++) {
-      const node = nodes[ni];
-      if (!node || node.type !== import_automation.APPROVAL_NODE_TYPE) continue;
+    const walked = walkFlowNodes(flow, `flows[${fi}]`);
+    for (let ni = 0; ni < walked.length; ni++) {
+      const { node, path: nodePath } = walked[ni];
+      if (!node || node.type !== import_automation3.APPROVAL_NODE_TYPE) continue;
       const nodeId = typeof node.id === "string" ? node.id : `(node ${ni})`;
       const cfg = node.config ?? {};
       const approvers = Array.isArray(cfg.approvers) ? cfg.approvers : [];
@@ -2376,7 +3027,7 @@ function validateApprovalApprovers(stack) {
         if (!a || typeof a !== "object") continue;
         const type = typeof a.type === "string" ? a.type : "";
         const value = typeof a.value === "string" ? a.value : "";
-        const path = `flows[${fi}].nodes[${ni}].config.approvers[${ai}]`;
+        const path = `${nodePath}.config.approvers[${ai}]`;
         if (type && !validTypes.has(type)) {
           const fix = TYPE_FIX[type];
           findings.push({
@@ -2384,12 +3035,12 @@ function validateApprovalApprovers(stack) {
             rule: APPROVAL_APPROVER_TYPE_UNKNOWN,
             where,
             path: `${path}.type`,
-            message: `approver type '${type}' is not an ApproverType (${import_automation.ApproverType.options.join(" | ")}).`,
+            message: `approver type '${type}' is not an ApproverType (${import_automation3.ApproverType.options.join(" | ")}).`,
             hint: fix ? `Use the spec value: { type: '${fix}', value: '${value}' }.` : `Pick one of the spec values; unmapped types degrade to an inert '${type}:${value}' literal at runtime.`
           });
           continue;
         }
-        const canonical = (0, import_automation.canonicalApproverType)(type);
+        const canonical = (0, import_automation3.canonicalApproverType)(type);
         if (canonical === "expression") {
           const source = value.trim();
           if (!source) {
@@ -2446,8 +3097,8 @@ function validateApprovalApprovers(stack) {
             message: `approver { type: '${type}', value: '${value}' } resolves against the better-auth org-membership tier (sys_member.role: ${MEMBERSHIP_TIER_LIST}) \u2014 '${value}' is not a membership tier, so this approver matches nobody and the request stalls.`,
             hint: `If '${value}' is an org position, author { type: 'position', value: '${value}' } (resolved via sys_user_position, ADR-0090 D3). Keep type 'org_membership_level' only for membership tiers (${MEMBERSHIP_TIER_LIST}) \u2014 the vocabulary is closed (ADR-0108), so a business role is always a position.`
           });
-        } else if (type in import_automation.DEPRECATED_APPROVER_TYPES) {
-          const fix = (0, import_automation.canonicalApproverType)(type);
+        } else if (type in import_automation3.DEPRECATED_APPROVER_TYPES) {
+          const fix = (0, import_automation3.canonicalApproverType)(type);
           findings.push({
             severity: "warning",
             rule: APPROVAL_APPROVER_TYPE_DEPRECATED,
@@ -2456,7 +3107,7 @@ function validateApprovalApprovers(stack) {
             message: `approver type '${type}' is the deprecated spelling of '${fix}' (ADR-0090 D3) and is removed in the next major.`,
             hint: `Author { type: '${fix}', value: '${value}' }. It resolves identically today.`
           });
-        } else if (import_automation.APPROVER_VALUE_BINDINGS[canonical]?.source === "unsupported") {
+        } else if (import_automation3.APPROVER_VALUE_BINDINGS[canonical]?.source === "unsupported") {
           findings.push({
             severity: "warning",
             rule: APPROVAL_APPROVER_TYPE_UNSUPPORTED,
@@ -2467,7 +3118,7 @@ function validateApprovalApprovers(stack) {
           });
         }
         const declaredOrg = a.organization;
-        if (typeof declaredOrg === "string" && declaredOrg.trim() !== "" && import_automation.ApproverType.options.includes(canonical) && !(0, import_automation.approverTypeIsOrgScoped)(canonical)) {
+        if (typeof declaredOrg === "string" && declaredOrg.trim() !== "" && import_automation3.ApproverType.options.includes(canonical) && !(0, import_automation3.approverTypeIsOrgScoped)(canonical)) {
           findings.push({
             severity: "error",
             rule: APPROVAL_APPROVER_CROSS_ORG_UNSUPPORTED,
@@ -2481,38 +3132,38 @@ function validateApprovalApprovers(stack) {
       const routable = approvers.filter(
         (a) => a && typeof a === "object" && typeof a.type === "string"
       );
-      if (routable.length > 0 && routable.every((a) => GROUP_ROUTED_TYPES.has((0, import_automation.canonicalApproverType)(String(a.type))))) {
+      if (routable.length > 0 && routable.every((a) => GROUP_ROUTED_TYPES.has((0, import_automation3.canonicalApproverType)(String(a.type))))) {
         const locks = cfg.lockRecord !== false;
         findings.push({
           severity: "info",
           rule: APPROVAL_APPROVERS_MAY_RESOLVE_EMPTY,
           where,
-          path: `flows[${fi}].nodes[${ni}].config.approvers`,
+          path: `${nodePath}.config.approvers`,
           message: `every approver on this node routes to a group (position/team/department) whose members are runtime data \u2014 if none is staffed, the request resolves to an empty slate and waits forever` + (locks ? `, and (lockRecord) the record stays locked with no in-product recovery.` : `.`),
           hint: `Make sure at least one target is always staffed, or add a guaranteed-staffed fallback approver, e.g. { type: 'org_membership_level', value: 'owner' }. A request that still lands empty is recoverable only by a platform/tenant admin override (#3424).`
         });
       }
       const hasExpression = approvers.some(
-        (a) => a && typeof a === "object" && (0, import_automation.canonicalApproverType)(String(a.type ?? "")) === "expression"
+        (a) => a && typeof a === "object" && (0, import_automation3.canonicalApproverType)(String(a.type ?? "")) === "expression"
       );
       if (hasExpression && cfg.onEmptyApprovers == null) {
         findings.push({
           severity: "info",
           rule: APPROVAL_EXPRESSION_NO_EMPTY_POLICY,
           where,
-          path: `flows[${fi}].nodes[${ni}].config`,
+          path: `${nodePath}.config`,
           message: `this node resolves approvers from an expression but declares no onEmptyApprovers \u2014 an empty result falls back to the default ('admin_rescue': request opens, only a privileged admin can act).`,
           hint: `Declare the empty-slate policy explicitly: onEmptyApprovers: 'admin_rescue' (hold for admin takeover), 'fail' (fail the node \u2014 config bug), or 'auto_approve' (wave through, output.autoApproved = true).`
         });
       }
-      const declaredOutputs = (0, import_automation.normalizeDecisionOutputs)(cfg.decisionOutputs).map((d) => d.key);
+      const declaredOutputs = (0, import_automation3.normalizeDecisionOutputs)(cfg.decisionOutputs).map((d) => d.key);
       const reserved = declaredOutputs.filter((k) => RESERVED_OUTPUT_KEYS.has(k));
       if (reserved.length) {
         findings.push({
           severity: "error",
           rule: APPROVAL_DECISION_OUTPUTS_RESERVED,
           where,
-          path: `flows[${fi}].nodes[${ni}].config.decisionOutputs`,
+          path: `${nodePath}.config.decisionOutputs`,
           message: `decisionOutputs declares reserved key(s) \`${reserved.join("`, `")}\` \u2014 the resume envelope owns them, so every decide carrying them is rejected.`,
           hint: `Rename the output key(s); any name other than 'decision'/'requestId' works.`
         });
@@ -2525,7 +3176,7 @@ function validateApprovalApprovers(stack) {
             severity: "warning",
             rule: APPROVAL_ESCALATION_REASSIGN_NO_TARGET,
             where,
-            path: `flows[${fi}].nodes[${ni}].config.escalation.escalateTo`,
+            path: `${nodePath}.config.escalation.escalateTo`,
             message: `escalation.action is 'reassign' but escalateTo is empty \u2014 at runtime the escalation degrades to a notify and the request stays with the original approvers.`,
             hint: `Set escalateTo to a position machine name (expanded via sys_user_position, ADR-0090 D3) or a specific user id, or change action to 'notify'.`
           });
@@ -2652,7 +3303,7 @@ var OWD_WIDTH = {
   public_read: 1,
   public_read_write: 2
 };
-function asArray18(v) {
+function asArray20(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2678,7 +3329,7 @@ function refOf(def) {
   return typeof r === "string" && r ? r : void 0;
 }
 function firstMasterDetailField(obj) {
-  for (const f of asArray18(obj.fields)) {
+  for (const f of asArray20(obj.fields)) {
     if (f.type === "master_detail") {
       return { name: String(f.name ?? "?"), parent: refOf(f) };
     }
@@ -2691,8 +3342,8 @@ function grantsObjectAccess(p) {
 function validateSecurityPosture(stack, opts) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const objects = asArray18(stack.objects);
-  const permissionSets = asArray18(stack.permissions);
+  const objects = asArray20(stack.objects);
+  const permissionSets = asArray20(stack.permissions);
   for (let i = 0; i < objects.length; i++) {
     const obj = objects[i];
     if (!obj || typeof obj !== "object") continue;
@@ -2821,10 +3472,10 @@ function validateSecurityPosture(stack, opts) {
     if (!obj || typeof obj !== "object" || isSystemObject(obj)) continue;
     const objName = typeof obj.name === "string" ? obj.name : `(object ${i})`;
     flagRole("object", obj.name, obj.label, `object "${objName}"`, `objects[${i}].name`);
-    for (const f of asArray18(obj.fields)) {
+    for (const f of asArray20(obj.fields)) {
       flagRole("field", f.name, f.label, `field "${objName}.${String(f.name ?? "?")}"`, `objects[${i}].fields.${String(f.name ?? "?")}.name`);
     }
-    for (const [ai, action] of asArray18(obj.actions).entries()) {
+    for (const [ai, action] of asArray20(obj.actions).entries()) {
       flagRole("action", action.name, action.label, `action "${objName}.${String(action.name ?? "?")}"`, `objects[${i}].actions[${ai}].name`);
     }
   }
@@ -2833,19 +3484,19 @@ function validateSecurityPosture(stack, opts) {
     if (!ps || typeof ps !== "object") continue;
     flagRole("permission set", ps.name, ps.label, `permission set "${String(ps.name ?? i)}"`, `permissions[${i}].name`);
   }
-  for (const [i, pos] of asArray18(stack.positions).entries()) {
+  for (const [i, pos] of asArray20(stack.positions).entries()) {
     flagRole("position", pos.name, pos.label, `position "${String(pos.name ?? i)}"`, `positions[${i}].name`);
   }
-  for (const [i, app] of asArray18(stack.apps).entries()) {
+  for (const [i, app] of asArray20(stack.apps).entries()) {
     flagRole("app", app.name, app.label, `app "${String(app.name ?? i)}"`, `apps[${i}].name`);
   }
-  for (const [i, book] of asArray18(stack.books).entries()) {
+  for (const [i, book] of asArray20(stack.books).entries()) {
     flagRole("book", book.name, book.label, `book "${String(book.name ?? i)}"`, `books[${i}].name`);
   }
   const stackSetNames = new Set(
     permissionSets.map((ps) => typeof ps.name === "string" ? ps.name : void 0).filter((n) => !!n)
   );
-  for (const [i, book] of asArray18(stack.books).entries()) {
+  for (const [i, book] of asArray20(stack.books).entries()) {
     const audience = book.audience;
     if (!audience || typeof audience !== "object") continue;
     const setName = audience.permissionSet;
@@ -2923,7 +3574,7 @@ function validateSecurityPosture(stack, opts) {
   }
   const GRANT_SEED_OBJECTS = /* @__PURE__ */ new Set(["sys_user_position", "sys_user_permission_set"]);
   const nowMs = opts?.nowMs ?? Date.now();
-  for (const [i, seed] of asArray18(stack.data).entries()) {
+  for (const [i, seed] of asArray20(stack.data).entries()) {
     const seedObject = typeof seed.object === "string" ? seed.object : "";
     if (!GRANT_SEED_OBJECTS.has(seedObject)) continue;
     const records = Array.isArray(seed.records) ? seed.records : [];
@@ -2967,7 +3618,7 @@ function validateSecurityPosture(stack, opts) {
 var ORG_AXIS_PERMISSION_INHERITANCE = "org-axis-permission-inheritance";
 var ORG_AXIS_CROSS_ORG_BU_GRANT = "org-axis-cross-org-bu-grant";
 var ORG_PARENT_FIELD = "parent_organization_id";
-function asArray19(v) {
+function asArray21(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -2988,9 +3639,9 @@ var INHERITANCE_HINT = `Remove the ${ORG_PARENT_FIELD} reference. Cross-organiza
 function validateOrgAxisRedLines(stack) {
   const findings = [];
   const cfg = stack ?? {};
-  const permissionSets = asArray19(cfg.permissions ?? cfg.permissionSets);
+  const permissionSets = asArray21(cfg.permissions ?? cfg.permissionSets);
   permissionSets.forEach((ps, psIndex) => {
-    asArray19(ps.rowLevelSecurity).forEach((policy, pIndex) => {
+    asArray21(ps.rowLevelSecurity).forEach((policy, pIndex) => {
       for (const clause of ["using", "check"]) {
         if (!str(policy[clause]).includes(ORG_PARENT_FIELD)) continue;
         findings.push({
@@ -3004,10 +3655,10 @@ function validateOrgAxisRedLines(stack) {
       }
     });
   });
-  const objects = asArray19(cfg.objects);
+  const objects = asArray21(cfg.objects);
   objects.forEach((object, oIndex) => {
     const objectName = str(object.name) || String(oIndex);
-    asArray19(object.rowLevelSecurity ?? object.rls).forEach((policy, pIndex) => {
+    asArray21(object.rowLevelSecurity ?? object.rls).forEach((policy, pIndex) => {
       for (const clause of ["using", "check"]) {
         if (!str(policy[clause]).includes(ORG_PARENT_FIELD)) continue;
         findings.push({
@@ -3021,7 +3672,7 @@ function validateOrgAxisRedLines(stack) {
       }
     });
   });
-  asArray19(cfg.sharingRules ?? cfg.sharing).forEach((rule, rIndex) => {
+  asArray21(cfg.sharingRules ?? cfg.sharing).forEach((rule, rIndex) => {
     const criteria = JSON.stringify(rule.criteria ?? rule.filter ?? "");
     const sharedTo = JSON.stringify(rule.sharedTo ?? rule.recipient ?? "");
     if (criteria.includes(ORG_PARENT_FIELD) || sharedTo.includes(ORG_PARENT_FIELD)) {
@@ -3038,7 +3689,7 @@ function validateOrgAxisRedLines(stack) {
   const tenancyDisabledObjects = new Set(
     objects.filter((o) => isTenancyDisabled(o)).map((o) => str(o.name)).filter(Boolean)
   );
-  asArray19(cfg.sharingRules ?? cfg.sharing).forEach((rule, rIndex) => {
+  asArray21(cfg.sharingRules ?? cfg.sharing).forEach((rule, rIndex) => {
     const target = str(rule.object ?? rule.objectName);
     if (!target || !tenancyDisabledObjects.has(target)) return;
     const sharedTo = rule.sharedTo ?? rule.recipient;
@@ -3059,14 +3710,14 @@ function validateOrgAxisRedLines(stack) {
 // src/validate-dashboard-action-refs.ts
 var DASHBOARD_ACTION_TARGET_UNDEFINED = "dashboard-action-target-undefined";
 var DASHBOARD_ACTION_ROUTE_UNRESOLVED = "dashboard-action-route-unresolved";
-function asArray20(v) {
+function asArray22(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName(v) {
+function strName5(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 var MODAL_VERB_RE = /^(?:create|new|add|edit|update)_(.+)$/;
@@ -3083,7 +3734,7 @@ var URL_COLLECTION_TO_STACK_KEY = {
   views: "views"
 };
 function viewContainerName(item) {
-  return strName(item.name) ?? strName(item.id) ?? strName(item.object) ?? strName(item.list?.data && item.list.data.object) ?? strName(item.form?.data && item.form.data.object);
+  return strName5(item.name) ?? strName5(item.id) ?? strName5(item.object) ?? strName5(item.list?.data && item.list.data.object) ?? strName5(item.form?.data && item.form.data.object);
 }
 function collectKnownTargets(stack) {
   const actions = /* @__PURE__ */ new Set();
@@ -3093,22 +3744,22 @@ function collectKnownTargets(stack) {
   const pages = /* @__PURE__ */ new Set();
   const views = /* @__PURE__ */ new Set();
   const collectNames = (v, into, name) => {
-    for (const item of asArray20(v)) {
+    for (const item of asArray22(v)) {
       if (!item || typeof item !== "object") continue;
       const n = name(item);
       if (n) into.add(n);
     }
   };
-  collectNames(stack.actions, actions, (a) => strName(a.name));
-  for (const obj of asArray20(stack.objects)) {
+  collectNames(stack.actions, actions, (a) => strName5(a.name));
+  for (const obj of asArray22(stack.objects)) {
     if (!obj || typeof obj !== "object") continue;
-    const n = strName(obj.name);
+    const n = strName5(obj.name);
     if (n) objects.add(n);
-    collectNames(obj.actions, actions, (a) => strName(a.name));
+    collectNames(obj.actions, actions, (a) => strName5(a.name));
   }
-  collectNames(stack.reports, reports, (r) => strName(r.name));
-  collectNames(stack.dashboards, dashboards, (d) => strName(d.name));
-  collectNames(stack.pages, pages, (p) => strName(p.name));
+  collectNames(stack.reports, reports, (r) => strName5(r.name));
+  collectNames(stack.dashboards, dashboards, (d) => strName5(d.name));
+  collectNames(stack.pages, pages, (p) => strName5(p.name));
   collectNames(stack.views, views, viewContainerName);
   for (const o of objects) views.add(o);
   return { actions, objects, reports, dashboards, pages, views };
@@ -3140,14 +3791,14 @@ function resolveUrlRoute(target, known) {
 function validateDashboardActionRefs(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const dashboards = asArray20(stack.dashboards);
+  const dashboards = asArray22(stack.dashboards);
   if (dashboards.length === 0) return findings;
   const known = collectKnownTargets(stack);
   const checkOne = (action, where, path) => {
-    const target = strName(action.actionUrl);
+    const target = strName5(action.actionUrl);
     if (!target) return;
     if (target.includes("${")) return;
-    const actionType = strName(action.actionType) ?? "url";
+    const actionType = strName5(action.actionType) ?? "url";
     if (actionType === "script" || actionType === "modal") {
       if (resolveActionTarget(actionType, target, known)) return;
       const kindWord = actionType === "script" ? "script" : "modal";
@@ -3178,25 +3829,25 @@ function validateDashboardActionRefs(stack) {
   for (let di = 0; di < dashboards.length; di++) {
     const dash = dashboards[di];
     if (!dash || typeof dash !== "object") continue;
-    const dashName = strName(dash.name) ?? `(dashboard ${di})`;
+    const dashName = strName5(dash.name) ?? `(dashboard ${di})`;
     const dashPath = `dashboards[${di}]`;
-    const headerActions = asArray20(dash.header?.actions);
+    const headerActions = asArray22(dash.header?.actions);
     for (let ai = 0; ai < headerActions.length; ai++) {
       const action = headerActions[ai];
       if (!action || typeof action !== "object") continue;
-      const label2 = strName(action.label) ?? strName(action.actionUrl) ?? `#${ai}`;
+      const label2 = strName5(action.label) ?? strName5(action.actionUrl) ?? `#${ai}`;
       checkOne(
         action,
         `dashboard "${dashName}" \xB7 header action "${label2}"`,
         `${dashPath}.header.actions[${ai}].actionUrl`
       );
     }
-    const widgets = asArray20(dash.widgets);
+    const widgets = asArray22(dash.widgets);
     for (let wi = 0; wi < widgets.length; wi++) {
       const widget = widgets[wi];
       if (!widget || typeof widget !== "object") continue;
-      if (!strName(widget.actionUrl)) continue;
-      const widgetId = strName(widget.id) ?? `#${wi}`;
+      if (!strName5(widget.actionUrl)) continue;
+      const widgetId = strName5(widget.id) ?? `#${wi}`;
       checkOne(
         { actionType: widget.actionType, actionUrl: widget.actionUrl },
         `dashboard "${dashName}" \xB7 widget "${widgetId}" action`,
@@ -3208,10 +3859,10 @@ function validateDashboardActionRefs(stack) {
 }
 
 // src/validate-filter-tokens.ts
-var import_data3 = require("@objectstack/spec/data");
+var import_data5 = require("@objectstack/spec/data");
 var FILTER_TOKEN_UNKNOWN = "filter-token-unknown";
 var FILTER_KEYS = /* @__PURE__ */ new Set(["filter", "filters", "runtimeFilter"]);
-function asArray21(v) {
+function asArray23(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -3221,11 +3872,11 @@ function asArray21(v) {
 function label(v, fallback) {
   return typeof v === "string" && v.length > 0 ? v : fallback;
 }
-var KNOWN_LIST = import_data3.CONTEXT_TOKENS.join("}, {");
+var KNOWN_LIST = import_data5.CONTEXT_TOKENS.join("}, {");
 function walkFilterValues(node, path, where, out, seen) {
   if (node === null || node === void 0) return;
   if (typeof node === "string") {
-    const cls = (0, import_data3.classifyFilterToken)(node);
+    const cls = (0, import_data5.classifyFilterToken)(node);
     if (cls?.kind === "unknown") {
       const suggestion = cls.suggestion;
       out.push({
@@ -3280,7 +3931,7 @@ function validateFilterTokens(stack) {
     ["apps", "app"]
   ];
   for (const [key, kind] of surfaces) {
-    const items = asArray21(stack[key]);
+    const items = asArray23(stack[key]);
     items.forEach((item, i) => {
       const name = label(item.name ?? item.id, `#${i}`);
       if (kind === "dashboard") {
@@ -3306,18 +3957,18 @@ function validateFilterTokens(stack) {
 }
 
 // src/validate-object-references.ts
-var import_system = require("@objectstack/spec/system");
-var PLATFORM_NAMES = [...import_system.PLATFORM_PROVIDED_OBJECT_NAMES];
+var import_system2 = require("@objectstack/spec/system");
+var PLATFORM_NAMES = [...import_system2.PLATFORM_PROVIDED_OBJECT_NAMES];
 var OBJECT_REFERENCE_UNKNOWN = "object-reference-unknown";
 var OBJECT_REFERENCE_UNREGISTERED_PLATFORM = "object-reference-unregistered-platform";
-function asArray22(v) {
+function asArray24(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName2(v) {
+function strName6(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 function isInterpolated(target) {
@@ -3325,11 +3976,11 @@ function isInterpolated(target) {
   const open = target.indexOf("{");
   return open !== -1 && target.indexOf("}", open + 2) !== -1;
 }
-function suggest2(target, known) {
+function suggest3(target, known) {
   let best;
   let bestScore = Infinity;
   for (const candidate of known) {
-    const d = distance(target, candidate);
+    const d = distance2(target, candidate);
     if (d < bestScore) {
       bestScore = d;
       best = candidate;
@@ -3338,7 +3989,7 @@ function suggest2(target, known) {
   const limit = Math.max(2, Math.floor(target.length / 3));
   return best && bestScore <= limit ? ` Did you mean "${best}"?` : "";
 }
-function distance(a, b) {
+function distance2(a, b) {
   const m = a.length;
   const n = b.length;
   if (m === 0) return n;
@@ -3357,25 +4008,25 @@ function distance(a, b) {
 function validateObjectReferences(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const objects = asArray22(stack.objects);
+  const objects = asArray24(stack.objects);
   const ownObjects = /* @__PURE__ */ new Set();
   for (const obj of objects) {
-    const n = strName2(obj.name);
+    const n = strName6(obj.name);
     if (n) ownObjects.add(n);
   }
   const check = (target, where, path, subject, fix) => {
-    const name = strName2(target);
+    const name = strName6(target);
     if (!name) return;
     if (isInterpolated(name)) return;
     if (ownObjects.has(name)) return;
-    if ((0, import_system.isPlatformProvidedObjectName)(name)) return;
-    if ((0, import_system.hasPlatformObjectPrefix)(name)) {
+    if ((0, import_system2.isPlatformProvidedObjectName)(name)) return;
+    if ((0, import_system2.hasPlatformObjectPrefix)(name)) {
       findings.push({
         severity: "warning",
         rule: OBJECT_REFERENCE_UNREGISTERED_PLATFORM,
         where,
         path,
-        message: `${subject} "${name}" carries a platform namespace prefix, but no platform package, official plugin, or cloud runtime object registers that name \u2014 and this stack does not define it either. If nothing provides it at runtime the reference resolves to nothing and fails silently.` + suggest2(name, PLATFORM_NAMES),
+        message: `${subject} "${name}" carries a platform namespace prefix, but no platform package, official plugin, or cloud runtime object registers that name \u2014 and this stack does not define it either. If nothing provides it at runtime the reference resolves to nothing and fails silently.` + suggest3(name, PLATFORM_NAMES),
         hint: `Check the spelling against the object the providing package actually registers (e.g. "sys_approval_request", not "sys_approval_process" \u2014 the process object was removed when approval became a flow node, ADR-0019). If a third-party package genuinely provides it, this warning is expected. ${fix}`
       });
       return;
@@ -3385,26 +4036,26 @@ function validateObjectReferences(stack) {
       rule: OBJECT_REFERENCE_UNKNOWN,
       where,
       path,
-      message: `${subject} "${name}" resolves to no object defined in this stack. The reference is inert at runtime \u2014 nothing reports the miss.` + suggest2(name, ownObjects),
+      message: `${subject} "${name}" resolves to no object defined in this stack. The reference is inert at runtime \u2014 nothing reports the miss.` + suggest3(name, ownObjects),
       hint: `Point it at one of this stack's objects, or at a platform object by its full name (the platform user object is "sys_user", not "user"). ${fix}` + (ownObjects.size > 0 ? ` Defined objects: ${[...ownObjects].sort().join(", ")}.` : "")
     });
   };
   const checkActionParams2 = (action, actionPath, actionLabel) => {
-    const params = asArray22(action.params);
+    const params = asArray24(action.params);
     for (let pi = 0; pi < params.length; pi++) {
       const param = params[pi];
       if (!param || typeof param !== "object") continue;
-      const paramLabel = strName2(param.name) ?? strName2(param.field) ?? `#${pi}`;
+      const paramLabel = strName6(param.name) ?? strName6(param.field) ?? `#${pi}`;
       const where = `${actionLabel} \xB7 param "${paramLabel}"`;
       check(
-        strName2(param.reference),
+        strName6(param.reference),
         where,
         `${actionPath}.params[${pi}].reference`,
         "record-picker target",
         "Without a resolvable target the picker degrades to a raw record-id text input."
       );
       check(
-        strName2(param.objectOverride),
+        strName6(param.objectOverride),
         where,
         `${actionPath}.params[${pi}].objectOverride`,
         "field-backed param object",
@@ -3412,70 +4063,70 @@ function validateObjectReferences(stack) {
       );
     }
   };
-  const globalActions = asArray22(stack.actions);
+  const globalActions = asArray24(stack.actions);
   for (let ai = 0; ai < globalActions.length; ai++) {
     const action = globalActions[ai];
     if (!action || typeof action !== "object") continue;
-    checkActionParams2(action, `actions[${ai}]`, `action "${strName2(action.name) ?? `#${ai}`}"`);
+    checkActionParams2(action, `actions[${ai}]`, `action "${strName6(action.name) ?? `#${ai}`}"`);
   }
   for (let oi = 0; oi < objects.length; oi++) {
     const obj = objects[oi];
     if (!obj || typeof obj !== "object") continue;
-    const objName = strName2(obj.name) ?? `#${oi}`;
-    const objActions = asArray22(obj.actions);
+    const objName = strName6(obj.name) ?? `#${oi}`;
+    const objActions = asArray24(obj.actions);
     for (let ai = 0; ai < objActions.length; ai++) {
       const action = objActions[ai];
       if (!action || typeof action !== "object") continue;
       checkActionParams2(
         action,
         `objects[${oi}].actions[${ai}]`,
-        `object "${objName}" \xB7 action "${strName2(action.name) ?? `#${ai}`}"`
+        `object "${objName}" \xB7 action "${strName6(action.name) ?? `#${ai}`}"`
       );
     }
   }
-  const dashboards = asArray22(stack.dashboards);
+  const dashboards = asArray24(stack.dashboards);
   for (let di = 0; di < dashboards.length; di++) {
     const dash = dashboards[di];
     if (!dash || typeof dash !== "object") continue;
-    const dashName = strName2(dash.name) ?? `#${di}`;
-    const filters = asArray22(dash.globalFilters);
+    const dashName = strName6(dash.name) ?? `#${di}`;
+    const filters = asArray24(dash.globalFilters);
     for (let fi = 0; fi < filters.length; fi++) {
       const filter = filters[fi];
       if (!filter || typeof filter !== "object") continue;
       const optionsFrom = filter.optionsFrom;
       if (!optionsFrom || typeof optionsFrom !== "object") continue;
       check(
-        strName2(optionsFrom.object),
-        `dashboard "${dashName}" \xB7 filter "${strName2(filter.name) ?? `#${fi}`}"`,
+        strName6(optionsFrom.object),
+        `dashboard "${dashName}" \xB7 filter "${strName6(filter.name) ?? `#${fi}`}"`,
         `dashboards[${di}].globalFilters[${fi}].optionsFrom.object`,
         "filter options source",
         "The dropdown fetches its options from this object; an unknown one renders an always-empty filter."
       );
     }
   }
-  const apps = asArray22(stack.apps);
+  const apps = asArray24(stack.apps);
   for (let ai = 0; ai < apps.length; ai++) {
     const app = apps[ai];
     if (!app || typeof app !== "object") continue;
-    const appName = strName2(app.name) ?? `#${ai}`;
+    const appName = strName6(app.name) ?? `#${ai}`;
     const walkNav = (items, basePath) => {
-      const navItems = asArray22(items);
+      const navItems = asArray24(items);
       for (let ni = 0; ni < navItems.length; ni++) {
         const nav = navItems[ni];
         if (!nav || typeof nav !== "object") continue;
-        const navId = strName2(nav.id) ?? `#${ni}`;
+        const navId = strName6(nav.id) ?? `#${ni}`;
         const where = `app "${appName}" \xB7 nav "${navId}"`;
         const navPath = `${basePath}[${ni}]`;
         check(
-          strName2(nav.requiresObject),
+          strName6(nav.requiresObject),
           where,
           `${navPath}.requiresObject`,
           "capability gate object",
           "The entry is hidden unless this object is registered, so a typo hides it permanently \u2014 and it suppresses the nav cross-reference check that would have caught the target."
         );
-        if (nav.requiresObject && strName2(nav.objectName)) {
+        if (nav.requiresObject && strName6(nav.objectName)) {
           check(
-            strName2(nav.objectName),
+            strName6(nav.objectName),
             where,
             `${navPath}.objectName`,
             "navigation target",
@@ -3486,7 +4137,7 @@ function validateObjectReferences(stack) {
       }
     };
     walkNav(app.navigation, `apps[${ai}].navigation`);
-    const areas = asArray22(app.areas);
+    const areas = asArray24(app.areas);
     for (let ri = 0; ri < areas.length; ri++) {
       walkNav(areas[ri]?.navigation, `apps[${ai}].areas[${ri}].navigation`);
     }
@@ -3494,88 +4145,22 @@ function validateObjectReferences(stack) {
   return findings;
 }
 
-// src/page-walk.ts
-function isRec2(v) {
-  return !!v && typeof v === "object" && !Array.isArray(v);
-}
-function strName3(v) {
-  return typeof v === "string" && v.length > 0 ? v : void 0;
-}
-var SOURCE_AUTHORED_KINDS = /* @__PURE__ */ new Set(["html", "react", "jsx"]);
-function isSourceAuthoredPage(page) {
-  const kind = strName3(page.kind);
-  return kind !== void 0 && SOURCE_AUTHORED_KINDS.has(kind);
-}
-function walkPageComponents(page, pagePath) {
-  const out = [];
-  if (!isRec2(page) || isSourceAuthoredPage(page)) return out;
-  const pageObject = strName3(page.object);
-  const visit = (node, path, inheritedObject) => {
-    if (!isRec2(node)) return;
-    const props = isRec2(node.properties) ? node.properties : void 0;
-    const dataSource = isRec2(node.dataSource) ? node.dataSource : void 0;
-    const objectName = strName3(dataSource?.object) ?? strName3(props?.object) ?? inheritedObject;
-    out.push({ component: node, path, objectName });
-    if (!props) return;
-    if (Array.isArray(props.items)) {
-      for (let i = 0; i < props.items.length; i++) {
-        const item = props.items[i];
-        if (!isRec2(item) || !Array.isArray(item.children)) continue;
-        for (let c = 0; c < item.children.length; c++) {
-          visit(item.children[c], `${path}.properties.items[${i}].children[${c}]`, objectName);
-        }
-      }
-    }
-    if (Array.isArray(props.children)) {
-      for (let i = 0; i < props.children.length; i++) {
-        visit(props.children[i], `${path}.properties.children[${i}]`, objectName);
-      }
-    }
-    for (const key of ["body", "footer"]) {
-      const slotList = props[key];
-      if (!Array.isArray(slotList)) continue;
-      for (let i = 0; i < slotList.length; i++) {
-        visit(slotList[i], `${path}.properties.${key}[${i}]`, objectName);
-      }
-    }
-  };
-  const regions = Array.isArray(page.regions) ? page.regions : [];
-  for (let r = 0; r < regions.length; r++) {
-    const region = regions[r];
-    if (!isRec2(region) || !Array.isArray(region.components)) continue;
-    for (let c = 0; c < region.components.length; c++) {
-      visit(region.components[c], `${pagePath}.regions[${r}].components[${c}]`, pageObject);
-    }
-  }
-  const slots = isRec2(page.slots) ? page.slots : void 0;
-  if (slots) {
-    for (const [slot, value] of Object.entries(slots)) {
-      const list3 = Array.isArray(value) ? value : [value];
-      const indexed = Array.isArray(value);
-      for (let i = 0; i < list3.length; i++) {
-        visit(list3[i], `${pagePath}.slots.${slot}${indexed ? `[${i}]` : ""}`, pageObject);
-      }
-    }
-  }
-  return out;
-}
-
 // src/validate-action-name-refs.ts
 var ACTION_NAME_UNDEFINED = "action-name-undefined";
-function asArray23(v) {
+function asArray25(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName4(v) {
+function strName7(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 function strList(v) {
   return Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.length > 0) : [];
 }
-function distance2(a, b) {
+function distance3(a, b) {
   const m = a.length;
   const n = b.length;
   if (m === 0) return n;
@@ -3591,11 +4176,11 @@ function distance2(a, b) {
   }
   return prev[n];
 }
-function suggest3(target, known) {
+function suggest4(target, known) {
   let best;
   let bestScore = Infinity;
   for (const candidate of known) {
-    const d = distance2(target, candidate);
+    const d = distance3(target, candidate);
     if (d < bestScore) {
       bestScore = d;
       best = candidate;
@@ -3606,14 +4191,14 @@ function suggest3(target, known) {
 }
 function collectActionNames(stack) {
   const names = /* @__PURE__ */ new Set();
-  for (const action of asArray23(stack.actions)) {
-    const n = strName4(action?.name);
+  for (const action of asArray25(stack.actions)) {
+    const n = strName7(action?.name);
     if (n) names.add(n);
   }
-  for (const obj of asArray23(stack.objects)) {
+  for (const obj of asArray25(stack.objects)) {
     if (!obj || typeof obj !== "object") continue;
-    for (const action of asArray23(obj.actions)) {
-      const n = strName4(action?.name);
+    for (const action of asArray25(obj.actions)) {
+      const n = strName7(action?.name);
       if (n) names.add(n);
     }
   }
@@ -3630,15 +4215,15 @@ function validateActionNameRefs(stack) {
       rule: ACTION_NAME_UNDEFINED,
       where,
       path,
-      message: `${surface} names action "${name}", which is defined by no action in this stack (neither \`stack.actions\` nor any object's \`actions\`). The button renders and does nothing when clicked \u2014 a dead affordance the runtime cannot dispatch.` + suggest3(name, known),
+      message: `${surface} names action "${name}", which is defined by no action in this stack (neither \`stack.actions\` nor any object's \`actions\`). The button renders and does nothing when clicked \u2014 a dead affordance the runtime cannot dispatch.` + suggest4(name, known),
       hint: `Define an action named "${name}" (in \`stack.actions\` or the object's \`actions\`) with the location this surface needs, remove the reference, or ignore this if the action is contributed by another installed package.` + (known.size > 0 ? ` Defined actions: ${[...known].sort().join(", ")}.` : "")
     });
   };
-  const views = asArray23(stack.views);
+  const views = asArray25(stack.views);
   for (let vi = 0; vi < views.length; vi++) {
     const view = views[vi];
     if (!view || typeof view !== "object") continue;
-    const viewName = strName4(view.name) ?? strName4(view.object) ?? `#${vi}`;
+    const viewName = strName7(view.name) ?? strName7(view.object) ?? `#${vi}`;
     const checkListContainer = (container, label2, path) => {
       if (!container || typeof container !== "object") return;
       const list3 = container;
@@ -3649,238 +4234,66 @@ function validateActionNameRefs(stack) {
             names[ai],
             `view "${viewName}" \xB7 ${label2} \xB7 ${key}`,
             `${path}.${key}[${ai}]`,
-            key === "bulkActions" ? "Bulk-action menu" : "Row-action menu"
-          );
-        }
-      }
-    };
-    checkListContainer(view.list, "list", `views[${vi}].list`);
-    const listViews = view.listViews;
-    if (listViews && typeof listViews === "object" && !Array.isArray(listViews)) {
-      for (const [key, lv] of Object.entries(listViews)) {
-        checkListContainer(lv, `listViews.${key}`, `views[${vi}].listViews.${key}`);
-      }
-    }
-  }
-  const pages = asArray23(stack.pages);
-  for (let pi = 0; pi < pages.length; pi++) {
-    const page = pages[pi];
-    if (!page || typeof page !== "object") continue;
-    const pageName = strName4(page.name) ?? `#${pi}`;
-    for (const { component, path } of walkPageComponents(page, `pages[${pi}]`)) {
-      const props = component.properties;
-      if (!props || typeof props !== "object") continue;
-      const names = strList(props.actionNames);
-      for (let ai = 0; ai < names.length; ai++) {
-        check(
-          names[ai],
-          `page "${pageName}" \xB7 component "${strName4(component.type) ?? "?"}"`,
-          `${path}.properties.actionNames[${ai}]`,
-          "Quick-actions bar"
-        );
-      }
-    }
-  }
-  const apps = asArray23(stack.apps);
-  for (let ai = 0; ai < apps.length; ai++) {
-    const app = apps[ai];
-    if (!app || typeof app !== "object") continue;
-    const appName = strName4(app.name) ?? `#${ai}`;
-    const walkNav = (items, basePath) => {
-      const navItems = asArray23(items);
-      for (let ni = 0; ni < navItems.length; ni++) {
-        const nav = navItems[ni];
-        if (!nav || typeof nav !== "object") continue;
-        const navPath = `${basePath}[${ni}]`;
-        const actionDef = nav.actionDef;
-        const actionName = strName4(actionDef?.actionName);
-        if (nav.type === "action" && actionName) {
-          check(
-            actionName,
-            `app "${appName}" \xB7 nav "${strName4(nav.id) ?? `#${ni}`}"`,
-            `${navPath}.actionDef.actionName`,
-            "Navigation action item"
-          );
-        }
-        if (Array.isArray(nav.children)) walkNav(nav.children, `${navPath}.children`);
-      }
-    };
-    walkNav(app.navigation, `apps[${ai}].navigation`);
-    const areas = asArray23(app.areas);
-    for (let ri = 0; ri < areas.length; ri++) {
-      walkNav(areas[ri]?.navigation, `apps[${ai}].areas[${ri}].navigation`);
-    }
-  }
-  return findings;
-}
-
-// src/validate-page-field-bindings.ts
-var PAGE_FIELD_UNKNOWN = "page-field-unknown";
-var SYSTEM_FIELDS4 = /* @__PURE__ */ new Set([
-  "id",
-  "created_at",
-  "created_by",
-  "updated_at",
-  "updated_by",
-  "owner_id",
-  "organization_id",
-  "tenant_id",
-  "user_id",
-  "deleted_at"
-]);
-function asArray24(v) {
-  if (Array.isArray(v)) return v;
-  if (v && typeof v === "object") {
-    return Object.entries(v).map(([name, def]) => ({ name, ...def }));
-  }
-  return [];
-}
-function strName5(v) {
-  return typeof v === "string" && v.length > 0 ? v : void 0;
-}
-function isRec3(v) {
-  return !!v && typeof v === "object" && !Array.isArray(v);
-}
-function fieldRefsFrom(value, basePath) {
-  const out = [];
-  const one = (v, path) => {
-    const bare = strName5(v);
-    if (bare) {
-      out.push({ name: bare, path });
-      return;
-    }
-    if (!isRec3(v)) return;
-    const named = strName5(v.field) ?? strName5(v.name);
-    if (named) out.push({ name: named, path: `${path}.${strName5(v.field) ? "field" : "name"}` });
-  };
-  if (Array.isArray(value)) {
-    for (let i = 0; i < value.length; i++) one(value[i], `${basePath}[${i}]`);
-  } else {
-    one(value, basePath);
-  }
-  return out;
-}
-var COMPONENT_FIELD_SPECS = {
-  "record:highlights": { props: ["fields"] },
-  // `sections`/`hideFields` are not in RecordDetailsProps, but every real page
-  // authors them (they survive because `properties` is unvalidated).
-  "record:details": { props: ["fields", "hideFields"], nestedSections: ["sections"] },
-  "record:path": { props: ["statusField"] },
-  "element:number": { props: ["field"] },
-  "element:filter": { props: ["fields"] },
-  "element:form": { props: ["fields"] },
-  // The schema says `displayField`; real pages author `labelField`. Accept both.
-  "element:record_picker": { props: ["displayField", "labelField", "searchFields"] }
-};
-var RELATED_LIST_TYPE = "record:related_list";
-function validatePageFieldBindings(stack) {
-  const findings = [];
-  if (!stack || typeof stack !== "object") return findings;
-  const objectFields = /* @__PURE__ */ new Map();
-  for (const obj of asArray24(stack.objects)) {
-    const name = strName5(obj.name);
-    if (!name) continue;
-    const names = /* @__PURE__ */ new Set();
-    for (const f of asArray24(obj.fields)) {
-      const fn = strName5(f.name);
-      if (fn) names.add(fn);
-    }
-    objectFields.set(name, names);
-  }
-  const pages = asArray24(stack.pages);
-  for (let pi = 0; pi < pages.length; pi++) {
-    const page = pages[pi];
-    if (!page || typeof page !== "object") continue;
-    const pageName = strName5(page.name) ?? `#${pi}`;
-    const checkRefs = (refs, objectName, where) => {
-      if (!objectName) return;
-      const known = objectFields.get(objectName);
-      if (!known) return;
-      for (const ref of refs) {
-        if (ref.name.includes(".")) continue;
-        if (known.has(ref.name) || SYSTEM_FIELDS4.has(ref.name)) continue;
-        findings.push({
-          severity: "warning",
-          rule: PAGE_FIELD_UNKNOWN,
-          where,
-          path: ref.path,
-          message: `field "${ref.name}" is not a field on object "${objectName}" \u2014 the component silently skips it, so it never renders.`,
-          hint: `Fix the field name, or add "${ref.name}" to ${objectName}. References must match the object's field names exactly.` + (known.size > 0 ? ` Object fields: ${[...known].sort().join(", ")}.` : "")
-        });
-      }
-    };
-    for (const { component, path, objectName } of walkPageComponents(page, `pages[${pi}]`)) {
-      const type = strName5(component.type);
-      const props = isRec3(component.properties) ? component.properties : void 0;
-      if (!type || !props) continue;
-      const where = `page "${pageName}" \xB7 ${type}`;
-      if (type === RELATED_LIST_TYPE) {
-        const relatedObject = strName5(props.objectName);
-        const relatedRefs = [
-          ...fieldRefsFrom(props.columns, `${path}.properties.columns`),
-          ...fieldRefsFrom(props.sort, `${path}.properties.sort`),
-          ...fieldRefsFrom(props.filter, `${path}.properties.filter`),
-          ...fieldRefsFrom(props.relationshipField, `${path}.properties.relationshipField`)
-        ];
-        checkRefs(relatedRefs, relatedObject, where);
-        checkRefs(
-          fieldRefsFrom(props.relationshipValueField, `${path}.properties.relationshipValueField`),
-          objectName,
-          where
-        );
-        const add = isRec3(props.add) ? props.add : void 0;
-        const picker = add && isRec3(add.picker) ? add.picker : void 0;
-        if (picker) {
-          checkRefs(
-            [
-              ...fieldRefsFrom(picker.valueField, `${path}.properties.add.picker.valueField`),
-              ...fieldRefsFrom(picker.labelField, `${path}.properties.add.picker.labelField`)
-            ],
-            strName5(picker.object),
-            where
-          );
-        }
-        if (add) {
-          checkRefs(
-            fieldRefsFrom(add.linkField, `${path}.properties.add.linkField`),
-            relatedObject,
-            where
+            key === "bulkActions" ? "Bulk-action menu" : "Row-action menu"
           );
         }
-        continue;
       }
-      const spec = COMPONENT_FIELD_SPECS[type];
-      if (!spec) continue;
-      const refs = [];
-      for (const key of spec.props ?? []) {
-        refs.push(...fieldRefsFrom(props[key], `${path}.properties.${key}`));
+    };
+    checkListContainer(view.list, "list", `views[${vi}].list`);
+    const listViews = view.listViews;
+    if (listViews && typeof listViews === "object" && !Array.isArray(listViews)) {
+      for (const [key, lv] of Object.entries(listViews)) {
+        checkListContainer(lv, `listViews.${key}`, `views[${vi}].listViews.${key}`);
       }
-      for (const key of spec.nestedSections ?? []) {
-        const sections = Array.isArray(props[key]) ? props[key] : [];
-        for (let si = 0; si < sections.length; si++) {
-          const section = sections[si];
-          if (!isRec3(section)) continue;
-          refs.push(
-            ...fieldRefsFrom(section.fields, `${path}.properties.${key}[${si}].fields`)
-          );
-        }
+    }
+  }
+  const pages = asArray25(stack.pages);
+  for (let pi = 0; pi < pages.length; pi++) {
+    const page = pages[pi];
+    if (!page || typeof page !== "object") continue;
+    const pageName = strName7(page.name) ?? `#${pi}`;
+    for (const { component, path } of walkPageComponents(page, `pages[${pi}]`)) {
+      const props = component.properties;
+      if (!props || typeof props !== "object") continue;
+      const names = strList(props.actionNames);
+      for (let ai = 0; ai < names.length; ai++) {
+        check(
+          names[ai],
+          `page "${pageName}" \xB7 component "${strName7(component.type) ?? "?"}"`,
+          `${path}.properties.actionNames[${ai}]`,
+          "Quick-actions bar"
+        );
       }
-      checkRefs(refs, objectName, where);
     }
-    const cfg = isRec3(page.interfaceConfig) ? page.interfaceConfig : void 0;
-    if (cfg) {
-      const cfgObject = strName5(cfg.source) ?? strName5(page.object);
-      const base = `pages[${pi}].interfaceConfig`;
-      const refs = [
-        ...fieldRefsFrom(cfg.columns, `${base}.columns`),
-        ...fieldRefsFrom(cfg.sort, `${base}.sort`),
-        ...fieldRefsFrom(cfg.filterBy, `${base}.filterBy`)
-      ];
-      const userFilters = isRec3(cfg.userFilters) ? cfg.userFilters : void 0;
-      if (userFilters) {
-        refs.push(...fieldRefsFrom(userFilters.fields, `${base}.userFilters.fields`));
+  }
+  const apps = asArray25(stack.apps);
+  for (let ai = 0; ai < apps.length; ai++) {
+    const app = apps[ai];
+    if (!app || typeof app !== "object") continue;
+    const appName = strName7(app.name) ?? `#${ai}`;
+    const walkNav = (items, basePath) => {
+      const navItems = asArray25(items);
+      for (let ni = 0; ni < navItems.length; ni++) {
+        const nav = navItems[ni];
+        if (!nav || typeof nav !== "object") continue;
+        const navPath = `${basePath}[${ni}]`;
+        const actionDef = nav.actionDef;
+        const actionName = strName7(actionDef?.actionName);
+        if (nav.type === "action" && actionName) {
+          check(
+            actionName,
+            `app "${appName}" \xB7 nav "${strName7(nav.id) ?? `#${ni}`}"`,
+            `${navPath}.actionDef.actionName`,
+            "Navigation action item"
+          );
+        }
+        if (Array.isArray(nav.children)) walkNav(nav.children, `${navPath}.children`);
       }
-      checkRefs(refs, cfgObject, `page "${pageName}" \xB7 interfaceConfig`);
+    };
+    walkNav(app.navigation, `apps[${ai}].navigation`);
+    const areas = asArray25(app.areas);
+    for (let ri = 0; ri < areas.length; ri++) {
+      walkNav(areas[ri]?.navigation, `apps[${ai}].areas[${ri}].navigation`);
     }
   }
   return findings;
@@ -3891,23 +4304,23 @@ var CHART_DIMENSION_UNKNOWN = "chart-dimension-unknown";
 var CHART_MEASURE_UNKNOWN = "chart-measure-unknown";
 var CHART_DATASET_UNKNOWN = "chart-dataset-unknown";
 var CHART_AXIS_NOT_SELECTED = "chart-axis-not-selected";
-function asArray25(v) {
+function asArray26(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName6(v) {
+function strName8(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 function strList2(v) {
   return Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.length > 0) : [];
 }
-function isRec4(v) {
+function isRec6(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function distance3(a, b) {
+function distance4(a, b) {
   const m = a.length;
   const n = b.length;
   if (m === 0) return n;
@@ -3923,11 +4336,11 @@ function distance3(a, b) {
   }
   return prev[n];
 }
-function suggest4(target, known) {
+function suggest5(target, known) {
   let best;
   let bestScore = Infinity;
   for (const c of known) {
-    const d = distance3(target, c);
+    const d = distance4(target, c);
     if (d < bestScore) {
       bestScore = d;
       best = c;
@@ -3942,17 +4355,17 @@ function list2(names) {
 }
 function indexDatasets(stack) {
   const out = /* @__PURE__ */ new Map();
-  for (const ds of asArray25(stack.datasets)) {
-    const name = strName6(ds.name);
+  for (const ds of asArray26(stack.datasets)) {
+    const name = strName8(ds.name);
     if (!name) continue;
     const dimensions = /* @__PURE__ */ new Set();
-    for (const d of asArray25(ds.dimensions)) {
-      const n = strName6(d.name);
+    for (const d of asArray26(ds.dimensions)) {
+      const n = strName8(d.name);
       if (n) dimensions.add(n);
     }
     const measures = /* @__PURE__ */ new Set();
-    for (const m of asArray25(ds.measures)) {
-      const n = strName6(m.name);
+    for (const m of asArray26(ds.measures)) {
+      const n = strName8(m.name);
       if (n) measures.add(n);
     }
     out.set(name, { dimensions, measures });
@@ -3975,7 +4388,7 @@ function validateChartBindings(stack) {
         where: binding.where,
         path: `${binding.path}.dataset`,
         message: `binds dataset "${dsName}", which resolves to no declared dataset \u2014 the chart has no data to render.`,
-        hint: `Declared datasets: ${list2(datasets.keys())}.${suggest4(dsName, datasets.keys())} Define it with defineDataset() or fix the reference (ADR-0021).`
+        hint: `Declared datasets: ${list2(datasets.keys())}.${suggest5(dsName, datasets.keys())} Define it with defineDataset() or fix the reference (ADR-0021).`
       });
       return;
     }
@@ -3987,7 +4400,7 @@ function validateChartBindings(stack) {
         where: binding.where,
         path,
         message: `"${name}" is not a dimension declared by dataset "${dsName}". Post-ADR-0021 result rows are keyed by DIMENSION NAME, not the base field, so this axis renders with no categories.`,
-        hint: `Dataset dimensions: ${list2(ds.dimensions)}.${suggest4(name, ds.dimensions)} Declare the dimension on the dataset, or bind an existing one.`
+        hint: `Dataset dimensions: ${list2(ds.dimensions)}.${suggest5(name, ds.dimensions)} Declare the dimension on the dataset, or bind an existing one.`
       });
     };
     const measureRef = (name, path, selected2) => {
@@ -3998,7 +4411,7 @@ function validateChartBindings(stack) {
           where: binding.where,
           path,
           message: `"${name}" is not a measure declared by dataset "${dsName}". Post-ADR-0021 result rows are keyed by MEASURE NAME (e.g. "sum_amount"), not the base field (e.g. "amount"), so this series comes back empty.`,
-          hint: `Dataset measures: ${list2(ds.measures)}.${suggest4(name, ds.measures)} Declare the measure on the dataset, or bind an existing one.`
+          hint: `Dataset measures: ${list2(ds.measures)}.${suggest5(name, ds.measures)} Declare the measure on the dataset, or bind an existing one.`
         });
         return;
       }
@@ -4030,29 +4443,29 @@ function validateChartBindings(stack) {
     if (binding.yAxis) measureRef(binding.yAxis.name, binding.yAxis.path, selected);
     for (const s of binding.series ?? []) measureRef(s.name, s.path, selected);
   };
-  const reports = asArray25(stack.reports);
+  const reports = asArray26(stack.reports);
   for (let ri = 0; ri < reports.length; ri++) {
     const report = reports[ri];
-    if (!isRec4(report)) continue;
-    const reportName = strName6(report.name) ?? `#${ri}`;
+    if (!isRec6(report)) continue;
+    const reportName = strName8(report.name) ?? `#${ri}`;
     const checkReportChart = (chart, dataset, values, where, path) => {
-      if (!isRec4(chart)) return;
+      if (!isRec6(chart)) return;
       check({
         dataset,
         // `values` is the report's measure SELECTION, not a chart ref; feeding
         // it in lets the yAxis "declared but not selected" check work without
         // reporting the selection itself twice.
         values: { names: values, path: `${path}.values` },
-        xAxis: strName6(chart.xAxis) ? { name: strName6(chart.xAxis), path: `${path}.chart.xAxis` } : void 0,
-        yAxis: strName6(chart.yAxis) ? { name: strName6(chart.yAxis), path: `${path}.chart.yAxis` } : void 0,
-        series: asArray25(chart.series).map((s, si) => ({ name: strName6(s.name), path: `${path}.chart.series[${si}].name` })).filter((s) => !!s.name),
+        xAxis: strName8(chart.xAxis) ? { name: strName8(chart.xAxis), path: `${path}.chart.xAxis` } : void 0,
+        yAxis: strName8(chart.yAxis) ? { name: strName8(chart.yAxis), path: `${path}.chart.yAxis` } : void 0,
+        series: asArray26(chart.series).map((s, si) => ({ name: strName8(s.name), path: `${path}.chart.series[${si}].name` })).filter((s) => !!s.name),
         where,
         path: `${path}.chart`
       });
     };
     checkReportChart(
       report.chart,
-      strName6(report.dataset),
+      strName8(report.dataset),
       strList2(report.values),
       `report "${reportName}" \xB7 chart`,
       `reports[${ri}]`
@@ -4060,45 +4473,45 @@ function validateChartBindings(stack) {
     const blocks = Array.isArray(report.blocks) ? report.blocks : [];
     for (let bi = 0; bi < blocks.length; bi++) {
       const block = blocks[bi];
-      if (!isRec4(block)) continue;
+      if (!isRec6(block)) continue;
       checkReportChart(
         block.chart,
-        strName6(block.dataset),
+        strName8(block.dataset),
         strList2(block.values),
-        `report "${reportName}" \xB7 block "${strName6(block.name) ?? `#${bi}`}" chart`,
+        `report "${reportName}" \xB7 block "${strName8(block.name) ?? `#${bi}`}" chart`,
         `reports[${ri}].blocks[${bi}]`
       );
     }
   }
   const checkListChart = (container, where, path) => {
-    if (!isRec4(container)) return;
+    if (!isRec6(container)) return;
     const chart = container.chart;
-    if (!isRec4(chart)) return;
+    if (!isRec6(chart)) return;
     check({
-      dataset: strName6(chart.dataset),
+      dataset: strName8(chart.dataset),
       dimensions: { names: strList2(chart.dimensions), path: `${path}.chart.dimensions` },
       values: { names: strList2(chart.values), path: `${path}.chart.values` },
       where,
       path: `${path}.chart`
     });
   };
-  const views = asArray25(stack.views);
+  const views = asArray26(stack.views);
   for (let vi = 0; vi < views.length; vi++) {
     const view = views[vi];
-    if (!isRec4(view)) continue;
-    const viewName = strName6(view.name) ?? strName6(view.objectName) ?? `#${vi}`;
+    if (!isRec6(view)) continue;
+    const viewName = strName8(view.name) ?? strName8(view.objectName) ?? `#${vi}`;
     checkListChart(view.list, `view "${viewName}" \xB7 list chart`, `views[${vi}].list`);
-    if (isRec4(view.listViews)) {
+    if (isRec6(view.listViews)) {
       for (const [key, lv] of Object.entries(view.listViews)) {
         checkListChart(lv, `view "${viewName}" \xB7 listViews.${key} chart`, `views[${vi}].listViews.${key}`);
       }
     }
   }
-  const objects = asArray25(stack.objects);
+  const objects = asArray26(stack.objects);
   for (let oi = 0; oi < objects.length; oi++) {
     const obj = objects[oi];
-    if (!isRec4(obj) || !isRec4(obj.listViews)) continue;
-    const objName = strName6(obj.name) ?? `#${oi}`;
+    if (!isRec6(obj) || !isRec6(obj.listViews)) continue;
+    const objName = strName8(obj.name) ?? `#${oi}`;
     for (const [key, lv] of Object.entries(obj.listViews)) {
       checkListChart(
         lv,
@@ -4107,22 +4520,22 @@ function validateChartBindings(stack) {
       );
     }
   }
-  const pages = asArray25(stack.pages);
+  const pages = asArray26(stack.pages);
   for (let pi = 0; pi < pages.length; pi++) {
     const page = pages[pi];
-    if (!isRec4(page)) continue;
-    const pageName = strName6(page.name) ?? `#${pi}`;
+    if (!isRec6(page)) continue;
+    const pageName = strName8(page.name) ?? `#${pi}`;
     for (const { component, path } of walkPageComponents(page, `pages[${pi}]`)) {
-      const props = isRec4(component.properties) ? component.properties : void 0;
-      if (!props || !strName6(props.dataset)) continue;
-      const axisRefs = asArray25(props.yAxis).map((a, ai) => ({ name: strName6(a.field), path: `${path}.properties.yAxis[${ai}].field` })).filter((a) => !!a.name);
-      const seriesRefs = asArray25(props.series).map((s, si) => ({ name: strName6(s.name), path: `${path}.properties.series[${si}].name` })).filter((s) => !!s.name);
+      const props = isRec6(component.properties) ? component.properties : void 0;
+      if (!props || !strName8(props.dataset)) continue;
+      const axisRefs = asArray26(props.yAxis).map((a, ai) => ({ name: strName8(a.field), path: `${path}.properties.yAxis[${ai}].field` })).filter((a) => !!a.name);
+      const seriesRefs = asArray26(props.series).map((s, si) => ({ name: strName8(s.name), path: `${path}.properties.series[${si}].name` })).filter((s) => !!s.name);
       check({
-        dataset: strName6(props.dataset),
+        dataset: strName8(props.dataset),
         dimensions: { names: strList2(props.dimensions), path: `${path}.properties.dimensions` },
         values: { names: strList2(props.values), path: `${path}.properties.values` },
         series: [...axisRefs, ...seriesRefs],
-        where: `page "${pageName}" \xB7 ${strName6(component.type) ?? "chart"}`,
+        where: `page "${pageName}" \xB7 ${strName8(component.type) ?? "chart"}`,
         path: `${path}.properties`
       });
     }
@@ -4131,10 +4544,10 @@ function validateChartBindings(stack) {
 }
 
 // src/validate-nav-access.ts
-var import_system2 = require("@objectstack/spec/system");
+var import_system3 = require("@objectstack/spec/system");
 
 // src/build-access-matrix.ts
-function asArray26(v) {
+function asArray27(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
@@ -4145,13 +4558,13 @@ function buildAccessMatrix(stack) {
   const entries = [];
   if (!stack || typeof stack !== "object") return { version: 1, entries };
   const owdByObject = /* @__PURE__ */ new Map();
-  for (const obj of asArray26(stack.objects)) {
+  for (const obj of asArray27(stack.objects)) {
     const name = typeof obj.name === "string" ? obj.name : "";
     if (!name) continue;
     const owd = obj.sharingModel ?? obj.security?.sharingModel;
     if (typeof owd === "string") owdByObject.set(name, owd);
   }
-  for (const ps of asArray26(stack.permissions)) {
+  for (const ps of asArray27(stack.permissions)) {
     const psName = typeof ps.name === "string" ? ps.name : "";
     if (!psName) continue;
     const objects = ps.objects && typeof ps.objects === "object" ? ps.objects : {};
@@ -4224,34 +4637,34 @@ function diffAccessMatrix(before, after) {
 
 // src/validate-nav-access.ts
 var NAV_OBJECT_UNGRANTED = "nav-object-ungranted";
-function asArray27(v) {
+function asArray28(v) {
   if (Array.isArray(v)) return v;
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName7(v) {
+function strName9(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 function collectNavExposures(stack) {
   const out = [];
-  const apps = asArray27(stack.apps);
+  const apps = asArray28(stack.apps);
   for (let ai = 0; ai < apps.length; ai++) {
     const app = apps[ai];
     if (!app || typeof app !== "object") continue;
-    const appName = strName7(app.name) ?? `#${ai}`;
+    const appName = strName9(app.name) ?? `#${ai}`;
     const walk = (items, basePath) => {
-      const navItems = asArray27(items);
+      const navItems = asArray28(items);
       for (let ni = 0; ni < navItems.length; ni++) {
         const nav = navItems[ni];
         if (!nav || typeof nav !== "object") continue;
         const navPath = `${basePath}[${ni}]`;
-        const objectName = strName7(nav.objectName);
+        const objectName = strName9(nav.objectName);
         if (nav.type === "object" && objectName) {
           out.push({
             objectName,
-            where: `app "${appName}" \xB7 nav "${strName7(nav.id) ?? `#${ni}`}"`,
+            where: `app "${appName}" \xB7 nav "${strName9(nav.id) ?? `#${ni}`}"`,
             path: `${navPath}.objectName`
           });
         }
@@ -4259,7 +4672,7 @@ function collectNavExposures(stack) {
       }
     };
     walk(app.navigation, `apps[${ai}].navigation`);
-    const areas = asArray27(app.areas);
+    const areas = asArray28(app.areas);
     for (let ri = 0; ri < areas.length; ri++) {
       walk(areas[ri]?.navigation, `apps[${ai}].areas[${ri}].navigation`);
     }
@@ -4269,13 +4682,13 @@ function collectNavExposures(stack) {
 function validateNavAccess(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const permissionSets = asArray27(stack.permissions);
+  const permissionSets = asArray28(stack.permissions);
   if (permissionSets.length === 0) return findings;
   const exposures = collectNavExposures(stack);
   if (exposures.length === 0) return findings;
   const ownObjects = /* @__PURE__ */ new Set();
-  for (const obj of asArray27(stack.objects)) {
-    const n = strName7(obj.name);
+  for (const obj of asArray28(stack.objects)) {
+    const n = strName9(obj.name);
     if (n) ownObjects.add(n);
   }
   const readable = /* @__PURE__ */ new Set();
@@ -4287,7 +4700,7 @@ function validateNavAccess(stack) {
   for (const exposure of exposures) {
     const { objectName } = exposure;
     if (reported.has(objectName)) continue;
-    if ((0, import_system2.isPlatformProvidedObjectName)(objectName)) continue;
+    if ((0, import_system3.isPlatformProvidedObjectName)(objectName)) continue;
     if (!ownObjects.has(objectName)) continue;
     if (readable.has(objectName)) continue;
     reported.add(objectName);
@@ -4304,21 +4717,21 @@ function validateNavAccess(stack) {
 }
 
 // src/validate-translation-references.ts
-var import_system3 = require("@objectstack/spec/system");
+var import_system4 = require("@objectstack/spec/system");
 var TRANSLATION_TARGET_UNKNOWN = "translation-target-unknown";
 var TRANSLATION_OPTION_KEY_UNKNOWN = "translation-option-key-unknown";
-function isRec5(v) {
+function isRec7(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function asArray28(v) {
+function asArray29(v) {
   if (Array.isArray(v)) return v;
-  if (isRec5(v)) return Object.entries(v).map(([name, def]) => ({ name, ...isRec5(def) ? def : {} }));
+  if (isRec7(v)) return Object.entries(v).map(([name, def]) => ({ name, ...isRec7(def) ? def : {} }));
   return [];
 }
-function strName8(v) {
+function strName10(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
-function distance4(a, b) {
+function distance5(a, b) {
   const m = a.length;
   const n = b.length;
   if (m === 0) return n;
@@ -4334,7 +4747,7 @@ function distance4(a, b) {
   }
   return prev[n];
 }
-function suggest5(target, known) {
+function suggest6(target, known) {
   const names = [...known];
   const segmentMatch = names.find(
     (candidate) => candidate.endsWith(`_${target}`) || candidate.startsWith(`${target}_`)
@@ -4343,7 +4756,7 @@ function suggest5(target, known) {
   let best;
   let bestScore = Infinity;
   for (const candidate of names) {
-    const d = distance4(target, candidate);
+    const d = distance5(target, candidate);
     if (d < bestScore) {
       bestScore = d;
       best = candidate;
@@ -4358,20 +4771,10 @@ function listNames(names, max = 12) {
   const shown = all.slice(0, max).join(", ");
   return all.length > max ? `${shown}, \u2026 (${all.length} total)` : shown;
 }
-var SYSTEM_FIELDS5 = /* @__PURE__ */ new Set([
-  "id",
+var IMPLICIT_FIELDS = /* @__PURE__ */ new Set([
+  ...SYSTEM_FIELDS,
   "_id",
   "name",
-  "created_at",
-  "created_by",
-  "updated_at",
-  "updated_by",
-  "owner_id",
-  "organization_id",
-  "tenant_id",
-  "user_id",
-  "is_deleted",
-  "deleted_at",
   "space"
 ]);
 function emptyFacts() {
@@ -4383,20 +4786,20 @@ function collectViewRecord(view, factsFor) {
   const addView = (objectName, name) => {
     if (objectName && name) factsFor(objectName).views.add(name);
   };
-  const listBinding = isRec5(view.list) ? bindingOf(view.list) : void 0;
-  if (isRec5(view.list)) addView(listBinding, strName8(view.list.name));
-  addView(recordObject ?? listBinding, strName8(view.name));
+  const listBinding = isRec7(view.list) ? bindingOf(view.list) : void 0;
+  if (isRec7(view.list)) addView(listBinding, strName10(view.list.name));
+  addView(recordObject ?? listBinding, strName10(view.name));
   for (const key of ["listViews", "formViews"]) {
     const container = view[key];
-    if (!isRec5(container)) continue;
+    if (!isRec7(container)) continue;
     for (const [subKey, sub] of Object.entries(container)) {
-      if (!isRec5(sub)) continue;
+      if (!isRec7(sub)) continue;
       const binding = bindingOf(sub) ?? listBinding;
       addView(binding, subKey);
-      addView(binding, strName8(sub.name));
+      addView(binding, strName10(sub.name));
       if (binding) {
-        for (const section of asArray28(sub.sections)) {
-          const sectionName = strName8(section.name);
+        for (const section of asArray29(sub.sections)) {
+          const sectionName = strName10(section.name);
           if (sectionName) factsFor(binding).sections.add(sectionName);
         }
       }
@@ -4404,14 +4807,14 @@ function collectViewRecord(view, factsFor) {
   }
   const sectionBinding = recordObject ?? listBinding;
   if (sectionBinding) {
-    for (const section of asArray28(view.sections)) {
-      const sectionName = strName8(section.name);
+    for (const section of asArray29(view.sections)) {
+      const sectionName = strName10(section.name);
       if (sectionName) factsFor(sectionBinding).sections.add(sectionName);
     }
   }
 }
 function viewObjectName(view) {
-  return strName8(view.objectName) ?? strName8(view.object) ?? (isRec5(view.data) ? strName8(view.data.object) : void 0);
+  return strName10(view.objectName) ?? strName10(view.object) ?? (isRec7(view.data) ? strName10(view.data.object) : void 0);
 }
 function readOptions(field) {
   const raw = field.options;
@@ -4423,14 +4826,14 @@ function readOptions(field) {
         values.add(opt);
         continue;
       }
-      if (!isRec5(opt)) continue;
-      const value = strName8(opt.value);
+      if (!isRec7(opt)) continue;
+      const value = strName10(opt.value);
       if (!value) continue;
       values.add(value);
-      const label2 = strName8(opt.label);
+      const label2 = strName10(opt.label);
       if (label2) byLabel.set(label2.toLowerCase(), value);
     }
-  } else if (isRec5(raw)) {
+  } else if (isRec7(raw)) {
     for (const [value, label2] of Object.entries(raw)) {
       values.add(value);
       if (typeof label2 === "string" && label2.length > 0) byLabel.set(label2.toLowerCase(), value);
@@ -4450,48 +4853,48 @@ function buildUniverse(stack) {
     }
     return facts;
   };
-  for (const obj of asArray28(stack.objects)) {
-    const objectName = strName8(obj.name);
+  for (const obj of asArray29(stack.objects)) {
+    const objectName = strName10(obj.name);
     if (!objectName) continue;
     const facts = factsFor(objectName);
-    for (const field of asArray28(obj.fields)) {
-      const fieldName = strName8(field.name);
+    for (const field of asArray29(obj.fields)) {
+      const fieldName = strName10(field.name);
       if (fieldName) facts.fields.set(fieldName, field);
     }
-    for (const action of asArray28(obj.actions)) {
-      const actionName = strName8(action.name);
+    for (const action of asArray29(obj.actions)) {
+      const actionName = strName10(action.name);
       if (actionName) facts.actions.set(actionName, action);
     }
-    for (const view of asArray28(obj.views)) {
-      collectViewRecord({ ...view, object: strName8(view.object) ?? objectName }, factsFor);
+    for (const view of asArray29(obj.views)) {
+      collectViewRecord({ ...view, object: strName10(view.object) ?? objectName }, factsFor);
     }
     collectViewRecord({ object: objectName, listViews: obj.listViews }, factsFor);
-    for (const group of asArray28(obj.fieldGroups)) {
-      const key = strName8(group.key) ?? strName8(group.name);
+    for (const group of asArray29(obj.fieldGroups)) {
+      const key = strName10(group.key) ?? strName10(group.name);
       if (key) facts.sections.add(key);
     }
   }
-  for (const view of asArray28(stack.views)) {
+  for (const view of asArray29(stack.views)) {
     collectViewRecord(view, factsFor);
   }
-  const pages = asArray28(stack.pages);
+  const pages = asArray29(stack.pages);
   for (let pi = 0; pi < pages.length; pi++) {
     for (const walked of walkPageComponents(pages[pi], `pages[${pi}]`)) {
       if (!walked.objectName) continue;
-      const props = isRec5(walked.component.properties) ? walked.component.properties : void 0;
+      const props = isRec7(walked.component.properties) ? walked.component.properties : void 0;
       if (!props) continue;
-      for (const section of asArray28(props.sections)) {
-        const sectionName = strName8(section.name);
+      for (const section of asArray29(props.sections)) {
+        const sectionName = strName10(section.name);
         if (sectionName) factsFor(walked.objectName).sections.add(sectionName);
       }
     }
   }
   const globalActions = /* @__PURE__ */ new Map();
   const actionOwners = /* @__PURE__ */ new Map();
-  for (const action of asArray28(stack.actions)) {
-    const actionName = strName8(action.name);
+  for (const action of asArray29(stack.actions)) {
+    const actionName = strName10(action.name);
     if (!actionName) continue;
-    const owner = strName8(action.objectName) ?? strName8(action.object);
+    const owner = strName10(action.objectName) ?? strName10(action.object);
     if (owner) {
       factsFor(owner).actions.set(actionName, action);
       actionOwners.set(actionName, owner);
@@ -4505,41 +4908,41 @@ function buildUniverse(stack) {
     }
   }
   const apps = /* @__PURE__ */ new Map();
-  for (const app of asArray28(stack.apps)) {
-    const appName = strName8(app.name);
+  for (const app of asArray29(stack.apps)) {
+    const appName = strName10(app.name);
     if (!appName) continue;
     const navIds = apps.get(appName) ?? /* @__PURE__ */ new Set();
     const walkNav = (items) => {
-      for (const item of asArray28(items)) {
-        const id = strName8(item.id);
+      for (const item of asArray29(items)) {
+        const id = strName10(item.id);
         if (id) navIds.add(id);
         if (item.children) walkNav(item.children);
       }
     };
     walkNav(app.navigation);
-    for (const area of asArray28(app.areas)) {
-      const areaId = strName8(area.id);
+    for (const area of asArray29(app.areas)) {
+      const areaId = strName10(area.id);
       if (areaId) navIds.add(areaId);
       walkNav(area.navigation);
     }
     apps.set(appName, navIds);
   }
   const dashboards = /* @__PURE__ */ new Map();
-  for (const dash of asArray28(stack.dashboards)) {
-    const dashName = strName8(dash.name);
+  for (const dash of asArray29(stack.dashboards)) {
+    const dashName = strName10(dash.name);
     if (!dashName) continue;
     const widgets = /* @__PURE__ */ new Set();
-    for (const widget of asArray28(dash.widgets)) {
-      const id = strName8(widget.id) ?? strName8(widget.name);
+    for (const widget of asArray29(dash.widgets)) {
+      const id = strName10(widget.id) ?? strName10(widget.name);
       if (id) widgets.add(id);
     }
     const actions = /* @__PURE__ */ new Set();
     const headerActions = [
-      ...asArray28(isRec5(dash.header) ? dash.header.actions : void 0),
-      ...asArray28(dash.actions)
+      ...asArray29(isRec7(dash.header) ? dash.header.actions : void 0),
+      ...asArray29(dash.actions)
     ];
     for (const action of headerActions) {
-      const key = strName8(action.actionUrl) ?? strName8(action.url) ?? strName8(action.name);
+      const key = strName10(action.actionUrl) ?? strName10(action.url) ?? strName10(action.name);
       if (key) actions.add(key);
     }
     dashboards.set(dashName, { widgets, actions });
@@ -4551,7 +4954,7 @@ function localePath(bundleIndex, locale) {
 }
 function validateTranslationReferences(stack) {
   const findings = [];
-  if (!isRec5(stack)) return findings;
+  if (!isRec7(stack)) return findings;
   const bundles = Array.isArray(stack.translations) ? stack.translations : [];
   if (bundles.length === 0) return findings;
   const universe = buildUniverse(stack);
@@ -4560,21 +4963,21 @@ function validateTranslationReferences(stack) {
   };
   for (let bi = 0; bi < bundles.length; bi++) {
     const bundle = bundles[bi];
-    if (!isRec5(bundle)) continue;
+    if (!isRec7(bundle)) continue;
     for (const [locale, rawData] of Object.entries(bundle)) {
-      if (!isRec5(rawData)) continue;
+      if (!isRec7(rawData)) continue;
       const base = localePath(bi, locale);
       const inLocale = `locale "${locale}"`;
       for (const [objectName, rawNode] of Object.entries(asRecord(rawData.objects))) {
-        if (!isRec5(rawNode)) continue;
+        if (!isRec7(rawNode)) continue;
         const objPath = `${base}.objects.${objectName}`;
         const facts = universe.objects.get(objectName);
         if (!facts) {
-          if ((0, import_system3.isPlatformProvidedObjectName)(objectName)) continue;
+          if ((0, import_system4.isPlatformProvidedObjectName)(objectName)) continue;
           orphan(
             `${inLocale} \xB7 object "${objectName}"`,
             objPath,
-            (0, import_system3.hasPlatformObjectPrefix)(objectName) ? `Translations are keyed to "${objectName}", which carries a platform namespace prefix but is registered by no platform package, official plugin, or cloud runtime object \u2014 and this stack does not define it either. Nothing resolves these keys.` + suggest5(objectName, universe.objects.keys()) : `Translations are keyed to "${objectName}", which no object in this stack defines. The resolver looks up keys derived from the metadata, so this whole subtree is dead weight \u2014 every label it carries renders untranslated.` + suggest5(objectName, universe.objects.keys()),
+            (0, import_system4.hasPlatformObjectPrefix)(objectName) ? `Translations are keyed to "${objectName}", which carries a platform namespace prefix but is registered by no platform package, official plugin, or cloud runtime object \u2014 and this stack does not define it either. Nothing resolves these keys.` + suggest6(objectName, universe.objects.keys()) : `Translations are keyed to "${objectName}", which no object in this stack defines. The resolver looks up keys derived from the metadata, so this whole subtree is dead weight \u2014 every label it carries renders untranslated.` + suggest6(objectName, universe.objects.keys()),
             `Rename the key to the object it was written for, drop it, or ignore this if the object is contributed by another installed package.` + (universe.objects.size > 0 ? ` Defined objects: ${listNames(universe.objects.keys())}.` : "")
           );
           continue;
@@ -4583,16 +4986,16 @@ function validateTranslationReferences(stack) {
           const fieldPath = `${objPath}.fields.${fieldName}`;
           const field = facts.fields.get(fieldName);
           if (!field) {
-            if (SYSTEM_FIELDS5.has(fieldName)) continue;
+            if (IMPLICIT_FIELDS.has(fieldName)) continue;
             orphan(
               `${inLocale} \xB7 object "${objectName}" \xB7 field "${fieldName}"`,
               fieldPath,
-              `Translations are keyed to field "${fieldName}", which object "${objectName}" does not declare. The label renders untranslated in this locale \u2014 and because every neighbouring field DOES resolve, the hole reads as a styling quirk rather than a missing translation.` + suggest5(fieldName, facts.fields.keys()),
+              `Translations are keyed to field "${fieldName}", which object "${objectName}" does not declare. The label renders untranslated in this locale \u2014 and because every neighbouring field DOES resolve, the hole reads as a styling quirk rather than a missing translation.` + suggest6(fieldName, facts.fields.keys()),
               `Point the key at a declared field, or drop it if the field was removed or renamed.` + (facts.fields.size > 0 ? ` Declared fields: ${listNames(facts.fields.keys())}.` : "")
             );
             continue;
           }
-          if (!isRec5(rawField)) continue;
+          if (!isRec7(rawField)) continue;
           checkOptionKeys(findings, {
             optionMap: rawField.options,
             field,
@@ -4607,7 +5010,7 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 object "${objectName}" \xB7 view "${viewName}"`,
             `${objPath}._views.${viewName}`,
-            `Translations are keyed to view "${viewName}", which no view of object "${objectName}" declares. The view tab keeps its source-locale label.` + suggest5(viewName, facts.views),
+            `Translations are keyed to view "${viewName}", which no view of object "${objectName}" declares. The view tab keeps its source-locale label.` + suggest6(viewName, facts.views),
             `Match the key to the view's \`name\` (not its label), or drop it.` + (facts.views.size > 0 ? ` Declared views: ${listNames(facts.views)}.` : "")
           );
         }
@@ -4616,7 +5019,7 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 object "${objectName}" \xB7 section "${sectionName}"`,
             `${objPath}._sections.${sectionName}`,
-            `Translations are keyed to section "${sectionName}", which nothing on object "${objectName}" declares \u2014 no \`fieldGroups[].key\`, no named form-view section, no named \`record:details\` section. The section heading stays in the source locale.` + suggest5(sectionName, facts.sections),
+            `Translations are keyed to section "${sectionName}", which nothing on object "${objectName}" declares \u2014 no \`fieldGroups[].key\`, no named form-view section, no named \`record:details\` section. The section heading stays in the source locale.` + suggest6(sectionName, facts.sections),
             `Sections are translatable only through a STABLE NAME: give the group/section a \`key\`/\`name\` and use it here, or drop the translation.` + (facts.sections.size > 0 ? ` Declared sections: ${listNames(facts.sections)}.` : ` Object "${objectName}" declares no named section at all.`)
           );
         }
@@ -4627,7 +5030,7 @@ function validateTranslationReferences(stack) {
             orphan(
               `${inLocale} \xB7 object "${objectName}" \xB7 action "${actionName}"`,
               actionPath,
-              `Translations are keyed to action "${actionName}", which is defined by neither object "${objectName}"'s \`actions\` nor a \`stack.actions\` entry bound to it. The button keeps its source-locale label.` + suggest5(actionName, facts.actions.keys()),
+              `Translations are keyed to action "${actionName}", which is defined by neither object "${objectName}"'s \`actions\` nor a \`stack.actions\` entry bound to it. The button keeps its source-locale label.` + suggest6(actionName, facts.actions.keys()),
               `Match the key to a defined action name, move it under the object that owns the action, or drop it.` + (facts.actions.size > 0 ? ` Actions on this object: ${listNames(facts.actions.keys())}.` : "")
             );
             continue;
@@ -4649,7 +5052,7 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 global action "${actionName}"`,
             actionPath,
-            owner ? `Action "${actionName}" is bound to object "${owner}", so the resolver looks it up under \`objects.${owner}._actions.${actionName}\` \u2014 never under \`globalActions\`, which is only consulted for object-less actions. This key is never read.` : `Translations are keyed to global action "${actionName}", which no object-less action in this stack defines. The button keeps its source-locale label.` + suggest5(actionName, universe.globalActions.keys()),
+            owner ? `Action "${actionName}" is bound to object "${owner}", so the resolver looks it up under \`objects.${owner}._actions.${actionName}\` \u2014 never under \`globalActions\`, which is only consulted for object-less actions. This key is never read.` : `Translations are keyed to global action "${actionName}", which no object-less action in this stack defines. The button keeps its source-locale label.` + suggest6(actionName, universe.globalActions.keys()),
             owner ? `Move these keys under \`objects.${owner}._actions.${actionName}\`.` : `Match the key to an object-less action's name, or drop it.` + (universe.globalActions.size > 0 ? ` Object-less actions: ${listNames(universe.globalActions.keys())}.` : "")
           );
           continue;
@@ -4669,18 +5072,18 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 app "${appName}"`,
             appPath,
-            `Translations are keyed to app "${appName}", which this stack does not define. The app launcher shows the source-locale label.` + suggest5(appName, universe.apps.keys()),
+            `Translations are keyed to app "${appName}", which this stack does not define. The app launcher shows the source-locale label.` + suggest6(appName, universe.apps.keys()),
             `Match the key to an app's \`name\`, or drop it.` + (universe.apps.size > 0 ? ` Defined apps: ${listNames(universe.apps.keys())}.` : "")
           );
           continue;
         }
-        if (!isRec5(rawApp)) continue;
+        if (!isRec7(rawApp)) continue;
         for (const navId of Object.keys(asRecord(rawApp.navigation))) {
           if (navIds.has(navId)) continue;
           orphan(
             `${inLocale} \xB7 app "${appName}" \xB7 navigation "${navId}"`,
             `${appPath}.navigation.${navId}`,
-            `Translations are keyed to navigation item "${navId}", which app "${appName}" does not declare. The menu entry keeps its source-locale label.` + suggest5(navId, navIds),
+            `Translations are keyed to navigation item "${navId}", which app "${appName}" does not declare. The menu entry keeps its source-locale label.` + suggest6(navId, navIds),
             `Match the key to the navigation item's \`id\`, or drop it.` + (navIds.size > 0 ? ` Declared navigation ids: ${listNames(navIds)}.` : "")
           );
         }
@@ -4692,18 +5095,18 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 dashboard "${dashName}"`,
             dashPath,
-            `Translations are keyed to dashboard "${dashName}", which this stack does not define. The dashboard title stays in the source locale.` + suggest5(dashName, universe.dashboards.keys()),
+            `Translations are keyed to dashboard "${dashName}", which this stack does not define. The dashboard title stays in the source locale.` + suggest6(dashName, universe.dashboards.keys()),
             `Match the key to a dashboard's \`name\`, or drop it.` + (universe.dashboards.size > 0 ? ` Defined dashboards: ${listNames(universe.dashboards.keys())}.` : "")
           );
           continue;
         }
-        if (!isRec5(rawDash)) continue;
+        if (!isRec7(rawDash)) continue;
         for (const widgetId of Object.keys(asRecord(rawDash.widgets))) {
           if (dash.widgets.has(widgetId)) continue;
           orphan(
             `${inLocale} \xB7 dashboard "${dashName}" \xB7 widget "${widgetId}"`,
             `${dashPath}.widgets.${widgetId}`,
-            `Translations are keyed to widget "${widgetId}", which dashboard "${dashName}" does not declare. The widget title stays in the source locale.` + suggest5(widgetId, dash.widgets),
+            `Translations are keyed to widget "${widgetId}", which dashboard "${dashName}" does not declare. The widget title stays in the source locale.` + suggest6(widgetId, dash.widgets),
             `Match the key to the widget's \`id\`, or drop it.` + (dash.widgets.size > 0 ? ` Declared widget ids: ${listNames(dash.widgets)}.` : "")
           );
         }
@@ -4712,7 +5115,7 @@ function validateTranslationReferences(stack) {
           orphan(
             `${inLocale} \xB7 dashboard "${dashName}" \xB7 action "${actionKey}"`,
             `${dashPath}.actions.${actionKey}`,
-            `Translations are keyed to header action "${actionKey}", which dashboard "${dashName}" does not declare. The button keeps its source-locale label.` + suggest5(actionKey, dash.actions),
+            `Translations are keyed to header action "${actionKey}", which dashboard "${dashName}" does not declare. The button keeps its source-locale label.` + suggest6(actionKey, dash.actions),
             `Header-action translations are keyed by the action's \`actionUrl\`, not its label.` + (dash.actions.size > 0 ? ` Declared header actions: ${listNames(dash.actions)}.` : "")
           );
         }
@@ -4722,7 +5125,7 @@ function validateTranslationReferences(stack) {
   return findings;
 }
 function asRecord(v) {
-  return isRec5(v) ? v : {};
+  return isRec7(v) ? v : {};
 }
 function checkOptionKeys(findings, ctx) {
   const optionKeys = Object.keys(asRecord(ctx.optionMap));
@@ -4734,7 +5137,7 @@ function checkOptionKeys(findings, ctx) {
       rule: TRANSLATION_OPTION_KEY_UNKNOWN,
       where: ctx.where,
       path: ctx.path,
-      message: `Option translations are keyed under field "${ctx.fieldName}" of object "${ctx.objectName}", which declares no \`options\` at all (field type "${strName8(ctx.field.type) ?? "unknown"}"). Nothing reads this map.`,
+      message: `Option translations are keyed under field "${ctx.fieldName}" of object "${ctx.objectName}", which declares no \`options\` at all (field type "${strName10(ctx.field.type) ?? "unknown"}"). Nothing reads this map.`,
       hint: `Declare the options on the field, move the translations to the field that owns them, or drop them.`
     });
     return;
@@ -4747,17 +5150,17 @@ function checkOptionKeys(findings, ctx) {
       rule: TRANSLATION_OPTION_KEY_UNKNOWN,
       where: ctx.where,
       path: `${ctx.path}.${key}`,
-      message: byLabel ? `Option translation is keyed by the DISPLAY LABEL "${key}" instead of the stored value "${byLabel}". The resolver looks the option up by value, so this entry is never found and the option renders with its source-locale label.` : `Option translation is keyed by "${key}", which is not one of the values declared by field "${ctx.objectName}.${ctx.fieldName}". The option renders untranslated.` + suggest5(key, declared.values),
+      message: byLabel ? `Option translation is keyed by the DISPLAY LABEL "${key}" instead of the stored value "${byLabel}". The resolver looks the option up by value, so this entry is never found and the option renders with its source-locale label.` : `Option translation is keyed by "${key}", which is not one of the values declared by field "${ctx.objectName}.${ctx.fieldName}". The option renders untranslated.` + suggest6(key, declared.values),
       hint: byLabel ? `Rename the key to "${byLabel}".` : `Option keys are the stored \`value\`, not the label and not a variant spelling (\`direct_mail\`, not \`direct-mail\`). Declared values: ${listNames(declared.values)}.`
     });
   }
 }
 function checkActionParams(findings, ctx) {
-  const rawParams = Object.keys(asRecord(isRec5(ctx.rawAction) ? ctx.rawAction.params : void 0));
+  const rawParams = Object.keys(asRecord(isRec7(ctx.rawAction) ? ctx.rawAction.params : void 0));
   if (rawParams.length === 0) return;
   const declared = /* @__PURE__ */ new Set();
-  for (const param of asArray28(ctx.action.params)) {
-    const name = strName8(param.name) ?? strName8(param.field);
+  for (const param of asArray29(ctx.action.params)) {
+    const name = strName10(param.name) ?? strName10(param.field);
     if (name) declared.add(name);
   }
   for (const paramName of rawParams) {
@@ -4767,7 +5170,7 @@ function checkActionParams(findings, ctx) {
       rule: TRANSLATION_TARGET_UNKNOWN,
       where: `${ctx.where} \xB7 param "${paramName}"`,
       path: `${ctx.path}.params.${paramName}`,
-      message: `Translations are keyed to parameter "${paramName}", which ${ctx.subject} does not declare. The parameter's label and help text render untranslated in the action dialog.` + suggest5(paramName, declared),
+      message: `Translations are keyed to parameter "${paramName}", which ${ctx.subject} does not declare. The parameter's label and help text render untranslated in the action dialog.` + suggest6(paramName, declared),
       hint: `Match the key to a declared param \`name\`, or drop it.` + (declared.size > 0 ? ` Declared params: ${listNames(declared)}.` : "")
     });
   }
@@ -4775,14 +5178,14 @@ function checkActionParams(findings, ctx) {
 
 // src/validate-ai-surface-affinity.ts
 var AI_SKILL_SURFACE_MISMATCH = "ai-skill-surface-mismatch";
-function asArray29(v) {
+function asArray30(v) {
   if (Array.isArray(v)) return v.filter((x) => !!x && typeof x === "object");
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName9(v) {
+function strName11(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 function surfaceOf(v) {
@@ -4792,18 +5195,18 @@ function validateAiSurfaceAffinity(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
   const skillsByName = /* @__PURE__ */ new Map();
-  for (const skill of asArray29(stack.skills)) {
-    const n = strName9(skill.name);
+  for (const skill of asArray30(stack.skills)) {
+    const n = strName11(skill.name);
     if (n) skillsByName.set(n, skill);
   }
-  const agents = asArray29(stack.agents);
+  const agents = asArray30(stack.agents);
   for (let ai = 0; ai < agents.length; ai++) {
     const agent = agents[ai];
-    const agentName = strName9(agent.name) ?? `#${ai}`;
+    const agentName = strName11(agent.name) ?? `#${ai}`;
     const agentSurface = surfaceOf(agent.surface);
     const skillRefs = Array.isArray(agent.skills) ? agent.skills : [];
     for (let si = 0; si < skillRefs.length; si++) {
-      const ref = strName9(skillRefs[si]);
+      const ref = strName11(skillRefs[si]);
       if (!ref) continue;
       const skill = skillsByName.get(ref);
       if (!skill) continue;
@@ -4823,19 +5226,19 @@ function validateAiSurfaceAffinity(stack) {
 }
 
 // src/validate-ai-tool-references.ts
-var import_system4 = require("@objectstack/spec/system");
+var import_system5 = require("@objectstack/spec/system");
 var AI_SKILL_TOOL_UNRESOLVED = "ai-skill-tool-unresolved";
-function asArray30(v) {
+function asArray31(v) {
   if (Array.isArray(v)) return v.filter((x) => !!x && typeof x === "object");
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName10(v) {
+function strName12(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
-function distance5(a, b) {
+function distance6(a, b) {
   const m = a.length;
   const n = b.length;
   if (m === 0) return n;
@@ -4851,14 +5254,14 @@ function distance5(a, b) {
   }
   return prev[n];
 }
-function suggest6(target, known) {
-  for (const prefix of import_system4.PLATFORM_TOOL_FAMILY_PREFIXES) {
+function suggest7(target, known) {
+  for (const prefix of import_system5.PLATFORM_TOOL_FAMILY_PREFIXES) {
     if (known.has(`${prefix}${target}`)) return ` Did you mean "${prefix}${target}"?`;
   }
   let best;
   let bestScore = Infinity;
   for (const candidate of known) {
-    const d = distance5(target, candidate);
+    const d = distance6(target, candidate);
     if (d < bestScore) {
       bestScore = d;
       best = candidate;
@@ -4873,26 +5276,26 @@ function materialisesAsTool(action) {
   if (!ai || typeof ai !== "object") return false;
   const aiRec = ai;
   if (aiRec.exposed !== true) return false;
-  if (!strName10(aiRec.description)) return false;
-  const type = strName10(action.type);
+  if (!strName12(aiRec.description)) return false;
+  const type = strName12(action.type);
   if (!type || !HEADLESS_ACTION_TYPES.has(type)) return false;
   if (type === "script") return Boolean(action.target || action.body);
   return Boolean(action.target);
 }
 function collectToolUniverse(stack) {
-  const universe = new Set(import_system4.PLATFORM_PROVIDED_TOOL_NAMES);
-  for (const tool of asArray30(stack.tools)) {
-    const n = strName10(tool.name);
+  const universe = new Set(import_system5.PLATFORM_PROVIDED_TOOL_NAMES);
+  for (const tool of asArray31(stack.tools)) {
+    const n = strName12(tool.name);
     if (n) universe.add(n);
   }
   const addActionFamily = (actions) => {
-    for (const action of asArray30(actions)) {
-      const n = strName10(action.name);
+    for (const action of asArray31(actions)) {
+      const n = strName12(action.name);
       if (n && materialisesAsTool(action)) universe.add(`action_${n}`);
     }
   };
   addActionFamily(stack.actions);
-  for (const obj of asArray30(stack.objects)) {
+  for (const obj of asArray31(stack.objects)) {
     addActionFamily(obj.actions);
   }
   return universe;
@@ -4900,13 +5303,13 @@ function collectToolUniverse(stack) {
 function collectUnexposedActionNames(stack) {
   const names = /* @__PURE__ */ new Set();
   const scan = (actions) => {
-    for (const action of asArray30(actions)) {
-      const n = strName10(action.name);
+    for (const action of asArray31(actions)) {
+      const n = strName12(action.name);
       if (n && !materialisesAsTool(action)) names.add(n);
     }
   };
   scan(stack.actions);
-  for (const obj of asArray30(stack.objects)) scan(obj.actions);
+  for (const obj of asArray31(stack.objects)) scan(obj.actions);
   return names;
 }
 function validateAiToolReferences(stack) {
@@ -4924,13 +5327,13 @@ function validateAiToolReferences(stack) {
     }
     return universe.has(ref);
   };
-  const skills = asArray30(stack.skills);
+  const skills = asArray31(stack.skills);
   for (let si = 0; si < skills.length; si++) {
     const skill = skills[si];
-    const skillName = strName10(skill.name) ?? `#${si}`;
+    const skillName = strName12(skill.name) ?? `#${si}`;
     const refs = Array.isArray(skill.tools) ? skill.tools : [];
     for (let ti = 0; ti < refs.length; ti++) {
-      const ref = strName10(refs[ti]);
+      const ref = strName12(refs[ti]);
       if (!ref || resolves(ref)) continue;
       const isPattern = ref.endsWith("*");
       const unexposed = !isPattern && ref.startsWith("action_") && unexposedActions.has(ref.slice("action_".length)) ? ref.slice("action_".length) : void 0;
@@ -4939,8 +5342,8 @@ function validateAiToolReferences(stack) {
         rule: AI_SKILL_TOOL_UNRESOLVED,
         where: `skill "${skillName}" \xB7 tools`,
         path: `skills[${si}].tools[${ti}]`,
-        message: isPattern ? `Skill "${skillName}" subscribes to tool family "${ref}", which matches nothing this stack can resolve (no declared tool, no platform tool, and no AI-exposed declarative action materialises into it). The subscription contributes zero tools at runtime.` : unexposed ? `Skill "${skillName}" references tool "${ref}", but the action "${unexposed}" does not become an AI tool: the runtime materialises \`action_<name>\` only for an action that opts in with \`ai.exposed: true\` + \`ai.description\` (ADR-0011) AND has a headless path (type \`script\`/\`api\`/\`flow\` with a target or body \u2014 \`url\`/\`modal\`/\`form\` are UI-only). The reference is dropped at runtime, so the skill promises a capability the agent cannot call.` : `Skill "${skillName}" references tool "${ref}", which resolves to nothing this stack can see: not a \`stack.tools\` record, not a platform-registered tool, and not a materialised action tool (\`action_<name>\`). The runtime silently drops the reference, so the skill's instructions claim a capability the agent does not have \u2014 the assistant will improvise or fail when asked to use it.` + suggest6(ref, universe),
-        hint: unexposed ? `Either opt "${unexposed}" in \u2014 set \`ai: { exposed: true, description: '\u2026' }\` (\u226540 chars, LLM-facing) and give it a headless type \u2014 or drop the reference and have the skill's instructions recommend the UI action instead. A \`modal\`/\`form\`/\`url\` action stays human-driven by design; that is a legitimate answer, not a gap.` : `Back "${ref}" with a real executable: declare a declarative action (or flow), opt it in with \`ai.exposed: true\` + \`ai.description\`, and reference its materialised tool (\`action_<name>\` \u2014 the ADR-0109 default path, no tool record needed); or reference a platform tool by its registered name; or remove the reference and the instructions that mention it. Ignore this only if a runtime plugin outside the platform registry provides "${ref}". Family prefixes materialised by the runtime: ${import_system4.PLATFORM_TOOL_FAMILY_PREFIXES.join(", ")}.`
+        message: isPattern ? `Skill "${skillName}" subscribes to tool family "${ref}", which matches nothing this stack can resolve (no declared tool, no platform tool, and no AI-exposed declarative action materialises into it). The subscription contributes zero tools at runtime.` : unexposed ? `Skill "${skillName}" references tool "${ref}", but the action "${unexposed}" does not become an AI tool: the runtime materialises \`action_<name>\` only for an action that opts in with \`ai.exposed: true\` + \`ai.description\` (ADR-0011) AND has a headless path (type \`script\`/\`api\`/\`flow\` with a target or body \u2014 \`url\`/\`modal\`/\`form\` are UI-only). The reference is dropped at runtime, so the skill promises a capability the agent cannot call.` : `Skill "${skillName}" references tool "${ref}", which resolves to nothing this stack can see: not a \`stack.tools\` record, not a platform-registered tool, and not a materialised action tool (\`action_<name>\`). The runtime silently drops the reference, so the skill's instructions claim a capability the agent does not have \u2014 the assistant will improvise or fail when asked to use it.` + suggest7(ref, universe),
+        hint: unexposed ? `Either opt "${unexposed}" in \u2014 set \`ai: { exposed: true, description: '\u2026' }\` (\u226540 chars, LLM-facing) and give it a headless type \u2014 or drop the reference and have the skill's instructions recommend the UI action instead. A \`modal\`/\`form\`/\`url\` action stays human-driven by design; that is a legitimate answer, not a gap.` : `Back "${ref}" with a real executable: declare a declarative action (or flow), opt it in with \`ai.exposed: true\` + \`ai.description\`, and reference its materialised tool (\`action_<name>\` \u2014 the ADR-0109 default path, no tool record needed); or reference a platform tool by its registered name; or remove the reference and the instructions that mention it. Ignore this only if a runtime plugin outside the platform registry provides "${ref}". Family prefixes materialised by the runtime: ${import_system5.PLATFORM_TOOL_FAMILY_PREFIXES.join(", ")}.`
       });
     }
   }
@@ -4949,24 +5352,24 @@ function validateAiToolReferences(stack) {
 
 // src/validate-ai-agent-authoring.ts
 var AGENT_AUTHORING_WITHDRAWN = "agent-authoring-withdrawn";
-function asArray31(v) {
+function asArray32(v) {
   if (Array.isArray(v)) return v.filter((x) => !!x && typeof x === "object");
   if (v && typeof v === "object") {
     return Object.entries(v).map(([name, def]) => ({ name, ...def }));
   }
   return [];
 }
-function strName11(v) {
+function strName13(v) {
   return typeof v === "string" && v.length > 0 ? v : void 0;
 }
 var PLATFORM_AGENT_NAMES = /* @__PURE__ */ new Set(["ask", "build", "data_chat", "metadata_assistant"]);
 function validateAiAgentAuthoring(stack) {
   const findings = [];
   if (!stack || typeof stack !== "object") return findings;
-  const agents = asArray31(stack.agents);
+  const agents = asArray32(stack.agents);
   for (let ai = 0; ai < agents.length; ai++) {
     const agent = agents[ai];
-    const name = strName11(agent.name) ?? `#${ai}`;
+    const name = strName13(agent.name) ?? `#${ai}`;
     const isPlatformName = PLATFORM_AGENT_NAMES.has(name);
     const skillCount = Array.isArray(agent.skills) ? agent.skills.length : 0;
     findings.push({
@@ -4981,9 +5384,495 @@ function validateAiAgentAuthoring(stack) {
   return findings;
 }
 
+// src/validate-hook-body-writes.ts
+var import_node_module3 = require("module");
+var import_shared = require("@objectstack/spec/shared");
+var import_meta3 = {};
+var cachedTs2 = null;
+function loadTypeScript2() {
+  if (cachedTs2) return cachedTs2;
+  const anchor = typeof import_meta3 !== "undefined" && import_meta3.url ? import_meta3.url : typeof __filename !== "undefined" ? __filename : process.cwd() + "/";
+  try {
+    cachedTs2 = (0, import_node_module3.createRequire)(anchor)("typescript");
+  } catch (err) {
+    throw new Error(
+      `@objectstack/lint: checking an L2 (language:'js') hook body requires the "typescript" package, which could not be loaded (${err instanceof Error ? err.message : String(err)}). It is a declared dependency of @objectstack/lint \u2014 if this deployment prunes packages, keep "typescript" in the image; it is only loaded when a hook with a JS body is validated.`
+    );
+  }
+  return cachedTs2;
+}
+var HOOK_BODY_WRITE_UNKNOWN_FIELD = "hook-body-write-unknown-field";
+var HOOK_BODY_WRITE_PATTERNS = [
+  {
+    id: "input-property-assign",
+    syntax: "ctx.input.<field> = \u2026 | ctx.input['<field>'] \u27E8op\u27E9= \u2026",
+    example: {
+      // Compound (`+=`) and logical (`??=`) assignment operators write their
+      // LHS exactly like `=` does — the example pins the whole operator range.
+      source: "ctx.input.total = 0; ctx.input['status'] ??= 'open'; ctx.input.retries += 1;",
+      writes: [{ field: "total" }, { field: "status" }, { field: "retries" }]
+    }
+  },
+  {
+    id: "input-object-assign",
+    syntax: "Object.assign(ctx.input, { <field>: \u2026 })",
+    example: {
+      source: "Object.assign(ctx.input, { total: 5, 'status': 'open', discount });",
+      writes: [{ field: "total" }, { field: "status" }, { field: "discount" }]
+    }
+  },
+  {
+    // ACTION-only shape (the hook sandbox context has no `ctx.record` at all).
+    // Declared here because this ledger is the extractor's shape inventory, not
+    // any one rule's; every consumer declares which shapes it consumes.
+    id: "record-property-assign",
+    syntax: "ctx.record.<field> = \u2026 | ctx.record['<field>'] \u27E8op\u27E9= \u2026",
+    example: {
+      source: "ctx.record.stage = 'won'; ctx.record['amount'] += 1;",
+      writes: [{ field: "stage" }, { field: "amount" }]
+    }
+  },
+  {
+    id: "api-crud-literal",
+    syntax: "ctx.api.object('<object>').insert({\u2026}) | .create({\u2026}) | .update({\u2026}) | .updateById(id, {\u2026})",
+    example: {
+      // Real ObjectRepository signatures: the record payload is argument 0 for
+      // insert/create/update and argument 1 for updateById. (`update(data)` —
+      // NOT `update(id, data)`; the id travels inside the payload/options.)
+      source: "await ctx.api.object('audit_log').insert({ event: 'won' }); await ctx.api.object('crm_deal').updateById(id, { stage: 'won' });",
+      writes: [
+        { field: "event", object: "audit_log" },
+        { field: "stage", object: "crm_deal" }
+      ]
+    }
+  }
+];
+var HOOK_BODY_WRITE_PATTERN_IDS = [
+  "input-property-assign",
+  "input-object-assign",
+  "api-crud-literal"
+];
+var HOOK_BODY_WRITE_EXCLUSIONS = [
+  {
+    id: "record-property-assign",
+    reason: "a hook sandbox context has no `ctx.record` at all \u2014 `buildSandboxContext` never sets it (a hook\u2019s record IS `ctx.input`), so the expression throws at run time rather than silently no-op\u2019ing. A loud failure the author sees on the first run is not this advisory rule\u2019s business"
+  }
+];
+var HOOK_APPLICABLE_IDS = new Set(HOOK_BODY_WRITE_PATTERN_IDS);
+var API_WRITE_METHODS = /* @__PURE__ */ new Map([
+  ["insert", 0],
+  ["create", 0],
+  ["update", 0],
+  ["updateById", 1]
+]);
+var INPUT_ENVELOPE_KEYS = /* @__PURE__ */ new Set(["id", "options", "ast", "data"]);
+var IMPLICIT_FIELDS2 = /* @__PURE__ */ new Set([
+  ...SYSTEM_FIELDS,
+  "_id",
+  "name",
+  "space",
+  "owner",
+  "record_type"
+]);
+var isRec8 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+function asArray33(v) {
+  if (Array.isArray(v)) return v.filter((x) => isRec8(x));
+  if (isRec8(v)) {
+    return Object.entries(v).map(([name, def]) => ({
+      name,
+      ...isRec8(def) ? def : {}
+    }));
+  }
+  return [];
+}
+function indexObjectFields2(stack) {
+  const out = /* @__PURE__ */ new Map();
+  for (const obj of asArray33(stack.objects)) {
+    const name = typeof obj.name === "string" ? obj.name : void 0;
+    if (!name) continue;
+    const names = /* @__PURE__ */ new Set();
+    for (const f of asArray33(obj.fields)) {
+      if (typeof f.name === "string" && f.name) names.add(f.name);
+    }
+    out.set(name, names);
+  }
+  return out;
+}
+function judgeableFieldsOf(index, objectName) {
+  const declared = index.get(objectName);
+  if (!declared || declared.size === 0) return void 0;
+  return declared;
+}
+function extractHookBodyWrites(source) {
+  return extractHookBodyWriteSet(source).writes;
+}
+function extractHookBodyWriteSet(source) {
+  if (!/\bctx\b/.test(source) && !/\bObject\b/.test(source)) {
+    return { writes: [], ctxRecordEscapes: false };
+  }
+  const tsc = loadTypeScript2();
+  const sf = tsc.createSourceFile(
+    "hook-body.ts",
+    `async function __body(ctx) {
+${source}
+}`,
+    tsc.ScriptTarget.Latest,
+    /* setParentNodes */
+    false,
+    tsc.ScriptKind.TS
+  );
+  const writes = [];
+  const recordRefs = [];
+  const consumedRecordRefs = /* @__PURE__ */ new Set();
+  const isCtxDot = (node, prop) => tsc.isPropertyAccessExpression(node) && tsc.isIdentifier(node.expression) && node.expression.text === "ctx" && node.name.text === prop;
+  const fieldOfCtxLhs = (lhs, prop) => {
+    if (tsc.isPropertyAccessExpression(lhs) && tsc.isIdentifier(lhs.name) && isCtxDot(lhs.expression, prop)) {
+      return lhs.name.text;
+    }
+    if (tsc.isElementAccessExpression(lhs) && isCtxDot(lhs.expression, prop)) {
+      const arg = lhs.argumentExpression;
+      if (tsc.isStringLiteral(arg) || tsc.isNoSubstitutionTemplateLiteral(arg)) return arg.text;
+    }
+    return void 0;
+  };
+  const literalObjectKeys = (node) => {
+    if (!tsc.isObjectLiteralExpression(node)) return [];
+    const keys = [];
+    for (const p of node.properties) {
+      if (tsc.isPropertyAssignment(p)) {
+        if (tsc.isIdentifier(p.name) || tsc.isStringLiteral(p.name)) keys.push(p.name.text);
+      } else if (tsc.isShorthandPropertyAssignment(p)) {
+        keys.push(p.name.text);
+      }
+    }
+    return keys;
+  };
+  const visit = (node) => {
+    if (tsc.isBinaryExpression(node) && node.operatorToken.kind >= tsc.SyntaxKind.FirstAssignment && node.operatorToken.kind <= tsc.SyntaxKind.LastAssignment) {
+      const inputField = fieldOfCtxLhs(node.left, "input");
+      if (inputField !== void 0 && !INPUT_ENVELOPE_KEYS.has(inputField)) {
+        writes.push({ patternId: "input-property-assign", field: inputField });
+      }
+      const recordField = fieldOfCtxLhs(node.left, "record");
+      if (recordField !== void 0) {
+        writes.push({ patternId: "record-property-assign", field: recordField });
+      }
+    }
+    if (tsc.isPropertyAccessExpression(node) || tsc.isElementAccessExpression(node)) {
+      if (isCtxDot(node.expression, "record")) consumedRecordRefs.add(node.expression);
+    }
+    if (tsc.isBinaryExpression(node)) {
+      const op = node.operatorToken.kind;
+      if ((op === tsc.SyntaxKind.AmpersandAmpersandToken || op === tsc.SyntaxKind.BarBarToken || op === tsc.SyntaxKind.QuestionQuestionToken) && isCtxDot(node.left, "record")) {
+        consumedRecordRefs.add(node.left);
+      }
+    }
+    if (tsc.isPrefixUnaryExpression(node) && node.operator === tsc.SyntaxKind.ExclamationToken) {
+      if (isCtxDot(node.operand, "record")) consumedRecordRefs.add(node.operand);
+    }
+    if (tsc.isTypeOfExpression(node) && isCtxDot(node.expression, "record")) {
+      consumedRecordRefs.add(node.expression);
+    }
+    if ((tsc.isIfStatement(node) || tsc.isWhileStatement(node) || tsc.isDoStatement(node)) && isCtxDot(node.expression, "record")) {
+      consumedRecordRefs.add(node.expression);
+    }
+    if (tsc.isConditionalExpression(node) && isCtxDot(node.condition, "record")) {
+      consumedRecordRefs.add(node.condition);
+    }
+    if (isCtxDot(node, "record")) recordRefs.push(node);
+    if (tsc.isCallExpression(node)) {
+      const callee = node.expression;
+      if (tsc.isPropertyAccessExpression(callee) && tsc.isIdentifier(callee.expression) && callee.expression.text === "Object" && callee.name.text === "assign" && node.arguments.length >= 2 && isCtxDot(node.arguments[0], "input")) {
+        for (const arg of node.arguments.slice(1)) {
+          for (const field of literalObjectKeys(arg)) {
+            if (!INPUT_ENVELOPE_KEYS.has(field)) {
+              writes.push({ patternId: "input-object-assign", field });
+            }
+          }
+        }
+      }
+      if (tsc.isPropertyAccessExpression(callee) && tsc.isIdentifier(callee.name)) {
+        const payloadIndex = API_WRITE_METHODS.get(callee.name.text);
+        const recv = callee.expression;
+        if (payloadIndex !== void 0 && tsc.isCallExpression(recv) && tsc.isPropertyAccessExpression(recv.expression) && recv.expression.name.text === "object" && isCtxDot(recv.expression.expression, "api") && recv.arguments.length === 1) {
+          const objArg = recv.arguments[0];
+          const objectName = tsc.isStringLiteral(objArg) || tsc.isNoSubstitutionTemplateLiteral(objArg) ? objArg.text : void 0;
+          const payload = node.arguments[payloadIndex];
+          if (objectName && payload !== void 0) {
+            for (const field of literalObjectKeys(payload)) {
+              writes.push({
+                patternId: "api-crud-literal",
+                object: objectName,
+                method: callee.name.text,
+                field
+              });
+            }
+          }
+        }
+      }
+    }
+    tsc.forEachChild(node, visit);
+  };
+  visit(sf);
+  return {
+    writes,
+    ctxRecordEscapes: recordRefs.some((ref) => !consumedRecordRefs.has(ref))
+  };
+}
+function validateHookBodyWrites(stack) {
+  const findings = [];
+  const hooks = asArray33(stack.hooks);
+  if (hooks.length === 0) return findings;
+  let objectFields = null;
+  hooks.forEach((hook, hookIndex) => {
+    const body = hook.body;
+    if (!isRec8(body) || body.language !== "js") return;
+    const source = body.source;
+    if (typeof source !== "string" || source.trim() === "") return;
+    const writes = extractHookBodyWrites(source).filter((w) => HOOK_APPLICABLE_IDS.has(w.patternId));
+    if (writes.length === 0) return;
+    objectFields ?? (objectFields = indexObjectFields2(stack));
+    const hookName = typeof hook.name === "string" && hook.name ? hook.name : `#${hookIndex}`;
+    const targets = (Array.isArray(hook.object) ? hook.object : [hook.object]).filter(
+      (o) => typeof o === "string" && o.trim() !== ""
+    );
+    const targetSets = targets.map((t) => judgeableFieldsOf(objectFields, t));
+    const inputJudgeable = targets.length > 0 && !targets.includes("*") && targetSets.every((s) => s !== void 0);
+    const where = `hook "${hookName}" \u203A body`;
+    const path = `hooks[${hookIndex}].body.source`;
+    const reported = /* @__PURE__ */ new Set();
+    for (const w of writes) {
+      const dedupeKey = `${w.object ?? ""}\0${w.field}`;
+      if (reported.has(dedupeKey)) continue;
+      if (w.object === void 0) {
+        if (!inputJudgeable) continue;
+        if (IMPLICIT_FIELDS2.has(w.field)) continue;
+        if (targetSets.some((s) => s.has(w.field))) continue;
+        reported.add(dedupeKey);
+        const objDesc = targets.length === 1 ? `object '${targets[0]}'` : `none of its target objects (${targets.join(", ")})`;
+        const declares = targets.length === 1 ? "declares no such field" : "declare that field";
+        findings.push({
+          severity: "warning",
+          rule: HOOK_BODY_WRITE_UNKNOWN_FIELD,
+          where,
+          path,
+          message: `body writes '${w.field}' to its input, but ${objDesc} ${declares}. The sandboxed script runs clean and the value is copied back onto the record payload unfiltered \u2014 on a SQL driver the stray column then fails the WHOLE write with a driver-level error far from here; on a schemaless driver (memory, MongoDB) it is persisted as an undeclared key (#4271).`,
+          hint: fixHint(w.field, unionCandidates(targetSets))
+        });
+      } else {
+        const known = judgeableFieldsOf(objectFields, w.object);
+        if (!known) continue;
+        if (IMPLICIT_FIELDS2.has(w.field) || known.has(w.field)) continue;
+        reported.add(dedupeKey);
+        findings.push({
+          severity: "warning",
+          rule: HOOK_BODY_WRITE_UNKNOWN_FIELD,
+          where,
+          path,
+          message: `body calls ctx.api.object('${w.object}').${w.method ?? "update"}(\u2026) writing '${w.field}', but object '${w.object}' declares no such field. The write-path validator skips the unknown key \u2014 on a SQL driver the whole call then fails with a driver-level error far from here; on a schemaless driver (memory, MongoDB) the stray key is persisted (#4271).`,
+          hint: fixHint(w.field, [...known])
+        });
+      }
+    }
+  });
+  return findings;
+}
+function unionCandidates(targetSets) {
+  const out = /* @__PURE__ */ new Set();
+  for (const s of targetSets) for (const f of s ?? []) out.add(f);
+  return [...out];
+}
+function fixHint(field, declared) {
+  const suggestion = (0, import_shared.formatSuggestion)((0, import_shared.findClosestMatches)(field, [...declared, ...IMPLICIT_FIELDS2]));
+  return (suggestion ? `${suggestion} ` : "") + `Fix the field name, or declare '${field}' on the object. Only the literal write patterns in HOOK_BODY_WRITE_PATTERNS are checked \u2014 computed keys, spreads and aliased input are not \u2014 and this warning never blocks a build.`;
+}
+
+// src/validate-action-body-writes.ts
+var import_shared2 = require("@objectstack/spec/shared");
+var ACTION_BODY_WRITE_UNKNOWN_FIELD = "action-body-write-unknown-field";
+var ACTION_RECORD_WRITE_DISCARDED = "action-record-write-discarded";
+var ACTION_BODY_WRITE_PATTERN_IDS = ["api-crud-literal"];
+var ACTION_RECORD_WRITE_PATTERN_IDS = ["record-property-assign"];
+var ACTION_BODY_WRITE_EXCLUSIONS = [
+  {
+    id: "input-property-assign",
+    reason: "an action's ctx.input is its params bag (`input: unwrapProxyToPlain(actionCtx?.params)`), not a record \u2014 `ctx.input.<name>` writes a declared PARAMETER, which object fields cannot judge"
+  },
+  {
+    id: "input-object-assign",
+    reason: "same surface as input-property-assign \u2014 Object.assign(ctx.input, \u2026) targets the params bag"
+  }
+];
+var ACTION_BODY_WRITE_PATTERNS = HOOK_BODY_WRITE_PATTERNS.filter((p) => ACTION_BODY_WRITE_PATTERN_IDS.includes(p.id));
+var ACTION_RECORD_WRITE_PATTERNS = HOOK_BODY_WRITE_PATTERNS.filter((p) => ACTION_RECORD_WRITE_PATTERN_IDS.includes(p.id));
+var APPLICABLE_IDS = new Set(ACTION_BODY_WRITE_PATTERN_IDS);
+var RECORD_WRITE_IDS = new Set(ACTION_RECORD_WRITE_PATTERN_IDS);
+var isRec9 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+function asArray34(v) {
+  if (Array.isArray(v)) return v.filter((x) => isRec9(x));
+  if (isRec9(v)) {
+    return Object.entries(v).map(([name, def]) => ({
+      name,
+      ...isRec9(def) ? def : {}
+    }));
+  }
+  return [];
+}
+function actionObjectBinding(action, parentObject) {
+  if (typeof action.object === "string" && action.object) return action.object;
+  if (typeof action.objectName === "string" && action.objectName) return action.objectName;
+  return parentObject;
+}
+function collectActionBodies(stack) {
+  const sites = [];
+  const seen = /* @__PURE__ */ new Set();
+  const collect = (actions, pathPrefix, parentObject) => {
+    asArray34(actions).forEach((action, index) => {
+      const body = action.body;
+      if (!isRec9(body) || body.language !== "js") return;
+      const source = body.source;
+      if (typeof source !== "string" || source.trim() === "") return;
+      const name = typeof action.name === "string" && action.name ? action.name : `#${index}`;
+      const key = `${actionObjectBinding(action, parentObject) ?? ""}\0${name}\0${source}`;
+      if (seen.has(key)) return;
+      seen.add(key);
+      sites.push({ name, source, path: `${pathPrefix}[${index}].body.source` });
+    });
+  };
+  collect(stack.actions, "actions");
+  asArray34(stack.objects).forEach((obj, objIndex) => {
+    const parentObject = typeof obj.name === "string" && obj.name ? obj.name : void 0;
+    collect(obj.actions, `objects[${objIndex}].actions`, parentObject);
+  });
+  return sites;
+}
+function validateActionBodyWrites(stack) {
+  const findings = [];
+  if (!isRec9(stack)) return findings;
+  const sites = collectActionBodies(stack);
+  if (sites.length === 0) return findings;
+  let objectFields = null;
+  for (const site of sites) {
+    if (!/\bapi\b/.test(site.source) && !/\brecord\b/.test(site.source)) continue;
+    const { writes: allWrites, ctxRecordEscapes } = extractHookBodyWriteSet(site.source);
+    const writes = allWrites.filter((w) => APPLICABLE_IDS.has(w.patternId));
+    const recordWrites = allWrites.filter((w) => RECORD_WRITE_IDS.has(w.patternId));
+    if (writes.length === 0 && recordWrites.length === 0) continue;
+    const where = `action "${site.name}" \u203A body`;
+    if (recordWrites.length > 0 && !ctxRecordEscapes) {
+      const reportedFields = /* @__PURE__ */ new Set();
+      for (const w of recordWrites) {
+        if (reportedFields.has(w.field)) continue;
+        reportedFields.add(w.field);
+        findings.push({
+          severity: "warning",
+          rule: ACTION_RECORD_WRITE_DISCARDED,
+          where,
+          path: site.path,
+          message: `body assigns ctx.record.${w.field}, but an action's ctx.record is a plain snapshot the runtime never writes back \u2014 the action returns success and the assignment is discarded, whether or not '${w.field}' is a declared field (#4345).`,
+          hint: `To persist it, write through the API: ctx.api.object('<object>').updateById(ctx.recordId, { ${w.field}: \u2026 }). Reported only because ctx.record is never passed anywhere in this body \u2014 mutating the snapshot and then handing it to an API write is a live payload and is not flagged. This warning never blocks a build.`
+        });
+      }
+    }
+    if (writes.length === 0) continue;
+    objectFields ?? (objectFields = indexObjectFields2(stack));
+    const reported = /* @__PURE__ */ new Set();
+    for (const w of writes) {
+      if (w.object === void 0) continue;
+      const dedupeKey = `${w.object}\0${w.field}`;
+      if (reported.has(dedupeKey)) continue;
+      const known = judgeableFieldsOf(objectFields, w.object);
+      if (!known) continue;
+      if (IMPLICIT_FIELDS2.has(w.field) || known.has(w.field)) continue;
+      reported.add(dedupeKey);
+      findings.push({
+        severity: "warning",
+        rule: ACTION_BODY_WRITE_UNKNOWN_FIELD,
+        where,
+        path: site.path,
+        message: `body calls ctx.api.object('${w.object}').${w.method ?? "update"}(\u2026) writing '${w.field}', but object '${w.object}' declares no such field. The write-path validator skips the unknown key \u2014 on a SQL driver the whole action then fails with a driver-level error far from here; on a schemaless driver (memory, MongoDB) the stray key is persisted (#4271).`,
+        hint: fixHint2(w.field, [...known])
+      });
+    }
+  }
+  return findings;
+}
+function fixHint2(field, declared) {
+  const suggestion = (0, import_shared2.formatSuggestion)((0, import_shared2.findClosestMatches)(field, [...declared, ...IMPLICIT_FIELDS2]));
+  return (suggestion ? `${suggestion} ` : "") + `Fix the field name, or declare '${field}' on the object. Only the literal write patterns in ACTION_BODY_WRITE_PATTERNS are checked \u2014 an action's ctx.input is its params bag, so it is not a record-write surface and is never resolved against fields \u2014 and this warning never blocks a build.`;
+}
+
+// src/validate-flow-node-writes.ts
+var import_shared3 = require("@objectstack/spec/shared");
+var FLOW_NODE_WRITE_UNKNOWN_FIELD = "flow-node-write-unknown-field";
+var FLOW_WRITE_NODE_TYPES = ["update_record", "create_record"];
+var FLOW_WRITE_NODE_TYPES_DEFERRED = [];
+var isRec10 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+function asArray35(v) {
+  if (Array.isArray(v)) return v.filter((x) => isRec10(x));
+  if (isRec10(v)) {
+    return Object.entries(v).map(([name, def]) => ({
+      name,
+      ...isRec10(def) ? def : {}
+    }));
+  }
+  return [];
+}
+function readLiteralObjectName2(config) {
+  const raw = config.objectName ?? config.object;
+  if (typeof raw !== "string" || raw.includes("{")) return void 0;
+  return raw || void 0;
+}
+var COVERED_TYPES = new Set(FLOW_WRITE_NODE_TYPES);
+function validateFlowNodeWrites(stack) {
+  const findings = [];
+  if (!isRec10(stack)) return findings;
+  const flows = asArray35(stack.flows);
+  if (flows.length === 0) return findings;
+  let objectFields = null;
+  flows.forEach((flow, flowIndex) => {
+    const flowName = typeof flow.name === "string" && flow.name ? flow.name : `#${flowIndex}`;
+    const walked = walkFlowNodes(flow, `flows[${flowIndex}]`);
+    walked.forEach(({ node, path: nodePath, regionTrail }, walkIndex) => {
+      if (typeof node.type !== "string" || !COVERED_TYPES.has(node.type)) return;
+      const config = isRec10(node.config) ? node.config : void 0;
+      if (!config) return;
+      const fields = config.fields;
+      if (!isRec10(fields)) return;
+      const written = Object.keys(fields);
+      if (written.length === 0) return;
+      const objectName = readLiteralObjectName2(config);
+      if (!objectName) return;
+      objectFields ?? (objectFields = indexObjectFields2(stack));
+      const known = judgeableFieldsOf(objectFields, objectName);
+      if (!known) return;
+      const nodeName = flowNodeLabel(node, walkIndex);
+      const nodeWhere = regionTrail ? `${regionTrail} \u203A node "${nodeName}"` : `node "${nodeName}"`;
+      for (const fieldName of written) {
+        if (known.has(fieldName) || IMPLICIT_FIELDS2.has(fieldName)) continue;
+        if (fieldName.includes(".")) continue;
+        findings.push({
+          severity: "error",
+          rule: FLOW_NODE_WRITE_UNKNOWN_FIELD,
+          where: `flow "${flowName}" \u203A ${nodeWhere}`,
+          path: `${nodePath}.config.fields.${fieldName}`,
+          message: `${node.type} writes '${fieldName}', but object '${objectName}' declares no such field. Nothing between the node and storage removes the key: on a SQL datasource the driver rejects the whole statement ('no such column'), so the correctly named fields in this same payload never land either${node.type === "create_record" ? " and the record is never created at all" : ""}; on a schemaless one the stray key is persisted into a column no read surface returns.`,
+          hint: fixHint3(fieldName, [...known])
+        });
+      }
+    });
+  });
+  return findings;
+}
+function fixHint3(field, declared) {
+  const suggestion = (0, import_shared3.formatSuggestion)((0, import_shared3.findClosestMatches)(field, [...declared, ...IMPLICIT_FIELDS2]));
+  return (suggestion ? `${suggestion} ` : "") + `Fix the field name, or declare '${field}' on the object. This gates the build rather than warning: the key is literal and so is the object, so unlike the hook/action body rules there is nothing here that could have been mis-extracted.`;
+}
+
 // src/reference-integrity-suite.ts
 var REFERENCE_INTEGRITY_RULES = [
   { name: "validateObjectReferences", run: validateObjectReferences },
+  { name: "validateSearchableFields", run: validateSearchableFields },
   { name: "validateActionNameRefs", run: validateActionNameRefs },
   { name: "validatePageFieldBindings", run: validatePageFieldBindings },
   { name: "validateChartBindings", run: validateChartBindings },
@@ -4992,7 +5881,70 @@ var REFERENCE_INTEGRITY_RULES = [
   { name: "validateFlowTemplatePaths", run: validateFlowTemplatePaths },
   { name: "validateAiSurfaceAffinity", run: validateAiSurfaceAffinity },
   { name: "validateAiToolReferences", run: validateAiToolReferences },
-  { name: "validateAiAgentAuthoring", run: validateAiAgentAuthoring }
+  { name: "validateAiAgentAuthoring", run: validateAiAgentAuthoring },
+  // Field names WRITTEN by an L2 hook body (`ctx.input.x = …`,
+  // `ctx.api.object('y').update({ x })`), resolved against the target object's
+  // declared fields — the write-side counterpart of validateFlowTemplatePaths'
+  // read-side membership (#4271). Lazy: only a hook that actually carries a
+  // `language:'js'` body loads the TypeScript parser.
+  { name: "validateHookBodyWrites", run: validateHookBodyWrites },
+  // The same check on the other surface that carries a `HookBodySchema` body:
+  // action bodies, run by the same sandbox. Only the `ctx.api` write family
+  // carries over — an action's `ctx.input` is its params bag, not a record
+  // (see that module's ledger). Lazy on the same terms.
+  //
+  // The first member here to emit more than one rule id (`validateReactPageProps`
+  // below is the other, and carries the most). Besides resolving `ctx.api`
+  // writes against declared fields (`action-body-write-unknown-field`), it
+  // reports a `ctx.record` write that can reach nothing
+  // (`action-record-write-discarded`, #4345) — not a resolution question, so
+  // by the charter above it does not belong in the suite. It rides along
+  // anyway because it falls out of the SAME parse of the SAME source: a
+  // separate member would parse every action body twice to say two things
+  // about one walk, and hand-wiring it into the CLI instead is exactly the
+  // drift this suite exists to end — which `validateReadonlyFlowWrites` was
+  // the standing proof of, until it joined the suite below.
+  { name: "validateActionBodyWrites", run: validateActionBodyWrites },
+  // The third surface that writes a record field set: a flow `update_record`
+  // node's `config.fields`. Same question as the two rules above, but the map
+  // is structural metadata rather than parsed JS, so a finding is a certainty
+  // and gates (`error`) — see that module for why, and why the docs' long-
+  // standing "prefer a flow node, it's checked" advice was the least true of
+  // the three until it landed.
+  { name: "validateFlowNodeWrites", run: validateFlowNodeWrites },
+  // The OTHER question about that same `config.fields` map: not "does this
+  // field exist?" but "is it writable?" — a `runAs:'user'` update_record
+  // writing a static-`readonly` field is stripped by the engine and the step
+  // still reports success (#2948/#3425). It walks the identical map the rule
+  // above walks, so the two splitting call sites was never defensible: hand-
+  // wired into `validate` and `compile` only, it left `os lint` PASSING a flow
+  // `os validate` refuses — and this one gates, so the divergence shipped a
+  // build the other command would have stopped. Joining the suite is the whole
+  // fix; the two hand-wired call sites are deleted with it (#4345 follow-up).
+  { name: "validateReadonlyFlowWrites", run: validateReadonlyFlowWrites },
+  // The `kind:'react'` page surface. Every prop a react block binds BY FIELD
+  // NAME is resolved against the object it names (#4340) — `<ListView columns>`,
+  // `<ObjectForm fields>`, the `record:*` family through the SAME
+  // `COMPONENT_FIELD_SPECS` table `validatePageFieldBindings` walks one surface
+  // over, plus `<ObjectChart>`'s aggregate/axes (#3701/#3729) and
+  // `searchableFields` (#4329). Squarely the charter's question, on the surface
+  // where it had no answer at all.
+  //
+  // It was hand-wired into `os validate` ALONE, so `os lint` and `os compile`
+  // accepted a react page whose every field binding was stale — including the
+  // gating ones (a missing required binding, a filter position naming no field:
+  // the predicate can never match and the list comes back empty). That is
+  // `validateReadonlyFlowWrites`' divergence again, one surface over, and it is
+  // the reason this entry exists rather than a fourth hand-wiring.
+  //
+  // Like `validateActionBodyWrites` above, it emits ids that are not resolution
+  // questions — `react-prop-missing-required` and `react-prop-typo` are shape,
+  // and by the charter belong outside. They ride along for the same reason: they
+  // fall out of the SAME TypeScript parse of the SAME page source, and splitting
+  // them into a second member would parse every react page twice to say two
+  // things about one walk. Lazy on the same terms as the hook/action body rules
+  // — only a page that is actually `kind:'react'` loads the compiler.
+  { name: "validateReactPageProps", run: validateReactPageProps }
 ];
 function validateReferenceIntegrity(stack) {
   const findings = [];
@@ -5003,7 +5955,14 @@ function validateReferenceIntegrity(stack) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ACTION_BODY_WRITE_EXCLUSIONS,
+  ACTION_BODY_WRITE_PATTERNS,
+  ACTION_BODY_WRITE_PATTERN_IDS,
+  ACTION_BODY_WRITE_UNKNOWN_FIELD,
   ACTION_NAME_UNDEFINED,
+  ACTION_RECORD_WRITE_DISCARDED,
+  ACTION_RECORD_WRITE_PATTERNS,
+  ACTION_RECORD_WRITE_PATTERN_IDS,
   AGENT_AUTHORING_WITHDRAWN,
   AI_SKILL_SURFACE_MISMATCH,
   AI_SKILL_TOOL_UNRESOLVED,
@@ -5030,13 +5989,20 @@ function validateReferenceIntegrity(stack) {
   FIELD_GROUP_UNDECLARED,
   FILTER_TOKEN_UNKNOWN,
   FLOW_DRAFT_STATUS_AMBIGUOUS,
+  FLOW_NODE_WRITE_UNKNOWN_FIELD,
   FLOW_TEMPLATE_LOOKUP_TRAVERSAL,
   FLOW_TEMPLATE_UNKNOWN_FIELD,
   FLOW_TRIGGER_UNKNOWN_OBJECT,
   FLOW_UPDATE_READONLY_FIELD,
   FLOW_UPDATE_READONLY_WHEN_FIELD,
+  FLOW_WRITE_NODE_TYPES,
+  FLOW_WRITE_NODE_TYPES_DEFERRED,
   FORM_COLSPAN_ABSOLUTE,
   FORM_FIELD_UNKNOWN,
+  HOOK_BODY_WRITE_EXCLUSIONS,
+  HOOK_BODY_WRITE_PATTERNS,
+  HOOK_BODY_WRITE_PATTERN_IDS,
+  HOOK_BODY_WRITE_UNKNOWN_FIELD,
   LIST_VIEW_FILTERS_IN_VIEWS_MODE,
   MEASURE_AGGREGATE_INCOHERENT,
   NAV_OBJECT_UNGRANTED,
@@ -5050,6 +6016,7 @@ function validateReferenceIntegrity(stack) {
   REACT_CHART_AXIS_UNKNOWN,
   REACT_CHART_FIELD_UNKNOWN,
   REFERENCE_INTEGRITY_RULES,
+  SEARCHABLE_FIELD_UNKNOWN,
   SECURITY_ANCHOR_HIGH_PRIVILEGE,
   SECURITY_BOOK_AUDIENCE_UNKNOWN_SET,
   SECURITY_DELEGATION_MISSING_REASON,
@@ -5082,6 +6049,9 @@ function validateReferenceIntegrity(stack) {
   WIDGET_MEASURE_UNKNOWN,
   buildAccessMatrix,
   diffAccessMatrix,
+  extractHookBodyWriteSet,
+  extractHookBodyWrites,
+  validateActionBodyWrites,
   validateActionNameRefs,
   validateAiAgentAuthoring,
   validateAiSurfaceAffinity,
@@ -5091,9 +6061,11 @@ function validateReferenceIntegrity(stack) {
   validateChartBindings,
   validateDashboardActionRefs,
   validateFilterTokens,
+  validateFlowNodeWrites,
   validateFlowTemplatePaths,
   validateFlowTriggerReadiness,
   validateFormLayout,
+  validateHookBodyWrites,
   validateJsxPages,
   validateListViewMode,
   validateNavAccess,
@@ -5107,6 +6079,7 @@ function validateReferenceIntegrity(stack) {
   validateRecordTitle,
   validateReferenceIntegrity,
   validateResponsiveStyles,
+  validateSearchableFields,
   validateSecurityPosture,
   validateSeedReplaySafety,
   validateSeedStateMachine,