@weave-kit/engine 1.3.0 → 1.5.0

package/dist/core/i18n/zh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zh.d.ts","sourceRoot":"","sources":["../../../src/core/i18n/zh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CA2QhC,CAAC"}
+{"version":3,"file":"zh.d.ts","sourceRoot":"","sources":["../../../src/core/i18n/zh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CA8QhC,CAAC"}

package/dist/core/i18n/zh.js

@@ -177,6 +177,7 @@ export const zh = {
     'auth.invalidKey': 'API Key 无效',
     'auth.notConfigured': '未配置认证（auth）— 拒绝启动',
     'engine.databaseUrl.missing': 'databaseUrl 必填（请设置 config.databaseUrl 或 DATABASE_URL 环境变量）',
+    'engine.rls.notProvisioned': '已启用对象路径 RLS（rls.enforce）但尚未就绪：{detail}——请在开启 rls.enforce 的配置下运行 "weave migrate"（既有表需 "alter": true 且归迁移账户所有）',
     'engine.runtimeAccount.ddlAllowed': '运行时数据库账户 "{user}" 可在当前 schema 建表——请将 databaseUrl 指向最小权限角色（无 DDL），并用 migrationDatabaseUrl 执行迁移（设 runtime.requireRestrictedAccount=false 可放行）',
     'git.notRepo': '"{dir}" 不是 git 仓库',
     'git.command.failed': 'git {command} 失败：{detail}',
@@ -265,5 +266,7 @@ export const zh = {
     'graphql.complexityExceeded': 'GraphQL 查询复杂度 {cost} 超过上限 {max}',
     'graphql.aliasExceeded': 'GraphQL 查询使用了 {count} 个别名，超过上限 {max}',
     'graphql.allowList.denied': '操作不在 GraphQL 白名单中',
+    'prompt.notFound': '未找到 MCP 提示 "{name}"',
+    'prompt.args.invalid': '提示 "{name}"：{detail}',
 };
 //# sourceMappingURL=zh.js.map

package/dist/core/i18n/zh.js.map

@@ -1 +1 @@
-{"version":3,"file":"zh.js","sourceRoot":"","sources":["../../../src/core/i18n/zh.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,EAAE,GAA+B;IAC5C,mCAAmC,EAAE,sDAAsD;IAC3F,8BAA8B,EAAE,oCAAoC;IACpE,wBAAwB,EAAE,oCAAoC;IAC9D,2BAA2B,EAAE,wBAAwB;IACrD,4BAA4B,EAAE,wBAAwB;IACtD,iBAAiB,EAAE,sCAAsC;IACzD,iBAAiB,EAAE,2CAA2C;IAC9D,qBAAqB,EAAE,uCAAuC;IAC9D,6BAA6B,EAAE,iCAAiC;IAChE,8BAA8B,EAAE,4BAA4B;IAC5D,iCAAiC,EAAE,uCAAuC;IAC1E,oCAAoC,EAAE,yCAAyC;IAC/E,mCAAmC,EAAE,wCAAwC;IAC7E,qCAAqC,EAAE,wCAAwC;IAC/E,kCAAkC,EAAE,4DAA4D;IAChG,kCAAkC,EAAE,wEAAwE;IAC5G,wBAAwB,EAAE,oFAAoF;IAC9G,mBAAmB,EAAE,0CAA0C;IAC/D,wBAAwB,EAAE,iDAAiD;IAC3E,aAAa,EAAE,oCAAoC;IACnD,iCAAiC,EAAE,8DAA8D;IACjG,yBAAyB,EAAE,sDAAsD;IACjF,mBAAmB,EAAE,kBAAkB;IACvC,mBAAmB,EAAE,gCAAgC;IACrD,oBAAoB,EAAE,mBAAmB;IACzC,yBAAyB,EAAE,6BAA6B;IACxD,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,8BAA8B;IAC5D,2BAA2B,EAAE,gDAAgD;IAC7E,mBAAmB,EAAE,oBAAoB;IACzC,sBAAsB,EAAE,yBAAyB;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,kBAAkB,EAAE,iBAAiB;IACrC,sBAAsB,EAAE,uBAAuB;IAC/C,sBAAsB,EAAE,oCAAoC;IAC5D,mBAAmB,EAAE,gCAAgC;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,+BAA+B;IACzD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,EAAE,4BAA4B;IACpD,kBAAkB,EAAE,yHAAyH;IAC7I,qBAAqB,EAAE,yBAAyB;IAChD,2BAA2B,EAAE,iDAAiD;IAC9E,yBAAyB,EAAE,uCAAuC;IAClE,wBAAwB,EAAE,mCAAmC;IAC7D,mBAAmB,EAAE,gBAAgB;IACrC,oBAAoB,EAAE,+CAA+C;IACrE,yBAAyB,EAAE,0EAA0E;IACrG,2BAA2B,EAAE,8BAA8B;IAC3D,8BAA8B,EAAE,iDAAiD;IACjF,4BAA4B,EAAE,gDAAgD;IAC9E,iBAAiB,EAAE,yBAAyB;IAC5C,qBAAqB,EAAE,qBAAqB;IAC5C,kBAAkB,EAAE,2CAA2C;IAC/D,oBAAoB,EAAE,sCAAsC;IAC5D,qBAAqB,EAAE,6DAA6D;IACpF,oBAAoB,EAAE,uDAAuD;IAC7E,uBAAuB,EAAE,4BAA4B;IACrD,mBAAmB,EAAE,mBAAmB;IACxC,wBAAwB,EAAE,uDAAuD;IACjF,yBAAyB,EAAE,8BAA8B;IACzD,wBAAwB,EAAE,+CAA+C;IACzE,uBAAuB,EAAE,0CAA0C;IACnE,mBAAmB,EAAE,kCAAkC;IACvD,oBAAoB,EAAE,kCAAkC;IACxD,mBAAmB,EAAE,iCAAiC;IACtD,wBAAwB,EAAE,kCAAkC;IAC5D,sBAAsB,EAAE,8BAA8B;IACtD,uBAAuB,EAAE,6BAA6B;IACtD,sBAAsB,EAAE,6BAA6B;IACrD,uBAAuB,EAAE,8BAA8B;IACvD,mBAAmB,EAAE,gDAAgD;IACrE,yBAAyB,EAAE,8CAA8C;IACzE,4BAA4B,EAAE,uCAAuC;IACrE,2BAA2B,EAAE,wCAAwC;IACrE,gBAAgB,EAAE,4BAA4B;IAC9C,wBAAwB,EAAE,iDAAiD;IAC3E,0BAA0B,EAAE,iDAAiD;IAC7E,2BAA2B,EAAE,mEAAmE;IAChG,iCAAiC,EAAE,6DAA6D;IAChG,0BAA0B,EAAE,0CAA0C;IACtE,4BAA4B,EAAE,wCAAwC;IACtE,qBAAqB,EAAE,+BAA+B;IACtD,mBAAmB,EAAE,yBAAyB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,6BAA6B,EAAE,kCAAkC;IACjE,6BAA6B,EAAE,qDAAqD;IACpF,4BAA4B,EAAE,oCAAoC;IAClE,8BAA8B,EAAE,4CAA4C;IAC5E,0BAA0B,EAAE,wEAAwE;IACpG,6BAA6B,EAAE,2CAA2C;IAC1E,4BAA4B,EAAE,0CAA0C;IACxE,mCAAmC,EAAE,gDAAgD;IACrF,uCAAuC,EAAE,gDAAgD;IACzF,gCAAgC,EAAE,oCAAoC;IACtE,6BAA6B,EAAE,gDAAgD;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,+BAA+B,EAAE,mCAAmC;IACpE,4BAA4B,EAAE,gDAAgD;IAC9E,qCAAqC,EAAE,yCAAyC;IAChF,kCAAkC,EAAE,gDAAgD;IACpF,wBAAwB,EAAE,8CAA8C;IACxE,0BAA0B,EAAE,kDAAkD;IAC9E,2BAA2B,EAAE,4CAA4C;IACzE,wBAAwB,EAAE,yCAAyC;IACnE,6BAA6B,EAAE,kDAAkD;IACjF,2BAA2B,EAAE,6CAA6C;IAC1E,oBAAoB,EAAE,sCAAsC;IAC5D,sBAAsB,EAAE,0DAA0D;IAClF,sBAAsB,EAAE,iCAAiC;IACzD,2BAA2B,EAAE,oCAAoC;IACjE,yBAAyB,EAAE,yDAAyD;IACpF,2BAA2B,EAAE,oDAAoD;IACjF,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,mCAAmC;IAChE,4BAA4B,EAAE,qDAAqD;IACnF,6BAA6B,EAAE,0CAA0C;IACzE,iCAAiC,EAAE,oDAAoD;IACvF,iCAAiC,EAAE,6DAA6D;IAChG,yCAAyC,EAAE,8DAA8D;IACzG,+BAA+B,EAAE,mEAAmE;IACpG,oCAAoC,EAAE,qEAAqE;IAC3G,sBAAsB,EAAE,yCAAyC;IACjE,uBAAuB,EAAE,0CAA0C;IACnE,2BAA2B,EAAE,sDAAsD;IACnF,gBAAgB,EAAE,6BAA6B;IAC/C,iBAAiB,EAAE,4BAA4B;IAC/C,oBAAoB,EAAE,yCAAyC;IAC/D,sBAAsB,EAAE,0CAA0C;IAClE,iBAAiB,EAAE,oCAAoC;IACvD,2BAA2B,EAAE,oDAAoD;IACjF,4BAA4B,EAAE,0DAA0D;IACxF,6BAA6B,EAAE,0DAA0D;IACzF,+BAA+B,EAAE,2DAA2D;IAC5F,oBAAoB,EAAE,6CAA6C;IACnE,8BAA8B,EAAE,2DAA2D;IAC3F,8BAA8B,EAAE,yCAAyC;IACzE,wBAAwB,EAAE,mCAAmC;IAC7D,0BAA0B,EAAE,mDAAmD;IAC/E,oCAAoC,EAAE,gEAAgE;IACtG,oBAAoB,EAAE,kBAAkB;IACxC,oBAAoB,EAAE,uBAAuB;IAC7C,gBAAgB,EAAE,+BAA+B;IACjD,sBAAsB,EAAE,+BAA+B;IACvD,oBAAoB,EAAE,qCAAqC;IAC3D,iBAAiB,EAAE,0CAA0C;IAC7D,0BAA0B,EAAE,sDAAsD;IAClF,sBAAsB,EAAE,iDAAiD;IACzE,qBAAqB,EAAE,oDAAoD;IAC3E,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,8BAA8B;IACpD,qBAAqB,EAAE,+BAA+B;IACtD,qBAAqB,EAAE,+BAA+B;IACtD,iBAAiB,EAAE,yCAAyC;IAC5D,iBAAiB,EAAE,+CAA+C;IAClE,gBAAgB,EAAE,0CAA0C;IAC5D,gBAAgB,EAAE,0CAA0C;IAC5D,sBAAsB,EAAE,yCAAyC;IACjE,sBAAsB,EAAE,yCAAyC;IACjE,kBAAkB,EAAE,oCAAoC;IACxD,4BAA4B,EAAE,8CAA8C;IAC5E,iCAAiC,EAAE,oCAAoC;IACvE,uBAAuB,EAAE,gDAAgD;IACzE,oBAAoB,EAAE,mBAAmB;IACzC,qBAAqB,EAAE,6BAA6B;IACpD,kBAAkB,EAAE,iCAAiC;IACrD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,mBAAmB,EAAE,4CAA4C;IACjE,2BAA2B,EAAE,mDAAmD;IAChF,0BAA0B,EAAE,wGAAwG;IACpI,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,YAAY;IAC/B,oBAAoB,EAAE,mBAAmB;IACzC,4BAA4B,EAAE,4DAA4D;IAC1F,kCAAkC,EAAE,6IAA6I;IACjL,aAAa,EAAE,mBAAmB;IAClC,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,mBAAmB;IACzC,kBAAkB,EAAE,yBAAyB;IAC7C,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,mBAAmB;IACzC,eAAe,EAAE,OAAO;IACxB,kBAAkB,EAAE,4CAA4C;IAChE,eAAe,EAAE,SAAS;IAC1B,oBAAoB,EAAE,qBAAqB;IAC3C,mBAAmB,EAAE,yBAAyB;IAC9C,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,iBAAiB;IACzC,2BAA2B,EAAE,oCAAoC;IACjE,sBAAsB,EAAE,0BAA0B;IAClD,mBAAmB,EAAE,uBAAuB;IAC5C,iBAAiB,EAAE,oBAAoB;IACvC,cAAc,EAAE,gCAAgC;IAChD,gBAAgB,EAAE,iCAAiC;IACnD,gBAAgB,EAAE,4BAA4B;IAC9C,sBAAsB,EAAE,qBAAqB;IAC7C,qBAAqB,EAAE,oCAAoC;IAC3D,aAAa,EAAE,yBAAyB;IACxC,4BAA4B,EAAE,0EAA0E;IACxG,4BAA4B,EAAE,mDAAmD;IACjF,gBAAgB,EAAE,qCAAqC;IACvD,sBAAsB,EAAE,wBAAwB;IAChD,eAAe,EAAE,aAAa;IAC9B,wBAAwB,EAAE,8CAA8C;IACxE,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,SAAS;IAChC,qBAAqB,EAAE,UAAU;IACjC,yBAAyB,EAAE,eAAe;IAC1C,qBAAqB,EAAE,mBAAmB;IAC1C,wBAAwB,EAAE,qDAAqD;IAC/E,8BAA8B,EAAE,qDAAqD;IACrF,qBAAqB,EAAE,gBAAgB;IACvC,uBAAuB,EAAE,qCAAqC;IAC9D,yBAAyB,EAAE,sBAAsB;IACjD,yBAAyB,EAAE,aAAa;IACxC,wBAAwB,EAAE,eAAe;IACzC,2BAA2B,EAAE,gCAAgC;IAC7D,yBAAyB,EAAE,mBAAmB;IAC9C,yBAAyB,EAAE,oBAAoB;IAC/C,8BAA8B,EAAE,sDAAsD;IACtF,4BAA4B,EAAE,gCAAgC;IAC9D,gCAAgC,EAAE,2CAA2C;IAC7E,wBAAwB,EAAE,SAAS;IACnC,2BAA2B,EAAE,gBAAgB;IAC7C,uBAAuB,EAAE,mBAAmB;IAC5C,0BAA0B,EAAE,WAAW;IACvC,2BAA2B,EAAE,uBAAuB;IACpD,4BAA4B,EAAE,4BAA4B;IAC1D,wBAAwB,EAAE,+BAA+B;IACzD,iCAAiC,EAAE,mDAAmD;IACtF,8BAA8B,EAAE,mBAAmB;IACnD,mBAAmB,EAAE,uBAAuB;IAC5C,eAAe,EAAE,mCAAmC;IACpD,gBAAgB,EAAE,uBAAuB;IACzC,cAAc,EAAE,SAAS;IACzB,wBAAwB,EAAE,kCAAkC;IAC5D,oBAAoB,EAAE,oCAAoC;IAC5D,yBAAyB,EAAE,mCAAmC;IAC9D,uBAAuB,EAAE,4IAA4I;IACrK,8BAA8B,EAAE,kDAAkD;IAClF,wBAAwB,EAAE,8CAA8C;IACxE,uBAAuB,EAAE,6CAA6C;IACtE,0BAA0B,EAAE,0CAA0C;IACpE,6BAA6B,EAAE,0CAA0C;IACzE,gCAAgC,EAAE,4CAA4C;IAC9E,8BAA8B,EAAE,4CAA4C;IAC5E,4BAA4B,EAAE,6CAA6C;IAC3E,uBAAuB,EAAE,iDAAiD;IAC1E,6BAA6B,EAAE,uDAAuD;IACtF,+BAA+B,EAAE,2CAA2C;IAC5E,0BAA0B,EAAE,uCAAuC;IACnE,6BAA6B,EAAE,yDAAyD;IACxF,gCAAgC,EAAE,sCAAsC;IACxE,0BAA0B,EAAE,4FAA4F;IACxH,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,+CAA+C;IAC/D,uBAAuB,EAAE,yDAAyD;IAClF,uBAAuB,EAAE,iCAAiC;IAC1D,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,sCAAsC;IAC/D,0BAA0B,EAAE,mBAAmB;CACvC,CAAC"}
+{"version":3,"file":"zh.js","sourceRoot":"","sources":["../../../src/core/i18n/zh.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,EAAE,GAA+B;IAC5C,mCAAmC,EAAE,sDAAsD;IAC3F,8BAA8B,EAAE,oCAAoC;IACpE,wBAAwB,EAAE,oCAAoC;IAC9D,2BAA2B,EAAE,wBAAwB;IACrD,4BAA4B,EAAE,wBAAwB;IACtD,iBAAiB,EAAE,sCAAsC;IACzD,iBAAiB,EAAE,2CAA2C;IAC9D,qBAAqB,EAAE,uCAAuC;IAC9D,6BAA6B,EAAE,iCAAiC;IAChE,8BAA8B,EAAE,4BAA4B;IAC5D,iCAAiC,EAAE,uCAAuC;IAC1E,oCAAoC,EAAE,yCAAyC;IAC/E,mCAAmC,EAAE,wCAAwC;IAC7E,qCAAqC,EAAE,wCAAwC;IAC/E,kCAAkC,EAAE,4DAA4D;IAChG,kCAAkC,EAAE,wEAAwE;IAC5G,wBAAwB,EAAE,oFAAoF;IAC9G,mBAAmB,EAAE,0CAA0C;IAC/D,wBAAwB,EAAE,iDAAiD;IAC3E,aAAa,EAAE,oCAAoC;IACnD,iCAAiC,EAAE,8DAA8D;IACjG,yBAAyB,EAAE,sDAAsD;IACjF,mBAAmB,EAAE,kBAAkB;IACvC,mBAAmB,EAAE,gCAAgC;IACrD,oBAAoB,EAAE,mBAAmB;IACzC,yBAAyB,EAAE,6BAA6B;IACxD,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,8BAA8B;IAC5D,2BAA2B,EAAE,gDAAgD;IAC7E,mBAAmB,EAAE,oBAAoB;IACzC,sBAAsB,EAAE,yBAAyB;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,kBAAkB,EAAE,iBAAiB;IACrC,sBAAsB,EAAE,uBAAuB;IAC/C,sBAAsB,EAAE,oCAAoC;IAC5D,mBAAmB,EAAE,gCAAgC;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,+BAA+B;IACzD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,EAAE,4BAA4B;IACpD,kBAAkB,EAAE,yHAAyH;IAC7I,qBAAqB,EAAE,yBAAyB;IAChD,2BAA2B,EAAE,iDAAiD;IAC9E,yBAAyB,EAAE,uCAAuC;IAClE,wBAAwB,EAAE,mCAAmC;IAC7D,mBAAmB,EAAE,gBAAgB;IACrC,oBAAoB,EAAE,+CAA+C;IACrE,yBAAyB,EAAE,0EAA0E;IACrG,2BAA2B,EAAE,8BAA8B;IAC3D,8BAA8B,EAAE,iDAAiD;IACjF,4BAA4B,EAAE,gDAAgD;IAC9E,iBAAiB,EAAE,yBAAyB;IAC5C,qBAAqB,EAAE,qBAAqB;IAC5C,kBAAkB,EAAE,2CAA2C;IAC/D,oBAAoB,EAAE,sCAAsC;IAC5D,qBAAqB,EAAE,6DAA6D;IACpF,oBAAoB,EAAE,uDAAuD;IAC7E,uBAAuB,EAAE,4BAA4B;IACrD,mBAAmB,EAAE,mBAAmB;IACxC,wBAAwB,EAAE,uDAAuD;IACjF,yBAAyB,EAAE,8BAA8B;IACzD,wBAAwB,EAAE,+CAA+C;IACzE,uBAAuB,EAAE,0CAA0C;IACnE,mBAAmB,EAAE,kCAAkC;IACvD,oBAAoB,EAAE,kCAAkC;IACxD,mBAAmB,EAAE,iCAAiC;IACtD,wBAAwB,EAAE,kCAAkC;IAC5D,sBAAsB,EAAE,8BAA8B;IACtD,uBAAuB,EAAE,6BAA6B;IACtD,sBAAsB,EAAE,6BAA6B;IACrD,uBAAuB,EAAE,8BAA8B;IACvD,mBAAmB,EAAE,gDAAgD;IACrE,yBAAyB,EAAE,8CAA8C;IACzE,4BAA4B,EAAE,uCAAuC;IACrE,2BAA2B,EAAE,wCAAwC;IACrE,gBAAgB,EAAE,4BAA4B;IAC9C,wBAAwB,EAAE,iDAAiD;IAC3E,0BAA0B,EAAE,iDAAiD;IAC7E,2BAA2B,EAAE,mEAAmE;IAChG,iCAAiC,EAAE,6DAA6D;IAChG,0BAA0B,EAAE,0CAA0C;IACtE,4BAA4B,EAAE,wCAAwC;IACtE,qBAAqB,EAAE,+BAA+B;IACtD,mBAAmB,EAAE,yBAAyB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,6BAA6B,EAAE,kCAAkC;IACjE,6BAA6B,EAAE,qDAAqD;IACpF,4BAA4B,EAAE,oCAAoC;IAClE,8BAA8B,EAAE,4CAA4C;IAC5E,0BAA0B,EAAE,wEAAwE;IACpG,6BAA6B,EAAE,2CAA2C;IAC1E,4BAA4B,EAAE,0CAA0C;IACxE,mCAAmC,EAAE,gDAAgD;IACrF,uCAAuC,EAAE,gDAAgD;IACzF,gCAAgC,EAAE,oCAAoC;IACtE,6BAA6B,EAAE,gDAAgD;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,+BAA+B,EAAE,mCAAmC;IACpE,4BAA4B,EAAE,gDAAgD;IAC9E,qCAAqC,EAAE,yCAAyC;IAChF,kCAAkC,EAAE,gDAAgD;IACpF,wBAAwB,EAAE,8CAA8C;IACxE,0BAA0B,EAAE,kDAAkD;IAC9E,2BAA2B,EAAE,4CAA4C;IACzE,wBAAwB,EAAE,yCAAyC;IACnE,6BAA6B,EAAE,kDAAkD;IACjF,2BAA2B,EAAE,6CAA6C;IAC1E,oBAAoB,EAAE,sCAAsC;IAC5D,sBAAsB,EAAE,0DAA0D;IAClF,sBAAsB,EAAE,iCAAiC;IACzD,2BAA2B,EAAE,oCAAoC;IACjE,yBAAyB,EAAE,yDAAyD;IACpF,2BAA2B,EAAE,oDAAoD;IACjF,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,mCAAmC;IAChE,4BAA4B,EAAE,qDAAqD;IACnF,6BAA6B,EAAE,0CAA0C;IACzE,iCAAiC,EAAE,oDAAoD;IACvF,iCAAiC,EAAE,6DAA6D;IAChG,yCAAyC,EAAE,8DAA8D;IACzG,+BAA+B,EAAE,mEAAmE;IACpG,oCAAoC,EAAE,qEAAqE;IAC3G,sBAAsB,EAAE,yCAAyC;IACjE,uBAAuB,EAAE,0CAA0C;IACnE,2BAA2B,EAAE,sDAAsD;IACnF,gBAAgB,EAAE,6BAA6B;IAC/C,iBAAiB,EAAE,4BAA4B;IAC/C,oBAAoB,EAAE,yCAAyC;IAC/D,sBAAsB,EAAE,0CAA0C;IAClE,iBAAiB,EAAE,oCAAoC;IACvD,2BAA2B,EAAE,oDAAoD;IACjF,4BAA4B,EAAE,0DAA0D;IACxF,6BAA6B,EAAE,0DAA0D;IACzF,+BAA+B,EAAE,2DAA2D;IAC5F,oBAAoB,EAAE,6CAA6C;IACnE,8BAA8B,EAAE,2DAA2D;IAC3F,8BAA8B,EAAE,yCAAyC;IACzE,wBAAwB,EAAE,mCAAmC;IAC7D,0BAA0B,EAAE,mDAAmD;IAC/E,oCAAoC,EAAE,gEAAgE;IACtG,oBAAoB,EAAE,kBAAkB;IACxC,oBAAoB,EAAE,uBAAuB;IAC7C,gBAAgB,EAAE,+BAA+B;IACjD,sBAAsB,EAAE,+BAA+B;IACvD,oBAAoB,EAAE,qCAAqC;IAC3D,iBAAiB,EAAE,0CAA0C;IAC7D,0BAA0B,EAAE,sDAAsD;IAClF,sBAAsB,EAAE,iDAAiD;IACzE,qBAAqB,EAAE,oDAAoD;IAC3E,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,8BAA8B;IACpD,qBAAqB,EAAE,+BAA+B;IACtD,qBAAqB,EAAE,+BAA+B;IACtD,iBAAiB,EAAE,yCAAyC;IAC5D,iBAAiB,EAAE,+CAA+C;IAClE,gBAAgB,EAAE,0CAA0C;IAC5D,gBAAgB,EAAE,0CAA0C;IAC5D,sBAAsB,EAAE,yCAAyC;IACjE,sBAAsB,EAAE,yCAAyC;IACjE,kBAAkB,EAAE,oCAAoC;IACxD,4BAA4B,EAAE,8CAA8C;IAC5E,iCAAiC,EAAE,oCAAoC;IACvE,uBAAuB,EAAE,gDAAgD;IACzE,oBAAoB,EAAE,mBAAmB;IACzC,qBAAqB,EAAE,6BAA6B;IACpD,kBAAkB,EAAE,iCAAiC;IACrD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,mBAAmB,EAAE,4CAA4C;IACjE,2BAA2B,EAAE,mDAAmD;IAChF,0BAA0B,EAAE,wGAAwG;IACpI,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,YAAY;IAC/B,oBAAoB,EAAE,mBAAmB;IACzC,4BAA4B,EAAE,4DAA4D;IAC1F,2BAA2B,EAAE,8GAA8G;IAC3I,kCAAkC,EAAE,6IAA6I;IACjL,aAAa,EAAE,mBAAmB;IAClC,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,mBAAmB;IACzC,kBAAkB,EAAE,yBAAyB;IAC7C,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,mBAAmB;IACzC,eAAe,EAAE,OAAO;IACxB,kBAAkB,EAAE,4CAA4C;IAChE,eAAe,EAAE,SAAS;IAC1B,oBAAoB,EAAE,qBAAqB;IAC3C,mBAAmB,EAAE,yBAAyB;IAC9C,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,iBAAiB;IACzC,2BAA2B,EAAE,oCAAoC;IACjE,sBAAsB,EAAE,0BAA0B;IAClD,mBAAmB,EAAE,uBAAuB;IAC5C,iBAAiB,EAAE,oBAAoB;IACvC,cAAc,EAAE,gCAAgC;IAChD,gBAAgB,EAAE,iCAAiC;IACnD,gBAAgB,EAAE,4BAA4B;IAC9C,sBAAsB,EAAE,qBAAqB;IAC7C,qBAAqB,EAAE,oCAAoC;IAC3D,aAAa,EAAE,yBAAyB;IACxC,4BAA4B,EAAE,0EAA0E;IACxG,4BAA4B,EAAE,mDAAmD;IACjF,gBAAgB,EAAE,qCAAqC;IACvD,sBAAsB,EAAE,wBAAwB;IAChD,eAAe,EAAE,aAAa;IAC9B,wBAAwB,EAAE,8CAA8C;IACxE,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,SAAS;IAChC,qBAAqB,EAAE,UAAU;IACjC,yBAAyB,EAAE,eAAe;IAC1C,qBAAqB,EAAE,mBAAmB;IAC1C,wBAAwB,EAAE,qDAAqD;IAC/E,8BAA8B,EAAE,qDAAqD;IACrF,qBAAqB,EAAE,gBAAgB;IACvC,uBAAuB,EAAE,qCAAqC;IAC9D,yBAAyB,EAAE,sBAAsB;IACjD,yBAAyB,EAAE,aAAa;IACxC,wBAAwB,EAAE,eAAe;IACzC,2BAA2B,EAAE,gCAAgC;IAC7D,yBAAyB,EAAE,mBAAmB;IAC9C,yBAAyB,EAAE,oBAAoB;IAC/C,8BAA8B,EAAE,sDAAsD;IACtF,4BAA4B,EAAE,gCAAgC;IAC9D,gCAAgC,EAAE,2CAA2C;IAC7E,wBAAwB,EAAE,SAAS;IACnC,2BAA2B,EAAE,gBAAgB;IAC7C,uBAAuB,EAAE,mBAAmB;IAC5C,0BAA0B,EAAE,WAAW;IACvC,2BAA2B,EAAE,uBAAuB;IACpD,4BAA4B,EAAE,4BAA4B;IAC1D,wBAAwB,EAAE,+BAA+B;IACzD,iCAAiC,EAAE,mDAAmD;IACtF,8BAA8B,EAAE,mBAAmB;IACnD,mBAAmB,EAAE,uBAAuB;IAC5C,eAAe,EAAE,mCAAmC;IACpD,gBAAgB,EAAE,uBAAuB;IACzC,cAAc,EAAE,SAAS;IACzB,wBAAwB,EAAE,kCAAkC;IAC5D,oBAAoB,EAAE,oCAAoC;IAC5D,yBAAyB,EAAE,mCAAmC;IAC9D,uBAAuB,EAAE,4IAA4I;IACrK,8BAA8B,EAAE,kDAAkD;IAClF,wBAAwB,EAAE,8CAA8C;IACxE,uBAAuB,EAAE,6CAA6C;IACtE,0BAA0B,EAAE,0CAA0C;IACpE,6BAA6B,EAAE,0CAA0C;IACzE,gCAAgC,EAAE,4CAA4C;IAC9E,8BAA8B,EAAE,4CAA4C;IAC5E,4BAA4B,EAAE,6CAA6C;IAC3E,uBAAuB,EAAE,iDAAiD;IAC1E,6BAA6B,EAAE,uDAAuD;IACtF,+BAA+B,EAAE,2CAA2C;IAC5E,0BAA0B,EAAE,uCAAuC;IACnE,6BAA6B,EAAE,yDAAyD;IACxF,gCAAgC,EAAE,sCAAsC;IACxE,0BAA0B,EAAE,4FAA4F;IACxH,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,+CAA+C;IAC/D,uBAAuB,EAAE,yDAAyD;IAClF,uBAAuB,EAAE,iCAAiC;IAC1D,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,sCAAsC;IAC/D,0BAA0B,EAAE,mBAAmB;IAC/C,iBAAiB,EAAE,qBAAqB;IACxC,qBAAqB,EAAE,sBAAsB;CACrC,CAAC"}

package/dist/core/index.d.ts

@@ -8,6 +8,7 @@ export * from './audit/index.js';
 export * from './script/index.js';
 export * from './limiter/index.js';
 export * from './provider/index.js';
+export * from './prompts/index.js';
 export * from './tools/index.js';
 export * from './proxy/index.js';
 export * from './trace.js';

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC"}

package/dist/core/index.js

@@ -8,6 +8,7 @@ export * from './audit/index.js';
 export * from './script/index.js';
 export * from './limiter/index.js';
 export * from './provider/index.js';
+export * from './prompts/index.js';
 export * from './tools/index.js';
 export * from './proxy/index.js';
 export * from './trace.js';

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC"}

package/dist/core/prompts/catalog.d.ts

@@ -0,0 +1,13 @@
+import type { Locale } from '../i18n/index.js';
+import type { ObjectRegistry } from '../object/registry.js';
+import type { PromptDescriptor, PromptResult } from '../provider/prompts/index.js';
+/** the built-in prompts visible to the identity (empty when it can read nothing) */
+export declare function builtinPromptDescriptors(registry: ObjectRegistry, roles: readonly string[]): PromptDescriptor[];
+/**
+ * Render a built-in prompt. Throws `prompt.args.invalid` (missing/empty arg or a
+ * non-workflow object for `run_workflow`), `data.objectUnknown` (unknown object)
+ * or `rbac.denied.read` (identity may not read the object) — mapping to a
+ * protocol error at the MCP layer.
+ */
+export declare function renderBuiltinPrompt(registry: ObjectRegistry, name: string, args: Record<string, string>, roles: readonly string[], locale: Locale): PromptResult;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/core/prompts/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/core/prompts/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,gBAAgB,EAAiB,YAAY,EAAE,MAAM,8BAA8B,CAAC;AA8BlG,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CA6B/G;AAgED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,EAAE,MAAM,GACb,YAAY,CAmCd"}

package/dist/core/prompts/catalog.js

@@ -0,0 +1,156 @@
+import { describeObject } from '../object/describe.js';
+import { resolvePermissionFor } from '../rbac/index.js';
+import { SchemaError } from '../types/errors.js';
+import { BUILTIN_PROMPTS } from './values.js';
+/**
+ * Built-in MCP prompts, derived from the schema (not authored business content),
+ * so a headless engine can still guide an agent to use its own tool surface:
+ *
+ *   explore_data           → the list_objects → describe_object → search_records flow
+ *   object_guide(object)   → one object's descriptor + which tools to use
+ *   build_filter(object)   → how to shape a search_records filter
+ *   run_workflow(object)   → the object's workflow transitions
+ *
+ * The surface is RBAC-filtered per identity (only readable objects appear), and
+ * every render re-checks the identity's permissions (list + get, like the tool
+ * surface). Instruction text is English (matching the tool descriptions); the
+ * schema payload is language-neutral JSON.
+ */
+const OBJECT_ARG_DESC = 'object name (see list_objects)';
+function text(message) {
+    return { role: 'user', content: { type: 'text', text: message } };
+}
+/** objects the identity may read (mirrors `list_objects`) */
+function readableObjects(registry, roles) {
+    return registry.list().filter((def) => resolvePermissionFor(registry, def, roles)?.read !== undefined);
+}
+/** the built-in prompts visible to the identity (empty when it can read nothing) */
+export function builtinPromptDescriptors(registry, roles) {
+    const readable = readableObjects(registry, roles);
+    if (readable.length === 0)
+        return [];
+    const prompts = [
+        {
+            name: BUILTIN_PROMPTS.EXPLORE,
+            description: 'Step-by-step guide to explore data with the built-in tools',
+        },
+        {
+            name: BUILTIN_PROMPTS.OBJECT_GUIDE,
+            description: 'Guidance for working with one object (fields, relations and your permissions)',
+            arguments: [{ name: 'object', description: OBJECT_ARG_DESC, required: true }],
+        },
+        {
+            name: BUILTIN_PROMPTS.BUILD_FILTER,
+            description: 'How to build a search_records filter for one object',
+            arguments: [{ name: 'object', description: OBJECT_ARG_DESC, required: true }],
+        },
+    ];
+    if (readable.some((def) => def.workflow !== undefined)) {
+        prompts.push({
+            name: BUILTIN_PROMPTS.RUN_WORKFLOW,
+            description: 'How to fire a workflow transition on one object',
+            arguments: [{ name: 'object', description: OBJECT_ARG_DESC, required: true }],
+        });
+    }
+    return prompts;
+}
+function requireArg(args, key, name, locale) {
+    const value = args[key];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new SchemaError('prompt.args.invalid', { name, detail: `missing required argument "${key}"` }, locale);
+    }
+    return value;
+}
+function exploreText() {
+    return [
+        'Explore the data available to you through the WeaveKit tools.',
+        '',
+        '1. Call list_objects to see the objects your identity can read.',
+        '2. Call describe_object for one to get its fields, relations and your permissions.',
+        '3. Call search_records (with a filter/sort/limit) to read rows — rows are already scoped to what you may see.',
+        '4. Use get_record for one row, and create_record / update_record / delete_record to write (only permitted fields).',
+        '',
+        'Start with list_objects and tell me what you find.',
+    ].join('\n');
+}
+function objectGuideText(descriptor, name) {
+    return [
+        `Work with the "${name}" object.`,
+        '',
+        'Metadata (schema + your permissions):',
+        JSON.stringify(descriptor, null, 2),
+        '',
+        'Guidance:',
+        `- Read rows with search_records (object="${name}"); fetch one with get_record (id = the record id).`,
+        '- Write with create_record / update_record / delete_record; only fields your role permits are accepted.',
+        '- Row scope is applied automatically; use describe_object to refresh this metadata at any time.',
+    ].join('\n');
+}
+function buildFilterText(name, fields) {
+    const lines = fields.map((f) => `- ${f.name} (${f.type})`);
+    return [
+        `Build a search_records filter for "${name}".`,
+        '',
+        'Readable fields:',
+        ...lines,
+        '',
+        'Filter shape: { "<field>": <value> } for equality, or { "<field>": { "<op>": <value> } } for an operator',
+        '(eq, ne, gt, gte, lt, lte, in, contains, like). Multiple fields are AND\u2019d; use { "$or": [ ... ] } for OR.',
+        'sort is an array of { field, direction } (asc | desc).',
+        `Call search_records with object="${name}" and your filter.`,
+    ].join('\n');
+}
+function runWorkflowText(name, workflow) {
+    return [
+        `Fire a workflow transition on "${name}".`,
+        '',
+        'Workflow (states + transitions):',
+        JSON.stringify(workflow, null, 2),
+        '',
+        `Call workflow_transition with object="${name}", id=<record id>, and action=<a transition allowed from the`,
+        'record\u2019s current state and by your role \u2014 see describe_object \u2192 workflow).',
+    ].join('\n');
+}
+/**
+ * Render a built-in prompt. Throws `prompt.args.invalid` (missing/empty arg or a
+ * non-workflow object for `run_workflow`), `data.objectUnknown` (unknown object)
+ * or `rbac.denied.read` (identity may not read the object) — mapping to a
+ * protocol error at the MCP layer.
+ */
+export function renderBuiltinPrompt(registry, name, args, roles, locale) {
+    switch (name) {
+        case BUILTIN_PROMPTS.EXPLORE:
+            return { description: 'Explore the available data', messages: [text(exploreText())] };
+        case BUILTIN_PROMPTS.OBJECT_GUIDE: {
+            const object = requireArg(args, 'object', name, locale);
+            const descriptor = describeObject(registry, object, roles, locale);
+            return {
+                description: `Work with the "${object}" object`,
+                messages: [text(objectGuideText(descriptor, object))],
+            };
+        }
+        case BUILTIN_PROMPTS.BUILD_FILTER: {
+            const object = requireArg(args, 'object', name, locale);
+            const descriptor = describeObject(registry, object, roles, locale);
+            const fields = descriptor.fields.filter((f) => f.virtual !== true).map((f) => ({ name: f.name, type: f.type }));
+            return {
+                description: `Build a search_records filter for "${object}"`,
+                messages: [text(buildFilterText(object, fields))],
+            };
+        }
+        case BUILTIN_PROMPTS.RUN_WORKFLOW: {
+            const object = requireArg(args, 'object', name, locale);
+            const descriptor = describeObject(registry, object, roles, locale);
+            if (descriptor.workflow === undefined) {
+                throw new SchemaError('prompt.args.invalid', { name, detail: `object "${object}" has no workflow` }, locale);
+            }
+            return {
+                description: `Fire a workflow transition on "${object}"`,
+                messages: [text(runWorkflowText(object, descriptor.workflow))],
+            };
+        }
+        default:
+            throw new SchemaError('prompt.notFound', { name }, locale);
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/core/prompts/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/core/prompts/catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AAEH,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,6DAA6D;AAC7D,SAAS,eAAe,CAAC,QAAwB,EAAE,KAAwB;IACzE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC;AACzG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,QAAwB,EAAE,KAAwB;IACzF,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,OAAO,GAAuB;QAClC;YACE,IAAI,EAAE,eAAe,CAAC,OAAO;YAC7B,WAAW,EAAE,4DAA4D;SAC1E;QACD;YACE,IAAI,EAAE,eAAe,CAAC,YAAY;YAClC,WAAW,EAAE,+EAA+E;YAC5F,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC9E;QACD;YACE,IAAI,EAAE,eAAe,CAAC,YAAY;YAClC,WAAW,EAAE,qDAAqD;YAClE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC9E;KACF,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,eAAe,CAAC,YAAY;YAClC,WAAW,EAAE,iDAAiD;YAC9D,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,IAA4B,EAAE,GAAW,EAAE,IAAY,EAAE,MAAc;IACzF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,+DAA+D;QAC/D,EAAE;QACF,iEAAiE;QACjE,oFAAoF;QACpF,+GAA+G;QAC/G,oHAAoH;QACpH,EAAE;QACF,oDAAoD;KACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,IAAY;IACvD,OAAO;QACL,kBAAkB,IAAI,WAAW;QACjC,EAAE;QACF,uCAAuC;QACvC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,EAAE;QACF,WAAW;QACX,4CAA4C,IAAI,qDAAqD;QACrG,yGAAyG;QACzG,iGAAiG;KAClG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,MAA6C;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3D,OAAO;QACL,sCAAsC,IAAI,IAAI;QAC9C,EAAE;QACF,kBAAkB;QAClB,GAAG,KAAK;QACR,EAAE;QACF,0GAA0G;QAC1G,gHAAgH;QAChH,wDAAwD;QACxD,oCAAoC,IAAI,oBAAoB;KAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACrD,OAAO;QACL,kCAAkC,IAAI,IAAI;QAC1C,EAAE;QACF,kCAAkC;QAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,EAAE;QACF,yCAAyC,IAAI,8DAA8D;QAC3G,2FAA2F;KAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,IAAY,EACZ,IAA4B,EAC5B,KAAwB,EACxB,MAAc;IAEd,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe,CAAC,OAAO;YAC1B,OAAO,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QACxF,KAAK,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO;gBACL,WAAW,EAAE,kBAAkB,MAAM,UAAU;gBAC/C,QAAQ,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;aACtD,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChH,OAAO;gBACL,WAAW,EAAE,sCAAsC,MAAM,GAAG;gBAC5D,QAAQ,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,MAAM,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,kCAAkC,MAAM,GAAG;gBACxD,QAAQ,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;aAC/D,CAAC;QACJ,CAAC;QACD;YACE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/core/prompts/index.d.ts

@@ -0,0 +1,3 @@
+export * from './values.js';
+export * from './catalog.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/prompts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/prompts/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/core/prompts/index.js

@@ -0,0 +1,3 @@
+export * from './values.js';
+export * from './catalog.js';
+//# sourceMappingURL=index.js.map

package/dist/core/prompts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/prompts/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/core/prompts/values.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Built-in prompt names — single source of truth (`as const`, see AGENTS.md).
+ *
+ * The engine's built-in prompts are **schema-derived and identity-filtered**
+ * (see `catalog.ts`); they teach an agent to use the engine's own tool surface.
+ * A host provider must not reuse these names (`isBuiltinPromptName`).
+ */
+export declare const BUILTIN_PROMPTS: {
+    /** meta guide: list_objects → describe_object → search_records */
+    readonly EXPLORE: "explore_data";
+    /** embed one object's descriptor + tool guidance */
+    readonly OBJECT_GUIDE: "object_guide";
+    /** how to build a `search_records` filter for one object */
+    readonly BUILD_FILTER: "build_filter";
+    /** how to fire a workflow transition on one object */
+    readonly RUN_WORKFLOW: "run_workflow";
+};
+export type BuiltinPrompt = typeof BUILTIN_PROMPTS[keyof typeof BUILTIN_PROMPTS];
+/** true when a name is a reserved built-in prompt (a provider may not override it) */
+export declare function isBuiltinPromptName(name: string): boolean;
+//# sourceMappingURL=values.d.ts.map

package/dist/core/prompts/values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../../../src/core/prompts/values.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;IAC1B,kEAAkE;;IAElE,oDAAoD;;IAEpD,4DAA4D;;IAE5D,sDAAsD;;CAE9C,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAIjF,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD"}

package/dist/core/prompts/values.js

@@ -0,0 +1,23 @@
+/**
+ * Built-in prompt names — single source of truth (`as const`, see AGENTS.md).
+ *
+ * The engine's built-in prompts are **schema-derived and identity-filtered**
+ * (see `catalog.ts`); they teach an agent to use the engine's own tool surface.
+ * A host provider must not reuse these names (`isBuiltinPromptName`).
+ */
+export const BUILTIN_PROMPTS = {
+    /** meta guide: list_objects → describe_object → search_records */
+    EXPLORE: 'explore_data',
+    /** embed one object's descriptor + tool guidance */
+    OBJECT_GUIDE: 'object_guide',
+    /** how to build a `search_records` filter for one object */
+    BUILD_FILTER: 'build_filter',
+    /** how to fire a workflow transition on one object */
+    RUN_WORKFLOW: 'run_workflow',
+};
+const builtinNames = Object.values(BUILTIN_PROMPTS);
+/** true when a name is a reserved built-in prompt (a provider may not override it) */
+export function isBuiltinPromptName(name) {
+    return builtinNames.includes(name);
+}
+//# sourceMappingURL=values.js.map

package/dist/core/prompts/values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.js","sourceRoot":"","sources":["../../../src/core/prompts/values.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,kEAAkE;IAClE,OAAO,EAAE,cAAc;IACvB,oDAAoD;IACpD,YAAY,EAAE,cAAc;IAC5B,4DAA4D;IAC5D,YAAY,EAAE,cAAc;IAC5B,sDAAsD;IACtD,YAAY,EAAE,cAAc;CACpB,CAAC;AAGX,MAAM,YAAY,GAAsB,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvE,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/core/provider/index.d.ts

@@ -2,4 +2,5 @@ export * from './alerts/index.js';
 export * from './identity/index.js';
 export * from './event/index.js';
 export * from './capabilities/index.js';
+export * from './prompts/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/provider/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/provider/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/provider/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC"}

package/dist/core/provider/index.js

@@ -2,4 +2,5 @@ export * from './alerts/index.js';
 export * from './identity/index.js';
 export * from './event/index.js';
 export * from './capabilities/index.js';
+export * from './prompts/index.js';
 //# sourceMappingURL=index.js.map

package/dist/core/provider/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/provider/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/provider/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC"}

package/dist/core/provider/prompts/index.d.ts

@@ -0,0 +1,3 @@
+export type { PromptArgument, PromptRole, PromptMessage, PromptDescriptor, PromptResult, PromptSubject, PromptsProvider, } from './types.js';
+export { PROMPTS_API } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provider/prompts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provider/prompts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/provider/prompts/index.js

@@ -0,0 +1,2 @@
+export { PROMPTS_API } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/core/provider/prompts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/provider/prompts/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/provider/prompts/types.d.ts

@@ -0,0 +1,58 @@
+/**
+ * MCP prompts seam.
+ *
+ * MCP exposes three primitives: **tools** (the model calls), **resources** (the
+ * app/user attaches context) and **prompts** (the *user* triggers a template
+ * that expands into a set of messages). Prompts are inherently user-facing and
+ * often business-flavored, so the engine does not author them: it ships a small
+ * set of **schema-derived** built-in prompts (see `core/prompts`) and lets a host
+ * inject its own via this provider seam.
+ *
+ * The engine treats provider content as opaque (it only keeps the shape) — a
+ * console/enterprise/plugin supplies the business templates. With no provider
+ * configured only the built-in prompts are exposed.
+ */
+/** one argument a prompt accepts (MCP arguments are always strings) */
+export interface PromptArgument {
+    name: string;
+    description?: string;
+    required?: boolean;
+}
+/** the roles a prompt message may carry (mirrors the MCP protocol) */
+export type PromptRole = 'user' | 'assistant';
+/** one message a prompt expands to */
+export interface PromptMessage {
+    role: PromptRole;
+    content: {
+        type: 'text';
+        text: string;
+    };
+}
+/** a prompt as advertised by `prompts/list` */
+export interface PromptDescriptor {
+    name: string;
+    description?: string;
+    arguments?: PromptArgument[];
+}
+/** the expansion of a prompt, returned by `prompts/get` */
+export interface PromptResult {
+    description?: string;
+    messages: PromptMessage[];
+}
+/** the identity context a provider filters by (never a secret) */
+export interface PromptSubject {
+    subjectId: string;
+    roles: string[];
+}
+/**
+ * A host-injected prompt provider. `list` returns the descriptors visible to
+ * the subject; `get` expands one (return `null` for an unknown name so the
+ * engine can answer `prompt.notFound`). Both may be async.
+ */
+export interface PromptsProvider {
+    list(ctx: PromptSubject): PromptDescriptor[] | Promise<PromptDescriptor[]>;
+    get(name: string, args: Record<string, string>, ctx: PromptSubject): PromptResult | null | Promise<PromptResult | null>;
+}
+/** contract version for `PromptsProvider` implementers (stable seam) */
+export declare const PROMPTS_API = 1;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provider/prompts/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/provider/prompts/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;AAE9C,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;CAC9B;AAED,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACzH;AAED,wEAAwE;AACxE,eAAO,MAAM,WAAW,IAAI,CAAC"}

package/dist/core/provider/prompts/types.js

@@ -0,0 +1,17 @@
+/**
+ * MCP prompts seam.
+ *
+ * MCP exposes three primitives: **tools** (the model calls), **resources** (the
+ * app/user attaches context) and **prompts** (the *user* triggers a template
+ * that expands into a set of messages). Prompts are inherently user-facing and
+ * often business-flavored, so the engine does not author them: it ships a small
+ * set of **schema-derived** built-in prompts (see `core/prompts`) and lets a host
+ * inject its own via this provider seam.
+ *
+ * The engine treats provider content as opaque (it only keeps the shape) — a
+ * console/enterprise/plugin supplies the business templates. With no provider
+ * configured only the built-in prompts are exposed.
+ */
+/** contract version for `PromptsProvider` implementers (stable seam) */
+export const PROMPTS_API = 1;
+//# sourceMappingURL=types.js.map

package/dist/core/provider/prompts/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/provider/prompts/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA+CH,wEAAwE;AACxE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC"}

package/dist/core/rbac/index.d.ts

@@ -7,5 +7,5 @@ export { buildRowScope } from './rowScope.js';
 export { resolvePermissionFor, buildRowScopeFor, type ObjectLookup } from './details.js';
 export { scopeFieldName, scopeMarkerOf } from './scopeMarker.js';
 export { excludedFields } from './fields.js';
-export { buildRlsPolicy, buildRlsPolicyDdl, buildRlsGrantDdl, policyName, isSafeRlsRole } from './rls.js';
+export { buildRlsPolicy, buildRlsPolicyDdl, buildRlsGrantDdl, policyName, isSafeRlsRole, rlsPolicyComment, buildObjectRlsPolicies, OBJECT_RLS_POLICIES, OBJECT_RLS_ROLE_DEFAULT, type ObjectRlsPolicy, } from './rls.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/rbac/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/rbac/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/rbac/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC"}

package/dist/core/rbac/index.js

@@ -4,5 +4,5 @@ export { buildRowScope } from './rowScope.js';
 export { resolvePermissionFor, buildRowScopeFor } from './details.js';
 export { scopeFieldName, scopeMarkerOf } from './scopeMarker.js';
 export { excludedFields } from './fields.js';
-export { buildRlsPolicy, buildRlsPolicyDdl, buildRlsGrantDdl, policyName, isSafeRlsRole } from './rls.js';
+export { buildRlsPolicy, buildRlsPolicyDdl, buildRlsGrantDdl, policyName, isSafeRlsRole, rlsPolicyComment, buildObjectRlsPolicies, OBJECT_RLS_POLICIES, OBJECT_RLS_ROLE_DEFAULT, } from './rls.js';
 //# sourceMappingURL=index.js.map

package/dist/core/rbac/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/rbac/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAqB,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/rbac/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAqB,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,UAAU,CAAC"}

package/dist/core/rbac/rls.d.ts

@@ -1,4 +1,5 @@
 import type { ObjectDefinition } from '../types/index.js';
+import { type ObjectLookup } from './details.js';
 export declare function policyName(def: ObjectDefinition): string;
 /**
  * The read-policy predicate for one object, or `undefined` when no declared role
@@ -11,6 +12,39 @@ export declare function buildRlsPolicy(def: ObjectDefinition): string | undefine
 export declare function buildRlsPolicyDdl(def: ObjectDefinition): string[];
 /** GRANT the restricted-SQL role read access to one object */
 export declare function buildRlsGrantDdl(def: ObjectDefinition, role: string): string;
+/**
+ * Marker stored as the policy COMMENT: a digest of the policy definition, so
+ * `migrate` detects a changed predicate (permission matrix edit), not just a
+ * missing policy name.
+ */
+export declare function rlsPolicyComment(definition: string): string;
+/**
+ * Object-path RLS (`EngineConfig.rls.enforce`): the engine's own data access
+ * runs customer-table reads/updates/deletes under this role, so PostgreSQL
+ * re-checks the RBAC row scope (defense in depth). Engine-internal — it never
+ * executes user-supplied SQL (that is the restricted-SQL role's job).
+ */
+export declare const OBJECT_RLS_ROLE_DEFAULT = "weavekit_object";
+/** per-table object-path policy names (scoped `TO <object role>`) */
+export declare const OBJECT_RLS_POLICIES: {
+    readonly SELECT: "weavekit_obj_select";
+    readonly UPDATE: "weavekit_obj_update";
+    readonly DELETE: "weavekit_obj_delete";
+};
+export interface ObjectRlsPolicy {
+    name: (typeof OBJECT_RLS_POLICIES)[keyof typeof OBJECT_RLS_POLICIES];
+    command: 'SELECT' | 'UPDATE' | 'DELETE';
+    using: string;
+    check?: string;
+}
+/**
+ * Object-path policies for one object. SELECT covers read ∪ manage (PostgreSQL
+ * also applies the SELECT policy to the rows an UPDATE/DELETE reads); UPDATE /
+ * DELETE use the manage scope. UPDATE's WITH CHECK only bounds the scope
+ * column (the application keeps it immutable). INSERT is not policed here: the
+ * engine inserts as the owner and stamps the scope column itself.
+ */
+export declare function buildObjectRlsPolicies(lookup: ObjectLookup, def: ObjectDefinition): ObjectRlsPolicy[];
 /**
  * True when `role` is a safe, non-reserved identifier for `SET LOCAL ROLE` /
  * `CREATE ROLE`. The name is always emitted quoted (`sqlIdent`), so this guards

package/dist/core/rbac/rls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rls.d.ts","sourceRoot":"","sources":["../../../src/core/rbac/rls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAkC1D,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAExD;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAWxE;AA4BD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAQjE;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAkCD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnD"}
+{"version":3,"file":"rls.d.ts","sourceRoot":"","sources":["../../../src/core/rbac/rls.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,mBAAmB,CAAC;AAKrE,OAAO,EAA0C,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AA+BzF,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAExD;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAWxE;AA4BD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAQjE;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAEzD,qEAAqE;AACrE,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;IACrE,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA6ED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,gBAAgB,GAAG,eAAe,EAAE,CAYrG;AAkCD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnD"}