// Code generated by cmd/codegen. DO NOT EDIT.
// Source: internal/bootstrap/system_tables.json
// Generated at: 2026-01-01T00:00:00Z

package constants

// ProtectedRecordSpec declares that rows whose GuardField is truthy are
// platform-managed and must be rejected by the generic delete guard.
// See backend/internal/bootstrap/system_tables.json `protectedRecords`.
type ProtectedRecordSpec struct {
	GuardField string
	Policy     string
	ErrorCode  string
	Message    string
}

// ProtectedRecords maps tableName -> spec. Empty = unprotected.
var ProtectedRecords = map[string]ProtectedRecordSpec{
	"Profile": {
		GuardField: "IsSystem",
		Policy:     "reject_delete",
		ErrorCode:  "CANNOT_DELETE_PROTECTED_RECORD",
		Message:    "Platform-managed Profile cannot be deleted",
	},
}