@elevasis/core 0.20.0 → 0.22.0

package/src/_gen/__tests__/__snapshots__/contracts.md.snap

@@ -159,6 +159,36 @@ export type OrganizationModelRoles = z.infer<typeof RolesDomainSchema>
 export type OrganizationModelRole = z.infer<typeof RoleSchema>
 ```
 
+### `OrganizationModelRoleId`
+
+```typescript
+export type OrganizationModelRoleId = z.infer<typeof RoleIdSchema>
+```
+
+### `OrganizationModelRoleHolder`
+
+```typescript
+export type OrganizationModelRoleHolder = z.infer<typeof RoleHolderSchema>
+```
+
+### `OrganizationModelHumanRoleHolder`
+
+```typescript
+export type OrganizationModelHumanRoleHolder = z.infer<typeof HumanRoleHolderSchema>
+```
+
+### `OrganizationModelAgentRoleHolder`
+
+```typescript
+export type OrganizationModelAgentRoleHolder = z.infer<typeof AgentRoleHolderSchema>
+```
+
+### `OrganizationModelTeamRoleHolder`
+
+```typescript
+export type OrganizationModelTeamRoleHolder = z.infer<typeof TeamRoleHolderSchema>
+```
+
 ### `OrganizationModelGoals`
 
 ```typescript
@@ -177,6 +207,90 @@ export type OrganizationModelObjective = z.infer<typeof ObjectiveSchema>
 export type OrganizationModelKeyResult = z.infer<typeof KeyResultSchema>
 ```
 
+### `OrganizationModelSystems`
+
+```typescript
+export type OrganizationModelSystems = z.infer<typeof SystemsDomainSchema>
+```
+
+### `OrganizationModelSystemEntry`
+
+```typescript
+export type OrganizationModelSystemEntry = z.infer<typeof SystemEntrySchema>
+```
+
+### `OrganizationModelSystemId`
+
+```typescript
+export type OrganizationModelSystemId = z.infer<typeof SystemIdSchema>
+```
+
+### `OrganizationModelSystemKind`
+
+```typescript
+export type OrganizationModelSystemKind = z.infer<typeof SystemKindSchema>
+```
+
+### `OrganizationModelSystemStatus`
+
+```typescript
+export type OrganizationModelSystemStatus = z.infer<typeof SystemStatusSchema>
+```
+
+### `OrganizationModelResources`
+
+```typescript
+export type OrganizationModelResources = z.infer<typeof ResourcesDomainSchema>
+```
+
+### `OrganizationModelResourceEntry`
+
+```typescript
+export type OrganizationModelResourceEntry = z.infer<typeof ResourceEntrySchema>
+```
+
+### `OrganizationModelResourceId`
+
+```typescript
+export type OrganizationModelResourceId = z.infer<typeof ResourceIdSchema>
+```
+
+### `OrganizationModelResourceKind`
+
+```typescript
+export type OrganizationModelResourceKind = z.infer<typeof ResourceKindSchema>
+```
+
+### `OrganizationModelResourceGovernanceStatus`
+
+```typescript
+export type OrganizationModelResourceGovernanceStatus = z.infer<typeof ResourceGovernanceStatusSchema>
+```
+
+### `OrganizationModelAgentKind`
+
+```typescript
+export type OrganizationModelAgentKind = z.infer<typeof AgentKindSchema>
+```
+
+### `OrganizationModelWorkflowResourceEntry`
+
+```typescript
+export type OrganizationModelWorkflowResourceEntry = z.infer<typeof WorkflowResourceEntrySchema>
+```
+
+### `OrganizationModelAgentResourceEntry`
+
+```typescript
+export type OrganizationModelAgentResourceEntry = z.infer<typeof AgentResourceEntrySchema>
+```
+
+### `OrganizationModelIntegrationResourceEntry`
+
+```typescript
+export type OrganizationModelIntegrationResourceEntry = z.infer<typeof IntegrationResourceEntrySchema>
+```
+
 ### `OrganizationModelKnowledge`
 
 ```typescript
@@ -411,413 +525,464 @@ export interface ElevasisFeaturesContextValue {
 ### `ResourceStatus`
 
 ```typescript
-/**
- * Environment/deployment status for resources
- */
+/**
+ * Environment/deployment status for resources
+ */
 export type ResourceStatus = 'dev' | 'prod'
 ```
 
 ### `ResourceType`
 
 ```typescript
-/**
- * All resource types in the platform
- * Used as the discriminator field in ResourceDefinition
- */
+/**
+ * All resource types in the platform
+ * Used as the discriminator field in ResourceDefinition
+ */
 export type ResourceType = 'agent' | 'workflow' | 'trigger' | 'integration' | 'external' | 'human'
 ```
 
 ### `ExecutableResourceType`
 
 ```typescript
-/**
- * Executable resource types (subset of ResourceType)
- * These resources can be directly executed by the execution engine
- */
+/**
+ * Executable resource types (subset of ResourceType)
+ * These resources can be directly executed by the execution engine
+ */
 export type ExecutableResourceType = 'workflow' | 'agent'
 ```
 
+### `ResourceSystemSummary`
+
+```typescript
+export type ResourceSystemSummary = Pick<SystemEntry, 'id' | 'title' | 'description' | 'kind' | 'status'>
+```
+
 ### `ResourceDefinition`
 
 ```typescript
-/**
- * Base interface for ALL platform resources
- * Shared by both executable (agents, workflows) and non-executable (triggers, integrations, etc.) resources
- */
-export interface ResourceDefinition {
-  /** Unique resource identifier */
-  resourceId: string
-
-  /** Display name */
-  name: string
-
-  /** Purpose and functionality description */
-  description: string
-
-  /** Version for change tracking and evolution */
-  version: string
-
-  /** Resource type discriminator */
-  type: ResourceType
-
-  /** Environment/deployment status */
-  status: ResourceStatus
-
+/**
+ * Base interface for ALL platform resources
+ * Shared by both executable (agents, workflows) and non-executable (triggers, integrations, etc.) resources
+ */
+export interface ResourceDefinition {
+  /** Unique resource identifier */
+  resourceId: string
+
+  /** Display name */
+  name: string
+
+  /** Purpose and functionality description */
+  description: string
+
+  /** Version for change tracking and evolution */
+  version: string
+
+  /** Resource type discriminator */
+  type: ResourceType
+
+  /** Environment/deployment status */
+  status: ResourceStatus
+
   /** Graph links to Organization Model nodes */
   links?: ResourceLink[]
 
   /** Infrastructure category for filtering */
   category?: ResourceCategory
-
-  /** Whether the agent supports multi-turn sessions (agents only) */
-  sessionCapable?: boolean
-
-  /** Whether the resource is local (monorepo) or remote (externally deployed) */
-  origin?: 'local' | 'remote'
-
-  /** Whether this resource is archived and should be excluded from registration and deployment */
-  archived?: boolean
+
+  /** Whether the agent supports multi-turn sessions (agents only) */
+  sessionCapable?: boolean
+
+  /** Whether the resource is local (monorepo) or remote (externally deployed) */
+  origin?: 'local' | 'remote'
+
+  /** OM System membership, when backed by a Resource descriptor */
+  systemId?: string
+
+  /** Display metadata for the owning OM System */
+  system?: ResourceSystemSummary
+
+  /** Governance lifecycle status from the OM Resource descriptor */
+  governanceStatus?: ResourceGovernanceStatus
+
+  /** Whether this resource is archived and should be excluded from registration and deployment */
+  archived?: boolean
+}
+```
+
+### `RuntimeResourceDescriptor`
+
+```typescript
+export type RuntimeResourceDescriptor = Extract<ResourceEntry, { kind: 'workflow' | 'agent' | 'integration' }>
+```
+
+### `DescriptorBackedResourceDefinition`
+
+```typescript
+export type DescriptorBackedResourceDefinition<
+  TResource extends RuntimeResourceDescriptor = RuntimeResourceDescriptor
+> = Omit<ResourceDefinition, 'resourceId' | 'type'> & {
+  /** OM descriptor that owns canonical identity and governance metadata. */
+  resource: TResource
+  resourceId?: never
+  type?: never
 }
 ```
 
+### `BoundResourceDefinition`
+
+```typescript
+export type BoundResourceDefinition<TResource extends RuntimeResourceDescriptor = RuntimeResourceDescriptor> = Omit<
+  DescriptorBackedResourceDefinition<TResource>,
+  'resource'
+> &
+  ResourceDefinition & {
+    resource: TResource
+    resourceId: TResource['id']
+    type: TResource['kind']
+  }
+```
+
 ### `ResourceList`
 
 ```typescript
 /**
  * Resource list for organization
  * Returns ResourceDefinition metadata (not full definitions)
- */
-export interface ResourceList {
-  workflows: ResourceDefinition[]
-  agents: ResourceDefinition[]
-  total: number
-  organizationName: string
-  environment?: 'dev' | 'prod'
+ */
+export interface ResourceList {
+  workflows: ResourceDefinition[]
+  agents: ResourceDefinition[]
+  total: number
+  organizationName: string
+  environment?: 'dev' | 'prod'
 }
 ```
 
 ### `WebhookProviderType`
 
 ```typescript
-/** Webhook provider identifiers */
+/** Webhook provider identifiers */
 export type WebhookProviderType = 'cal-com' | 'stripe' | 'signature-api' | 'instantly' | 'apify' | 'test'
 ```
 
 ### `WebhookTriggerConfig`
 
 ```typescript
-/** Webhook trigger configuration */
-export interface WebhookTriggerConfig {
-  /** Provider identifier */
-  provider: WebhookProviderType
-  /** Event type for documentation (not used for matching - workflow handles routing) */
-  event?: string
-  /** Optional filtering (e.g., specific form ID for Fillout) */
-  filter?: Record<string, string>
-  /** References credential in credentials table for per-org webhook secrets */
-  credentialName?: string
+/** Webhook trigger configuration */
+export interface WebhookTriggerConfig {
+  /** Provider identifier */
+  provider: WebhookProviderType
+  /** Event type for documentation (not used for matching - workflow handles routing) */
+  event?: string
+  /** Optional filtering (e.g., specific form ID for Fillout) */
+  filter?: Record<string, string>
+  /** References credential in credentials table for per-org webhook secrets */
+  credentialName?: string
 }
 ```
 
 ### `ScheduleTriggerConfig`
 
 ```typescript
-/** Schedule trigger configuration */
-export interface ScheduleTriggerConfig {
-  /** Cron expression (e.g., '0 6 * * *') */
-  cron: string
-  /** Optional timezone (default: UTC) */
-  timezone?: string
+/** Schedule trigger configuration */
+export interface ScheduleTriggerConfig {
+  /** Cron expression (e.g., '0 6 * * *') */
+  cron: string
+  /** Optional timezone (default: UTC) */
+  timezone?: string
 }
 ```
 
 ### `EventTriggerConfig`
 
 ```typescript
-/** Event trigger configuration */
-export interface EventTriggerConfig {
-  /** Internal event type */
-  eventType: string
-  /** Event source */
-  source?: string
+/** Event trigger configuration */
+export interface EventTriggerConfig {
+  /** Internal event type */
+  eventType: string
+  /** Event source */
+  source?: string
 }
 ```
 
 ### `TriggerConfig`
 
 ```typescript
-/** Union of all trigger configs */
+/** Union of all trigger configs */
 export type TriggerConfig = WebhookTriggerConfig | ScheduleTriggerConfig | EventTriggerConfig
 ```
 
 ### `TriggerDefinition`
 
 ```typescript
-/**
- * Trigger metadata - entry points that initiate resource execution
- *
- * Triggers represent how executions start: webhooks from external services,
- * scheduled cron jobs, platform events, or manual user actions.
- *
- * BREAKING CHANGES (2025-11-30):
+/**
+ * Trigger metadata - entry points that initiate resource execution
+ *
+ * Triggers represent how executions start: webhooks from external services,
+ * scheduled cron jobs, platform events, or manual user actions.
+ *
+ * BREAKING CHANGES (2025-11-30):
  * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
- * - Field renames: `id` -> `resourceId` (inherited), `type` -> `triggerType`
- * - Relationship rename: `invokes` -> `triggers` (unified vocabulary)
- * - New required fields: `version` (inherited), `type: 'trigger'` (inherited)
- * - triggers object now includes `externalResources` option
- *
- * @example
- * // TriggerDefinition - metadata only
- * {
- *   resourceId: 'trigger-new-order',
- *   type: 'trigger',
- *   triggerType: 'webhook',
- *   name: 'New Order',
- *   description: 'Webhook from Shopify on new orders',
- *   version: '1.0.0',
- *   status: 'prod',
- *   webhookPath: '/webhooks/shopify/orders'
- * }
- *
- * // Relationships declared in ResourceRelationships (not on TriggerDefinition):
- * // relationships: {
- * //   'trigger-new-order': { triggers: { workflows: ['order-fulfillment-workflow'] } }
- * // }
- */
-export interface TriggerDefinition extends ResourceDefinition {
-  /** Resource type discriminator (narrowed from base union) */
-  type: 'trigger'
-
-  /** Trigger mechanism type (renamed from 'type' to avoid collision with base type discriminator) */
-  triggerType: 'webhook' | 'schedule' | 'manual' | 'event'
-
-  /** Type-specific configuration */
-  config?: TriggerConfig
-
-  // Legacy fields (deprecated, use config instead)
-  /** For webhook triggers: path like '/webhooks/shopify/orders' */
-  webhookPath?: string
-  /** For schedule triggers: cron expression like '0 6 * * *' */
-  schedule?: string
-  /** For event triggers: event type like 'low-stock-alert' */
-  eventType?: string
-
-  // NOTE: What this trigger starts is declared in ResourceRelationships, not here
-  // This prevents duplication - triggers are forward-declared in relationships
+ * - Field renames: `id` -> `resourceId` (inherited), `type` -> `triggerType`
+ * - Relationship rename: `invokes` -> `triggers` (unified vocabulary)
+ * - New required fields: `version` (inherited), `type: 'trigger'` (inherited)
+ * - triggers object now includes `externalResources` option
+ *
+ * @example
+ * // TriggerDefinition - metadata only
+ * {
+ *   resourceId: 'trigger-new-order',
+ *   type: 'trigger',
+ *   triggerType: 'webhook',
+ *   name: 'New Order',
+ *   description: 'Webhook from Shopify on new orders',
+ *   version: '1.0.0',
+ *   status: 'prod',
+ *   webhookPath: '/webhooks/shopify/orders'
+ * }
+ *
+ * // Relationships declared in ResourceRelationships (not on TriggerDefinition):
+ * // relationships: {
+ * //   'trigger-new-order': { triggers: { workflows: ['order-fulfillment-workflow'] } }
+ * // }
+ */
+export interface TriggerDefinition extends ResourceDefinition {
+  /** Resource type discriminator (narrowed from base union) */
+  type: 'trigger'
+
+  /** Trigger mechanism type (renamed from 'type' to avoid collision with base type discriminator) */
+  triggerType: 'webhook' | 'schedule' | 'manual' | 'event'
+
+  /** Type-specific configuration */
+  config?: TriggerConfig
+
+  // Legacy fields (deprecated, use config instead)
+  /** For webhook triggers: path like '/webhooks/shopify/orders' */
+  webhookPath?: string
+  /** For schedule triggers: cron expression like '0 6 * * *' */
+  schedule?: string
+  /** For event triggers: event type like 'low-stock-alert' */
+  eventType?: string
+
+  // NOTE: What this trigger starts is declared in ResourceRelationships, not here
+  // This prevents duplication - triggers are forward-declared in relationships
 }
 ```
 
 ### `IntegrationDefinition`
 
 ```typescript
-/**
- * Integration metadata - external service connections
- *
- * References credentials table for actual connection. No connection status
- * stored here (queried at runtime from credentials table).
- *
- * BREAKING CHANGES (2025-11-30):
+/**
+ * Integration metadata - external service connections
+ *
+ * References credentials table for actual connection. No connection status
+ * stored here (queried at runtime from credentials table).
+ *
+ * BREAKING CHANGES (2025-11-30):
  * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
- * - Field renames: `id` -> `resourceId` (inherited)
- * - New required field: `status` (inherited) - organizations must add status to all integrations
- * - New required field: `version` (inherited) - organizations must add version to all integrations
- * - New required field: `type: 'integration'` (inherited) - resource type discriminator
- *
- * @example
- * {
- *   resourceId: 'integration-shopify-prod',
- *   type: 'integration',
- *   provider: 'shopify',
- *   credentialName: 'shopify-prod',
- *   name: 'Shopify Production',
- *   description: 'E-commerce platform',
- *   version: '1.0.0',
- *   status: 'prod'
- * }
- */
-export interface IntegrationDefinition extends ResourceDefinition {
-  /** Resource type discriminator (narrowed from base union) */
-  type: 'integration'
-
-  /** Integration provider type */
-  provider: IntegrationType
-  /** References credentials table (e.g., 'shopify-prod', 'zendesk-api') */
-  credentialName: string
+ * - Field renames: `id` -> `resourceId` (inherited)
+ * - New required field: `status` (inherited) - organizations must add status to all integrations
+ * - New required field: `version` (inherited) - organizations must add version to all integrations
+ * - New required field: `type: 'integration'` (inherited) - resource type discriminator
+ *
+ * @example
+ * {
+ *   resourceId: 'integration-shopify-prod',
+ *   type: 'integration',
+ *   provider: 'shopify',
+ *   credentialName: 'shopify-prod',
+ *   name: 'Shopify Production',
+ *   description: 'E-commerce platform',
+ *   version: '1.0.0',
+ *   status: 'prod'
+ * }
+ */
+export interface IntegrationDefinition extends ResourceDefinition {
+  /** Resource type discriminator (narrowed from base union) */
+  type: 'integration'
+
+  /** OM descriptor that owns canonical identity and governance metadata. */
+  resource?: Extract<ResourceEntry, { kind: 'integration' }>
+
+  /** Integration provider type */
+  provider: IntegrationType
+  /** References credentials table (e.g., 'shopify-prod', 'zendesk-api') */
+  credentialName: string
 }
 ```
 
 ### `RelationshipDeclaration`
 
 ```typescript
-/**
- * Explicit resource relationship declaration
- *
- * Single-direction only - Command View derives reverse relationships.
- * Agents/workflows declare what they trigger and use.
- *
- * @example
- * {
- *   triggers: { workflows: ['order-fulfillment-workflow'] },
- *   uses: { integrations: ['integration-shopify-prod', 'integration-postgres'] }
- * }
- */
-export interface RelationshipDeclaration {
-  /** Resources this resource triggers */
-  triggers?: {
-    /** Agent resourceIds this resource triggers */
-    agents?: string[]
-    /** Workflow resourceIds this resource triggers */
-    workflows?: string[]
-  }
-  /** Integrations this resource uses */
-  uses?: {
-    /** Integration IDs this resource uses */
-    integrations?: string[]
-  }
+/**
+ * Explicit resource relationship declaration
+ *
+ * Single-direction only - Command View derives reverse relationships.
+ * Agents/workflows declare what they trigger and use.
+ *
+ * @example
+ * {
+ *   triggers: { workflows: ['order-fulfillment-workflow'] },
+ *   uses: { integrations: ['integration-shopify-prod', 'integration-postgres'] }
+ * }
+ */
+export interface RelationshipDeclaration {
+  /** Resources this resource triggers */
+  triggers?: {
+    /** Agent resourceIds this resource triggers */
+    agents?: string[]
+    /** Workflow resourceIds this resource triggers */
+    workflows?: string[]
+  }
+  /** Integrations this resource uses */
+  uses?: {
+    /** Integration IDs this resource uses */
+    integrations?: string[]
+  }
 }
 ```
 
 ### `ResourceRelationships`
 
 ```typescript
-/**
- * Resource relationships map
- * Maps resourceId to its relationship declarations
- *
- * @example
- * {
- *   'order-processor-agent': {
- *     triggers: { workflows: ['order-fulfillment-workflow'] },
- *     uses: { integrations: ['integration-shopify-prod'] }
- *   }
- * }
- */
+/**
+ * Resource relationships map
+ * Maps resourceId to its relationship declarations
+ *
+ * @example
+ * {
+ *   'order-processor-agent': {
+ *     triggers: { workflows: ['order-fulfillment-workflow'] },
+ *     uses: { integrations: ['integration-shopify-prod'] }
+ *   }
+ * }
+ */
 export type ResourceRelationships = Record<string, RelationshipDeclaration>
 ```
 
 ### `ExternalPlatform`
 
 ```typescript
-/**
- * External platform type
- * Supported third-party automation platforms
- */
+/**
+ * External platform type
+ * Supported third-party automation platforms
+ */
 export type ExternalPlatform = 'n8n' | 'make' | 'zapier' | 'other'
 ```
 
 ### `ExternalResourceDefinition`
 
 ```typescript
-/**
- * External automation resource metadata
- *
- * Represents workflows/automations running on third-party platforms
- * (n8n, Make, Zapier, etc.) for visualization in Command View.
- *
- * NOTE: This is metadata ONLY for visualization. No execution logic,
- * no API integration with external platforms, no status syncing.
- *
- * BREAKING CHANGES (2025-11-30):
+/**
+ * External automation resource metadata
+ *
+ * Represents workflows/automations running on third-party platforms
+ * (n8n, Make, Zapier, etc.) for visualization in Command View.
+ *
+ * NOTE: This is metadata ONLY for visualization. No execution logic,
+ * no API integration with external platforms, no status syncing.
+ *
+ * BREAKING CHANGES (2025-11-30):
  * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
- * - Field renames: `id` -> `resourceId` (inherited)
- * - New required field: `version` (inherited) - organizations must add version to all external resources
- * - New required field: `type: 'external'` (inherited) - resource type discriminator
- * - REMOVED FIELD: `triggeredBy` - per relationship-consolidation design, all relationships are forward-only declarations
- *
- * @example
- * {
- *   resourceId: 'external-n8n-order-sync',
- *   type: 'external',
- *   version: '1.0.0',
- *   platform: 'n8n',
- *   name: 'Shopify Order Sync',
- *   description: 'Legacy n8n workflow for syncing Shopify orders',
- *   status: 'prod',
- *   platformUrl: 'https://n8n.client.com/workflow/123',
- *   triggers: { workflows: ['order-fulfillment-workflow'] },
- *   uses: { integrations: ['integration-shopify-prod'] }
- * }
- */
-export interface ExternalResourceDefinition extends ResourceDefinition {
-  /** Resource type discriminator (narrowed from base union) */
-  type: 'external'
-
-  /** Platform type */
-  platform: ExternalPlatform
-
-  // Optional platform-specific metadata
-  /** Link to external platform (e.g., n8n workflow editor URL) */
-  platformUrl?: string
-  /** Platform's internal ID/reference */
-  externalId?: string
-
-  /** What this external resource triggers (external -> internal) */
-  triggers?: {
-    /** Elevasis workflow resourceIds this external automation triggers */
-    workflows?: string[]
-    /** Elevasis agent resourceIds this external automation triggers */
-    agents?: string[]
-  }
-
-  /** Integrations this external resource uses (shared credentials) */
-  uses?: {
-    /** Integration IDs this external automation uses */
-    integrations?: string[]
-  }
-
-  // NOTE: triggeredBy field removed - per relationship-consolidation design,
-  // all relationships are forward-only declarations. Graph edges are built
-  // from forward declarations only.
+ * - Field renames: `id` -> `resourceId` (inherited)
+ * - New required field: `version` (inherited) - organizations must add version to all external resources
+ * - New required field: `type: 'external'` (inherited) - resource type discriminator
+ * - REMOVED FIELD: `triggeredBy` - per relationship-consolidation design, all relationships are forward-only declarations
+ *
+ * @example
+ * {
+ *   resourceId: 'external-n8n-order-sync',
+ *   type: 'external',
+ *   version: '1.0.0',
+ *   platform: 'n8n',
+ *   name: 'Shopify Order Sync',
+ *   description: 'Legacy n8n workflow for syncing Shopify orders',
+ *   status: 'prod',
+ *   platformUrl: 'https://n8n.client.com/workflow/123',
+ *   triggers: { workflows: ['order-fulfillment-workflow'] },
+ *   uses: { integrations: ['integration-shopify-prod'] }
+ * }
+ */
+export interface ExternalResourceDefinition extends ResourceDefinition {
+  /** Resource type discriminator (narrowed from base union) */
+  type: 'external'
+
+  /** Platform type */
+  platform: ExternalPlatform
+
+  // Optional platform-specific metadata
+  /** Link to external platform (e.g., n8n workflow editor URL) */
+  platformUrl?: string
+  /** Platform's internal ID/reference */
+  externalId?: string
+
+  /** What this external resource triggers (external -> internal) */
+  triggers?: {
+    /** Elevasis workflow resourceIds this external automation triggers */
+    workflows?: string[]
+    /** Elevasis agent resourceIds this external automation triggers */
+    agents?: string[]
+  }
+
+  /** Integrations this external resource uses (shared credentials) */
+  uses?: {
+    /** Integration IDs this external automation uses */
+    integrations?: string[]
+  }
+
+  // NOTE: triggeredBy field removed - per relationship-consolidation design,
+  // all relationships are forward-only declarations. Graph edges are built
+  // from forward declarations only.
 }
 ```
 
 ### `HumanCheckpointDefinition`
 
 ```typescript
-/**
- * Human Checkpoint definition - human decision points in automation
- *
- * Represents where human judgment is deployed in the automation landscape.
- * Tasks with matching command_queue_group are routed to this checkpoint.
- *
- * BREAKING CHANGES (2025-11-30):
+/**
+ * Human Checkpoint definition - human decision points in automation
+ *
+ * Represents where human judgment is deployed in the automation landscape.
+ * Tasks with matching command_queue_group are routed to this checkpoint.
+ *
+ * BREAKING CHANGES (2025-11-30):
  * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
- * - Field renames: `id` -> `resourceId` (inherited)
- * - description is now REQUIRED (was optional) - organizations must add description to all human checkpoints
- * - New required field: `version` (inherited) - organizations must add version to all human checkpoints
- * - New required field: `type: 'human'` (inherited) - resource type discriminator
- *
- * @example
- * {
- *   resourceId: 'sales-approval',
- *   type: 'human',
- *   name: 'Sales Approval Queue',
- *   description: 'High-value order approvals for sales team',
- *   version: '1.0.0',
- *   status: 'prod',
- *   requestedBy: { agents: ['order-processor-agent'] },
- *   routesTo: { agents: ['order-fulfillment-agent'] }
- * }
- */
-export interface HumanCheckpointDefinition extends ResourceDefinition {
-  /** Resource type discriminator (narrowed from base union) */
-  type: 'human'
-
-  /** Resources that create tasks for this checkpoint */
-  requestedBy?: {
-    /** Agent resourceIds that request approval here */
-    agents?: string[]
-    /** Workflow resourceIds that request approval here */
-    workflows?: string[]
-  }
-
-  /** Resources that receive approved decisions */
-  routesTo?: {
-    /** Agent resourceIds that handle approved tasks */
-    agents?: string[]
-    /** Workflow resourceIds that handle approved tasks */
-    workflows?: string[]
-  }
+ * - Field renames: `id` -> `resourceId` (inherited)
+ * - description is now REQUIRED (was optional) - organizations must add description to all human checkpoints
+ * - New required field: `version` (inherited) - organizations must add version to all human checkpoints
+ * - New required field: `type: 'human'` (inherited) - resource type discriminator
+ *
+ * @example
+ * {
+ *   resourceId: 'sales-approval',
+ *   type: 'human',
+ *   name: 'Sales Approval Queue',
+ *   description: 'High-value order approvals for sales team',
+ *   version: '1.0.0',
+ *   status: 'prod',
+ *   requestedBy: { agents: ['order-processor-agent'] },
+ *   routesTo: { agents: ['order-fulfillment-agent'] }
+ * }
+ */
+export interface HumanCheckpointDefinition extends ResourceDefinition {
+  /** Resource type discriminator (narrowed from base union) */
+  type: 'human'
+
+  /** Resources that create tasks for this checkpoint */
+  requestedBy?: {
+    /** Agent resourceIds that request approval here */
+    agents?: string[]
+    /** Workflow resourceIds that request approval here */
+    workflows?: string[]
+  }
+
+  /** Resources that receive approved decisions */
+  routesTo?: {
+    /** Agent resourceIds that handle approved tasks */
+    agents?: string[]
+    /** Workflow resourceIds that handle approved tasks */
+    workflows?: string[]
+  }
 }
 ```
 
@@ -835,6 +1000,11 @@ export interface HumanCheckpointDefinition extends ResourceDefinition {
 export interface DeploymentSpec {
   /** Deployment version (semver) */
   version: string
+  /** Optional Organization Model governance catalog used for OM-code validation */
+  organizationModel?: {
+    systems?: OrganizationModelSystems
+    resources?: OrganizationModelResources
+  }
   /** Workflow definitions */
   workflows?: WorkflowDefinition[]
   /** Agent definitions */
@@ -1155,6 +1325,9 @@ export const DealTaskIdParamsSchema = z.object({
 export const ListDealsQuerySchema = z
   .object({
     stage: DealStageSchema.optional(),
+    list: UuidSchema.optional(),
+    batch: z.string().trim().min(1).max(255).optional(),
+    staleSince: z.string().datetime().optional(),
     search: z.string().optional(),
     limit: z.coerce.number().int().positive().default(50),
     offset: z.coerce.number().int().min(0).default(0)
@@ -1300,6 +1473,7 @@ export const DealListItemSchema = z.object({
   // acq_deals columns
   id: z.string(),
   organization_id: z.string(),
+  client_id: z.string().nullable().optional(),
   contact_id: z.string().nullable(),
   contact_email: z.string(),
   pipeline_key: z.string(),
@@ -1348,7 +1522,8 @@ export const DealListResponseSchema = z.object({
  * Additive fields keep existing DealListItem callers compatible.
  */
 export const DealDetailResponseSchema = DealListItemSchema.extend({
-  conversation: DealConversationSchema
+  conversation: DealConversationSchema,
+  lineage: DealLineageSchema.optional()
 })
 ```
 
@@ -1437,6 +1612,10 @@ export const DealSchemas = {
   DealSummaryResponse: DealSummaryResponseSchema,
   DealLookupResponse: DealLookupResponseSchema,
   ConversationMessage: ConversationMessageSchema,
+  DealLineageListRef: DealLineageListRefSchema,
+  DealLineageProjectRef: DealLineageProjectRefSchema,
+  DealLineageClientRef: DealLineageClientRefSchema,
+  DealLineage: DealLineageSchema,
   DealDetailResponse: DealDetailResponseSchema,
   DealNoteResponse: DealNoteResponseSchema,
   DealNoteListResponse: DealNoteListResponseSchema,
@@ -2093,6 +2272,7 @@ export const ListContactsQuerySchema = z
 export const CreateCompanyRequestSchema = z
   .object({
     name: z.string().trim().min(1).max(255),
+    clientId: UuidSchema.nullable().optional(),
     domain: z.string().trim().min(1).max(255).optional(),
     linkedinUrl: z.string().trim().url().optional(),
     website: z.string().trim().url().optional(),
@@ -2115,6 +2295,7 @@ export const CreateCompanyRequestSchema = z
 export const UpdateCompanyRequestSchema = z
   .object({
     name: z.string().trim().min(1).max(255).optional(),
+    clientId: UuidSchema.nullable().optional(),
     domain: z.string().trim().min(1).max(255).optional(),
     linkedinUrl: z.string().trim().url().optional(),
     website: z.string().trim().url().optional(),
@@ -2136,6 +2317,7 @@ export const UpdateCompanyRequestSchema = z
   .refine(
     (data) =>
       data.name !== undefined ||
+      data.clientId !== undefined ||
       data.domain !== undefined ||
       data.linkedinUrl !== undefined ||
       data.website !== undefined ||
@@ -2164,6 +2346,7 @@ export const UpdateCompanyRequestSchema = z
 export const CreateContactRequestSchema = z
   .object({
     email: z.string().trim().email(),
+    clientId: UuidSchema.nullable().optional(),
     companyId: UuidSchema.optional(),
     firstName: z.string().trim().min(1).max(255).optional(),
     lastName: z.string().trim().min(1).max(255).optional(),
@@ -2183,6 +2366,7 @@ export const CreateContactRequestSchema = z
 export const UpdateContactRequestSchema = z
   .object({
     companyId: UuidSchema.optional(),
+    clientId: UuidSchema.nullable().optional(),
     emailValid: AcqEmailValidSchema.optional(),
     firstName: z.string().trim().min(1).max(255).optional(),
     lastName: z.string().trim().min(1).max(255).optional(),
@@ -2200,6 +2384,7 @@ export const UpdateContactRequestSchema = z
   .refine(
     (data) =>
       data.companyId !== undefined ||
+      data.clientId !== undefined ||
       data.emailValid !== undefined ||
       data.firstName !== undefined ||
       data.lastName !== undefined ||
@@ -2224,6 +2409,7 @@ export const UpdateContactRequestSchema = z
 export const AcqCompanyResponseSchema = z.object({
   id: z.string(),
   organizationId: z.string(),
+  clientId: z.string().nullable().optional(),
   name: z.string(),
   domain: z.string().nullable(),
   linkedinUrl: z.string().nullable(),
@@ -2290,6 +2476,7 @@ export const AcqContactCompanySummarySchema = z.object({
 export const AcqContactResponseSchema = z.object({
   id: z.string(),
   organizationId: z.string(),
+  clientId: z.string().nullable().optional(),
   companyId: z.string().nullable(),
   email: z.string(),
   emailValid: AcqEmailValidSchema.nullable(),
@@ -2518,6 +2705,8 @@ export const AcqListSchemas = {
   ListTelemetry: ListTelemetrySchema,
 
   // Requests
+  ListReadQuery: ListReadQuerySchema,
+  GetListQuery: GetListQuerySchema,
   CreateListRequest: CreateListRequestSchema,
   UpdateListRequest: UpdateListRequestSchema,
   UpdateListStatusRequest: UpdateListStatusRequestSchema,
@@ -2529,7 +2718,11 @@ export const AcqListSchemas = {
 
   // Responses
   AcqListResponse: AcqListResponseSchema,
+  AcqListDetailResponse: AcqListDetailResponseSchema,
   AcqListListResponse: AcqListListResponseSchema,
+  AcqListDealRef: AcqListDealRefSchema,
+  AcqListLineage: AcqListLineageSchema,
+  AcqListStatusResponse: AcqListStatusResponseSchema,
   ListTelemetryResponse: ListTelemetryResponseSchema,
   ListTelemetryListResponse: ListTelemetryListResponseSchema,
   ListExecutionsResponse: ListExecutionsResponseSchema,
@@ -2549,9 +2742,14 @@ export const AcqSubstrateSchemas = {
 
   // List members
   ListMembersQuery: ListMembersQuerySchema,
+  ListRecordsQuery: ListRecordsQuerySchema,
   MemberIdParams: MemberIdParamsSchema,
   AcqListMemberResponse: AcqListMemberResponseSchema,
   AcqListMembersResponse: AcqListMembersResponseSchema,
+  AcqListCompanyRecordRow: AcqListCompanyRecordRowSchema,
+  AcqListContactRecordRow: AcqListContactRecordRowSchema,
+  ListRecordRow: ListRecordRowSchema,
+  ListRecordsResponse: ListRecordsResponseSchema,
 
   // List companies
   ListCompanyIdParams: ListCompanyIdParamsSchema,
@@ -2709,7 +2907,7 @@ export const ACQ_LIST_COMPANIES_LEAD_GEN_PIPELINE: StatefulPipelineDefinition =
     {
       stageKey: 'outreach',
       label: 'Outreach',
-      states: [PENDING_STATE]
+      states: [PENDING_STATE, { stateKey: 'uploaded', label: 'Uploaded' }]
     },
     {
       stageKey: 'prospecting',
@@ -3355,8 +3553,8 @@ export const OrgKnowledgeNodeSchema = z.object({
   skills: z.array(KnowledgeSkillBindingSchema).optional(),
   /** Domain key used to derive fast graph->skill registries. */
   domain: KnowledgeDomainBindingSchema.optional(),
-  /** Identifiers of the roles or members who own this knowledge node. */
-  ownerIds: z.array(ModelIdSchema).default([]),
+  /** Role identifiers that own this knowledge node. */
+  ownerIds: z.array(RoleIdSchema).default([]),
   /** ISO date string (YYYY-MM-DD or full ISO 8601) of last meaningful update. */
   updatedAt: z.string().trim().min(1).max(50)
 })