@objectstack/spec 1.0.10 → 1.0.12

package/dist/hub/index.mjs

@@ -1,8 +1,8 @@
 // src/hub/composer.zod.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 
 // src/kernel/manifest.zod.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 
 // src/kernel/plugin-capability.zod.ts
 import { z } from "zod";
@@ -821,48 +821,48 @@ var PluginLoadingStateSchema = z2.object({
 import { z as z3 } from "zod";
 var PluginContextSchema = z3.object({
   ql: z3.object({
-    object: z3.function().returns(z3.any()),
+    object: z3.any(),
     // Return any to allow method chaining
-    query: z3.function().returns(z3.any())
+    query: z3.any()
   }).passthrough().describe("ObjectQL Engine Interface"),
   os: z3.object({
-    getCurrentUser: z3.function().returns(z3.any()),
-    getConfig: z3.function().returns(z3.any())
+    getCurrentUser: z3.any(),
+    getConfig: z3.any()
   }).passthrough().describe("ObjectStack Kernel Interface"),
   logger: z3.object({
-    debug: z3.function().returns(z3.void()),
-    info: z3.function().returns(z3.void()),
-    warn: z3.function().returns(z3.void()),
-    error: z3.function().returns(z3.void())
+    debug: z3.any(),
+    info: z3.any(),
+    warn: z3.any(),
+    error: z3.any()
   }).passthrough().describe("Logger Interface"),
   storage: z3.object({
-    get: z3.function().returns(z3.any()),
-    set: z3.function().returns(z3.promise(z3.void())),
-    delete: z3.function().returns(z3.promise(z3.void()))
+    get: z3.any(),
+    set: z3.any(),
+    delete: z3.any()
   }).passthrough().describe("Storage Interface"),
   i18n: z3.object({
-    t: z3.function().returns(z3.string()),
-    getLocale: z3.function().returns(z3.string())
+    t: z3.any(),
+    getLocale: z3.any()
   }).passthrough().describe("Internationalization Interface"),
   metadata: z3.record(z3.string(), z3.any()),
   events: z3.record(z3.string(), z3.any()),
   app: z3.object({
     router: z3.object({
-      get: z3.function().returns(z3.any()),
-      post: z3.function().returns(z3.any()),
-      use: z3.function().returns(z3.any())
+      get: z3.any(),
+      post: z3.any(),
+      use: z3.any()
     }).passthrough()
   }).passthrough().describe("App Framework Interface"),
   drivers: z3.object({
-    register: z3.function().returns(z3.void())
+    register: z3.any()
   }).passthrough().describe("Driver Registry")
 });
 var PluginLifecycleSchema = z3.object({
-  onInstall: z3.function().args(PluginContextSchema).returns(z3.promise(z3.void())).optional(),
-  onEnable: z3.function().args(PluginContextSchema).returns(z3.promise(z3.void())).optional(),
-  onDisable: z3.function().args(PluginContextSchema).returns(z3.promise(z3.void())).optional(),
-  onUninstall: z3.function().args(PluginContextSchema).returns(z3.promise(z3.void())).optional(),
-  onUpgrade: z3.function().args(PluginContextSchema, z3.string(), z3.string()).returns(z3.promise(z3.void())).optional()
+  onInstall: z3.any().optional(),
+  onEnable: z3.any().optional(),
+  onDisable: z3.any().optional(),
+  onUninstall: z3.any().optional(),
+  onUpgrade: z3.any().optional()
 });
 var CORE_PLUGIN_TYPES = [
   "ui",
@@ -896,8 +896,53 @@ var PluginSchema = PluginLifecycleSchema.extend({
   homepage: z3.string().url().optional()
 });
 
+// src/data/dataset.zod.ts
+import { z as z4 } from "zod";
+var DatasetMode = z4.enum([
+  "insert",
+  // Try to insert, fail on duplicate
+  "update",
+  // Only update found records, ignore new
+  "upsert",
+  // Create new or Update existing (Standard)
+  "replace",
+  // Delete ALL records in object then insert (Dangerous - use for cache tables)
+  "ignore"
+  // Try to insert, silently skip duplicates
+]);
+var DatasetSchema = z4.object({
+  /** 
+   * Target Object 
+   * The machine name of the object to populate.
+   */
+  object: z4.string().regex(/^[a-z_][a-z0-9_]*$/).describe("Target Object Name"),
+  /** 
+   * Idempotency Key (The "Upsert" Key)
+   * The field used to check if a record already exists.
+   * Best Practice: Use a natural key like 'code', 'slug', 'username' or 'external_id'.
+   * Standard: '_id' (internal ID) is rarely used for portable seed data.
+   */
+  externalId: z4.string().default("name").describe("Field match for uniqueness check"),
+  /** 
+   * Import Strategy
+   */
+  mode: DatasetMode.default("upsert").describe("Conflict resolution strategy"),
+  /**
+   * Environment Scope
+   * - 'all': Always load
+   * - 'dev': Only for development/demo
+   * - 'test': Only for CI/CD tests
+   */
+  env: z4.array(z4.enum(["prod", "dev", "test"])).default(["prod", "dev", "test"]).describe("Applicable environments"),
+  /** 
+   * The Payload
+   * Array of raw JSON objects matching the Object Schema.
+   */
+  records: z4.array(z4.record(z4.string(), z4.any())).describe("Data records")
+});
+
 // src/kernel/manifest.zod.ts
-var ManifestSchema = z4.object({
+var ManifestSchema = z5.object({
   /** 
    * Unique package identifier using reverse domain notation.
    * Must be unique across the entire ecosystem.
@@ -905,14 +950,30 @@ var ManifestSchema = z4.object({
    * @example "com.steedos.crm"
    * @example "org.apache.superset"
    */
-  id: z4.string().describe("Unique package identifier (reverse domain style)"),
+  id: z5.string().describe("Unique package identifier (reverse domain style)"),
+  /**
+   * Short namespace identifier for metadata scoping.
+   * Used as a prefix for objects and other metadata to prevent naming collisions
+   * across packages from different vendors.
+   * 
+   * Rules:
+   * - 2-20 characters, lowercase letters, digits, and underscores only.
+   * - Must be unique within a running instance.
+   * - Platform-reserved namespaces (no prefix applied): "base", "system".
+   * - FQN (Fully Qualified Name) = `{namespace}__{short_name}` (double underscore separator).
+   * 
+   * @example "crm"       → objects become crm__account, crm__deal
+   * @example "todo"      → objects become todo__task
+   * @example "base"      → objects keep short name (platform reserved)
+   */
+  namespace: z5.string().regex(/^[a-z][a-z0-9_]{1,19}$/, "Namespace must be 2-20 chars, lowercase alphanumeric + underscore").optional().describe('Short namespace identifier for metadata scoping (e.g. "crm", "todo")'),
   /** 
    * Package version following semantic versioning (major.minor.patch).
    * 
    * @example "1.0.0"
    * @example "2.1.0-beta.1"
    */
-  version: z4.string().regex(/^\d+\.\d+\.\d+$/).describe("Package version (semantic versioning)"),
+  version: z5.string().regex(/^\d+\.\d+\.\d+$/).describe("Package version (semantic versioning)"),
   /** 
    * Type of the package in the ObjectStack ecosystem.
    * - plugin: General-purpose functionality extension (Runtime: standard)
@@ -926,7 +987,7 @@ var ManifestSchema = z4.object({
    * - objectql: Core engine
    * - adapter: Host adapter (Express, Fastify)
    */
-  type: z4.enum([
+  type: z5.enum([
     "plugin",
     ...CORE_PLUGIN_TYPES,
     "module",
@@ -940,40 +1001,40 @@ var ManifestSchema = z4.object({
    * 
    * @example "Project Management"
    */
-  name: z4.string().describe("Human-readable package name"),
+  name: z5.string().describe("Human-readable package name"),
   /** 
    * Brief description of the package functionality.
    * Displayed in the marketplace and plugin manager.
    */
-  description: z4.string().optional().describe("Package description"),
+  description: z5.string().optional().describe("Package description"),
   /** 
    * Array of permission strings that the package requires.
    * These form the "Scope" requested by the package at installation.
    * 
    * @example ["system.user.read", "system.data.write"]
    */
-  permissions: z4.array(z4.string()).optional().describe("Array of required permission strings"),
+  permissions: z5.array(z5.string()).optional().describe("Array of required permission strings"),
   /** 
    * Glob patterns specifying ObjectQL schemas files.
    * Matches `*.object.yml` or `*.object.ts` files to load business objects.
    * 
    * @example ["./src/objects/*.object.yml"]
    */
-  objects: z4.array(z4.string()).optional().describe("Glob patterns for ObjectQL schemas files"),
+  objects: z5.array(z5.string()).optional().describe("Glob patterns for ObjectQL schemas files"),
   /**
    * Defines system level DataSources.
    * Matches `*.datasource.yml` files.
    * 
    * @example ["./src/datasources/*.datasource.mongo.yml"]
    */
-  datasources: z4.array(z4.string()).optional().describe("Glob patterns for Datasource definitions"),
+  datasources: z5.array(z5.string()).optional().describe("Glob patterns for Datasource definitions"),
   /**
    * Package Dependencies.
    * Map of package IDs to version requirements.
    * 
    * @example { "@steedos/plugin-auth": "^2.0.0" }
    */
-  dependencies: z4.record(z4.string(), z4.string()).optional().describe("Package dependencies"),
+  dependencies: z5.record(z5.string(), z5.string()).optional().describe("Package dependencies"),
   /**
    * Plugin Configuration Schema.
    * Defines the settings this plugin exposes to the user via UI/ENV.
@@ -988,110 +1049,114 @@ var ManifestSchema = z4.object({
    *   }
    * }
    */
-  configuration: z4.object({
-    title: z4.string().optional(),
-    properties: z4.record(z4.string(), z4.object({
-      type: z4.enum(["string", "number", "boolean", "array", "object"]).describe("Data type of the setting"),
-      default: z4.any().optional().describe("Default value"),
-      description: z4.string().optional().describe("Tooltip description"),
-      required: z4.boolean().optional().describe("Is this setting required?"),
-      secret: z4.boolean().optional().describe("If true, value is encrypted/masked (e.g. API Keys)"),
-      enum: z4.array(z4.string()).optional().describe("Allowed values for select inputs")
+  configuration: z5.object({
+    title: z5.string().optional(),
+    properties: z5.record(z5.string(), z5.object({
+      type: z5.enum(["string", "number", "boolean", "array", "object"]).describe("Data type of the setting"),
+      default: z5.any().optional().describe("Default value"),
+      description: z5.string().optional().describe("Tooltip description"),
+      required: z5.boolean().optional().describe("Is this setting required?"),
+      secret: z5.boolean().optional().describe("If true, value is encrypted/masked (e.g. API Keys)"),
+      enum: z5.array(z5.string()).optional().describe("Allowed values for select inputs")
     })).describe("Map of configuration keys to their definitions")
   }).optional().describe("Plugin configuration settings"),
   /**
    * Contribution Points (VS Code Style).
    * formalized way to extend the platform capabilities.
    */
-  contributes: z4.object({
+  contributes: z5.object({
     /**
      * Register new Metadata Kinds (CRDs).
      * Enables the system to parse and validate new file types.
      * Example: Registering a BI plugin to handle *.report.ts
      */
-    kinds: z4.array(z4.object({
-      id: z4.string().describe('The generic identifier of the kind (e.g., "sys.bi.report")'),
-      globs: z4.array(z4.string()).describe('File patterns to watch (e.g., ["**/*.report.ts"])'),
-      description: z4.string().optional().describe("Description of what this kind represents")
+    kinds: z5.array(z5.object({
+      id: z5.string().describe('The generic identifier of the kind (e.g., "sys.bi.report")'),
+      globs: z5.array(z5.string()).describe('File patterns to watch (e.g., ["**/*.report.ts"])'),
+      description: z5.string().optional().describe("Description of what this kind represents")
     })).optional().describe("New Metadata Types to recognize"),
     /**
      * Register System Hooks.
      * Declares that this plugin listens to specific system events.
      */
-    events: z4.array(z4.string()).optional().describe("Events this plugin listens to"),
+    events: z5.array(z5.string()).optional().describe("Events this plugin listens to"),
     /**
      * Register UI Menus.
      */
-    menus: z4.record(z4.string(), z4.array(z4.object({
-      id: z4.string(),
-      label: z4.string(),
-      command: z4.string().optional()
+    menus: z5.record(z5.string(), z5.array(z5.object({
+      id: z5.string(),
+      label: z5.string(),
+      command: z5.string().optional()
     }))).optional().describe("UI Menu contributions"),
     /**
      * Register Custom Themes.
      */
-    themes: z4.array(z4.object({
-      id: z4.string(),
-      label: z4.string(),
-      path: z4.string()
+    themes: z5.array(z5.object({
+      id: z5.string(),
+      label: z5.string(),
+      path: z5.string()
     })).optional().describe("Theme contributions"),
     /**
      * Register Translations.
      * Path to translation files (e.g. "locales/en.json").
      */
-    translations: z4.array(z4.object({
-      locale: z4.string(),
-      path: z4.string()
+    translations: z5.array(z5.object({
+      locale: z5.string(),
+      path: z5.string()
     })).optional().describe("Translation resources"),
     /**
      * Register Server Actions.
      * Invocable functions exposed to Flows or API.
      */
-    actions: z4.array(z4.object({
-      name: z4.string().describe("Unique action name"),
-      label: z4.string().optional(),
-      description: z4.string().optional(),
-      input: z4.any().optional().describe("Input validation schema"),
-      output: z4.any().optional().describe("Output schema")
+    actions: z5.array(z5.object({
+      name: z5.string().describe("Unique action name"),
+      label: z5.string().optional(),
+      description: z5.string().optional(),
+      input: z5.any().optional().describe("Input validation schema"),
+      output: z5.any().optional().describe("Output schema")
     })).optional().describe("Exposed server actions"),
     /**
      * Register Storage Drivers.
      * Enables connecting to new types of datasources.
      */
-    drivers: z4.array(z4.object({
-      id: z4.string().describe('Driver unique identifier (e.g. "postgres", "mongo")'),
-      label: z4.string().describe("Human readable name"),
-      description: z4.string().optional()
+    drivers: z5.array(z5.object({
+      id: z5.string().describe('Driver unique identifier (e.g. "postgres", "mongo")'),
+      label: z5.string().describe("Human readable name"),
+      description: z5.string().optional()
     })).optional().describe("Driver contributions"),
     /**
      * Register Custom Field Types.
      * Extends the data model with new widget types.
      */
-    fieldTypes: z4.array(z4.object({
-      name: z4.string().describe('Unique field type name (e.g. "vector")'),
-      label: z4.string().describe("Display label"),
-      description: z4.string().optional()
+    fieldTypes: z5.array(z5.object({
+      name: z5.string().describe('Unique field type name (e.g. "vector")'),
+      label: z5.string().describe("Display label"),
+      description: z5.string().optional()
     })).optional().describe("Field Type contributions"),
     /**
      * Register Custom Query Operators/Functions.
      * Extends ObjectQL with new functions (e.g. distance()).
      */
-    functions: z4.array(z4.object({
-      name: z4.string().describe('Function name (e.g. "distance")'),
-      description: z4.string().optional(),
-      args: z4.array(z4.string()).optional().describe("Argument types"),
-      returnType: z4.string().optional()
+    functions: z5.array(z5.object({
+      name: z5.string().describe('Function name (e.g. "distance")'),
+      description: z5.string().optional(),
+      args: z5.array(z5.string()).optional().describe("Argument types"),
+      returnType: z5.string().optional()
     })).optional().describe("Query Function contributions")
   }).optional().describe("Platform contributions"),
   /** 
    * Initial data seeding configuration.
    * Defines default records to be inserted when the package is installed.
+   * 
+   * Uses the standard DatasetSchema which supports idempotent upsert via
+   * `externalId`, environment scoping via `env`, and multiple conflict
+   * resolution modes.
+   * 
+   * @deprecated Prefer using the top-level `data` field on the Stack Definition
+   * (defineStack({ data: [...] })) for better visibility and metadata registration.
+   * This field is retained for backward compatibility with manifest-only packages.
    */
-  data: z4.array(z4.object({
-    object: z4.string().describe("Target Object Name"),
-    records: z4.array(z4.record(z4.string(), z4.any())).describe("List of records to insert"),
-    mode: z4.enum(["upsert", "insert", "ignore"]).default("upsert").describe("Seeding mode")
-  })).optional().describe("Initial seed data"),
+  data: z5.array(DatasetSchema).optional().describe("Initial seed data (prefer top-level data field)"),
   /**
    * Plugin Capability Manifest.
    * Declares protocols implemented, interfaces provided, dependencies, and extension points.
@@ -1102,7 +1167,7 @@ var ManifestSchema = z4.object({
    * Extension points contributed by this package.
    * Allows packages to extend UI components, add functionality, etc.
    */
-  extensions: z4.record(z4.string(), z4.any()).optional().describe("Extension points and contributions"),
+  extensions: z5.record(z5.string(), z5.any()).optional().describe("Extension points and contributions"),
   /**
    * Plugin Loading Configuration.
    * Configures how the plugin is loaded, initialized, and managed at runtime.
@@ -1112,61 +1177,61 @@ var ManifestSchema = z4.object({
 });
 
 // src/hub/composer.zod.ts
-var DependencyRequirementSchema = z5.object({
-  id: z5.string().describe('Plugin ID (e.g. "com.example.crm")'),
-  version: z5.string().default("latest").describe('SemVer range or "latest"'),
+var DependencyRequirementSchema = z6.object({
+  id: z6.string().describe('Plugin ID (e.g. "com.example.crm")'),
+  version: z6.string().default("latest").describe('SemVer range or "latest"'),
   /**
    * Configuration Overrides
    * Tenant-specific settings that override plugin defaults.
    * Example: { "currency": "USD", "apiKey": "..." }
    */
-  configuration: z5.record(z5.string(), z5.any()).optional().describe("Configuration overrides"),
+  configuration: z6.record(z6.string(), z6.any()).optional().describe("Configuration overrides"),
   /**
    * Feature Flags
    * Enable/Disable specific features within the plugin.
    */
-  features: z5.record(z5.string(), z5.boolean()).optional().describe("Feature toggles")
+  features: z6.record(z6.string(), z6.boolean()).optional().describe("Feature toggles")
 });
-var BillOfMaterialsSchema = z5.object({
-  tenantId: z5.string().describe("Target Tenant ID"),
+var BillOfMaterialsSchema = z6.object({
+  tenantId: z6.string().describe("Target Tenant ID"),
   /**
    * List of installed plugins/apps.
    * implementation order matters (later plugins override earlier ones by default).
    */
-  dependencies: z5.array(DependencyRequirementSchema).describe("Installed packages"),
+  dependencies: z6.array(DependencyRequirementSchema).describe("Installed packages"),
   /**
    * Environment Variables injection.
    * Maps abstract keys to secure vault references or concrete values.
    */
-  environment: z5.record(z5.string(), z5.string()).optional(),
+  environment: z6.record(z6.string(), z6.string()).optional(),
   /**
    * Global Resolution Strategy
    * How to handle conflicts when multiple plugins define the same resource.
    */
-  resolutionStrategy: z5.enum(["strict", "override", "merge"]).default("override").describe("Conflict resolution strategy (strict=fail, override=last-wins, merge=deep-merge)")
+  resolutionStrategy: z6.enum(["strict", "override", "merge"]).default("override").describe("Conflict resolution strategy (strict=fail, override=last-wins, merge=deep-merge)")
 });
-var ConflictReportSchema = z5.object({
-  resourceType: z5.enum(["object", "field", "api", "ui"]).describe("Type of colliding resource"),
-  resourceId: z5.string().describe("ID of the resource"),
-  sources: z5.array(z5.string()).describe("List of plugin IDs defining this resource"),
-  resolution: z5.string().describe('How it was resolved (e.g. "com.example.erp won")'),
-  severity: z5.enum(["info", "warning", "error"]).describe("Severity of the conflict")
+var ConflictReportSchema = z6.object({
+  resourceType: z6.enum(["object", "field", "api", "ui"]).describe("Type of colliding resource"),
+  resourceId: z6.string().describe("ID of the resource"),
+  sources: z6.array(z6.string()).describe("List of plugin IDs defining this resource"),
+  resolution: z6.string().describe('How it was resolved (e.g. "com.example.erp won")'),
+  severity: z6.enum(["info", "warning", "error"]).describe("Severity of the conflict")
 });
-var ComposerRequestSchema = z5.object({
+var ComposerRequestSchema = z6.object({
   bom: BillOfMaterialsSchema,
   /**
    * Target Runtime Version
    * Ensure generated manifest is compatible with the specific runtime version.
    */
-  runtimeVersion: z5.string().optional(),
+  runtimeVersion: z6.string().optional(),
   /**
    * Dry Run
    * If true, generates report but does not persist the manifest.
    */
-  dryRun: z5.boolean().default(false)
+  dryRun: z6.boolean().default(false)
 });
-var ComposerResponseSchema = z5.object({
-  success: z5.boolean(),
+var ComposerResponseSchema = z6.object({
+  success: z6.boolean(),
   /**
    * The Holy Grail: The Executable System Manifest.
    * This is what the Runtime loads to boot.
@@ -1176,150 +1241,150 @@ var ComposerResponseSchema = z5.object({
    * Manifest URL
    * Presigned URL to download the manifest if stored externally (e.g. Vercel KV/S3).
    */
-  manifestUrl: z5.string().url().optional().describe("Presigned download URL"),
+  manifestUrl: z6.string().url().optional().describe("Presigned download URL"),
   /**
    * Compilation Metadata
    */
-  buildId: z5.string(),
-  timestamp: z5.string().datetime(),
-  duration: z5.number().describe("Compilation time in ms"),
+  buildId: z6.string(),
+  timestamp: z6.string().datetime(),
+  duration: z6.number().describe("Compilation time in ms"),
   /**
    * Analysis
    */
-  conflicts: z5.array(ConflictReportSchema).optional(),
-  errors: z5.array(z5.string()).optional()
+  conflicts: z6.array(ConflictReportSchema).optional(),
+  errors: z6.array(z6.string()).optional()
 });
 
 // src/hub/marketplace.zod.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 
 // src/hub/plugin-registry.zod.ts
-import { z as z6 } from "zod";
-var PluginVendorSchema = z6.object({
+import { z as z7 } from "zod";
+var PluginVendorSchema = z7.object({
   /**
    * Vendor identifier (reverse domain notation)
    * Example: "com.acme", "org.apache", "com.objectstack"
    */
-  id: z6.string().regex(/^[a-z][a-z0-9]*(\.[a-z][a-z0-9]*)+$/).describe("Vendor identifier (reverse domain)"),
+  id: z7.string().regex(/^[a-z][a-z0-9]*(\.[a-z][a-z0-9]*)+$/).describe("Vendor identifier (reverse domain)"),
   /**
    * Vendor display name
    */
-  name: z6.string(),
+  name: z7.string(),
   /**
    * Vendor website
    */
-  website: z6.string().url().optional(),
+  website: z7.string().url().optional(),
   /**
    * Contact email
    */
-  email: z6.string().email().optional(),
+  email: z7.string().email().optional(),
   /**
    * Verification status
    */
-  verified: z6.boolean().default(false).describe("Whether vendor is verified by ObjectStack"),
+  verified: z7.boolean().default(false).describe("Whether vendor is verified by ObjectStack"),
   /**
    * Trust level
    */
-  trustLevel: z6.enum(["official", "verified", "community", "unverified"]).default("unverified")
+  trustLevel: z7.enum(["official", "verified", "community", "unverified"]).default("unverified")
 });
-var PluginQualityMetricsSchema = z6.object({
+var PluginQualityMetricsSchema = z7.object({
   /**
    * Test coverage percentage
    */
-  testCoverage: z6.number().min(0).max(100).optional(),
+  testCoverage: z7.number().min(0).max(100).optional(),
   /**
    * Documentation score (0-100)
    */
-  documentationScore: z6.number().min(0).max(100).optional(),
+  documentationScore: z7.number().min(0).max(100).optional(),
   /**
    * Code quality score (0-100)
    */
-  codeQuality: z6.number().min(0).max(100).optional(),
+  codeQuality: z7.number().min(0).max(100).optional(),
   /**
    * Security scan status
    */
-  securityScan: z6.object({
-    lastScanDate: z6.string().datetime().optional(),
-    vulnerabilities: z6.object({
-      critical: z6.number().int().min(0).default(0),
-      high: z6.number().int().min(0).default(0),
-      medium: z6.number().int().min(0).default(0),
-      low: z6.number().int().min(0).default(0)
+  securityScan: z7.object({
+    lastScanDate: z7.string().datetime().optional(),
+    vulnerabilities: z7.object({
+      critical: z7.number().int().min(0).default(0),
+      high: z7.number().int().min(0).default(0),
+      medium: z7.number().int().min(0).default(0),
+      low: z7.number().int().min(0).default(0)
     }).optional(),
-    passed: z6.boolean().default(false)
+    passed: z7.boolean().default(false)
   }).optional(),
   /**
    * Conformance test results
    */
-  conformanceTests: z6.array(z6.object({
-    protocolId: z6.string().describe("Protocol being tested"),
-    passed: z6.boolean(),
-    totalTests: z6.number().int().min(0),
-    passedTests: z6.number().int().min(0),
-    lastRunDate: z6.string().datetime().optional()
+  conformanceTests: z7.array(z7.object({
+    protocolId: z7.string().describe("Protocol being tested"),
+    passed: z7.boolean(),
+    totalTests: z7.number().int().min(0),
+    passedTests: z7.number().int().min(0),
+    lastRunDate: z7.string().datetime().optional()
   })).optional()
 });
-var PluginStatisticsSchema = z6.object({
+var PluginStatisticsSchema = z7.object({
   /**
    * Total downloads
    */
-  downloads: z6.number().int().min(0).default(0),
+  downloads: z7.number().int().min(0).default(0),
   /**
    * Downloads in the last 30 days
    */
-  downloadsLastMonth: z6.number().int().min(0).default(0),
+  downloadsLastMonth: z7.number().int().min(0).default(0),
   /**
    * Number of active installations
    */
-  activeInstallations: z6.number().int().min(0).default(0),
+  activeInstallations: z7.number().int().min(0).default(0),
   /**
    * User ratings
    */
-  ratings: z6.object({
-    average: z6.number().min(0).max(5).default(0),
-    count: z6.number().int().min(0).default(0),
-    distribution: z6.object({
-      "5": z6.number().int().min(0).default(0),
-      "4": z6.number().int().min(0).default(0),
-      "3": z6.number().int().min(0).default(0),
-      "2": z6.number().int().min(0).default(0),
-      "1": z6.number().int().min(0).default(0)
+  ratings: z7.object({
+    average: z7.number().min(0).max(5).default(0),
+    count: z7.number().int().min(0).default(0),
+    distribution: z7.object({
+      "5": z7.number().int().min(0).default(0),
+      "4": z7.number().int().min(0).default(0),
+      "3": z7.number().int().min(0).default(0),
+      "2": z7.number().int().min(0).default(0),
+      "1": z7.number().int().min(0).default(0)
     }).optional()
   }).optional(),
   /**
    * GitHub stars (if open source)
    */
-  stars: z6.number().int().min(0).optional(),
+  stars: z7.number().int().min(0).optional(),
   /**
    * Number of dependent plugins
    */
-  dependents: z6.number().int().min(0).default(0)
+  dependents: z7.number().int().min(0).default(0)
 });
-var PluginRegistryEntrySchema = z6.object({
+var PluginRegistryEntrySchema = z7.object({
   /**
    * Plugin identifier (must match manifest.id)
    */
-  id: z6.string().regex(/^([a-z][a-z0-9]*\.)+[a-z][a-z0-9-]+$/).describe("Plugin identifier (reverse domain notation)"),
+  id: z7.string().regex(/^([a-z][a-z0-9]*\.)+[a-z][a-z0-9-]+$/).describe("Plugin identifier (reverse domain notation)"),
   /**
    * Current version
    */
-  version: z6.string().regex(/^\d+\.\d+\.\d+$/),
+  version: z7.string().regex(/^\d+\.\d+\.\d+$/),
   /**
    * Plugin display name
    */
-  name: z6.string(),
+  name: z7.string(),
   /**
    * Short description
    */
-  description: z6.string().optional(),
+  description: z7.string().optional(),
   /**
    * Detailed documentation/README
    */
-  readme: z6.string().optional(),
+  readme: z7.string().optional(),
   /**
    * Plugin type/category
    */
-  category: z6.enum([
+  category: z7.enum([
     "data",
     // Data management, storage, databases
     "integration",
@@ -1346,7 +1411,7 @@ var PluginRegistryEntrySchema = z6.object({
   /**
    * Tags for categorization
    */
-  tags: z6.array(z6.string()).optional(),
+  tags: z7.array(z7.string()).optional(),
   /**
    * Vendor information
    */
@@ -1358,42 +1423,42 @@ var PluginRegistryEntrySchema = z6.object({
   /**
    * Compatibility information
    */
-  compatibility: z6.object({
+  compatibility: z7.object({
     /**
      * Minimum ObjectStack version required
      */
-    minObjectStackVersion: z6.string().optional(),
+    minObjectStackVersion: z7.string().optional(),
     /**
      * Maximum ObjectStack version supported
      */
-    maxObjectStackVersion: z6.string().optional(),
+    maxObjectStackVersion: z7.string().optional(),
     /**
      * Node.js version requirement
      */
-    nodeVersion: z6.string().optional(),
+    nodeVersion: z7.string().optional(),
     /**
      * Supported platforms
      */
-    platforms: z6.array(z6.enum(["linux", "darwin", "win32", "browser"])).optional()
+    platforms: z7.array(z7.enum(["linux", "darwin", "win32", "browser"])).optional()
   }).optional(),
   /**
    * Links and resources
    */
-  links: z6.object({
-    homepage: z6.string().url().optional(),
-    repository: z6.string().url().optional(),
-    documentation: z6.string().url().optional(),
-    bugs: z6.string().url().optional(),
-    changelog: z6.string().url().optional()
+  links: z7.object({
+    homepage: z7.string().url().optional(),
+    repository: z7.string().url().optional(),
+    documentation: z7.string().url().optional(),
+    bugs: z7.string().url().optional(),
+    changelog: z7.string().url().optional()
   }).optional(),
   /**
    * Media assets
    */
-  media: z6.object({
-    icon: z6.string().url().optional(),
-    logo: z6.string().url().optional(),
-    screenshots: z6.array(z6.string().url()).optional(),
-    video: z6.string().url().optional()
+  media: z7.object({
+    icon: z7.string().url().optional(),
+    logo: z7.string().url().optional(),
+    screenshots: z7.array(z7.string().url()).optional(),
+    video: z7.string().url().optional()
   }).optional(),
   /**
    * Quality metrics
@@ -1406,70 +1471,70 @@ var PluginRegistryEntrySchema = z6.object({
   /**
    * License information
    */
-  license: z6.string().optional().describe("SPDX license identifier"),
+  license: z7.string().optional().describe("SPDX license identifier"),
   /**
    * Pricing (if commercial)
    */
-  pricing: z6.object({
-    model: z6.enum(["free", "freemium", "paid", "enterprise"]),
-    price: z6.number().min(0).optional(),
-    currency: z6.string().default("USD").optional(),
-    billingPeriod: z6.enum(["one-time", "monthly", "yearly"]).optional()
+  pricing: z7.object({
+    model: z7.enum(["free", "freemium", "paid", "enterprise"]),
+    price: z7.number().min(0).optional(),
+    currency: z7.string().default("USD").optional(),
+    billingPeriod: z7.enum(["one-time", "monthly", "yearly"]).optional()
   }).optional(),
   /**
    * Publication dates
    */
-  publishedAt: z6.string().datetime().optional(),
-  updatedAt: z6.string().datetime().optional(),
+  publishedAt: z7.string().datetime().optional(),
+  updatedAt: z7.string().datetime().optional(),
   /**
    * Deprecation status
    */
-  deprecated: z6.boolean().default(false),
-  deprecationMessage: z6.string().optional(),
-  replacedBy: z6.string().optional().describe("Plugin ID that replaces this one"),
+  deprecated: z7.boolean().default(false),
+  deprecationMessage: z7.string().optional(),
+  replacedBy: z7.string().optional().describe("Plugin ID that replaces this one"),
   /**
    * Feature flags
    */
-  flags: z6.object({
-    experimental: z6.boolean().default(false),
-    beta: z6.boolean().default(false),
-    featured: z6.boolean().default(false),
-    verified: z6.boolean().default(false)
+  flags: z7.object({
+    experimental: z7.boolean().default(false),
+    beta: z7.boolean().default(false),
+    featured: z7.boolean().default(false),
+    verified: z7.boolean().default(false)
   }).optional()
 });
-var PluginSearchFiltersSchema = z6.object({
+var PluginSearchFiltersSchema = z7.object({
   /**
    * Search query
    */
-  query: z6.string().optional(),
+  query: z7.string().optional(),
   /**
    * Filter by category
    */
-  category: z6.array(z6.string()).optional(),
+  category: z7.array(z7.string()).optional(),
   /**
    * Filter by tags
    */
-  tags: z6.array(z6.string()).optional(),
+  tags: z7.array(z7.string()).optional(),
   /**
    * Filter by vendor trust level
    */
-  trustLevel: z6.array(z6.enum(["official", "verified", "community", "unverified"])).optional(),
+  trustLevel: z7.array(z7.enum(["official", "verified", "community", "unverified"])).optional(),
   /**
    * Filter by protocols implemented
    */
-  implementsProtocols: z6.array(z6.string()).optional(),
+  implementsProtocols: z7.array(z7.string()).optional(),
   /**
    * Filter by pricing model
    */
-  pricingModel: z6.array(z6.enum(["free", "freemium", "paid", "enterprise"])).optional(),
+  pricingModel: z7.array(z7.enum(["free", "freemium", "paid", "enterprise"])).optional(),
   /**
    * Minimum rating
    */
-  minRating: z6.number().min(0).max(5).optional(),
+  minRating: z7.number().min(0).max(5).optional(),
   /**
    * Sort options
    */
-  sortBy: z6.enum([
+  sortBy: z7.enum([
     "relevance",
     "downloads",
     "rating",
@@ -1479,97 +1544,97 @@ var PluginSearchFiltersSchema = z6.object({
   /**
    * Sort order
    */
-  sortOrder: z6.enum(["asc", "desc"]).default("desc").optional(),
+  sortOrder: z7.enum(["asc", "desc"]).default("desc").optional(),
   /**
    * Pagination
    */
-  page: z6.number().int().min(1).default(1).optional(),
-  limit: z6.number().int().min(1).max(100).default(20).optional()
+  page: z7.number().int().min(1).default(1).optional(),
+  limit: z7.number().int().min(1).max(100).default(20).optional()
 });
-var PluginInstallConfigSchema = z6.object({
+var PluginInstallConfigSchema = z7.object({
   /**
    * Plugin identifier to install
    */
-  pluginId: z6.string(),
+  pluginId: z7.string(),
   /**
    * Version to install (supports semver ranges)
    */
-  version: z6.string().optional().describe("Defaults to latest"),
+  version: z7.string().optional().describe("Defaults to latest"),
   /**
    * Plugin-specific configuration values
    */
-  config: z6.record(z6.string(), z6.any()).optional(),
+  config: z7.record(z7.string(), z7.any()).optional(),
   /**
    * Whether to auto-update
    */
-  autoUpdate: z6.boolean().default(false).optional(),
+  autoUpdate: z7.boolean().default(false).optional(),
   /**
    * Installation options
    */
-  options: z6.object({
+  options: z7.object({
     /**
      * Skip dependency installation
      */
-    skipDependencies: z6.boolean().default(false).optional(),
+    skipDependencies: z7.boolean().default(false).optional(),
     /**
      * Force reinstall
      */
-    force: z6.boolean().default(false).optional(),
+    force: z7.boolean().default(false).optional(),
     /**
      * Installation target
      */
-    target: z6.enum(["system", "space", "user"]).default("space").optional()
+    target: z7.enum(["system", "space", "user"]).default("space").optional()
   }).optional()
 });
 
 // src/hub/marketplace.zod.ts
 var PluginAuthorSchema = PluginVendorSchema;
-var PluginPricingSchema = z7.object({
-  type: z7.enum(["free", "one_time", "recurring"]),
-  currency: z7.string().default("USD"),
-  amount: z7.number().min(0),
-  interval: z7.enum(["month", "year"]).optional().describe("Required if type is recurring"),
-  trialDays: z7.number().int().optional()
+var PluginPricingSchema = z8.object({
+  type: z8.enum(["free", "one_time", "recurring"]),
+  currency: z8.string().default("USD"),
+  amount: z8.number().min(0),
+  interval: z8.enum(["month", "year"]).optional().describe("Required if type is recurring"),
+  trialDays: z8.number().int().optional()
 });
-var PluginVersionSchema = z7.object({
-  version: z7.string().describe("SemVer string (e.g. 1.0.0)"),
-  publishedAt: z7.string().datetime().describe("Publication date"),
-  downloadUrl: z7.string().url().describe("Archive download URL"),
-  checksum: z7.string().optional().describe("Integrity checksum (shasum)"),
-  engine: z7.object({
-    node: z7.string().optional(),
-    objectstack: z7.string().describe("Required ObjectStack kernel version range")
+var PluginVersionSchema = z8.object({
+  version: z8.string().describe("SemVer string (e.g. 1.0.0)"),
+  publishedAt: z8.string().datetime().describe("Publication date"),
+  downloadUrl: z8.string().url().describe("Archive download URL"),
+  checksum: z8.string().optional().describe("Integrity checksum (shasum)"),
+  engine: z8.object({
+    node: z8.string().optional(),
+    objectstack: z8.string().describe("Required ObjectStack kernel version range")
   }).optional().describe("Engine compatibility"),
-  dependencies: z7.record(z7.string(), z7.string()).optional().describe("Runtime plugin dependencies"),
-  changeLog: z7.string().optional().describe("Release notes")
+  dependencies: z8.record(z8.string(), z8.string()).optional().describe("Runtime plugin dependencies"),
+  changeLog: z8.string().optional().describe("Release notes")
 });
-var MarketplacePluginSchema = z7.object({
+var MarketplacePluginSchema = z8.object({
   /**
    * Package Identifier
    * Usually the NPM package name (e.g. "@steedos/plugin-crm")
    */
-  id: z7.string(),
+  id: z8.string(),
   /**
    * Version History
    * Registry of all available versions
    */
-  versions: z7.record(z7.string(), PluginVersionSchema).optional().describe("Map of versions (1.0.0) -> Details"),
+  versions: z8.record(z8.string(), PluginVersionSchema).optional().describe("Map of versions (1.0.0) -> Details"),
   /**
    * Display Name
    */
-  label: z7.string(),
+  label: z8.string(),
   /**
    * Short Description
    */
-  description: z7.string().optional(),
+  description: z8.string().optional(),
   /**
    * Detailed README / Documentation content
    */
-  readme: z7.string().optional(),
+  readme: z8.string().optional(),
   /**
    * Latest Version
    */
-  version: z7.string(),
+  version: z8.string(),
   /**
    * Vendor / Publisher
    */
@@ -1577,8 +1642,8 @@ var MarketplacePluginSchema = z7.object({
   /**
    * Categorization
    */
-  tags: z7.array(z7.string()).optional(),
-  category: z7.enum([
+  tags: z8.array(z8.string()).optional(),
+  category: z8.enum([
     "app",
     "integration",
     "theme",
@@ -1593,29 +1658,29 @@ var MarketplacePluginSchema = z7.object({
   /**
    * Assets
    */
-  icon: z7.string().url().optional(),
-  screenshots: z7.array(z7.string().url()).optional(),
+  icon: z8.string().url().optional(),
+  screenshots: z8.array(z8.string().url()).optional(),
   /**
    * Links
    */
-  homepage: z7.string().url().optional(),
-  repository: z7.string().url().optional(),
-  bugs: z7.string().url().optional(),
+  homepage: z8.string().url().optional(),
+  repository: z8.string().url().optional(),
+  bugs: z8.string().url().optional(),
   /**
    * Statistics
    */
-  downloads: z7.number().int().optional(),
-  rating: z7.number().min(0).max(5).optional(),
+  downloads: z8.number().int().optional(),
+  rating: z8.number().min(0).max(5).optional(),
   /**
    * Commercial Information
    */
   pricing: PluginPricingSchema.optional(),
-  verified: z7.boolean().default(false).describe("Is verified maintaned by ObjectStack")
+  verified: z8.boolean().default(false).describe("Is verified maintaned by ObjectStack")
 });
 
 // src/hub/registry-config.zod.ts
-import { z as z8 } from "zod";
-var RegistrySyncPolicySchema = z8.enum([
+import { z as z9 } from "zod";
+var RegistrySyncPolicySchema = z9.enum([
   "manual",
   // Manual synchronization only
   "auto",
@@ -1623,11 +1688,11 @@ var RegistrySyncPolicySchema = z8.enum([
   "proxy"
   // Proxy requests to upstream without caching
 ]).describe("Registry synchronization strategy");
-var RegistryUpstreamSchema = z8.object({
+var RegistryUpstreamSchema = z9.object({
   /**
    * Upstream registry URL
    */
-  url: z8.string().url().describe("Upstream registry endpoint"),
+  url: z9.string().url().describe("Upstream registry endpoint"),
   /**
    * Synchronization policy
    */
@@ -1635,43 +1700,43 @@ var RegistryUpstreamSchema = z8.object({
   /**
    * Sync interval in seconds (for auto sync)
    */
-  syncInterval: z8.number().int().min(60).optional().describe("Auto-sync interval in seconds"),
+  syncInterval: z9.number().int().min(60).optional().describe("Auto-sync interval in seconds"),
   /**
    * Authentication credentials
    */
-  auth: z8.object({
-    type: z8.enum(["none", "basic", "bearer", "api-key", "oauth2"]).default("none"),
-    username: z8.string().optional(),
-    password: z8.string().optional(),
-    token: z8.string().optional(),
-    apiKey: z8.string().optional()
+  auth: z9.object({
+    type: z9.enum(["none", "basic", "bearer", "api-key", "oauth2"]).default("none"),
+    username: z9.string().optional(),
+    password: z9.string().optional(),
+    token: z9.string().optional(),
+    apiKey: z9.string().optional()
   }).optional(),
   /**
    * TLS/SSL configuration
    */
-  tls: z8.object({
-    enabled: z8.boolean().default(true),
-    verifyCertificate: z8.boolean().default(true),
-    certificate: z8.string().optional(),
-    privateKey: z8.string().optional()
+  tls: z9.object({
+    enabled: z9.boolean().default(true),
+    verifyCertificate: z9.boolean().default(true),
+    certificate: z9.string().optional(),
+    privateKey: z9.string().optional()
   }).optional(),
   /**
    * Timeout settings
    */
-  timeout: z8.number().int().min(1e3).default(3e4).describe("Request timeout in milliseconds"),
+  timeout: z9.number().int().min(1e3).default(3e4).describe("Request timeout in milliseconds"),
   /**
    * Retry configuration
    */
-  retry: z8.object({
-    maxAttempts: z8.number().int().min(0).default(3),
-    backoff: z8.enum(["fixed", "linear", "exponential"]).default("exponential")
+  retry: z9.object({
+    maxAttempts: z9.number().int().min(0).default(3),
+    backoff: z9.enum(["fixed", "linear", "exponential"]).default("exponential")
   }).optional()
 });
-var RegistryConfigSchema = z8.object({
+var RegistryConfigSchema = z9.object({
   /**
    * Registry type
    */
-  type: z8.enum([
+  type: z9.enum([
     "public",
     // Public marketplace (e.g., plugins.objectstack.com)
     "private",
@@ -1682,76 +1747,76 @@ var RegistryConfigSchema = z8.object({
   /**
    * Upstream registries (for hybrid/private registries)
    */
-  upstream: z8.array(RegistryUpstreamSchema).optional().describe("Upstream registries to sync from or proxy to"),
+  upstream: z9.array(RegistryUpstreamSchema).optional().describe("Upstream registries to sync from or proxy to"),
   /**
    * Scopes managed by this registry
    */
-  scope: z8.array(z8.string()).optional().describe("npm-style scopes managed by this registry (e.g., @my-corp, @enterprise)"),
+  scope: z9.array(z9.string()).optional().describe("npm-style scopes managed by this registry (e.g., @my-corp, @enterprise)"),
   /**
    * Default scope for new plugins
    */
-  defaultScope: z8.string().optional().describe("Default scope prefix for new plugins"),
+  defaultScope: z9.string().optional().describe("Default scope prefix for new plugins"),
   /**
    * Registry storage configuration
    */
-  storage: z8.object({
+  storage: z9.object({
     /**
      * Storage backend type
      */
-    backend: z8.enum(["local", "s3", "gcs", "azure-blob", "oss"]).default("local"),
+    backend: z9.enum(["local", "s3", "gcs", "azure-blob", "oss"]).default("local"),
     /**
      * Storage path or bucket name
      */
-    path: z8.string().optional(),
+    path: z9.string().optional(),
     /**
      * Credentials
      */
-    credentials: z8.record(z8.string(), z8.any()).optional()
+    credentials: z9.record(z9.string(), z9.any()).optional()
   }).optional(),
   /**
    * Registry visibility
    */
-  visibility: z8.enum(["public", "private", "internal"]).default("private").describe("Who can access this registry"),
+  visibility: z9.enum(["public", "private", "internal"]).default("private").describe("Who can access this registry"),
   /**
    * Access control
    */
-  accessControl: z8.object({
+  accessControl: z9.object({
     /**
      * Require authentication for read
      */
-    requireAuthForRead: z8.boolean().default(false),
+    requireAuthForRead: z9.boolean().default(false),
     /**
      * Require authentication for write
      */
-    requireAuthForWrite: z8.boolean().default(true),
+    requireAuthForWrite: z9.boolean().default(true),
     /**
      * Allowed users/teams
      */
-    allowedPrincipals: z8.array(z8.string()).optional()
+    allowedPrincipals: z9.array(z9.string()).optional()
   }).optional(),
   /**
    * Caching configuration
    */
-  cache: z8.object({
-    enabled: z8.boolean().default(true),
-    ttl: z8.number().int().min(0).default(3600).describe("Cache TTL in seconds"),
-    maxSize: z8.number().int().optional().describe("Maximum cache size in bytes")
+  cache: z9.object({
+    enabled: z9.boolean().default(true),
+    ttl: z9.number().int().min(0).default(3600).describe("Cache TTL in seconds"),
+    maxSize: z9.number().int().optional().describe("Maximum cache size in bytes")
   }).optional(),
   /**
    * Mirroring configuration (for high availability)
    */
-  mirrors: z8.array(z8.object({
-    url: z8.string().url(),
-    priority: z8.number().int().min(1).default(1)
+  mirrors: z9.array(z9.object({
+    url: z9.string().url(),
+    priority: z9.number().int().min(1).default(1)
   })).optional().describe("Mirror registries for redundancy")
 });
 
 // src/hub/space.zod.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 
 // src/hub/tenant.zod.ts
-import { z as z9 } from "zod";
-var TenantIsolationLevel = z9.enum([
+import { z as z10 } from "zod";
+var TenantIsolationLevel = z10.enum([
   "shared_schema",
   // Shared DB, shared schema, row-level isolation (most economical)
   "isolated_schema",
@@ -1759,29 +1824,29 @@ var TenantIsolationLevel = z9.enum([
   "isolated_db"
   // Separate database per tenant (maximum isolation)
 ]);
-var TenantQuotaSchema = z9.object({
+var TenantQuotaSchema = z10.object({
   /**
    * Maximum number of users allowed for this tenant
    */
-  maxUsers: z9.number().int().positive().optional().describe("Maximum number of users"),
+  maxUsers: z10.number().int().positive().optional().describe("Maximum number of users"),
   /**
    * Maximum storage space in bytes
    */
-  maxStorage: z9.number().int().positive().optional().describe("Maximum storage in bytes"),
+  maxStorage: z10.number().int().positive().optional().describe("Maximum storage in bytes"),
   /**
    * API rate limit (requests per minute)
    */
-  apiRateLimit: z9.number().int().positive().optional().describe("API requests per minute")
+  apiRateLimit: z10.number().int().positive().optional().describe("API requests per minute")
 });
-var TenantSchema = z9.object({
+var TenantSchema = z10.object({
   /**
    * Unique tenant identifier
    */
-  id: z9.string().describe("Unique tenant identifier"),
+  id: z10.string().describe("Unique tenant identifier"),
   /**
    * Tenant display name
    */
-  name: z9.string().describe("Tenant display name"),
+  name: z10.string().describe("Tenant display name"),
   /**
    * Data isolation level
    */
@@ -1789,26 +1854,26 @@ var TenantSchema = z9.object({
   /**
    * Custom configuration values
    */
-  customizations: z9.record(z9.string(), z9.any()).optional().describe("Custom configuration values"),
+  customizations: z10.record(z10.string(), z10.any()).optional().describe("Custom configuration values"),
   /**
    * Resource quotas
    */
   quotas: TenantQuotaSchema.optional()
 });
-var RowLevelIsolationStrategySchema = z9.object({
-  strategy: z9.literal("shared_schema").describe("Row-level isolation strategy"),
+var RowLevelIsolationStrategySchema = z10.object({
+  strategy: z10.literal("shared_schema").describe("Row-level isolation strategy"),
   /**
    * Database configuration for row-level isolation
    */
-  database: z9.object({
+  database: z10.object({
     /**
      * Whether to enable Row-Level Security (RLS)
      */
-    enableRLS: z9.boolean().default(true).describe("Enable PostgreSQL Row-Level Security"),
+    enableRLS: z10.boolean().default(true).describe("Enable PostgreSQL Row-Level Security"),
     /**
      * Tenant context setting method
      */
-    contextMethod: z9.enum([
+    contextMethod: z10.enum([
       "session_variable",
       // SET app.current_tenant = 'tenant_123'
       "search_path",
@@ -1819,63 +1884,63 @@ var RowLevelIsolationStrategySchema = z9.object({
     /**
      * Session variable name for tenant context
      */
-    contextVariable: z9.string().default("app.current_tenant").describe("Session variable name"),
+    contextVariable: z10.string().default("app.current_tenant").describe("Session variable name"),
     /**
      * Whether to validate tenant_id at application level
      */
-    applicationValidation: z9.boolean().default(true).describe("Application-level tenant validation")
+    applicationValidation: z10.boolean().default(true).describe("Application-level tenant validation")
   }).optional().describe("Database configuration"),
   /**
    * Performance optimization settings
    */
-  performance: z9.object({
+  performance: z10.object({
     /**
      * Whether to use partial indexes for tenant_id
      */
-    usePartialIndexes: z9.boolean().default(true).describe("Use partial indexes per tenant"),
+    usePartialIndexes: z10.boolean().default(true).describe("Use partial indexes per tenant"),
     /**
      * Whether to use table partitioning
      */
-    usePartitioning: z9.boolean().default(false).describe("Use table partitioning by tenant_id"),
+    usePartitioning: z10.boolean().default(false).describe("Use table partitioning by tenant_id"),
     /**
      * Connection pool size per tenant
      */
-    poolSizePerTenant: z9.number().int().positive().optional().describe("Connection pool size per tenant")
+    poolSizePerTenant: z10.number().int().positive().optional().describe("Connection pool size per tenant")
   }).optional().describe("Performance settings")
 });
-var SchemaLevelIsolationStrategySchema = z9.object({
-  strategy: z9.literal("isolated_schema").describe("Schema-level isolation strategy"),
+var SchemaLevelIsolationStrategySchema = z10.object({
+  strategy: z10.literal("isolated_schema").describe("Schema-level isolation strategy"),
   /**
    * Schema configuration
    */
-  schema: z9.object({
+  schema: z10.object({
     /**
      * Schema naming pattern
      * Use {tenant_id} as placeholder (must contain only alphanumeric and underscores)
      * The tenant_id will be sanitized before substitution to prevent SQL injection
      */
-    namingPattern: z9.string().default("tenant_{tenant_id}").describe("Schema naming pattern"),
+    namingPattern: z10.string().default("tenant_{tenant_id}").describe("Schema naming pattern"),
     /**
      * Whether to include public schema in search_path
      */
-    includePublicSchema: z9.boolean().default(true).describe("Include public schema"),
+    includePublicSchema: z10.boolean().default(true).describe("Include public schema"),
     /**
      * Default schema for shared resources
      */
-    sharedSchema: z9.string().default("public").describe("Schema for shared resources"),
+    sharedSchema: z10.string().default("public").describe("Schema for shared resources"),
     /**
      * Whether to automatically create schema on tenant creation
      */
-    autoCreateSchema: z9.boolean().default(true).describe("Auto-create schema")
+    autoCreateSchema: z10.boolean().default(true).describe("Auto-create schema")
   }).optional().describe("Schema configuration"),
   /**
    * Migration configuration
    */
-  migrations: z9.object({
+  migrations: z10.object({
     /**
      * Migration strategy
      */
-    strategy: z9.enum([
+    strategy: z10.enum([
       "parallel",
       // Run migrations on all schemas in parallel
       "sequential",
@@ -1886,42 +1951,42 @@ var SchemaLevelIsolationStrategySchema = z9.object({
     /**
      * Maximum concurrent migrations
      */
-    maxConcurrent: z9.number().int().positive().default(10).describe("Max concurrent migrations"),
+    maxConcurrent: z10.number().int().positive().default(10).describe("Max concurrent migrations"),
     /**
      * Whether to rollback on first failure
      */
-    rollbackOnError: z9.boolean().default(true).describe("Rollback on error")
+    rollbackOnError: z10.boolean().default(true).describe("Rollback on error")
   }).optional().describe("Migration configuration"),
   /**
    * Performance optimization settings
    */
-  performance: z9.object({
+  performance: z10.object({
     /**
      * Whether to use connection pooling per schema
      */
-    poolPerSchema: z9.boolean().default(false).describe("Separate pool per schema"),
+    poolPerSchema: z10.boolean().default(false).describe("Separate pool per schema"),
     /**
      * Schema cache TTL in seconds
      */
-    schemaCacheTTL: z9.number().int().positive().default(3600).describe("Schema cache TTL")
+    schemaCacheTTL: z10.number().int().positive().default(3600).describe("Schema cache TTL")
   }).optional().describe("Performance settings")
 });
-var DatabaseLevelIsolationStrategySchema = z9.object({
-  strategy: z9.literal("isolated_db").describe("Database-level isolation strategy"),
+var DatabaseLevelIsolationStrategySchema = z10.object({
+  strategy: z10.literal("isolated_db").describe("Database-level isolation strategy"),
   /**
    * Database configuration
    */
-  database: z9.object({
+  database: z10.object({
     /**
      * Database naming pattern
      * Use {tenant_id} as placeholder (must contain only alphanumeric and underscores)
      * The tenant_id will be sanitized before substitution to prevent SQL injection
      */
-    namingPattern: z9.string().default("tenant_{tenant_id}").describe("Database naming pattern"),
+    namingPattern: z10.string().default("tenant_{tenant_id}").describe("Database naming pattern"),
     /**
      * Database server/cluster assignment strategy
      */
-    serverStrategy: z9.enum([
+    serverStrategy: z10.enum([
       "shared",
       // All tenant databases on same server
       "sharded",
@@ -1932,41 +1997,41 @@ var DatabaseLevelIsolationStrategySchema = z9.object({
     /**
      * Whether to use separate credentials per tenant
      */
-    separateCredentials: z9.boolean().default(true).describe("Separate credentials per tenant"),
+    separateCredentials: z10.boolean().default(true).describe("Separate credentials per tenant"),
     /**
      * Whether to automatically create database on tenant creation
      */
-    autoCreateDatabase: z9.boolean().default(true).describe("Auto-create database")
+    autoCreateDatabase: z10.boolean().default(true).describe("Auto-create database")
   }).optional().describe("Database configuration"),
   /**
    * Connection pooling configuration
    */
-  connectionPool: z9.object({
+  connectionPool: z10.object({
     /**
      * Pool size per tenant database
      */
-    poolSize: z9.number().int().positive().default(10).describe("Connection pool size"),
+    poolSize: z10.number().int().positive().default(10).describe("Connection pool size"),
     /**
      * Maximum number of tenant pools to keep active
      */
-    maxActivePools: z9.number().int().positive().default(100).describe("Max active pools"),
+    maxActivePools: z10.number().int().positive().default(100).describe("Max active pools"),
     /**
      * Idle pool timeout in seconds
      */
-    idleTimeout: z9.number().int().positive().default(300).describe("Idle pool timeout"),
+    idleTimeout: z10.number().int().positive().default(300).describe("Idle pool timeout"),
     /**
      * Whether to use connection pooler (PgBouncer, etc.)
      */
-    usePooler: z9.boolean().default(true).describe("Use connection pooler")
+    usePooler: z10.boolean().default(true).describe("Use connection pooler")
   }).optional().describe("Connection pool configuration"),
   /**
    * Backup and restore configuration
    */
-  backup: z9.object({
+  backup: z10.object({
     /**
      * Backup strategy per tenant
      */
-    strategy: z9.enum([
+    strategy: z10.enum([
       "individual",
       // Separate backup per tenant
       "consolidated",
@@ -1977,82 +2042,82 @@ var DatabaseLevelIsolationStrategySchema = z9.object({
     /**
      * Backup frequency in hours
      */
-    frequencyHours: z9.number().int().positive().default(24).describe("Backup frequency"),
+    frequencyHours: z10.number().int().positive().default(24).describe("Backup frequency"),
     /**
      * Retention period in days
      */
-    retentionDays: z9.number().int().positive().default(30).describe("Backup retention days")
+    retentionDays: z10.number().int().positive().default(30).describe("Backup retention days")
   }).optional().describe("Backup configuration"),
   /**
    * Encryption configuration
    */
-  encryption: z9.object({
+  encryption: z10.object({
     /**
      * Whether to use per-tenant encryption keys
      */
-    perTenantKeys: z9.boolean().default(false).describe("Per-tenant encryption keys"),
+    perTenantKeys: z10.boolean().default(false).describe("Per-tenant encryption keys"),
     /**
      * Encryption algorithm
      */
-    algorithm: z9.string().default("AES-256-GCM").describe("Encryption algorithm"),
+    algorithm: z10.string().default("AES-256-GCM").describe("Encryption algorithm"),
     /**
      * Key management service
      */
-    keyManagement: z9.enum(["aws_kms", "azure_key_vault", "gcp_kms", "hashicorp_vault", "custom"]).optional().describe("Key management service")
+    keyManagement: z10.enum(["aws_kms", "azure_key_vault", "gcp_kms", "hashicorp_vault", "custom"]).optional().describe("Key management service")
   }).optional().describe("Encryption configuration")
 });
-var TenantIsolationConfigSchema = z9.discriminatedUnion("strategy", [
+var TenantIsolationConfigSchema = z10.discriminatedUnion("strategy", [
   RowLevelIsolationStrategySchema,
   SchemaLevelIsolationStrategySchema,
   DatabaseLevelIsolationStrategySchema
 ]);
-var TenantSecurityPolicySchema = z9.object({
+var TenantSecurityPolicySchema = z10.object({
   /**
    * Encryption requirements
    */
-  encryption: z9.object({
+  encryption: z10.object({
     /**
      * Require encryption at rest
      */
-    atRest: z9.boolean().default(true).describe("Require encryption at rest"),
+    atRest: z10.boolean().default(true).describe("Require encryption at rest"),
     /**
      * Require encryption in transit
      */
-    inTransit: z9.boolean().default(true).describe("Require encryption in transit"),
+    inTransit: z10.boolean().default(true).describe("Require encryption in transit"),
     /**
      * Require field-level encryption for sensitive data
      */
-    fieldLevel: z9.boolean().default(false).describe("Require field-level encryption")
+    fieldLevel: z10.boolean().default(false).describe("Require field-level encryption")
   }).optional().describe("Encryption requirements"),
   /**
    * Access control requirements
    */
-  accessControl: z9.object({
+  accessControl: z10.object({
     /**
      * Require multi-factor authentication
      */
-    requireMFA: z9.boolean().default(false).describe("Require MFA"),
+    requireMFA: z10.boolean().default(false).describe("Require MFA"),
     /**
      * Require SSO/SAML authentication
      */
-    requireSSO: z9.boolean().default(false).describe("Require SSO"),
+    requireSSO: z10.boolean().default(false).describe("Require SSO"),
     /**
      * IP whitelist
      */
-    ipWhitelist: z9.array(z9.string()).optional().describe("Allowed IP addresses"),
+    ipWhitelist: z10.array(z10.string()).optional().describe("Allowed IP addresses"),
     /**
      * Session timeout in seconds
      */
-    sessionTimeout: z9.number().int().positive().default(3600).describe("Session timeout")
+    sessionTimeout: z10.number().int().positive().default(3600).describe("Session timeout")
   }).optional().describe("Access control requirements"),
   /**
    * Audit and compliance requirements
    */
-  compliance: z9.object({
+  compliance: z10.object({
     /**
      * Compliance standards to enforce
      */
-    standards: z9.array(z9.enum([
+    standards: z10.array(z10.enum([
       "sox",
       "hipaa",
       "gdpr",
@@ -2063,77 +2128,77 @@ var TenantSecurityPolicySchema = z9.object({
     /**
      * Require audit logging for all operations
      */
-    requireAuditLog: z9.boolean().default(true).describe("Require audit logging"),
+    requireAuditLog: z10.boolean().default(true).describe("Require audit logging"),
     /**
      * Audit log retention period in days
      */
-    auditRetentionDays: z9.number().int().positive().default(365).describe("Audit retention days"),
+    auditRetentionDays: z10.number().int().positive().default(365).describe("Audit retention days"),
     /**
      * Data residency requirements
      */
-    dataResidency: z9.object({
+    dataResidency: z10.object({
       /**
        * Required geographic region
        */
-      region: z9.string().optional().describe("Required region (e.g., US, EU, APAC)"),
+      region: z10.string().optional().describe("Required region (e.g., US, EU, APAC)"),
       /**
        * Prohibited regions
        */
-      excludeRegions: z9.array(z9.string()).optional().describe("Prohibited regions")
+      excludeRegions: z10.array(z10.string()).optional().describe("Prohibited regions")
     }).optional().describe("Data residency requirements")
   }).optional().describe("Compliance requirements")
 });
 
 // src/hub/space.zod.ts
-var SubscriptionStatus = z10.enum([
+var SubscriptionStatus = z11.enum([
   "active",
   "past_due",
   "canceled",
   "trialing",
   "incomplete"
 ]);
-var SpaceSubscriptionSchema = z10.object({
-  planId: z10.string().describe("Reference to Plan Code"),
+var SpaceSubscriptionSchema = z11.object({
+  planId: z11.string().describe("Reference to Plan Code"),
   status: SubscriptionStatus,
-  currentPeriodEnd: z10.string().datetime().optional(),
-  stripeCustomerId: z10.string().optional(),
-  stripeSubscriptionId: z10.string().optional(),
+  currentPeriodEnd: z11.string().datetime().optional(),
+  stripeCustomerId: z11.string().optional(),
+  stripeSubscriptionId: z11.string().optional(),
   /**
    * Purchased Add-ons from Marketplace
    */
-  addons: z10.array(z10.object({
-    pluginId: z10.string().describe("Marketplace Plugin ID (NPM package name)"),
-    quantity: z10.number().default(1),
+  addons: z11.array(z11.object({
+    pluginId: z11.string().describe("Marketplace Plugin ID (NPM package name)"),
+    quantity: z11.number().default(1),
     status: SubscriptionStatus.default("active")
   })).optional(),
   /**
    * Quota Usage Snapshot
    * Cached usage metrics for quick display/validation.
    */
-  usage: z10.record(z10.string(), z10.number()).optional()
+  usage: z11.record(z11.string(), z11.number()).optional()
 });
-var DeploymentTargetSchema = z10.object({
-  provider: z10.enum(["vercel", "docker", "kubernetes"]),
-  region: z10.string().optional(),
-  url: z10.string().url().optional().describe("Public Access URL"),
-  env: z10.record(z10.string(), z10.string()).optional().describe("Runtime Environment Variables")
+var DeploymentTargetSchema = z11.object({
+  provider: z11.enum(["vercel", "docker", "kubernetes"]),
+  region: z11.string().optional(),
+  url: z11.string().url().optional().describe("Public Access URL"),
+  env: z11.record(z11.string(), z11.string()).optional().describe("Runtime Environment Variables")
 });
-var HubSpaceSchema = z10.object({
-  id: z10.string().uuid(),
+var HubSpaceSchema = z11.object({
+  id: z11.string().uuid(),
   /**
    * Display Name
    */
-  name: z10.string(),
-  slug: z10.string().describe("URL friendly identifier"),
+  name: z11.string(),
+  slug: z11.string().describe("URL friendly identifier"),
   /**
    * Owner (User or Org ID in Hub)
    */
-  ownerId: z10.string(),
+  ownerId: z11.string(),
   /**
    * The Runtime Instance Definition
    * Defines the technical execution environment.
    */
-  runtime: z10.object({
+  runtime: z11.object({
     isolation: TenantIsolationLevel.describe("Data isolation strategy"),
     quotas: TenantQuotaSchema.optional().describe("Resource quotas")
   }).optional().describe("Runtime instance configuration"),
@@ -2145,11 +2210,11 @@ var HubSpaceSchema = z10.object({
   /**
    * The Current Actual State (Last Successful Build)
    */
-  lastBuild: z10.object({
-    id: z10.string(),
-    timestamp: z10.string().datetime(),
-    manifestUrl: z10.string().url().optional(),
-    status: z10.enum(["pending", "success", "failed"])
+  lastBuild: z11.object({
+    id: z11.string(),
+    timestamp: z11.string().datetime(),
+    manifestUrl: z11.string().url().optional(),
+    status: z11.enum(["pending", "success", "failed"])
   }).optional(),
   /**
    * Commercial / Billing Info
@@ -2159,13 +2224,13 @@ var HubSpaceSchema = z10.object({
    * Infrastructure Settings
    */
   deployment: DeploymentTargetSchema.optional(),
-  createdAt: z10.string(),
-  updatedAt: z10.string()
+  createdAt: z11.string(),
+  updatedAt: z11.string()
 });
 
 // src/hub/license.zod.ts
-import { z as z11 } from "zod";
-var MetricType = z11.enum([
+import { z as z12 } from "zod";
+var MetricType = z12.enum([
   "boolean",
   // Feature Flag (Enabled/Disabled)
   "counter",
@@ -2173,115 +2238,115 @@ var MetricType = z11.enum([
   "gauge"
   // Current Level (e.g. Storage Used, Users Active) - Point in time
 ]);
-var FeatureSchema = z11.object({
-  code: z11.string().regex(/^[a-z_][a-z0-9_.]*$/).describe("Feature code (e.g. core.api_access)"),
-  label: z11.string(),
-  description: z11.string().optional(),
+var FeatureSchema = z12.object({
+  code: z12.string().regex(/^[a-z_][a-z0-9_.]*$/).describe("Feature code (e.g. core.api_access)"),
+  label: z12.string(),
+  description: z12.string().optional(),
   type: MetricType.default("boolean"),
   /** For counters/gauges */
-  unit: z11.enum(["count", "bytes", "seconds", "percent"]).optional(),
+  unit: z12.enum(["count", "bytes", "seconds", "percent"]).optional(),
   /** Dependencies (e.g. 'audit_log' requires 'enterprise_tier') */
-  requires: z11.array(z11.string()).optional()
+  requires: z12.array(z12.string()).optional()
 });
-var PlanSchema = z11.object({
-  code: z11.string().describe("Plan code (e.g. pro_v1)"),
-  label: z11.string(),
-  active: z11.boolean().default(true),
+var PlanSchema = z12.object({
+  code: z12.string().describe("Plan code (e.g. pro_v1)"),
+  label: z12.string(),
+  active: z12.boolean().default(true),
   /** Feature Entitlements */
-  features: z11.array(z11.string()).describe("List of enabled boolean features"),
+  features: z12.array(z12.string()).describe("List of enabled boolean features"),
   /** Limit Quotas */
-  limits: z11.record(z11.string(), z11.number()).describe("Map of metric codes to limit values (e.g. { storage_gb: 10 })"),
+  limits: z12.record(z12.string(), z12.number()).describe("Map of metric codes to limit values (e.g. { storage_gb: 10 })"),
   /** Pricing (Optional Metadata) */
-  currency: z11.string().default("USD").optional(),
-  priceMonthly: z11.number().optional(),
-  priceYearly: z11.number().optional()
+  currency: z12.string().default("USD").optional(),
+  priceMonthly: z12.number().optional(),
+  priceYearly: z12.number().optional()
 });
-var LicenseSchema = z11.object({
+var LicenseSchema = z12.object({
   /** Identity */
-  spaceId: z11.string().describe("Target Space ID"),
-  planCode: z11.string(),
+  spaceId: z12.string().describe("Target Space ID"),
+  planCode: z12.string(),
   /** Validity */
-  issuedAt: z11.string().datetime(),
-  expiresAt: z11.string().datetime().optional(),
+  issuedAt: z12.string().datetime(),
+  expiresAt: z12.string().datetime().optional(),
   // Null = Perpetual
   /** Status */
-  status: z11.enum(["active", "expired", "suspended", "trial"]),
+  status: z12.enum(["active", "expired", "suspended", "trial"]),
   /** Overrides (Specific to this space, exceeding the plan) */
-  customFeatures: z11.array(z11.string()).optional(),
-  customLimits: z11.record(z11.string(), z11.number()).optional(),
+  customFeatures: z12.array(z12.string()).optional(),
+  customLimits: z12.record(z12.string(), z12.number()).optional(),
   /** Authorized Add-ons */
-  plugins: z11.array(z11.string()).optional().describe("List of enabled plugin package IDs"),
+  plugins: z12.array(z12.string()).optional().describe("List of enabled plugin package IDs"),
   /** Signature */
-  signature: z11.string().optional().describe("Cryptographic signature of the license")
+  signature: z12.string().optional().describe("Cryptographic signature of the license")
 });
 
 // src/hub/hub-federation.zod.ts
-import { z as z12 } from "zod";
-var RegionSchema = z12.object({
+import { z as z13 } from "zod";
+var RegionSchema = z13.object({
   /**
    * Region identifier (e.g., us-east-1, eu-west-1, ap-southeast-1)
    */
-  id: z12.string().regex(/^[a-z]{2}-[a-z]+-\d+$/).describe("Region identifier"),
+  id: z13.string().regex(/^[a-z]{2}-[a-z]+-\d+$/).describe("Region identifier"),
   /**
    * Display name
    */
-  name: z12.string().describe("Human-readable region name"),
+  name: z13.string().describe("Human-readable region name"),
   /**
    * Geographic location
    */
-  location: z12.object({
-    continent: z12.enum(["NA", "SA", "EU", "AF", "AS", "OC", "AN"]),
-    country: z12.string().regex(/^[A-Z]{2}$/).describe("ISO 3166-1 alpha-2 country code"),
-    city: z12.string().optional(),
-    latitude: z12.number().min(-90).max(90).optional(),
-    longitude: z12.number().min(-180).max(180).optional()
+  location: z13.object({
+    continent: z13.enum(["NA", "SA", "EU", "AF", "AS", "OC", "AN"]),
+    country: z13.string().regex(/^[A-Z]{2}$/).describe("ISO 3166-1 alpha-2 country code"),
+    city: z13.string().optional(),
+    latitude: z13.number().min(-90).max(90).optional(),
+    longitude: z13.number().min(-180).max(180).optional()
   }),
   /**
    * Cloud provider and region mapping
    */
-  provider: z12.object({
-    name: z12.enum(["aws", "azure", "gcp", "cloudflare", "vercel", "self-hosted"]),
-    region: z12.string().describe("Provider-specific region identifier")
+  provider: z13.object({
+    name: z13.enum(["aws", "azure", "gcp", "cloudflare", "vercel", "self-hosted"]),
+    region: z13.string().describe("Provider-specific region identifier")
   }).optional(),
   /**
    * Region capabilities
    */
-  capabilities: z12.object({
-    databases: z12.array(z12.enum(["postgres", "mysql", "mongodb", "redis"])).default([]),
-    storage: z12.array(z12.enum(["s3", "azure-blob", "gcs"])).default([]),
-    compute: z12.array(z12.enum(["containers", "serverless", "vm"])).default([]),
-    cdn: z12.boolean().default(false)
+  capabilities: z13.object({
+    databases: z13.array(z13.enum(["postgres", "mysql", "mongodb", "redis"])).default([]),
+    storage: z13.array(z13.enum(["s3", "azure-blob", "gcs"])).default([]),
+    compute: z13.array(z13.enum(["containers", "serverless", "vm"])).default([]),
+    cdn: z13.boolean().default(false)
   }).optional(),
   /**
    * Compliance and certifications
    */
-  compliance: z12.array(z12.enum(["gdpr", "hipaa", "soc2", "iso27001", "pci-dss"])).default([]),
+  compliance: z13.array(z13.enum(["gdpr", "hipaa", "soc2", "iso27001", "pci-dss"])).default([]),
   /**
    * Region status
    */
-  status: z12.enum(["active", "read-only", "maintenance", "deprecated"]).default("active"),
+  status: z13.enum(["active", "read-only", "maintenance", "deprecated"]).default("active"),
   /**
    * Resource limits for this region
    */
-  limits: z12.object({
-    maxSpaces: z12.number().int().positive().optional(),
-    maxTenants: z12.number().int().positive().optional(),
-    maxStorage: z12.number().int().positive().optional().describe("Bytes")
+  limits: z13.object({
+    maxSpaces: z13.number().int().positive().optional(),
+    maxTenants: z13.number().int().positive().optional(),
+    maxStorage: z13.number().int().positive().optional().describe("Bytes")
   }).optional()
 });
-var HubInstanceSchema = z12.object({
+var HubInstanceSchema = z13.object({
   /**
    * Instance identifier
    */
-  id: z12.string().uuid(),
+  id: z13.string().uuid(),
   /**
    * Region where this hub is deployed
    */
-  regionId: z12.string(),
+  regionId: z13.string(),
   /**
    * Hub role in federation
    */
-  role: z12.enum([
+  role: z13.enum([
     "primary",
     // Primary/master hub
     "secondary",
@@ -2292,71 +2357,71 @@ var HubInstanceSchema = z12.object({
   /**
    * Endpoint URLs
    */
-  endpoints: z12.object({
-    api: z12.string().url().describe("Public API endpoint"),
-    admin: z12.string().url().optional().describe("Admin console"),
-    grpc: z12.string().optional().describe("gRPC endpoint for inter-hub communication")
+  endpoints: z13.object({
+    api: z13.string().url().describe("Public API endpoint"),
+    admin: z13.string().url().optional().describe("Admin console"),
+    grpc: z13.string().optional().describe("gRPC endpoint for inter-hub communication")
   }),
   /**
    * Replication configuration
    */
-  replication: z12.object({
+  replication: z13.object({
     /**
      * Source hub for replication (if this is a secondary)
      */
-    primaryHubId: z12.string().uuid().optional(),
+    primaryHubId: z13.string().uuid().optional(),
     /**
      * Replication lag tolerance in seconds
      */
-    lagTolerance: z12.number().int().positive().default(5),
+    lagTolerance: z13.number().int().positive().default(5),
     /**
      * Replication mode
      */
-    mode: z12.enum(["sync", "async", "semi-sync"]).default("async")
+    mode: z13.enum(["sync", "async", "semi-sync"]).default("async")
   }).optional(),
   /**
    * Health status
    */
-  health: z12.object({
-    status: z12.enum(["healthy", "degraded", "unhealthy"]),
-    lastCheck: z12.string().datetime(),
-    uptime: z12.number().describe("Seconds")
+  health: z13.object({
+    status: z13.enum(["healthy", "degraded", "unhealthy"]),
+    lastCheck: z13.string().datetime(),
+    uptime: z13.number().describe("Seconds")
   }).optional(),
   /**
    * Version
    */
-  version: z12.string(),
+  version: z13.string(),
   /**
    * Metadata
    */
-  createdAt: z12.string().datetime(),
-  updatedAt: z12.string().datetime()
+  createdAt: z13.string().datetime(),
+  updatedAt: z13.string().datetime()
 });
-var FederationTopologySchema = z12.object({
+var FederationTopologySchema = z13.object({
   /**
    * Federation identifier
    */
-  id: z12.string().uuid(),
+  id: z13.string().uuid(),
   /**
    * Federation name
    */
-  name: z12.string(),
+  name: z13.string(),
   /**
    * Regions in this federation
    */
-  regions: z12.array(RegionSchema),
+  regions: z13.array(RegionSchema),
   /**
    * Hub instances
    */
-  hubs: z12.array(HubInstanceSchema),
+  hubs: z13.array(HubInstanceSchema),
   /**
    * Routing strategy
    */
-  routing: z12.object({
+  routing: z13.object({
     /**
      * How to route tenant requests
      */
-    strategy: z12.enum([
+    strategy: z13.enum([
       "geo-proximity",
       // Route to nearest region
       "data-residency",
@@ -2369,117 +2434,117 @@ var FederationTopologySchema = z12.object({
     /**
      * Failover behavior
      */
-    failover: z12.object({
-      enabled: z12.boolean().default(true),
-      maxRetries: z12.number().int().min(0).default(3),
-      timeout: z12.number().int().positive().default(5e3).describe("Milliseconds")
+    failover: z13.object({
+      enabled: z13.boolean().default(true),
+      maxRetries: z13.number().int().min(0).default(3),
+      timeout: z13.number().int().positive().default(5e3).describe("Milliseconds")
     })
   }),
   /**
    * Data synchronization settings
    */
-  synchronization: z12.object({
+  synchronization: z13.object({
     /**
      * What data to sync across regions
      */
-    scope: z12.object({
+    scope: z13.object({
       /**
        * Sync plugin registry
        */
-      plugins: z12.boolean().default(true),
+      plugins: z13.boolean().default(true),
       /**
        * Sync tenant metadata (not data)
        */
-      tenants: z12.boolean().default(true),
+      tenants: z13.boolean().default(true),
       /**
        * Sync spaces metadata
        */
-      spaces: z12.boolean().default(false),
+      spaces: z13.boolean().default(false),
       /**
        * Sync licenses
        */
-      licenses: z12.boolean().default(true)
+      licenses: z13.boolean().default(true)
     }),
     /**
      * Sync frequency
      */
-    frequency: z12.enum(["realtime", "hourly", "daily"]).default("realtime"),
+    frequency: z13.enum(["realtime", "hourly", "daily"]).default("realtime"),
     /**
      * Conflict resolution
      */
-    conflictResolution: z12.enum(["last-write-wins", "primary-wins", "manual"]).default("last-write-wins")
+    conflictResolution: z13.enum(["last-write-wins", "primary-wins", "manual"]).default("last-write-wins")
   })
 });
-var TenantPlacementPolicySchema = z12.object({
+var TenantPlacementPolicySchema = z13.object({
   /**
    * Tenant identifier
    */
-  tenantId: z12.string(),
+  tenantId: z13.string(),
   /**
    * Primary region (where tenant data lives)
    */
-  primaryRegion: z12.string(),
+  primaryRegion: z13.string(),
   /**
    * Replica regions (for disaster recovery)
    */
-  replicaRegions: z12.array(z12.string()).default([]),
+  replicaRegions: z13.array(z13.string()).default([]),
   /**
    * Data residency constraints
    */
-  dataResidency: z12.object({
+  dataResidency: z13.object({
     /**
      * Allowed regions for data storage
      */
-    allowedRegions: z12.array(z12.string()).optional(),
+    allowedRegions: z13.array(z13.string()).optional(),
     /**
      * Prohibited regions
      */
-    prohibitedRegions: z12.array(z12.string()).default([]),
+    prohibitedRegions: z13.array(z13.string()).default([]),
     /**
      * Continent restriction
      */
-    continent: z12.enum(["NA", "SA", "EU", "AF", "AS", "OC", "AN"]).optional()
+    continent: z13.enum(["NA", "SA", "EU", "AF", "AS", "OC", "AN"]).optional()
   }).optional(),
   /**
    * Failover policy
    */
-  failover: z12.object({
+  failover: z13.object({
     /**
      * Enable automatic failover
      */
-    enabled: z12.boolean().default(true),
+    enabled: z13.boolean().default(true),
     /**
      * Preferred failover order (region IDs)
      */
-    preferredOrder: z12.array(z12.string()).default([]),
+    preferredOrder: z13.array(z13.string()).default([]),
     /**
      * Maximum acceptable latency for failover target (ms)
      */
-    maxLatency: z12.number().int().positive().default(100)
+    maxLatency: z13.number().int().positive().default(100)
   }).optional(),
   /**
    * Latency requirements
    */
-  latency: z12.object({
+  latency: z13.object({
     /**
      * Maximum acceptable latency for primary region (ms)
      */
-    maxPrimaryLatency: z12.number().int().positive().default(50),
+    maxPrimaryLatency: z13.number().int().positive().default(50),
     /**
      * Maximum acceptable latency for replicas (ms)
      */
-    maxReplicaLatency: z12.number().int().positive().default(200)
+    maxReplicaLatency: z13.number().int().positive().default(200)
   }).optional()
 });
-var ReplicationJobSchema = z12.object({
+var ReplicationJobSchema = z13.object({
   /**
    * Job identifier
    */
-  id: z12.string().uuid(),
+  id: z13.string().uuid(),
   /**
    * Job type
    */
-  type: z12.enum([
+  type: z13.enum([
     "initial-sync",
     // First-time full sync
     "incremental",
@@ -2490,84 +2555,84 @@ var ReplicationJobSchema = z12.object({
   /**
    * Source hub
    */
-  sourceHubId: z12.string().uuid(),
+  sourceHubId: z13.string().uuid(),
   /**
    * Target hub(s)
    */
-  targetHubIds: z12.array(z12.string().uuid()),
+  targetHubIds: z13.array(z13.string().uuid()),
   /**
    * Resource scope
    */
-  scope: z12.object({
+  scope: z13.object({
     /**
      * Resource type
      */
-    resourceType: z12.enum(["plugin", "tenant", "space", "license", "all"]),
+    resourceType: z13.enum(["plugin", "tenant", "space", "license", "all"]),
     /**
      * Specific resource IDs (empty = all)
      */
-    resourceIds: z12.array(z12.string()).default([])
+    resourceIds: z13.array(z13.string()).default([])
   }),
   /**
    * Job status
    */
-  status: z12.enum(["pending", "running", "completed", "failed", "cancelled"]),
+  status: z13.enum(["pending", "running", "completed", "failed", "cancelled"]),
   /**
    * Progress
    */
-  progress: z12.object({
-    total: z12.number().int().min(0),
-    completed: z12.number().int().min(0),
-    failed: z12.number().int().min(0)
+  progress: z13.object({
+    total: z13.number().int().min(0),
+    completed: z13.number().int().min(0),
+    failed: z13.number().int().min(0)
   }).optional(),
   /**
    * Timestamps
    */
-  createdAt: z12.string().datetime(),
-  startedAt: z12.string().datetime().optional(),
-  completedAt: z12.string().datetime().optional(),
+  createdAt: z13.string().datetime(),
+  startedAt: z13.string().datetime().optional(),
+  completedAt: z13.string().datetime().optional(),
   /**
    * Errors
    */
-  errors: z12.array(z12.object({
-    timestamp: z12.string().datetime(),
-    resourceId: z12.string(),
-    error: z12.string()
+  errors: z13.array(z13.object({
+    timestamp: z13.string().datetime(),
+    resourceId: z13.string(),
+    error: z13.string()
   })).default([])
 });
-var GlobalRegistryEntrySchema = z12.object({
+var GlobalRegistryEntrySchema = z13.object({
   /**
    * Resource identifier
    */
-  resourceId: z12.string(),
+  resourceId: z13.string(),
   /**
    * Resource type
    */
-  resourceType: z12.enum(["plugin", "tenant", "space", "license"]),
+  resourceType: z13.enum(["plugin", "tenant", "space", "license"]),
   /**
    * Regions where this resource exists
    */
-  locations: z12.array(z12.object({
-    regionId: z12.string(),
-    hubId: z12.string().uuid(),
-    isPrimary: z12.boolean().default(false),
-    lastSyncedAt: z12.string().datetime().optional(),
-    version: z12.string().optional()
+  locations: z13.array(z13.object({
+    regionId: z13.string(),
+    hubId: z13.string().uuid(),
+    isPrimary: z13.boolean().default(false),
+    lastSyncedAt: z13.string().datetime().optional(),
+    version: z13.string().optional()
   })),
   /**
    * Global version vector clock (for conflict detection)
    */
-  versionVector: z12.record(z12.string(), z12.number().int()).optional()
+  versionVector: z13.record(z13.string(), z13.number().int()).optional()
 });
-var EdgeLocationSchema = z12.object({
+var EdgeLocationSchema = z13.object({
   /**
    * Location identifier
    */
-  id: z12.string(),
+  id: z13.string(),
   /**
    * Parent region
    */
-  regionId: z12.string(),
+  regionId: z13.string(),
   /**
    * Location details
    */
@@ -2575,24 +2640,24 @@ var EdgeLocationSchema = z12.object({
   /**
    * Caching configuration
    */
-  cache: z12.object({
+  cache: z13.object({
     /**
      * What to cache at edge
      */
-    resources: z12.array(z12.enum(["plugins", "static-assets", "api-responses"])).default([]),
+    resources: z13.array(z13.enum(["plugins", "static-assets", "api-responses"])).default([]),
     /**
      * TTL in seconds
      */
-    ttl: z12.number().int().positive().default(3600),
+    ttl: z13.number().int().positive().default(3600),
     /**
      * Cache size limit (bytes)
      */
-    maxSize: z12.number().int().positive().optional()
+    maxSize: z13.number().int().positive().optional()
   }),
   /**
    * Status
    */
-  status: z12.enum(["active", "inactive"]).default("active")
+  status: z13.enum(["active", "inactive"]).default("active")
 });
 var HubFederationProtocol = {
   Region: RegionSchema,
@@ -2605,31 +2670,31 @@ var HubFederationProtocol = {
 };
 
 // src/hub/plugin-security.zod.ts
-import { z as z13 } from "zod";
-var VulnerabilitySeverity = z13.enum([
+import { z as z14 } from "zod";
+var VulnerabilitySeverity = z14.enum([
   "critical",
   "high",
   "medium",
   "low",
   "info"
 ]);
-var SecurityVulnerabilitySchema = z13.object({
+var SecurityVulnerabilitySchema = z14.object({
   /**
    * CVE identifier (if applicable)
    */
-  cve: z13.string().regex(/^CVE-\d{4}-\d+$/).optional().describe("CVE identifier"),
+  cve: z14.string().regex(/^CVE-\d{4}-\d+$/).optional().describe("CVE identifier"),
   /**
    * Vulnerability identifier (GHSA, SNYK, etc.)
    */
-  id: z13.string().describe("Vulnerability ID"),
+  id: z14.string().describe("Vulnerability ID"),
   /**
    * Title
    */
-  title: z13.string(),
+  title: z14.string(),
   /**
    * Description
    */
-  description: z13.string(),
+  description: z14.string(),
   /**
    * Severity
    */
@@ -2637,149 +2702,149 @@ var SecurityVulnerabilitySchema = z13.object({
   /**
    * CVSS score (0-10)
    */
-  cvss: z13.number().min(0).max(10).optional(),
+  cvss: z14.number().min(0).max(10).optional(),
   /**
    * Affected package
    */
-  package: z13.object({
-    name: z13.string(),
-    version: z13.string(),
-    ecosystem: z13.string().optional()
+  package: z14.object({
+    name: z14.string(),
+    version: z14.string(),
+    ecosystem: z14.string().optional()
   }),
   /**
    * Vulnerable version range
    */
-  vulnerableVersions: z13.string().describe("Semver range of vulnerable versions"),
+  vulnerableVersions: z14.string().describe("Semver range of vulnerable versions"),
   /**
    * Patched versions
    */
-  patchedVersions: z13.string().optional().describe("Semver range of patched versions"),
+  patchedVersions: z14.string().optional().describe("Semver range of patched versions"),
   /**
    * References
    */
-  references: z13.array(z13.object({
-    type: z13.enum(["advisory", "article", "report", "web"]),
-    url: z13.string().url()
+  references: z14.array(z14.object({
+    type: z14.enum(["advisory", "article", "report", "web"]),
+    url: z14.string().url()
   })).default([]),
   /**
    * CWE (Common Weakness Enumeration)
    */
-  cwe: z13.array(z13.string()).default([]),
+  cwe: z14.array(z14.string()).default([]),
   /**
    * Published date
    */
-  publishedAt: z13.string().datetime().optional(),
+  publishedAt: z14.string().datetime().optional(),
   /**
    * Mitigation advice
    */
-  mitigation: z13.string().optional()
+  mitigation: z14.string().optional()
 });
-var SecurityScanResultSchema = z13.object({
+var SecurityScanResultSchema = z14.object({
   /**
    * Scan identifier
    */
-  scanId: z13.string().uuid(),
+  scanId: z14.string().uuid(),
   /**
    * Plugin being scanned
    */
-  plugin: z13.object({
-    id: z13.string(),
-    version: z13.string()
+  plugin: z14.object({
+    id: z14.string(),
+    version: z14.string()
   }),
   /**
    * Scan timestamp
    */
-  scannedAt: z13.string().datetime(),
+  scannedAt: z14.string().datetime(),
   /**
    * Scanner information
    */
-  scanner: z13.object({
-    name: z13.string().describe("Scanner name (e.g., snyk, osv, trivy)"),
-    version: z13.string()
+  scanner: z14.object({
+    name: z14.string().describe("Scanner name (e.g., snyk, osv, trivy)"),
+    version: z14.string()
   }),
   /**
    * Scan status
    */
-  status: z13.enum(["passed", "failed", "warning"]),
+  status: z14.enum(["passed", "failed", "warning"]),
   /**
    * Vulnerabilities found
    */
-  vulnerabilities: z13.array(SecurityVulnerabilitySchema),
+  vulnerabilities: z14.array(SecurityVulnerabilitySchema),
   /**
    * Vulnerability summary
    */
-  summary: z13.object({
-    critical: z13.number().int().min(0).default(0),
-    high: z13.number().int().min(0).default(0),
-    medium: z13.number().int().min(0).default(0),
-    low: z13.number().int().min(0).default(0),
-    info: z13.number().int().min(0).default(0),
-    total: z13.number().int().min(0).default(0)
+  summary: z14.object({
+    critical: z14.number().int().min(0).default(0),
+    high: z14.number().int().min(0).default(0),
+    medium: z14.number().int().min(0).default(0),
+    low: z14.number().int().min(0).default(0),
+    info: z14.number().int().min(0).default(0),
+    total: z14.number().int().min(0).default(0)
   }),
   /**
    * License compliance issues
    */
-  licenseIssues: z13.array(z13.object({
-    package: z13.string(),
-    license: z13.string(),
-    reason: z13.string(),
-    severity: z13.enum(["error", "warning", "info"])
+  licenseIssues: z14.array(z14.object({
+    package: z14.string(),
+    license: z14.string(),
+    reason: z14.string(),
+    severity: z14.enum(["error", "warning", "info"])
   })).default([]),
   /**
    * Code quality issues
    */
-  codeQuality: z13.object({
-    score: z13.number().min(0).max(100).optional(),
-    issues: z13.array(z13.object({
-      type: z13.enum(["security", "quality", "style"]),
-      severity: z13.enum(["error", "warning", "info"]),
-      message: z13.string(),
-      file: z13.string().optional(),
-      line: z13.number().int().optional()
+  codeQuality: z14.object({
+    score: z14.number().min(0).max(100).optional(),
+    issues: z14.array(z14.object({
+      type: z14.enum(["security", "quality", "style"]),
+      severity: z14.enum(["error", "warning", "info"]),
+      message: z14.string(),
+      file: z14.string().optional(),
+      line: z14.number().int().optional()
     })).default([])
   }).optional(),
   /**
    * Next scan scheduled
    */
-  nextScanAt: z13.string().datetime().optional()
+  nextScanAt: z14.string().datetime().optional()
 });
-var SecurityPolicySchema = z13.object({
+var SecurityPolicySchema = z14.object({
   /**
    * Policy identifier
    */
-  id: z13.string(),
+  id: z14.string(),
   /**
    * Policy name
    */
-  name: z13.string(),
+  name: z14.string(),
   /**
    * Automatic scanning
    */
-  autoScan: z13.object({
-    enabled: z13.boolean().default(true),
-    frequency: z13.enum(["on-publish", "daily", "weekly", "monthly"]).default("daily")
+  autoScan: z14.object({
+    enabled: z14.boolean().default(true),
+    frequency: z14.enum(["on-publish", "daily", "weekly", "monthly"]).default("daily")
   }),
   /**
    * Vulnerability thresholds
    */
-  thresholds: z13.object({
+  thresholds: z14.object({
     /**
      * Block plugin if critical vulnerabilities exceed this
      */
-    maxCritical: z13.number().int().min(0).default(0),
+    maxCritical: z14.number().int().min(0).default(0),
     /**
      * Block plugin if high vulnerabilities exceed this
      */
-    maxHigh: z13.number().int().min(0).default(0),
+    maxHigh: z14.number().int().min(0).default(0),
     /**
      * Warn if medium vulnerabilities exceed this
      */
-    maxMedium: z13.number().int().min(0).default(5)
+    maxMedium: z14.number().int().min(0).default(5)
   }),
   /**
    * Allowed licenses
    */
-  allowedLicenses: z13.array(z13.string()).default([
+  allowedLicenses: z14.array(z14.string()).default([
     "MIT",
     "Apache-2.0",
     "BSD-3-Clause",
@@ -2789,152 +2854,152 @@ var SecurityPolicySchema = z13.object({
   /**
    * Prohibited licenses
    */
-  prohibitedLicenses: z13.array(z13.string()).default([
+  prohibitedLicenses: z14.array(z14.string()).default([
     "GPL-3.0",
     "AGPL-3.0"
   ]),
   /**
    * Code signing requirements
    */
-  codeSigning: z13.object({
-    required: z13.boolean().default(false),
-    allowedSigners: z13.array(z13.string()).default([])
+  codeSigning: z14.object({
+    required: z14.boolean().default(false),
+    allowedSigners: z14.array(z14.string()).default([])
   }).optional(),
   /**
    * Sandbox restrictions
    */
-  sandbox: z13.object({
+  sandbox: z14.object({
     /**
      * Restrict network access
      */
-    networkAccess: z13.enum(["none", "localhost", "allowlist", "all"]).default("all"),
+    networkAccess: z14.enum(["none", "localhost", "allowlist", "all"]).default("all"),
     /**
      * Allowed network destinations (if allowlist)
      */
-    allowedDestinations: z13.array(z13.string()).default([]),
+    allowedDestinations: z14.array(z14.string()).default([]),
     /**
      * File system access
      */
-    filesystemAccess: z13.enum(["none", "read-only", "temp-only", "full"]).default("full"),
+    filesystemAccess: z14.enum(["none", "read-only", "temp-only", "full"]).default("full"),
     /**
      * Maximum memory (MB)
      */
-    maxMemoryMB: z13.number().int().positive().optional(),
+    maxMemoryMB: z14.number().int().positive().optional(),
     /**
      * Maximum CPU time (seconds)
      */
-    maxCPUSeconds: z13.number().int().positive().optional()
+    maxCPUSeconds: z14.number().int().positive().optional()
   }).optional()
 });
-var PackageDependencySchema = z13.object({
+var PackageDependencySchema = z14.object({
   /**
    * Package name/ID
    */
-  name: z13.string(),
+  name: z14.string(),
   /**
    * Version constraint (semver range)
    */
-  versionConstraint: z13.string().describe("Semver range (e.g., `^1.0.0`, `>=2.0.0 <3.0.0`)"),
+  versionConstraint: z14.string().describe("Semver range (e.g., `^1.0.0`, `>=2.0.0 <3.0.0`)"),
   /**
    * Dependency type
    */
-  type: z13.enum(["required", "optional", "peer", "dev"]).default("required"),
+  type: z14.enum(["required", "optional", "peer", "dev"]).default("required"),
   /**
    * Resolved version (filled during resolution)
    */
-  resolvedVersion: z13.string().optional()
+  resolvedVersion: z14.string().optional()
 });
-var DependencyGraphNodeSchema = z13.object({
+var DependencyGraphNodeSchema = z14.object({
   /**
    * Package identifier
    */
-  id: z13.string(),
+  id: z14.string(),
   /**
    * Package version
    */
-  version: z13.string(),
+  version: z14.string(),
   /**
    * Dependencies of this package
    */
-  dependencies: z13.array(PackageDependencySchema).default([]),
+  dependencies: z14.array(PackageDependencySchema).default([]),
   /**
    * Depth in dependency tree
    */
-  depth: z13.number().int().min(0),
+  depth: z14.number().int().min(0),
   /**
    * Whether this is a direct dependency
    */
-  isDirect: z13.boolean(),
+  isDirect: z14.boolean(),
   /**
    * Package metadata
    */
-  metadata: z13.object({
-    name: z13.string(),
-    description: z13.string().optional(),
-    license: z13.string().optional(),
-    homepage: z13.string().url().optional()
+  metadata: z14.object({
+    name: z14.string(),
+    description: z14.string().optional(),
+    license: z14.string().optional(),
+    homepage: z14.string().url().optional()
   }).optional()
 });
-var DependencyGraphSchema = z13.object({
+var DependencyGraphSchema = z14.object({
   /**
    * Root package
    */
-  root: z13.object({
-    id: z13.string(),
-    version: z13.string()
+  root: z14.object({
+    id: z14.string(),
+    version: z14.string()
   }),
   /**
    * All nodes in the graph
    */
-  nodes: z13.array(DependencyGraphNodeSchema),
+  nodes: z14.array(DependencyGraphNodeSchema),
   /**
    * Edges (dependency relationships)
    */
-  edges: z13.array(z13.object({
-    from: z13.string().describe("Package ID"),
-    to: z13.string().describe("Package ID"),
-    constraint: z13.string().describe("Version constraint")
+  edges: z14.array(z14.object({
+    from: z14.string().describe("Package ID"),
+    to: z14.string().describe("Package ID"),
+    constraint: z14.string().describe("Version constraint")
   })),
   /**
    * Resolution statistics
    */
-  stats: z13.object({
-    totalDependencies: z13.number().int().min(0),
-    directDependencies: z13.number().int().min(0),
-    maxDepth: z13.number().int().min(0)
+  stats: z14.object({
+    totalDependencies: z14.number().int().min(0),
+    directDependencies: z14.number().int().min(0),
+    maxDepth: z14.number().int().min(0)
   })
 });
-var DependencyConflictSchema = z13.object({
+var DependencyConflictSchema = z14.object({
   /**
    * Package with conflict
    */
-  package: z13.string(),
+  package: z14.string(),
   /**
    * Conflicting versions
    */
-  conflicts: z13.array(z13.object({
-    version: z13.string(),
-    requestedBy: z13.array(z13.string()).describe("Packages that require this version"),
-    constraint: z13.string()
+  conflicts: z14.array(z14.object({
+    version: z14.string(),
+    requestedBy: z14.array(z14.string()).describe("Packages that require this version"),
+    constraint: z14.string()
   })),
   /**
    * Suggested resolution
    */
-  resolution: z13.object({
-    strategy: z13.enum(["pick-highest", "pick-lowest", "manual"]),
-    version: z13.string().optional(),
-    reason: z13.string().optional()
+  resolution: z14.object({
+    strategy: z14.enum(["pick-highest", "pick-lowest", "manual"]),
+    version: z14.string().optional(),
+    reason: z14.string().optional()
   }).optional(),
   /**
    * Severity
    */
-  severity: z13.enum(["error", "warning", "info"])
+  severity: z14.enum(["error", "warning", "info"])
 });
-var DependencyResolutionResultSchema = z13.object({
+var DependencyResolutionResultSchema = z14.object({
   /**
    * Resolution status
    */
-  status: z13.enum(["success", "conflict", "error"]),
+  status: z14.enum(["success", "conflict", "error"]),
   /**
    * Resolved dependency graph
    */
@@ -2942,207 +3007,207 @@ var DependencyResolutionResultSchema = z13.object({
   /**
    * Conflicts detected
    */
-  conflicts: z13.array(DependencyConflictSchema).default([]),
+  conflicts: z14.array(DependencyConflictSchema).default([]),
   /**
    * Errors encountered
    */
-  errors: z13.array(z13.object({
-    package: z13.string(),
-    error: z13.string()
+  errors: z14.array(z14.object({
+    package: z14.string(),
+    error: z14.string()
   })).default([]),
   /**
    * Installation order (topological sort)
    */
-  installOrder: z13.array(z13.string()).default([]),
+  installOrder: z14.array(z14.string()).default([]),
   /**
    * Resolution time (ms)
    */
-  resolvedIn: z13.number().int().min(0).optional()
+  resolvedIn: z14.number().int().min(0).optional()
 });
-var SBOMEntrySchema = z13.object({
+var SBOMEntrySchema = z14.object({
   /**
    * Component name
    */
-  name: z13.string(),
+  name: z14.string(),
   /**
    * Component version
    */
-  version: z13.string(),
+  version: z14.string(),
   /**
    * Package URL (purl)
    */
-  purl: z13.string().optional().describe("Package URL identifier"),
+  purl: z14.string().optional().describe("Package URL identifier"),
   /**
    * License
    */
-  license: z13.string().optional(),
+  license: z14.string().optional(),
   /**
    * Hashes
    */
-  hashes: z13.object({
-    sha256: z13.string().optional(),
-    sha512: z13.string().optional()
+  hashes: z14.object({
+    sha256: z14.string().optional(),
+    sha512: z14.string().optional()
   }).optional(),
   /**
    * Supplier
    */
-  supplier: z13.object({
-    name: z13.string(),
-    url: z13.string().url().optional()
+  supplier: z14.object({
+    name: z14.string(),
+    url: z14.string().url().optional()
   }).optional(),
   /**
    * External references
    */
-  externalRefs: z13.array(z13.object({
-    type: z13.enum(["website", "repository", "documentation", "issue-tracker"]),
-    url: z13.string().url()
+  externalRefs: z14.array(z14.object({
+    type: z14.enum(["website", "repository", "documentation", "issue-tracker"]),
+    url: z14.string().url()
   })).default([])
 });
-var SBOMSchema = z13.object({
+var SBOMSchema = z14.object({
   /**
    * SBOM format
    */
-  format: z13.enum(["spdx", "cyclonedx"]).default("cyclonedx"),
+  format: z14.enum(["spdx", "cyclonedx"]).default("cyclonedx"),
   /**
    * SBOM version
    */
-  version: z13.string(),
+  version: z14.string(),
   /**
    * Plugin metadata
    */
-  plugin: z13.object({
-    id: z13.string(),
-    version: z13.string(),
-    name: z13.string()
+  plugin: z14.object({
+    id: z14.string(),
+    version: z14.string(),
+    name: z14.string()
   }),
   /**
    * Components (dependencies)
    */
-  components: z13.array(SBOMEntrySchema),
+  components: z14.array(SBOMEntrySchema),
   /**
    * Generation timestamp
    */
-  generatedAt: z13.string().datetime(),
+  generatedAt: z14.string().datetime(),
   /**
    * Generator tool
    */
-  generator: z13.object({
-    name: z13.string(),
-    version: z13.string()
+  generator: z14.object({
+    name: z14.string(),
+    version: z14.string()
   }).optional()
 });
-var PluginProvenanceSchema = z13.object({
+var PluginProvenanceSchema = z14.object({
   /**
    * Plugin identifier
    */
-  pluginId: z13.string(),
+  pluginId: z14.string(),
   /**
    * Plugin version
    */
-  version: z13.string(),
+  version: z14.string(),
   /**
    * Build information
    */
-  build: z13.object({
+  build: z14.object({
     /**
      * Build timestamp
      */
-    timestamp: z13.string().datetime(),
+    timestamp: z14.string().datetime(),
     /**
      * Build environment
      */
-    environment: z13.object({
-      os: z13.string(),
-      arch: z13.string(),
-      nodeVersion: z13.string()
+    environment: z14.object({
+      os: z14.string(),
+      arch: z14.string(),
+      nodeVersion: z14.string()
     }).optional(),
     /**
      * Source repository
      */
-    source: z13.object({
-      repository: z13.string().url(),
-      commit: z13.string().regex(/^[a-f0-9]{40}$/),
-      branch: z13.string().optional(),
-      tag: z13.string().optional()
+    source: z14.object({
+      repository: z14.string().url(),
+      commit: z14.string().regex(/^[a-f0-9]{40}$/),
+      branch: z14.string().optional(),
+      tag: z14.string().optional()
     }).optional(),
     /**
      * Builder identity
      */
-    builder: z13.object({
-      name: z13.string(),
-      email: z13.string().email().optional()
+    builder: z14.object({
+      name: z14.string(),
+      email: z14.string().email().optional()
     }).optional()
   }),
   /**
    * Artifact hashes
    */
-  artifacts: z13.array(z13.object({
-    filename: z13.string(),
-    sha256: z13.string(),
-    size: z13.number().int().positive()
+  artifacts: z14.array(z14.object({
+    filename: z14.string(),
+    sha256: z14.string(),
+    size: z14.number().int().positive()
   })),
   /**
    * Signatures
    */
-  signatures: z13.array(z13.object({
-    algorithm: z13.enum(["rsa", "ecdsa", "ed25519"]),
-    publicKey: z13.string(),
-    signature: z13.string(),
-    signedBy: z13.string(),
-    timestamp: z13.string().datetime()
+  signatures: z14.array(z14.object({
+    algorithm: z14.enum(["rsa", "ecdsa", "ed25519"]),
+    publicKey: z14.string(),
+    signature: z14.string(),
+    signedBy: z14.string(),
+    timestamp: z14.string().datetime()
   })).default([]),
   /**
    * Attestations
    */
-  attestations: z13.array(z13.object({
-    type: z13.enum(["code-review", "security-scan", "test-results", "ci-build"]),
-    status: z13.enum(["passed", "failed"]),
-    url: z13.string().url().optional(),
-    timestamp: z13.string().datetime()
+  attestations: z14.array(z14.object({
+    type: z14.enum(["code-review", "security-scan", "test-results", "ci-build"]),
+    status: z14.enum(["passed", "failed"]),
+    url: z14.string().url().optional(),
+    timestamp: z14.string().datetime()
   })).default([])
 });
-var PluginTrustScoreSchema = z13.object({
+var PluginTrustScoreSchema = z14.object({
   /**
    * Plugin identifier
    */
-  pluginId: z13.string(),
+  pluginId: z14.string(),
   /**
    * Overall trust score (0-100)
    */
-  score: z13.number().min(0).max(100),
+  score: z14.number().min(0).max(100),
   /**
    * Score components
    */
-  components: z13.object({
+  components: z14.object({
     /**
      * Vendor reputation (0-100)
      */
-    vendorReputation: z13.number().min(0).max(100),
+    vendorReputation: z14.number().min(0).max(100),
     /**
      * Security scan results (0-100)
      */
-    securityScore: z13.number().min(0).max(100),
+    securityScore: z14.number().min(0).max(100),
     /**
      * Code quality (0-100)
      */
-    codeQuality: z13.number().min(0).max(100),
+    codeQuality: z14.number().min(0).max(100),
     /**
      * Community engagement (0-100)
      */
-    communityScore: z13.number().min(0).max(100),
+    communityScore: z14.number().min(0).max(100),
     /**
      * Update frequency (0-100)
      */
-    maintenanceScore: z13.number().min(0).max(100)
+    maintenanceScore: z14.number().min(0).max(100)
   }),
   /**
    * Trust level
    */
-  level: z13.enum(["verified", "trusted", "neutral", "untrusted", "blocked"]),
+  level: z14.enum(["verified", "trusted", "neutral", "untrusted", "blocked"]),
   /**
    * Verification badges
    */
-  badges: z13.array(z13.enum([
+  badges: z14.array(z14.enum([
     "official",
     // Official ObjectStack plugin
     "verified-vendor",
@@ -3159,7 +3224,7 @@ var PluginTrustScoreSchema = z13.object({
   /**
    * Last updated
    */
-  updatedAt: z13.string().datetime()
+  updatedAt: z14.string().datetime()
 });
 var PluginSecurityProtocol = {
   VulnerabilitySeverity,