@stndrds/schema 1.0.0-alpha.136 → 1.0.0-alpha.138

package/dist/{helpers-BiGe0rbb.d.mts → helpers-CoFQtNfq.d.mts}

@@ -740,14 +740,14 @@ interface ObjectRecord extends Timestamps {
      */
     deletedAt?: Date | null;
     /**
-     * User ID who created this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who created this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     createdBy?: string;
     /**
-     * User ID who last updated this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who last updated this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     lastUpdatedBy?: string;
@@ -857,4 +857,4 @@ declare function isRecordComplete(objectDef: ObjectDefinition, data: Record<stri
  */
 declare function computeRecordStatus(objectDef: ObjectDefinition, data: Record<string, unknown>): CompletionStatus;
 
-export { type MigrationError as $, type AttributeGroupField as A, type BuiltInTransform as B, type ConfigOverrides as C, type DetailViewConfig as D, type CurrencyFilterValue as E, type FilterState as F, type Group as G, type CustomTab as H, type DocumentsTab as I, type ExtendedFilterRule as J, type FilterCombinator as K, type ListViewConfig as L, type MigrationDefinition as M, type FilterGroup as N, type ObjectDefinition as O, type FilterOperator as P, type FilterRule as Q, type RelationGroup as R, type SortRule as S, type Timestamps as T, type FilterValue as U, type ViewType as V, type FormDensity as W, type FormTab as X, type FormsTab as Y, type InverseSource as Z, type ListViewLayout as _, createFormAttributeValidator as a, NO_VALUE_OPERATORS as a0, type NoValueOperator as a1, OPERATORS_BY_TYPE as a2, type ObjectAttribute as a3, type PhoneFilterValue as a4, type QueryState as a5, RESERVED_ATTRIBUTE_NAMES as a6, type RelationSource as a7, type RelativeDateValue as a8, type ReservedAttributeName as a9, type RichtextTab as aa, SYSTEM_FIELD_NAMES as ab, type SchemaOperation as ac, type SchemaTransform as ad, type SortDirection as ae, type SystemFieldName as af, type TabType as ag, type TableSource as ah, type TransformSource as ai, type ViewOperation as aj, type ViewOverlay as ak, type ViewTransform as al, getRollupFilterOperators as am, isDetailView as an, isFieldGroup as ao, isListView as ap, isNoValueOperator as aq, isRelationGroup as ar, validateObject as b, computeRecordStatus as c, validateObjectOrThrow as d, createAttributeValidator as e, validateAttribute as f, getMissingRequiredAttributes as g, validateDraft as h, isRecordComplete as i, type ViewConfig as j, type CompletionStatus as k, type ObjectRecord as l, type DetailViewDefinition as m, type DetailViewLayout as n, type SidePanelConfig as o, type Field as p, type FieldGroup as q, type TableTab as r, type CreateMode as s, type Tab as t, type ListViewDefinition as u, validateDraftOrThrow as v, type ViewDefinition as w, type ListViewTab as x, type ActivityTab as y, type AdvancedFilterState as z };
+export { type MigrationError as $, type AttributeGroupField as A, type ActivityTab as B, type ConfigOverrides as C, type DetailViewConfig as D, type AdvancedFilterState as E, type FilterState as F, type Group as G, type BuiltInTransform as H, type CurrencyFilterValue as I, type CustomTab as J, type DocumentsTab as K, type ListViewConfig as L, type MigrationDefinition as M, type ExtendedFilterRule as N, type ObjectDefinition as O, type FilterCombinator as P, type FilterGroup as Q, type RelationGroup as R, type SortRule as S, type Timestamps as T, type FilterRule as U, type ViewType as V, type FormDensity as W, type FormTab as X, type FormsTab as Y, type InverseSource as Z, type ListViewLayout as _, createFormAttributeValidator as a, NO_VALUE_OPERATORS as a0, type NoValueOperator as a1, OPERATORS_BY_TYPE as a2, type ObjectAttribute as a3, type PhoneFilterValue as a4, type QueryState as a5, RESERVED_ATTRIBUTE_NAMES as a6, type RelationSource as a7, type RelativeDateValue as a8, type ReservedAttributeName as a9, type RichtextTab as aa, SYSTEM_FIELD_NAMES as ab, type SchemaOperation as ac, type SchemaTransform as ad, type SortDirection as ae, type SystemFieldName as af, type TabType as ag, type TableSource as ah, type TransformSource as ai, type ViewOperation as aj, type ViewOverlay as ak, type ViewTransform as al, getRollupFilterOperators as am, isDetailView as an, isFieldGroup as ao, isListView as ap, isNoValueOperator as aq, isRelationGroup as ar, validateObject as b, computeRecordStatus as c, validateObjectOrThrow as d, createAttributeValidator as e, validateAttribute as f, getMissingRequiredAttributes as g, validateDraft as h, isRecordComplete as i, type ViewConfig as j, type CompletionStatus as k, type ObjectRecord as l, type DetailViewDefinition as m, type DetailViewLayout as n, type SidePanelConfig as o, type Field as p, type FieldGroup as q, type TableTab as r, type CreateMode as s, type Tab as t, type ListViewDefinition as u, validateDraftOrThrow as v, type ViewDefinition as w, type ListViewTab as x, type FilterOperator as y, type FilterValue as z };

package/dist/{helpers-MWhnBsDK.d.ts → helpers-D-4aV3ki.d.ts}

@@ -740,14 +740,14 @@ interface ObjectRecord extends Timestamps {
      */
     deletedAt?: Date | null;
     /**
-     * User ID who created this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who created this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     createdBy?: string;
     /**
-     * User ID who last updated this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who last updated this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     lastUpdatedBy?: string;
@@ -857,4 +857,4 @@ declare function isRecordComplete(objectDef: ObjectDefinition, data: Record<stri
  */
 declare function computeRecordStatus(objectDef: ObjectDefinition, data: Record<string, unknown>): CompletionStatus;
 
-export { type MigrationError as $, type AttributeGroupField as A, type BuiltInTransform as B, type ConfigOverrides as C, type DetailViewConfig as D, type CurrencyFilterValue as E, type FilterState as F, type Group as G, type CustomTab as H, type DocumentsTab as I, type ExtendedFilterRule as J, type FilterCombinator as K, type ListViewConfig as L, type MigrationDefinition as M, type FilterGroup as N, type ObjectDefinition as O, type FilterOperator as P, type FilterRule as Q, type RelationGroup as R, type SortRule as S, type Timestamps as T, type FilterValue as U, type ViewType as V, type FormDensity as W, type FormTab as X, type FormsTab as Y, type InverseSource as Z, type ListViewLayout as _, createFormAttributeValidator as a, NO_VALUE_OPERATORS as a0, type NoValueOperator as a1, OPERATORS_BY_TYPE as a2, type ObjectAttribute as a3, type PhoneFilterValue as a4, type QueryState as a5, RESERVED_ATTRIBUTE_NAMES as a6, type RelationSource as a7, type RelativeDateValue as a8, type ReservedAttributeName as a9, type RichtextTab as aa, SYSTEM_FIELD_NAMES as ab, type SchemaOperation as ac, type SchemaTransform as ad, type SortDirection as ae, type SystemFieldName as af, type TabType as ag, type TableSource as ah, type TransformSource as ai, type ViewOperation as aj, type ViewOverlay as ak, type ViewTransform as al, getRollupFilterOperators as am, isDetailView as an, isFieldGroup as ao, isListView as ap, isNoValueOperator as aq, isRelationGroup as ar, validateObject as b, computeRecordStatus as c, validateObjectOrThrow as d, createAttributeValidator as e, validateAttribute as f, getMissingRequiredAttributes as g, validateDraft as h, isRecordComplete as i, type ViewConfig as j, type CompletionStatus as k, type ObjectRecord as l, type DetailViewDefinition as m, type DetailViewLayout as n, type SidePanelConfig as o, type Field as p, type FieldGroup as q, type TableTab as r, type CreateMode as s, type Tab as t, type ListViewDefinition as u, validateDraftOrThrow as v, type ViewDefinition as w, type ListViewTab as x, type ActivityTab as y, type AdvancedFilterState as z };
+export { type MigrationError as $, type AttributeGroupField as A, type ActivityTab as B, type ConfigOverrides as C, type DetailViewConfig as D, type AdvancedFilterState as E, type FilterState as F, type Group as G, type BuiltInTransform as H, type CurrencyFilterValue as I, type CustomTab as J, type DocumentsTab as K, type ListViewConfig as L, type MigrationDefinition as M, type ExtendedFilterRule as N, type ObjectDefinition as O, type FilterCombinator as P, type FilterGroup as Q, type RelationGroup as R, type SortRule as S, type Timestamps as T, type FilterRule as U, type ViewType as V, type FormDensity as W, type FormTab as X, type FormsTab as Y, type InverseSource as Z, type ListViewLayout as _, createFormAttributeValidator as a, NO_VALUE_OPERATORS as a0, type NoValueOperator as a1, OPERATORS_BY_TYPE as a2, type ObjectAttribute as a3, type PhoneFilterValue as a4, type QueryState as a5, RESERVED_ATTRIBUTE_NAMES as a6, type RelationSource as a7, type RelativeDateValue as a8, type ReservedAttributeName as a9, type RichtextTab as aa, SYSTEM_FIELD_NAMES as ab, type SchemaOperation as ac, type SchemaTransform as ad, type SortDirection as ae, type SystemFieldName as af, type TabType as ag, type TableSource as ah, type TransformSource as ai, type ViewOperation as aj, type ViewOverlay as ak, type ViewTransform as al, getRollupFilterOperators as am, isDetailView as an, isFieldGroup as ao, isListView as ap, isNoValueOperator as aq, isRelationGroup as ar, validateObject as b, computeRecordStatus as c, validateObjectOrThrow as d, createAttributeValidator as e, validateAttribute as f, getMissingRequiredAttributes as g, validateDraft as h, isRecordComplete as i, type ViewConfig as j, type CompletionStatus as k, type ObjectRecord as l, type DetailViewDefinition as m, type DetailViewLayout as n, type SidePanelConfig as o, type Field as p, type FieldGroup as q, type TableTab as r, type CreateMode as s, type Tab as t, type ListViewDefinition as u, validateDraftOrThrow as v, type ViewDefinition as w, type ListViewTab as x, type FilterOperator as y, type FilterValue as z };

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { S as SortRule, F as FilterState, T as Timestamps, V as ViewType, j as ViewConfig, C as ConfigOverrides, k as CompletionStatus, l as ObjectRecord, M as MigrationDefinition, O as ObjectDefinition, D as DetailViewConfig, m as DetailViewDefinition, n as DetailViewLayout, o as SidePanelConfig, p as Field, A as AttributeGroupField, q as FieldGroup, R as RelationGroup, G as Group, r as TableTab, s as CreateMode, t as Tab, L as ListViewConfig, u as ListViewDefinition, w as ViewDefinition, x as ListViewTab } from './helpers-BiGe0rbb.mjs';
-export { y as ActivityTab, z as AdvancedFilterState, B as BuiltInTransform, E as CurrencyFilterValue, H as CustomTab, I as DocumentsTab, J as ExtendedFilterRule, K as FilterCombinator, N as FilterGroup, P as FilterOperator, Q as FilterRule, U as FilterValue, W as FormDensity, X as FormTab, Y as FormsTab, Z as InverseSource, _ as ListViewLayout, $ as MigrationError, a0 as NO_VALUE_OPERATORS, a1 as NoValueOperator, a2 as OPERATORS_BY_TYPE, a3 as ObjectAttribute, a4 as PhoneFilterValue, a5 as QueryState, a6 as RESERVED_ATTRIBUTE_NAMES, a7 as RelationSource, a8 as RelativeDateValue, a9 as ReservedAttributeName, aa as RichtextTab, ab as SYSTEM_FIELD_NAMES, ac as SchemaOperation, ad as SchemaTransform, ae as SortDirection, af as SystemFieldName, ag as TabType, ah as TableSource, ai as TransformSource, aj as ViewOperation, ak as ViewOverlay, al as ViewTransform, c as computeRecordStatus, a as createFormAttributeValidator, am as getRollupFilterOperators, an as isDetailView, ao as isFieldGroup, ap as isListView, aq as isNoValueOperator, ar as isRelationGroup, v as validateDraftOrThrow, b as validateObject, d as validateObjectOrThrow } from './helpers-BiGe0rbb.mjs';
+import { S as SortRule, F as FilterState, T as Timestamps, V as ViewType, j as ViewConfig, C as ConfigOverrides, k as CompletionStatus, l as ObjectRecord, M as MigrationDefinition, O as ObjectDefinition, D as DetailViewConfig, m as DetailViewDefinition, n as DetailViewLayout, o as SidePanelConfig, p as Field, A as AttributeGroupField, q as FieldGroup, R as RelationGroup, G as Group, r as TableTab, s as CreateMode, t as Tab, L as ListViewConfig, u as ListViewDefinition, w as ViewDefinition, x as ListViewTab, y as FilterOperator, z as FilterValue } from './helpers-CoFQtNfq.mjs';
+export { B as ActivityTab, E as AdvancedFilterState, H as BuiltInTransform, I as CurrencyFilterValue, J as CustomTab, K as DocumentsTab, N as ExtendedFilterRule, P as FilterCombinator, Q as FilterGroup, U as FilterRule, W as FormDensity, X as FormTab, Y as FormsTab, Z as InverseSource, _ as ListViewLayout, $ as MigrationError, a0 as NO_VALUE_OPERATORS, a1 as NoValueOperator, a2 as OPERATORS_BY_TYPE, a3 as ObjectAttribute, a4 as PhoneFilterValue, a5 as QueryState, a6 as RESERVED_ATTRIBUTE_NAMES, a7 as RelationSource, a8 as RelativeDateValue, a9 as ReservedAttributeName, aa as RichtextTab, ab as SYSTEM_FIELD_NAMES, ac as SchemaOperation, ad as SchemaTransform, ae as SortDirection, af as SystemFieldName, ag as TabType, ah as TableSource, ai as TransformSource, aj as ViewOperation, ak as ViewOverlay, al as ViewTransform, c as computeRecordStatus, a as createFormAttributeValidator, am as getRollupFilterOperators, an as isDetailView, ao as isFieldGroup, ap as isListView, aq as isNoValueOperator, ar as isRelationGroup, v as validateDraftOrThrow, b as validateObject, d as validateObjectOrThrow } from './helpers-CoFQtNfq.mjs';
 import { j as AttributeType, A as Attribute, k as LocationGranularity, l as Location, e as FormulaAttribute, f as RollupAttribute, d as StatusAttribute, c as SelectAttribute, b as MultiselectAttribute, m as Phone, n as Currency, D as DateAttribute, U as UserAttribute, o as DocumentAttribute, p as FeatureGate, g as CheckboxAttribute, C as CurrencyAttribute, F as FileAttribute, q as FormulaReturnType, L as LocationAttribute, O as Option, N as NumberAttribute, P as PhoneAttribute, h as RatingAttribute, R as RelationAttribute, i as TextAttribute, T as TextAreaAttribute, B as BilateralConfig, S as SingleRelationAttribute, M as MultiRelationAttribute, r as RelationTarget, a as RichtextAttribute, s as RichtextFeature, t as RollupFunction, u as FlagValueType, v as FeatureFlagDefinition, w as FlagLevel, x as FeatureFlagsRepository, y as StaticFlagDefault, z as ResolvedFlag } from './attributes-DcHM27jS.mjs';
 export { E as AttributeGroup, G as BaseAttribute, H as DateFormat, I as DateValue, J as FeatureFlagsConfig, K as FlagOverride, Q as NumberUnit, V as OptionPropertyAttribute, W as PropertyAttribute, X as PropertySchema, Y as PropertyType, Z as RELATION_TARGET_ANY, _ as StatusGroup, $ as hasOptions, a0 as inferInverseCardinality, a1 as isAttributeSortable, a2 as isBilateralRelation, a3 as isUniversalRelation } from './attributes-DcHM27jS.mjs';
 import { MimeType, IconName, ColorId, CountryIso3, CurrencyCode } from '@stndrds/constants';
@@ -296,7 +296,7 @@ interface CreateObjectRecord {
      */
     metadata?: Record<string, unknown>;
     /**
-     * User ID who created this record.
+     * Actor ID who created this record.
      * Automatically set from context if available.
      */
     createdBy?: string;
@@ -538,23 +538,172 @@ interface BoundingBox {
     height: number;
 }
 
+type ActorType = "user" | "agent" | "api_key" | "system";
+type ActorStatus = "active" | "suspended" | "deleted";
+interface ActorBase {
+    id: Uuid;
+    tenantId: TenantId;
+    displayName: string;
+    avatarUrl?: string | null;
+    metadata: Record<string, unknown>;
+    deletedAt?: Date | null;
+    anonymizedAt?: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+type SubjectActorType = Exclude<ActorType, "system">;
+type ActiveActorStatus = Exclude<ActorStatus, "deleted">;
+type ActiveSubjectActor = {
+    [Type in SubjectActorType]: {
+        [Status in ActiveActorStatus]: {
+            type: Type;
+            status: Status;
+            subjectId: Uuid;
+        };
+    }[ActiveActorStatus];
+}[SubjectActorType];
+type DeletedSubjectActor = {
+    [Type in SubjectActorType]: {
+        type: Type;
+        status: "deleted";
+        subjectId: Uuid | null;
+    };
+}[SubjectActorType];
+type Actor = (ActorBase & ActiveSubjectActor) | (ActorBase & DeletedSubjectActor) | (ActorBase & {
+    type: "system";
+    status: ActorStatus;
+    subjectId?: null;
+});
+interface CreateActorInputBase {
+    displayName: string;
+    avatarUrl?: string | null;
+    metadata?: Record<string, unknown>;
+}
+type CreateSubjectActorInput = {
+    [Type in SubjectActorType]: {
+        type: Type;
+        subjectId: Uuid;
+    };
+}[SubjectActorType];
+type CreateActorInput = (CreateActorInputBase & CreateSubjectActorInput) | (CreateActorInputBase & {
+    type: "system";
+    subjectId?: null;
+});
+interface UpdateActorInput {
+    displayName?: string;
+    avatarUrl?: string | null;
+    status?: ActorStatus;
+    metadata?: Record<string, unknown>;
+    deletedAt?: Date | null;
+    anonymizedAt?: Date | null;
+}
+type AccessAction = "*" | "read" | "create" | "update" | "delete" | "manage" | "run" | "observe" | "share";
+type SpecificAccessAction = Exclude<AccessAction, "*">;
+type AccessActionList = ["*"] | [SpecificAccessAction, ...SpecificAccessAction[]];
+type AccessResourceType = "workspace" | "object" | "record" | "attribute" | "agent" | "session" | "document" | "view" | "file" | "form";
+type AccessPolicyPreset = "inherit" | "private" | "workspace_read" | "workspace_edit" | "workspace_run" | "role_based";
+type PrincipalType = "actor" | "role" | "workspace";
+type ActorPrincipalRef = {
+    principalType: "actor";
+    principalId: Uuid;
+};
+type RolePrincipalRef = {
+    principalType: "role";
+    principalId: Uuid;
+};
+type WorkspacePrincipalRef = {
+    principalType: "workspace";
+    principalId?: null;
+};
+interface ActorRoleAssignment {
+    id: Uuid;
+    tenantId: TenantId;
+    actorId: Uuid;
+    roleId: Uuid;
+    assignedBy?: Uuid | null;
+    createdAt: Date;
+}
+interface AssignActorRoleInput {
+    actorId: Uuid;
+    roleId: Uuid;
+    assignedBy?: Uuid | null;
+}
+interface ResourceRef {
+    type: AccessResourceType;
+    id: Uuid;
+    tenantId: TenantId;
+    objectId?: Uuid;
+    objectName?: string;
+    parentId?: Uuid;
+    agentId?: Uuid;
+    metadata?: Record<string, unknown>;
+}
+interface ResourceAccessBase {
+    id: Uuid;
+    tenantId: TenantId;
+    resourceType: AccessResourceType;
+    resourceId: Uuid;
+    actions: AccessActionList;
+    createdBy?: Uuid | null;
+    createdAt: Date;
+}
+type ResourceAccess = (ResourceAccessBase & ActorPrincipalRef) | (ResourceAccessBase & RolePrincipalRef) | (ResourceAccessBase & WorkspacePrincipalRef);
+interface GrantResourceAccessInputBase {
+    resourceType: AccessResourceType;
+    resourceId: Uuid;
+    actions: AccessActionList;
+    createdBy?: Uuid | null;
+}
+type GrantResourceAccessInput = (GrantResourceAccessInputBase & ActorPrincipalRef) | (GrantResourceAccessInputBase & RolePrincipalRef) | (GrantResourceAccessInputBase & WorkspacePrincipalRef);
+interface AccessPolicy {
+    id: Uuid;
+    tenantId: TenantId;
+    resourceType: AccessResourceType;
+    resourceId: Uuid;
+    preset: AccessPolicyPreset;
+    createdBy?: Uuid | null;
+    updatedBy?: Uuid | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface UpsertAccessPolicyInput {
+    resourceType: AccessResourceType;
+    resourceId: Uuid;
+    preset: AccessPolicyPreset;
+    actorId?: Uuid | null;
+}
+interface AgentExecutionPolicy {
+    id: Uuid;
+    tenantId: TenantId;
+    agentActorId: Uuid;
+    allowedTools: string[];
+    allowedObjectIds: Uuid[];
+    maxDepth: number;
+    maxBudgetCents?: number | null;
+    triggerConstraints: Record<string, unknown>;
+    createdBy?: Uuid | null;
+    updatedBy?: Uuid | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
 /**
  * Scope of a permission rule.
  * - `object`: Controls access to an entire object type (business data)
- * - `system`: Controls access to platform resources (people, workspace)
+ * - `system`: Controls access to platform resources (people, workspace, API keys, etc.)
  */
 type PermissionScope = "object" | "system";
 /**
  * Actions that can be performed on a resource.
  */
-type Action = "read" | "create" | "update" | "delete";
+type Action = "read" | "create" | "update" | "delete" | "manage";
 /**
  * System resources that can be managed.
  * - `people`: User profiles, invitations, roles and permissions
- * - `workspace`: Object definitions, attributes, tenant settings, audit logs
+ * - `workspace`: Tenant settings and workspace-level configuration
  * - `architect`: Architect settings, templates, and configurations
  */
-type SystemResource = "people" | "workspace" | "architect";
+type SystemResource = "people" | "workspace" | "architect" | "feature-flags" | "files" | "views" | "forms" | "documents" | "audit" | "api-keys";
 /**
  * Preset access levels for simplified permission configuration.
  * - `full`: All CRUD actions
@@ -685,7 +834,7 @@ interface UserRoleAssignment {
      */
     assignedAt: Date;
     /**
-     * User profile ID of who assigned this role (for audit trail).
+     * Actor ID of who assigned this role (for audit trail).
      */
     assignedBy?: Uuid;
 }
@@ -718,6 +867,7 @@ interface ObjectPermissions {
     canCreate: boolean;
     canUpdate: boolean;
     canDelete: boolean;
+    canManage: boolean;
 }
 /**
  * Permissions for a specific system resource.
@@ -728,6 +878,7 @@ interface SystemPermissions {
     canCreate: boolean;
     canUpdate: boolean;
     canDelete: boolean;
+    canManage: boolean;
 }
 /**
  * Input for creating a new role.
@@ -770,8 +921,8 @@ interface AssignRoleInput {
 }
 
 /**
- * A permission attached to an API key.
- * Same format as RBAC permissions — reuses PermissionScope, Action, and target.
+ * Legacy permission payload stored with an API key.
+ * Runtime authorization uses the API key actor's effective permissions.
  */
 interface ApiKeyPermission {
     scope: PermissionScope;
@@ -784,6 +935,7 @@ interface ApiKey {
     userProfileId: string | null;
     name: string;
     prefix: string;
+    /** Legacy metadata; not the runtime authorization source of truth. */
     permissions: ApiKeyPermission[];
     expiresAt: string | null;
     lastUsedAt: string | null;
@@ -797,20 +949,26 @@ interface ApiKeyWithSecret extends ApiKey {
 }
 /**
  * Returned by validateKey — provides everything downstream needs.
- * Permissions are already intersected with user RBAC for personal keys.
+ * Permissions come from actor-native effective permissions.
  */
 interface ApiKeyAuthContext {
     tenantId: string;
     userId: string | null;
     keyId: string;
+    actorId: string;
+    actorType: ActorType;
+    credentialActorId?: string;
+    credentialActorType?: "api_key";
     permissions: ApiKeyPermission[];
     createdBy: string;
 }
 interface CreateApiKeyInput {
     name: string;
+    /** Legacy metadata; assign actor roles to grant runtime access. */
     permissions: ApiKeyPermission[];
     expiresAt?: string;
     userProfileId?: string;
+    actorMetadata?: Record<string, unknown>;
 }
 
 /**
@@ -898,7 +1056,7 @@ type AuditAction = "record.created" | "record.updated" | "record.deleted" | "rec
 /**
  * Actor type - who performed the action
  */
-type AuditActorType = "user" | "system";
+type AuditActorType = ActorType;
 /**
  * Detail of a change on a field
  */
@@ -916,7 +1074,7 @@ interface AuditChange {
 interface AuditLogEntry {
     id: Uuid;
     tenantId: Uuid;
-    /** User profile ID of the actor (null for system actions) */
+    /** actors.id of the actor (null for system actions) */
     actorId?: string;
     /** Denormalized email for search (in case user is deleted) */
     actorEmail?: string;
@@ -941,6 +1099,7 @@ interface AuditLogEntry {
  * Tenant ID is automatically set from execution context.
  */
 interface CreateAuditLogInput {
+    /** actors.id of the actor (null for system actions) */
     actorId?: string;
     /** Denormalized actor email for display purposes. */
     actorEmail?: string;
@@ -1003,7 +1162,7 @@ type AgentRunStatus = "pending" | "running" | "completed" | "failed" | "cancelle
 type AgentSessionStatus = "active" | "idle" | "completed" | "failed" | "cancelled" | "waiting_human" | "timeout" | "expired";
 type AgentSessionMode = "interactive" | "autonomous";
 type QuestionStatus = "pending" | "answered" | "timeout" | "cancelled";
-type TriggerEventType = "record.created" | "record.updated" | "record.deleted" | "record.field_changed" | "form.submitted" | "agent.completed" | "webhook" | "schedule";
+type TriggerEventType = "record.created" | "record.updated" | "record.deleted" | "form.submitted" | "agent.completed" | "webhook" | "schedule";
 type AgentTriggerType = Extract<TriggerEventType, "record.created" | "record.updated" | "record.deleted">;
 type ProviderName = "anthropic" | "openai" | "google" | "mistral";
 interface ModelDefinition {
@@ -1053,15 +1212,17 @@ interface AgentTriggerDefinition {
     name?: string;
     eventType: TriggerEventType;
     objectId?: string;
-    fieldPath?: string;
+    watchedFields?: string[];
     formDefinitionId?: string;
     sourceAgentId?: string;
     webhookPath?: string;
     cronExpression?: string;
     timezone?: string;
-    filter?: Record<string, unknown>;
+    filter?: FilterState;
     inputBuilder?: string;
+    debounceMs?: number;
     enabled: boolean;
+    lastFiredAt?: Date;
     createdAt: Date;
     updatedAt: Date;
 }
@@ -2349,14 +2510,14 @@ interface RecordMetadata {
     /** Last update timestamp */
     updatedAt: Date;
     /**
-     * User ID who created this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who created this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     createdBy?: string;
     /**
-     * User ID who last updated this record.
-     * Automatically set by RecordService when userId is configured.
+     * Actor ID who last updated this record.
+     * Automatically set by RecordService when actorId is configured.
      * Optional for backward compatibility with existing records.
      */
     lastUpdatedBy?: string;
@@ -2458,9 +2619,9 @@ type ExtractRecordUpdateStrict<TBuilder> = TBuilder extends {
  */
 interface PolicyContext {
     /**
-     * Current user ID (required for access control)
+     * Current actor ID used for ownership and record-level checks.
      */
-    userId: string;
+    actorId: string;
     /**
      * Tenant ID
      */
@@ -2476,7 +2637,7 @@ interface PolicyContext {
  * Policies are applied automatically by RecordService when configured.
  * They provide:
  * - List/search filtering (inject visibility rules)
- * - Record access control (check if user can read a specific record)
+ * - Record access control (check if actor can read a specific record)
  * - Modification control (check if user can update/delete)
  *
  * @example
@@ -2485,23 +2646,23 @@ interface PolicyContext {
  *   objectName: "notes",
  *
  *   applyListFilter(ctx, options) {
- *     // Filter: visibility = 'shared' OR createdBy = userId
- *     return injectVisibilityFilter(options, ctx.userId);
+ *     // Filter: visibility = 'shared' OR createdBy = actorId
+ *     return injectVisibilityFilter(options, ctx.actorId);
  *   },
  *
  *   canAccessRecord(ctx, record) {
- *     return record.values.visibility === "shared" || record.createdBy === ctx.userId;
+ *     return record.values.visibility === "shared" || record.createdBy === ctx.actorId;
  *   },
  *
  *   canModifyRecord(ctx, record) {
  *     if (record.values.visibility === "private") {
- *       return record.createdBy === ctx.userId;
+ *       return record.createdBy === ctx.actorId;
  *     }
  *     return true;
  *   },
  *
  *   canDeleteRecord(ctx, record) {
- *     return record.createdBy === ctx.userId;
+ *     return record.createdBy === ctx.actorId;
  *   }
  * };
  * ```
@@ -2515,7 +2676,7 @@ interface RecordPolicy {
      * Modify list/search options before query execution.
      * Use this to inject visibility filters.
      *
-     * @param ctx - Policy context with userId and tenantId
+     * @param ctx - Policy context with actorId and tenantId
      * @param options - Original list options
      * @returns Modified list options with injected filters
      */
@@ -2524,7 +2685,7 @@ interface RecordPolicy {
      * Check if user can access a specific record.
      * Called after fetching a record in getRecord().
      *
-     * @param ctx - Policy context with userId
+     * @param ctx - Policy context with actorId
      * @param record - The fetched record
      * @returns true if user can access, false otherwise
      */
@@ -2533,7 +2694,7 @@ interface RecordPolicy {
      * Check if user can modify a record.
      * Called before updateRecord().
      *
-     * @param ctx - Policy context with userId
+     * @param ctx - Policy context with actorId
      * @param record - The existing record
      * @returns true if user can modify, false otherwise
      */
@@ -2542,7 +2703,7 @@ interface RecordPolicy {
      * Check if user can delete a record.
      * Called before deleteRecord().
      *
-     * @param ctx - Policy context with userId
+     * @param ctx - Policy context with actorId
      * @param record - The record to delete
      * @returns true if user can delete, false otherwise
      */
@@ -2645,6 +2806,47 @@ interface CreateSandboxExecution {
     expiresAt?: Date;
 }
 
+/**
+ * A custom navigation item rendered in the sidebar, alongside the
+ * developer-defined objects.
+ *
+ * Items are declared via `sidebarExtraRegistry.register(...)` and consumed
+ * by `useSidebarExtras()` in `@stndrds/react`.
+ */
+interface SidebarExtraItem {
+    /** Stable identifier — used as React key and for deduplication. */
+    id: string;
+    /** Display label. */
+    label: string;
+    /**
+     * Internal route (e.g. `/dashboard`) or absolute URL (e.g. `https://...`).
+     * Absolute URLs are auto-detected and rendered as external links.
+     */
+    href: string;
+    /** Icon name from `@stndrds/constants`. */
+    icon?: IconName;
+    /**
+     * Display order. Lower values appear first. Items without an order
+     * fall back to alphabetical (by `label`).
+     */
+    order?: number;
+    /**
+     * Forces external rendering (`target="_blank"`). When omitted, an
+     * absolute `http(s)://` href is treated as external automatically.
+     */
+    external?: boolean;
+    /**
+     * Optional override for the active-state computation. When provided,
+     * its return value is used directly. Otherwise:
+     *   - external items are never active,
+     *   - internal items are active when
+     *     `pathname === href || pathname.startsWith(href + "/")`.
+     *
+     * Must be pure and total — exceptions are not handled.
+     */
+    isActive?: (pathname: string) => boolean;
+}
+
 /**
  * System attribute union type
  */
@@ -3004,6 +3206,20 @@ declare const SYSTEM_RESOURCES: {
     readonly WORKSPACE: "workspace";
     /** Object definitions, attributes, views, workflow definitions */
     readonly ARCHITECT: "architect";
+    /** Runtime feature toggles */
+    readonly FEATURE_FLAGS: "feature-flags";
+    /** Uploaded files and file storage */
+    readonly FILES: "files";
+    /** Saved object views */
+    readonly VIEWS: "views";
+    /** Forms and form submissions */
+    readonly FORMS: "forms";
+    /** Documents and document slots */
+    readonly DOCUMENTS: "documents";
+    /** Audit log access */
+    readonly AUDIT: "audit";
+    /** Programmatic access keys */
+    readonly API_KEYS: "api-keys";
 };
 /**
  * All system resources as an array (for iteration)
@@ -4288,9 +4504,16 @@ declare class ObjectBuilder<TRecord extends Record<string, unknown> = {}> implem
         build: () => Attribute;
     }>): this;
     /**
-     * Set metadata
+     * Set metadata. Merges with any previously set metadata (preserves keys
+     * written by other builder methods like `.order()`).
      */
     metadata(value: Record<string, unknown>): this;
+    /**
+     * Set the display order used by the sidebar (and any other UI that
+     * surfaces objects). Lower values appear first; objects without an
+     * order fall back to alphabetical order at the consumer level.
+     */
+    order(value: number): this;
     /**
      * Set the label expression template for displaying records
      * This is REQUIRED for every object.
@@ -6115,6 +6338,8 @@ interface EventDataMap {
         objectId: string;
         objectName: string;
         recordId: string;
+        /** Snapshot of record values at the moment of deletion */
+        values: Record<string, unknown>;
     };
     "record.restored": {
         objectId: string;
@@ -6142,6 +6367,8 @@ interface DomainEvent<T extends EventType = EventType> {
     userId: string | null;
     timestamp: string;
     data: EventDataMap[T];
+    /** Free-form metadata propagated from write-path callers (e.g. provenance for loop guards). */
+    metadata?: Record<string, unknown>;
 }
 
 interface FormulaResult {
@@ -6189,4 +6416,18 @@ declare function getPathDepth(segments: PathSegment[]): number;
 declare function getTargetAttributeName(path: string): string;
 declare function getRelationPath(path: string): string | null;
 
-export { type AIAvailableModel, type AIBatchQuestion, type AIBatchQuestionAnswer, type AIBatchQuestionOption, type AIChatMessage, type AIChatMessagePart, type AIChatMessagePartType, type AICompactionSummary, type AIMemoryEntry, type AIMemoryType, type AIMessageRole, type AIProviderMetrics, type AIQuestion, type AIQuestionAnswer, type AIQuestionOption, type AIQuestionType, type AITodoItem, type AITodoList, type AITodoStatus, type AIToolCall, type AIToolCallStatus, type AIUsageMetrics, ALL_ACTIONS, ALL_SYSTEM_RESOURCES, AccessDeniedError, type AccessLevel, type Action, ActivityTabConfig, type AddAttributeInput, type AgentConfig, type AgentContextEntry, type AgentDashboard, type AgentDefinition, type AgentEvent, type AgentExecutionConfig, type AgentMessageAttachment, type AgentMessagePart, type AgentQuestion, type AgentRun, type AgentRunStatus, type AgentSchedule, type AgentSession, type AgentSessionMessage, type AgentSessionMode, type AgentSessionStatus, type AgentToolCall, type AgentTriggerDefinition, type AgentTriggerType, type ApiKey, type ApiKeyAuthContext, type ApiKeyPermission, type ApiKeyWithSecret, type AssignRoleInput, Attribute, AttributeGroupField, AttributeInUseError, AttributeNotFoundError, AttributeType, type AttributeUsage, type AuditAction, type AuditActorType, type AuditChange, type AuditListOptions, type AuditLogEntry, type AuditResourceType, type AuditServiceOptions, type AuditSortField, BEHAVIOR_PROPERTIES, BilateralConfig, type BoundingBox, type BuilderConfig, CheckboxAttribute, type CompactionLevel, CompletionStatus, ConcurrentModificationError, ConfigOverrides, type CreateApiKeyInput, type CreateAuditLogInput, type CreateCustomObjectInput, type CreateDBAttribute, type CreateDBForm, type CreateDBFormSubmission, type CreateDBObject, type CreateDBView, type CreateDBViewOverlay, type CreateDocument, type CreateDocumentSlot, type CreateFile, CreateMode, type CreateObjectRecord, type CreatePermissionInput, type CreateProcessingJob, type CreateRoleInput, type CreateSandboxExecution, type CreateUserProfile, type CreateViewInput, type CriticConfig, Currency, CurrencyAttribute, type CustomAttributeValue, CustomTabConfig, type DBAttribute, type DBForm, type DBFormSubmission, type DBObject, type DBView, type DBViewOverlay, DB_COLUMN_FIELDS, DEFAULT_ROLES, DEFAULT_ROLE_DESCRIPTIONS, DEFAULT_ROLE_LABELS, DEFAULT_ROLE_PERMISSIONS, DateAttribute, type DefaultRoleName, DetailViewBuilder, DetailViewConfig, DetailViewDefinition, DetailViewLayout, type Document, DocumentAttribute, type DocumentListOptions, type DocumentSlot, DocumentsTabConfig, type DomainEvent, DuplicateError, EMPTY_VALUE_PLACEHOLDER, type EffectivePermissions, type EventDataMap, type EventType, type ExtractRecord, type ExtractRecordInput, type ExtractRecordInputStrict, type ExtractRecordStrict, type ExtractRecordUpdate, type ExtractRecordUpdateStrict, FORM_FORBIDDEN_ATTRIBUTE_TYPES, FeatureFlagDefinition, FeatureFlagsRepository, FeatureGate, Field, FieldGroup, type File, FileAttribute, type FileListOptions, type FileVisibility, FilterState, FlagLevel, FlagRegistry, FlagService, FlagValueType, ForbiddenError, FormBuilder, type FormDefinition, type FormFieldRef, type FormFieldsRow, type FormFreeFieldRef, type FormHeadingRow, FormRegistry, type FormRow, FormRowBuilder, type FormSeparatorRow, type FormSlot, type FormSlotFieldRef, type FormStatus, type FormStep, FormStepBuilder, type FormSubmission, type FormSubmissionStatus, type FormSubmittedAgentEvent, type FormTextRow, FormulaAttribute, type FormulaResult, FormulaReturnType, type GeocodingAdapter, type GeocodingAutocompleteParams, type GeocodingParams, type GeocodingSuggestion, type GlobalSearchGroupedOptions, type GlobalSearchGroupedResult, type GlobalSearchOptions, type GlobalSearchResultItem, Group, GroupBuilder, IDENTITY_PROPERTIES, type InferAttributeValue, InvalidPathError, type InviteUserInput, type ListOptions, ListViewBuilder, ListViewConfig, ListViewDefinition, ListViewTab, ListViewTabConfigBuilder, Location, LocationAttribute, LocationGranularity, MaxDepthExceededError, MemoryNotFoundError, type MentionEntityType, type MentionReference, type MentionedContext, type MentionedEntityContext, MigrationDefinition, type ModelDefinition, MultiRelationAttribute, MultiselectAttribute, NoopGeocodingAdapter, NotFoundError, NotImplementedError, NumberAttribute, ObjectBuilder, ObjectDefinition, ObjectNotFoundError, type ObjectPermissions, ObjectRecord, ObjectReferencedError, type OcrAdapter, type OcrInput, type OcrOptions, type OcrPage, type OcrResult, type OcrTextBlock, Option, PRESENTATION_PROPERTIES, type PathCardinality, type PathSegment, type PathSegmentType, type Permission, type PermissionScope, Phone, PhoneAttribute, type PolicyContext, PolicyViolationError, type ProcessingJob, type ProcessingJobStatus, type ProcessingJobType, type ProcessingStatus, ProtectedResourceError, ProtectedRoleError, type ProviderName, type QuestionResponse, type QuestionStatus, RatingAttribute, type ReasoningPartData, type RecordAgentEvent, type RecordMetadata, RecordNotFoundError, type RecordPolicy, type RecordReference, RecordReferencedError, RelationAttribute, RelationGroup, RelationGroupBuilder, type RelationOption, type RelationOptionsResponse, RelationTarget, RepositoryError, type RepositoryOperation, ResolvedFlag, type RetryPolicy, type ReverseGeocodingParams, RichtextAttribute, RichtextFeature, RichtextTabConfig, type Role, RoleNotFoundError, RollupAttribute, RollupFunction, STANDARD_SCHEMA_VENDOR, SYSTEM_ATTRIBUTES, SYSTEM_RESOURCES, SYSTEM_RESOURCE_LABELS, type SandboxExecution, type SandboxExecutionInput, type SandboxExecutionResult, type SandboxExecutionStatus, type SandboxMode, type SandboxTrigger, SchemaError, SchemaErrorCode, type SchemaResolver, type SearchOptions, SelectAttribute, SidePanelConfig, SingleRelationAttribute, type SlotMode, type SlotStatus, SortRule, type StandardSchemaIssue, type StandardSchemaResult, StaticFlagDefault, StatusAttribute, StorageError, type StorageOperation, type StorageProvider, type StreamEventCompaction, type StreamEventMessagePersisted, SyncError, type SystemAttribute, type SystemFields, type SystemPermissions, type SystemResource, Tab, TabBuilder, TableTab, TableTabConfig, TenantId, TextAreaAttribute, TextAttribute, type TextPartData, type ThinkingPartData, type TimeoutPolicy, Timestamps, type ToolPartData, type ToolPartState, type TriggerEventType, USER_STATUSES, type UpdateDBAttribute, type UpdateDBForm, type UpdateDBFormSubmission, type UpdateDBObject, type UpdateDBView, type UpdateDBViewOverlay, type UpdateDocument, type UpdateDocumentSlot, type UpdateFile, type UpdateObjectInput, type UpdateProcessingJob, type UpdateRoleInput, type UpdateUserProfile, type UpdateViewInput, type UpsertDBAttribute, type UpsertDBObject, type UpsertDBView, UserAttribute, type UserProfile, type UserRoleAssignment, type UserStatus, Uuid, ValidationError, type ValidationErrorDetail, ViewConfig, ViewDefinition, ViewType, type WithCustomAttributes$1 as WithCustomAttributes, accessLevelToActions, actionsToAccessLevel, applyPipes, booleanFlag, checkbox, createFlagRegistry, createFlagService, createStandardSchemaProps, currency, date, detailView, document, evaluateFormula, evaluateFormulaAttribute, evaluateFormulaWithResult, extractAttributeNames, extractFormulaVariables, extractRelationNames, extractRelationReferences, file, flagRegistry, flattenRelationsForEval, form, formRegistry, formatAttributeValue, formatFormulaResult, formula, generateDefaultDetailView, generateDefaultListView, getActiveTab, getErrorMessage, getPathDepth, getRelationPath, getSystemAttributeList, getTargetAttributeName, group, hasRelationReferences, isAttributeInUseError, isDefaultRole, isEmptyObject, isFormDefinition, isFormFieldsRow, isFormFreeFieldRef, isFormHeadingRow, isFormSeparatorRow, isFormSlotFieldRef, isFormTextRow, isLabelExpression, isNotEmpty, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isStandardSchema, isValidationError, jsonFlag, listView, location, multiselect, number, numberFlag, object, parsePath, pathHasManyCardinality, phone, rating, registry, relation, relationGroup, renderLabelExpression, resetViewToDefault, richtext, rollup, select, status, stringFlag, text, textarea, toUndefinedIfEmpty, user, validateAttributeName, validateFormulaExpression, validatePath, viewRegistry };
+interface OperatorSpec {
+    /** Attribute types this operator applies to. Used by both UI and evaluators. */
+    appliesTo: readonly AttributeType[];
+    /** In-memory evaluation. `value` is the record's value for `attr`. */
+    evaluateInMemory: (value: unknown, ruleValue: FilterValue, attr: Attribute) => boolean;
+}
+declare const OPERATOR_SPECS: Record<FilterOperator, OperatorSpec>;
+
+/**
+ * Evaluate a `FilterState` against a flat record of values, in memory.
+ * Returns false on unknown attribute or operator/type mismatch (safe-fail).
+ */
+declare function evaluateFilterState(state: FilterState, values: Record<string, unknown>, attributes: Attribute[]): boolean;
+
+export { type AIAvailableModel, type AIBatchQuestion, type AIBatchQuestionAnswer, type AIBatchQuestionOption, type AIChatMessage, type AIChatMessagePart, type AIChatMessagePartType, type AICompactionSummary, type AIMemoryEntry, type AIMemoryType, type AIMessageRole, type AIProviderMetrics, type AIQuestion, type AIQuestionAnswer, type AIQuestionOption, type AIQuestionType, type AITodoItem, type AITodoList, type AITodoStatus, type AIToolCall, type AIToolCallStatus, type AIUsageMetrics, ALL_ACTIONS, ALL_SYSTEM_RESOURCES, type AccessAction, type AccessActionList, AccessDeniedError, type AccessLevel, type AccessPolicy, type AccessPolicyPreset, type AccessResourceType, type Action, ActivityTabConfig, type Actor, type ActorRoleAssignment, type ActorStatus, type ActorType, type AddAttributeInput, type AgentConfig, type AgentContextEntry, type AgentDashboard, type AgentDefinition, type AgentEvent, type AgentExecutionConfig, type AgentExecutionPolicy, type AgentMessageAttachment, type AgentMessagePart, type AgentQuestion, type AgentRun, type AgentRunStatus, type AgentSchedule, type AgentSession, type AgentSessionMessage, type AgentSessionMode, type AgentSessionStatus, type AgentToolCall, type AgentTriggerDefinition, type AgentTriggerType, type ApiKey, type ApiKeyAuthContext, type ApiKeyPermission, type ApiKeyWithSecret, type AssignActorRoleInput, type AssignRoleInput, Attribute, AttributeGroupField, AttributeInUseError, AttributeNotFoundError, AttributeType, type AttributeUsage, type AuditAction, type AuditActorType, type AuditChange, type AuditListOptions, type AuditLogEntry, type AuditResourceType, type AuditServiceOptions, type AuditSortField, BEHAVIOR_PROPERTIES, BilateralConfig, type BoundingBox, type BuilderConfig, CheckboxAttribute, type CompactionLevel, CompletionStatus, ConcurrentModificationError, ConfigOverrides, type CreateActorInput, type CreateApiKeyInput, type CreateAuditLogInput, type CreateCustomObjectInput, type CreateDBAttribute, type CreateDBForm, type CreateDBFormSubmission, type CreateDBObject, type CreateDBView, type CreateDBViewOverlay, type CreateDocument, type CreateDocumentSlot, type CreateFile, CreateMode, type CreateObjectRecord, type CreatePermissionInput, type CreateProcessingJob, type CreateRoleInput, type CreateSandboxExecution, type CreateUserProfile, type CreateViewInput, type CriticConfig, Currency, CurrencyAttribute, type CustomAttributeValue, CustomTabConfig, type DBAttribute, type DBForm, type DBFormSubmission, type DBObject, type DBView, type DBViewOverlay, DB_COLUMN_FIELDS, DEFAULT_ROLES, DEFAULT_ROLE_DESCRIPTIONS, DEFAULT_ROLE_LABELS, DEFAULT_ROLE_PERMISSIONS, DateAttribute, type DefaultRoleName, DetailViewBuilder, DetailViewConfig, DetailViewDefinition, DetailViewLayout, type Document, DocumentAttribute, type DocumentListOptions, type DocumentSlot, DocumentsTabConfig, type DomainEvent, DuplicateError, EMPTY_VALUE_PLACEHOLDER, type EffectivePermissions, type EventDataMap, type EventType, type ExtractRecord, type ExtractRecordInput, type ExtractRecordInputStrict, type ExtractRecordStrict, type ExtractRecordUpdate, type ExtractRecordUpdateStrict, FORM_FORBIDDEN_ATTRIBUTE_TYPES, FeatureFlagDefinition, FeatureFlagsRepository, FeatureGate, Field, FieldGroup, type File, FileAttribute, type FileListOptions, type FileVisibility, FilterOperator, FilterState, FilterValue, FlagLevel, FlagRegistry, FlagService, FlagValueType, ForbiddenError, FormBuilder, type FormDefinition, type FormFieldRef, type FormFieldsRow, type FormFreeFieldRef, type FormHeadingRow, FormRegistry, type FormRow, FormRowBuilder, type FormSeparatorRow, type FormSlot, type FormSlotFieldRef, type FormStatus, type FormStep, FormStepBuilder, type FormSubmission, type FormSubmissionStatus, type FormSubmittedAgentEvent, type FormTextRow, FormulaAttribute, type FormulaResult, FormulaReturnType, type GeocodingAdapter, type GeocodingAutocompleteParams, type GeocodingParams, type GeocodingSuggestion, type GlobalSearchGroupedOptions, type GlobalSearchGroupedResult, type GlobalSearchOptions, type GlobalSearchResultItem, type GrantResourceAccessInput, Group, GroupBuilder, IDENTITY_PROPERTIES, type InferAttributeValue, InvalidPathError, type InviteUserInput, type ListOptions, ListViewBuilder, ListViewConfig, ListViewDefinition, ListViewTab, ListViewTabConfigBuilder, Location, LocationAttribute, LocationGranularity, MaxDepthExceededError, MemoryNotFoundError, type MentionEntityType, type MentionReference, type MentionedContext, type MentionedEntityContext, MigrationDefinition, type ModelDefinition, MultiRelationAttribute, MultiselectAttribute, NoopGeocodingAdapter, NotFoundError, NotImplementedError, NumberAttribute, OPERATOR_SPECS, ObjectBuilder, ObjectDefinition, ObjectNotFoundError, type ObjectPermissions, ObjectRecord, ObjectReferencedError, type OcrAdapter, type OcrInput, type OcrOptions, type OcrPage, type OcrResult, type OcrTextBlock, type OperatorSpec, Option, PRESENTATION_PROPERTIES, type PathCardinality, type PathSegment, type PathSegmentType, type Permission, type PermissionScope, Phone, PhoneAttribute, type PolicyContext, PolicyViolationError, type PrincipalType, type ProcessingJob, type ProcessingJobStatus, type ProcessingJobType, type ProcessingStatus, ProtectedResourceError, ProtectedRoleError, type ProviderName, type QuestionResponse, type QuestionStatus, RatingAttribute, type ReasoningPartData, type RecordAgentEvent, type RecordMetadata, RecordNotFoundError, type RecordPolicy, type RecordReference, RecordReferencedError, RelationAttribute, RelationGroup, RelationGroupBuilder, type RelationOption, type RelationOptionsResponse, RelationTarget, RepositoryError, type RepositoryOperation, ResolvedFlag, type ResourceAccess, type ResourceRef, type RetryPolicy, type ReverseGeocodingParams, RichtextAttribute, RichtextFeature, RichtextTabConfig, type Role, RoleNotFoundError, RollupAttribute, RollupFunction, STANDARD_SCHEMA_VENDOR, SYSTEM_ATTRIBUTES, SYSTEM_RESOURCES, SYSTEM_RESOURCE_LABELS, type SandboxExecution, type SandboxExecutionInput, type SandboxExecutionResult, type SandboxExecutionStatus, type SandboxMode, type SandboxTrigger, SchemaError, SchemaErrorCode, type SchemaResolver, type SearchOptions, SelectAttribute, SidePanelConfig, type SidebarExtraItem, SingleRelationAttribute, type SlotMode, type SlotStatus, SortRule, type SpecificAccessAction, type StandardSchemaIssue, type StandardSchemaResult, StaticFlagDefault, StatusAttribute, StorageError, type StorageOperation, type StorageProvider, type StreamEventCompaction, type StreamEventMessagePersisted, SyncError, type SystemAttribute, type SystemFields, type SystemPermissions, type SystemResource, Tab, TabBuilder, TableTab, TableTabConfig, TenantId, TextAreaAttribute, TextAttribute, type TextPartData, type ThinkingPartData, type TimeoutPolicy, Timestamps, type ToolPartData, type ToolPartState, type TriggerEventType, USER_STATUSES, type UpdateActorInput, type UpdateDBAttribute, type UpdateDBForm, type UpdateDBFormSubmission, type UpdateDBObject, type UpdateDBView, type UpdateDBViewOverlay, type UpdateDocument, type UpdateDocumentSlot, type UpdateFile, type UpdateObjectInput, type UpdateProcessingJob, type UpdateRoleInput, type UpdateUserProfile, type UpdateViewInput, type UpsertAccessPolicyInput, type UpsertDBAttribute, type UpsertDBObject, type UpsertDBView, UserAttribute, type UserProfile, type UserRoleAssignment, type UserStatus, Uuid, ValidationError, type ValidationErrorDetail, ViewConfig, ViewDefinition, ViewType, type WithCustomAttributes$1 as WithCustomAttributes, accessLevelToActions, actionsToAccessLevel, applyPipes, booleanFlag, checkbox, createFlagRegistry, createFlagService, createStandardSchemaProps, currency, date, detailView, document, evaluateFilterState, evaluateFormula, evaluateFormulaAttribute, evaluateFormulaWithResult, extractAttributeNames, extractFormulaVariables, extractRelationNames, extractRelationReferences, file, flagRegistry, flattenRelationsForEval, form, formRegistry, formatAttributeValue, formatFormulaResult, formula, generateDefaultDetailView, generateDefaultListView, getActiveTab, getErrorMessage, getPathDepth, getRelationPath, getSystemAttributeList, getTargetAttributeName, group, hasRelationReferences, isAttributeInUseError, isDefaultRole, isEmptyObject, isFormDefinition, isFormFieldsRow, isFormFreeFieldRef, isFormHeadingRow, isFormSeparatorRow, isFormSlotFieldRef, isFormTextRow, isLabelExpression, isNotEmpty, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isStandardSchema, isValidationError, jsonFlag, listView, location, multiselect, number, numberFlag, object, parsePath, pathHasManyCardinality, phone, rating, registry, relation, relationGroup, renderLabelExpression, resetViewToDefault, richtext, rollup, select, status, stringFlag, text, textarea, toUndefinedIfEmpty, user, validateAttributeName, validateFormulaExpression, validatePath, viewRegistry };