fix: address code review feedback - improve namespace and audit log documentation

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

packages/plugins/plugin-audit/src/objects/sys-audit-log.object.ts

@@ -44,6 +44,7 @@ export const SysAuditLog = ObjectSchema.create({
     action: Field.select(['create', 'update', 'delete', 'restore', 'login', 'logout', 'permission_change', 'config_change', 'export', 'import'], {
       label: 'Action',
       required: true,
+      description: 'Action type (snake_case). Values: create, update, delete, restore, login, logout, permission_change, config_change, export, import',
     }),
 
     object_name: Field.text({
@@ -107,7 +108,7 @@ export const SysAuditLog = ObjectSchema.create({
     trackHistory: false, // Audit logs are themselves the audit trail
     searchable: true,
     apiEnabled: true,
-    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable
+    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable; creation happens via internal system hooks only
     trash: false, // Never soft-delete audit logs
     mru: false,
     clone: false,

packages/spec/src/data/object.zod.ts

@@ -253,10 +253,13 @@ const ObjectSchemaBase = z.object({
    * When set, `tableName` is auto-derived as `{namespace}_{name}` by
    * `ObjectSchema.create()` unless an explicit `tableName` is provided.
    * 
+   * Namespace must be a single lowercase word (no underscores or hyphens)
+   * to ensure clean auto-derivation of `{namespace}_{name}` table names.
+   * 
    * @example namespace: 'sys'   → tableName defaults to 'sys_user'
    * @example namespace: 'crm'   → tableName defaults to 'crm_account'
    */
-  namespace: z.string().regex(/^[a-z][a-z0-9]*$/).optional().describe('Logical domain namespace (e.g. "sys", "crm"). Used for routing, permissions, and auto-deriving tableName.'),
+  namespace: z.string().regex(/^[a-z][a-z0-9]*$/).optional().describe('Logical domain namespace — single lowercase word (e.g. "sys", "crm"). Used for routing, permissions, and auto-deriving tableName as {namespace}_{name}.'),
 
   /**
    * Taxonomy & Organization