@objectstack/platform-objects 5.0.0 → 5.2.0

package/dist/metadata/index.d.mts

@@ -4781,7 +4781,10 @@ declare const SysMetadataObject: Omit<{
  *  Key design points (ADR-0008 §0 amendment + M1):
  *
  *  • Keyed by `(organization_id, type, name)` only — `project_id` was
- *    removed in the branch/project-removal amendment.
+ *    removed in the branch/project-removal amendment. The original
+ *    `metadata_id` column (a downgraded plain-text version of the old
+ *    `sys_metadata.id` FK) was removed in the M1 follow-up — joins go
+ *    through `(organization_id, type, name, version)` exclusively.
  *
  *  • `event_seq` is the per-org monotonic event-log cursor. Producers
  *    compute `MAX(event_seq) + 1 WHERE organization_id = X` inside the
@@ -4792,10 +4795,6 @@ declare const SysMetadataObject: Omit<{
  *    AND name = N` so delete + recreate continues incrementing instead
  *    of restarting at 1.
  *
- *  • `metadata_id` is plain `text` (not a `lookup`) so DELETE rows can
- *    keep the now-orphaned parent id for forensic auditing without a
- *    foreign-key constraint blocking the hard delete.
- *
  *  • `metadata` / `checksum` are nullable — DELETE rows have no body or
  *    hash. Readers must tolerate null on both columns.
  *
@@ -5833,187 +5832,6 @@ declare const SysMetadataHistoryObject: Omit<{
             readonly index?: boolean | undefined;
             readonly type: "number";
         };
-        /**
-         * Parent `sys_metadata.id` at insertion time (plain text, no FK).
-         * Null for events whose parent row no longer exists (e.g. some
-         * delete records). Forensic only — joins should go through
-         * `(organization_id, type, name)`.
-         */
-        readonly metadata_id: {
-            readonly readonly?: boolean | undefined;
-            readonly format?: string | undefined;
-            readonly options?: {
-                label: string;
-                value: string;
-                color?: string | undefined;
-                default?: boolean | undefined;
-            }[] | undefined;
-            readonly description?: string | undefined;
-            readonly label?: string | undefined;
-            readonly name?: string | undefined;
-            readonly precision?: number | undefined;
-            readonly required?: boolean | undefined;
-            readonly multiple?: boolean | undefined;
-            readonly dependencies?: string[] | undefined;
-            readonly theme?: string | undefined;
-            readonly externalId?: boolean | undefined;
-            readonly system?: boolean | undefined;
-            readonly min?: number | undefined;
-            readonly max?: number | undefined;
-            readonly group?: string | undefined;
-            readonly encryptionConfig?: {
-                enabled: boolean;
-                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
-                keyManagement: {
-                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
-                    keyId?: string | undefined;
-                    rotationPolicy?: {
-                        enabled: boolean;
-                        frequencyDays: number;
-                        retainOldVersions: number;
-                        autoRotate: boolean;
-                    } | undefined;
-                };
-                scope: "record" | "field" | "table" | "database";
-                deterministicEncryption: boolean;
-                searchableEncryption: boolean;
-            } | undefined;
-            readonly columnName?: string | undefined;
-            readonly searchable?: boolean | undefined;
-            readonly unique?: boolean | undefined;
-            readonly defaultValue?: unknown;
-            readonly maxLength?: number | undefined;
-            readonly minLength?: number | undefined;
-            readonly scale?: number | undefined;
-            readonly reference?: string | undefined;
-            readonly referenceFilters?: string[] | undefined;
-            readonly writeRequiresMasterRead?: boolean | undefined;
-            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly summaryOperations?: {
-                object: string;
-                field: string;
-                function: "min" | "max" | "count" | "sum" | "avg";
-            } | undefined;
-            readonly language?: string | undefined;
-            readonly lineNumbers?: boolean | undefined;
-            readonly maxRating?: number | undefined;
-            readonly allowHalf?: boolean | undefined;
-            readonly displayMap?: boolean | undefined;
-            readonly allowGeocoding?: boolean | undefined;
-            readonly addressFormat?: "us" | "uk" | "international" | undefined;
-            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
-            readonly allowAlpha?: boolean | undefined;
-            readonly presetColors?: string[] | undefined;
-            readonly step?: number | undefined;
-            readonly showValue?: boolean | undefined;
-            readonly marks?: Record<string, string> | undefined;
-            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
-            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
-            readonly displayValue?: boolean | undefined;
-            readonly allowScanning?: boolean | undefined;
-            readonly currencyConfig?: {
-                precision: number;
-                currencyMode: "fixed" | "dynamic";
-                defaultCurrency: string;
-            } | undefined;
-            readonly vectorConfig?: {
-                dimensions: number;
-                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
-                normalized: boolean;
-                indexed: boolean;
-                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
-            } | undefined;
-            readonly fileAttachmentConfig?: {
-                virusScan: boolean;
-                virusScanOnUpload: boolean;
-                quarantineOnThreat: boolean;
-                allowMultiple: boolean;
-                allowReplace: boolean;
-                allowDelete: boolean;
-                requireUpload: boolean;
-                extractMetadata: boolean;
-                extractText: boolean;
-                versioningEnabled: boolean;
-                publicRead: boolean;
-                presignedUrlExpiry: number;
-                minSize?: number | undefined;
-                maxSize?: number | undefined;
-                allowedTypes?: string[] | undefined;
-                blockedTypes?: string[] | undefined;
-                allowedMimeTypes?: string[] | undefined;
-                blockedMimeTypes?: string[] | undefined;
-                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
-                storageProvider?: string | undefined;
-                storageBucket?: string | undefined;
-                storagePrefix?: string | undefined;
-                imageValidation?: {
-                    generateThumbnails: boolean;
-                    preserveMetadata: boolean;
-                    autoRotate: boolean;
-                    minWidth?: number | undefined;
-                    maxWidth?: number | undefined;
-                    minHeight?: number | undefined;
-                    maxHeight?: number | undefined;
-                    aspectRatio?: string | undefined;
-                    thumbnailSizes?: {
-                        name: string;
-                        width: number;
-                        height: number;
-                        crop: boolean;
-                    }[] | undefined;
-                } | undefined;
-                maxVersions?: number | undefined;
-            } | undefined;
-            readonly maskingRule?: {
-                field: string;
-                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
-                preserveFormat: boolean;
-                preserveLength: boolean;
-                pattern?: string | undefined;
-                roles?: string[] | undefined;
-                exemptRoles?: string[] | undefined;
-            } | undefined;
-            readonly auditTrail?: boolean | undefined;
-            readonly cached?: {
-                enabled: boolean;
-                ttl: number;
-                invalidateOn: string[];
-            } | undefined;
-            readonly dataQuality?: {
-                uniqueness: boolean;
-                completeness: number;
-                accuracy?: {
-                    source: string;
-                    threshold: number;
-                } | undefined;
-            } | undefined;
-            readonly conditionalRequired?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly hidden?: boolean | undefined;
-            readonly sortable?: boolean | undefined;
-            readonly inlineHelpText?: string | undefined;
-            readonly trackFeedHistory?: boolean | undefined;
-            readonly caseSensitive?: boolean | undefined;
-            readonly autonumberFormat?: string | undefined;
-            readonly index?: boolean | undefined;
-            readonly type: "text";
-        };
         /** Machine name (denormalized for easier querying) */
         readonly name: {
             readonly readonly?: boolean | undefined;
@@ -8142,6 +7960,8 @@ declare const SysMetadataHistoryObject: Omit<{
         readonly unique: true;
     }, {
         readonly fields: ["organization_id", "type", "name", "recorded_at"];
+    }, {
+        readonly fields: ["organization_id", "type", "name", "checksum"];
     }, {
         readonly fields: ["type", "name"];
     }, {

package/dist/metadata/index.d.ts

@@ -4781,7 +4781,10 @@ declare const SysMetadataObject: Omit<{
  *  Key design points (ADR-0008 §0 amendment + M1):
  *
  *  • Keyed by `(organization_id, type, name)` only — `project_id` was
- *    removed in the branch/project-removal amendment.
+ *    removed in the branch/project-removal amendment. The original
+ *    `metadata_id` column (a downgraded plain-text version of the old
+ *    `sys_metadata.id` FK) was removed in the M1 follow-up — joins go
+ *    through `(organization_id, type, name, version)` exclusively.
  *
  *  • `event_seq` is the per-org monotonic event-log cursor. Producers
  *    compute `MAX(event_seq) + 1 WHERE organization_id = X` inside the
@@ -4792,10 +4795,6 @@ declare const SysMetadataObject: Omit<{
  *    AND name = N` so delete + recreate continues incrementing instead
  *    of restarting at 1.
  *
- *  • `metadata_id` is plain `text` (not a `lookup`) so DELETE rows can
- *    keep the now-orphaned parent id for forensic auditing without a
- *    foreign-key constraint blocking the hard delete.
- *
  *  • `metadata` / `checksum` are nullable — DELETE rows have no body or
  *    hash. Readers must tolerate null on both columns.
  *
@@ -5833,187 +5832,6 @@ declare const SysMetadataHistoryObject: Omit<{
             readonly index?: boolean | undefined;
             readonly type: "number";
         };
-        /**
-         * Parent `sys_metadata.id` at insertion time (plain text, no FK).
-         * Null for events whose parent row no longer exists (e.g. some
-         * delete records). Forensic only — joins should go through
-         * `(organization_id, type, name)`.
-         */
-        readonly metadata_id: {
-            readonly readonly?: boolean | undefined;
-            readonly format?: string | undefined;
-            readonly options?: {
-                label: string;
-                value: string;
-                color?: string | undefined;
-                default?: boolean | undefined;
-            }[] | undefined;
-            readonly description?: string | undefined;
-            readonly label?: string | undefined;
-            readonly name?: string | undefined;
-            readonly precision?: number | undefined;
-            readonly required?: boolean | undefined;
-            readonly multiple?: boolean | undefined;
-            readonly dependencies?: string[] | undefined;
-            readonly theme?: string | undefined;
-            readonly externalId?: boolean | undefined;
-            readonly system?: boolean | undefined;
-            readonly min?: number | undefined;
-            readonly max?: number | undefined;
-            readonly group?: string | undefined;
-            readonly encryptionConfig?: {
-                enabled: boolean;
-                algorithm: "aes-256-gcm" | "aes-256-cbc" | "chacha20-poly1305";
-                keyManagement: {
-                    provider: "local" | "aws-kms" | "azure-key-vault" | "gcp-kms" | "hashicorp-vault";
-                    keyId?: string | undefined;
-                    rotationPolicy?: {
-                        enabled: boolean;
-                        frequencyDays: number;
-                        retainOldVersions: number;
-                        autoRotate: boolean;
-                    } | undefined;
-                };
-                scope: "record" | "field" | "table" | "database";
-                deterministicEncryption: boolean;
-                searchableEncryption: boolean;
-            } | undefined;
-            readonly columnName?: string | undefined;
-            readonly searchable?: boolean | undefined;
-            readonly unique?: boolean | undefined;
-            readonly defaultValue?: unknown;
-            readonly maxLength?: number | undefined;
-            readonly minLength?: number | undefined;
-            readonly scale?: number | undefined;
-            readonly reference?: string | undefined;
-            readonly referenceFilters?: string[] | undefined;
-            readonly writeRequiresMasterRead?: boolean | undefined;
-            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly expression?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly summaryOperations?: {
-                object: string;
-                field: string;
-                function: "min" | "max" | "count" | "sum" | "avg";
-            } | undefined;
-            readonly language?: string | undefined;
-            readonly lineNumbers?: boolean | undefined;
-            readonly maxRating?: number | undefined;
-            readonly allowHalf?: boolean | undefined;
-            readonly displayMap?: boolean | undefined;
-            readonly allowGeocoding?: boolean | undefined;
-            readonly addressFormat?: "us" | "uk" | "international" | undefined;
-            readonly colorFormat?: "hex" | "rgb" | "rgba" | "hsl" | undefined;
-            readonly allowAlpha?: boolean | undefined;
-            readonly presetColors?: string[] | undefined;
-            readonly step?: number | undefined;
-            readonly showValue?: boolean | undefined;
-            readonly marks?: Record<string, string> | undefined;
-            readonly barcodeFormat?: "qr" | "ean13" | "ean8" | "code128" | "code39" | "upca" | "upce" | undefined;
-            readonly qrErrorCorrection?: "L" | "M" | "Q" | "H" | undefined;
-            readonly displayValue?: boolean | undefined;
-            readonly allowScanning?: boolean | undefined;
-            readonly currencyConfig?: {
-                precision: number;
-                currencyMode: "fixed" | "dynamic";
-                defaultCurrency: string;
-            } | undefined;
-            readonly vectorConfig?: {
-                dimensions: number;
-                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
-                normalized: boolean;
-                indexed: boolean;
-                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
-            } | undefined;
-            readonly fileAttachmentConfig?: {
-                virusScan: boolean;
-                virusScanOnUpload: boolean;
-                quarantineOnThreat: boolean;
-                allowMultiple: boolean;
-                allowReplace: boolean;
-                allowDelete: boolean;
-                requireUpload: boolean;
-                extractMetadata: boolean;
-                extractText: boolean;
-                versioningEnabled: boolean;
-                publicRead: boolean;
-                presignedUrlExpiry: number;
-                minSize?: number | undefined;
-                maxSize?: number | undefined;
-                allowedTypes?: string[] | undefined;
-                blockedTypes?: string[] | undefined;
-                allowedMimeTypes?: string[] | undefined;
-                blockedMimeTypes?: string[] | undefined;
-                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
-                storageProvider?: string | undefined;
-                storageBucket?: string | undefined;
-                storagePrefix?: string | undefined;
-                imageValidation?: {
-                    generateThumbnails: boolean;
-                    preserveMetadata: boolean;
-                    autoRotate: boolean;
-                    minWidth?: number | undefined;
-                    maxWidth?: number | undefined;
-                    minHeight?: number | undefined;
-                    maxHeight?: number | undefined;
-                    aspectRatio?: string | undefined;
-                    thumbnailSizes?: {
-                        name: string;
-                        width: number;
-                        height: number;
-                        crop: boolean;
-                    }[] | undefined;
-                } | undefined;
-                maxVersions?: number | undefined;
-            } | undefined;
-            readonly maskingRule?: {
-                field: string;
-                strategy: "partial" | "hash" | "redact" | "tokenize" | "randomize" | "nullify" | "substitute";
-                preserveFormat: boolean;
-                preserveLength: boolean;
-                pattern?: string | undefined;
-                roles?: string[] | undefined;
-                exemptRoles?: string[] | undefined;
-            } | undefined;
-            readonly auditTrail?: boolean | undefined;
-            readonly cached?: {
-                enabled: boolean;
-                ttl: number;
-                invalidateOn: string[];
-            } | undefined;
-            readonly dataQuality?: {
-                uniqueness: boolean;
-                completeness: number;
-                accuracy?: {
-                    source: string;
-                    threshold: number;
-                } | undefined;
-            } | undefined;
-            readonly conditionalRequired?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly hidden?: boolean | undefined;
-            readonly sortable?: boolean | undefined;
-            readonly inlineHelpText?: string | undefined;
-            readonly trackFeedHistory?: boolean | undefined;
-            readonly caseSensitive?: boolean | undefined;
-            readonly autonumberFormat?: string | undefined;
-            readonly index?: boolean | undefined;
-            readonly type: "text";
-        };
         /** Machine name (denormalized for easier querying) */
         readonly name: {
             readonly readonly?: boolean | undefined;
@@ -8142,6 +7960,8 @@ declare const SysMetadataHistoryObject: Omit<{
         readonly unique: true;
     }, {
         readonly fields: ["organization_id", "type", "name", "recorded_at"];
+    }, {
+        readonly fields: ["organization_id", "type", "name", "checksum"];
     }, {
         readonly fields: ["type", "name"];
     }, {

package/dist/metadata/index.js

@@ -211,18 +211,6 @@ var SysMetadataHistoryObject = data.ObjectSchema.create({
       readonly: true,
       description: "Per-organization monotonic event log cursor."
     }),
-    /**
-     * Parent `sys_metadata.id` at insertion time (plain text, no FK).
-     * Null for events whose parent row no longer exists (e.g. some
-     * delete records). Forensic only — joins should go through
-     * `(organization_id, type, name)`.
-     */
-    metadata_id: data.Field.text({
-      label: "Metadata ID",
-      required: false,
-      readonly: true,
-      maxLength: 64
-    }),
     /** Machine name (denormalized for easier querying) */
     name: data.Field.text({
       label: "Name",
@@ -317,6 +305,9 @@ var SysMetadataHistoryObject = data.ObjectSchema.create({
     { fields: ["organization_id", "event_seq"], unique: true },
     { fields: ["organization_id", "type", "name", "version"], unique: true },
     { fields: ["organization_id", "type", "name", "recorded_at"] },
+    // ADR-0009: getByHash() lookup — execution-pinned types resolve a
+    // historical body by content hash via this index.
+    { fields: ["organization_id", "type", "name", "checksum"] },
     { fields: ["type", "name"] },
     { fields: ["recorded_at"] },
     { fields: ["operation_type"] }

package/dist/metadata/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/metadata/sys-metadata.object.ts","../../src/metadata/sys-metadata-history.object.ts"],"names":["ObjectSchema","Field"],"mappings":";;;;;AAgBO,IAAM,iBAAA,GAAoBA,kBAAa,MAAA,CAAO;AAAA,EACnD,IAAA,EAAM,cAAA;AAAA,EACN,KAAA,EAAO,iBAAA;AAAA,EACP,WAAA,EAAa,iBAAA;AAAA,EACb,IAAA,EAAM,UAAA;AAAA,EACN,QAAA,EAAU,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOV,SAAA,EAAW,QAAA;AAAA,EACX,WAAA,EAAa,+EAAA;AAAA,EAEb,MAAA,EAAQ;AAAA;AAAA,IAEN,EAAA,EAAIC,WAAM,IAAA,CAAK;AAAA,MACb,KAAA,EAAO,IAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,eAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,SAAA,EAAWA,WAAM,IAAA,CAAK;AAAA,MACpB,KAAA,EAAO,WAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc,SAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,UAAA,EAAYA,WAAM,IAAA,CAAK;AAAA,MACrB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW,GAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMD,kBAAA,EAAoBA,UAAA,CAAM,MAAA,CAAO,qBAAA,EAAuB;AAAA,MACtD,KAAA,EAAO,iBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EACE;AAAA,KACH,CAAA;AAAA;AAAA,IAGD,YAAYA,UAAA,CAAM,MAAA,CAAO,CAAC,SAAA,EAAW,UAAA,EAAY,MAAM,CAAA,EAAG;AAAA,MACxD,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,OAAOA,UAAA,CAAM,MAAA,CAAO,CAAC,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA,EAAG;AAAA,MAClD,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,QAAA,CAAS;AAAA,MACvB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,IAAA,CAAK;AAAA,MAClB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,UAAUA,UAAA,CAAM,MAAA,CAAO,CAAC,OAAA,EAAS,SAAS,CAAA,EAAG;AAAA,MAC3C,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,KAAA,EAAOA,WAAM,IAAA,CAAK;AAAA,MAChB,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,KAAA,EAAOA,WAAM,MAAA,CAAO,CAAC,SAAS,QAAA,EAAU,UAAA,EAAY,YAAY,CAAA,EAAG;AAAA,MACjE,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,eAAA,EAAiBA,UAAA,CAAM,MAAA,CAAO,kBAAA,EAAoB;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQD,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,aAAA,EAAe;AAAA,MACtC,KAAA,EAAO,sBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,MAAA,CAAO;AAAA,MACpB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,IAAA,CAAK;AAAA,MACnB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,MAAA,EAAQA,WAAM,MAAA,CAAO,CAAC,cAAc,UAAA,EAAY,KAAA,EAAO,WAAW,CAAA,EAAG;AAAA,MACnE,KAAA,EAAO,QAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,QAAA,CAAS;AAAA,MACnB,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACnC,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,WAAM,QAAA,CAAS;AAAA,MACzB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACnC,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,WAAM,QAAA,CAAS;AAAA,MACzB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX;AAAA,GACH;AAAA,EAEA,OAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOP;AAAA,MACE,IAAA,EAAM,iCAAA;AAAA,MACN,MAAA,EAAQ,CAAC,MAAA,EAAQ,MAAA,EAAQ,iBAAiB,CAAA;AAAA,MAC1C,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS;AAAA,KACX;AAAA,IACA,EAAE,IAAA,EAAM,2BAAA,EAA6B,QAAQ,CAAC,iBAAA,EAAmB,MAAM,CAAA,EAAE;AAAA,IACzE,EAAE,MAAA,EAAQ,CAAC,MAAA,EAAQ,OAAO,CAAA,EAAE;AAAA,IAC5B,EAAE,MAAA,EAAQ,CAAC,oBAAoB,CAAA,EAAE;AAAA,IACjC,EAAE,MAAA,EAAQ,CAAC,OAAO,CAAA,EAAE;AAAA,IACpB,EAAE,MAAA,EAAQ,CAAC,WAAW,CAAA;AAAE,GAC1B;AAAA,EAEA,MAAA,EAAQ;AAAA,IACN,YAAA,EAAc,IAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,YAAY,CAAC,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,UAAU,QAAQ,CAAA;AAAA,IACxD,KAAA,EAAO;AAAA;AAEX,CAAC;ACxLM,IAAM,wBAAA,GAA2BD,kBAAa,MAAA,CAAO;AAAA,EAC1D,IAAA,EAAM,sBAAA;AAAA,EACN,KAAA,EAAO,kBAAA;AAAA,EACP,WAAA,EAAa,kBAAA;AAAA,EACb,IAAA,EAAM,SAAA;AAAA,EACN,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,QAAA;AAAA,EACX,WAAA,EAAa,sEAAA;AAAA,EAEb,MAAA,EAAQ;AAAA;AAAA,IAEN,EAAA,EAAIC,WAAM,IAAA,CAAK;AAAA,MACb,KAAA,EAAO,IAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,SAAA,EAAWA,WAAM,MAAA,CAAO;AAAA,MACtB,KAAA,EAAO,WAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQD,WAAA,EAAaA,WAAM,IAAA,CAAK;AAAA,MACtB,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,eAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,MAAA,CAAO;AAAA,MACpB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,cAAA,EAAgBA,WAAM,MAAA,CAAO,CAAC,UAAU,QAAA,EAAU,SAAA,EAAW,QAAA,EAAU,QAAQ,CAAA,EAAG;AAAA,MAChF,KAAA,EAAO,gBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMD,QAAA,EAAUA,WAAM,QAAA,CAAS;AAAA,MACvB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,IAAA,CAAK;AAAA,MACnB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,iBAAA,EAAmBA,WAAM,IAAA,CAAK;AAAA,MAC5B,KAAA,EAAO,mBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,WAAM,QAAA,CAAS;AAAA,MAC1B,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOD,MAAA,EAAQA,WAAM,IAAA,CAAK;AAAA,MACjB,KAAA,EAAO,QAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,eAAA,EAAiBA,UAAAA,CAAM,MAAA,CAAO,kBAAA,EAAoB;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,UAAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACpC,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,WAAM,QAAA,CAAS;AAAA,MAC1B,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX;AAAA,GACH;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,EAAE,MAAA,EAAQ,CAAC,mBAAmB,WAAW,CAAA,EAAG,QAAQ,IAAA,EAAK;AAAA,IACzD,EAAE,QAAQ,CAAC,iBAAA,EAAmB,QAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG,MAAA,EAAQ,IAAA,EAAK;AAAA,IACvE,EAAE,MAAA,EAAQ,CAAC,mBAAmB,MAAA,EAAQ,MAAA,EAAQ,aAAa,CAAA,EAAE;AAAA,IAC7D,EAAE,MAAA,EAAQ,CAAC,MAAA,EAAQ,MAAM,CAAA,EAAE;AAAA,IAC3B,EAAE,MAAA,EAAQ,CAAC,aAAa,CAAA,EAAE;AAAA,IAC1B,EAAE,MAAA,EAAQ,CAAC,gBAAgB,CAAA;AAAE,GAC/B;AAAA,EAEA,MAAA,EAAQ;AAAA,IACN,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,CAAC,KAAA,EAAO,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO;AAAA;AAEX,CAAC","file":"index.js","sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_metadata — System Metadata Object\n *\n * Canonical ObjectStack object definition for the metadata persistence table.\n * Stores all platform-scope and user-scope metadata records (Objects, Views,\n * Flows, etc.) using the MetadataRecordSchema envelope.\n *\n * This is a system object (isSystem: true) — protected from deletion and\n * automatically provisioned by the DatabaseLoader on first use.\n *\n * @see MetadataRecordSchema in metadata-persistence.zod.ts\n */\nexport const SysMetadataObject = ObjectSchema.create({\n  name: 'sys_metadata',\n  label: 'System Metadata',\n  pluralLabel: 'System Metadata',\n  icon: 'settings',\n  isSystem: true,\n  // managedBy: 'system' — the metadata table backs every other config\n  // object. Writing rows directly here bypasses the typed Zod APIs and\n  // would let an admin inject malformed payloads. The \"All Metadata\"\n  // menu is therefore a read-only debug surface (Export only); typed\n  // edits flow through the dedicated per-type pages (Approval Process,\n  // Sharing Rule, etc.).\n  managedBy: 'system',\n  description: 'Stores platform and user-scope metadata records (objects, views, flows, etc.)',\n\n  fields: {\n    /** Primary Key (UUID) */\n    id: Field.text({\n      label: 'ID',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Machine name — unique identifier used in code references */\n    name: Field.text({\n      label: 'Name',\n      required: true,\n      searchable: true,\n      maxLength: 255,\n    }),\n\n    /** Metadata type (e.g. \"object\", \"view\", \"flow\") */\n    type: Field.text({\n      label: 'Metadata Type',\n      required: true,\n      searchable: true,\n      maxLength: 100,\n    }),\n\n    /** Namespace / module grouping (e.g. \"crm\", \"core\") */\n    namespace: Field.text({\n      label: 'Namespace',\n      required: false,\n      defaultValue: 'default',\n      maxLength: 100,\n    }),\n\n    /** Package that owns/delivered this metadata (legacy string identifier, kept for compat) */\n    package_id: Field.text({\n      label: 'Package ID',\n      required: false,\n      maxLength: 255,\n      description: 'Legacy package manifest ID string. Use package_version_id for new records.',\n    }),\n\n    /**\n     * FK → sys_package_version (UUID). Set for metadata that belongs to a specific\n     * package release snapshot. NULL = platform-built-in or environment override.\n     */\n    package_version_id: Field.lookup('sys_package_version', {\n      label: 'Package Version',\n      required: false,\n      description:\n        'Foreign key to sys_package_version (UUID). Null = platform-built-in or env-level override.',\n    }),\n\n    /** Who manages this record: package, platform, or user */\n    managed_by: Field.select(['package', 'platform', 'user'], {\n      label: 'Managed By',\n      required: false,\n    }),\n\n    /** Scope: system (code), platform (admin DB), user (personal DB) */\n    scope: Field.select(['system', 'platform', 'user'], {\n      label: 'Scope',\n      required: true,\n      defaultValue: 'platform',\n    }),\n\n    /** JSON payload — the actual metadata configuration */\n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: true,\n      description: 'JSON-serialized metadata payload',\n    }),\n\n    /** Parent metadata name for extension/override */\n    extends: Field.text({\n      label: 'Extends',\n      required: false,\n      maxLength: 255,\n    }),\n\n    /** Merge strategy when extending parent metadata */\n    strategy: Field.select(['merge', 'replace'], {\n      label: 'Strategy',\n      required: false,\n      defaultValue: 'merge',\n    }),\n\n    /** Owner user ID (for user-scope items) */\n    owner: Field.text({\n      label: 'Owner',\n      required: false,\n      maxLength: 255,\n    }),\n\n    /** Lifecycle state */\n    state: Field.select(['draft', 'active', 'archived', 'deprecated'], {\n      label: 'State',\n      required: false,\n      defaultValue: 'active',\n    }),\n\n    /** Organization ID for multi-tenant isolation */\n    organization_id: Field.lookup('sys_organization', {\n      label: 'Organization',\n      required: false,\n      description: 'Organization for multi-tenant isolation.',\n    }),\n\n    /**\n     * @deprecated ADR-0005 (revised 2026-05): per-env DBs replace per-project\n     * isolation. `project_id` is no longer written by saveMetaItem and not\n     * consulted by overlay reads. Kept for legacy rows; new writes leave it\n     * NULL. Will be dropped in a future schema migration.\n     */\n    project_id: Field.lookup('sys_project', {\n      label: 'Project (deprecated)',\n      required: false,\n      description: 'DEPRECATED. Use organization_id for tenant isolation.',\n    }),\n\n    /** Version number for optimistic concurrency */\n    version: Field.number({\n      label: 'Version',\n      required: false,\n      defaultValue: 1,\n    }),\n\n    /** Content checksum for change detection (e.g. `sha256:<64 hex>` = 71 chars) */\n    checksum: Field.text({\n      label: 'Checksum',\n      required: false,\n      maxLength: 71,\n    }),\n\n    /** Origin of this metadata record */\n    source: Field.select(['filesystem', 'database', 'api', 'migration'], {\n      label: 'Source',\n      required: false,\n    }),\n\n    /** Classification tags (JSON array) */\n    tags: Field.textarea({\n      label: 'Tags',\n      required: false,\n      description: 'JSON-serialized array of classification tags',\n    }),\n\n    /** Audit fields */\n    created_by: Field.lookup('sys_user', {\n      label: 'Created By',\n      required: false,\n      readonly: true,\n    }),\n\n    created_at: Field.datetime({\n      label: 'Created At',\n      required: false,\n      readonly: true,\n    }),\n\n    updated_by: Field.lookup('sys_user', {\n      label: 'Updated By',\n      required: false,\n    }),\n\n    updated_at: Field.datetime({\n      label: 'Updated At',\n      required: false,\n    }),\n  },\n\n  indexes: [\n    // ADR-0005 (revised 2026-05): overlay uniqueness is scoped by\n    // (type, name, organization_id), restricted to active rows so resets\n    // / archived versions don't collide. project_id is deprecated and\n    // not part of the discriminator. The runtime layer (protocol.ts\n    // ensureOverlayIndex) issues a DROP-then-CREATE migration to\n    // replace any pre-existing legacy composite index in-place.\n    {\n      name: 'idx_sys_metadata_overlay_active',\n      fields: ['type', 'name', 'organization_id'],\n      unique: true,\n      partial: \"state = 'active'\",\n    },\n    { name: 'idx_sys_metadata_org_type', fields: ['organization_id', 'type'] },\n    { fields: ['type', 'scope'] },\n    { fields: ['package_version_id'] },\n    { fields: ['state'] },\n    { fields: ['namespace'] },\n  ],\n\n  enable: {\n    trackHistory: true,\n    searchable: false,\n    apiEnabled: true,\n    apiMethods: ['get', 'list', 'create', 'update', 'delete'],\n    trash: false,\n  },\n});\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_metadata_history — Metadata Version History / Event Log\n *\n * Append-only durable log of every overlay change made through\n * `SysMetadataRepository.put` / `delete` (ADR-0008 §10 M1). Each row is a\n * single event in the per-organisation event log; rows are NEVER\n * mutated after insertion. The legacy `DatabaseLoader` writes the same\n * shape from its own put/restore code paths.\n *\n * ─────────────────────────────────────────────────────────────────────\n *  Key design points (ADR-0008 §0 amendment + M1):\n *\n *  • Keyed by `(organization_id, type, name)` only — `project_id` was\n *    removed in the branch/project-removal amendment.\n *\n *  • `event_seq` is the per-org monotonic event-log cursor. Producers\n *    compute `MAX(event_seq) + 1 WHERE organization_id = X` inside the\n *    same transaction as the parent `sys_metadata` write.\n *\n *  • `version` is the per-(org,type,name) lineage counter. Producers\n *    compute `MAX(version) + 1 WHERE organization_id = X AND type = T\n *    AND name = N` so delete + recreate continues incrementing instead\n *    of restarting at 1.\n *\n *  • `metadata_id` is plain `text` (not a `lookup`) so DELETE rows can\n *    keep the now-orphaned parent id for forensic auditing without a\n *    foreign-key constraint blocking the hard delete.\n *\n *  • `metadata` / `checksum` are nullable — DELETE rows have no body or\n *    hash. Readers must tolerate null on both columns.\n *\n *  • `source` records the producer ('sys-metadata-repo', 'fs',\n *    'studio', …) and feeds MetadataEvent.source on history() reads.\n *\n *  Indexes are purpose-built for the two dominant read patterns:\n *    1. per-item history view  → `(organization_id, type, name, version)`\n *    2. org-wide event replay   → `(organization_id, event_seq)`\n * ─────────────────────────────────────────────────────────────────────\n */\nexport const SysMetadataHistoryObject = ObjectSchema.create({\n  name: 'sys_metadata_history',\n  label: 'Metadata History',\n  pluralLabel: 'Metadata History',\n  icon: 'history',\n  isSystem: true,\n  managedBy: 'system',\n  description: 'Durable event log of metadata overlay changes (per-org, append-only)',\n\n  fields: {\n    /** Primary Key (UUID) */\n    id: Field.text({\n      label: 'ID',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Per-org monotonic event sequence (durable cursor for replay). */\n    event_seq: Field.number({\n      label: 'Event Seq',\n      required: true,\n      readonly: true,\n      description: 'Per-organization monotonic event log cursor.',\n    }),\n\n    /**\n     * Parent `sys_metadata.id` at insertion time (plain text, no FK).\n     * Null for events whose parent row no longer exists (e.g. some\n     * delete records). Forensic only — joins should go through\n     * `(organization_id, type, name)`.\n     */\n    metadata_id: Field.text({\n      label: 'Metadata ID',\n      required: false,\n      readonly: true,\n      maxLength: 64,\n    }),\n\n    /** Machine name (denormalized for easier querying) */\n    name: Field.text({\n      label: 'Name',\n      required: true,\n      searchable: true,\n      readonly: true,\n      maxLength: 255,\n    }),\n\n    /** Metadata type (denormalized for easier querying) */\n    type: Field.text({\n      label: 'Metadata Type',\n      required: true,\n      searchable: true,\n      readonly: true,\n      maxLength: 100,\n    }),\n\n    /** Per-(org,type,name) lineage counter at this snapshot. */\n    version: Field.number({\n      label: 'Version',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Type of operation that created this history entry */\n    operation_type: Field.select(['create', 'update', 'publish', 'revert', 'delete'], {\n      label: 'Operation Type',\n      required: true,\n      readonly: true,\n    }),\n\n    /**\n     * Historical metadata snapshot (JSON payload).\n     * Null for `operation_type = 'delete'` — the row carries no body.\n     */\n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      readonly: true,\n      description: 'JSON-serialized metadata snapshot at this version (null for deletes).',\n    }),\n\n    /** SHA-256 checksum of metadata content (null for deletes). */\n    checksum: Field.text({\n      label: 'Checksum',\n      required: false,\n      readonly: true,\n      maxLength: 80,\n    }),\n\n    /** Checksum of the previous version (null for the first event). */\n    previous_checksum: Field.text({\n      label: 'Previous Checksum',\n      required: false,\n      readonly: true,\n      maxLength: 80,\n    }),\n\n    /** Human-readable description of changes (= MetadataEvent.message). */\n    change_note: Field.textarea({\n      label: 'Change Note',\n      required: false,\n      readonly: true,\n      description: 'Description of what changed in this version.',\n    }),\n\n    /**\n     * Producer of the event ('sys-metadata-repo', 'fs', 'studio',\n     * 'api', …). Defaults to 'sys-metadata-repo' on the canonical\n     * write path; preserved on history() reads as MetadataEvent.source.\n     */\n    source: Field.text({\n      label: 'Source',\n      required: false,\n      readonly: true,\n      maxLength: 64,\n    }),\n\n    /** Organization ID for multi-tenant isolation */\n    organization_id: Field.lookup('sys_organization', {\n      label: 'Organization',\n      required: false,\n      readonly: true,\n      description: 'Organization for multi-tenant isolation.',\n    }),\n\n    /** User who made this change (= MetadataEvent.actor). */\n    recorded_by: Field.lookup('sys_user', {\n      label: 'Recorded By',\n      required: false,\n      readonly: true,\n    }),\n\n    /** When was this version recorded */\n    recorded_at: Field.datetime({\n      label: 'Recorded At',\n      required: true,\n      readonly: true,\n    }),\n  },\n\n  indexes: [\n    { fields: ['organization_id', 'event_seq'], unique: true },\n    { fields: ['organization_id', 'type', 'name', 'version'], unique: true },\n    { fields: ['organization_id', 'type', 'name', 'recorded_at'] },\n    { fields: ['type', 'name'] },\n    { fields: ['recorded_at'] },\n    { fields: ['operation_type'] },\n  ],\n\n  enable: {\n    trackHistory: false,\n    searchable: false,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'],\n    trash: false,\n  },\n});\n"]}
+{"version":3,"sources":["../../src/metadata/sys-metadata.object.ts","../../src/metadata/sys-metadata-history.object.ts"],"names":["ObjectSchema","Field"],"mappings":";;;;;AAgBO,IAAM,iBAAA,GAAoBA,kBAAa,MAAA,CAAO;AAAA,EACnD,IAAA,EAAM,cAAA;AAAA,EACN,KAAA,EAAO,iBAAA;AAAA,EACP,WAAA,EAAa,iBAAA;AAAA,EACb,IAAA,EAAM,UAAA;AAAA,EACN,QAAA,EAAU,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOV,SAAA,EAAW,QAAA;AAAA,EACX,WAAA,EAAa,+EAAA;AAAA,EAEb,MAAA,EAAQ;AAAA;AAAA,IAEN,EAAA,EAAIC,WAAM,IAAA,CAAK;AAAA,MACb,KAAA,EAAO,IAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,eAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,SAAA,EAAWA,WAAM,IAAA,CAAK;AAAA,MACpB,KAAA,EAAO,WAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc,SAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,UAAA,EAAYA,WAAM,IAAA,CAAK;AAAA,MACrB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW,GAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMD,kBAAA,EAAoBA,UAAA,CAAM,MAAA,CAAO,qBAAA,EAAuB;AAAA,MACtD,KAAA,EAAO,iBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EACE;AAAA,KACH,CAAA;AAAA;AAAA,IAGD,YAAYA,UAAA,CAAM,MAAA,CAAO,CAAC,SAAA,EAAW,UAAA,EAAY,MAAM,CAAA,EAAG;AAAA,MACxD,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,OAAOA,UAAA,CAAM,MAAA,CAAO,CAAC,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA,EAAG;AAAA,MAClD,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,QAAA,CAAS;AAAA,MACvB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,IAAA,CAAK;AAAA,MAClB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,UAAUA,UAAA,CAAM,MAAA,CAAO,CAAC,OAAA,EAAS,SAAS,CAAA,EAAG;AAAA,MAC3C,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,KAAA,EAAOA,WAAM,IAAA,CAAK;AAAA,MAChB,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,KAAA,EAAOA,WAAM,MAAA,CAAO,CAAC,SAAS,QAAA,EAAU,UAAA,EAAY,YAAY,CAAA,EAAG;AAAA,MACjE,KAAA,EAAO,OAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,eAAA,EAAiBA,UAAA,CAAM,MAAA,CAAO,kBAAA,EAAoB;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQD,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,aAAA,EAAe;AAAA,MACtC,KAAA,EAAO,sBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,MAAA,CAAO;AAAA,MACpB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,IAAA,CAAK;AAAA,MACnB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,MAAA,EAAQA,WAAM,MAAA,CAAO,CAAC,cAAc,UAAA,EAAY,KAAA,EAAO,WAAW,CAAA,EAAG;AAAA,MACnE,KAAA,EAAO,QAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,QAAA,CAAS;AAAA,MACnB,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACnC,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,WAAM,QAAA,CAAS;AAAA,MACzB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,UAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACnC,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IAED,UAAA,EAAYA,WAAM,QAAA,CAAS;AAAA,MACzB,KAAA,EAAO,YAAA;AAAA,MACP,QAAA,EAAU;AAAA,KACX;AAAA,GACH;AAAA,EAEA,OAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOP;AAAA,MACE,IAAA,EAAM,iCAAA;AAAA,MACN,MAAA,EAAQ,CAAC,MAAA,EAAQ,MAAA,EAAQ,iBAAiB,CAAA;AAAA,MAC1C,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS;AAAA,KACX;AAAA,IACA,EAAE,IAAA,EAAM,2BAAA,EAA6B,QAAQ,CAAC,iBAAA,EAAmB,MAAM,CAAA,EAAE;AAAA,IACzE,EAAE,MAAA,EAAQ,CAAC,MAAA,EAAQ,OAAO,CAAA,EAAE;AAAA,IAC5B,EAAE,MAAA,EAAQ,CAAC,oBAAoB,CAAA,EAAE;AAAA,IACjC,EAAE,MAAA,EAAQ,CAAC,OAAO,CAAA,EAAE;AAAA,IACpB,EAAE,MAAA,EAAQ,CAAC,WAAW,CAAA;AAAE,GAC1B;AAAA,EAEA,MAAA,EAAQ;AAAA,IACN,YAAA,EAAc,IAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,YAAY,CAAC,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,UAAU,QAAQ,CAAA;AAAA,IACxD,KAAA,EAAO;AAAA;AAEX,CAAC;ACzLM,IAAM,wBAAA,GAA2BD,kBAAa,MAAA,CAAO;AAAA,EAC1D,IAAA,EAAM,sBAAA;AAAA,EACN,KAAA,EAAO,kBAAA;AAAA,EACP,WAAA,EAAa,kBAAA;AAAA,EACb,IAAA,EAAM,SAAA;AAAA,EACN,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,QAAA;AAAA,EACX,WAAA,EAAa,sEAAA;AAAA,EAEb,MAAA,EAAQ;AAAA;AAAA,IAEN,EAAA,EAAIC,WAAM,IAAA,CAAK;AAAA,MACb,KAAA,EAAO,IAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,SAAA,EAAWA,WAAM,MAAA,CAAO;AAAA,MACtB,KAAA,EAAO,WAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,IAAA,EAAMA,WAAM,IAAA,CAAK;AAAA,MACf,KAAA,EAAO,eAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,IAAA;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,OAAA,EAASA,WAAM,MAAA,CAAO;AAAA,MACpB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,cAAA,EAAgBA,WAAM,MAAA,CAAO,CAAC,UAAU,QAAA,EAAU,SAAA,EAAW,QAAA,EAAU,QAAQ,CAAA,EAAG;AAAA,MAChF,KAAA,EAAO,gBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMD,QAAA,EAAUA,WAAM,QAAA,CAAS;AAAA,MACvB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,QAAA,EAAUA,WAAM,IAAA,CAAK;AAAA,MACnB,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,iBAAA,EAAmBA,WAAM,IAAA,CAAK;AAAA,MAC5B,KAAA,EAAO,mBAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,WAAM,QAAA,CAAS;AAAA,MAC1B,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOD,MAAA,EAAQA,WAAM,IAAA,CAAK;AAAA,MACjB,KAAA,EAAO,QAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA;AAAA,IAGD,eAAA,EAAiBA,UAAAA,CAAM,MAAA,CAAO,kBAAA,EAAoB;AAAA,MAChD,KAAA,EAAO,cAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU,IAAA;AAAA,MACV,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,UAAAA,CAAM,MAAA,CAAO,UAAA,EAAY;AAAA,MACpC,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,KAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX,CAAA;AAAA;AAAA,IAGD,WAAA,EAAaA,WAAM,QAAA,CAAS;AAAA,MAC1B,KAAA,EAAO,aAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,QAAA,EAAU;AAAA,KACX;AAAA,GACH;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,EAAE,MAAA,EAAQ,CAAC,mBAAmB,WAAW,CAAA,EAAG,QAAQ,IAAA,EAAK;AAAA,IACzD,EAAE,QAAQ,CAAC,iBAAA,EAAmB,QAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG,MAAA,EAAQ,IAAA,EAAK;AAAA,IACvE,EAAE,MAAA,EAAQ,CAAC,mBAAmB,MAAA,EAAQ,MAAA,EAAQ,aAAa,CAAA,EAAE;AAAA;AAAA;AAAA,IAG7D,EAAE,MAAA,EAAQ,CAAC,mBAAmB,MAAA,EAAQ,MAAA,EAAQ,UAAU,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAA,EAAQ,CAAC,MAAA,EAAQ,MAAM,CAAA,EAAE;AAAA,IAC3B,EAAE,MAAA,EAAQ,CAAC,aAAa,CAAA,EAAE;AAAA,IAC1B,EAAE,MAAA,EAAQ,CAAC,gBAAgB,CAAA;AAAE,GAC/B;AAAA,EAEA,MAAA,EAAQ;AAAA,IACN,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY,CAAC,KAAA,EAAO,MAAM,CAAA;AAAA,IAC1B,KAAA,EAAO;AAAA;AAEX,CAAC","file":"index.js","sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_metadata — System Metadata Object\n *\n * Canonical ObjectStack object definition for the metadata persistence table.\n * Stores all platform-scope and user-scope metadata records (Objects, Views,\n * Flows, etc.) using the MetadataRecordSchema envelope.\n *\n * This is a system object (isSystem: true) — protected from deletion and\n * automatically provisioned by the DatabaseLoader on first use.\n *\n * @see MetadataRecordSchema in metadata-persistence.zod.ts\n */\nexport const SysMetadataObject = ObjectSchema.create({\n  name: 'sys_metadata',\n  label: 'System Metadata',\n  pluralLabel: 'System Metadata',\n  icon: 'settings',\n  isSystem: true,\n  // managedBy: 'system' — the metadata table backs every other config\n  // object. Writing rows directly here bypasses the typed Zod APIs and\n  // would let an admin inject malformed payloads. The \"All Metadata\"\n  // menu is therefore a read-only debug surface (Export only); typed\n  // edits flow through the dedicated per-type pages (Approval Process,\n  // Sharing Rule, etc.).\n  managedBy: 'system',\n  description: 'Stores platform and user-scope metadata records (objects, views, flows, etc.)',\n\n  fields: {\n    /** Primary Key (UUID) */\n    id: Field.text({\n      label: 'ID',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Machine name — unique identifier used in code references */\n    name: Field.text({\n      label: 'Name',\n      required: true,\n      searchable: true,\n      maxLength: 255,\n    }),\n\n    /** Metadata type (e.g. \"object\", \"view\", \"flow\") */\n    type: Field.text({\n      label: 'Metadata Type',\n      required: true,\n      searchable: true,\n      maxLength: 100,\n    }),\n\n    /** Namespace / module grouping (e.g. \"crm\", \"core\") */\n    namespace: Field.text({\n      label: 'Namespace',\n      required: false,\n      defaultValue: 'default',\n      maxLength: 100,\n    }),\n\n    /** Package that owns/delivered this metadata (legacy string identifier, kept for compat) */\n    package_id: Field.text({\n      label: 'Package ID',\n      required: false,\n      maxLength: 255,\n      description: 'Legacy package manifest ID string. Use package_version_id for new records.',\n    }),\n\n    /**\n     * FK → sys_package_version (UUID). Set for metadata that belongs to a specific\n     * package release snapshot. NULL = platform-built-in or environment override.\n     */\n    package_version_id: Field.lookup('sys_package_version', {\n      label: 'Package Version',\n      required: false,\n      description:\n        'Foreign key to sys_package_version (UUID). Null = platform-built-in or env-level override.',\n    }),\n\n    /** Who manages this record: package, platform, or user */\n    managed_by: Field.select(['package', 'platform', 'user'], {\n      label: 'Managed By',\n      required: false,\n    }),\n\n    /** Scope: system (code), platform (admin DB), user (personal DB) */\n    scope: Field.select(['system', 'platform', 'user'], {\n      label: 'Scope',\n      required: true,\n      defaultValue: 'platform',\n    }),\n\n    /** JSON payload — the actual metadata configuration */\n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: true,\n      description: 'JSON-serialized metadata payload',\n    }),\n\n    /** Parent metadata name for extension/override */\n    extends: Field.text({\n      label: 'Extends',\n      required: false,\n      maxLength: 255,\n    }),\n\n    /** Merge strategy when extending parent metadata */\n    strategy: Field.select(['merge', 'replace'], {\n      label: 'Strategy',\n      required: false,\n      defaultValue: 'merge',\n    }),\n\n    /** Owner user ID (for user-scope items) */\n    owner: Field.text({\n      label: 'Owner',\n      required: false,\n      maxLength: 255,\n    }),\n\n    /** Lifecycle state */\n    state: Field.select(['draft', 'active', 'archived', 'deprecated'], {\n      label: 'State',\n      required: false,\n      defaultValue: 'active',\n    }),\n\n    /** Organization ID for multi-tenant isolation */\n    organization_id: Field.lookup('sys_organization', {\n      label: 'Organization',\n      required: false,\n      description: 'Organization for multi-tenant isolation.',\n    }),\n\n    /**\n     * @deprecated ADR-0005 (revised 2026-05): per-env DBs replace per-project\n     * isolation. `project_id` is no longer written by saveMetaItem and not\n     * consulted by overlay reads. Kept for legacy rows; new writes leave it\n     * NULL. Will be dropped in a future schema migration.\n     */\n    project_id: Field.lookup('sys_project', {\n      label: 'Project (deprecated)',\n      required: false,\n      description: 'DEPRECATED. Use organization_id for tenant isolation.',\n    }),\n\n    /** Version number for optimistic concurrency */\n    version: Field.number({\n      label: 'Version',\n      required: false,\n      defaultValue: 1,\n    }),\n\n    /** Content checksum for change detection (e.g. `sha256:<64 hex>` = 71 chars) */\n    checksum: Field.text({\n      label: 'Checksum',\n      required: false,\n      maxLength: 71,\n    }),\n\n    /** Origin of this metadata record */\n    source: Field.select(['filesystem', 'database', 'api', 'migration'], {\n      label: 'Source',\n      required: false,\n    }),\n\n    /** Classification tags (JSON array) */\n    tags: Field.textarea({\n      label: 'Tags',\n      required: false,\n      description: 'JSON-serialized array of classification tags',\n    }),\n\n    /** Audit fields */\n    created_by: Field.lookup('sys_user', {\n      label: 'Created By',\n      required: false,\n      readonly: true,\n    }),\n\n    created_at: Field.datetime({\n      label: 'Created At',\n      required: false,\n      readonly: true,\n    }),\n\n    updated_by: Field.lookup('sys_user', {\n      label: 'Updated By',\n      required: false,\n    }),\n\n    updated_at: Field.datetime({\n      label: 'Updated At',\n      required: false,\n    }),\n  },\n\n  indexes: [\n    // ADR-0005 (revised 2026-05): overlay uniqueness is scoped by\n    // (type, name, organization_id), restricted to active rows so resets\n    // / archived versions don't collide. project_id is deprecated and\n    // not part of the discriminator. The runtime layer (protocol.ts\n    // ensureOverlayIndex) issues a DROP-then-CREATE migration to\n    // replace any pre-existing legacy composite index in-place.\n    {\n      name: 'idx_sys_metadata_overlay_active',\n      fields: ['type', 'name', 'organization_id'],\n      unique: true,\n      partial: \"state = 'active'\",\n    },\n    { name: 'idx_sys_metadata_org_type', fields: ['organization_id', 'type'] },\n    { fields: ['type', 'scope'] },\n    { fields: ['package_version_id'] },\n    { fields: ['state'] },\n    { fields: ['namespace'] },\n  ],\n\n  enable: {\n    trackHistory: true,\n    searchable: false,\n    apiEnabled: true,\n    apiMethods: ['get', 'list', 'create', 'update', 'delete'],\n    trash: false,\n  },\n});\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_metadata_history — Metadata Version History / Event Log\n *\n * Append-only durable log of every overlay change made through\n * `SysMetadataRepository.put` / `delete` (ADR-0008 §10 M1). Each row is a\n * single event in the per-organisation event log; rows are NEVER\n * mutated after insertion. The legacy `DatabaseLoader` writes the same\n * shape from its own put/restore code paths.\n *\n * ─────────────────────────────────────────────────────────────────────\n *  Key design points (ADR-0008 §0 amendment + M1):\n *\n *  • Keyed by `(organization_id, type, name)` only — `project_id` was\n *    removed in the branch/project-removal amendment. The original\n *    `metadata_id` column (a downgraded plain-text version of the old\n *    `sys_metadata.id` FK) was removed in the M1 follow-up — joins go\n *    through `(organization_id, type, name, version)` exclusively.\n *\n *  • `event_seq` is the per-org monotonic event-log cursor. Producers\n *    compute `MAX(event_seq) + 1 WHERE organization_id = X` inside the\n *    same transaction as the parent `sys_metadata` write.\n *\n *  • `version` is the per-(org,type,name) lineage counter. Producers\n *    compute `MAX(version) + 1 WHERE organization_id = X AND type = T\n *    AND name = N` so delete + recreate continues incrementing instead\n *    of restarting at 1.\n *\n *  • `metadata` / `checksum` are nullable — DELETE rows have no body or\n *    hash. Readers must tolerate null on both columns.\n *\n *  • `source` records the producer ('sys-metadata-repo', 'fs',\n *    'studio', …) and feeds MetadataEvent.source on history() reads.\n *\n *  Indexes are purpose-built for the two dominant read patterns:\n *    1. per-item history view  → `(organization_id, type, name, version)`\n *    2. org-wide event replay   → `(organization_id, event_seq)`\n * ─────────────────────────────────────────────────────────────────────\n */\nexport const SysMetadataHistoryObject = ObjectSchema.create({\n  name: 'sys_metadata_history',\n  label: 'Metadata History',\n  pluralLabel: 'Metadata History',\n  icon: 'history',\n  isSystem: true,\n  managedBy: 'system',\n  description: 'Durable event log of metadata overlay changes (per-org, append-only)',\n\n  fields: {\n    /** Primary Key (UUID) */\n    id: Field.text({\n      label: 'ID',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Per-org monotonic event sequence (durable cursor for replay). */\n    event_seq: Field.number({\n      label: 'Event Seq',\n      required: true,\n      readonly: true,\n      description: 'Per-organization monotonic event log cursor.',\n    }),\n\n    /** Machine name (denormalized for easier querying) */\n    name: Field.text({\n      label: 'Name',\n      required: true,\n      searchable: true,\n      readonly: true,\n      maxLength: 255,\n    }),\n\n    /** Metadata type (denormalized for easier querying) */\n    type: Field.text({\n      label: 'Metadata Type',\n      required: true,\n      searchable: true,\n      readonly: true,\n      maxLength: 100,\n    }),\n\n    /** Per-(org,type,name) lineage counter at this snapshot. */\n    version: Field.number({\n      label: 'Version',\n      required: true,\n      readonly: true,\n    }),\n\n    /** Type of operation that created this history entry */\n    operation_type: Field.select(['create', 'update', 'publish', 'revert', 'delete'], {\n      label: 'Operation Type',\n      required: true,\n      readonly: true,\n    }),\n\n    /**\n     * Historical metadata snapshot (JSON payload).\n     * Null for `operation_type = 'delete'` — the row carries no body.\n     */\n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      readonly: true,\n      description: 'JSON-serialized metadata snapshot at this version (null for deletes).',\n    }),\n\n    /** SHA-256 checksum of metadata content (null for deletes). */\n    checksum: Field.text({\n      label: 'Checksum',\n      required: false,\n      readonly: true,\n      maxLength: 80,\n    }),\n\n    /** Checksum of the previous version (null for the first event). */\n    previous_checksum: Field.text({\n      label: 'Previous Checksum',\n      required: false,\n      readonly: true,\n      maxLength: 80,\n    }),\n\n    /** Human-readable description of changes (= MetadataEvent.message). */\n    change_note: Field.textarea({\n      label: 'Change Note',\n      required: false,\n      readonly: true,\n      description: 'Description of what changed in this version.',\n    }),\n\n    /**\n     * Producer of the event ('sys-metadata-repo', 'fs', 'studio',\n     * 'api', …). Defaults to 'sys-metadata-repo' on the canonical\n     * write path; preserved on history() reads as MetadataEvent.source.\n     */\n    source: Field.text({\n      label: 'Source',\n      required: false,\n      readonly: true,\n      maxLength: 64,\n    }),\n\n    /** Organization ID for multi-tenant isolation */\n    organization_id: Field.lookup('sys_organization', {\n      label: 'Organization',\n      required: false,\n      readonly: true,\n      description: 'Organization for multi-tenant isolation.',\n    }),\n\n    /** User who made this change (= MetadataEvent.actor). */\n    recorded_by: Field.lookup('sys_user', {\n      label: 'Recorded By',\n      required: false,\n      readonly: true,\n    }),\n\n    /** When was this version recorded */\n    recorded_at: Field.datetime({\n      label: 'Recorded At',\n      required: true,\n      readonly: true,\n    }),\n  },\n\n  indexes: [\n    { fields: ['organization_id', 'event_seq'], unique: true },\n    { fields: ['organization_id', 'type', 'name', 'version'], unique: true },\n    { fields: ['organization_id', 'type', 'name', 'recorded_at'] },\n    // ADR-0009: getByHash() lookup — execution-pinned types resolve a\n    // historical body by content hash via this index.\n    { fields: ['organization_id', 'type', 'name', 'checksum'] },\n    { fields: ['type', 'name'] },\n    { fields: ['recorded_at'] },\n    { fields: ['operation_type'] },\n  ],\n\n  enable: {\n    trackHistory: false,\n    searchable: false,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'],\n    trash: false,\n  },\n});\n"]}

package/dist/metadata/index.mjs

@@ -209,18 +209,6 @@ var SysMetadataHistoryObject = ObjectSchema.create({
       readonly: true,
       description: "Per-organization monotonic event log cursor."
     }),
-    /**
-     * Parent `sys_metadata.id` at insertion time (plain text, no FK).
-     * Null for events whose parent row no longer exists (e.g. some
-     * delete records). Forensic only — joins should go through
-     * `(organization_id, type, name)`.
-     */
-    metadata_id: Field.text({
-      label: "Metadata ID",
-      required: false,
-      readonly: true,
-      maxLength: 64
-    }),
     /** Machine name (denormalized for easier querying) */
     name: Field.text({
       label: "Name",
@@ -315,6 +303,9 @@ var SysMetadataHistoryObject = ObjectSchema.create({
     { fields: ["organization_id", "event_seq"], unique: true },
     { fields: ["organization_id", "type", "name", "version"], unique: true },
     { fields: ["organization_id", "type", "name", "recorded_at"] },
+    // ADR-0009: getByHash() lookup — execution-pinned types resolve a
+    // historical body by content hash via this index.
+    { fields: ["organization_id", "type", "name", "checksum"] },
     { fields: ["type", "name"] },
     { fields: ["recorded_at"] },
     { fields: ["operation_type"] }