@objectstack/spec 0.1.0 → 0.1.2

package/dist/system/plugin.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.zod.d.ts","sourceRoot":"","sources":["../../src/system/plugin.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;EAKO,CAAC;AAEjC,eAAO,MAAM,oBAAoB;;;;;;;;;EAGS,CAAC;AAE3C,eAAO,MAAM,YAAY;;;;;;;;;;;;EAIW,CAAC;AAErC,eAAO,MAAM,eAAe;;;;;;EAEU,CAAC;AAEvC,eAAO,MAAM,eAAe;;;;;;;;;EAGQ,CAAC;AAErC,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAIc,CAAC;AAE/C,eAAO,MAAM,iBAAiB;;;;;;;;;EAGY,CAAC;AAE3C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mBAAmB;IAC9B;;;;;;;OAOG;;;;;;;;;;;IAGH;;;;;;;OAOG;;;;;;;;;;;IAGH;;;;;;;OAOG;;;;;;;;;;;;;;;;;IAGH;;;;;;OAMG;;;;;;;;;;;;;;IAGH;;;;;OAKG;;;;;;;;;;;IAGH;;;;;;;OAOG;;IAGH;;;;;;;OAOG;;IAGH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKH,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,qBAAqB;IAChC;;;;;OAKG;;QA9GH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+CH;;;;;OAKG;;QA1HH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2DH;;;;;OAKG;;QAtIH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuEH;;;;;OAKG;;QAlJH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmFH;;;;;;;OAOG;;QAhKH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgGH,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY;IApEvB;;;;;OAKG;;QA9GH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+CH;;;;;OAKG;;QA1HH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2DH;;;;;OAKG;;QAtIH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuEH;;;;;OAKG;;QAlJH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmFH;;;;;;;OAOG;;QAhKH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;QAGH;;;;;;WAMG;;;;;;;;;;;;;;QAGH;;;;;WAKG;;;;;;;;;;;QAGH;;;;;;;WAOG;;QAGH;;;;;;;WAOG;;QAGH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwGH;;;OAGG;;IAGH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEH,CAAC;AAEH;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACzE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/system/plugin.zod.js

@@ -0,0 +1,226 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginSchema = exports.PluginLifecycleSchema = exports.PluginContextSchema = exports.I18nContextSchema = exports.ScopedStorageSchema = exports.SystemAPISchema = exports.SchedulerSchema = exports.RouterSchema = exports.ObjectQLClientSchema = exports.LoggerSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * Interface schemas for Context Capabilities
+ */
+exports.LoggerSchema = zod_1.z.object({
+    debug: zod_1.z.any().describe('(message: string, ...meta: any[]) => void'),
+    info: zod_1.z.any().describe('(message: string, ...meta: any[]) => void'),
+    warn: zod_1.z.any().describe('(message: string, ...meta: any[]) => void'),
+    error: zod_1.z.any().describe('(message: string, ...meta: any[]) => void'),
+}).describe('Structured Logger');
+exports.ObjectQLClientSchema = zod_1.z.object({
+    object: zod_1.z.function().args(zod_1.z.string()).returns(zod_1.z.any()).describe('Get query interface for an object'),
+    query: zod_1.z.function().args(zod_1.z.string()).returns(zod_1.z.promise(zod_1.z.any())).describe('Execute arbitrary SOQL-like query'),
+}).describe('ObjectQL Data Access Client');
+exports.RouterSchema = zod_1.z.object({
+    get: zod_1.z.function().args(zod_1.z.string(), zod_1.z.function()).describe('Register GET route'),
+    post: zod_1.z.function().args(zod_1.z.string(), zod_1.z.function()).describe('Register POST route'),
+    use: zod_1.z.function().args(zod_1.z.string().optional(), zod_1.z.function()).describe('Register Middleware'),
+}).describe('HTTP Router Interface');
+exports.SchedulerSchema = zod_1.z.object({
+    schedule: zod_1.z.function().args(zod_1.z.string(), zod_1.z.string(), zod_1.z.function()).describe('Schedule a cron job'),
+}).describe('Job Scheduler Interface');
+exports.SystemAPISchema = zod_1.z.object({
+    getCurrentUser: zod_1.z.function().returns(zod_1.z.promise(zod_1.z.any())),
+    getConfig: zod_1.z.function().args(zod_1.z.string()).returns(zod_1.z.promise(zod_1.z.any())),
+}).describe('Access to System Core');
+exports.ScopedStorageSchema = zod_1.z.object({
+    get: zod_1.z.function().args(zod_1.z.string()).returns(zod_1.z.promise(zod_1.z.any())).describe('Get value by key'),
+    set: zod_1.z.function().args(zod_1.z.string(), zod_1.z.any()).returns(zod_1.z.promise(zod_1.z.void())).describe('Set value for key'),
+    delete: zod_1.z.function().args(zod_1.z.string()).returns(zod_1.z.promise(zod_1.z.void())).describe('Delete key'),
+}).describe('Plugin Scoped Data Storage (KV)');
+exports.I18nContextSchema = zod_1.z.object({
+    t: zod_1.z.function().args(zod_1.z.string(), zod_1.z.record(zod_1.z.any()).optional()).returns(zod_1.z.string()).describe('Translate a key'),
+    getLocale: zod_1.z.function().returns(zod_1.z.string()).describe('Get current context locale'),
+}).describe('Internationalization Helper');
+/**
+ * Plugin Context Schema
+ *
+ * This defines the runtime context available to plugins during their lifecycle.
+ * The context provides access to core ObjectStack APIs and services.
+ *
+ * @example
+ * export default {
+ *   onEnable: async (context: PluginContext) => {
+ *     const { ql, os, logger } = context;
+ *     logger.info('Plugin enabled');
+ *     await ql.object('custom_object').find({});
+ *   }
+ * };
+ */
+exports.PluginContextSchema = zod_1.z.object({
+    /**
+     * ObjectQL data access API.
+     * Provides methods to query and manipulate business objects.
+     *
+     * @example
+     * await context.ql.object('account').find({ status: 'active' });
+     * await context.ql.object('contact').create({ name: 'John Doe' });
+     */
+    ql: exports.ObjectQLClientSchema,
+    /**
+     * ObjectOS system API.
+     * Provides access to system-level functionality and configuration.
+     *
+     * @example
+     * const user = await context.os.getCurrentUser();
+     * const config = await context.os.getConfig('plugin.settings');
+     */
+    os: exports.SystemAPISchema,
+    /**
+     * Logging interface.
+     * Provides structured logging capabilities with different levels.
+     *
+     * @example
+     * context.logger.info('Operation completed');
+     * context.logger.error('Operation failed', { error });
+     */
+    logger: exports.LoggerSchema,
+    /**
+     * Scoped Storage.
+     * Key-Value store isolated for this plugin.
+     *
+     * @example
+     * await context.storage.set('last_sync', Date.now());
+     */
+    storage: exports.ScopedStorageSchema,
+    /**
+     * I18n Helper.
+     *
+     * @example
+     * const msg = context.i18n.t('error.invalid_input');
+     */
+    i18n: exports.I18nContextSchema,
+    /**
+     * Metadata registry.
+     * Provides access to system metadata like object schemas, field definitions, etc.
+     *
+     * @example
+     * const schema = await context.metadata.getObject('account');
+     * const fields = await context.metadata.getFields('account');
+     */
+    metadata: zod_1.z.any().describe('Metadata registry'),
+    /**
+     * Event bus.
+     * Provides pub/sub capabilities for system and custom events.
+     *
+     * @example
+     * context.events.on('record.created', handler);
+     * context.events.emit('custom.event', data);
+     */
+    events: zod_1.z.any().describe('Event bus'),
+    /**
+     * Application Runtime Capabilities.
+     * Provides mechanisms to extend the running application (Routes, Jobs, etc).
+     */
+    app: zod_1.z.object({
+        router: exports.RouterSchema,
+        scheduler: exports.SchedulerSchema.optional(),
+    }).describe('App Runtime Capabilities'),
+});
+/**
+ * Plugin Lifecycle Schema
+ *
+ * This defines the lifecycle hooks available to plugins.
+ * Plugins can implement any or all of these hooks to respond to lifecycle events.
+ *
+ * All hooks receive PluginContext as their first parameter.
+ * All hooks are optional and asynchronous.
+ *
+ * @example
+ * export default {
+ *   onInstall: async (context) => {
+ *     // Initialize database tables
+ *     await context.ql.object('plugin_data').syncSchema();
+ *   },
+ *
+ *   onEnable: async (context) => {
+ *     // Start background services
+ *     await startScheduler(context);
+ *   },
+ *
+ *   onDisable: async (context) => {
+ *     // Stop background services
+ *     await stopScheduler();
+ *   }
+ * };
+ */
+exports.PluginLifecycleSchema = zod_1.z.object({
+    /**
+     * Called when the plugin is first installed.
+     * Use this to set up initial data, create database tables, or register resources.
+     *
+     * @param context - Plugin runtime context
+     */
+    onInstall: zod_1.z.function()
+        .args(exports.PluginContextSchema)
+        .returns(zod_1.z.promise(zod_1.z.void()))
+        .optional()
+        .describe('Hook called on plugin installation'),
+    /**
+     * Called when the plugin is enabled.
+     * Use this to start services, register event handlers, or initialize runtime state.
+     *
+     * @param context - Plugin runtime context
+     */
+    onEnable: zod_1.z.function()
+        .args(exports.PluginContextSchema)
+        .returns(zod_1.z.promise(zod_1.z.void()))
+        .optional()
+        .describe('Hook called when plugin is enabled'),
+    /**
+     * Called when the plugin is disabled.
+     * Use this to stop services, unregister handlers, or clean up runtime state.
+     *
+     * @param context - Plugin runtime context
+     */
+    onDisable: zod_1.z.function()
+        .args(exports.PluginContextSchema)
+        .returns(zod_1.z.promise(zod_1.z.void()))
+        .optional()
+        .describe('Hook called when plugin is disabled'),
+    /**
+     * Called when the plugin is uninstalled.
+     * Use this to clean up data, remove database tables, or unregister resources.
+     *
+     * @param context - Plugin runtime context
+     */
+    onUninstall: zod_1.z.function()
+        .args(exports.PluginContextSchema)
+        .returns(zod_1.z.promise(zod_1.z.void()))
+        .optional()
+        .describe('Hook called on plugin uninstallation'),
+    /**
+     * Called when the plugin is upgraded to a new version.
+     * Use this to migrate data, update schemas, or handle breaking changes.
+     *
+     * @param context - Plugin runtime context
+     * @param fromVersion - Previous version string
+     * @param toVersion - New version string
+     */
+    onUpgrade: zod_1.z.function()
+        .args(exports.PluginContextSchema, zod_1.z.string(), zod_1.z.string())
+        .returns(zod_1.z.promise(zod_1.z.void()))
+        .optional()
+        .describe('Hook called on plugin upgrade'),
+});
+/**
+ * Complete Plugin Definition Schema
+ *
+ * Combines lifecycle hooks with plugin metadata.
+ */
+exports.PluginSchema = exports.PluginLifecycleSchema.extend({
+    /**
+     * Plugin metadata identifier.
+     * Should match the id in the manifest.
+     */
+    id: zod_1.z.string().optional().describe('Plugin identifier'),
+    /**
+     * Plugin version.
+     * Should match the version in the manifest.
+     */
+    version: zod_1.z.string().optional().describe('Plugin version'),
+});

package/dist/system/policy.zod.d.ts

@@ -0,0 +1,209 @@
+import { z } from 'zod';
+/**
+ * Password Complexity Policy
+ */
+export declare const PasswordPolicySchema: z.ZodObject<{
+    minLength: z.ZodDefault<z.ZodNumber>;
+    requireUppercase: z.ZodDefault<z.ZodBoolean>;
+    requireLowercase: z.ZodDefault<z.ZodBoolean>;
+    requireNumbers: z.ZodDefault<z.ZodBoolean>;
+    requireSymbols: z.ZodDefault<z.ZodBoolean>;
+    expirationDays: z.ZodOptional<z.ZodNumber>;
+    historyCount: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    minLength: number;
+    requireUppercase: boolean;
+    requireLowercase: boolean;
+    requireNumbers: boolean;
+    requireSymbols: boolean;
+    historyCount: number;
+    expirationDays?: number | undefined;
+}, {
+    minLength?: number | undefined;
+    requireUppercase?: boolean | undefined;
+    requireLowercase?: boolean | undefined;
+    requireNumbers?: boolean | undefined;
+    requireSymbols?: boolean | undefined;
+    expirationDays?: number | undefined;
+    historyCount?: number | undefined;
+}>;
+/**
+ * Network Access Policy (IP Whitelisting)
+ */
+export declare const NetworkPolicySchema: z.ZodObject<{
+    trustedRanges: z.ZodArray<z.ZodString, "many">;
+    blockUnknown: z.ZodDefault<z.ZodBoolean>;
+    vpnRequired: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    trustedRanges: string[];
+    blockUnknown: boolean;
+    vpnRequired: boolean;
+}, {
+    trustedRanges: string[];
+    blockUnknown?: boolean | undefined;
+    vpnRequired?: boolean | undefined;
+}>;
+/**
+ * Session Policy
+ */
+export declare const SessionPolicySchema: z.ZodObject<{
+    idleTimeout: z.ZodDefault<z.ZodNumber>;
+    absoluteTimeout: z.ZodDefault<z.ZodNumber>;
+    forceMfa: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    idleTimeout: number;
+    absoluteTimeout: number;
+    forceMfa: boolean;
+}, {
+    idleTimeout?: number | undefined;
+    absoluteTimeout?: number | undefined;
+    forceMfa?: boolean | undefined;
+}>;
+/**
+ * Audit Retention Policy
+ */
+export declare const AuditPolicySchema: z.ZodObject<{
+    logRetentionDays: z.ZodDefault<z.ZodNumber>;
+    sensitiveFields: z.ZodArray<z.ZodString, "many">;
+    captureRead: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    logRetentionDays: number;
+    sensitiveFields: string[];
+    captureRead: boolean;
+}, {
+    sensitiveFields: string[];
+    logRetentionDays?: number | undefined;
+    captureRead?: boolean | undefined;
+}>;
+/**
+ * Security Policy Schema
+ * "The Cloud Compliance Contract"
+ */
+export declare const PolicySchema: z.ZodObject<{
+    name: z.ZodString;
+    password: z.ZodOptional<z.ZodObject<{
+        minLength: z.ZodDefault<z.ZodNumber>;
+        requireUppercase: z.ZodDefault<z.ZodBoolean>;
+        requireLowercase: z.ZodDefault<z.ZodBoolean>;
+        requireNumbers: z.ZodDefault<z.ZodBoolean>;
+        requireSymbols: z.ZodDefault<z.ZodBoolean>;
+        expirationDays: z.ZodOptional<z.ZodNumber>;
+        historyCount: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        minLength: number;
+        requireUppercase: boolean;
+        requireLowercase: boolean;
+        requireNumbers: boolean;
+        requireSymbols: boolean;
+        historyCount: number;
+        expirationDays?: number | undefined;
+    }, {
+        minLength?: number | undefined;
+        requireUppercase?: boolean | undefined;
+        requireLowercase?: boolean | undefined;
+        requireNumbers?: boolean | undefined;
+        requireSymbols?: boolean | undefined;
+        expirationDays?: number | undefined;
+        historyCount?: number | undefined;
+    }>>;
+    network: z.ZodOptional<z.ZodObject<{
+        trustedRanges: z.ZodArray<z.ZodString, "many">;
+        blockUnknown: z.ZodDefault<z.ZodBoolean>;
+        vpnRequired: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        trustedRanges: string[];
+        blockUnknown: boolean;
+        vpnRequired: boolean;
+    }, {
+        trustedRanges: string[];
+        blockUnknown?: boolean | undefined;
+        vpnRequired?: boolean | undefined;
+    }>>;
+    session: z.ZodOptional<z.ZodObject<{
+        idleTimeout: z.ZodDefault<z.ZodNumber>;
+        absoluteTimeout: z.ZodDefault<z.ZodNumber>;
+        forceMfa: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        idleTimeout: number;
+        absoluteTimeout: number;
+        forceMfa: boolean;
+    }, {
+        idleTimeout?: number | undefined;
+        absoluteTimeout?: number | undefined;
+        forceMfa?: boolean | undefined;
+    }>>;
+    audit: z.ZodOptional<z.ZodObject<{
+        logRetentionDays: z.ZodDefault<z.ZodNumber>;
+        sensitiveFields: z.ZodArray<z.ZodString, "many">;
+        captureRead: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        logRetentionDays: number;
+        sensitiveFields: string[];
+        captureRead: boolean;
+    }, {
+        sensitiveFields: string[];
+        logRetentionDays?: number | undefined;
+        captureRead?: boolean | undefined;
+    }>>;
+    /** Assignment */
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    assignedProfiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    isDefault: boolean;
+    password?: {
+        minLength: number;
+        requireUppercase: boolean;
+        requireLowercase: boolean;
+        requireNumbers: boolean;
+        requireSymbols: boolean;
+        historyCount: number;
+        expirationDays?: number | undefined;
+    } | undefined;
+    assignedProfiles?: string[] | undefined;
+    network?: {
+        trustedRanges: string[];
+        blockUnknown: boolean;
+        vpnRequired: boolean;
+    } | undefined;
+    session?: {
+        idleTimeout: number;
+        absoluteTimeout: number;
+        forceMfa: boolean;
+    } | undefined;
+    audit?: {
+        logRetentionDays: number;
+        sensitiveFields: string[];
+        captureRead: boolean;
+    } | undefined;
+}, {
+    name: string;
+    password?: {
+        minLength?: number | undefined;
+        requireUppercase?: boolean | undefined;
+        requireLowercase?: boolean | undefined;
+        requireNumbers?: boolean | undefined;
+        requireSymbols?: boolean | undefined;
+        expirationDays?: number | undefined;
+        historyCount?: number | undefined;
+    } | undefined;
+    isDefault?: boolean | undefined;
+    assignedProfiles?: string[] | undefined;
+    network?: {
+        trustedRanges: string[];
+        blockUnknown?: boolean | undefined;
+        vpnRequired?: boolean | undefined;
+    } | undefined;
+    session?: {
+        idleTimeout?: number | undefined;
+        absoluteTimeout?: number | undefined;
+        forceMfa?: boolean | undefined;
+    } | undefined;
+    audit?: {
+        sensitiveFields: string[];
+        logRetentionDays?: number | undefined;
+        captureRead?: boolean | undefined;
+    } | undefined;
+}>;
+export type Policy = z.infer<typeof PolicySchema>;
+//# sourceMappingURL=policy.zod.d.ts.map

package/dist/system/policy.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.zod.d.ts","sourceRoot":"","sources":["../../src/system/policy.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAQ/B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAI5B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQvB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGjB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/system/policy.zod.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicySchema = exports.AuditPolicySchema = exports.SessionPolicySchema = exports.NetworkPolicySchema = exports.PasswordPolicySchema = void 0;
+const zod_1 = require("zod");
+/**
+ * Password Complexity Policy
+ */
+exports.PasswordPolicySchema = zod_1.z.object({
+    minLength: zod_1.z.number().default(8),
+    requireUppercase: zod_1.z.boolean().default(true),
+    requireLowercase: zod_1.z.boolean().default(true),
+    requireNumbers: zod_1.z.boolean().default(true),
+    requireSymbols: zod_1.z.boolean().default(false),
+    expirationDays: zod_1.z.number().optional().describe('Force password change every X days'),
+    historyCount: zod_1.z.number().default(3).describe('Prevent reusing last X passwords'),
+});
+/**
+ * Network Access Policy (IP Whitelisting)
+ */
+exports.NetworkPolicySchema = zod_1.z.object({
+    trustedRanges: zod_1.z.array(zod_1.z.string()).describe('CIDR ranges allowed to access (e.g. 10.0.0.0/8)'),
+    blockUnknown: zod_1.z.boolean().default(false).describe('Block all IPs not in trusted ranges'),
+    vpnRequired: zod_1.z.boolean().default(false),
+});
+/**
+ * Session Policy
+ */
+exports.SessionPolicySchema = zod_1.z.object({
+    idleTimeout: zod_1.z.number().default(30).describe('Minutes before idle session logout'),
+    absoluteTimeout: zod_1.z.number().default(480).describe('Max session duration (minutes)'),
+    forceMfa: zod_1.z.boolean().default(false).describe('Require 2FA for all users'),
+});
+/**
+ * Audit Retention Policy
+ */
+exports.AuditPolicySchema = zod_1.z.object({
+    logRetentionDays: zod_1.z.number().default(180),
+    sensitiveFields: zod_1.z.array(zod_1.z.string()).describe('Fields to redact in logs (e.g. password, ssn)'),
+    captureRead: zod_1.z.boolean().default(false).describe('Log read access (High volume!)'),
+});
+/**
+ * Security Policy Schema
+ * "The Cloud Compliance Contract"
+ */
+exports.PolicySchema = zod_1.z.object({
+    name: zod_1.z.string().regex(/^[a-z_][a-z0-9_]*$/).describe('Policy Name'),
+    password: exports.PasswordPolicySchema.optional(),
+    network: exports.NetworkPolicySchema.optional(),
+    session: exports.SessionPolicySchema.optional(),
+    audit: exports.AuditPolicySchema.optional(),
+    /** Assignment */
+    isDefault: zod_1.z.boolean().default(false).describe('Apply to all users by default'),
+    assignedProfiles: zod_1.z.array(zod_1.z.string()).optional().describe('Apply to specific profiles'),
+});

package/dist/system/role.zod.d.ts

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+/**
+ * Role Schema (aka Business Unit / Org Unit)
+ * Defines the organizational hierarchy (Reporting Structure).
+ *
+ * COMPARISON:
+ * - Salesforce: "Role" (Hierarchy for visibility rollup)
+ * - Microsoft: "Business Unit" (Structural container for data)
+ * - Kubernetes/AWS: "Role" usually refers to Permissions (we use PermissionSet for that)
+ *
+ * ROLES IN OBJECTSTACK:
+ * Used primarily for "Reporting Structure" - Managers see subordinates' data.
+ */
+export declare const RoleSchema: z.ZodObject<{
+    /** Identity */
+    name: z.ZodString;
+    label: z.ZodString;
+    /** Hierarchy */
+    parent: z.ZodOptional<z.ZodString>;
+    /** Description */
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    name: string;
+    description?: string | undefined;
+    parent?: string | undefined;
+}, {
+    label: string;
+    name: string;
+    description?: string | undefined;
+    parent?: string | undefined;
+}>;
+export type Role = z.infer<typeof RoleSchema>;
+//# sourceMappingURL=role.zod.d.ts.map

package/dist/system/role.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.zod.d.ts","sourceRoot":"","sources":["../../src/system/role.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU;IACrB,eAAe;;;IAIf,gBAAgB;;IAGhB,kBAAkB;;;;;;;;;;;;EAElB,CAAC;AAEH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}

package/dist/system/role.zod.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * Role Schema (aka Business Unit / Org Unit)
+ * Defines the organizational hierarchy (Reporting Structure).
+ *
+ * COMPARISON:
+ * - Salesforce: "Role" (Hierarchy for visibility rollup)
+ * - Microsoft: "Business Unit" (Structural container for data)
+ * - Kubernetes/AWS: "Role" usually refers to Permissions (we use PermissionSet for that)
+ *
+ * ROLES IN OBJECTSTACK:
+ * Used primarily for "Reporting Structure" - Managers see subordinates' data.
+ */
+exports.RoleSchema = zod_1.z.object({
+    /** Identity */
+    name: zod_1.z.string().regex(/^[a-z_][a-z0-9_]*$/).describe('Unique role name'),
+    label: zod_1.z.string().describe('Display label (e.g. VP of Sales)'),
+    /** Hierarchy */
+    parent: zod_1.z.string().optional().describe('Parent Role ID (Reports To)'),
+    /** Description */
+    description: zod_1.z.string().optional(),
+});

package/dist/system/territory.zod.d.ts

@@ -0,0 +1,91 @@
+import { z } from 'zod';
+/**
+ * Territory Management Protocol
+ * Defines a matrix reporting structure that exists parallel to the Role Hierarchy.
+ *
+ * USE CASE:
+ * - Enterprise Sales Teams (Geo-based: "EMEA", "APAC")
+ * - Industry Verticals (Industry-based: "Healthcare", "Financial")
+ * - Strategic Accounts (Account-based: "Strategic Accounts")
+ *
+ * DIFFERENCE FROM ROLE:
+ * - Role: Hierarchy of PEOPLE (Who reports to whom). Stable. HR-driven.
+ * - Territory: Hierarchy of ACCOUNTS/REVENUE (Who owns which market). Flexible. Sales-driven.
+ * - One User can be assigned to MANY Territories (Matrix).
+ * - One User has only ONE Role (Tree).
+ */
+export declare const TerritoryType: z.ZodEnum<["geography", "industry", "named_account", "product_line"]>;
+/**
+ * Territory Model Schema
+ * A container for a version of territory planning.
+ * (e.g. "Fiscal Year 2024 Planning" vs "Fiscal Year 2025 Planning")
+ */
+export declare const TerritoryModelSchema: z.ZodObject<{
+    name: z.ZodString;
+    state: z.ZodDefault<z.ZodEnum<["planning", "active", "archived"]>>;
+    startDate: z.ZodOptional<z.ZodString>;
+    endDate: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    state: "active" | "planning" | "archived";
+    name: string;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+}, {
+    name: string;
+    state?: "active" | "planning" | "archived" | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+}>;
+/**
+ * Territory Node Schema
+ * A single node in the territory tree.
+ */
+export declare const TerritorySchema: z.ZodObject<{
+    /** Identity */
+    name: z.ZodString;
+    label: z.ZodString;
+    /** Structure */
+    modelId: z.ZodString;
+    parent: z.ZodOptional<z.ZodString>;
+    type: z.ZodDefault<z.ZodEnum<["geography", "industry", "named_account", "product_line"]>>;
+    /**
+     * Assignment Rules (The "Magic")
+     * How do accounts automatically fall into this territory?
+     * e.g. "BillingCountry = 'US' AND BillingState = 'CA'"
+     */
+    assignmentRule: z.ZodOptional<z.ZodString>;
+    /**
+     * User Assignment
+     * Users assigned to work this territory.
+     */
+    assignedUsers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** Access Level */
+    accountAccess: z.ZodDefault<z.ZodEnum<["read", "edit"]>>;
+    opportunityAccess: z.ZodDefault<z.ZodEnum<["read", "edit"]>>;
+    caseAccess: z.ZodDefault<z.ZodEnum<["read", "edit"]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "geography" | "industry" | "named_account" | "product_line";
+    label: string;
+    name: string;
+    modelId: string;
+    accountAccess: "read" | "edit";
+    opportunityAccess: "read" | "edit";
+    caseAccess: "read" | "edit";
+    parent?: string | undefined;
+    assignmentRule?: string | undefined;
+    assignedUsers?: string[] | undefined;
+}, {
+    label: string;
+    name: string;
+    modelId: string;
+    type?: "geography" | "industry" | "named_account" | "product_line" | undefined;
+    parent?: string | undefined;
+    assignmentRule?: string | undefined;
+    assignedUsers?: string[] | undefined;
+    accountAccess?: "read" | "edit" | undefined;
+    opportunityAccess?: "read" | "edit" | undefined;
+    caseAccess?: "read" | "edit" | undefined;
+}>;
+export type Territory = z.infer<typeof TerritorySchema>;
+export type TerritoryModel = z.infer<typeof TerritoryModelSchema>;
+//# sourceMappingURL=territory.zod.d.ts.map

package/dist/system/territory.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"territory.zod.d.ts","sourceRoot":"","sources":["../../src/system/territory.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,aAAa,uEAKxB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;EAK/B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,eAAe;;;IAIf,gBAAgB;;;;IAKhB;;;;OAIG;;IAGH;;;OAGG;;IAGH,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;EAInB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}