@objectstack/spec 6.7.0 → 6.8.0

package/dist/security/index.js

@@ -47,7 +47,7 @@ function lazySchema(factory) {
 }
 
 // src/shared/identifiers.zod.ts
-lazySchema(() => zod.z.string().min(2, { message: "System identifier must be at least 2 characters" }).regex(/^[a-z][a-z0-9_.]*$/, {
+var SystemIdentifierSchema = lazySchema(() => zod.z.string().min(2, { message: "System identifier must be at least 2 characters" }).regex(/^[a-z][a-z0-9_.]*$/, {
   message: 'System identifier must be lowercase, starting with a letter, and may contain letters, numbers, underscores, or dots (e.g., "user_profile" or "order.created")'
 }).describe("System identifier (lowercase with underscores or dots)"));
 var SnakeCaseIdentifierSchema = lazySchema(() => zod.z.string().min(2, { message: "Identifier must be at least 2 characters" }).regex(/^[a-z][a-z0-9_]*$/, {
@@ -578,8 +578,1085 @@ zod.z.union([
   zod.z.string().min(1).transform((source) => ({ dialect: "template", source })),
   ExpressionSchema
 ]);
+lazySchema(() => zod.z.object({
+  /** Translation key (e.g., "views.task_list.label", "apps.crm.description") */
+  key: zod.z.string().describe('Translation key (e.g., "views.task_list.label")'),
+  /** Default value when translation is not available */
+  defaultValue: zod.z.string().optional().describe("Fallback value when translation key is not found"),
+  /** Interpolation parameters for dynamic translations */
+  params: zod.z.record(zod.z.string(), zod.z.union([zod.z.string(), zod.z.number(), zod.z.boolean()])).optional().describe("Interpolation parameters (e.g., { count: 5 })")
+}));
+var I18nLabelSchema = lazySchema(() => zod.z.string().describe("Display label (plain string; i18n keys are auto-generated by the framework)"));
+var AriaPropsSchema = lazySchema(() => zod.z.object({
+  /** Accessible label for screen readers */
+  ariaLabel: I18nLabelSchema.optional().describe("Accessible label for screen readers (WAI-ARIA aria-label)"),
+  /** ID of element that describes this component */
+  ariaDescribedBy: zod.z.string().optional().describe("ID of element providing additional description (WAI-ARIA aria-describedby)"),
+  /** WAI-ARIA role override */
+  role: zod.z.string().optional().describe('WAI-ARIA role attribute (e.g., "dialog", "navigation", "alert")')
+}).describe("ARIA accessibility attributes"));
+lazySchema(() => zod.z.object({
+  /** Translation key for the plural form */
+  key: zod.z.string().describe("Translation key"),
+  /** Form for zero quantity */
+  zero: zod.z.string().optional().describe('Zero form (e.g., "No items")'),
+  /** Form for singular (1) */
+  one: zod.z.string().optional().describe('Singular form (e.g., "{count} item")'),
+  /** Form for dual (2) — used in Arabic, Welsh, etc. */
+  two: zod.z.string().optional().describe('Dual form (e.g., "{count} items" for exactly 2)'),
+  /** Form for few (2-4 in Slavic languages) */
+  few: zod.z.string().optional().describe("Few form (e.g., for 2-4 in some languages)"),
+  /** Form for many (5+ in Slavic languages) */
+  many: zod.z.string().optional().describe("Many form (e.g., for 5+ in some languages)"),
+  /** Default/fallback form */
+  other: zod.z.string().describe('Default plural form (e.g., "{count} items")')
+}).describe("ICU plural rules for a translation key"));
+var NumberFormatSchema = lazySchema(() => zod.z.object({
+  style: zod.z.enum(["decimal", "currency", "percent", "unit"]).default("decimal").describe("Number formatting style"),
+  currency: zod.z.string().optional().describe('ISO 4217 currency code (e.g., "USD", "EUR")'),
+  unit: zod.z.string().optional().describe('Unit for unit formatting (e.g., "kilometer", "liter")'),
+  minimumFractionDigits: zod.z.number().optional().describe("Minimum number of fraction digits"),
+  maximumFractionDigits: zod.z.number().optional().describe("Maximum number of fraction digits"),
+  useGrouping: zod.z.boolean().optional().describe("Whether to use grouping separators (e.g., 1,000)")
+}).describe("Number formatting rules"));
+var DateFormatSchema = lazySchema(() => zod.z.object({
+  dateStyle: zod.z.enum(["full", "long", "medium", "short"]).optional().describe("Date display style"),
+  timeStyle: zod.z.enum(["full", "long", "medium", "short"]).optional().describe("Time display style"),
+  timeZone: zod.z.string().optional().describe('IANA time zone (e.g., "America/New_York")'),
+  hour12: zod.z.boolean().optional().describe("Use 12-hour format")
+}).describe("Date/time formatting rules"));
+lazySchema(() => zod.z.object({
+  /** BCP 47 language code (e.g., "en-US", "zh-CN", "ar-SA") */
+  code: zod.z.string().describe('BCP 47 language code (e.g., "en-US", "zh-CN")'),
+  /** Ordered fallback chain for missing translations */
+  fallbackChain: zod.z.array(zod.z.string()).optional().describe('Fallback language codes in priority order (e.g., ["zh-TW", "en"])'),
+  /** Text direction */
+  direction: zod.z.enum(["ltr", "rtl"]).default("ltr").describe("Text direction: left-to-right or right-to-left"),
+  /** Default number formatting */
+  numberFormat: NumberFormatSchema.optional().describe("Default number formatting rules"),
+  /** Default date formatting */
+  dateFormat: DateFormatSchema.optional().describe("Default date/time formatting rules")
+}).describe("Locale configuration"));
+var SharingConfigSchema = lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(false).describe("Enable public sharing"),
+  publicLink: zod.z.string().optional().describe("Generated public share URL"),
+  password: zod.z.string().optional().describe("Password required to access shared link"),
+  allowedDomains: zod.z.array(zod.z.string()).optional().describe('Restrict access to specific email domains (e.g. ["example.com"])'),
+  expiresAt: zod.z.string().optional().describe("Expiration date/time in ISO 8601 format"),
+  allowAnonymous: zod.z.boolean().optional().default(false).describe("Allow access without authentication")
+}));
+lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(false).describe("Enable iframe embedding"),
+  allowedOrigins: zod.z.array(zod.z.string()).optional().describe('Allowed iframe parent origins (e.g. ["https://example.com"])'),
+  width: zod.z.string().optional().default("100%").describe("Embed width (CSS value)"),
+  height: zod.z.string().optional().default("600px").describe("Embed height (CSS value)"),
+  showHeader: zod.z.boolean().optional().default(true).describe("Show interface header in embed"),
+  showNavigation: zod.z.boolean().optional().default(false).describe("Show navigation in embed"),
+  responsive: zod.z.boolean().optional().default(true).describe("Enable responsive resizing")
+}));
+var BreakpointName = zod.z.enum(["xs", "sm", "md", "lg", "xl", "2xl"]);
+var BreakpointColumnMapSchema = lazySchema(() => zod.z.object({
+  xs: zod.z.number().min(1).max(12).optional(),
+  sm: zod.z.number().min(1).max(12).optional(),
+  md: zod.z.number().min(1).max(12).optional(),
+  lg: zod.z.number().min(1).max(12).optional(),
+  xl: zod.z.number().min(1).max(12).optional(),
+  "2xl": zod.z.number().min(1).max(12).optional()
+}).describe("Grid columns per breakpoint (1-12)"));
+var BreakpointOrderMapSchema = lazySchema(() => zod.z.object({
+  xs: zod.z.number().optional(),
+  sm: zod.z.number().optional(),
+  md: zod.z.number().optional(),
+  lg: zod.z.number().optional(),
+  xl: zod.z.number().optional(),
+  "2xl": zod.z.number().optional()
+}).describe("Display order per breakpoint"));
+var ResponsiveConfigSchema = lazySchema(() => zod.z.object({
+  /** Minimum breakpoint for visibility */
+  breakpoint: BreakpointName.optional().describe("Minimum breakpoint for visibility"),
+  /** Hide on specific breakpoints */
+  hiddenOn: zod.z.array(BreakpointName).optional().describe("Hide on these breakpoints"),
+  /** Grid columns per breakpoint (1-12 column grid) */
+  columns: BreakpointColumnMapSchema.optional().describe("Grid columns per breakpoint"),
+  /** Display order per breakpoint */
+  order: BreakpointOrderMapSchema.optional().describe("Display order per breakpoint")
+}).describe("Responsive layout configuration"));
+var PerformanceConfigSchema = lazySchema(() => zod.z.object({
+  /** Enable lazy loading for this component */
+  lazyLoad: zod.z.boolean().optional().describe("Enable lazy loading (defer rendering until visible)"),
+  /** Virtual scrolling configuration for large datasets */
+  virtualScroll: zod.z.object({
+    enabled: zod.z.boolean().default(false).describe("Enable virtual scrolling"),
+    itemHeight: zod.z.number().optional().describe("Fixed item height in pixels (for estimation)"),
+    overscan: zod.z.number().optional().describe("Number of extra items to render outside viewport")
+  }).optional().describe("Virtual scrolling configuration"),
+  /** Client-side caching strategy */
+  cacheStrategy: zod.z.enum([
+    "none",
+    "cache-first",
+    "network-first",
+    "stale-while-revalidate"
+  ]).optional().describe("Client-side data caching strategy"),
+  /** Enable data prefetching */
+  prefetch: zod.z.boolean().optional().describe("Prefetch data before component is visible"),
+  /** Maximum number of items to render before pagination */
+  pageSize: zod.z.number().optional().describe("Number of items per page for pagination"),
+  /** Debounce interval for user interactions (ms) */
+  debounceMs: zod.z.number().optional().describe("Debounce interval for user interactions in milliseconds")
+}).describe("Performance optimization configuration"));
+var EncryptionAlgorithmSchema = lazySchema(() => zod.z.enum([
+  "aes-256-gcm",
+  "aes-256-cbc",
+  "chacha20-poly1305"
+]).describe("Supported encryption algorithm"));
+var KeyManagementProviderSchema = lazySchema(() => zod.z.enum([
+  "local",
+  "aws-kms",
+  "azure-key-vault",
+  "gcp-kms",
+  "hashicorp-vault"
+]).describe("Key management service provider"));
+var KeyRotationPolicySchema = lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(false).describe("Enable automatic key rotation"),
+  frequencyDays: zod.z.number().min(1).default(90).describe("Rotation frequency in days"),
+  retainOldVersions: zod.z.number().default(3).describe("Number of old key versions to retain"),
+  autoRotate: zod.z.boolean().default(true).describe("Automatically rotate without manual approval")
+}).describe("Policy for automatic encryption key rotation"));
+var EncryptionConfigSchema = lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(false).describe("Enable field-level encryption"),
+  algorithm: EncryptionAlgorithmSchema.default("aes-256-gcm").describe("Encryption algorithm"),
+  keyManagement: zod.z.object({
+    provider: KeyManagementProviderSchema.describe("Key management service provider"),
+    keyId: zod.z.string().optional().describe("Key identifier in the provider"),
+    rotationPolicy: KeyRotationPolicySchema.optional().describe("Key rotation policy")
+  }).describe("Key management configuration"),
+  scope: zod.z.enum(["field", "record", "table", "database"]).describe("Encryption scope level"),
+  deterministicEncryption: zod.z.boolean().default(false).describe("Allows equality queries on encrypted data"),
+  searchableEncryption: zod.z.boolean().default(false).describe("Allows search on encrypted data")
+}).describe("Field-level encryption configuration"));
+lazySchema(() => zod.z.object({
+  fieldName: zod.z.string().describe("Name of the field to encrypt"),
+  encryptionConfig: EncryptionConfigSchema.describe("Encryption settings for this field"),
+  indexable: zod.z.boolean().default(false).describe("Allow indexing on encrypted field")
+}).describe("Per-field encryption assignment"));
+var MaskingStrategySchema = lazySchema(() => zod.z.enum([
+  "redact",
+  // Complete redaction: ****
+  "partial",
+  // Partial masking: 138****5678
+  "hash",
+  // Hash value: sha256(value)
+  "tokenize",
+  // Tokenization: token-12345
+  "randomize",
+  // Randomize: generate random value
+  "nullify",
+  // Null value: null
+  "substitute"
+  // Substitute with dummy data
+]).describe("Data masking strategy for PII protection"));
+var MaskingRuleSchema = lazySchema(() => zod.z.object({
+  field: zod.z.string().describe("Field name to apply masking to"),
+  strategy: MaskingStrategySchema.describe("Masking strategy to use"),
+  pattern: zod.z.string().optional().describe("Regex pattern for partial masking"),
+  preserveFormat: zod.z.boolean().default(true).describe("Keep the original data format after masking"),
+  preserveLength: zod.z.boolean().default(true).describe("Keep the original data length after masking"),
+  roles: zod.z.array(zod.z.string()).optional().describe("Roles that see masked data"),
+  exemptRoles: zod.z.array(zod.z.string()).optional().describe("Roles that see unmasked data")
+}).describe("Masking rule for a single field"));
+lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(false).describe("Enable data masking"),
+  rules: zod.z.array(MaskingRuleSchema).describe("List of field-level masking rules"),
+  auditUnmasking: zod.z.boolean().default(true).describe("Log when masked data is accessed unmasked")
+}).describe("Top-level data masking configuration for PII protection"));
+
+// src/data/field.zod.ts
+var FieldType = zod.z.enum([
+  // Core Text
+  "text",
+  "textarea",
+  "email",
+  "url",
+  "phone",
+  "password",
+  // Rich Content
+  "markdown",
+  "html",
+  "richtext",
+  // Numbers
+  "number",
+  "currency",
+  "percent",
+  // Date & Time
+  "date",
+  "datetime",
+  "time",
+  // Logic
+  "boolean",
+  "toggle",
+  // Toggle is a distinct UI from checkbox
+  // Selection
+  "select",
+  // Single select dropdown
+  "multiselect",
+  // Multi select (often tags)
+  "radio",
+  // Radio group
+  "checkboxes",
+  // Checkbox group
+  // Relational
+  "lookup",
+  "master_detail",
+  // Dynamic reference
+  "tree",
+  // Hierarchical reference
+  // Media
+  "image",
+  "file",
+  "avatar",
+  "video",
+  "audio",
+  // Calculated / System
+  "formula",
+  "summary",
+  "autonumber",
+  // Embedded structured values (stored as JSON on the parent row — no separate table / FK)
+  "composite",
+  // Single embedded sub-object with declared sub-fields  (≈ Strapi component / ACF group)
+  "repeater",
+  // Repeating embedded sub-object array with declared sub-fields  (≈ Strapi repeatable component / ACF repeater)
+  // Enhanced Types
+  "location",
+  // GPS coordinates
+  "address",
+  // Structured address
+  "code",
+  // Code editor (JSON/SQL/JS)
+  "json",
+  // Structured JSON data (untyped escape hatch)
+  "color",
+  // Color picker
+  "rating",
+  // Star rating
+  "slider",
+  // Numeric slider
+  "signature",
+  // Digital signature
+  "qrcode",
+  // QR code / Barcode
+  "progress",
+  // Progress bar
+  "tags",
+  // Simple tag list
+  // AI/ML Types
+  "vector"
+  // Vector embeddings for AI/ML (semantic search, RAG)
+]);
+var SelectOptionSchema = lazySchema(() => zod.z.object({
+  label: zod.z.string().describe("Display label (human-readable, any case allowed)"),
+  value: SystemIdentifierSchema.describe("Stored value (lowercase machine identifier)"),
+  color: zod.z.string().optional().describe("Color code for badges/charts"),
+  default: zod.z.boolean().optional().describe("Is default option")
+}));
+lazySchema(() => zod.z.object({
+  latitude: zod.z.number().min(-90).max(90).describe("Latitude coordinate"),
+  longitude: zod.z.number().min(-180).max(180).describe("Longitude coordinate"),
+  altitude: zod.z.number().optional().describe("Altitude in meters"),
+  accuracy: zod.z.number().optional().describe("Accuracy in meters")
+}));
+var CurrencyConfigSchema = lazySchema(() => zod.z.object({
+  precision: zod.z.number().int().min(0).max(10).default(2).describe("Decimal precision (default: 2)"),
+  currencyMode: zod.z.enum(["dynamic", "fixed"]).default("dynamic").describe("Currency mode: dynamic (user selectable) or fixed (single currency)"),
+  defaultCurrency: zod.z.string().length(3).default("CNY").describe("Default or fixed currency code (ISO 4217, e.g., USD, CNY, EUR)")
+}));
+lazySchema(() => zod.z.object({
+  value: zod.z.number().describe("Monetary amount"),
+  currency: zod.z.string().length(3).describe("Currency code (ISO 4217)")
+}));
+lazySchema(() => zod.z.object({
+  street: zod.z.string().optional().describe("Street address"),
+  city: zod.z.string().optional().describe("City name"),
+  state: zod.z.string().optional().describe("State/Province"),
+  postalCode: zod.z.string().optional().describe("Postal/ZIP code"),
+  country: zod.z.string().optional().describe("Country name or code"),
+  countryCode: zod.z.string().optional().describe("ISO country code (e.g., US, GB)"),
+  formatted: zod.z.string().optional().describe("Formatted address string")
+}));
+var VectorConfigSchema = lazySchema(() => zod.z.object({
+  dimensions: zod.z.number().int().min(1).max(1e4).describe("Vector dimensionality (e.g., 1536 for OpenAI embeddings)"),
+  distanceMetric: zod.z.enum(["cosine", "euclidean", "dotProduct", "manhattan"]).default("cosine").describe("Distance/similarity metric for vector search"),
+  normalized: zod.z.boolean().default(false).describe("Whether vectors are normalized (unit length)"),
+  indexed: zod.z.boolean().default(true).describe("Whether to create a vector index for fast similarity search"),
+  indexType: zod.z.enum(["hnsw", "ivfflat", "flat"]).optional().describe("Vector index algorithm (HNSW for high accuracy, IVFFlat for large datasets)")
+}));
+var FileAttachmentConfigSchema = lazySchema(() => zod.z.object({
+  /** File Size Limits */
+  minSize: zod.z.number().min(0).optional().describe("Minimum file size in bytes"),
+  maxSize: zod.z.number().min(1).optional().describe("Maximum file size in bytes (e.g., 10485760 = 10MB)"),
+  /** File Type Restrictions */
+  allowedTypes: zod.z.array(zod.z.string()).optional().describe('Allowed file extensions (e.g., [".pdf", ".docx", ".jpg"])'),
+  blockedTypes: zod.z.array(zod.z.string()).optional().describe('Blocked file extensions (e.g., [".exe", ".bat", ".sh"])'),
+  allowedMimeTypes: zod.z.array(zod.z.string()).optional().describe('Allowed MIME types (e.g., ["image/jpeg", "application/pdf"])'),
+  blockedMimeTypes: zod.z.array(zod.z.string()).optional().describe("Blocked MIME types"),
+  /** Virus Scanning */
+  virusScan: zod.z.boolean().default(false).describe("Enable virus scanning for uploaded files"),
+  virusScanProvider: zod.z.enum(["clamav", "virustotal", "metadefender", "custom"]).optional().describe("Virus scanning service provider"),
+  virusScanOnUpload: zod.z.boolean().default(true).describe("Scan files immediately on upload"),
+  quarantineOnThreat: zod.z.boolean().default(true).describe("Quarantine files if threat detected"),
+  /** Storage Configuration */
+  storageProvider: zod.z.string().optional().describe("Object storage provider name (references ObjectStorageConfig)"),
+  storageBucket: zod.z.string().optional().describe("Target bucket name"),
+  storagePrefix: zod.z.string().optional().describe('Storage path prefix (e.g., "uploads/documents/")'),
+  /** Image-Specific Validation */
+  imageValidation: zod.z.object({
+    minWidth: zod.z.number().min(1).optional().describe("Minimum image width in pixels"),
+    maxWidth: zod.z.number().min(1).optional().describe("Maximum image width in pixels"),
+    minHeight: zod.z.number().min(1).optional().describe("Minimum image height in pixels"),
+    maxHeight: zod.z.number().min(1).optional().describe("Maximum image height in pixels"),
+    aspectRatio: zod.z.string().optional().describe('Required aspect ratio (e.g., "16:9", "1:1")'),
+    generateThumbnails: zod.z.boolean().default(false).describe("Auto-generate thumbnails"),
+    thumbnailSizes: zod.z.array(zod.z.object({
+      name: zod.z.string().describe('Thumbnail variant name (e.g., "small", "medium", "large")'),
+      width: zod.z.number().min(1).describe("Thumbnail width in pixels"),
+      height: zod.z.number().min(1).describe("Thumbnail height in pixels"),
+      crop: zod.z.boolean().default(false).describe("Crop to exact dimensions")
+    })).optional().describe("Thumbnail size configurations"),
+    preserveMetadata: zod.z.boolean().default(false).describe("Preserve EXIF metadata"),
+    autoRotate: zod.z.boolean().default(true).describe("Auto-rotate based on EXIF orientation")
+  }).optional().describe("Image-specific validation rules"),
+  /** Upload Behavior */
+  allowMultiple: zod.z.boolean().default(false).describe("Allow multiple file uploads (overrides field.multiple)"),
+  allowReplace: zod.z.boolean().default(true).describe("Allow replacing existing files"),
+  allowDelete: zod.z.boolean().default(true).describe("Allow deleting uploaded files"),
+  requireUpload: zod.z.boolean().default(false).describe("Require at least one file when field is required"),
+  /** Metadata Extraction */
+  extractMetadata: zod.z.boolean().default(true).describe("Extract file metadata (name, size, type, etc.)"),
+  extractText: zod.z.boolean().default(false).describe("Extract text content from documents (OCR/parsing)"),
+  /** Versioning */
+  versioningEnabled: zod.z.boolean().default(false).describe("Keep previous versions of replaced files"),
+  maxVersions: zod.z.number().min(1).optional().describe("Maximum number of versions to retain"),
+  /** Access Control */
+  publicRead: zod.z.boolean().default(false).describe("Allow public read access to uploaded files"),
+  presignedUrlExpiry: zod.z.number().min(60).max(604800).default(3600).describe("Presigned URL expiration in seconds (default: 1 hour)")
+}).refine((data) => {
+  if (data.minSize !== void 0 && data.maxSize !== void 0 && data.minSize > data.maxSize) {
+    return false;
+  }
+  return true;
+}, {
+  message: "minSize must be less than or equal to maxSize"
+}).refine((data) => {
+  if (data.virusScanProvider !== void 0 && data.virusScan !== true) {
+    return false;
+  }
+  return true;
+}, {
+  message: "virusScanProvider requires virusScan to be enabled"
+}));
+var DataQualityRulesSchema = lazySchema(() => zod.z.object({
+  /** Enforce uniqueness constraint */
+  uniqueness: zod.z.boolean().default(false).describe("Enforce unique values across all records"),
+  /** Completeness ratio (0-1) indicating minimum percentage of non-null values */
+  completeness: zod.z.number().min(0).max(1).default(0).describe("Minimum ratio of non-null values (0-1, default: 0 = no requirement)"),
+  /** Accuracy validation against authoritative source */
+  accuracy: zod.z.object({
+    source: zod.z.string().describe('Reference data source for validation (e.g., "api.verify.com", "master_data")'),
+    threshold: zod.z.number().min(0).max(1).describe("Minimum accuracy threshold (0-1, e.g., 0.95 = 95% match required)")
+  }).optional().describe("Accuracy validation configuration")
+}));
+var ComputedFieldCacheSchema = lazySchema(() => zod.z.object({
+  /** Enable caching for this computed field */
+  enabled: zod.z.boolean().describe("Enable caching for computed field results"),
+  /** Time-to-live in seconds */
+  ttl: zod.z.number().min(0).describe("Cache TTL in seconds (0 = no expiration)"),
+  /** Array of field paths that trigger cache invalidation when changed */
+  invalidateOn: zod.z.array(zod.z.string()).describe('Field paths that invalidate cache (e.g., ["inventory.quantity", "pricing.base_price"])')
+}));
+lazySchema(() => zod.z.object({
+  /** Identity */
+  name: zod.z.string().regex(/^[a-z_][a-z0-9_]*$/).describe("Machine name (snake_case)").optional(),
+  label: zod.z.string().optional().describe("Human readable label"),
+  type: FieldType.describe("Field Data Type"),
+  description: zod.z.string().optional().describe("Tooltip/Help text"),
+  format: zod.z.string().optional().describe("Format string (e.g. email, phone)"),
+  /** Storage Layer Mapping */
+  columnName: zod.z.string().optional().describe("Physical column name in the target datasource. Defaults to the field key when not set."),
+  /** Database Constraints */
+  required: zod.z.boolean().default(false).describe("Is required"),
+  searchable: zod.z.boolean().default(false).describe("Is searchable"),
+  multiple: zod.z.boolean().default(false).describe("Allow multiple values (Stores as Array/JSON). Applicable for select, lookup, file, image."),
+  unique: zod.z.boolean().default(false).describe("Is unique constraint"),
+  defaultValue: zod.z.unknown().optional().describe("Default value"),
+  /** Text/String Constraints */
+  maxLength: zod.z.number().optional().describe("Max character length"),
+  minLength: zod.z.number().optional().describe("Min character length"),
+  /** Number Constraints */
+  precision: zod.z.number().optional().describe("Total digits"),
+  scale: zod.z.number().optional().describe("Decimal places"),
+  min: zod.z.number().optional().describe("Minimum value"),
+  max: zod.z.number().optional().describe("Maximum value"),
+  /** Selection Options */
+  options: zod.z.array(SelectOptionSchema).optional().describe("Static options for select/multiselect"),
+  /**
+   * Relationship Config
+   * 
+   * Used by `lookup` and `master_detail` field types to define cross-object references.
+   * The `reference` property is **required** for these types — it identifies the target
+   * object whose records this field links to. The engine uses `reference` during $expand
+   * post-processing to resolve foreign key IDs into full related objects via batch queries.
+   * 
+   * For `master_detail` fields, the parent record controls the lifecycle of child records
+   * (e.g., cascade delete). For `lookup` fields, the reference is a soft link.
+   */
+  reference: zod.z.string().optional().describe(
+    "Target object name (snake_case) for lookup/master_detail fields. Required for relationship types. Used by $expand to resolve foreign key IDs into full objects."
+  ),
+  referenceFilters: zod.z.array(zod.z.string()).optional().describe('Filters applied to lookup dialogs (e.g. "active = true")'),
+  writeRequiresMasterRead: zod.z.boolean().optional().describe("If true, user needs read access to master record to edit this field"),
+  deleteBehavior: zod.z.enum(["set_null", "cascade", "restrict"]).optional().default("set_null").describe("What happens if referenced record is deleted"),
+  /** Calculation — CEL formula. Plain string accepted for back-compat; build emits canonical envelope. */
+  expression: ExpressionInputSchema.optional().describe("Formula expression (CEL). e.g. F`record.amount * 0.1`"),
+  summaryOperations: zod.z.object({
+    object: zod.z.string().describe("Source child object name for roll-up"),
+    field: zod.z.string().describe("Field on child object to aggregate"),
+    function: zod.z.enum(["count", "sum", "min", "max", "avg"]).describe("Aggregation function to apply")
+  }).optional().describe("Roll-up summary definition"),
+  /** Enhanced Field Type Configurations */
+  // Code field config
+  language: zod.z.string().optional().describe("Programming language for syntax highlighting (e.g., javascript, python, sql)"),
+  theme: zod.z.string().optional().describe("Code editor theme (e.g., dark, light, monokai)"),
+  lineNumbers: zod.z.boolean().optional().describe("Show line numbers in code editor"),
+  // Rating field config
+  maxRating: zod.z.number().optional().describe("Maximum rating value (default: 5)"),
+  allowHalf: zod.z.boolean().optional().describe("Allow half-star ratings"),
+  // Location field config
+  displayMap: zod.z.boolean().optional().describe("Display map widget for location field"),
+  allowGeocoding: zod.z.boolean().optional().describe("Allow address-to-coordinate conversion"),
+  // Address field config
+  addressFormat: zod.z.enum(["us", "uk", "international"]).optional().describe("Address format template"),
+  // Color field config
+  colorFormat: zod.z.enum(["hex", "rgb", "rgba", "hsl"]).optional().describe("Color value format"),
+  allowAlpha: zod.z.boolean().optional().describe("Allow transparency/alpha channel"),
+  presetColors: zod.z.array(zod.z.string()).optional().describe("Preset color options"),
+  // Slider field config
+  step: zod.z.number().optional().describe("Step increment for slider (default: 1)"),
+  showValue: zod.z.boolean().optional().describe("Display current value on slider"),
+  marks: zod.z.record(zod.z.string(), zod.z.string()).optional().describe('Custom marks/labels at specific values (e.g., {0: "Low", 50: "Medium", 100: "High"})'),
+  // QR Code / Barcode field config
+  // Note: qrErrorCorrection is only applicable when barcodeFormat='qr'
+  // Runtime validation should enforce this constraint
+  barcodeFormat: zod.z.enum(["qr", "ean13", "ean8", "code128", "code39", "upca", "upce"]).optional().describe("Barcode format type"),
+  qrErrorCorrection: zod.z.enum(["L", "M", "Q", "H"]).optional().describe('QR code error correction level (L=7%, M=15%, Q=25%, H=30%). Only applicable when barcodeFormat is "qr"'),
+  displayValue: zod.z.boolean().optional().describe("Display human-readable value below barcode/QR code"),
+  allowScanning: zod.z.boolean().optional().describe("Enable camera scanning for barcode/QR code input"),
+  // Currency field config
+  currencyConfig: CurrencyConfigSchema.optional().describe("Configuration for currency field type"),
+  // Vector field config
+  vectorConfig: VectorConfigSchema.optional().describe("Configuration for vector field type (AI/ML embeddings)"),
+  // File attachment field config
+  fileAttachmentConfig: FileAttachmentConfigSchema.optional().describe("Configuration for file and attachment field types"),
+  /** Enhanced Security & Compliance */
+  // Encryption configuration
+  encryptionConfig: EncryptionConfigSchema.optional().describe("Field-level encryption configuration for sensitive data (GDPR/HIPAA/PCI-DSS)"),
+  // Data masking rules
+  maskingRule: MaskingRuleSchema.optional().describe("Data masking rules for PII protection"),
+  // Audit trail
+  auditTrail: zod.z.boolean().default(false).describe("Enable detailed audit trail for this field (tracks all changes with user and timestamp)"),
+  /** Field Dependencies & Relationships */
+  // Field dependencies
+  dependencies: zod.z.array(zod.z.string()).optional().describe("Array of field names that this field depends on (for formulas, visibility rules, etc.)"),
+  /** Computed Field Optimization */
+  // Computed field caching
+  cached: ComputedFieldCacheSchema.optional().describe("Caching configuration for computed/formula fields"),
+  /** Data Quality & Governance */
+  // Data quality rules
+  dataQuality: DataQualityRulesSchema.optional().describe("Data quality validation and monitoring rules"),
+  /** Layout & Grouping */
+  group: zod.z.string().optional().describe('Field group name for organizing fields in forms and layouts (e.g., "contact_info", "billing", "system")'),
+  /** Conditional Requirements */
+  conditionalRequired: ExpressionInputSchema.optional().describe("Predicate (CEL) \u2014 field is required when TRUE. e.g. P`record.status == 'closed_won'`"),
+  /** Security & Visibility */
+  hidden: zod.z.boolean().default(false).describe("Hidden from default UI"),
+  readonly: zod.z.boolean().default(false).describe("Read-only in UI"),
+  system: zod.z.boolean().optional().describe("Auto-injected system/audit field (e.g. created_at, updated_by, organization_id). Tools that surface system fields separately from author-declared business fields should branch on this flag."),
+  sortable: zod.z.boolean().optional().default(true).describe("Whether field is sortable in list views"),
+  inlineHelpText: zod.z.string().optional().describe("Help text displayed below the field in forms"),
+  trackFeedHistory: zod.z.boolean().optional().describe("Track field changes in Chatter/activity feed (Salesforce pattern)"),
+  caseSensitive: zod.z.boolean().optional().describe("Whether text comparisons are case-sensitive"),
+  autonumberFormat: zod.z.string().optional().describe('Auto-number display format pattern (e.g., "CASE-{0000}")'),
+  /** Indexing */
+  index: zod.z.boolean().default(false).describe("Create standard database index"),
+  externalId: zod.z.boolean().default(false).describe("Is external ID for upsert operations")
+}));
+var HttpMethod = zod.z.enum([
+  "GET",
+  "POST",
+  "PUT",
+  "DELETE",
+  "PATCH",
+  "HEAD",
+  "OPTIONS"
+]);
+var HttpMethodSchema = lazySchema(() => zod.z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]));
+var HttpRequestSchema = lazySchema(() => zod.z.object({
+  url: zod.z.string().describe("API endpoint URL"),
+  method: HttpMethodSchema.optional().default("GET").describe("HTTP method"),
+  headers: zod.z.record(zod.z.string(), zod.z.string()).optional().describe("Custom HTTP headers"),
+  params: zod.z.record(zod.z.string(), zod.z.unknown()).optional().describe("Query parameters"),
+  body: zod.z.unknown().optional().describe("Request body for POST/PUT/PATCH")
+}));
+lazySchema(() => zod.z.object({
+  /**
+   * Enable CORS
+   */
+  enabled: zod.z.boolean().default(true).describe("Enable CORS"),
+  /**
+   * Allowed origins (* for all)
+   */
+  origins: zod.z.union([
+    zod.z.string(),
+    zod.z.array(zod.z.string())
+  ]).default("*").describe("Allowed origins (* for all)"),
+  /**
+   * Allowed HTTP methods
+   */
+  methods: zod.z.array(HttpMethod).optional().describe("Allowed HTTP methods"),
+  /**
+   * Allow credentials (cookies, authorization headers)
+   */
+  credentials: zod.z.boolean().default(false).describe("Allow credentials (cookies, authorization headers)"),
+  /**
+   * Preflight cache duration in seconds
+   */
+  maxAge: zod.z.number().int().optional().describe("Preflight cache duration in seconds")
+}));
+lazySchema(() => zod.z.object({
+  /**
+   * Enable rate limiting
+   */
+  enabled: zod.z.boolean().default(false).describe("Enable rate limiting"),
+  /**
+   * Time window in milliseconds
+   */
+  windowMs: zod.z.number().int().default(6e4).describe("Time window in milliseconds"),
+  /**
+   * Max requests per window
+   */
+  maxRequests: zod.z.number().int().default(100).describe("Max requests per window")
+}));
+lazySchema(() => zod.z.object({
+  /**
+   * URL path to serve from
+   */
+  path: zod.z.string().describe("URL path to serve from"),
+  /**
+   * Physical directory to serve
+   */
+  directory: zod.z.string().describe("Physical directory to serve"),
+  /**
+   * Cache-Control header value
+   */
+  cacheControl: zod.z.string().optional().describe("Cache-Control header value")
+}));
+
+// src/ui/view.zod.ts
+var ViewDataSchema = lazySchema(() => zod.z.discriminatedUnion("provider", [
+  zod.z.object({
+    provider: zod.z.literal("object"),
+    object: zod.z.string().describe("Target object name")
+  }),
+  zod.z.object({
+    provider: zod.z.literal("api"),
+    read: HttpRequestSchema.optional().describe("Configuration for fetching data"),
+    write: HttpRequestSchema.optional().describe("Configuration for submitting data (for forms/editable tables)")
+  }),
+  zod.z.object({
+    provider: zod.z.literal("value"),
+    items: zod.z.array(zod.z.unknown()).describe("Static data array")
+  }),
+  /**
+   * Schema-bound data source — used by standalone forms whose data is
+   * shaped by a JSON Schema (or Zod-derived schema) rather than by an
+   * ObjectQL object. Powers the metadata editor, action input dialogs,
+   * and any Form that is not bound to a CRUD object.
+   */
+  zod.z.object({
+    provider: zod.z.literal("schema"),
+    /** Schema identifier (e.g. metadata type name "report"). Resolved at runtime against /meta entries. */
+    schemaId: zod.z.string().describe("Schema identifier \u2014 typically the metadata type name"),
+    /** Optional inline JSON Schema; when omitted the runtime resolves schemaId from the server. */
+    schema: zod.z.record(zod.z.string(), zod.z.unknown()).optional().describe("Inline JSON Schema (Draft 2020-12). Optional when schemaId is resolvable.")
+  })
+]));
+var ViewFilterRuleSchema = lazySchema(() => zod.z.object({
+  /** Field name to filter on */
+  field: zod.z.string().describe("Field name to filter on"),
+  /** Filter operator */
+  operator: zod.z.string().describe("Filter operator (e.g. equals, not_equals, contains, this_quarter)"),
+  /** Filter value (optional for unary operators like is_null, this_quarter) */
+  value: zod.z.union([zod.z.string(), zod.z.number(), zod.z.boolean(), zod.z.null(), zod.z.array(zod.z.union([zod.z.string(), zod.z.number()]))]).optional().describe("Filter value")
+}).describe("View filter rule"));
+var ColumnSummarySchema = lazySchema(() => zod.z.enum([
+  "none",
+  "count",
+  "count_empty",
+  "count_filled",
+  "count_unique",
+  "percent_empty",
+  "percent_filled",
+  "sum",
+  "avg",
+  "min",
+  "max"
+]).describe("Aggregation function for column footer summary"));
+var ListColumnSchema = lazySchema(() => zod.z.object({
+  field: zod.z.string().describe("Field name (snake_case)"),
+  label: I18nLabelSchema.optional().describe("Display label override"),
+  width: zod.z.number().positive().optional().describe("Column width in pixels"),
+  align: zod.z.enum(["left", "center", "right"]).optional().describe("Text alignment"),
+  hidden: zod.z.boolean().optional().describe("Hide column by default"),
+  sortable: zod.z.boolean().optional().describe("Allow sorting by this column"),
+  resizable: zod.z.boolean().optional().describe("Allow resizing this column"),
+  wrap: zod.z.boolean().optional().describe("Allow text wrapping"),
+  type: zod.z.string().optional().describe('Renderer type override (e.g., "currency", "date")'),
+  /** Pinning (Airtable-style frozen columns) */
+  pinned: zod.z.enum(["left", "right"]).optional().describe("Pin/freeze column to left or right side"),
+  /** Column Footer Summary (Airtable-style aggregation) */
+  summary: ColumnSummarySchema.optional().describe("Footer aggregation function for this column"),
+  /** Interaction */
+  link: zod.z.boolean().optional().describe("Functions as the primary navigation link (triggers View navigation)"),
+  action: zod.z.string().optional().describe("Registered Action ID to execute when clicked")
+}));
+var SelectionConfigSchema = lazySchema(() => zod.z.object({
+  type: zod.z.enum(["none", "single", "multiple"]).default("none").describe("Selection mode")
+}));
+var PaginationConfigSchema = lazySchema(() => zod.z.object({
+  pageSize: zod.z.number().int().positive().default(25).describe("Number of records per page"),
+  pageSizeOptions: zod.z.array(zod.z.number().int().positive()).optional().describe("Available page size options")
+}));
+var RowHeightSchema = lazySchema(() => zod.z.enum([
+  "compact",
+  // Minimal padding, single line
+  "short",
+  // Reduced padding
+  "medium",
+  // Default padding
+  "tall",
+  // Extra padding, multi-line preview
+  "extra_tall"
+  // Maximum padding, rich content preview
+]).describe("Row height / density setting for list view"));
+var GroupingFieldSchema = lazySchema(() => zod.z.object({
+  field: zod.z.string().describe("Field name to group by"),
+  order: zod.z.enum(["asc", "desc"]).default("asc").describe("Group sort order"),
+  collapsed: zod.z.boolean().default(false).describe("Collapse groups by default")
+}));
+var GroupingConfigSchema = lazySchema(() => zod.z.object({
+  fields: zod.z.array(GroupingFieldSchema).min(1).describe("Fields to group by (supports up to 3 levels)")
+}).describe("Record grouping configuration"));
+var GalleryConfigSchema = lazySchema(() => zod.z.object({
+  coverField: zod.z.string().optional().describe("Attachment/image field to display as card cover"),
+  coverFit: zod.z.enum(["cover", "contain"]).default("cover").describe("Image fit mode for card cover"),
+  cardSize: zod.z.enum(["small", "medium", "large"]).default("medium").describe("Card size in gallery view"),
+  titleField: zod.z.string().optional().describe("Field to display as card title"),
+  visibleFields: zod.z.array(zod.z.string()).optional().describe("Fields to display on card body")
+}).describe("Gallery/card view configuration"));
+var TimelineConfigSchema = lazySchema(() => zod.z.object({
+  startDateField: zod.z.string().describe("Field for timeline item start date"),
+  endDateField: zod.z.string().optional().describe("Field for timeline item end date"),
+  titleField: zod.z.string().describe("Field to display as timeline item title"),
+  groupByField: zod.z.string().optional().describe("Field to group timeline rows"),
+  colorField: zod.z.string().optional().describe("Field to determine item color"),
+  scale: zod.z.enum(["hour", "day", "week", "month", "quarter", "year"]).default("week").describe("Default timeline scale")
+}).describe("Timeline view configuration"));
+var ViewSharingSchema = lazySchema(() => zod.z.object({
+  type: zod.z.enum(["personal", "collaborative"]).default("collaborative").describe("View ownership type"),
+  lockedBy: zod.z.string().optional().describe("User who locked the view configuration")
+}).describe("View sharing and access configuration"));
+var RowColorConfigSchema = lazySchema(() => zod.z.object({
+  field: zod.z.string().describe("Field to derive color from (typically a select/status field)"),
+  colors: zod.z.record(zod.z.string(), zod.z.string()).optional().describe("Map of field value to color (hex/token)")
+}).describe("Row color configuration based on field values"));
+var VisualizationTypeSchema = lazySchema(() => zod.z.enum([
+  "grid",
+  "kanban",
+  "gallery",
+  "calendar",
+  "timeline",
+  "gantt",
+  "map"
+]).describe("Visualization type that users can switch to"));
+var UserActionsConfigSchema = lazySchema(() => zod.z.object({
+  sort: zod.z.boolean().default(true).describe("Allow users to sort records"),
+  search: zod.z.boolean().default(true).describe("Allow users to search records"),
+  filter: zod.z.boolean().default(true).describe("Allow users to filter records"),
+  rowHeight: zod.z.boolean().default(true).describe("Allow users to toggle row height/density"),
+  addRecordForm: zod.z.boolean().default(false).describe("Add records through a form instead of inline"),
+  buttons: zod.z.array(zod.z.string()).optional().describe("Custom action button IDs to show in the toolbar")
+}).describe("User action toggles for the view toolbar"));
+var AppearanceConfigSchema = lazySchema(() => zod.z.object({
+  showDescription: zod.z.boolean().default(true).describe("Show the view description text"),
+  allowedVisualizations: zod.z.array(VisualizationTypeSchema).optional().describe('Whitelist of visualization types users can switch between (e.g. ["grid", "gallery", "kanban"])')
+}).describe("Appearance and visualization configuration"));
+var ViewTabSchema = lazySchema(() => zod.z.object({
+  name: SnakeCaseIdentifierSchema.describe("Tab identifier (snake_case)"),
+  label: I18nLabelSchema.optional().describe("Display label"),
+  icon: zod.z.string().optional().describe("Tab icon name"),
+  view: zod.z.string().optional().describe("Referenced list view name from listViews"),
+  filter: zod.z.array(ViewFilterRuleSchema).optional().describe("Tab-specific filter criteria"),
+  order: zod.z.number().int().min(0).optional().describe("Tab display order"),
+  pinned: zod.z.boolean().default(false).describe("Pin tab (cannot be removed by users)"),
+  isDefault: zod.z.boolean().default(false).describe("Set as the default active tab"),
+  visible: zod.z.boolean().default(true).describe("Tab visibility")
+}).describe("Tab configuration for multi-tab view interface"));
+var AddRecordConfigSchema = lazySchema(() => zod.z.object({
+  enabled: zod.z.boolean().default(true).describe("Show the add record entry point"),
+  position: zod.z.enum(["top", "bottom", "both"]).default("bottom").describe("Position of the add record button"),
+  mode: zod.z.enum(["inline", "form", "modal"]).default("inline").describe("How to add a new record"),
+  formView: zod.z.string().optional().describe('Named form view to use when mode is "form" or "modal"')
+}).describe("Add record entry point configuration"));
+var KanbanConfigSchema = lazySchema(() => zod.z.object({
+  groupByField: zod.z.string().describe("Field to group columns by (usually status/select)"),
+  summarizeField: zod.z.string().optional().describe("Field to sum at top of column (e.g. amount)"),
+  columns: zod.z.array(zod.z.string()).describe("Fields to show on cards")
+}));
+var ListChartConfigSchema = lazySchema(() => zod.z.object({
+  chartType: zod.z.enum(["bar", "line", "pie", "area", "scatter"]).default("bar").describe("Chart visualisation type"),
+  xAxisField: zod.z.string().describe("Field used as the X axis / category dimension"),
+  yAxisFields: zod.z.array(zod.z.string()).min(1).describe("Field(s) used as the Y axis / measures"),
+  aggregation: zod.z.enum(["sum", "avg", "count", "min", "max"]).optional().describe("Aggregation function applied to Y axis fields"),
+  groupByField: zod.z.string().optional().describe("Optional field used to split / stack the chart")
+}).describe("List chart view configuration"));
+var CalendarConfigSchema = lazySchema(() => zod.z.object({
+  startDateField: zod.z.string(),
+  endDateField: zod.z.string().optional(),
+  titleField: zod.z.string(),
+  colorField: zod.z.string().optional()
+}));
+var GanttConfigSchema = lazySchema(() => zod.z.object({
+  startDateField: zod.z.string(),
+  endDateField: zod.z.string(),
+  titleField: zod.z.string(),
+  progressField: zod.z.string().optional(),
+  dependenciesField: zod.z.string().optional()
+}));
+var NavigationModeSchema = lazySchema(() => zod.z.enum([
+  "page",
+  // Navigate to a new route (default)
+  "drawer",
+  // Open details in a side drawer/panel
+  "modal",
+  // Open details in a modal dialog
+  "split",
+  // Show details side-by-side with the list (master-detail)
+  "popover",
+  // Show details in a popover (lightweight)
+  "new_window",
+  // Open in new browser tab/window
+  "none"
+  // No navigation (read-only list)
+]));
+var NavigationConfigSchema = lazySchema(() => zod.z.object({
+  mode: NavigationModeSchema.default("page"),
+  /** Target View Config */
+  view: zod.z.string().optional().describe('Name of the form view to use for details (e.g. "summary_view", "edit_form")'),
+  /** Interaction Triggers */
+  preventNavigation: zod.z.boolean().default(false).describe("Disable standard navigation entirely"),
+  openNewTab: zod.z.boolean().default(false).describe("Force open in new tab (applies to page mode)"),
+  /** Dimensions (for modal/drawer) */
+  width: zod.z.union([zod.z.string(), zod.z.number()]).optional().describe('Width of the drawer/modal (e.g. "600px", "50%")')
+}));
+var ListViewSchema = lazySchema(() => zod.z.object({
+  name: SnakeCaseIdentifierSchema.optional().describe("Internal view name (lowercase snake_case)"),
+  label: I18nLabelSchema.optional(),
+  // Display label override (supports i18n)
+  type: zod.z.enum([
+    "grid",
+    // Standard Data Table
+    "kanban",
+    // Board / Columns
+    "gallery",
+    // Card Deck / Masonry
+    "calendar",
+    // Monthly/Weekly/Daily
+    "timeline",
+    // Chronological Stream (Feed)
+    "gantt",
+    // Project Timeline
+    "map",
+    // Geospatial
+    "chart"
+    // Aggregate visualisation
+  ]).default("grid"),
+  /** Data Source Configuration */
+  data: ViewDataSchema.optional().describe('Data source configuration (defaults to "object" provider)'),
+  /** Shared Query Config */
+  columns: zod.z.union([
+    zod.z.array(zod.z.string()),
+    // Legacy: simple field names
+    zod.z.array(ListColumnSchema)
+    // Enhanced: detailed column config
+  ]).describe("Fields to display as columns"),
+  filter: zod.z.array(ViewFilterRuleSchema).optional().describe("Filter criteria (JSON Rules)"),
+  sort: zod.z.union([
+    zod.z.string(),
+    //Legacy "field desc"
+    zod.z.array(zod.z.object({
+      field: zod.z.string(),
+      order: zod.z.enum(["asc", "desc"])
+    }))
+  ]).optional(),
+  /** Search & Filter */
+  searchableFields: zod.z.array(zod.z.string()).optional().describe("Fields enabled for search"),
+  filterableFields: zod.z.array(zod.z.string()).optional().describe("Fields enabled for end-user filtering in the top bar"),
+  /** Grid Features */
+  resizable: zod.z.boolean().optional().describe("Enable column resizing"),
+  striped: zod.z.boolean().optional().describe("Striped row styling"),
+  bordered: zod.z.boolean().optional().describe("Show borders"),
+  compactToolbar: zod.z.boolean().optional().describe("Collapse Group/Color/Density/Hide-fields into a single View settings popover"),
+  /** Selection */
+  selection: SelectionConfigSchema.optional().describe("Row selection configuration"),
+  /** Navigation / Interaction */
+  navigation: NavigationConfigSchema.optional().describe("Configuration for item click navigation (page, drawer, modal, etc.)"),
+  /** Pagination */
+  pagination: PaginationConfigSchema.optional().describe("Pagination configuration"),
+  /** Type Specific Config */
+  kanban: KanbanConfigSchema.optional(),
+  calendar: CalendarConfigSchema.optional(),
+  gantt: GanttConfigSchema.optional(),
+  gallery: GalleryConfigSchema.optional(),
+  timeline: TimelineConfigSchema.optional(),
+  chart: ListChartConfigSchema.optional(),
+  /** View Metadata (Airtable-style view management) */
+  description: I18nLabelSchema.optional().describe("View description for documentation/tooltips"),
+  sharing: ViewSharingSchema.optional().describe("View sharing and access configuration"),
+  /** Row Height / Density (Airtable-style) */
+  rowHeight: RowHeightSchema.optional().describe("Row height / density setting"),
+  /** Record Grouping (Airtable-style) */
+  grouping: GroupingConfigSchema.optional().describe("Group records by one or more fields"),
+  /** Row Color (Airtable-style) */
+  rowColor: RowColorConfigSchema.optional().describe("Color rows based on field value"),
+  /** Field Visibility & Ordering per View (Airtable-style) */
+  hiddenFields: zod.z.array(zod.z.string()).optional().describe("Fields to hide in this specific view"),
+  fieldOrder: zod.z.array(zod.z.string()).optional().describe("Explicit field display order for this view"),
+  /** Row & Bulk Actions */
+  rowActions: zod.z.array(zod.z.string()).optional().describe("Actions available for individual row items"),
+  bulkActions: zod.z.array(zod.z.string()).optional().describe("Actions available when multiple rows are selected"),
+  bulkActionDefs: zod.z.array(zod.z.record(zod.z.string(), zod.z.any())).optional().describe("Rich bulk action definitions (schema-driven, executed via BulkActionDialog)"),
+  /** Performance */
+  virtualScroll: zod.z.boolean().optional().describe("Enable virtual scrolling for large datasets"),
+  /** Conditional Formatting */
+  conditionalFormatting: zod.z.array(zod.z.object({
+    condition: ExpressionInputSchema.describe("Predicate (CEL) to evaluate."),
+    style: zod.z.record(zod.z.string(), zod.z.string()).describe("CSS styles to apply when condition is true")
+  })).optional().describe("Conditional formatting rules for list rows"),
+  /** Inline Edit */
+  inlineEdit: zod.z.boolean().optional().describe("Allow inline editing of records directly in the list view"),
+  /** Export */
+  exportOptions: zod.z.array(zod.z.enum(["csv", "xlsx", "pdf", "json"])).optional().describe("Available export format options"),
+  /** User Actions (Airtable Interface parity) */
+  userActions: UserActionsConfigSchema.optional().describe("User action toggles for the view toolbar"),
+  /** Appearance (Airtable Interface parity) */
+  appearance: AppearanceConfigSchema.optional().describe("Appearance and visualization configuration"),
+  /** Tabs (Airtable Interface parity) */
+  tabs: zod.z.array(ViewTabSchema).optional().describe("Tab definitions for multi-tab view interface"),
+  /** Add Record (Airtable Interface parity) */
+  addRecord: AddRecordConfigSchema.optional().describe("Add record entry point configuration"),
+  /** Record Count Display (Airtable Interface parity) */
+  showRecordCount: zod.z.boolean().optional().describe("Show record count at the bottom of the list"),
+  /** Advanced: Allow Printing (Airtable Interface parity) */
+  allowPrinting: zod.z.boolean().optional().describe("Allow users to print the view"),
+  /** Empty State */
+  emptyState: zod.z.object({
+    title: I18nLabelSchema.optional(),
+    message: I18nLabelSchema.optional(),
+    icon: zod.z.string().optional()
+  }).optional().describe("Empty state configuration when no records found"),
+  /** ARIA accessibility attributes */
+  aria: AriaPropsSchema.optional().describe("ARIA accessibility attributes for the list view"),
+  /** Responsive layout overrides per breakpoint */
+  responsive: ResponsiveConfigSchema.optional().describe("Responsive layout configuration"),
+  /** Performance optimization settings */
+  performance: PerformanceConfigSchema.optional().describe("Performance optimization settings")
+}));
+var FormFieldSchema = lazySchema(() => zod.z.object({
+  /** Field name (snake_case) */
+  field: zod.z.string().describe("Field name (snake_case)"),
+  /** Field type — reuses Data.FieldType. When set, widget is auto-inferred (can be overridden). */
+  type: FieldType.optional().describe("Field type (auto-infers widget if omitted)"),
+  /** Select/multiselect options — only needed when type=select/multiselect/radio/checkboxes */
+  options: zod.z.array(SelectOptionSchema).optional().describe("Options for select/multiselect/radio/checkboxes fields"),
+  /** Reference object for lookup/master_detail fields */
+  reference: zod.z.string().optional().describe("Target object name for lookup/master_detail fields"),
+  /** Text constraints */
+  maxLength: zod.z.number().optional().describe("Maximum character length (for text/textarea/email/url/phone)"),
+  minLength: zod.z.number().optional().describe("Minimum character length"),
+  /** Number constraints */
+  min: zod.z.number().optional().describe("Minimum value (for number/currency/percent/slider)"),
+  max: zod.z.number().optional().describe("Maximum value"),
+  precision: zod.z.number().optional().describe("Total digits (for number/currency)"),
+  scale: zod.z.number().optional().describe("Decimal places"),
+  /** Multi-value flag */
+  multiple: zod.z.boolean().optional().describe("Allow multiple values (for select/lookup/file/image)"),
+  /** UI overrides */
+  label: I18nLabelSchema.optional().describe("Display label override"),
+  placeholder: I18nLabelSchema.optional().describe("Placeholder text"),
+  helpText: I18nLabelSchema.optional().describe("Help/hint text"),
+  readonly: zod.z.boolean().optional().describe("Read-only override"),
+  immutable: zod.z.boolean().optional().describe("Editable on create, locked once the record exists (e.g. machine names)."),
+  required: zod.z.boolean().optional().describe("Required override"),
+  hidden: zod.z.boolean().optional().describe("Hidden override"),
+  colSpan: zod.z.number().int().min(1).max(4).optional().describe("Column span in grid layout (1-4)"),
+  /** Custom widget override — only needed when auto-inference is insufficient */
+  widget: zod.z.string().optional().describe("Custom widget/component name (overrides type-based inference)"),
+  /** For `code` fields: source language (e.g. 'javascript', 'sql', 'json', 'typescript', 'expression', 'cel'). Drives syntax highlighting. */
+  language: zod.z.string().optional().describe("Code editor language (for type=code)"),
+  /**
+   * Sub-fields for `composite` / `repeater` types — declares the inner shape
+   * of an embedded sub-object (composite) or each row of an embedded
+   * sub-object array (repeater). Recursive: composite/repeater can nest.
+   * Ignored for all other field types.
+   *
+   * Use `lookup` / `master_detail` instead when the children are independent
+   * records with their own IDs in a separate object/table.
+   */
+  fields: zod.z.array(zod.z.lazy(() => FormFieldSchema)).optional().describe("Sub-fields for composite/repeater types"),
+  dependsOn: zod.z.string().optional().describe("Parent field name for cascading"),
+  visibleOn: ExpressionInputSchema.optional().describe("Visibility predicate (CEL).")
+}));
+var FormSectionSchema = lazySchema(() => zod.z.object({
+  label: I18nLabelSchema.optional(),
+  description: zod.z.string().optional().describe("Optional description rendered under the section header."),
+  collapsible: zod.z.boolean().default(false),
+  collapsed: zod.z.boolean().default(false),
+  visibleOn: ExpressionInputSchema.optional().describe("Visibility predicate (CEL). Hides the whole section when false."),
+  columns: zod.z.union([
+    zod.z.enum(["1", "2", "3", "4"]),
+    zod.z.literal(1),
+    zod.z.literal(2),
+    zod.z.literal(3),
+    zod.z.literal(4)
+  ]).default(1).transform((val) => typeof val === "string" ? parseInt(val) : val),
+  fields: zod.z.array(zod.z.union([
+    zod.z.string(),
+    // Legacy: simple field name
+    FormFieldSchema
+    // Enhanced: detailed field config
+  ]))
+}));
+var FormViewSchema = lazySchema(() => zod.z.object({
+  type: zod.z.enum([
+    "simple",
+    // Single column or sections
+    "tabbed",
+    // Tabs
+    "wizard",
+    // Step by step
+    "split",
+    // Master-Detail split
+    "drawer",
+    // Side panel
+    "modal"
+    // Dialog
+  ]).default("simple"),
+  /** Data Source Configuration */
+  data: ViewDataSchema.optional().describe('Data source configuration (defaults to "object" provider)'),
+  sections: zod.z.array(FormSectionSchema).optional(),
+  // For simple layout
+  groups: zod.z.array(FormSectionSchema).optional(),
+  // Legacy support -> alias to sections
+  /** Default Sort for Related Lists (e.g., sort child records by date) */
+  defaultSort: zod.z.array(zod.z.object({
+    field: zod.z.string().describe("Field name to sort by"),
+    order: zod.z.enum(["asc", "desc"]).default("desc").describe("Sort direction")
+  })).optional().describe("Default sort order for related list views within this form"),
+  /** Public form sharing configuration */
+  sharing: SharingConfigSchema.optional().describe("Public sharing configuration for this form"),
+  /**
+   * What happens after a successful submit.
+   *
+   * - `thank-you` (default) — show a confirmation panel
+   * - `redirect` — send the browser to a URL
+   * - `continue` — reset the form so another response can be entered
+   * - `next-record` — advance to the next record (internal queues only)
+   */
+  submitBehavior: zod.z.union([
+    zod.z.object({
+      kind: zod.z.literal("thank-you"),
+      title: zod.z.string().optional(),
+      message: zod.z.string().optional()
+    }),
+    zod.z.object({
+      kind: zod.z.literal("redirect"),
+      url: zod.z.string(),
+      delayMs: zod.z.number().int().min(0).optional()
+    }),
+    zod.z.object({ kind: zod.z.literal("continue") }),
+    zod.z.object({ kind: zod.z.literal("next-record") })
+  ]).optional().describe("Post-submit behavior"),
+  /** ARIA accessibility attributes */
+  aria: AriaPropsSchema.optional().describe("ARIA accessibility attributes for the form view")
+}));
+lazySchema(() => zod.z.object({
+  list: ListViewSchema.optional(),
+  // Default list view
+  form: FormViewSchema.optional(),
+  // Default form view
+  listViews: zod.z.record(zod.z.string(), ListViewSchema).optional().describe("Additional named list views"),
+  formViews: zod.z.record(zod.z.string(), FormViewSchema).optional().describe("Additional named form views")
+}));
+function defineForm(config) {
+  const { schemaId, ...rest } = config;
+  return FormViewSchema.parse({
+    ...rest,
+    data: { provider: "schema", schemaId }
+  });
+}
 
-// src/security/sharing.zod.ts
+// src/security/permission.form.ts
+var permissionForm = defineForm({
+  schemaId: "permission",
+  type: "simple",
+  sections: [
+    {
+      label: "Identity",
+      description: "Permission Sets stack on top of a Profile to grant additional access. Profiles are the base set assigned 1:1 to each user.",
+      columns: 2,
+      fields: [
+        { field: "name", required: true, colSpan: 1, helpText: "Machine name (snake_case)" },
+        { field: "label", colSpan: 1, helpText: "Display label for admins" },
+        { field: "isProfile", type: "toggle", colSpan: 2, helpText: "Profile = base set assigned to users. Permission Set = additive grant." }
+      ]
+    },
+    {
+      label: "System Permissions",
+      description: "High-level capabilities not tied to a specific object \u2014 e.g. manage_users, view_audit_logs.",
+      columns: 1,
+      fields: [
+        { field: "systemPermissions", type: "tags", helpText: "List of system capability keys" }
+      ]
+    },
+    {
+      label: "Object & Field Permissions",
+      description: "Per-object CRUD + per-field FLS. Edit via the matrix editor or paste JSON here.",
+      columns: 1,
+      fields: [
+        { field: "objects", widget: "json", helpText: '{ "account": { allowRead: true, allowEdit: true, ... } }' },
+        { field: "fields", widget: "json", helpText: '{ "account.amount": { readable: true, editable: false } }' }
+      ]
+    },
+    {
+      label: "Tab & Row-Level Security",
+      description: "Tab visibility, RLS policies, and custom context variables for predicate evaluation.",
+      columns: 1,
+      fields: [
+        { field: "tabPermissions", widget: "json", helpText: '{ "app_crm": "visible", "app_admin": "hidden" }' },
+        { field: "rowLevelSecurity", widget: "json", helpText: "Array of RLS policies (see rls.zod.ts)" },
+        { field: "contextVariables", widget: "json", helpText: "Custom variables referenced in RLS predicates" }
+      ]
+    }
+  ]
+});
 var OWDModel = zod.z.enum([
   "private",
   // Only owner can see
@@ -744,5 +1821,6 @@ exports.SharingRuleType = SharingRuleType;
 exports.TerritoryModelSchema = TerritoryModelSchema;
 exports.TerritorySchema = TerritorySchema;
 exports.TerritoryType = TerritoryType;
+exports.permissionForm = permissionForm;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map