@objectstack/platform-objects 6.9.0 → 7.1.0

package/dist/apps/index.mjs

@@ -19,6 +19,11 @@ var SETUP_APP = {
       type: "group",
       label: "Overview",
       icon: "layout-dashboard",
+      // Platform-wide metrics — aggregate counts across ALL tenants
+      // and are mislabeled for an org admin (RLS would filter to a
+      // single org but the dashboard still reads "Total Users" etc.).
+      // Hidden until a tenant-scoped `organization_overview` ships.
+      requiredPermissions: ["manage_platform_settings"],
       children: [
         { id: "nav_system_overview", type: "dashboard", label: "System Overview", dashboardName: "system_overview", icon: "activity" }
       ]
@@ -85,9 +90,13 @@ var SETUP_APP = {
         // People & Org cleanup.
         { id: "nav_roles", type: "object", label: "Roles", objectName: "sys_role", icon: "shield-check" },
         { id: "nav_permission_sets", type: "object", label: "Permission Sets", objectName: "sys_permission_set", icon: "lock" },
-        { id: "nav_sharing_rules", type: "object", label: "Sharing Rules", objectName: "sys_sharing_rule", icon: "share-2", requiresObject: "sys_sharing_rule" },
-        { id: "nav_record_shares", type: "object", label: "Record Shares", objectName: "sys_record_share", icon: "link", requiresObject: "sys_record_share" },
-        { id: "nav_api_keys", type: "object", label: "API Keys", objectName: "sys_api_key", icon: "key" }
+        // Sharing rules / record shares / API keys are platform-managed
+        // (shared across orgs or operate on the global identity surface).
+        // Org admins see Roles + Permission Sets read-only via RLS but
+        // these advanced entries are hidden behind manage_platform_settings.
+        { id: "nav_sharing_rules", type: "object", label: "Sharing Rules", objectName: "sys_sharing_rule", icon: "share-2", requiresObject: "sys_sharing_rule", requiredPermissions: ["manage_platform_settings"] },
+        { id: "nav_record_shares", type: "object", label: "Record Shares", objectName: "sys_record_share", icon: "link", requiresObject: "sys_record_share", requiredPermissions: ["manage_platform_settings"] },
+        { id: "nav_api_keys", type: "object", label: "API Keys", objectName: "sys_api_key", icon: "key", requiredPermissions: ["manage_platform_settings"] }
       ]
     },
     {
@@ -95,6 +104,9 @@ var SETUP_APP = {
       type: "group",
       label: "Approvals",
       icon: "check-circle",
+      // Approval processes are configured at the platform level and
+      // reused across tenants. Hidden from org admins.
+      requiredPermissions: ["manage_platform_settings"],
       children: [
         { id: "nav_approval_processes", type: "object", label: "Processes", objectName: "sys_approval_process", icon: "workflow", requiresObject: "sys_approval_process" },
         { id: "nav_approval_requests", type: "object", label: "Requests", objectName: "sys_approval_request", icon: "inbox", requiresObject: "sys_approval_request" },
@@ -117,12 +129,18 @@ var SETUP_APP = {
         // the All-Settings index. AI groups chat + embedder under one entry
         // because operators reason about them together; Knowledge is its
         // own entry because the adapter selection is independent.
-        { id: "nav_settings_hub", type: "url", label: "All Settings", url: "/apps/setup/system/settings", icon: "settings-2" },
+        //
+        // Permission gating: tenant-scoped manifests (branding,
+        // feature_flags) stay on `setup.access` so org admins can
+        // configure their own org. Global manifests (mail, storage,
+        // AI, knowledge) and the "All Settings" index sit behind
+        // `manage_platform_settings` because they affect every tenant.
+        { id: "nav_settings_hub", type: "url", label: "All Settings", url: "/apps/setup/system/settings", icon: "settings-2", requiredPermissions: ["manage_platform_settings"] },
         { id: "nav_settings_branding", type: "url", label: "Branding", url: "/apps/setup/system/settings/branding", icon: "palette" },
-        { id: "nav_settings_mail", type: "url", label: "Email", url: "/apps/setup/system/settings/mail", icon: "mail" },
-        { id: "nav_settings_storage", type: "url", label: "File Storage", url: "/apps/setup/system/settings/storage", icon: "hard-drive" },
-        { id: "nav_settings_ai", type: "url", label: "AI & Embedder", url: "/apps/setup/system/settings/ai", icon: "sparkles" },
-        { id: "nav_settings_knowledge", type: "url", label: "Knowledge", url: "/apps/setup/system/settings/knowledge", icon: "book-open" },
+        { id: "nav_settings_mail", type: "url", label: "Email", url: "/apps/setup/system/settings/mail", icon: "mail", requiredPermissions: ["manage_platform_settings"] },
+        { id: "nav_settings_storage", type: "url", label: "File Storage", url: "/apps/setup/system/settings/storage", icon: "hard-drive", requiredPermissions: ["manage_platform_settings"] },
+        { id: "nav_settings_ai", type: "url", label: "AI & Embedder", url: "/apps/setup/system/settings/ai", icon: "sparkles", requiredPermissions: ["manage_platform_settings"] },
+        { id: "nav_settings_knowledge", type: "url", label: "Knowledge", url: "/apps/setup/system/settings/knowledge", icon: "book-open", requiredPermissions: ["manage_platform_settings"] },
         { id: "nav_settings_feature_flags", type: "url", label: "Feature Flags", url: "/apps/setup/system/settings/feature_flags", icon: "flag" }
       ]
     },
@@ -131,6 +149,9 @@ var SETUP_APP = {
       type: "group",
       label: "Diagnostics",
       icon: "stethoscope",
+      // Sessions / audit logs / notifications expose cross-tenant
+      // telemetry and are platform-only.
+      requiredPermissions: ["manage_platform_settings"],
       children: [
         // Day-to-day observability surfaces. M10.30b removed `sys_activity`
         // and `sys_comment` — both are CRM operational data authored from
@@ -145,6 +166,8 @@ var SETUP_APP = {
       type: "group",
       label: "Integrations",
       icon: "plug",
+      // Webhook configuration and delivery telemetry are platform-only.
+      requiredPermissions: ["manage_platform_settings"],
       children: [
         // Outbound HTTP integrations. `sys_webhook` always ships with
         // platform-objects, so the Webhooks entry is always visible.
@@ -168,6 +191,10 @@ var SETUP_APP = {
       label: "Advanced",
       icon: "wrench",
       expanded: false,
+      // OAuth apps / JWKS / verifications / two-factor / device codes /
+      // identity links / user preferences are all platform support
+      // surfaces — hidden from org admins.
+      requiredPermissions: ["manage_platform_settings"],
       children: [
         // Better-auth internals — rarely useful for humans, but exposed
         // so support engineers can inspect token state without dropping
@@ -452,6 +479,152 @@ var STUDIO_APP = {
     }
   ]
 };
+
+// src/apps/account.app.ts
+var ACCOUNT_APP = {
+  name: "account",
+  label: "Account",
+  description: "Personal security and identity settings",
+  icon: "user-circle",
+  active: true,
+  isDefault: false,
+  // Surface via the avatar dropdown, not the App Switcher — see App.hidden.
+  hidden: true,
+  branding: {
+    primaryColor: "#0ea5e9"
+    // sky-500 — distinct from Setup's slate
+  },
+  // No `requiredPermissions`: any authenticated user must be able to
+  // manage their own 2FA / linked accounts / personal OAuth apps. RLS on
+  // each object scopes rows to the caller.
+  navigation: [
+    // Profile is the canonical landing — a hand-written React settings card
+    // (Vercel/Linear style) registered in the Console SPA as
+    // `account:profile_card`. The renderer reads the current user via
+    // `useAuth()` and writes via `client.auth.updateUser`, so there is no
+    // sys_user record context here — this is intentional. The admin-facing
+    // sys_user record page (see `pages/sys-user.page.ts`) stays focused on
+    // record browsing (Identity/Audit fields, related lists, admin actions)
+    // and is reached through Setup, never from the Account App.
+    {
+      id: "nav_account_profile",
+      type: "component",
+      label: "Profile",
+      componentRef: "account:profile_card",
+      icon: "user-circle"
+    },
+    // --- Inbox & work assigned to me -----------------------------------
+    // Notifications, approvals waiting on me, and the orgs I belong to.
+    // All three rely on pre-existing `*.mine` / `*.my_pending` listViews
+    // that filter by `{current_user_id}` via RLS — no new objects needed.
+    {
+      id: "grp_account_inbox",
+      type: "group",
+      label: "Inbox",
+      icon: "inbox",
+      defaultOpen: true,
+      children: [
+        {
+          id: "nav_account_notifications",
+          type: "object",
+          label: "Notifications",
+          objectName: "sys_notification",
+          viewName: "unread",
+          icon: "bell",
+          requiresObject: "sys_notification"
+        },
+        {
+          id: "nav_account_approvals",
+          type: "object",
+          label: "Approvals",
+          objectName: "sys_approval_request",
+          viewName: "my_pending",
+          icon: "check-circle",
+          requiresObject: "sys_approval_request"
+        },
+        {
+          id: "nav_account_memberships",
+          type: "object",
+          label: "My Organizations",
+          objectName: "sys_member",
+          viewName: "mine",
+          icon: "building-2",
+          requiresObject: "sys_member"
+        }
+      ]
+    },
+    // --- Security -------------------------------------------------------
+    {
+      id: "grp_account_security",
+      type: "group",
+      label: "Security",
+      icon: "shield",
+      defaultOpen: true,
+      children: [
+        {
+          id: "nav_account_two_factor",
+          type: "object",
+          label: "Two-Factor Authentication",
+          objectName: "sys_two_factor",
+          icon: "smartphone",
+          requiresObject: "sys_two_factor"
+        },
+        {
+          id: "nav_account_linked",
+          type: "object",
+          label: "Linked Accounts",
+          objectName: "sys_account",
+          icon: "link-2",
+          requiresObject: "sys_account"
+        },
+        {
+          id: "nav_account_sessions",
+          type: "object",
+          label: "Active Sessions",
+          objectName: "sys_session",
+          viewName: "mine",
+          icon: "monitor-smartphone",
+          requiresObject: "sys_session"
+        }
+      ]
+    },
+    // --- Developer ------------------------------------------------------
+    {
+      id: "grp_account_developer",
+      type: "group",
+      label: "Developer",
+      icon: "code",
+      defaultOpen: false,
+      children: [
+        {
+          id: "nav_account_api_keys",
+          type: "object",
+          label: "API Keys",
+          objectName: "sys_api_key",
+          viewName: "mine",
+          icon: "key-round",
+          requiresObject: "sys_api_key"
+        },
+        {
+          id: "nav_account_oauth_apps",
+          type: "object",
+          label: "OAuth Applications",
+          objectName: "sys_oauth_application",
+          viewName: "mine",
+          icon: "app-window",
+          requiresObject: "sys_oauth_application"
+        }
+      ]
+    }
+    // Note: `sys_user_preference` is intentionally NOT exposed in the
+    // Account App. It's an internal key-value store the UI uses for state
+    // like `ui.recent`, `ui.favorites`, theme, sidebar collapse — not
+    // a user-curatable settings surface. A future
+    // `account:preferences_card` React component should provide the
+    // curated theme / locale / timezone / notifications toggles when we
+    // need them; until then there is no nav entry.
+  ]
+};
 var SystemOverviewDashboard = Dashboard.create({
   name: "system_overview",
   label: "System Overview",
@@ -687,6 +860,23 @@ var enObjects = {
         label: "Impersonate User",
         confirmText: "Start an impersonation session for this user? Use only for legitimate support cases \u2014 actions will be logged.",
         successMessage: "Now impersonating user"
+      },
+      update_my_profile: {
+        label: "Update Profile",
+        successMessage: "Profile updated"
+      },
+      change_my_password: {
+        label: "Change Password",
+        successMessage: "Password changed"
+      },
+      change_my_email: {
+        label: "Change Email",
+        successMessage: "Verification email sent \u2014 check the new address to confirm."
+      },
+      delete_my_account: {
+        label: "Delete My Account",
+        confirmText: "Permanently delete your account? This cannot be undone \u2014 all your sessions will be terminated and all data you own will be removed per the configured retention policy.",
+        successMessage: "Account deleted"
       }
     }
   },
@@ -811,6 +1001,16 @@ var enObjects = {
       all_links: {
         label: "All"
       }
+    },
+    _actions: {
+      link_social: {
+        label: "Link Social Account"
+      },
+      unlink_account: {
+        label: "Unlink Account",
+        confirmText: "Unlink this identity link? The user will no longer be able to sign in with this provider until they re-link it from their account settings.",
+        successMessage: "Identity link removed"
+      }
     }
   },
   sys_verification: {
@@ -939,6 +1139,11 @@ var enObjects = {
         label: "Remove Member",
         confirmText: "Remove this member from the organization? They will lose access to all org resources.",
         successMessage: "Member removed"
+      },
+      transfer_ownership: {
+        label: "Transfer Ownership",
+        confirmText: "Transfer ownership of this organization to the selected member? You will be demoted to admin and lose owner-only privileges.",
+        successMessage: "Ownership transferred"
       }
     }
   },
@@ -1018,6 +1223,15 @@ var enObjects = {
       resend_invitation: {
         label: "Resend Invitation",
         successMessage: "Invitation resent"
+      },
+      accept_invitation: {
+        label: "Accept Invitation",
+        successMessage: "Invitation accepted"
+      },
+      reject_invitation: {
+        label: "Decline Invitation",
+        confirmText: "Decline this invitation? The inviter will be notified and you will need a new invitation to join.",
+        successMessage: "Invitation declined"
       }
     }
   },
@@ -1323,13 +1537,16 @@ var enObjects = {
     },
     _actions: {
       enable_two_factor: {
-        label: "Enable 2FA",
-        successMessage: "2FA enrollment started \u2014 check response for TOTP URI and backup codes"
+        label: "Enable 2FA"
       },
       disable_two_factor: {
         label: "Disable 2FA",
         confirmText: "Disable two-factor authentication on your account?",
         successMessage: "2FA disabled"
+      },
+      regenerate_backup_codes: {
+        label: "Regenerate Backup Codes",
+        confirmText: "Regenerate backup codes? All previous backup codes will stop working immediately."
       }
     }
   },
@@ -1555,6 +1772,30 @@ var enObjects = {
       all_apps: {
         label: "All"
       }
+    },
+    _actions: {
+      disable_oauth_application: {
+        label: "Disable OAuth Application",
+        confirmText: "Disable this OAuth application? Active access/refresh tokens issued to it will continue to be rejected at the token, authorize, and introspect endpoints. Existing integrations will stop working immediately.",
+        successMessage: "OAuth application disabled"
+      },
+      enable_oauth_application: {
+        label: "Enable OAuth Application",
+        confirmText: "Re-enable this OAuth application? Token issuance, authorization, and introspection will resume immediately.",
+        successMessage: "OAuth application enabled"
+      },
+      create_oauth_application: {
+        label: "Register OAuth Application"
+      },
+      rotate_client_secret: {
+        label: "Rotate Client Secret",
+        confirmText: "Rotate this OAuth client's secret? The previous secret will stop working immediately and any integrations using it will break until they are updated with the new secret. The new secret is shown only once."
+      },
+      delete_oauth_application: {
+        label: "Delete OAuth Application",
+        confirmText: "Permanently delete this OAuth application? All issued tokens and consents will be invalidated and integrations using this client_id will stop working immediately. This cannot be undone.",
+        successMessage: "OAuth application deleted"
+      }
     }
   },
   sys_oauth_access_token: {
@@ -1756,6 +1997,26 @@ var enObjects = {
       all_roles: {
         label: "All"
       }
+    },
+    _actions: {
+      activate_role: {
+        label: "Activate Role",
+        successMessage: "Role activated"
+      },
+      deactivate_role: {
+        label: "Deactivate Role",
+        confirmText: "Deactivate this role? Users with the role keep their assignment but the role stops granting permissions until re-activated.",
+        successMessage: "Role deactivated"
+      },
+      set_default_role: {
+        label: "Set as Default",
+        confirmText: "Make this the default role for new users? Existing users are unaffected.",
+        successMessage: "Default role updated"
+      },
+      clone_role: {
+        label: "Clone Role",
+        successMessage: "Role cloned"
+      }
     }
   },
   sys_permission_set: {
@@ -1781,6 +2042,18 @@ var enObjects = {
         label: "Field Permissions",
         help: "JSON-serialized field-level read/write permissions"
       },
+      system_permissions: {
+        label: "System Permissions",
+        help: 'JSON-serialized array of system capability names (e.g. ["setup.access","studio.access","manage_users"])'
+      },
+      row_level_security: {
+        label: "Row-Level Security",
+        help: "JSON-serialized array of row-level security policies (USING/CHECK clauses)"
+      },
+      tab_permissions: {
+        label: "Tab Permissions",
+        help: "JSON-serialized map of app tab visibility (visible | hidden | default_on | default_off)"
+      },
       active: {
         label: "Active"
       },
@@ -1804,6 +2077,21 @@ var enObjects = {
       all_permsets: {
         label: "All"
       }
+    },
+    _actions: {
+      activate_permission_set: {
+        label: "Activate",
+        successMessage: "Permission set activated"
+      },
+      deactivate_permission_set: {
+        label: "Deactivate",
+        confirmText: "Deactivate this permission set? Existing assignments stay in place but stop granting access until re-activated.",
+        successMessage: "Permission set deactivated"
+      },
+      clone_permission_set: {
+        label: "Clone",
+        successMessage: "Permission set cloned"
+      }
     }
   },
   sys_user_permission_set: {
@@ -2428,6 +2716,16 @@ var enObjects = {
       all_notifications: {
         label: "All"
       }
+    },
+    _actions: {
+      mark_read: {
+        label: "Mark as Read",
+        successMessage: "Notification marked as read"
+      },
+      mark_unread: {
+        label: "Mark as Unread",
+        successMessage: "Notification marked as unread"
+      }
     }
   },
   sys_email: {
@@ -2809,6 +3107,10 @@ var enObjects = {
         label: "Snapshot",
         help: "Record snapshot at submission time"
       },
+      process_hash: {
+        label: "Process Hash",
+        help: "sha256 of the approval process body at submit time (ADR-0009 execution pinning). Resolved through sys_metadata_history so process upgrades do not affect in-flight requests."
+      },
       completed_at: {
         label: "Completed At"
       },
@@ -3251,6 +3553,17 @@ var enObjects = {
       updated_at: {
         label: "Updated At"
       }
+    },
+    _views: {
+      only_objects: {
+        label: "Objects"
+      },
+      only_fields: {
+        label: "Fields"
+      },
+      all_metadata: {
+        label: "All"
+      }
     }
   },
   sys_metadata_history: {
@@ -3261,6 +3574,10 @@ var enObjects = {
       id: {
         label: "ID"
       },
+      event_seq: {
+        label: "Event Seq",
+        help: "Per-organization monotonic event log cursor."
+      },
       name: {
         label: "Name"
       },
@@ -3294,14 +3611,13 @@ var enObjects = {
         label: "Change Note",
         help: "Description of what changed in this version"
       },
+      source: {
+        label: "Source"
+      },
       organization_id: {
         label: "Organization",
         help: "Organization for multi-tenant isolation."
       },
-      environment_id: {
-        label: "Environment ID",
-        help: "Scopes this history entry to a specific environment."
-      },
       recorded_by: {
         label: "Recorded By"
       },
@@ -3510,6 +3826,24 @@ var enObjects = {
 var en = {
   objects: enObjects,
   apps: {
+    account: {
+      label: "Account",
+      description: "Personal security and identity settings",
+      navigation: {
+        grp_account_inbox: { label: "Inbox" },
+        grp_account_security: { label: "Security" },
+        grp_account_developer: { label: "Developer" },
+        nav_account_profile: { label: "Profile" },
+        nav_account_notifications: { label: "Notifications" },
+        nav_account_approvals: { label: "Approvals" },
+        nav_account_memberships: { label: "My Organizations" },
+        nav_account_two_factor: { label: "Two-Factor Authentication" },
+        nav_account_linked: { label: "Linked Accounts" },
+        nav_account_sessions: { label: "Active Sessions" },
+        nav_account_api_keys: { label: "API Keys" },
+        nav_account_oauth_apps: { label: "OAuth Applications" }
+      }
+    },
     setup: {
       label: "Setup",
       description: "Platform settings and administration",
@@ -3563,6 +3897,40 @@ var en = {
         nav_user_preferences: { label: "User Preferences" },
         nav_metadata: { label: "All Metadata" }
       }
+    },
+    studio: {
+      label: "Studio",
+      description: "Metadata workbench for developers, analysts, and implementers",
+      navigation: {
+        group_overview: { label: "Overview" },
+        nav_metadata_directory: { label: "All Metadata Types" },
+        group_data_model: { label: "Data Model" },
+        nav_objects: { label: "Objects" },
+        nav_validations: { label: "Validations" },
+        group_ux: { label: "User Experience" },
+        nav_apps: { label: "Apps" },
+        nav_views: { label: "Views" },
+        nav_pages: { label: "Pages" },
+        nav_dashboards: { label: "Dashboards" },
+        nav_reports: { label: "Reports" },
+        group_logic: { label: "Logic" },
+        nav_actions: { label: "Actions" },
+        nav_hooks: { label: "Hooks" },
+        group_automation: { label: "Automation" },
+        nav_flows: { label: "Flows" },
+        nav_workflows: { label: "Workflow Rules" },
+        nav_approvals: { label: "Approval Processes" },
+        group_ai: { label: "AI" },
+        nav_agents: { label: "Agents" },
+        nav_tools: { label: "Tools" },
+        nav_skills: { label: "Skills" },
+        group_developer: { label: "Developer" },
+        nav_api_console: { label: "API Console" },
+        nav_flow_runs: { label: "Flow Runs" },
+        nav_public_forms: { label: "Public Forms" },
+        group_integration: { label: "Integration" },
+        nav_email_templates: { label: "Email Templates" }
+      }
     }
   },
   dashboards: {
@@ -3703,6 +4071,23 @@ var zhCNObjects = {
         label: "\u6A21\u62DF\u7528\u6237",
         confirmText: "\u8981\u4E3A\u8BE5\u7528\u6237\u542F\u52A8\u6A21\u62DF\u4F1A\u8BDD\u5417\uFF1F\u4EC5\u9650\u5408\u6CD5\u652F\u6301\u573A\u666F\u4F7F\u7528\u2014\u2014\u6240\u6709\u64CD\u4F5C\u90FD\u4F1A\u88AB\u8BB0\u5F55\u3002",
         successMessage: "\u5DF2\u5F00\u59CB\u6A21\u62DF\u8BE5\u7528\u6237"
+      },
+      update_my_profile: {
+        label: "\u66F4\u65B0\u8D44\u6599",
+        successMessage: "\u5DF2\u66F4\u65B0\u8D44\u6599"
+      },
+      change_my_password: {
+        label: "\u4FEE\u6539\u5BC6\u7801",
+        successMessage: "\u5DF2\u4FEE\u6539\u5BC6\u7801"
+      },
+      change_my_email: {
+        label: "\u4FEE\u6539\u90AE\u7BB1",
+        successMessage: "\u5DF2\u53D1\u9001\u9A8C\u8BC1\u90AE\u4EF6\uFF0C\u8BF7\u524D\u5F80\u65B0\u90AE\u7BB1\u786E\u8BA4\u3002"
+      },
+      delete_my_account: {
+        label: "\u5220\u9664\u6211\u7684\u8D26\u53F7",
+        confirmText: "Permanently delete your account? This cannot be undone \u2014 all your sessions will be terminated and all data you own will be removed per the configured retention policy.",
+        successMessage: "\u5DF2\u5220\u9664\u8D26\u53F7"
       }
     }
   },
@@ -3827,6 +4212,16 @@ var zhCNObjects = {
       all_links: {
         label: "\u5168\u90E8"
       }
+    },
+    _actions: {
+      link_social: {
+        label: "\u5173\u8054\u793E\u4EA4\u8D26\u53F7"
+      },
+      unlink_account: {
+        label: "\u89E3\u9664\u5173\u8054",
+        confirmText: "Unlink this identity link? The user will no longer be able to sign in with this provider until they re-link it from their account settings.",
+        successMessage: "\u5DF2\u89E3\u9664\u8EAB\u4EFD\u5173\u8054"
+      }
     }
   },
   sys_verification: {
@@ -3955,6 +4350,11 @@ var zhCNObjects = {
         label: "\u79FB\u9664\u6210\u5458",
         confirmText: "\u8981\u5C06\u8BE5\u6210\u5458\u79FB\u51FA\u7EC4\u7EC7\u5417\uFF1F\u79FB\u9664\u540E\u5176\u5C06\u5931\u53BB\u5BF9\u8BE5\u7EC4\u7EC7\u6240\u6709\u8D44\u6E90\u7684\u8BBF\u95EE\u6743\u9650\u3002",
         successMessage: "\u6210\u5458\u5DF2\u79FB\u9664"
+      },
+      transfer_ownership: {
+        label: "\u8F6C\u79FB\u6240\u6709\u6743",
+        confirmText: "Transfer ownership of this organization to the selected member? You will be demoted to admin and lose owner-only privileges.",
+        successMessage: "\u5DF2\u8F6C\u79FB\u6240\u6709\u6743"
       }
     }
   },
@@ -4034,6 +4434,15 @@ var zhCNObjects = {
       resend_invitation: {
         label: "\u91CD\u65B0\u53D1\u9001\u9080\u8BF7",
         successMessage: "\u9080\u8BF7\u5DF2\u91CD\u65B0\u53D1\u9001"
+      },
+      accept_invitation: {
+        label: "\u63A5\u53D7\u9080\u8BF7",
+        successMessage: "\u5DF2\u63A5\u53D7\u9080\u8BF7"
+      },
+      reject_invitation: {
+        label: "\u62D2\u7EDD\u9080\u8BF7",
+        confirmText: "Decline this invitation? The inviter will be notified and you will need a new invitation to join.",
+        successMessage: "\u5DF2\u62D2\u7EDD\u9080\u8BF7"
       }
     }
   },
@@ -4339,13 +4748,16 @@ var zhCNObjects = {
     },
     _actions: {
       enable_two_factor: {
-        label: "\u542F\u7528 2FA",
-        successMessage: "2FA \u542F\u7528\u6D41\u7A0B\u5DF2\u5F00\u59CB\u2014\u2014\u8BF7\u67E5\u770B\u54CD\u5E94\u4E2D\u7684 TOTP URI \u548C\u5907\u7528\u6062\u590D\u7801"
+        label: "\u542F\u7528 2FA"
       },
       disable_two_factor: {
         label: "\u505C\u7528 2FA",
         confirmText: "\u8981\u505C\u7528\u4F60\u8D26\u53F7\u4E0A\u7684\u53CC\u56E0\u7D20\u8BA4\u8BC1\u5417\uFF1F",
         successMessage: "2FA \u5DF2\u505C\u7528"
+      },
+      regenerate_backup_codes: {
+        label: "\u91CD\u65B0\u751F\u6210\u5907\u7528\u7801",
+        confirmText: "Regenerate backup codes? All previous backup codes will stop working immediately."
       }
     }
   },
@@ -4571,6 +4983,30 @@ var zhCNObjects = {
       all_apps: {
         label: "\u5168\u90E8"
       }
+    },
+    _actions: {
+      disable_oauth_application: {
+        label: "Disable OAuth Application",
+        confirmText: "Disable this OAuth application? Active access/refresh tokens issued to it will continue to be rejected at the token, authorize, and introspect endpoints. Existing integrations will stop working immediately.",
+        successMessage: "OAuth application disabled"
+      },
+      enable_oauth_application: {
+        label: "Enable OAuth Application",
+        confirmText: "Re-enable this OAuth application? Token issuance, authorization, and introspection will resume immediately.",
+        successMessage: "OAuth application enabled"
+      },
+      create_oauth_application: {
+        label: "Register OAuth Application"
+      },
+      rotate_client_secret: {
+        label: "\u8F6E\u6362 Client Secret",
+        confirmText: "Rotate this OAuth client's secret? The previous secret will stop working immediately and any integrations using it will break until they are updated with the new secret. The new secret is shown only once."
+      },
+      delete_oauth_application: {
+        label: "Delete OAuth Application",
+        confirmText: "Permanently delete this OAuth application? All issued tokens and consents will be invalidated and integrations using this client_id will stop working immediately. This cannot be undone.",
+        successMessage: "OAuth application deleted"
+      }
     }
   },
   sys_oauth_access_token: {
@@ -4772,6 +5208,26 @@ var zhCNObjects = {
       all_roles: {
         label: "\u5168\u90E8"
       }
+    },
+    _actions: {
+      activate_role: {
+        label: "\u6FC0\u6D3B\u89D2\u8272",
+        successMessage: "\u89D2\u8272\u5DF2\u6FC0\u6D3B"
+      },
+      deactivate_role: {
+        label: "\u505C\u7528\u89D2\u8272",
+        confirmText: "Deactivate this role? Users with the role keep their assignment but the role stops granting permissions until re-activated.",
+        successMessage: "\u89D2\u8272\u5DF2\u505C\u7528"
+      },
+      set_default_role: {
+        label: "\u8BBE\u4E3A\u9ED8\u8BA4",
+        confirmText: "Make this the default role for new users? Existing users are unaffected.",
+        successMessage: "\u5DF2\u66F4\u65B0\u9ED8\u8BA4\u89D2\u8272"
+      },
+      clone_role: {
+        label: "\u514B\u9686\u89D2\u8272",
+        successMessage: "\u5DF2\u514B\u9686\u89D2\u8272"
+      }
     }
   },
   sys_permission_set: {
@@ -4797,6 +5253,18 @@ var zhCNObjects = {
         label: "\u5B57\u6BB5\u6743\u9650",
         help: "\u5B57\u6BB5\u7EA7\u8BFB\u5199\u6743\u9650\u7684 JSON \u5E8F\u5217\u5316\u5185\u5BB9"
       },
+      system_permissions: {
+        label: "System Permissions",
+        help: 'JSON-serialized array of system capability names (e.g. ["setup.access","studio.access","manage_users"])'
+      },
+      row_level_security: {
+        label: "Row-Level Security",
+        help: "JSON-serialized array of row-level security policies (USING/CHECK clauses)"
+      },
+      tab_permissions: {
+        label: "Tab Permissions",
+        help: "JSON-serialized map of app tab visibility (visible | hidden | default_on | default_off)"
+      },
       active: {
         label: "\u542F\u7528"
       },
@@ -4820,6 +5288,21 @@ var zhCNObjects = {
       all_permsets: {
         label: "\u5168\u90E8"
       }
+    },
+    _actions: {
+      activate_permission_set: {
+        label: "\u6FC0\u6D3B",
+        successMessage: "\u6743\u9650\u96C6\u5DF2\u6FC0\u6D3B"
+      },
+      deactivate_permission_set: {
+        label: "\u505C\u7528",
+        confirmText: "Deactivate this permission set? Existing assignments stay in place but stop granting access until re-activated.",
+        successMessage: "\u6743\u9650\u96C6\u5DF2\u505C\u7528"
+      },
+      clone_permission_set: {
+        label: "\u514B\u9686",
+        successMessage: "\u5DF2\u514B\u9686\u6743\u9650\u96C6"
+      }
     }
   },
   sys_user_permission_set: {
@@ -5444,6 +5927,16 @@ var zhCNObjects = {
       all_notifications: {
         label: "\u5168\u90E8"
       }
+    },
+    _actions: {
+      mark_read: {
+        label: "\u6807\u8BB0\u4E3A\u5DF2\u8BFB",
+        successMessage: "\u5DF2\u6807\u8BB0\u4E3A\u5DF2\u8BFB"
+      },
+      mark_unread: {
+        label: "\u6807\u8BB0\u4E3A\u672A\u8BFB",
+        successMessage: "\u5DF2\u6807\u8BB0\u4E3A\u672A\u8BFB"
+      }
     }
   },
   sys_email: {
@@ -5825,6 +6318,10 @@ var zhCNObjects = {
         label: "\u5FEB\u7167",
         help: "\u63D0\u4EA4\u65F6\u7684\u8BB0\u5F55\u5FEB\u7167"
       },
+      process_hash: {
+        label: "Process Hash",
+        help: "sha256 of the approval process body at submit time (ADR-0009 execution pinning). Resolved through sys_metadata_history so process upgrades do not affect in-flight requests."
+      },
       completed_at: {
         label: "\u5B8C\u6210\u65F6\u95F4"
       },
@@ -5837,11 +6334,7 @@ var zhCNObjects = {
     },
     _views: {
       my_pending: {
-        label: "\u6211\u7684\u5F85\u529E",
-        emptyState: {
-          title: "\u6682\u65E0\u5F85\u5BA1\u6279",
-          message: "\u60A8\u5DF2\u5904\u7406\u5B8C\u6240\u6709\u5F85\u529E\u3002"
-        }
+        label: "\u6211\u7684\u5F85\u529E"
       },
       submitted_by_me: {
         label: "\u6211\u63D0\u4EA4\u7684"
@@ -6271,6 +6764,17 @@ var zhCNObjects = {
       updated_at: {
         label: "\u66F4\u65B0\u65F6\u95F4"
       }
+    },
+    _views: {
+      only_objects: {
+        label: "Objects"
+      },
+      only_fields: {
+        label: "Fields"
+      },
+      all_metadata: {
+        label: "All"
+      }
     }
   },
   sys_metadata_history: {
@@ -6281,6 +6785,10 @@ var zhCNObjects = {
       id: {
         label: "ID"
       },
+      event_seq: {
+        label: "Event Seq",
+        help: "Per-organization monotonic event log cursor."
+      },
       name: {
         label: "\u540D\u79F0"
       },
@@ -6314,14 +6822,13 @@ var zhCNObjects = {
         label: "\u53D8\u66F4\u8BF4\u660E",
         help: "\u5BF9\u8BE5\u7248\u672C\u53D8\u66F4\u5185\u5BB9\u7684\u8BF4\u660E"
       },
+      source: {
+        label: "Source"
+      },
       organization_id: {
         label: "\u7EC4\u7EC7",
         help: "\u7528\u4E8E\u591A\u79DF\u6237\u9694\u79BB\u7684\u7EC4\u7EC7\u3002"
       },
-      environment_id: {
-        label: "\u73AF\u5883 ID",
-        help: "\u5C06\u8BE5\u5386\u53F2\u8BB0\u5F55\u9650\u5B9A\u5230\u7279\u5B9A\u73AF\u5883\u3002"
-      },
       recorded_by: {
         label: "\u8BB0\u5F55\u4EBA"
       },
@@ -6530,6 +7037,24 @@ var zhCNObjects = {
 var zhCN = {
   objects: zhCNObjects,
   apps: {
+    account: {
+      label: "\u8D26\u6237",
+      description: "\u4E2A\u4EBA\u5B89\u5168\u4E0E\u8EAB\u4EFD\u8BBE\u7F6E",
+      navigation: {
+        grp_account_inbox: { label: "\u6536\u4EF6\u7BB1" },
+        grp_account_security: { label: "\u5B89\u5168" },
+        grp_account_developer: { label: "\u5F00\u53D1\u8005" },
+        nav_account_profile: { label: "\u4E2A\u4EBA\u8D44\u6599" },
+        nav_account_notifications: { label: "\u901A\u77E5" },
+        nav_account_approvals: { label: "\u5F85\u6211\u5BA1\u6279" },
+        nav_account_memberships: { label: "\u6211\u7684\u7EC4\u7EC7" },
+        nav_account_two_factor: { label: "\u53CC\u91CD\u8BA4\u8BC1" },
+        nav_account_linked: { label: "\u5DF2\u5173\u8054\u8D26\u6237" },
+        nav_account_sessions: { label: "\u6D3B\u52A8\u4F1A\u8BDD" },
+        nav_account_api_keys: { label: "API \u5BC6\u94A5" },
+        nav_account_oauth_apps: { label: "OAuth \u5E94\u7528" }
+      }
+    },
     setup: {
       label: "\u7CFB\u7EDF\u8BBE\u7F6E",
       description: "\u5E73\u53F0\u8BBE\u7F6E\u4E0E\u7BA1\u7406",
@@ -6574,6 +7099,40 @@ var zhCN = {
         nav_user_preferences: { label: "\u7528\u6237\u504F\u597D" },
         nav_metadata: { label: "\u5168\u90E8\u5143\u6570\u636E" }
       }
+    },
+    studio: {
+      label: "Studio",
+      description: "\u9762\u5411\u5F00\u53D1\u8005\u3001\u5206\u6790\u5E08\u4E0E\u5B9E\u65BD\u8005\u7684\u5143\u6570\u636E\u5DE5\u4F5C\u53F0",
+      navigation: {
+        group_overview: { label: "\u603B\u89C8" },
+        nav_metadata_directory: { label: "\u5168\u90E8\u5143\u6570\u636E\u7C7B\u578B" },
+        group_data_model: { label: "\u6570\u636E\u6A21\u578B" },
+        nav_objects: { label: "\u5BF9\u8C61" },
+        nav_validations: { label: "\u6821\u9A8C\u89C4\u5219" },
+        group_ux: { label: "\u7528\u6237\u4F53\u9A8C" },
+        nav_apps: { label: "\u5E94\u7528" },
+        nav_views: { label: "\u89C6\u56FE" },
+        nav_pages: { label: "\u9875\u9762" },
+        nav_dashboards: { label: "\u4EEA\u8868\u76D8" },
+        nav_reports: { label: "\u62A5\u8868" },
+        group_logic: { label: "\u903B\u8F91" },
+        nav_actions: { label: "\u52A8\u4F5C" },
+        nav_hooks: { label: "\u94A9\u5B50" },
+        group_automation: { label: "\u81EA\u52A8\u5316" },
+        nav_flows: { label: "\u6D41\u7A0B" },
+        nav_workflows: { label: "\u5DE5\u4F5C\u6D41\u89C4\u5219" },
+        nav_approvals: { label: "\u5BA1\u6279\u6D41\u7A0B" },
+        group_ai: { label: "AI" },
+        nav_agents: { label: "\u667A\u80FD\u4F53" },
+        nav_tools: { label: "\u5DE5\u5177" },
+        nav_skills: { label: "\u6280\u80FD" },
+        group_developer: { label: "\u5F00\u53D1\u8005" },
+        nav_api_console: { label: "API \u63A7\u5236\u53F0" },
+        nav_flow_runs: { label: "\u6D41\u7A0B\u8FD0\u884C\u8BB0\u5F55" },
+        nav_public_forms: { label: "\u516C\u5F00\u8868\u5355" },
+        group_integration: { label: "\u96C6\u6210" },
+        nav_email_templates: { label: "\u90AE\u4EF6\u6A21\u677F" }
+      }
     }
   },
   dashboards: {
@@ -6684,6 +7243,23 @@ var jaJPObjects = {
         label: "\u4EE3\u7406\u30ED\u30B0\u30A4\u30F3",
         confirmText: "\u3053\u306E\u30E6\u30FC\u30B6\u30FC\u3068\u3057\u3066\u4EE3\u7406\u30ED\u30B0\u30A4\u30F3\u3092\u958B\u59CB\u3057\u307E\u3059\u304B\uFF1F\u6B63\u5F53\u306A\u30B5\u30DD\u30FC\u30C8\u5BFE\u5FDC\u6642\u306E\u307F\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u64CD\u4F5C\u306F\u76E3\u67FB\u30ED\u30B0\u306B\u8A18\u9332\u3055\u308C\u307E\u3059\u3002",
         successMessage: "\u4EE3\u7406\u30ED\u30B0\u30A4\u30F3\u4E2D"
+      },
+      update_my_profile: {
+        label: "\u30D7\u30ED\u30D5\u30A3\u30FC\u30EB\u66F4\u65B0",
+        successMessage: "\u30D7\u30ED\u30D5\u30A3\u30FC\u30EB\u3092\u66F4\u65B0\u3057\u307E\u3057\u305F"
+      },
+      change_my_password: {
+        label: "\u30D1\u30B9\u30EF\u30FC\u30C9\u5909\u66F4",
+        successMessage: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u5909\u66F4\u3057\u307E\u3057\u305F"
+      },
+      change_my_email: {
+        label: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u5909\u66F4",
+        successMessage: "\u78BA\u8A8D\u30E1\u30FC\u30EB\u3092\u9001\u4FE1\u3057\u307E\u3057\u305F\u3002\u65B0\u3057\u3044\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u3067\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002"
+      },
+      delete_my_account: {
+        label: "\u30A2\u30AB\u30A6\u30F3\u30C8\u524A\u9664",
+        confirmText: "Permanently delete your account? This cannot be undone \u2014 all your sessions will be terminated and all data you own will be removed per the configured retention policy.",
+        successMessage: "\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u524A\u9664\u3057\u307E\u3057\u305F"
       }
     }
   },
@@ -6808,6 +7384,16 @@ var jaJPObjects = {
       all_links: {
         label: "\u3059\u3079\u3066"
       }
+    },
+    _actions: {
+      link_social: {
+        label: "\u30BD\u30FC\u30B7\u30E3\u30EB\u30A2\u30AB\u30A6\u30F3\u30C8\u9023\u643A"
+      },
+      unlink_account: {
+        label: "\u9023\u643A\u89E3\u9664",
+        confirmText: "Unlink this identity link? The user will no longer be able to sign in with this provider until they re-link it from their account settings.",
+        successMessage: "\u30A2\u30A4\u30C7\u30F3\u30C6\u30A3\u30C6\u30A3\u9023\u643A\u3092\u89E3\u9664\u3057\u307E\u3057\u305F"
+      }
     }
   },
   sys_verification: {
@@ -6936,6 +7522,11 @@ var jaJPObjects = {
         label: "\u30E1\u30F3\u30D0\u30FC\u3092\u524A\u9664",
         confirmText: "\u3053\u306E\u30E1\u30F3\u30D0\u30FC\u3092\u7D44\u7E54\u304B\u3089\u524A\u9664\u3057\u307E\u3059\u304B\uFF1F\u7D44\u7E54\u306E\u3059\u3079\u3066\u306E\u30EA\u30BD\u30FC\u30B9\u3078\u306E\u30A2\u30AF\u30BB\u30B9\u3092\u5931\u3044\u307E\u3059\u3002",
         successMessage: "\u30E1\u30F3\u30D0\u30FC\u3092\u524A\u9664\u3057\u307E\u3057\u305F"
+      },
+      transfer_ownership: {
+        label: "\u6240\u6709\u6A29\u306E\u79FB\u8B72",
+        confirmText: "Transfer ownership of this organization to the selected member? You will be demoted to admin and lose owner-only privileges.",
+        successMessage: "\u6240\u6709\u6A29\u3092\u79FB\u8B72\u3057\u307E\u3057\u305F"
       }
     }
   },
@@ -7015,6 +7606,15 @@ var jaJPObjects = {
       resend_invitation: {
         label: "\u62DB\u5F85\u3092\u518D\u9001",
         successMessage: "\u62DB\u5F85\u3092\u518D\u9001\u3057\u307E\u3057\u305F"
+      },
+      accept_invitation: {
+        label: "\u62DB\u5F85\u3092\u53D7\u8AFE",
+        successMessage: "\u62DB\u5F85\u3092\u53D7\u8AFE\u3057\u307E\u3057\u305F"
+      },
+      reject_invitation: {
+        label: "\u62DB\u5F85\u3092\u8F9E\u9000",
+        confirmText: "Decline this invitation? The inviter will be notified and you will need a new invitation to join.",
+        successMessage: "\u62DB\u5F85\u3092\u8F9E\u9000\u3057\u307E\u3057\u305F"
       }
     }
   },
@@ -7320,13 +7920,16 @@ var jaJPObjects = {
     },
     _actions: {
       enable_two_factor: {
-        label: "2FA \u3092\u6709\u52B9\u5316",
-        successMessage: "2FA \u767B\u9332\u3092\u958B\u59CB\u3057\u307E\u3057\u305F \u2014 \u30EC\u30B9\u30DD\u30F3\u30B9\u3067 TOTP URI \u3068\u30D0\u30C3\u30AF\u30A2\u30C3\u30D7\u30B3\u30FC\u30C9\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044"
+        label: "2FA \u3092\u6709\u52B9\u5316"
       },
       disable_two_factor: {
         label: "2FA \u3092\u7121\u52B9\u5316",
         confirmText: "\u30A2\u30AB\u30A6\u30F3\u30C8\u306E\u4E8C\u8981\u7D20\u8A8D\u8A3C\u3092\u7121\u52B9\u5316\u3057\u307E\u3059\u304B\uFF1F",
         successMessage: "2FA \u3092\u7121\u52B9\u5316\u3057\u307E\u3057\u305F"
+      },
+      regenerate_backup_codes: {
+        label: "\u30D0\u30C3\u30AF\u30A2\u30C3\u30D7\u30B3\u30FC\u30C9\u518D\u751F\u6210",
+        confirmText: "Regenerate backup codes? All previous backup codes will stop working immediately."
       }
     }
   },
@@ -7552,6 +8155,30 @@ var jaJPObjects = {
       all_apps: {
         label: "\u3059\u3079\u3066"
       }
+    },
+    _actions: {
+      disable_oauth_application: {
+        label: "Disable OAuth Application",
+        confirmText: "Disable this OAuth application? Active access/refresh tokens issued to it will continue to be rejected at the token, authorize, and introspect endpoints. Existing integrations will stop working immediately.",
+        successMessage: "OAuth application disabled"
+      },
+      enable_oauth_application: {
+        label: "Enable OAuth Application",
+        confirmText: "Re-enable this OAuth application? Token issuance, authorization, and introspection will resume immediately.",
+        successMessage: "OAuth application enabled"
+      },
+      create_oauth_application: {
+        label: "Register OAuth Application"
+      },
+      rotate_client_secret: {
+        label: "\u30AF\u30E9\u30A4\u30A2\u30F3\u30C8\u30B7\u30FC\u30AF\u30EC\u30C3\u30C8\u66F4\u65B0",
+        confirmText: "Rotate this OAuth client's secret? The previous secret will stop working immediately and any integrations using it will break until they are updated with the new secret. The new secret is shown only once."
+      },
+      delete_oauth_application: {
+        label: "Delete OAuth Application",
+        confirmText: "Permanently delete this OAuth application? All issued tokens and consents will be invalidated and integrations using this client_id will stop working immediately. This cannot be undone.",
+        successMessage: "OAuth application deleted"
+      }
     }
   },
   sys_oauth_access_token: {
@@ -7753,6 +8380,26 @@ var jaJPObjects = {
       all_roles: {
         label: "\u3059\u3079\u3066"
       }
+    },
+    _actions: {
+      activate_role: {
+        label: "\u30ED\u30FC\u30EB\u3092\u6709\u52B9\u5316",
+        successMessage: "\u30ED\u30FC\u30EB\u304C\u6709\u52B9\u5316\u3055\u308C\u307E\u3057\u305F"
+      },
+      deactivate_role: {
+        label: "\u30ED\u30FC\u30EB\u3092\u7121\u52B9\u5316",
+        confirmText: "Deactivate this role? Users with the role keep their assignment but the role stops granting permissions until re-activated.",
+        successMessage: "\u30ED\u30FC\u30EB\u304C\u7121\u52B9\u5316\u3055\u308C\u307E\u3057\u305F"
+      },
+      set_default_role: {
+        label: "\u30C7\u30D5\u30A9\u30EB\u30C8\u306B\u8A2D\u5B9A",
+        confirmText: "Make this the default role for new users? Existing users are unaffected.",
+        successMessage: "\u30C7\u30D5\u30A9\u30EB\u30C8\u30ED\u30FC\u30EB\u3092\u66F4\u65B0\u3057\u307E\u3057\u305F"
+      },
+      clone_role: {
+        label: "\u30ED\u30FC\u30EB\u3092\u8907\u88FD",
+        successMessage: "\u30ED\u30FC\u30EB\u3092\u8907\u88FD\u3057\u307E\u3057\u305F"
+      }
     }
   },
   sys_permission_set: {
@@ -7778,6 +8425,18 @@ var jaJPObjects = {
         label: "\u30D5\u30A3\u30FC\u30EB\u30C9\u6A29\u9650",
         help: "JSON \u30B7\u30EA\u30A2\u30E9\u30A4\u30BA\u3055\u308C\u305F\u30D5\u30A3\u30FC\u30EB\u30C9\u30EC\u30D9\u30EB\u306E\u8AAD\u307F\u53D6\u308A/\u66F8\u304D\u8FBC\u307F\u6A29\u9650"
       },
+      system_permissions: {
+        label: "System Permissions",
+        help: 'JSON-serialized array of system capability names (e.g. ["setup.access","studio.access","manage_users"])'
+      },
+      row_level_security: {
+        label: "Row-Level Security",
+        help: "JSON-serialized array of row-level security policies (USING/CHECK clauses)"
+      },
+      tab_permissions: {
+        label: "Tab Permissions",
+        help: "JSON-serialized map of app tab visibility (visible | hidden | default_on | default_off)"
+      },
       active: {
         label: "\u6709\u52B9"
       },
@@ -7801,6 +8460,21 @@ var jaJPObjects = {
       all_permsets: {
         label: "\u3059\u3079\u3066"
       }
+    },
+    _actions: {
+      activate_permission_set: {
+        label: "\u6709\u52B9\u5316",
+        successMessage: "\u6A29\u9650\u30BB\u30C3\u30C8\u304C\u6709\u52B9\u5316\u3055\u308C\u307E\u3057\u305F"
+      },
+      deactivate_permission_set: {
+        label: "\u7121\u52B9\u5316",
+        confirmText: "Deactivate this permission set? Existing assignments stay in place but stop granting access until re-activated.",
+        successMessage: "\u6A29\u9650\u30BB\u30C3\u30C8\u304C\u7121\u52B9\u5316\u3055\u308C\u307E\u3057\u305F"
+      },
+      clone_permission_set: {
+        label: "\u8907\u88FD",
+        successMessage: "\u6A29\u9650\u30BB\u30C3\u30C8\u3092\u8907\u88FD\u3057\u307E\u3057\u305F"
+      }
     }
   },
   sys_user_permission_set: {
@@ -8425,6 +9099,16 @@ var jaJPObjects = {
       all_notifications: {
         label: "\u3059\u3079\u3066"
       }
+    },
+    _actions: {
+      mark_read: {
+        label: "\u65E2\u8AAD\u306B\u3059\u308B",
+        successMessage: "\u901A\u77E5\u3092\u65E2\u8AAD\u306B\u3057\u307E\u3057\u305F"
+      },
+      mark_unread: {
+        label: "\u672A\u8AAD\u306B\u3059\u308B",
+        successMessage: "\u901A\u77E5\u3092\u672A\u8AAD\u306B\u3057\u307E\u3057\u305F"
+      }
     }
   },
   sys_email: {
@@ -8806,6 +9490,10 @@ var jaJPObjects = {
         label: "\u30B9\u30CA\u30C3\u30D7\u30B7\u30E7\u30C3\u30C8",
         help: "\u9001\u4FE1\u6642\u306E\u30EC\u30B3\u30FC\u30C9\u30B9\u30CA\u30C3\u30D7\u30B7\u30E7\u30C3\u30C8"
       },
+      process_hash: {
+        label: "Process Hash",
+        help: "sha256 of the approval process body at submit time (ADR-0009 execution pinning). Resolved through sys_metadata_history so process upgrades do not affect in-flight requests."
+      },
       completed_at: {
         label: "\u5B8C\u4E86\u65E5\u6642"
       },
@@ -9248,6 +9936,17 @@ var jaJPObjects = {
       updated_at: {
         label: "\u66F4\u65B0\u65E5\u6642"
       }
+    },
+    _views: {
+      only_objects: {
+        label: "Objects"
+      },
+      only_fields: {
+        label: "Fields"
+      },
+      all_metadata: {
+        label: "All"
+      }
     }
   },
   sys_metadata_history: {
@@ -9258,6 +9957,10 @@ var jaJPObjects = {
       id: {
         label: "ID"
       },
+      event_seq: {
+        label: "Event Seq",
+        help: "Per-organization monotonic event log cursor."
+      },
       name: {
         label: "\u540D\u524D"
       },
@@ -9291,14 +9994,13 @@ var jaJPObjects = {
         label: "\u5909\u66F4\u30E1\u30E2",
         help: "\u3053\u306E\u30D0\u30FC\u30B8\u30E7\u30F3\u3067\u5909\u66F4\u3055\u308C\u305F\u5185\u5BB9\u306E\u8AAC\u660E"
       },
+      source: {
+        label: "Source"
+      },
       organization_id: {
         label: "\u7D44\u7E54",
         help: "\u30DE\u30EB\u30C1\u30C6\u30CA\u30F3\u30C8\u5206\u96E2\u306E\u305F\u3081\u306E\u7D44\u7E54\u3002"
       },
-      environment_id: {
-        label: "\u74B0\u5883 ID",
-        help: "\u3053\u306E\u5C65\u6B74\u30A8\u30F3\u30C8\u30EA\u3092\u7279\u5B9A\u306E\u74B0\u5883\u306B\u30B9\u30B3\u30FC\u30D7\u3057\u307E\u3059\u3002"
-      },
       recorded_by: {
         label: "\u8A18\u9332\u8005"
       },
@@ -9507,6 +10209,24 @@ var jaJPObjects = {
 var jaJP = {
   objects: jaJPObjects,
   apps: {
+    account: {
+      label: "\u30A2\u30AB\u30A6\u30F3\u30C8",
+      description: "\u500B\u4EBA\u306E\u30BB\u30AD\u30E5\u30EA\u30C6\u30A3\u3068\u30A2\u30A4\u30C7\u30F3\u30C6\u30A3\u30C6\u30A3\u8A2D\u5B9A",
+      navigation: {
+        grp_account_inbox: { label: "\u53D7\u4FE1\u7BB1" },
+        grp_account_security: { label: "\u30BB\u30AD\u30E5\u30EA\u30C6\u30A3" },
+        grp_account_developer: { label: "\u958B\u767A\u8005" },
+        nav_account_profile: { label: "\u30D7\u30ED\u30D5\u30A3\u30FC\u30EB" },
+        nav_account_notifications: { label: "\u901A\u77E5" },
+        nav_account_approvals: { label: "\u627F\u8A8D\u5F85\u3061" },
+        nav_account_memberships: { label: "\u6240\u5C5E\u7D44\u7E54" },
+        nav_account_two_factor: { label: "\u4E8C\u8981\u7D20\u8A8D\u8A3C" },
+        nav_account_linked: { label: "\u9023\u643A\u30A2\u30AB\u30A6\u30F3\u30C8" },
+        nav_account_sessions: { label: "\u30A2\u30AF\u30C6\u30A3\u30D6\u30BB\u30C3\u30B7\u30E7\u30F3" },
+        nav_account_api_keys: { label: "API \u30AD\u30FC" },
+        nav_account_oauth_apps: { label: "OAuth \u30A2\u30D7\u30EA\u30B1\u30FC\u30B7\u30E7\u30F3" }
+      }
+    },
     setup: {
       label: "\u30BB\u30C3\u30C8\u30A2\u30C3\u30D7",
       description: "\u30D7\u30E9\u30C3\u30C8\u30D5\u30A9\u30FC\u30E0\u8A2D\u5B9A\u3068\u7BA1\u7406",
@@ -9551,6 +10271,40 @@ var jaJP = {
         nav_user_preferences: { label: "\u30E6\u30FC\u30B6\u30FC\u8A2D\u5B9A" },
         nav_metadata: { label: "\u3059\u3079\u3066\u306E\u30E1\u30BF\u30C7\u30FC\u30BF" }
       }
+    },
+    studio: {
+      label: "Studio",
+      description: "\u958B\u767A\u8005\u30FB\u30A2\u30CA\u30EA\u30B9\u30C8\u30FB\u5B9F\u88C5\u62C5\u5F53\u8005\u5411\u3051\u306E\u30E1\u30BF\u30C7\u30FC\u30BF\u30EF\u30FC\u30AF\u30D9\u30F3\u30C1",
+      navigation: {
+        group_overview: { label: "\u6982\u8981" },
+        nav_metadata_directory: { label: "\u3059\u3079\u3066\u306E\u30E1\u30BF\u30C7\u30FC\u30BF\u30BF\u30A4\u30D7" },
+        group_data_model: { label: "\u30C7\u30FC\u30BF\u30E2\u30C7\u30EB" },
+        nav_objects: { label: "\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8" },
+        nav_validations: { label: "\u30D0\u30EA\u30C7\u30FC\u30B7\u30E7\u30F3" },
+        group_ux: { label: "\u30E6\u30FC\u30B6\u30FC\u4F53\u9A13" },
+        nav_apps: { label: "\u30A2\u30D7\u30EA" },
+        nav_views: { label: "\u30D3\u30E5\u30FC" },
+        nav_pages: { label: "\u30DA\u30FC\u30B8" },
+        nav_dashboards: { label: "\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9" },
+        nav_reports: { label: "\u30EC\u30DD\u30FC\u30C8" },
+        group_logic: { label: "\u30ED\u30B8\u30C3\u30AF" },
+        nav_actions: { label: "\u30A2\u30AF\u30B7\u30E7\u30F3" },
+        nav_hooks: { label: "\u30D5\u30C3\u30AF" },
+        group_automation: { label: "\u81EA\u52D5\u5316" },
+        nav_flows: { label: "\u30D5\u30ED\u30FC" },
+        nav_workflows: { label: "\u30EF\u30FC\u30AF\u30D5\u30ED\u30FC\u30EB\u30FC\u30EB" },
+        nav_approvals: { label: "\u627F\u8A8D\u30D7\u30ED\u30BB\u30B9" },
+        group_ai: { label: "AI" },
+        nav_agents: { label: "\u30A8\u30FC\u30B8\u30A7\u30F3\u30C8" },
+        nav_tools: { label: "\u30C4\u30FC\u30EB" },
+        nav_skills: { label: "\u30B9\u30AD\u30EB" },
+        group_developer: { label: "\u958B\u767A\u8005" },
+        nav_api_console: { label: "API \u30B3\u30F3\u30BD\u30FC\u30EB" },
+        nav_flow_runs: { label: "\u30D5\u30ED\u30FC\u5B9F\u884C\u5C65\u6B74" },
+        nav_public_forms: { label: "\u516C\u958B\u30D5\u30A9\u30FC\u30E0" },
+        group_integration: { label: "\u9023\u643A" },
+        nav_email_templates: { label: "\u30E1\u30FC\u30EB\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8" }
+      }
     }
   },
   dashboards: {
@@ -9661,6 +10415,23 @@ var esESObjects = {
         label: "Suplantar usuario",
         confirmText: "\xBFIniciar una sesi\xF3n de suplantaci\xF3n para este usuario? \xDAsela solo para casos leg\xEDtimos de soporte; las acciones se registrar\xE1n.",
         successMessage: "Ahora est\xE1 suplantando al usuario"
+      },
+      update_my_profile: {
+        label: "Actualizar perfil",
+        successMessage: "Perfil actualizado"
+      },
+      change_my_password: {
+        label: "Cambiar contrase\xF1a",
+        successMessage: "Contrase\xF1a cambiada"
+      },
+      change_my_email: {
+        label: "Cambiar correo",
+        successMessage: "Correo de verificaci\xF3n enviado; revisa la nueva direcci\xF3n para confirmar."
+      },
+      delete_my_account: {
+        label: "Eliminar mi cuenta",
+        confirmText: "Permanently delete your account? This cannot be undone \u2014 all your sessions will be terminated and all data you own will be removed per the configured retention policy.",
+        successMessage: "Cuenta eliminada"
       }
     }
   },
@@ -9785,6 +10556,16 @@ var esESObjects = {
       all_links: {
         label: "Todos"
       }
+    },
+    _actions: {
+      link_social: {
+        label: "Vincular cuenta social"
+      },
+      unlink_account: {
+        label: "Desvincular cuenta",
+        confirmText: "Unlink this identity link? The user will no longer be able to sign in with this provider until they re-link it from their account settings.",
+        successMessage: "V\xEDnculo de identidad eliminado"
+      }
     }
   },
   sys_verification: {
@@ -9913,6 +10694,11 @@ var esESObjects = {
         label: "Eliminar miembro",
         confirmText: "\xBFEliminar a este miembro de la organizaci\xF3n? Perder\xE1 el acceso a todos los recursos de la organizaci\xF3n.",
         successMessage: "Miembro eliminado"
+      },
+      transfer_ownership: {
+        label: "Transferir propiedad",
+        confirmText: "Transfer ownership of this organization to the selected member? You will be demoted to admin and lose owner-only privileges.",
+        successMessage: "Propiedad transferida"
       }
     }
   },
@@ -9992,6 +10778,15 @@ var esESObjects = {
       resend_invitation: {
         label: "Reenviar invitaci\xF3n",
         successMessage: "Invitaci\xF3n reenviada"
+      },
+      accept_invitation: {
+        label: "Aceptar invitaci\xF3n",
+        successMessage: "Invitaci\xF3n aceptada"
+      },
+      reject_invitation: {
+        label: "Rechazar invitaci\xF3n",
+        confirmText: "Decline this invitation? The inviter will be notified and you will need a new invitation to join.",
+        successMessage: "Invitaci\xF3n rechazada"
       }
     }
   },
@@ -10297,13 +11092,16 @@ var esESObjects = {
     },
     _actions: {
       enable_two_factor: {
-        label: "Habilitar 2FA",
-        successMessage: "Se ha iniciado la configuraci\xF3n de 2FA; consulte la respuesta para ver la URI TOTP y los c\xF3digos de respaldo."
+        label: "Habilitar 2FA"
       },
       disable_two_factor: {
         label: "Deshabilitar 2FA",
         confirmText: "\xBFDeshabilitar la autenticaci\xF3n de doble factor en su cuenta?",
         successMessage: "2FA deshabilitado"
+      },
+      regenerate_backup_codes: {
+        label: "Regenerar c\xF3digos de respaldo",
+        confirmText: "Regenerate backup codes? All previous backup codes will stop working immediately."
       }
     }
   },
@@ -10529,6 +11327,30 @@ var esESObjects = {
       all_apps: {
         label: "Todas"
       }
+    },
+    _actions: {
+      disable_oauth_application: {
+        label: "Disable OAuth Application",
+        confirmText: "Disable this OAuth application? Active access/refresh tokens issued to it will continue to be rejected at the token, authorize, and introspect endpoints. Existing integrations will stop working immediately.",
+        successMessage: "OAuth application disabled"
+      },
+      enable_oauth_application: {
+        label: "Enable OAuth Application",
+        confirmText: "Re-enable this OAuth application? Token issuance, authorization, and introspection will resume immediately.",
+        successMessage: "OAuth application enabled"
+      },
+      create_oauth_application: {
+        label: "Register OAuth Application"
+      },
+      rotate_client_secret: {
+        label: "Rotar Client Secret",
+        confirmText: "Rotate this OAuth client's secret? The previous secret will stop working immediately and any integrations using it will break until they are updated with the new secret. The new secret is shown only once."
+      },
+      delete_oauth_application: {
+        label: "Delete OAuth Application",
+        confirmText: "Permanently delete this OAuth application? All issued tokens and consents will be invalidated and integrations using this client_id will stop working immediately. This cannot be undone.",
+        successMessage: "OAuth application deleted"
+      }
     }
   },
   sys_oauth_access_token: {
@@ -10730,6 +11552,26 @@ var esESObjects = {
       all_roles: {
         label: "Todos"
       }
+    },
+    _actions: {
+      activate_role: {
+        label: "Activar rol",
+        successMessage: "Rol activado"
+      },
+      deactivate_role: {
+        label: "Desactivar rol",
+        confirmText: "Deactivate this role? Users with the role keep their assignment but the role stops granting permissions until re-activated.",
+        successMessage: "Rol desactivado"
+      },
+      set_default_role: {
+        label: "Establecer como predeterminado",
+        confirmText: "Make this the default role for new users? Existing users are unaffected.",
+        successMessage: "Rol predeterminado actualizado"
+      },
+      clone_role: {
+        label: "Clonar rol",
+        successMessage: "Rol clonado"
+      }
     }
   },
   sys_permission_set: {
@@ -10755,6 +11597,18 @@ var esESObjects = {
         label: "Permisos de campo",
         help: "Permisos de lectura/escritura a nivel de campo serializados en JSON."
       },
+      system_permissions: {
+        label: "System Permissions",
+        help: 'JSON-serialized array of system capability names (e.g. ["setup.access","studio.access","manage_users"])'
+      },
+      row_level_security: {
+        label: "Row-Level Security",
+        help: "JSON-serialized array of row-level security policies (USING/CHECK clauses)"
+      },
+      tab_permissions: {
+        label: "Tab Permissions",
+        help: "JSON-serialized map of app tab visibility (visible | hidden | default_on | default_off)"
+      },
       active: {
         label: "Activo"
       },
@@ -10778,6 +11632,21 @@ var esESObjects = {
       all_permsets: {
         label: "Todos"
       }
+    },
+    _actions: {
+      activate_permission_set: {
+        label: "Activar",
+        successMessage: "Conjunto de permisos activado"
+      },
+      deactivate_permission_set: {
+        label: "Desactivar",
+        confirmText: "Deactivate this permission set? Existing assignments stay in place but stop granting access until re-activated.",
+        successMessage: "Conjunto de permisos desactivado"
+      },
+      clone_permission_set: {
+        label: "Clonar",
+        successMessage: "Conjunto de permisos clonado"
+      }
     }
   },
   sys_user_permission_set: {
@@ -11402,6 +12271,16 @@ var esESObjects = {
       all_notifications: {
         label: "Todas"
       }
+    },
+    _actions: {
+      mark_read: {
+        label: "Marcar como le\xEDdo",
+        successMessage: "Notificaci\xF3n marcada como le\xEDda"
+      },
+      mark_unread: {
+        label: "Marcar como no le\xEDdo",
+        successMessage: "Notificaci\xF3n marcada como no le\xEDda"
+      }
     }
   },
   sys_email: {
@@ -11783,6 +12662,10 @@ var esESObjects = {
         label: "Instant\xE1nea",
         help: "Instant\xE1nea del registro en el momento del env\xEDo."
       },
+      process_hash: {
+        label: "Process Hash",
+        help: "sha256 of the approval process body at submit time (ADR-0009 execution pinning). Resolved through sys_metadata_history so process upgrades do not affect in-flight requests."
+      },
       completed_at: {
         label: "Completado el"
       },
@@ -12225,6 +13108,17 @@ var esESObjects = {
       updated_at: {
         label: "Actualizado el"
       }
+    },
+    _views: {
+      only_objects: {
+        label: "Objects"
+      },
+      only_fields: {
+        label: "Fields"
+      },
+      all_metadata: {
+        label: "All"
+      }
     }
   },
   sys_metadata_history: {
@@ -12235,6 +13129,10 @@ var esESObjects = {
       id: {
         label: "ID"
       },
+      event_seq: {
+        label: "Event Seq",
+        help: "Per-organization monotonic event log cursor."
+      },
       name: {
         label: "Nombre"
       },
@@ -12268,14 +13166,13 @@ var esESObjects = {
         label: "Nota de cambio",
         help: "Descripci\xF3n de lo que cambi\xF3 en esta versi\xF3n."
       },
+      source: {
+        label: "Source"
+      },
       organization_id: {
         label: "Organizaci\xF3n",
         help: "Organizaci\xF3n para el aislamiento multi-tenant."
       },
-      environment_id: {
-        label: "ID del entorno",
-        help: "Limita esta entrada de historial a un entorno espec\xEDfico."
-      },
       recorded_by: {
         label: "Registrado por"
       },
@@ -12484,6 +13381,24 @@ var esESObjects = {
 var esES = {
   objects: esESObjects,
   apps: {
+    account: {
+      label: "Cuenta",
+      description: "Configuraci\xF3n personal de seguridad e identidad",
+      navigation: {
+        grp_account_inbox: { label: "Bandeja de entrada" },
+        grp_account_security: { label: "Seguridad" },
+        grp_account_developer: { label: "Desarrollador" },
+        nav_account_profile: { label: "Perfil" },
+        nav_account_notifications: { label: "Notificaciones" },
+        nav_account_approvals: { label: "Aprobaciones pendientes" },
+        nav_account_memberships: { label: "Mis organizaciones" },
+        nav_account_two_factor: { label: "Autenticaci\xF3n de dos factores" },
+        nav_account_linked: { label: "Cuentas vinculadas" },
+        nav_account_sessions: { label: "Sesiones activas" },
+        nav_account_api_keys: { label: "Claves API" },
+        nav_account_oauth_apps: { label: "Aplicaciones OAuth" }
+      }
+    },
     setup: {
       label: "Configuraci\xF3n",
       description: "Configuraci\xF3n y administraci\xF3n de la plataforma",
@@ -12528,6 +13443,40 @@ var esES = {
         nav_user_preferences: { label: "Preferencias de Usuario" },
         nav_metadata: { label: "Todos los Metadatos" }
       }
+    },
+    studio: {
+      label: "Studio",
+      description: "Banco de trabajo de metadatos para desarrolladores, analistas e implementadores",
+      navigation: {
+        group_overview: { label: "Resumen" },
+        nav_metadata_directory: { label: "Todos los tipos de metadatos" },
+        group_data_model: { label: "Modelo de datos" },
+        nav_objects: { label: "Objetos" },
+        nav_validations: { label: "Validaciones" },
+        group_ux: { label: "Experiencia de usuario" },
+        nav_apps: { label: "Aplicaciones" },
+        nav_views: { label: "Vistas" },
+        nav_pages: { label: "P\xE1ginas" },
+        nav_dashboards: { label: "Paneles" },
+        nav_reports: { label: "Informes" },
+        group_logic: { label: "L\xF3gica" },
+        nav_actions: { label: "Acciones" },
+        nav_hooks: { label: "Hooks" },
+        group_automation: { label: "Automatizaci\xF3n" },
+        nav_flows: { label: "Flujos" },
+        nav_workflows: { label: "Reglas de flujo de trabajo" },
+        nav_approvals: { label: "Procesos de aprobaci\xF3n" },
+        group_ai: { label: "IA" },
+        nav_agents: { label: "Agentes" },
+        nav_tools: { label: "Herramientas" },
+        nav_skills: { label: "Habilidades" },
+        group_developer: { label: "Desarrollador" },
+        nav_api_console: { label: "Consola de API" },
+        nav_flow_runs: { label: "Ejecuciones de flujo" },
+        nav_public_forms: { label: "Formularios p\xFAblicos" },
+        group_integration: { label: "Integraci\xF3n" },
+        nav_email_templates: { label: "Plantillas de correo" }
+      }
     }
   },
   dashboards: {
@@ -12558,6 +13507,6 @@ var SetupAppTranslations = {
   "es-ES": esES
 };
 
-export { SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };
+export { ACCOUNT_APP, SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map