@weave-kit/engine 0.5.0 → 0.6.0

package/dist/adapters/openapi/schema.js

@@ -1,4 +1,4 @@
-import { DEFAULT_FIELD_TYPE_REGISTRY, FIELD_TYPES, fieldBase, fieldOpenApiFormat, } from '../../core/index.js';
+import { DEFAULT_FIELD_TYPE_REGISTRY, FIELD_TYPES, RECORD_META_VIRTUAL_FIELD_SPECS, fieldBase, fieldOpenApiFormat, } from '../../core/index.js';
 /** engine-managed (read-only) fields: system, computed, and sequence numbers. */
 export function isReadonlyField(field) {
     return (field.system === true ||
@@ -44,16 +44,28 @@ export function fieldSchema(field, objects, registry = DEFAULT_FIELD_TYPE_REGIST
         out.type = 'array';
         out.items = { type: 'string', format: 'uri' };
     }
-    else if (base === FIELD_TYPES.INTEGER) {
+    else if (base === FIELD_TYPES.SMALLINT || base === FIELD_TYPES.INTEGER) {
         out.type = 'integer';
     }
+    else if (base === FIELD_TYPES.BIGINT) {
+        // serialized as a string (precision-safe; pg returns int8 as text)
+        out.type = 'string';
+    }
     else if (base === FIELD_TYPES.NUMBER || base === FIELD_TYPES.CURRENCY) {
         out.type = 'number';
     }
+    else if (base === FIELD_TYPES.REAL) {
+        out.type = 'number';
+        out.format = 'float';
+    }
+    else if (base === FIELD_TYPES.DOUBLE) {
+        out.type = 'number';
+        out.format = 'double';
+    }
     else if (base === FIELD_TYPES.BOOLEAN) {
         out.type = 'boolean';
     }
-    else if (base === FIELD_TYPES.DATETIME) {
+    else if (base === FIELD_TYPES.TIMESTAMPTZ || base === FIELD_TYPES.TIMESTAMP) {
         out.type = 'string';
         out.format = 'date-time';
     }
@@ -61,7 +73,19 @@ export function fieldSchema(field, objects, registry = DEFAULT_FIELD_TYPE_REGIST
         out.type = 'string';
         out.format = 'date';
     }
-    else if (base === FIELD_TYPES.JSON) {
+    else if (base === FIELD_TYPES.TIME || base === FIELD_TYPES.TIMETZ) {
+        out.type = 'string';
+        out.format = 'time';
+    }
+    else if (base === FIELD_TYPES.INTERVAL) {
+        out.type = 'string';
+        out.format = 'duration';
+    }
+    else if (base === FIELD_TYPES.UUID) {
+        out.type = 'string';
+        out.format = 'uuid';
+    }
+    else if (base === FIELD_TYPES.JSON || base === FIELD_TYPES.JSONB) {
         // free-form: leave unconstrained
     }
     else if (base === FIELD_TYPES.ENUM) {
@@ -143,6 +167,18 @@ export function objectSchemas(obj, objects, registry = DEFAULT_FIELD_TYPE_REGIST
         record.required = recordRequired;
     if (createRequired.length > 0)
         create.required = createRequired;
+    // virtual system fields (engine-managed, read-only): `weave_id` (the record id)
+    // plus the side-table metadata fields — part of every record's shape
+    for (const spec of RECORD_META_VIRTUAL_FIELD_SPECS) {
+        const schema = { readOnly: true, type: 'string' };
+        if (spec.type === FIELD_TYPES.ENUM && spec.options !== undefined) {
+            schema.enum = [...spec.options];
+        }
+        else if (spec.type === FIELD_TYPES.TIMESTAMPTZ) {
+            schema.format = 'date-time';
+        }
+        recordProps[spec.name] = schema;
+    }
     return { record, create, update };
 }
 //# sourceMappingURL=schema.js.map

package/dist/adapters/openapi/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/adapters/openapi/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,SAAS,EACT,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAI7B,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,IAAI;QACpB,KAA8B,CAAC,OAAO,KAAK,SAAS;QACrD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,KAA2C,CAAC;AACrD,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,KAAsB;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CACb,MAA0B,EAC1B,OAAsC,EACtC,QAA2B;IAE3B,MAAM,EAAE,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC1G,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACtC,QAAQ,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,OAAsC,EACtC,WAA8B,2BAA2B;IAEzD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAS,EAAE,CAAC;IAErB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC9E,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,iCAAiC;IACnC,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAmE,CAAC;QACnF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;YACnB,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAgB,EAAE,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;YACpB,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,GAAG,IAAgB,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO;YAAE,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,GAAI,IAAsD,CAAC,IAAI,EAAE,CAAC;IAC1G,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,cAAc,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAA4B,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IAClF,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,wBAAwB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACnE,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAA4B,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACrD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACzE,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,uDAAuD;AACvD,MAAM,UAAU,aAAa,CAC3B,GAAqB,EACrB,OAAsC,EACtC,WAA8B,2BAA2B;IAEzD,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,CAAC;IAChE,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpF,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YACpD,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YAC9E,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;IAChE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;IAChE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/adapters/openapi/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,+BAA+B,EAC/B,SAAS,EACT,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAI7B,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,IAAI;QACpB,KAA8B,CAAC,OAAO,KAAK,SAAS;QACrD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,KAA2C,CAAC;AACrD,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,KAAsB;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CACb,MAA0B,EAC1B,OAAsC,EACtC,QAA2B;IAE3B,MAAM,EAAE,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC1G,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACtC,QAAQ,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,OAAsC,EACtC,WAA8B,2BAA2B;IAEzD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAS,EAAE,CAAC;IAErB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC9E,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACzE,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACvC,mEAAmE;QACnE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;IACxB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,WAAW,IAAI,IAAI,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;QAC9E,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC;IAC1B,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,IAAI,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QACnE,iCAAiC;IACnC,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAmE,CAAC;QACnF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;YACnB,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAgB,EAAE,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;YACpB,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,GAAG,IAAgB,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO;YAAE,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,GAAI,IAAsD,CAAC,IAAI,EAAE,CAAC;IAC1G,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,cAAc,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAA4B,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IAClF,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACnB,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,wBAAwB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACnE,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAA4B,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACrD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACzE,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,uDAAuD;AACvD,MAAM,UAAU,aAAa,CAC3B,GAAqB,EACrB,OAAsC,EACtC,WAA8B,2BAA2B;IAEzD,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,CAAC;IAChE,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAkB,CAAC;IAC9C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpF,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YACpD,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YAC9E,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;IAChE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;IAEhE,gFAAgF;IAChF,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,+BAA+B,EAAE,CAAC;QACnD,MAAM,MAAM,GAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QAC9B,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/adapters/openapi/types.d.ts

@@ -13,6 +13,7 @@ export declare const OPENAPI_TAGS: {
     readonly OBJECTS: "Objects";
     readonly SCHEMA: "Schema";
     readonly SCRIPTS: "Scripts";
+    readonly WORKFLOW: "Workflow";
     readonly METADATA: "Metadata";
     readonly PERMISSIONS: "Permissions";
     readonly IDENTITIES: "Identities";

package/dist/adapters/openapi/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/openapi/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAcf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAc/D,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,4DAA4D;IAC5D,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC,YAAY,EAAE,mBAAmB,CAAC;IAClC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,qBAAqB,EAAE,iBAAiB,CAAC;IAC7D,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACrC,UAAU,EAAE;QACV,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/openapi/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAef,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAe/D,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,4DAA4D;IAC5D,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC,YAAY,EAAE,mBAAmB,CAAC;IAClC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,qBAAqB,EAAE,iBAAiB,CAAC;IAC7D,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACrC,UAAU,EAAE;QACV,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD"}

package/dist/adapters/openapi/types.js

@@ -12,6 +12,7 @@ export const OPENAPI_TAGS = {
     OBJECTS: 'Objects',
     SCHEMA: 'Schema',
     SCRIPTS: 'Scripts',
+    WORKFLOW: 'Workflow',
     METADATA: 'Metadata',
     PERMISSIONS: 'Permissions',
     IDENTITIES: 'Identities',
@@ -27,6 +28,7 @@ export const OPENAPI_TAG_DESCRIPTIONS = {
     Objects: 'Generic CRUD over the objects in your schema.',
     Schema: "Read or replace an object's `schema.json` (admin).",
     Scripts: 'Sandboxed `server.js` hook sources.',
+    Workflow: 'Declarative per-object state machines (objects with a `workflow.json`).',
     Metadata: 'Object descriptors for API clients.',
     Permissions: "The identity's effective permissions per object.",
     Identities: 'The static on-behalf-of identity directory (admin).',

package/dist/adapters/openapi/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/openapi/types.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;CACF,CAAC;AAGX,MAAM,CAAC,MAAM,wBAAwB,GAA+B;IAClE,OAAO,EAAE,+CAA+C;IACxD,MAAM,EAAE,oDAAoD;IAC5D,OAAO,EAAE,qCAAqC;IAC9C,QAAQ,EAAE,qCAAqC;IAC/C,WAAW,EAAE,kDAAkD;IAC/D,UAAU,EAAE,qDAAqD;IACjE,KAAK,EAAE,yDAAyD;IAChE,SAAS,EAAE,wDAAwD;IACnE,UAAU,EAAE,+CAA+C;IAC3D,KAAK,EAAE,0CAA0C;IACjD,MAAM,EAAE,uCAAuC;IAC/C,OAAO,EAAE,2CAA2C;IACpD,GAAG,EAAE,sDAAsD;CAC5D,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/openapi/types.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;CACF,CAAC;AAGX,MAAM,CAAC,MAAM,wBAAwB,GAA+B;IAClE,OAAO,EAAE,+CAA+C;IACxD,MAAM,EAAE,oDAAoD;IAC5D,OAAO,EAAE,qCAAqC;IAC9C,QAAQ,EAAE,yEAAyE;IACnF,QAAQ,EAAE,qCAAqC;IAC/C,WAAW,EAAE,kDAAkD;IAC/D,UAAU,EAAE,qDAAqD;IACjE,KAAK,EAAE,yDAAyD;IAChE,SAAS,EAAE,wDAAwD;IACnE,UAAU,EAAE,+CAA+C;IAC3D,KAAK,EAAE,0CAA0C;IACjD,MAAM,EAAE,uCAAuC;IAC/C,OAAO,EAAE,2CAA2C;IACpD,GAAG,EAAE,sDAAsD;CAC5D,CAAC"}

package/dist/adapters/rest/approvals.d.ts

@@ -1,14 +1,14 @@
 import type { FastifyInstance } from 'fastify';
 import type { RestDeps, RestOptions } from './plugin.js';
 /**
- * Approval queue routes (D1 depth-1 read + local write; MCP tools deferred):
+ * Approval queue routes (depth-1 read + local write; MCP tools deferred):
  *   GET  {prefix}/approvals — paged list with status/action/actorKey/time filters
  *   POST {prefix}/approvals/:key/approve — resolve a pending entry (admin)
  *   POST {prefix}/approvals/:key/reject — resolve a pending entry (admin)
  *
  * Reads and writes are gated to `adminRoles` (the queue carries request args —
  * a write authority boundary). Approver id comes from the authenticated subject;
- * resolution is audited (A7) by the queue facade. Cross-instance remote
+ * resolution is audited by the queue facade. Cross-instance remote
  * approve/reject (depth 2) is not implemented.
  */
 export declare function registerApprovalsRoutes(app: FastifyInstance, deps: RestDeps, options?: RestOptions): void;

package/dist/adapters/rest/approvals.js

@@ -33,14 +33,14 @@ function parseFilter(query, locale) {
     return filter;
 }
 /**
- * Approval queue routes (D1 depth-1 read + local write; MCP tools deferred):
+ * Approval queue routes (depth-1 read + local write; MCP tools deferred):
  *   GET  {prefix}/approvals — paged list with status/action/actorKey/time filters
  *   POST {prefix}/approvals/:key/approve — resolve a pending entry (admin)
  *   POST {prefix}/approvals/:key/reject — resolve a pending entry (admin)
  *
  * Reads and writes are gated to `adminRoles` (the queue carries request args —
  * a write authority boundary). Approver id comes from the authenticated subject;
- * resolution is audited (A7) by the queue facade. Cross-instance remote
+ * resolution is audited by the queue facade. Cross-instance remote
  * approve/reject (depth 2) is not implemented.
  */
 export function registerApprovalsRoutes(app, deps, options = {}) {

package/dist/adapters/rest/audit.d.ts

@@ -1,11 +1,11 @@
 import type { FastifyInstance } from 'fastify';
 import type { RestDeps, RestOptions } from './plugin.js';
 /**
- * Audit route (M11, framework-agnostic): paginated audit trail for frontend
+ * Audit route (framework-agnostic): paginated audit trail for frontend
  * audit pages (react-admin audit page / Refine `auditLogProvider`).
  *   GET {prefix}/audit?actorId&action&object&from&to&limit&offset
  *
- * RBAC filter (D15): audit rows carry before/after snapshots, so a regular
+ * RBAC filter: audit rows carry before/after snapshots, so a regular
  * identity only sees its own records (`actorId` defaults to its own id).
  * Roles listed in `options.adminRoles` may query any actor (or the whole
  * trail by omitting `actorId`). Not registered when the audit subsystem is

package/dist/adapters/rest/audit.js

@@ -19,11 +19,11 @@ function readFilterObject(query, key, locale) {
     return parsed;
 }
 /**
- * Audit route (M11, framework-agnostic): paginated audit trail for frontend
+ * Audit route (framework-agnostic): paginated audit trail for frontend
  * audit pages (react-admin audit page / Refine `auditLogProvider`).
  *   GET {prefix}/audit?actorId&action&object&from&to&limit&offset
  *
- * RBAC filter (D15): audit rows carry before/after snapshots, so a regular
+ * RBAC filter: audit rows carry before/after snapshots, so a regular
  * identity only sees its own records (`actorId` defaults to its own id).
  * Roles listed in `options.adminRoles` may query any actor (or the whole
  * trail by omitting `actorId`). Not registered when the audit subsystem is

package/dist/adapters/rest/common.d.ts

@@ -1,4 +1,4 @@
-import type { Locale, RbacSubject } from '../../core/index.js';
+import type { Locale, IdentitySubject } from '../../core/index.js';
 import type { SlidingWindow } from '../../core/limiter/index.js';
 import { type Authenticator } from '../auth/index.js';
 /** raw API key from the Authorization header (rate-limit key, mirrors MCP) */
@@ -14,9 +14,9 @@ export declare function authenticateRequest(authenticator: Authenticator, reques
     headers: {
         authorization?: string;
     };
-}, locale: Locale): Promise<RbacSubject>;
+}, locale: Locale): Promise<IdentitySubject>;
 /**
- * Fail-closed admin gate (SU-7b/SU-7c): the subject must carry at least one
+ * Fail-closed admin gate: the subject must carry at least one
  * role listed in `adminRoles`. Used for admin-only source routes (server
  * scripts, raw schema, layout writes, page lifecycle).
  */

package/dist/adapters/rest/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/common.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEpE,8EAA8E;AAC9E,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAItE;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE;IAAE,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAChD,MAAM,EAAE,MAAM,GACb,IAAI,CAMN;AAED,kFAAkF;AAClF,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE;IAAE,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAChD,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAChC,MAAM,EAAE,MAAM,GACb,IAAI,CAKN;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK1G;AAED,oEAAoE;AACpE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAMtG;AAED,oEAAoE;AACpE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvG"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/common.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEpE,8EAA8E;AAC9E,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAItE;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE;IAAE,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAChD,MAAM,EAAE,MAAM,GACb,IAAI,CAMN;AAED,kFAAkF;AAClF,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE;IAAE,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAChD,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CAE1B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAChC,MAAM,EAAE,MAAM,GACb,IAAI,CAKN;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK1G;AAED,oEAAoE;AACpE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAMtG;AAED,oEAAoE;AACpE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvG"}

package/dist/adapters/rest/common.js

@@ -21,7 +21,7 @@ export async function authenticateRequest(authenticator, request, locale) {
     return authenticate(authenticator, request.headers.authorization, locale);
 }
 /**
- * Fail-closed admin gate (SU-7b/SU-7c): the subject must carry at least one
+ * Fail-closed admin gate: the subject must carry at least one
  * role listed in `adminRoles`. Used for admin-only source routes (server
  * scripts, raw schema, layout writes, page lifecycle).
  */

package/dist/adapters/rest/guardrails.d.ts

@@ -12,7 +12,7 @@ export interface GuardrailsRouteDeps {
     commitIdentity?: AutoCommitOptions['identity'];
 }
 /**
- * Guardrail policy source routes (M10c, admin): list the engine project's
+ * Guardrail policy source routes (admin): list the engine project's
  * `policies/` directory, read a policy's source, and write it back (git
  * committed). Only the directory configured via `tools.guardrails.policies`
  * (a string) is exposed — inline-array guardrails have no file surface.

package/dist/adapters/rest/guardrails.js

@@ -15,7 +15,7 @@ function saveBody(body, locale) {
     return expectVersion === undefined ? { source } : { source, expectVersion };
 }
 /**
- * Guardrail policy source routes (M10c, admin): list the engine project's
+ * Guardrail policy source routes (admin): list the engine project's
  * `policies/` directory, read a policy's source, and write it back (git
  * committed). Only the directory configured via `tools.guardrails.policies`
  * (a string) is exposed — inline-array guardrails have no file surface.

package/dist/adapters/rest/identities.d.ts

@@ -1,20 +1,20 @@
 import type { FastifyInstance } from 'fastify';
-import type { Locale, RbacSubject } from '../../core/index.js';
+import type { Locale, IdentitySubject } from '../../core/index.js';
 import type { Authenticator } from '../auth/index.js';
 import type { RestOptions } from './plugin.js';
 export interface IdentitiesRouteDeps {
     authenticator: Authenticator;
     locale: Locale;
     /** the MCP on-behalf-of identity directory (static `ref → subject`); a function resolver has no introspectable surface */
-    identities?: Record<string, RbacSubject>;
+    identities?: Record<string, IdentitySubject>;
 }
 /**
- * Identity directory route (M11, admin read): surface the engine's
+ * Identity directory route (admin read): surface the engine's
  * `mcp.identities` static directory so the governance console can render an
  * `IdentityTable` (ref → id / roles / team). Only the static-directory form is
  * exposed — a customer-provided `IdentityResolver` (function) has no
  * introspectable entries and returns `{ identities: [] }`.
- *   GET {prefix}/identities → { identities: [{ ref, id, roles, teamId? }] }
+ *   GET {prefix}/identities → { identities: [{ ref, id, roles, departmentId? }] }
  */
 export declare function registerIdentitiesRoutes(app: FastifyInstance, deps: IdentitiesRouteDeps, options?: RestOptions): void;
 //# sourceMappingURL=identities.d.ts.map

package/dist/adapters/rest/identities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identities.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/identities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,0HAA0H;IAC1H,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,mBAAmB,EACzB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAiBN"}
+{"version":3,"file":"identities.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/identities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,0HAA0H;IAC1H,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,mBAAmB,EACzB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAiBN"}

package/dist/adapters/rest/identities.js

@@ -1,11 +1,11 @@
 import { authenticateRequest, checkRateLimit, requireAdmin } from './common.js';
 /**
- * Identity directory route (M11, admin read): surface the engine's
+ * Identity directory route (admin read): surface the engine's
  * `mcp.identities` static directory so the governance console can render an
  * `IdentityTable` (ref → id / roles / team). Only the static-directory form is
  * exposed — a customer-provided `IdentityResolver` (function) has no
  * introspectable entries and returns `{ identities: [] }`.
- *   GET {prefix}/identities → { identities: [{ ref, id, roles, teamId? }] }
+ *   GET {prefix}/identities → { identities: [{ ref, id, roles, departmentId? }] }
  */
 export function registerIdentitiesRoutes(app, deps, options = {}) {
     const prefix = options.prefix ?? '/api';
@@ -19,7 +19,7 @@ export function registerIdentitiesRoutes(app, deps, options = {}) {
             ref,
             id: subjectValue.id,
             roles: subjectValue.roles,
-            ...(subjectValue.teamId === undefined ? {} : { teamId: subjectValue.teamId }),
+            ...(subjectValue.departmentId === undefined ? {} : { departmentId: subjectValue.departmentId }),
         }));
         return { identities };
     });

package/dist/adapters/rest/identities.js.map

@@ -1 +1 @@
-{"version":3,"file":"identities.js","sourceRoot":"","sources":["../../../src/adapters/rest/identities.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUhF;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,IAAyB,EACzB,UAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAEpC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,GAAG;YACH,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;SAC9E,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"identities.js","sourceRoot":"","sources":["../../../src/adapters/rest/identities.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUhF;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,IAAyB,EACzB,UAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAEpC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,GAAG;YACH,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,GAAG,CAAC,YAAY,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC;SAChG,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/rest/identityAdmin.d.ts

@@ -0,0 +1,18 @@
+import type { FastifyInstance } from 'fastify';
+import type { Locale } from '../../core/index.js';
+import type { Authenticator } from '../auth/index.js';
+import type { IdentityAdmin } from '../../runtime/identity/index.js';
+import type { RestOptions } from './plugin.js';
+export interface IdentityAdminRouteDeps {
+    authenticator: Authenticator;
+    locale: Locale;
+    admin: IdentityAdmin;
+}
+/**
+ * Greenfield identity administration (admin-gated, `adapters.rest.adminRoles`):
+ *   GET   {prefix}/identity/users        → { users: [{ id, roles, departmentId, enabled, ... }] }
+ *   POST  {prefix}/identity/users        → { id } (create an engine-owned user)
+ *   PATCH {prefix}/identity/users/:id    → { id, enabled } (enable/disable)
+ */
+export declare function registerIdentityAdminRoutes(app: FastifyInstance, deps: IdentityAdminRouteDeps, options?: RestOptions): void;
+//# sourceMappingURL=identityAdmin.d.ts.map

package/dist/adapters/rest/identityAdmin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityAdmin.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/identityAdmin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC;CACtB;AAYD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,sBAAsB,EAC5B,OAAO,GAAE,WAAgB,GACxB,IAAI,CAwCN"}

package/dist/adapters/rest/identityAdmin.js

@@ -0,0 +1,58 @@
+import { SchemaError } from '../../core/index.js';
+import { authenticateRequest, checkRateLimit, requireAdmin } from './common.js';
+/** string array from a body value (array, or a comma-separated string) */
+function parseRoles(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (Array.isArray(value))
+        return value.map((v) => String(v)).filter((v) => v !== '');
+    return String(value)
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s !== '');
+}
+/**
+ * Greenfield identity administration (admin-gated, `adapters.rest.adminRoles`):
+ *   GET   {prefix}/identity/users        → { users: [{ id, roles, departmentId, enabled, ... }] }
+ *   POST  {prefix}/identity/users        → { id } (create an engine-owned user)
+ *   PATCH {prefix}/identity/users/:id    → { id, enabled } (enable/disable)
+ */
+export function registerIdentityAdminRoutes(app, deps, options = {}) {
+    const prefix = options.prefix ?? '/api';
+    const { authenticator, locale, admin } = deps;
+    const limiter = options.rateLimiter;
+    const gate = async (request) => {
+        checkRateLimit(limiter, request, locale);
+        const subject = await authenticateRequest(authenticator, request, locale);
+        requireAdmin(subject.roles, 'identity', options.adminRoles, locale);
+    };
+    app.get(`${prefix}/identity/users`, async (request) => {
+        await gate(request);
+        return { users: await admin.list() };
+    });
+    app.post(`${prefix}/identity/users`, async (request, reply) => {
+        await gate(request);
+        const body = (request.body ?? {});
+        const { id } = await admin.create({
+            name: body.name === undefined ? null : String(body.name),
+            email: body.email === undefined ? null : String(body.email),
+            mobile: body.mobile === undefined ? null : String(body.mobile),
+            roles: parseRoles(body.roles),
+            enabled: body.enabled === undefined ? true : body.enabled === true,
+        });
+        return reply.code(201).send({ id });
+    });
+    app.patch(`${prefix}/identity/users/:id`, async (request) => {
+        await gate(request);
+        const { id } = request.params;
+        const body = (request.body ?? {});
+        if (typeof body.enabled !== 'boolean') {
+            throw new SchemaError('http.param.invalid', { param: 'enabled' }, locale);
+        }
+        const ok = await admin.setEnabled(id, body.enabled);
+        if (!ok)
+            throw new SchemaError('data.recordNotFound', { object: 'weavekit_user', id }, locale);
+        return { id, enabled: body.enabled };
+    });
+}
+//# sourceMappingURL=identityAdmin.js.map

package/dist/adapters/rest/identityAdmin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityAdmin.js","sourceRoot":"","sources":["../../../src/adapters/rest/identityAdmin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShF,0EAA0E;AAC1E,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,KAAK,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAoB,EACpB,IAA4B,EAC5B,UAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAEpC,MAAM,IAAI,GAAG,KAAK,EAAE,OAAuB,EAAiB,EAAE;QAC5D,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QAC7D,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACxD,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAC3D,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9D,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI;SACnE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QAC7D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/F,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/rest/index.d.ts

@@ -5,11 +5,15 @@ export { registerMetadataRoutes } from './metadata.js';
 export { registerPermissionsRoutes } from './permissions.js';
 export { registerAuditRoutes } from './audit.js';
 export { registerApprovalsRoutes } from './approvals.js';
+export { registerWorkflowRoutes } from './workflow.js';
+export { registerWorkflowSourceRoutes } from './workflowSource.js';
 export { registerScriptRoutes } from './scripts.js';
 export { registerPagesRoutes } from './pages.js';
 export { registerSchemaRoutes } from './schemas.js';
 export { registerGuardrailsRoutes } from './guardrails.js';
 export { registerIdentitiesRoutes } from './identities.js';
+export { registerIdentityAdminRoutes } from './identityAdmin.js';
+export type { IdentityAdminRouteDeps } from './identityAdmin.js';
 export { registerProxyRoutes } from './proxy.js';
 export type { ProxyRouteDeps } from './proxy.js';
 export { registerIngressRoutes } from './ingress.js';

package/dist/adapters/rest/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/adapters/rest/index.js

@@ -4,11 +4,14 @@ export { registerMetadataRoutes } from './metadata.js';
 export { registerPermissionsRoutes } from './permissions.js';
 export { registerAuditRoutes } from './audit.js';
 export { registerApprovalsRoutes } from './approvals.js';
+export { registerWorkflowRoutes } from './workflow.js';
+export { registerWorkflowSourceRoutes } from './workflowSource.js';
 export { registerScriptRoutes } from './scripts.js';
 export { registerPagesRoutes } from './pages.js';
 export { registerSchemaRoutes } from './schemas.js';
 export { registerGuardrailsRoutes } from './guardrails.js';
 export { registerIdentitiesRoutes } from './identities.js';
+export { registerIdentityAdminRoutes } from './identityAdmin.js';
 export { registerProxyRoutes } from './proxy.js';
 export { registerIngressRoutes } from './ingress.js';
 //# sourceMappingURL=index.js.map

package/dist/adapters/rest/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/rest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/rest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/adapters/rest/metadata.d.ts

@@ -1,7 +1,7 @@
 import type { FastifyInstance } from 'fastify';
 import type { RestDeps, RestOptions } from './plugin.js';
 /**
- * Metadata route (M11, framework-agnostic): neutral schema + permissions for
+ * Metadata route (framework-agnostic): neutral schema + permissions for
  * frontend adapters (Refine Inferencer / react-admin auto-forms).
  *   GET {prefix}/metadata            → { objects: [ObjectDescriptor] } (readable only)
  *   GET {prefix}/metadata?object=X   → one ObjectDescriptor (404 unknown, 403 unreadable)

package/dist/adapters/rest/metadata.js

@@ -2,7 +2,7 @@ import { createHash } from 'node:crypto';
 import { describeObject, listObjectDescriptors } from '../../core/object/describe.js';
 import { authenticateRequest, checkRateLimit, readString } from './common.js';
 /**
- * Metadata route (M11, framework-agnostic): neutral schema + permissions for
+ * Metadata route (framework-agnostic): neutral schema + permissions for
  * frontend adapters (Refine Inferencer / react-admin auto-forms).
  *   GET {prefix}/metadata            → { objects: [ObjectDescriptor] } (readable only)
  *   GET {prefix}/metadata?object=X   → one ObjectDescriptor (404 unknown, 403 unreadable)

package/dist/adapters/rest/pages.d.ts

@@ -3,7 +3,7 @@ import { type Locale, type ObjectRegistry } from '../../core/index.js';
 import type { AutoCommitOptions } from '../../runtime/git/index.js';
 import type { Authenticator } from '../auth/index.js';
 import type { RestOptions } from './plugin.js';
-/** page routes (SU-7c): path-mirrored layout source + custom-page lifecycle */
+/** page routes: path-mirrored layout source + custom-page lifecycle */
 export interface PagesRouteDeps {
     registry: ObjectRegistry;
     authenticator: Authenticator;

package/dist/adapters/rest/pages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/pages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAe,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAOpF,OAAO,KAAK,EAAE,iBAAiB,EAAuB,MAAM,4BAA4B,CAAC;AA2BzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;CAChD;AAoDD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,cAAc,EACpB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAqMN"}
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/pages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAe,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAOpF,OAAO,KAAK,EAAE,iBAAiB,EAAuB,MAAM,4BAA4B,CAAC;AA2BzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;CAChD;AAoDD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,cAAc,EACpB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAqMN"}

package/dist/adapters/rest/permissions.d.ts

@@ -1,7 +1,7 @@
 import type { FastifyInstance } from 'fastify';
 import type { RestDeps, RestOptions } from './plugin.js';
 /**
- * Permissions route (M11, framework-agnostic): the identity's effective
+ * Permissions route (framework-agnostic): the identity's effective
  * permissions per object — the data source for Refine `accessControlProvider`
  * / frontend RBAC menu & action gating (no more 403 trial-and-error).
  *   GET {prefix}/permissions → { objects: [{ name, labels?, permissions }] }

package/dist/adapters/rest/permissions.js

@@ -1,7 +1,7 @@
 import { listObjectPermissions } from '../../core/object/describe.js';
 import { authenticateRequest, checkRateLimit } from './common.js';
 /**
- * Permissions route (M11, framework-agnostic): the identity's effective
+ * Permissions route (framework-agnostic): the identity's effective
  * permissions per object — the data source for Refine `accessControlProvider`
  * / frontend RBAC menu & action gating (no more 403 trial-and-error).
  *   GET {prefix}/permissions → { objects: [{ name, labels?, permissions }] }

package/dist/adapters/rest/plugin.d.ts

@@ -13,9 +13,9 @@ export interface RestDeps {
     dataAccess: ObjectDataAccess;
     authenticator: Authenticator;
     locale: Locale;
-    /** audit query engine (M11); present when the audit subsystem is enabled — registers `GET {prefix}/audit` */
+    /** audit query engine; present when the audit subsystem is enabled — registers `GET {prefix}/audit` */
     audit?: AuditQueryEngine;
-    /** approval queue (D1); present when the tool executor is enabled — registers `/approvals` routes */
+    /** approval queue; present when the tool executor is enabled — registers `/approvals` routes */
     approvals?: ToolApprovals;
 }
 export interface RestOptions {

package/dist/adapters/rest/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAItD,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,6GAA6G;IAC7G,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,qGAAqG;IACrG,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,gGAAgG;IAChG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAsFD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,QAAQ,EACd,OAAO,GAAE,WAAgB,GACxB,IAAI,CAkIN"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAItD,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,uGAAuG;IACvG,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,gGAAgG;IAChG,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,gGAAgG;IAChG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAsFD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,QAAQ,EACd,OAAO,GAAE,WAAgB,GACxB,IAAI,CAkIN"}

package/dist/adapters/rest/schemas.d.ts

@@ -3,7 +3,7 @@ import { type Locale, type ObjectRegistry } from '../../core/index.js';
 import type { AutoCommitOptions } from '../../runtime/git/index.js';
 import type { Authenticator } from '../auth/index.js';
 import type { RestOptions } from './plugin.js';
-/** raw schema source routes (SU-7c): admin-only GET/PUT `{source, version}` */
+/** raw schema source routes: admin-only GET/PUT `{source, version}` */
 export interface SchemaRouteDeps {
     registry: ObjectRegistry;
     authenticator: Authenticator;

package/dist/adapters/rest/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAe,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;CAChD;AAsBD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,EACrB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAuCN"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAe,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;CAChD;AAsBD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,EACrB,OAAO,GAAE,WAAgB,GACxB,IAAI,CAuCN"}

package/dist/adapters/rest/workflow.d.ts

@@ -0,0 +1,15 @@
+import type { FastifyInstance } from 'fastify';
+import type { RestDeps, RestOptions } from './plugin.js';
+/**
+ * Workflow routes for objects that declare `objects/<name>/workflow.json`:
+ *   GET    {prefix}/objects/:name/:id/workflow            → status (state/node/actions/workitems)
+ *   POST   {prefix}/objects/:name/:id/workflow/:action    → run an action (submit/approve/reject/withdraw/cancel/forward)
+ *   POST   {prefix}/objects/:name/:id/workflow/lock       → acquire/renew the caller's presence lock
+ *   DELETE {prefix}/objects/:name/:id/workflow/lock       → release the caller's presence lock
+ *   POST   {prefix}/objects/:name/:id/transitions/:action → back-compat alias for the action route
+ *
+ * All are RBAC-scoped via the data-access layer (read for the status/lock,
+ * update + workitem participation for actions).
+ */
+export declare function registerWorkflowRoutes(app: FastifyInstance, deps: RestDeps, options?: RestOptions): void;
+//# sourceMappingURL=workflow.d.ts.map

package/dist/adapters/rest/workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../../src/adapters/rest/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUzD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,QAAQ,EACd,OAAO,GAAE,WAAgB,GACxB,IAAI,CAyEN"}