flowbase-cli 0.1.12__py3-none-any.whl

flowbase_cli/endpoints.py

@@ -0,0 +1,1364 @@
+"""CLI endpoint catalog, contract-tested against the server OpenAPI schema."""
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+
+@dataclass(frozen=True)
+class Endpoint:
+    key: str
+    operation_id: str
+    method: str
+    path: str
+    scope: str
+    summary: str
+    example: str
+    requires_confirmation: bool = False
+    environments: tuple[str, ...] = ("production", "test-a", "test-b")
+    preflight_operation_id: str | None = None
+    audit_event: str | None = None
+    # Representative request JSON for the CLI --json/--json-file body, if any.
+    request_body: str | None = None
+
+
+ENDPOINTS = (
+    Endpoint("pages.evaluate", "flowbase_pages_evaluate", "POST", "/pages/{page_id}/evaluate", "metadata:read", "Evaluate draft page rule effects on sample field-key values; no writes or visual rendering.", "flowbase pages evaluate pag_xxx --json-file values.json", request_body='{"values":{"done":true}}'),
+    Endpoint("dashboards.run", "flowbase_dashboards_run", "POST", "/dashboards/{dashboard_id}/components/{component_id}/run", "metadata:read", "Run a saved draft component; also requires records:read. Inspect ok/output/error, not visual rendering.", "flowbase dashboards run dsh_xxx dcm_xxx --json-file filters.json", request_body='{"filterValues":{}}'),
+    Endpoint("organization.employees", "flowbase_organization_employees", "GET", "/organization/employees", "metadata:read", "Paginated employee IDs/names; follow pages with --page, optionally --query.", "flowbase organization employees --page 1"),
+    Endpoint("organization.departments", "flowbase_organization_departments", "GET", "/organization/departments", "metadata:read", "Department IDs/names/parentId.", "flowbase organization departments"),
+    Endpoint("apps.list", "flowbase_apps_list", "GET", "/apps", "metadata:read", "List apps.", "flowbase apps list"),
+    Endpoint("apps.get", "flowbase_apps_get", "GET", "/apps/{app_id}", "metadata:read", "Get app metadata with groups and objects.", "flowbase apps get app_xxx"),
+    Endpoint("apps.create", "flowbase_apps_create", "POST", "/apps", "metadata:write", "Create an app draft.", "flowbase apps create --json-file app.json",
+             request_body='{"label":"CRM","key":"crm","icon":"IconApps","color":"#2563EB"}'),
+    Endpoint("apps.update", "flowbase_apps_update", "PUT", "/apps/{app_id}", "metadata:write", "Update app appearance; label, icon and color are required together (read apps.get first).", "flowbase apps update app_xxx --label CRM --icon IconApps --color '#2563EB'",
+             request_body='{"label":"CRM","icon":"IconApps","color":"#2563EB"}'),
+    Endpoint("apps.set-enabled", "flowbase_apps_set_enabled", "POST", "/apps/{app_id}/enabled", "metadata:write", "Enable or disable an app.", "flowbase apps set-enabled app_xxx --enabled --yes", True,
+             request_body='{"enabled":true}'),
+    Endpoint("apps.delete", "flowbase_apps_delete", "DELETE", "/apps/{app_id}", "metadata:write", "Delete an app (unlinks objects).", "flowbase apps delete app_xxx --yes", True),
+    Endpoint(
+        "apps.groups.create",
+        "flowbase_apps_groups_create",
+        "POST",
+        "/apps/{app_id}/groups",
+        "metadata:write",
+        "Create an app group draft.",
+        "flowbase groups create app_xxx --name Sales --icon IconFolder",
+        request_body='{"name":"Sales","icon":"IconFolder"}',
+    ),
+    Endpoint(
+        "apps.groups.reorder",
+        "flowbase_apps_groups_reorder",
+        "PUT",
+        "/apps/{app_id}/groups/order",
+        "metadata:write",
+        "Reorder app groups.",
+        "flowbase groups reorder app_xxx --json '{\"groupIds\":[\"grp_a\",\"grp_b\"]}'",
+        request_body='{"groupIds":["grp_a","grp_b"]}',
+    ),
+    Endpoint(
+        "apps.groups.update",
+        "flowbase_apps_groups_update",
+        "PUT",
+        "/apps/{app_id}/groups/{group_id}",
+        "metadata:write",
+        "Update an app group draft.",
+        "flowbase groups update app_xxx grp_xxx --name Sales",
+        request_body='{"name":"Sales","icon":"IconFolder"}',
+    ),
+    Endpoint(
+        "apps.groups.delete",
+        "flowbase_apps_groups_delete",
+        "DELETE",
+        "/apps/{app_id}/groups/{group_id}",
+        "metadata:write",
+        "Delete an app group (objects become ungrouped).",
+        "flowbase groups delete app_xxx grp_xxx --yes",
+        True,
+    ),
+    Endpoint(
+        "apps.objects.add",
+        "flowbase_apps_objects_add",
+        "POST",
+        "/apps/{app_id}/objects",
+        "metadata:write",
+        "Add objects to an app (association only).",
+        "flowbase apps add-objects app_xxx --object-ids obj_a,obj_b",
+        request_body='{"objectIds":["obj_a","obj_b"]}',
+    ),
+    Endpoint(
+        "apps.objects.reorder",
+        "flowbase_apps_objects_reorder",
+        "PUT",
+        "/apps/{app_id}/objects/order",
+        "metadata:write",
+        "Reorder app-linked objects.",
+        "flowbase apps reorder-objects app_xxx --json '{\"objectIds\":[\"obj_a\",\"obj_b\"]}'",
+        request_body='{"objectIds":["obj_a","obj_b"]}',
+    ),
+    Endpoint(
+        "apps.objects.remove",
+        "flowbase_apps_objects_remove",
+        "DELETE",
+        "/apps/{app_id}/objects/{object_id}",
+        "metadata:write",
+        "Remove an object association from an app.",
+        "flowbase apps remove-object app_xxx obj_xxx --yes",
+        True,
+    ),
+    Endpoint(
+        "apps.objects.set-group",
+        "flowbase_apps_objects_set_group",
+        "POST",
+        "/apps/{app_id}/objects/{object_id}/group",
+        "metadata:write",
+        "Move an app-linked object into a group or ungroup it.",
+        "flowbase apps set-group app_xxx obj_xxx --group-id grp_xxx",
+        request_body='{"groupId":"grp_xxx"}',
+    ),
+    Endpoint(
+        "apps.dashboards.add",
+        "flowbase_apps_dashboards_add",
+        "POST",
+        "/apps/{app_id}/dashboards",
+        "metadata:write",
+        "Add dashboards to an app (association only).",
+        "flowbase apps add-dashboards app_xxx dsh_xxx",
+        request_body='{"dashboardIds":["dsh_xxx"]}',
+    ),
+    Endpoint(
+        "apps.dashboards.remove",
+        "flowbase_apps_dashboards_remove",
+        "DELETE",
+        "/apps/{app_id}/dashboards/{dashboard_id}",
+        "metadata:write",
+        "Remove a dashboard association from an app.",
+        "flowbase apps remove-dashboard app_xxx dsh_xxx --yes",
+        True,
+    ),
+    Endpoint(
+        "apps.dashboards.set-group",
+        "flowbase_apps_dashboards_set_group",
+        "POST",
+        "/apps/{app_id}/dashboards/{dashboard_id}/group",
+        "metadata:write",
+        "Move an app-linked dashboard into a group or ungroup it.",
+        "flowbase apps set-dashboard-group app_xxx dsh_xxx --group-id grp_xxx",
+        request_body='{"groupId":"grp_xxx"}',
+    ),
+    Endpoint(
+        "apps.members.reorder",
+        "flowbase_apps_members_reorder",
+        "PUT",
+        "/apps/{app_id}/members/order",
+        "metadata:write",
+        "Reorder app content members (objects and dashboards mixed).",
+        "flowbase apps reorder-members app_xxx --json '{\"items\":[{\"type\":\"object\",\"id\":\"obj_xxx\"}]}'",
+        request_body='{"items":[{"type":"object","id":"obj_xxx"},{"type":"dashboard","id":"dsh_xxx"}]}',
+    ),
+    Endpoint("dashboards.list", "flowbase_dashboards_list", "GET", "/dashboards", "metadata:read", "List dashboards.", "flowbase dashboards list"),
+    Endpoint("dashboards.get", "flowbase_dashboards_get", "GET", "/dashboards/{dashboard_id}", "metadata:read", "Get a dashboard definition.", "flowbase dashboards get dsh_xxx"),
+    Endpoint("dashboards.create", "flowbase_dashboards_create", "POST", "/dashboards", "metadata:write", "Create a dashboard draft.", "flowbase dashboards create --json-file dashboard.json",
+             request_body='{"label":"Sales board","key":"sales_board","icon":"IconChartPie","description":"Weekly sales overview"}'),
+    Endpoint("dashboards.update", "flowbase_dashboards_update", "PUT", "/dashboards/{dashboard_id}", "metadata:write", "Update a dashboard draft (full snapshot).", "flowbase dashboards update dsh_xxx --json-file dashboard.json",
+             request_body=(
+                 '{"label":"Sales board","description":"...","icon":"IconChartPie","baseRevision":3,'
+                 '"filters":[{"key":"period","name":"Period","type":"date_range",'
+                 '"bindings":[{"objectId":"obj_xxx","fieldId":"fld_xxx"}],"default":{"preset":"last_30_days"}}],'
+                 '"components":[{"title":"New deals","layout":{"x":0,"y":0,"w":6,"h":8},'
+                 '"code":"import flowbase\\n\\ndef run():\\n    return {\\"type\\":\\"metric\\",\\"value\\":1}\\n"}]}'
+             )),
+    Endpoint("dashboards.copy", "flowbase_dashboards_copy", "POST", "/dashboards/{dashboard_id}/copy", "metadata:write", "Copy a dashboard (not added to any app).", "flowbase dashboards copy dsh_xxx"),
+    Endpoint("dashboards.delete", "flowbase_dashboards_delete", "POST", "/dashboards/{dashboard_id}/delete", "metadata:write", "Logically delete a dashboard (also removed from all apps).", "flowbase dashboards delete dsh_xxx --yes", True),
+    Endpoint("objects.list", "flowbase_objects_list", "GET", "/objects", "metadata:read", "List object metadata.", "flowbase objects list"),
+    Endpoint("objects.get", "flowbase_objects_get", "GET", "/objects/{object_id}", "metadata:read", "Get object and field metadata.", "flowbase objects get obj_xxx"),
+    Endpoint("objects.create", "flowbase_objects_create", "POST", "/objects", "metadata:write", "Create an object draft.", "flowbase objects create --json-file object.json",
+             request_body='{"label":"Customer","key":"customer","description":"Customer records"}'),
+    Endpoint("objects.update", "flowbase_objects_update", "PUT", "/objects/{object_id}", "metadata:write", "Update an object draft.", "flowbase objects update obj_xxx --label Customer --description 'Customer records'",
+             request_body='{"label":"Customer","description":"Customer records","icon":"IconDatabase"}'),
+    Endpoint("objects.delete", "flowbase_objects_delete", "DELETE", "/objects/{object_id}", "metadata:write", "Logically delete an object.", "flowbase objects delete obj_xxx --yes", True),
+    Endpoint("objects.restore", "flowbase_objects_restore", "POST", "/objects/{object_id}/restore", "metadata:write", "Restore an object.", "flowbase objects restore obj_xxx --yes", True),
+    Endpoint(
+        "objects.cli-edit-policy.get",
+        "flowbase_objects_cli_edit_policy_get",
+        "GET",
+        "/objects/{object_id}/cli-edit-policy",
+        "metadata:read",
+        "Get object CLI field edit policies.",
+        "flowbase objects cli-edit-policy get obj_xxx",
+    ),
+    Endpoint(
+        "objects.cli-edit-policy.update",
+        "flowbase_objects_cli_edit_policy_update",
+        "PUT",
+        "/objects/{object_id}/cli-edit-policy",
+        "metadata:write",
+        "Update object CLI field edit policies as a complete draft snapshot.",
+        "flowbase objects cli-edit-policy update obj_xxx --json-file cli-policy.json --yes",
+        requires_confirmation=True,
+        request_body=(
+            '{"baseRevision":4,"policies":{'
+            '"fld_confirm":"user_approval","fld_direct":"direct"}}'
+        ),
+    ),
+    Endpoint("fields.create", "flowbase_fields_create", "POST", "/objects/{object_id}/fields", "metadata:write", "Create a field draft.", "flowbase fields create obj_xxx --json-file field.json",
+             request_body=(
+                 '{"label":"Stage","key":"stage","description":"Pipeline stage","type":"select.single","typeVersion":"v1",'
+                 '"permission":"optional","constraints":{"options":['
+                 '{"id":"tmp_won","label":"Won","lifecycle":{"status":"active"}},'
+                 '{"id":"tmp_lost","label":"Lost","lifecycle":{"status":"active"}}'
+                 ']}}'
+             )),
+    Endpoint("fields.update", "flowbase_fields_update", "PUT", "/objects/{object_id}/fields/{field_id}", "metadata:write", "Update a field draft. constraints is a full replace — start from objects.get.",
+             "flowbase fields update obj_xxx fld_xxx --json-file field.json",
+             request_body=(
+                 '{"label":"Stage","description":"Pipeline stage","permission":"hidden",'
+                 '"constraints":{"options":['
+                 '{"id":"opt_won","label":"Won","lifecycle":{"status":"active"}}'
+                 ']}}'
+             )),
+    Endpoint("fields.delete", "flowbase_fields_delete", "DELETE", "/objects/{object_id}/fields/{field_id}", "metadata:write", "Logically delete a field.", "flowbase fields delete obj_xxx fld_xxx --yes", True),
+    Endpoint("fields.restore", "flowbase_fields_restore", "POST", "/objects/{object_id}/fields/{field_id}/restore", "metadata:write", "Restore a field.", "flowbase fields restore obj_xxx fld_xxx --yes", True),
+    Endpoint("views.list", "flowbase_views_list", "GET", "/objects/{object_id}/views", "metadata:read", "List object view metadata.", "flowbase views list obj_xxx"),
+    Endpoint("views.create", "flowbase_views_create", "POST", "/objects/{object_id}/views", "metadata:write", "Create an object view draft.", "flowbase views create obj_xxx --json-file view.json",
+             request_body=(
+                 '{"baseRevision":3,"name":"Active","enabled":true,"match":"all",'
+                 '"filters":['
+                 '{"fieldId":"fld_status","operator":"eq","value":"opt_xxx"},'
+                 '{"fieldId":"fld_done","operator":"is_true"}'
+                 '],"defaultFieldIds":["fld_a","fld_b"],"groupFieldId":null}'
+             )),
+    Endpoint("views.update", "flowbase_views_update", "PUT", "/objects/{object_id}/views/{view_id}", "metadata:write", "Update an object view draft.", "flowbase views update obj_xxx viw_xxx --json-file view.json",
+             request_body=(
+                 '{"baseRevision":4,"name":"Active","enabled":true,"match":"all",'
+                 '"filters":['
+                 '{"fieldId":"fld_status","operator":"eq","value":"opt_xxx"},'
+                 '{"fieldId":"fld_done","operator":"is_true"}'
+                 '],"defaultFieldIds":["fld_a","fld_b"],"groupFieldId":null}'
+             )),
+    Endpoint("views.reorder", "flowbase_views_reorder", "PUT", "/objects/{object_id}/views/order", "metadata:write", "Reorder object views.", "flowbase views reorder obj_xxx --json '{\"baseRevision\":4,\"viewIds\":[\"viw_xxx\"]}'",
+             request_body='{"baseRevision":4,"viewIds":["viw_a","viw_b"]}'),
+    Endpoint("views.set-enabled", "flowbase_views_set_enabled", "POST", "/objects/{object_id}/views/{view_id}/enabled", "metadata:write", "Enable or disable an object view.", "flowbase views set-enabled obj_xxx viw_xxx --base-revision 4 --enabled --yes", True,
+             request_body='{"baseRevision":4,"enabled":true}'),
+    Endpoint("views.delete", "flowbase_views_delete", "DELETE", "/objects/{object_id}/views/{view_id}", "metadata:write", "Logically delete an object view.", "flowbase views delete obj_xxx viw_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("workflows.list", "flowbase_workflows_list", "GET", "/objects/{object_id}/workflows", "metadata:read", "List object workflows.", "flowbase workflows list obj_xxx"),
+    Endpoint("workflows.get", "flowbase_workflows_get", "GET", "/objects/{object_id}/workflows/{workflow_id}", "metadata:read", "Get a workflow graph.", "flowbase workflows get obj_xxx wfl_xxx"),
+    Endpoint("workflows.create", "flowbase_workflows_create", "POST", "/objects/{object_id}/workflows", "metadata:write", "Create a workflow draft.", "flowbase workflows create obj_xxx --json-file workflow.json",
+             request_body=(
+                 '{"baseRevision":3,"label":"Refresh related customer","enabled":true,'
+                 '"trigger":{"event":"update","match":"all","conditions":['
+                 '{"fieldId":"fld_tier","relationFieldId":"fld_customer",'
+                 '"operator":"eq","value":"vip"}]},'
+                 '"nodes":[{"id":"wfn_trigger","type":"trigger"},'
+                 '{"id":"wfn_update","type":"updateRelated","label":"Refresh customer",'
+                 '"relationFieldId":"fld_customer","assignments":['
+                 '{"fieldId":"fld_priority","action":"set","valueRef":"fld_tier",'
+                 '"valueRefRelationFieldId":"fld_customer"}]},'
+                 '{"id":"wfn_end","type":"end"}],'
+                 '"edges":[{"source":"wfn_trigger","target":"wfn_update"},'
+                 '{"source":"wfn_update","target":"wfn_end"}]}'
+             )),
+    Endpoint("workflows.update", "flowbase_workflows_update", "PUT", "/objects/{object_id}/workflows/{workflow_id}", "metadata:write", "Update a workflow graph.", "flowbase workflows update obj_xxx wfl_xxx --json-file workflow.json",
+             request_body=(
+                 '{"baseRevision":4,"label":"Refresh related customer","enabled":true,'
+                 '"trigger":{"event":"update","match":"all","conditions":['
+                 '{"fieldId":"fld_tier","relationFieldId":"fld_customer",'
+                 '"operator":"eq","value":"vip"}]},'
+                 '"nodes":[{"id":"wfn_trigger","type":"trigger"},'
+                 '{"id":"wfn_update","type":"updateRelated","label":"Refresh customer",'
+                 '"relationFieldId":"fld_customer","assignments":['
+                 '{"fieldId":"fld_priority","action":"set","valueRef":"fld_tier",'
+                 '"valueRefRelationFieldId":"fld_customer"}]},'
+                 '{"id":"wfn_end","type":"end"}],'
+                 '"edges":[{"source":"wfn_trigger","target":"wfn_update"},'
+                 '{"source":"wfn_update","target":"wfn_end"}]}'
+             )),
+    Endpoint("workflows.reorder", "flowbase_workflows_reorder", "PUT", "/objects/{object_id}/workflows/order", "metadata:write", "Reorder object workflows.", "flowbase workflows reorder obj_xxx --json '{\"baseRevision\":4,\"workflowIds\":[\"wfl_a\",\"wfl_b\"]}'",
+             request_body='{"baseRevision":4,"workflowIds":["wfl_a","wfl_b"]}'),
+    Endpoint("workflows.set-enabled", "flowbase_workflows_set_enabled", "POST", "/objects/{object_id}/workflows/{workflow_id}/enabled", "metadata:write", "Enable or disable a workflow.", "flowbase workflows set-enabled obj_xxx wfl_xxx --base-revision 4 --enabled --yes", True,
+             request_body='{"baseRevision":4,"enabled":true}'),
+    Endpoint("workflows.delete", "flowbase_workflows_delete", "POST", "/objects/{object_id}/workflows/{workflow_id}/delete", "metadata:write", "Logically delete a workflow.", "flowbase workflows delete obj_xxx wfl_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("workflows.executions", "flowbase_workflows_executions", "GET", "/objects/{object_id}/workflows/{workflow_id}/executions", "metadata:read", "List workflow execution records.", "flowbase workflows executions obj_xxx wfl_xxx --result failure"),
+    Endpoint("approvals.list", "flowbase_approvals_list", "GET", "/objects/{object_id}/approvals", "metadata:read", "List object approval flows.", "flowbase approvals list obj_xxx"),
+    Endpoint("approvals.get", "flowbase_approvals_get", "GET", "/objects/{object_id}/approvals/{approval_id}", "metadata:read", "Get an approval flow graph.", "flowbase approvals get obj_xxx apr_xxx"),
+    Endpoint("approvals.create", "flowbase_approvals_create", "POST", "/objects/{object_id}/approvals", "metadata:write", "Create an approval flow draft.", "flowbase approvals create obj_xxx --json-file approval.json",
+             request_body=(
+                 '{"baseRevision":3,"label":"Contract approval","enabled":true,'
+                 '"trigger":{"manual":true,"create":false,"update":false,"match":"all","conditions":[]},'
+                 '"displayFieldIds":["fld_xxx"],"lockRecord":true,"allowWithdraw":true,'
+                 '"resubmit":{"enabled":true,"results":["rejected","withdrawn"],"limit":3},'
+                 '"nodes":['
+                 '{"id":"apn_trigger","type":"trigger"},'
+                 '{"id":"apn_review","type":"approval","label":"Manager review",'
+                 '"approverRules":[{"type":"employees","employeeIds":["emp_xxx"]}],'
+                 '"mode":"all","selfPolicy":"skip","unavailablePolicy":"autoReject"},'
+                 '{"id":"apn_approved","type":"approvedEnd"},'
+                 '{"id":"apn_rejected","type":"rejectedEnd"}],'
+                 '"edges":['
+                 '{"id":"ape_1","source":"apn_trigger","target":"apn_review"},'
+                 '{"id":"ape_2","source":"apn_review","target":"apn_approved","outcome":"approved"},'
+                 '{"id":"ape_3","source":"apn_review","target":"apn_rejected","outcome":"rejected"}]}'
+             )),
+    Endpoint("approvals.update", "flowbase_approvals_update", "PUT", "/objects/{object_id}/approvals/{approval_id}", "metadata:write", "Update an approval flow graph.", "flowbase approvals update obj_xxx apr_xxx --json-file approval.json",
+             request_body=(
+                 '{"baseRevision":4,"label":"Contract approval","enabled":true,'
+                 '"trigger":{"manual":true,"create":false,"update":false,"match":"all","conditions":[]},'
+                 '"displayFieldIds":["fld_xxx"],"lockRecord":true,"allowWithdraw":true,'
+                 '"resubmit":{"enabled":true,"results":["rejected","withdrawn"],"limit":3},'
+                 '"nodes":['
+                 '{"id":"apn_trigger","type":"trigger"},'
+                 '{"id":"apn_review","type":"approval","label":"Manager review",'
+                 '"approverRules":[{"type":"employees","employeeIds":["emp_xxx"]}],'
+                 '"mode":"all","selfPolicy":"skip","unavailablePolicy":"autoReject"},'
+                 '{"id":"apn_approved","type":"approvedEnd"},'
+                 '{"id":"apn_rejected","type":"rejectedEnd"}],'
+                 '"edges":['
+                 '{"id":"ape_1","source":"apn_trigger","target":"apn_review"},'
+                 '{"id":"ape_2","source":"apn_review","target":"apn_approved","outcome":"approved"},'
+                 '{"id":"ape_3","source":"apn_review","target":"apn_rejected","outcome":"rejected"}]}'
+             )),
+    Endpoint("approvals.reorder", "flowbase_approvals_reorder", "PUT", "/objects/{object_id}/approvals/order", "metadata:write", "Reorder object approval flows.", "flowbase approvals reorder obj_xxx --json '{\"baseRevision\":4,\"approvalIds\":[\"apr_a\",\"apr_b\"]}'",
+             request_body='{"baseRevision":4,"approvalIds":["apr_a","apr_b"]}'),
+    Endpoint("approvals.set-enabled", "flowbase_approvals_set_enabled", "POST", "/objects/{object_id}/approvals/{approval_id}/enabled", "metadata:write", "Enable or disable an approval flow.", "flowbase approvals set-enabled obj_xxx apr_xxx --base-revision 4 --enabled --yes", True,
+             request_body='{"baseRevision":4,"enabled":true}'),
+    Endpoint("approvals.delete", "flowbase_approvals_delete", "POST", "/objects/{object_id}/approvals/{approval_id}/delete", "metadata:write", "Logically delete an approval flow.", "flowbase approvals delete obj_xxx apr_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("print-templates.list", "flowbase_print_templates_list", "GET", "/objects/{object_id}/print-templates", "metadata:read", "List object print templates.", "flowbase print-templates list obj_xxx"),
+    Endpoint("print-templates.get", "flowbase_print_templates_get", "GET", "/objects/{object_id}/print-templates/{template_id}", "metadata:read", "Get a print template with HTML and data code.", "flowbase print-templates get obj_xxx ptp_xxx"),
+    Endpoint("print-templates.create", "flowbase_print_templates_create", "POST", "/objects/{object_id}/print-templates", "metadata:write", "Create a print template draft.", "flowbase print-templates create obj_xxx --json-file template.json",
+             request_body=(
+                 '{"baseRevision":3,"name":"Sales order","key":"sales_order","description":"",'
+                 '"paper":{"size":"A4","width":null,"height":null,"orientation":"portrait",'
+                 '"margins":{"top":15,"right":15,"bottom":15,"left":15}},'
+                 '"header":{"left":"","center":"","right":""},'
+                 '"footer":{"left":"","center":"Page {page} / {pages}","right":""},'
+                 '"html":"<h1>{{ record.summary }}</h1>\\n<p>{{ data.total | money(\\"CNY\\") }}</p>",'
+                 '"code":"import flowbase\\n\\ndef run():\\n    return {\\"total\\": 0}"}'
+             )),
+    Endpoint("print-templates.update", "flowbase_print_templates_update", "PUT", "/objects/{object_id}/print-templates/{template_id}", "metadata:write", "Update a print template; omitted fields keep their value.", "flowbase print-templates update obj_xxx ptp_xxx --json-file template.json",
+             request_body=(
+                 '{"baseRevision":4,"baseUpdatedAt":"2026-10-13T08:00:00+00:00",'
+                 '"html":"<h1>{{ record.summary }}</h1>"}'
+             )),
+    Endpoint("print-templates.reorder", "flowbase_print_templates_reorder", "PUT", "/objects/{object_id}/print-templates/order", "metadata:write", "Reorder object print templates.", "flowbase print-templates reorder obj_xxx --json '{\"baseRevision\":4,\"templateIds\":[\"ptp_a\",\"ptp_b\"]}'",
+             request_body='{"baseRevision":4,"templateIds":["ptp_a","ptp_b"]}'),
+    Endpoint("print-templates.set-enabled", "flowbase_print_templates_set_enabled", "POST", "/objects/{object_id}/print-templates/{template_id}/enabled", "metadata:write", "Enable or disable a print template.", "flowbase print-templates set-enabled obj_xxx ptp_xxx --base-revision 4 --enabled --yes", True,
+             request_body='{"baseRevision":4,"enabled":true}'),
+    Endpoint("print-templates.delete", "flowbase_print_templates_delete", "POST", "/objects/{object_id}/print-templates/{template_id}/delete", "metadata:write", "Logically delete a print template.", "flowbase print-templates delete obj_xxx ptp_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("pages.list", "flowbase_pages_list", "GET", "/pages", "metadata:read", "List custom Page metadata.", "flowbase pages list --object-id obj_xxx"),
+    Endpoint("pages.options", "flowbase_pages_options", "GET", "/pages/options", "metadata:read", "Get custom Page design options.", "flowbase pages options"),
+    Endpoint("pages.get", "flowbase_pages_get", "GET", "/pages/{page_id}", "metadata:read", "Get a custom Page.", "flowbase pages get pag_xxx"),
+    Endpoint("pages.create", "flowbase_pages_create", "POST", "/pages", "metadata:write", "Create a custom Page draft.", "flowbase pages create --json-file page.json",
+             request_body=(
+                 '{"baseRevision":3,"page":{"key":"customer_create","label":"Create customer",'
+                 '"description":"Create a customer record","objectId":"obj_xxx","type":"create",'
+                 '"regions":[{"id":"tmp_reg_main","label":"基本信息","hideLabel":false,"columnRatios":[100],'
+                 '"columns":[[{"id":"tmp_cmp_fields","label":"字段","hideLabel":true,'
+                 '"grid":{"columns":2,"rows":1},"alignment":"left",'
+                 '"labelPosition":"top","labelWidth":160,"fields":['
+                 '{"id":"tmp_pfi_1","fieldId":"fld_name","sourcePath":[],'
+                 '"row":1,"column":1,"columnSpan":1,"rowSpan":1},'
+                 '{"id":"tmp_pfi_2","fieldId":"fld_stage","sourcePath":[],'
+                 '"row":1,"column":2,"columnSpan":1,"rowSpan":1}]}]]}],"rules":[]}}'
+             )),
+    Endpoint("pages.clear-default", "flowbase_pages_clear_default", "POST", "/pages/{page_id}/clear-default", "metadata:write", "Clear this page's default assignment (also on deleted objects); fall back to the system page.", "flowbase pages clear-default pag_xxx --base-revision 4 --yes", True, request_body='{"baseRevision":4}'),
+    Endpoint("pages.update", "flowbase_pages_update", "PUT", "/pages/{page_id}", "metadata:write", "Update a custom Page draft.", "flowbase pages update pag_xxx --json-file page.json",
+             request_body=(
+                 '{"baseRevision":4,"page":{"id":"pag_xxx","key":"customer_detail","label":"Customer detail",'
+                 '"description":"Customer detail page","objectId":"obj_customer","type":"detail",'
+                 '"regions":[{"id":"reg_xxx","label":"Overview","hideLabel":false,"columnRatios":[100],'
+                 '"columns":[[{"kind":"detailSummary","id":"cmp_summary","label":"Customer summary",'
+                 '"subtitleFieldId":"fld_email","statusFieldId":"fld_status",'
+                 '"keyFieldIds":["fld_owner","fld_created_at"]},'
+                 '{"label":"Customer context","hideLabel":false,'
+                 '"grid":{"columns":2,"rows":1},"alignment":"left",'
+                 '"labelPosition":"top","labelWidth":160,"fields":['
+                 '{"fieldId":"fld_name","sourcePath":[],"row":1,"column":1,'
+                 '"columnSpan":1,"rowSpan":1},'
+                 '{"fieldId":"fld_account_name","sourcePath":['
+                 '{"relationFieldId":"fld_account","targetObjectId":"obj_account"}],'
+                 '"permission":"readonly","row":1,"column":2,"columnSpan":1,"rowSpan":1}]},'
+                 '{"kind":"tabs","id":"cmp_tabs","label":"Customer details",'
+                 '"defaultTabId":"tab_overview","tabs":['
+                 '{"id":"tab_overview","name":"Overview","components":['
+                 '{"kind":"stageBar","id":"cmp_stage","label":"Lifecycle",'
+                 '"hideLabel":false,"fieldId":"fld_stage","allowDirectSwitch":true,"colorMode":"option"},'
+                 '{"kind":"relatedSummary","id":"cmp_account","label":"Account summary",'
+                 '"showTitle":true,"title":"Account","relationFieldId":"fld_account",'
+                 '"summaryFieldIds":["fld_account_owner","fld_account_phone"]}]},'
+                 '{"id":"tab_activity","name":"Activity","components":['
+                 '{"kind":"attachmentCard","id":"cmp_contracts","label":"Contracts",'
+                 '"showTitle":true,"title":"Contracts","fieldId":"fld_contracts",'
+                 '"showMetadata":true,"editMode":"permission"},'
+                 '{"kind":"noticeBlock","id":"cmp_notice","label":"Reminder",'
+                 '"color":"yellow","showTitle":true,"title":"Before closing",'
+                 '"body":"Confirm the signed contract before closing this customer."},'
+                 '{"kind":"relatedList","id":"cmp_tickets","label":"Tickets","hideLabel":false,'
+                 '"objectId":"obj_ticket","relationFieldId":"fld_customer",'
+                 '"filters":[{"fieldId":"fld_status","operator":"neq","value":"done"}],'
+                 '"columnFieldIds":["fld_title","fld_status","fld_created_at"],'
+                 '"sort":{"fieldId":"fld_created_at","direction":"desc"},"limit":5,"showViewAll":true,'
+                 '"createAction":{"enabled":true,"label":"New ticket"},'
+                 '"carryIns":[{"fieldId":"fld_customer","source":"currentRecord"}]},'
+                 '{"kind":"approval","id":"cmp_approval","label":"Approval","hideLabel":false}]}]}]]}],'
+                 '"rules":[{"id":"rule_closed","name":"Lock and simplify closed customers",'
+                 '"enabled":true,"match":"all","conditions":['
+                 '{"fieldId":"fld_status","operator":"eq","value":"opt_closed"}],'
+                 '"actions":[{"type":"setFieldState","fieldId":"fld_name","state":"readonly"},'
+                 '{"type":"setComponentVisibility","componentId":"cmp_stage","state":"hidden"}]}]}}'
+             )),
+    Endpoint("pages.set-default", "flowbase_pages_set_default", "POST", "/pages/{page_id}/set-default", "metadata:write", "Set a default custom Page.", "flowbase pages set-default pag_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("pages.delete", "flowbase_pages_delete", "POST", "/pages/{page_id}/delete", "metadata:write", "Logically delete a custom Page.", "flowbase pages delete pag_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("pages.restore", "flowbase_pages_restore", "POST", "/pages/{page_id}/restore", "metadata:write", "Restore a custom Page.", "flowbase pages restore pag_xxx --base-revision 4 --yes", True,
+             request_body='{"baseRevision":4}'),
+    Endpoint("versions.list", "flowbase_versions_list", "GET", "/versions", "metadata:read", "List visible configuration versions.", "flowbase versions list"),
+    Endpoint("versions.get", "flowbase_versions_get", "GET", "/versions/{version_id}", "metadata:read", "Get a version with semantic and file diffs.", "flowbase versions show abc1234"),
+    Endpoint("releases.list", "flowbase_releases_list", "GET", "/releases", "metadata:read", "List production release records.", "flowbase versions releases", environments=("production",)),
+    Endpoint("changes.commit", "flowbase_changes_commit", "POST", "/changes/commit", "metadata:write", "Commit current test-environment drafts.", "flowbase changes commit --message 'Add customer field' --yes", True, environments=("test-a", "test-b"), audit_event="version.commit",
+             request_body='{"message":"Add customer field"}'),
+    Endpoint("changes.release", "flowbase_changes_release", "POST", "/changes/release", "metadata:write", "Release the current test-environment version.", "flowbase changes release --message 'Release customer field' --yes", True, environments=("test-a", "test-b"), audit_event="version.release",
+             request_body='{"message":"Release customer field"}'),
+    Endpoint(
+        "changes.direct-release-preflight",
+        "flowbase_changes_direct_release_preflight",
+        "POST",
+        "/changes/direct-release/preflight",
+        "metadata:write",
+        "Preflight a production direct release.",
+        "flowbase changes direct-release --message 'Fix production field' --yes",
+        environments=("production",),
+    ),
+    Endpoint(
+        "changes.direct-release",
+        "flowbase_changes_direct_release",
+        "POST",
+        "/changes/direct-release",
+        "metadata:write",
+        "Directly release production drafts.",
+        "flowbase changes direct-release --message 'Fix production field' --yes",
+        requires_confirmation=True,
+        environments=("production",),
+        preflight_operation_id="flowbase_changes_direct_release_preflight",
+        audit_event="version.forward-fix",
+    ),
+    Endpoint(
+        "environments.restart-preflight",
+        "flowbase_environments_restart_preflight",
+        "GET",
+        "/environments/restart/preflight",
+        "metadata:write",
+        "Preflight restarting the current test environment from production.",
+        "flowbase environments restart --confirm 'A 测试环境' --yes",
+        environments=("test-a", "test-b"),
+    ),
+    Endpoint(
+        "environments.restart",
+        "flowbase_environments_restart",
+        "POST",
+        "/environments/restart",
+        "metadata:write",
+        "Clear and restart the current test environment from production.",
+        "flowbase environments restart --confirm 'A 测试环境' --yes",
+        requires_confirmation=True,
+        environments=("test-a", "test-b"),
+        preflight_operation_id="flowbase_environments_restart_preflight",
+        audit_event="version.base-update",
+    ),
+    Endpoint("records.list", "flowbase_records_list", "GET", "/objects/{object_id}/records", "records:read", "List records.", "flowbase records list obj_xxx --page 1"),
+    Endpoint("records.get", "flowbase_records_get", "GET", "/objects/{object_id}/records/{record_id}", "records:read", "Get a record.", "flowbase records get obj_xxx rec_xxx"),
+    Endpoint("records.upload-attachment", "flowbase_records_upload_attachment", "POST", "/objects/{object_id}/fields/{field_id}/attachments", "records:write", "Upload an attachment before writing its ID to a record.", "flowbase records upload-attachment obj_xxx fld_xxx ./document.pdf"),
+    Endpoint("records.download-attachment", "flowbase_records_download_attachment", "GET", "/objects/{object_id}/records/{record_id}/attachments/{attachment_id}", "records:read", "Download an attachment bound to a record.", "flowbase records download-attachment obj_xxx rec_xxx att_xxx --output ./document.pdf"),
+    Endpoint("records.create", "flowbase_records_create", "POST", "/objects/{object_id}/records", "records:write", "Create a record. `values` keys are field keys (not IDs).", "flowbase records create obj_xxx --json-file record.json",
+             request_body=(
+                 '{"values":{"name":"Acme Corp","stage":"opt_xxx","amount":12000.50,'
+                 '"signed_on":"2026-09-01","is_vip":true,"account":"rec_xxx"}}'
+             )),
+    Endpoint("records.update", "flowbase_records_update", "PUT", "/objects/{object_id}/records/{record_id}", "records:write", "Update supplied field values on a record; omitted fields are preserved. `values` keys are field keys (not IDs).", "flowbase records update obj_xxx rec_xxx --json-file record.json",
+             request_body=(
+                 '{"values":{"name":"Acme Corp","stage":"opt_xxx","amount":12000.50,'
+                 '"signed_on":"2026-09-01","is_vip":true,"account":"rec_xxx"}}'
+             )),
+    Endpoint("records.delete", "flowbase_records_delete", "DELETE", "/objects/{object_id}/records/{record_id}", "records:write", "Delete a record.", "flowbase records delete obj_xxx rec_xxx --yes", True),
+    Endpoint(
+        "roles.list",
+        "flowbase_roles_list",
+        "GET",
+        "/roles",
+        "metadata:read",
+        "List organization roles.",
+        "flowbase roles list --page 1",
+        environments=("production",),
+    ),
+    Endpoint(
+        "roles.options",
+        "flowbase_roles_options",
+        "GET",
+        "/roles/options",
+        "metadata:read",
+        "List role editor option sources (apps and objects).",
+        "flowbase roles options",
+        environments=("production",),
+    ),
+    Endpoint(
+        "roles.get",
+        "flowbase_roles_get",
+        "GET",
+        "/roles/{role_id}",
+        "metadata:read",
+        "Get a role with permissions and members.",
+        "flowbase roles get rol_xxx",
+        environments=("production",),
+    ),
+    Endpoint(
+        "roles.create",
+        "flowbase_roles_create",
+        "POST",
+        "/roles",
+        "metadata:write",
+        "Create a custom role.",
+        "flowbase roles create --json-file role.json",
+        environments=("production",),
+        audit_event="role.created",
+        request_body=(
+            '{"name":"Sales","description":"Sales team",'
+            '"permissions":{"function":[],"apps":{"mode":"all"},'
+            '"objects":{"obj_xxx":{"view":true,"viewScope":"all","create":true,'
+            '"edit":true,"editScope":"all","delete":false}}}}'
+        ),
+    ),
+    Endpoint(
+        "roles.update",
+        "flowbase_roles_update",
+        "PUT",
+        "/roles/{role_id}",
+        "metadata:write",
+        "Update a custom role.",
+        "flowbase roles update rol_xxx --json-file role.json",
+        environments=("production",),
+        audit_event="role.updated",
+        request_body=(
+            '{"name":"Sales","description":"Sales team","updatedAt":"2026-01-01T00:00:00Z",'
+            '"permissions":{"function":[],"apps":{"mode":"all"},"objects":{}}}'
+        ),
+    ),
+    Endpoint(
+        "roles.delete",
+        "flowbase_roles_delete",
+        "DELETE",
+        "/roles/{role_id}",
+        "metadata:write",
+        "Delete a custom role.",
+        "flowbase roles delete rol_xxx --yes",
+        True,
+        environments=("production",),
+        audit_event="role.deleted",
+    ),
+)
+
+ENDPOINT_BY_KEY = {endpoint.key: endpoint for endpoint in ENDPOINTS}
+
+# Closed-domain catalogs for offline authoring of complex request bodies.
+# Keep in sync with server registries (field types, workflow/approval node kinds,
+# permission points, dashboard filter presets, page component kinds).
+# Icons intentionally reference the server file because the full Tabler set is large.
+_PERMISSIONS = ("required", "optional", "readonly", "hidden")
+_TEXT_FILTERS = ("eq", "neq", "contains", "not_contains", "is_empty", "is_not_empty")
+_NUMBER_FILTERS = ("eq", "neq", "gt", "gte", "lt", "lte", "is_empty", "is_not_empty")
+_DATE_FILTERS = ("eq", "before", "after", "lte", "gte", "is_empty", "is_not_empty")
+_SINGLE_FILTERS = ("eq", "neq", "in", "not_in", "is_empty", "is_not_empty")
+_MULTI_FILTERS = ("contains_any", "contains_all", "contains_none", "is_empty", "is_not_empty")
+_BOOL_FILTERS = ("is_true", "is_false", "is_empty", "is_not_empty")
+_EMPTY_FILTERS = ("is_empty", "is_not_empty")
+_SELECT_OPTION = {
+    "id": "tmp_xxx",
+    "label": "Option label",
+    "lifecycle": {"status": "active"},
+}
+
+
+def _field_type(
+    type_name: str,
+    constraints: tuple[str, ...],
+    *,
+    writable: bool = True,
+    filter_operators: tuple[str, ...] = (),
+    record_value: str = "string | null",
+    extra: dict | None = None,
+) -> dict:
+    payload = {
+        "type": type_name,
+        "typeVersion": "v1",
+        "writable": writable,
+        "permissions": list(_PERMISSIONS),
+        "constraints": list(constraints),
+        "filterOperators": list(filter_operators),
+        "recordValue": record_value,
+    }
+    if extra:
+        payload.update(extra)
+    return payload
+
+
+FIELD_TYPES = (
+    _field_type(
+        "text.singleLine", ("maxLength", "minLength", "placeholder", "unique"),
+        filter_operators=_TEXT_FILTERS, record_value="string | null",
+        extra={"createExample": {
+            "label": "Name", "key": "name", "description": "Display name",
+            "type": "text.singleLine", "typeVersion": "v1", "permission": "required",
+            "constraints": {"maxLength": 120},
+        }},
+    ),
+    _field_type(
+        "text.multiLine", ("maxLength", "minLength", "placeholder"),
+        filter_operators=_TEXT_FILTERS, record_value="string | null",
+    ),
+    _field_type(
+        "number", ("minimum", "maximum", "scale", "unique", "useThousands", "prefix", "suffix"),
+        filter_operators=_NUMBER_FILTERS, record_value="JSON number | null (not a quoted string)",
+        extra={"createExample": {
+            "label": "Capacity", "key": "capacity", "description": "Headcount cap",
+            "type": "number", "typeVersion": "v1", "permission": "optional",
+            "constraints": {"scale": 0, "minimum": 1, "maximum": 80},
+        }},
+    ),
+    _field_type(
+        "date", ("minimum", "maximum", "unique", "displayFormat"),
+        filter_operators=_DATE_FILTERS, record_value="YYYY-MM-DD | null",
+    ),
+    _field_type(
+        "select.single", ("options", "unique", "showColorDot"),
+        filter_operators=_SINGLE_FILTERS,
+        record_value="option id (opt_...), never the option label",
+        extra={
+            "optionShape": _SELECT_OPTION,
+            "createExample": {
+                "label": "Status", "key": "status", "description": "Lifecycle",
+                "type": "select.single", "typeVersion": "v1", "permission": "required",
+                "constraints": {"options": [
+                    {"id": "tmp_open", "label": "Open", "lifecycle": {"status": "active"}},
+                    {"id": "tmp_done", "label": "Done", "lifecycle": {"status": "active"}},
+                ]},
+            },
+        },
+    ),
+    _field_type(
+        "select.multiple", ("options", "maxSelections", "showColorDot"),
+        filter_operators=_MULTI_FILTERS, record_value="array of option ids | null",
+        extra={"optionShape": _SELECT_OPTION},
+    ),
+    _field_type(
+        "select.tree.single", ("nodes", "leafOnly", "unique", "showColorDot"),
+        filter_operators=_SINGLE_FILTERS, record_value="node id | null",
+    ),
+    _field_type(
+        "select.tree.multiple", ("nodes", "leafOnly", "maxSelections", "showColorDot"),
+        filter_operators=_MULTI_FILTERS, record_value="array of node ids | null",
+    ),
+    _field_type(
+        "lookup.record", ("targetObjectId", "displayFieldId", "unique"),
+        filter_operators=_SINGLE_FILTERS, record_value="record id (rec_...) | null",
+        extra={"createExample": {
+            "label": "Class", "key": "class", "description": "Owning class",
+            "type": "lookup.record", "typeVersion": "v1", "permission": "required",
+            "constraints": {"targetObjectId": "obj_xxx"},
+        }},
+    ),
+    _field_type(
+        "lookup.employee", ("isOwner", "unique"),
+        filter_operators=_SINGLE_FILTERS, record_value="employee id (emp_...) | null",
+    ),
+    _field_type(
+        "boolean", (),
+        filter_operators=_BOOL_FILTERS, record_value="true | false | null",
+        extra={"note": "View filters use is_true/is_false (no value). Page rules use eq with true/false."},
+    ),
+    _field_type(
+        "time", ("precision", "minimum", "maximum", "unique", "displayFormat"),
+        filter_operators=_DATE_FILTERS, record_value="HH:MM or HH:MM:SS | null",
+    ),
+    _field_type(
+        "datetime", ("minimum", "maximum", "unique", "displayFormat"),
+        filter_operators=_DATE_FILTERS, record_value="ISO-8601 datetime | null",
+    ),
+    _field_type(
+        "email", ("maxLength", "placeholder", "unique"),
+        filter_operators=_TEXT_FILTERS, record_value="email string | null",
+    ),
+    _field_type(
+        "phone", ("maxLength", "placeholder", "unique"),
+        filter_operators=_TEXT_FILTERS, record_value="phone string | null",
+    ),
+    _field_type(
+        "url", ("maxLength", "placeholder", "unique"),
+        filter_operators=_TEXT_FILTERS, record_value="URL string | null",
+    ),
+    _field_type(
+        "attachment", ("maxFileCount", "maxFileSize", "maxTotalSize", "allowedExtensions"),
+        filter_operators=_EMPTY_FILTERS, record_value="array of attachment ids (att_...)",
+    ),
+    _field_type(
+        "text.rich", ("maxLength", "placeholder"),
+        filter_operators=("contains", "not_contains", "is_empty", "is_not_empty"),
+        record_value="Markdown string | null",
+    ),
+    _field_type(
+        "autonumber", ("prefix", "start", "minDigits"),
+        writable=False, filter_operators=_TEXT_FILTERS, record_value="server-assigned string; omit on write",
+        extra={"createExample": {
+            "label": "Class no", "key": "class_no", "description": "Auto number",
+            "type": "autonumber", "typeVersion": "v1", "permission": "readonly",
+            "constraints": {"prefix": "CLS", "start": 2023001, "minDigits": 7},
+        }},
+    ),
+    _field_type(
+        "number.currency", ("currency", "minimum", "maximum", "scale", "currencyDisplay", "useThousands", "unique"),
+        filter_operators=_NUMBER_FILTERS, record_value="JSON number | null",
+    ),
+    _field_type(
+        "number.percent", ("minimum", "maximum", "scale", "unique"),
+        filter_operators=_NUMBER_FILTERS, record_value="JSON number | null",
+    ),
+    _field_type(
+        "duration", ("precision", "minimum", "maximum", "displayFormat", "unique"),
+        filter_operators=_NUMBER_FILTERS, record_value="integer duration | null",
+    ),
+    _field_type(
+        "rating", ("maxRating", "color"),
+        filter_operators=_NUMBER_FILTERS, record_value="integer 1..maxRating | null",
+    ),
+    _field_type(
+        "lookup.record.multiple", ("targetObjectId", "displayFieldId", "maxSelections"),
+        filter_operators=_MULTI_FILTERS, record_value="array of record ids | null",
+    ),
+    _field_type(
+        "lookup.department", (),
+        filter_operators=_SINGLE_FILTERS, record_value="department id (dep_...) | null",
+    ),
+)
+
+VIEW_FILTERS = {
+    "note": (
+        "View filters are not the same as page-rules. Read this catalog before views.create. "
+        "baseRevision comes from views.list / pages.list / the last write response — not objects.get."
+    ),
+    "shape": {"fieldId": "fld_...", "operator": "...", "value": "..."},
+    "valueOmittedFor": ("is_empty", "is_not_empty", "is_true", "is_false"),
+    "operatorsByFieldType": {
+        "text.singleLine,text.multiLine,email,phone,url,autonumber": _TEXT_FILTERS,
+        "text.rich": ("contains", "not_contains", "is_empty", "is_not_empty"),
+        "number,number.currency,number.percent,duration,rating": _NUMBER_FILTERS,
+        "date,time,datetime": _DATE_FILTERS,
+        "select.single,select.tree.single,lookup.record,lookup.employee,lookup.department": _SINGLE_FILTERS,
+        "select.multiple,select.tree.multiple,lookup.record.multiple": _MULTI_FILTERS,
+        "boolean": _BOOL_FILTERS,
+        "attachment": _EMPTY_FILTERS,
+    },
+    "valueShapes": {
+        "select.single": "option id from objects.get fields[].constraints.options[].id, not the label",
+        "lookup.record": "record id (rec_...)",
+        "lookup.employee": "employee id (emp_...)",
+        "boolean": "omit value; operator is_true or is_false",
+        "date": "YYYY-MM-DD",
+        "number": "JSON number",
+    },
+}
+
+RECORD_VALUES = {
+    "keys": "Field keys (name), never field ids (fld_...)",
+    "listVsGet": (
+        "records.list returns only the current view columns (often just the title field). "
+        "Use records.get for the full values object. Hidden fields are omitted from get."
+    ),
+    "omitOnWrite": ("autonumber", "record_id", "created_by", "updated_by", "created_at", "updated_at"),
+    "byType": {
+        "text.singleLine": "string",
+        "select.single": "option id (opt_...)",
+        "select.multiple": ["opt_a", "opt_b"],
+        "lookup.record": "rec_...",
+        "lookup.record.multiple": ["rec_a", "rec_b"],
+        "lookup.employee": "emp_...",
+        "boolean": True,
+        "date": "2026-09-01",
+        "number": 40,
+        "email": "ada@example.com",
+        "phone": "13800000000",
+        "text.rich": "Markdown string",
+        "attachment": ["att_..."],
+    },
+}
+
+AUTHORING = {
+    "globalFlags": {
+        "flags": ["--host", "--api-key", "--pretty", "--no-pretty", "--raw"],
+        "note": "These flags may appear before or after the subcommand.",
+        "examples": [
+            "flowbase --no-pretty objects list",
+            "flowbase objects list --no-pretty",
+        ],
+    },
+    "documentationKeys": "docs list returns endpoint keys. Use apps.objects.add for apps add-objects; docs show includes the CLI example.",
+    "requiredUpdateFields": {"apps.update": ["label", "icon", "color"]},
+    "requiredCreateFields": {
+        "objects.create": ["label", "key", "description"],
+        "fields.create": ["label", "key", "description", "type"],
+        "apps.create": ["label", "key"],
+        "views.create": ["baseRevision", "name", "defaultFieldIds"],
+        "pages.create": ["baseRevision", "page"],
+        "records.create": ["values"],
+    },
+    "draftRevision": {
+        "notReturnedBy": ["objects.get", "objects.list", "apps.get", "apps.list"],
+        "returnedBy": [
+            "views.list", "pages.list", "pages.get",
+            "every metadata write response (draftRevision)",
+        ],
+        "note": "Capture draftRevision from the last write or from views.list/pages.list before views/pages writes.",
+    },
+    "readThenWrite": (
+        "For update of views/pages/dashboards/fields with constraints: get the snapshot, "
+        "edit it, set baseRevision from draftRevision. fields.update.constraints is a full replace; "
+        "sending {} wipes options."
+    ),
+    "recordsNeedReleasedMetadata": (
+        "On production, records.create/list/get use the released runtime, not the current draft. "
+        "A newly created object returns HTTP 404 until changes.direct-release. "
+        "Author all metadata first, release, then seed records."
+    ),
+    "responseShapes": {
+        "organization.employees": "{items:[{id,name}],page,perPage,total,pages}; follow all pages.",
+        "organization.departments": "{items:[{id,name,parentId}]} (complete tree).",
+        "pages.evaluate": "{mode:rule-effects,visualRendering:false,recordValidation:false,draftRevision,matchedRules,fieldStates,componentVisibility}; states keyed by field/component IDs.",
+        "dashboards.run": "{ok,output,error,logs,durationMs,cached,mode:draft-preview}; inspect ok and error.",
+        "apps.create": "{appId,draftRevision}",
+        "dashboards.create": "{dashboardId,draftRevision}",
+        "workflows.create": "{workflowId,draftRevision}",
+        "approvals.create": "{approvalId,draftRevision}",
+        "print-templates.create": "{templateId,draftRevision}",
+        "pages.list": "Page documents are in items. The pages field is the pagination page count.",
+        "pages.create": "Returns {page:{id,key,...}, draftRevision}. There is no top-level pageId.",
+        "objects.create": "Returns {objectId, draftRevision}.",
+        "fields.create": "Returns {fieldId, draftRevision}.",
+        "records.create": "Returns {recordId}; use recordId with records.get to read the full record.",
+        "views.list": "Views are in items. draftRevision is on the envelope.",
+        "records.list": "Rows are in records. columns describes the current projection.",
+    },
+    "commonMistakes": [
+        {
+            "wrong": "flowbase apps list --no-pretty  (old CLI rejected this)",
+            "right": "Global flags now work after the subcommand.",
+        },
+        {
+            "wrong": "objects.create without description",
+            "right": "label, key, and description are all required.",
+        },
+        {
+            "wrong": "fields.create with only --label/--key/--description",
+            "right": "Must include type via --json. See docs catalogs field-types.",
+        },
+        {
+            "wrong": "select options: [{\"label\":\"Won\"}]",
+            "right": "{\"id\":\"tmp_won\",\"label\":\"Won\",\"lifecycle\":{\"status\":\"active\"}}",
+        },
+        {
+            "wrong": "boolean view filter operator eq / value true",
+            "right": "{\"fieldId\":\"fld_xxx\",\"operator\":\"is_true\"}",
+        },
+        {
+            "wrong": "select/lookup filter or record value uses the display label",
+            "right": "Use opt_/rec_/emp_ ids from objects.get / records.get.",
+        },
+        {
+            "wrong": "records.list.values is the full record",
+            "right": "List is a column projection. records.get for all field keys.",
+        },
+        {
+            "wrong": "records values keyed by fld_ ids",
+            "right": "values keys are field keys (name), not ids.",
+        },
+        {
+            "wrong": "pages.list.pages is the page list",
+            "right": "Use items. pages is the pagination page count.",
+        },
+        {
+            "wrong": "pages.create with empty columns: [[]]",
+            "right": "Place a field component. See docs example pages.create.",
+        },
+        {
+            "wrong": "fields.update constraints: {}",
+            "right": "constraints replaces the whole set. Copy options from objects.get.",
+        },
+        {
+            "wrong": "fields.create defaultValue: null",
+            "right": "Omit defaultValue unless it is a real value. null is treated as an explicit invalid default.",
+        },
+        {
+            "wrong": "two fields on one object with the same label",
+            "right": "label and key are both unique per object. Rename the new field (e.g. 所属班级 vs 班级).",
+        },
+        {
+            "wrong": "pages.create page.description is an empty string",
+            "right": "description must be 1-500 characters. Do not send \"\".",
+        },
+        {
+            "wrong": "region columnRatios: [1] or [1,1]",
+            "right": "columnRatios are percents that must sum to 100, e.g. [100] or [50,50].",
+        },
+        {
+            "wrong": "records.create on a brand-new object before release",
+            "right": "Production records APIs see released metadata only. flowbase changes direct-release --yes first.",
+        },
+        {
+            "wrong": "pages.create response pageId",
+            "right": "Read page.id from the page object and draftRevision from the envelope.",
+        },
+        {
+            "wrong": "read a hidden field from records.get.values",
+            "right": "Hidden fields are omitted from records.get. Unhide (and release on production) before reading them.",
+        },
+        {
+            "wrong": "objects.get.draftRevision",
+            "right": "Read draftRevision from views.list, pages.list, or the last write.",
+        },
+        {
+            "wrong": "dashboard date_range filter with no default",
+            "right": "Unset date_range defaults to last_30_days at runtime; set default.preset or omit the filter.",
+        },
+    ],
+}
+
+WORKFLOW_NODE_TYPES = (
+    {"type": "trigger", "cardinality": "exactly 1", "in": 0, "out": 1,
+     "note": "entry node; event in workflow trigger, not per node",
+     "conditionPathKeys": ("fieldId", "relationFieldId"),
+     "valueReferenceKeys": ("valueRef", "valueRefRelationFieldId")},
+    {"type": "branch", "cardinality": ">= 1 branches", "in": 1, "out": "1 per branch (+ defaultBranchId)",
+     "note": "each branch needs an outgoing edge carrying branchId",
+     "conditionPathKeys": ("fieldId", "relationFieldId"),
+     "valueReferenceKeys": ("valueRef", "valueRefRelationFieldId")},
+    {"type": "updateSelf", "cardinality": ">= 0", "in": 1, "out": 1,
+     "note": "assignments set/clear fields on the triggering record",
+     "valueReferenceKeys": ("valueRef", "valueRefRelationFieldId")},
+    {"type": "updateRelated", "cardinality": ">= 0", "in": 1, "out": 1,
+     "requiredKeys": ("relationFieldId", "assignments"),
+     "note": "relationFieldId must be an active single-record lookup on the workflow object; assignment fieldId targets that related object",
+     "valueReferenceKeys": ("valueRef", "valueRefRelationFieldId")},
+    {"type": "end", "cardinality": ">= 1", "in": "any", "out": 0,
+     "note": "terminal node"},
+)
+
+APPROVAL_NODE_TYPES = (
+    {"type": "trigger", "cardinality": "exactly 1", "in": 0, "out": 1,
+     "note": "entry node; initiation modes live on the flow trigger, not the node"},
+    {"type": "approval", "cardinality": ">= 1", "in": 1, "out": 2,
+     "note": "requires approved + rejected outcome edges; approverRules / mode / "
+             "selfPolicy / unavailablePolicy"},
+    {"type": "branch", "cardinality": ">= 0", "in": 1, "out": "1 per branch (+ defaultBranchId)",
+     "note": "same condition protocol as workflows; each branchId needs an edge"},
+    {"type": "updateRecord", "cardinality": ">= 0", "in": 1, "out": 1,
+     "note": "assignments update the locked record as system actor"},
+    {"type": "approvedEnd", "cardinality": ">= 1", "in": "any", "out": 0,
+     "note": "terminal approved outcome"},
+    {"type": "rejectedEnd", "cardinality": ">= 1", "in": "any", "out": 0,
+     "note": "terminal rejected outcome"},
+)
+
+FUNCTION_PERMISSIONS = (
+    "workspace.access", "app.manage", "object.manage", "dashboard.manage",
+    "version.manage", "org.manage", "system.manage",
+)
+
+DATA_SCOPES = ("all", "own_created", "own_responsible", "own_and_subordinates", "own_department_tree")
+
+DASHBOARD_FILTER_TYPES = ("date_range", "field_select")
+DASHBOARD_DATE_RANGE_PRESETS = (
+    "today", "yesterday", "last_7_days", "last_30_days",
+    "this_week", "this_month", "this_quarter", "this_year",
+)
+
+# Page authoring catalogs mirror the strict public Page schema and semantic
+# constraints. Field components omit `kind`; every other component sets it.
+PAGE_COMPONENTS = {
+    "note": (
+        "Region columns hold Page components. All kinds except field are detail-only. "
+        "Use pages.options for object/field candidates and pages.get for stable page, "
+        "region, component, and tab IDs."
+    ),
+    "authoringWorkflow": {
+        "read": "flowbase pages get pag_xxx",
+        "update": "flowbase pages update pag_xxx --json-file page.json",
+        "envelope": {"baseRevision": "<pages.get draftRevision>", "page": "<editable page snapshot>"},
+        "removeReadOnlyPageKeys": (
+            "objectLabel", "objectStatus", "lifecycle", "isDefault",
+            "defaultPageId", "defaultPageLabel",
+        ),
+        "note": (
+            "pages.get is a read projection, not a directly reusable update body. "
+            "Preserve authoring IDs and fields, map draftRevision to baseRevision, "
+            "and remove the listed read-only Page keys before pages.update."
+        ),
+    },
+    "common": {
+        "pageTypes": ("create", "detail"),
+        "description": "page.description is required and must be 1-500 characters; do not send \"\".",
+        "columnRatios": "Positive integers that must sum to 100, e.g. [100] or [60,40]. [1] is invalid.",
+        "componentId": (
+            "Preserve stable cmp_ IDs from pages.get. Omit id or use a tmp_ ID for a new "
+            "component; save and read the Page again before a rule targets that component."
+        ),
+        "exampleIds": (
+            "Every pag_/reg_/cmp_/tab_/rule_/obj_/fld_ value in examples is a placeholder; "
+            "replace stable resource IDs with values returned by pages.get/pages.options."
+        ),
+        "detailOnlyKinds": (
+            "relatedList", "approval", "detailSummary", "stageBar", "tabs",
+            "relatedSummary", "attachmentCard", "noticeBlock",
+        ),
+    },
+    "kinds": (
+        {
+            "kind": None,
+            "name": "field",
+            "note": "Omit kind. Each placed field carries its own sourcePath; sourceObjectId is legacy compatibility input only.",
+            "requiredKeys": (
+                "label", "hideLabel", "grid",
+                "alignment", "labelPosition", "labelWidth", "fields",
+            ),
+            "optionalKeys": ("id", "sourceObjectId"),
+            "placedField": {
+                "requiredKeys": (
+                    "fieldId", "row", "column", "columnSpan", "rowSpan",
+                ),
+                "optionalKeys": ("id", "sourcePath", "permission"),
+                "sourcePathHop": {
+                    "requiredKeys": ("relationFieldId", "targetObjectId"),
+                    "maxHops": 2,
+                    "note": "An empty path means the Page object. Every hop must use an active lookup.record field and declare its target object.",
+                },
+            },
+        },
+        {
+            "kind": "relatedList",
+            "name": "related record list",
+            "pageTypes": ("detail",),
+            "requiredKeys": (
+                "kind", "label", "hideLabel", "objectId", "relationFieldId",
+                "columnFieldIds", "sort", "limit", "showViewAll", "createAction",
+            ),
+            "optionalKeys": ("id", "filters", "carryIns"),
+            "limit": (5, 10, 20),
+            "sortDirections": ("asc", "desc"),
+            "carryInSources": (
+                {
+                    "source": "currentRecord",
+                    "note": "Value is the current record id; target field must be "
+                            "lookup.record pointing at the page object. When create "
+                            "is enabled, relationFieldId must appear exactly once "
+                            "with this source.",
+                },
+                {
+                    "source": "currentRecordField",
+                    "requires": "sourceFieldId",
+                    "note": "Copy an active field from the current record; source "
+                            "and target field types must match.",
+                },
+            ),
+            "filters": {
+                "shape": {"fieldId": "fld_...", "operator": "...", "value": "..."},
+                "note": "Same filter protocol as object views; AND-merged with the "
+                        "implicit relationFieldId eq currentRecord condition.",
+            },
+        },
+        {
+            "kind": "approval",
+            "name": "record approval",
+            "pageTypes": ("detail",),
+            "maxPerPage": 1,
+            "requiredKeys": ("kind", "label", "hideLabel"),
+            "optionalKeys": ("id",),
+            "note": (
+                "Reference-free presentation slot for submit / status / history. "
+                "Runtime data comes from employee APIs, not OpenAPI/CLI."
+            ),
+        },
+        {
+            "kind": "detailSummary",
+            "name": "detail summary",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel",),
+            "maxPerPage": 1,
+            "requiredKeys": ("kind", "label", "keyFieldIds"),
+            "optionalKeys": ("id", "subtitleFieldId", "statusFieldId"),
+            "constraints": {
+                "labelLength": (1, 50),
+                "keyFieldCount": (1, 8),
+                "fields": "active fields on the Page object; subtitle/status/key fields must not repeat",
+                "statusFieldTypes": ("select.single", "select.tree.single", "boolean"),
+            },
+        },
+        {
+            "kind": "stageBar",
+            "name": "stage bar",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel", "tabs"),
+            "requiredKeys": (
+                "kind", "label", "hideLabel", "fieldId",
+                "allowDirectSwitch", "colorMode",
+            ),
+            "optionalKeys": ("id",),
+            "colorModes": ("option", "standard"),
+            "constraints": {
+                "field": "active select.single field on the Page object with at least two active options",
+                "uniqueBinding": "a fieldId may be used by only one stageBar in the whole Page",
+            },
+        },
+        {
+            "kind": "tabs",
+            "name": "tabs",
+            "pageTypes": ("detail",),
+            "placement": ("topLevelSingleColumnRegion",),
+            "maxPerPage": 1,
+            "requiredKeys": ("kind", "label", "defaultTabId", "tabs"),
+            "optionalKeys": ("id",),
+            "tab": {
+                "requiredKeys": ("name", "components"),
+                "optionalKeys": ("id",),
+                "id": "Existing tabs use stable tab_ IDs; omit id only for a new tab.",
+                "count": (2, 8),
+                "nameLength": (1, 20),
+                "nameUnique": True,
+                "minimumComponents": 1,
+                "allowedChildKinds": (
+                    "field", "relatedList", "approval", "stageBar",
+                    "relatedSummary", "attachmentCard", "noticeBlock",
+                ),
+            },
+            "note": "defaultTabId must reference a tab in this component; tabs cannot be nested.",
+        },
+        {
+            "kind": "relatedSummary",
+            "name": "related object summary",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel", "tabs"),
+            "requiredKeys": (
+                "kind", "label", "showTitle", "title",
+                "relationFieldId", "summaryFieldIds",
+            ),
+            "optionalKeys": ("id",),
+            "constraints": {
+                "relationField": "active lookup.record field on the Page object",
+                "summaryFieldCount": (1, 6),
+                "summaryFields": (
+                    "active direct fields on the target object; attachment, text.rich, "
+                    "lookup.record, and lookup.record.multiple are not supported"
+                ),
+                "titleLengthWhenShown": (1, 50),
+            },
+        },
+        {
+            "kind": "attachmentCard",
+            "name": "attachment card",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel", "tabs"),
+            "requiredKeys": (
+                "kind", "label", "showTitle", "title", "fieldId",
+                "showMetadata", "editMode",
+            ),
+            "optionalKeys": ("id",),
+            "editModes": ("permission", "readonly"),
+            "constraints": {
+                "field": "active attachment field on the Page object",
+                "titleLengthWhenShown": (1, 50),
+            },
+        },
+        {
+            "kind": "noticeBlock",
+            "name": "notice block",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel", "tabs"),
+            "requiredKeys": (
+                "kind", "label", "color", "showTitle", "title", "body",
+            ),
+            "optionalKeys": ("id",),
+            "colors": ("yellow", "green", "blue", "pink", "purple", "gray"),
+            "constraints": {
+                "titleLengthWhenShown": (1, 50),
+                "bodyLength": (1, 500),
+                "bodyFormat": "plain text only; no Markdown, HTML, URLs, variables, or templates",
+            },
+        },
+    ),
+}
+
+PAGE_RULES = {
+    "note": (
+        "Rules are evaluated in list order. Enabled matching rules apply their actions "
+        "in order; the last matching action wins independently per fieldId or componentId."
+    ),
+    "rule": {
+        "requiredKeys": ("name", "conditions", "actions"),
+        "optionalKeys": ("id", "enabled", "match"),
+        "defaults": {"enabled": True, "match": "all"},
+        "matchValues": ("all", "any"),
+    },
+    "condition": {
+        "requiredKeys": ("fieldId", "operator"),
+        "optionalKeys": ("value",),
+        "shape": {"fieldId": "fld_...", "operator": "eq", "value": "..."},
+        "fieldCandidates": (
+            "active Page-object fields placed in ordinary field components with sourcePath=[]; "
+            "fields referenced only by business components and cross-object fields are excluded"
+        ),
+        "valueOmittedFor": ("is_empty", "is_not_empty"),
+    },
+    "operatorsByFieldType": {
+        "text.singleLine,text.multiLine,text.rich,email,phone,url,autonumber": (
+            "eq", "neq", "contains", "not_contains", "is_empty", "is_not_empty",
+        ),
+        "number,number.currency,number.percent,duration,rating": (
+            "eq", "neq", "gt", "gte", "lt", "lte", "is_empty", "is_not_empty",
+        ),
+        "date,time,datetime": ("eq", "before", "after", "is_empty", "is_not_empty"),
+        "select.single,select.tree.single,lookup.employee,lookup.record": (
+            "eq", "neq", "is_empty", "is_not_empty",
+        ),
+        "select.multiple,select.tree.multiple": (
+            "contains", "not_contains", "is_empty", "is_not_empty",
+        ),
+        "boolean": ("eq", "is_empty", "is_not_empty"),
+        "attachment": ("is_empty", "is_not_empty"),
+        "lookup.record.multiple": (
+            "contains_any", "contains_all", "contains_none", "is_empty", "is_not_empty",
+        ),
+        "lookup.department": ("eq", "neq", "in", "not_in", "is_empty", "is_not_empty"),
+    },
+    "actions": (
+        {
+            "type": "setFieldState",
+            "pageTypes": ("create", "detail"),
+            "requiredKeys": ("type", "fieldId", "state"),
+            "states": ("required", "optional", "readonly", "hidden"),
+        },
+        {
+            "type": "setComponentVisibility",
+            "pageTypes": ("detail",),
+            "requiredKeys": ("type", "componentId", "state"),
+            "states": ("visible", "hidden"),
+            "targetKinds": (
+                "relatedList", "approval", "detailSummary", "stageBar", "tabs",
+                "relatedSummary", "attachmentCard", "noticeBlock",
+            ),
+            "excludedTargets": ("field", "region", "tab", "button", "systemArea"),
+            "sameRuleUniqueTarget": True,
+            "note": (
+                "Targets use stable cmp_ IDs from pages.get, including components inside tabs. "
+                "A newly added component must be saved and read back before adding this action. "
+                "visible cannot override permissions, invalid references, or component availability."
+            ),
+        },
+    ),
+}
+
+RESOURCE_ID_PREFIXES = {
+    "app_": "app", "grp_": "app group", "obj_": "object", "fld_": "field",
+    "viw_": "view", "wfl_": "workflow", "apr_": "approval flow", "pag_": "custom page",
+    "reg_": "page region", "cmp_": "page component",
+    "dsh_": "dashboard", "dcm_": "dashboard component", "rol_": "role",
+    "rec_": "record", "att_": "attachment", "emp_": "employee", "dep_": "department",
+}
+
+WORKFLOW_BRANCHES = {
+    "shape": {"id": "tmp_branch", "type": "branch", "label": "Amount", "branches": [{"id": "tmp_high", "name": "High", "match": "all", "conditions": [{"fieldId": "fld_amount", "operator": "gt", "value": 10}]}], "defaultBranchId": "tmp_other"},
+    "edges": [{"source": "tmp_branch", "target": "tmp_update", "branchId": "tmp_high"}, {"source": "tmp_branch", "target": "tmp_end", "branchId": "tmp_other"}],
+    "note": "Add exactly one trigger and an end; connect every branch and the default to a reachable node. Read fields/relations from workflows list. Preserve node/edge IDs on update; condition IDs are field IDs, not field keys.",
+    "updateEnvelope": ["baseRevision", "label", "enabled", "trigger", "nodes", "edges"],
+}
+
+APPROVAL_RULES = {
+    "sources": [
+        {"type": "employees", "employeeIds": ["emp_from_organization_employees"]},
+        {"type": "recordField", "fieldId": "fld_active_lookup_employee"},
+        {"type": "submitterSupervisor", "level": 1},
+    ],
+    "discovery": "organization employees --query NAME --page N returns real IDs; follow pages until complete. objects get supplies lookup.employee fields. Do not invent employee IDs.",
+    "modes": ["all", "any", "sequential"],
+    "selfPolicy": ["allow", "skip"],
+    "unavailablePolicy": ["autoApprove", "autoReject", "fallback"],
+    "constraints": "employees needs nonempty employeeIds; recordField needs an active lookup.employee; supervisor level is 1..10; fallback needs fallbackEmployeeId from employee discovery.",
+    "resubmit": "{enabled,results,limit}: results subset of rejected/withdrawn/approved (nonempty when enabled); limit null (unlimited) or integer 2..99 counting every non-failed instance per record. Omitted means enabled, all results, unlimited.",
+    "updateEnvelope": ["baseRevision", "label", "enabled", "trigger", "displayFieldIds", "lockRecord", "allowWithdraw", "resubmit", "nodes", "edges"],
+    "note": "Use docs example approvals.create for a complete graph. Start disabled while authoring. Employee submit/decide is not a management CLI operation.",
+}
+
+PAGE_BUTTONS = {
+    "location": "page.buttons on a detail page; preserve stable btn_ IDs on update, omit id for a new button.",
+    "example": {"name": "Mark done", "color": "#2563EB", "description": "Mark this record completed", "enabled": True, "match": "all", "conditions": [], "action": {"type": "autoAssign", "confirm": True, "confirmText": "Mark completed?", "assignments": [{"fieldId": "fld_done", "op": "set", "source": "fixed", "value": True}]}},
+    "assignment": {"op": ["set", "clear"], "source": ["fixed", "currentField", "currentEmployee", "currentTime"], "note": "fixed uses value; currentField uses sourceFieldId; clear omits source/value. Use active writable field IDs from objects get; computed/system fields are not targets."},
+    "conditions": "Same condition shapes/operators as page-rules; an empty list shows an enabled button unconditionally. match is all or any.",
+    "note": "Read pages get; retain regions, rules and existing buttons. Remove read-only page projection keys listed in page-components and wrap as {baseRevision,page}. pages evaluate does not execute buttons.",
+}
+
+DASHBOARD_RUNTIME = {
+    "command": "flowbase dashboards run dsh_xxx dcm_xxx --json '{\"filterValues\":{}}'",
+    "ids": "Read dashboards get for stable component IDs and filters.",
+    "querySDK": {
+        "namespace": "flowbase.query.records",
+        "count": "count(object, where=None, scope=None, inherit_filters=False) -> integer",
+        "group_by": "group_by(object, group_field, metric='count', metric_field=None, where=None, scope=None, inherit_filters=False) -> [{value,label,metric}]",
+        "timeseries": "timeseries(object, time_field=None, interval='day', metric='count', metric_field=None, where=None, scope=None, inherit_filters=False) -> [{bucket,metric}]",
+        "list": "list(object, fields=None, where=None, order_by=None, limit=100, scope=None, inherit_filters=False) -> {fields,rows,labels,total}",
+        "keys": "Use object and field KEYS from objects list/get, not IDs. order_by is a field key, with '-' for descending; default is -created_at.",
+        "where": [{"field": "amount", "operator": "gt", "value": 10}],
+        "constraints": "where conditions use AND and each field's supported filter operators. Aggregation metric: count/sum/avg/max/min; non-count needs a numeric metric_field. inherit_filters defaults false. scope only accepts own or null; API keys have no employee identity and own does not narrow their all-record grant.",
+        "limits": "20 queries per component, list limit 1..500, at most 100 groups; hidden fields are unavailable. No arbitrary SQL, network or imports beyond flowbase. Sandbox execution limit 15 seconds.",
+    },
+    "recordExample": "import flowbase\n\ndef run():\n    total = flowbase.query.records.count(object=\"customer\")\n    return {\"type\": \"metric\", \"value\": total}\n",
+    "recordExampleSetup": "Replace customer with an active object key from objects list; create a record and run this code as a saved component to verify the count. Use dashboards.update preserving the other components, then dashboards run with IDs from dashboards get.",
+    "mode": "Draft preview, requiring metadata:read and records:read. No employee impersonation; current employee context is empty for API keys.",
+    "result": "{ok,output,error,logs,durationMs,cached}; check ok, not just HTTP success. Runs are read-only; output is not a visual rendering.",
+    "example": "import flowbase\n\ndef run():\n    return {\"type\": \"metric\", \"value\": 1}\n",
+}
+
+CATALOGS = {
+    "workflow-branches": WORKFLOW_BRANCHES,
+    "approval-rules": APPROVAL_RULES,
+    "page-buttons": PAGE_BUTTONS,
+    "dashboard-runtime": DASHBOARD_RUNTIME,
+    "field-types": FIELD_TYPES,
+    "view-filters": VIEW_FILTERS,
+    "record-values": RECORD_VALUES,
+    "authoring": AUTHORING,
+    "workflow-nodes": WORKFLOW_NODE_TYPES,
+    "approval-nodes": APPROVAL_NODE_TYPES,
+    "permissions": {"function": FUNCTION_PERMISSIONS, "dataScopes": DATA_SCOPES},
+    "dashboard-filters": {
+        "types": DASHBOARD_FILTER_TYPES,
+        "dateRangePresets": DASHBOARD_DATE_RANGE_PRESETS,
+        "note": (
+            "A date_range filter without default falls back to last_30_days at runtime. "
+            "Always set default.preset (or a custom range) when historical records must stay visible."
+        ),
+    },
+    "page-components": PAGE_COMPONENTS,
+    "page-rules": PAGE_RULES,
+    "id-prefixes": RESOURCE_ID_PREFIXES,
+    "icons": {
+        "note": "6146 Tabler icon names are supported; any Icon* name from the "
+                "server's object_icon_names.json is valid.",
+        "examples": ["IconCube", "IconDatabase", "IconChartPie", "IconApps",
+                     "IconFolder", "IconTable", "IconUsers", "IconSettings",
+                     "IconSchool", "IconUsersGroup", "IconBuildingCommunity"],
+    },
+}
+
+PENDING_MANAGEMENT_OPERATIONS = (
+    {"key": "environments.enable", "status": "pending", "reason": "Requires an independent capability and confirmation contract."},
+    {"key": "changes.clear-drafts", "status": "pending", "reason": "Requires an independent capability and confirmation contract."},
+    {"key": "api-keys.manage", "status": "pending", "reason": "API keys cannot delegate or expand their own authority."},
+    {"key": "git-credentials.manage", "status": "pending", "reason": "Requires a dedicated credential-management capability."},
+    {"key": "metadata.purge", "status": "pending", "reason": "Physical purge is not delivered."},
+)