@objectstack/platform-objects 7.2.0 → 7.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/dist/apps/index.d.mts +12 -0
  2. package/dist/apps/index.d.ts +12 -0
  3. package/dist/apps/index.js +48 -19
  4. package/dist/apps/index.js.map +1 -1
  5. package/dist/apps/index.mjs +48 -19
  6. package/dist/apps/index.mjs.map +1 -1
  7. package/dist/audit/index.d.mts +96 -0
  8. package/dist/audit/index.d.ts +96 -0
  9. package/dist/identity/index.d.mts +205 -2
  10. package/dist/identity/index.d.ts +205 -2
  11. package/dist/identity/index.js +134 -3
  12. package/dist/identity/index.js.map +1 -1
  13. package/dist/identity/index.mjs +134 -3
  14. package/dist/identity/index.mjs.map +1 -1
  15. package/dist/index.js +196 -22
  16. package/dist/index.js.map +1 -1
  17. package/dist/index.mjs +196 -22
  18. package/dist/index.mjs.map +1 -1
  19. package/dist/integration/index.d.mts +6 -0
  20. package/dist/integration/index.d.ts +6 -0
  21. package/dist/metadata/index.d.mts +18 -0
  22. package/dist/metadata/index.d.ts +18 -0
  23. package/dist/security/index.d.mts +52 -0
  24. package/dist/security/index.d.ts +52 -0
  25. package/dist/security/index.js +14 -0
  26. package/dist/security/index.js.map +1 -1
  27. package/dist/security/index.mjs +14 -0
  28. package/dist/security/index.mjs.map +1 -1
  29. package/dist/system/index.d.mts +18 -0
  30. package/dist/system/index.d.ts +18 -0
  31. package/package.json +2 -2
package/dist/integration/index.d.mts CHANGED
@@ -228,6 +228,7 @@ declare const SysWebhook: Omit<{
228
228
  _provenance?: "package" | "env-forced" | "org" | undefined;
229
229
  _packageId?: string | undefined;
230
230
  _packageVersion?: string | undefined;
231
+ _lockDocsUrl?: string | undefined;
231
232
  label?: string | undefined;
232
233
  pluralLabel?: string | undefined;
233
234
  description?: string | undefined;
@@ -720,6 +721,11 @@ declare const SysWebhook: Omit<{
720
721
  role?: string | undefined;
721
722
  } | undefined;
722
723
  }[] | undefined;
724
+ protection?: {
725
+ lock: "full" | "none" | "no-overlay" | "no-delete";
726
+ reason: string;
727
+ docsUrl?: string | undefined;
728
+ } | undefined;
723
729
  }, "fields"> & Pick<{
724
730
  readonly name: "sys_webhook";
725
731
  readonly label: "Webhook";
package/dist/integration/index.d.ts CHANGED
@@ -228,6 +228,7 @@ declare const SysWebhook: Omit<{
228
228
  _provenance?: "package" | "env-forced" | "org" | undefined;
229
229
  _packageId?: string | undefined;
230
230
  _packageVersion?: string | undefined;
231
+ _lockDocsUrl?: string | undefined;
231
232
  label?: string | undefined;
232
233
  pluralLabel?: string | undefined;
233
234
  description?: string | undefined;
@@ -720,6 +721,11 @@ declare const SysWebhook: Omit<{
720
721
  role?: string | undefined;
721
722
  } | undefined;
722
723
  }[] | undefined;
724
+ protection?: {
725
+ lock: "full" | "none" | "no-overlay" | "no-delete";
726
+ reason: string;
727
+ docsUrl?: string | undefined;
728
+ } | undefined;
723
729
  }, "fields"> & Pick<{
724
730
  readonly name: "sys_webhook";
725
731
  readonly label: "Webhook";
package/dist/metadata/index.d.mts CHANGED
@@ -217,6 +217,7 @@ declare const SysMetadataObject: Omit<{
217
217
  _provenance?: "package" | "env-forced" | "org" | undefined;
218
218
  _packageId?: string | undefined;
219
219
  _packageVersion?: string | undefined;
220
+ _lockDocsUrl?: string | undefined;
220
221
  label?: string | undefined;
221
222
  pluralLabel?: string | undefined;
222
223
  description?: string | undefined;
@@ -709,6 +710,11 @@ declare const SysMetadataObject: Omit<{
709
710
  role?: string | undefined;
710
711
  } | undefined;
711
712
  }[] | undefined;
713
+ protection?: {
714
+ lock: "full" | "none" | "no-overlay" | "no-delete";
715
+ reason: string;
716
+ docsUrl?: string | undefined;
717
+ } | undefined;
712
718
  }, "fields"> & Pick<{
713
719
  readonly name: "sys_metadata";
714
720
  readonly label: "System Metadata";
@@ -5102,6 +5108,7 @@ declare const SysMetadataHistoryObject: Omit<{
5102
5108
  _provenance?: "package" | "env-forced" | "org" | undefined;
5103
5109
  _packageId?: string | undefined;
5104
5110
  _packageVersion?: string | undefined;
5111
+ _lockDocsUrl?: string | undefined;
5105
5112
  label?: string | undefined;
5106
5113
  pluralLabel?: string | undefined;
5107
5114
  description?: string | undefined;
@@ -5594,6 +5601,11 @@ declare const SysMetadataHistoryObject: Omit<{
5594
5601
  role?: string | undefined;
5595
5602
  } | undefined;
5596
5603
  }[] | undefined;
5604
+ protection?: {
5605
+ lock: "full" | "none" | "no-overlay" | "no-delete";
5606
+ reason: string;
5607
+ docsUrl?: string | undefined;
5608
+ } | undefined;
5597
5609
  }, "fields"> & Pick<{
5598
5610
  readonly name: "sys_metadata_history";
5599
5611
  readonly label: "Metadata History";
@@ -8332,6 +8344,7 @@ declare const SysMetadataAuditObject: Omit<{
8332
8344
  _provenance?: "package" | "env-forced" | "org" | undefined;
8333
8345
  _packageId?: string | undefined;
8334
8346
  _packageVersion?: string | undefined;
8347
+ _lockDocsUrl?: string | undefined;
8335
8348
  label?: string | undefined;
8336
8349
  pluralLabel?: string | undefined;
8337
8350
  description?: string | undefined;
@@ -8824,6 +8837,11 @@ declare const SysMetadataAuditObject: Omit<{
8824
8837
  role?: string | undefined;
8825
8838
  } | undefined;
8826
8839
  }[] | undefined;
8840
+ protection?: {
8841
+ lock: "full" | "none" | "no-overlay" | "no-delete";
8842
+ reason: string;
8843
+ docsUrl?: string | undefined;
8844
+ } | undefined;
8827
8845
  }, "fields"> & Pick<{
8828
8846
  readonly name: "sys_metadata_audit";
8829
8847
  readonly label: "Metadata Audit";
package/dist/metadata/index.d.ts CHANGED
@@ -217,6 +217,7 @@ declare const SysMetadataObject: Omit<{
217
217
  _provenance?: "package" | "env-forced" | "org" | undefined;
218
218
  _packageId?: string | undefined;
219
219
  _packageVersion?: string | undefined;
220
+ _lockDocsUrl?: string | undefined;
220
221
  label?: string | undefined;
221
222
  pluralLabel?: string | undefined;
222
223
  description?: string | undefined;
@@ -709,6 +710,11 @@ declare const SysMetadataObject: Omit<{
709
710
  role?: string | undefined;
710
711
  } | undefined;
711
712
  }[] | undefined;
713
+ protection?: {
714
+ lock: "full" | "none" | "no-overlay" | "no-delete";
715
+ reason: string;
716
+ docsUrl?: string | undefined;
717
+ } | undefined;
712
718
  }, "fields"> & Pick<{
713
719
  readonly name: "sys_metadata";
714
720
  readonly label: "System Metadata";
@@ -5102,6 +5108,7 @@ declare const SysMetadataHistoryObject: Omit<{
5102
5108
  _provenance?: "package" | "env-forced" | "org" | undefined;
5103
5109
  _packageId?: string | undefined;
5104
5110
  _packageVersion?: string | undefined;
5111
+ _lockDocsUrl?: string | undefined;
5105
5112
  label?: string | undefined;
5106
5113
  pluralLabel?: string | undefined;
5107
5114
  description?: string | undefined;
@@ -5594,6 +5601,11 @@ declare const SysMetadataHistoryObject: Omit<{
5594
5601
  role?: string | undefined;
5595
5602
  } | undefined;
5596
5603
  }[] | undefined;
5604
+ protection?: {
5605
+ lock: "full" | "none" | "no-overlay" | "no-delete";
5606
+ reason: string;
5607
+ docsUrl?: string | undefined;
5608
+ } | undefined;
5597
5609
  }, "fields"> & Pick<{
5598
5610
  readonly name: "sys_metadata_history";
5599
5611
  readonly label: "Metadata History";
@@ -8332,6 +8344,7 @@ declare const SysMetadataAuditObject: Omit<{
8332
8344
  _provenance?: "package" | "env-forced" | "org" | undefined;
8333
8345
  _packageId?: string | undefined;
8334
8346
  _packageVersion?: string | undefined;
8347
+ _lockDocsUrl?: string | undefined;
8335
8348
  label?: string | undefined;
8336
8349
  pluralLabel?: string | undefined;
8337
8350
  description?: string | undefined;
@@ -8824,6 +8837,11 @@ declare const SysMetadataAuditObject: Omit<{
8824
8837
  role?: string | undefined;
8825
8838
  } | undefined;
8826
8839
  }[] | undefined;
8840
+ protection?: {
8841
+ lock: "full" | "none" | "no-overlay" | "no-delete";
8842
+ reason: string;
8843
+ docsUrl?: string | undefined;
8844
+ } | undefined;
8827
8845
  }, "fields"> & Pick<{
8828
8846
  readonly name: "sys_metadata_audit";
8829
8847
  readonly label: "Metadata Audit";
package/dist/security/index.d.mts CHANGED
@@ -214,6 +214,7 @@ declare const SysRole: Omit<{
214
214
  _provenance?: "package" | "env-forced" | "org" | undefined;
215
215
  _packageId?: string | undefined;
216
216
  _packageVersion?: string | undefined;
217
+ _lockDocsUrl?: string | undefined;
217
218
  label?: string | undefined;
218
219
  pluralLabel?: string | undefined;
219
220
  description?: string | undefined;
@@ -706,6 +707,11 @@ declare const SysRole: Omit<{
706
707
  role?: string | undefined;
707
708
  } | undefined;
708
709
  }[] | undefined;
710
+ protection?: {
711
+ lock: "full" | "none" | "no-overlay" | "no-delete";
712
+ reason: string;
713
+ docsUrl?: string | undefined;
714
+ } | undefined;
709
715
  }, "fields"> & Pick<{
710
716
  readonly name: "sys_role";
711
717
  readonly label: "Role";
@@ -713,6 +719,11 @@ declare const SysRole: Omit<{
713
719
  readonly icon: "shield";
714
720
  readonly isSystem: true;
715
721
  readonly managedBy: "config";
722
+ readonly protection: {
723
+ readonly lock: "no-overlay";
724
+ readonly reason: "RBAC schema is platform-defined — see ADR-0010.";
725
+ readonly docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection";
726
+ };
716
727
  readonly description: "Role definitions for RBAC access control";
717
728
  readonly displayNameField: "label";
718
729
  readonly titleFormat: "{label}";
@@ -2689,6 +2700,7 @@ declare const SysPermissionSet: Omit<{
2689
2700
  _provenance?: "package" | "env-forced" | "org" | undefined;
2690
2701
  _packageId?: string | undefined;
2691
2702
  _packageVersion?: string | undefined;
2703
+ _lockDocsUrl?: string | undefined;
2692
2704
  label?: string | undefined;
2693
2705
  pluralLabel?: string | undefined;
2694
2706
  description?: string | undefined;
@@ -3181,6 +3193,11 @@ declare const SysPermissionSet: Omit<{
3181
3193
  role?: string | undefined;
3182
3194
  } | undefined;
3183
3195
  }[] | undefined;
3196
+ protection?: {
3197
+ lock: "full" | "none" | "no-overlay" | "no-delete";
3198
+ reason: string;
3199
+ docsUrl?: string | undefined;
3200
+ } | undefined;
3184
3201
  }, "fields"> & Pick<{
3185
3202
  readonly name: "sys_permission_set";
3186
3203
  readonly label: "Permission Set";
@@ -3188,6 +3205,11 @@ declare const SysPermissionSet: Omit<{
3188
3205
  readonly icon: "lock";
3189
3206
  readonly isSystem: true;
3190
3207
  readonly managedBy: "config";
3208
+ readonly protection: {
3209
+ readonly lock: "no-overlay";
3210
+ readonly reason: "RBAC schema is platform-defined — see ADR-0010.";
3211
+ readonly docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection";
3212
+ };
3191
3213
  readonly description: "Named permission groupings for fine-grained access control";
3192
3214
  readonly displayNameField: "label";
3193
3215
  readonly titleFormat: "{label}";
@@ -5659,6 +5681,7 @@ declare const SysUserPermissionSet: Omit<{
5659
5681
  _provenance?: "package" | "env-forced" | "org" | undefined;
5660
5682
  _packageId?: string | undefined;
5661
5683
  _packageVersion?: string | undefined;
5684
+ _lockDocsUrl?: string | undefined;
5662
5685
  label?: string | undefined;
5663
5686
  pluralLabel?: string | undefined;
5664
5687
  description?: string | undefined;
@@ -6151,6 +6174,11 @@ declare const SysUserPermissionSet: Omit<{
6151
6174
  role?: string | undefined;
6152
6175
  } | undefined;
6153
6176
  }[] | undefined;
6177
+ protection?: {
6178
+ lock: "full" | "none" | "no-overlay" | "no-delete";
6179
+ reason: string;
6180
+ docsUrl?: string | undefined;
6181
+ } | undefined;
6154
6182
  }, "fields"> & Pick<{
6155
6183
  readonly name: "sys_user_permission_set";
6156
6184
  readonly label: "User Permission Set";
@@ -7622,6 +7650,7 @@ declare const SysRolePermissionSet: Omit<{
7622
7650
  _provenance?: "package" | "env-forced" | "org" | undefined;
7623
7651
  _packageId?: string | undefined;
7624
7652
  _packageVersion?: string | undefined;
7653
+ _lockDocsUrl?: string | undefined;
7625
7654
  label?: string | undefined;
7626
7655
  pluralLabel?: string | undefined;
7627
7656
  description?: string | undefined;
@@ -8114,6 +8143,11 @@ declare const SysRolePermissionSet: Omit<{
8114
8143
  role?: string | undefined;
8115
8144
  } | undefined;
8116
8145
  }[] | undefined;
8146
+ protection?: {
8147
+ lock: "full" | "none" | "no-overlay" | "no-delete";
8148
+ reason: string;
8149
+ docsUrl?: string | undefined;
8150
+ } | undefined;
8117
8151
  }, "fields"> & Pick<{
8118
8152
  readonly name: "sys_role_permission_set";
8119
8153
  readonly label: "Role Permission Set";
@@ -9250,6 +9284,7 @@ declare const SysRecordShare: Omit<{
9250
9284
  _provenance?: "package" | "env-forced" | "org" | undefined;
9251
9285
  _packageId?: string | undefined;
9252
9286
  _packageVersion?: string | undefined;
9287
+ _lockDocsUrl?: string | undefined;
9253
9288
  label?: string | undefined;
9254
9289
  pluralLabel?: string | undefined;
9255
9290
  description?: string | undefined;
@@ -9742,6 +9777,11 @@ declare const SysRecordShare: Omit<{
9742
9777
  role?: string | undefined;
9743
9778
  } | undefined;
9744
9779
  }[] | undefined;
9780
+ protection?: {
9781
+ lock: "full" | "none" | "no-overlay" | "no-delete";
9782
+ reason: string;
9783
+ docsUrl?: string | undefined;
9784
+ } | undefined;
9745
9785
  }, "fields"> & Pick<{
9746
9786
  readonly name: "sys_record_share";
9747
9787
  readonly label: "Record Share";
@@ -12230,6 +12270,7 @@ declare const SysSharingRule: Omit<{
12230
12270
  _provenance?: "package" | "env-forced" | "org" | undefined;
12231
12271
  _packageId?: string | undefined;
12232
12272
  _packageVersion?: string | undefined;
12273
+ _lockDocsUrl?: string | undefined;
12233
12274
  label?: string | undefined;
12234
12275
  pluralLabel?: string | undefined;
12235
12276
  description?: string | undefined;
@@ -12722,6 +12763,11 @@ declare const SysSharingRule: Omit<{
12722
12763
  role?: string | undefined;
12723
12764
  } | undefined;
12724
12765
  }[] | undefined;
12766
+ protection?: {
12767
+ lock: "full" | "none" | "no-overlay" | "no-delete";
12768
+ reason: string;
12769
+ docsUrl?: string | undefined;
12770
+ } | undefined;
12725
12771
  }, "fields"> & Pick<{
12726
12772
  readonly name: "sys_sharing_rule";
12727
12773
  readonly label: "Sharing Rule";
@@ -15360,6 +15406,7 @@ declare const SysShareLink: Omit<{
15360
15406
  _provenance?: "package" | "env-forced" | "org" | undefined;
15361
15407
  _packageId?: string | undefined;
15362
15408
  _packageVersion?: string | undefined;
15409
+ _lockDocsUrl?: string | undefined;
15363
15410
  label?: string | undefined;
15364
15411
  pluralLabel?: string | undefined;
15365
15412
  description?: string | undefined;
@@ -15852,6 +15899,11 @@ declare const SysShareLink: Omit<{
15852
15899
  role?: string | undefined;
15853
15900
  } | undefined;
15854
15901
  }[] | undefined;
15902
+ protection?: {
15903
+ lock: "full" | "none" | "no-overlay" | "no-delete";
15904
+ reason: string;
15905
+ docsUrl?: string | undefined;
15906
+ } | undefined;
15855
15907
  }, "fields"> & Pick<{
15856
15908
  readonly name: "sys_share_link";
15857
15909
  readonly label: "Share Link";
package/dist/security/index.d.ts CHANGED
@@ -214,6 +214,7 @@ declare const SysRole: Omit<{
214
214
  _provenance?: "package" | "env-forced" | "org" | undefined;
215
215
  _packageId?: string | undefined;
216
216
  _packageVersion?: string | undefined;
217
+ _lockDocsUrl?: string | undefined;
217
218
  label?: string | undefined;
218
219
  pluralLabel?: string | undefined;
219
220
  description?: string | undefined;
@@ -706,6 +707,11 @@ declare const SysRole: Omit<{
706
707
  role?: string | undefined;
707
708
  } | undefined;
708
709
  }[] | undefined;
710
+ protection?: {
711
+ lock: "full" | "none" | "no-overlay" | "no-delete";
712
+ reason: string;
713
+ docsUrl?: string | undefined;
714
+ } | undefined;
709
715
  }, "fields"> & Pick<{
710
716
  readonly name: "sys_role";
711
717
  readonly label: "Role";
@@ -713,6 +719,11 @@ declare const SysRole: Omit<{
713
719
  readonly icon: "shield";
714
720
  readonly isSystem: true;
715
721
  readonly managedBy: "config";
722
+ readonly protection: {
723
+ readonly lock: "no-overlay";
724
+ readonly reason: "RBAC schema is platform-defined — see ADR-0010.";
725
+ readonly docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection";
726
+ };
716
727
  readonly description: "Role definitions for RBAC access control";
717
728
  readonly displayNameField: "label";
718
729
  readonly titleFormat: "{label}";
@@ -2689,6 +2700,7 @@ declare const SysPermissionSet: Omit<{
2689
2700
  _provenance?: "package" | "env-forced" | "org" | undefined;
2690
2701
  _packageId?: string | undefined;
2691
2702
  _packageVersion?: string | undefined;
2703
+ _lockDocsUrl?: string | undefined;
2692
2704
  label?: string | undefined;
2693
2705
  pluralLabel?: string | undefined;
2694
2706
  description?: string | undefined;
@@ -3181,6 +3193,11 @@ declare const SysPermissionSet: Omit<{
3181
3193
  role?: string | undefined;
3182
3194
  } | undefined;
3183
3195
  }[] | undefined;
3196
+ protection?: {
3197
+ lock: "full" | "none" | "no-overlay" | "no-delete";
3198
+ reason: string;
3199
+ docsUrl?: string | undefined;
3200
+ } | undefined;
3184
3201
  }, "fields"> & Pick<{
3185
3202
  readonly name: "sys_permission_set";
3186
3203
  readonly label: "Permission Set";
@@ -3188,6 +3205,11 @@ declare const SysPermissionSet: Omit<{
3188
3205
  readonly icon: "lock";
3189
3206
  readonly isSystem: true;
3190
3207
  readonly managedBy: "config";
3208
+ readonly protection: {
3209
+ readonly lock: "no-overlay";
3210
+ readonly reason: "RBAC schema is platform-defined — see ADR-0010.";
3211
+ readonly docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection";
3212
+ };
3191
3213
  readonly description: "Named permission groupings for fine-grained access control";
3192
3214
  readonly displayNameField: "label";
3193
3215
  readonly titleFormat: "{label}";
@@ -5659,6 +5681,7 @@ declare const SysUserPermissionSet: Omit<{
5659
5681
  _provenance?: "package" | "env-forced" | "org" | undefined;
5660
5682
  _packageId?: string | undefined;
5661
5683
  _packageVersion?: string | undefined;
5684
+ _lockDocsUrl?: string | undefined;
5662
5685
  label?: string | undefined;
5663
5686
  pluralLabel?: string | undefined;
5664
5687
  description?: string | undefined;
@@ -6151,6 +6174,11 @@ declare const SysUserPermissionSet: Omit<{
6151
6174
  role?: string | undefined;
6152
6175
  } | undefined;
6153
6176
  }[] | undefined;
6177
+ protection?: {
6178
+ lock: "full" | "none" | "no-overlay" | "no-delete";
6179
+ reason: string;
6180
+ docsUrl?: string | undefined;
6181
+ } | undefined;
6154
6182
  }, "fields"> & Pick<{
6155
6183
  readonly name: "sys_user_permission_set";
6156
6184
  readonly label: "User Permission Set";
@@ -7622,6 +7650,7 @@ declare const SysRolePermissionSet: Omit<{
7622
7650
  _provenance?: "package" | "env-forced" | "org" | undefined;
7623
7651
  _packageId?: string | undefined;
7624
7652
  _packageVersion?: string | undefined;
7653
+ _lockDocsUrl?: string | undefined;
7625
7654
  label?: string | undefined;
7626
7655
  pluralLabel?: string | undefined;
7627
7656
  description?: string | undefined;
@@ -8114,6 +8143,11 @@ declare const SysRolePermissionSet: Omit<{
8114
8143
  role?: string | undefined;
8115
8144
  } | undefined;
8116
8145
  }[] | undefined;
8146
+ protection?: {
8147
+ lock: "full" | "none" | "no-overlay" | "no-delete";
8148
+ reason: string;
8149
+ docsUrl?: string | undefined;
8150
+ } | undefined;
8117
8151
  }, "fields"> & Pick<{
8118
8152
  readonly name: "sys_role_permission_set";
8119
8153
  readonly label: "Role Permission Set";
@@ -9250,6 +9284,7 @@ declare const SysRecordShare: Omit<{
9250
9284
  _provenance?: "package" | "env-forced" | "org" | undefined;
9251
9285
  _packageId?: string | undefined;
9252
9286
  _packageVersion?: string | undefined;
9287
+ _lockDocsUrl?: string | undefined;
9253
9288
  label?: string | undefined;
9254
9289
  pluralLabel?: string | undefined;
9255
9290
  description?: string | undefined;
@@ -9742,6 +9777,11 @@ declare const SysRecordShare: Omit<{
9742
9777
  role?: string | undefined;
9743
9778
  } | undefined;
9744
9779
  }[] | undefined;
9780
+ protection?: {
9781
+ lock: "full" | "none" | "no-overlay" | "no-delete";
9782
+ reason: string;
9783
+ docsUrl?: string | undefined;
9784
+ } | undefined;
9745
9785
  }, "fields"> & Pick<{
9746
9786
  readonly name: "sys_record_share";
9747
9787
  readonly label: "Record Share";
@@ -12230,6 +12270,7 @@ declare const SysSharingRule: Omit<{
12230
12270
  _provenance?: "package" | "env-forced" | "org" | undefined;
12231
12271
  _packageId?: string | undefined;
12232
12272
  _packageVersion?: string | undefined;
12273
+ _lockDocsUrl?: string | undefined;
12233
12274
  label?: string | undefined;
12234
12275
  pluralLabel?: string | undefined;
12235
12276
  description?: string | undefined;
@@ -12722,6 +12763,11 @@ declare const SysSharingRule: Omit<{
12722
12763
  role?: string | undefined;
12723
12764
  } | undefined;
12724
12765
  }[] | undefined;
12766
+ protection?: {
12767
+ lock: "full" | "none" | "no-overlay" | "no-delete";
12768
+ reason: string;
12769
+ docsUrl?: string | undefined;
12770
+ } | undefined;
12725
12771
  }, "fields"> & Pick<{
12726
12772
  readonly name: "sys_sharing_rule";
12727
12773
  readonly label: "Sharing Rule";
@@ -15360,6 +15406,7 @@ declare const SysShareLink: Omit<{
15360
15406
  _provenance?: "package" | "env-forced" | "org" | undefined;
15361
15407
  _packageId?: string | undefined;
15362
15408
  _packageVersion?: string | undefined;
15409
+ _lockDocsUrl?: string | undefined;
15363
15410
  label?: string | undefined;
15364
15411
  pluralLabel?: string | undefined;
15365
15412
  description?: string | undefined;
@@ -15852,6 +15899,11 @@ declare const SysShareLink: Omit<{
15852
15899
  role?: string | undefined;
15853
15900
  } | undefined;
15854
15901
  }[] | undefined;
15902
+ protection?: {
15903
+ lock: "full" | "none" | "no-overlay" | "no-delete";
15904
+ reason: string;
15905
+ docsUrl?: string | undefined;
15906
+ } | undefined;
15855
15907
  }, "fields"> & Pick<{
15856
15908
  readonly name: "sys_share_link";
15857
15909
  readonly label: "Share Link";
package/dist/security/index.js CHANGED
@@ -11,6 +11,13 @@ var SysRole = data.ObjectSchema.create({
11
11
  icon: "shield",
12
12
  isSystem: true,
13
13
  managedBy: "config",
14
+ // ADR-0010 §3.7 — RBAC primitive; tenants may add custom rows
15
+ // (created via UI / API) but the schema itself is locked.
16
+ protection: {
17
+ lock: "no-overlay",
18
+ reason: "RBAC schema is platform-defined \u2014 see ADR-0010.",
19
+ docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
20
+ },
14
21
  description: "Role definitions for RBAC access control",
15
22
  displayNameField: "label",
16
23
  titleFormat: "{label}",
@@ -214,6 +221,13 @@ var SysPermissionSet = data.ObjectSchema.create({
214
221
  icon: "lock",
215
222
  isSystem: true,
216
223
  managedBy: "config",
224
+ // ADR-0010 §3.7 — RBAC primitive; tenants may add custom rows
225
+ // (created via UI / API) but the schema itself is locked.
226
+ protection: {
227
+ lock: "no-overlay",
228
+ reason: "RBAC schema is platform-defined \u2014 see ADR-0010.",
229
+ docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
230
+ },
217
231
  description: "Named permission groupings for fine-grained access control",
218
232
  displayNameField: "label",
219
233
  titleFormat: "{label}",