ridu

Create an application from config and a document store.

Resolve executable config into a deterministic schema manifest.

Run the API, admin, jobs, and shutdown lifecycle.

Allow an access-controlled operation.

Deny an access-controlled operation.

Constrain access to documents matching a query expression.

The complete author-owned application definition.

A repeatable model with fields, access, hooks, and capabilities.

A singleton model exposed through the same operation engine.

Content locales, fallback behavior, and optional request-scoped admin availability.

One content locale and its ordered fallback chain.

Serializable collection presentation and editorial organization.

A frontend URL template and named authoring viewports.

Policy for an auth-enabled collection.

Validation, privacy, and image-variant policy for an upload collection.

Drafts, snapshot retention, and autosave policy.

Resolve a virtual output field after an operation produces a document.

Select the auth collection trusted to enter the framework admin.

Configure admin interface languages and editor timezone choices.

One statically bundled admin interface language.

One timezone offered to editors.

Singular and plural author-facing collection labels.

One ordered compound index; Unique enforces tuple uniqueness.

Serializable singleton presentation metadata.

Expiration policy for coordinated authoring locks.

Trusted document, actor, locale, operation, and LocalAPI inputs for a virtual resolver.

One named live-preview viewport.

HTTP security, size bounds, observers, and trusted-proxy policy.

Provide the singular document-store adapter through the Execute lifecycle.

Register the selected adapter’s compiled migration driver for project commands.

Configure the HTTP listen address independently from the store adapter.

Provide object storage through the Execute lifecycle.

Configure the generated HTTP handler used by Execute.

Configure production socket and graceful-drain bounds.

Socket timeouts, graceful drain, and readiness admission.

A lazy, lifecycle-owned document-store constructor.

A lazy, lifecycle-owned object-storage constructor.

A bounded repeatable custom readiness dependency check.

One opaque runtime option accepted by Execute.

Projection, population, actor, draft, trash, and locale controls for one read.

Filter, page, sort, projection, population, actor, draft, trash, and locale list controls.

Field, filter, page, actor, draft, trash, and locale controls for a unique-value read.

Bounded unique-index range, projection, actor, and locale controls.

Actor, revision, draft, response, and locale controls for one write.

Locale selection for concise single-document calls.

Proposed data, actor, trash, and locale input for side-effect-free access evaluation.

Evaluated operation and field permission booleans.

Trusted migration identity, status, and source timestamps.

The stable code, HTTP status, message, validation issues, cause, and commit-state error returned across operation boundaries.

In-process content operations over the shared operation engine.

Evaluated boolean permissions for resource operations.

Evaluated read/create/update booleans for one field path.

Refreshed source document plus applied inverse-relation delta counts.

Length, byte, bcrypt, and common-password policy for local credentials.

Token lifetime and trusted notification callback for password recovery.

Token lifetime and trusted notification callback for email verification.

Rules for login, sessions, recovery, API keys, and external authentication.

Exact actor, operation, request, and LocalAPI state for an auth rule or hook.

Compiled authentication lifecycle observers.

One compiled external request-authentication strategy.

An exact auth collection plus actor document.

A new bearer session, safe ID, typed user, and expiry.

Safe session/device metadata without the bearer secret.

A newly minted API key including its one-time secret.

Safe metadata for listing an existing API key.

Client IP and user-agent metadata recorded with a session.

Allow or deny one non-CRUD authentication operation.

Observe or reject one authentication lifecycle phase.

Login, logout, refresh, recovery, verification, API-key, or external-auth operation.

Normalized headers and target collection for an external strategy.

Whether an external strategy recognized and authenticated a request.

Trusted password-reset delivery payload including the raw one-time token.

Trusted email-verification delivery payload including the raw one-time token.

One named derived image variant and fit policy.

Streamed file bytes, application metadata, identity, and locale.

Scanned, candidate, and deleted counts from upload reconciliation.

Define a compiled typed durable task.

A registered typed handle for durable admission, status, and cancellation.

Select the queue used by a typed task.

Persist retry count, delay, maximum delay, and backoff policy.

Bound one handler attempt.

Keep terminal task status/output for a bounded duration.

Repair durable domain records that missed task admission.

Return a retryable handler failure using configured backoff.

Return a retryable handler failure with an explicit delay.

Return a terminal handler failure.

Cancellation, task identity, attempt number, and application access for one handler.

Run time, queue, concurrency key, target, and requester for admission.

A typed stable handle returned by durable admission.

Typed task status, attempts, failure, timestamps, and optional output.

A stable typed durable-task failure.

Fixed, linear, or exponential durable retry schedule.

Non-generic compiled task boundary stored in Config.Tasks.

Stable framework task failure category.

One typed task policy option.

Bounded recovery scan for a durable task admission gap.

Claimed, succeeded, failed, and released counts for a worker cycle.

The maximum encoded JSON size accepted for durable task input or output.

A compiled typed durable task function.

Queued, running, succeeded, failed, or canceled durable state.

An allow, deny, or atomic document-filter decision.

Authorize one operation with actor and transaction context.

Actor, target, locale, data, and nested API supplied to an access rule.

Access rules for collection admin, create, read, update, delete, and unlock operations.

Allow-or-deny rules for global reads, versions, and updates.

Independent create, read, and update rules for one authored field.

Authorize or redact one authored field value.

Operation, actor, path, value, siblings, and locale supplied to a field rule.

Allow, deny, or filtered-decision discriminant.

The request, document, actor, locale, and transaction state available to a hook.

A deterministic lifecycle callback.

Ordered lifecycle callbacks for one collection.

Deliver a hook effect after its document transaction commits.

Identity and executable work for one committed lifecycle effect.

One application-authored method and path handler mounted at root, collection, or global scope.

Raw HTTP, route parameters, actor identity, and LocalAPI supplied to a custom endpoint.

Trusted compiled custom endpoint handler.

The minimum stable-key contract for trusted compiled backend extensions.

Versioned public generation, migration, and admin metadata.

A plugin providing versioned public metadata.

A plugin contributing deterministic files from executable configuration.

Immutable manifest input for compiled plugin generation.

A deterministic plugin-scoped generated file.

A plugin transforming defensive config copies before final resolution.

A plugin contributing ordered collection or field hooks.

A plugin validating its custom field values.

A plugin contributing namespaced REST endpoints.

A plugin binding an application-level protocol transport.

Static package/export pairing for a plugin admin half.

Half-open framework version range supported by a plugin.

Generated Go, TypeScript, where, and OpenAPI mapping for a plugin field.

PostgreSQL or SQLite identity for exceptional private plugin schema.

One explicitly adapter-scoped private plugin migration bundle.

One immutable contiguous reversible plugin database transition.

Ordered collection or field hooks contributed by a plugin.

Resolved field, concrete runtime path, and candidate value for validation.

Return path-aware issues for one plugin-owned value.

One exact method-specific namespaced REST endpoint.

HTTP, exact actor identity, LocalAPI, rate-admission, and diagnostic helpers.

Trusted compiled namespaced endpoint handler.

One absolute application-level protocol route.

Immutable manifest and initialized public APIs supplied during protocol binding.

The compiled backend plugin API version required by PluginDescriptor.

The statically bundled admin-plugin API version required by AdminPluginMetadata.

Select PostgreSQL-specific private plugin schema.

Select SQLite-specific private plugin schema.

Security-relevant application event metadata.

Completed request timing, route, response size, error code, and status metadata.

Trusted internal diagnostic detail hidden from public HTTP responses.

A resolved application bound to its document and optional service stores.

The lifecycle operation currently being authorized or handled.

The semantic Ridu framework version used by project and CLI compatibility checks.