## ADDED Requirements

### Requirement: PocketBase native company access SHALL expose a stable public create and query boundary

The system SHALL allow native PocketBase clients to create company records publicly and to query company records through standard PocketBase records APIs, while privileged mutations remain restricted to management users.

#### Scenario: Public client creates company record

- **WHEN** a client calls the native PocketBase create-record API for `tbl_company`
- **THEN** the request SHALL succeed without requiring a management token

#### Scenario: Public client queries company list

- **WHEN** a client calls the native PocketBase list-records API for `tbl_company`
- **THEN** the request SHALL return company records using standard PocketBase pagination parameters

#### Scenario: Management user updates company record

- **WHEN** a client attempts to update or delete `tbl_company`
- **THEN** PocketBase SHALL allow the operation only for management users or administrators

### Requirement: Public dictionary and document reads SHALL be supported through native PocketBase APIs

The system SHALL allow native PocketBase clients to read `tbl_system_dict` and `tbl_document` records without requiring application hooks tokens, while write operations remain restricted.

#### Scenario: Public client reads dictionary records

- **WHEN** a client calls the native PocketBase records API for `tbl_system_dict`
- **THEN** list and view operations SHALL be readable without authentication

#### Scenario: Public client reads document records

- **WHEN** a client calls the native PocketBase records API for `tbl_document`
- **THEN** list and view operations SHALL be readable without authentication
