@elevasis/sdk 1.22.0 → 1.23.0

package/dist/cli.cjs

@@ -5246,7 +5246,7 @@ var require_buffer_list = __commonJS({
         }
       }, {
         key: "join",
-        value: function join6(s) {
+        value: function join7(s) {
           if (this.length === 0) return "";
           var p = this.head;
           var ret = "" + p.data;
@@ -10756,10 +10756,10 @@ var require_schemas = __commonJS({
         const shape = def.shape;
         const propValues = {};
         for (const key in shape) {
-          const field = shape[key]._zod;
-          if (field.values) {
+          const field2 = shape[key]._zod;
+          if (field2.values) {
             propValues[key] ?? (propValues[key] = /* @__PURE__ */ new Set());
-            for (const v of field.values)
+            for (const v of field2.values)
               propValues[key].add(v);
           }
         }
@@ -26924,10 +26924,10 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     const shape = def.shape;
     const propValues = {};
     for (const key in shape) {
-      const field = shape[key]._zod;
-      if (field.values) {
+      const field2 = shape[key]._zod;
+      if (field2.values) {
         propValues[key] ?? (propValues[key] = /* @__PURE__ */ new Set());
-        for (const v of field.values)
+        for (const v of field2.values)
           propValues[key].add(v);
       }
     }
@@ -36620,6 +36620,7 @@ var ORGANIZATION_MODEL_ICON_TOKENS = [
   "crm",
   "lead-gen",
   "projects",
+  "clients",
   "operations",
   "monitoring",
   "knowledge",
@@ -37454,7 +37455,6 @@ function addLegacyEntityProjections(index, diagnostics, sourcesById, entities) {
           table: entity.table
         }
       } : {},
-      legacyEntityId: entity.id,
       ...entity.rowSchema !== void 0 ? { rowSchema: entity.rowSchema } : {},
       ...entity.stateCatalogId !== void 0 ? { stateCatalogId: entity.stateCatalogId } : {}
     };
@@ -37479,8 +37479,7 @@ function addLegacyEntityProjections(index, diagnostics, sourcesById, entities) {
         from: legacyObjectId(entity),
         to: legacyObjectId(targetEntity),
         cardinality: link.kind,
-        ...link.via !== void 0 ? { via: link.via } : {},
-        legacyEntityId: entity.id
+        ...link.via !== void 0 ? { via: link.via } : {}
       };
       addRecord(index, diagnostics, sourcesById, "linkTypes", linkType, {
         source: "legacy.entities.links",
@@ -37538,8 +37537,7 @@ function addSystemContentProjections(index, diagnostics, sourcesById, systemPath
       kind: node.type,
       ...typeof node.data?.["entityId"] === "string" ? { appliesTo: formatOntologyId({ scope: systemPath, kind: "object", localId: node.data["entityId"] }) } : {},
       ...Object.keys(entries).length > 0 ? { entries } : {},
-      ...node.data !== void 0 ? { data: node.data } : {},
-      legacyContentId: `${systemPath}:${localId}`
+      ...node.data !== void 0 ? { data: node.data } : {}
     };
     addRecord(index, diagnostics, sourcesById, "catalogTypes", catalogType, {
       source: "legacy.system.content",
@@ -38114,11 +38112,20 @@ var EventDescriptorSchema = EventEmissionDescriptorSchema.extend({
   ownerKind: external_exports.enum(["resource", "entity"]).meta({ label: "Owner kind" })
 });
 var ResourceOntologyBindingSchema = external_exports.object({
-  implements: external_exports.array(OntologyIdSchema).optional(),
+  actions: external_exports.array(OntologyIdSchema).optional(),
+  primaryAction: OntologyIdSchema.optional(),
   reads: external_exports.array(OntologyIdSchema).optional(),
   writes: external_exports.array(OntologyIdSchema).optional(),
   usesCatalogs: external_exports.array(OntologyIdSchema).optional(),
   emits: external_exports.array(OntologyIdSchema).optional()
+}).superRefine((binding, ctx) => {
+  if (binding.primaryAction === void 0) return;
+  if (binding.actions?.includes(binding.primaryAction)) return;
+  ctx.addIssue({
+    code: external_exports.ZodIssueCode.custom,
+    path: ["primaryAction"],
+    message: "Resource ontology primaryAction must be included in actions"
+  });
 });
 var CodeReferenceSchema = external_exports.object({
   path: external_exports.string().trim().min(1).max(500).regex(/^[A-Za-z0-9_./$@()[\] -]+$/, "Code reference paths must be repo-relative paths"),
@@ -38133,6 +38140,10 @@ var ResourceEntryBaseSchema = external_exports.object({
   order: external_exports.number().default(0),
   /** Required single System membership — value is a dot-separated system path (e.g. "sales.lead-gen"). */
   systemPath: SystemPathSchema.meta({ ref: "system" }),
+  /** Executable display title owned by the OM Resource descriptor. */
+  title: LabelSchema.optional(),
+  /** Executable display description owned by the OM Resource descriptor. */
+  description: DescriptionSchema.optional(),
   /** Optional role responsible for maintaining this resource. */
   ownerRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
   status: ResourceGovernanceStatusSchema,
@@ -38147,8 +38158,6 @@ var ResourceEntryBaseSchema = external_exports.object({
 });
 var WorkflowResourceEntrySchema = ResourceEntryBaseSchema.extend({
   kind: external_exports.literal("workflow"),
-  /** Mirrors WorkflowConfig.actionKey when the runtime workflow has one. */
-  actionKey: external_exports.string().trim().min(1).max(255).optional(),
   emits: external_exports.array(EventEmissionDescriptorSchema).optional()
 });
 var AgentResourceEntrySchema = ResourceEntryBaseSchema.extend({
@@ -38373,6 +38382,75 @@ var OrgKnowledgeNodeSchema = external_exports.object({
 });
 var KnowledgeDomainSchema = external_exports.record(ModelIdSchema, OrgKnowledgeNodeSchema).default({});
 
+// ../core/src/organization-model/domains/topology.ts
+var SecretLikeMetadataKeySchema = /(?:secret|password|passwd|token|api[-_]?key|credential|private[-_]?key)/i;
+var SecretLikeMetadataValueSchema = /(?:sk-[A-Za-z0-9_-]{12,}|pk_live_[A-Za-z0-9_-]{12,}|eyJ[A-Za-z0-9_-]{20,}|-----BEGIN (?:RSA |OPENSSH |EC )?PRIVATE KEY-----)/;
+var OmTopologyNodeKindSchema = external_exports.enum([
+  "system",
+  "resource",
+  "ontology",
+  "policy",
+  "role",
+  "trigger",
+  "humanCheckpoint",
+  "externalResource"
+]);
+var OmTopologyRelationshipKindSchema = external_exports.enum(["triggers", "uses", "approval"]);
+var OmTopologyNodeRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("system"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("resource"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("ontology"), id: OntologyIdSchema }),
+  external_exports.object({ kind: external_exports.literal("policy"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("role"), id: ModelIdSchema }),
+  external_exports.object({ kind: external_exports.literal("trigger"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("humanCheckpoint"), id: ResourceIdSchema }),
+  external_exports.object({ kind: external_exports.literal("externalResource"), id: ResourceIdSchema })
+]);
+var OmTopologyMetadataSchema = external_exports.record(external_exports.string().trim().min(1).max(120), JsonValueSchema).superRefine((metadata, ctx) => {
+  function visit(value, path3) {
+    if (typeof value === "string" && SecretLikeMetadataValueSchema.test(value)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: path3,
+        message: "Topology metadata must not contain secret-like values"
+      });
+      return;
+    }
+    if (Array.isArray(value)) {
+      value.forEach((entry, index) => visit(entry, [...path3, index]));
+      return;
+    }
+    if (typeof value !== "object" || value === null) return;
+    Object.entries(value).forEach(([key, entry]) => {
+      if (SecretLikeMetadataKeySchema.test(key)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [...path3, key],
+          message: `Topology metadata key "${key}" looks secret-like`
+        });
+      }
+      visit(entry, [...path3, key]);
+    });
+  }
+  visit(metadata, []);
+});
+var OmTopologyRelationshipSchema = external_exports.object({
+  from: OmTopologyNodeRefSchema,
+  kind: OmTopologyRelationshipKindSchema,
+  to: OmTopologyNodeRefSchema,
+  systemPath: SystemPathSchema.optional(),
+  required: external_exports.boolean().optional(),
+  metadata: OmTopologyMetadataSchema.optional()
+});
+var OmTopologyDomainSchema = external_exports.object({
+  version: external_exports.literal(1).default(1),
+  relationships: external_exports.record(external_exports.string().trim().min(1).max(255), OmTopologyRelationshipSchema).default({})
+}).default({ version: 1, relationships: {} });
+var DEFAULT_ORGANIZATION_MODEL_TOPOLOGY = {
+  version: 1,
+  relationships: {}
+};
+
 // ../core/src/organization-model/domains/policies.ts
 var PolicyIdSchema = ModelIdSchema;
 var PolicyApplicabilitySchema = external_exports.object({
@@ -38463,6 +38541,7 @@ var OrganizationModelDomainKeySchema = external_exports.enum([
   "systems",
   "ontology",
   "resources",
+  "topology",
   "actions",
   "entities",
   "policies",
@@ -38482,6 +38561,7 @@ var DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA = {
   systems: { version: 1, lastModified: "2026-05-10" },
   ontology: { version: 1, lastModified: "2026-05-14" },
   resources: { version: 1, lastModified: "2026-05-10" },
+  topology: { version: 1, lastModified: "2026-05-14" },
   actions: { version: 1, lastModified: "2026-05-10" },
   entities: { version: 1, lastModified: "2026-05-10" },
   policies: { version: 1, lastModified: "2026-05-10" },
@@ -38497,6 +38577,7 @@ var OrganizationModelDomainMetadataByDomainSchema = external_exports.object({
   systems: OrganizationModelDomainMetadataSchema,
   ontology: OrganizationModelDomainMetadataSchema,
   resources: OrganizationModelDomainMetadataSchema,
+  topology: OrganizationModelDomainMetadataSchema,
   actions: OrganizationModelDomainMetadataSchema,
   entities: OrganizationModelDomainMetadataSchema,
   policies: OrganizationModelDomainMetadataSchema,
@@ -38515,6 +38596,7 @@ var OrganizationModelSchemaBase = external_exports.object({
   systems: SystemsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_SYSTEMS),
   ontology: OntologyScopeSchema.default(DEFAULT_ONTOLOGY_SCOPE),
   resources: ResourcesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_RESOURCES),
+  topology: OmTopologyDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_TOPOLOGY),
   actions: ActionsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ACTIONS),
   entities: EntitiesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ENTITIES),
   policies: PoliciesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_POLICIES),
@@ -38857,6 +38939,26 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
     surface: ontologyCompilation.ontology.surfaces
   };
   const ontologyIds = new Set(Object.values(ontologyIndexByKind).flatMap((index) => Object.keys(index)));
+  function topologyTargetExists(ref) {
+    if (ref.kind === "system") return systemsById.has(ref.id);
+    if (ref.kind === "resource") return resourcesById.has(ref.id);
+    if (ref.kind === "ontology") return ontologyIds.has(ref.id);
+    if (ref.kind === "policy") return policiesById.has(ref.id);
+    if (ref.kind === "role") return rolesById.has(ref.id);
+    return true;
+  }
+  Object.entries(model.topology.relationships).forEach(([relationshipId, relationship]) => {
+    ;
+    ["from", "to"].forEach((side) => {
+      const ref = relationship[side];
+      if (topologyTargetExists(ref)) return;
+      addIssue(
+        ctx,
+        ["topology", "relationships", relationshipId, side],
+        `Topology relationship "${relationshipId}" ${side} references unknown ${ref.kind} "${ref.id}"`
+      );
+    });
+  });
   const ontologyReferenceKeyKinds = {
     valueType: "value-type",
     catalogType: "catalog",
@@ -38995,11 +39097,18 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
     }
   });
   function validateResourceOntologyBinding(resourceId, bindingKey, expectedKind, ids) {
-    ids?.forEach((ontologyId, ontologyIndex) => {
+    const ontologyIds2 = ids === void 0 ? [] : Array.isArray(ids) ? ids : [ids];
+    ontologyIds2.forEach((ontologyId, ontologyIndex) => {
       if (ontologyIndexByKind[expectedKind][ontologyId] === void 0) {
         addIssue(
           ctx,
-          ["resources", resourceId, "ontology", bindingKey, ontologyIndex],
+          [
+            "resources",
+            resourceId,
+            "ontology",
+            bindingKey,
+            ...Array.isArray(ids) ? [ontologyIndex] : []
+          ],
           `Resource "${resourceId}" ontology binding "${bindingKey}" references unknown ${expectedKind} ontology ID "${ontologyId}"`
         );
       }
@@ -39008,7 +39117,8 @@ var OrganizationModelSchema = OrganizationModelSchemaBase.superRefine((model, ct
   Object.values(model.resources).forEach((resource) => {
     const binding = resource.ontology;
     if (binding === void 0) return;
-    validateResourceOntologyBinding(resource.id, "implements", "action", binding.implements);
+    validateResourceOntologyBinding(resource.id, "actions", "action", binding.actions);
+    validateResourceOntologyBinding(resource.id, "primaryAction", "action", binding.primaryAction);
     validateResourceOntologyBinding(resource.id, "reads", "object", binding.reads);
     validateResourceOntologyBinding(resource.id, "writes", "object", binding.writes);
     validateResourceOntologyBinding(resource.id, "usesCatalogs", "catalog", binding.usesCatalogs);
@@ -39156,9 +39266,10 @@ var OrganizationGraphEdgeKindSchema = external_exports.enum([
   "emits",
   "originates_from",
   "triggers",
+  "approval",
   "applies_to",
   "effects",
-  "implements",
+  "actions",
   "reads",
   "writes",
   "uses_catalog"
@@ -39443,9 +39554,9 @@ function getModelInfo(model) {
 
 // ../core/src/execution/engine/llm/errors.ts
 var ModelConfigError = class extends ExecutionError {
-  constructor(message, field, model, context) {
-    super(message, { ...context, field, model });
-    this.field = field;
+  constructor(message, field2, model, context) {
+    super(message, { ...context, field: field2, model });
+    this.field = field2;
     this.model = model;
   }
   type = "model_config_error";
@@ -39475,11 +39586,11 @@ function validateModelConfig(config3) {
 
 // ../core/src/platform/registry/validation.ts
 var RegistryValidationError = class extends Error {
-  constructor(orgName, resourceId, field, message) {
+  constructor(orgName, resourceId, field2, message) {
     super(message);
     this.orgName = orgName;
     this.resourceId = resourceId;
-    this.field = field;
+    this.field = field2;
     this.name = "RegistryValidationError";
   }
 };
@@ -39526,6 +39637,120 @@ function getRuntimeResources(resources) {
     }))
   ];
 }
+function hasOntologySources(organizationModel) {
+  return organizationModel.ontology !== void 0 || organizationModel.entities !== void 0 || organizationModel.actions !== void 0 || Object.values(organizationModel.systems ?? {}).some(systemHasOntologySource);
+}
+function systemHasOntologySource(system) {
+  if (system.ontology !== void 0 || system.content !== void 0 && Object.keys(system.content).length > 0) return true;
+  return Object.values(system.systems ?? system.subsystems ?? {}).some(systemHasOntologySource);
+}
+function ontologyIndexForKind(index, kind) {
+  switch (kind) {
+    case "object":
+      return index.objectTypes;
+    case "link":
+      return index.linkTypes;
+    case "action":
+      return index.actionTypes;
+    case "catalog":
+      return index.catalogTypes;
+    case "event":
+      return index.eventTypes;
+    case "interface":
+      return index.interfaceTypes;
+    case "value-type":
+      return index.valueTypes;
+    case "property":
+      return index.sharedProperties;
+    case "group":
+      return index.groups;
+    case "surface":
+      return index.surfaces;
+  }
+}
+function sameJson(left, right) {
+  return JSON.stringify(left ?? null) === JSON.stringify(right ?? null);
+}
+function addOntologyBindingIssues(issues, orgName, resource, ontologyIndex) {
+  const binding = resource.ontology;
+  if (binding === void 0) return;
+  if ((resource.kind === "workflow" || resource.kind === "agent") && (binding.actions?.length ?? 0) === 0) {
+    addGovernanceIssue(
+      issues,
+      "missing-ontology-actions",
+      orgName,
+      resource.id,
+      `[${orgName}] Resource '${resource.id}' declares ontology bindings but no ontology actions.`
+    );
+  }
+  if (binding.primaryAction !== void 0 && !binding.actions?.includes(binding.primaryAction)) {
+    addGovernanceIssue(
+      issues,
+      "primary-action-mismatch",
+      orgName,
+      resource.id,
+      `[${orgName}] Resource '${resource.id}' primaryAction '${binding.primaryAction}' must be included in ontology.actions.`
+    );
+  }
+  if (ontologyIndex === void 0) return;
+  const validateRefs = (bindingKey, expectedKind, refs) => {
+    const values = refs === void 0 ? [] : Array.isArray(refs) ? refs : [refs];
+    const index = ontologyIndexForKind(ontologyIndex, expectedKind);
+    for (const ref of values) {
+      if (index[ref] !== void 0) continue;
+      addGovernanceIssue(
+        issues,
+        "ontology-reference-missing",
+        orgName,
+        resource.id,
+        `[${orgName}] Resource '${resource.id}' ontology.${bindingKey} references missing ${expectedKind} ontology record '${ref}'.`
+      );
+    }
+  };
+  validateRefs("actions", "action", binding.actions);
+  validateRefs("primaryAction", "action", binding.primaryAction);
+  validateRefs("reads", "object", binding.reads);
+  validateRefs("writes", "object", binding.writes);
+  validateRefs("usesCatalogs", "catalog", binding.usesCatalogs);
+  validateRefs("emits", "event", binding.emits);
+}
+function addTopologyIssues(issues, orgName, deployment, organizationModel, systemsById, omResourcesById, ontologyIndex) {
+  const relationships = organizationModel.topology?.relationships;
+  if (relationships === void 0) return;
+  const rolesById = new Set(Object.keys(organizationModel.roles ?? {}));
+  const policiesById = new Set(Object.keys(organizationModel.policies ?? {}));
+  const triggerIds = new Set(deployment.triggers?.map((trigger) => trigger.resourceId) ?? []);
+  const humanCheckpointIds = new Set(deployment.humanCheckpoints?.map((checkpoint) => checkpoint.resourceId) ?? []);
+  const externalResourceIds = new Set(deployment.externalResources?.map((external) => external.resourceId) ?? []);
+  const topologyRefExists = (ref) => {
+    if (ref.kind === "system") return systemsById.has(ref.id);
+    if (ref.kind === "resource") return omResourcesById.has(ref.id);
+    if (ref.kind === "policy") return policiesById.has(ref.id);
+    if (ref.kind === "role") return rolesById.has(ref.id);
+    if (ref.kind === "trigger") return triggerIds.has(ref.id);
+    if (ref.kind === "humanCheckpoint") return humanCheckpointIds.has(ref.id);
+    if (ref.kind === "externalResource") return externalResourceIds.has(ref.id);
+    if (ref.kind === "ontology") {
+      if (ontologyIndex === void 0) return true;
+      return Object.values(ontologyIndex).some((records) => records[ref.id] !== void 0);
+    }
+    return false;
+  };
+  for (const [relationshipId, relationship] of Object.entries(relationships)) {
+    ;
+    ["from", "to"].forEach((side) => {
+      const ref = relationship[side];
+      if (topologyRefExists(ref)) return;
+      addGovernanceIssue(
+        issues,
+        "topology-reference-missing",
+        orgName,
+        ref.id,
+        `[${orgName}] Topology relationship '${relationshipId}' ${side} references missing ${ref.kind} '${ref.id}'.`
+      );
+    });
+  }
+}
 function validateResourceGovernance(orgName, deployment, organizationModel = deployment.organizationModel, options = {}) {
   const mode = getResourceValidatorMode(options.mode);
   const omResourcesMap = organizationModel?.resources;
@@ -39541,6 +39766,17 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
   const omResourcesById = new Map(activeOmResources.map((resource) => [resource.id, resource]));
   const runtimeResources = getRuntimeResources(deployment);
   const runtimeResourcesById = new Map(runtimeResources.map((resource) => [resource.resourceId, resource]));
+  const ontologyCompilation = hasOntologySources(organizationModel) ? compileOrganizationOntology(organizationModel) : void 0;
+  const ontologyIndex = ontologyCompilation?.ontology;
+  for (const diagnostic of ontologyCompilation?.diagnostics ?? []) {
+    addGovernanceIssue(
+      issues,
+      "ontology-reference-missing",
+      orgName,
+      diagnostic.id,
+      `[${orgName}] ${diagnostic.message}`
+    );
+  }
   for (const resource of activeOmResources) {
     if (!systemsById.has(resource.systemPath)) {
       addGovernanceIssue(
@@ -39580,6 +39816,16 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
         `[${orgName}] Resource '${resource.id}' system mismatch: code descriptor has '${runtimeResource.descriptor.systemPath}', OM has '${resource.systemPath}'.`
       );
     }
+    if (runtimeResource.descriptor && !sameJson(runtimeResource.descriptor.ontology, resource.ontology)) {
+      addGovernanceIssue(
+        issues,
+        "descriptor-mismatch",
+        orgName,
+        resource.id,
+        `[${orgName}] Resource '${resource.id}' ontology descriptor mismatch between code and OM.`
+      );
+    }
+    addOntologyBindingIssues(issues, orgName, resource, ontologyIndex);
   }
   for (const runtimeResource of runtimeResources) {
     const omResource = omResourcesById.get(runtimeResource.resourceId);
@@ -39621,6 +39867,7 @@ function validateResourceGovernance(orgName, deployment, organizationModel = dep
       );
     }
   }
+  addTopologyIssues(issues, orgName, deployment, organizationModel, systemsById, omResourcesById, ontologyIndex);
   emitGovernanceIssues(issues, mode, options.onWarning);
   return {
     valid: issues.length === 0,
@@ -39690,9 +39937,9 @@ function validateExecutionInterface(orgName, resourceId, executionInterface, inp
   }
   const schemaFieldNames = Object.keys(schemaShape);
   const formToSchemaMap = /* @__PURE__ */ new Map();
-  for (const field of form.fields) {
-    const schemaKey = fieldMappings[field.name] ?? field.name;
-    formToSchemaMap.set(field.name, schemaKey);
+  for (const field2 of form.fields) {
+    const schemaKey = fieldMappings[field2.name] ?? field2.name;
+    formToSchemaMap.set(field2.name, schemaKey);
   }
   for (const schemaFieldName of schemaFieldNames) {
     const schemaField = schemaShape[schemaFieldName];
@@ -43176,7 +43423,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
       business: {
         type: "group",
         label: "Business",
-        icon: "business",
+        icon: "briefcase",
         order: 20,
         children: {
           sales: {
@@ -43193,7 +43440,7 @@ var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
             label: "Clients",
             path: "/clients",
             surfaceType: "list",
-            icon: "projects",
+            icon: "clients",
             order: 20,
             targets: { systems: ["clients"] }
           },
@@ -43567,7 +43814,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       lifecycle: "active",
       color: "orange",
-      icon: "projects",
+      icon: "clients",
       path: "/clients"
     },
     operations: {
@@ -43871,6 +44118,7 @@ var DEFAULT_ORGANIZATION_MODEL = {
   },
   ontology: DEFAULT_ONTOLOGY_SCOPE,
   resources: DEFAULT_ORGANIZATION_MODEL_RESOURCES,
+  topology: DEFAULT_ORGANIZATION_MODEL_TOPOLOGY,
   actions: DEFAULT_ORGANIZATION_MODEL_ACTIONS,
   entities: DEFAULT_ORGANIZATION_MODEL_ENTITIES2,
   policies: DEFAULT_ORGANIZATION_MODEL_POLICIES,
@@ -44165,6 +44413,32 @@ function buildOrganizationGraph(input) {
   }
   const validSystemRefs = new Set(systemPathByRef.keys());
   const systemNodeId = (systemRef) => nodeId("system", systemPathByRef.get(systemRef) ?? systemRef);
+  function topologyNodeId(ref) {
+    if (ref.kind === "system") return systemNodeId(ref.id);
+    if (ref.kind === "resource") return nodeId("resource", ref.id);
+    if (ref.kind === "ontology") return ontologyGraphNodeId(ref.id);
+    if (ref.kind === "policy") return nodeId("policy", ref.id);
+    if (ref.kind === "role") return nodeId("role", ref.id);
+    return nodeId("resource", ref.id);
+  }
+  function ensureTopologyNode(ref) {
+    const id = topologyNodeId(ref);
+    if (nodeIds.has(id)) return id;
+    if (ref.kind === "resource") {
+      ensureResourceNode(nodes, nodeIds, resourceNodesById, ref.id);
+      return id;
+    }
+    if (ref.kind === "trigger" || ref.kind === "humanCheckpoint" || ref.kind === "externalResource") {
+      pushUniqueNode(nodes, nodeIds, {
+        id,
+        kind: "resource",
+        label: ref.id,
+        sourceId: ref.id,
+        resourceType: ref.kind === "trigger" ? "trigger" : ref.kind === "humanCheckpoint" ? "human_checkpoint" : "external"
+      });
+    }
+    return id;
+  }
   for (const { path: path3, system } of systemsWithPaths.sort((a, b) => a.path.localeCompare(b.path))) {
     const id = nodeId("system", path3);
     pushUniqueNode(nodes, nodeIds, {
@@ -44480,7 +44754,7 @@ function buildOrganizationGraph(input) {
         targetId: resourceNode.id
       });
     }
-    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "implements", resource.ontology?.implements);
+    pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "actions", resource.ontology?.actions);
     pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "reads", resource.ontology?.reads);
     pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "writes", resource.ontology?.writes);
     pushOntologyBindingEdges(edges, edgeIds, resourceNode.id, "uses_catalog", resource.ontology?.usesCatalogs);
@@ -44614,6 +44888,19 @@ function buildOrganizationGraph(input) {
       }
     }
   }
+  for (const [relationshipId, relationship] of Object.entries(organizationModel.topology.relationships).sort(
+    ([a], [b]) => a.localeCompare(b)
+  )) {
+    const sourceId = ensureTopologyNode(relationship.from);
+    const targetId = ensureTopologyNode(relationship.to);
+    pushUniqueEdge(edges, edgeIds, {
+      id: edgeId(relationship.kind, sourceId, targetId, `topology-${relationshipId}`),
+      kind: relationship.kind,
+      sourceId,
+      targetId,
+      relationshipType: relationship.kind
+    });
+  }
   for (const segment of Object.values(organizationModel.customers).sort(
     (a, b) => a.order - b.order || a.id.localeCompare(b.id)
   )) {
@@ -45048,7 +45335,7 @@ function wrapAction(commandName, fn) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "1.22.0",
+  version: "1.23.0",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -47753,6 +48040,425 @@ function parsePath(pathString) {
     `parsePath: unrecognized path pattern "${pathString}". Supported: /by-system/<id>, /by-kind/<kind>, /by-owner/<id>, /graph/<nodeId>/governs, /graph/<nodeId>/governed-by, /<nodeId>`
   );
 }
+function omSearch(model, query, options = {}) {
+  const limit = options.limit ?? 10;
+  const kinds = options.kinds ? new Set(options.kinds) : null;
+  const terms = tokenize(query);
+  if (terms.length === 0) return [];
+  const entries = collectSearchable(model, kinds);
+  const scored = [];
+  for (const entry of entries) {
+    const score = scoreEntry(entry, terms);
+    if (score > 0) {
+      scored.push({
+        kind: entry.kind,
+        id: entry.id,
+        title: entry.title,
+        summary: entry.summary,
+        score,
+        subKind: entry.subKind
+      });
+    }
+  }
+  scored.sort((a, b) => b.score - a.score || a.id.localeCompare(b.id));
+  return limit > 0 ? scored.slice(0, limit) : scored;
+}
+function tokenize(query) {
+  return query.toLowerCase().split(/[\s,/]+/).map((t) => t.replace(/^[^a-z0-9]+|[^a-z0-9]+$/g, "")).filter((t) => t.length >= 2);
+}
+function structuralTokens(text) {
+  return new Set(
+    text.toLowerCase().split(/[\s.\-_:/,;]+/).map((t) => t.replace(/^[^a-z0-9]+|[^a-z0-9]+$/g, "")).filter((t) => t.length >= 2)
+  );
+}
+function setsEqual(a, b) {
+  if (a.size !== b.size) return false;
+  for (const item of a) if (!b.has(item)) return false;
+  return true;
+}
+function countOccurrences(haystack, needle) {
+  if (!haystack || !needle) return 0;
+  const lower = haystack.toLowerCase();
+  let count = 0;
+  let idx = 0;
+  while ((idx = lower.indexOf(needle, idx)) !== -1) {
+    count++;
+    idx += needle.length;
+  }
+  return count;
+}
+var KIND_BOOST = {
+  system: 5,
+  resource: 3,
+  role: 3,
+  policy: 3,
+  ontology: 1,
+  knowledge: 0
+};
+function scoreEntry(entry, terms) {
+  let total = 0;
+  const idLower = entry.id.toLowerCase();
+  for (const term of terms) {
+    for (const text of entry.high) total += 8 * countOccurrences(text, term);
+    for (const text of entry.mid) total += 4 * countOccurrences(text, term);
+    for (const text of entry.meta) total += 3 * countOccurrences(text, term);
+    for (const text of entry.low) total += 1 * countOccurrences(text, term);
+  }
+  if (total === 0) return 0;
+  const queryTokenSet = new Set(terms);
+  if (terms.length === 1 && idLower === terms[0]) total += 50;
+  const titleTokens = structuralTokens(entry.title);
+  if (setsEqual(queryTokenSet, titleTokens)) total += 25;
+  const lastSegment = idLower.split(".").pop() ?? idLower;
+  if (setsEqual(queryTokenSet, structuralTokens(lastSegment))) total += 20;
+  if (terms.every((t) => idLower.includes(t))) total += 5;
+  total += KIND_BOOST[entry.kind];
+  return total;
+}
+function collectSearchable(model, kinds) {
+  const entries = [];
+  const include = (kind) => kinds === null || kinds.has(kind);
+  if (include("knowledge")) {
+    for (const node of Object.values(model.knowledge ?? {})) {
+      entries.push({
+        kind: "knowledge",
+        id: node.id,
+        title: node.title,
+        summary: node.summary,
+        subKind: node.kind,
+        high: [node.id, node.title],
+        mid: [node.summary],
+        meta: [node.kind, ...node.ownerIds ?? []],
+        low: [node.body]
+      });
+    }
+  }
+  if (include("system")) {
+    for (const { path: path3, system } of listAllSystems(model)) {
+      const title = system.label ?? system.title ?? path3;
+      const description = system.description ?? "";
+      entries.push({
+        kind: "system",
+        id: path3,
+        title,
+        summary: description,
+        subKind: system.kind,
+        high: [path3, title],
+        mid: [description],
+        meta: [system.kind ?? "", system.lifecycle ?? "", system.responsibleRoleId ?? ""],
+        low: []
+      });
+      if (include("ontology") && system.ontology) {
+        entries.push(...collectOntologyEntries(system.ontology));
+      }
+    }
+  } else if (include("ontology")) {
+    for (const { system } of listAllSystems(model)) {
+      if (system.ontology) entries.push(...collectOntologyEntries(system.ontology));
+    }
+  }
+  if (include("ontology") && model.ontology) {
+    entries.push(...collectOntologyEntries(model.ontology));
+  }
+  if (include("resource")) {
+    for (const resource of Object.values(model.resources ?? {})) {
+      const title = resource.title ?? resource.id;
+      const description = resource.description ?? "";
+      entries.push({
+        kind: "resource",
+        id: resource.id,
+        title,
+        summary: description,
+        subKind: resource.kind,
+        high: [resource.id, title],
+        mid: [description],
+        meta: [resource.kind, resource.systemPath, resource.status, resource.ownerRoleId ?? ""],
+        low: []
+      });
+    }
+  }
+  if (include("role")) {
+    for (const role of Object.values(model.roles ?? {})) {
+      const responsibilities = role.responsibilities ?? [];
+      entries.push({
+        kind: "role",
+        id: role.id,
+        title: role.title,
+        summary: responsibilities[0] ?? "",
+        high: [role.id, role.title],
+        mid: [],
+        meta: responsibilities,
+        low: []
+      });
+    }
+  }
+  if (include("policy")) {
+    for (const policy of Object.values(model.policies ?? {})) {
+      const description = policy.description ?? "";
+      entries.push({
+        kind: "policy",
+        id: policy.id,
+        title: policy.label,
+        summary: description,
+        subKind: policy.trigger?.kind,
+        high: [policy.id, policy.label],
+        mid: [description],
+        meta: [policy.trigger?.kind ?? ""],
+        low: []
+      });
+    }
+  }
+  return entries;
+}
+function collectOntologyEntries(scope) {
+  const entries = [];
+  const buckets = [
+    ["object", scope.objectTypes],
+    ["link", scope.linkTypes],
+    ["action", scope.actionTypes],
+    ["catalog", scope.catalogTypes],
+    ["event", scope.eventTypes],
+    ["interface", scope.interfaceTypes],
+    ["value-type", scope.valueTypes],
+    ["property", scope.sharedProperties],
+    ["group", scope.groups],
+    ["surface", scope.surfaces]
+  ];
+  for (const [subKind, records] of buckets) {
+    if (!records) continue;
+    for (const [recordId, record2] of Object.entries(records)) {
+      const id = record2.id ?? recordId;
+      const title = record2.label ?? id;
+      const description = record2.description ?? "";
+      entries.push({
+        kind: "ontology",
+        id,
+        title,
+        summary: description,
+        subKind,
+        high: [id, title],
+        mid: [description],
+        meta: [subKind],
+        low: []
+      });
+    }
+  }
+  return entries;
+}
+function detectKind(model, id) {
+  if (/:(object|action|event|catalog|link|interface|value-type|property|group|surface)\//.test(id)) {
+    return "ontology";
+  }
+  if (id.startsWith("knowledge.")) return "knowledge";
+  if (id.startsWith("role.")) return "role";
+  if (id.startsWith("policy.")) return "policy";
+  if (model.systems && getSystemByPath(model.systems, id)) return "system";
+  if (model.resources?.[id]) return "resource";
+  return void 0;
+}
+function getSystemByPath(systems, path3) {
+  const segments = path3.split(".");
+  let current = systems;
+  for (const seg of segments) {
+    const node = current[seg];
+    if (node === void 0 || typeof node !== "object" || node === null) return void 0;
+    const next = node;
+    if (seg === segments[segments.length - 1]) return next;
+    current = next.systems ?? next.subsystems ?? {};
+  }
+  return void 0;
+}
+function omDescribe(model, id) {
+  const kind = detectKind(model, id);
+  if (kind === void 0) return void 0;
+  switch (kind) {
+    case "system":
+      return describeSystem(model, id);
+    case "resource":
+      return describeResource(model, id);
+    case "knowledge":
+      return describeKnowledge(model, id);
+    case "ontology":
+      return describeOntology(model, id);
+    case "role":
+      return describeRole(model, id);
+    case "policy":
+      return describePolicy(model, id);
+  }
+}
+function describeSystem(model, path3) {
+  const allSystems = listAllSystems(model);
+  const match = allSystems.find((s) => s.path === path3);
+  if (!match) return void 0;
+  const { system } = match;
+  const prefix = path3 + ".";
+  const childSystemPaths = allSystems.filter((s) => s.path.startsWith(prefix) && !s.path.slice(prefix.length).includes(".")).map((s) => s.path);
+  const resources = Object.values(model.resources ?? {}).filter((r) => r.systemPath === path3);
+  const resourceCountsByKind = {};
+  const resourceIdsByKind = {};
+  for (const r of resources) {
+    resourceCountsByKind[r.kind] = (resourceCountsByKind[r.kind] ?? 0) + 1;
+    if (!resourceIdsByKind[r.kind]) resourceIdsByKind[r.kind] = [];
+    resourceIdsByKind[r.kind].push(r.id);
+  }
+  const governingKnowledgeIds = [];
+  for (const node of Object.values(model.knowledge ?? {})) {
+    if ((node.links ?? []).some((link) => link.nodeId === `system:${path3}`)) {
+      governingKnowledgeIds.push(node.id);
+    }
+  }
+  const ontologyCountsByKind = {};
+  const ontology = system.ontology;
+  if (ontology) {
+    const buckets = [
+      ["object", ontology.objectTypes],
+      ["action", ontology.actionTypes],
+      ["event", ontology.eventTypes],
+      ["catalog", ontology.catalogTypes],
+      ["link", ontology.linkTypes],
+      ["interface", ontology.interfaceTypes],
+      ["value-type", ontology.valueTypes],
+      ["property", ontology.sharedProperties],
+      ["group", ontology.groups],
+      ["surface", ontology.surfaces]
+    ];
+    for (const [k, records] of buckets) {
+      const count = records ? Object.keys(records).length : 0;
+      if (count > 0) ontologyCountsByKind[k] = count;
+    }
+  }
+  return {
+    kind: "system",
+    id: path3,
+    label: system.label ?? system.title ?? path3,
+    description: system.description ?? "",
+    systemKind: system.kind,
+    lifecycle: system.lifecycle,
+    parentSystemId: system.parentSystemId,
+    responsibleRoleId: system.responsibleRoleId,
+    childSystemPaths,
+    governingKnowledgeIds,
+    resourceCountsByKind,
+    resourceIdsByKind,
+    ontologyCountsByKind
+  };
+}
+function describeResource(model, id) {
+  const r = model.resources?.[id];
+  if (!r) return void 0;
+  return {
+    kind: "resource",
+    id: r.id,
+    resourceKind: r.kind,
+    systemPath: r.systemPath,
+    title: r.title ?? r.id,
+    description: r.description ?? "",
+    status: r.status,
+    ownerRoleId: r.ownerRoleId,
+    ontology: r.ontology ? {
+      primaryAction: r.ontology.primaryAction,
+      actions: r.ontology.actions,
+      reads: r.ontology.reads,
+      writes: r.ontology.writes,
+      emits: r.ontology.emits,
+      usesCatalogs: r.ontology.usesCatalogs
+    } : void 0,
+    codeRefPaths: (r.codeRefs ?? []).map((c) => c.path)
+  };
+}
+function describeKnowledge(model, id) {
+  const node = model.knowledge?.[id];
+  if (!node) return void 0;
+  const bodyLines = node.body.split("\n");
+  const bodyExcerpt = bodyLines.slice(0, 6).join("\n") + (bodyLines.length > 6 ? "\n..." : "");
+  return {
+    kind: "knowledge",
+    id: node.id,
+    knowledgeKind: node.kind,
+    title: node.title,
+    summary: node.summary,
+    bodyExcerpt,
+    bodyLineCount: bodyLines.length,
+    ownerIds: node.ownerIds ?? [],
+    governs: (node.links ?? []).map((link) => link.nodeId),
+    updatedAt: node.updatedAt
+  };
+}
+function describeOntology(model, id) {
+  const parsed = id.match(/^([^:]+):([a-z-]+)\/(.+)$/);
+  if (!parsed) return void 0;
+  const [, scope, ontologyKind, localId] = parsed;
+  const buckets = [
+    ["object", "objectTypes"],
+    ["action", "actionTypes"],
+    ["event", "eventTypes"],
+    ["catalog", "catalogTypes"],
+    ["link", "linkTypes"],
+    ["interface", "interfaceTypes"],
+    ["value-type", "valueTypes"],
+    ["property", "sharedProperties"],
+    ["group", "groups"],
+    ["surface", "surfaces"]
+  ];
+  const bucketKey = buckets.find((b) => b[0] === ontologyKind)?.[1];
+  if (!bucketKey) return void 0;
+  function findIn(scopeObj) {
+    if (!scopeObj) return void 0;
+    const records = scopeObj[bucketKey];
+    return records?.[id];
+  }
+  let record2;
+  for (const { system } of listAllSystems(model)) {
+    record2 = findIn(system.ontology);
+    if (record2) break;
+  }
+  if (!record2) record2 = findIn(model.ontology);
+  if (!record2) return void 0;
+  const governingKnowledgeIds = [];
+  for (const node of Object.values(model.knowledge ?? {})) {
+    if ((node.links ?? []).some((link) => link.nodeId === `ontology:${id}`)) {
+      governingKnowledgeIds.push(node.id);
+    }
+  }
+  return {
+    kind: "ontology",
+    id,
+    ontologyKind,
+    scope,
+    localId,
+    label: record2.label ?? id,
+    description: record2.description ?? "",
+    governingKnowledgeIds
+  };
+}
+function describeRole(model, id) {
+  const role = model.roles?.[id];
+  if (!role) return void 0;
+  return {
+    kind: "role",
+    id: role.id,
+    title: role.title,
+    responsibilities: role.responsibilities ?? [],
+    responsibleFor: role.responsibleFor ?? [],
+    reportsToId: role.reportsToId
+  };
+}
+function describePolicy(model, id) {
+  const policy = model.policies?.[id];
+  if (!policy) return void 0;
+  return {
+    kind: "policy",
+    id: policy.id,
+    label: policy.label,
+    description: policy.description ?? "",
+    triggerKind: policy.trigger?.kind ?? "unknown",
+    appliesToSystemIds: policy.appliesTo?.systemIds ?? [],
+    appliesToActionIds: policy.appliesTo?.actionIds ?? [],
+    appliesToResourceIds: policy.appliesTo?.resourceIds ?? [],
+    appliesToRoleIds: policy.appliesTo?.roleIds ?? [],
+    effectKinds: (policy.actions ?? []).map((a) => a.kind)
+  };
+}
 
 // ../core/src/knowledge/format.ts
 function formatText(results) {
@@ -47783,6 +48489,159 @@ function formatIdsOnly(results) {
   const ids = results.map((r) => typeof r === "string" ? r : r.id);
   return ids.join("\n");
 }
+function formatOmSearchHits(hits) {
+  if (hits.length === 0) return "(no results)";
+  const kindWidth = Math.max(...hits.map((h) => labelForKind(h).length), 6);
+  const idWidth = Math.max(...hits.map((h) => h.id.length), 4);
+  const rows = hits.map((hit) => {
+    const summary = hit.summary.length > 80 ? hit.summary.slice(0, 77) + "..." : hit.summary;
+    const kindLabel = labelForKind(hit).padEnd(kindWidth);
+    const idLabel = hit.id.padEnd(idWidth);
+    const tail = summary ? `  \u2014  ${hit.title}  \u2014  ${summary}` : `  \u2014  ${hit.title}`;
+    return `${kindLabel}  ${idLabel}${tail}`;
+  });
+  return rows.join("\n");
+}
+function labelForKind(hit) {
+  return hit.subKind ? `[${hit.kind}/${hit.subKind}]` : `[${hit.kind}]`;
+}
+function formatOmDescribe(result) {
+  if (!result) return "(node not found)";
+  switch (result.kind) {
+    case "system":
+      return formatSystemDescribe(result);
+    case "resource":
+      return formatResourceDescribe(result);
+    case "knowledge":
+      return formatKnowledgeDescribe(result);
+    case "ontology":
+      return formatOntologyDescribe(result);
+    case "role":
+      return formatRoleDescribe(result);
+    case "policy":
+      return formatPolicyDescribe(result);
+  }
+}
+function section(title, body) {
+  return body ? `${title}:
+${body}` : "";
+}
+function bullet(items) {
+  if (items.length === 0) return "  (none)";
+  return items.map((i) => `  - ${i}`).join("\n");
+}
+function field(label, value) {
+  return value === void 0 || value === null || value === "" ? "" : `${label}: ${value}`;
+}
+function join3(parts) {
+  return parts.filter((p) => p.length > 0).join("\n\n");
+}
+function formatSystemDescribe(r) {
+  const header = join3([
+    `System: ${r.id}`,
+    [
+      field("Label", r.label),
+      field("Kind", r.systemKind),
+      field("Lifecycle", r.lifecycle),
+      field("Parent", r.parentSystemId),
+      field("Responsible role", r.responsibleRoleId)
+    ].filter((s) => s.length > 0).join("\n"),
+    r.description ? `Description: ${r.description}` : ""
+  ]);
+  const govSection = section("Governed by knowledge", bullet(r.governingKnowledgeIds));
+  const resourceLines = [];
+  const totalResources = Object.values(r.resourceCountsByKind).reduce((a, b) => a + b, 0);
+  if (totalResources > 0) {
+    for (const [kind, count] of Object.entries(r.resourceCountsByKind)) {
+      const ids = r.resourceIdsByKind[kind] ?? [];
+      const preview = ids.slice(0, 5).join(", ");
+      const tail = ids.length > 5 ? `, ... (+${ids.length - 5})` : "";
+      resourceLines.push(`  ${kind}s (${count}): ${preview}${tail}`);
+    }
+  } else {
+    resourceLines.push("  (none)");
+  }
+  const resourceSection = `Resources (${totalResources}):
+${resourceLines.join("\n")}`;
+  const ontologyEntries = Object.entries(r.ontologyCountsByKind);
+  const ontologySection = ontologyEntries.length ? `Ontology: ${ontologyEntries.map(([k, n]) => `${k}s: ${n}`).join(", ")}` : "";
+  const childSection = section("Subsystems", bullet(r.childSystemPaths));
+  return join3([header, govSection, resourceSection, ontologySection, childSection]);
+}
+function formatResourceDescribe(r) {
+  const header = join3([
+    `Resource: ${r.id}`,
+    [
+      field("Kind", r.resourceKind),
+      field("System", r.systemPath),
+      field("Title", r.title),
+      field("Status", r.status),
+      field("Owner role", r.ownerRoleId)
+    ].filter((s) => s.length > 0).join("\n"),
+    r.description ? `Description: ${r.description}` : ""
+  ]);
+  const ontologyLines = [];
+  if (r.ontology) {
+    if (r.ontology.primaryAction) ontologyLines.push(`  primary action: ${r.ontology.primaryAction}`);
+    if (r.ontology.actions?.length) ontologyLines.push(`  actions: ${r.ontology.actions.join(", ")}`);
+    if (r.ontology.reads?.length) ontologyLines.push(`  reads: ${r.ontology.reads.join(", ")}`);
+    if (r.ontology.writes?.length) ontologyLines.push(`  writes: ${r.ontology.writes.join(", ")}`);
+    if (r.ontology.emits?.length) ontologyLines.push(`  emits: ${r.ontology.emits.join(", ")}`);
+    if (r.ontology.usesCatalogs?.length) ontologyLines.push(`  uses catalogs: ${r.ontology.usesCatalogs.join(", ")}`);
+  }
+  const ontologySection = ontologyLines.length ? `Ontology bindings:
+${ontologyLines.join("\n")}` : "";
+  const codeRefsSection = r.codeRefPaths.length ? `Code refs:
+${bullet(r.codeRefPaths)}` : "";
+  return join3([header, ontologySection, codeRefsSection]);
+}
+function formatKnowledgeDescribe(r) {
+  const header = join3([
+    `Knowledge: ${r.id}`,
+    [field("Kind", r.knowledgeKind), field("Title", r.title), field("Updated", r.updatedAt)].filter((s) => s.length > 0).join("\n"),
+    r.summary ? `Summary: ${r.summary}` : ""
+  ]);
+  const ownerSection = r.ownerIds.length ? `Owned by:
+${bullet(r.ownerIds)}` : "";
+  const govSection = section("Governs", bullet(r.governs));
+  const bodySection = `Body excerpt (${r.bodyLineCount} lines total \u2014 use knowledge:cat for full):
+${r.bodyExcerpt}`;
+  return join3([header, ownerSection, govSection, bodySection]);
+}
+function formatOntologyDescribe(r) {
+  const header = join3([
+    `Ontology: ${r.id}`,
+    [field("Kind", r.ontologyKind), field("Scope", r.scope), field("Local id", r.localId), field("Label", r.label)].filter((s) => s.length > 0).join("\n"),
+    r.description ? `Description: ${r.description}` : ""
+  ]);
+  const govSection = section("Governed by knowledge", bullet(r.governingKnowledgeIds));
+  return join3([header, govSection]);
+}
+function formatRoleDescribe(r) {
+  const header = join3([
+    `Role: ${r.id}`,
+    [field("Title", r.title), field("Reports to", r.reportsToId)].filter((s) => s.length > 0).join("\n")
+  ]);
+  const respSection = section("Responsibilities", bullet(r.responsibilities));
+  const responsibleForSection = section("Responsible for systems", bullet(r.responsibleFor));
+  return join3([header, respSection, responsibleForSection]);
+}
+function formatPolicyDescribe(r) {
+  const header = join3([
+    `Policy: ${r.id}`,
+    [field("Label", r.label), field("Trigger", r.triggerKind)].filter((s) => s.length > 0).join("\n"),
+    r.description ? `Description: ${r.description}` : ""
+  ]);
+  const effectSection = section("Effect kinds", bullet(r.effectKinds));
+  const appliesLines = [];
+  if (r.appliesToSystemIds.length) appliesLines.push(`  systems: ${r.appliesToSystemIds.join(", ")}`);
+  if (r.appliesToActionIds.length) appliesLines.push(`  actions: ${r.appliesToActionIds.join(", ")}`);
+  if (r.appliesToResourceIds.length) appliesLines.push(`  resources: ${r.appliesToResourceIds.join(", ")}`);
+  if (r.appliesToRoleIds.length) appliesLines.push(`  roles: ${r.appliesToRoleIds.join(", ")}`);
+  const appliesSection = appliesLines.length ? `Applies to:
+${appliesLines.join("\n")}` : "";
+  return join3([header, effectSection, appliesSection]);
+}
 
 // src/cli/commands/knowledge/load-org-model.ts
 var import_path3 = require("path");
@@ -47840,8 +48699,8 @@ async function loadOrgModel(projectRoot) {
 
 // src/cli/commands/knowledge/ls.ts
 function registerKnowledgeLs(program3) {
-  program3.command("knowledge:ls <path>").description(
-    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk knowledge:ls /by-kind/playbook\n    elevasis-sdk knowledge:ls /by-system/sales.crm\n    elevasis-sdk knowledge:ls /by-ontology/sales.crm:object/deal\n    elevasis-sdk knowledge:ls /by-owner/role.ops-lead\n    elevasis-sdk knowledge:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk knowledge:ls /graph/system:sales.crm/governed-by"
+  program3.command("knowledge:ls <path>").alias("om:ls").description(
+    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk om:ls /by-kind/playbook\n    elevasis-sdk om:ls /by-system/sales.crm\n    elevasis-sdk om:ls /by-ontology/sales.crm:object/deal\n    elevasis-sdk om:ls /by-owner/role.ops-lead\n    elevasis-sdk om:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk om:ls /graph/system:sales.crm/governed-by"
   ).option("--json", "Print wrapped JSON envelope { path, mount, args, results }").option("--ids-only", "Print one ID per line (for piping)").action(
     wrapAction("knowledge:ls", async (pathArg, options) => {
       let parsed;
@@ -47920,8 +48779,8 @@ function registerKnowledgeLs(program3) {
 
 // src/cli/commands/knowledge/cat.ts
 function registerKnowledgeCat(program3) {
-  program3.command("knowledge:cat <id>").description(
-    "Print the raw MDX body of a knowledge node\n  Example: elevasis-sdk knowledge:cat knowledge.outreach-playbook\n  Use --json for structured output"
+  program3.command("knowledge:cat <id>").alias("om:cat").description(
+    "Print the raw MDX body of a knowledge node\n  Example: elevasis-sdk om:cat knowledge.outreach-playbook\n  Use --json for structured output"
   ).option("--json", "Return structured JSON with node fields").action(
     wrapAction("knowledge:cat", async (id, options) => {
       const projectRoot = getProjectRoot();
@@ -47943,8 +48802,8 @@ function registerKnowledgeCat(program3) {
 
 // src/cli/commands/knowledge/graph.ts
 function registerKnowledgeGraph(program3) {
-  program3.command("knowledge:graph <id>").description(
-    "Show outgoing and incoming edges for a knowledge node\n  Example: elevasis-sdk knowledge:graph knowledge.outreach-playbook\n  Accepts bare OM node id or graph node id (knowledge:<id>)"
+  program3.command("knowledge:graph <id>").alias("om:graph").description(
+    "Show outgoing and incoming edges for a knowledge node\n  Example: elevasis-sdk om:graph knowledge.outreach-playbook\n  Accepts bare OM node id or graph node id (knowledge:<id>)"
   ).option("--json", "Print JSON: { nodeId, outgoing: string[], incoming: string[] }").option("--ids-only", "Print one edge ID per line (outgoing first, then incoming)").action(
     wrapAction("knowledge:graph", async (id, options) => {
       const projectRoot = getProjectRoot();
@@ -48078,8 +48937,8 @@ function resolveKnowledgeInvocationNeighbors(model, id) {
   };
 }
 function registerKnowledgeSkills(program3) {
-  program3.command("knowledge:skills <id>").description(
-    "Show callable invocations on graph neighbors for a knowledge node\n  Example: elevasis-sdk knowledge:skills knowledge.new-vertical-launch-playbook"
+  program3.command("knowledge:skills <id>").alias("om:skills").description(
+    "Show callable invocations on graph neighbors for a knowledge node\n  Example: elevasis-sdk om:skills knowledge.new-vertical-launch-playbook"
   ).option("--json", "Print JSON: { id, title, invocationSources }").action(
     wrapAction("knowledge:skills", async (id, options) => {
       const projectRoot = getProjectRoot();
@@ -48478,8 +49337,8 @@ function generateKnowledgeNodes(options) {
 
 // src/cli/commands/knowledge/generate.ts
 function registerKnowledgeGenerate(program3) {
-  program3.command("knowledge:generate").description(
-    "Generate OrganizationModel knowledge nodes from MDX source files\n  Example: elevasis-sdk knowledge:generate"
+  program3.command("knowledge:generate").alias("om:generate").description(
+    "Generate OrganizationModel knowledge nodes from MDX source files\n  Example: elevasis-sdk om:generate"
   ).option("--source <path>", "MDX source directory relative to project root", "core/config/knowledge/nodes").option(
     "--output <path>",
     "Generated TS file relative to project root",
@@ -48518,6 +49377,83 @@ function registerKnowledgeGenerate(program3) {
   );
 }
 
+// src/cli/commands/knowledge/search.ts
+var ALL_KINDS = ["system", "resource", "knowledge", "ontology", "role", "policy"];
+function parseLimit(raw) {
+  if (raw === void 0) return 10;
+  const n = Number.parseInt(raw, 10);
+  if (Number.isNaN(n) || n < 0) {
+    throw new Error(`knowledge:search: --limit must be a non-negative integer (got "${raw}")`);
+  }
+  return n;
+}
+function parseKinds(raw) {
+  if (raw === void 0) return void 0;
+  const requested = raw.split(",").map((s) => s.trim().toLowerCase()).filter((s) => s.length > 0);
+  const valid = [];
+  const invalid = [];
+  for (const kind of requested) {
+    if (ALL_KINDS.includes(kind)) {
+      valid.push(kind);
+    } else {
+      invalid.push(kind);
+    }
+  }
+  if (invalid.length > 0) {
+    throw new Error(`knowledge:search: unknown kind(s) "${invalid.join(", ")}". Valid: ${ALL_KINDS.join(", ")}`);
+  }
+  return valid.length > 0 ? valid : void 0;
+}
+function registerKnowledgeSearch(program3) {
+  program3.command("knowledge:search <query>").alias("om:search").description(
+    'Universal keyword search across the entire Organization Model\n  (systems, resources, knowledge, ontology, roles, policies)\n  Example: elevasis-sdk om:search "lead gen"\n  Example: elevasis-sdk om:search outreach --kinds knowledge\n  Example: elevasis-sdk om:search apollo --ids-only'
+  ).option("--limit <n>", "max number of hits to return (0 = unlimited)", "10").option("--kinds <list>", "comma-separated kinds filter (system,resource,knowledge,ontology,role,policy)").option("--json", "Print wrapped JSON envelope").option("--ids-only", "Print one ID per line (for piping)").action(
+    wrapAction("knowledge:search", async (query, options) => {
+      const limit = parseLimit(options.limit);
+      const kinds = parseKinds(options.kinds);
+      const projectRoot = getProjectRoot();
+      const model = await loadOrgModel(projectRoot);
+      const hits = omSearch(model, query, { limit, kinds });
+      if (options.json) {
+        const envelope = { query, limit, kinds: kinds ?? null, count: hits.length, results: hits };
+        process.stdout.write(JSON.stringify(envelope, null, 2) + "\n");
+        return;
+      }
+      if (options.idsOnly) {
+        const output = formatIdsOnly(hits);
+        if (output) process.stdout.write(output + "\n");
+        return;
+      }
+      process.stdout.write(formatOmSearchHits(hits) + "\n");
+    })
+  );
+}
+
+// src/cli/commands/knowledge/describe.ts
+function registerKnowledgeDescribe(program3) {
+  program3.command("knowledge:describe <nodeId>").alias("om:describe").description(
+    "Show a structured neighborhood view for any OM node id\n  (system, resource, knowledge, ontology, role, policy \u2014 auto-detected from id shape)\n  Example: elevasis-sdk om:describe sales.lead-gen\n  Example: elevasis-sdk om:describe knowledge.outreach-playbook"
+  ).option("--json", "Print as JSON").action(
+    wrapAction("knowledge:describe", async (nodeId2, options) => {
+      const projectRoot = getProjectRoot();
+      const model = await loadOrgModel(projectRoot);
+      const result = omDescribe(model, nodeId2);
+      if (!result) {
+        process.stderr.write(
+          `knowledge:describe: no OM node found for id "${nodeId2}". Use knowledge:search (alias: om:search) to discover nodes by keyword.
+`
+        );
+        process.exit(1);
+      }
+      if (options.json) {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return;
+      }
+      process.stdout.write(formatOmDescribe(result) + "\n");
+    })
+  );
+}
+
 // src/cli/commands/knowledge/index.ts
 function registerKnowledgeCommands(program3) {
   registerKnowledgeGenerate(program3);
@@ -48525,6 +49461,8 @@ function registerKnowledgeCommands(program3) {
   registerKnowledgeCat(program3);
   registerKnowledgeGraph(program3);
   registerKnowledgeSkills(program3);
+  registerKnowledgeSearch(program3);
+  registerKnowledgeDescribe(program3);
 }
 
 // src/cli/commands/request/request.ts