@stndrds/schema 1.0.0-alpha.72 → 1.0.0-alpha.74

package/dist/{chunk-4GHZ6AUF.js → chunk-WXEFNFHT.js}

@@ -15,6 +15,9 @@ var _chunkNEVERCM3js = require('./chunk-NEVERCM3.js');
 var _chunk3WTK7ESHjs = require('./chunk-3WTK7ESH.js');
 
 
+var _chunkJZO52C3Fjs = require('./chunk-JZO52C3F.js');
+
+
 var _chunk3RG5ZIWIjs = require('./chunk-3RG5ZIWI.js');
 
 // src/runtime/auth/workflow-jwt.service.ts
@@ -2138,7 +2141,7 @@ var EndExecutor = class {
     this.nodeType = "end";
   }
   execute(node, _context) {
-    return complete(_nullishCoalesce(node.status, () => ( "completed")));
+    return complete(node.status || "completed");
   }
   canExecute(_node, _context) {
     return true;
@@ -2261,10 +2264,20 @@ var FormExecutor = class {
     const fieldRefs = this.collectFieldRefs(node);
     for (const fieldRef of fieldRefs) {
       const slot = slots.find((s) => s.id === fieldRef.slotId);
-      if (!slot) continue;
+      if (!slot) {
+        console.warn(
+          `[FormExecutor] Slot "${fieldRef.slotId}" not found in workflow definition, skipping validation`
+        );
+        continue;
+      }
       if (slot.mode === "select") continue;
       const object2 = objects.find((o) => o.name === slot.objectName);
-      if (!object2) continue;
+      if (!object2) {
+        console.warn(
+          `[FormExecutor] Object "${slot.objectName}" not found for slot "${fieldRef.slotId}", skipping validation`
+        );
+        continue;
+      }
       const attribute = object2.attributes.find((a) => a.name === fieldRef.attribute);
       if (!_optionalChain([attribute, 'optionalAccess', _30 => _30.required])) continue;
       const slotInput = input[fieldRef.slotId];
@@ -2309,7 +2322,7 @@ var StartExecutor = class {
   }
   execute(node, _context) {
     if (!node.next) {
-      throw new Error(`StartNode "${node.id}" has no 'next' target defined`);
+      return error("MISSING_NEXT", `StartNode "${node.id}" has no 'next' target defined`);
     }
     return success(node.next);
   }
@@ -2523,13 +2536,11 @@ function hasRelationReferences(expression) {
   return regex.test(expression);
 }
 function flattenRelationsForEval(resolvedRelations) {
-  const flat = {};
+  const result = {};
   for (const [relationName, values] of Object.entries(resolvedRelations)) {
-    for (const [key, value] of Object.entries(values)) {
-      flat[`${relationName}.${key}`] = value;
-    }
+    result[relationName] = { ...values };
   }
-  return flat;
+  return result;
 }
 async function evaluateFormulaWithRelations(expression, record, schema, resolver) {
   const relationNames = extractRelationNames(expression);
@@ -2799,6 +2810,15 @@ function createMockAIConversationsRepository(stores) {
     },
     addMessage(input) {
       const now = /* @__PURE__ */ new Date();
+      const conversation = stores.aiConversations.get(input.conversationId);
+      if (!conversation) {
+        return Promise.reject(new Error("Conversation not found"));
+      }
+      const tenantId = getTenantId();
+      const userId = requireUserId();
+      if (conversation.tenantId !== tenantId || conversation.userId !== userId) {
+        return Promise.reject(new Error("Conversation not found or access denied"));
+      }
       const message = {
         id: _chunkNEVERCM3js.generateId.call(void 0, ),
         conversationId: input.conversationId,
@@ -2816,17 +2836,23 @@ function createMockAIConversationsRepository(stores) {
         createdAt: now
       };
       stores.aiMessages.set(message.id, message);
-      const conversation = stores.aiConversations.get(input.conversationId);
-      if (conversation) {
-        conversation.messageCount++;
-        conversation.totalTokens += (_nullishCoalesce(input.inputTokens, () => ( 0))) + (_nullishCoalesce(input.outputTokens, () => ( 0)));
-        conversation.totalCost += _nullishCoalesce(input.cost, () => ( 0));
-        conversation.updatedAt = now;
-        stores.aiConversations.set(input.conversationId, conversation);
-      }
+      conversation.messageCount++;
+      conversation.totalTokens += (_nullishCoalesce(input.inputTokens, () => ( 0))) + (_nullishCoalesce(input.outputTokens, () => ( 0)));
+      conversation.totalCost += _nullishCoalesce(input.cost, () => ( 0));
+      conversation.updatedAt = now;
+      stores.aiConversations.set(input.conversationId, conversation);
       return Promise.resolve(message);
     },
     listMessages(conversationId, options) {
+      const conversation = stores.aiConversations.get(conversationId);
+      if (!conversation) {
+        return Promise.resolve({ messages: [], total: 0 });
+      }
+      const tenantId = getTenantId();
+      const userId = requireUserId();
+      if (conversation.tenantId !== tenantId || conversation.userId !== userId) {
+        return Promise.resolve({ messages: [], total: 0 });
+      }
       let results = Array.from(stores.aiMessages.values()).filter((m) => m.conversationId === conversationId).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
       const total = results.length;
       if (_optionalChain([options, 'optionalAccess', _38 => _38.limit])) {
@@ -2835,6 +2861,15 @@ function createMockAIConversationsRepository(stores) {
       return Promise.resolve({ messages: results, total });
     },
     getRecentMessages(conversationId, count = 20) {
+      const conversation = stores.aiConversations.get(conversationId);
+      if (!conversation) {
+        return Promise.resolve([]);
+      }
+      const tenantId = getTenantId();
+      const userId = requireUserId();
+      if (conversation.tenantId !== tenantId || conversation.userId !== userId) {
+        return Promise.resolve([]);
+      }
       const results = Array.from(stores.aiMessages.values()).filter((m) => m.conversationId === conversationId).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime()).slice(-count);
       return Promise.resolve(results);
     }
@@ -3101,7 +3136,12 @@ function createMockFilesRepository(stores) {
 function createMockObjectsRepository(stores) {
   return {
     findById(id) {
-      return Promise.resolve(_nullishCoalesce(stores.objects.get(id), () => ( null)));
+      const tenantId = getTenantId();
+      const obj = stores.objects.get(id);
+      if (!obj || obj.tenantId !== tenantId) {
+        return Promise.resolve(null);
+      }
+      return Promise.resolve(obj);
     },
     findByName(name) {
       const tenantId = getTenantId();
@@ -3141,8 +3181,9 @@ function createMockObjectsRepository(stores) {
       return Promise.resolve(obj);
     },
     update(id, data) {
+      const tenantId = getTenantId();
       const existing = stores.objects.get(id);
-      if (!existing) {
+      if (!existing || existing.tenantId !== tenantId) {
         return Promise.reject(new Error(`Object ${id} not found`));
       }
       const updated = {
@@ -3154,6 +3195,11 @@ function createMockObjectsRepository(stores) {
       return Promise.resolve(updated);
     },
     delete(id) {
+      const tenantId = getTenantId();
+      const existing = stores.objects.get(id);
+      if (!existing || existing.tenantId !== tenantId) {
+        return Promise.reject(new Error(`Object ${id} not found`));
+      }
       stores.objects.delete(id);
       return Promise.resolve();
     },
@@ -3167,7 +3213,7 @@ function createMockObjectsRepository(stores) {
     upsert(data) {
       const tenantId = getTenantId();
       for (const obj of stores.objects.values()) {
-        if (obj.system && obj.name === data.name) {
+        if (obj.tenantId === tenantId && obj.system && obj.name === data.name) {
           const updated = {
             ...obj,
             label: data.label,
@@ -3700,13 +3746,24 @@ function parsePipeExpression(pipeExpr) {
 }
 function renderLabelExpression(template, values, fallback = DEFAULT_LABEL_FALLBACK) {
   const result = template.replace(/\{\{\s*([^}]+)\s*\}\}/g, (_, expr) => {
-    const parts = expr.split("|").map((s) => s.trim());
-    const path = parts[0];
-    let value = getValue(values, path);
+    const orParts = expr.split("||").map((s) => s.trim());
+    const lastPart = orParts[orParts.length - 1];
+    const pipeSplit = lastPart.split("|").map((s) => s.trim());
+    orParts[orParts.length - 1] = pipeSplit[0];
+    const pipes = pipeSplit.slice(1).filter(Boolean);
+    const alternatives = orParts.filter(Boolean);
+    let value = "";
+    for (const alt of alternatives) {
+      const v = getValue(values, alt);
+      if (v != null && v !== "") {
+        value = v;
+        break;
+      }
+    }
     const isEmpty3 = value == null || value === "";
-    if (isEmpty3 && parts.length === 1) return "";
-    for (let i = 1; i < parts.length; i++) {
-      const { name: pipeName, args } = parsePipeExpression(parts[i]);
+    if (isEmpty3 && pipes.length === 0) return "";
+    for (const pipeExpr of pipes) {
+      const { name: pipeName, args } = parsePipeExpression(pipeExpr);
       const simpleFn = simplePipes[pipeName];
       if (simpleFn) {
         if (value != null && value !== "") {
@@ -3728,13 +3785,19 @@ function isLabelExpression(value) {
 }
 function extractAttributeNames(template) {
   const names = [];
-  const regex = /\{\{\s*([^|}]+)/g;
+  const regex = /\{\{\s*([^}]+)\s*\}\}/g;
   let match;
   while ((match = regex.exec(template)) !== null) {
-    const path = match[1].trim();
-    const rootName = path.split(".")[0];
-    if (rootName && !names.includes(rootName)) {
-      names.push(rootName);
+    const expr = match[1].trim();
+    const orParts = expr.split("||").map((s) => s.trim());
+    const lastPart = orParts[orParts.length - 1];
+    orParts[orParts.length - 1] = lastPart.split("|")[0].trim();
+    for (const part of orParts) {
+      if (!part) continue;
+      const rootName = part.split(".")[0];
+      if (rootName && !names.includes(rootName)) {
+        names.push(rootName);
+      }
     }
   }
   return names;
@@ -3822,6 +3885,7 @@ function createMockObjectRecordsRepository(stores) {
     findById(id) {
       const internal = stores.objectRecords.get(id);
       if (!internal) return Promise.resolve(null);
+      if (internal.deletedAt) return Promise.resolve(null);
       const { tenantId: _, ...record } = internal;
       return Promise.resolve(record);
     },
@@ -3829,7 +3893,7 @@ function createMockObjectRecordsRepository(stores) {
       const results = [];
       for (const id of ids) {
         const internal = stores.objectRecords.get(id);
-        if (internal) {
+        if (internal && !internal.deletedAt) {
           const { tenantId: _, ...record } = internal;
           results.push(record);
         }
@@ -3890,13 +3954,18 @@ function createMockObjectRecordsRepository(stores) {
       return Promise.resolve(record);
     },
     delete(id) {
-      stores.objectRecords.delete(id);
+      const existing = stores.objectRecords.get(id);
+      if (!existing) {
+        return Promise.reject(new Error(`ObjectRecord ${id} not found`));
+      }
+      existing.deletedAt = /* @__PURE__ */ new Date();
+      stores.objectRecords.set(id, existing);
       return Promise.resolve();
     },
     list(objectId, options) {
       const tenantId = getTenantId();
       let results = Array.from(stores.objectRecords.values()).filter(
-        (r) => r.tenantId === tenantId && r.objectId === objectId
+        (r) => r.tenantId === tenantId && r.objectId === objectId && !r.deletedAt
       );
       const total = results.length;
       if (_optionalChain([options, 'optionalAccess', _73 => _73.limit])) {
@@ -3909,7 +3978,7 @@ function createMockObjectRecordsRepository(stores) {
       const tenantId = getTenantId();
       const lowerQuery = query.toLowerCase();
       let results = Array.from(stores.objectRecords.values()).filter((r) => {
-        if (r.tenantId !== tenantId || r.objectId !== objectId) return false;
+        if (r.tenantId !== tenantId || r.objectId !== objectId || r.deletedAt) return false;
         return Object.values(r.values).some(
           (val) => String(val).toLowerCase().includes(lowerQuery)
         );
@@ -3943,7 +4012,7 @@ function createMockObjectRecordsRepository(stores) {
         }
       }
       let matchingRecords = Array.from(stores.objectRecords.values()).filter((r) => {
-        if (r.tenantId !== tenantId) return false;
+        if (r.tenantId !== tenantId || r.deletedAt) return false;
         if (!allowedObjectIds.has(r.objectId)) return false;
         return Object.values(r.values).some(
           (val) => String(val).toLowerCase().includes(lowerQuery)
@@ -4098,12 +4167,12 @@ function createMockObjectRecordsRepository(stores) {
       }
       return Promise.resolve(updated);
     },
-    findByRelation(objectName, relationAttributeName, targetRecordId) {
-      const obj = Array.from(stores.objects.values()).find((o) => o.name === objectName);
+    findByRelation(objectId, relationAttributeName, targetRecordId) {
+      const obj = stores.objects.get(objectId);
       if (!obj) return Promise.resolve([]);
       const results = [];
       for (const record of stores.objectRecords.values()) {
-        if (record.objectId !== obj.id) continue;
+        if (record.objectId !== objectId) continue;
         const value = record.values[relationAttributeName];
         let matches = false;
         if (typeof value === "string" && value === targetRecordId) {
@@ -4263,7 +4332,12 @@ function createEmptyStores() {
 function createMockUserProfilesRepository(stores) {
   return {
     findById(id) {
-      return Promise.resolve(_nullishCoalesce(stores.userProfiles.get(id), () => ( null)));
+      const tenantId = getTenantId();
+      const profile = stores.userProfiles.get(id);
+      if (!profile || profile.tenantId !== tenantId) {
+        return Promise.resolve(null);
+      }
+      return Promise.resolve(profile);
     },
     findByIds(ids) {
       const tenantId = getTenantId();
@@ -4277,8 +4351,9 @@ function createMockUserProfilesRepository(stores) {
       return Promise.resolve(results);
     },
     findByAuthId(authId) {
+      const tenantId = getTenantId();
       for (const profile of stores.userProfiles.values()) {
-        if (profile.authId === authId) {
+        if (profile.tenantId === tenantId && profile.authId === authId) {
           return Promise.resolve(profile);
         }
       }
@@ -4303,7 +4378,6 @@ function createMockUserProfilesRepository(stores) {
         firstName: data.firstName,
         lastName: data.lastName,
         avatarUrl: data.avatarUrl,
-        role: _nullishCoalesce(data.role, () => ( "member")),
         status: _nullishCoalesce(data.status, () => ( "active")),
         createdAt: /* @__PURE__ */ new Date(),
         updatedAt: /* @__PURE__ */ new Date()
@@ -4336,12 +4410,23 @@ function createMockUserProfilesRepository(stores) {
       }
       return Promise.resolve(results);
     },
-    countByRole(role) {
+    getUsersWithRoles(filters) {
       const tenantId = getTenantId();
-      const count = Array.from(stores.userProfiles.values()).filter(
-        (profile) => profile.tenantId === tenantId && profile.role === role
-      ).length;
-      return Promise.resolve(count);
+      const profiles = Array.from(stores.userProfiles.values()).filter(
+        (p) => p.tenantId === tenantId
+      );
+      const results = [];
+      for (const profile of profiles) {
+        const roleIds = Array.from(stores.userRoles.values()).filter((ur) => ur.userProfileId === profile.id && ur.tenantId === tenantId).map((ur) => ur.roleId);
+        const roles = Array.from(stores.roles.values()).filter((r) => roleIds.includes(r.id));
+        if (_optionalChain([filters, 'optionalAccess', _87 => _87.allowedRoles]) && filters.allowedRoles.length > 0) {
+          const allowed = filters.allowedRoles;
+          const hasMatchingRole = roles.some((r) => allowed.includes(r.name));
+          if (!hasMatchingRole) continue;
+        }
+        results.push({ ...profile, roles });
+      }
+      return Promise.resolve(results);
     },
     updateLastLogin(id) {
       const profile = stores.userProfiles.get(id);
@@ -4360,7 +4445,6 @@ function createMockUserProfilesRepository(stores) {
         email: data.email,
         firstName: data.firstName,
         lastName: data.lastName,
-        role: _nullishCoalesce(data.role, () => ( "member")),
         status: "pending",
         createdAt: /* @__PURE__ */ new Date(),
         updatedAt: /* @__PURE__ */ new Date()
@@ -4419,7 +4503,7 @@ function createMockPermissionsRepository(stores) {
     },
     deleteRole(roleId) {
       const role = stores.roles.get(roleId);
-      if (_optionalChain([role, 'optionalAccess', _87 => _87.system])) {
+      if (_optionalChain([role, 'optionalAccess', _88 => _88.system])) {
         return Promise.reject(new Error(`Cannot delete system role ${roleId}`));
       }
       stores.roles.delete(roleId);
@@ -4452,7 +4536,6 @@ function createMockPermissionsRepository(stores) {
           scope: input.scope,
           target: input.target,
           actions: input.actions,
-          filter: input.filter,
           createdAt: /* @__PURE__ */ new Date()
         };
         stores.permissions.set(perm.id, perm);
@@ -4497,7 +4580,7 @@ function createMockPermissionsRepository(stores) {
       const tenantId = getTenantId();
       const userRoleIds = Array.from(stores.userRoles.values()).filter((ur) => ur.userProfileId === userProfileId && ur.tenantId === tenantId).map((ur) => ur.roleId);
       const userRoles = Array.from(stores.roles.values()).filter((r) => userRoleIds.includes(r.id));
-      const isAdmin = userRoles.some((r) => r.name === "admin");
+      const hasAdmin = userRoles.some((r) => _chunkJZO52C3Fjs.isAdminRole.call(void 0, r.name));
       const userPermissions = Array.from(stores.permissions.values()).filter(
         (p) => userRoleIds.includes(p.roleId)
       );
@@ -4524,7 +4607,18 @@ function createMockPermissionsRepository(stores) {
           }
         }
       }
-      return Promise.resolve({ isAdmin, objectPermissions, systemPermissions });
+      return Promise.resolve({ isAdmin: hasAdmin, objectPermissions, systemPermissions });
+    },
+    countUsersWithRole(roleName) {
+      const tenantId = getTenantId();
+      const role = Array.from(stores.roles.values()).find(
+        (r) => r.tenantId === tenantId && r.name === roleName
+      );
+      if (!role) return Promise.resolve(0);
+      const userIds = new Set(
+        Array.from(stores.userRoles.values()).filter((ur) => ur.roleId === role.id && ur.tenantId === tenantId).map((ur) => ur.userProfileId)
+      );
+      return Promise.resolve(userIds.size);
     }
   };
 }
@@ -4847,6 +4941,10 @@ function createMockWorkflowsRepository(stores) {
       if (!existing) {
         return Promise.reject(new Error(`Workflow ${id} not found`));
       }
+      const tenantId = getTenantId();
+      if (existing.tenant_id !== tenantId && !existing.system) {
+        return Promise.reject(new Error(`Workflow ${id} not found`));
+      }
       const updated = {
         ...existing,
         label: _nullishCoalesce(data.label, () => ( existing.label)),
@@ -4867,6 +4965,13 @@ function createMockWorkflowsRepository(stores) {
       return Promise.resolve(updated);
     },
     delete(id) {
+      const existing = stores.workflows.get(id);
+      if (existing) {
+        const tenantId = getTenantId();
+        if (existing.tenant_id !== tenantId && !existing.system) {
+          return Promise.reject(new Error(`Workflow ${id} not found`));
+        }
+      }
       stores.workflows.delete(id);
       return Promise.resolve();
     },
@@ -4908,7 +5013,7 @@ function createMockWorkflowInstancesRepository(stores) {
         (i) => i.tenant_id === tenantId
       );
       const total = results.length;
-      if (_optionalChain([options, 'optionalAccess', _88 => _88.limit])) {
+      if (_optionalChain([options, 'optionalAccess', _89 => _89.limit])) {
         results = results.slice(_nullishCoalesce(options.offset, () => ( 0)), (_nullishCoalesce(options.offset, () => ( 0))) + options.limit);
       }
       return Promise.resolve({ instances: results, total });
@@ -4936,7 +5041,7 @@ function createMockWorkflowInstancesRepository(stores) {
         pending_action: _nullishCoalesce(data.pendingAction, () => ( null)),
         error: null,
         started_by: data.startedBy,
-        expires_at: _nullishCoalesce(_optionalChain([data, 'access', _89 => _89.expiresAt, 'optionalAccess', _90 => _90.toISOString, 'call', _91 => _91()]), () => ( null)),
+        expires_at: _nullishCoalesce(_optionalChain([data, 'access', _90 => _90.expiresAt, 'optionalAccess', _91 => _91.toISOString, 'call', _92 => _92()]), () => ( null)),
         created_at: now,
         updated_at: now,
         completed_at: null
@@ -4949,6 +5054,10 @@ function createMockWorkflowInstancesRepository(stores) {
       if (!existing) {
         return Promise.reject(new Error(`WorkflowInstance ${id} not found`));
       }
+      const tenantId = getTenantId();
+      if (existing.tenant_id !== tenantId) {
+        return Promise.reject(new Error(`WorkflowInstance ${id} not found`));
+      }
       const updated = {
         ...existing,
         status: _nullishCoalesce(data.status, () => ( existing.status)),
@@ -4957,8 +5066,8 @@ function createMockWorkflowInstancesRepository(stores) {
         history: _nullishCoalesce(data.history, () => ( existing.history)),
         pending_action: data.pendingAction !== void 0 ? data.pendingAction : existing.pending_action,
         error: data.error !== void 0 ? data.error : existing.error,
-        expires_at: data.expiresAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _92 => _92.expiresAt, 'optionalAccess', _93 => _93.toISOString, 'call', _94 => _94()]), () => ( null)) : existing.expires_at,
-        completed_at: data.completedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _95 => _95.completedAt, 'optionalAccess', _96 => _96.toISOString, 'call', _97 => _97()]), () => ( null)) : existing.completed_at,
+        expires_at: data.expiresAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _93 => _93.expiresAt, 'optionalAccess', _94 => _94.toISOString, 'call', _95 => _95()]), () => ( null)) : existing.expires_at,
+        completed_at: data.completedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _96 => _96.completedAt, 'optionalAccess', _97 => _97.toISOString, 'call', _98 => _98()]), () => ( null)) : existing.completed_at,
         updated_at: (/* @__PURE__ */ new Date()).toISOString()
       };
       stores.workflowInstances.set(id, updated);
@@ -4991,7 +5100,7 @@ function createMockWorkflowInstancesRepository(stores) {
         pending_action: _nullishCoalesce(data.pendingAction, () => ( null)),
         error: null,
         started_by: data.startedBy,
-        expires_at: _nullishCoalesce(_optionalChain([data, 'access', _98 => _98.expiresAt, 'optionalAccess', _99 => _99.toISOString, 'call', _100 => _100()]), () => ( null)),
+        expires_at: _nullishCoalesce(_optionalChain([data, 'access', _99 => _99.expiresAt, 'optionalAccess', _100 => _100.toISOString, 'call', _101 => _101()]), () => ( null)),
         created_at: now,
         updated_at: now,
         completed_at: null
@@ -5014,13 +5123,13 @@ function createMockWorkflowInstancesRepository(stores) {
           return slotData.id === recordId;
         });
       });
-      if (_optionalChain([options, 'optionalAccess', _101 => _101.status])) {
+      if (_optionalChain([options, 'optionalAccess', _102 => _102.status])) {
         results = results.filter((i) => i.status === options.status);
       }
       const total = results.length;
-      if (_optionalChain([options, 'optionalAccess', _102 => _102.offset]) !== void 0 || _optionalChain([options, 'optionalAccess', _103 => _103.limit]) !== void 0) {
-        const start = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _104 => _104.offset]), () => ( 0));
-        const end = _optionalChain([options, 'optionalAccess', _105 => _105.limit]) ? start + options.limit : void 0;
+      if (_optionalChain([options, 'optionalAccess', _103 => _103.offset]) !== void 0 || _optionalChain([options, 'optionalAccess', _104 => _104.limit]) !== void 0) {
+        const start = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _105 => _105.offset]), () => ( 0));
+        const end = _optionalChain([options, 'optionalAccess', _106 => _106.limit]) ? start + options.limit : void 0;
         results = results.slice(start, end);
       }
       return Promise.resolve({ instances: results, total });
@@ -5073,10 +5182,14 @@ function createMockWorkflowInvitationsRepository(stores) {
       if (!existing) {
         return Promise.reject(new Error(`WorkflowInvitation ${id} not found`));
       }
+      const tenantId = getTenantId();
+      if (existing.tenant_id !== tenantId) {
+        return Promise.reject(new Error(`WorkflowInvitation ${id} not found`));
+      }
       const updated = {
         ...existing,
         status: _nullishCoalesce(data.status, () => ( existing.status)),
-        accepted_at: data.acceptedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _106 => _106.acceptedAt, 'optionalAccess', _107 => _107.toISOString, 'call', _108 => _108()]), () => ( null)) : existing.accepted_at,
+        accepted_at: data.acceptedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _107 => _107.acceptedAt, 'optionalAccess', _108 => _108.toISOString, 'call', _109 => _109()]), () => ( null)) : existing.accepted_at,
         expires_at: data.expiresAt !== void 0 ? data.expiresAt.toISOString() : existing.expires_at
       };
       stores.workflowInvitations.set(id, updated);
@@ -5138,11 +5251,15 @@ function createMockWorkflowAccessGrantsRepository(stores) {
       if (!existing) {
         return Promise.reject(new Error(`WorkflowAccessGrant ${id} not found`));
       }
+      const tenantId = getTenantId();
+      if (existing.tenant_id !== tenantId) {
+        return Promise.reject(new Error(`WorkflowAccessGrant ${id} not found`));
+      }
       const updated = {
         ...existing,
         last_used_at: data.lastUsedAt !== void 0 ? data.lastUsedAt.toISOString() : existing.last_used_at,
         revoked_token_jtis: _nullishCoalesce(data.revokedTokenJtis, () => ( existing.revoked_token_jtis)),
-        revoked_at: data.revokedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _109 => _109.revokedAt, 'optionalAccess', _110 => _110.toISOString, 'call', _111 => _111()]), () => ( null)) : existing.revoked_at
+        revoked_at: data.revokedAt !== void 0 ? _nullishCoalesce(_optionalChain([data, 'access', _110 => _110.revokedAt, 'optionalAccess', _111 => _111.toISOString, 'call', _112 => _112()]), () => ( null)) : existing.revoked_at
       };
       stores.workflowAccessGrants.set(id, updated);
       return Promise.resolve(updated);
@@ -5271,6 +5388,20 @@ var PolicyRegistry = class {
 };
 var defaultPolicyRegistry = new PolicyRegistry();
 
+// src/runtime/search.ts
+var SORTABLE_ATTRIBUTE_TYPES = /* @__PURE__ */ new Set([
+  "text",
+  "textarea",
+  "number",
+  "date",
+  "select",
+  "status",
+  "multiselect",
+  "checkbox",
+  "rating",
+  "currency"
+]);
+
 // src/runtime/services/base.service.ts
 var BaseService = class {
   constructor(adapter) {
@@ -5351,7 +5482,7 @@ var BaseService = class {
    * @param key - Cache key to invalidate
    */
   async invalidateCache(key) {
-    await _optionalChain([this, 'access', _112 => _112.cache, 'optionalAccess', _113 => _113.delete, 'call', _114 => _114(key)]);
+    await _optionalChain([this, 'access', _113 => _113.cache, 'optionalAccess', _114 => _114.delete, 'call', _115 => _115(key)]);
   }
   /**
    * Invalidate all cache keys matching a pattern.
@@ -5359,7 +5490,7 @@ var BaseService = class {
    * @param pattern - Glob-style pattern (e.g., "schema:tenant-123:*")
    */
   async invalidateCachePattern(pattern) {
-    await _optionalChain([this, 'access', _115 => _115.cache, 'optionalAccess', _116 => _116.deletePattern, 'call', _117 => _117(pattern)]);
+    await _optionalChain([this, 'access', _116 => _116.cache, 'optionalAccess', _117 => _117.deletePattern, 'call', _118 => _118(pattern)]);
   }
   /**
    * Invalidate all cached lists for a resource.
@@ -5490,6 +5621,15 @@ function isBilateralRelation(attr) {
 function inferInverseCardinality(cardinality) {
   return cardinality === "one" ? "many" : "many";
 }
+var NON_SORTABLE_TYPES = /* @__PURE__ */ new Set([
+  "richtext",
+  "file",
+  "document",
+  "location"
+]);
+function isAttributeSortable(attr) {
+  return !NON_SORTABLE_TYPES.has(attr.type);
+}
 
 // src/types/relation-properties.ts
 var FORBIDDEN_PROPERTY_TYPES = [
@@ -5574,17 +5714,17 @@ function validateOptions(options, attributeName) {
   const ids = /* @__PURE__ */ new Set();
   const values = /* @__PURE__ */ new Set();
   for (const option of options) {
-    if (!_optionalChain([option, 'access', _118 => _118.id, 'optionalAccess', _119 => _119.trim, 'call', _120 => _120()])) {
+    if (!_optionalChain([option, 'access', _119 => _119.id, 'optionalAccess', _120 => _120.trim, 'call', _121 => _121()])) {
       throw new Error(
         `[AttributeBuilder] Option in "${attributeName}" has an empty or missing id.`
       );
     }
-    if (!_optionalChain([option, 'access', _121 => _121.value, 'optionalAccess', _122 => _122.trim, 'call', _123 => _123()])) {
+    if (!_optionalChain([option, 'access', _122 => _122.value, 'optionalAccess', _123 => _123.trim, 'call', _124 => _124()])) {
       throw new Error(
         `[AttributeBuilder] Option "${option.id}" in "${attributeName}" has an empty or missing value.`
       );
     }
-    if (!_optionalChain([option, 'access', _124 => _124.label, 'optionalAccess', _125 => _125.trim, 'call', _126 => _126()])) {
+    if (!_optionalChain([option, 'access', _125 => _125.label, 'optionalAccess', _126 => _126.trim, 'call', _127 => _127()])) {
       throw new Error(
         `[AttributeBuilder] Option "${option.id}" in "${attributeName}" has an empty or missing label.`
       );
@@ -5682,8 +5822,8 @@ var BaseAttributeBuilder = class {
   featureGate(flagName, options) {
     this.attr.featureGate = {
       flag: flagName,
-      expectedValue: _optionalChain([options, 'optionalAccess', _127 => _127.expectedValue]),
-      fallback: _optionalChain([options, 'optionalAccess', _128 => _128.fallback])
+      expectedValue: _optionalChain([options, 'optionalAccess', _128 => _128.expectedValue]),
+      fallback: _optionalChain([options, 'optionalAccess', _129 => _129.fallback])
     };
     return this;
   }
@@ -6126,7 +6266,7 @@ var BaseRelationAttributeBuilder = class extends BaseAttributeBuilder {
       object: objectName,
       ...options
     };
-    _optionalChain([this, 'access', _129 => _129.attr, 'access', _130 => _130.targets, 'optionalAccess', _131 => _131.push, 'call', _132 => _132(target)]);
+    _optionalChain([this, 'access', _130 => _130.attr, 'access', _131 => _131.targets, 'optionalAccess', _132 => _132.push, 'call', _133 => _133(target)]);
     return this;
   }
   /**
@@ -6209,6 +6349,20 @@ var SingleRelationAttributeBuilder = class extends BaseRelationAttributeBuilder
         isRequired: this.attr.required
       }
     );
+    if (this.attr.system) multiBuilder.system();
+    if (this.attr.hidden) multiBuilder.hidden();
+    if (this.attr.disabled) multiBuilder.disabled();
+    if (this.attr.placeholder) multiBuilder.placeholder(this.attr.placeholder);
+    if (this.attr.description) multiBuilder.description(this.attr.description);
+    if (this.attr.icon) multiBuilder.icon(this.attr.icon);
+    if (this.attr.order !== void 0) multiBuilder.order(this.attr.order);
+    if (this.attr.metadata) multiBuilder.metadata(this.attr.metadata);
+    if (this.attr.featureGate) {
+      multiBuilder.featureGate(this.attr.featureGate.flag, {
+        expectedValue: this.attr.featureGate.expectedValue,
+        fallback: this.attr.featureGate.fallback
+      });
+    }
     return multiBuilder;
   }
   required() {
@@ -6224,9 +6378,9 @@ var MultiRelationAttributeBuilder = class extends BaseRelationAttributeBuilder {
   constructor(name, label, initOptions) {
     super("relation", name, label);
     this.attr.cardinality = "many";
-    this.attr.targets = _nullishCoalesce(_optionalChain([initOptions, 'optionalAccess', _133 => _133.targets]), () => ( []));
+    this.attr.targets = _nullishCoalesce(_optionalChain([initOptions, 'optionalAccess', _134 => _134.targets]), () => ( []));
     this.attr.defaultValue = [];
-    if (_optionalChain([initOptions, 'optionalAccess', _134 => _134.isRequired])) {
+    if (_optionalChain([initOptions, 'optionalAccess', _135 => _135.isRequired])) {
       this.setRequired(true);
     }
   }
@@ -6449,6 +6603,13 @@ var DocumentAttributeBuilder = class extends BaseAttributeBuilder {
     this.setRequired(true);
     return this;
   }
+  /**
+   * Mark this attribute as optional (undo required).
+   */
+  optional() {
+    this.setRequired(false);
+    return this;
+  }
 };
 function document(config) {
   return new DocumentAttributeBuilder(config.name, config.label);
@@ -6667,7 +6828,7 @@ var GroupBuilder = class {
    */
   fields(...names) {
     for (const name of names) {
-      _optionalChain([this, 'access', _135 => _135.data, 'access', _136 => _136.fields, 'optionalAccess', _137 => _137.push, 'call', _138 => _138({ attribute: name })]);
+      _optionalChain([this, 'access', _136 => _136.data, 'access', _137 => _137.fields, 'optionalAccess', _138 => _138.push, 'call', _139 => _139({ attribute: name })]);
     }
     return this;
   }
@@ -6676,7 +6837,7 @@ var GroupBuilder = class {
    * @example .field("name", { span: 8, readOnly: true })
    */
   field(attribute, options) {
-    _optionalChain([this, 'access', _139 => _139.data, 'access', _140 => _140.fields, 'optionalAccess', _141 => _141.push, 'call', _142 => _142({ attribute, ...options })]);
+    _optionalChain([this, 'access', _140 => _140.data, 'access', _141 => _141.fields, 'optionalAccess', _142 => _142.push, 'call', _143 => _143({ attribute, ...options })]);
     return this;
   }
   /**
@@ -6685,7 +6846,7 @@ var GroupBuilder = class {
    * @example .attributeGroup({ id: "address", label: "Address", attributes: ["street", "city", "postal_code"], displayTemplate: "{street}, {city}" })
    */
   attributeGroup(config, options) {
-    _optionalChain([this, 'access', _143 => _143.data, 'access', _144 => _144.fields, 'optionalAccess', _145 => _145.push, 'call', _146 => _146({ attributeGroup: config, ...options })]);
+    _optionalChain([this, 'access', _144 => _144.data, 'access', _145 => _145.fields, 'optionalAccess', _146 => _146.push, 'call', _147 => _147({ attributeGroup: config, ...options })]);
     return this;
   }
   /**
@@ -7753,8 +7914,8 @@ var WorkflowFormRowBuilder = class {
       id: `${this.rowData.id}-${slotId}-${attribute}`,
       slotId,
       attribute,
-      label: _optionalChain([options, 'optionalAccess', _147 => _147.label]),
-      required: _optionalChain([options, 'optionalAccess', _148 => _148.required])
+      label: _optionalChain([options, 'optionalAccess', _148 => _148.label]),
+      required: _optionalChain([options, 'optionalAccess', _149 => _149.required])
     };
     this.rowData.fields.push(field);
     return this;
@@ -8045,7 +8206,7 @@ var WorkflowBuilder = class {
    * @param options - Slot configuration
    */
   slot(id, objectName, options) {
-    if (_optionalChain([this, 'access', _149 => _149.data, 'access', _150 => _150.slots, 'optionalAccess', _151 => _151.some, 'call', _152 => _152((s) => s.id === id)])) {
+    if (_optionalChain([this, 'access', _150 => _150.data, 'access', _151 => _151.slots, 'optionalAccess', _152 => _152.some, 'call', _153 => _153((s) => s.id === id)])) {
       throw new Error(`[WorkflowBuilder] Duplicate slot id: "${id}"`);
     }
     const slot = {
@@ -8056,7 +8217,7 @@ var WorkflowBuilder = class {
       color: options.color,
       icon: options.icon
     };
-    _optionalChain([this, 'access', _153 => _153.data, 'access', _154 => _154.slots, 'optionalAccess', _155 => _155.push, 'call', _156 => _156(slot)]);
+    _optionalChain([this, 'access', _154 => _154.data, 'access', _155 => _155.slots, 'optionalAccess', _156 => _156.push, 'call', _157 => _157(slot)]);
     return this;
   }
   // ============================================================================
@@ -8188,7 +8349,7 @@ var WorkflowBuilder = class {
     }
   }
   validateSlotReferences() {
-    const slotIds = _nullishCoalesce(_optionalChain([this, 'access', _157 => _157.data, 'access', _158 => _158.slots, 'optionalAccess', _159 => _159.reduce, 'call', _160 => _160((set, s) => set.add(s.id), /* @__PURE__ */ new Set())]), () => ( /* @__PURE__ */ new Set()));
+    const slotIds = _nullishCoalesce(_optionalChain([this, 'access', _158 => _158.data, 'access', _159 => _159.slots, 'optionalAccess', _160 => _160.reduce, 'call', _161 => _161((set, s) => set.add(s.id), /* @__PURE__ */ new Set())]), () => ( /* @__PURE__ */ new Set()));
     for (const node of Object.values(_nullishCoalesce(this.data.nodes, () => ( {})))) {
       if (node.type === "form") {
         const referencedSlots = /* @__PURE__ */ new Set();
@@ -8506,7 +8667,7 @@ var ObjectSchemaService = class extends BaseService {
   constructor(adapter, nativeRegistry, options) {
     super(adapter);
     this.nativeRegistry = nativeRegistry;
-    this.auditService = _optionalChain([options, 'optionalAccess', _161 => _161.auditService]);
+    this.auditService = _optionalChain([options, 'optionalAccess', _162 => _162.auditService]);
     this.bilateralValidationService = new BilateralValidationService(adapter, this);
   }
   /**
@@ -8749,7 +8910,7 @@ var ObjectSchemaService = class extends BaseService {
           resourceType: "attribute",
           resourceId: attributeId,
           resourceLabel: updatedDbAttr.label,
-          objectName: _optionalChain([dbObject, 'optionalAccess', _162 => _162.name]),
+          objectName: _optionalChain([dbObject, 'optionalAccess', _163 => _163.name]),
           objectId: dbAttr.objectId,
           changes
         });
@@ -8782,7 +8943,7 @@ var ObjectSchemaService = class extends BaseService {
       );
     }
     const dbObject = await this.adapter.objects.findById(dbAttr.objectId);
-    if (_optionalChain([dbObject, 'optionalAccess', _163 => _163.labelExpression])) {
+    if (_optionalChain([dbObject, 'optionalAccess', _164 => _164.labelExpression])) {
       const usedAttributes = extractAttributeNames(dbObject.labelExpression);
       if (usedAttributes.includes(dbAttr.name)) {
         throw new AttributeInUseError(dbAttr.name, "labelExpression");
@@ -8798,7 +8959,7 @@ var ObjectSchemaService = class extends BaseService {
         resourceType: "attribute",
         resourceId: attributeId,
         resourceLabel: dbAttr.label,
-        objectName: _optionalChain([dbObject, 'optionalAccess', _164 => _164.name]),
+        objectName: _optionalChain([dbObject, 'optionalAccess', _165 => _165.name]),
         objectId: dbAttr.objectId
       });
     }
@@ -8813,9 +8974,9 @@ var ObjectSchemaService = class extends BaseService {
   async listAttributes(objectId, options) {
     const dbAttributes = await this.adapter.attributes.findByObjectId(objectId);
     let filtered = dbAttributes;
-    if (_optionalChain([options, 'optionalAccess', _165 => _165.systemOnly])) {
+    if (_optionalChain([options, 'optionalAccess', _166 => _166.systemOnly])) {
       filtered = dbAttributes.filter((attr) => attr.system);
-    } else if (_optionalChain([options, 'optionalAccess', _166 => _166.customOnly])) {
+    } else if (_optionalChain([options, 'optionalAccess', _167 => _167.customOnly])) {
       filtered = dbAttributes.filter((attr) => !attr.system);
     }
     return filtered.map((attr) => this.convertDBAttributeToAttribute(attr));
@@ -8851,14 +9012,14 @@ var ObjectSchemaService = class extends BaseService {
       pluralLabel: dbObject.pluralLabel,
       description: dbObject.description,
       labelExpression: dbObject.labelExpression,
-      icon: _optionalChain([dbObject, 'access', _167 => _167.metadata, 'optionalAccess', _168 => _168.icon])
+      icon: _optionalChain([dbObject, 'access', _168 => _168.metadata, 'optionalAccess', _169 => _169.icon])
     };
     let metadata = dbObject.metadata;
     if (updates.icon !== void 0 || updates.metadata !== void 0) {
       metadata = {
         ...dbObject.metadata,
         ...updates.metadata,
-        icon: _nullishCoalesce(updates.icon, () => ( _optionalChain([dbObject, 'access', _169 => _169.metadata, 'optionalAccess', _170 => _170.icon])))
+        icon: _nullishCoalesce(updates.icon, () => ( _optionalChain([dbObject, 'access', _170 => _170.metadata, 'optionalAccess', _171 => _171.icon])))
       };
     }
     const updatedDbObject = await this.adapter.objects.update(objectId, {
@@ -8901,6 +9062,19 @@ var ObjectSchemaService = class extends BaseService {
         });
       });
       await this.invalidateCachePattern(cacheKeys.allResolvedRelations(this.tenantId));
+      if (this.adapter.search) {
+        const { records } = await this.adapter.objectRecords.list(objectId, { limit: 1e4 });
+        this.adapter.search.bulkIndex(
+          records.map((r) => ({
+            record: r,
+            objectName: updatedDbObject.name,
+            objectLabel: updatedDbObject.label,
+            attributes
+          }))
+        ).catch(
+          (err) => console.error("[search] Bulk re-index after label refresh failed", objectId, err)
+        );
+      }
     }
     return this.convertDBObjectToDefinition(updatedDbObject, dbAttributes);
   }
@@ -9101,7 +9275,7 @@ Reserved names: ${RESERVED_ATTRIBUTE_NAMES.join(", ")}`
       let properties = inverseDbAttr.config.properties;
       if (!properties) {
         const nativeObj = this.nativeRegistry.getByName(bilateral.object);
-        const nativeAttr = _optionalChain([nativeObj, 'optionalAccess', _171 => _171.attributes, 'access', _172 => _172.find, 'call', _173 => _173((a) => a.name === bilateral.attribute)]);
+        const nativeAttr = _optionalChain([nativeObj, 'optionalAccess', _172 => _172.attributes, 'access', _173 => _173.find, 'call', _174 => _174((a) => a.name === bilateral.attribute)]);
         if (nativeAttr && "properties" in nativeAttr) {
           properties = nativeAttr.properties;
         }
@@ -9190,7 +9364,7 @@ Reserved names: ${RESERVED_ATTRIBUTE_NAMES.join(", ")}`
       label: dbObject.label,
       pluralLabel: dbObject.pluralLabel,
       description: dbObject.description,
-      icon: _optionalChain([dbObject, 'access', _174 => _174.metadata, 'optionalAccess', _175 => _175.icon]),
+      icon: _optionalChain([dbObject, 'access', _175 => _175.metadata, 'optionalAccess', _176 => _176.icon]),
       labelExpression: dbObject.labelExpression,
       attributes,
       system: dbObject.system,
@@ -9290,7 +9464,7 @@ Reserved names: ${RESERVED_ATTRIBUTE_NAMES.join(", ")}`
       const hasRelationToTarget = attrs.some((attr) => {
         if (attr.type !== "relation") return false;
         const config = attr.config;
-        return _nullishCoalesce(_optionalChain([config, 'optionalAccess', _176 => _176.targets, 'optionalAccess', _177 => _177.some, 'call', _178 => _178((t) => t.object === targetObjectName)]), () => ( false));
+        return _nullishCoalesce(_optionalChain([config, 'optionalAccess', _177 => _177.targets, 'optionalAccess', _178 => _178.some, 'call', _179 => _179((t) => t.object === targetObjectName)]), () => ( false));
       });
       if (hasRelationToTarget) {
         referencing.push(obj.name);
@@ -9368,7 +9542,7 @@ Native objects must have system=true. Did you forget to call .system() in your b
       const existing = this.objects.get(object2.name);
       throw new Error(
         `[NativeObjectRegistry] Duplicate object name "${object2.name}":
-  - Existing: "${_optionalChain([existing, 'optionalAccess', _179 => _179.label])}" (id: ${_optionalChain([existing, 'optionalAccess', _180 => _180.id])})
+  - Existing: "${_optionalChain([existing, 'optionalAccess', _180 => _180.label])}" (id: ${_optionalChain([existing, 'optionalAccess', _181 => _181.id])})
   - New: "${object2.label}" (id: ${object2.id})
 Please use unique names for each native object.`
       );
@@ -9485,7 +9659,7 @@ var AuditService = class extends BaseService {
     this.isFlushing = false;
     /** Pending flush promise to allow waiting on concurrent flush */
     this.flushPromise = null;
-    if (_optionalChain([options, 'optionalAccess', _181 => _181.async]) && options.flushIntervalMs) {
+    if (_optionalChain([options, 'optionalAccess', _182 => _182.async]) && options.flushIntervalMs) {
       this.startFlushTimer();
     }
   }
@@ -9682,7 +9856,7 @@ var AuditService = class extends BaseService {
     if (!this.adapter.audit) {
       return;
     }
-    if (_optionalChain([this, 'access', _182 => _182.options, 'optionalAccess', _183 => _183.async])) {
+    if (_optionalChain([this, 'access', _183 => _183.options, 'optionalAccess', _184 => _184.async])) {
       this.buffer.push(entry);
       const batchSize = _nullishCoalesce(this.options.batchSize, () => ( 10));
       if (this.buffer.length >= batchSize) {
@@ -9696,7 +9870,7 @@ var AuditService = class extends BaseService {
    * Start the flush timer for async mode
    */
   startFlushTimer() {
-    const intervalMs = _nullishCoalesce(_optionalChain([this, 'access', _184 => _184.options, 'optionalAccess', _185 => _185.flushIntervalMs]), () => ( 1e3));
+    const intervalMs = _nullishCoalesce(_optionalChain([this, 'access', _185 => _185.options, 'optionalAccess', _186 => _186.flushIntervalMs]), () => ( 1e3));
     this.flushTimer = setInterval(() => {
       this.flush().catch(() => {
       });
@@ -9726,7 +9900,7 @@ var browserStub4 = {
   run: (_store, callback) => callback()
 };
 var AsyncLocalStorageClass4 = null;
-if (typeof process !== "undefined" && _optionalChain([process, 'access', _186 => _186.versions, 'optionalAccess', _187 => _187.node])) {
+if (typeof process !== "undefined" && _optionalChain([process, 'access', _187 => _187.versions, 'optionalAccess', _188 => _188.node])) {
   try {
     if (typeof _chunk3RG5ZIWIjs.__require !== "undefined") {
       const asyncHooks = _chunk3RG5ZIWIjs.__require.call(void 0, "async_hooks");
@@ -9785,7 +9959,7 @@ var BilateralSyncService = class extends BaseService {
     }
     const ctx = getSyncContext().getStore();
     const syncKey = `${sourceSchema.name}:${sourceRecordId}:${attributeName}`;
-    if (_optionalChain([ctx, 'optionalAccess', _188 => _188.syncing, 'access', _189 => _189.has, 'call', _190 => _190(syncKey)])) {
+    if (_optionalChain([ctx, 'optionalAccess', _189 => _189.syncing, 'access', _190 => _190.has, 'call', _191 => _191(syncKey)])) {
       return;
     }
     await this.runWithSyncContext(syncKey, async () => {
@@ -10010,7 +10184,7 @@ var BilateralSyncService = class extends BaseService {
     const storage = getSyncContext();
     const existingCtx = storage.getStore();
     const ctx = {
-      syncing: new Set(_nullishCoalesce(_optionalChain([existingCtx, 'optionalAccess', _191 => _191.syncing]), () => ( [])))
+      syncing: new Set(_nullishCoalesce(_optionalChain([existingCtx, 'optionalAccess', _192 => _192.syncing]), () => ( [])))
     };
     ctx.syncing.add(syncKey);
     return await storage.run(ctx, fn);
@@ -10072,6 +10246,21 @@ var UserService = class extends BaseService {
     }
     const users = await this.adapter.userProfiles.findByIds([...allIds]);
     const userMap = new Map(users.map((u) => [u.id, u]));
+    const allAllowedRoles = /* @__PURE__ */ new Set();
+    for (const [, { attr }] of attrIdMap) {
+      if (attr.allowedRoles && attr.allowedRoles.length > 0) {
+        for (const role of attr.allowedRoles) {
+          allAllowedRoles.add(role);
+        }
+      }
+    }
+    let userRolesMap;
+    if (allAllowedRoles.size > 0) {
+      const usersWithRoles = await this.adapter.userProfiles.getUsersWithRoles({
+        allowedRoles: [...allAllowedRoles]
+      });
+      userRolesMap = new Map(usersWithRoles.map((u) => [u.id, u.roles.map((r) => r.name)]));
+    }
     for (const [attrName, { attr, ids }] of attrIdMap) {
       const invalidIds = [];
       const roleErrors = [];
@@ -10085,8 +10274,10 @@ var UserService = class extends BaseService {
           invalidIds.push(id);
           continue;
         }
-        if (attr.allowedRoles && attr.allowedRoles.length > 0) {
-          if (!attr.allowedRoles.includes(user2.role)) {
+        if (attr.allowedRoles && attr.allowedRoles.length > 0 && userRolesMap) {
+          const userRoleNames = _nullishCoalesce(userRolesMap.get(id), () => ( []));
+          const hasAllowedRole = attr.allowedRoles.some((role) => userRoleNames.includes(role));
+          if (!hasAllowedRole) {
             roleErrors.push(id);
           }
         }
@@ -10101,7 +10292,7 @@ var UserService = class extends BaseService {
       if (roleErrors.length > 0) {
         errors.push({
           attribute: attrName,
-          message: `Users do not have required role for ${attr.label}. Allowed roles: ${_optionalChain([attr, 'access', _192 => _192.allowedRoles, 'optionalAccess', _193 => _193.join, 'call', _194 => _194(", ")])}`,
+          message: `Users do not have required role for ${attr.label}. Allowed roles: ${_optionalChain([attr, 'access', _193 => _193.allowedRoles, 'optionalAccess', _194 => _194.join, 'call', _195 => _195(", ")])}`,
           invalidIds: roleErrors
         });
       }
@@ -10625,7 +10816,7 @@ var RelationPropertiesService = class extends BaseService {
         }
       }
     }
-    const shouldStoreAsInverse = _optionalChain([attribute, 'access', _195 => _195.bilateral, 'optionalAccess', _196 => _196.storageOwner]) === false;
+    const shouldStoreAsInverse = _optionalChain([attribute, 'access', _196 => _196.bilateral, 'optionalAccess', _197 => _197.storageOwner]) === false;
     let storageFromObject = schema.name;
     let storageFromAttribute = attributeName;
     if (shouldStoreAsInverse && attribute.bilateral) {
@@ -10637,7 +10828,7 @@ var RelationPropertiesService = class extends BaseService {
       if (shouldStoreAsInverse) {
         const results = await Promise.all(
           normalized.map(
-            (item) => _optionalChain([adapter, 'access', _197 => _197.relationAttributes, 'optionalAccess', _198 => _198.findBySource, 'call', _199 => _199(
+            (item) => _optionalChain([adapter, 'access', _198 => _198.relationAttributes, 'optionalAccess', _199 => _199.findBySource, 'call', _200 => _200(
               storageFromObject,
               item.id,
               storageFromAttribute
@@ -10776,7 +10967,7 @@ var RecordQueryService = class extends BaseService {
     super(adapter);
     this.schemaService = schemaService;
     this.options = options;
-    this.policyRegistry = _optionalChain([options, 'optionalAccess', _200 => _200.policyRegistry]) === null ? null : _nullishCoalesce(_optionalChain([options, 'optionalAccess', _201 => _201.policyRegistry]), () => ( defaultPolicyRegistry));
+    this.policyRegistry = _optionalChain([options, 'optionalAccess', _201 => _201.policyRegistry]) === null ? null : _nullishCoalesce(_optionalChain([options, 'optionalAccess', _202 => _202.policyRegistry]), () => ( defaultPolicyRegistry));
     this.relationPropertiesService = new RelationPropertiesService(adapter);
   }
   // ============================================================================
@@ -10827,12 +11018,12 @@ var RecordQueryService = class extends BaseService {
    * Internal list query execution
    */
   async executeListQuery(schema, objectId, options) {
-    if (_optionalChain([this, 'access', _202 => _202.options, 'optionalAccess', _203 => _203.permissionService]) && this.userId) {
+    if (_optionalChain([this, 'access', _203 => _203.options, 'optionalAccess', _204 => _204.permissionService]) && this.userId) {
       await checkPermission(this.options.permissionService, this.userId, schema.name, "read");
     }
-    const policy = _optionalChain([options, 'optionalAccess', _204 => _204.skipPolicyFilter]) ? void 0 : getPolicy(this.policyRegistry, this.userId, schema.name);
+    const policy = _optionalChain([options, 'optionalAccess', _205 => _205.skipPolicyFilter]) ? void 0 : getPolicy(this.policyRegistry, this.userId, schema.name);
     let effectiveOptions = options;
-    if (_optionalChain([policy, 'optionalAccess', _205 => _205.applyListFilter]) && this.userId) {
+    if (_optionalChain([policy, 'optionalAccess', _206 => _206.applyListFilter]) && this.userId) {
       const ctx = buildPolicyContext(schema.name, this.userId, this.tenantId);
       effectiveOptions = policy.applyListFilter(ctx, options);
     }
@@ -10842,10 +11033,10 @@ var RecordQueryService = class extends BaseService {
     );
     let filteredRecords = result.records;
     let effectiveTotal = result.total;
-    if (_optionalChain([policy, 'optionalAccess', _206 => _206.canAccessRecord]) && this.userId) {
+    if (_optionalChain([policy, 'optionalAccess', _207 => _207.canAccessRecord]) && this.userId) {
       const ctx = buildPolicyContext(schema.name, this.userId, this.tenantId);
-      const requestedLimit = _nullishCoalesce(_optionalChain([effectiveOptions, 'optionalAccess', _207 => _207.limit]), () => ( 20));
-      const requestedOffset = _nullishCoalesce(_optionalChain([effectiveOptions, 'optionalAccess', _208 => _208.offset]), () => ( 0));
+      const requestedLimit = _nullishCoalesce(_optionalChain([effectiveOptions, 'optionalAccess', _208 => _208.limit]), () => ( 20));
+      const requestedOffset = _nullishCoalesce(_optionalChain([effectiveOptions, 'optionalAccess', _209 => _209.offset]), () => ( 0));
       const overfetchMultiplier = 5;
       const batchSize = requestedLimit * overfetchMultiplier;
       const maxScanRecords = 1e4;
@@ -10867,7 +11058,7 @@ var RecordQueryService = class extends BaseService {
           exhausted = true;
           break;
         }
-        const filtered = batch.records.filter((record) => _optionalChain([policy, 'access', _209 => _209.canAccessRecord, 'optionalCall', _210 => _210(ctx, record)]));
+        const filtered = batch.records.filter((record) => _optionalChain([policy, 'access', _210 => _210.canAccessRecord, 'optionalCall', _211 => _211(ctx, record)]));
         collected.push(...filtered);
         dbOffset += batch.records.length;
         totalScanned += batch.records.length;
@@ -10883,7 +11074,7 @@ var RecordQueryService = class extends BaseService {
       filteredRecords,
       schema
     );
-    if (!_optionalChain([options, 'optionalAccess', _211 => _211.skipFormulas])) {
+    if (!_optionalChain([options, 'optionalAccess', _212 => _212.skipFormulas])) {
       return {
         records: enrichRecordsWithFormulas(filteredRecords, schema),
         total: effectiveTotal
@@ -10943,18 +11134,37 @@ var RecordQueryService = class extends BaseService {
    * Internal search query execution
    */
   async executeSearchQuery(schema, objectId, query, options) {
-    if (_optionalChain([this, 'access', _212 => _212.options, 'optionalAccess', _213 => _213.permissionService]) && this.userId) {
+    if (_optionalChain([this, 'access', _213 => _213.options, 'optionalAccess', _214 => _214.permissionService]) && this.userId) {
       await checkPermission(this.options.permissionService, this.userId, schema.name, "read");
     }
-    const result = await runWithSchemaContext(
-      [schema],
-      () => this.adapter.objectRecords.search(objectId, query, options)
-    );
+    let result;
+    if (this.adapter.search) {
+      try {
+        result = await this.adapter.search.searchRecords(objectId, query, {
+          limit: _optionalChain([options, 'optionalAccess', _215 => _215.limit]),
+          offset: _optionalChain([options, 'optionalAccess', _216 => _216.offset]),
+          sorts: _optionalChain([options, 'optionalAccess', _217 => _217.sorts]),
+          filters: _optionalChain([options, 'optionalAccess', _218 => _218.filters]),
+          attributes: schema.attributes
+        });
+        result = await this.healSearchResults(result);
+      } catch (e15) {
+        result = await runWithSchemaContext(
+          [schema],
+          () => this.adapter.objectRecords.search(objectId, query, options)
+        );
+      }
+    } else {
+      result = await runWithSchemaContext(
+        [schema],
+        () => this.adapter.objectRecords.search(objectId, query, options)
+      );
+    }
     const enrichedRecords = await this.relationPropertiesService.enrichRecordsBatch(
       result.records,
       schema
     );
-    if (!_optionalChain([options, 'optionalAccess', _214 => _214.skipFormulas])) {
+    if (!_optionalChain([options, 'optionalAccess', _219 => _219.skipFormulas])) {
       return {
         records: enrichRecordsWithFormulas(enrichedRecords, schema),
         total: result.total
@@ -10965,6 +11175,32 @@ var RecordQueryService = class extends BaseService {
       total: result.total
     };
   }
+  // ==========================================================================
+  // Self-healing: ghost record cleanup
+  // ==========================================================================
+  /**
+   * Verify Meilisearch results against PostgreSQL and remove ghost records.
+   * Fire-and-forget cleanup of records that no longer exist in PG.
+   */
+  async healSearchResults(meiliResult) {
+    const { search } = this.adapter;
+    if (!search || meiliResult.records.length === 0) {
+      return meiliResult;
+    }
+    const ids = meiliResult.records.map((r) => r.id);
+    const existing = await this.adapter.objectRecords.findByIds(ids);
+    const existingSet = new Set(existing.map((r) => r.id));
+    const ghosts = ids.filter((id) => !existingSet.has(id));
+    if (ghosts.length > 0) {
+      Promise.all(ghosts.map((id) => search.removeRecord(id))).catch(
+        (err) => console.error("[search] Failed to clean ghost records from per-object search", err)
+      );
+    }
+    return {
+      records: meiliResult.records.filter((r) => existingSet.has(r.id)),
+      total: meiliResult.total - ghosts.length
+    };
+  }
 };
 
 // src/runtime/services/record/record-resolver.service.ts
@@ -11137,7 +11373,7 @@ var RelationService = class extends BaseService {
     }
     const isUniversal = attr.targets.length === 1 && attr.targets[0].object === RELATION_TARGET_ANY;
     const validObjectIds = isUniversal ? null : await this.getValidObjectIds(attr.targets);
-    if (!isUniversal && _optionalChain([validObjectIds, 'optionalAccess', _215 => _215.size]) === 0) {
+    if (!isUniversal && _optionalChain([validObjectIds, 'optionalAccess', _220 => _220.size]) === 0) {
       errors.push({
         attribute: attr.name,
         message: `No valid target objects found for ${attr.label}`
@@ -11190,10 +11426,10 @@ var RelationService = class extends BaseService {
     for (const target of targets) {
       try {
         const objectSchema = await this.schemaService.getObjectSchemaByName(target.object);
-        if (_optionalChain([objectSchema, 'optionalAccess', _216 => _216.id])) {
+        if (_optionalChain([objectSchema, 'optionalAccess', _221 => _221.id])) {
           objectIds.add(objectSchema.id);
         }
-      } catch (e15) {
+      } catch (e16) {
       }
     }
     return objectIds;
@@ -11259,7 +11495,7 @@ var RelationService = class extends BaseService {
     const targetResults = await Promise.all(
       filteredTargets.map(async (target) => {
         const objectSchema = await this.schemaService.getObjectSchemaByName(target.object);
-        if (!_optionalChain([objectSchema, 'optionalAccess', _217 => _217.id])) return { options: [], total: 0 };
+        if (!_optionalChain([objectSchema, 'optionalAccess', _222 => _222.id])) return { options: [], total: 0 };
         const objectId = objectSchema.id;
         const result = query ? await queryService.searchRecords(objectId, query, queryOptions) : await queryService.listRecords(objectId, queryOptions);
         const options = await Promise.all(
@@ -11416,8 +11652,8 @@ var RelationService = class extends BaseService {
         continue;
       }
       const attribute = attributeMap.get(attributeId);
-      const targetConfig = _optionalChain([attribute, 'optionalAccess', _218 => _218.targets, 'optionalAccess', _219 => _219.find, 'call', _220 => _220((t) => t.object === objectSchema.name)]);
-      const customTemplate = _optionalChain([targetConfig, 'optionalAccess', _221 => _221.displayTemplate]);
+      const targetConfig = _optionalChain([attribute, 'optionalAccess', _223 => _223.targets, 'optionalAccess', _224 => _224.find, 'call', _225 => _225((t) => t.object === objectSchema.name)]);
+      const customTemplate = _optionalChain([targetConfig, 'optionalAccess', _226 => _226.displayTemplate]);
       const label = await this.resolveLabel(record, objectSchema, customTemplate);
       resolved.push({
         _compositeId: compositeId,
@@ -11580,14 +11816,14 @@ var RollupService = class extends BaseService {
     const sourceSchema = getSchemaByNameFromContext(sourceObjectName);
     let sourceObjectId;
     let reverseRelationAttrName;
-    if (_optionalChain([sourceSchema, 'optionalAccess', _222 => _222.id])) {
+    if (_optionalChain([sourceSchema, 'optionalAccess', _227 => _227.id])) {
       sourceObjectId = sourceSchema.id;
       const reverseRelationAttr = sourceSchema.attributes.find((attr) => {
         if (attr.type !== "relation") return false;
         const relationConfig = attr;
-        return _optionalChain([relationConfig, 'optionalAccess', _223 => _223.targets, 'optionalAccess', _224 => _224.some, 'call', _225 => _225((t) => t.object === schema.name)]);
+        return _optionalChain([relationConfig, 'optionalAccess', _228 => _228.targets, 'optionalAccess', _229 => _229.some, 'call', _230 => _230((t) => t.object === schema.name)]);
       });
-      reverseRelationAttrName = _optionalChain([reverseRelationAttr, 'optionalAccess', _226 => _226.name]);
+      reverseRelationAttrName = _optionalChain([reverseRelationAttr, 'optionalAccess', _231 => _231.name]);
     } else {
       const sourceObject = await this.adapter.objects.findByName(sourceObjectName);
       if (!sourceObject) {
@@ -11598,9 +11834,9 @@ var RollupService = class extends BaseService {
       const reverseRelationAttr = sourceAttributes.find((attr) => {
         if (attr.type !== "relation") return false;
         const relationConfig = attr.config;
-        return _optionalChain([relationConfig, 'optionalAccess', _227 => _227.targets, 'optionalAccess', _228 => _228.some, 'call', _229 => _229((t) => t.object === schema.name)]);
+        return _optionalChain([relationConfig, 'optionalAccess', _232 => _232.targets, 'optionalAccess', _233 => _233.some, 'call', _234 => _234((t) => t.object === schema.name)]);
       });
-      reverseRelationAttrName = _optionalChain([reverseRelationAttr, 'optionalAccess', _230 => _230.name]);
+      reverseRelationAttrName = _optionalChain([reverseRelationAttr, 'optionalAccess', _235 => _235.name]);
     }
     if (!reverseRelationAttrName) {
       return { value: null, recordCount: 0 };
@@ -11785,7 +12021,7 @@ var RollupService = class extends BaseService {
       if (typeof relatedId === "string" && relatedId.length > 0) {
         affectedIds.push(relatedId);
       } else if (Array.isArray(relatedId)) {
-        affectedIds.push(...relatedId.filter((id) => typeof id === "string"));
+        affectedIds.push(...relatedId.filter((id) => typeof id === "string" && id.length > 0));
       }
     }
     return [...new Set(affectedIds)];
@@ -11856,13 +12092,13 @@ var RollupService = class extends BaseService {
       if (!obj) continue;
       for (const rollupDbAttr of rollupAttrs) {
         const rollupConfig = rollupDbAttr.config;
-        if (!_optionalChain([rollupConfig, 'optionalAccess', _231 => _231.relationAttribute])) continue;
+        if (!_optionalChain([rollupConfig, 'optionalAccess', _236 => _236.relationAttribute])) continue;
         const relationAttr = attributes.find(
           (a) => a.type === "relation" && a.name === rollupConfig.relationAttribute
         );
         if (!relationAttr) continue;
         const relationConfig = relationAttr.config;
-        const targetsChangedObject = _optionalChain([relationConfig, 'optionalAccess', _232 => _232.targets, 'optionalAccess', _233 => _233.some, 'call', _234 => _234(
+        const targetsChangedObject = _optionalChain([relationConfig, 'optionalAccess', _237 => _237.targets, 'optionalAccess', _238 => _238.some, 'call', _239 => _239(
           (t) => t.object === changedSchema.name
         )]);
         if (!targetsChangedObject) continue;
@@ -11887,11 +12123,11 @@ var RecordService = class extends BaseService {
   constructor(adapter, options) {
     super(adapter);
     this.schemaService = new ObjectSchemaService(adapter, registry, {
-      auditService: _optionalChain([options, 'optionalAccess', _235 => _235.auditService])
+      auditService: _optionalChain([options, 'optionalAccess', _240 => _240.auditService])
     });
-    this.permissionService = _optionalChain([options, 'optionalAccess', _236 => _236.permissionService]);
-    this.auditService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _237 => _237.auditService]), () => ( (adapter.audit ? new AuditService(adapter) : void 0)));
-    this.policyRegistry = _optionalChain([options, 'optionalAccess', _238 => _238.policyRegistry]) === null ? null : _nullishCoalesce(_optionalChain([options, 'optionalAccess', _239 => _239.policyRegistry]), () => ( defaultPolicyRegistry));
+    this.permissionService = _optionalChain([options, 'optionalAccess', _241 => _241.permissionService]);
+    this.auditService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _242 => _242.auditService]), () => ( (adapter.audit ? new AuditService(adapter) : void 0)));
+    this.policyRegistry = _optionalChain([options, 'optionalAccess', _243 => _243.policyRegistry]) === null ? null : _nullishCoalesce(_optionalChain([options, 'optionalAccess', _244 => _244.policyRegistry]), () => ( defaultPolicyRegistry));
     this.recordResolver = new RecordResolverService(adapter);
     this.queryService = new RecordQueryService(adapter, this.schemaService, {
       permissionService: this.permissionService,
@@ -11906,7 +12142,7 @@ var RecordService = class extends BaseService {
       recordResolver: this.recordResolver
     });
     this.userService = new UserService(adapter);
-    this.hookRegistry = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _240 => _240.hookRegistry]), () => ( new NoopHookRegistry()));
+    this.hookRegistry = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _245 => _245.hookRegistry]), () => ( new NoopHookRegistry()));
     this.bilateralSyncService = new BilateralSyncService(
       adapter,
       this.schemaService,
@@ -11946,25 +12182,25 @@ var RecordService = class extends BaseService {
       schema,
       this.tenantId,
       dataWithDefaults,
-      _optionalChain([options, 'optionalAccess', _241 => _241.hookMetadata])
+      _optionalChain([options, 'optionalAccess', _246 => _246.hookMetadata])
     );
-    if (!_optionalChain([options, 'optionalAccess', _242 => _242.skipHooks])) {
+    if (!_optionalChain([options, 'optionalAccess', _247 => _247.skipHooks])) {
       await this.hookRegistry.execute("beforeCreate", schema.name, hookCtx);
     }
     const normalizedData = this.relationPropertiesService.normalizeRelationValuesForStorage(
       schema,
       dataWithDefaults
     );
-    if (_optionalChain([options, 'optionalAccess', _243 => _243.validate]) !== false) {
-      if (_optionalChain([options, 'optionalAccess', _244 => _244.allowDraft])) {
+    if (_optionalChain([options, 'optionalAccess', _248 => _248.validate]) !== false) {
+      if (_optionalChain([options, 'optionalAccess', _249 => _249.allowDraft])) {
         _chunk3WTK7ESHjs.validateDraftOrThrow.call(void 0, schema, normalizedData);
       } else {
         _chunk3WTK7ESHjs.validateObjectOrThrow.call(void 0, schema, normalizedData);
       }
-      if (!_optionalChain([options, 'optionalAccess', _245 => _245.skipRelationValidation])) {
+      if (!_optionalChain([options, 'optionalAccess', _250 => _250.skipRelationValidation])) {
         await this.relationService.validateRelationsOrThrow(schema, normalizedData);
       }
-      if (!_optionalChain([options, 'optionalAccess', _246 => _246.skipUserValidation])) {
+      if (!_optionalChain([options, 'optionalAccess', _251 => _251.skipUserValidation])) {
         await this.userService.validateUsersOrThrow(schema, normalizedData);
       }
     }
@@ -11975,12 +12211,12 @@ var RecordService = class extends BaseService {
       data: normalizedData,
       label,
       completionStatus,
-      metadata: _optionalChain([options, 'optionalAccess', _247 => _247.metadata]),
+      metadata: _optionalChain([options, 'optionalAccess', _252 => _252.metadata]),
       createdBy: this.userId
     });
     for (const [attrName, value] of Object.entries(dataWithDefaults)) {
       const attr = schema.attributes.find((a) => a.name === attrName);
-      if (_optionalChain([attr, 'optionalAccess', _248 => _248.type]) === "relation") {
+      if (_optionalChain([attr, 'optionalAccess', _253 => _253.type]) === "relation") {
         const hasProperties2 = attr.properties !== void 0;
         const isBilateral = isBilateralRelation(attr);
         if (hasProperties2 || isBilateral) {
@@ -11996,7 +12232,7 @@ var RecordService = class extends BaseService {
     }
     for (const [attrName, value] of Object.entries(normalizedData)) {
       const attr = schema.attributes.find((a) => a.name === attrName);
-      if (_optionalChain([attr, 'optionalAccess', _249 => _249.type]) === "relation" && isBilateralRelation(attr)) {
+      if (_optionalChain([attr, 'optionalAccess', _254 => _254.type]) === "relation" && isBilateralRelation(attr)) {
         await this.bilateralSyncService.syncBilateralRelation(
           schema,
           record.id,
@@ -12007,7 +12243,7 @@ var RecordService = class extends BaseService {
         );
       }
     }
-    if (!_optionalChain([options, 'optionalAccess', _250 => _250.skipHooks])) {
+    if (!_optionalChain([options, 'optionalAccess', _255 => _255.skipHooks])) {
       const afterCtx = {
         ...hookCtx,
         recordId: record.id,
@@ -12017,6 +12253,11 @@ var RecordService = class extends BaseService {
     }
     await recalculateParentRollups(record, schema, this.rollupContext);
     await this.invalidateRecordCaches(record.id, objectId);
+    _optionalChain([this, 'access', _256 => _256.adapter, 'access', _257 => _257.search, 'optionalAccess', _258 => _258.indexRecord, 'call', _259 => _259(record, {
+      objectName: schema.name,
+      objectLabel: schema.label,
+      attributes: schema.attributes
+    }), 'access', _260 => _260.catch, 'call', _261 => _261((err) => console.error("[search] Failed to index created record", record.id, err))]);
     if (this.auditService && this.userId) {
       this.auditService.logRecordAction({
         action: "record.created",
@@ -12025,7 +12266,7 @@ var RecordService = class extends BaseService {
         objectId: schema.id,
         recordId: record.id,
         recordLabel: record.label,
-        metadata: _optionalChain([options, 'optionalAccess', _251 => _251.hookMetadata])
+        metadata: _optionalChain([options, 'optionalAccess', _262 => _262.hookMetadata])
       }).catch(() => {
       });
     }
@@ -12048,7 +12289,7 @@ var RecordService = class extends BaseService {
       return null;
     }
     const schema = await this.schemaService.getObjectSchema(record.objectId);
-    if (!_optionalChain([options, 'optionalAccess', _252 => _252.skipPolicyCheck])) {
+    if (!_optionalChain([options, 'optionalAccess', _263 => _263.skipPolicyCheck])) {
       const policy = getPolicy(this.policyRegistry, this.userId, schema.name);
       if (policy) {
         const ctx = buildPolicyContext(schema.name, this.userId, this.tenantId);
@@ -12058,11 +12299,11 @@ var RecordService = class extends BaseService {
       }
     }
     let enrichedRecord = record;
-    if (!_optionalChain([options, 'optionalAccess', _253 => _253.skipFormulas])) {
+    if (!_optionalChain([options, 'optionalAccess', _264 => _264.skipFormulas])) {
       enrichedRecord = enrichWithFormulas(record, schema);
     }
     enrichedRecord = await this.enrichRelationProperties(enrichedRecord, schema);
-    if (_optionalChain([options, 'optionalAccess', _254 => _254.includeSchema])) {
+    if (_optionalChain([options, 'optionalAccess', _265 => _265.includeSchema])) {
       const recordWithSchema = enrichedRecord;
       recordWithSchema.schema = schema;
       return recordWithSchema;
@@ -12112,7 +12353,7 @@ var RecordService = class extends BaseService {
       if (oldVal !== null && newVal !== null && typeof oldVal === "object" && typeof newVal === "object") {
         try {
           return JSON.stringify(oldVal) !== JSON.stringify(newVal);
-        } catch (e16) {
+        } catch (e17) {
           return true;
         }
       }
@@ -12124,9 +12365,9 @@ var RecordService = class extends BaseService {
       existing,
       mergedData,
       changedAttributes,
-      _optionalChain([options, 'optionalAccess', _255 => _255.hookMetadata])
+      _optionalChain([options, 'optionalAccess', _266 => _266.hookMetadata])
     );
-    if (!_optionalChain([options, 'optionalAccess', _256 => _256.skipHooks])) {
+    if (!_optionalChain([options, 'optionalAccess', _267 => _267.skipHooks])) {
       await this.hookRegistry.execute("beforeUpdate", schema.name, hookCtx);
     }
     const hookModifiedValues = {};
@@ -12141,16 +12382,16 @@ var RecordService = class extends BaseService {
       dataToUpdate
     );
     const normalizedMergedData = { ...existing.values, ...normalizedUpdate };
-    if (_optionalChain([options, 'optionalAccess', _257 => _257.validate]) !== false) {
-      if (_optionalChain([options, 'optionalAccess', _258 => _258.partial])) {
+    if (_optionalChain([options, 'optionalAccess', _268 => _268.validate]) !== false) {
+      if (_optionalChain([options, 'optionalAccess', _269 => _269.partial])) {
         _chunk3WTK7ESHjs.validateDraftOrThrow.call(void 0, schema, normalizedMergedData);
       } else {
         _chunk3WTK7ESHjs.validateObjectOrThrow.call(void 0, schema, normalizedMergedData);
       }
-      if (!_optionalChain([options, 'optionalAccess', _259 => _259.skipRelationValidation])) {
+      if (!_optionalChain([options, 'optionalAccess', _270 => _270.skipRelationValidation])) {
         await this.relationService.validateRelationsOrThrow(schema, normalizedUpdate);
       }
-      if (!_optionalChain([options, 'optionalAccess', _260 => _260.skipUserValidation])) {
+      if (!_optionalChain([options, 'optionalAccess', _271 => _271.skipUserValidation])) {
         await this.userService.validateUsersOrThrow(schema, normalizedUpdate);
       }
     }
@@ -12163,7 +12404,7 @@ var RecordService = class extends BaseService {
       __lastUpdatedBy: this.userId,
       __expectedUpdatedAt: existing.updatedAt instanceof Date ? existing.updatedAt.toISOString() : existing.updatedAt
     };
-    if (_optionalChain([options, 'optionalAccess', _261 => _261.metadata]) !== void 0) {
+    if (_optionalChain([options, 'optionalAccess', _272 => _272.metadata]) !== void 0) {
       const existingMetadata = _nullishCoalesce(existing.metadata, () => ( {}));
       const mergedMetadata = { ...existingMetadata, ...options.metadata };
       const cleanedMetadata = Object.fromEntries(
@@ -12174,15 +12415,20 @@ var RecordService = class extends BaseService {
     const bilateralOldValues = {};
     for (const attrName of Object.keys(normalizedUpdate)) {
       const attr = schema.attributes.find((a) => a.name === attrName);
-      if (_optionalChain([attr, 'optionalAccess', _262 => _262.type]) === "relation" && isBilateralRelation(attr)) {
+      if (_optionalChain([attr, 'optionalAccess', _273 => _273.type]) === "relation" && isBilateralRelation(attr)) {
         bilateralOldValues[attrName] = existing.values[attrName];
       }
     }
     const updated = await this.adapter.objectRecords.update(recordId, updatePayload);
     await this.invalidateRecordCaches(recordId, existing.objectId);
+    _optionalChain([this, 'access', _274 => _274.adapter, 'access', _275 => _275.search, 'optionalAccess', _276 => _276.indexRecord, 'call', _277 => _277(updated, {
+      objectName: schema.name,
+      objectLabel: schema.label,
+      attributes: schema.attributes
+    }), 'access', _278 => _278.catch, 'call', _279 => _279((err) => console.error("[search] Failed to index updated record", updated.id, err))]);
     for (const [attrName, value] of Object.entries(dataToUpdate)) {
       const attr = schema.attributes.find((a) => a.name === attrName);
-      if (_optionalChain([attr, 'optionalAccess', _263 => _263.type]) === "relation") {
+      if (_optionalChain([attr, 'optionalAccess', _280 => _280.type]) === "relation") {
         const hasProperties2 = attr.properties !== void 0;
         const isBilateral = isBilateralRelation(attr);
         if (hasProperties2 || isBilateral) {
@@ -12198,7 +12444,7 @@ var RecordService = class extends BaseService {
     }
     for (const [attrName, value] of Object.entries(normalizedUpdate)) {
       const attr = schema.attributes.find((a) => a.name === attrName);
-      if (_optionalChain([attr, 'optionalAccess', _264 => _264.type]) === "relation" && isBilateralRelation(attr)) {
+      if (_optionalChain([attr, 'optionalAccess', _281 => _281.type]) === "relation" && isBilateralRelation(attr)) {
         const oldValue = bilateralOldValues[attrName];
         await this.bilateralSyncService.syncBilateralRelation(
           schema,
@@ -12209,7 +12455,7 @@ var RecordService = class extends BaseService {
         );
       }
     }
-    if (!_optionalChain([options, 'optionalAccess', _265 => _265.skipHooks])) {
+    if (!_optionalChain([options, 'optionalAccess', _282 => _282.skipHooks])) {
       const afterCtx = {
         ...hookCtx,
         record: updated
@@ -12224,7 +12470,7 @@ var RecordService = class extends BaseService {
     if (this.auditService && this.userId && allChangedAttributes.length > 0) {
       const changes = allChangedAttributes.map((attr) => ({
         field: attr,
-        oldValue: _optionalChain([hookCtx, 'access', _266 => _266.oldValues, 'optionalAccess', _267 => _267[attr]]),
+        oldValue: _optionalChain([hookCtx, 'access', _283 => _283.oldValues, 'optionalAccess', _284 => _284[attr]]),
         newValue: hookCtx.newValues[attr]
       }));
       this.auditService.logRecordAction({
@@ -12235,7 +12481,7 @@ var RecordService = class extends BaseService {
         recordId: updated.id,
         recordLabel: updated.label,
         changes,
-        metadata: _optionalChain([options, 'optionalAccess', _268 => _268.hookMetadata])
+        metadata: _optionalChain([options, 'optionalAccess', _285 => _285.hookMetadata])
       }).catch(() => {
       });
     }
@@ -12267,17 +12513,17 @@ var RecordService = class extends BaseService {
       const ctx = buildPolicyContext(schema.name, this.userId, this.tenantId);
       checkRecordDeleteOrThrow(policy, record, ctx);
     }
-    if (_optionalChain([options, 'optionalAccess', _269 => _269.checkSystem]) && schema.system) {
+    if (_optionalChain([options, 'optionalAccess', _286 => _286.checkSystem]) && schema.system) {
       throw new ProtectedResourceError("object", schema.name, "delete");
     }
-    if (!_optionalChain([options, 'optionalAccess', _270 => _270.skipReferenceCheck])) {
+    if (!_optionalChain([options, 'optionalAccess', _287 => _287.skipReferenceCheck])) {
       const references = await this.adapter.objectRecords.countRecordsReferencingId(recordId);
       if (references.length > 0) {
         throw new RecordReferencedError(recordId, references);
       }
     }
-    const hookCtx = createContextForDelete(schema, this.tenantId, record, _optionalChain([options, 'optionalAccess', _271 => _271.hookMetadata]));
-    if (!_optionalChain([options, 'optionalAccess', _272 => _272.skipHooks])) {
+    const hookCtx = createContextForDelete(schema, this.tenantId, record, _optionalChain([options, 'optionalAccess', _288 => _288.hookMetadata]));
+    if (!_optionalChain([options, 'optionalAccess', _289 => _289.skipHooks])) {
       await this.hookRegistry.execute("beforeDelete", schema.name, hookCtx);
     }
     for (const attr of schema.attributes) {
@@ -12295,7 +12541,8 @@ var RecordService = class extends BaseService {
     }
     await this.adapter.objectRecords.delete(recordId);
     await this.invalidateRecordCaches(recordId, record.objectId);
-    if (!_optionalChain([options, 'optionalAccess', _273 => _273.skipHooks])) {
+    _optionalChain([this, 'access', _290 => _290.adapter, 'access', _291 => _291.search, 'optionalAccess', _292 => _292.removeRecord, 'call', _293 => _293(recordId), 'access', _294 => _294.catch, 'call', _295 => _295((err) => console.error("[search] Failed to remove deleted record", recordId, err))]);
+    if (!_optionalChain([options, 'optionalAccess', _296 => _296.skipHooks])) {
       await this.hookRegistry.execute("afterDelete", schema.name, hookCtx);
     }
     await recalculateParentRollups(record, schema, this.rollupContext);
@@ -12307,7 +12554,7 @@ var RecordService = class extends BaseService {
         objectId: schema.id,
         recordId: record.id,
         recordLabel: record.label,
-        metadata: _optionalChain([options, 'optionalAccess', _274 => _274.hookMetadata])
+        metadata: _optionalChain([options, 'optionalAccess', _297 => _297.hookMetadata])
       }).catch(() => {
       });
     }
@@ -12368,13 +12615,18 @@ var RecordService = class extends BaseService {
       this.tenantId
     );
     await checkPermission(this.permissionService, this.userId, schema.name, "update");
-    const hookCtx = createContextForRestore(schema, this.tenantId, record, _optionalChain([options, 'optionalAccess', _275 => _275.hookMetadata]));
-    if (!_optionalChain([options, 'optionalAccess', _276 => _276.skipHooks])) {
+    const hookCtx = createContextForRestore(schema, this.tenantId, record, _optionalChain([options, 'optionalAccess', _298 => _298.hookMetadata]));
+    if (!_optionalChain([options, 'optionalAccess', _299 => _299.skipHooks])) {
       await this.hookRegistry.execute("beforeRestore", schema.name, hookCtx);
     }
     const restored = await this.adapter.objectRecords.restore(recordId);
     await this.invalidateRecordCaches(recordId, record.objectId);
-    if (!_optionalChain([options, 'optionalAccess', _277 => _277.skipHooks])) {
+    _optionalChain([this, 'access', _300 => _300.adapter, 'access', _301 => _301.search, 'optionalAccess', _302 => _302.indexRecord, 'call', _303 => _303(restored, {
+      objectName: schema.name,
+      objectLabel: schema.label,
+      attributes: schema.attributes
+    }), 'access', _304 => _304.catch, 'call', _305 => _305((err) => console.error("[search] Failed to index restored record", restored.id, err))]);
+    if (!_optionalChain([options, 'optionalAccess', _306 => _306.skipHooks])) {
       const afterCtx = {
         ...hookCtx,
         record: restored
@@ -12389,7 +12641,7 @@ var RecordService = class extends BaseService {
         objectId: schema.id,
         recordId: restored.id,
         recordLabel: restored.label,
-        metadata: _optionalChain([options, 'optionalAccess', _278 => _278.hookMetadata])
+        metadata: _optionalChain([options, 'optionalAccess', _307 => _307.hookMetadata])
       }).catch(() => {
       });
     }
@@ -12820,7 +13072,7 @@ var DocumentRendererService = class {
       throw new StorageDownloadNotSupportedError();
     }
     let storagePath = fileId;
-    if (_optionalChain([this, 'access', _279 => _279.options, 'optionalAccess', _280 => _280.filesRepository])) {
+    if (_optionalChain([this, 'access', _308 => _308.options, 'optionalAccess', _309 => _309.filesRepository])) {
       const file2 = await this.options.filesRepository.findById(fileId);
       if (!file2) {
         throw new Error(`Template file not found: ${fileId}`);
@@ -12838,8 +13090,8 @@ var DocumentRendererService = class {
     for (const field of fields) {
       const rawValue = getContextValue(context, field.contextPath);
       const attrInfo = await this.getAttributeInfo(field.contextPath, workflow2);
-      if (_optionalChain([attrInfo, 'optionalAccess', _281 => _281.attribute])) {
-        if (attrInfo.attribute.type === "relation" && rawValue && _optionalChain([this, 'access', _282 => _282.options, 'optionalAccess', _283 => _283.relationService])) {
+      if (_optionalChain([attrInfo, 'optionalAccess', _310 => _310.attribute])) {
+        if (attrInfo.attribute.type === "relation" && rawValue && _optionalChain([this, 'access', _311 => _311.options, 'optionalAccess', _312 => _312.relationService])) {
           const ids = Array.isArray(rawValue) ? rawValue : [rawValue];
           const stringIds = ids.filter((id) => typeof id === "string");
           if (stringIds.length > 0) {
@@ -12860,7 +13112,7 @@ var DocumentRendererService = class {
         resolved.set(field.id, this.formatValueSimple(rawValue, field.fallback));
       }
     }
-    if (relationBatch.length > 0 && _optionalChain([this, 'access', _284 => _284.options, 'optionalAccess', _285 => _285.relationService])) {
+    if (relationBatch.length > 0 && _optionalChain([this, 'access', _313 => _313.options, 'optionalAccess', _314 => _314.relationService])) {
       try {
         const batchResult = await this.options.relationService.resolveIdsBatch(
           relationBatch.map((r) => ({ attributeId: r.attributeId, ids: r.ids }))
@@ -12869,12 +13121,12 @@ var DocumentRendererService = class {
           const options = _nullishCoalesce(batchResult[attributeId], () => ( []));
           const labels = options.map((o) => o.label);
           const field = fields.find((f) => f.id === fieldId);
-          resolved.set(fieldId, labels.join(", ") || _optionalChain([field, 'optionalAccess', _286 => _286.fallback]) || "");
+          resolved.set(fieldId, labels.join(", ") || _optionalChain([field, 'optionalAccess', _315 => _315.fallback]) || "");
         }
-      } catch (e17) {
+      } catch (e18) {
         for (const { fieldId, ids } of relationBatch) {
           const field = fields.find((f) => f.id === fieldId);
-          resolved.set(fieldId, ids.join(", ") || _optionalChain([field, 'optionalAccess', _287 => _287.fallback]) || "");
+          resolved.set(fieldId, ids.join(", ") || _optionalChain([field, 'optionalAccess', _316 => _316.fallback]) || "");
         }
       }
     }
@@ -12885,7 +13137,7 @@ var DocumentRendererService = class {
    * Parses paths like "slots.client.firstName" to find the attribute definition
    */
   async getAttributeInfo(contextPath, workflow2) {
-    const schemaService = _optionalChain([this, 'access', _288 => _288.options, 'optionalAccess', _289 => _289.schemaService]);
+    const schemaService = _optionalChain([this, 'access', _317 => _317.options, 'optionalAccess', _318 => _318.schemaService]);
     if (!schemaService) {
       return null;
     }
@@ -12898,7 +13150,7 @@ var DocumentRendererService = class {
     }
     const slotId = parts[1];
     const attributeName = parts[2];
-    const slot = _optionalChain([workflow2, 'access', _290 => _290.slots, 'optionalAccess', _291 => _291.find, 'call', _292 => _292((s) => s.id === slotId)]);
+    const slot = _optionalChain([workflow2, 'access', _319 => _319.slots, 'optionalAccess', _320 => _320.find, 'call', _321 => _321((s) => s.id === slotId)]);
     if (!slot) {
       return null;
     }
@@ -12907,7 +13159,7 @@ var DocumentRendererService = class {
       try {
         schema = await schemaService.getObjectSchemaByName(slot.objectName);
         this.schemaCache.set(slot.objectName, schema);
-      } catch (e18) {
+      } catch (e19) {
         return null;
       }
     }
@@ -13097,7 +13349,7 @@ var DocumentProcessingHook = class extends BaseService {
     const pendingIds = [];
     for (const [nodeId, doc] of Object.entries(context.documents)) {
       const metadata = doc.metadata;
-      if (_optionalChain([metadata, 'optionalAccess', _293 => _293.status]) === "pending") {
+      if (_optionalChain([metadata, 'optionalAccess', _322 => _322.status]) === "pending") {
         pendingIds.push(nodeId);
       }
     }
@@ -13148,12 +13400,12 @@ var DocumentProcessingHook = class extends BaseService {
     }
     for (const slotId of targetSlotIds) {
       try {
-        const recordId = _optionalChain([context, 'access', _294 => _294.createdRecordIds, 'optionalAccess', _295 => _295[slotId]]);
+        const recordId = _optionalChain([context, 'access', _323 => _323.createdRecordIds, 'optionalAccess', _324 => _324[slotId]]);
         if (!recordId) {
           continue;
         }
-        const slotDef = _optionalChain([workflow2, 'access', _296 => _296.slots, 'optionalAccess', _297 => _297.find, 'call', _298 => _298((s) => s.id === slotId)]);
-        const objectName = _optionalChain([slotDef, 'optionalAccess', _299 => _299.objectName]);
+        const slotDef = _optionalChain([workflow2, 'access', _325 => _325.slots, 'optionalAccess', _326 => _326.find, 'call', _327 => _327((s) => s.id === slotId)]);
+        const objectName = _optionalChain([slotDef, 'optionalAccess', _328 => _328.objectName]);
         if (!objectName) {
           continue;
         }
@@ -13170,14 +13422,14 @@ var DocumentProcessingHook = class extends BaseService {
         attachedDocumentIds.push(result.document.id);
         const record = await recordService.getRecord(recordId);
         if (record) {
-          const attachments = _nullishCoalesce(_optionalChain([record, 'access', _300 => _300.values, 'optionalAccess', _301 => _301.attachments]), () => ( []));
+          const attachments = _nullishCoalesce(_optionalChain([record, 'access', _329 => _329.values, 'optionalAccess', _330 => _330.attachments]), () => ( []));
           await recordService.updateRecord(
             recordId,
             { attachments: [...attachments, result.document.id] },
             { partial: true }
           );
         }
-      } catch (e19) {
+      } catch (e20) {
       }
     }
     return attachedDocumentIds;
@@ -13436,7 +13688,7 @@ var WorkflowAccessGrantService = class extends BaseService {
    * Check if a specific token has been revoked.
    */
   isTokenRevoked(dbGrant, jti) {
-    return _nullishCoalesce(_optionalChain([dbGrant, 'access', _302 => _302.revoked_token_jtis, 'optionalAccess', _303 => _303.includes, 'call', _304 => _304(jti)]), () => ( false));
+    return _nullishCoalesce(_optionalChain([dbGrant, 'access', _331 => _331.revoked_token_jtis, 'optionalAccess', _332 => _332.includes, 'call', _333 => _333(jti)]), () => ( false));
   }
   /**
    * Validate access token payload against the grant.
@@ -13488,10 +13740,10 @@ var WorkflowInstanceService = class extends BaseService {
   constructor(adapter, workflowService, options) {
     super(adapter);
     this.workflowService = workflowService;
-    this.executorRegistry = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _305 => _305.executorRegistry]), () => ( getDefaultExecutorRegistry()));
-    this.schemaService = _optionalChain([options, 'optionalAccess', _306 => _306.schemaService]);
-    this.recordService = _optionalChain([options, 'optionalAccess', _307 => _307.recordService]);
-    this.documentProcessingHook = _optionalChain([options, 'optionalAccess', _308 => _308.documentProcessingHook]);
+    this.executorRegistry = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _334 => _334.executorRegistry]), () => ( getDefaultExecutorRegistry()));
+    this.schemaService = _optionalChain([options, 'optionalAccess', _335 => _335.schemaService]);
+    this.recordService = _optionalChain([options, 'optionalAccess', _336 => _336.recordService]);
+    this.documentProcessingHook = _optionalChain([options, 'optionalAccess', _337 => _337.documentProcessingHook]);
   }
   /**
    * Start a new workflow instance
@@ -13673,7 +13925,7 @@ var WorkflowInstanceService = class extends BaseService {
     if (!this.adapter.workflowInstances) {
       return { instances: [], total: 0 };
     }
-    if (_optionalChain([options, 'optionalAccess', _309 => _309.workflowName])) {
+    if (_optionalChain([options, 'optionalAccess', _338 => _338.workflowName])) {
       const allDbInstances = await this.adapter.workflowInstances.findByWorkflowName(
         options.workflowName,
         { status: options.status }
@@ -13687,11 +13939,11 @@ var WorkflowInstanceService = class extends BaseService {
       return { instances: instances2, total: total2 };
     }
     const { instances: dbInstances, total } = await this.adapter.workflowInstances.list({
-      limit: _optionalChain([options, 'optionalAccess', _310 => _310.limit]),
-      offset: _optionalChain([options, 'optionalAccess', _311 => _311.offset])
+      limit: _optionalChain([options, 'optionalAccess', _339 => _339.limit]),
+      offset: _optionalChain([options, 'optionalAccess', _340 => _340.offset])
     });
     let instances = dbInstances.map((db) => this.convertDBInstanceToInstance(db));
-    if (_optionalChain([options, 'optionalAccess', _312 => _312.status])) {
+    if (_optionalChain([options, 'optionalAccess', _341 => _341.status])) {
       instances = instances.filter((i) => i.status === options.status);
     }
     instances = await this.markExpiredInstances(instances);
@@ -13712,9 +13964,9 @@ var WorkflowInstanceService = class extends BaseService {
       return { instances: [], total: 0 };
     }
     const { instances: dbInstances, total } = await this.adapter.workflowInstances.findByRecordInSlots(objectName, recordId, {
-      status: _optionalChain([options, 'optionalAccess', _313 => _313.status]),
-      limit: _optionalChain([options, 'optionalAccess', _314 => _314.limit]),
-      offset: _optionalChain([options, 'optionalAccess', _315 => _315.offset])
+      status: _optionalChain([options, 'optionalAccess', _342 => _342.status]),
+      limit: _optionalChain([options, 'optionalAccess', _343 => _343.limit]),
+      offset: _optionalChain([options, 'optionalAccess', _344 => _344.offset])
     });
     const instances = dbInstances.map((db) => this.convertDBInstanceToInstance(db));
     return { instances, total };
@@ -13780,13 +14032,13 @@ var WorkflowInstanceService = class extends BaseService {
         try {
           const schemas = await Promise.all(
             current.workflowSnapshot.slots.map(
-              (slot) => _optionalChain([this, 'access', _316 => _316.schemaService, 'optionalAccess', _317 => _317.getObjectSchemaByName, 'call', _318 => _318(slot.objectName)])
+              (slot) => _optionalChain([this, 'access', _345 => _345.schemaService, 'optionalAccess', _346 => _346.getObjectSchemaByName, 'call', _347 => _347(slot.objectName)])
             )
           );
           objectDefinitions = schemas.filter(
             (s) => s !== void 0
           );
-        } catch (e20) {
+        } catch (e21) {
         }
       }
       const executorContext = {
@@ -14045,9 +14297,9 @@ var WorkflowInstanceService = class extends BaseService {
    */
   async snapshotRecord(recordId) {
     try {
-      const record = await _optionalChain([this, 'access', _319 => _319.recordService, 'optionalAccess', _320 => _320.getRecord, 'call', _321 => _321(recordId, { skipPolicyCheck: true })]);
-      return _optionalChain([record, 'optionalAccess', _322 => _322.values]);
-    } catch (e21) {
+      const record = await _optionalChain([this, 'access', _348 => _348.recordService, 'optionalAccess', _349 => _349.getRecord, 'call', _350 => _350(recordId, { skipPolicyCheck: true })]);
+      return _optionalChain([record, 'optionalAccess', _351 => _351.values]);
+    } catch (e22) {
       return void 0;
     }
   }
@@ -14065,18 +14317,18 @@ var WorkflowInstanceService = class extends BaseService {
     for (const op of [...operations].reverse()) {
       try {
         if (op.operation === "create") {
-          await _optionalChain([this, 'access', _323 => _323.recordService, 'optionalAccess', _324 => _324.deleteRecord, 'call', _325 => _325(op.recordId, {
+          await _optionalChain([this, 'access', _352 => _352.recordService, 'optionalAccess', _353 => _353.deleteRecord, 'call', _354 => _354(op.recordId, {
             skipHooks: true,
             skipReferenceCheck: true
           })]);
           rolledBack.push(op.slotId);
         } else if (op.operation === "update" && op.previousData) {
-          await _optionalChain([this, 'access', _326 => _326.recordService, 'optionalAccess', _327 => _327.updateRecord, 'call', _328 => _328(op.recordId, op.previousData, {
+          await _optionalChain([this, 'access', _355 => _355.recordService, 'optionalAccess', _356 => _356.updateRecord, 'call', _357 => _357(op.recordId, op.previousData, {
             partial: false
           })]);
           rolledBack.push(op.slotId);
         }
-      } catch (e22) {
+      } catch (e23) {
       }
     }
     return rolledBack;
@@ -14195,7 +14447,7 @@ var WorkflowInstanceService = class extends BaseService {
     if (!this.adapter.workflowInstances) {
       return;
     }
-    const currentVersion = _nullishCoalesce(_optionalChain([instance, 'access', _329 => _329.context, 'access', _330 => _330.variables, 'optionalAccess', _331 => _331.__version]), () => ( 0));
+    const currentVersion = _nullishCoalesce(_optionalChain([instance, 'access', _358 => _358.context, 'access', _359 => _359.variables, 'optionalAccess', _360 => _360.__version]), () => ( 0));
     const nextVersion = currentVersion + 1;
     const instanceWithVersion = {
       ...instance,
@@ -14476,7 +14728,7 @@ var WorkflowRelationService = class extends BaseService {
         if (attr.type !== "relation") continue;
         for (const slot of slots) {
           const slotData = context.slots[slot.id];
-          const slotRecordId = _optionalChain([slotData, 'optionalAccess', _332 => _332.id]);
+          const slotRecordId = _optionalChain([slotData, 'optionalAccess', _361 => _361.id]);
           if (!slotRecordId) continue;
           const targetsSlotObject = attr.targets.some(
             (t) => t.object === slot.objectName
@@ -14544,7 +14796,7 @@ var WorkflowService = class extends BaseService {
     if (Array.isArray(options)) {
       this.systemWorkflows = new Map(options.map((w) => [w.name, w]));
     } else {
-      this.systemWorkflows = new Map((_nullishCoalesce(_optionalChain([options, 'optionalAccess', _333 => _333.systemWorkflows]), () => ( []))).map((w) => [w.name, w]));
+      this.systemWorkflows = new Map((_nullishCoalesce(_optionalChain([options, 'optionalAccess', _362 => _362.systemWorkflows]), () => ( []))).map((w) => [w.name, w]));
     }
   }
   // ============================================================================
@@ -14842,7 +15094,7 @@ var WorkflowService = class extends BaseService {
 var UserProfileService = class extends BaseService {
   constructor(adapter, options) {
     super(adapter);
-    this.auditService = _optionalChain([options, 'optionalAccess', _334 => _334.auditService]);
+    this.auditService = _optionalChain([options, 'optionalAccess', _363 => _363.auditService]);
   }
   // ============================================================================
   // CACHE MANAGEMENT
@@ -14877,7 +15129,6 @@ var UserProfileService = class extends BaseService {
    *   email: authUser.email,
    *   firstName: authUser.user_metadata.first_name,
    *   lastName: authUser.user_metadata.last_name,
-   *   role: "member",
    *   status: "active"
    * });
    * ```
@@ -14956,7 +15207,6 @@ var UserProfileService = class extends BaseService {
    *   {
    *     authId: authUser.id,
    *     email: authUser.email,
-   *     role: "member",
    *     status: "active"
    *   }
    * );
@@ -14981,7 +15231,6 @@ var UserProfileService = class extends BaseService {
       const changes = buildAuditChanges(existing, data, [
         "firstName",
         "lastName",
-        "role",
         "status"
       ]);
       if (changes.length > 0) {
@@ -15005,11 +15254,13 @@ var UserProfileService = class extends BaseService {
    */
   async deleteProfile(profileId, options) {
     const profile = await this.getProfileOrThrow(profileId);
-    if (_optionalChain([options, 'optionalAccess', _335 => _335.checkAdmin])) {
-      if (profile.role === "admin") {
-        const adminCount = await this.adapter.userProfiles.countByRole("admin");
-        if (adminCount <= 1) {
-          throw new Error("Cannot delete the last admin user");
+    if (_optionalChain([options, 'optionalAccess', _364 => _364.checkAdmin]) && this.adapter.permissions) {
+      const ownerCount = await this.adapter.permissions.countUsersWithRole("owner");
+      if (ownerCount <= 1) {
+        const userRoles = await this.adapter.permissions.getUserRoles(profileId);
+        const isOwner = userRoles.some((r) => r.name === "owner");
+        if (isOwner) {
+          throw new Error("Cannot delete the last owner user");
         }
       }
     }
@@ -15045,15 +15296,6 @@ var UserProfileService = class extends BaseService {
   async updateLastLogin(profileId) {
     await this.adapter.userProfiles.updateLastLogin(profileId);
   }
-  /**
-   * Change user role
-   *
-   * @param profileId - Profile UUID
-   * @param newRole - New role
-   */
-  async changeRole(profileId, newRole) {
-    return await this.updateProfile(profileId, { role: newRole });
-  }
   /**
    * Change user status
    *
@@ -15075,19 +15317,6 @@ var UserProfileService = class extends BaseService {
       () => this.adapter.userProfiles.findByEmail(email)
     );
   }
-  /**
-   * Check if user has role
-   */
-  async hasRole(profileId, role) {
-    const profile = await this.getProfile(profileId);
-    return _optionalChain([profile, 'optionalAccess', _336 => _336.role]) === role;
-  }
-  /**
-   * Check if user is admin
-   */
-  async isAdmin(profileId) {
-    return await this.hasRole(profileId, "admin");
-  }
   /**
    * Invite a new user by email.
    *
@@ -15108,7 +15337,6 @@ var UserProfileService = class extends BaseService {
    *   email: "john@example.com",
    *   firstName: "John",
    *   lastName: "Doe",
-   *   role: "member",
    *   redirectTo: "https://app.example.com/welcome",
    * });
    * // Email sent automatically, profile.status === "pending"
@@ -15514,7 +15742,7 @@ var DocumentTemplateService = class extends BaseService {
    * Includes both system templates and tenant-specific templates.
    */
   async listTemplates(options) {
-    if (_optionalChain([options, 'optionalAccess', _337 => _337.systemOnly])) {
+    if (_optionalChain([options, 'optionalAccess', _365 => _365.systemOnly])) {
       return SYSTEM_TEMPLATES;
     }
     const templates = [...SYSTEM_TEMPLATES];
@@ -15597,8 +15825,8 @@ var DocumentTemplateService = class extends BaseService {
 var DocumentService = class extends BaseService {
   constructor(adapter, options) {
     super(adapter);
-    this.templateService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _338 => _338.templateService]), () => ( new DocumentTemplateService(adapter)));
-    this.fileService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _339 => _339.fileService]), () => ( null));
+    this.templateService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _366 => _366.templateService]), () => ( new DocumentTemplateService(adapter)));
+    this.fileService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _367 => _367.fileService]), () => ( null));
   }
   // ============================================================================
   // CREATE
@@ -15849,7 +16077,7 @@ var DocumentService = class extends BaseService {
    */
   async isComplete(documentId) {
     const document2 = await this.getDocument(documentId);
-    return _optionalChain([document2, 'optionalAccess', _340 => _340.status]) !== "draft";
+    return _optionalChain([document2, 'optionalAccess', _368 => _368.status]) !== "draft";
   }
   /**
    * Get document with its template and slots.
@@ -16107,7 +16335,7 @@ var DocumentProcessingService = class extends BaseService {
       type: "signature",
       provider: this.config.signatureAdapter.name,
       input: { signers, ...options },
-      expiresAt: _optionalChain([options, 'optionalAccess', _341 => _341.expiresAt])
+      expiresAt: _optionalChain([options, 'optionalAccess', _369 => _369.expiresAt])
     });
     return job;
   }
@@ -16264,7 +16492,7 @@ var DocumentProcessingService = class extends BaseService {
     }
     const document2 = await this.documentService.getDocumentOrThrow(documentId);
     const template = await this.templateService.getTemplateOrThrow(document2.templateId);
-    if (!_optionalChain([template, 'access', _342 => _342.autoProcessing, 'optionalAccess', _343 => _343.identityVerification, 'optionalAccess', _344 => _344.enabled])) {
+    if (!_optionalChain([template, 'access', _370 => _370.autoProcessing, 'optionalAccess', _371 => _371.identityVerification, 'optionalAccess', _372 => _372.enabled])) {
       throw new Error("Identity verification is not enabled for this document type");
     }
     const job = await this.adapter.documentJobs.create({
@@ -16350,13 +16578,13 @@ var DocumentProcessingService = class extends BaseService {
     const template = await this.templateService.getTemplateOrThrow(document2.templateId);
     const slots = await this.documentService.getSlots(documentId);
     const jobs = [];
-    if (_optionalChain([template, 'access', _345 => _345.autoProcessing, 'optionalAccess', _346 => _346.ocr, 'optionalAccess', _347 => _347.enabled]) && this.config.ocrAdapter) {
+    if (_optionalChain([template, 'access', _373 => _373.autoProcessing, 'optionalAccess', _374 => _374.ocr, 'optionalAccess', _375 => _375.enabled]) && this.config.ocrAdapter) {
       for (const slot of slots) {
         const job = await this.processOcr(documentId, slot.slotName);
         jobs.push(job);
       }
     }
-    if (_optionalChain([template, 'access', _348 => _348.autoProcessing, 'optionalAccess', _349 => _349.identityVerification, 'optionalAccess', _350 => _350.enabled]) && this.config.identityAdapter) {
+    if (_optionalChain([template, 'access', _376 => _376.autoProcessing, 'optionalAccess', _377 => _377.identityVerification, 'optionalAccess', _378 => _378.enabled]) && this.config.identityAdapter) {
       const job = await this.verifyIdentity(documentId);
       jobs.push(job);
     }
@@ -16427,15 +16655,15 @@ var DocumentProcessingService = class extends BaseService {
     return {
       ocr: {
         available: !!this.config.ocrAdapter,
-        provider: _optionalChain([this, 'access', _351 => _351.config, 'access', _352 => _352.ocrAdapter, 'optionalAccess', _353 => _353.name])
+        provider: _optionalChain([this, 'access', _379 => _379.config, 'access', _380 => _380.ocrAdapter, 'optionalAccess', _381 => _381.name])
       },
       signature: {
         available: !!this.config.signatureAdapter,
-        provider: _optionalChain([this, 'access', _354 => _354.config, 'access', _355 => _355.signatureAdapter, 'optionalAccess', _356 => _356.name])
+        provider: _optionalChain([this, 'access', _382 => _382.config, 'access', _383 => _383.signatureAdapter, 'optionalAccess', _384 => _384.name])
       },
       identityVerification: {
         available: !!this.config.identityAdapter,
-        provider: _optionalChain([this, 'access', _357 => _357.config, 'access', _358 => _358.identityAdapter, 'optionalAccess', _359 => _359.name])
+        provider: _optionalChain([this, 'access', _385 => _385.config, 'access', _386 => _386.identityAdapter, 'optionalAccess', _387 => _387.name])
       }
     };
   }
@@ -16445,7 +16673,7 @@ var DocumentProcessingService = class extends BaseService {
 var FileService = class extends BaseService {
   constructor(adapter, options) {
     super(adapter);
-    this.auditService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _360 => _360.auditService]), () => ( (adapter.audit ? new AuditService(adapter) : void 0)));
+    this.auditService = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _388 => _388.auditService]), () => ( (adapter.audit ? new AuditService(adapter) : void 0)));
   }
   // ============================================================================
   // UPLOAD (requires StorageAdapter)
@@ -16584,7 +16812,7 @@ var FileService = class extends BaseService {
    */
   async getFile(fileId) {
     const file2 = await this.adapter.files.findById(fileId);
-    if (_optionalChain([file2, 'optionalAccess', _361 => _361.deletedAt])) {
+    if (_optionalChain([file2, 'optionalAccess', _389 => _389.deletedAt])) {
       return null;
     }
     return file2;
@@ -16646,12 +16874,12 @@ var FileService = class extends BaseService {
    */
   async deleteFile(fileId, options) {
     const file2 = await this.getFileOrThrow(fileId);
-    if (_optionalChain([options, 'optionalAccess', _362 => _362.checkOwnership]) && options.userId) {
+    if (_optionalChain([options, 'optionalAccess', _390 => _390.checkOwnership]) && options.userId) {
       if (file2.uploadedBy !== options.userId) {
         throw new Error("You can only delete files you uploaded");
       }
     }
-    if (_optionalChain([options, 'optionalAccess', _363 => _363.hard])) {
+    if (_optionalChain([options, 'optionalAccess', _391 => _391.hard])) {
       await this.adapter.files.hardDelete(fileId);
     } else {
       await this.adapter.files.delete(fileId);
@@ -16682,7 +16910,7 @@ var FileService = class extends BaseService {
     }
     const file2 = await this.getFileOrThrow(fileId);
     await this.adapter.storage.delete(file2.storagePath);
-    if (_optionalChain([options, 'optionalAccess', _364 => _364.hard])) {
+    if (_optionalChain([options, 'optionalAccess', _392 => _392.hard])) {
       await this.adapter.files.hardDelete(fileId);
     } else {
       await this.adapter.files.delete(fileId);
@@ -16708,15 +16936,15 @@ var FileService = class extends BaseService {
     const fileResults = await Promise.all(fileIds.map((id) => this.getFile(id)));
     const files = fileResults.filter((f) => f !== null);
     if (files.length === 0) return;
-    if (_optionalChain([options, 'optionalAccess', _365 => _365.deleteFromStorage]) && this.adapter.storage) {
+    if (_optionalChain([options, 'optionalAccess', _393 => _393.deleteFromStorage]) && this.adapter.storage) {
       const BATCH_SIZE = 10;
       for (let i = 0; i < files.length; i += BATCH_SIZE) {
         const batch = files.slice(i, i + BATCH_SIZE);
-        await Promise.all(batch.map((file2) => _optionalChain([this, 'access', _366 => _366.adapter, 'access', _367 => _367.storage, 'optionalAccess', _368 => _368.delete, 'call', _369 => _369(file2.storagePath)])));
+        await Promise.all(batch.map((file2) => _optionalChain([this, 'access', _394 => _394.adapter, 'access', _395 => _395.storage, 'optionalAccess', _396 => _396.delete, 'call', _397 => _397(file2.storagePath)])));
       }
     }
     const idsToDelete = files.map((f) => f.id);
-    if (_optionalChain([options, 'optionalAccess', _370 => _370.hard])) {
+    if (_optionalChain([options, 'optionalAccess', _398 => _398.hard])) {
       await Promise.all(idsToDelete.map((id) => this.adapter.files.hardDelete(id)));
     } else {
       await Promise.all(idsToDelete.map((id) => this.adapter.files.delete(id)));
@@ -16724,12 +16952,12 @@ var FileService = class extends BaseService {
     if (this.auditService && this.userId) {
       await Promise.all(
         files.map(
-          (file2) => _optionalChain([this, 'access', _371 => _371.auditService, 'optionalAccess', _372 => _372.logFileAction, 'call', _373 => _373({
+          (file2) => _optionalChain([this, 'access', _399 => _399.auditService, 'optionalAccess', _400 => _400.logFileAction, 'call', _401 => _401({
             action: "file.deleted",
             actorId: _nullishCoalesce(this.userId, () => ( "")),
             fileId: file2.id,
             fileName: file2.name,
-            metadata: { deletedFromStorage: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _374 => _374.deleteFromStorage]), () => ( false)) }
+            metadata: { deletedFromStorage: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _402 => _402.deleteFromStorage]), () => ( false)) }
           })])
         )
       );
@@ -16807,7 +17035,7 @@ var FileService = class extends BaseService {
     if (!file2) {
       return false;
     }
-    if (_optionalChain([options, 'optionalAccess', _375 => _375.isAdmin])) {
+    if (_optionalChain([options, 'optionalAccess', _403 => _403.isAdmin])) {
       return true;
     }
     if (file2.visibility === "public") {
@@ -16817,7 +17045,7 @@ var FileService = class extends BaseService {
       return true;
     }
     if (file2.visibility === "restricted") {
-      return _nullishCoalesce(_optionalChain([file2, 'access', _376 => _376.allowedUsers, 'optionalAccess', _377 => _377.includes, 'call', _378 => _378(userId)]), () => ( false));
+      return _nullishCoalesce(_optionalChain([file2, 'access', _404 => _404.allowedUsers, 'optionalAccess', _405 => _405.includes, 'call', _406 => _406(userId)]), () => ( false));
     }
     return false;
   }
@@ -16912,7 +17140,7 @@ function withTimeout(promise, ms, label) {
 var GeocodingService = class {
   constructor(adapter, options) {
     this.adapter = adapter;
-    this.timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _379 => _379.timeoutMs]), () => ( GEOCODING_TIMEOUT_MS));
+    this.timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _407 => _407.timeoutMs]), () => ( GEOCODING_TIMEOUT_MS));
   }
   /**
    * Search for address suggestions as the user types
@@ -16967,16 +17195,24 @@ var GlobalSearchService = class extends BaseService {
     if (!query || query.trim().length === 0) {
       return { results: [], total: 0 };
     }
-    return this.cachedList(
-      "globalSearch",
-      "search",
-      { query: query.trim(), ...options },
-      () => this.adapter.objectRecords.globalSearch(query.trim(), {
-        limit: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _380 => _380.limit]), () => ( 20)),
-        offset: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _381 => _381.offset]), () => ( 0)),
-        objectNames: _optionalChain([options, 'optionalAccess', _382 => _382.objectNames])
-      })
-    );
+    const trimmed = query.trim();
+    if (this.adapter.search) {
+      try {
+        const raw = await this.adapter.search.globalSearch(trimmed, {
+          objectNames: _optionalChain([options, 'optionalAccess', _408 => _408.objectNames]),
+          limit: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _409 => _409.limit]), () => ( 20)),
+          offset: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _410 => _410.offset]), () => ( 0))
+        });
+        return await this.healGlobalSearchResults(raw);
+      } catch (err) {
+        console.error("[search] External search failed, falling back to PostgreSQL", err);
+      }
+    }
+    return this.adapter.objectRecords.globalSearch(trimmed, {
+      limit: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _411 => _411.limit]), () => ( 20)),
+      offset: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _412 => _412.offset]), () => ( 0)),
+      objectNames: _optionalChain([options, 'optionalAccess', _413 => _413.objectNames])
+    });
   }
   /**
    * Search and group results by object type.
@@ -16990,15 +17226,72 @@ var GlobalSearchService = class extends BaseService {
     if (!query || query.trim().length === 0) {
       return { groups: [], total: 0 };
     }
-    return this.cachedList(
-      "globalSearch",
-      "grouped",
-      { query: query.trim(), ...options },
-      () => this.adapter.objectRecords.globalSearchGrouped(query.trim(), {
-        objectNames: _optionalChain([options, 'optionalAccess', _383 => _383.objectNames]),
-        limitPerGroup: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _384 => _384.limitPerGroup]), () => ( 5))
-      })
-    );
+    const trimmed = query.trim();
+    if (this.adapter.search) {
+      try {
+        const raw = await this.adapter.search.globalSearchGrouped(trimmed, {
+          objectNames: _optionalChain([options, 'optionalAccess', _414 => _414.objectNames])
+        });
+        return await this.healGroupedSearchResults(raw);
+      } catch (err) {
+        console.error("[search] External grouped search failed, falling back to PostgreSQL", err);
+      }
+    }
+    return this.adapter.objectRecords.globalSearchGrouped(trimmed, {
+      objectNames: _optionalChain([options, 'optionalAccess', _415 => _415.objectNames]),
+      limitPerGroup: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _416 => _416.limitPerGroup]), () => ( 5))
+    });
+  }
+  // ==========================================================================
+  // Self-healing: ghost record cleanup
+  // ==========================================================================
+  /**
+   * Verify Meilisearch results against PostgreSQL and remove ghost records.
+   * GlobalSearchResultItem uses `recordId` (not `id`) as the record identifier.
+   */
+  async healGlobalSearchResults(meiliResult) {
+    const { search } = this.adapter;
+    if (!search || meiliResult.results.length === 0) {
+      return meiliResult;
+    }
+    const ids = meiliResult.results.map((r) => r.recordId);
+    const existing = await this.adapter.objectRecords.findByIds(ids);
+    const existingSet = new Set(existing.map((r) => r.id));
+    const ghosts = ids.filter((id) => !existingSet.has(id));
+    if (ghosts.length > 0) {
+      Promise.all(ghosts.map((id) => search.removeRecord(id))).catch(
+        (err) => console.error("[search] Failed to clean ghost records", err)
+      );
+    }
+    return {
+      results: meiliResult.results.filter((r) => existingSet.has(r.recordId)),
+      total: meiliResult.total - ghosts.length
+    };
+  }
+  /**
+   * Verify grouped Meilisearch results against PostgreSQL and remove ghost records.
+   * Filters ghosts from each group and removes empty groups.
+   */
+  async healGroupedSearchResults(raw) {
+    const { search } = this.adapter;
+    if (!search) return raw;
+    const allIds = raw.groups.flatMap((g) => g.results.map((r) => r.recordId));
+    if (allIds.length === 0) return raw;
+    const existing = await this.adapter.objectRecords.findByIds(allIds);
+    const existingSet = new Set(existing.map((r) => r.id));
+    const ghosts = allIds.filter((id) => !existingSet.has(id));
+    if (ghosts.length > 0) {
+      Promise.all(ghosts.map((id) => search.removeRecord(id))).catch(
+        (err) => console.error("[search] Failed to clean ghost records", err)
+      );
+    }
+    return {
+      groups: raw.groups.map((g) => {
+        const filtered = g.results.filter((r) => existingSet.has(r.recordId));
+        return { ...g, results: filtered, totalInGroup: filtered.length };
+      }).filter((g) => g.results.length > 0),
+      total: raw.total - ghosts.length
+    };
   }
 };
 
@@ -17013,7 +17306,7 @@ var PermissionService = class extends BaseService {
     }
     this.permissionsRepo = adapter.permissions;
     this.permissionCache = _nullishCoalesce(adapter.cache, () => ( new NoopCacheAdapter()));
-    this.auditService = _optionalChain([options, 'optionalAccess', _385 => _385.auditService]);
+    this.auditService = _optionalChain([options, 'optionalAccess', _417 => _417.auditService]);
   }
   // ============================================================================
   // PERMISSION CHECKS
@@ -17032,11 +17325,11 @@ var PermissionService = class extends BaseService {
       return true;
     }
     const wildcardPerms = permissions.objectPermissions["*"];
-    if (_optionalChain([wildcardPerms, 'optionalAccess', _386 => _386.includes, 'call', _387 => _387(action)])) {
+    if (_optionalChain([wildcardPerms, 'optionalAccess', _418 => _418.includes, 'call', _419 => _419(action)])) {
       return true;
     }
     const objectPerms = permissions.objectPermissions[objectName];
-    return _nullishCoalesce(_optionalChain([objectPerms, 'optionalAccess', _388 => _388.includes, 'call', _389 => _389(action)]), () => ( false));
+    return _nullishCoalesce(_optionalChain([objectPerms, 'optionalAccess', _420 => _420.includes, 'call', _421 => _421(action)]), () => ( false));
   }
   /**
    * Check if user can access an object, throw ForbiddenError if not.
@@ -17091,12 +17384,12 @@ var PermissionService = class extends BaseService {
     if (permissions.isAdmin) {
       return true;
     }
-    const wildcardPerms = _optionalChain([permissions, 'access', _390 => _390.systemPermissions, 'optionalAccess', _391 => _391["*"]]);
-    if (_optionalChain([wildcardPerms, 'optionalAccess', _392 => _392.includes, 'call', _393 => _393(action)])) {
+    const wildcardPerms = _optionalChain([permissions, 'access', _422 => _422.systemPermissions, 'optionalAccess', _423 => _423["*"]]);
+    if (_optionalChain([wildcardPerms, 'optionalAccess', _424 => _424.includes, 'call', _425 => _425(action)])) {
       return true;
     }
-    const resourcePerms = _optionalChain([permissions, 'access', _394 => _394.systemPermissions, 'optionalAccess', _395 => _395[resource]]);
-    return _nullishCoalesce(_optionalChain([resourcePerms, 'optionalAccess', _396 => _396.includes, 'call', _397 => _397(action)]), () => ( false));
+    const resourcePerms = _optionalChain([permissions, 'access', _426 => _426.systemPermissions, 'optionalAccess', _427 => _427[resource]]);
+    return _nullishCoalesce(_optionalChain([resourcePerms, 'optionalAccess', _428 => _428.includes, 'call', _429 => _429(action)]), () => ( false));
   }
   /**
    * Check if user can access a system resource, throw ForbiddenError if not.
@@ -17125,8 +17418,8 @@ var PermissionService = class extends BaseService {
     if (permissions.isAdmin) {
       return { canRead: true, canCreate: true, canUpdate: true, canDelete: true };
     }
-    const wildcardPerms = _nullishCoalesce(_optionalChain([permissions, 'access', _398 => _398.systemPermissions, 'optionalAccess', _399 => _399["*"]]), () => ( []));
-    const resourcePerms = _nullishCoalesce(_optionalChain([permissions, 'access', _400 => _400.systemPermissions, 'optionalAccess', _401 => _401[resource]]), () => ( []));
+    const wildcardPerms = _nullishCoalesce(_optionalChain([permissions, 'access', _430 => _430.systemPermissions, 'optionalAccess', _431 => _431["*"]]), () => ( []));
+    const resourcePerms = _nullishCoalesce(_optionalChain([permissions, 'access', _432 => _432.systemPermissions, 'optionalAccess', _433 => _433[resource]]), () => ( []));
     const allPerms = /* @__PURE__ */ new Set([...wildcardPerms, ...resourcePerms]);
     return {
       canRead: allPerms.has("read"),
@@ -17269,7 +17562,7 @@ var PermissionService = class extends BaseService {
         action: "role.updated",
         actorId: this.userId,
         roleId,
-        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _402 => _402.label]), () => ( roleId)),
+        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _434 => _434.label]), () => ( roleId)),
         metadata: { permissionsUpdated: true, permissionCount: permissions.length }
       });
     }
@@ -17299,7 +17592,7 @@ var PermissionService = class extends BaseService {
         action: "role.assigned",
         actorId: this.userId,
         roleId,
-        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _403 => _403.label]), () => ( roleId)),
+        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _435 => _435.label]), () => ( roleId)),
         targetUserId: userProfileId
       });
     }
@@ -17317,7 +17610,7 @@ var PermissionService = class extends BaseService {
         action: "role.revoked",
         actorId: this.userId,
         roleId,
-        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _404 => _404.label]), () => ( roleId)),
+        roleLabel: _nullishCoalesce(_optionalChain([role, 'optionalAccess', _436 => _436.label]), () => ( roleId)),
         targetUserId: userProfileId
       });
     }
@@ -17348,7 +17641,7 @@ var PermissionService = class extends BaseService {
       DEFAULT_ROLE_LABELS,
       DEFAULT_ROLE_DESCRIPTIONS,
       DEFAULT_ROLE_PERMISSIONS
-    } = await Promise.resolve().then(() => _interopRequireWildcard(require("./default-roles-C3FYDYMN.js")));
+    } = await Promise.resolve().then(() => _interopRequireWildcard(require("./default-roles-76HUWY6T.js")));
     const existingRoles = await this.getRoles();
     const existingRoleNames = existingRoles.reduce((set, r) => set.add(r.name), /* @__PURE__ */ new Set());
     for (const roleName of Object.values(DEFAULT_ROLES)) {
@@ -17792,7 +18085,7 @@ var ViewService = class extends BaseService {
       dbView.objectName,
       dbView.type,
       objectDefinition,
-      dbView.type === "detail" ? _nullishCoalesce(_optionalChain([dbView, 'access', _405 => _405.config, 'optionalAccess', _406 => _406.layout]), () => ( "page")) : void 0
+      dbView.type === "detail" ? _nullishCoalesce(_optionalChain([dbView, 'access', _437 => _437.config, 'optionalAccess', _438 => _438.layout]), () => ( "page")) : void 0
     );
     const newConfig = generated.config;
     const updated = await this.adapter.views.update(viewId, { config: newConfig });
@@ -18186,7 +18479,7 @@ async function syncSingleObject(adapter, nativeObject, result, options) {
         `Cannot sync shared object "${nativeObject.name}": masterTenantId must be configured in tenant options`
       );
     }
-    if (options.tenantId && options.tenantId !== options.masterTenantId) {
+    if (!options.tenantId || options.tenantId !== options.masterTenantId) {
       throw new Error(
         `Cannot sync shared object "${nativeObject.name}": only master tenant "${options.masterTenantId}" can sync shared objects (current: "${options.tenantId}")`
       );
@@ -18194,12 +18487,13 @@ async function syncSingleObject(adapter, nativeObject, result, options) {
   }
   const existingObject = await adapter.objects.findSystemByName(nativeObject.name);
   const isNew = !existingObject;
-  updateObjectStats(result, isNew);
   if (options.dryRun) {
+    updateObjectStats(result, isNew);
     await handleDryRun(adapter, nativeObject, existingObject, result, options, isNew);
     return;
   }
   const dbObject = await upsertObject(adapter, nativeObject, options);
+  updateObjectStats(result, isNew);
   await syncAttributes(adapter, nativeObject, dbObject, existingObject, result);
   if (!isNew) {
     await cleanupAttributes(adapter, dbObject.id, nativeObject, result);
@@ -18228,6 +18522,11 @@ async function handleDryRun(adapter, nativeObject, existingObject, result, optio
     }
     result.attributesSynced++;
   }
+  const codeAttributeNames = nativeObject.attributes.map((attr) => attr.name);
+  const wouldBeDeleted = existingAttrs.filter(
+    (a) => a.system && !codeAttributeNames.includes(a.name)
+  );
+  result.attributesDeleted += wouldBeDeleted.length;
 }
 async function upsertObject(adapter, nativeObject, _options) {
   return await adapter.objects.upsert({
@@ -18663,4 +18962,7 @@ var NoopGeocodingAdapter = class {
 
 
 
-exports.IDENTITY_PROPERTIES = IDENTITY_PROPERTIES; exports.BEHAVIOR_PROPERTIES = BEHAVIOR_PROPERTIES; exports.PRESENTATION_PROPERTIES = PRESENTATION_PROPERTIES; exports.isIdentityProperty = isIdentityProperty; exports.isBehaviorProperty = isBehaviorProperty; exports.isPresentationProperty = isPresentationProperty; exports.RELATION_TARGET_ANY = RELATION_TARGET_ANY; exports.isUniversalRelation = isUniversalRelation; exports.isBilateralRelation = isBilateralRelation; exports.inferInverseCardinality = inferInverseCardinality; exports.RecordReferencedError = RecordReferencedError; exports.AttributeInUseError = AttributeInUseError; exports.ObjectReferencedError = ObjectReferencedError; exports.getErrorMessage = getErrorMessage; exports.NoopGeocodingAdapter = NoopGeocodingAdapter; exports.SYSTEM_FIELD_NAMES = SYSTEM_FIELD_NAMES; exports.RESERVED_ATTRIBUTE_NAMES = RESERVED_ATTRIBUTE_NAMES; exports.PolicyViolationError = PolicyViolationError; exports.FORBIDDEN_PROPERTY_TYPES = FORBIDDEN_PROPERTY_TYPES; exports.SYSTEM_ATTRIBUTES = SYSTEM_ATTRIBUTES; exports.getSystemAttributeList = getSystemAttributeList; exports.isSystemAttribute = isSystemAttribute; exports.isSystemAttributeObject = isSystemAttributeObject; exports.isSimpleFormNode = isSimpleFormNode; exports.isAdvancedFormNode = isAdvancedFormNode; exports.isStartNode = isStartNode; exports.isFormNode = isFormNode; exports.isConditionNode = isConditionNode; exports.isDocumentNode = isDocumentNode; exports.isEndNode = isEndNode; exports.getNodeOutputs = getNodeOutputs; exports.isConditionRule = isConditionRule; exports.isConditionGroup = isConditionGroup; exports.eq = eq; exports.neq = neq; exports.and = and; exports.or = or; exports.inValues = inValues; exports.isWorkflowDefinition = isWorkflowDefinition; exports.isWorkflowPublished = isWorkflowPublished; exports.isSystemWorkflow = isSystemWorkflow; exports.isInstanceTerminal = isInstanceTerminal; exports.isInstanceWaiting = isInstanceWaiting; exports.canResumeInstance = canResumeInstance; exports.createStartTransition = createStartTransition; exports.isInvitationValid = isInvitationValid; exports.isInvitationAccepted = isInvitationAccepted; exports.isInvitationExpired = isInvitationExpired; exports.isGrantValid = isGrantValid; exports.isGrantRevoked = isGrantRevoked; exports.isTokenRevoked = isTokenRevoked; exports.isGrantExpired = isGrantExpired; exports.canAccessNode = canAccessNode; exports.createEmptyContext = createEmptyContext; exports.getContextValue = getContextValue; exports.setContextValue = setContextValue; exports.DEFAULT_THEME = DEFAULT_THEME; exports.mergeWithDefaults = mergeWithDefaults; exports.generateCssVariables = generateCssVariables; exports.isInstanceEvent = isInstanceEvent; exports.isNodeEvent = isNodeEvent; exports.isInvitationOrGrantEvent = isInvitationOrGrantEvent; exports.ConditionOperatorSchema = ConditionOperatorSchema; exports.ConditionRuleSchema = ConditionRuleSchema; exports.ConditionGroupSchema = ConditionGroupSchema; exports.StartNodeSchema = StartNodeSchema; exports.FormFieldRefSchema = FormFieldRefSchema; exports.FlowRowFieldSchema = FlowRowFieldSchema; exports.FlowRowSchema = FlowRowSchema; exports.FormNodeSchema = FormNodeSchema; exports.ConditionNodeSchema = ConditionNodeSchema; exports.DocumentNodeSchema = DocumentNodeSchema; exports.EndNodeSchema = EndNodeSchema; exports.WorkflowNodeSchema = WorkflowNodeSchema; exports.SlotModeSchema = SlotModeSchema; exports.WorkflowSlotSchema = WorkflowSlotSchema; exports.AuthMethodSchema = AuthMethodSchema; exports.ShareStatusSchema = ShareStatusSchema; exports.WorkflowShareSchema = WorkflowShareSchema; exports.CreateShareInputSchema = CreateShareInputSchema; exports.NodePositionSchema = NodePositionSchema; exports.ViewportSchema = ViewportSchema; exports.WorkflowLayoutSchema = WorkflowLayoutSchema; exports.ThemeColorsSchema = ThemeColorsSchema; exports.ThemeLogoSchema = ThemeLogoSchema; exports.WorkflowThemeSchema = WorkflowThemeSchema; exports.WorkflowConfigSchema = WorkflowConfigSchema; exports.WorkflowStatusSchema = WorkflowStatusSchema; exports.WorkflowDefinitionSchema = WorkflowDefinitionSchema; exports.isEmpty = isEmpty; exports.isNotEmpty = isNotEmpty; exports.toUndefinedIfEmpty = toUndefinedIfEmpty; exports.hasProperties = hasProperties; exports.EMPTY_VALUE_PLACEHOLDER = EMPTY_VALUE_PLACEHOLDER; exports.formatAttributeValue = formatAttributeValue; exports.DEFAULT_LABEL_FALLBACK = DEFAULT_LABEL_FALLBACK; exports.renderLabelExpression = renderLabelExpression; exports.isLabelExpression = isLabelExpression; exports.extractAttributeNames = extractAttributeNames; exports.enrichValuesForDisplay = enrichValuesForDisplay; exports.enrichValuesWithSelectLabels = enrichValuesWithSelectLabels; exports.extractRelationIds = extractRelationIds; exports.computeLabelWithRelations = computeLabelWithRelations; exports.SchemaErrorCode = SchemaErrorCode; exports.SchemaError = SchemaError; exports.NotFoundError = NotFoundError; exports.ObjectNotFoundError = ObjectNotFoundError; exports.AttributeNotFoundError = AttributeNotFoundError; exports.RecordNotFoundError = RecordNotFoundError; exports.UserProfileNotFoundError = UserProfileNotFoundError; exports.FileNotFoundError = FileNotFoundError; exports.ValidationError = ValidationError; exports.ProtectedResourceError = ProtectedResourceError; exports.SyncError = SyncError; exports.NotSystemObjectError = NotSystemObjectError; exports.DuplicateError = DuplicateError; exports.isSchemaError = isSchemaError; exports.isNotFoundError = isNotFoundError; exports.isValidationError = isValidationError; exports.isProtectedResourceError = isProtectedResourceError; exports.ForbiddenError = ForbiddenError; exports.ProtectedRoleError = ProtectedRoleError; exports.RoleNotFoundError = RoleNotFoundError; exports.isForbiddenError = isForbiddenError; exports.ConcurrentModificationError = ConcurrentModificationError; exports.text = text; exports.textarea = textarea; exports.richtext = richtext; exports.number = number; exports.checkbox = checkbox; exports.date = date; exports.phone = phone; exports.currency = currency; exports.status = status; exports.select = select; exports.multiselect = multiselect; exports.location = location; exports.file = file; exports.user = user; exports.relation = relation; exports.rating = rating; exports.formula = formula; exports.rollup = rollup; exports.document = document; exports.ObjectBuilder = ObjectBuilder; exports.object = object; exports.GroupBuilder = GroupBuilder; exports.RelationGroupBuilder = RelationGroupBuilder; exports.TableTabConfig = TableTabConfig; exports.CustomTabConfig = CustomTabConfig; exports.RichtextTabConfig = RichtextTabConfig; exports.ActivityTabConfig = ActivityTabConfig; exports.FlowsTabConfig = FlowsTabConfig; exports.DocumentsTabConfig = DocumentsTabConfig; exports.TabBuilder = TabBuilder; exports.DetailViewBuilder = DetailViewBuilder; exports.ViewBuilder = ViewBuilder; exports.detailView = detailView; exports.view = view; exports.ListViewBuilder = ListViewBuilder; exports.ListViewTabConfigBuilder = ListViewTabConfigBuilder; exports.listView = listView; exports.group = group; exports.relationGroup = relationGroup; exports.WorkflowFormRowBuilder = WorkflowFormRowBuilder; exports.WorkflowFormBuilder = WorkflowFormBuilder; exports.WorkflowSimpleFormBuilder = WorkflowSimpleFormBuilder; exports.WorkflowConditionBuilder = WorkflowConditionBuilder; exports.WorkflowEndBuilder = WorkflowEndBuilder; exports.WorkflowStartBuilder = WorkflowStartBuilder; exports.WorkflowBuilder = WorkflowBuilder; exports.workflow = workflow; exports.registry = registry; exports.SYSTEM_TEMPLATE_IDS = SYSTEM_TEMPLATE_IDS; exports.FRENCH_ID_CARD = FRENCH_ID_CARD; exports.PASSPORT = PASSPORT; exports.DRIVING_LICENSE = DRIVING_LICENSE; exports.PROOF_OF_ADDRESS = PROOF_OF_ADDRESS; exports.SIGNABLE_CONTRACT = SIGNABLE_CONTRACT; exports.GENERIC_DOCUMENT = GENERIC_DOCUMENT; exports.SYSTEM_TEMPLATES = SYSTEM_TEMPLATES; exports.getSystemTemplate = getSystemTemplate; exports.isSystemTemplate = isSystemTemplate; exports.WorkflowJwtService = WorkflowJwtService; exports.hashOptions = hashOptions; exports.cacheKeys = cacheKeys; exports.cacheTtl = cacheTtl; exports.defaultTtl = defaultTtl; exports.NoopCacheAdapter = NoopCacheAdapter; exports.formatRecord = formatRecord; exports.formatRecords = formatRecords; exports.createDefaultState = createDefaultState; exports.SHORTCUT_TO_FILTER_OPERATOR = SHORTCUT_TO_FILTER_OPERATOR; exports.QueryNoResultError = QueryNoResultError; exports.QueryMultipleResultsError = QueryMultipleResultsError; exports.TenantContextError = TenantContextError; exports.FeatureFlagsContextError = FeatureFlagsContextError; exports.isFeatureEnabled = isFeatureEnabled; exports.getFeatureValue = getFeatureValue; exports.getFeatureFlags = getFeatureFlags; exports.tryGetFeatureValue = tryGetFeatureValue; exports.hasFeatureFlagsContext = hasFeatureFlagsContext; exports.runWithFeatureFlags = runWithFeatureFlags; exports.withFeatureFlags = withFeatureFlags; exports.getSchemaFromContext = getSchemaFromContext; exports.getSchemaByNameFromContext = getSchemaByNameFromContext; exports.hasSchemaContext = hasSchemaContext; exports.getSchemaContext = getSchemaContext; exports.addSchemaToContext = addSchemaToContext; exports.runWithSchemaContext = runWithSchemaContext; exports.runWithMergedSchemaContext = runWithMergedSchemaContext; exports.getContext = getContext2; exports.getTenantId = getTenantId; exports.getUserId = getUserId; exports.hasContext = hasContext; exports.runWithContext = runWithContext; exports.withTenantContext = withTenantContext; exports.QueryBuilder = QueryBuilder; exports.createQueryBuilder = createQueryBuilder; exports.evaluateCondition = evaluateCondition; exports.evaluate = evaluate; exports.evaluateWithTrace = evaluateWithTrace; exports.ExecutorRegistry = ExecutorRegistry; exports.success = success; exports.wait = wait; exports.complete = complete; exports.error = error; exports.ConditionExecutor = ConditionExecutor; exports.DocumentExecutor = DocumentExecutor; exports.EndExecutor = EndExecutor; exports.FormExecutor = FormExecutor; exports.StartExecutor = StartExecutor; exports.createDefaultExecutorRegistry = createDefaultExecutorRegistry; exports.getDefaultExecutorRegistry = getDefaultExecutorRegistry; exports.evaluateFormula = evaluateFormula; exports.evaluateFormulaWithResult = evaluateFormulaWithResult; exports.formatFormulaResult = formatFormulaResult; exports.evaluateFormulaAttribute = evaluateFormulaAttribute; exports.validateFormulaExpression = validateFormulaExpression; exports.extractFormulaVariables = extractFormulaVariables; exports.extractRelationReferences = extractRelationReferences; exports.extractRelationNames = extractRelationNames; exports.hasRelationReferences = hasRelationReferences; exports.flattenRelationsForEval = flattenRelationsForEval; exports.evaluateFormulaWithRelations = evaluateFormulaWithRelations; exports.evaluateFormulaAttributeWithRelations = evaluateFormulaAttributeWithRelations; exports.InvalidPathError = InvalidPathError; exports.MaxDepthExceededError = MaxDepthExceededError; exports.parsePath = parsePath; exports.validatePath = validatePath; exports.pathHasManyCardinality = pathHasManyCardinality; exports.getPathDepth = getPathDepth; exports.getTargetAttributeName = getTargetAttributeName; exports.getRelationPath = getRelationPath; exports.traversePath = traversePath; exports.resolveSingleValue = resolveSingleValue; exports.resolveMultiplePaths = resolveMultiplePaths; exports.NoopHookRegistry = NoopHookRegistry; exports.createMockAdapter = createMockAdapter; exports.PolicyRegistry = PolicyRegistry; exports.defaultPolicyRegistry = defaultPolicyRegistry; exports.BaseService = BaseService; exports.BaseRepository = BaseRepository; exports.SchemaContextAwareRepository = SchemaContextAwareRepository; exports.buildAuditChanges = buildAuditChanges; exports.ObjectSchemaService = ObjectSchemaService; exports.AuditService = AuditService; exports.UserService = UserService; exports.applyDefaultValues = applyDefaultValues; exports.checkPermission = checkPermission; exports.getPolicy = getPolicy; exports.buildPolicyContext = buildPolicyContext; exports.checkRecordAccess = checkRecordAccess; exports.checkRecordModifyOrThrow = checkRecordModifyOrThrow; exports.checkRecordDeleteOrThrow = checkRecordDeleteOrThrow; exports.checkSharedObjectWriteAccess = checkSharedObjectWriteAccess; exports.computeLabel = computeLabel; exports.enrichWithFormulas = enrichWithFormulas; exports.enrichRecordsWithFormulas = enrichRecordsWithFormulas; exports.createContextForCreate = createContextForCreate; exports.createContextForUpdate = createContextForUpdate; exports.createContextForDelete = createContextForDelete; exports.createContextForRestore = createContextForRestore; exports.recalculateParentRollups = recalculateParentRollups; exports.RelationPropertiesService = RelationPropertiesService; exports.RecordQueryService = RecordQueryService; exports.RecordResolverService = RecordResolverService; exports.RelationService = RelationService; exports.RollupService = RollupService; exports.RecordService = RecordService; exports.FormulaResolverService = FormulaResolverService; exports.RollupScheduler = RollupScheduler; exports.DocumentRenderError = DocumentRenderError; exports.StorageDownloadNotSupportedError = StorageDownloadNotSupportedError; exports.DocumentRendererService = DocumentRendererService; exports.DocumentProcessingHook = DocumentProcessingHook; exports.GrantNotFoundError = GrantNotFoundError; exports.GrantExpiredError = GrantExpiredError; exports.GrantRevokedError = GrantRevokedError; exports.TokenRevokedError = TokenRevokedError; exports.WorkflowAccessGrantService = WorkflowAccessGrantService; exports.WorkflowInstanceService = WorkflowInstanceService; exports.InvitationNotFoundError = InvitationNotFoundError; exports.InvitationExpiredError = InvitationExpiredError; exports.InvitationAlreadyAcceptedError = InvitationAlreadyAcceptedError; exports.InvitationRevokedError = InvitationRevokedError; exports.WorkflowInvitationService = WorkflowInvitationService; exports.WorkflowRelationService = WorkflowRelationService; exports.WorkflowService = WorkflowService; exports.UserProfileService = UserProfileService; exports.DocumentGenerationTemplateNotFoundError = DocumentGenerationTemplateNotFoundError; exports.DocumentGenerationNotConfiguredError = DocumentGenerationNotConfiguredError; exports.DocumentGenerationService = DocumentGenerationService; exports.DocumentTemplateService = DocumentTemplateService; exports.DocumentService = DocumentService; exports.DocumentProcessingService = DocumentProcessingService; exports.FileService = FileService; exports.GeocodingService = GeocodingService; exports.GlobalSearchService = GlobalSearchService; exports.PermissionService = PermissionService; exports.ViewService = ViewService; exports.seedRegistryViews = seedRegistryViews; exports.syncNativeViews = syncNativeViews; exports.verifyRegistryViewsSeeded = verifyRegistryViewsSeeded; exports.verifyNativeViewsSync = verifyNativeViewsSync; exports.getViewSeedPreview = getViewSeedPreview; exports.getViewSyncPreview = getViewSyncPreview; exports.syncNativeObjects = syncNativeObjects; exports.verifyNativeObjectsSync = verifyNativeObjectsSync; exports.getSyncPreview = getSyncPreview; exports.syncAll = syncAll;
+
+
+
+exports.IDENTITY_PROPERTIES = IDENTITY_PROPERTIES; exports.BEHAVIOR_PROPERTIES = BEHAVIOR_PROPERTIES; exports.PRESENTATION_PROPERTIES = PRESENTATION_PROPERTIES; exports.isIdentityProperty = isIdentityProperty; exports.isBehaviorProperty = isBehaviorProperty; exports.isPresentationProperty = isPresentationProperty; exports.RELATION_TARGET_ANY = RELATION_TARGET_ANY; exports.isUniversalRelation = isUniversalRelation; exports.isBilateralRelation = isBilateralRelation; exports.inferInverseCardinality = inferInverseCardinality; exports.NON_SORTABLE_TYPES = NON_SORTABLE_TYPES; exports.isAttributeSortable = isAttributeSortable; exports.RecordReferencedError = RecordReferencedError; exports.AttributeInUseError = AttributeInUseError; exports.ObjectReferencedError = ObjectReferencedError; exports.getErrorMessage = getErrorMessage; exports.NoopGeocodingAdapter = NoopGeocodingAdapter; exports.SYSTEM_FIELD_NAMES = SYSTEM_FIELD_NAMES; exports.RESERVED_ATTRIBUTE_NAMES = RESERVED_ATTRIBUTE_NAMES; exports.PolicyViolationError = PolicyViolationError; exports.FORBIDDEN_PROPERTY_TYPES = FORBIDDEN_PROPERTY_TYPES; exports.SYSTEM_ATTRIBUTES = SYSTEM_ATTRIBUTES; exports.getSystemAttributeList = getSystemAttributeList; exports.isSystemAttribute = isSystemAttribute; exports.isSystemAttributeObject = isSystemAttributeObject; exports.isSimpleFormNode = isSimpleFormNode; exports.isAdvancedFormNode = isAdvancedFormNode; exports.isStartNode = isStartNode; exports.isFormNode = isFormNode; exports.isConditionNode = isConditionNode; exports.isDocumentNode = isDocumentNode; exports.isEndNode = isEndNode; exports.getNodeOutputs = getNodeOutputs; exports.isConditionRule = isConditionRule; exports.isConditionGroup = isConditionGroup; exports.eq = eq; exports.neq = neq; exports.and = and; exports.or = or; exports.inValues = inValues; exports.isWorkflowDefinition = isWorkflowDefinition; exports.isWorkflowPublished = isWorkflowPublished; exports.isSystemWorkflow = isSystemWorkflow; exports.isInstanceTerminal = isInstanceTerminal; exports.isInstanceWaiting = isInstanceWaiting; exports.canResumeInstance = canResumeInstance; exports.createStartTransition = createStartTransition; exports.isInvitationValid = isInvitationValid; exports.isInvitationAccepted = isInvitationAccepted; exports.isInvitationExpired = isInvitationExpired; exports.isGrantValid = isGrantValid; exports.isGrantRevoked = isGrantRevoked; exports.isTokenRevoked = isTokenRevoked; exports.isGrantExpired = isGrantExpired; exports.canAccessNode = canAccessNode; exports.createEmptyContext = createEmptyContext; exports.getContextValue = getContextValue; exports.setContextValue = setContextValue; exports.DEFAULT_THEME = DEFAULT_THEME; exports.mergeWithDefaults = mergeWithDefaults; exports.generateCssVariables = generateCssVariables; exports.isInstanceEvent = isInstanceEvent; exports.isNodeEvent = isNodeEvent; exports.isInvitationOrGrantEvent = isInvitationOrGrantEvent; exports.ConditionOperatorSchema = ConditionOperatorSchema; exports.ConditionRuleSchema = ConditionRuleSchema; exports.ConditionGroupSchema = ConditionGroupSchema; exports.StartNodeSchema = StartNodeSchema; exports.FormFieldRefSchema = FormFieldRefSchema; exports.FlowRowFieldSchema = FlowRowFieldSchema; exports.FlowRowSchema = FlowRowSchema; exports.FormNodeSchema = FormNodeSchema; exports.ConditionNodeSchema = ConditionNodeSchema; exports.DocumentNodeSchema = DocumentNodeSchema; exports.EndNodeSchema = EndNodeSchema; exports.WorkflowNodeSchema = WorkflowNodeSchema; exports.SlotModeSchema = SlotModeSchema; exports.WorkflowSlotSchema = WorkflowSlotSchema; exports.AuthMethodSchema = AuthMethodSchema; exports.ShareStatusSchema = ShareStatusSchema; exports.WorkflowShareSchema = WorkflowShareSchema; exports.CreateShareInputSchema = CreateShareInputSchema; exports.NodePositionSchema = NodePositionSchema; exports.ViewportSchema = ViewportSchema; exports.WorkflowLayoutSchema = WorkflowLayoutSchema; exports.ThemeColorsSchema = ThemeColorsSchema; exports.ThemeLogoSchema = ThemeLogoSchema; exports.WorkflowThemeSchema = WorkflowThemeSchema; exports.WorkflowConfigSchema = WorkflowConfigSchema; exports.WorkflowStatusSchema = WorkflowStatusSchema; exports.WorkflowDefinitionSchema = WorkflowDefinitionSchema; exports.isEmpty = isEmpty; exports.isNotEmpty = isNotEmpty; exports.toUndefinedIfEmpty = toUndefinedIfEmpty; exports.hasProperties = hasProperties; exports.EMPTY_VALUE_PLACEHOLDER = EMPTY_VALUE_PLACEHOLDER; exports.formatAttributeValue = formatAttributeValue; exports.DEFAULT_LABEL_FALLBACK = DEFAULT_LABEL_FALLBACK; exports.renderLabelExpression = renderLabelExpression; exports.isLabelExpression = isLabelExpression; exports.extractAttributeNames = extractAttributeNames; exports.enrichValuesForDisplay = enrichValuesForDisplay; exports.enrichValuesWithSelectLabels = enrichValuesWithSelectLabels; exports.extractRelationIds = extractRelationIds; exports.computeLabelWithRelations = computeLabelWithRelations; exports.SchemaErrorCode = SchemaErrorCode; exports.SchemaError = SchemaError; exports.NotFoundError = NotFoundError; exports.ObjectNotFoundError = ObjectNotFoundError; exports.AttributeNotFoundError = AttributeNotFoundError; exports.RecordNotFoundError = RecordNotFoundError; exports.UserProfileNotFoundError = UserProfileNotFoundError; exports.FileNotFoundError = FileNotFoundError; exports.ValidationError = ValidationError; exports.ProtectedResourceError = ProtectedResourceError; exports.SyncError = SyncError; exports.NotSystemObjectError = NotSystemObjectError; exports.DuplicateError = DuplicateError; exports.isSchemaError = isSchemaError; exports.isNotFoundError = isNotFoundError; exports.isValidationError = isValidationError; exports.isProtectedResourceError = isProtectedResourceError; exports.ForbiddenError = ForbiddenError; exports.ProtectedRoleError = ProtectedRoleError; exports.RoleNotFoundError = RoleNotFoundError; exports.isForbiddenError = isForbiddenError; exports.ConcurrentModificationError = ConcurrentModificationError; exports.text = text; exports.textarea = textarea; exports.richtext = richtext; exports.number = number; exports.checkbox = checkbox; exports.date = date; exports.phone = phone; exports.currency = currency; exports.status = status; exports.select = select; exports.multiselect = multiselect; exports.location = location; exports.file = file; exports.user = user; exports.relation = relation; exports.rating = rating; exports.formula = formula; exports.rollup = rollup; exports.document = document; exports.ObjectBuilder = ObjectBuilder; exports.object = object; exports.GroupBuilder = GroupBuilder; exports.RelationGroupBuilder = RelationGroupBuilder; exports.TableTabConfig = TableTabConfig; exports.CustomTabConfig = CustomTabConfig; exports.RichtextTabConfig = RichtextTabConfig; exports.ActivityTabConfig = ActivityTabConfig; exports.FlowsTabConfig = FlowsTabConfig; exports.DocumentsTabConfig = DocumentsTabConfig; exports.TabBuilder = TabBuilder; exports.DetailViewBuilder = DetailViewBuilder; exports.ViewBuilder = ViewBuilder; exports.detailView = detailView; exports.view = view; exports.ListViewBuilder = ListViewBuilder; exports.ListViewTabConfigBuilder = ListViewTabConfigBuilder; exports.listView = listView; exports.group = group; exports.relationGroup = relationGroup; exports.WorkflowFormRowBuilder = WorkflowFormRowBuilder; exports.WorkflowFormBuilder = WorkflowFormBuilder; exports.WorkflowSimpleFormBuilder = WorkflowSimpleFormBuilder; exports.WorkflowConditionBuilder = WorkflowConditionBuilder; exports.WorkflowEndBuilder = WorkflowEndBuilder; exports.WorkflowStartBuilder = WorkflowStartBuilder; exports.WorkflowBuilder = WorkflowBuilder; exports.workflow = workflow; exports.registry = registry; exports.SYSTEM_TEMPLATE_IDS = SYSTEM_TEMPLATE_IDS; exports.FRENCH_ID_CARD = FRENCH_ID_CARD; exports.PASSPORT = PASSPORT; exports.DRIVING_LICENSE = DRIVING_LICENSE; exports.PROOF_OF_ADDRESS = PROOF_OF_ADDRESS; exports.SIGNABLE_CONTRACT = SIGNABLE_CONTRACT; exports.GENERIC_DOCUMENT = GENERIC_DOCUMENT; exports.SYSTEM_TEMPLATES = SYSTEM_TEMPLATES; exports.getSystemTemplate = getSystemTemplate; exports.isSystemTemplate = isSystemTemplate; exports.WorkflowJwtService = WorkflowJwtService; exports.hashOptions = hashOptions; exports.cacheKeys = cacheKeys; exports.cacheTtl = cacheTtl; exports.defaultTtl = defaultTtl; exports.NoopCacheAdapter = NoopCacheAdapter; exports.formatRecord = formatRecord; exports.formatRecords = formatRecords; exports.createDefaultState = createDefaultState; exports.SHORTCUT_TO_FILTER_OPERATOR = SHORTCUT_TO_FILTER_OPERATOR; exports.QueryNoResultError = QueryNoResultError; exports.QueryMultipleResultsError = QueryMultipleResultsError; exports.TenantContextError = TenantContextError; exports.FeatureFlagsContextError = FeatureFlagsContextError; exports.isFeatureEnabled = isFeatureEnabled; exports.getFeatureValue = getFeatureValue; exports.getFeatureFlags = getFeatureFlags; exports.tryGetFeatureValue = tryGetFeatureValue; exports.hasFeatureFlagsContext = hasFeatureFlagsContext; exports.runWithFeatureFlags = runWithFeatureFlags; exports.withFeatureFlags = withFeatureFlags; exports.getSchemaFromContext = getSchemaFromContext; exports.getSchemaByNameFromContext = getSchemaByNameFromContext; exports.hasSchemaContext = hasSchemaContext; exports.getSchemaContext = getSchemaContext; exports.addSchemaToContext = addSchemaToContext; exports.runWithSchemaContext = runWithSchemaContext; exports.runWithMergedSchemaContext = runWithMergedSchemaContext; exports.getContext = getContext2; exports.getTenantId = getTenantId; exports.getUserId = getUserId; exports.hasContext = hasContext; exports.runWithContext = runWithContext; exports.withTenantContext = withTenantContext; exports.QueryBuilder = QueryBuilder; exports.createQueryBuilder = createQueryBuilder; exports.evaluateCondition = evaluateCondition; exports.evaluate = evaluate; exports.evaluateWithTrace = evaluateWithTrace; exports.ExecutorRegistry = ExecutorRegistry; exports.success = success; exports.wait = wait; exports.complete = complete; exports.error = error; exports.ConditionExecutor = ConditionExecutor; exports.DocumentExecutor = DocumentExecutor; exports.EndExecutor = EndExecutor; exports.FormExecutor = FormExecutor; exports.StartExecutor = StartExecutor; exports.createDefaultExecutorRegistry = createDefaultExecutorRegistry; exports.getDefaultExecutorRegistry = getDefaultExecutorRegistry; exports.evaluateFormula = evaluateFormula; exports.evaluateFormulaWithResult = evaluateFormulaWithResult; exports.formatFormulaResult = formatFormulaResult; exports.evaluateFormulaAttribute = evaluateFormulaAttribute; exports.validateFormulaExpression = validateFormulaExpression; exports.extractFormulaVariables = extractFormulaVariables; exports.extractRelationReferences = extractRelationReferences; exports.extractRelationNames = extractRelationNames; exports.hasRelationReferences = hasRelationReferences; exports.flattenRelationsForEval = flattenRelationsForEval; exports.evaluateFormulaWithRelations = evaluateFormulaWithRelations; exports.evaluateFormulaAttributeWithRelations = evaluateFormulaAttributeWithRelations; exports.InvalidPathError = InvalidPathError; exports.MaxDepthExceededError = MaxDepthExceededError; exports.parsePath = parsePath; exports.validatePath = validatePath; exports.pathHasManyCardinality = pathHasManyCardinality; exports.getPathDepth = getPathDepth; exports.getTargetAttributeName = getTargetAttributeName; exports.getRelationPath = getRelationPath; exports.traversePath = traversePath; exports.resolveSingleValue = resolveSingleValue; exports.resolveMultiplePaths = resolveMultiplePaths; exports.NoopHookRegistry = NoopHookRegistry; exports.createMockAdapter = createMockAdapter; exports.PolicyRegistry = PolicyRegistry; exports.defaultPolicyRegistry = defaultPolicyRegistry; exports.SORTABLE_ATTRIBUTE_TYPES = SORTABLE_ATTRIBUTE_TYPES; exports.BaseService = BaseService; exports.BaseRepository = BaseRepository; exports.SchemaContextAwareRepository = SchemaContextAwareRepository; exports.buildAuditChanges = buildAuditChanges; exports.ObjectSchemaService = ObjectSchemaService; exports.AuditService = AuditService; exports.UserService = UserService; exports.applyDefaultValues = applyDefaultValues; exports.checkPermission = checkPermission; exports.getPolicy = getPolicy; exports.buildPolicyContext = buildPolicyContext; exports.checkRecordAccess = checkRecordAccess; exports.checkRecordModifyOrThrow = checkRecordModifyOrThrow; exports.checkRecordDeleteOrThrow = checkRecordDeleteOrThrow; exports.checkSharedObjectWriteAccess = checkSharedObjectWriteAccess; exports.computeLabel = computeLabel; exports.enrichWithFormulas = enrichWithFormulas; exports.enrichRecordsWithFormulas = enrichRecordsWithFormulas; exports.createContextForCreate = createContextForCreate; exports.createContextForUpdate = createContextForUpdate; exports.createContextForDelete = createContextForDelete; exports.createContextForRestore = createContextForRestore; exports.recalculateParentRollups = recalculateParentRollups; exports.RelationPropertiesService = RelationPropertiesService; exports.RecordQueryService = RecordQueryService; exports.RecordResolverService = RecordResolverService; exports.RelationService = RelationService; exports.RollupService = RollupService; exports.RecordService = RecordService; exports.FormulaResolverService = FormulaResolverService; exports.RollupScheduler = RollupScheduler; exports.DocumentRenderError = DocumentRenderError; exports.StorageDownloadNotSupportedError = StorageDownloadNotSupportedError; exports.DocumentRendererService = DocumentRendererService; exports.DocumentProcessingHook = DocumentProcessingHook; exports.GrantNotFoundError = GrantNotFoundError; exports.GrantExpiredError = GrantExpiredError; exports.GrantRevokedError = GrantRevokedError; exports.TokenRevokedError = TokenRevokedError; exports.WorkflowAccessGrantService = WorkflowAccessGrantService; exports.WorkflowInstanceService = WorkflowInstanceService; exports.InvitationNotFoundError = InvitationNotFoundError; exports.InvitationExpiredError = InvitationExpiredError; exports.InvitationAlreadyAcceptedError = InvitationAlreadyAcceptedError; exports.InvitationRevokedError = InvitationRevokedError; exports.WorkflowInvitationService = WorkflowInvitationService; exports.WorkflowRelationService = WorkflowRelationService; exports.WorkflowService = WorkflowService; exports.UserProfileService = UserProfileService; exports.DocumentGenerationTemplateNotFoundError = DocumentGenerationTemplateNotFoundError; exports.DocumentGenerationNotConfiguredError = DocumentGenerationNotConfiguredError; exports.DocumentGenerationService = DocumentGenerationService; exports.DocumentTemplateService = DocumentTemplateService; exports.DocumentService = DocumentService; exports.DocumentProcessingService = DocumentProcessingService; exports.FileService = FileService; exports.GeocodingService = GeocodingService; exports.GlobalSearchService = GlobalSearchService; exports.PermissionService = PermissionService; exports.ViewService = ViewService; exports.seedRegistryViews = seedRegistryViews; exports.syncNativeViews = syncNativeViews; exports.verifyRegistryViewsSeeded = verifyRegistryViewsSeeded; exports.verifyNativeViewsSync = verifyNativeViewsSync; exports.getViewSeedPreview = getViewSeedPreview; exports.getViewSyncPreview = getViewSyncPreview; exports.syncNativeObjects = syncNativeObjects; exports.verifyNativeObjectsSync = verifyNativeObjectsSync; exports.getSyncPreview = getSyncPreview; exports.syncAll = syncAll;