@stndrds/schema 1.0.0-alpha.264 → 1.0.0-alpha.266

package/dist/index.mjs

@@ -1,26 +1,29 @@
 import { generateId } from './chunk-QY6QFRRV.mjs';
 export { asTenantId, asUserId, deepEqual, generateId, indexBy } from './chunk-QY6QFRRV.mjs';
-import './chunk-SP3PNHYF.mjs';
-import { parseComputedFormula } from './chunk-UXCJ3NI4.mjs';
-export { ComputedFormulaParseError, parseAttributeConfig, parseComputedFormula } from './chunk-UXCJ3NI4.mjs';
-import { createObjectValidator, SchemaError, SchemaErrorCode, createAttributeValidator, ValidationError, NotFoundError, DuplicateError } from './chunk-54WDPQ6R.mjs';
-export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, RecordReferencedError, RepositoryError, RoleNotFoundError, SchemaError, SchemaErrorCode, SearchBackendError, StorageError, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, createFormAttributeValidator, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError, rejectUnknownAttributesOrThrow, validateDraft, validateDraftOrThrow, validateObject, validateObjectOrThrow } from './chunk-54WDPQ6R.mjs';
-import './chunk-Q44QKLN4.mjs';
-import './chunk-UANQJ2GH.mjs';
-import './chunk-U36ZIBEM.mjs';
+import { SYSTEM_FILTER_ATTRIBUTE_TYPES, RESERVED_OBJECT_NAMES, listViewConfigSchema, detailViewConfigSchema, RESERVED_ATTRIBUTE_NAMES, isAttributeSortable, getAttributeCapabilities, resolveIsWithinBounds } from './chunk-F6ATLCIR.mjs';
+export { ATTRIBUTE_FILTER_OPERATORS, LIST_VIEW_TAB_VISIBILITIES, NO_VALUE_OPERATORS, OPERATORS_BY_TYPE, REMOVED_OPERATOR_REPLACEMENTS, RESERVED_ATTRIBUTE_NAMES, RESERVED_OBJECT_NAMES, RESOURCE_VISIBILITIES, SYNONYM_ALIASES, SYSTEM_ATTRIBUTES, SYSTEM_ATTRIBUTE_I18N_KEYS, SYSTEM_FIELD_NAMES, SYSTEM_FILTER_ATTRIBUTE_TYPES, collectQualifiedRuleIssues, currentActor, detailTabSchema, detailViewConfigSchema, getAttributeCapabilities, getAttributeFilterOperators, getRollupFilterOperators, getSystemAttributeI18nKey, getSystemAttributeList, inverseSourceSchema, isAttributeFilterable, isAttributeGroupable, isAttributeKanbanGroupable, isAttributeSearchable, isDynamicValue, isManagedSystemAttribute, isNoValueOperator, isRelativeDateValue, listViewConfigSchema, listViewTabSchema, normalizeFilterRule, normalizeOperator, now, parseViewConfig, relationSourceSchema, resolveIsWithinBounds, tableSourceSchema, toUtcDayString, today, validateQualifiedRule, viewConfigByTypeSchema, viewTypeSchema } from './chunk-F6ATLCIR.mjs';
+import { iconNameSchema, parseAttributeConfigForCreate, parseComputedFormula } from './chunk-KDHDC7E6.mjs';
+export { ComputedFormulaParseError, SCHEMA_LIMITS, colorIdSchema, iconNameSchema, multiselectOptionWriteSchema, parseAttributeConfig, parseAttributeConfigForCreate, parseAttributeConfigForUpdate, parseComputedFormula, selectOptionWriteSchema, statusGroupSchema, statusOptionWriteSchema } from './chunk-KDHDC7E6.mjs';
+import { createObjectValidator, createAttributeValidator } from './chunk-QMLO7V5E.mjs';
+export { createFormAttributeValidator, rejectUnknownAttributesOrThrow, validateDraft, validateDraftOrThrow, validateObject, validateObjectOrThrow } from './chunk-QMLO7V5E.mjs';
+import './chunk-QVLQPW3O.mjs';
 import './chunk-ZDQ5AP26.mjs';
 import './chunk-LV3FEUKU.mjs';
 import './chunk-UXAHLSWC.mjs';
 import './chunk-NS63SPNN.mjs';
-import './chunk-OSSGN43B.mjs';
+export { createCheckboxValidator } from './chunk-OSSGN43B.mjs';
+export { createDateValidator } from './chunk-Q44QKLN4.mjs';
+export { createNumberValidator } from './chunk-UANQJ2GH.mjs';
+export { TEXT_FORMAT_PATTERNS, createTextValidator, resolveTextPattern } from './chunk-O73ROMWQ.mjs';
+import { SchemaError, SchemaErrorCode, ValidationError, NotFoundError, DuplicateError } from './chunk-POULKEJM.mjs';
+export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, RecordReferencedError, RepositoryError, RoleNotFoundError, SchemaError, SchemaErrorCode, SchemaPlanNotFoundError, SearchBackendError, StorageError, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError } from './chunk-POULKEJM.mjs';
 import './chunk-AYVHMVKQ.mjs';
 import './chunk-YUFTHPOE.mjs';
-import { formatPhoneForDisplay } from './chunk-JUKLL5RJ.mjs';
+import { formatPhoneForDisplay, normalizeCountrylessPhoneNumber, normalizePhoneNumber } from './chunk-R5LAJCBU.mjs';
 import './chunk-GO6LQADH.mjs';
-import './chunk-QVLQPW3O.mjs';
 export { DEFAULT_VALIDATION_MESSAGES, formatZodErrors } from './chunk-HRQEZUAA.mjs';
 import { ICONS, SKILL_NAME_MAX_LENGTH, SKILL_DESCRIPTION_MAX_LENGTH, MEMORY_NAME_MAX_LENGTH, MEMORY_DESCRIPTION_MAX_LENGTH, getCountryDisplayNameByIso3 } from '@stndrds/constants';
-import z3, { z } from 'zod';
+import z2, { z } from 'zod';
 
 // src/types/notifications.ts
 var NOTIFICATION_KINDS = ["fyi", "task", "question", "handoff", "system"];
@@ -65,408 +68,6 @@ var BEHAVIOR_PROPERTIES = [
 ];
 var PRESENTATION_PROPERTIES = ["label", "description", "placeholder", "icon"];
 
-// src/types/system-attributes.ts
-var SYSTEM_ATTRIBUTE_I18N_KEYS = {
-  createdAt: "createdAt",
-  updatedAt: "updatedAt",
-  createdBy: "createdBy",
-  lastUpdatedBy: "lastUpdatedBy",
-  attachments: "attachments"
-};
-function getSystemAttributeI18nKey(name) {
-  return SYSTEM_ATTRIBUTE_I18N_KEYS[name];
-}
-var SYSTEM_ATTRIBUTES = {
-  createdAt: {
-    id: "system:createdAt",
-    name: "createdAt",
-    label: "Created time",
-    type: "date",
-    required: false,
-    system: true,
-    icon: "clock-circle",
-    description: "When this record was created"
-  },
-  updatedAt: {
-    id: "system:updatedAt",
-    name: "updatedAt",
-    label: "Last edited time",
-    type: "date",
-    required: false,
-    system: true,
-    icon: "clock-circle",
-    description: "When this record was last modified"
-  },
-  createdBy: {
-    id: "system:createdBy",
-    name: "createdBy",
-    label: "Created by",
-    type: "user",
-    required: false,
-    system: true,
-    multiple: false,
-    icon: "user",
-    description: "Actor who created this record"
-  },
-  lastUpdatedBy: {
-    id: "system:lastUpdatedBy",
-    name: "lastUpdatedBy",
-    label: "Last edited by",
-    type: "user",
-    required: false,
-    system: true,
-    multiple: false,
-    icon: "user",
-    description: "Actor who last modified this record"
-  },
-  /**
-   * System attribute for free-form document attachments.
-   * Hidden from forms, visible in Documents tab.
-   * Users can attach any document without template constraints.
-   */
-  attachments: {
-    id: "system:attachments",
-    name: "attachments",
-    label: "Attachments",
-    type: "document",
-    required: false,
-    system: true,
-    hidden: true,
-    // Hidden from regular form views
-    icon: "paperclip",
-    description: "Free-form document attachments"
-  }
-};
-function getSystemAttributeList() {
-  return Object.values(SYSTEM_ATTRIBUTES);
-}
-function isManagedSystemAttribute(attribute) {
-  return attribute.id?.startsWith("system:") ?? false;
-}
-
-// src/types/attribute-capabilities.ts
-var TEXT_OPERATORS = [
-  "is",
-  "is_not",
-  "contains",
-  "not_contains",
-  "starts_with",
-  "ends_with",
-  "is_empty",
-  "is_not_empty"
-];
-var NUMBER_OPERATORS = [
-  "eq",
-  "neq",
-  "lt",
-  "gt",
-  "lte",
-  "gte",
-  "is_empty",
-  "is_not_empty"
-];
-var CHECKBOX_OPERATORS = [
-  "is_checked",
-  "is_not_checked"
-];
-var DATE_OPERATORS = [
-  "is",
-  "is_not",
-  "before",
-  "after",
-  "on_or_before",
-  "on_or_after",
-  "is_within",
-  "day_month_eq",
-  "is_empty",
-  "is_not_empty"
-];
-var SELECT_OPERATORS = [
-  "is",
-  "is_not",
-  "any_of",
-  "none_of",
-  "is_empty",
-  "is_not_empty"
-];
-var MULTISELECT_OPERATORS = [
-  "contains",
-  "not_contains",
-  "is_empty",
-  "is_not_empty"
-];
-var REFERENCE_OPERATORS = [
-  "is",
-  "is_not",
-  "any_of",
-  "none_of",
-  "contains",
-  "not_contains",
-  "is_empty",
-  "is_not_empty"
-];
-var PRESENCE_OPERATORS = [
-  "is_empty",
-  "is_not_empty"
-];
-var FORMULA_OPERATORS = [
-  "is",
-  "is_not",
-  "eq",
-  "neq",
-  "lt",
-  "gt",
-  "lte",
-  "gte",
-  "contains",
-  "not_contains",
-  "is_empty",
-  "is_not_empty"
-];
-var ATTRIBUTE_FILTER_OPERATORS = {
-  text: TEXT_OPERATORS,
-  richtext: [],
-  number: NUMBER_OPERATORS,
-  checkbox: CHECKBOX_OPERATORS,
-  date: DATE_OPERATORS,
-  phone: ["is", "is_not", "contains", "not_contains", "is_empty", "is_not_empty"],
-  currency: NUMBER_OPERATORS,
-  status: SELECT_OPERATORS,
-  select: SELECT_OPERATORS,
-  multiselect: MULTISELECT_OPERATORS,
-  location: [],
-  user: REFERENCE_OPERATORS,
-  relation: REFERENCE_OPERATORS,
-  formula: FORMULA_OPERATORS,
-  document: PRESENCE_OPERATORS
-};
-var COMPUTED_TYPES = /* @__PURE__ */ new Set(["formula", "rollup"]);
-var EDGE_BACKED_TYPES = /* @__PURE__ */ new Set(["user", "relation", "document"]);
-var STATIC_DEFAULT_TYPES = /* @__PURE__ */ new Set([
-  "text",
-  "richtext",
-  "number",
-  "select",
-  "multiselect",
-  "status",
-  "date",
-  "phone",
-  "currency",
-  "location",
-  "user",
-  "relation",
-  "document"
-]);
-var PLACEHOLDER_TYPES = /* @__PURE__ */ new Set([
-  "text",
-  "number",
-  "date",
-  "phone",
-  "currency",
-  "select",
-  "multiselect"
-]);
-var SEARCHABLE_TYPES = /* @__PURE__ */ new Set([
-  "text",
-  "phone",
-  "status",
-  "select",
-  "multiselect"
-]);
-var SORTABLE_TYPES = /* @__PURE__ */ new Set([
-  "text",
-  "number",
-  "checkbox",
-  "date",
-  "phone",
-  "currency",
-  "status",
-  "select"
-]);
-function getAttributeCapabilities(attribute) {
-  const suppressed = Boolean(attribute.hidden || attribute.archived);
-  const active = !attribute.archived;
-  const computed = COMPUTED_TYPES.has(attribute.type);
-  const document2 = attribute.type === "document";
-  const edgeBacked = EDGE_BACKED_TYPES.has(attribute.type);
-  const cardinality = getAttributeCardinality(attribute);
-  const operators = suppressed ? [] : getRawFilterOperators(attribute);
-  const filterable = operators.length > 0 && !suppressed;
-  const searchable = !suppressed && SEARCHABLE_TYPES.has(attribute.type);
-  const sortable = !suppressed && SORTABLE_TYPES.has(attribute.type);
-  const groupable = !suppressed && isGroupableType(attribute.type);
-  const kanbanGroupable = !suppressed && attribute.type === "status";
-  const managed = isManagedSystemAttribute(attribute);
-  const readOnly = computed || document2 || managed;
-  const editable = !(suppressed || readOnly);
-  const required = isRequiredForbidden(attribute.type) ? "forbidden" : "allowed";
-  const defaultValue = getDefaultValueCapability(attribute.type);
-  const maxItems = supportsMaxItems(attribute);
-  const placeholder = PLACEHOLDER_TYPES.has(attribute.type);
-  const warningWhenDeprecated = Boolean(attribute.deprecated && !suppressed);
-  const editMode = resolveEditMode(attribute);
-  return {
-    lifecycle: {
-      active,
-      deprecated: Boolean(attribute.deprecated),
-      visibleInArchitect: true,
-      visibleInRuntime: !suppressed,
-      warningWhenDeprecated
-    },
-    storage: {
-      mode: computed ? "computed" : edgeBacked ? "edge" : "value",
-      cardinality,
-      edgeBacked,
-      preservesExistingValues: Boolean(attribute.archived),
-      qualifiedProperties: supportsQualifiedProperties(attribute.type),
-      polymorphic: getPolymorphicCapability(attribute),
-      maxItems
-    },
-    authoring: {
-      editable,
-      readOnly,
-      directEdit: editable && editMode === "inline",
-      required,
-      defaultValue,
-      placeholder,
-      maxItems
-    },
-    presentation: {
-      formField: !suppressed && isFormFieldType(attribute.type),
-      tableCell: !suppressed && isTableCellType(attribute.type),
-      defaultColumn: !suppressed && isDefaultColumnType(attribute.type),
-      compactDisplay: !suppressed,
-      popoverEditor: !suppressed && editMode === "popover",
-      placeholder,
-      warningWhenDeprecated
-    },
-    query: {
-      filterable,
-      searchable,
-      sortable,
-      groupable,
-      kanbanGroupable,
-      operators
-    },
-    agent: {
-      readable: !suppressed,
-      writable: editable && !document2,
-      compactReadable: !suppressed,
-      contentReadable: !suppressed && isContentReadableType(attribute.type),
-      requiresDedicatedTool: document2
-    },
-    exchange: {
-      importable: !suppressed,
-      exportable: !suppressed,
-      schemaExportable: true,
-      metadataExportable: false
-    }
-  };
-}
-function getAttributeFilterOperators(attribute) {
-  return getAttributeCapabilities(attribute).query.operators;
-}
-function isAttributeFilterable(attribute) {
-  return getAttributeCapabilities(attribute).query.filterable;
-}
-function isAttributeSearchable(attribute) {
-  return getAttributeCapabilities(attribute).query.searchable;
-}
-function isAttributeSortable(attribute) {
-  return getAttributeCapabilities(attribute).query.sortable;
-}
-function isAttributeGroupable(attribute) {
-  return getAttributeCapabilities(attribute).query.groupable;
-}
-function isAttributeKanbanGroupable(attribute) {
-  return getAttributeCapabilities(attribute).query.kanbanGroupable;
-}
-function getRollupFilterOperators(attr) {
-  const fn = attr.function;
-  if (fn === "earliest" || fn === "latest") {
-    return ATTRIBUTE_FILTER_OPERATORS.date;
-  }
-  if (fn === "original") {
-    const targetType = attr.targetAttributeType;
-    if (targetType && hasFilterOperatorEntry(targetType)) {
-      return ATTRIBUTE_FILTER_OPERATORS[targetType];
-    }
-    return ATTRIBUTE_FILTER_OPERATORS.number;
-  }
-  return ATTRIBUTE_FILTER_OPERATORS.number;
-}
-function getRawFilterOperators(attribute) {
-  if (attribute.type === "rollup") {
-    return getRollupFilterOperators(attribute);
-  }
-  return ATTRIBUTE_FILTER_OPERATORS[attribute.type] ?? [];
-}
-function getAttributeCardinality(attribute) {
-  if (attribute.type === "multiselect" || attribute.type === "document") return "many";
-  if (attribute.type === "user" && attribute.multiple === true) return "many";
-  if (attribute.type === "relation") return attribute.cardinality === "many" ? "many" : "one";
-  return "one";
-}
-function getPolymorphicCapability(attribute) {
-  if (attribute.type !== "relation") return "none";
-  const relation2 = attribute;
-  const targets = relation2.targets ?? [];
-  if (targets.length === 1 && targets[0]?.object === "*") return "internal";
-  return targets.length > 1 ? "code-only" : "none";
-}
-function supportsMaxItems(attribute) {
-  if (attribute.type === "multiselect") return true;
-  if (attribute.type === "relation") return attribute.cardinality === "many";
-  return false;
-}
-function supportsQualifiedProperties(type) {
-  return type === "relation" || type === "document";
-}
-function isRequiredForbidden(type) {
-  return type === "checkbox" || type === "formula" || type === "rollup";
-}
-function getDefaultValueCapability(type) {
-  if (type === "checkbox") return "automatic";
-  if (type === "formula" || type === "rollup") return "forbidden";
-  if (STATIC_DEFAULT_TYPES.has(type)) return "static";
-  return "forbidden";
-}
-function isDefaultColumnType(type) {
-  return isTableCellType(type);
-}
-function isTableCellType(type) {
-  return type !== "richtext" && type !== "document";
-}
-function isFormFieldType(type) {
-  return type !== "richtext";
-}
-function resolveEditMode(attribute) {
-  switch (attribute.type) {
-    case "checkbox":
-      return "inline";
-    case "number":
-      return attribute.renderAs === "rating" ? "inline" : "default";
-    case "select":
-    case "multiselect":
-      return attribute.renderAs === "badges" ? "inline" : "popover";
-    case "status":
-    case "relation":
-    case "user":
-      return "popover";
-    default:
-      return "default";
-  }
-}
-function isGroupableType(type) {
-  return type === "status" || type === "currency";
-}
-function isContentReadableType(type) {
-  return type === "richtext" || type === "document";
-}
-function hasFilterOperatorEntry(type) {
-  return Object.prototype.hasOwnProperty.call(ATTRIBUTE_FILTER_OPERATORS, type);
-}
-
 // src/types/attributes.ts
 var RELATION_TARGET_ANY = "*";
 function isUniversalRelation(attr) {
@@ -487,10 +88,12 @@ var AUDIT_RESOURCE_TYPES = [
   "record",
   "object",
   "attribute",
+  "view",
   "user",
   "role",
   "settings",
-  "file"
+  "file",
+  "agent"
 ];
 var AUDIT_ACTIONS = [
   // Records
@@ -507,6 +110,10 @@ var AUDIT_ACTIONS = [
   "attribute.created",
   "attribute.updated",
   "attribute.deleted",
+  // Schema - Views
+  "view.created",
+  "view.updated",
+  "view.deleted",
   // Users
   "user.created",
   "user.invited",
@@ -528,6 +135,32 @@ var AUDIT_ACTIONS = [
   "file.deleted"
 ];
 
+// src/types/agent.ts
+var SESSION_TERMINAL_STATUSES = [
+  "completed",
+  "failed",
+  "cancelled",
+  "timeout",
+  "expired"
+];
+function isTerminalSessionStatus(status2) {
+  return SESSION_TERMINAL_STATUSES.includes(status2);
+}
+var DEFAULT_APPROVAL_POLICY = Object.freeze({
+  mutation: "ask",
+  destructive: "ask",
+  outward: "ask"
+});
+var TODO_PLAN_STATUSES = ["active", "completed", "promoted", "abandoned"];
+function agentDisplayName(agent2) {
+  return agent2.label?.trim() || agent2.name;
+}
+var TODO_STATUSES = ["pending", "in_progress", "completed", "blocked"];
+var MAX_TODOS = 50;
+var MAX_TODO_ID_CHARS = 80;
+var MAX_TODO_DESCRIPTION_CHARS = 500;
+var MAX_TODO_RESULT_CHARS = 2e3;
+
 // src/types/document-layout.ts
 var MAX_PRESET_DEPTH = 5;
 
@@ -543,21 +176,6 @@ function getErrorMessage(error) {
   return String(error);
 }
 
-// src/types/filters.ts
-var OPERATORS_BY_TYPE = ATTRIBUTE_FILTER_OPERATORS;
-var NO_VALUE_OPERATORS = [
-  "is_empty",
-  "is_not_empty",
-  "is_checked",
-  "is_not_checked"
-];
-function isNoValueOperator(operator) {
-  return NO_VALUE_OPERATORS.includes(operator);
-}
-function getRollupFilterOperators2(attr) {
-  return getRollupFilterOperators(attr);
-}
-
 // src/types/forms/definition.ts
 function isFormDefinition(obj) {
   return typeof obj === "object" && obj !== null && "slots" in obj && "steps" in obj && "name" in obj && typeof obj.name === "string" && Array.isArray(obj.slots) && Array.isArray(obj.steps);
@@ -610,29 +228,6 @@ var NoopGeocodingAdapter = class {
   }
 };
 
-// src/types/objects.ts
-var SYSTEM_FIELD_NAMES = [
-  "id",
-  "createdAt",
-  "updatedAt",
-  "createdBy",
-  "lastUpdatedBy"
-];
-var RESERVED_ATTRIBUTE_NAMES = [
-  // System fields (auto-managed)
-  ...SYSTEM_FIELD_NAMES,
-  // Other ObjectRecord properties
-  "objectId",
-  "label",
-  "embeddingText",
-  "values",
-  "metadata",
-  "deletedAt",
-  "deletedBy",
-  "schemaVersion"
-];
-var RESERVED_OBJECT_NAMES = ["skill"];
-
 // src/types/permissions.ts
 var ALL_ACTIONS = ["read", "create", "update", "delete", "manage"];
 function actionsToAccessLevel(actions) {
@@ -668,6 +263,11 @@ function hasOptions(attr) {
 // src/types/user-profiles.ts
 var USER_STATUSES = ["active", "suspended"];
 
+// src/types/schema-state.ts
+function viewStateKey(view) {
+  return `${view.object}:${view.name}:${view.type}`;
+}
+
 // src/types/views.ts
 function isDetailView(view) {
   return view.type === "detail";
@@ -676,12 +276,15 @@ function isListView(view) {
   return view.type === "list";
 }
 function isFieldGroup(group2) {
-  return !group2.type || group2.type === "fields";
+  return group2.type === "fields";
 }
 function isRelationGroup(group2) {
   return group2.type === "relation";
 }
 
+// src/types/pagination.ts
+var ESTIMATED_COUNT_CAP = 1e4;
+
 // src/lib/object-helpers.ts
 function isEmptyObject(obj) {
   if (obj === null || obj === void 0) {
@@ -699,6 +302,21 @@ function toUndefinedIfEmpty(obj) {
   return isNotEmpty(obj) ? obj : void 0;
 }
 
+// src/lib/byte-size.ts
+var MAX_UNIT_INDEX = 4;
+function computeByteMagnitude(bytes) {
+  if (bytes <= 0) return { value: 0, unitIndex: 0 };
+  const k = 1e3;
+  const unitIndex = Math.min(MAX_UNIT_INDEX, Math.floor(Math.log(bytes) / Math.log(k)));
+  const value = Number.parseFloat((bytes / k ** unitIndex).toFixed(1));
+  return { value, unitIndex };
+}
+var BYTE_UNIT_LABELS = ["B", "KB", "MB", "GB", "TB"];
+function formatByteSize(bytes) {
+  const { value, unitIndex } = computeByteMagnitude(bytes);
+  return `${value} ${BYTE_UNIT_LABELS[unitIndex]}`;
+}
+
 // src/lib/document-attribute.ts
 var DOCUMENT_SYSTEM_ATTRIBUTES = {
   ATTACHMENTS: "attachments"
@@ -706,13 +324,13 @@ var DOCUMENT_SYSTEM_ATTRIBUTES = {
 function isDocumentAttribute(attr) {
   return attr.type === "document";
 }
-function matchesMime(mime, accepted) {
-  if (!accepted || accepted.length === 0) return true;
-  return accepted.some((pattern) => {
-    if (pattern.endsWith("/*")) {
-      return mime.startsWith(pattern.slice(0, -1));
-    }
-    return mime === pattern;
+function matchesAccepts(file, accepts) {
+  if (!accepts || accepts.length === 0) return true;
+  const name = file.name.toLowerCase();
+  return accepts.some((pattern) => {
+    if (pattern.endsWith("/*")) return file.mimeType.startsWith(pattern.slice(0, -1));
+    if (pattern.startsWith(".")) return name.endsWith(pattern.toLowerCase());
+    return file.mimeType === pattern;
   });
 }
 
@@ -966,6 +584,19 @@ var labelExpressionSchema = z.string().min(1, "labelExpression cannot be empty")
     message: `Invalid pipe name. Valid pipes: ${ALL_PIPES.join(", ")}`
   }
 );
+function validateLabelExpression(expression) {
+  const result = labelExpressionSchema.safeParse(expression);
+  if (!result.success) {
+    return {
+      success: false,
+      error: result.error.issues[0]?.message ?? "Invalid labelExpression"
+    };
+  }
+  return {
+    success: true,
+    attributes: extractAttributeNames(expression)
+  };
+}
 var simplePipes = {
   /** Convert to uppercase */
   UPPER: (v) => String(v).toUpperCase(),
@@ -1124,6 +755,13 @@ function getUserDisplayName(user2) {
   return user2.email?.split("@")[0] ?? "";
 }
 
+// src/lib/record-creator.ts
+var RECORD_CREATOR_ROOT_ACTOR_METADATA_KEY = "__creatorRootActorId";
+function getRecordCreatorPrincipalId(record) {
+  const creatorRootActorId = record.metadata?.[RECORD_CREATOR_ROOT_ACTOR_METADATA_KEY];
+  return typeof creatorRootActorId === "string" && creatorRootActorId.length > 0 ? creatorRootActorId : record.createdBy;
+}
+
 // src/constants/attribute-columns.ts
 var DB_COLUMN_FIELDS = /* @__PURE__ */ new Set([
   "id",
@@ -1201,17 +839,25 @@ var DEFAULT_ROLES = {
   /** Standard user - can work with business data and view people */
   MEMBER: "member",
   /** Default role for agent actors - CRUD on records + documents/files */
-  AGENT_DEFAULT: "agent_default"
+  AGENT_DEFAULT: "agent_default",
+  /**
+   * Default role for reflex actors — deliberately NO record access (D22).
+   * An agent is interactive, watched, and acts once; a reflex is unattended and
+   * repeats. Real access is a per-reflex role derived from its first rehearsal.
+   */
+  REFLEX_DEFAULT: "reflex_default"
 };
 var DEFAULT_ROLE_LABELS = {
   owner: "Owner",
   member: "Member",
-  agent_default: "Agent Default"
+  agent_default: "Agent Default",
+  reflex_default: "Reflex Default"
 };
 var DEFAULT_ROLE_DESCRIPTIONS = {
   owner: "Full access to all platform features and data",
   member: "Can view, create, edit and delete business data",
-  agent_default: "Default role for AI agents \u2014 CRUD on records plus documents and files"
+  agent_default: "Default role for AI agents \u2014 CRUD on records plus documents and files",
+  reflex_default: "Default role for reflexes \u2014 no data access; each reflex is granted exactly what its rehearsal showed it uses"
 };
 var ALL_ACTIONS2 = ["read", "create", "update", "delete", "manage"];
 var MEMBER_CONNECTOR_ACTIONS = ["read", "create", "delete"];
@@ -1241,6 +887,13 @@ var DEFAULT_ROLE_PERMISSIONS = {
       { target: "session", actions: ["observe"] }
     ],
     object: [{ target: "*", actions: ["read", "create", "update", "delete"] }]
+  },
+  reflex_default: {
+    // Intentionally empty (D22): a reflex starts with no access at all. Real
+    // access is a per-reflex role derived from its first rehearsal, not a
+    // shared default.
+    system: [],
+    object: []
   }
 };
 function isDefaultRole(roleName) {
@@ -1250,6 +903,19 @@ var VALID_ICONS = new Set(ICONS);
 var ATTRIBUTE_NAME_REGEX = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 var MAX_NAME_LENGTH = 63;
 var MAX_LABEL_LENGTH = 128;
+var OBJECT_NAME_SCHEMA = z2.string().min(1, "Object name cannot be empty").max(63, "Object name is too long (max 63 characters)").regex(/^[a-z][a-z0-9-]*$/, {
+  message: "Invalid object name format.\nName must be in kebab-case (slug format):\n  \u2705 Valid: 'products', 'user-profiles', 'order-items'\n  \u274C Invalid: 'Products', 'userProfiles', 'user_profiles'"
+});
+function validateObjectName(name) {
+  try {
+    OBJECT_NAME_SCHEMA.parse(name);
+  } catch (error) {
+    if (error instanceof z2.ZodError) {
+      throw new SchemaError(error.issues[0].message, SchemaErrorCode.INVALID_OBJECT_NAME);
+    }
+    throw error;
+  }
+}
 function assertUniqueBy(items, getKey, buildError) {
   const seen = /* @__PURE__ */ new Set();
   for (const item of items) {
@@ -1346,12 +1012,28 @@ var AgentBuilder = class {
     if (!config.name || config.name.trim().length === 0) {
       throw new ValidationError("Agent name is required", []);
     }
-    this.bp = { name: config.name, system: true, triggers: [] };
+    this.bp = { name: config.name, system: true, visibility: "workspace", triggers: [] };
   }
   description(value) {
     this.bp.description = value;
     return this;
   }
+  /**
+   * Display text shown wherever this agent's identity is rendered in the
+   * UI — a separate concern from `name` (the stable identity the boot sync
+   * matches rows on). Falls back to `name` when never called.
+   *
+   * @example
+   * ```typescript
+   * agent({ name: "architecte" })
+   *   .label("Architecte")
+   *   // ...
+   * ```
+   */
+  label(value) {
+    this.bp.label = value;
+    return this;
+  }
   icon(value) {
     this.bp.icon = value;
     return this;
@@ -1390,6 +1072,32 @@ var AgentBuilder = class {
     Object.assign(this.bp, value);
     return this;
   }
+  approval(value) {
+    this.bp.approval = { ...DEFAULT_APPROVAL_POLICY, ...this.bp.approval, ...value };
+    return this;
+  }
+  /** Runtime-agent visibility. Code-declared system agents must stay workspace-visible. */
+  visibility(value) {
+    this.bp.visibility = value;
+    return this;
+  }
+  /**
+   * Gate this agent behind a system permission: an actor lacking `action` on
+   * `resource` never sees it in the agent list and cannot open a session
+   * against it. Reuses the same permission vocabulary that guards the
+   * matching HTTP surface — do not invent a new resource/action pair.
+   *
+   * @example
+   * ```typescript
+   * agent({ name: "architecte" })
+   *   .requiresPermission("architect", "update")
+   *   // ...
+   * ```
+   */
+  requiresPermission(resource, action) {
+    this.bp.requiredPermission = { resource, action };
+    return this;
+  }
   /**
    * Declare a trigger. `name` is the stable identity the boot sync uses to
    * reconcile trigger rows; `enabled` defaults to true.
@@ -1422,6 +1130,12 @@ var AgentBuilder = class {
     if (!this.bp.model) {
       throw new ValidationError(`Agent "${this.bp.name}": model is required`, []);
     }
+    if (this.bp.system && this.bp.visibility === "private") {
+      throw new ValidationError(
+        `Agent "${this.bp.name}": system agents must use workspace visibility`,
+        []
+      );
+    }
     assertUniqueBy(
       this.bp.triggers,
       (t) => t.name,
@@ -1429,6 +1143,7 @@ var AgentBuilder = class {
     );
     return {
       ...this.bp,
+      visibility: this.bp.visibility ?? "workspace",
       config: this.bp.config ?? DEFAULT_AGENT_EXECUTION_CONFIG,
       systemPrompt: this.bp.systemPrompt,
       model: this.bp.model
@@ -1600,6 +1315,7 @@ var TextAttributeBuilder = class extends BaseAttributeBuilder {
   }
   pattern(value) {
     this.attr.pattern = value;
+    this.attr.format = void 0;
     return this;
   }
   multiline(value = true) {
@@ -1618,21 +1334,24 @@ var TextAttributeBuilder = class extends BaseAttributeBuilder {
    * Set email validation pattern
    */
   email() {
-    this.attr.pattern = "^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$";
+    this.attr.format = "email";
+    this.attr.pattern = void 0;
     return this;
   }
   /**
    * Set URL validation pattern
    */
   url() {
-    this.attr.pattern = "^https?:\\/\\/[\\w\\-]+(\\.[\\w\\-]+)+[/#?]?.*$";
+    this.attr.format = "url";
+    this.attr.pattern = void 0;
     return this;
   }
   /**
    * Set slug validation pattern
    */
   slug() {
-    this.attr.pattern = "^[a-z0-9]+(?:-[a-z0-9]+)*$";
+    this.attr.format = "slug";
+    this.attr.pattern = void 0;
     return this;
   }
 };
@@ -3001,17 +2720,7 @@ var ObjectBuilder = class {
     if (name === void 0) {
       return;
     }
-    const objectNameSchema = z3.string().min(1, "Object name cannot be empty").max(63, "Object name is too long (max 63 characters)").regex(/^[a-z][a-z0-9-]*$/, {
-      message: "Invalid object name format.\nName must be in kebab-case (slug format):\n  \u2705 Valid: 'products', 'user-profiles', 'order-items'\n  \u274C Invalid: 'Products', 'userProfiles', 'user_profiles'"
-    });
-    try {
-      objectNameSchema.parse(name);
-    } catch (error) {
-      if (error instanceof z3.ZodError) {
-        throw new SchemaError(error.issues[0].message, SchemaErrorCode.INVALID_OBJECT_NAME);
-      }
-      throw error;
-    }
+    validateObjectName(name);
   }
 };
 function object(config) {
@@ -3046,7 +2755,7 @@ function validatePresetStructure(presetId, nodes, depth) {
 }
 var GroupBuilder = class {
   constructor(id, label) {
-    this.data = { fields: [] };
+    this.data = { type: "fields", fields: [] };
     this.data.id = id;
     this.data.label = label;
   }
@@ -3168,17 +2877,6 @@ var RelationGroupBuilder = class {
     this.data.allowCreate = value;
     return this;
   }
-  /**
-   * Enable two-level traversal (through mode).
-   * Parent rows become grouping headers; sub-rows from `attribute` are the primary display.
-   *
-   * @param attribute - Relation attribute on the first-level target object
-   * @example .through("companies") — display companies linked via each member
-   */
-  through(attribute) {
-    this.data.through = { attribute };
-    return this;
-  }
   /**
    * Build the relation group definition
    */
@@ -3299,29 +2997,6 @@ var TableTabConfig = class {
     this.tabData.sorts.push({ attribute, direction });
     return this;
   }
-  /**
-   * Traverse a 2nd-level relation to display nested data.
-   * When active, `tab.columns` stores the 2nd-level object's attribute names.
-   *
-   * @param attribute - Relation attribute on the first-level target object
-   * @example .table("members").through("companies").columns(["name", "sector"])
-   */
-  through(attribute) {
-    this.tabData.through = { attribute };
-    return this;
-  }
-  /**
-   * Show _source and _target columns in flattened (through) view
-   */
-  showSourceTarget(value = true) {
-    if (!this.tabData.through) {
-      throw new Error(
-        `[TableTabConfig] showSourceTarget() requires through() to be called first for tab "${this.tabData.name}"`
-      );
-    }
-    this.tabData.through.showSourceTarget = value;
-    return this;
-  }
   /**
    * Continue building with a new tab
    */
@@ -3779,6 +3454,17 @@ var DetailViewBuilder = class {
 function detailView(name, label) {
   return new DetailViewBuilder(name, label);
 }
+function findProtectedTabFilterAttribute(node) {
+  if (Array.isArray(node)) {
+    return node.map(findProtectedTabFilterAttribute).find((attribute) => attribute !== void 0);
+  }
+  if (node === null || typeof node !== "object") return void 0;
+  const candidate = node;
+  if (candidate.attribute === "visibility" || candidate.attribute === "ownedBy") {
+    return candidate.attribute;
+  }
+  return findProtectedTabFilterAttribute(candidate.rules) ?? findProtectedTabFilterAttribute(candidate.groups);
+}
 var ListViewBuilder = class {
   constructor(name, label) {
     validateViewName(name, "ListViewBuilder", {
@@ -3888,28 +3574,39 @@ var ListViewBuilder = class {
         combinator: this.data.defaultFilters.combinator,
         rules: this.data.defaultFilters.rules
       } : void 0,
-      tabs: this.data.tabs.map((tab) => ({
-        id: tab.id,
-        label: tab.label,
-        icon: tab.icon,
-        default: tab.default,
-        layout: tab.layout,
-        columns: tab.columns,
-        columnSizing: tab.columnSizing,
-        filters: tab.filters ? {
-          id: generateId(),
-          combinator: tab.filters.combinator,
-          rules: tab.filters.rules
-        } : void 0,
-        sorts: tab.sorts,
-        groupByAttribute: tab.groupByAttribute,
-        cardUserAttribute: tab.cardUserAttribute,
-        cardDateAttribute: tab.cardDateAttribute,
-        createMode: tab.createMode,
-        kanbanColumnOrder: tab.kanbanColumnOrder,
-        kanbanColumnVisibility: tab.kanbanColumnVisibility,
-        kanbanPinnedColumns: tab.kanbanPinnedColumns
-      }))
+      tabs: this.data.tabs.map((tab) => {
+        const common = {
+          id: tab.id,
+          label: tab.label,
+          icon: tab.icon,
+          default: tab.default,
+          // Which records the tab scopes to — a tab-level scope, never a
+          // record's own column (see the visibility notes in CLAUDE.md).
+          visibility: tab.visibility,
+          columns: tab.columns,
+          filters: tab.filters ? {
+            id: generateId(),
+            combinator: tab.filters.combinator,
+            rules: tab.filters.rules
+          } : void 0,
+          sorts: tab.sorts,
+          createMode: tab.createMode
+        };
+        return tab.layout === "kanban" ? {
+          ...common,
+          layout: "kanban",
+          groupByAttribute: tab.groupByAttribute,
+          cardUserAttribute: tab.cardUserAttribute,
+          cardDateAttribute: tab.cardDateAttribute,
+          kanbanColumnOrder: tab.kanbanColumnOrder,
+          kanbanColumnVisibility: tab.kanbanColumnVisibility,
+          kanbanPinnedColumns: tab.kanbanPinnedColumns
+        } : {
+          ...common,
+          layout: "table",
+          columnSizing: tab.columnSizing
+        };
+      })
     };
     return {
       name: this.data.name,
@@ -3931,6 +3628,7 @@ var ListViewTabConfigBuilder = class _ListViewTabConfigBuilder {
     this.tabData = {
       id,
       label,
+      visibility: "all",
       layout: "table",
       columns: []
     };
@@ -3949,6 +3647,14 @@ var ListViewTabConfigBuilder = class _ListViewTabConfigBuilder {
     this.tabData.default = true;
     return this;
   }
+  /**
+   * Set the record scope this tab reads. Defaults to `"all"` (no scope: every
+   * workspace record plus the viewer's own private ones).
+   */
+  visibility(value) {
+    this.tabData.visibility = value;
+    return this;
+  }
   /**
    * Set the layout to table (default)
    */
@@ -4042,6 +3748,11 @@ var ListViewTabConfigBuilder = class _ListViewTabConfigBuilder {
    * @example .filter({ combinator: "and", rules: [{ attribute: "status", operator: "is", value: "active" }] })
    */
   filter(filters) {
+    const protectedAttribute = findProtectedTabFilterAttribute(filters);
+    if (protectedAttribute) {
+      const message = `Tab filters cannot target "${protectedAttribute}". Use .visibility("private")`;
+      throw new ValidationError(message, [{ path: ["filters"], message }]);
+    }
     this.tabData.filters = filters;
     return this;
   }
@@ -4799,7 +4510,7 @@ var SKILL_OBJECT = object({ name: "skill", label: "Skill" }).sealed().icon("spar
   )
 ).attribute(richtext({ name: "content", label: "Content" }).defaultValue(SKILL_CONTENT_TEMPLATE)).build();
 var SKILL_VIEW = detailView("skill-detail", "Skill").for("skill").default().sidePanel({ attributes: ["name", "description"] }).tab("content", "Content").richtext("content").titleAttribute("name").done().tab("files", "Files").documents().done().build();
-var SKILL_LIST_VIEW = listView("skill-list", "Skills").for("skill").default().tab("all", "All").table().columns("name", "description").sort("name", "asc").build();
+var SKILL_LIST_VIEW = listView("skill-list", "Skills").for("skill").default().tab("workspace", "Skills").default().icon("table").visibility("workspace").table().columns("name", "description").sort("name", "asc").tab("mine", "Mes skills").icon("lock").visibility("private").table().columns("name", "description").sort("name", "asc").build();
 var MEMORY_OBJECT = object({ name: "memory", label: "Memory" }).sealed().icon("database").order(Number.MAX_SAFE_INTEGER).pluralLabel("Memories").labelExpression("{{ name }}").embeddingExpression("{{ name }}\n{{ description }}\n{{ content }}").attribute(text({ name: "name", label: "Name" }).maxLength(MEMORY_NAME_MAX_LENGTH).required()).attribute(
   text({ name: "description", label: "Description" }).multiline().maxLength(MEMORY_DESCRIPTION_MAX_LENGTH).required()
 ).attribute(text({ name: "content", label: "Content" }).multiline()).attribute(
@@ -4809,9 +4520,9 @@ var MEMORY_OBJECT = object({ name: "memory", label: "Memory" }).sealed().icon("d
     { value: "feedback", label: "Feedback" },
     { value: "reference", label: "Reference" }
   ])
-).attribute(user({ name: "owner", label: "Owner" })).attribute(relation({ name: "subjects", label: "Subjects" }).toAny().many()).attribute(relation({ name: "links", label: "Links" }).to("memory").many()).build();
-var MEMORY_VIEW = detailView("memory-detail", "Memory").for("memory").default().sidePanel({ attributes: ["name", "description", "kind", "owner", "subjects", "links"] }).tab("content", "Content").form(group("content", "Content").field("content", { span: 12 })).build();
-var MEMORY_LIST_VIEW = listView("memory-list", "Memories").for("memory").default().tab("all", "All").table().columns("name", "description", "kind", "owner").sort("name", "asc").build();
+).attribute(relation({ name: "subjects", label: "Subjects" }).toAny().many()).attribute(relation({ name: "links", label: "Links" }).to("memory").many()).build();
+var MEMORY_VIEW = detailView("memory-detail", "Memory").for("memory").default().sidePanel({ attributes: ["name", "description", "kind", "subjects", "links"] }).tab("content", "Content").form(group("content", "Content").field("content", { span: 12 })).build();
+var MEMORY_LIST_VIEW = listView("memory-list", "Memories").for("memory").default().tab("workspace", "Memories").default().icon("table").visibility("workspace").table().columns("name", "kind", "description", "createdAt").sort("name", "asc").tab("mine", "Mes m\xE9moires").icon("lock").visibility("private").table().columns("name", "kind", "description", "createdAt").sort("name", "asc").build();
 
 // src/views/registry.ts
 function cloneViewDefinition(view) {
@@ -5016,6 +4727,7 @@ function generateDefaultDetailView(object2, options = {}) {
       {
         id: "general",
         label: "General",
+        type: "fields",
         fields: sortedAttrs.map(attributeToField),
         order: 0
       }
@@ -5070,6 +4782,7 @@ function generateDefaultListView(object2, options = {}) {
         id: "all",
         label: "All",
         default: true,
+        visibility: "workspace",
         layout: "table",
         columns
       }
@@ -5329,6 +5042,8 @@ var BROWSER_PREVIEW_STATUSES = ["live", "paused", "ended", "disconnected"];
 var LIVE_EVENT_TYPE_REGISTRY = {
   "record.patch": true,
   "record.deleted": true,
+  "record.removed": true,
+  "record.created": true,
   "view.projection.stale": true,
   "agent.session.patch": true,
   "agent.unread.patch": true,
@@ -5375,6 +5090,33 @@ var BROWSER_PREVIEW_DESCRIPTOR_KEYS = [
   "sequence",
   "updatedAt"
 ];
+var RECORD_REMOVED_PAYLOAD_KEYS = [
+  "type",
+  "objectId",
+  "recordId",
+  "recordVersion"
+];
+var RECORD_CREATED_PAYLOAD_KEYS = [
+  "type",
+  "objectId",
+  "recordId",
+  "recordVersion",
+  "record"
+];
+var RECORD_LIVE_SNAPSHOT_KEYS = [
+  "id",
+  "objectId",
+  "visibility",
+  "ownedBy",
+  "label",
+  "values",
+  "metadata",
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "lastUpdatedBy",
+  "schemaVersion"
+];
 function isLiveEventType(value) {
   return typeof value === "string" && LIVE_EVENT_TYPES.includes(value);
 }
@@ -5393,6 +5135,10 @@ function isLiveEventPayloadForType(type, payload) {
       return isRecordPatchPayload(payload);
     case "record.deleted":
       return isRecordDeletedPayload(payload);
+    case "record.removed":
+      return isRecordRemovedPayload(payload);
+    case "record.created":
+      return isRecordCreatedPayload(payload);
     case "view.projection.stale":
       return isViewProjectionStalePayload(payload);
     case "agent.session.patch":
@@ -5488,6 +5234,15 @@ function isRecordPatchPayload(payload) {
 function isRecordDeletedPayload(payload) {
   return payload.type === "record.deleted" && hasString(payload, "objectId") && hasString(payload, "recordId") && hasVersion(payload, "recordVersion") && hasString(payload, "deletedAt");
 }
+function isRecordRemovedPayload(payload) {
+  return payload.type === "record.removed" && hasOnlyKeys(payload, RECORD_REMOVED_PAYLOAD_KEYS) && hasString(payload, "objectId") && hasString(payload, "recordId") && hasVersion(payload, "recordVersion");
+}
+function isRecordLiveSnapshot(value) {
+  return isRecord(value) && hasOnlyKeys(value, RECORD_LIVE_SNAPSHOT_KEYS) && hasString(value, "id") && hasString(value, "objectId") && isOneOf(value.visibility, ["workspace", "private"]) && isNullableString(value.ownedBy) && (value.visibility === "workspace" && value.ownedBy === null || value.visibility === "private" && isNonEmptyString(value.ownedBy)) && hasString(value, "label") && isRecord(value.values) && hasOptional(value, "metadata", isRecord) && hasIsoDateString(value, "createdAt") && hasIsoDateString(value, "updatedAt") && hasOptional(value, "createdBy", isString) && hasOptional(value, "lastUpdatedBy", isString) && hasVersion(value, "schemaVersion");
+}
+function isRecordCreatedPayload(payload) {
+  return payload.type === "record.created" && hasOnlyKeys(payload, RECORD_CREATED_PAYLOAD_KEYS) && hasString(payload, "objectId") && hasString(payload, "recordId") && hasVersion(payload, "recordVersion") && isRecordLiveSnapshot(payload.record) && payload.record.id === payload.recordId && payload.record.objectId === payload.objectId;
+}
 function isViewProjectionStalePayload(payload) {
   return payload.type === "view.projection.stale" && hasString(payload, "viewId") && isOneOf(payload.reason, VIEW_PROJECTION_STALE_REASONS);
 }
@@ -6779,46 +6534,79 @@ var toDate2 = (v) => {
   return Number.isNaN(d.getTime()) ? null : d;
 };
 var toArr = (v) => Array.isArray(v) ? v : v == null ? [] : [v];
-function relativeDateBoundary(rel) {
-  const ms = {
-    days: 864e5,
-    weeks: 6048e5,
-    months: 2592e6,
-    years: 31536e6
-  };
-  const offset = rel.amount * ms[rel.unit] * (rel.direction === "future" ? 1 : -1);
-  return new Date(Date.now() + offset);
+var compareNumbers = (v, rv, cmp) => {
+  const a = toNum(v);
+  const b = toNum(rv);
+  return a !== null && b !== null && cmp(a, b);
+};
+var compareDates = (v, rv, cmp) => {
+  const a = toDate2(v);
+  const b = toDate2(rv);
+  return a !== null && b !== null && cmp(a.getTime(), b.getTime());
+};
+var equalsForAttr = (v, rv, attr) => {
+  if (attr.type === "number" || attr.type === "currency") {
+    const a = toNum(v);
+    const b = toNum(rv);
+    if (a !== null && b !== null) return a === b;
+  }
+  return toStr(v) === toStr(rv);
+};
+function isCheckboxEquality(attributeType, value) {
+  return attributeType ? attributeType === "checkbox" : typeof value === "boolean";
 }
+var orderingSpec = (cmp) => ({
+  appliesTo: ["number", "currency", "date", "formula"],
+  evaluateInMemory: (v, rv, attr) => attr.type === "date" ? compareDates(v, rv, cmp) : compareNumbers(v, rv, cmp)
+});
 var OPERATOR_SPECS = {
-  // ---- text-style ----
+  // ---- equality ----
   is: {
-    appliesTo: ["text", "phone", "status", "select", "date", "formula"],
-    evaluateInMemory: (v, rv) => toStr(v) === toStr(rv)
+    appliesTo: [
+      "text",
+      "phone",
+      "number",
+      "currency",
+      "checkbox",
+      "status",
+      "select",
+      "date",
+      "user",
+      "relation",
+      "formula"
+    ],
+    evaluateInMemory: (v, rv, attr) => attr.type === "checkbox" ? v === true === (rv === true) : equalsForAttr(v, rv, attr)
   },
   is_not: {
-    appliesTo: ["text", "phone", "status", "select", "date", "formula"],
-    evaluateInMemory: (v, rv) => toStr(v) !== toStr(rv)
+    appliesTo: [
+      "text",
+      "phone",
+      "number",
+      "currency",
+      "status",
+      "select",
+      "date",
+      "user",
+      "relation",
+      "formula"
+    ],
+    evaluateInMemory: (v, rv, attr) => !equalsForAttr(v, rv, attr)
   },
+  // ---- text substring ----
   contains: {
-    appliesTo: ["text", "phone", "location", "user", "multiselect", "relation", "formula"],
-    evaluateInMemory: (v, rv) => {
-      if (Array.isArray(v)) return v.map(toStr).includes(toStr(rv));
-      return toStr(v).toLowerCase().includes(toStr(rv).toLowerCase());
-    }
+    appliesTo: ["text", "phone", "formula"],
+    evaluateInMemory: (v, rv) => toStr(v).toLowerCase().includes(toStr(rv).toLowerCase())
   },
   not_contains: {
-    appliesTo: ["text", "phone", "user", "multiselect", "relation", "formula"],
-    evaluateInMemory: (v, rv) => {
-      if (Array.isArray(v)) return !v.map(toStr).includes(toStr(rv));
-      return !toStr(v).toLowerCase().includes(toStr(rv).toLowerCase());
-    }
+    appliesTo: ["text", "phone", "formula"],
+    evaluateInMemory: (v, rv) => !toStr(v).toLowerCase().includes(toStr(rv).toLowerCase())
   },
   starts_with: {
-    appliesTo: ["text", "formula"],
+    appliesTo: ["text", "phone"],
     evaluateInMemory: (v, rv) => toStr(v).toLowerCase().startsWith(toStr(rv).toLowerCase())
   },
   ends_with: {
-    appliesTo: ["text", "formula"],
+    appliesTo: ["text"],
     evaluateInMemory: (v, rv) => toStr(v).toLowerCase().endsWith(toStr(rv).toLowerCase())
   },
   is_empty: {
@@ -6859,100 +6647,22 @@ var OPERATOR_SPECS = {
     ],
     evaluateInMemory: (v) => !isEmpty(v)
   },
-  // ---- numeric ----
-  eq: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => toNum(v) === toNum(rv)
-  },
-  neq: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => toNum(v) !== toNum(rv)
-  },
-  lt: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => {
-      const a = toNum(v);
-      const b = toNum(rv);
-      return a !== null && b !== null && a < b;
-    }
-  },
-  gt: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => {
-      const a = toNum(v);
-      const b = toNum(rv);
-      return a !== null && b !== null && a > b;
-    }
-  },
-  lte: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => {
-      const a = toNum(v);
-      const b = toNum(rv);
-      return a !== null && b !== null && a <= b;
-    }
-  },
-  gte: {
-    appliesTo: ["number", "currency", "formula"],
-    evaluateInMemory: (v, rv) => {
-      const a = toNum(v);
-      const b = toNum(rv);
-      return a !== null && b !== null && a >= b;
-    }
-  },
-  // ---- checkbox ----
-  is_checked: {
-    appliesTo: ["checkbox"],
-    evaluateInMemory: (v) => v === true
-  },
-  is_not_checked: {
-    appliesTo: ["checkbox"],
-    evaluateInMemory: (v) => v !== true
-  },
-  // ---- date ----
-  before: {
-    appliesTo: ["date"],
-    evaluateInMemory: (v, rv) => {
-      const a = toDate2(v);
-      const b = toDate2(rv);
-      return a !== null && b !== null && a < b;
-    }
-  },
-  after: {
-    appliesTo: ["date"],
-    evaluateInMemory: (v, rv) => {
-      const a = toDate2(v);
-      const b = toDate2(rv);
-      return a !== null && b !== null && a > b;
-    }
-  },
-  on_or_before: {
-    appliesTo: ["date"],
-    evaluateInMemory: (v, rv) => {
-      const a = toDate2(v);
-      const b = toDate2(rv);
-      return a !== null && b !== null && a <= b;
-    }
-  },
-  on_or_after: {
-    appliesTo: ["date"],
-    evaluateInMemory: (v, rv) => {
-      const a = toDate2(v);
-      const b = toDate2(rv);
-      return a !== null && b !== null && a >= b;
-    }
-  },
+  // ---- ordering (numeric on number/currency/formula, chronological on date) ----
+  less_than: orderingSpec((a, b) => a < b),
+  greater_than: orderingSpec((a, b) => a > b),
+  less_or_equal: orderingSpec((a, b) => a <= b),
+  greater_or_equal: orderingSpec((a, b) => a >= b),
+  // ---- date-only ----
   is_within: {
     appliesTo: ["date"],
     evaluateInMemory: (v, rv) => {
       const d = toDate2(v);
-      if (!d) return false;
-      const rel = rv;
-      const boundary = relativeDateBoundary(rel);
-      return rel.direction === "future" ? d >= /* @__PURE__ */ new Date() && d <= boundary : d >= boundary && d <= /* @__PURE__ */ new Date();
+      const bounds = resolveIsWithinBounds(rv);
+      if (!(d && bounds)) return false;
+      return d.getTime() >= bounds.startMs && d.getTime() < bounds.endMs;
     }
   },
-  day_month_eq: {
+  on_day_month: {
     appliesTo: ["date"],
     evaluateInMemory: (v, rv) => {
       const d = toDate2(v);
@@ -6961,9 +6671,9 @@ var OPERATOR_SPECS = {
       return d.getMonth() + 1 === rule.month && d.getDate() === rule.day;
     }
   },
-  // ---- select multi-value ----
+  // ---- set membership ----
   any_of: {
-    appliesTo: ["status", "select", "relation"],
+    appliesTo: ["status", "select", "multiselect", "user", "relation"],
     evaluateInMemory: (v, rv) => {
       const ruleArr = toArr(rv).map(toStr);
       const valArr = toArr(v).map(toStr);
@@ -6971,7 +6681,7 @@ var OPERATOR_SPECS = {
     }
   },
   none_of: {
-    appliesTo: ["status", "select", "relation"],
+    appliesTo: ["status", "select", "multiselect", "user", "relation"],
     evaluateInMemory: (v, rv) => {
       const ruleArr = toArr(rv).map(toStr);
       const valArr = toArr(v).map(toStr);
@@ -6980,37 +6690,34 @@ var OPERATOR_SPECS = {
   }
 };
 
-// src/filters/evaluate.ts
-function evaluateFilterState(state, values, attributes) {
-  if (state.rules.length === 0) return true;
-  const attrByName = new Map(attributes.map((a) => [a.name, a]));
-  const reducer = state.combinator === "or" ? "some" : "every";
-  return state.rules[reducer]((rule) => evaluateRule(rule, values, attrByName));
+// src/filters/extract-filter-value.ts
+function extractCurrencyFilterValue(value) {
+  if (typeof value === "number") return value;
+  if (value !== null && typeof value === "object" && "value" in value) {
+    const inner = value.value;
+    return typeof inner === "number" ? inner : null;
+  }
+  return null;
 }
-function evaluateRule(rule, values, attrByName) {
-  const attr = attrByName.get(rule.attribute);
-  if (!attr) return false;
-  const spec = OPERATOR_SPECS[rule.operator];
-  if (!spec) return false;
-  if (!spec.appliesTo.includes(attr.type)) return false;
-  return spec.evaluateInMemory(values[rule.attribute], rule.value, attr);
+function extractFilterValue(value) {
+  if (value === null || value === void 0) return null;
+  if (typeof value === "object" && "value" in value) {
+    return value.value ?? null;
+  }
+  return value;
 }
 
 // src/filters/polarity.ts
 var NEGATIVE_OPERATORS = /* @__PURE__ */ new Set([
   "is_not",
   "not_contains",
-  "neq",
   "none_of",
-  "is_not_checked",
   "is_empty"
 ]);
 var NEGATIVE_TO_POSITIVE = {
   is_not: "is",
   not_contains: "contains",
-  neq: "eq",
   none_of: "any_of",
-  is_not_checked: "is_checked",
   is_empty: "is_not_empty"
 };
 function getOperatorPolarity(op) {
@@ -7021,251 +6728,136 @@ function normalizeForEdgeRpc(op) {
 }
 var SINGLE_TO_MULTI = {
   is: "any_of",
-  eq: "any_of",
-  contains: "any_of",
-  is_not: "none_of",
-  neq: "none_of",
-  not_contains: "none_of"
+  is_not: "none_of"
 };
 function toMultiValueOperator(op) {
   return SINGLE_TO_MULTI[op] ?? op;
 }
 
-// src/filters/dynamic-value.ts
-function isDynamicValue(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) && "dynamic" in value;
-}
-function currentActor() {
-  return { dynamic: "actor", ref: "current" };
-}
-function today() {
-  return { dynamic: "date", anchor: "today" };
-}
-function now() {
-  return { dynamic: "date", anchor: "now" };
+// src/filters/evaluate.ts
+var systemAttribute = (name, type) => ({ id: `system:${name}`, name, label: name, type, system: true });
+var RECORD_SYSTEM_ATTRIBUTES = [
+  ...Object.entries(SYSTEM_FILTER_ATTRIBUTE_TYPES).map(
+    ([name, type]) => systemAttribute(name, type)
+  )
+];
+function evaluateRecordFilterState(state, record, attributes) {
+  const physical = record;
+  return evaluateFilterState(
+    state,
+    {
+      ...record.values,
+      id: record.id,
+      objectId: record.objectId,
+      objectName: physical.objectName,
+      tenantId: physical.tenantId,
+      label: record.label,
+      createdAt: record.createdAt,
+      updatedAt: record.updatedAt,
+      createdBy: record.createdBy,
+      lastUpdatedBy: record.lastUpdatedBy,
+      deletedAt: record.deletedAt,
+      deletedBy: record.deletedBy,
+      visibility: record.visibility,
+      ownedBy: record.ownedBy
+    },
+    [...attributes, ...RECORD_SYSTEM_ATTRIBUTES]
+  );
 }
-
-// src/filters/normalize-operator.ts
-var SYNONYM_ALIASES = {
-  // equality
-  equals: "is",
-  equal: "is",
-  "==": "is",
-  "=": "is",
-  notEqual: "is_not",
-  isNot: "is_not",
-  "!=": "is_not",
-  "<>": "is_not",
-  // set
-  in: "any_of",
-  isAnyOf: "any_of",
-  oneOf: "any_of",
-  notIn: "none_of",
-  not_in: "none_of",
-  isNoneOf: "none_of",
-  notOneOf: "none_of",
-  // text
-  startsWith: "starts_with",
-  beginsWith: "starts_with",
-  endsWith: "ends_with",
-  doesNotContain: "not_contains",
-  notContain: "not_contains",
-  // nullity
-  isEmpty: "is_empty",
-  isNotEmpty: "is_not_empty",
-  // checkbox
-  isChecked: "is_checked",
-  isUnchecked: "is_not_checked"
-};
-var CROSS_TYPE_CONVERSIONS = {
-  date: {
-    gte: "on_or_after",
-    lte: "on_or_before",
-    gt: "after",
-    lt: "before",
-    eq: "is",
-    neq: "is_not"
-  },
-  number: { is: "eq", is_not: "neq" },
-  currency: { is: "eq", is_not: "neq" },
-  text: { eq: "is", neq: "is_not" },
-  phone: { eq: "is", neq: "is_not" },
-  select: { eq: "is", neq: "is_not" },
-  status: { eq: "is", neq: "is_not" },
-  multiselect: { eq: "contains", neq: "not_contains" },
-  relation: { eq: "is", neq: "is_not" },
-  user: { eq: "is", neq: "is_not" },
-  document: { eq: "is", neq: "is_not" },
-  file: { eq: "is", neq: "is_not" },
-  checkbox: { eq: "is_checked", neq: "is_not_checked", is: "is_checked", is_not: "is_not_checked" }
-};
-function normalizeOperator(rawOp, effectiveType) {
-  const synonymed = SYNONYM_ALIASES[rawOp] ?? rawOp;
-  const typeMap = CROSS_TYPE_CONVERSIONS[effectiveType];
-  return typeMap?.[synonymed] ?? synonymed;
+function evaluateFilterState(state, values, attributes) {
+  if (state.rules.length === 0) return true;
+  const attrByName = new Map(attributes.map((a) => [a.name, a]));
+  const reducer = state.combinator === "or" ? "some" : "every";
+  return state.rules[reducer]((rule) => evaluateRule(rule, values, attrByName));
 }
-
-// src/filters/validation.ts
-var REFERENCE_TYPES = /* @__PURE__ */ new Set(["relation", "document", "user"]);
-var ID_LIKE_OPERATORS = [
-  "eq",
-  "neq",
-  "is",
-  "is_not",
-  "any_of",
-  "none_of",
-  "is_empty",
-  "is_not_empty"
-];
-var SYSTEM_FILTER_OPERATORS = {
-  // Identifier columns (uuid)
-  id: ID_LIKE_OPERATORS,
-  objectId: ID_LIKE_OPERATORS,
-  tenantId: ID_LIKE_OPERATORS,
-  // Free-form text columns share their counterpart's operator set
-  label: OPERATORS_BY_TYPE.text,
-  // Date columns
-  createdAt: OPERATORS_BY_TYPE.date,
-  updatedAt: OPERATORS_BY_TYPE.date,
-  deletedAt: OPERATORS_BY_TYPE.date,
-  // User columns (uuid → actor identity)
-  createdBy: OPERATORS_BY_TYPE.user,
-  lastUpdatedBy: OPERATORS_BY_TYPE.user
-};
-var SYSTEM_ATTRIBUTE_TYPES = {
-  id: "id",
-  objectId: "id",
-  tenantId: "id",
-  label: "text",
-  createdAt: "date",
-  updatedAt: "date",
-  deletedAt: "date",
-  createdBy: "user",
-  lastUpdatedBy: "user"
-};
-function assertOperatorForType(operator, type, context) {
-  const normalized = normalizeOperator(operator, type);
-  const ops = OPERATORS_BY_TYPE[type];
-  if (!ops?.includes(normalized)) {
-    const validList = ops?.length ? ops.join(", ") : "(no operators registered for this type)";
-    const summary = `Operator "${operator}" is not valid for ${context} type "${type}". Valid operators: ${validList}.`;
-    throw new ValidationError(summary, [
-      {
-        path: ["operator"],
-        message: summary
-      }
-    ]);
-  }
-  return normalized;
-}
-var RELATIVE_DATE_UNITS = /* @__PURE__ */ new Set(["days", "weeks", "months", "years"]);
-var RELATIVE_DATE_DIRECTIONS = /* @__PURE__ */ new Set(["past", "future"]);
-function assertRelativeDateValue(rule) {
-  if (rule.operator !== "is_within") return;
-  const v = rule.value;
-  const valid = typeof v === "object" && v !== null && typeof v.amount === "number" && Number.isFinite(v.amount) && v.amount > 0 && typeof v.unit === "string" && RELATIVE_DATE_UNITS.has(v.unit) && typeof v.direction === "string" && RELATIVE_DATE_DIRECTIONS.has(v.direction);
-  if (!valid) {
-    const m = `Operator "is_within" requires a relative-date value { amount: positive number, unit: days|weeks|months|years, direction: past|future }`;
-    throw new ValidationError(m, [{ path: ["value"], message: m }]);
-  }
-}
-function assertDynamicValueForAttribute(rule, attrType) {
-  if (!isDynamicValue(rule.value)) return;
-  const v = rule.value;
-  if (v.dynamic === "actor" && attrType !== "user") {
-    const m = `actor token (@me) is only valid on user attributes, not "${attrType}"`;
-    throw new ValidationError(m, [{ path: ["value"], message: m }]);
-  }
-  if (v.dynamic === "date" && attrType !== "date") {
-    const m = `date token (@today/@now) is only valid on date attributes, not "${attrType}"`;
-    throw new ValidationError(m, [{ path: ["value"], message: m }]);
-  }
-}
-function validateQualifiedRule(rule, context) {
-  const rootAttr = context.attributes.find((a) => a.name === rule.attribute);
-  const systemOps = SYSTEM_FILTER_OPERATORS[rule.attribute];
-  if (!(rootAttr || systemOps)) {
-    throw new ValidationError(`Unknown attribute: ${rule.attribute}`, [
-      { path: ["attribute"], message: `Unknown attribute: ${rule.attribute}` }
-    ]);
-  }
-  if (rule.quantifier !== void 0 && !rule.property) {
-    const m = `quantifier is only valid on qualified edge rules (set "property")`;
-    throw new ValidationError(m, [{ path: ["quantifier"], message: m }]);
-  }
-  if (!rootAttr) {
-    if (rule.property) {
-      throw new ValidationError(`Cannot qualify system attribute "${rule.attribute}"`, [
-        { path: ["property"], message: `"${rule.attribute}" is a system column, not a reference` }
-      ]);
-    }
-    const effectiveType = SYSTEM_ATTRIBUTE_TYPES[rule.attribute] ?? "id";
-    const normalizedOperator = normalizeOperator(
-      rule.operator,
-      effectiveType
-    );
-    if (!systemOps.includes(normalizedOperator)) {
-      const summary = `Operator "${rule.operator}" is not valid for system attribute "${rule.attribute}". Valid operators: ${systemOps.join(", ")}.`;
-      throw new ValidationError(summary, [{ path: ["operator"], message: summary }]);
-    }
-    rule.operator = normalizedOperator;
-    assertRelativeDateValue(rule);
-    return;
-  }
-  if (!rule.property) {
-    assertDynamicValueForAttribute(rule, rootAttr.type);
-    const ops = getAttributeFilterOperators(rootAttr);
-    const normalizedOperator = normalizeOperator(
-      rule.operator,
-      rootAttr.type
-    );
-    if (!ops.includes(normalizedOperator)) {
-      const validList = ops.length ? ops.join(", ") : "(not filterable)";
-      const summary = `Operator "${rule.operator}" is not valid for attribute "${rootAttr.name}". Valid operators: ${validList}.`;
-      throw new ValidationError(summary, [{ path: ["operator"], message: summary }]);
-    }
-    rule.operator = normalizedOperator;
-    assertRelativeDateValue(rule);
-    return;
-  }
-  if (!REFERENCE_TYPES.has(rootAttr.type)) {
-    throw new ValidationError(`Cannot qualify ${rootAttr.type} attribute "${rule.attribute}"`, [
-      { path: ["property"], message: `Attribute "${rule.attribute}" is not a reference type` }
-    ]);
-  }
-  const propSchema = rootAttr.properties;
-  if (!propSchema) {
-    throw new ValidationError(`Attribute "${rule.attribute}" has no qualifyWith schema`, [
-      { path: ["property"], message: `"${rule.attribute}" has no qualifyWith` }
-    ]);
-  }
-  const propDef = propSchema.definitions.find((p) => p.name === rule.property);
-  if (!propDef) {
-    throw new ValidationError(
-      `Property "${rule.property}" not defined on "${rule.attribute}".qualifyWith()`,
-      [{ path: ["property"], message: `Unknown property: ${rule.property}` }]
+function evaluateRule(rule, values, attrByName) {
+  const attr = attrByName.get(rule.attribute);
+  if (!attr) return false;
+  if (rule.property) {
+    const property = resolvePropertyDefinitions(attr).find(
+      (definition) => definition.name === rule.property
     );
+    if (!property) return false;
+    const positiveOperator = normalizeForEdgeRpc(rule.operator);
+    const propertySpec = OPERATOR_SPECS[positiveOperator];
+    if (!propertySpec?.appliesTo.includes(property.type)) return false;
+    const rootValue = values[rule.attribute];
+    const references = Array.isArray(rootValue) ? rootValue : rootValue == null ? [] : [rootValue];
+    const matches = references.some((reference) => {
+      if (typeof reference !== "object" || reference === null) return false;
+      const props = reference.props;
+      if (typeof props !== "object" || props === null) return false;
+      return evaluateNormalizedComparands(
+        propertySpec,
+        property.type,
+        positiveOperator,
+        props[rule.property],
+        rule.value,
+        property
+      );
+    });
+    return (rule.quantifier ?? getOperatorPolarity(rule.operator)) === "none" ? !matches : matches;
   }
-  rule.operator = assertOperatorForType(rule.operator, propDef.type, "property");
-  assertRelativeDateValue(rule);
-}
-
-// src/filters/extract-filter-value.ts
-function extractCurrencyFilterValue(value) {
-  if (typeof value === "number") return value;
-  if (value !== null && typeof value === "object" && "value" in value) {
-    const inner = value.value;
-    return typeof inner === "number" ? inner : null;
-  }
-  return null;
+  const spec = OPERATOR_SPECS[rule.operator];
+  if (!spec) return false;
+  if (!spec.appliesTo.includes(attr.type)) return false;
+  const rawValue = values[rule.attribute];
+  const value = attr.type === "relation" || attr.type === "document" || attr.type === "user" ? normalizeReferenceIds(rawValue) : rawValue;
+  return evaluateNormalizedComparands(spec, attr.type, rule.operator, value, rule.value, attr);
+}
+function evaluateNormalizedComparands(spec, type, operator, storedValue, ruleValue, attribute) {
+  const [normalizedStored, normalizedRule] = normalizeOperatorComparands(
+    type,
+    operator,
+    storedValue,
+    ruleValue
+  );
+  if (type === "phone" && normalizedRule === "" && operator === "contains") return false;
+  if (type === "phone" && normalizedRule === "" && operator === "not_contains") return true;
+  return spec.evaluateInMemory(normalizedStored, normalizedRule, attribute);
+}
+function normalizeOperatorComparands(type, operator, storedValue, ruleValue) {
+  if (type === "date" && (operator === "is" || operator === "is_not")) {
+    return [normalizeUtcCalendarDay(storedValue), normalizeUtcCalendarDay(ruleValue)];
+  }
+  if (type === "phone") return normalizePhoneComparands(storedValue, ruleValue);
+  return [normalizeComparableValue(type, storedValue), normalizeComparableValue(type, ruleValue)];
+}
+function normalizeUtcCalendarDay(value) {
+  if (value instanceof Date)
+    return Number.isNaN(value.getTime()) ? null : value.toISOString().slice(0, 10);
+  if (typeof value !== "string" || value === "") return null;
+  if (/^\d{4}-\d{2}-\d{2}$/.test(value)) return value;
+  const date2 = new Date(value);
+  return Number.isNaN(date2.getTime()) ? null : date2.toISOString().slice(0, 10);
+}
+function normalizePhoneComparands(stored, rule) {
+  const rulePhone = typeof rule === "object" && rule !== null ? rule : { };
+  const ruleCountry = typeof rulePhone.countryCode === "string" ? rulePhone.countryCode : void 0;
+  const normalizeOne = (value) => {
+    const phone2 = typeof value === "object" && value !== null ? value : { phoneNumber: value };
+    if (typeof phone2.phoneNumber !== "string") return null;
+    if (!ruleCountry) return normalizeCountrylessPhoneNumber(phone2.phoneNumber);
+    const country = typeof phone2.countryCode === "string" ? phone2.countryCode : ruleCountry;
+    return `${country}:${normalizePhoneNumber(phone2.phoneNumber, country)}`;
+  };
+  return [normalizeOne(stored), normalizeOne(rule)];
 }
-function extractFilterValue(value) {
-  if (value === null || value === void 0) return null;
-  if (typeof value === "object" && "value" in value) {
-    return value.value ?? null;
+function normalizeComparableValue(type, value) {
+  if (type === "currency") return extractCurrencyFilterValue(value);
+  if (type === "date") {
+    if (value instanceof Date) return Number.isNaN(value.getTime()) ? null : value.toISOString();
+    return value;
   }
   return value;
 }
+function normalizeReferenceIds(value) {
+  const normalizeOne = (candidate) => {
+    if (typeof candidate !== "object" || candidate === null) return candidate;
+    return candidate.id;
+  };
+  return Array.isArray(value) ? value.map(normalizeOne) : normalizeOne(value);
+}
 
 // src/connectors/types.ts
 var CONNECTOR_CALLBACK_PARAM = {
@@ -7317,4 +6909,418 @@ function viewSyncPayload(view) {
   };
 }
 
-export { ALLOWED_PROPERTY_TYPES, ALL_ACTIONS, ALL_SYSTEM_RESOURCES, ATTRIBUTE_FILTER_OPERATORS, AUDIT_ACTIONS, AUDIT_RESOURCE_TYPES, ActivityTabConfig, AgentBuilder, BEHAVIOR_PROPERTIES, BROWSER_PREVIEW_STATUSES, COMPUTED_FUNCTIONS, COMPUTED_FUNCTION_METADATA, COMPUTED_FUNCTION_NAMES, CONNECTOR_CALLBACK_PARAM, CROSS_TYPE_CONVERSIONS, ComputedFormulaCompileError, CustomTabConfig, DB_COLUMN_FIELDS, DEFAULT_AGENT_EXECUTION_CONFIG, DEFAULT_ROLES, DEFAULT_ROLE_DESCRIPTIONS, DEFAULT_ROLE_LABELS, DEFAULT_ROLE_PERMISSIONS, DOCUMENT_SYSTEM_ATTRIBUTES, DetailViewBuilder, DocumentsTabConfig, EMPTY_VALUE_PLACEHOLDER, EmailsTabConfig, FORM_FORBIDDEN_ATTRIBUTE_TYPES, FlagRegistry, FlagService, FormBuilder, FormRegistry, FormRowBuilder, FormStepBuilder, GroupBuilder, IDENTITY_PROPERTIES, LIVE_EVENT_TYPES, LIVE_STREAM_START_CURSOR, ListViewBuilder, ListViewTabConfigBuilder, MAX_PRESET_DEPTH, MEMORY_LIST_VIEW, MEMORY_OBJECT, MEMORY_VIEW, NOTIFICATION_INBOX_STATES, NOTIFICATION_KINDS, NOTIFICATION_PRIORITIES, NOTIFICATION_SENSITIVITIES, NOTIFICATION_TYPES_V1, NOTIFICATION_TYPE_AGENT_QUESTION_REQUESTED, NOTIFICATION_TYPE_AGENT_SESSION_COMPLETED, NOTIFICATION_TYPE_AGENT_SESSION_FAILED, NOTIFICATION_TYPE_AGENT_SESSION_TIMEOUT, NOTIFICATION_TYPE_AGENT_SESSION_WAITING_HUMAN, NOTIFICATION_TYPE_AGENT_TASK_ASSIGNED, NOTIFICATION_WORK_STATES, NO_VALUE_OPERATORS, NoopGeocodingAdapter, OPERATORS_BY_TYPE, OPERATOR_SPECS, ObjectBuilder, PRESENTATION_PROPERTIES, QUALIFIED_SEPARATOR, RELATION_TARGET_ANY, RESERVED_ATTRIBUTE_NAMES, RESERVED_OBJECT_NAMES, RelationGroupBuilder, RichtextTabConfig, SKILL_LIST_VIEW, SKILL_OBJECT, SKILL_VIEW, STANDARD_SCHEMA_VENDOR, SYNONYM_ALIASES, SYSTEM_ATTRIBUTES, SYSTEM_ATTRIBUTE_I18N_KEYS, SYSTEM_FIELD_NAMES, SYSTEM_RESOURCES, SYSTEM_RESOURCE_LABELS, TabBuilder, TableTabConfig, USER_STATUSES, accessLevelToActions, actionsToAccessLevel, agent, applyPipes, applyRelationProps, assertAcyclicComputedDependencies, assertLiveStreamCursor, booleanFlag, buildPropertySchema, buildQualifiedAttribute, canonicalStringify, checkbox, compareLiveStreamCursors, compileComputedFormula, compileRollupAttribute, createFlagRegistry, createFlagService, createStandardSchemaProps, currency, currentActor, date, dateValueStart, detailView, document, evaluateComputedAst, evaluateComputedFormula, evaluateComputedFormulaWithResult, evaluateFilterState, extractAttributeNames, extractCurrencyFilterValue, extractFilterValue, extractValueRefs, flagRegistry, form, formRegistry, formatAttributeValue, formatComputedResult, formatLocationValue, formula, generateDefaultDetailView, generateDefaultListView, getActiveTab, getAttributeCapabilities, getAttributeFilterOperators, getErrorMessage, getLiveProtocolPayloadChannel, getOperatorPolarity, getRollupFilterOperators2 as getRollupFilterOperators, getSlotFieldTargets, getSystemAttributeI18nKey, getSystemAttributeList, getUserDisplayName, group, hasOptions, inferInverseCardinality, inferRollupReturnType, isAttributeFilterable, isAttributeGroupable, isAttributeKanbanGroupable, isAttributeSearchable, isAttributeSortable2 as isAttributeSortable, isBilateralRelation, isComputedFunctionName, isDateRangeValue, isDefaultRole, isDetailView, isDocumentAttribute, isDynamicValue, isEmptyObject, isFieldGroup, isFormDefinition, isFormFieldsRow, isFormFreeFieldRef, isFormHeadingRow, isFormSeparatorRow, isFormSlotFieldRef, isFormTextRow, isLabelExpression, isListView, isLiveErrorPayload, isLiveEventEnvelope, isLiveEventPayload, isLiveEventPayloadForType, isLiveEventType, isLiveGapPayload, isLiveReplayCompletePayload, isLiveStreamCursor, isManagedSystemAttribute, isNoValueOperator, isNotEmpty, isPlainRecord, isRelationGroup, isStandardSchema, isUniversalRelation, jsonFlag, listView, liveChannelKey, location, matchesMime, multiselect, normalizeDateValue, normalizeForEdgeRpc, normalizeOperator, now, number, numberFlag, object, parseLiveChannelKey, parseLiveSubscribePayload, parseLiveUnsubscribePayload, parseQualifiedAttribute, phone, registry, relation, relationGroup, renderLabelExpression, resetViewToDefault, resolvePropertyDefinitions, richtext, rollup, rollupToFormulaExpression, select, status, stringFlag, text, toMultiValueOperator, toUndefinedIfEmpty, today, user, validateAttributeName, validateQualifiedRule, viewRegistry, viewSyncPayload };
+// src/types/schema-plan.ts
+function hasDestructiveEntries(plan) {
+  const { attributeRemovals, objectRemovals, renames } = plan.destructive;
+  return attributeRemovals.length > 0 || objectRemovals.length > 0 || renames.length > 0;
+}
+var SCHEMA_PLAN_LIMITS = {
+  objectAdditions: 20,
+  totalMutations: 500,
+  serializedBytes: 512 * 1024
+};
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+var attributeTypeSchema = z.enum([
+  "text",
+  "richtext",
+  "number",
+  "checkbox",
+  "date",
+  "phone",
+  "currency",
+  "status",
+  "location",
+  "select",
+  "multiselect",
+  "user",
+  "relation",
+  "formula",
+  "rollup",
+  "document"
+]).describe(
+  'The attribute\'s data type. Determines which keys `config` accepts and requires: `status`/`select`/`multiselect` need a non-empty `options` array (each `status` option carrying its own `group`); `relation` needs `targets` (non-empty) and `cardinality` ("one" or "many"); `formula` needs `expression` and `returnType`; `rollup` needs `targetAttribute` and `function`. Every other type accepts only the shared presentation keys (`placeholder`, `defaultValue`, `icon`, ...) plus a few type-specific optionals (e.g. `number.decimals`, `date.dateFormat`). An attribute\'s type can never be changed later through this tool \u2014 only through a code migration \u2014 so pick it correctly now.'
+);
+var attributeNameSchema = z.string().min(1).superRefine((name, ctx) => {
+  try {
+    validateAttributeName(name);
+  } catch (error) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: errorMessage(error) });
+  }
+}).describe(
+  'The attribute\'s machine name \u2014 the record\'s field key, and what `{{ name }}` refers to in a labelExpression. Must be a valid identifier: starts with a letter or underscore, then only letters/digits/underscores ("montantHt", "first_name", "FIRST_NAME" are valid; "first-name", "first name", "123name" are not). Max 63 characters. Cannot be a name reserved by the record shape itself (id, createdAt, updatedAt, createdBy, lastUpdatedBy, objectId, label, embeddingText, values, metadata, deletedAt, deletedBy, schemaVersion).'
+);
+var objectNameSchema = z.string().min(1).superRefine((name, ctx) => {
+  if (RESERVED_OBJECT_NAMES.includes(name)) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `"${name}" is a reserved object name (${RESERVED_OBJECT_NAMES.join(", ")}) and cannot be used for a new object.`
+    });
+  }
+  try {
+    validateObjectName(name);
+  } catch (error) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: errorMessage(error) });
+  }
+}).describe(
+  `The new object's machine name: kebab-case slug, lowercase letters/digits/hyphens only, starting with a letter ("products", "user-profiles", "order-items" are valid; "Products", "userProfiles", "user_profiles" are not). Max 63 characters. Cannot be a name the platform reserves for its own system objects, and cannot already exist.`
+);
+function withConfigCheck(schema) {
+  return schema.superRefine((attribute, ctx) => {
+    try {
+      const parsedConfig = parseAttributeConfigForCreate(attribute.type, {
+        ...attribute.config ?? {},
+        description: attribute.description
+      });
+      const unknownKeys = Object.keys(attribute.config ?? {}).filter(
+        (key) => !Object.hasOwn(parsedConfig, key)
+      );
+      if (unknownKeys.length > 0) {
+        ctx.addIssue({
+          code: "unrecognized_keys",
+          keys: unknownKeys,
+          path: ["config"],
+          message: `Unrecognized attribute config key${unknownKeys.length === 1 ? "" : "s"}: ${unknownKeys.join(", ")}`
+        });
+      }
+    } catch (error) {
+      if (error instanceof ValidationError) {
+        for (const issue of error.errors) {
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: [
+              "config",
+              ...issue.path.map((segment) => /^\d+$/.test(segment) ? Number(segment) : segment)
+            ],
+            message: `Config for type "${attribute.type}" is invalid or incomplete: ${issue.message}`
+          });
+        }
+        return;
+      }
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["config"],
+        message: `Config for type "${attribute.type}" is invalid or incomplete: ${errorMessage(error)}`
+      });
+    }
+  });
+}
+var plannedAttributeBaseSchema = z.object({
+  objectName: z.string().min(1).describe(
+    "Name of the existing (or, elsewhere in the same plan, newly created) object this attribute is added to. Ignored for an attribute declared inline in `additive.objects[].attributes` \u2014 there the parent object's own `name` is used instead."
+  ),
+  name: attributeNameSchema,
+  label: z.string().min(1).max(128).describe("Human-readable display label shown in the UI. 1-128 characters, cannot be empty."),
+  type: attributeTypeSchema,
+  config: z.record(z.string(), z.unknown()).optional().describe(
+    'Type-specific configuration; required keys depend on `type` (see `type`\'s description). Shared optional keys on every type: `placeholder`, `defaultValue`, `icon`, `order`, `hidden`, `archived`, `deprecated`, `metadata`. Per-type keys: `text` \u2014 `multiline`, `minLength`, `maxLength`, `pattern`, `format` ("email"|"url"|"slug"); `number` \u2014 `renderAs` ("number"|"rating"), `min`, `max`, `unit`, `decimals`; `date` \u2014 `dateFormat`, `minDate`, `maxDate`, `includeTime`, `endDate`, `timeFormat` ("12h"|"24h"); `phone` \u2014 `defaultCountryCode` (3-letter); `currency` \u2014 `defaultCurrency`, `allowedCurrencies`, `allowNegative`; `status`/`select`/`multiselect` \u2014 `options` (REQUIRED, non-empty array of `{ value, label, color }`, unique `value`s; for `status` every OPTION also carries `group` as idle|in_progress|finished \u2014 `group` belongs on each option, never on `config` itself; select/multiselect accept `renderAs: "badges"`); `location` \u2014 `granularity`, `defaultCountry`, `allowedCountries`; `user` \u2014 `types` ("user"|"agent"), `multiple`; `relation` \u2014 `targets` (REQUIRED, non-empty array of `{ object }`) and `cardinality` (REQUIRED, "one"|"many"); `formula` \u2014 `expression` (REQUIRED formula string) and `returnType` (REQUIRED); `rollup` \u2014 `targetAttribute` (REQUIRED) and `function` (REQUIRED, e.g. "sum"|"avg"|"count"); `document` \u2014 `properties`, `accepts`, `maxFileSize`. Omit entirely for `richtext`/`checkbox`, which take no type-specific keys.'
+  ),
+  required: z.boolean().optional().describe(
+    "Whether the attribute must have a value on every record. Defaults to false (optional)."
+  ),
+  description: z.string().optional().describe("Help text shown under the field in the UI. Not the same as the plan's `summary`.")
+}).strict();
+var plannedAttributeSchema = withConfigCheck(plannedAttributeBaseSchema);
+var plannedInlineAttributeSchema = withConfigCheck(
+  plannedAttributeBaseSchema.omit({ objectName: true })
+);
+var plannedObjectSchema = z.object({
+  name: objectNameSchema,
+  label: z.string().min(1).describe('Human-readable singular display label (e.g. "Devis").'),
+  pluralLabel: z.string().optional().describe(
+    'Human-readable plural display label (e.g. "Devis"/"Invoices"). Defaults from `label` if omitted.'
+  ),
+  description: z.string().optional().describe("Help text describing what this object represents."),
+  icon: iconNameSchema.describe(
+    "Required icon name for the object. Must be a catalogue value \u2014 call `search_icons` and use a name it returns verbatim. A name that is not in the catalogue is rejected without any hint as to what would have worked, so never guess one."
+  ),
+  labelExpression: labelExpressionSchema.describe(
+    'Template used to render a human-readable label for every record of this object \u2014 e.g. shown in relations, search results, and breadcrumbs. MUST contain at least one `{{ attributeName }}` interpolation referencing an attribute this object will actually have (either declared in this same `attributes` array, or an existing attribute if this is an update) \u2014 a plain string with no `{{ }}` at all (e.g. "Devis") is rejected. Interpolations cannot be empty (`{{ }}` is rejected) and only these pipes are allowed: UPPER, LOWER, capitalize, trim, prefix:"...", suffix:"...", wrap:"..." "...", default:"...". `{{ a || b }}` falls back to `b` when `a` is empty. Examples: "{{ firstName }} {{ lastName }}", "{{ numero | UPPER }}", "{{ name || reference }}".'
+  ),
+  // Inline attributes get the SAME validation as attributes added to an
+  // existing object, minus `objectName` which the parent supplies. Anything
+  // weaker would let an agent slip a typeless attribute into a new object
+  // while the strict path above rejects the identical mistake.
+  attributes: z.array(plannedInlineAttributeSchema).default([]).describe(
+    "Attributes to create on this new object, inline. Same rules as a standalone entry in `additive.attributes`, minus `objectName` (implied by this object). At least one attribute referenced by `labelExpression` should be included here."
+  )
+}).strict();
+var destructiveSchema = z.object({
+  attributeRemovals: z.array(
+    z.object({
+      objectName: z.string().min(1).describe("Object the attribute is removed from."),
+      attributeName: z.string().min(1).describe(
+        "Attribute to delete, together with every record's stored value for it. Must not be a system (code-declared) attribute, and must not be referenced by the object's own `labelExpression` or `embeddingExpression` \u2014 update those first."
+      )
+    }).strict()
+  ).default([]).describe(
+    "Attributes to permanently delete. Irreversible: record values for the attribute are purged."
+  ),
+  objectRemovals: z.array(
+    z.object({
+      objectName: z.string().min(1).describe(
+        "Object to delete entirely, together with all its records. Must not be a system (code-declared) object, and must not still be targeted by a `relation` attribute on another object \u2014 retarget or remove that relation first."
+      )
+    }).strict()
+  ).default([]).describe("Objects to permanently delete, records included. Irreversible."),
+  renames: z.array(
+    z.object({
+      objectName: z.string().min(1).describe("Object the renamed attribute belongs to."),
+      from: z.string().min(1).describe(
+        "Current attribute name. Must already exist and not be a system attribute."
+      ),
+      to: attributeNameSchema.describe(
+        "New attribute name \u2014 same identifier rules as any attribute `name` (see `name` on a planned attribute), and must not collide with another name already on the object, including one added elsewhere in this same plan."
+      )
+    }).strict()
+  ).default([]).describe(
+    "Attribute renames. Every reference to the old name (labelExpression, views, formulas) must be updated separately \u2014 a rename does not follow references automatically."
+  )
+}).strict().default({ attributeRemovals: [], objectRemovals: [], renames: [] });
+var planSummarySchema = z.string().min(1).describe(
+  "One or two plain-language sentences describing the change and why, shown to the human who approves or rejects the plan \u2014 this is the only free-text context they see before deciding. If `destructive` is non-empty, say plainly what will be lost (e.g. 'deletes the \"ancienMontant\" column and its data on every devis'). Do not restate the raw plan \u2014 explain intent."
+);
+var CANONICAL_CONFIG_DESCRIPTION = "The COMPLETE config this view should end up with \u2014 not a patch. Copy the baseline returned by get_default_view and edit it, preserving every tab and setting you are not changing: anything you omit is dropped. To change the columns shown, set `tabs[].columns` (an array of attribute names) \u2014 there is no top-level `columns` on either view type. For a detail view's side panel, set `sidePanel.attributes`. Every attribute name listed must already exist on the object, or be created earlier in this same plan. ONE EXCEPTION to omit-is-dropped: a tab with `type: \"custom\"` renders a component belonging to the application, which you cannot describe or recreate. Copy every such tab through from the baseline exactly as it came, `name`, `component` and `props` untouched \u2014 dropping one, inventing one, or altering any of those three is rejected rather than applied (`name` is the tab's address in links, not its wording). Its `label` and `icon` you may change.";
+var BASELINE_TOKEN_DESCRIPTION = "Opaque token returned by get_default_view alongside the baseline you edited. REQUIRED when the object already exists \u2014 it proves you authored against the baseline that is still current. Must be OMITTED when this plan creates the object, which has no baseline yet.";
+var viewTargetObjectNameSchema = z.string().min(1).describe(
+  "Name of the object whose default view of this type is replaced. Not a view name \u2014 a plan can only replace an object's deterministic default view, never create a view or target a non-default one."
+);
+var proposedDefaultViewTargetSchema = z.discriminatedUnion("viewType", [
+  z.object({
+    objectName: viewTargetObjectNameSchema,
+    viewType: z.literal("list").describe("Targets the object's default list view (the grid)."),
+    canonicalConfig: listViewConfigSchema.describe(CANONICAL_CONFIG_DESCRIPTION),
+    baselineToken: z.string().min(1).optional().describe(BASELINE_TOKEN_DESCRIPTION)
+  }).strict(),
+  z.object({
+    objectName: viewTargetObjectNameSchema,
+    viewType: z.literal("detail").describe("Targets the object's default detail view (the single-record view)."),
+    canonicalConfig: detailViewConfigSchema.describe(CANONICAL_CONFIG_DESCRIPTION),
+    baselineToken: z.string().min(1).optional().describe(BASELINE_TOKEN_DESCRIPTION)
+  }).strict()
+]);
+var canonicalHashSchema = z.string().regex(/^[0-9a-f]{64}$/, "Expected a lowercase SHA-256 hash");
+var persistedBaselineFields = {
+  baseConfigHash: canonicalHashSchema.nullable(),
+  targetConfigHash: canonicalHashSchema,
+  baselineOrigin: z.enum(["persisted", "generated", "absent"])
+};
+var persistedDefaultViewTargetSchema = z.discriminatedUnion("viewType", [
+  z.object({
+    objectName: z.string().min(1),
+    viewType: z.literal("list"),
+    canonicalConfig: listViewConfigSchema,
+    ...persistedBaselineFields
+  }).strict(),
+  z.object({
+    objectName: z.string().min(1),
+    viewType: z.literal("detail"),
+    canonicalConfig: detailViewConfigSchema,
+    ...persistedBaselineFields
+  }).strict()
+]).superRefine((target, ctx) => {
+  const requiresHash = target.baselineOrigin !== "absent";
+  if (requiresHash === (target.baseConfigHash !== null)) return;
+  ctx.addIssue({
+    code: "custom",
+    path: ["baseConfigHash"],
+    message: requiresHash ? `A ${target.baselineOrigin} baseline requires baseConfigHash` : "An absent baseline requires baseConfigHash to be null"
+  });
+});
+function buildAdditiveSchema(viewTargetSchema) {
+  return z.object({
+    objects: z.array(plannedObjectSchema).default([]).describe("New objects to create, with their attributes inline."),
+    attributes: z.array(plannedAttributeSchema).default([]).describe("Attributes to add to existing or same-plan objects."),
+    viewUpdates: z.array(viewTargetSchema).default([]).describe("Complete target configs for deterministic default views; never view names.")
+  }).strict().default({ objects: [], attributes: [], viewUpdates: [] });
+}
+function findJsonSafetyIssue(value, path = [], activeObjects = /* @__PURE__ */ new WeakSet()) {
+  if (value === null || typeof value === "string" || typeof value === "boolean") return null;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      return { path, message: "Plan input contains a non-finite number" };
+    }
+    return null;
+  }
+  if (typeof value !== "object") {
+    return { path, message: "Plan input must contain only JSON-safe values" };
+  }
+  if (activeObjects.has(value)) {
+    return { path, message: "Plan input cannot contain circular references" };
+  }
+  if (Array.isArray(value)) {
+    activeObjects.add(value);
+    for (const key of Reflect.ownKeys(value)) {
+      if (key === "length") continue;
+      if (typeof key === "symbol" || !/^(0|[1-9]\d*)$/.test(key)) {
+        activeObjects.delete(value);
+        return {
+          path: [...path, key],
+          message: "Plan input arrays cannot contain non-index JSON properties"
+        };
+      }
+    }
+    for (let index = 0; index < value.length; index++) {
+      if (!Object.hasOwn(value, index)) {
+        activeObjects.delete(value);
+        return {
+          path: [...path, index],
+          message: "Plan input cannot contain sparse arrays"
+        };
+      }
+      const issue = findJsonSafetyIssue(value[index], [...path, index], activeObjects);
+      if (issue) {
+        activeObjects.delete(value);
+        return issue;
+      }
+    }
+    activeObjects.delete(value);
+    return null;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) {
+    return { path, message: "Plan input must contain only plain JSON objects" };
+  }
+  activeObjects.add(value);
+  const record = value;
+  const keys = Reflect.ownKeys(record);
+  for (const key of keys) {
+    const descriptor = Object.getOwnPropertyDescriptor(record, key);
+    if (typeof key === "symbol" || !(descriptor?.enumerable && "value" in descriptor)) {
+      activeObjects.delete(value);
+      return {
+        path: [...path, key],
+        message: "Plan input objects must contain enumerable JSON data properties only"
+      };
+    }
+  }
+  for (const key of keys.sort()) {
+    const issue = findJsonSafetyIssue(record[key], [...path, key], activeObjects);
+    if (issue) {
+      activeObjects.delete(value);
+      return issue;
+    }
+  }
+  activeObjects.delete(value);
+  return null;
+}
+function mutationPaths(plan) {
+  const paths = [];
+  plan.additive.objects.forEach((object2, objectIndex) => {
+    paths.push(["additive", "objects", objectIndex]);
+    object2.attributes.forEach((_attribute, attributeIndex) => {
+      paths.push(["additive", "objects", objectIndex, "attributes", attributeIndex]);
+    });
+  });
+  plan.additive.attributes.forEach((_attribute, index) => {
+    paths.push(["additive", "attributes", index]);
+  });
+  plan.additive.viewUpdates.forEach((_target, index) => {
+    paths.push(["additive", "viewUpdates", index]);
+  });
+  plan.destructive.attributeRemovals.forEach((_removal, index) => {
+    paths.push(["destructive", "attributeRemovals", index]);
+  });
+  plan.destructive.objectRemovals.forEach((_removal, index) => {
+    paths.push(["destructive", "objectRemovals", index]);
+  });
+  plan.destructive.renames.forEach((_rename, index) => {
+    paths.push(["destructive", "renames", index]);
+  });
+  return paths;
+}
+function addPlanLimitIssues(plan, ctx) {
+  if (plan.additive.objects.length > SCHEMA_PLAN_LIMITS.objectAdditions) {
+    ctx.addIssue({
+      code: "too_big",
+      origin: "array",
+      maximum: SCHEMA_PLAN_LIMITS.objectAdditions,
+      inclusive: true,
+      path: ["additive", "objects", SCHEMA_PLAN_LIMITS.objectAdditions],
+      message: `A schema plan can add at most ${SCHEMA_PLAN_LIMITS.objectAdditions} objects`
+    });
+  }
+  const paths = mutationPaths(plan);
+  if (paths.length > SCHEMA_PLAN_LIMITS.totalMutations) {
+    ctx.addIssue({
+      code: "too_big",
+      origin: "array",
+      maximum: SCHEMA_PLAN_LIMITS.totalMutations,
+      inclusive: true,
+      path: paths[SCHEMA_PLAN_LIMITS.totalMutations],
+      message: `A schema plan can contain at most ${SCHEMA_PLAN_LIMITS.totalMutations} mutations; received ${paths.length}`
+    });
+  }
+}
+function boundSerializedPlanInput(input, ctx) {
+  const jsonSafetyIssue = findJsonSafetyIssue(input);
+  if (jsonSafetyIssue) {
+    ctx.addIssue({
+      code: "custom",
+      path: jsonSafetyIssue.path,
+      message: jsonSafetyIssue.message
+    });
+    return z.NEVER;
+  }
+  const serializedBytes = new TextEncoder().encode(canonicalStringify(input)).byteLength;
+  if (serializedBytes > SCHEMA_PLAN_LIMITS.serializedBytes) {
+    ctx.addIssue({
+      code: "too_big",
+      origin: "string",
+      maximum: SCHEMA_PLAN_LIMITS.serializedBytes,
+      inclusive: true,
+      path: [],
+      message: `A schema plan can serialize to at most ${SCHEMA_PLAN_LIMITS.serializedBytes} UTF-8 bytes; received ${serializedBytes}`
+    });
+    return z.NEVER;
+  }
+  return input;
+}
+var proposedAdditiveSchema = buildAdditiveSchema(proposedDefaultViewTargetSchema);
+var persistedAdditiveSchema = buildAdditiveSchema(persistedDefaultViewTargetSchema);
+var structuralSchemaPlanSchema = z.object({
+  schemaPlanVersion: z.literal(2).describe("Required proposal contract version."),
+  summary: planSummarySchema,
+  additive: proposedAdditiveSchema,
+  destructive: destructiveSchema
+}).strict().superRefine((plan, ctx) => {
+  const newObjectNames = new Set(plan.additive.objects.map((object2) => object2.name));
+  plan.additive.viewUpdates.forEach((target, index) => {
+    const path = ["additive", "viewUpdates", index, "baselineToken"];
+    if (newObjectNames.has(target.objectName)) {
+      if (target.baselineToken !== void 0) {
+        ctx.addIssue({
+          code: "custom",
+          path,
+          message: "A view target for an object added by this plan must not include baselineToken"
+        });
+      }
+      return;
+    }
+    if (target.baselineToken === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path,
+        message: "A view target for an existing object requires baselineToken"
+      });
+    }
+  });
+  addPlanLimitIssues(plan, ctx);
+});
+var schemaPlanSchema = Object.assign(
+  z.preprocess(boundSerializedPlanInput, structuralSchemaPlanSchema),
+  { shape: structuralSchemaPlanSchema.shape }
+);
+var structuralPersistedSchemaPlanSchema = z.object({
+  schemaPlanVersion: z.literal(2),
+  summary: planSummarySchema,
+  additive: persistedAdditiveSchema,
+  destructive: destructiveSchema
+}).strict().superRefine(addPlanLimitIssues);
+var persistedSchemaPlanSchema = z.preprocess(
+  boundSerializedPlanInput,
+  structuralPersistedSchemaPlanSchema
+);
+
+export { ALLOWED_PROPERTY_TYPES, ALL_ACTIONS, ALL_SYSTEM_RESOURCES, AUDIT_ACTIONS, AUDIT_RESOURCE_TYPES, ActivityTabConfig, AgentBuilder, BEHAVIOR_PROPERTIES, BROWSER_PREVIEW_STATUSES, BYTE_UNIT_LABELS, COMPUTED_FUNCTIONS, COMPUTED_FUNCTION_METADATA, COMPUTED_FUNCTION_NAMES, CONNECTOR_CALLBACK_PARAM, ComputedFormulaCompileError, CustomTabConfig, DB_COLUMN_FIELDS, DEFAULT_AGENT_EXECUTION_CONFIG, DEFAULT_APPROVAL_POLICY, DEFAULT_ROLES, DEFAULT_ROLE_DESCRIPTIONS, DEFAULT_ROLE_LABELS, DEFAULT_ROLE_PERMISSIONS, DOCUMENT_SYSTEM_ATTRIBUTES, DetailViewBuilder, DocumentsTabConfig, EMPTY_VALUE_PLACEHOLDER, ESTIMATED_COUNT_CAP, EmailsTabConfig, FORM_FORBIDDEN_ATTRIBUTE_TYPES, FlagRegistry, FlagService, FormBuilder, FormRegistry, FormRowBuilder, FormStepBuilder, GroupBuilder, IDENTITY_PROPERTIES, LIVE_EVENT_TYPES, LIVE_STREAM_START_CURSOR, ListViewBuilder, ListViewTabConfigBuilder, MAX_PRESET_DEPTH, MAX_TODOS, MAX_TODO_DESCRIPTION_CHARS, MAX_TODO_ID_CHARS, MAX_TODO_RESULT_CHARS, MEMORY_LIST_VIEW, MEMORY_OBJECT, MEMORY_VIEW, NOTIFICATION_INBOX_STATES, NOTIFICATION_KINDS, NOTIFICATION_PRIORITIES, NOTIFICATION_SENSITIVITIES, NOTIFICATION_TYPES_V1, NOTIFICATION_TYPE_AGENT_QUESTION_REQUESTED, NOTIFICATION_TYPE_AGENT_SESSION_COMPLETED, NOTIFICATION_TYPE_AGENT_SESSION_FAILED, NOTIFICATION_TYPE_AGENT_SESSION_TIMEOUT, NOTIFICATION_TYPE_AGENT_SESSION_WAITING_HUMAN, NOTIFICATION_TYPE_AGENT_TASK_ASSIGNED, NOTIFICATION_WORK_STATES, NoopGeocodingAdapter, OPERATOR_SPECS, ObjectBuilder, PRESENTATION_PROPERTIES, QUALIFIED_SEPARATOR, RECORD_CREATOR_ROOT_ACTOR_METADATA_KEY, RELATION_TARGET_ANY, RelationGroupBuilder, RichtextTabConfig, SCHEMA_PLAN_LIMITS, SESSION_TERMINAL_STATUSES, SKILL_LIST_VIEW, SKILL_OBJECT, SKILL_VIEW, STANDARD_SCHEMA_VENDOR, SYSTEM_RESOURCES, SYSTEM_RESOURCE_LABELS, TODO_PLAN_STATUSES, TODO_STATUSES, TabBuilder, TableTabConfig, USER_STATUSES, accessLevelToActions, actionsToAccessLevel, agent, agentDisplayName, applyPipes, applyRelationProps, assertAcyclicComputedDependencies, assertLiveStreamCursor, booleanFlag, buildPropertySchema, buildQualifiedAttribute, canonicalStringify, checkbox, compareLiveStreamCursors, compileComputedFormula, compileRollupAttribute, computeByteMagnitude, createFlagRegistry, createFlagService, createStandardSchemaProps, currency, date, dateValueStart, destructiveSchema, detailView, document, evaluateComputedAst, evaluateComputedFormula, evaluateComputedFormulaWithResult, evaluateFilterState, evaluateRecordFilterState, extractAttributeNames, extractCurrencyFilterValue, extractFilterValue, extractValueRefs, flagRegistry, form, formRegistry, formatAttributeValue, formatByteSize, formatComputedResult, formatLocationValue, formula, generateDefaultDetailView, generateDefaultListView, getActiveTab, getErrorMessage, getLiveProtocolPayloadChannel, getOperatorPolarity, getRecordCreatorPrincipalId, getSlotFieldTargets, getUserDisplayName, group, hasDestructiveEntries, hasOptions, inferInverseCardinality, inferRollupReturnType, isAttributeSortable2 as isAttributeSortable, isBilateralRelation, isCheckboxEquality, isComputedFunctionName, isDateRangeValue, isDefaultRole, isDetailView, isDocumentAttribute, isEmptyObject, isFieldGroup, isFormDefinition, isFormFieldsRow, isFormFreeFieldRef, isFormHeadingRow, isFormSeparatorRow, isFormSlotFieldRef, isFormTextRow, isLabelExpression, isListView, isLiveErrorPayload, isLiveEventEnvelope, isLiveEventPayload, isLiveEventPayloadForType, isLiveEventType, isLiveGapPayload, isLiveReplayCompletePayload, isLiveStreamCursor, isNotEmpty, isPlainRecord, isRelationGroup, isStandardSchema, isTerminalSessionStatus, isUniversalRelation, jsonFlag, listView, liveChannelKey, location, matchesAccepts, multiselect, normalizeDateValue, normalizeForEdgeRpc, number, numberFlag, object, parseLiveChannelKey, parseLiveSubscribePayload, parseLiveUnsubscribePayload, parseQualifiedAttribute, persistedDefaultViewTargetSchema, persistedSchemaPlanSchema, phone, plannedAttributeSchema, plannedInlineAttributeSchema, plannedObjectSchema, proposedDefaultViewTargetSchema, registry, relation, relationGroup, renderLabelExpression, resetViewToDefault, resolvePropertyDefinitions, richtext, rollup, rollupToFormulaExpression, schemaPlanSchema, select, status, stringFlag, text, toMultiValueOperator, toUndefinedIfEmpty, user, validateAttributeName, validateLabelExpression, validateObjectName, viewRegistry, viewStateKey, viewSyncPayload };