User

• authenticate Whether $password matches the stored hash.
• can Whether the user's role grants permission $key.
• childFields The fields a new account is made from - username, password and role - like Page::childFields(); asked of the user root.
• delete Deletes this user's folder, emitting user.delete:before and dropping the index rows first so they don't outlive the files they point to.
• fields This user's declared profile fields (roles/_index.json's "fields") as resolved FieldValue instances - mirrors Page::fields().
• new Creates a new user under the users root: mints its uuid and writes a minimal _index.json, then applies $data via the normal save() path (role, an already-hashed password, ...).
• objectType Always `user`.
• passwordFields A password change: the new one twice, and the current one first when the user changes their own.
• registryFields Extra registry columns this object type contributes (e.g. view for pages, role for users).
• role The user's role, with its permissions.
• save Persists user data like Record::save(), then emits user.update:after so the field/search index follows.
• setPassword Hashes and saves a new password.
• settingFields The account settings an admin sets - role and locked - as FieldValues, like Page::settingFields().

From Record 14

• assertUnlocked A locked record is protected: it can't be changed or deleted until `locked` is turned off.
• create The one way a record comes into being: under the lock for $key (default: the path) $guard refuses a conflict, then $make builds the record at $path and save() applies $data.
• data The `_data.json` file: the record's content.
• exists Whether the record is on disk.
• generateUuid The current system uuid format - the single source of truth for tooling that needs to mint or recognize one.
• index The `_index.json` file: uuid, timestamps and the type's structural keys.
• isSiteObject Whether it lives in the site rather than in `phlat/` or an addon.
• keyFor Builds a registry uuid key from a type and identity value, e.g. keyFor('page', $uuid) -> "page:{uuid}".
• name The folder name: the last segment of a page's URL, or a username.
• path The record's folder, with a trailing slash.
• publishedData The canonical _data.json contents, bypassing any draft/preview override (e.g.
• registryKey The registry's uuid key for this object, e.g. "page:{uuid}".
• registryPath The path stored in the registry for this object.
• upload Validates and stores an uploaded file (a raw $_FILES-shape array) into this record's own folder.