@objectstack/platform-objects 0.1.0 → 4.0.5

package/dist/security/index.d.mts

@@ -1,5 +1,6 @@
 import { S as StateNodeConfig } from '../state-machine.zod-BFg-VE0M.d-Ek3_yo9P.mjs';
 import * as _objectstack_spec_data from '@objectstack/spec/data';
+import { PermissionSet } from '@objectstack/spec/security';
 import 'zod';
 
 /**
@@ -50,7 +51,23 @@ declare const SysRole: Omit<{
         reference?: string | undefined;
         referenceFilters?: string[] | undefined;
         writeRequiresMasterRead?: boolean | undefined;
-        expression?: string | undefined;
+        expression?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         summaryOperations?: {
             object: string;
             field: string;
@@ -168,7 +185,23 @@ declare const SysRole: Omit<{
             } | undefined;
         } | undefined;
         group?: string | undefined;
-        conditionalRequired?: string | undefined;
+        conditionalRequired?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         inlineHelpText?: string | undefined;
         trackFeedHistory?: boolean | undefined;
         caseSensitive?: boolean | undefined;
@@ -179,6 +212,12 @@ declare const SysRole: Omit<{
     description?: string | undefined;
     icon?: string | undefined;
     tags?: string[] | undefined;
+    managedBy?: "system" | "better-auth" | "platform" | undefined;
+    systemFields?: false | {
+        tenant?: boolean | undefined;
+        owner?: boolean | undefined;
+        audit?: boolean | undefined;
+    } | undefined;
     indexes?: {
         fields: string[];
         type: "hash" | "btree" | "gin" | "gist" | "fulltext";
@@ -192,7 +231,23 @@ declare const SysRole: Omit<{
         defaultExpanded: boolean;
         icon?: string | undefined;
         description?: string | undefined;
-        visibleOn?: string | undefined;
+        visibleOn?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[] | undefined;
     tenancy?: {
         enabled: boolean;
@@ -259,7 +314,23 @@ declare const SysRole: Omit<{
         displayFormat?: string | undefined;
         startNumber?: number | undefined;
     } | undefined;
-    titleFormat?: string | undefined;
+    titleFormat?: {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | undefined;
     compactLayout?: string[] | undefined;
     search?: {
         fields: string[];
@@ -315,8 +386,24 @@ declare const SysRole: Omit<{
         variant?: "link" | "primary" | "secondary" | "danger" | "ghost" | undefined;
         confirmText?: string | undefined;
         successMessage?: string | undefined;
-        visible?: string | undefined;
-        disabled?: string | boolean | undefined;
+        visible?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        disabled?: boolean | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         shortcut?: string | undefined;
         bulkEnabled?: boolean | undefined;
         timeout?: number | undefined;
@@ -386,7 +473,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -485,7 +580,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -544,7 +647,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -643,7 +754,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -702,7 +821,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -801,7 +928,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -860,7 +995,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -959,7 +1102,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1018,7 +1169,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -1117,7 +1276,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1176,7 +1343,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -1275,7 +1450,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1334,7 +1517,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -1433,7 +1624,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1492,7 +1691,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -1591,7 +1798,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1650,7 +1865,15 @@ declare const SysRole: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -1749,7 +1972,15 @@ declare const SysRole: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -1825,7 +2056,23 @@ declare const SysPermissionSet: Omit<{
         reference?: string | undefined;
         referenceFilters?: string[] | undefined;
         writeRequiresMasterRead?: boolean | undefined;
-        expression?: string | undefined;
+        expression?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         summaryOperations?: {
             object: string;
             field: string;
@@ -1943,7 +2190,23 @@ declare const SysPermissionSet: Omit<{
             } | undefined;
         } | undefined;
         group?: string | undefined;
-        conditionalRequired?: string | undefined;
+        conditionalRequired?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         inlineHelpText?: string | undefined;
         trackFeedHistory?: boolean | undefined;
         caseSensitive?: boolean | undefined;
@@ -1954,6 +2217,12 @@ declare const SysPermissionSet: Omit<{
     description?: string | undefined;
     icon?: string | undefined;
     tags?: string[] | undefined;
+    managedBy?: "system" | "better-auth" | "platform" | undefined;
+    systemFields?: false | {
+        tenant?: boolean | undefined;
+        owner?: boolean | undefined;
+        audit?: boolean | undefined;
+    } | undefined;
     indexes?: {
         fields: string[];
         type: "hash" | "btree" | "gin" | "gist" | "fulltext";
@@ -1967,7 +2236,23 @@ declare const SysPermissionSet: Omit<{
         defaultExpanded: boolean;
         icon?: string | undefined;
         description?: string | undefined;
-        visibleOn?: string | undefined;
+        visibleOn?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[] | undefined;
     tenancy?: {
         enabled: boolean;
@@ -2034,7 +2319,23 @@ declare const SysPermissionSet: Omit<{
         displayFormat?: string | undefined;
         startNumber?: number | undefined;
     } | undefined;
-    titleFormat?: string | undefined;
+    titleFormat?: {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | undefined;
     compactLayout?: string[] | undefined;
     search?: {
         fields: string[];
@@ -2090,8 +2391,24 @@ declare const SysPermissionSet: Omit<{
         variant?: "link" | "primary" | "secondary" | "danger" | "ghost" | undefined;
         confirmText?: string | undefined;
         successMessage?: string | undefined;
-        visible?: string | undefined;
-        disabled?: string | boolean | undefined;
+        visible?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        disabled?: boolean | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
         shortcut?: string | undefined;
         bulkEnabled?: boolean | undefined;
         timeout?: number | undefined;
@@ -2161,7 +2478,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -2260,7 +2585,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -2319,7 +2652,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -2418,7 +2759,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -2477,7 +2826,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -2576,7 +2933,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -2635,7 +3000,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -2734,7 +3107,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -2793,7 +3174,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -2892,7 +3281,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -2951,7 +3348,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -3050,7 +3455,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -3109,7 +3522,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -3208,7 +3629,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -3267,7 +3696,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -3366,7 +3803,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -3425,7 +3870,15 @@ declare const SysPermissionSet: Omit<{
             readonly referenceFilters?: string[] | undefined;
             readonly writeRequiresMasterRead?: boolean | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: string | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly summaryOperations?: {
                 object: string;
                 field: string;
@@ -3524,7 +3977,15 @@ declare const SysPermissionSet: Omit<{
                     threshold: number;
                 } | undefined;
             } | undefined;
-            readonly conditionalRequired?: string | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
             readonly hidden?: boolean | undefined;
             readonly sortable?: boolean | undefined;
             readonly inlineHelpText?: string | undefined;
@@ -3551,4 +4012,3010 @@ declare const SysPermissionSet: Omit<{
     };
 }, "fields">;
 
-export { SysPermissionSet, SysRole };
+/**
+ * sys_user_permission_set — User ↔ PermissionSet assignment.
+ *
+ * Salesforce-style additive permission grant: a user may be assigned any
+ * number of `sys_permission_set` rows, optionally scoped to a specific
+ * organization. The runtime resolver (`resolveExecutionContext` in
+ * `@objectstack/runtime`) reads this table when building the per-request
+ * `ExecutionContext.permissions[]`.
+ *
+ * Uniqueness is `(user_id, permission_set_id, organization_id)` so the
+ * same permission set can be granted independently in each org context
+ * the user belongs to.
+ *
+ * @namespace sys
+ */
+declare const SysUserPermissionSet: Omit<{
+    name: string;
+    active: boolean;
+    isSystem: boolean;
+    abstract: boolean;
+    datasource: string;
+    fields: Record<string, {
+        type: "number" | "boolean" | "tags" | "date" | "file" | "code" | "datetime" | "signature" | "progress" | "url" | "text" | "textarea" | "email" | "phone" | "password" | "markdown" | "html" | "richtext" | "currency" | "percent" | "time" | "toggle" | "select" | "multiselect" | "radio" | "checkboxes" | "lookup" | "master_detail" | "tree" | "image" | "avatar" | "video" | "audio" | "formula" | "summary" | "autonumber" | "location" | "address" | "json" | "color" | "rating" | "slider" | "qrcode" | "vector";
+        required: boolean;
+        searchable: boolean;
+        multiple: boolean;
+        unique: boolean;
+        deleteBehavior: "set_null" | "cascade" | "restrict";
+        auditTrail: boolean;
+        hidden: boolean;
+        readonly: boolean;
+        sortable: boolean;
+        index: boolean;
+        externalId: boolean;
+        name?: string | undefined;
+        label?: string | undefined;
+        description?: string | undefined;
+        format?: string | undefined;
+        columnName?: string | undefined;
+        defaultValue?: unknown;
+        maxLength?: number | undefined;
+        minLength?: number | undefined;
+        precision?: number | undefined;
+        scale?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+        options?: {
+            label: string;
+            value: string;
+            color?: string | undefined;
+            default?: boolean | undefined;
+        }[] | undefined;
+        reference?: string | undefined;
+        referenceFilters?: string[] | undefined;
+        writeRequiresMasterRead?: boolean | undefined;
+        expression?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        summaryOperations?: {
+            object: string;
+            field: string;
+            function: "min" | "max" | "count" | "sum" | "avg";
+        } | undefined;
+        language?: string | undefined;
+        theme?: string | undefined;
+        lineNumbers?: boolean | undefined;
+        maxRating?: number | undefined;
+        allowHalf?: boolean | undefined;
+        displayMap?: boolean | undefined;
+        allowGeocoding?: boolean | undefined;
+        addressFormat?: "us" | "uk" | "international" | undefined;
+        colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+        allowAlpha?: boolean | undefined;
+        presetColors?: string[] | undefined;
+        step?: number | undefined;
+        showValue?: boolean | undefined;
+        marks?: Record<string, string> | undefined;
+        barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+        qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+        displayValue?: boolean | undefined;
+        allowScanning?: boolean | undefined;
+        currencyConfig?: {
+            precision: number;
+            currencyMode: "fixed" | "dynamic";
+            defaultCurrency: string;
+        } | undefined;
+        vectorConfig?: {
+            dimensions: number;
+            distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+            normalized: boolean;
+            indexed: boolean;
+            indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+        } | undefined;
+        fileAttachmentConfig?: {
+            virusScan: boolean;
+            virusScanOnUpload: boolean;
+            quarantineOnThreat: boolean;
+            allowMultiple: boolean;
+            allowReplace: boolean;
+            allowDelete: boolean;
+            requireUpload: boolean;
+            extractMetadata: boolean;
+            extractText: boolean;
+            versioningEnabled: boolean;
+            publicRead: boolean;
+            presignedUrlExpiry: number;
+            minSize?: number | undefined;
+            maxSize?: number | undefined;
+            allowedTypes?: string[] | undefined;
+            blockedTypes?: string[] | undefined;
+            allowedMimeTypes?: string[] | undefined;
+            blockedMimeTypes?: string[] | undefined;
+            virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+            storageProvider?: string | undefined;
+            storageBucket?: string | undefined;
+            storagePrefix?: string | undefined;
+            imageValidation?: {
+                generateThumbnails: boolean;
+                preserveMetadata: boolean;
+                autoRotate: boolean;
+                minWidth?: number | undefined;
+                maxWidth?: number | undefined;
+                minHeight?: number | undefined;
+                maxHeight?: number | undefined;
+                aspectRatio?: string | undefined;
+                thumbnailSizes?: {
+                    name: string;
+                    width: number;
+                    height: number;
+                    crop: boolean;
+                }[] | undefined;
+            } | undefined;
+            maxVersions?: number | undefined;
+        } | undefined;
+        encryptionConfig?: {
+            enabled: boolean;
+            algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+            keyManagement: {
+                provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                keyId?: string | undefined;
+                rotationPolicy?: {
+                    enabled: boolean;
+                    frequencyDays: number;
+                    retainOldVersions: number;
+                    autoRotate: boolean;
+                } | undefined;
+            };
+            scope: "field" | "record" | "table" | "database";
+            deterministicEncryption: boolean;
+            searchableEncryption: boolean;
+        } | undefined;
+        maskingRule?: {
+            field: string;
+            strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+            preserveFormat: boolean;
+            preserveLength: boolean;
+            pattern?: string | undefined;
+            roles?: string[] | undefined;
+            exemptRoles?: string[] | undefined;
+        } | undefined;
+        dependencies?: string[] | undefined;
+        cached?: {
+            enabled: boolean;
+            ttl: number;
+            invalidateOn: string[];
+        } | undefined;
+        dataQuality?: {
+            uniqueness: boolean;
+            completeness: number;
+            accuracy?: {
+                source: string;
+                threshold: number;
+            } | undefined;
+        } | undefined;
+        group?: string | undefined;
+        conditionalRequired?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        inlineHelpText?: string | undefined;
+        trackFeedHistory?: boolean | undefined;
+        caseSensitive?: boolean | undefined;
+        autonumberFormat?: string | undefined;
+    }>;
+    label?: string | undefined;
+    pluralLabel?: string | undefined;
+    description?: string | undefined;
+    icon?: string | undefined;
+    tags?: string[] | undefined;
+    managedBy?: "system" | "better-auth" | "platform" | undefined;
+    systemFields?: false | {
+        tenant?: boolean | undefined;
+        owner?: boolean | undefined;
+        audit?: boolean | undefined;
+    } | undefined;
+    indexes?: {
+        fields: string[];
+        type: "hash" | "btree" | "gin" | "gist" | "fulltext";
+        unique: boolean;
+        name?: string | undefined;
+        partial?: string | undefined;
+    }[] | undefined;
+    fieldGroups?: {
+        key: string;
+        label: string;
+        defaultExpanded: boolean;
+        icon?: string | undefined;
+        description?: string | undefined;
+        visibleOn?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }[] | undefined;
+    tenancy?: {
+        enabled: boolean;
+        strategy: "hybrid" | "shared" | "isolated";
+        tenantField: string;
+        crossTenantAccess: boolean;
+    } | undefined;
+    softDelete?: {
+        enabled: boolean;
+        field: string;
+        cascadeDelete: boolean;
+    } | undefined;
+    versioning?: {
+        enabled: boolean;
+        strategy: "snapshot" | "delta" | "event-sourcing";
+        versionField: string;
+        retentionDays?: number | undefined;
+    } | undefined;
+    partitioning?: {
+        enabled: boolean;
+        strategy: "hash" | "list" | "range";
+        key: string;
+        interval?: string | undefined;
+    } | undefined;
+    cdc?: {
+        enabled: boolean;
+        events: ("delete" | "update" | "insert")[];
+        destination: string;
+    } | undefined;
+    validations?: _objectstack_spec_data.BaseValidationRuleShape[] | undefined;
+    stateMachines?: Record<string, {
+        id: string;
+        initial: string;
+        states: Record<string, StateNodeConfig>;
+        description?: string | undefined;
+        contextSchema?: Record<string, unknown> | undefined;
+        on?: Record<string, string | {
+            target?: string | undefined;
+            cond?: string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            } | undefined;
+            actions?: (string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            })[] | undefined;
+            description?: string | undefined;
+        } | {
+            target?: string | undefined;
+            cond?: string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            } | undefined;
+            actions?: (string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            })[] | undefined;
+            description?: string | undefined;
+        }[]> | undefined;
+    }> | undefined;
+    displayNameField?: string | undefined;
+    recordName?: {
+        type: "text" | "autonumber";
+        displayFormat?: string | undefined;
+        startNumber?: number | undefined;
+    } | undefined;
+    titleFormat?: {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | undefined;
+    compactLayout?: string[] | undefined;
+    search?: {
+        fields: string[];
+        displayFields?: string[] | undefined;
+        filters?: string[] | undefined;
+    } | undefined;
+    enable?: {
+        trackHistory: boolean;
+        searchable: boolean;
+        apiEnabled: boolean;
+        files: boolean;
+        feeds: boolean;
+        activities: boolean;
+        trash: boolean;
+        mru: boolean;
+        clone: boolean;
+        apiMethods?: ("search" | "list" | "get" | "delete" | "update" | "upsert" | "history" | "create" | "bulk" | "aggregate" | "restore" | "purge" | "import" | "export")[] | undefined;
+    } | undefined;
+    recordTypes?: string[] | undefined;
+    sharingModel?: "full" | "private" | "read" | "read_write" | undefined;
+    keyPrefix?: string | undefined;
+    actions?: {
+        name: string;
+        label: string;
+        type: "url" | "flow" | "api" | "script" | "modal";
+        refreshAfter: boolean;
+        objectName?: string | undefined;
+        icon?: string | undefined;
+        locations?: ("list_toolbar" | "list_item" | "record_header" | "record_more" | "record_related" | "global_nav")[] | undefined;
+        component?: "action:button" | "action:icon" | "action:menu" | "action:group" | undefined;
+        target?: string | undefined;
+        body?: {
+            language: "expression";
+            source: string;
+        } | {
+            language: "js";
+            source: string;
+            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            timeoutMs?: number | undefined;
+            memoryMb?: number | undefined;
+        } | undefined;
+        execute?: string | undefined;
+        params?: {
+            name: string;
+            label: string;
+            type: "number" | "boolean" | "date" | "file" | "code" | "datetime" | "signature" | "progress" | "url" | "text" | "textarea" | "email" | "phone" | "password" | "markdown" | "html" | "richtext" | "currency" | "percent" | "time" | "toggle" | "select" | "multiselect" | "radio" | "checkboxes" | "lookup" | "master_detail" | "tree" | "image" | "avatar" | "video" | "audio" | "formula" | "summary" | "autonumber" | "location" | "address" | "json" | "color" | "rating" | "slider" | "qrcode" | "tags" | "vector";
+            required: boolean;
+            options?: {
+                label: string;
+                value: string;
+            }[] | undefined;
+        }[] | undefined;
+        variant?: "link" | "primary" | "secondary" | "danger" | "ghost" | undefined;
+        confirmText?: string | undefined;
+        successMessage?: string | undefined;
+        visible?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        disabled?: boolean | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        shortcut?: string | undefined;
+        bulkEnabled?: boolean | undefined;
+        timeout?: number | undefined;
+        aria?: {
+            ariaLabel?: string | undefined;
+            ariaDescribedBy?: string | undefined;
+            role?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+}, "fields"> & Pick<{
+    readonly name: "sys_user_permission_set";
+    readonly label: "User Permission Set";
+    readonly pluralLabel: "User Permission Sets";
+    readonly icon: "user-check";
+    readonly isSystem: true;
+    readonly description: "Direct assignment of a permission set to a user (optionally scoped to an organization).";
+    readonly titleFormat: "{user_id} → {permission_set_id}";
+    readonly compactLayout: ["user_id", "permission_set_id", "organization_id"];
+    readonly fields: {
+        readonly id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "text";
+        };
+        readonly user_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly permission_set_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly organization_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly granted_by: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly created_at: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "datetime";
+        };
+        readonly updated_at: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "datetime";
+        };
+    };
+    readonly indexes: [{
+        readonly fields: ["user_id", "permission_set_id", "organization_id"];
+        readonly unique: true;
+    }, {
+        readonly fields: ["user_id"];
+    }, {
+        readonly fields: ["organization_id"];
+    }, {
+        readonly fields: ["permission_set_id"];
+    }];
+    readonly enable: {
+        readonly trackHistory: true;
+        readonly searchable: true;
+        readonly apiEnabled: true;
+        readonly apiMethods: ["get", "list", "create", "update", "delete"];
+        readonly trash: true;
+        readonly mru: false;
+    };
+}, "fields">;
+
+/**
+ * sys_role_permission_set — Role ↔ PermissionSet binding.
+ *
+ * Allows administrators to compose a `sys_role` from one or more
+ * `sys_permission_set` rows. At request time, the runtime resolver
+ * (`resolveExecutionContext`) collects every permission set bound to
+ * the user's roles via this table and injects their names into
+ * `ExecutionContext.permissions[]` for downstream RBAC evaluation.
+ *
+ * @namespace sys
+ */
+declare const SysRolePermissionSet: Omit<{
+    name: string;
+    active: boolean;
+    isSystem: boolean;
+    abstract: boolean;
+    datasource: string;
+    fields: Record<string, {
+        type: "number" | "boolean" | "tags" | "date" | "file" | "code" | "datetime" | "signature" | "progress" | "url" | "text" | "textarea" | "email" | "phone" | "password" | "markdown" | "html" | "richtext" | "currency" | "percent" | "time" | "toggle" | "select" | "multiselect" | "radio" | "checkboxes" | "lookup" | "master_detail" | "tree" | "image" | "avatar" | "video" | "audio" | "formula" | "summary" | "autonumber" | "location" | "address" | "json" | "color" | "rating" | "slider" | "qrcode" | "vector";
+        required: boolean;
+        searchable: boolean;
+        multiple: boolean;
+        unique: boolean;
+        deleteBehavior: "set_null" | "cascade" | "restrict";
+        auditTrail: boolean;
+        hidden: boolean;
+        readonly: boolean;
+        sortable: boolean;
+        index: boolean;
+        externalId: boolean;
+        name?: string | undefined;
+        label?: string | undefined;
+        description?: string | undefined;
+        format?: string | undefined;
+        columnName?: string | undefined;
+        defaultValue?: unknown;
+        maxLength?: number | undefined;
+        minLength?: number | undefined;
+        precision?: number | undefined;
+        scale?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+        options?: {
+            label: string;
+            value: string;
+            color?: string | undefined;
+            default?: boolean | undefined;
+        }[] | undefined;
+        reference?: string | undefined;
+        referenceFilters?: string[] | undefined;
+        writeRequiresMasterRead?: boolean | undefined;
+        expression?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        summaryOperations?: {
+            object: string;
+            field: string;
+            function: "min" | "max" | "count" | "sum" | "avg";
+        } | undefined;
+        language?: string | undefined;
+        theme?: string | undefined;
+        lineNumbers?: boolean | undefined;
+        maxRating?: number | undefined;
+        allowHalf?: boolean | undefined;
+        displayMap?: boolean | undefined;
+        allowGeocoding?: boolean | undefined;
+        addressFormat?: "us" | "uk" | "international" | undefined;
+        colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+        allowAlpha?: boolean | undefined;
+        presetColors?: string[] | undefined;
+        step?: number | undefined;
+        showValue?: boolean | undefined;
+        marks?: Record<string, string> | undefined;
+        barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+        qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+        displayValue?: boolean | undefined;
+        allowScanning?: boolean | undefined;
+        currencyConfig?: {
+            precision: number;
+            currencyMode: "fixed" | "dynamic";
+            defaultCurrency: string;
+        } | undefined;
+        vectorConfig?: {
+            dimensions: number;
+            distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+            normalized: boolean;
+            indexed: boolean;
+            indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+        } | undefined;
+        fileAttachmentConfig?: {
+            virusScan: boolean;
+            virusScanOnUpload: boolean;
+            quarantineOnThreat: boolean;
+            allowMultiple: boolean;
+            allowReplace: boolean;
+            allowDelete: boolean;
+            requireUpload: boolean;
+            extractMetadata: boolean;
+            extractText: boolean;
+            versioningEnabled: boolean;
+            publicRead: boolean;
+            presignedUrlExpiry: number;
+            minSize?: number | undefined;
+            maxSize?: number | undefined;
+            allowedTypes?: string[] | undefined;
+            blockedTypes?: string[] | undefined;
+            allowedMimeTypes?: string[] | undefined;
+            blockedMimeTypes?: string[] | undefined;
+            virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+            storageProvider?: string | undefined;
+            storageBucket?: string | undefined;
+            storagePrefix?: string | undefined;
+            imageValidation?: {
+                generateThumbnails: boolean;
+                preserveMetadata: boolean;
+                autoRotate: boolean;
+                minWidth?: number | undefined;
+                maxWidth?: number | undefined;
+                minHeight?: number | undefined;
+                maxHeight?: number | undefined;
+                aspectRatio?: string | undefined;
+                thumbnailSizes?: {
+                    name: string;
+                    width: number;
+                    height: number;
+                    crop: boolean;
+                }[] | undefined;
+            } | undefined;
+            maxVersions?: number | undefined;
+        } | undefined;
+        encryptionConfig?: {
+            enabled: boolean;
+            algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+            keyManagement: {
+                provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                keyId?: string | undefined;
+                rotationPolicy?: {
+                    enabled: boolean;
+                    frequencyDays: number;
+                    retainOldVersions: number;
+                    autoRotate: boolean;
+                } | undefined;
+            };
+            scope: "field" | "record" | "table" | "database";
+            deterministicEncryption: boolean;
+            searchableEncryption: boolean;
+        } | undefined;
+        maskingRule?: {
+            field: string;
+            strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+            preserveFormat: boolean;
+            preserveLength: boolean;
+            pattern?: string | undefined;
+            roles?: string[] | undefined;
+            exemptRoles?: string[] | undefined;
+        } | undefined;
+        dependencies?: string[] | undefined;
+        cached?: {
+            enabled: boolean;
+            ttl: number;
+            invalidateOn: string[];
+        } | undefined;
+        dataQuality?: {
+            uniqueness: boolean;
+            completeness: number;
+            accuracy?: {
+                source: string;
+                threshold: number;
+            } | undefined;
+        } | undefined;
+        group?: string | undefined;
+        conditionalRequired?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        inlineHelpText?: string | undefined;
+        trackFeedHistory?: boolean | undefined;
+        caseSensitive?: boolean | undefined;
+        autonumberFormat?: string | undefined;
+    }>;
+    label?: string | undefined;
+    pluralLabel?: string | undefined;
+    description?: string | undefined;
+    icon?: string | undefined;
+    tags?: string[] | undefined;
+    managedBy?: "system" | "better-auth" | "platform" | undefined;
+    systemFields?: false | {
+        tenant?: boolean | undefined;
+        owner?: boolean | undefined;
+        audit?: boolean | undefined;
+    } | undefined;
+    indexes?: {
+        fields: string[];
+        type: "hash" | "btree" | "gin" | "gist" | "fulltext";
+        unique: boolean;
+        name?: string | undefined;
+        partial?: string | undefined;
+    }[] | undefined;
+    fieldGroups?: {
+        key: string;
+        label: string;
+        defaultExpanded: boolean;
+        icon?: string | undefined;
+        description?: string | undefined;
+        visibleOn?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }[] | undefined;
+    tenancy?: {
+        enabled: boolean;
+        strategy: "hybrid" | "shared" | "isolated";
+        tenantField: string;
+        crossTenantAccess: boolean;
+    } | undefined;
+    softDelete?: {
+        enabled: boolean;
+        field: string;
+        cascadeDelete: boolean;
+    } | undefined;
+    versioning?: {
+        enabled: boolean;
+        strategy: "snapshot" | "delta" | "event-sourcing";
+        versionField: string;
+        retentionDays?: number | undefined;
+    } | undefined;
+    partitioning?: {
+        enabled: boolean;
+        strategy: "hash" | "list" | "range";
+        key: string;
+        interval?: string | undefined;
+    } | undefined;
+    cdc?: {
+        enabled: boolean;
+        events: ("delete" | "update" | "insert")[];
+        destination: string;
+    } | undefined;
+    validations?: _objectstack_spec_data.BaseValidationRuleShape[] | undefined;
+    stateMachines?: Record<string, {
+        id: string;
+        initial: string;
+        states: Record<string, StateNodeConfig>;
+        description?: string | undefined;
+        contextSchema?: Record<string, unknown> | undefined;
+        on?: Record<string, string | {
+            target?: string | undefined;
+            cond?: string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            } | undefined;
+            actions?: (string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            })[] | undefined;
+            description?: string | undefined;
+        } | {
+            target?: string | undefined;
+            cond?: string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            } | undefined;
+            actions?: (string | {
+                type: string;
+                params?: Record<string, unknown> | undefined;
+            })[] | undefined;
+            description?: string | undefined;
+        }[]> | undefined;
+    }> | undefined;
+    displayNameField?: string | undefined;
+    recordName?: {
+        type: "text" | "autonumber";
+        displayFormat?: string | undefined;
+        startNumber?: number | undefined;
+    } | undefined;
+    titleFormat?: {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | {
+        dialect: "cel" | "js" | "cron" | "template";
+        source?: string | undefined;
+        ast?: unknown;
+        meta?: {
+            rationale?: string | undefined;
+            generatedBy?: string | undefined;
+        } | undefined;
+    } | undefined;
+    compactLayout?: string[] | undefined;
+    search?: {
+        fields: string[];
+        displayFields?: string[] | undefined;
+        filters?: string[] | undefined;
+    } | undefined;
+    enable?: {
+        trackHistory: boolean;
+        searchable: boolean;
+        apiEnabled: boolean;
+        files: boolean;
+        feeds: boolean;
+        activities: boolean;
+        trash: boolean;
+        mru: boolean;
+        clone: boolean;
+        apiMethods?: ("search" | "list" | "get" | "delete" | "update" | "upsert" | "history" | "create" | "bulk" | "aggregate" | "restore" | "purge" | "import" | "export")[] | undefined;
+    } | undefined;
+    recordTypes?: string[] | undefined;
+    sharingModel?: "full" | "private" | "read" | "read_write" | undefined;
+    keyPrefix?: string | undefined;
+    actions?: {
+        name: string;
+        label: string;
+        type: "url" | "flow" | "api" | "script" | "modal";
+        refreshAfter: boolean;
+        objectName?: string | undefined;
+        icon?: string | undefined;
+        locations?: ("list_toolbar" | "list_item" | "record_header" | "record_more" | "record_related" | "global_nav")[] | undefined;
+        component?: "action:button" | "action:icon" | "action:menu" | "action:group" | undefined;
+        target?: string | undefined;
+        body?: {
+            language: "expression";
+            source: string;
+        } | {
+            language: "js";
+            source: string;
+            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            timeoutMs?: number | undefined;
+            memoryMb?: number | undefined;
+        } | undefined;
+        execute?: string | undefined;
+        params?: {
+            name: string;
+            label: string;
+            type: "number" | "boolean" | "date" | "file" | "code" | "datetime" | "signature" | "progress" | "url" | "text" | "textarea" | "email" | "phone" | "password" | "markdown" | "html" | "richtext" | "currency" | "percent" | "time" | "toggle" | "select" | "multiselect" | "radio" | "checkboxes" | "lookup" | "master_detail" | "tree" | "image" | "avatar" | "video" | "audio" | "formula" | "summary" | "autonumber" | "location" | "address" | "json" | "color" | "rating" | "slider" | "qrcode" | "tags" | "vector";
+            required: boolean;
+            options?: {
+                label: string;
+                value: string;
+            }[] | undefined;
+        }[] | undefined;
+        variant?: "link" | "primary" | "secondary" | "danger" | "ghost" | undefined;
+        confirmText?: string | undefined;
+        successMessage?: string | undefined;
+        visible?: {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        disabled?: boolean | {
+            dialect: "cel" | "js" | "cron" | "template";
+            source?: string | undefined;
+            ast?: unknown;
+            meta?: {
+                rationale?: string | undefined;
+                generatedBy?: string | undefined;
+            } | undefined;
+        } | undefined;
+        shortcut?: string | undefined;
+        bulkEnabled?: boolean | undefined;
+        timeout?: number | undefined;
+        aria?: {
+            ariaLabel?: string | undefined;
+            ariaDescribedBy?: string | undefined;
+            role?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+}, "fields"> & Pick<{
+    readonly name: "sys_role_permission_set";
+    readonly label: "Role Permission Set";
+    readonly pluralLabel: "Role Permission Sets";
+    readonly icon: "shield-plus";
+    readonly isSystem: true;
+    readonly description: "Binds a permission set to a role.";
+    readonly titleFormat: "{role_id} → {permission_set_id}";
+    readonly compactLayout: ["role_id", "permission_set_id"];
+    readonly fields: {
+        readonly id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "text";
+        };
+        readonly role_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly permission_set_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly created_at: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "datetime";
+        };
+        readonly updated_at: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly theme?: string | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly group?: string | undefined;
+            readonly encryptionConfig?: {
+                enabled: boolean;
+                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
+                keyManagement: {
+                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
+                    keyId?: string | undefined;
+                    rotationPolicy?: {
+                        enabled: boolean;
+                        frequencyDays: number;
+                        retainOldVersions: number;
+                        autoRotate: boolean;
+                    } | undefined;
+                };
+                scope: "record" | "field" | "table" | "database";
+                deterministicEncryption: boolean;
+                searchableEncryption: boolean;
+            } | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly writeRequiresMasterRead?: boolean | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly lineNumbers?: boolean | undefined;
+            readonly maxRating?: number | undefined;
+            readonly allowHalf?: boolean | undefined;
+            readonly displayMap?: boolean | undefined;
+            readonly allowGeocoding?: boolean | undefined;
+            readonly addressFormat?: "us" | "uk" | "international" | undefined;
+            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
+            readonly allowAlpha?: boolean | undefined;
+            readonly presetColors?: string[] | undefined;
+            readonly step?: number | undefined;
+            readonly showValue?: boolean | undefined;
+            readonly marks?: Record<string, string> | undefined;
+            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
+            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
+            readonly displayValue?: boolean | undefined;
+            readonly allowScanning?: boolean | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly maskingRule?: {
+                field: string;
+                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
+                preserveFormat: boolean;
+                preserveLength: boolean;
+                pattern?: string | undefined;
+                roles?: string[] | undefined;
+                exemptRoles?: string[] | undefined;
+            } | undefined;
+            readonly auditTrail?: boolean | undefined;
+            readonly cached?: {
+                enabled: boolean;
+                ttl: number;
+                invalidateOn: string[];
+            } | undefined;
+            readonly dataQuality?: {
+                uniqueness: boolean;
+                completeness: number;
+                accuracy?: {
+                    source: string;
+                    threshold: number;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly trackFeedHistory?: boolean | undefined;
+            readonly caseSensitive?: boolean | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "datetime";
+        };
+    };
+    readonly indexes: [{
+        readonly fields: ["role_id", "permission_set_id"];
+        readonly unique: true;
+    }, {
+        readonly fields: ["role_id"];
+    }, {
+        readonly fields: ["permission_set_id"];
+    }];
+    readonly enable: {
+        readonly trackHistory: true;
+        readonly searchable: true;
+        readonly apiEnabled: true;
+        readonly apiMethods: ["get", "list", "create", "update", "delete"];
+        readonly trash: true;
+        readonly mru: false;
+    };
+}, "fields">;
+
+/**
+ * Default permission sets seeded by the platform.
+ *
+ * These are referenced by name (`admin_full_access`, `member_default`,
+ * `viewer_readonly`) from `sys_role_permission_set` rows or assigned
+ * directly to users via `sys_user_permission_set`.
+ *
+ * The runtime SecurityPlugin reads these via the metadata service when a
+ * permission set name appears in the request `ExecutionContext.permissions[]`.
+ *
+ * Each entry is run through `PermissionSetSchema.parse(...)` so Zod fills
+ * in the boolean/`priority`/`enabled` defaults — keeping the literal
+ * source readable while still satisfying the strict output type.
+ *
+ * `objects: { '*': … }` uses the wildcard sentinel honoured by
+ * `PermissionEvaluator` — admins do not need an explicit row per object.
+ * Per-object entries fully override the wildcard for that object (see
+ * `PermissionEvaluator.checkObjectPermission` — lookup, not merge).
+ *
+ * RLS policies use the canonical `current_user.*` placeholders compiled
+ * by `RLSCompiler`. The active organization is exposed under
+ * `current_user.organization_id` (sourced from
+ * `ExecutionContext.tenantId` at request time) — there is no rewrite
+ * step or `tenantField` indirection in SecurityPlugin. Schemas with a
+ * different physical tenant column should fork these defaults.
+ */
+declare const defaultPermissionSets: PermissionSet[];
+
+export { SysPermissionSet, SysRole, SysRolePermissionSet, SysUserPermissionSet, defaultPermissionSets };