@objectstack/spec 0.3.2 → 0.4.1

package/dist/system/audit.zod.d.ts

@@ -54,14 +54,14 @@ export declare const AuditEventActorSchema: z.ZodObject<{
      */
     userAgent: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    type: "system" | "user" | "service" | "api_client" | "integration";
+    type: "user" | "system" | "service" | "api_client" | "integration";
     id: string;
     email?: string | undefined;
     name?: string | undefined;
     ipAddress?: string | undefined;
     userAgent?: string | undefined;
 }, {
-    type: "system" | "user" | "service" | "api_client" | "integration";
+    type: "user" | "system" | "service" | "api_client" | "integration";
     id: string;
     email?: string | undefined;
     name?: string | undefined;
@@ -179,14 +179,14 @@ export declare const AuditEventSchema: z.ZodObject<{
          */
         userAgent: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        type: "system" | "user" | "service" | "api_client" | "integration";
+        type: "user" | "system" | "service" | "api_client" | "integration";
         id: string;
         email?: string | undefined;
         name?: string | undefined;
         ipAddress?: string | undefined;
         userAgent?: string | undefined;
     }, {
-        type: "system" | "user" | "service" | "api_client" | "integration";
+        type: "user" | "system" | "service" | "api_client" | "integration";
         id: string;
         email?: string | undefined;
         name?: string | undefined;
@@ -293,22 +293,23 @@ export declare const AuditEventSchema: z.ZodObject<{
     description: string;
     severity: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency";
     id: string;
+    result: "partial" | "success" | "failure";
     eventType: "data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked";
     timestamp: string;
     actor: {
-        type: "system" | "user" | "service" | "api_client" | "integration";
+        type: "user" | "system" | "service" | "api_client" | "integration";
         id: string;
         email?: string | undefined;
         name?: string | undefined;
         ipAddress?: string | undefined;
         userAgent?: string | undefined;
     };
-    result: "partial" | "success" | "failure";
     location?: {
         city?: string | undefined;
         country?: string | undefined;
         region?: string | undefined;
     } | undefined;
+    tenantId?: string | undefined;
     target?: {
         type: string;
         id: string;
@@ -322,7 +323,6 @@ export declare const AuditEventSchema: z.ZodObject<{
         newValue?: any;
     }[] | undefined;
     errorMessage?: string | undefined;
-    tenantId?: string | undefined;
     requestId?: string | undefined;
 }, {
     description: string;
@@ -330,7 +330,7 @@ export declare const AuditEventSchema: z.ZodObject<{
     eventType: "data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked";
     timestamp: string;
     actor: {
-        type: "system" | "user" | "service" | "api_client" | "integration";
+        type: "user" | "system" | "service" | "api_client" | "integration";
         id: string;
         email?: string | undefined;
         name?: string | undefined;
@@ -343,6 +343,8 @@ export declare const AuditEventSchema: z.ZodObject<{
         region?: string | undefined;
     } | undefined;
     severity?: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency" | undefined;
+    result?: "partial" | "success" | "failure" | undefined;
+    tenantId?: string | undefined;
     target?: {
         type: string;
         id: string;
@@ -355,9 +357,7 @@ export declare const AuditEventSchema: z.ZodObject<{
         oldValue?: any;
         newValue?: any;
     }[] | undefined;
-    result?: "partial" | "success" | "failure" | undefined;
     errorMessage?: string | undefined;
-    tenantId?: string | undefined;
     requestId?: string | undefined;
 }>;
 export type AuditEvent = z.infer<typeof AuditEventSchema>;
@@ -388,15 +388,15 @@ export declare const AuditRetentionPolicySchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         type: "s3" | "gcs" | "azure_blob" | "filesystem";
         path?: string | undefined;
-        credentials?: Record<string, any> | undefined;
         endpoint?: string | undefined;
         bucket?: string | undefined;
+        credentials?: Record<string, any> | undefined;
     }, {
         type: "s3" | "gcs" | "azure_blob" | "filesystem";
         path?: string | undefined;
-        credentials?: Record<string, any> | undefined;
         endpoint?: string | undefined;
         bucket?: string | undefined;
+        credentials?: Record<string, any> | undefined;
     }>>;
     /**
      * Event types that have different retention periods
@@ -414,9 +414,9 @@ export declare const AuditRetentionPolicySchema: z.ZodObject<{
     archiveStorage?: {
         type: "s3" | "gcs" | "azure_blob" | "filesystem";
         path?: string | undefined;
-        credentials?: Record<string, any> | undefined;
         endpoint?: string | undefined;
         bucket?: string | undefined;
+        credentials?: Record<string, any> | undefined;
     } | undefined;
     customRetention?: Record<string, number> | undefined;
     minimumRetentionDays?: number | undefined;
@@ -426,9 +426,9 @@ export declare const AuditRetentionPolicySchema: z.ZodObject<{
     archiveStorage?: {
         type: "s3" | "gcs" | "azure_blob" | "filesystem";
         path?: string | undefined;
-        credentials?: Record<string, any> | undefined;
         endpoint?: string | undefined;
         bucket?: string | undefined;
+        credentials?: Record<string, any> | undefined;
     } | undefined;
     customRetention?: Record<string, number> | undefined;
     minimumRetentionDays?: number | undefined;
@@ -482,13 +482,13 @@ export declare const SuspiciousActivityRuleSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         threshold: number;
         windowSeconds: number;
-        filters?: Record<string, any> | undefined;
         groupBy?: string[] | undefined;
+        filters?: Record<string, any> | undefined;
     }, {
         threshold: number;
         windowSeconds: number;
-        filters?: Record<string, any> | undefined;
         groupBy?: string[] | undefined;
+        filters?: Record<string, any> | undefined;
     }>;
     /**
      * Actions to take when rule is triggered
@@ -528,12 +528,12 @@ export declare const SuspiciousActivityRuleSchema: z.ZodObject<{
     condition: {
         threshold: number;
         windowSeconds: number;
-        filters?: Record<string, any> | undefined;
         groupBy?: string[] | undefined;
+        filters?: Record<string, any> | undefined;
     };
-    actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
     id: string;
     enabled: boolean;
+    actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
     eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
     alertSeverity: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency";
     description?: string | undefined;
@@ -547,11 +547,11 @@ export declare const SuspiciousActivityRuleSchema: z.ZodObject<{
     condition: {
         threshold: number;
         windowSeconds: number;
-        filters?: Record<string, any> | undefined;
         groupBy?: string[] | undefined;
+        filters?: Record<string, any> | undefined;
     };
-    actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
     id: string;
+    actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
     eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
     description?: string | undefined;
     enabled?: boolean | undefined;
@@ -602,12 +602,12 @@ export declare const AuditStorageConfigSchema: z.ZodObject<{
     bufferSize: number;
     flushIntervalSeconds: number;
     compression: boolean;
-    config?: Record<string, any> | undefined;
     connectionString?: string | undefined;
+    config?: Record<string, any> | undefined;
 }, {
     type: "custom" | "database" | "s3" | "gcs" | "azure_blob" | "elasticsearch" | "mongodb" | "clickhouse";
-    config?: Record<string, any> | undefined;
     connectionString?: string | undefined;
+    config?: Record<string, any> | undefined;
     bufferEnabled?: boolean | undefined;
     bufferSize?: number | undefined;
     flushIntervalSeconds?: number | undefined;
@@ -642,11 +642,11 @@ export declare const AuditEventFilterSchema: z.ZodObject<{
         from: z.ZodString;
         to: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        to: string;
         from: string;
-    }, {
         to: string;
+    }, {
         from: string;
+        to: string;
     }>>;
     /**
      * Filter by result status
@@ -667,8 +667,8 @@ export declare const AuditEventFilterSchema: z.ZodObject<{
     severities?: ("error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency")[] | undefined;
     actorId?: string | undefined;
     timeRange?: {
-        to: string;
         from: string;
+        to: string;
     } | undefined;
     searchQuery?: string | undefined;
     customFilters?: Record<string, any> | undefined;
@@ -679,8 +679,8 @@ export declare const AuditEventFilterSchema: z.ZodObject<{
     severities?: ("error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency")[] | undefined;
     actorId?: string | undefined;
     timeRange?: {
-        to: string;
         from: string;
+        to: string;
     } | undefined;
     searchQuery?: string | undefined;
     customFilters?: Record<string, any> | undefined;
@@ -757,12 +757,12 @@ export declare const AuditConfigSchema: z.ZodObject<{
         bufferSize: number;
         flushIntervalSeconds: number;
         compression: boolean;
-        config?: Record<string, any> | undefined;
         connectionString?: string | undefined;
+        config?: Record<string, any> | undefined;
     }, {
         type: "custom" | "database" | "s3" | "gcs" | "azure_blob" | "elasticsearch" | "mongodb" | "clickhouse";
-        config?: Record<string, any> | undefined;
         connectionString?: string | undefined;
+        config?: Record<string, any> | undefined;
         bufferEnabled?: boolean | undefined;
         bufferSize?: number | undefined;
         flushIntervalSeconds?: number | undefined;
@@ -794,15 +794,15 @@ export declare const AuditConfigSchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         }, {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         }>>;
         /**
          * Event types that have different retention periods
@@ -820,9 +820,9 @@ export declare const AuditConfigSchema: z.ZodObject<{
         archiveStorage?: {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         } | undefined;
         customRetention?: Record<string, number> | undefined;
         minimumRetentionDays?: number | undefined;
@@ -832,9 +832,9 @@ export declare const AuditConfigSchema: z.ZodObject<{
         archiveStorage?: {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         } | undefined;
         customRetention?: Record<string, number> | undefined;
         minimumRetentionDays?: number | undefined;
@@ -886,13 +886,13 @@ export declare const AuditConfigSchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         }, {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         }>;
         /**
          * Actions to take when rule is triggered
@@ -932,12 +932,12 @@ export declare const AuditConfigSchema: z.ZodObject<{
         condition: {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         };
-        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         id: string;
         enabled: boolean;
+        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
         alertSeverity: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency";
         description?: string | undefined;
@@ -951,11 +951,11 @@ export declare const AuditConfigSchema: z.ZodObject<{
         condition: {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         };
-        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         id: string;
+        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
         description?: string | undefined;
         enabled?: boolean | undefined;
@@ -1045,8 +1045,8 @@ export declare const AuditConfigSchema: z.ZodObject<{
         bufferSize: number;
         flushIntervalSeconds: number;
         compression: boolean;
-        config?: Record<string, any> | undefined;
         connectionString?: string | undefined;
+        config?: Record<string, any> | undefined;
     };
     retentionPolicy: {
         retentionDays: number;
@@ -1054,9 +1054,9 @@ export declare const AuditConfigSchema: z.ZodObject<{
         archiveStorage?: {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         } | undefined;
         customRetention?: Record<string, number> | undefined;
         minimumRetentionDays?: number | undefined;
@@ -1066,12 +1066,12 @@ export declare const AuditConfigSchema: z.ZodObject<{
         condition: {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         };
-        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         id: string;
         enabled: boolean;
+        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
         alertSeverity: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency";
         description?: string | undefined;
@@ -1086,37 +1086,31 @@ export declare const AuditConfigSchema: z.ZodObject<{
     logReads: boolean;
     readSamplingRate: number;
     logSystemEvents: boolean;
-    compliance?: {
-        immutableLogs: boolean;
-        requireSigning: boolean;
-        standards?: ("sox" | "hipaa" | "gdpr" | "pci_dss" | "iso_27001" | "fedramp")[] | undefined;
-        signingKey?: string | undefined;
-    } | undefined;
     eventTypes?: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[] | undefined;
     excludeEventTypes?: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[] | undefined;
     customHandlers?: {
         eventType: "data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked";
         handlerId: string;
     }[] | undefined;
+    compliance?: {
+        immutableLogs: boolean;
+        requireSigning: boolean;
+        standards?: ("sox" | "hipaa" | "gdpr" | "pci_dss" | "iso_27001" | "fedramp")[] | undefined;
+        signingKey?: string | undefined;
+    } | undefined;
 }, {
     label: string;
     name: string;
     storage: {
         type: "custom" | "database" | "s3" | "gcs" | "azure_blob" | "elasticsearch" | "mongodb" | "clickhouse";
-        config?: Record<string, any> | undefined;
         connectionString?: string | undefined;
+        config?: Record<string, any> | undefined;
         bufferEnabled?: boolean | undefined;
         bufferSize?: number | undefined;
         flushIntervalSeconds?: number | undefined;
         compression?: boolean | undefined;
     };
     enabled?: boolean | undefined;
-    compliance?: {
-        standards?: ("sox" | "hipaa" | "gdpr" | "pci_dss" | "iso_27001" | "fedramp")[] | undefined;
-        immutableLogs?: boolean | undefined;
-        requireSigning?: boolean | undefined;
-        signingKey?: string | undefined;
-    } | undefined;
     eventTypes?: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[] | undefined;
     excludeEventTypes?: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[] | undefined;
     minimumSeverity?: "error" | "warning" | "info" | "debug" | "notice" | "critical" | "alert" | "emergency" | undefined;
@@ -1126,9 +1120,9 @@ export declare const AuditConfigSchema: z.ZodObject<{
         archiveStorage?: {
             type: "s3" | "gcs" | "azure_blob" | "filesystem";
             path?: string | undefined;
-            credentials?: Record<string, any> | undefined;
             endpoint?: string | undefined;
             bucket?: string | undefined;
+            credentials?: Record<string, any> | undefined;
         } | undefined;
         customRetention?: Record<string, number> | undefined;
         minimumRetentionDays?: number | undefined;
@@ -1138,11 +1132,11 @@ export declare const AuditConfigSchema: z.ZodObject<{
         condition: {
             threshold: number;
             windowSeconds: number;
-            filters?: Record<string, any> | undefined;
             groupBy?: string[] | undefined;
+            filters?: Record<string, any> | undefined;
         };
-        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         id: string;
+        actions: ("alert" | "lock_account" | "block_ip" | "require_mfa" | "log_critical" | "webhook")[];
         eventTypes: ("data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked")[];
         description?: string | undefined;
         enabled?: boolean | undefined;
@@ -1162,6 +1156,12 @@ export declare const AuditConfigSchema: z.ZodObject<{
         eventType: "data.create" | "data.read" | "data.update" | "data.delete" | "data.export" | "data.import" | "data.bulk_update" | "data.bulk_delete" | "auth.login" | "auth.login_failed" | "auth.logout" | "auth.session_created" | "auth.session_expired" | "auth.password_reset" | "auth.password_changed" | "auth.email_verified" | "auth.mfa_enabled" | "auth.mfa_disabled" | "auth.account_locked" | "auth.account_unlocked" | "authz.permission_granted" | "authz.permission_revoked" | "authz.role_assigned" | "authz.role_removed" | "authz.role_created" | "authz.role_updated" | "authz.role_deleted" | "authz.policy_created" | "authz.policy_updated" | "authz.policy_deleted" | "system.config_changed" | "system.plugin_installed" | "system.plugin_uninstalled" | "system.backup_created" | "system.backup_restored" | "system.integration_added" | "system.integration_removed" | "security.access_denied" | "security.suspicious_activity" | "security.data_breach" | "security.api_key_created" | "security.api_key_revoked";
         handlerId: string;
     }[] | undefined;
+    compliance?: {
+        standards?: ("sox" | "hipaa" | "gdpr" | "pci_dss" | "iso_27001" | "fedramp")[] | undefined;
+        immutableLogs?: boolean | undefined;
+        requireSigning?: boolean | undefined;
+        signingKey?: string | undefined;
+    } | undefined;
 }>;
 export type AuditConfig = z.infer<typeof AuditConfigSchema>;
 /**

package/dist/system/context.zod.d.ts

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+/**
+ * Runtime Mode Enum
+ * Defines the operating mode of the kernel
+ */
+export declare const RuntimeMode: z.ZodEnum<["development", "production", "test", "provisioning"]>;
+export type RuntimeMode = z.infer<typeof RuntimeMode>;
+/**
+ * Kernel Context Schema
+ * Defines the static environment information available to the Kernel at boot.
+ */
+export declare const KernelContextSchema: z.ZodObject<{
+    /**
+     * Instance Identity
+     */
+    instanceId: z.ZodString;
+    /**
+     * Environment Metadata
+     */
+    mode: z.ZodDefault<z.ZodEnum<["development", "production", "test", "provisioning"]>>;
+    version: z.ZodString;
+    appName: z.ZodOptional<z.ZodString>;
+    /**
+     * Paths
+     */
+    cwd: z.ZodString;
+    workspaceRoot: z.ZodOptional<z.ZodString>;
+    /**
+     * Telemetry
+     */
+    startTime: z.ZodNumber;
+    /**
+     * Feature Flags (Global)
+     */
+    features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    mode: "test" | "development" | "production" | "provisioning";
+    version: string;
+    instanceId: string;
+    cwd: string;
+    startTime: number;
+    features: Record<string, boolean>;
+    appName?: string | undefined;
+    workspaceRoot?: string | undefined;
+}, {
+    version: string;
+    instanceId: string;
+    cwd: string;
+    startTime: number;
+    mode?: "test" | "development" | "production" | "provisioning" | undefined;
+    appName?: string | undefined;
+    workspaceRoot?: string | undefined;
+    features?: Record<string, boolean> | undefined;
+}>;
+export type KernelContext = z.infer<typeof KernelContextSchema>;
+//# sourceMappingURL=context.zod.d.ts.map

package/dist/system/context.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.zod.d.ts","sourceRoot":"","sources":["../../src/system/context.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,WAAW,kEAKY,CAAC;AAErC,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC9B;;OAEG;;IAGH;;OAEG;;;;IAKH;;OAEG;;;IAIH;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;EAEH,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/system/context.zod.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KernelContextSchema = exports.RuntimeMode = void 0;
+const zod_1 = require("zod");
+/**
+ * Runtime Mode Enum
+ * Defines the operating mode of the kernel
+ */
+exports.RuntimeMode = zod_1.z.enum([
+    'development', // Hot-reload, verbose logging
+    'production', // Optimized, strict security
+    'test', // Mocked interfaces
+    'provisioning' // Setup/Migration mode
+]).describe('Kernel operating mode');
+/**
+ * Kernel Context Schema
+ * Defines the static environment information available to the Kernel at boot.
+ */
+exports.KernelContextSchema = zod_1.z.object({
+    /**
+     * Instance Identity
+     */
+    instanceId: zod_1.z.string().uuid().describe('Unique UUID for this running kernel process'),
+    /**
+     * Environment Metadata
+     */
+    mode: exports.RuntimeMode.default('production'),
+    version: zod_1.z.string().describe('Kernel version'),
+    appName: zod_1.z.string().optional().describe('Host application name'),
+    /**
+     * Paths
+     */
+    cwd: zod_1.z.string().describe('Current working directory'),
+    workspaceRoot: zod_1.z.string().optional().describe('Workspace root if different from cwd'),
+    /**
+     * Telemetry
+     */
+    startTime: zod_1.z.number().int().describe('Boot timestamp (ms)'),
+    /**
+     * Feature Flags (Global)
+     */
+    features: zod_1.z.record(zod_1.z.boolean()).default({}).describe('Global feature toggles')
+});

package/dist/system/datasource.zod.d.ts

@@ -1,10 +1,4 @@
 import { z } from 'zod';
-/**
- * Driver Type Enum (Built-in)
- * Standard drivers supported by the core platform.
- * Plugins can register additional drivers using different identifiers.
- */
-export declare const BuiltInDrivers: readonly ["postgres", "mysql", "sqlserver", "oracle", "sqlite", "mongo", "redis", "excel", "csv", "airtable", "rest_api", "graphql", "odata", "salesforce", "sap", "workday"];
 /**
  * Driver Identifier
  * Can be a built-in driver or a plugin-contributed driver (e.g., "com.vendor.snowflake").
@@ -188,6 +182,32 @@ export declare const DatasourceSchema: z.ZodObject<{
      * Stored securely (passwords usually interpolated from ENV).
      */
     config: z.ZodRecord<z.ZodString, z.ZodAny>;
+    /**
+     * Connection Pool Configuration
+     * Standard connection pooling settings.
+     */
+    pool: z.ZodOptional<z.ZodObject<{
+        min: z.ZodDefault<z.ZodNumber>;
+        max: z.ZodDefault<z.ZodNumber>;
+        idleTimeoutMillis: z.ZodDefault<z.ZodNumber>;
+        connectionTimeoutMillis: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        min: number;
+        max: number;
+        idleTimeoutMillis: number;
+        connectionTimeoutMillis: number;
+    }, {
+        min?: number | undefined;
+        max?: number | undefined;
+        idleTimeoutMillis?: number | undefined;
+        connectionTimeoutMillis?: number | undefined;
+    }>>;
+    /**
+     * Read Replicas
+     * Optional list of duplicate configurations for read-only operations.
+     * Useful for scaling read throughput.
+     */
+    readReplicas: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodAny>, "many">>;
     /**
      * Capability Overrides
      * Manually override what the driver claims to support.
@@ -264,6 +284,13 @@ export declare const DatasourceSchema: z.ZodObject<{
         readOnly: boolean;
         dynamicSchema: boolean;
     } | undefined;
+    pool?: {
+        min: number;
+        max: number;
+        idleTimeoutMillis: number;
+        connectionTimeoutMillis: number;
+    } | undefined;
+    readReplicas?: Record<string, any>[] | undefined;
 }, {
     name: string;
     config: Record<string, any>;
@@ -284,6 +311,13 @@ export declare const DatasourceSchema: z.ZodObject<{
         readOnly?: boolean | undefined;
         dynamicSchema?: boolean | undefined;
     } | undefined;
+    pool?: {
+        min?: number | undefined;
+        max?: number | undefined;
+        idleTimeoutMillis?: number | undefined;
+        connectionTimeoutMillis?: number | undefined;
+    } | undefined;
+    readReplicas?: Record<string, any>[] | undefined;
 }>;
 export type Datasource = z.infer<typeof DatasourceSchema>;
 export type DatasourceConfig = z.infer<typeof DatasourceCapabilities>;

package/dist/system/datasource.zod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"datasource.zod.d.ts","sourceRoot":"","sources":["../../src/system/datasource.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,cAAc,+KAMjB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,UAAU,aAAsD,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;IAMjC;;;;OAIG;;IAGH;;;OAGG;;QAeH,oCAAoC;;QAOpC,iDAAiD;;QAGjD,oDAAoD;;QAGpD,oCAAoC;;QAGpC,2CAA2C;;QAG3C,oCAAoC;;QAGpC,8BAA8B;;QAG9B,2CAA2C;;QAO3C,oCAAoC;;QAGpC,oBAAoB;;QAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAnD/C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;IAKjC,oCAAoC;;IAOpC,iDAAiD;;IAGjD,oDAAoD;;IAGpD,oCAAoC;;IAGpC,2CAA2C;;IAG3C,oCAAoC;;IAGpC,8BAA8B;;IAG9B,2CAA2C;;IAO3C,oCAAoC;;IAGpC,oBAAoB;;IAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;EAE/C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB;IAC3B,mBAAmB;;IAGnB,kBAAkB;;IAGlB,aAAa;;IAGb;;;;OAIG;;IAGH;;;OAGG;;QAlEH,oCAAoC;;QAOpC,iDAAiD;;QAGjD,oDAAoD;;QAGpD,oCAAoC;;QAGpC,2CAA2C;;QAG3C,oCAAoC;;QAGpC,8BAA8B;;QAG9B,2CAA2C;;QAO3C,oCAAoC;;QAGpC,oBAAoB;;QAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+B/C,kBAAkB;;IAGlB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAElB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"datasource.zod.d.ts","sourceRoot":"","sources":["../../src/system/datasource.zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,UAAU,aAAsD,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;IAMjC;;;;OAIG;;IAGH;;;OAGG;;QAeH,oCAAoC;;QAOpC,iDAAiD;;QAGjD,oDAAoD;;QAGpD,oCAAoC;;QAGpC,2CAA2C;;QAG3C,oCAAoC;;QAGpC,8BAA8B;;QAG9B,2CAA2C;;QAO3C,oCAAoC;;QAGpC,oBAAoB;;QAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAnD/C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;IAKjC,oCAAoC;;IAOpC,iDAAiD;;IAGjD,oDAAoD;;IAGpD,oCAAoC;;IAGpC,2CAA2C;;IAG3C,oCAAoC;;IAGpC,8BAA8B;;IAG9B,2CAA2C;;IAO3C,oCAAoC;;IAGpC,oBAAoB;;IAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;EAE/C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB;IAC3B,mBAAmB;;IAGnB,kBAAkB;;IAGlB,aAAa;;IAGb;;;;OAIG;;IAGH;;;OAGG;;;;;;;;;;;;;;;;;IAQH;;;;OAIG;;IAGH;;;OAGG;;QApFH,oCAAoC;;QAOpC,iDAAiD;;QAGjD,oDAAoD;;QAGpD,oCAAoC;;QAGpC,2CAA2C;;QAG3C,oCAAoC;;QAGpC,8BAA8B;;QAG9B,2CAA2C;;QAO3C,oCAAoC;;QAGpC,oBAAoB;;QAGpB,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiD/C,kBAAkB;;IAGlB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAElB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}