@stndrds/schema 1.0.0-alpha.281 → 1.0.0-alpha.282

package/dist/{all-BVp3k9Hi.d.ts → all-C3EaFLCU.d.ts}

@@ -1,8 +1,8 @@
-import './types-DYYFto8d.js';
+import './types-DqYz8Iv_.js';
 import './validation/core/index.js';
-import { D as DetailViewConfig, L as ListViewConfig, V as ViewType, a as ViewConfig } from './index-TMlrIKAY.js';
+import { D as DetailViewConfig, L as ListViewConfig, V as ViewType, a as ViewConfig } from './index-Br7koyHF.js';
 import { z } from 'zod';
-import './helpers-DyoPqiSz.js';
+import './helpers-BNr-Dppk.js';
 
 declare const SCHEMA_LIMITS: {
     readonly attributesPerObject: 300;
@@ -13,6 +13,7 @@ declare const SCHEMA_LIMITS: {
     readonly columnsPerTab: 50;
     readonly optionsPerAttribute: 200;
     readonly sidePanelAttributes: 100;
+    readonly sidePanelPanes: 20;
     readonly filterRulesPerTab: 50;
     readonly sortsPerTab: 20;
     readonly emailAttributesPerTab: 30;

package/dist/{all-CnIU2anT.d.mts → all-CQMswOrw.d.mts}

@@ -1,8 +1,8 @@
-import './types-DHqXzkgW.mjs';
+import './types-80c2rOUZ.mjs';
 import './validation/core/index.mjs';
-import { D as DetailViewConfig, L as ListViewConfig, V as ViewType, a as ViewConfig } from './index-DWoqObyG.mjs';
+import { D as DetailViewConfig, L as ListViewConfig, V as ViewType, a as ViewConfig } from './index-D9XBjFnu.mjs';
 import { z } from 'zod';
-import './helpers-BiABdSxK.mjs';
+import './helpers-CfEOUBmB.mjs';
 
 declare const SCHEMA_LIMITS: {
     readonly attributesPerObject: 300;
@@ -13,6 +13,7 @@ declare const SCHEMA_LIMITS: {
     readonly columnsPerTab: 50;
     readonly optionsPerAttribute: 200;
     readonly sidePanelAttributes: 100;
+    readonly sidePanelPanes: 20;
     readonly filterRulesPerTab: 50;
     readonly sortsPerTab: 20;
     readonly emailAttributesPerTab: 30;

package/dist/{attributes-D8eHv5Kf.d.ts → attributes-CU871AfG.d.ts}

@@ -36,22 +36,11 @@ type ComputedValueType = {
     kind: "collection";
     itemType: "text" | "number" | "boolean" | "date" | "select";
 };
-type ComputedStateStatus = "pending" | "fresh" | "stale" | "failed";
 interface ComputedOptionsSource {
     objectName: string;
     attributeName: string;
     attributeId?: string;
 }
-interface ComputedAttributeState {
-    attributeName: string;
-    status: ComputedStateStatus;
-    computedAt: Date | null;
-    staleSince: Date | null;
-    dependenciesHash: string | null;
-    jobId: string | null;
-    error: string | null;
-    updatedAt: Date;
-}
 type ComputedDependency = {
     kind: "local";
     attributeName: string;
@@ -530,6 +519,17 @@ interface RollupAttribute extends Omit<BaseAttribute<never>, "defaultValue" | "r
      * Used when function="original" to render values as the target type
      */
     targetAttributeType?: AttributeType;
+    /**
+     * Cached currency code of a currency target, from its `defaultCurrency`
+     * (#2644). The stored rollup value stays a bare number; this is the
+     * schema-derived channel that lets a single-code sum/avg render with its
+     * symbol. Absent → the value renders bare, exactly as before.
+     *
+     * Named for what it holds — an ISO 4217 CODE — rather than the siblings'
+     * `targetAttribute*` prefix: `targetAttributeCurrency` would read as a
+     * `Currency` value, which this deliberately is not.
+     */
+    targetCurrencyCode?: CurrencyCode;
     /**
      * Cached options from target attribute (for select/status/multiselect display)
      * Required when function="original" and target is a select-like type
@@ -580,4 +580,4 @@ declare function isAttributeSortable(attr: {
     type: AttributeType;
 }): boolean;
 
-export { type NumberUnit as $, type Attribute as A, type BilateralConfig as B, type CurrencyAttribute as C, type DateAttribute as D, type UserReferenceType as E, type FormulaAttribute as F, type AttributeGroup as G, type BaseAttribute as H, type ComputedFieldKind as I, type ComputedFormulaBinaryNode as J, type ComputedFormulaBinaryOperator as K, type LocationAttribute as L, type MultiRelationAttribute as M, type NumberAttribute as N, type Option as O, type PhoneAttribute as P, type ComputedFormulaCallNode as Q, type RelationAttribute as R, type SingleRelationAttribute as S, type TextAttribute as T, type UserAttribute as U, type ComputedFormulaLiteralNode as V, ComputedFormulaParseError as W, type ComputedFormulaPathNode as X, type ComputedStateStatus as Y, type DateFormat as Z, type DateValue as _, type RichtextAttribute as a, type OptionPropertyAttribute as a0, type PropertyType as a1, RELATION_TARGET_ANY as a2, type RichTextAttribute as a3, type StatusGroup as a4, hasOptions as a5, inferInverseCardinality as a6, isAttributeSortable as a7, isBilateralRelation as a8, isUniversalRelation as a9, parseComputedFormula as aa, resolvePropertyDefinitions as ab, type MultiselectAttribute as b, type SelectAttribute as c, type StatusAttribute as d, type RollupAttribute as e, type AttributeType as f, type CheckboxAttribute as g, type ComputedAttributeState as h, type ComputedValueType as i, type ComputedReturnType as j, type ComputedOptionsSource as k, type ComputedDependency as l, type ComputedPlan as m, type ComputedFormulaAstNode as n, type LocationGranularity as o, type Location as p, type DateRangeValue as q, type DocumentAttribute as r, type Phone as s, type Currency as t, type PropertySchema as u, type TimeFormat as v, type PropertyAttribute as w, type FormulaReturnType as x, type RelationTarget as y, type RollupFunction as z };
+export { type PropertyType as $, type Attribute as A, type BilateralConfig as B, type CurrencyAttribute as C, type DateAttribute as D, type AttributeGroup as E, type FormulaAttribute as F, type BaseAttribute as G, type ComputedFieldKind as H, type ComputedFormulaBinaryNode as I, type ComputedFormulaBinaryOperator as J, type ComputedFormulaCallNode as K, type LocationAttribute as L, type MultiRelationAttribute as M, type NumberAttribute as N, type Option as O, type PhoneAttribute as P, type ComputedFormulaLiteralNode as Q, type RelationAttribute as R, type SingleRelationAttribute as S, type TextAttribute as T, type UserAttribute as U, ComputedFormulaParseError as V, type ComputedFormulaPathNode as W, type DateFormat as X, type DateValue as Y, type NumberUnit as Z, type OptionPropertyAttribute as _, type RichtextAttribute as a, RELATION_TARGET_ANY as a0, type RichTextAttribute as a1, type StatusGroup as a2, hasOptions as a3, inferInverseCardinality as a4, isAttributeSortable as a5, isBilateralRelation as a6, isUniversalRelation as a7, parseComputedFormula as a8, resolvePropertyDefinitions as a9, type MultiselectAttribute as b, type SelectAttribute as c, type StatusAttribute as d, type RollupAttribute as e, type AttributeType as f, type CheckboxAttribute as g, type ComputedValueType as h, type ComputedReturnType as i, type ComputedOptionsSource as j, type ComputedDependency as k, type ComputedPlan as l, type ComputedFormulaAstNode as m, type LocationGranularity as n, type Location as o, type DateRangeValue as p, type DocumentAttribute as q, type Phone as r, type Currency as s, type PropertySchema as t, type TimeFormat as u, type PropertyAttribute as v, type FormulaReturnType as w, type RelationTarget as x, type RollupFunction as y, type UserReferenceType as z };

package/dist/{attributes--M1ifW8_.d.mts → attributes-DoiGyNFk.d.mts}

@@ -36,22 +36,11 @@ type ComputedValueType = {
     kind: "collection";
     itemType: "text" | "number" | "boolean" | "date" | "select";
 };
-type ComputedStateStatus = "pending" | "fresh" | "stale" | "failed";
 interface ComputedOptionsSource {
     objectName: string;
     attributeName: string;
     attributeId?: string;
 }
-interface ComputedAttributeState {
-    attributeName: string;
-    status: ComputedStateStatus;
-    computedAt: Date | null;
-    staleSince: Date | null;
-    dependenciesHash: string | null;
-    jobId: string | null;
-    error: string | null;
-    updatedAt: Date;
-}
 type ComputedDependency = {
     kind: "local";
     attributeName: string;
@@ -530,6 +519,17 @@ interface RollupAttribute extends Omit<BaseAttribute<never>, "defaultValue" | "r
      * Used when function="original" to render values as the target type
      */
     targetAttributeType?: AttributeType;
+    /**
+     * Cached currency code of a currency target, from its `defaultCurrency`
+     * (#2644). The stored rollup value stays a bare number; this is the
+     * schema-derived channel that lets a single-code sum/avg render with its
+     * symbol. Absent → the value renders bare, exactly as before.
+     *
+     * Named for what it holds — an ISO 4217 CODE — rather than the siblings'
+     * `targetAttribute*` prefix: `targetAttributeCurrency` would read as a
+     * `Currency` value, which this deliberately is not.
+     */
+    targetCurrencyCode?: CurrencyCode;
     /**
      * Cached options from target attribute (for select/status/multiselect display)
      * Required when function="original" and target is a select-like type
@@ -580,4 +580,4 @@ declare function isAttributeSortable(attr: {
     type: AttributeType;
 }): boolean;
 
-export { type NumberUnit as $, type Attribute as A, type BilateralConfig as B, type CurrencyAttribute as C, type DateAttribute as D, type UserReferenceType as E, type FormulaAttribute as F, type AttributeGroup as G, type BaseAttribute as H, type ComputedFieldKind as I, type ComputedFormulaBinaryNode as J, type ComputedFormulaBinaryOperator as K, type LocationAttribute as L, type MultiRelationAttribute as M, type NumberAttribute as N, type Option as O, type PhoneAttribute as P, type ComputedFormulaCallNode as Q, type RelationAttribute as R, type SingleRelationAttribute as S, type TextAttribute as T, type UserAttribute as U, type ComputedFormulaLiteralNode as V, ComputedFormulaParseError as W, type ComputedFormulaPathNode as X, type ComputedStateStatus as Y, type DateFormat as Z, type DateValue as _, type RichtextAttribute as a, type OptionPropertyAttribute as a0, type PropertyType as a1, RELATION_TARGET_ANY as a2, type RichTextAttribute as a3, type StatusGroup as a4, hasOptions as a5, inferInverseCardinality as a6, isAttributeSortable as a7, isBilateralRelation as a8, isUniversalRelation as a9, parseComputedFormula as aa, resolvePropertyDefinitions as ab, type MultiselectAttribute as b, type SelectAttribute as c, type StatusAttribute as d, type RollupAttribute as e, type AttributeType as f, type CheckboxAttribute as g, type ComputedAttributeState as h, type ComputedValueType as i, type ComputedReturnType as j, type ComputedOptionsSource as k, type ComputedDependency as l, type ComputedPlan as m, type ComputedFormulaAstNode as n, type LocationGranularity as o, type Location as p, type DateRangeValue as q, type DocumentAttribute as r, type Phone as s, type Currency as t, type PropertySchema as u, type TimeFormat as v, type PropertyAttribute as w, type FormulaReturnType as x, type RelationTarget as y, type RollupFunction as z };
+export { type PropertyType as $, type Attribute as A, type BilateralConfig as B, type CurrencyAttribute as C, type DateAttribute as D, type AttributeGroup as E, type FormulaAttribute as F, type BaseAttribute as G, type ComputedFieldKind as H, type ComputedFormulaBinaryNode as I, type ComputedFormulaBinaryOperator as J, type ComputedFormulaCallNode as K, type LocationAttribute as L, type MultiRelationAttribute as M, type NumberAttribute as N, type Option as O, type PhoneAttribute as P, type ComputedFormulaLiteralNode as Q, type RelationAttribute as R, type SingleRelationAttribute as S, type TextAttribute as T, type UserAttribute as U, ComputedFormulaParseError as V, type ComputedFormulaPathNode as W, type DateFormat as X, type DateValue as Y, type NumberUnit as Z, type OptionPropertyAttribute as _, type RichtextAttribute as a, RELATION_TARGET_ANY as a0, type RichTextAttribute as a1, type StatusGroup as a2, hasOptions as a3, inferInverseCardinality as a4, isAttributeSortable as a5, isBilateralRelation as a6, isUniversalRelation as a7, parseComputedFormula as a8, resolvePropertyDefinitions as a9, type MultiselectAttribute as b, type SelectAttribute as c, type StatusAttribute as d, type RollupAttribute as e, type AttributeType as f, type CheckboxAttribute as g, type ComputedValueType as h, type ComputedReturnType as i, type ComputedOptionsSource as j, type ComputedDependency as k, type ComputedPlan as l, type ComputedFormulaAstNode as m, type LocationGranularity as n, type Location as o, type DateRangeValue as p, type DocumentAttribute as q, type Phone as r, type Currency as s, type PropertySchema as t, type TimeFormat as u, type PropertyAttribute as v, type FormulaReturnType as w, type RelationTarget as x, type RollupFunction as y, type UserReferenceType as z };

package/dist/{chunk-LRFLSFIA.js → chunk-DIMTNM3F.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkL4KLYMUI_js = require('./chunk-L4KLYMUI.js');
 var zod = require('zod');
 var constants = require('@stndrds/constants');
 
@@ -318,6 +318,7 @@ var SCHEMA_LIMITS = {
   columnsPerTab: 50,
   optionsPerAttribute: 200,
   sidePanelAttributes: 100,
+  sidePanelPanes: 20,
   filterRulesPerTab: 50,
   sortsPerTab: 20,
   emailAttributesPerTab: 30,
@@ -512,6 +513,9 @@ var rollupConfigSchema = baseConfigSchema.extend({
   decimals: zod.z.number().int().min(0).max(10).optional(),
   targetAttributeType: zod.z.string().optional(),
   targetAttributeOptions: zod.z.array(optionSchema).optional(),
+  // The sum's symbol (#2644) — declared here or `.strip()` eats it before
+  // storage, exactly the fate this schema spares its two siblings above.
+  targetCurrencyCode: zod.z.string().length(3).optional(),
   optionsSource: computedOptionsSourceSchema.optional()
 });
 var propertySchemaPassthrough = zod.z.object({ definitions: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())) }).passthrough();
@@ -571,7 +575,7 @@ function getAttributeConfigWriteSchema(type) {
   }
 }
 function validationErrorFromIssues(issues) {
-  return chunkHWZRSXFB_js.ValidationError.fromZodErrors(
+  return chunkL4KLYMUI_js.ValidationError.fromZodErrors(
     issues.map((issue) => ({
       path: issue.path.map((segment) => typeof segment === "symbol" ? String(segment) : segment),
       message: issue.message
@@ -594,7 +598,7 @@ function validatePatchedIcon(patch) {
   }
   const result = iconNameSchema.optional().safeParse(patch.icon);
   if (!result.success) {
-    throw chunkHWZRSXFB_js.ValidationError.fromZodErrors(
+    throw chunkL4KLYMUI_js.ValidationError.fromZodErrors(
       result.error.issues.map((issue) => ({
         path: [
           "icon",

package/dist/{chunk-XCLVXM7F.mjs → chunk-EFSS7PGC.mjs}

@@ -1,4 +1,4 @@
-import { ValidationError } from './chunk-SYQDFZ74.mjs';
+import { ValidationError } from './chunk-HOVUEYEQ.mjs';
 
 // src/utils/canonical-json.ts
 function canonicalStringify(value) {

package/dist/{chunk-SYQDFZ74.mjs → chunk-HOVUEYEQ.mjs}

@@ -19,8 +19,40 @@ var SchemaErrorCode = {
   PROTECTED_VIEW: "SCHEMA_PROTECTED_VIEW",
   PROTECTED_ROLE: "SCHEMA_PROTECTED_ROLE",
   // Permissions
+  //
+  // `FORBIDDEN` means "you lack permission", and only that (#2681).
   FORBIDDEN: "SCHEMA_FORBIDDEN",
   ACCESS_DENIED: "SCHEMA_ACCESS_DENIED",
+  // Refusals that are NOT permission denials (#2681)
+  //
+  // `FORBIDDEN`'s message is redacted to a neutral sentence (#2675), which is
+  // honest only while the code means one thing. It did not: a workspace
+  // invariant (the last owner), a state gate (a disarmed reflex), an
+  // immutability refusal (system forms) and a missing actor context each told
+  // a caller who holds every permission that they lack one, sending them to an
+  // administrator with nothing to grant. So a refusal a permission grant would
+  // NOT lift takes one of the codes below — plus `SYSTEM_ENTITY_IMMUTABLE`,
+  // which already existed — and keeps the explanatory message that names its
+  // remedy. Every one answers 403, exactly as it did while miscoded: the
+  // ruling changed the semantics, not a single HTTP status.
+  //
+  // A fifth site was seen and deliberately left alone: `ApiKeyService`'s
+  // missing-actor refusal answers 400 `VALIDATION_FAILED`, and moving it here
+  // would change a public HTTP status — which the ruling forbids. It stays at
+  // its 400 pending a ruling of its own.
+  /**
+   * A workspace RULE refuses the write — the last owner cannot be removed.
+   *
+   * Not `INVARIANT_VIOLATION`, despite the name: that one is an internal
+   * "should never happen" assertion, a bug signal nobody outside the codebase
+   * can act on. This is the opposite — a rule the caller can act on, reached
+   * by a request that was entirely well-formed, whose message tells them how.
+   */
+  WORKSPACE_INVARIANT: "SCHEMA_WORKSPACE_INVARIANT",
+  /** The resource's own state refuses the operation — a disarmed reflex run. */
+  STATE_GATE: "SCHEMA_STATE_GATE",
+  /** The operation needs an actor and the request carried none. */
+  ACTOR_CONTEXT_REQUIRED: "SCHEMA_ACTOR_CONTEXT_REQUIRED",
   // Connectors
   CONNECTOR_AUTH_FAILED: "SCHEMA_CONNECTOR_AUTH_FAILED",
   CONNECTOR_INVALID_STATE: "SCHEMA_CONNECTOR_INVALID_STATE",

package/dist/{chunk-TU6ECJFZ.js → chunk-KIMECN6D.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkLRFLSFIA_js = require('./chunk-LRFLSFIA.js');
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkDIMTNM3F_js = require('./chunk-DIMTNM3F.js');
+var chunkL4KLYMUI_js = require('./chunk-L4KLYMUI.js');
 var zod = require('zod');
 
 // src/types/system-attributes.ts
@@ -500,7 +500,7 @@ function canonicalizeFilterValue(rule, effectiveType) {
   const message = `Filter on a currency attribute expected a numeric amount, received ${JSON.stringify(
     value
   )}`;
-  throw new chunkHWZRSXFB_js.ValidationError(message, [{ path: ["value"], message }]);
+  throw new chunkL4KLYMUI_js.ValidationError(message, [{ path: ["value"], message }]);
 }
 function hasCurrencyAmount(value) {
   if (typeof value !== "object") return true;
@@ -661,13 +661,13 @@ function resolveCanonicalOperator(rawOperator, effectiveType) {
   const replacement = REMOVED_OPERATOR_REPLACEMENTS[rawOperator];
   if (replacement) {
     const m = `Unknown filter operator "${rawOperator}" \u2014 use ${replacement}`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["operator"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["operator"], message: m }]);
   }
   const normalized = normalizeOperator(rawOperator);
   const membership = SUBSTRING_TO_MEMBERSHIP[normalized];
   if (membership && SET_MEMBERSHIP_TYPES.has(effectiveType)) {
     const m = `Operator "${normalized}" is not valid for type "${effectiveType}" \u2014 use "${membership}"`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["operator"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["operator"], message: m }]);
   }
   return normalized;
 }
@@ -677,7 +677,7 @@ function assertOperatorForType(operator, type, context) {
   if (!ops?.includes(normalized)) {
     const validList = ops?.length ? ops.join(", ") : "(no operators registered for this type)";
     const summary = `Operator "${operator}" is not valid for ${context} type "${type}". Valid operators: ${validList}.`;
-    throw new chunkHWZRSXFB_js.ValidationError(summary, [
+    throw new chunkL4KLYMUI_js.ValidationError(summary, [
       {
         path: ["operator"],
         message: summary
@@ -690,7 +690,7 @@ function assertRelativeDateValue(rule) {
   if (rule.operator !== "is_within") return;
   if (!isRelativeDateValue(rule.value)) {
     const m = `Operator "is_within" requires a relative-date value { amount: positive number, unit: days|weeks|months|years, direction: past|future }`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["value"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["value"], message: m }]);
   }
 }
 function applyCanonicalForm(rule, operator, effectiveType) {
@@ -703,11 +703,11 @@ function assertDynamicValueForAttribute(rule, attrType) {
   const v = rule.value;
   if (v.dynamic === "actor" && attrType !== "user") {
     const m = `actor token (@me) is only valid on user attributes, not "${attrType}"`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["value"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["value"], message: m }]);
   }
   if (v.dynamic === "date" && attrType !== "date") {
     const m = `date token (@today/@now) is only valid on date attributes, not "${attrType}"`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["value"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["value"], message: m }]);
   }
 }
 function collectQualifiedRuleIssues(rule, context) {
@@ -715,7 +715,7 @@ function collectQualifiedRuleIssues(rule, context) {
     validateQualifiedRule({ ...rule }, context);
     return [];
   } catch (error) {
-    if (!(error instanceof chunkHWZRSXFB_js.ValidationError)) throw error;
+    if (!(error instanceof chunkL4KLYMUI_js.ValidationError)) throw error;
     return error.errors.map((issue) => ({ ...issue, path: [...issue.path] }));
   }
 }
@@ -723,17 +723,17 @@ function validateQualifiedRule(rule, context) {
   const rootAttr = context.attributes.find((a) => a.name === rule.attribute);
   const systemOps = SYSTEM_FILTER_OPERATORS[rule.attribute];
   if (!(rootAttr || systemOps)) {
-    throw new chunkHWZRSXFB_js.ValidationError(`Unknown attribute: ${rule.attribute}`, [
+    throw new chunkL4KLYMUI_js.ValidationError(`Unknown attribute: ${rule.attribute}`, [
       { path: ["attribute"], message: `Unknown attribute: ${rule.attribute}` }
     ]);
   }
   if (rule.quantifier !== void 0 && !rule.property) {
     const m = `quantifier is only valid on qualified edge rules (set "property")`;
-    throw new chunkHWZRSXFB_js.ValidationError(m, [{ path: ["quantifier"], message: m }]);
+    throw new chunkL4KLYMUI_js.ValidationError(m, [{ path: ["quantifier"], message: m }]);
   }
   if (!rootAttr) {
     if (rule.property) {
-      throw new chunkHWZRSXFB_js.ValidationError(`Cannot qualify system attribute "${rule.attribute}"`, [
+      throw new chunkL4KLYMUI_js.ValidationError(`Cannot qualify system attribute "${rule.attribute}"`, [
         { path: ["property"], message: `"${rule.attribute}" is a system column, not a reference` }
       ]);
     }
@@ -741,7 +741,7 @@ function validateQualifiedRule(rule, context) {
     const normalizedOperator2 = resolveCanonicalOperator(rule.operator, effectiveType);
     if (!systemOps.includes(normalizedOperator2)) {
       const summary = `Operator "${rule.operator}" is not valid for system attribute "${rule.attribute}". Valid operators: ${systemOps.join(", ")}.`;
-      throw new chunkHWZRSXFB_js.ValidationError(summary, [{ path: ["operator"], message: summary }]);
+      throw new chunkL4KLYMUI_js.ValidationError(summary, [{ path: ["operator"], message: summary }]);
     }
     applyCanonicalForm(rule, normalizedOperator2, effectiveType);
     return;
@@ -753,25 +753,25 @@ function validateQualifiedRule(rule, context) {
     if (!ops.includes(normalizedOperator2)) {
       const validList = ops.length ? ops.join(", ") : "(not filterable)";
       const summary = `Operator "${rule.operator}" is not valid for attribute "${rootAttr.name}". Valid operators: ${validList}.`;
-      throw new chunkHWZRSXFB_js.ValidationError(summary, [{ path: ["operator"], message: summary }]);
+      throw new chunkL4KLYMUI_js.ValidationError(summary, [{ path: ["operator"], message: summary }]);
     }
     applyCanonicalForm(rule, normalizedOperator2, resolveEffectiveFilterType(rootAttr));
     return;
   }
   if (!REFERENCE_TYPES.has(rootAttr.type)) {
-    throw new chunkHWZRSXFB_js.ValidationError(`Cannot qualify ${rootAttr.type} attribute "${rule.attribute}"`, [
+    throw new chunkL4KLYMUI_js.ValidationError(`Cannot qualify ${rootAttr.type} attribute "${rule.attribute}"`, [
       { path: ["property"], message: `Attribute "${rule.attribute}" is not a reference type` }
     ]);
   }
   const propSchema = rootAttr.properties;
   if (!propSchema) {
-    throw new chunkHWZRSXFB_js.ValidationError(`Attribute "${rule.attribute}" has no qualifyWith schema`, [
+    throw new chunkL4KLYMUI_js.ValidationError(`Attribute "${rule.attribute}" has no qualifyWith schema`, [
       { path: ["property"], message: `"${rule.attribute}" has no qualifyWith` }
     ]);
   }
   const propDef = propSchema.definitions.find((p) => p.name === rule.property);
   if (!propDef) {
-    throw new chunkHWZRSXFB_js.ValidationError(
+    throw new chunkL4KLYMUI_js.ValidationError(
       `Property "${rule.property}" not defined on "${rule.attribute}".qualifyWith()`,
       [{ path: ["property"], message: `Unknown property: ${rule.property}` }]
     );
@@ -787,7 +787,7 @@ function parseResourceVisibility(value) {
   if (typeof value === "string" && RESOURCE_VISIBILITIES.includes(value)) {
     return value;
   }
-  throw new chunkHWZRSXFB_js.ValidationError(
+  throw new chunkL4KLYMUI_js.ValidationError(
     `visibility must be one of: ${RESOURCE_VISIBILITIES.join(", ")} (received: ${String(value)})`,
     []
   );
@@ -821,12 +821,12 @@ var RESERVED_OBJECT_NAMES = ["skill"];
 // src/validators/view-config.schema.ts
 var createModeSchema = zod.z.enum(["redirect", "inline", "peek"]);
 var nonEmptyStringArraySchema = zod.z.array(zod.z.string()).min(1);
-var columnsSchema = zod.z.array(zod.z.string()).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.columnsPerTab);
+var columnsSchema = zod.z.array(zod.z.string()).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.columnsPerTab);
 var sortRuleSchema = zod.z.object({
   attribute: zod.z.string(),
   direction: zod.z.enum(["asc", "desc"])
 }).strict();
-var sortsSchema = zod.z.array(sortRuleSchema).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.sortsPerTab);
+var sortsSchema = zod.z.array(sortRuleSchema).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.sortsPerTab);
 var relativeDateValueSchema = zod.z.object({
   amount: zod.z.number(),
   unit: zod.z.enum(["days", "weeks", "months", "years"]),
@@ -900,7 +900,7 @@ var filterRuleSchema = zod.z.object({
   operator: filterOperatorSchema,
   value: filterValueSchema
 }).strict();
-var filterRulesSchema = zod.z.array(filterRuleSchema).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.filterRulesPerTab);
+var filterRulesSchema = zod.z.array(filterRuleSchema).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.filterRulesPerTab);
 var filterStateSchema = zod.z.object({
   combinator: zod.z.enum(["and", "or"]),
   rules: filterRulesSchema
@@ -986,20 +986,20 @@ var baseGroupShape = {
 var fieldGroupWriteSchema = zod.z.object({
   ...baseGroupShape,
   type: zod.z.literal("fields"),
-  fields: zod.z.array(fieldSchema).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.fieldsPerGroup)
+  fields: zod.z.array(fieldSchema).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.fieldsPerGroup)
 }).strict();
 var groupWriteSchema = fieldGroupWriteSchema;
 var baseTabShape = {
   id: zod.z.string(),
   name: zod.z.string(),
   label: zod.z.string(),
-  icon: chunkLRFLSFIA_js.iconNameSchema.optional(),
+  icon: chunkDIMTNM3F_js.iconNameSchema.optional(),
   order: zod.z.number().optional()
 };
 var formTabWriteSchema = zod.z.object({
   ...baseTabShape,
   type: zod.z.literal("form"),
-  groups: zod.z.array(groupWriteSchema).min(1).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.groupsPerFormTab),
+  groups: zod.z.array(groupWriteSchema).min(1).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.groupsPerFormTab),
   formColumns: zod.z.union([zod.z.literal(1), zod.z.literal(2), zod.z.literal(3)]).optional(),
   density: zod.z.enum(["compact", "comfortable", "spacious"]).optional()
 }).strict().superRefine((tab, ctx) => {
@@ -1008,13 +1008,13 @@ var formTabWriteSchema = zod.z.object({
     (count, group) => count + (group.type === "fields" ? group.fields.length : 0),
     0
   );
-  if (totalFields > chunkLRFLSFIA_js.SCHEMA_LIMITS.fieldsPerFormTab) {
+  if (totalFields > chunkDIMTNM3F_js.SCHEMA_LIMITS.fieldsPerFormTab) {
     ctx.addIssue({
       code: "too_big",
       origin: "array",
-      maximum: chunkLRFLSFIA_js.SCHEMA_LIMITS.fieldsPerFormTab,
+      maximum: chunkDIMTNM3F_js.SCHEMA_LIMITS.fieldsPerFormTab,
       inclusive: true,
-      message: `A form tab can contain at most ${chunkLRFLSFIA_js.SCHEMA_LIMITS.fieldsPerFormTab} fields`,
+      message: `A form tab can contain at most ${chunkDIMTNM3F_js.SCHEMA_LIMITS.fieldsPerFormTab} fields`,
       path: ["groups"]
     });
   }
@@ -1216,12 +1216,12 @@ var formsTabSchema = zod.z.object({
 var emailsTabSchema = zod.z.object({
   ...baseTabShape,
   type: zod.z.literal("emails"),
-  emailAttributeIds: zod.z.array(zod.z.string()).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.emailAttributesPerTab)
+  emailAttributeIds: zod.z.array(zod.z.string()).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.emailAttributesPerTab)
 }).strict();
 var meetingsTabSchema = zod.z.object({
   ...baseTabShape,
   type: zod.z.literal("meetings"),
-  emailAttributeIds: zod.z.array(zod.z.string()).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.emailAttributesPerTab)
+  emailAttributeIds: zod.z.array(zod.z.string()).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.emailAttributesPerTab)
 }).strict();
 var detailTabSchema = zod.z.discriminatedUnion("type", [
   formTabWriteSchema,
@@ -1237,7 +1237,7 @@ var detailTabSchema = zod.z.discriminatedUnion("type", [
 var listTabCommonShape = {
   id: zod.z.string(),
   label: zod.z.string(),
-  icon: chunkLRFLSFIA_js.iconNameSchema.optional(),
+  icon: chunkDIMTNM3F_js.iconNameSchema.optional(),
   default: zod.z.boolean().optional(),
   // Which records the tab scopes to. `"all"` is the default and means "impose
   // no scope" — the mandatory viewer predicate alone decides, so the tab shows
@@ -1271,7 +1271,7 @@ var listViewTabSchema = zod.z.discriminatedUnion("layout", [
 ]);
 var _listViewConfigSchema = zod.z.object({
   defaultFilters: filterGroupSchema.optional(),
-  tabs: zod.z.array(listViewTabSchema).min(1).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.tabsPerView)
+  tabs: zod.z.array(listViewTabSchema).min(1).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.tabsPerView)
 }).strict().superRefine((config, ctx) => {
   addDuplicateIdIssues(config.tabs, ctx, ["tabs"]);
   let hasDefault = false;
@@ -1287,12 +1287,42 @@ var _listViewConfigSchema = zod.z.object({
     hasDefault = true;
   });
 });
+var sidePanelPaneSchema = zod.z.discriminatedUnion("kind", [
+  zod.z.object({
+    kind: zod.z.literal("fields"),
+    id: zod.z.string().optional(),
+    label: zod.z.string().optional(),
+    attributes: zod.z.array(zod.z.string()).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.sidePanelAttributes)
+  }).strict(),
+  zod.z.object({
+    kind: zod.z.literal("activity"),
+    id: zod.z.string().optional(),
+    label: zod.z.string().optional()
+  }).strict(),
+  zod.z.object({
+    kind: zod.z.literal("documents"),
+    // Required here alone: the documents content keys its stored sort mode
+    // on this id, so a pane without one would share the main-column
+    // documents tab's sort.
+    id: zod.z.string(),
+    label: zod.z.string().optional(),
+    allowUpload: zod.z.boolean().optional(),
+    allowRemove: zod.z.boolean().optional()
+  }).strict()
+]);
 var _detailViewConfigSchema = zod.z.object({
-  tabs: zod.z.array(detailTabSchema).min(1).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.tabsPerView),
+  tabs: zod.z.array(detailTabSchema).min(1).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.tabsPerView),
   sidePanel: zod.z.object({
-    attributes: zod.z.array(zod.z.string()).max(chunkLRFLSFIA_js.SCHEMA_LIMITS.sidePanelAttributes),
+    attributes: zod.z.array(zod.z.string()).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.sidePanelAttributes).optional(),
+    panes: zod.z.array(sidePanelPaneSchema).max(chunkDIMTNM3F_js.SCHEMA_LIMITS.sidePanelPanes).optional(),
     width: zod.z.number().optional()
-  }).strict().optional()
+  }).strict().refine((sidePanel) => sidePanel.attributes !== void 0 || sidePanel.panes !== void 0, {
+    message: "sidePanel requires attributes or panes"
+  }).refine((sidePanel) => sidePanel.panes === void 0 || sidePanel.panes.length > 0, {
+    message: "sidePanel panes must not be empty"
+  }).refine((sidePanel) => sidePanel.attributes === void 0 || sidePanel.panes === void 0, {
+    message: "sidePanel takes attributes or panes, not both"
+  }).optional()
 }).strict().superRefine((config, ctx) => {
   addDuplicateIdIssues(config.tabs, ctx, ["tabs"]);
   addDuplicateNameIssues(config.tabs, ctx, ["tabs"]);

package/dist/{chunk-HWZRSXFB.js → chunk-L4KLYMUI.js}

@@ -21,8 +21,40 @@ var SchemaErrorCode = {
   PROTECTED_VIEW: "SCHEMA_PROTECTED_VIEW",
   PROTECTED_ROLE: "SCHEMA_PROTECTED_ROLE",
   // Permissions
+  //
+  // `FORBIDDEN` means "you lack permission", and only that (#2681).
   FORBIDDEN: "SCHEMA_FORBIDDEN",
   ACCESS_DENIED: "SCHEMA_ACCESS_DENIED",
+  // Refusals that are NOT permission denials (#2681)
+  //
+  // `FORBIDDEN`'s message is redacted to a neutral sentence (#2675), which is
+  // honest only while the code means one thing. It did not: a workspace
+  // invariant (the last owner), a state gate (a disarmed reflex), an
+  // immutability refusal (system forms) and a missing actor context each told
+  // a caller who holds every permission that they lack one, sending them to an
+  // administrator with nothing to grant. So a refusal a permission grant would
+  // NOT lift takes one of the codes below — plus `SYSTEM_ENTITY_IMMUTABLE`,
+  // which already existed — and keeps the explanatory message that names its
+  // remedy. Every one answers 403, exactly as it did while miscoded: the
+  // ruling changed the semantics, not a single HTTP status.
+  //
+  // A fifth site was seen and deliberately left alone: `ApiKeyService`'s
+  // missing-actor refusal answers 400 `VALIDATION_FAILED`, and moving it here
+  // would change a public HTTP status — which the ruling forbids. It stays at
+  // its 400 pending a ruling of its own.
+  /**
+   * A workspace RULE refuses the write — the last owner cannot be removed.
+   *
+   * Not `INVARIANT_VIOLATION`, despite the name: that one is an internal
+   * "should never happen" assertion, a bug signal nobody outside the codebase
+   * can act on. This is the opposite — a rule the caller can act on, reached
+   * by a request that was entirely well-formed, whose message tells them how.
+   */
+  WORKSPACE_INVARIANT: "SCHEMA_WORKSPACE_INVARIANT",
+  /** The resource's own state refuses the operation — a disarmed reflex run. */
+  STATE_GATE: "SCHEMA_STATE_GATE",
+  /** The operation needs an actor and the request carried none. */
+  ACTOR_CONTEXT_REQUIRED: "SCHEMA_ACTOR_CONTEXT_REQUIRED",
   // Connectors
   CONNECTOR_AUTH_FAILED: "SCHEMA_CONNECTOR_AUTH_FAILED",
   CONNECTOR_INVALID_STATE: "SCHEMA_CONNECTOR_INVALID_STATE",

package/dist/{chunk-OYHBQMC7.js → chunk-LBGLB443.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkL4KLYMUI_js = require('./chunk-L4KLYMUI.js');
 
 // src/utils/canonical-json.ts
 function canonicalStringify(value) {
@@ -17,10 +17,10 @@ function canonicalStringify(value) {
       case "object":
         break;
       default:
-        throw new chunkHWZRSXFB_js.ValidationError(`Cannot canonicalize value of type ${typeof v}`, []);
+        throw new chunkL4KLYMUI_js.ValidationError(`Cannot canonicalize value of type ${typeof v}`, []);
     }
     const obj = v;
-    if (seen.has(obj)) throw new chunkHWZRSXFB_js.ValidationError("Cannot canonicalize circular structure", []);
+    if (seen.has(obj)) throw new chunkL4KLYMUI_js.ValidationError("Cannot canonicalize circular structure", []);
     seen.add(obj);
     try {
       if (Array.isArray(obj)) return `[${obj.map((e) => encode(e) ?? "null").join(",")}]`;

package/dist/{chunk-MLTXSBOB.mjs → chunk-PLTLAMWJ.mjs}

@@ -7,7 +7,7 @@ import { createCheckboxValidator } from './chunk-OSSGN43B.mjs';
 import { createDateValidator } from './chunk-Q44QKLN4.mjs';
 import { createNumberValidator } from './chunk-UANQJ2GH.mjs';
 import { createTextValidator } from './chunk-O73ROMWQ.mjs';
-import { ValidationError } from './chunk-SYQDFZ74.mjs';
+import { ValidationError } from './chunk-HOVUEYEQ.mjs';
 import { createCurrencyValidator } from './chunk-AYVHMVKQ.mjs';
 import { createLocationValidator } from './chunk-YUFTHPOE.mjs';
 import { createPhoneValidator } from './chunk-R5LAJCBU.mjs';