@elevasis/sdk 1.21.0 → 1.22.1

package/dist/cli.cjs

@@ -36613,73 +36613,78 @@ var DateRangeSchema = external_exports.object({
 
 // ../core/src/organization-model/icons.ts
 var ORGANIZATION_MODEL_ICON_TOKENS = [
-  "nav.dashboard",
-  "nav.calendar",
-  "nav.sales",
-  "nav.crm",
-  "nav.lead-gen",
-  "nav.projects",
-  "nav.operations",
-  "nav.monitoring",
-  "nav.knowledge",
-  "nav.settings",
-  "nav.admin",
-  "nav.archive",
-  "knowledge.playbook",
-  "knowledge.strategy",
-  "knowledge.reference",
-  "feature.dashboard",
-  "feature.calendar",
-  "feature.business",
-  "feature.sales",
-  "feature.crm",
-  "feature.finance",
-  "feature.lead-gen",
-  "feature.platform",
-  "feature.projects",
-  "feature.operations",
-  "feature.knowledge",
-  "feature.monitoring",
-  "feature.settings",
-  "feature.admin",
-  "feature.archive",
-  "feature.seo",
-  "resource.agent",
-  "resource.workflow",
-  "resource.integration",
-  "resource.database",
-  "resource.user",
-  "resource.team",
-  "integration.gmail",
-  "integration.google-sheets",
-  "integration.attio",
-  "surface.dashboard",
-  "surface.calendar",
-  "surface.overview",
-  "surface.command-view",
-  "surface.command-queue",
-  "surface.pipeline",
-  "surface.lists",
-  "surface.resources",
-  "surface.settings",
-  "status.success",
-  "status.error",
-  "status.warning",
-  "status.info",
-  "status.pending",
-  "action.approve",
-  "action.reject",
-  "action.retry",
-  "action.edit",
-  "action.view",
-  "action.launch",
-  "action.message",
-  "action.escalate",
-  "action.promote",
-  "action.submit",
-  "action.email"
+  // Navigation / app areas
+  "dashboard",
+  "calendar",
+  "sales",
+  "crm",
+  "lead-gen",
+  "projects",
+  "operations",
+  "monitoring",
+  "knowledge",
+  "settings",
+  "admin",
+  "archive",
+  "business",
+  "finance",
+  "platform",
+  "seo",
+  // Knowledge kinds
+  "playbook",
+  "strategy",
+  "reference",
+  // Resource kinds
+  "agent",
+  "workflow",
+  "integration",
+  "database",
+  "user",
+  "team",
+  // Integration specifics
+  "gmail",
+  "google-sheets",
+  "attio",
+  // Surface / UI views
+  "overview",
+  "command-view",
+  "command-queue",
+  "pipeline",
+  "lists",
+  "resources",
+  // Actions
+  "approve",
+  "reject",
+  "retry",
+  "edit",
+  "view",
+  "launch",
+  "message",
+  "escalate",
+  "promote",
+  "submit",
+  "email",
+  // Status
+  "success",
+  "error",
+  "warning",
+  "info",
+  "pending",
+  // OM / UI group icons
+  "bolt",
+  "building",
+  "briefcase",
+  "apps",
+  "graph",
+  "shield",
+  "users",
+  "chart-bar",
+  "search"
 ];
-var CustomIconTokenSchema = external_exports.string().trim().max(80).regex(/^custom\.[a-z0-9]+(?:[-._][a-z0-9]+)*$/, "Custom icon tokens must start with custom.");
+var CustomIconTokenSchema = external_exports.string().trim().max(80).regex(
+  /^custom\.[a-z0-9]+(?:[-._][a-z0-9]+)*$/,
+  'Custom icon tokens must start with "custom." followed by lowercase alphanumeric segments'
+);
 var OrganizationModelBuiltinIconTokenSchema = external_exports.enum(ORGANIZATION_MODEL_ICON_TOKENS);
 var OrganizationModelIconTokenSchema = external_exports.union([
   OrganizationModelBuiltinIconTokenSchema,
@@ -37041,7 +37046,99 @@ var LEAD_GEN_ACTION_ENTRIES = Object.fromEntries(
     return [parsed.id, parsed];
   })
 );
-var DEFAULT_ORGANIZATION_MODEL_ACTIONS = LEAD_GEN_ACTION_ENTRIES;
+var CRM_ACTION_ENTRY_INPUTS = [
+  {
+    id: "send_reply",
+    order: 210,
+    label: "Send Reply",
+    description: "Send a contextual reply for an active CRM deal.",
+    scope: { domain: "sales" },
+    resourceId: "crm-send-reply-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "send_link",
+    order: 220,
+    label: "Send Booking Link",
+    description: "Send a booking link to move a deal toward a scheduled call.",
+    scope: { domain: "sales" },
+    resourceId: "crm-send-booking-link-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "send_nudge",
+    order: 230,
+    label: "Send Nudge",
+    description: "Send a follow-up nudge for a stalled CRM deal.",
+    scope: { domain: "sales" },
+    resourceId: "crm-send-nudge-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "rebook",
+    order: 240,
+    label: "Rebook",
+    description: "Rebook a missed or rescheduled CRM appointment.",
+    scope: { domain: "sales" },
+    resourceId: "crm-rebook-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "move_to_proposal",
+    order: 250,
+    label: "Move to Proposal",
+    description: "Advance a qualified CRM deal into the proposal stage.",
+    scope: { domain: "sales" },
+    resourceId: "move_to_proposal-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "move_to_closing",
+    order: 260,
+    label: "Move to Closing",
+    description: "Advance a proposal-stage CRM deal into closing.",
+    scope: { domain: "sales" },
+    resourceId: "move_to_closing-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "move_to_closed_won",
+    order: 270,
+    label: "Close Won",
+    description: "Mark a CRM deal as closed won.",
+    scope: { domain: "sales" },
+    resourceId: "move_to_closed_won-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "move_to_closed_lost",
+    order: 280,
+    label: "Close Lost",
+    description: "Mark a CRM deal as closed lost.",
+    scope: { domain: "sales" },
+    resourceId: "move_to_closed_lost-workflow",
+    affects: ["crm.deal"]
+  },
+  {
+    id: "move_to_nurturing",
+    order: 290,
+    label: "Move to Nurturing",
+    description: "Move a CRM deal into nurturing for future follow-up.",
+    scope: { domain: "sales" },
+    resourceId: "move_to_nurturing-workflow",
+    affects: ["crm.deal"]
+  }
+];
+var CRM_ACTION_ENTRIES = Object.fromEntries(
+  CRM_ACTION_ENTRY_INPUTS.map((action) => {
+    const parsed = ActionSchema.parse(action);
+    return [parsed.id, parsed];
+  })
+);
+var DEFAULT_ORGANIZATION_MODEL_ACTIONS = {
+  ...LEAD_GEN_ACTION_ENTRIES,
+  ...CRM_ACTION_ENTRIES
+};
 
 // ../core/src/organization-model/content-kinds/types.ts
 var ContentNodeBaseSchema = external_exports.object({
@@ -37084,6 +37181,398 @@ var ExtensionNodeSchema = external_exports.object({
   data: external_exports.record(external_exports.string(), external_exports.unknown()).optional().meta({ label: "Data" })
 });
 
+// ../core/src/organization-model/ontology.ts
+var OntologyKindSchema = external_exports.enum([
+  "object",
+  "link",
+  "action",
+  "catalog",
+  "event",
+  "interface",
+  "value-type",
+  "property",
+  "group",
+  "surface"
+]);
+var SYSTEM_PATH_PATTERN = "[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9][a-z0-9-]*)*";
+var LOCAL_ID_PATTERN = "[a-z0-9][a-z0-9._-]*";
+var ONTOLOGY_ID_PATTERN = `^(global|${SYSTEM_PATH_PATTERN}):(${OntologyKindSchema.options.join("|")})\\/(${LOCAL_ID_PATTERN})$`;
+var ONTOLOGY_ID_REGEX = new RegExp(ONTOLOGY_ID_PATTERN);
+var OntologyIdSchema = external_exports.string().trim().min(1).max(300).regex(
+  ONTOLOGY_ID_REGEX,
+  "Ontology IDs must use <system-path>:<kind>/<local-id> or global:<kind>/<local-id>"
+);
+function parseOntologyId(id) {
+  const normalized = OntologyIdSchema.parse(id);
+  const match = ONTOLOGY_ID_REGEX.exec(normalized);
+  if (match === null) {
+    throw new Error(`Invalid ontology ID "${id}"`);
+  }
+  return {
+    id: normalized,
+    scope: match[1],
+    kind: match[2],
+    localId: match[3],
+    isGlobal: match[1] === "global"
+  };
+}
+function formatOntologyId(input) {
+  return OntologyIdSchema.parse(`${input.scope}:${input.kind}/${input.localId}`);
+}
+var OntologyReferenceListSchema = external_exports.array(OntologyIdSchema).default([]).optional();
+var OntologyRecordBaseSchema = external_exports.object({
+  id: OntologyIdSchema,
+  label: external_exports.string().trim().min(1).max(160).optional(),
+  description: external_exports.string().trim().min(1).max(2e3).optional(),
+  ownerSystemId: external_exports.string().trim().min(1).max(200).optional(),
+  aliases: external_exports.array(OntologyIdSchema).optional()
+}).passthrough();
+var OntologyObjectTypeSchema = OntologyRecordBaseSchema.extend({
+  properties: external_exports.record(external_exports.string().trim().min(1).max(200), external_exports.unknown()).optional(),
+  storage: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+});
+var OntologyLinkTypeSchema = OntologyRecordBaseSchema.extend({
+  from: OntologyIdSchema,
+  to: OntologyIdSchema,
+  cardinality: external_exports.string().trim().min(1).max(80).optional(),
+  via: external_exports.string().trim().min(1).max(255).optional()
+});
+var OntologyActionTypeSchema = OntologyRecordBaseSchema.extend({
+  actsOn: OntologyReferenceListSchema,
+  input: external_exports.record(external_exports.string().trim().min(1).max(200), external_exports.unknown()).optional(),
+  effects: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional()
+});
+var OntologyCatalogTypeSchema = OntologyRecordBaseSchema.extend({
+  kind: external_exports.string().trim().min(1).max(120).optional(),
+  appliesTo: OntologyIdSchema.optional(),
+  entries: external_exports.record(external_exports.string().trim().min(1).max(200), external_exports.unknown()).optional()
+});
+var OntologyEventTypeSchema = OntologyRecordBaseSchema.extend({
+  payload: external_exports.record(external_exports.string().trim().min(1).max(200), external_exports.unknown()).optional()
+});
+var OntologyInterfaceTypeSchema = OntologyRecordBaseSchema.extend({
+  properties: external_exports.record(external_exports.string().trim().min(1).max(200), external_exports.unknown()).optional()
+});
+var OntologyValueTypeSchema = OntologyRecordBaseSchema.extend({
+  primitive: external_exports.string().trim().min(1).max(120).optional()
+});
+var OntologySharedPropertySchema = OntologyRecordBaseSchema.extend({
+  valueType: OntologyIdSchema.optional(),
+  searchable: external_exports.boolean().optional(),
+  pii: external_exports.boolean().optional()
+});
+var OntologyGroupSchema = OntologyRecordBaseSchema.extend({
+  members: OntologyReferenceListSchema
+});
+var OntologySurfaceTypeSchema = OntologyRecordBaseSchema.extend({
+  route: external_exports.string().trim().min(1).max(500).optional()
+});
+var OntologyScopeSchema = external_exports.object({
+  objectTypes: external_exports.record(OntologyIdSchema, OntologyObjectTypeSchema).default({}).optional(),
+  linkTypes: external_exports.record(OntologyIdSchema, OntologyLinkTypeSchema).default({}).optional(),
+  actionTypes: external_exports.record(OntologyIdSchema, OntologyActionTypeSchema).default({}).optional(),
+  catalogTypes: external_exports.record(OntologyIdSchema, OntologyCatalogTypeSchema).default({}).optional(),
+  eventTypes: external_exports.record(OntologyIdSchema, OntologyEventTypeSchema).default({}).optional(),
+  interfaceTypes: external_exports.record(OntologyIdSchema, OntologyInterfaceTypeSchema).default({}).optional(),
+  valueTypes: external_exports.record(OntologyIdSchema, OntologyValueTypeSchema).default({}).optional(),
+  sharedProperties: external_exports.record(OntologyIdSchema, OntologySharedPropertySchema).default({}).optional(),
+  groups: external_exports.record(OntologyIdSchema, OntologyGroupSchema).default({}).optional(),
+  surfaces: external_exports.record(OntologyIdSchema, OntologySurfaceTypeSchema).default({}).optional()
+}).default({});
+var DEFAULT_ONTOLOGY_SCOPE = {
+  valueTypes: {
+    "global:value-type/uuid": {
+      id: "global:value-type/uuid",
+      label: "UUID",
+      primitive: "string"
+    },
+    "global:value-type/text": {
+      id: "global:value-type/text",
+      label: "Text",
+      primitive: "string"
+    },
+    "global:value-type/url": {
+      id: "global:value-type/url",
+      label: "URL",
+      primitive: "string"
+    },
+    "global:value-type/email": {
+      id: "global:value-type/email",
+      label: "Email",
+      primitive: "string"
+    }
+  }
+};
+var SCOPE_KIND = {
+  objectTypes: "object",
+  linkTypes: "link",
+  actionTypes: "action",
+  catalogTypes: "catalog",
+  eventTypes: "event",
+  interfaceTypes: "interface",
+  valueTypes: "value-type",
+  sharedProperties: "property",
+  groups: "group",
+  surfaces: "surface"
+};
+var SCOPE_KEYS = Object.keys(SCOPE_KIND);
+function ontologyGraphNodeId(id) {
+  return `ontology:${OntologyIdSchema.parse(id)}`;
+}
+function listResolvedOntologyRecords(index) {
+  return SCOPE_KEYS.flatMap((scopeKey) => {
+    const kind = SCOPE_KIND[scopeKey];
+    return Object.entries(index[scopeKey]).sort(([leftId], [rightId]) => leftId.localeCompare(rightId)).map(([id, record2]) => ({
+      id,
+      kind,
+      record: record2
+    }));
+  });
+}
+function originFromContext(context) {
+  return {
+    kind: context.kind,
+    source: context.source,
+    path: context.path,
+    ...context.systemPath !== void 0 ? { systemPath: context.systemPath } : {},
+    ...context.legacyId !== void 0 ? { legacyId: context.legacyId } : {}
+  };
+}
+function createEmptyIndex() {
+  return {
+    objectTypes: {},
+    linkTypes: {},
+    actionTypes: {},
+    catalogTypes: {},
+    eventTypes: {},
+    interfaceTypes: {},
+    valueTypes: {},
+    sharedProperties: {},
+    groups: {},
+    surfaces: {}
+  };
+}
+function sortResolvedOntologyIndex(index) {
+  const sorted = createEmptyIndex();
+  for (const scopeKey of SCOPE_KEYS) {
+    const target = sorted[scopeKey];
+    for (const [id, record2] of Object.entries(index[scopeKey]).sort(
+      ([leftId], [rightId]) => leftId.localeCompare(rightId)
+    )) {
+      target[id] = record2;
+    }
+  }
+  return sorted;
+}
+function childSystemsOf(system) {
+  return system.systems ?? system.subsystems ?? {};
+}
+function addRecord(index, diagnostics, sourcesById, scopeKey, record2, context) {
+  let parsed;
+  try {
+    parsed = parseOntologyId(record2.id);
+  } catch {
+    diagnostics.push({
+      code: "invalid_ontology_id",
+      message: `Invalid ontology ID "${record2.id}" from ${context.source} at ${context.path.join(".")}`,
+      id: record2.id,
+      path: context.path,
+      source: context.source,
+      origin: originFromContext(context)
+    });
+    return;
+  }
+  const expectedKind = SCOPE_KIND[scopeKey];
+  if (parsed.kind !== expectedKind) {
+    diagnostics.push({
+      code: "ontology_kind_mismatch",
+      message: `Ontology ID "${record2.id}" has kind "${parsed.kind}" but was authored in ${scopeKey} (${expectedKind}) at ${context.path.join(".")}`,
+      id: record2.id,
+      path: context.path,
+      source: context.source,
+      origin: originFromContext(context)
+    });
+    return;
+  }
+  const existing = sourcesById.get(parsed.id);
+  if (existing !== void 0) {
+    diagnostics.push({
+      code: "duplicate_ontology_id",
+      message: `Duplicate ontology ID "${parsed.id}" from ${context.source} at ${context.path.join(".")} conflicts with ${existing.source} at ${existing.path.join(".")}`,
+      id: parsed.id,
+      path: context.path,
+      source: context.source,
+      origin: originFromContext(context),
+      existingSource: existing.source,
+      existingOrigin: originFromContext(existing)
+    });
+    return;
+  }
+  sourcesById.set(parsed.id, context);
+  index[scopeKey][parsed.id] = {
+    ...record2,
+    origin: originFromContext(context)
+  };
+}
+function addScope(index, diagnostics, sourcesById, scope, source, path3) {
+  if (scope === void 0) return;
+  for (const scopeKey of SCOPE_KEYS) {
+    const records = scope[scopeKey] ?? {};
+    for (const [key, record2] of Object.entries(records)) {
+      addRecord(index, diagnostics, sourcesById, scopeKey, record2, {
+        source,
+        path: [...path3, scopeKey, key],
+        kind: "authored",
+        systemPath: source.startsWith("system:") ? source.slice("system:".length, -".ontology".length) : void 0
+      });
+    }
+  }
+}
+function legacyObjectId(entity) {
+  return formatOntologyId({ scope: entity.ownedBySystemId, kind: "object", localId: entity.id });
+}
+function legacyActionOwner(action, entities) {
+  const firstAffectedEntityId = action.affects?.find((entityId) => entities[entityId] !== void 0);
+  if (firstAffectedEntityId !== void 0) {
+    return entities[firstAffectedEntityId].ownedBySystemId;
+  }
+  if (typeof action.scope === "object") {
+    return action.scope.domain;
+  }
+  return "global";
+}
+function addLegacyEntityProjections(index, diagnostics, sourcesById, entities) {
+  for (const entity of Object.values(entities)) {
+    const objectType = {
+      id: legacyObjectId(entity),
+      label: entity.label,
+      description: entity.description,
+      ownerSystemId: entity.ownedBySystemId,
+      ...entity.table !== void 0 ? {
+        storage: {
+          kind: "table",
+          table: entity.table
+        }
+      } : {},
+      ...entity.rowSchema !== void 0 ? { rowSchema: entity.rowSchema } : {},
+      ...entity.stateCatalogId !== void 0 ? { stateCatalogId: entity.stateCatalogId } : {}
+    };
+    addRecord(index, diagnostics, sourcesById, "objectTypes", objectType, {
+      source: "legacy.entities",
+      path: ["entities", entity.id],
+      kind: "projected",
+      systemPath: entity.ownedBySystemId,
+      legacyId: entity.id
+    });
+    entity.links?.forEach((link, linkIndex) => {
+      const targetEntity = entities[link.toEntity];
+      if (targetEntity === void 0) return;
+      const linkType = {
+        id: formatOntologyId({
+          scope: entity.ownedBySystemId,
+          kind: "link",
+          localId: `${entity.id}-${link.toEntity}-${linkIndex}`
+        }),
+        label: link.label ?? link.kind,
+        ownerSystemId: entity.ownedBySystemId,
+        from: legacyObjectId(entity),
+        to: legacyObjectId(targetEntity),
+        cardinality: link.kind,
+        ...link.via !== void 0 ? { via: link.via } : {}
+      };
+      addRecord(index, diagnostics, sourcesById, "linkTypes", linkType, {
+        source: "legacy.entities.links",
+        path: ["entities", entity.id, "links", linkIndex],
+        kind: "projected",
+        systemPath: entity.ownedBySystemId,
+        legacyId: `${entity.id}.links.${linkIndex}`
+      });
+    });
+  }
+}
+function addLegacyActionProjections(index, diagnostics, sourcesById, actions, entities) {
+  for (const action of Object.values(actions)) {
+    const ownerSystemId = legacyActionOwner(action, entities);
+    const actionType = {
+      id: formatOntologyId({ scope: ownerSystemId, kind: "action", localId: action.id }),
+      label: action.label,
+      description: action.description,
+      ownerSystemId,
+      actsOn: action.affects?.map((entityId) => entities[entityId] ? legacyObjectId(entities[entityId]) : void 0).filter((id) => id !== void 0),
+      ...action.resourceId !== void 0 ? { resourceId: action.resourceId } : {},
+      ...action.invocations !== void 0 ? { invocations: action.invocations } : {},
+      ...action.lifecycle !== void 0 ? { lifecycle: action.lifecycle } : {},
+      legacyActionId: action.id
+    };
+    addRecord(index, diagnostics, sourcesById, "actionTypes", actionType, {
+      source: "legacy.actions",
+      path: ["actions", action.id],
+      kind: "projected",
+      systemPath: ownerSystemId,
+      legacyId: action.id
+    });
+  }
+}
+function addSystemContentProjections(index, diagnostics, sourcesById, systemPath, system, schemaPath) {
+  const content = system.content ?? {};
+  for (const [localId, node] of Object.entries(content)) {
+    if (node.kind !== "schema") continue;
+    const entries = Object.fromEntries(
+      Object.entries(content).filter(([, candidate]) => candidate.parentContentId === localId).map(([entryId, candidate]) => [
+        entryId,
+        {
+          label: candidate.label ?? entryId,
+          type: candidate.type,
+          ...candidate.description !== void 0 ? { description: candidate.description } : {},
+          ...candidate.data !== void 0 ? candidate.data : {}
+        }
+      ])
+    );
+    const catalogType = {
+      id: formatOntologyId({ scope: systemPath, kind: "catalog", localId }),
+      label: node.label ?? localId,
+      description: node.description,
+      ownerSystemId: systemPath,
+      kind: node.type,
+      ...typeof node.data?.["entityId"] === "string" ? { appliesTo: formatOntologyId({ scope: systemPath, kind: "object", localId: node.data["entityId"] }) } : {},
+      ...Object.keys(entries).length > 0 ? { entries } : {},
+      ...node.data !== void 0 ? { data: node.data } : {}
+    };
+    addRecord(index, diagnostics, sourcesById, "catalogTypes", catalogType, {
+      source: "legacy.system.content",
+      path: [...schemaPath, "content", localId],
+      kind: "projected",
+      systemPath,
+      legacyId: `${systemPath}:${localId}`
+    });
+  }
+}
+function addSystemScopes(index, diagnostics, sourcesById, systems, prefix, schemaPath) {
+  for (const [key, system] of Object.entries(systems)) {
+    const systemPath = prefix ? `${prefix}.${key}` : key;
+    const currentPath = [...schemaPath, key];
+    addScope(index, diagnostics, sourcesById, system.ontology, `system:${systemPath}.ontology`, [
+      ...currentPath,
+      "ontology"
+    ]);
+    addSystemContentProjections(index, diagnostics, sourcesById, systemPath, system, currentPath);
+    addSystemScopes(index, diagnostics, sourcesById, childSystemsOf(system), systemPath, [
+      ...currentPath,
+      system.systems !== void 0 ? "systems" : "subsystems"
+    ]);
+  }
+}
+function compileOrganizationOntology(model) {
+  const ontology = createEmptyIndex();
+  const diagnostics = [];
+  const sourcesById = /* @__PURE__ */ new Map();
+  addScope(ontology, diagnostics, sourcesById, model.ontology, "organization.ontology", ["ontology"]);
+  addSystemScopes(ontology, diagnostics, sourcesById, model.systems ?? {}, "", ["systems"]);
+  addLegacyEntityProjections(ontology, diagnostics, sourcesById, model.entities ?? {});
+  addLegacyActionProjections(ontology, diagnostics, sourcesById, model.actions ?? {}, model.entities ?? {});
+  return { ontology: sortResolvedOntologyIndex(ontology), diagnostics };
+}
+
 // ../core/src/organization-model/domains/systems.ts
 var SystemKindSchema = external_exports.enum(["product", "operational", "platform", "diagnostic"]).meta({ label: "System kind", color: "blue" });
 var SystemLifecycleSchema = external_exports.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({ label: "Lifecycle", color: "teal" });
@@ -37104,6 +37593,17 @@ var SystemUiSchema = external_exports.object({
   icon: IconNameSchema.optional(),
   order: external_exports.number().int().optional()
 });
+var JsonValueSchema = external_exports.lazy(
+  () => external_exports.union([
+    external_exports.string(),
+    external_exports.number(),
+    external_exports.boolean(),
+    external_exports.null(),
+    external_exports.array(JsonValueSchema),
+    external_exports.record(external_exports.string(), JsonValueSchema)
+  ])
+);
+var SystemConfigSchema = external_exports.record(external_exports.string().trim().min(1).max(200), JsonValueSchema).default({}).optional();
 var SystemEntrySchema = external_exports.object({
   /** Stable tenant-defined system id (e.g. "sys.lead-gen" or "sales.crm"). */
   id: SystemIdSchema,
@@ -37149,11 +37649,21 @@ var SystemEntrySchema = external_exports.object({
   /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
   order: external_exports.number(),
   /**
-   * System-scoped operational data, co-located with the owning system.
-   * Per L1, L3, L13: keyed by local NodeId (the key is the local id; qualified
-   * id is `<system-path>:<local-id>`, computed by graph projection).
-   * Per L14: every ContentNode carries both `kind` and `type`.
-   * Per D2: unregistered (kind, type) pairs parse successfully.
+   * System-local JSON settings and defaults. Strongly typed OM fields,
+   * secrets, credentials, and runtime state stay outside this bucket.
+   */
+  config: SystemConfigSchema,
+  /**
+   * System-owned ontology declarations. `systems` is now the canonical child
+   * key; this scope holds the object, action, catalog, link, event, and
+   * shared contract records owned by this system.
+   */
+  ontology: OntologyScopeSchema.optional(),
+  /**
+   * @deprecated Compatibility-only bridge for old tenant content nodes and
+   * migration readers. New schema/catalog authoring belongs in ontology;
+   * new system-local settings belong in config. Bridge nodes are keyed by
+   * local NodeId and may still project to content-node:* graph IDs.
    */
   content: external_exports.record(external_exports.string().trim().min(1).max(200), ContentNodeSchema).optional(),
   /**
@@ -37163,14 +37673,17 @@ var SystemEntrySchema = external_exports.object({
    * Per Phase 4: `id` and `parentSystemId` fields will be removed in favour of
    * position-derived paths. Both still exist on this schema for backward compat.
    */
+  systems: external_exports.lazy(() => external_exports.record(external_exports.string().trim().min(1).max(100), SystemEntrySchema)).optional(),
+  /** @deprecated Use systems. Accepted as a compatibility alias during the ontology bridge. */
   subsystems: external_exports.lazy(() => external_exports.record(external_exports.string().trim().min(1).max(100), SystemEntrySchema)).optional()
 }).refine((system) => system.label !== void 0 || system.title !== void 0, {
   path: ["label"],
   message: "System must provide label or title"
 }).transform((system) => {
-  if (system.status === void 0) return system;
+  const normalizedSystem = system.systems !== void 0 && system.subsystems === void 0 ? { ...system, subsystems: system.systems } : system;
+  if (normalizedSystem.status === void 0) return normalizedSystem;
   console.warn("[organization-model] System.status is deprecated; use System.lifecycle instead.");
-  return system.lifecycle === void 0 ? { ...system, lifecycle: system.status } : system;
+  return normalizedSystem.lifecycle === void 0 ? { ...normalizedSystem, lifecycle: normalizedSystem.status } : normalizedSystem;
 });
 var SystemsDomainSchema = external_exports.record(external_exports.string(), SystemEntrySchema).refine((record2) => Object.entries(record2).every(([key, entry]) => entry.id === key), {
   message: "Each system entry id must match its map key"
@@ -37579,6 +38092,7 @@ var ResourceKindSchema = external_exports.enum(["workflow", "agent", "integratio
 var ResourceGovernanceStatusSchema = external_exports.enum(["active", "deprecated", "archived"]).meta({ label: "Governance status", color: "teal" });
 var AgentKindSchema = external_exports.enum(["orchestrator", "specialist", "utility", "platform"]).meta({ label: "Agent kind", color: "violet" });
 var ScriptResourceLanguageSchema = external_exports.enum(["shell", "sql", "typescript", "python"]).meta({ label: "Language" });
+var CodeReferenceRoleSchema = external_exports.enum(["entrypoint", "handler", "schema", "test", "docs", "config"]).meta({ label: "Code reference role", color: "blue" });
 var ResourceIdSchema = external_exports.string().trim().min(1).max(255).regex(/^[A-Za-z0-9]+(?:[-._][A-Za-z0-9]+)*$/, "Resource IDs must use letters, numbers, -, _, or . separators");
 var EventIdSchema = external_exports.string().trim().min(1).max(300).regex(
   /^[A-Za-z0-9]+(?:[-._][A-Za-z0-9]+)*:[a-z0-9]+(?:[-._][a-z0-9]+)*$/,
@@ -37596,6 +38110,28 @@ var EventDescriptorSchema = EventEmissionDescriptorSchema.extend({
   ownerId: external_exports.union([ResourceIdSchema, ModelIdSchema]),
   ownerKind: external_exports.enum(["resource", "entity"]).meta({ label: "Owner kind" })
 });
+var ResourceOntologyBindingSchema = external_exports.object({
+  actions: external_exports.array(OntologyIdSchema).optional(),
+  primaryAction: OntologyIdSchema.optional(),
+  reads: external_exports.array(OntologyIdSchema).optional(),
+  writes: external_exports.array(OntologyIdSchema).optional(),
+  usesCatalogs: external_exports.array(OntologyIdSchema).optional(),
+  emits: external_exports.array(OntologyIdSchema).optional()
+}).superRefine((binding, ctx) => {
+  if (binding.primaryAction === void 0) return;
+  if (binding.actions?.includes(binding.primaryAction)) return;
+  ctx.addIssue({
+    code: external_exports.ZodIssueCode.custom,
+    path: ["primaryAction"],
+    message: "Resource ontology primaryAction must be included in actions"
+  });
+});
+var CodeReferenceSchema = external_exports.object({
+  path: external_exports.string().trim().min(1).max(500).regex(/^[A-Za-z0-9_./$@()[\] -]+$/, "Code reference paths must be repo-relative paths"),
+  role: CodeReferenceRoleSchema,
+  symbol: external_exports.string().trim().min(1).max(200).optional(),
+  description: external_exports.string().trim().min(1).max(300).optional()
+});
 var ResourceEntryBaseSchema = external_exports.object({
   /** Canonical resource id; runtime resourceId derives from this value. */
   id: ResourceIdSchema,
@@ -37603,14 +38139,24 @@ var ResourceEntryBaseSchema = external_exports.object({
   order: external_exports.number().default(0),
   /** Required single System membership — value is a dot-separated system path (e.g. "sales.lead-gen"). */
   systemPath: SystemPathSchema.meta({ ref: "system" }),
+  /** Executable display title owned by the OM Resource descriptor. */
+  title: LabelSchema.optional(),
+  /** Executable display description owned by the OM Resource descriptor. */
+  description: DescriptionSchema.optional(),
   /** Optional role responsible for maintaining this resource. */
   ownerRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
-  status: ResourceGovernanceStatusSchema
+  status: ResourceGovernanceStatusSchema,
+  /**
+   * Ontology contract bindings for the semantic work this resource performs.
+   * `emits` stays nested here so top-level resource emits descriptors remain
+   * compatible with graph event projection during the bridge.
+   */
+  ontology: ResourceOntologyBindingSchema.optional(),
+  /** Repo-relative implementation breadcrumbs for agents and operators. */
+  codeRefs: external_exports.array(CodeReferenceSchema).default([])
 });
 var WorkflowResourceEntrySchema = ResourceEntryBaseSchema.extend({
   kind: external_exports.literal("workflow"),
-  /** Mirrors WorkflowConfig.actionKey when the runtime workflow has one. */
-  actionKey: external_exports.string().trim().min(1).max(255).optional(),
   emits: external_exports.array(EventEmissionDescriptorSchema).optional()
 });
 var AgentResourceEntrySchema = ResourceEntryBaseSchema.extend({
@@ -37766,19 +38312,29 @@ var KnowledgeTargetKindSchema = external_exports.enum([
   "goal",
   "customer-segment",
   "offering",
+  "ontology",
   // D4: content nodes are a valid knowledge target after compound-domain data moved into system.content
   "content-node"
 ]).meta({ label: "Target kind" });
 var KnowledgeTargetRefSchema = external_exports.object({
   kind: KnowledgeTargetKindSchema,
-  // D4: content-node targets use a qualified id format '<system-path>:<local-content-id>'
-  // which contains a colon separator and cannot satisfy ModelIdSchema. Use a permissive
-  // string schema here; business-logic validation of target existence is done in
-  // OrganizationModelSchema.superRefine (knowledgeTargetExists).
+  // D4: content-node targets use a qualified id format '<system-path>:<local-content-id>'.
+  // Ontology targets use the canonical '<scope>:<kind>/<local-id>' ontology id format.
+  // Business-logic validation of target existence is done in OrganizationModelSchema.superRefine.
   id: external_exports.string().trim().min(1).max(300)
+}).superRefine((target, ctx) => {
+  if (target.kind !== "ontology") return;
+  const result = OntologyIdSchema.safeParse(target.id);
+  if (!result.success) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["id"],
+      message: "Ontology knowledge targets must use <system-path>:<kind>/<local-id> or global:<kind>/<local-id>"
+    });
+  }
 });
 var LegacyKnowledgeLinkSchema = external_exports.object({
-  nodeId: NodeIdStringSchema
+  nodeId: external_exports.union([NodeIdStringSchema, external_exports.templateLiteral(["ontology:", OntologyIdSchema])])
 });
 var CanonicalKnowledgeLinkSchema = external_exports.object({
   target: KnowledgeTargetRefSchema
@@ -37809,6 +38365,8 @@ var OrgKnowledgeNodeSchema = external_exports.object({
   icon: IconNameSchema.optional(),
   /** Canonical documentation URL when body content is a local summary. */
   externalUrl: external_exports.string().trim().url().max(500).optional(),
+  /** Optional generated source file path for local MDX-backed knowledge nodes. */
+  sourceFilePath: external_exports.string().trim().min(1).max(500).optional(),
   /** Raw MDX string. Phase 2 will introduce a structured block format. */
   body: external_exports.string().trim().min(1),
   /**
@@ -37823,6 +38381,75 @@ var OrgKnowledgeNodeSchema = external_exports.object({
 });
 var KnowledgeDomainSchema = external_exports.record(ModelIdSchema, OrgKnowledgeNodeSchema).default({});
 
+// ../core/src/organization-model/domains/topology.ts
+var SecretLikeMetadataKeySchema = /(?:secret|password|passwd|token|api[-_]?key|credential|private[-_]?key)/i;
+var SecretLikeMetadataValueSchema = /(?:sk-[A-Za-z0-9_-]{12,}|pk_live_[A-Za-z0-9_-]{12,}|eyJ[A-Za-z0-9_-]{20,}|-----BEGIN (?:RSA |OPENSSH |EC )?PRIVATE KEY-----)/;
+var OmTopologyNodeKindSchema = external_exports.enum([
+  "system",
+  "resource",
+  "ontology",
+  "policy",
+  "role",
+  "trigger",
+  "humanCheckpoint",
+  "externalResource"
+]);
+var OmTopologyRelationshipKindSchema = external_exports.enum(["triggers", "uses", "approval"]);
+var OmTopologyNodeRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("system"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("resource"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("ontology"), id: OntologyIdSchema }),
+  external_exports.object({ kind: external_exports.literal("policy"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("role"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("trigger"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("humanCheckpoint"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("externalResource"), id: ResourceIdSchema })
+]);
+var OmTopologyMetadataSchema = external_exports.record(external_exports.string().trim().min(1).max(120), JsonValueSchema).superRefine((metadata, ctx) => {
+  function visit(value, path3) {
+    if (typeof value === "string" && SecretLikeMetadataValueSchema.test(value)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: path3,
+        message: "Topology metadata must not contain secret-like values"
+      });
+      return;
+    }
+    if (Array.isArray(value)) {
+      value.forEach((entry, index) => visit(entry, [...path3, index]));
+      return;
+    }
+    if (typeof value !== "object" || value === null) return;
+    Object.entries(value).forEach(([key, entry]) => {
+      if (SecretLikeMetadataKeySchema.test(key)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [...path3, key],
+          message: `Topology metadata key "${key}" looks secret-like`
+        });
+      }
+      visit(entry, [...path3, key]);
+    });
+  }
+  visit(metadata, []);
+});
+var OmTopologyRelationshipSchema = external_exports.object({
+  from: OmTopologyNodeRefSchema,
+  kind: OmTopologyRelationshipKindSchema,
+  to: OmTopologyNodeRefSchema,
+  systemPath: SystemPathSchema.optional(),
+  required: external_exports.boolean().optional(),
+  metadata: OmTopologyMetadataSchema.optional()
+});
+var OmTopologyDomainSchema = external_exports.object({
+  version: external_exports.literal(1).default(1),
+  relationships: external_exports.record(external_exports.string().trim().min(1).max(255), OmTopologyRelationshipSchema).default({})
+}).default({ version: 1, relationships: {} });
+var DEFAULT_ORGANIZATION_MODEL_TOPOLOGY = {
+  version: 1,
+  relationships: {}
+};
+
 // ../core/src/organization-model/domains/policies.ts
 var PolicyIdSchema = ModelIdSchema;
 var PolicyApplicabilitySchema = external_exports.object({
@@ -37911,7 +38538,9 @@ var OrganizationModelDomainKeySchema = external_exports.enum([
   "roles",
   "goals",
   "systems",
+  "ontology",
   "resources",
+  "topology",
   "actions",
   "entities",
   "policies",
@@ -37929,7 +38558,9 @@ var DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA = {
   roles: { version: 1, lastModified: "2026-05-10" },
   goals: { version: 1, lastModified: "2026-05-10" },
   systems: { version: 1, lastModified: "2026-05-10" },
+  ontology: { version: 1, lastModified: "2026-05-14" },
   resources: { version: 1, lastModified: "2026-05-10" },
+  topology: { version: 1, lastModified: "2026-05-14" },
   actions: { version: 1, lastModified: "2026-05-10" },
   entities: { version: 1, lastModified: "2026-05-10" },
   policies: { version: 1, lastModified: "2026-05-10" },
@@ -37943,7 +38574,9 @@ var OrganizationModelDomainMetadataByDomainSchema = external_exports.object({
   roles: OrganizationModelDomainMetadataSchema,
   goals: OrganizationModelDomainMetadataSchema,
   systems: OrganizationModelDomainMetadataSchema,
+  ontology: OrganizationModelDomainMetadataSchema,
   resources: OrganizationModelDomainMetadataSchema,
+  topology: OrganizationModelDomainMetadataSchema,
   actions: OrganizationModelDomainMetadataSchema,
   entities: OrganizationModelDomainMetadataSchema,
   policies: OrganizationModelDomainMetadataSchema,
@@ -37960,7 +38593,9 @@ var OrganizationModelSchemaBase = external_exports.object({
   roles: RolesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ROLES),
   goals: GoalsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_GOALS),
   systems: SystemsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_SYSTEMS),
+  ontology: OntologyScopeSchema.default(DEFAULT_ONTOLOGY_SCOPE),
   resources: ResourcesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_RESOURCES),
+  topology: OmTopologyDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_TOPOLOGY),
   actions: ActionsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ACTIONS),
   entities: EntitiesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ENTITIES),
   policies: PoliciesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_POLICIES),
@@ -37987,13 +38622,16 @@ function asRoleHolderArray(heldBy) {
 function isKnowledgeKindCompatibleWithTarget(knowledgeKind, targetKind) {
   if (knowledgeKind === "reference") return true;
   if (knowledgeKind === "playbook") {
-    return ["system", "resource", "stage", "action"].includes(targetKind);
+    return ["system", "resource", "stage", "action", "ontology"].includes(targetKind);
   }
   if (knowledgeKind === "strategy") {
-    return ["system", "goal", "offering", "customer-segment"].includes(targetKind);
+    return ["system", "goal", "offering", "customer-segment", "ontology"].includes(targetKind);
   }
   return false;
 }
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ctx) => {
   function collectAllSystems(systems, prefix = "", schemaPath = ["systems"]) {
     const result = [];
@@ -38001,8 +38639,11 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
       const path3 = prefix ? `${prefix}.${key}` : key;
       const currentSchemaPath = [...schemaPath, key];
       result.push({ path: path3, schemaPath: currentSchemaPath, system });
-      if (system.subsystems !== void 0) {
-        result.push(...collectAllSystems(system.subsystems, path3, [...currentSchemaPath, "subsystems"]));
+      const childSystems = system.systems ?? system.subsystems;
+      if (childSystems !== void 0) {
+        result.push(
+          ...collectAllSystems(childSystems, path3, [...currentSchemaPath, system.systems !== void 0 ? "systems" : "subsystems"])
+        );
       }
     }
     return result;
@@ -38022,7 +38663,7 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
         `System "${system.id}" references unknown parent "${system.parentSystemId}"`
       );
     }
-    const hasChildren = Object.keys(system.subsystems ?? {}).length > 0 || allSystems.some((candidate) => candidate.path.startsWith(`${path3}.`) && !candidate.path.slice(path3.length + 1).includes("."));
+    const hasChildren = Object.keys(system.systems ?? system.subsystems ?? {}).length > 0 || allSystems.some((candidate) => candidate.path.startsWith(`${path3}.`) && !candidate.path.slice(path3.length + 1).includes("."));
     const contributesRoutePath = system.ui?.path !== void 0 || system.path !== void 0 || !hasChildren;
     if (contributesRoutePath) {
       const effectivePath = system.ui?.path ?? system.path ?? defaultSystemPathFor(path3);
@@ -38038,7 +38679,7 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
       }
     }
     if (hasChildren && isLifecycleEnabled(system.lifecycle, system.enabled)) {
-      const hasEnabledDescendant = Object.values(system.subsystems ?? {}).some(
+      const hasEnabledDescendant = Object.values(system.systems ?? system.subsystems ?? {}).some(
         (candidate) => isLifecycleEnabled(candidate.lifecycle, candidate.enabled)
       ) || allSystems.some(
         (candidate) => candidate.path.startsWith(`${path3}.`) && !candidate.path.slice(path3.length + 1).includes(".") && isLifecycleEnabled(candidate.system.lifecycle, candidate.system.enabled)
@@ -38283,6 +38924,80 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
   const stageIds = /* @__PURE__ */ new Set();
   const actionIds = new Set(Object.keys(model.actions));
   const offeringsById = new Map(Object.entries(model.offerings));
+  const ontologyCompilation = compileOrganizationOntology(model);
+  const ontologyIndexByKind = {
+    object: ontologyCompilation.ontology.objectTypes,
+    link: ontologyCompilation.ontology.linkTypes,
+    action: ontologyCompilation.ontology.actionTypes,
+    catalog: ontologyCompilation.ontology.catalogTypes,
+    event: ontologyCompilation.ontology.eventTypes,
+    interface: ontologyCompilation.ontology.interfaceTypes,
+    "value-type": ontologyCompilation.ontology.valueTypes,
+    property: ontologyCompilation.ontology.sharedProperties,
+    group: ontologyCompilation.ontology.groups,
+    surface: ontologyCompilation.ontology.surfaces
+  };
+  const ontologyIds = new Set(Object.values(ontologyIndexByKind).flatMap((index) => Object.keys(index)));
+  function topologyTargetExists(ref) {
+    if (ref.kind === "system") return systemsById.has(ref.id);
+    if (ref.kind === "resource") return resourcesById.has(ref.id);
+    if (ref.kind === "ontology") return ontologyIds.has(ref.id);
+    if (ref.kind === "policy") return policiesById.has(ref.id);
+    if (ref.kind === "role") return rolesById.has(ref.id);
+    return true;
+  }
+  Object.entries(model.topology.relationships).forEach(([relationshipId, relationship]) => {
+    ;
+    ["from", "to"].forEach((side) => {
+      const ref = relationship[side];
+      if (topologyTargetExists(ref)) return;
+      addIssue(
+        ctx,
+        ["topology", "relationships", relationshipId, side],
+        `Topology relationship "${relationshipId}" ${side} references unknown ${ref.kind} "${ref.id}"`
+      );
+    });
+  });
+  const ontologyReferenceKeyKinds = {
+    valueType: "value-type",
+    catalogType: "catalog",
+    objectType: "object",
+    eventType: "event",
+    actionType: "action",
+    linkType: "link",
+    interfaceType: "interface",
+    propertyType: "property",
+    groupType: "group",
+    surfaceType: "surface",
+    stepCatalog: "catalog"
+  };
+  function validateKnownOntologyReferences(ownerId, value, path3, seen = /* @__PURE__ */ new WeakSet()) {
+    if (Array.isArray(value)) {
+      value.forEach((entry, index) => validateKnownOntologyReferences(ownerId, entry, [...path3, index], seen));
+      return;
+    }
+    if (!isRecord(value)) return;
+    if (seen.has(value)) return;
+    seen.add(value);
+    Object.entries(value).forEach(([key, entry]) => {
+      const expectedKind = ontologyReferenceKeyKinds[key];
+      if (expectedKind !== void 0) {
+        if (typeof entry !== "string") {
+          addIssue(ctx, [...path3, key], `Ontology record "${ownerId}" ${key} must be an ontology ID string`);
+        } else if (ontologyIndexByKind[expectedKind][entry] === void 0) {
+          addIssue(
+            ctx,
+            [...path3, key],
+            `Ontology record "${ownerId}" ${key} references unknown ${expectedKind} ontology ID "${entry}"`
+          );
+        }
+      }
+      validateKnownOntologyReferences(ownerId, entry, [...path3, key], seen);
+    });
+  }
+  for (const { id, record: record2 } of listResolvedOntologyRecords(ontologyCompilation.ontology)) {
+    validateKnownOntologyReferences(id, record2, record2.origin.path);
+  }
   Object.values(model.policies).forEach((policy) => {
     policy.appliesTo.systemIds.forEach((systemId, systemIndex) => {
       if (!systemsById.has(systemId)) {
@@ -38336,6 +39051,7 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
     if (kind === "goal") return goalsById.has(id);
     if (kind === "customer-segment") return segmentsById.has(id);
     if (kind === "offering") return offeringsById.has(id);
+    if (kind === "ontology") return ontologyIds.has(id);
     return false;
   }
   Object.entries(model.knowledge).forEach(([nodeId2, node]) => {
@@ -38379,6 +39095,34 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
       );
     }
   });
+  function validateResourceOntologyBinding(resourceId, bindingKey, expectedKind, ids) {
+    const ontologyIds2 = ids === void 0 ? [] : Array.isArray(ids) ? ids : [ids];
+    ontologyIds2.forEach((ontologyId, ontologyIndex) => {
+      if (ontologyIndexByKind[expectedKind][ontologyId] === void 0) {
+        addIssue(
+          ctx,
+          [
+            "resources",
+            resourceId,
+            "ontology",
+            bindingKey,
+            ...Array.isArray(ids) ? [ontologyIndex] : []
+          ],
+          `Resource "${resourceId}" ontology binding "${bindingKey}" references unknown ${expectedKind} ontology ID "${ontologyId}"`
+        );
+      }
+    });
+  }
+  Object.values(model.resources).forEach((resource) => {
+    const binding = resource.ontology;
+    if (binding === void 0) return;
+    validateResourceOntologyBinding(resource.id, "actions", "action", binding.actions);
+    validateResourceOntologyBinding(resource.id, "primaryAction", "action", binding.primaryAction);
+    validateResourceOntologyBinding(resource.id, "reads", "object", binding.reads);
+    validateResourceOntologyBinding(resource.id, "writes", "object", binding.writes);
+    validateResourceOntologyBinding(resource.id, "usesCatalogs", "catalog", binding.usesCatalogs);
+    validateResourceOntologyBinding(resource.id, "emits", "event", binding.emits);
+  });
   Object.values(model.roles).forEach((role) => {
     if (role.heldBy === void 0) return;
     asRoleHolderArray(role.heldBy).forEach((holder, holderIndex) => {
@@ -38413,11 +39157,13 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
     });
   });
   function validateSystemContent(system, systemPath) {
+    const childSystems = system.systems ?? system.subsystems;
+    const childKey = system.systems !== void 0 ? "systems" : "subsystems";
     const content = system.content;
     if (content === void 0 || Object.keys(content).length === 0) {
-      if (system.subsystems !== void 0) {
-        Object.entries(system.subsystems).forEach(([childKey, child]) => {
-          validateSystemContent(child, [...systemPath, "subsystems", childKey]);
+      if (childSystems !== void 0) {
+        Object.entries(childSystems).forEach(([childLocalId, child]) => {
+          validateSystemContent(child, [...systemPath, childKey, childLocalId]);
         });
       }
       return;
@@ -38473,15 +39219,18 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
         }
       }
     });
-    if (system.subsystems !== void 0) {
-      Object.entries(system.subsystems).forEach(([childKey, child]) => {
-        validateSystemContent(child, [...systemPath, "subsystems", childKey]);
+    if (childSystems !== void 0) {
+      Object.entries(childSystems).forEach(([childLocalId, child]) => {
+        validateSystemContent(child, [...systemPath, childKey, childLocalId]);
       });
     }
   }
   Object.entries(model.systems).forEach(([systemKey, system]) => {
     validateSystemContent(system, ["systems", systemKey]);
   });
+  for (const diagnostic of ontologyCompilation.diagnostics) {
+    addIssue(ctx, diagnostic.path, diagnostic.message);
+  }
 });
 
 // ../core/src/organization-model/graph/schema.ts
@@ -38502,6 +39251,7 @@ var OrganizationGraphNodeKindSchema = external_exports.enum([
   "surface",
   "navigation-group",
   // Phase 3 preview — Phase 4 populates via graph projection of system.content entries.
+  "ontology",
   "content-node"
 ]);
 var OrganizationGraphEdgeKindSchema = external_exports.enum([
@@ -38515,24 +39265,30 @@ var OrganizationGraphEdgeKindSchema = external_exports.enum([
   "emits",
   "originates_from",
   "triggers",
+  "approval",
   "applies_to",
-  "effects"
+  "effects",
+  "actions",
+  "reads",
+  "writes",
+  "uses_catalog"
 ]);
 var OrganizationGraphNodeSchema = external_exports.object({
-  id: external_exports.string().trim().min(1).max(200),
+  id: external_exports.string().trim().min(1).max(400),
   kind: OrganizationGraphNodeKindSchema,
   label: LabelSchema,
-  sourceId: external_exports.string().trim().min(1).max(255).optional(),
+  sourceId: external_exports.string().trim().min(1).max(400).optional(),
   description: DescriptionSchema.optional(),
   icon: IconNameSchema.optional(),
   enabled: external_exports.boolean().optional(),
+  ontologyKind: external_exports.string().trim().min(1).max(80).optional(),
   resourceType: external_exports.enum(["workflow", "agent", "trigger", "integration", "external", "human_checkpoint", "script"]).optional()
 });
 var OrganizationGraphEdgeSchema = external_exports.object({
-  id: external_exports.string().trim().min(1).max(250),
+  id: external_exports.string().trim().min(1).max(900),
   kind: OrganizationGraphEdgeKindSchema,
-  sourceId: external_exports.string().trim().min(1).max(200),
-  targetId: external_exports.string().trim().min(1).max(200),
+  sourceId: external_exports.string().trim().min(1).max(400),
+  targetId: external_exports.string().trim().min(1).max(400),
   label: external_exports.string().trim().min(1).max(120).optional(),
   relationshipType: external_exports.enum(["triggers", "uses", "approval"]).optional()
 });
@@ -38555,14 +39311,18 @@ function isReservedResourceId(resourceId) {
 }
 
 // ../core/src/organization-model/helpers.ts
+function childSystemsOf2(system) {
+  return system.systems ?? system.subsystems ?? {};
+}
 function listAllSystems(model) {
   const results = [];
   function walk(map2, prefix) {
     for (const [localId, system] of Object.entries(map2)) {
       const fullPath = prefix ? `${prefix}.${localId}` : localId;
       results.push({ path: fullPath, system });
-      if (system.subsystems) {
-        walk(system.subsystems, fullPath);
+      const childSystems = childSystemsOf2(system);
+      if (Object.keys(childSystems).length > 0) {
+        walk(childSystems, fullPath);
       }
     }
   }
@@ -38876,6 +39636,120 @@ function getRuntimeResources(resources) {
     }))
   ];
 }
+function hasOntologySources(organizationModel) {
+  return organizationModel.ontology !== void 0 || organizationModel.entities !== void 0 || organizationModel.actions !== void 0 || Object.values(organizationModel.systems ?? {}).some(systemHasOntologySource);
+}
+function systemHasOntologySource(system) {
+  if (system.ontology !== void 0 || system.content !== void 0 && Object.keys(system.content).length > 0) return true;
+  return Object.values(system.systems ?? system.subsystems ?? {}).some(systemHasOntologySource);
+}
+function ontologyIndexForKind(index, kind) {
+  switch (kind) {
+    case "object":
+      return index.objectTypes;
+    case "link":
+      return index.linkTypes;
+    case "action":
+      return index.actionTypes;
+    case "catalog":
+      return index.catalogTypes;
+    case "event":
+      return index.eventTypes;
+    case "interface":
+      return index.interfaceTypes;
+    case "value-type":
+      return index.valueTypes;
+    case "property":
+      return index.sharedProperties;
+    case "group":
+      return index.groups;
+    case "surface":
+      return index.surfaces;
+  }
+}
+function sameJson(left, right) {
+  return JSON.stringify(left ?? null) === JSON.stringify(right ?? null);
+}
+function addOntologyBindingIssues(issues, orgName, resource, ontologyIndex) {
+  const binding = resource.ontology;
+  if (binding === void 0) return;
+  if ((resource.kind === "workflow" || resource.kind === "agent") && (binding.actions?.length ?? 0) === 0) {
+    addGovernanceIssue(
+      issues,
+      "missing-ontology-actions",
+      orgName,
+      resource.id,
+      `[${orgName}] Resource '${resource.id}' declares ontology bindings but no ontology actions.`
+    );
+  }
+  if (binding.primaryAction !== void 0 && !binding.actions?.includes(binding.primaryAction)) {
+    addGovernanceIssue(
+      issues,
+      "primary-action-mismatch",
+      orgName,
+      resource.id,
+      `[${orgName}] Resource '${resource.id}' primaryAction '${binding.primaryAction}' must be included in ontology.actions.`
+    );
+  }
+  if (ontologyIndex === void 0) return;
+  const validateRefs = (bindingKey, expectedKind, refs) => {
+    const values = refs === void 0 ? [] : Array.isArray(refs) ? refs : [refs];
+    const index = ontologyIndexForKind(ontologyIndex, expectedKind);
+    for (const ref of values) {
+      if (index[ref] !== void 0) continue;
+      addGovernanceIssue(
+        issues,
+        "ontology-reference-missing",
+        orgName,
+        resource.id,
+        `[${orgName}] Resource '${resource.id}' ontology.${bindingKey} references missing ${expectedKind} ontology record '${ref}'.`
+      );
+    }
+  };
+  validateRefs("actions", "action", binding.actions);
+  validateRefs("primaryAction", "action", binding.primaryAction);
+  validateRefs("reads", "object", binding.reads);
+  validateRefs("writes", "object", binding.writes);
+  validateRefs("usesCatalogs", "catalog", binding.usesCatalogs);
+  validateRefs("emits", "event", binding.emits);
+}
+function addTopologyIssues(issues, orgName, deployment, organizationModel, systemsById, omResourcesById, ontologyIndex) {
+  const relationships = organizationModel.topology?.relationships;
+  if (relationships === void 0) return;
+  const rolesById = new Set(Object.keys(organizationModel.roles ?? {}));
+  const policiesById = new Set(Object.keys(organizationModel.policies ?? {}));
+  const triggerIds = new Set(deployment.triggers?.map((trigger) => trigger.resourceId) ?? []);
+  const humanCheckpointIds = new Set(deployment.humanCheckpoints?.map((checkpoint) => checkpoint.resourceId) ?? []);
+  const externalResourceIds = new Set(deployment.externalResources?.map((external) => external.resourceId) ?? []);
+  const topologyRefExists = (ref) => {
+    if (ref.kind === "system") return systemsById.has(ref.id);
+    if (ref.kind === "resource") return omResourcesById.has(ref.id);
+    if (ref.kind === "policy") return policiesById.has(ref.id);
+    if (ref.kind === "role") return rolesById.has(ref.id);
+    if (ref.kind === "trigger") return triggerIds.has(ref.id);
+    if (ref.kind === "humanCheckpoint") return humanCheckpointIds.has(ref.id);
+    if (ref.kind === "externalResource") return externalResourceIds.has(ref.id);
+    if (ref.kind === "ontology") {
+      if (ontologyIndex === void 0) return true;
+      return Object.values(ontologyIndex).some((records) => records[ref.id] !== void 0);
+    }
+    return false;
+  };
+  for (const [relationshipId, relationship] of Object.entries(relationships)) {
+    ;
+    ["from", "to"].forEach((side) => {
+      const ref = relationship[side];
+      if (topologyRefExists(ref)) return;
+      addGovernanceIssue(
+        issues,
+        "topology-reference-missing",
+        orgName,
+        ref.id,
+        `[${orgName}] Topology relationship '${relationshipId}' ${side} references missing ${ref.kind} '${ref.id}'.`
+      );
+    });
+  }
+}
 function validateResourceGovernance(orgName, deployment, organizationModel = deployment.organizationModel, options = {}) {
   const mode = getResourceValidatorMode(options.mode);
   const omResourcesMap = organizationModel?.resources;
@@ -38891,6 +39765,17 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
   const omResourcesById = new Map(activeOmResources.map((resource) => [resource.id, resource]));
   const runtimeResources = getRuntimeResources(deployment);
   const runtimeResourcesById = new Map(runtimeResources.map((resource) => [resource.resourceId, resource]));
+  const ontologyCompilation = hasOntologySources(organizationModel) ? compileOrganizationOntology(organizationModel) : void 0;
+  const ontologyIndex = ontologyCompilation?.ontology;
+  for (const diagnostic of ontologyCompilation?.diagnostics ?? []) {
+    addGovernanceIssue(
+      issues,
+      "ontology-reference-missing",
+      orgName,
+      diagnostic.id,
+      `[${orgName}] ${diagnostic.message}`
+    );
+  }
   for (const resource of activeOmResources) {
     if (!systemsById.has(resource.systemPath)) {
       addGovernanceIssue(
@@ -38930,6 +39815,16 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
         `[${orgName}] Resource '${resource.id}' system mismatch: code descriptor has '${runtimeResource.descriptor.systemPath}', OM has '${resource.systemPath}'.`
       );
     }
+    if (runtimeResource.descriptor && !sameJson(runtimeResource.descriptor.ontology, resource.ontology)) {
+      addGovernanceIssue(
+        issues,
+        "descriptor-mismatch",
+        orgName,
+        resource.id,
+        `[${orgName}] Resource '${resource.id}' ontology descriptor mismatch between code and OM.`
+      );
+    }
+    addOntologyBindingIssues(issues, orgName, resource, ontologyIndex);
   }
   for (const runtimeResource of runtimeResources) {
     const omResource = omResourcesById.get(runtimeResource.resourceId);
@@ -38971,6 +39866,7 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
       );
     }
   }
+  addTopologyIssues(issues, orgName, deployment, organizationModel, systemsById, omResourcesById, ontologyIndex);
   emitGovernanceIssues(issues, mode, options.onWarning);
   return {
     valid: issues.length === 0,
@@ -42519,14 +43415,14 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
         label: "Dashboard",
         path: "/",
         surfaceType: "dashboard",
-        icon: "feature.dashboard",
+        icon: "dashboard",
         order: 10,
         targets: { systems: ["dashboard"] }
       },
       business: {
         type: "group",
         label: "Business",
-        icon: "feature.business",
+        icon: "business",
         order: 20,
         children: {
           sales: {
@@ -42534,7 +43430,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
             label: "Sales",
             path: "/sales",
             surfaceType: "page",
-            icon: "feature.sales",
+            icon: "sales",
             order: 10,
             targets: { systems: ["sales"] }
           },
@@ -42543,7 +43439,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
             label: "Clients",
             path: "/clients",
             surfaceType: "list",
-            icon: "feature.projects",
+            icon: "projects",
             order: 20,
             targets: { systems: ["clients"] }
           },
@@ -42552,7 +43448,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
             label: "Projects",
             path: "/projects",
             surfaceType: "page",
-            icon: "feature.projects",
+            icon: "projects",
             order: 30,
             targets: { systems: ["projects"] }
           }
@@ -42561,7 +43457,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
       operations: {
         type: "group",
         label: "Operations",
-        icon: "feature.operations",
+        icon: "operations",
         order: 30,
         children: {
           "operations-overview": {
@@ -42609,7 +43505,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
       monitoring: {
         type: "group",
         label: "Monitoring",
-        icon: "feature.monitoring",
+        icon: "monitoring",
         order: 40,
         children: {
           "monitoring-overview": {
@@ -42671,36 +43567,19 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
         }
       },
       knowledge: {
-        type: "group",
-        label: "Knowledge",
-        icon: "feature.knowledge",
-        order: 50,
-        children: {
-          "knowledge-base": {
-            type: "surface",
-            label: "Knowledge Base",
-            path: "/knowledge",
-            surfaceType: "page",
-            order: 10,
-            targets: { systems: ["knowledge.base"] }
-          },
-          "knowledge-command-view": {
-            type: "surface",
-            label: "Command View",
-            path: "/knowledge/command-view",
-            surfaceType: "graph",
-            order: 20,
-            targets: { systems: ["knowledge.command-view"] },
-            devOnly: true
-          }
-        }
+        type: "surface",
+        label: "Knowledge Base",
+        path: "/knowledge",
+        surfaceType: "page",
+        icon: "knowledge",
+        order: 50
       }
     },
     bottom: {
       settings: {
         type: "group",
         label: "Settings",
-        icon: "feature.settings",
+        icon: "settings",
         order: 10,
         children: {
           "settings-account": {
@@ -42772,7 +43651,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
       admin: {
         type: "group",
         label: "Admin",
-        icon: "feature.admin",
+        icon: "admin",
         order: 20,
         children: {
           "admin-dashboard": {
@@ -42852,7 +43731,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       path: "/",
-      icon: "feature.dashboard"
+      icon: "dashboard"
     },
     platform: {
       id: "platform",
@@ -42862,7 +43741,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "cyan",
-      icon: "feature.platform"
+      icon: "platform"
     },
     finance: {
       id: "finance",
@@ -42872,7 +43751,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "green",
-      icon: "feature.finance"
+      icon: "finance"
     },
     sales: {
       id: "sales",
@@ -42882,7 +43761,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "blue",
-      icon: "feature.sales",
+      icon: "sales",
       path: "/sales"
     },
     "sales.crm": {
@@ -42892,8 +43771,12 @@ var DEFAULT_ORGANIZATION_MODEL = {
       description: "Relationship pipeline and deal management",
       enabled: true,
       lifecycle: "active",
+      actions: Object.values(CRM_ACTION_ENTRIES).map((action) => ({
+        actionId: action.id,
+        intent: "exposes"
+      })),
       color: "blue",
-      icon: "feature.crm",
+      icon: "crm",
       path: "/crm"
     },
     "sales.lead-gen": {
@@ -42903,12 +43786,12 @@ var DEFAULT_ORGANIZATION_MODEL = {
       description: "Prospecting, qualification, and outreach preparation",
       enabled: true,
       lifecycle: "active",
-      actions: Object.values(DEFAULT_ORGANIZATION_MODEL_ACTIONS).map((action) => ({
+      actions: Object.values(LEAD_GEN_ACTION_ENTRIES).map((action) => ({
         actionId: action.id,
         intent: "exposes"
       })),
       color: "cyan",
-      icon: "feature.lead-gen",
+      icon: "lead-gen",
       path: "/lead-gen"
     },
     projects: {
@@ -42919,7 +43802,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "orange",
-      icon: "feature.projects",
+      icon: "projects",
       path: "/projects"
     },
     clients: {
@@ -42930,7 +43813,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "orange",
-      icon: "feature.projects",
+      icon: "projects",
       path: "/clients"
     },
     operations: {
@@ -42941,7 +43824,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "violet",
-      icon: "feature.operations"
+      icon: "operations"
     },
     "knowledge.command-view": {
       id: "knowledge.command-view",
@@ -43007,7 +43890,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       path: "/monitoring/calendar",
-      icon: "feature.calendar"
+      icon: "calendar"
     },
     "monitoring.activity-log": {
       id: "monitoring.activity-log",
@@ -43063,7 +43946,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       label: "Settings",
       enabled: true,
       lifecycle: "active",
-      icon: "feature.settings"
+      icon: "settings"
     },
     "settings.account": {
       id: "settings.account",
@@ -43136,7 +44019,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       path: "/admin",
-      icon: "feature.admin",
+      icon: "admin",
       requiresAdmin: true
     },
     "admin.system-health": {
@@ -43186,7 +44069,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       path: "/archive",
-      icon: "feature.archive",
+      icon: "archive",
       devOnly: true
     },
     "archive.agent-chat": {
@@ -43221,7 +44104,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "teal",
-      icon: "feature.knowledge"
+      icon: "knowledge"
     },
     "knowledge.base": {
       id: "knowledge.base",
@@ -43232,11 +44115,14 @@ var DEFAULT_ORGANIZATION_MODEL = {
       path: "/knowledge"
     }
   },
+  ontology: DEFAULT_ONTOLOGY_SCOPE,
   resources: DEFAULT_ORGANIZATION_MODEL_RESOURCES,
+  topology: DEFAULT_ORGANIZATION_MODEL_TOPOLOGY,
   actions: DEFAULT_ORGANIZATION_MODEL_ACTIONS,
   entities: DEFAULT_ORGANIZATION_MODEL_ENTITIES2,
   policies: DEFAULT_ORGANIZATION_MODEL_POLICIES,
-  // Phase 4 (D1): statuses top-level field removed; status data lives in system.content.
+  // Phase 4 (D1): statuses top-level field removed; bridge status mirrors may
+  // still project from System.content, but primary authoring belongs in ontology.
   knowledge: DEFAULT_ORGANIZATION_MODEL_KNOWLEDGE
 };
 
@@ -43286,7 +44172,7 @@ function getAllBuildTemplates(model) {
           label: s.label ?? stepLocalId,
           ...s.description ? { description: s.description } : {},
           // Pass through all data fields — template-step payload is richer than Pipeline;
-          // Wave 2 authors the canonical shape; Wave 4 verifies round-trip fidelity.
+          // Bridge readers preserve the historical shape for round-trip fidelity.
           ...sd
         };
       });
@@ -43450,6 +44336,20 @@ function invocationLabel(invocation) {
 function eventNodeId(eventId) {
   return nodeId("event", eventId);
 }
+function ontologyLabel(id, label) {
+  return label ?? parseOntologyId(id).localId;
+}
+function pushOntologyBindingEdges(edges, edgeIds, resourceNodeId, kind, ids) {
+  ids?.forEach((ontologyId) => {
+    const targetId = ontologyGraphNodeId(ontologyId);
+    pushUniqueEdge(edges, edgeIds, {
+      id: edgeId(kind, resourceNodeId, targetId),
+      kind,
+      sourceId: resourceNodeId,
+      targetId
+    });
+  });
+}
 function buildResourceEventDescriptor(resourceId, emission) {
   return {
     ...emission,
@@ -43497,6 +44397,7 @@ function buildOrganizationGraph(input) {
   const organizationModelResourceIds = new Set(Object.keys(organizationModel.resources));
   const actionIdsByInvocation = /* @__PURE__ */ new Map();
   const projectedEventNodeIdsByEventId = /* @__PURE__ */ new Map();
+  const ontologyCompilation = compileOrganizationOntology(organizationModel);
   const organizationNode = {
     id: nodeId("organization"),
     kind: "organization",
@@ -43511,6 +44412,32 @@ function buildOrganizationGraph(input) {
   }
   const validSystemRefs = new Set(systemPathByRef.keys());
   const systemNodeId = (systemRef) => nodeId("system", systemPathByRef.get(systemRef) ?? systemRef);
+  function topologyNodeId(ref) {
+    if (ref.kind === "system") return systemNodeId(ref.id);
+    if (ref.kind === "resource") return nodeId("resource", ref.id);
+    if (ref.kind === "ontology") return ontologyGraphNodeId(ref.id);
+    if (ref.kind === "policy") return nodeId("policy", ref.id);
+    if (ref.kind === "role") return nodeId("role", ref.id);
+    return nodeId("resource", ref.id);
+  }
+  function ensureTopologyNode(ref) {
+    const id = topologyNodeId(ref);
+    if (nodeIds.has(id)) return id;
+    if (ref.kind === "resource") {
+      ensureResourceNode(nodes, nodeIds, resourceNodesById, ref.id);
+      return id;
+    }
+    if (ref.kind === "trigger" || ref.kind === "humanCheckpoint" || ref.kind === "externalResource") {
+      pushUniqueNode(nodes, nodeIds, {
+        id,
+        kind: "resource",
+        label: ref.id,
+        sourceId: ref.id,
+        resourceType: ref.kind === "trigger" ? "trigger" : ref.kind === "humanCheckpoint" ? "human_checkpoint" : "external"
+      });
+    }
+    return id;
+  }
   for (const { path: path3, system } of systemsWithPaths.sort((a, b) => a.path.localeCompare(b.path))) {
     const id = nodeId("system", path3);
     pushUniqueNode(nodes, nodeIds, {
@@ -43538,6 +44465,78 @@ function buildOrganizationGraph(input) {
       });
     }
   }
+  for (const { id: ontologyId, kind, record: record2 } of listResolvedOntologyRecords(ontologyCompilation.ontology).sort(
+    (a, b) => a.id.localeCompare(b.id)
+  )) {
+    const id = ontologyGraphNodeId(ontologyId);
+    const parsedId = parseOntologyId(ontologyId);
+    pushUniqueNode(nodes, nodeIds, {
+      id,
+      kind: "ontology",
+      label: ontologyLabel(ontologyId, record2.label),
+      sourceId: ontologyId,
+      description: record2.description,
+      ontologyKind: kind
+    });
+    const ownerSystemId = record2.ownerSystemId ?? (parsedId.isGlobal ? void 0 : parsedId.scope);
+    if (ownerSystemId !== void 0 && validSystemRefs.has(ownerSystemId)) {
+      pushUniqueEdge(edges, edgeIds, {
+        id: edgeId("contains", systemNodeId(ownerSystemId), id, `ontology-${kind}`),
+        kind: "contains",
+        sourceId: systemNodeId(ownerSystemId),
+        targetId: id
+      });
+    } else {
+      pushUniqueEdge(edges, edgeIds, {
+        id: edgeId("contains", organizationNode.id, id, `ontology-${kind}`),
+        kind: "contains",
+        sourceId: organizationNode.id,
+        targetId: id
+      });
+    }
+    if (kind === "link") {
+      const link = record2;
+      pushUniqueEdge(edges, edgeIds, {
+        id: edgeId("links", ontologyGraphNodeId(link.from), ontologyGraphNodeId(link.to), ontologyId),
+        kind: "links",
+        sourceId: ontologyGraphNodeId(link.from),
+        targetId: ontologyGraphNodeId(link.to),
+        label: link.label ?? parsedId.localId
+      });
+    }
+    if (kind === "action") {
+      const action = record2;
+      for (const targetOntologyId of action.actsOn ?? []) {
+        pushUniqueEdge(edges, edgeIds, {
+          id: edgeId("affects", id, ontologyGraphNodeId(targetOntologyId), ontologyId),
+          kind: "affects",
+          sourceId: id,
+          targetId: ontologyGraphNodeId(targetOntologyId)
+        });
+      }
+    }
+    if (kind === "catalog") {
+      const catalog = record2;
+      if (catalog.appliesTo === void 0) continue;
+      pushUniqueEdge(edges, edgeIds, {
+        id: edgeId("applies_to", id, ontologyGraphNodeId(catalog.appliesTo), ontologyId),
+        kind: "applies_to",
+        sourceId: id,
+        targetId: ontologyGraphNodeId(catalog.appliesTo)
+      });
+    }
+    if (kind === "group") {
+      const group = record2;
+      for (const memberOntologyId of group.members ?? []) {
+        pushUniqueEdge(edges, edgeIds, {
+          id: edgeId("contains", id, ontologyGraphNodeId(memberOntologyId), ontologyId),
+          kind: "contains",
+          sourceId: id,
+          targetId: ontologyGraphNodeId(memberOntologyId)
+        });
+      }
+    }
+  }
   for (const role of Object.values(organizationModel.roles).sort((a, b) => a.id.localeCompare(b.id))) {
     const id = nodeId("role", role.id);
     pushUniqueNode(nodes, nodeIds, {
@@ -43589,7 +44588,7 @@ function buildOrganizationGraph(input) {
       targetId: id
     });
     for (const link of node.links) {
-      const targetId = link.target.kind === "system" ? systemNodeId(link.target.id) : link.nodeId;
+      const targetId = link.target.kind === "system" ? systemNodeId(link.target.id) : link.target.kind === "ontology" ? ontologyGraphNodeId(link.target.id) : link.nodeId;
       pushUniqueEdge(edges, edgeIds, {
         id: edgeId("governs", id, targetId),
         kind: "governs",
@@ -43754,6 +44753,11 @@ function buildOrganizationGraph(input) {
         targetId: resourceNode.id
       });
     }
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "actions", resource.ontology?.actions);
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "reads", resource.ontology?.reads);
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "writes", resource.ontology?.writes);
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "uses_catalog", resource.ontology?.usesCatalogs);
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "emits", resource.ontology?.emits);
     if (resource.kind === "workflow" || resource.kind === "agent") {
       for (const emission of resource.emits ?? []) {
         pushEventProjection(
@@ -43883,6 +44887,19 @@ function buildOrganizationGraph(input) {
       }
     }
   }
+  for (const [relationshipId, relationship] of Object.entries(organizationModel.topology.relationships).sort(
+    ([a], [b]) => a.localeCompare(b)
+  )) {
+    const sourceId = ensureTopologyNode(relationship.from);
+    const targetId = ensureTopologyNode(relationship.to);
+    pushUniqueEdge(edges, edgeIds, {
+      id: edgeId(relationship.kind, sourceId, targetId, `topology-${relationshipId}`),
+      kind: relationship.kind,
+      sourceId,
+      targetId,
+      relationshipType: relationship.kind
+    });
+  }
   for (const segment of Object.values(organizationModel.customers).sort(
     (a, b) => a.order - b.order || a.id.localeCompare(b.id)
   )) {
@@ -44317,7 +45334,7 @@ function wrapAction(commandName, fn) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "1.21.0",
+  version: "1.22.1",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -46888,6 +47905,16 @@ function registerProjectCommands(program3) {
 function toGraphNodeId(omNodeId) {
   return `knowledge:${omNodeId}`;
 }
+function toTargetGraphNodeId(nodeId2) {
+  if (nodeId2.startsWith("system:") || nodeId2.startsWith("knowledge:") || nodeId2.startsWith("resource:") || nodeId2.startsWith("content-node:") || nodeId2.startsWith("ontology:")) {
+    return nodeId2;
+  }
+  const ontologyId = OntologyIdSchema.safeParse(nodeId2);
+  if (ontologyId.success) {
+    return ontologyGraphNodeId(ontologyId.data);
+  }
+  return `system:${nodeId2}`;
+}
 function buildKnowledgeSourceIdMap(graph) {
   const map2 = /* @__PURE__ */ new Map();
   for (const node of graph.nodes) {
@@ -46913,6 +47940,22 @@ function bySystem(graph, systemId, knowledgeNodes) {
   }
   return knowledgeNodes.filter((n) => matchingOmIds.has(n.id));
 }
+function byOntology(graph, ontologyId, knowledgeNodes) {
+  const targetGraphNodeId = toTargetGraphNodeId(ontologyId);
+  const governingKnowledgeNodeIds = /* @__PURE__ */ new Set();
+  for (const edge of graph.edges) {
+    if (edge.kind === "governs" && edge.targetId === targetGraphNodeId && edge.sourceId.startsWith("knowledge:")) {
+      governingKnowledgeNodeIds.add(edge.sourceId);
+    }
+  }
+  const sourceIdMap = buildKnowledgeSourceIdMap(graph);
+  const matchingOmIds = /* @__PURE__ */ new Set();
+  for (const graphNodeId of governingKnowledgeNodeIds) {
+    const omId = sourceIdMap.get(graphNodeId);
+    if (omId) matchingOmIds.add(omId);
+  }
+  return knowledgeNodes.filter((n) => matchingOmIds.has(n.id));
+}
 function byKind(_graph, kind, knowledgeNodes) {
   return knowledgeNodes.filter((n) => n.kind === kind);
 }
@@ -46930,7 +47973,7 @@ function governs(graph, nodeId2) {
   return results;
 }
 function governedBy(graph, nodeId2) {
-  const targetId = nodeId2.startsWith("system:") || nodeId2.startsWith("knowledge:") || nodeId2.startsWith("resource:") ? nodeId2 : `system:${nodeId2}`;
+  const targetId = toTargetGraphNodeId(nodeId2);
   const results = [];
   for (const edge of graph.edges) {
     if (edge.kind === "governs" && edge.targetId === targetId) {
@@ -46958,6 +48001,12 @@ function parsePath(pathString) {
     }
     return { mount: "by-system", args: [rest.join("/")] };
   }
+  if (first === "by-ontology") {
+    if (rest.length === 0) {
+      throw new Error(`parsePath: /by-ontology requires an ontologyId argument, got: "${pathString}"`);
+    }
+    return { mount: "by-ontology", args: [rest.join("/")] };
+  }
   if (first === "by-kind") {
     if (rest.length === 0) {
       throw new Error(`parsePath: /by-kind requires a kind argument, got: "${pathString}"`);
@@ -47078,7 +48127,7 @@ async function loadOrgModel(projectRoot) {
 // src/cli/commands/knowledge/ls.ts
 function registerKnowledgeLs(program3) {
   program3.command("knowledge:ls <path>").description(
-    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk knowledge:ls /by-kind/playbook\n    elevasis-sdk knowledge:ls /by-system/sales.crm\n    elevasis-sdk knowledge:ls /by-owner/role.ops-lead\n    elevasis-sdk knowledge:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk knowledge:ls /graph/system:sales.crm/governed-by"
+    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk knowledge:ls /by-kind/playbook\n    elevasis-sdk knowledge:ls /by-system/sales.crm\n    elevasis-sdk knowledge:ls /by-ontology/sales.crm:object/deal\n    elevasis-sdk knowledge:ls /by-owner/role.ops-lead\n    elevasis-sdk knowledge:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk knowledge:ls /graph/system:sales.crm/governed-by"
   ).option("--json", "Print wrapped JSON envelope { path, mount, args, results }").option("--ids-only", "Print one ID per line (for piping)").action(
     wrapAction("knowledge:ls", async (pathArg, options) => {
       let parsed;
@@ -47094,12 +48143,18 @@ function registerKnowledgeLs(program3) {
       const graph = buildOrganizationGraph({ organizationModel: model });
       const knowledgeNodes = Object.values(model.knowledge);
       let results;
+      let isGraphMount = false;
       switch (parsed.mount) {
         case "by-system": {
           const systemId = parsed.args[0].replace(/\//g, ".");
           results = bySystem(graph, systemId, knowledgeNodes);
           break;
         }
+        case "by-ontology": {
+          const ontologyId = parsed.args[0];
+          results = byOntology(graph, ontologyId, knowledgeNodes);
+          break;
+        }
         case "by-kind": {
           const kind = parsed.args[0];
           results = byKind(graph, kind, knowledgeNodes);
@@ -47111,6 +48166,7 @@ function registerKnowledgeLs(program3) {
           break;
         }
         case "graph": {
+          isGraphMount = true;
           const nodeId2 = parsed.args[0];
           const verb = parsed.args[1];
           if (verb === "governs") {
@@ -47135,6 +48191,12 @@ function registerKnowledgeLs(program3) {
       } else if (options.idsOnly) {
         const out = formatIdsOnly(results);
         if (out) process.stdout.write(out + "\n");
+      } else if (isGraphMount) {
+        if (results.length === 0) {
+          process.stdout.write("(no results)\n");
+        } else {
+          process.stdout.write(results.join("\n") + "\n");
+        }
       } else {
         process.stdout.write(formatText(results) + "\n");
       }
@@ -47157,22 +48219,7 @@ function registerKnowledgeCat(program3) {
         process.exit(1);
       }
       if (options.json) {
-        process.stdout.write(
-          JSON.stringify(
-            {
-              id: node.id,
-              kind: node.kind,
-              title: node.title,
-              summary: node.summary,
-              body: node.body,
-              links: node.links,
-              ownerIds: node.ownerIds,
-              updatedAt: node.updatedAt
-            },
-            null,
-            2
-          ) + "\n"
-        );
+        process.stdout.write(JSON.stringify(node, null, 2) + "\n");
       } else {
         process.stdout.write(node.body + "\n");
       }
@@ -47190,7 +48237,8 @@ function registerKnowledgeGraph(program3) {
       const model = await loadOrgModel(projectRoot);
       const graph = buildOrganizationGraph({ organizationModel: model });
       const outgoing = governs(graph, id);
-      const incoming = governedBy(graph, id);
+      const incomingNodeId = id.startsWith("knowledge.") ? `knowledge:${id}` : id;
+      const incoming = governedBy(graph, incomingNodeId);
       if (options.json) {
         process.stdout.write(
           JSON.stringify(
@@ -47495,6 +48543,18 @@ var ROUTING_STOPWORDS = /* @__PURE__ */ new Set([
 function toRegistryPath(path3) {
   return path3.replace(/\\/g, "/");
 }
+function sourceBaseFromLabel(sourceLabel) {
+  if (!sourceLabel) return void 0;
+  const normalized = toRegistryPath(sourceLabel).replace(/\/+$/, "");
+  const globIndex = normalized.indexOf("*");
+  if (globIndex === -1) return normalized;
+  return normalized.slice(0, globIndex).replace(/\/+$/, "");
+}
+function toSourceFilePath(sourceLabel, relativePath) {
+  const normalizedRelativePath = toRegistryPath(relativePath);
+  const sourceBase = sourceBaseFromLabel(sourceLabel);
+  return sourceBase ? `${sourceBase}/${normalizedRelativePath}` : normalizedRelativePath;
+}
 function slugify(value) {
   return value.trim().toLowerCase().replace(/['"]/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
@@ -47658,7 +48718,13 @@ function generateKnowledgeNodes(options) {
   const files = listMdxFiles(options.sourceDir).sort(
     (a, b) => (0, import_node_path2.relative)(options.sourceDir, a).localeCompare((0, import_node_path2.relative)(options.sourceDir, b))
   );
-  const nodes = files.map(readKnowledgeNodeMdx);
+  const nodes = files.map((file2) => {
+    const relativePath = (0, import_node_path2.relative)(options.sourceDir, file2);
+    return {
+      ...readKnowledgeNodeMdx(file2),
+      sourceFilePath: toSourceFilePath(options.sourceLabel, relativePath)
+    };
+  });
   const sourcePaths = Object.fromEntries(
     files.map((file2, index) => [nodes[index].id, toRegistryPath((0, import_node_path2.relative)(options.sourceDir, file2))])
   );