@objectstack/platform-objects 11.6.0 → 11.9.0

package/dist/identity/index.mjs

@@ -19,7 +19,7 @@ var SysUser = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "email", "email_verified"],
+  highlightFields: ["name", "email", "email_verified"],
   // Custom actions — generic CRUD is suppressed because user accounts are
   // managed by better-auth, but we still need first-class affordances for
   // common operations. Each action delegates to a Console-side named script
@@ -545,7 +545,7 @@ var SysSession = ObjectSchema.create({
   nameField: "user_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "Session \u2014 {user_id}",
-  compactLayout: ["user_id", "ip_address", "expires_at"],
+  highlightFields: ["user_id", "ip_address", "expires_at"],
   // Custom actions — sessions are managed by better-auth (generic CRUD
   // suppressed). "Sign out other devices" is the high-value self-service
   // affordance every IdP exposes. Maps to better-auth's
@@ -730,7 +730,7 @@ var SysAccount = ObjectSchema.create({
   },
   description: "OAuth and authentication provider accounts",
   titleFormat: "{provider_id} - {account_id}",
-  compactLayout: ["provider_id", "user_id", "account_id"],
+  highlightFields: ["provider_id", "user_id", "account_id"],
   // Custom actions — sysadmins routinely need to revoke a user's OAuth
   // link (e.g. when an SSO provider is decommissioned or the user
   // requests it). Better-auth exposes `/unlink-account { providerId,
@@ -921,7 +921,7 @@ var SysVerification = ObjectSchema.create({
   },
   description: "Email and phone verification tokens",
   titleFormat: "Verification for {identifier}",
-  compactLayout: ["identifier", "expires_at", "created_at"],
+  highlightFields: ["identifier", "expires_at", "created_at"],
   fields: {
     id: Field.text({
       label: "Verification ID",
@@ -993,7 +993,7 @@ var SysOrganization = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "slug"],
+  highlightFields: ["name", "slug"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed),
   // but admins still need to create new orgs from the Setup app.
   actions: [
@@ -1224,7 +1224,7 @@ var SysMember = ObjectSchema.create({
   // '{user_id} in {organization_id}' format renders "… in null". User + role
   // identifies the membership in both single- and multi-org deployments.
   titleFormat: "{user_id} ({role})",
-  compactLayout: ["user_id", "organization_id", "role"],
+  highlightFields: ["user_id", "organization_id", "role"],
   // Row-level actions: better-auth `organization/update-member-role` and
   // `organization/remove-member`. Generic CRUD is suppressed on better-auth
   // managed tables, so these are the canonical edit/delete entry points.
@@ -1394,7 +1394,7 @@ var SysInvitation = ObjectSchema.create({
   // single-org mode (renders "Invitation to null"), and the recipient email is
   // the more useful identifier in both modes anyway.
   titleFormat: "Invitation for {email}",
-  compactLayout: ["email", "organization_id", "status"],
+  highlightFields: ["email", "organization_id", "status"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed).
   // Mirror the `invite_user` toolbar action from sys_user here so admins
   // landing on the Invitations page get an obvious entry point.
@@ -1617,7 +1617,7 @@ var SysTeam = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "organization_id"],
+  highlightFields: ["name", "organization_id"],
   // Custom actions calling better-auth's team endpoints. Generic CRUD is
   // suppressed (managedBy: 'better-auth'), so these are the canonical
   // entry points for create/update/delete.
@@ -1772,7 +1772,7 @@ var SysTeamMember = ObjectSchema.create({
   },
   description: "Team membership records linking users to teams",
   titleFormat: "{user_id} in {team_id}",
-  compactLayout: ["user_id", "team_id", "created_at"],
+  highlightFields: ["user_id", "team_id", "created_at"],
   // Custom actions calling better-auth's team-member endpoints. Generic
   // CRUD is suppressed (managedBy: 'better-auth') so these are the
   // canonical add/remove entry points.
@@ -1865,7 +1865,7 @@ var SysBusinessUnit = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
+  highlightFields: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
   listViews: {
     // Org chart — the hierarchy view. Surfaces the self-referencing
     // `parent_business_unit_id` tree (ADR-0057 D2) as an indented, expand/
@@ -2048,7 +2048,7 @@ var SysBusinessUnitMember = ObjectSchema.create({
   managedBy: "platform",
   description: "User assignment to a business unit (matrix-org friendly, effective-dated).",
   titleFormat: "{user_id} in {business_unit_id}",
-  compactLayout: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
+  highlightFields: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
   fields: {
     id: Field.text({
       label: "Member ID",
@@ -2140,7 +2140,7 @@ var SysApiKey = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "prefix", "user_id", "expires_at", "revoked"],
+  highlightFields: ["name", "prefix", "user_id", "expires_at", "revoked"],
   // Custom actions — sys_api_key is managed-by 'better-auth' but the
   // `revoked` boolean is a column we control via the data API. These row
   // actions use the generic PATCH /api/v1/sys_api_key/{id} endpoint with
@@ -2329,7 +2329,7 @@ var SysTwoFactor = ObjectSchema.create({
   },
   description: "Two-factor authentication credentials",
   titleFormat: "Two-factor for {user_id}",
-  compactLayout: ["user_id", "created_at"],
+  highlightFields: ["user_id", "created_at"],
   listViews: {
     mine: {
       type: "grid",
@@ -2485,7 +2485,7 @@ var SysDeviceCode = ObjectSchema.create({
   nameField: "user_code",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{user_code}",
-  compactLayout: ["user_code", "status", "client_id", "expires_at"],
+  highlightFields: ["user_code", "status", "client_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "Device Code ID",
@@ -2580,7 +2580,7 @@ var SysUserPreference = ObjectSchema.create({
   nameField: "key",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{key}",
-  compactLayout: ["user_id", "key"],
+  highlightFields: ["user_id", "key"],
   listViews: {
     mine: {
       type: "grid",
@@ -2677,7 +2677,7 @@ var SysOauthApplication = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "client_id", "type", "disabled"],
+  highlightFields: ["name", "client_id", "type", "disabled"],
   // Custom actions — all OAuth-application mutations are routed through
   // better-auth's `@better-auth/oauth-provider` endpoints (and a thin
   // ObjectStack-added auth route for the enable/disable toggle) rather
@@ -3077,7 +3077,7 @@ var SysOauthAccessToken = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth access tokens issued to client applications",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3163,7 +3163,7 @@ var SysOauthRefreshToken = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth refresh tokens (linked to a session)",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3253,7 +3253,7 @@ var SysOauthConsent = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "User consent records for OAuth client applications",
-  compactLayout: ["client_id", "user_id", "scopes"],
+  highlightFields: ["client_id", "user_id", "scopes"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3321,7 +3321,7 @@ var SysJwks = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Asymmetric key pairs used to sign and verify issued JWTs",
-  compactLayout: ["id", "created_at", "expires_at"],
+  highlightFields: ["id", "created_at", "expires_at"],
   fields: {
     id: Field.text({
       label: "Key ID",
@@ -3394,7 +3394,7 @@ var SysSsoProvider = ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "issuer", "domain"],
+  highlightFields: ["provider_id", "issuer", "domain"],
   // All mutations go through @better-auth/sso's endpoints under
   // /api/v1/auth/sso/* (register / delete-provider) rather than the generic
   // data layer, so server-side config validation + secret handling run.
@@ -3636,7 +3636,7 @@ var SysScimProvider = ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "organization_id"],
+  highlightFields: ["provider_id", "organization_id"],
   listViews: {
     all: {
       type: "grid",