@objectstack/platform-objects 13.0.0 → 14.5.0

package/dist/apps/index.mjs

@@ -146,12 +146,12 @@ var SETUP_NAV_CONTRIBUTIONS = [
   {
     app: "setup",
     group: "group_access_control",
-    // Priority 300 keeps API Keys after plugin-security's Roles / Permission
+    // Priority 300 keeps API Keys after plugin-security's Positions / Permission
     // Sets (100) and plugin-sharing's Sharing Rules / Record Shares (200),
     // preserving the original menu order.
     priority: 300,
     items: [
-      // Roles / Permission Sets are contributed by @objectstack/plugin-security
+      // Positions / Permission Sets are contributed by @objectstack/plugin-security
       // and Sharing Rules / Record Shares by @objectstack/plugin-sharing
       // (ADR-0029 K2). Only API Keys (sys_api_key, an identity object owned by
       // plugin-auth) remains a platform-objects base entry here.
@@ -914,14 +914,64 @@ var enObjects = {
         label: "Ban Expires",
         help: "When set, the ban auto-clears at this time."
       },
+      failed_login_count: {
+        label: "Failed Login Count",
+        help: "Consecutive failed sign-in attempts; reset to 0 on success. Maintained by the auth manager."
+      },
+      locked_until: {
+        label: "Locked Until",
+        help: "When set and in the future, sign-in is rejected (brute-force lockout). Auto-clears past this time; an admin can clear it early via Unlock."
+      },
+      password_changed_at: {
+        label: "Password Changed At",
+        help: "Timestamp of the last password change. Backs password_expiry_days; system-managed."
+      },
+      phone_number: {
+        label: "Phone Number",
+        help: "Sign-in phone number (E.164 recommended). Unique per user; managed by better-auth when the phoneNumber plugin is enabled."
+      },
+      phone_number_verified: {
+        label: "Phone Verified",
+        help: "Whether the phone number has been verified (OTP verification requires SMS infrastructure; false until that ships). System-managed."
+      },
+      must_change_password: {
+        label: "Must Change Password",
+        help: "When true, the user is blocked (403 PASSWORD_EXPIRED) until they change their password. Stamped by the admin user-management routes; system-managed."
+      },
+      mfa_required_at: {
+        label: "MFA Required At",
+        help: "When enforced MFA first applied to this user (grace-period clock). Backs mfa_required; system-managed."
+      },
+      last_login_at: {
+        label: "Last Login At",
+        help: "Timestamp of the last successful sign-in. Stamped by the auth manager; system-managed."
+      },
+      last_login_ip: {
+        label: "Last Login IP",
+        help: "Client IP of the last successful sign-in (from the trusted proxy forwarded header). System-managed."
+      },
+      ai_access: {
+        label: "AI Access",
+        help: "Whether this user holds an AI seat \u2014 grants access to the in-UI AI agents (build / ask). The framework synthesizes the `ai_seat` capability from this flag (plugin-hono-server resolveCtx). Assignment is capped by the licensed / purchased seat count (enforced by @objectstack/security-enterprise AiSeatPlugin). Owned by objectql (better-auth is oblivious to this column)."
+      },
       image: {
         label: "Profile Image"
       },
       manager_id: {
-        label: "Manager"
+        label: "Manager",
+        help: "This user's direct manager. Forms the reporting chain the `own_and_reports` hierarchy scope walks (ADR-0057 / @objectstack/security-enterprise)."
       },
       primary_business_unit_id: {
-        label: "Primary Business Unit"
+        label: "Primary Business Unit",
+        help: "The user's primary business unit \u2014 a denormalised projection of sys_business_unit_member.is_primary, maintained by plugin-sharing (ADR-0057 addendum D12). Lets a user-lookup filter candidates by business unit without traversing the membership junction. Do not edit directly; set it via business-unit membership."
+      },
+      source: {
+        label: "Identity Source",
+        help: "How this identity was created \u2014 idp_provisioned (federated SSO JIT) or env_native (local signup / app end-user). System-managed; do not edit.",
+        options: {
+          idp_provisioned: "IdP-Provisioned",
+          env_native: "Env-Native"
+        }
       },
       id: {
         label: "User ID"
@@ -964,6 +1014,14 @@ var enObjects = {
         label: "Unban User",
         successMessage: "User unbanned"
       },
+      unlock_user: {
+        label: "Unlock Account",
+        successMessage: "Account unlocked"
+      },
+      create_user: {
+        label: "Create User",
+        successMessage: "User created"
+      },
       set_user_password: {
         label: "Set Password",
         successMessage: "Password updated"
@@ -1025,6 +1083,18 @@ var enObjects = {
       expires_at: {
         label: "Expires At"
       },
+      last_activity_at: {
+        label: "Last Activity At",
+        help: "Timestamp of the last request on this session; drives idle-timeout. System-managed."
+      },
+      revoked_at: {
+        label: "Revoked At",
+        help: "When set, this session was revoked (idle / absolute-max / concurrent-cap / admin). System-managed."
+      },
+      revoke_reason: {
+        label: "Revoke Reason",
+        help: "Why the session was revoked (idle_timeout, absolute_max, concurrent_cap, \u2026)."
+      },
       active_organization_id: {
         label: "Active Organization"
       },
@@ -1123,6 +1193,10 @@ var enObjects = {
       password: {
         label: "Password Hash",
         help: "Hashed password for email/password provider"
+      },
+      previous_password_hashes: {
+        label: "Previous Password Hashes",
+        help: "JSON array of prior password hashes (bounded by password_history_count); reuse-prevention only. System-managed."
       }
     },
     _views: {
@@ -1193,6 +1267,10 @@ var enObjects = {
         label: "Metadata",
         help: "JSON-serialized organization metadata"
       },
+      require_mfa: {
+        label: "Require Multi-Factor Auth",
+        help: "When true, every member of this organization must enroll an authenticator app to access data."
+      },
       id: {
         label: "Organization ID"
       },
@@ -1517,6 +1595,9 @@ var enObjects = {
       }
     },
     _views: {
+      org_chart: {
+        label: "Org Chart"
+      },
       active: {
         label: "Active"
       },
@@ -2098,263 +2179,57 @@ var enObjects = {
       }
     }
   },
-  sys_audit_log: {
-    label: "Audit Log",
-    pluralLabel: "Audit Logs",
-    description: "Immutable audit trail for platform events",
-    fields: {
-      created_at: {
-        label: "Timestamp"
-      },
-      action: {
-        label: "Action",
-        help: "Action type (snake_case)",
-        options: {
-          create: "create",
-          update: "update",
-          delete: "delete",
-          restore: "restore",
-          login: "login",
-          logout: "logout",
-          permission_change: "permission_change",
-          config_change: "config_change",
-          export: "export",
-          import: "import"
-        }
-      },
-      user_id: {
-        label: "Actor",
-        help: "User who performed the action (null for system actions)"
-      },
-      object_name: {
-        label: "Object",
-        help: "Target object (e.g. sys_user, project_task)"
-      },
-      record_id: {
-        label: "Record ID",
-        help: "ID of the affected record"
-      },
-      old_value: {
-        label: "Old Value",
-        help: "JSON-serialized previous state"
-      },
-      new_value: {
-        label: "New Value",
-        help: "JSON-serialized new state"
-      },
-      ip_address: {
-        label: "IP Address"
-      },
-      user_agent: {
-        label: "User Agent"
-      },
-      tenant_id: {
-        label: "Tenant",
-        help: "Tenant context for multi-tenant isolation"
-      },
-      metadata: {
-        label: "Metadata",
-        help: "JSON-serialized additional context"
-      },
-      id: {
-        label: "Audit Log ID"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recent"
-      },
-      writes_only: {
-        label: "Writes"
-      },
-      auth_events: {
-        label: "Auth"
-      },
-      config_changes: {
-        label: "Config"
-      },
-      all_events: {
-        label: "All"
-      }
-    }
-  },
-  sys_presence: {
-    label: "Presence",
-    pluralLabel: "Presences",
-    description: "Real-time user presence and activity tracking",
+  sys_notification: {
+    label: "Notification",
+    pluralLabel: "Notifications",
+    description: "Per-user notification inbox entries",
     fields: {
       id: {
-        label: "Presence ID"
-      },
-      created_at: {
-        label: "Created At"
-      },
-      updated_at: {
-        label: "Updated At"
-      },
-      user_id: {
-        label: "User"
-      },
-      session_id: {
-        label: "Session"
-      },
-      status: {
-        label: "Status",
-        options: {
-          online: "Online",
-          away: "Away",
-          busy: "Busy",
-          offline: "Offline"
-        }
+        label: "Notification ID"
       },
-      last_seen: {
-        label: "Last Seen"
+      topic: {
+        label: "Topic",
+        help: "Notification topic, e.g. task.assigned, collab.mention"
       },
-      current_location: {
-        label: "Current Location"
+      payload: {
+        label: "Payload",
+        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
       },
-      device: {
-        label: "Device",
+      severity: {
+        label: "Severity",
+        help: "Severity hint for rendering / filtering",
         options: {
-          desktop: "Desktop",
-          mobile: "Mobile",
-          tablet: "Tablet",
-          other: "Other"
+          info: "info",
+          warning: "warning",
+          critical: "critical"
         }
       },
-      custom_status: {
-        label: "Custom Status"
-      },
-      metadata: {
-        label: "Metadata",
-        help: "Arbitrary JSON metadata associated with the presence state (matches PresenceStateSchema.metadata)."
-      }
-    }
-  },
-  sys_activity: {
-    label: "Activity",
-    pluralLabel: "Activities",
-    description: "Recent activity stream entries (lightweight, denormalized)",
-    fields: {
-      id: {
-        label: "Activity ID"
-      },
-      timestamp: {
-        label: "Timestamp"
+      dedup_key: {
+        label: "Dedup Key",
+        help: "Idempotency key within a topic window; a repeat emit is a no-op"
       },
-      type: {
-        label: "Type",
-        options: {
-          created: "created",
-          updated: "updated",
-          deleted: "deleted",
-          commented: "commented",
-          mentioned: "mentioned",
-          shared: "shared",
-          assigned: "assigned",
-          completed: "completed",
-          login: "login",
-          logout: "logout",
-          system: "system"
-        }
+      source_object: {
+        label: "Source Object",
+        help: "Object name of the related record (e.g. lead, opportunity)"
       },
-      summary: {
-        label: "Summary",
-        help: "Human-readable one-line summary"
+      source_id: {
+        label: "Source Record",
+        help: "Record id within source_object"
       },
       actor_id: {
-        label: "Actor"
-      },
-      actor_name: {
-        label: "Actor Name"
-      },
-      actor_avatar_url: {
-        label: "Actor Avatar"
-      },
-      object_name: {
-        label: "Object",
-        help: "Target object short name (e.g. account, sys_user)"
-      },
-      record_id: {
-        label: "Record ID"
-      },
-      record_label: {
-        label: "Record Label",
-        help: "Display label of the target record at write time"
-      },
-      url: {
-        label: "URL",
-        help: "Optional deep-link to the activity target"
-      },
-      environment_id: {
-        label: "Project",
-        help: "Environment context (multi-environment deployments)"
-      },
-      metadata: {
-        label: "Metadata",
-        help: "JSON-serialized additional context"
-      }
-    }
-  },
-  sys_comment: {
-    label: "Comment",
-    pluralLabel: "Comments",
-    description: "Threaded comments attached to records via thread_id",
-    fields: {
-      id: {
-        label: "Comment ID"
-      },
-      thread_id: {
-        label: "Thread",
-        help: "Thread identifier \u2014 conventionally `{object}:{record_id}` (e.g. `sys_user:abc123`)"
-      },
-      parent_id: {
-        label: "Parent Comment",
-        help: "Optional parent comment for nested replies"
-      },
-      reply_count: {
-        label: "Reply Count"
-      },
-      author_id: {
-        label: "Author"
-      },
-      author_name: {
-        label: "Author Name"
-      },
-      author_avatar_url: {
-        label: "Author Avatar"
-      },
-      body: {
-        label: "Body",
-        help: "Comment text (Markdown supported)"
-      },
-      mentions: {
-        label: "Mentions",
-        help: "JSON array of @mention objects"
-      },
-      reactions: {
-        label: "Reactions",
-        help: "JSON array of emoji reaction objects"
-      },
-      is_edited: {
-        label: "Edited"
-      },
-      edited_at: {
-        label: "Edited At"
-      },
-      visibility: {
-        label: "Visibility",
-        options: {
-          public: "public",
-          internal: "internal",
-          private: "private"
-        }
+        label: "Actor",
+        help: "User who caused the notification (mentioner, assigner)"
       },
       created_at: {
         label: "Created At"
+      }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
       },
-      updated_at: {
-        label: "Updated At"
+      by_topic: {
+        label: "By Topic"
       }
     }
   },
@@ -2419,60 +2294,6 @@ var enObjects = {
       }
     }
   },
-  sys_notification: {
-    label: "Notification",
-    pluralLabel: "Notifications",
-    description: "Per-user notification inbox entries",
-    fields: {
-      id: {
-        label: "Notification ID"
-      },
-      topic: {
-        label: "Topic",
-        help: "Notification topic, e.g. task.assigned, collab.mention"
-      },
-      payload: {
-        label: "Payload",
-        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
-      },
-      severity: {
-        label: "Severity",
-        help: "Severity hint for rendering / filtering",
-        options: {
-          info: "info",
-          warning: "warning",
-          critical: "critical"
-        }
-      },
-      dedup_key: {
-        label: "Dedup Key",
-        help: "Idempotency key within a topic window; a repeat emit is a no-op"
-      },
-      source_object: {
-        label: "Source Object",
-        help: "Object name of the related record (e.g. lead, opportunity)"
-      },
-      source_id: {
-        label: "Source Record",
-        help: "Record id within source_object"
-      },
-      actor_id: {
-        label: "Actor",
-        help: "User who caused the notification (mentioner, assigner)"
-      },
-      created_at: {
-        label: "Created At"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recent"
-      },
-      by_topic: {
-        label: "By Topic"
-      }
-    }
-  },
   sys_email: {
     label: "Email",
     pluralLabel: "Emails",
@@ -3377,6 +3198,11 @@ var enObjects = {
         label: "Ciphertext",
         help: "Provider-encoded ciphertext blob (base64 / JSON). Implementation-defined; only the matching ICryptoProvider can read it."
       }
+    },
+    _views: {
+      all: {
+        label: "All Secrets"
+      }
     }
   },
   sys_setting_audit: {
@@ -3452,6 +3278,11 @@ var enObjects = {
         label: "Request ID",
         help: "Correlates with sys_audit_log / tracing."
       }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
+      }
     }
   }
 };
@@ -3504,7 +3335,7 @@ var en = {
         nav_organizations: { label: "Organizations" },
         nav_invitations: { label: "Invitations" },
         // Access Control
-        nav_roles: { label: "Roles" },
+        nav_positions: { label: "Positions" },
         nav_permission_sets: { label: "Permission Sets" },
         nav_sharing_rules: { label: "Sharing Rules" },
         nav_record_shares: { label: "Record Shares" },
@@ -3661,14 +3492,64 @@ var zhCNObjects = {
         label: "\u5C01\u7981\u5230\u671F\u65F6\u95F4",
         help: "\u8BBE\u7F6E\u540E\uFF0C\u5230\u8FBE\u8BE5\u65F6\u95F4\u4F1A\u81EA\u52A8\u89E3\u9664\u5C01\u7981\u3002"
       },
+      failed_login_count: {
+        label: "Failed Login Count",
+        help: "Consecutive failed sign-in attempts; reset to 0 on success. Maintained by the auth manager."
+      },
+      locked_until: {
+        label: "Locked Until",
+        help: "When set and in the future, sign-in is rejected (brute-force lockout). Auto-clears past this time; an admin can clear it early via Unlock."
+      },
+      password_changed_at: {
+        label: "Password Changed At",
+        help: "Timestamp of the last password change. Backs password_expiry_days; system-managed."
+      },
+      phone_number: {
+        label: "Phone Number",
+        help: "Sign-in phone number (E.164 recommended). Unique per user; managed by better-auth when the phoneNumber plugin is enabled."
+      },
+      phone_number_verified: {
+        label: "Phone Verified",
+        help: "Whether the phone number has been verified (OTP verification requires SMS infrastructure; false until that ships). System-managed."
+      },
+      must_change_password: {
+        label: "Must Change Password",
+        help: "When true, the user is blocked (403 PASSWORD_EXPIRED) until they change their password. Stamped by the admin user-management routes; system-managed."
+      },
+      mfa_required_at: {
+        label: "MFA Required At",
+        help: "When enforced MFA first applied to this user (grace-period clock). Backs mfa_required; system-managed."
+      },
+      last_login_at: {
+        label: "Last Login At",
+        help: "Timestamp of the last successful sign-in. Stamped by the auth manager; system-managed."
+      },
+      last_login_ip: {
+        label: "Last Login IP",
+        help: "Client IP of the last successful sign-in (from the trusted proxy forwarded header). System-managed."
+      },
+      ai_access: {
+        label: "AI Access",
+        help: "Whether this user holds an AI seat \u2014 grants access to the in-UI AI agents (build / ask). The framework synthesizes the `ai_seat` capability from this flag (plugin-hono-server resolveCtx). Assignment is capped by the licensed / purchased seat count (enforced by @objectstack/security-enterprise AiSeatPlugin). Owned by objectql (better-auth is oblivious to this column)."
+      },
       image: {
         label: "\u5934\u50CF"
       },
       manager_id: {
-        label: "\u7ECF\u7406"
+        label: "\u7ECF\u7406",
+        help: "This user's direct manager. Forms the reporting chain the `own_and_reports` hierarchy scope walks (ADR-0057 / @objectstack/security-enterprise)."
       },
       primary_business_unit_id: {
-        label: "\u4E3B\u5C5E\u4E1A\u52A1\u5355\u5143"
+        label: "\u4E3B\u5C5E\u4E1A\u52A1\u5355\u5143",
+        help: "The user's primary business unit \u2014 a denormalised projection of sys_business_unit_member.is_primary, maintained by plugin-sharing (ADR-0057 addendum D12). Lets a user-lookup filter candidates by business unit without traversing the membership junction. Do not edit directly; set it via business-unit membership."
+      },
+      source: {
+        label: "Identity Source",
+        help: "How this identity was created \u2014 idp_provisioned (federated SSO JIT) or env_native (local signup / app end-user). System-managed; do not edit.",
+        options: {
+          idp_provisioned: "IdP-Provisioned",
+          env_native: "Env-Native"
+        }
       },
       id: {
         label: "\u7528\u6237 ID"
@@ -3711,6 +3592,14 @@ var zhCNObjects = {
         label: "\u89E3\u9664\u5C01\u7981",
         successMessage: "\u7528\u6237\u5DF2\u89E3\u9664\u5C01\u7981"
       },
+      unlock_user: {
+        label: "Unlock Account",
+        successMessage: "Account unlocked"
+      },
+      create_user: {
+        label: "Create User",
+        successMessage: "User created"
+      },
       set_user_password: {
         label: "\u8BBE\u7F6E\u5BC6\u7801",
         successMessage: "\u5BC6\u7801\u5DF2\u66F4\u65B0"
@@ -3772,6 +3661,18 @@ var zhCNObjects = {
       expires_at: {
         label: "\u8FC7\u671F\u65F6\u95F4"
       },
+      last_activity_at: {
+        label: "Last Activity At",
+        help: "Timestamp of the last request on this session; drives idle-timeout. System-managed."
+      },
+      revoked_at: {
+        label: "Revoked At",
+        help: "When set, this session was revoked (idle / absolute-max / concurrent-cap / admin). System-managed."
+      },
+      revoke_reason: {
+        label: "Revoke Reason",
+        help: "Why the session was revoked (idle_timeout, absolute_max, concurrent_cap, \u2026)."
+      },
       active_organization_id: {
         label: "\u5F53\u524D\u7EC4\u7EC7"
       },
@@ -3870,6 +3771,10 @@ var zhCNObjects = {
       password: {
         label: "\u5BC6\u7801\u54C8\u5E0C",
         help: "\u90AE\u7BB1/\u5BC6\u7801\u63D0\u4F9B\u65B9\u4F7F\u7528\u7684\u5BC6\u7801\u54C8\u5E0C"
+      },
+      previous_password_hashes: {
+        label: "Previous Password Hashes",
+        help: "JSON array of prior password hashes (bounded by password_history_count); reuse-prevention only. System-managed."
       }
     },
     _views: {
@@ -3940,6 +3845,10 @@ var zhCNObjects = {
         label: "\u5143\u6570\u636E",
         help: "JSON \u5E8F\u5217\u5316\u7684\u7EC4\u7EC7\u5143\u6570\u636E"
       },
+      require_mfa: {
+        label: "Require Multi-Factor Auth",
+        help: "When true, every member of this organization must enroll an authenticator app to access data."
+      },
       id: {
         label: "\u7EC4\u7EC7 ID"
       },
@@ -4264,6 +4173,9 @@ var zhCNObjects = {
       }
     },
     _views: {
+      org_chart: {
+        label: "Org Chart"
+      },
       active: {
         label: "\u542F\u7528"
       },
@@ -4845,263 +4757,57 @@ var zhCNObjects = {
       }
     }
   },
-  sys_audit_log: {
-    label: "\u5BA1\u8BA1\u65E5\u5FD7",
-    pluralLabel: "\u5BA1\u8BA1\u65E5\u5FD7",
-    description: "\u5E73\u53F0\u4E8B\u4EF6\u7684\u4E0D\u53EF\u53D8\u5BA1\u8BA1\u8FFD\u8E2A",
-    fields: {
-      created_at: {
-        label: "\u65F6\u95F4\u6233"
-      },
-      action: {
-        label: "\u64CD\u4F5C",
-        help: "\u64CD\u4F5C\u7C7B\u578B\uFF08snake_case\uFF09",
-        options: {
-          create: "\u521B\u5EFA",
-          update: "\u66F4\u65B0",
-          delete: "\u5220\u9664",
-          restore: "\u6062\u590D",
-          login: "\u767B\u5F55",
-          logout: "\u767B\u51FA",
-          permission_change: "\u6743\u9650\u53D8\u66F4",
-          config_change: "\u914D\u7F6E\u53D8\u66F4",
-          export: "\u5BFC\u51FA",
-          import: "\u5BFC\u5165"
-        }
-      },
-      user_id: {
-        label: "\u6267\u884C\u4EBA",
-        help: "\u6267\u884C\u8BE5\u64CD\u4F5C\u7684\u7528\u6237\uFF08\u7CFB\u7EDF\u64CD\u4F5C\u65F6\u4E3A null\uFF09"
-      },
-      object_name: {
-        label: "\u5BF9\u8C61",
-        help: "\u76EE\u6807\u5BF9\u8C61\uFF08\u4F8B\u5982 sys_user\u3001project_task\uFF09"
-      },
-      record_id: {
-        label: "\u8BB0\u5F55 ID",
-        help: "\u53D7\u5F71\u54CD\u8BB0\u5F55\u7684 ID"
-      },
-      old_value: {
-        label: "\u65E7\u503C",
-        help: "\u65E7\u72B6\u6001\u7684 JSON \u5E8F\u5217\u5316\u5185\u5BB9"
-      },
-      new_value: {
-        label: "\u65B0\u503C",
-        help: "\u65B0\u72B6\u6001\u7684 JSON \u5E8F\u5217\u5316\u5185\u5BB9"
-      },
-      ip_address: {
-        label: "IP \u5730\u5740"
-      },
-      user_agent: {
-        label: "\u7528\u6237\u4EE3\u7406"
-      },
-      tenant_id: {
-        label: "\u79DF\u6237",
-        help: "\u7528\u4E8E\u591A\u79DF\u6237\u9694\u79BB\u7684\u79DF\u6237\u4E0A\u4E0B\u6587"
-      },
-      metadata: {
-        label: "\u5143\u6570\u636E",
-        help: "\u9644\u52A0\u4E0A\u4E0B\u6587\u7684 JSON \u5E8F\u5217\u5316\u5185\u5BB9"
-      },
-      id: {
-        label: "\u5BA1\u8BA1\u65E5\u5FD7 ID"
-      }
-    },
-    _views: {
-      recent: {
-        label: "\u6700\u8FD1"
-      },
-      writes_only: {
-        label: "\u5199\u5165"
-      },
-      auth_events: {
-        label: "\u8BA4\u8BC1"
-      },
-      config_changes: {
-        label: "\u914D\u7F6E"
-      },
-      all_events: {
-        label: "\u5168\u90E8"
-      }
-    }
-  },
-  sys_presence: {
-    label: "\u5728\u7EBF\u72B6\u6001",
-    pluralLabel: "\u5728\u7EBF\u72B6\u6001",
-    description: "\u5B9E\u65F6\u7528\u6237\u5728\u7EBF\u4E0E\u6D3B\u52A8\u8DDF\u8E2A",
+  sys_notification: {
+    label: "\u901A\u77E5",
+    pluralLabel: "\u901A\u77E5",
+    description: "\u6309\u7528\u6237\u5B58\u50A8\u7684\u901A\u77E5\u6536\u4EF6\u7BB1\u6761\u76EE",
     fields: {
       id: {
-        label: "\u5728\u7EBF\u72B6\u6001 ID"
-      },
-      created_at: {
-        label: "\u521B\u5EFA\u65F6\u95F4"
-      },
-      updated_at: {
-        label: "\u66F4\u65B0\u65F6\u95F4"
-      },
-      user_id: {
-        label: "\u7528\u6237"
-      },
-      session_id: {
-        label: "\u4F1A\u8BDD"
-      },
-      status: {
-        label: "\u72B6\u6001",
-        options: {
-          online: "\u5728\u7EBF",
-          away: "\u79BB\u5F00",
-          busy: "\u5FD9\u788C",
-          offline: "\u79BB\u7EBF"
-        }
+        label: "\u901A\u77E5 ID"
       },
-      last_seen: {
-        label: "\u6700\u8FD1\u5728\u7EBF\u65F6\u95F4"
+      topic: {
+        label: "Topic",
+        help: "Notification topic, e.g. task.assigned, collab.mention"
       },
-      current_location: {
-        label: "\u5F53\u524D\u4F4D\u7F6E"
+      payload: {
+        label: "Payload",
+        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
       },
-      device: {
-        label: "\u8BBE\u5907",
+      severity: {
+        label: "Severity",
+        help: "Severity hint for rendering / filtering",
         options: {
-          desktop: "\u684C\u9762\u7AEF",
-          mobile: "\u79FB\u52A8\u7AEF",
-          tablet: "\u5E73\u677F\u7AEF",
-          other: "\u5176\u4ED6"
+          info: "info",
+          warning: "warning",
+          critical: "critical"
         }
       },
-      custom_status: {
-        label: "\u81EA\u5B9A\u4E49\u72B6\u6001"
-      },
-      metadata: {
-        label: "\u5143\u6570\u636E",
-        help: "\u4E0E\u5728\u7EBF\u72B6\u6001\u5173\u8054\u7684\u4EFB\u610F JSON \u5143\u6570\u636E\uFF08\u5BF9\u5E94 PresenceStateSchema.metadata\uFF09\u3002"
-      }
-    }
-  },
-  sys_activity: {
-    label: "\u6D3B\u52A8",
-    pluralLabel: "\u6D3B\u52A8",
-    description: "\u6700\u8FD1\u6D3B\u52A8\u6D41\u6761\u76EE\uFF08\u8F7B\u91CF\u3001\u53BB\u89C4\u8303\u5316\uFF09",
-    fields: {
-      id: {
-        label: "\u6D3B\u52A8 ID"
-      },
-      timestamp: {
-        label: "\u65F6\u95F4\u6233"
+      dedup_key: {
+        label: "Dedup Key",
+        help: "Idempotency key within a topic window; a repeat emit is a no-op"
       },
-      type: {
-        label: "\u7C7B\u578B",
-        options: {
-          created: "\u5DF2\u521B\u5EFA",
-          updated: "\u5DF2\u66F4\u65B0",
-          deleted: "\u5DF2\u5220\u9664",
-          commented: "\u5DF2\u8BC4\u8BBA",
-          mentioned: "\u88AB\u63D0\u53CA",
-          shared: "\u5DF2\u5171\u4EAB",
-          assigned: "\u5DF2\u5206\u914D",
-          completed: "\u5DF2\u5B8C\u6210",
-          login: "\u767B\u5F55",
-          logout: "\u767B\u51FA",
-          system: "\u7CFB\u7EDF"
-        }
+      source_object: {
+        label: "\u6765\u6E90\u5BF9\u8C61",
+        help: "\u5173\u8054\u8BB0\u5F55\u7684\u5BF9\u8C61\u540D\u79F0\uFF08\u4F8B\u5982 lead\u3001opportunity\uFF09"
       },
-      summary: {
-        label: "\u6458\u8981",
-        help: "\u4EBA\u7C7B\u53EF\u8BFB\u7684\u5355\u884C\u6458\u8981"
+      source_id: {
+        label: "\u6765\u6E90\u8BB0\u5F55",
+        help: "source_object \u4E2D\u7684\u8BB0\u5F55 ID"
       },
       actor_id: {
-        label: "\u6267\u884C\u4EBA"
-      },
-      actor_name: {
-        label: "\u6267\u884C\u4EBA\u540D\u79F0"
-      },
-      actor_avatar_url: {
-        label: "\u6267\u884C\u4EBA\u5934\u50CF"
-      },
-      object_name: {
-        label: "\u5BF9\u8C61",
-        help: "\u76EE\u6807\u5BF9\u8C61\u77ED\u540D\u79F0\uFF08\u4F8B\u5982 account\u3001sys_user\uFF09"
-      },
-      record_id: {
-        label: "\u8BB0\u5F55 ID"
-      },
-      record_label: {
-        label: "\u8BB0\u5F55\u6807\u7B7E",
-        help: "\u5199\u5165\u65F6\u76EE\u6807\u8BB0\u5F55\u7684\u663E\u793A\u6807\u7B7E"
-      },
-      url: {
-        label: "URL",
-        help: "\u6307\u5411\u6D3B\u52A8\u76EE\u6807\u7684\u53EF\u9009\u6DF1\u5EA6\u94FE\u63A5"
-      },
-      environment_id: {
-        label: "\u9879\u76EE",
-        help: "\u9879\u76EE\u4E0A\u4E0B\u6587\uFF08\u591A\u9879\u76EE\u90E8\u7F72\uFF09"
-      },
-      metadata: {
-        label: "\u5143\u6570\u636E",
-        help: "\u9644\u52A0\u4E0A\u4E0B\u6587\u7684 JSON \u5E8F\u5217\u5316\u5185\u5BB9"
-      }
-    }
-  },
-  sys_comment: {
-    label: "\u8BC4\u8BBA",
-    pluralLabel: "\u8BC4\u8BBA",
-    description: "\u901A\u8FC7 thread_id \u9644\u52A0\u5230\u8BB0\u5F55\u7684\u7EBF\u7A0B\u5316\u8BC4\u8BBA",
-    fields: {
-      id: {
-        label: "\u8BC4\u8BBA ID"
-      },
-      thread_id: {
-        label: "\u7EBF\u7A0B",
-        help: "\u7EBF\u7A0B\u6807\u8BC6\u2014\u2014\u7EA6\u5B9A\u683C\u5F0F\u4E3A `{object}:{record_id}`\uFF08\u4F8B\u5982 `sys_user:abc123`\uFF09"
-      },
-      parent_id: {
-        label: "\u7236\u8BC4\u8BBA",
-        help: "\u53EF\u9009\u7684\u7236\u8BC4\u8BBA\uFF0C\u7528\u4E8E\u5D4C\u5957\u56DE\u590D"
-      },
-      reply_count: {
-        label: "\u56DE\u590D\u6570"
-      },
-      author_id: {
-        label: "\u4F5C\u8005"
-      },
-      author_name: {
-        label: "\u4F5C\u8005\u540D\u79F0"
-      },
-      author_avatar_url: {
-        label: "\u4F5C\u8005\u5934\u50CF"
-      },
-      body: {
-        label: "\u6B63\u6587",
-        help: "\u8BC4\u8BBA\u6587\u672C\uFF08\u652F\u6301 Markdown\uFF09"
-      },
-      mentions: {
-        label: "\u63D0\u53CA",
-        help: "@mention \u5BF9\u8C61\u7684 JSON \u6570\u7EC4"
-      },
-      reactions: {
-        label: "\u56DE\u5E94",
-        help: "\u8868\u60C5\u56DE\u5E94\u5BF9\u8C61\u7684 JSON \u6570\u7EC4"
-      },
-      is_edited: {
-        label: "\u5DF2\u7F16\u8F91"
-      },
-      edited_at: {
-        label: "\u7F16\u8F91\u65F6\u95F4"
-      },
-      visibility: {
-        label: "\u53EF\u89C1\u6027",
-        options: {
-          public: "\u516C\u5F00",
-          internal: "\u5185\u90E8",
-          private: "\u79C1\u6709"
-        }
+        label: "\u6267\u884C\u4EBA",
+        help: "\u89E6\u53D1\u8BE5\u901A\u77E5\u7684\u7528\u6237\uFF08\u63D0\u53CA\u4EBA\u3001\u5206\u914D\u4EBA\uFF09"
       },
       created_at: {
         label: "\u521B\u5EFA\u65F6\u95F4"
+      }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
       },
-      updated_at: {
-        label: "\u66F4\u65B0\u65F6\u95F4"
+      by_topic: {
+        label: "By Topic"
       }
     }
   },
@@ -5166,60 +4872,6 @@ var zhCNObjects = {
       }
     }
   },
-  sys_notification: {
-    label: "\u901A\u77E5",
-    pluralLabel: "\u901A\u77E5",
-    description: "\u6309\u7528\u6237\u5B58\u50A8\u7684\u901A\u77E5\u6536\u4EF6\u7BB1\u6761\u76EE",
-    fields: {
-      id: {
-        label: "\u901A\u77E5 ID"
-      },
-      topic: {
-        label: "Topic",
-        help: "Notification topic, e.g. task.assigned, collab.mention"
-      },
-      payload: {
-        label: "Payload",
-        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
-      },
-      severity: {
-        label: "Severity",
-        help: "Severity hint for rendering / filtering",
-        options: {
-          info: "info",
-          warning: "warning",
-          critical: "critical"
-        }
-      },
-      dedup_key: {
-        label: "Dedup Key",
-        help: "Idempotency key within a topic window; a repeat emit is a no-op"
-      },
-      source_object: {
-        label: "\u6765\u6E90\u5BF9\u8C61",
-        help: "\u5173\u8054\u8BB0\u5F55\u7684\u5BF9\u8C61\u540D\u79F0\uFF08\u4F8B\u5982 lead\u3001opportunity\uFF09"
-      },
-      source_id: {
-        label: "\u6765\u6E90\u8BB0\u5F55",
-        help: "source_object \u4E2D\u7684\u8BB0\u5F55 ID"
-      },
-      actor_id: {
-        label: "\u6267\u884C\u4EBA",
-        help: "\u89E6\u53D1\u8BE5\u901A\u77E5\u7684\u7528\u6237\uFF08\u63D0\u53CA\u4EBA\u3001\u5206\u914D\u4EBA\uFF09"
-      },
-      created_at: {
-        label: "\u521B\u5EFA\u65F6\u95F4"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recent"
-      },
-      by_topic: {
-        label: "By Topic"
-      }
-    }
-  },
   sys_email: {
     label: "\u90AE\u4EF6",
     pluralLabel: "\u90AE\u4EF6",
@@ -6124,6 +5776,11 @@ var zhCNObjects = {
         label: "\u5BC6\u6587",
         help: "\u63D0\u4F9B\u65B9\u7F16\u7801\u540E\u7684\u5BC6\u6587\u6570\u636E\uFF08base64 / JSON\uFF09\u3002\u5B9E\u73B0\u5B9A\u4E49\uFF1B\u4EC5\u5339\u914D\u7684 ICryptoProvider \u53EF\u8BFB\u53D6\u3002"
       }
+    },
+    _views: {
+      all: {
+        label: "All Secrets"
+      }
     }
   },
   sys_setting_audit: {
@@ -6199,6 +5856,11 @@ var zhCNObjects = {
         label: "\u8BF7\u6C42 ID",
         help: "\u4E0E sys_audit_log / tracing \u5173\u8054\u3002"
       }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
+      }
     }
   }
 };
@@ -6247,12 +5909,13 @@ var zhCN = {
         nav_teams: { label: "\u56E2\u961F" },
         nav_organizations: { label: "\u7EC4\u7EC7" },
         nav_invitations: { label: "\u9080\u8BF7" },
-        nav_roles: { label: "\u89D2\u8272" },
+        nav_positions: { label: "\u5C97\u4F4D" },
         nav_capabilities: { label: "\u80FD\u529B" },
         nav_permission_sets: { label: "\u6743\u9650\u96C6" },
         nav_sharing_rules: { label: "\u5171\u4EAB\u89C4\u5219" },
         nav_record_shares: { label: "\u8BB0\u5F55\u5171\u4EAB" },
         nav_api_keys: { label: "API \u5BC6\u94A5" },
+        nav_connect_agent: { label: "\u8FDE\u63A5\u667A\u80FD\u4F53" },
         nav_approval_processes: { label: "\u5BA1\u6279\u6D41\u7A0B" },
         nav_approval_requests: { label: "\u5BA1\u6279\u7533\u8BF7" },
         nav_approval_actions: { label: "\u5BA1\u6279\u5386\u53F2" },
@@ -6371,14 +6034,64 @@ var jaJPObjects = {
         label: "\u5229\u7528\u505C\u6B62\u671F\u9650",
         help: "\u8A2D\u5B9A\u3055\u308C\u3066\u3044\u308B\u5834\u5408\u3001\u3053\u306E\u65E5\u6642\u306B\u5229\u7528\u505C\u6B62\u304C\u81EA\u52D5\u89E3\u9664\u3055\u308C\u307E\u3059\u3002"
       },
+      failed_login_count: {
+        label: "Failed Login Count",
+        help: "Consecutive failed sign-in attempts; reset to 0 on success. Maintained by the auth manager."
+      },
+      locked_until: {
+        label: "Locked Until",
+        help: "When set and in the future, sign-in is rejected (brute-force lockout). Auto-clears past this time; an admin can clear it early via Unlock."
+      },
+      password_changed_at: {
+        label: "Password Changed At",
+        help: "Timestamp of the last password change. Backs password_expiry_days; system-managed."
+      },
+      phone_number: {
+        label: "Phone Number",
+        help: "Sign-in phone number (E.164 recommended). Unique per user; managed by better-auth when the phoneNumber plugin is enabled."
+      },
+      phone_number_verified: {
+        label: "Phone Verified",
+        help: "Whether the phone number has been verified (OTP verification requires SMS infrastructure; false until that ships). System-managed."
+      },
+      must_change_password: {
+        label: "Must Change Password",
+        help: "When true, the user is blocked (403 PASSWORD_EXPIRED) until they change their password. Stamped by the admin user-management routes; system-managed."
+      },
+      mfa_required_at: {
+        label: "MFA Required At",
+        help: "When enforced MFA first applied to this user (grace-period clock). Backs mfa_required; system-managed."
+      },
+      last_login_at: {
+        label: "Last Login At",
+        help: "Timestamp of the last successful sign-in. Stamped by the auth manager; system-managed."
+      },
+      last_login_ip: {
+        label: "Last Login IP",
+        help: "Client IP of the last successful sign-in (from the trusted proxy forwarded header). System-managed."
+      },
+      ai_access: {
+        label: "AI Access",
+        help: "Whether this user holds an AI seat \u2014 grants access to the in-UI AI agents (build / ask). The framework synthesizes the `ai_seat` capability from this flag (plugin-hono-server resolveCtx). Assignment is capped by the licensed / purchased seat count (enforced by @objectstack/security-enterprise AiSeatPlugin). Owned by objectql (better-auth is oblivious to this column)."
+      },
       image: {
         label: "\u30D7\u30ED\u30D5\u30A3\u30FC\u30EB\u753B\u50CF"
       },
       manager_id: {
-        label: "\u30DE\u30CD\u30FC\u30B8\u30E3\u30FC"
+        label: "\u30DE\u30CD\u30FC\u30B8\u30E3\u30FC",
+        help: "This user's direct manager. Forms the reporting chain the `own_and_reports` hierarchy scope walks (ADR-0057 / @objectstack/security-enterprise)."
       },
       primary_business_unit_id: {
-        label: "\u4E3B\u6240\u5C5E\u30D3\u30B8\u30CD\u30B9\u30E6\u30CB\u30C3\u30C8"
+        label: "\u4E3B\u6240\u5C5E\u30D3\u30B8\u30CD\u30B9\u30E6\u30CB\u30C3\u30C8",
+        help: "The user's primary business unit \u2014 a denormalised projection of sys_business_unit_member.is_primary, maintained by plugin-sharing (ADR-0057 addendum D12). Lets a user-lookup filter candidates by business unit without traversing the membership junction. Do not edit directly; set it via business-unit membership."
+      },
+      source: {
+        label: "Identity Source",
+        help: "How this identity was created \u2014 idp_provisioned (federated SSO JIT) or env_native (local signup / app end-user). System-managed; do not edit.",
+        options: {
+          idp_provisioned: "IdP-Provisioned",
+          env_native: "Env-Native"
+        }
       },
       id: {
         label: "\u30E6\u30FC\u30B6\u30FC ID"
@@ -6421,6 +6134,14 @@ var jaJPObjects = {
         label: "\u5229\u7528\u505C\u6B62\u3092\u89E3\u9664",
         successMessage: "\u30E6\u30FC\u30B6\u30FC\u306E\u5229\u7528\u505C\u6B62\u3092\u89E3\u9664\u3057\u307E\u3057\u305F"
       },
+      unlock_user: {
+        label: "Unlock Account",
+        successMessage: "Account unlocked"
+      },
+      create_user: {
+        label: "Create User",
+        successMessage: "User created"
+      },
       set_user_password: {
         label: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u8A2D\u5B9A",
         successMessage: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u66F4\u65B0\u3057\u307E\u3057\u305F"
@@ -6482,6 +6203,18 @@ var jaJPObjects = {
       expires_at: {
         label: "\u6709\u52B9\u671F\u9650"
       },
+      last_activity_at: {
+        label: "Last Activity At",
+        help: "Timestamp of the last request on this session; drives idle-timeout. System-managed."
+      },
+      revoked_at: {
+        label: "Revoked At",
+        help: "When set, this session was revoked (idle / absolute-max / concurrent-cap / admin). System-managed."
+      },
+      revoke_reason: {
+        label: "Revoke Reason",
+        help: "Why the session was revoked (idle_timeout, absolute_max, concurrent_cap, \u2026)."
+      },
       active_organization_id: {
         label: "\u30A2\u30AF\u30C6\u30A3\u30D6\u7D44\u7E54"
       },
@@ -6580,6 +6313,10 @@ var jaJPObjects = {
       password: {
         label: "\u30D1\u30B9\u30EF\u30FC\u30C9\u30CF\u30C3\u30B7\u30E5",
         help: "\u30E1\u30FC\u30EB/\u30D1\u30B9\u30EF\u30FC\u30C9\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u7528\u306E\u30CF\u30C3\u30B7\u30E5\u5316\u30D1\u30B9\u30EF\u30FC\u30C9"
+      },
+      previous_password_hashes: {
+        label: "Previous Password Hashes",
+        help: "JSON array of prior password hashes (bounded by password_history_count); reuse-prevention only. System-managed."
       }
     },
     _views: {
@@ -6650,6 +6387,10 @@ var jaJPObjects = {
         label: "\u30E1\u30BF\u30C7\u30FC\u30BF",
         help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u7D44\u7E54\u30E1\u30BF\u30C7\u30FC\u30BF"
       },
+      require_mfa: {
+        label: "Require Multi-Factor Auth",
+        help: "When true, every member of this organization must enroll an authenticator app to access data."
+      },
       id: {
         label: "\u7D44\u7E54 ID"
       },
@@ -6974,6 +6715,9 @@ var jaJPObjects = {
       }
     },
     _views: {
+      org_chart: {
+        label: "Org Chart"
+      },
       active: {
         label: "\u6709\u52B9"
       },
@@ -7555,263 +7299,57 @@ var jaJPObjects = {
       }
     }
   },
-  sys_audit_log: {
-    label: "\u76E3\u67FB\u30ED\u30B0",
-    pluralLabel: "\u76E3\u67FB\u30ED\u30B0",
-    description: "\u30D7\u30E9\u30C3\u30C8\u30D5\u30A9\u30FC\u30E0\u30A4\u30D9\u30F3\u30C8\u306E\u4E0D\u5909\u306E\u76E3\u67FB\u8A3C\u8DE1",
-    fields: {
-      created_at: {
-        label: "\u30BF\u30A4\u30E0\u30B9\u30BF\u30F3\u30D7"
-      },
-      action: {
-        label: "\u30A2\u30AF\u30B7\u30E7\u30F3",
-        help: "\u30A2\u30AF\u30B7\u30E7\u30F3\u30BF\u30A4\u30D7\uFF08snake_case\uFF09",
-        options: {
-          create: "\u4F5C\u6210",
-          update: "\u66F4\u65B0",
-          delete: "\u524A\u9664",
-          restore: "\u5FA9\u5143",
-          login: "\u30ED\u30B0\u30A4\u30F3",
-          logout: "\u30ED\u30B0\u30A2\u30A6\u30C8",
-          permission_change: "\u6A29\u9650\u5909\u66F4",
-          config_change: "\u69CB\u6210\u5909\u66F4",
-          export: "\u30A8\u30AF\u30B9\u30DD\u30FC\u30C8",
-          import: "\u30A4\u30F3\u30DD\u30FC\u30C8"
-        }
-      },
-      user_id: {
-        label: "\u64CD\u4F5C\u8005",
-        help: "\u30A2\u30AF\u30B7\u30E7\u30F3\u3092\u5B9F\u884C\u3057\u305F\u30E6\u30FC\u30B6\u30FC\uFF08\u30B7\u30B9\u30C6\u30E0\u64CD\u4F5C\u306E\u5834\u5408\u306F null\uFF09"
-      },
-      object_name: {
-        label: "\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8",
-        help: "\u5BFE\u8C61\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF08\u4F8B: sys_user\u3001project_task\uFF09"
-      },
-      record_id: {
-        label: "\u30EC\u30B3\u30FC\u30C9 ID",
-        help: "\u5F71\u97FF\u3092\u53D7\u3051\u305F\u30EC\u30B3\u30FC\u30C9\u306E ID"
-      },
-      old_value: {
-        label: "\u5909\u66F4\u524D\u306E\u5024",
-        help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u4EE5\u524D\u306E\u72B6\u614B"
-      },
-      new_value: {
-        label: "\u5909\u66F4\u5F8C\u306E\u5024",
-        help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u65B0\u3057\u3044\u72B6\u614B"
-      },
-      ip_address: {
-        label: "IP \u30A2\u30C9\u30EC\u30B9"
-      },
-      user_agent: {
-        label: "\u30E6\u30FC\u30B6\u30FC\u30A8\u30FC\u30B8\u30A7\u30F3\u30C8"
-      },
-      tenant_id: {
-        label: "\u30C6\u30CA\u30F3\u30C8",
-        help: "\u30DE\u30EB\u30C1\u30C6\u30CA\u30F3\u30C8\u5206\u96E2\u306E\u305F\u3081\u306E\u30C6\u30CA\u30F3\u30C8\u30B3\u30F3\u30C6\u30AD\u30B9\u30C8"
-      },
-      metadata: {
-        label: "\u30E1\u30BF\u30C7\u30FC\u30BF",
-        help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u8FFD\u52A0\u30B3\u30F3\u30C6\u30AD\u30B9\u30C8"
-      },
-      id: {
-        label: "\u76E3\u67FB\u30ED\u30B0 ID"
-      }
-    },
-    _views: {
-      recent: {
-        label: "\u6700\u8FD1"
-      },
-      writes_only: {
-        label: "\u66F8\u304D\u8FBC\u307F"
-      },
-      auth_events: {
-        label: "\u8A8D\u8A3C"
-      },
-      config_changes: {
-        label: "\u69CB\u6210\u5909\u66F4"
-      },
-      all_events: {
-        label: "\u3059\u3079\u3066"
-      }
-    }
-  },
-  sys_presence: {
-    label: "\u5728\u5E2D\u72B6\u6CC1",
-    pluralLabel: "\u5728\u5E2D\u72B6\u6CC1",
-    description: "\u30EA\u30A2\u30EB\u30BF\u30A4\u30E0\u306E\u30E6\u30FC\u30B6\u30FC\u5728\u5E2D\u72B6\u6CC1\u3068\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3\u8FFD\u8DE1",
+  sys_notification: {
+    label: "\u901A\u77E5",
+    pluralLabel: "\u901A\u77E5",
+    description: "\u30E6\u30FC\u30B6\u30FC\u3054\u3068\u306E\u901A\u77E5\u53D7\u4FE1\u30DC\u30C3\u30AF\u30B9\u30A8\u30F3\u30C8\u30EA",
     fields: {
       id: {
-        label: "\u5728\u5E2D ID"
-      },
-      created_at: {
-        label: "\u4F5C\u6210\u65E5\u6642"
-      },
-      updated_at: {
-        label: "\u66F4\u65B0\u65E5\u6642"
-      },
-      user_id: {
-        label: "\u30E6\u30FC\u30B6\u30FC"
-      },
-      session_id: {
-        label: "\u30BB\u30C3\u30B7\u30E7\u30F3"
-      },
-      status: {
-        label: "\u30B9\u30C6\u30FC\u30BF\u30B9",
-        options: {
-          online: "\u30AA\u30F3\u30E9\u30A4\u30F3",
-          away: "\u96E2\u5E2D\u4E2D",
-          busy: "\u53D6\u308A\u8FBC\u307F\u4E2D",
-          offline: "\u30AA\u30D5\u30E9\u30A4\u30F3"
-        }
+        label: "\u901A\u77E5 ID"
       },
-      last_seen: {
-        label: "\u6700\u7D42\u78BA\u8A8D\u65E5\u6642"
+      topic: {
+        label: "Topic",
+        help: "Notification topic, e.g. task.assigned, collab.mention"
       },
-      current_location: {
-        label: "\u73FE\u5728\u5730"
+      payload: {
+        label: "Payload",
+        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
       },
-      device: {
-        label: "\u30C7\u30D0\u30A4\u30B9",
+      severity: {
+        label: "Severity",
+        help: "Severity hint for rendering / filtering",
         options: {
-          desktop: "\u30C7\u30B9\u30AF\u30C8\u30C3\u30D7",
-          mobile: "\u30E2\u30D0\u30A4\u30EB",
-          tablet: "\u30BF\u30D6\u30EC\u30C3\u30C8",
-          other: "\u305D\u306E\u4ED6"
+          info: "info",
+          warning: "warning",
+          critical: "critical"
         }
       },
-      custom_status: {
-        label: "\u30AB\u30B9\u30BF\u30E0\u30B9\u30C6\u30FC\u30BF\u30B9"
-      },
-      metadata: {
-        label: "\u30E1\u30BF\u30C7\u30FC\u30BF",
-        help: "\u5728\u5E2D\u72B6\u614B\u306B\u95A2\u9023\u4ED8\u3051\u3089\u308C\u305F\u4EFB\u610F\u306E JSON \u30E1\u30BF\u30C7\u30FC\u30BF\uFF08PresenceStateSchema.metadata \u306B\u5BFE\u5FDC\uFF09\u3002"
-      }
-    }
-  },
-  sys_activity: {
-    label: "\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3",
-    pluralLabel: "\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3",
-    description: "\u6700\u8FD1\u306E\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3\u30B9\u30C8\u30EA\u30FC\u30E0\u30A8\u30F3\u30C8\u30EA\uFF08\u8EFD\u91CF\u3001\u975E\u6B63\u898F\u5316\uFF09",
-    fields: {
-      id: {
-        label: "\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3 ID"
-      },
-      timestamp: {
-        label: "\u30BF\u30A4\u30E0\u30B9\u30BF\u30F3\u30D7"
+      dedup_key: {
+        label: "Dedup Key",
+        help: "Idempotency key within a topic window; a repeat emit is a no-op"
       },
-      type: {
-        label: "\u30BF\u30A4\u30D7",
-        options: {
-          created: "\u4F5C\u6210",
-          updated: "\u66F4\u65B0",
-          deleted: "\u524A\u9664",
-          commented: "\u30B3\u30E1\u30F3\u30C8",
-          mentioned: "\u30E1\u30F3\u30B7\u30E7\u30F3",
-          shared: "\u5171\u6709",
-          assigned: "\u5272\u308A\u5F53\u3066",
-          completed: "\u5B8C\u4E86",
-          login: "\u30ED\u30B0\u30A4\u30F3",
-          logout: "\u30ED\u30B0\u30A2\u30A6\u30C8",
-          system: "\u30B7\u30B9\u30C6\u30E0"
-        }
+      source_object: {
+        label: "\u30BD\u30FC\u30B9\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8",
+        help: "\u95A2\u9023\u30EC\u30B3\u30FC\u30C9\u306E\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u540D\uFF08\u4F8B: lead\u3001opportunity\uFF09"
       },
-      summary: {
-        label: "\u30B5\u30DE\u30EA\u30FC",
-        help: "\u5224\u5225\u3057\u3084\u3059\u3044 1 \u884C\u30B5\u30DE\u30EA\u30FC"
+      source_id: {
+        label: "\u30BD\u30FC\u30B9\u30EC\u30B3\u30FC\u30C9",
+        help: "source_object \u5185\u306E\u30EC\u30B3\u30FC\u30C9 ID"
       },
       actor_id: {
-        label: "\u64CD\u4F5C\u8005"
-      },
-      actor_name: {
-        label: "\u64CD\u4F5C\u8005\u540D"
-      },
-      actor_avatar_url: {
-        label: "\u64CD\u4F5C\u8005\u30A2\u30D0\u30BF\u30FC"
-      },
-      object_name: {
-        label: "\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8",
-        help: "\u5BFE\u8C61\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u77ED\u3044\u540D\u524D\uFF08\u4F8B: account\u3001sys_user\uFF09"
-      },
-      record_id: {
-        label: "\u30EC\u30B3\u30FC\u30C9 ID"
-      },
-      record_label: {
-        label: "\u30EC\u30B3\u30FC\u30C9\u8868\u793A\u540D",
-        help: "\u66F8\u304D\u8FBC\u307F\u6642\u70B9\u306E\u5BFE\u8C61\u30EC\u30B3\u30FC\u30C9\u306E\u8868\u793A\u540D"
-      },
-      url: {
-        label: "URL",
-        help: "\u30A2\u30AF\u30C6\u30A3\u30D3\u30C6\u30A3\u30BF\u30FC\u30B2\u30C3\u30C8\u3078\u306E\u30AA\u30D7\u30B7\u30E7\u30F3\u306E\u30C7\u30A3\u30FC\u30D7\u30EA\u30F3\u30AF"
-      },
-      environment_id: {
-        label: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8",
-        help: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u30B3\u30F3\u30C6\u30AD\u30B9\u30C8\uFF08\u30DE\u30EB\u30C1\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u30C7\u30D7\u30ED\u30A4\u30E1\u30F3\u30C8\uFF09"
-      },
-      metadata: {
-        label: "\u30E1\u30BF\u30C7\u30FC\u30BF",
-        help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u8FFD\u52A0\u30B3\u30F3\u30C6\u30AD\u30B9\u30C8"
-      }
-    }
-  },
-  sys_comment: {
-    label: "\u30B3\u30E1\u30F3\u30C8",
-    pluralLabel: "\u30B3\u30E1\u30F3\u30C8",
-    description: "thread_id \u3092\u4ECB\u3057\u3066\u30EC\u30B3\u30FC\u30C9\u306B\u6DFB\u4ED8\u3055\u308C\u305F\u30B9\u30EC\u30C3\u30C9\u30B3\u30E1\u30F3\u30C8",
-    fields: {
-      id: {
-        label: "\u30B3\u30E1\u30F3\u30C8 ID"
-      },
-      thread_id: {
-        label: "\u30B9\u30EC\u30C3\u30C9",
-        help: "\u30B9\u30EC\u30C3\u30C9\u8B58\u5225\u5B50 \u2014 \u901A\u5E38\u306F `{object}:{record_id}`\uFF08\u4F8B: `sys_user:abc123`\uFF09"
-      },
-      parent_id: {
-        label: "\u89AA\u30B3\u30E1\u30F3\u30C8",
-        help: "\u30CD\u30B9\u30C8\u3057\u305F\u8FD4\u4FE1\u7528\u306E\u30AA\u30D7\u30B7\u30E7\u30F3\u306E\u89AA\u30B3\u30E1\u30F3\u30C8"
-      },
-      reply_count: {
-        label: "\u8FD4\u4FE1\u6570"
-      },
-      author_id: {
-        label: "\u6295\u7A3F\u8005"
-      },
-      author_name: {
-        label: "\u6295\u7A3F\u8005\u540D"
-      },
-      author_avatar_url: {
-        label: "\u6295\u7A3F\u8005\u30A2\u30D0\u30BF\u30FC"
-      },
-      body: {
-        label: "\u672C\u6587",
-        help: "\u30B3\u30E1\u30F3\u30C8\u30C6\u30AD\u30B9\u30C8\uFF08Markdown \u5BFE\u5FDC\uFF09"
-      },
-      mentions: {
-        label: "\u30E1\u30F3\u30B7\u30E7\u30F3",
-        help: "@\u30E1\u30F3\u30B7\u30E7\u30F3\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E JSON \u914D\u5217"
-      },
-      reactions: {
-        label: "\u30EA\u30A2\u30AF\u30B7\u30E7\u30F3",
-        help: "\u7D75\u6587\u5B57\u30EA\u30A2\u30AF\u30B7\u30E7\u30F3\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E JSON \u914D\u5217"
-      },
-      is_edited: {
-        label: "\u7DE8\u96C6\u6E08\u307F"
-      },
-      edited_at: {
-        label: "\u7DE8\u96C6\u65E5\u6642"
-      },
-      visibility: {
-        label: "\u516C\u958B\u7BC4\u56F2",
-        options: {
-          public: "\u516C\u958B",
-          internal: "\u5185\u90E8",
-          private: "\u975E\u516C\u958B"
-        }
+        label: "\u64CD\u4F5C\u8005",
+        help: "\u901A\u77E5\u3092\u5F15\u304D\u8D77\u3053\u3057\u305F\u30E6\u30FC\u30B6\u30FC\uFF08\u30E1\u30F3\u30B7\u30E7\u30F3\u8005\u3001\u62C5\u5F53\u8005\uFF09"
       },
       created_at: {
         label: "\u4F5C\u6210\u65E5\u6642"
+      }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
       },
-      updated_at: {
-        label: "\u66F4\u65B0\u65E5\u6642"
+      by_topic: {
+        label: "By Topic"
       }
     }
   },
@@ -7863,70 +7401,16 @@ var jaJPObjects = {
         }
       },
       uploaded_by: {
-        label: "\u30A2\u30C3\u30D7\u30ED\u30FC\u30C9\u8005"
-      },
-      description: {
-        label: "\u8AAC\u660E"
-      },
-      created_at: {
-        label: "\u4F5C\u6210\u65E5\u6642"
-      },
-      updated_at: {
-        label: "\u66F4\u65B0\u65E5\u6642"
-      }
-    }
-  },
-  sys_notification: {
-    label: "\u901A\u77E5",
-    pluralLabel: "\u901A\u77E5",
-    description: "\u30E6\u30FC\u30B6\u30FC\u3054\u3068\u306E\u901A\u77E5\u53D7\u4FE1\u30DC\u30C3\u30AF\u30B9\u30A8\u30F3\u30C8\u30EA",
-    fields: {
-      id: {
-        label: "\u901A\u77E5 ID"
-      },
-      topic: {
-        label: "Topic",
-        help: "Notification topic, e.g. task.assigned, collab.mention"
-      },
-      payload: {
-        label: "Payload",
-        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
-      },
-      severity: {
-        label: "Severity",
-        help: "Severity hint for rendering / filtering",
-        options: {
-          info: "info",
-          warning: "warning",
-          critical: "critical"
-        }
-      },
-      dedup_key: {
-        label: "Dedup Key",
-        help: "Idempotency key within a topic window; a repeat emit is a no-op"
-      },
-      source_object: {
-        label: "\u30BD\u30FC\u30B9\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8",
-        help: "\u95A2\u9023\u30EC\u30B3\u30FC\u30C9\u306E\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u540D\uFF08\u4F8B: lead\u3001opportunity\uFF09"
-      },
-      source_id: {
-        label: "\u30BD\u30FC\u30B9\u30EC\u30B3\u30FC\u30C9",
-        help: "source_object \u5185\u306E\u30EC\u30B3\u30FC\u30C9 ID"
-      },
-      actor_id: {
-        label: "\u64CD\u4F5C\u8005",
-        help: "\u901A\u77E5\u3092\u5F15\u304D\u8D77\u3053\u3057\u305F\u30E6\u30FC\u30B6\u30FC\uFF08\u30E1\u30F3\u30B7\u30E7\u30F3\u8005\u3001\u62C5\u5F53\u8005\uFF09"
+        label: "\u30A2\u30C3\u30D7\u30ED\u30FC\u30C9\u8005"
+      },
+      description: {
+        label: "\u8AAC\u660E"
       },
       created_at: {
         label: "\u4F5C\u6210\u65E5\u6642"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recent"
       },
-      by_topic: {
-        label: "By Topic"
+      updated_at: {
+        label: "\u66F4\u65B0\u65E5\u6642"
       }
     }
   },
@@ -8834,6 +8318,11 @@ var jaJPObjects = {
         label: "\u6697\u53F7\u6587",
         help: "\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u30A8\u30F3\u30B3\u30FC\u30C9\u3055\u308C\u305F\u6697\u53F7\u6587 blob\uFF08base64 / JSON\uFF09\u3002\u5B9F\u88C5\u5B9A\u7FA9\u306E\u305F\u3081\u3001\u5BFE\u5FDC\u3059\u308B ICryptoProvider \u306E\u307F\u304C\u8AAD\u307F\u53D6\u308A\u53EF\u80FD\u3002"
       }
+    },
+    _views: {
+      all: {
+        label: "All Secrets"
+      }
     }
   },
   sys_setting_audit: {
@@ -8909,6 +8398,11 @@ var jaJPObjects = {
         label: "\u30EA\u30AF\u30A8\u30B9\u30C8 ID",
         help: "sys_audit_log / \u30C8\u30EC\u30FC\u30B7\u30F3\u30B0\u3068\u306E\u76F8\u95A2\u7528\u3002"
       }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
+      }
     }
   }
 };
@@ -8956,7 +8450,7 @@ var jaJP = {
         nav_teams: { label: "\u30C1\u30FC\u30E0" },
         nav_organizations: { label: "\u7D44\u7E54" },
         nav_invitations: { label: "\u62DB\u5F85" },
-        nav_roles: { label: "\u30ED\u30FC\u30EB" },
+        nav_positions: { label: "\u30DD\u30B8\u30B7\u30E7\u30F3" },
         nav_permission_sets: { label: "\u6A29\u9650\u30BB\u30C3\u30C8" },
         nav_sharing_rules: { label: "\u5171\u6709\u30EB\u30FC\u30EB" },
         nav_record_shares: { label: "\u30EC\u30B3\u30FC\u30C9\u5171\u6709" },
@@ -9078,14 +8572,64 @@ var esESObjects = {
         label: "El bloqueo caduca el",
         help: "Si se establece, el bloqueo se elimina autom\xE1ticamente en ese momento."
       },
+      failed_login_count: {
+        label: "Failed Login Count",
+        help: "Consecutive failed sign-in attempts; reset to 0 on success. Maintained by the auth manager."
+      },
+      locked_until: {
+        label: "Locked Until",
+        help: "When set and in the future, sign-in is rejected (brute-force lockout). Auto-clears past this time; an admin can clear it early via Unlock."
+      },
+      password_changed_at: {
+        label: "Password Changed At",
+        help: "Timestamp of the last password change. Backs password_expiry_days; system-managed."
+      },
+      phone_number: {
+        label: "Phone Number",
+        help: "Sign-in phone number (E.164 recommended). Unique per user; managed by better-auth when the phoneNumber plugin is enabled."
+      },
+      phone_number_verified: {
+        label: "Phone Verified",
+        help: "Whether the phone number has been verified (OTP verification requires SMS infrastructure; false until that ships). System-managed."
+      },
+      must_change_password: {
+        label: "Must Change Password",
+        help: "When true, the user is blocked (403 PASSWORD_EXPIRED) until they change their password. Stamped by the admin user-management routes; system-managed."
+      },
+      mfa_required_at: {
+        label: "MFA Required At",
+        help: "When enforced MFA first applied to this user (grace-period clock). Backs mfa_required; system-managed."
+      },
+      last_login_at: {
+        label: "Last Login At",
+        help: "Timestamp of the last successful sign-in. Stamped by the auth manager; system-managed."
+      },
+      last_login_ip: {
+        label: "Last Login IP",
+        help: "Client IP of the last successful sign-in (from the trusted proxy forwarded header). System-managed."
+      },
+      ai_access: {
+        label: "AI Access",
+        help: "Whether this user holds an AI seat \u2014 grants access to the in-UI AI agents (build / ask). The framework synthesizes the `ai_seat` capability from this flag (plugin-hono-server resolveCtx). Assignment is capped by the licensed / purchased seat count (enforced by @objectstack/security-enterprise AiSeatPlugin). Owned by objectql (better-auth is oblivious to this column)."
+      },
       image: {
         label: "Imagen de perfil"
       },
       manager_id: {
-        label: "Gerente"
+        label: "Gerente",
+        help: "This user's direct manager. Forms the reporting chain the `own_and_reports` hierarchy scope walks (ADR-0057 / @objectstack/security-enterprise)."
       },
       primary_business_unit_id: {
-        label: "Unidad de negocio principal"
+        label: "Unidad de negocio principal",
+        help: "The user's primary business unit \u2014 a denormalised projection of sys_business_unit_member.is_primary, maintained by plugin-sharing (ADR-0057 addendum D12). Lets a user-lookup filter candidates by business unit without traversing the membership junction. Do not edit directly; set it via business-unit membership."
+      },
+      source: {
+        label: "Identity Source",
+        help: "How this identity was created \u2014 idp_provisioned (federated SSO JIT) or env_native (local signup / app end-user). System-managed; do not edit.",
+        options: {
+          idp_provisioned: "IdP-Provisioned",
+          env_native: "Env-Native"
+        }
       },
       id: {
         label: "ID de usuario"
@@ -9128,6 +8672,14 @@ var esESObjects = {
         label: "Desbloquear usuario",
         successMessage: "Usuario desbloqueado"
       },
+      unlock_user: {
+        label: "Unlock Account",
+        successMessage: "Account unlocked"
+      },
+      create_user: {
+        label: "Create User",
+        successMessage: "User created"
+      },
       set_user_password: {
         label: "Establecer contrase\xF1a",
         successMessage: "Contrase\xF1a actualizada"
@@ -9189,6 +8741,18 @@ var esESObjects = {
       expires_at: {
         label: "Caduca el"
       },
+      last_activity_at: {
+        label: "Last Activity At",
+        help: "Timestamp of the last request on this session; drives idle-timeout. System-managed."
+      },
+      revoked_at: {
+        label: "Revoked At",
+        help: "When set, this session was revoked (idle / absolute-max / concurrent-cap / admin). System-managed."
+      },
+      revoke_reason: {
+        label: "Revoke Reason",
+        help: "Why the session was revoked (idle_timeout, absolute_max, concurrent_cap, \u2026)."
+      },
       active_organization_id: {
         label: "Organizaci\xF3n activa"
       },
@@ -9287,6 +8851,10 @@ var esESObjects = {
       password: {
         label: "Hash de la contrase\xF1a",
         help: "Hash de la contrase\xF1a para el proveedor de correo electr\xF3nico/contrase\xF1a."
+      },
+      previous_password_hashes: {
+        label: "Previous Password Hashes",
+        help: "JSON array of prior password hashes (bounded by password_history_count); reuse-prevention only. System-managed."
       }
     },
     _views: {
@@ -9357,6 +8925,10 @@ var esESObjects = {
         label: "Metadatos",
         help: "Metadatos de la organizaci\xF3n serializados en JSON."
       },
+      require_mfa: {
+        label: "Require Multi-Factor Auth",
+        help: "When true, every member of this organization must enroll an authenticator app to access data."
+      },
       id: {
         label: "ID de organizaci\xF3n"
       },
@@ -9681,6 +9253,9 @@ var esESObjects = {
       }
     },
     _views: {
+      org_chart: {
+        label: "Org Chart"
+      },
       active: {
         label: "Activo"
       },
@@ -10262,263 +9837,57 @@ var esESObjects = {
       }
     }
   },
-  sys_audit_log: {
-    label: "Registro de auditor\xEDa",
-    pluralLabel: "Registros de auditor\xEDa",
-    description: "Registro de auditor\xEDa inmutable para eventos de la plataforma",
-    fields: {
-      created_at: {
-        label: "Marca temporal"
-      },
-      action: {
-        label: "Acci\xF3n",
-        help: "Tipo de acci\xF3n (snake_case).",
-        options: {
-          create: "Crear",
-          update: "Actualizar",
-          delete: "Eliminar",
-          restore: "Restaurar",
-          login: "Inicio de sesi\xF3n",
-          logout: "Cierre de sesi\xF3n",
-          permission_change: "Cambio de permisos",
-          config_change: "Cambio de configuraci\xF3n",
-          export: "Exportar",
-          import: "Importar"
-        }
-      },
-      user_id: {
-        label: "Actor",
-        help: "Usuario que realiz\xF3 la acci\xF3n (null para acciones del sistema)."
-      },
-      object_name: {
-        label: "Objeto",
-        help: "Objeto de destino (p. ej. sys_user, project_task)."
-      },
-      record_id: {
-        label: "ID de registro",
-        help: "ID del registro afectado."
-      },
-      old_value: {
-        label: "Valor anterior",
-        help: "Estado anterior serializado en JSON."
-      },
-      new_value: {
-        label: "Valor nuevo",
-        help: "Estado nuevo serializado en JSON."
-      },
-      ip_address: {
-        label: "Direcci\xF3n IP"
-      },
-      user_agent: {
-        label: "Agente de usuario"
-      },
-      tenant_id: {
-        label: "Inquilino",
-        help: "Contexto del tenant para el aislamiento multi-tenant."
-      },
-      metadata: {
-        label: "Metadatos",
-        help: "Contexto adicional serializado en JSON."
-      },
-      id: {
-        label: "ID de registro de auditor\xEDa"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recientes"
-      },
-      writes_only: {
-        label: "Escrituras"
-      },
-      auth_events: {
-        label: "Autenticaci\xF3n"
-      },
-      config_changes: {
-        label: "Configuraci\xF3n"
-      },
-      all_events: {
-        label: "Todos"
-      }
-    }
-  },
-  sys_presence: {
-    label: "Presencia",
-    pluralLabel: "Presencias",
-    description: "Seguimiento en tiempo real de presencia y actividad de usuarios",
+  sys_notification: {
+    label: "Notificaci\xF3n",
+    pluralLabel: "Notificaciones",
+    description: "Entradas del buz\xF3n de notificaciones por usuario",
     fields: {
       id: {
-        label: "ID de presencia"
-      },
-      created_at: {
-        label: "Creado el"
-      },
-      updated_at: {
-        label: "Actualizado el"
-      },
-      user_id: {
-        label: "Usuario"
-      },
-      session_id: {
-        label: "Sesi\xF3n"
-      },
-      status: {
-        label: "Estado",
-        options: {
-          online: "En l\xEDnea",
-          away: "Ausente",
-          busy: "Ocupado",
-          offline: "Desconectado"
-        }
+        label: "ID de notificaci\xF3n"
       },
-      last_seen: {
-        label: "Visto por \xFAltima vez"
+      topic: {
+        label: "Topic",
+        help: "Notification topic, e.g. task.assigned, collab.mention"
       },
-      current_location: {
-        label: "Ubicaci\xF3n actual"
+      payload: {
+        label: "Payload",
+        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
       },
-      device: {
-        label: "Dispositivo",
+      severity: {
+        label: "Severity",
+        help: "Severity hint for rendering / filtering",
         options: {
-          desktop: "Escritorio",
-          mobile: "M\xF3vil",
-          tablet: "Tableta",
-          other: "Otro"
+          info: "info",
+          warning: "warning",
+          critical: "critical"
         }
       },
-      custom_status: {
-        label: "Estado personalizado"
-      },
-      metadata: {
-        label: "Metadatos",
-        help: "Metadatos JSON arbitrarios asociados al estado de presencia (coincide con PresenceStateSchema.metadata)."
-      }
-    }
-  },
-  sys_activity: {
-    label: "Actividad",
-    pluralLabel: "Actividades",
-    description: "Entradas recientes del flujo de actividad (ligeras y desnormalizadas).",
-    fields: {
-      id: {
-        label: "ID de actividad"
-      },
-      timestamp: {
-        label: "Marca temporal"
+      dedup_key: {
+        label: "Dedup Key",
+        help: "Idempotency key within a topic window; a repeat emit is a no-op"
       },
-      type: {
-        label: "Tipo",
-        options: {
-          created: "Creado",
-          updated: "Actualizado",
-          deleted: "Eliminado",
-          commented: "Comentado",
-          mentioned: "Mencionado",
-          shared: "Compartido",
-          assigned: "Asignado",
-          completed: "Completado",
-          login: "Inicio de sesi\xF3n",
-          logout: "Cierre de sesi\xF3n",
-          system: "Sistema"
-        }
+      source_object: {
+        label: "Objeto de origen",
+        help: "Nombre del objeto del registro relacionado (p. ej. lead, opportunity)."
       },
-      summary: {
-        label: "Resumen",
-        help: "Resumen legible de una l\xEDnea."
+      source_id: {
+        label: "Registro de origen",
+        help: "ID del registro dentro de source_object."
       },
       actor_id: {
-        label: "Actor"
-      },
-      actor_name: {
-        label: "Nombre del actor"
-      },
-      actor_avatar_url: {
-        label: "Avatar del actor"
-      },
-      object_name: {
-        label: "Objeto",
-        help: "Nombre corto del objeto de destino (p. ej. account, sys_user)."
-      },
-      record_id: {
-        label: "ID de registro"
-      },
-      record_label: {
-        label: "Nombre visible del registro",
-        help: "Nombre visible del registro de destino en el momento de escritura."
-      },
-      url: {
-        label: "URL",
-        help: "Enlace profundo opcional al destino de la actividad."
-      },
-      environment_id: {
-        label: "Proyecto",
-        help: "Contexto del proyecto (implementaciones multiproyecto)."
-      },
-      metadata: {
-        label: "Metadatos",
-        help: "Contexto adicional serializado en JSON."
-      }
-    }
-  },
-  sys_comment: {
-    label: "Comentario",
-    pluralLabel: "Comentarios",
-    description: "Comentarios en hilo adjuntos a registros mediante thread_id.",
-    fields: {
-      id: {
-        label: "ID de comentario"
-      },
-      thread_id: {
-        label: "Hilo",
-        help: "Identificador del hilo; por convenci\xF3n `{object}:{record_id}` (p. ej. `sys_user:abc123`)."
-      },
-      parent_id: {
-        label: "Comentario principal",
-        help: "Comentario principal opcional para respuestas anidadas."
-      },
-      reply_count: {
-        label: "N\xFAmero de respuestas"
-      },
-      author_id: {
-        label: "Autor"
-      },
-      author_name: {
-        label: "Nombre del autor"
-      },
-      author_avatar_url: {
-        label: "Avatar del autor"
-      },
-      body: {
-        label: "Contenido",
-        help: "Texto del comentario (compatible con Markdown)."
-      },
-      mentions: {
-        label: "Menciones",
-        help: "Matriz JSON de objetos @mention."
-      },
-      reactions: {
-        label: "Reacciones",
-        help: "Matriz JSON de objetos de reacci\xF3n emoji."
-      },
-      is_edited: {
-        label: "Editado"
-      },
-      edited_at: {
-        label: "Editado el"
-      },
-      visibility: {
-        label: "Visibilidad",
-        options: {
-          public: "P\xFAblico",
-          internal: "Interno",
-          private: "Privado"
-        }
+        label: "Actor",
+        help: "Usuario que provoc\xF3 la notificaci\xF3n (quien menciona, quien asigna)."
       },
       created_at: {
         label: "Creado el"
+      }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
       },
-      updated_at: {
-        label: "Actualizado el"
+      by_topic: {
+        label: "By Topic"
       }
     }
   },
@@ -10583,60 +9952,6 @@ var esESObjects = {
       }
     }
   },
-  sys_notification: {
-    label: "Notificaci\xF3n",
-    pluralLabel: "Notificaciones",
-    description: "Entradas del buz\xF3n de notificaciones por usuario",
-    fields: {
-      id: {
-        label: "ID de notificaci\xF3n"
-      },
-      topic: {
-        label: "Topic",
-        help: "Notification topic, e.g. task.assigned, collab.mention"
-      },
-      payload: {
-        label: "Payload",
-        help: "Template inputs carried to channels (title/body/url/actor/source/\u2026)"
-      },
-      severity: {
-        label: "Severity",
-        help: "Severity hint for rendering / filtering",
-        options: {
-          info: "info",
-          warning: "warning",
-          critical: "critical"
-        }
-      },
-      dedup_key: {
-        label: "Dedup Key",
-        help: "Idempotency key within a topic window; a repeat emit is a no-op"
-      },
-      source_object: {
-        label: "Objeto de origen",
-        help: "Nombre del objeto del registro relacionado (p. ej. lead, opportunity)."
-      },
-      source_id: {
-        label: "Registro de origen",
-        help: "ID del registro dentro de source_object."
-      },
-      actor_id: {
-        label: "Actor",
-        help: "Usuario que provoc\xF3 la notificaci\xF3n (quien menciona, quien asigna)."
-      },
-      created_at: {
-        label: "Creado el"
-      }
-    },
-    _views: {
-      recent: {
-        label: "Recent"
-      },
-      by_topic: {
-        label: "By Topic"
-      }
-    }
-  },
   sys_email: {
     label: "Correo",
     pluralLabel: "Correos",
@@ -11541,6 +10856,11 @@ var esESObjects = {
         label: "Texto cifrado",
         help: "Blob de texto cifrado codificado por el proveedor (base64 / JSON). La implementaci\xF3n lo define; solo el ICryptoProvider correspondiente puede leerlo."
       }
+    },
+    _views: {
+      all: {
+        label: "All Secrets"
+      }
     }
   },
   sys_setting_audit: {
@@ -11616,6 +10936,11 @@ var esESObjects = {
         label: "ID de solicitud",
         help: "Se correlaciona con sys_audit_log / tracing."
       }
+    },
+    _views: {
+      recent: {
+        label: "Recent"
+      }
     }
   }
 };
@@ -11663,7 +10988,7 @@ var esES = {
         nav_teams: { label: "Equipos" },
         nav_organizations: { label: "Organizaciones" },
         nav_invitations: { label: "Invitaciones" },
-        nav_roles: { label: "Roles" },
+        nav_positions: { label: "Posiciones" },
         nav_permission_sets: { label: "Conjuntos de Permisos" },
         nav_sharing_rules: { label: "Reglas de Compartici\xF3n" },
         nav_record_shares: { label: "Registros Compartidos" },