@elevasis/sdk 1.24.0 → 1.25.0

package/dist/index.js

@@ -21,670 +21,103 @@ function defineStep(step) {
 function defineWorkflow(workflow) {
   return workflow;
 }
-var ORGANIZATION_MODEL_ICON_TOKENS = [
-  // Navigation / app areas
-  "dashboard",
-  "calendar",
-  "sales",
-  "crm",
-  "lead-gen",
-  "projects",
-  "clients",
-  "operations",
-  "monitoring",
-  "knowledge",
-  "settings",
-  "admin",
-  "archive",
-  "business",
-  "finance",
-  "platform",
-  "seo",
-  // Knowledge kinds
-  "playbook",
-  "strategy",
-  "reference",
-  // Resource kinds
-  "agent",
-  "workflow",
-  "integration",
-  "database",
-  "user",
-  "team",
-  // Integration specifics
-  "gmail",
-  "google-sheets",
-  "attio",
-  // Surface / UI views
-  "overview",
-  "command-view",
-  "command-queue",
-  "pipeline",
-  "lists",
-  "resources",
-  // Actions
-  "approve",
-  "reject",
-  "retry",
-  "edit",
-  "view",
-  "launch",
-  "message",
-  "escalate",
-  "promote",
-  "submit",
-  "email",
-  // Status
-  "success",
-  "error",
-  "warning",
-  "info",
-  "pending",
-  // OM / UI group icons
-  "bolt",
-  "building",
-  "briefcase",
-  "apps",
-  "graph",
-  "shield",
-  "users",
-  "chart-bar",
-  "search"
-];
-var CustomIconTokenSchema = z.string().trim().max(80).regex(
-  /^custom\.[a-z0-9]+(?:[-._][a-z0-9]+)*$/,
-  'Custom icon tokens must start with "custom." followed by lowercase alphanumeric segments'
-);
-var OrganizationModelBuiltinIconTokenSchema = z.enum(ORGANIZATION_MODEL_ICON_TOKENS);
-var OrganizationModelIconTokenSchema = z.union([
-  OrganizationModelBuiltinIconTokenSchema,
-  CustomIconTokenSchema
+var OntologyKindSchema = z.enum([
+  "object",
+  "link",
+  "action",
+  "catalog",
+  "event",
+  "interface",
+  "value-type",
+  "property",
+  "group",
+  "surface"
 ]);
-
-// ../core/src/organization-model/domains/shared.ts
-var ModelIdSchema = z.string().trim().min(1).max(100).regex(/^[a-z0-9]+(?:[-._][a-z0-9]+)*$/, "IDs must be lowercase and use -, _, or . separators");
-var LabelSchema = z.string().trim().min(1).max(120);
-var DescriptionSchema = z.string().trim().min(1).max(2e3);
-var ColorTokenSchema = z.string().trim().min(1).max(50);
-var IconNameSchema = OrganizationModelIconTokenSchema;
-var PathSchema = z.string().trim().startsWith("/").max(300);
-var ReferenceIdsSchema = z.array(ModelIdSchema).default([]);
-var DisplayMetadataSchema = z.object({
-  label: LabelSchema,
-  description: DescriptionSchema.optional(),
-  color: ColorTokenSchema.optional(),
-  icon: IconNameSchema.optional()
+var SYSTEM_PATH_PATTERN = "[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9][a-z0-9-]*)*";
+var LOCAL_ID_PATTERN = "[a-z0-9][a-z0-9._-]*";
+var ONTOLOGY_ID_PATTERN = `^(global|${SYSTEM_PATH_PATTERN}):(${OntologyKindSchema.options.join("|")})\\/(${LOCAL_ID_PATTERN})$`;
+var ONTOLOGY_ID_REGEX = new RegExp(ONTOLOGY_ID_PATTERN);
+var OntologyIdSchema = z.string().trim().min(1).max(300).regex(
+  ONTOLOGY_ID_REGEX,
+  "Ontology IDs must use <system-path>:<kind>/<local-id> or global:<kind>/<local-id>"
+);
+function parseOntologyId(id) {
+  const normalized = OntologyIdSchema.parse(id);
+  const match = ONTOLOGY_ID_REGEX.exec(normalized);
+  if (match === null) {
+    throw new Error(`Invalid ontology ID "${id}"`);
+  }
+  return {
+    id: normalized,
+    scope: match[1],
+    kind: match[2],
+    localId: match[3],
+    isGlobal: match[1] === "global"
+  };
+}
+function formatOntologyId(input) {
+  return OntologyIdSchema.parse(`${input.scope}:${input.kind}/${input.localId}`);
+}
+var OntologyReferenceListSchema = z.array(OntologyIdSchema).default([]).optional();
+var OntologyRecordBaseSchema = z.object({
+  id: OntologyIdSchema,
+  label: z.string().trim().min(1).max(160).optional(),
+  description: z.string().trim().min(1).max(2e3).optional(),
+  ownerSystemId: z.string().trim().min(1).max(200).optional(),
+  aliases: z.array(OntologyIdSchema).optional()
+}).passthrough();
+var OntologyObjectTypeSchema = OntologyRecordBaseSchema.extend({
+  properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
+  storage: z.record(z.string(), z.unknown()).optional()
 });
-var TechStackEntrySchema = z.object({
-  /** Name of the external platform (e.g. "HubSpot", "Stripe", "Notion"). */
-  platform: z.string().trim().min(1).max(200),
-  /** Free-form description of what this integration is used for. */
-  purpose: z.string().trim().min(1).max(500),
-  /**
-   * Health of the credential backing this integration.
-   * - configured: credential present and valid
-   * - pending: not yet set up
-   * - expired: credential existed but has lapsed
-   * - missing: expected but not present
-   */
-  credentialStatus: z.enum(["configured", "pending", "expired", "missing"]),
-  /**
-   * Whether this integration is the primary system of record for its domain
-   * (e.g. HubSpot is SoR for contacts). Defaults to false.
-   */
-  isSystemOfRecord: z.boolean().default(false)
+var OntologyLinkTypeSchema = OntologyRecordBaseSchema.extend({
+  from: OntologyIdSchema,
+  to: OntologyIdSchema,
+  cardinality: z.string().trim().min(1).max(80).optional(),
+  via: z.string().trim().min(1).max(255).optional()
 });
-DisplayMetadataSchema.extend({
-  id: ModelIdSchema,
-  resourceId: z.string().trim().min(1).max(255),
-  resourceType: z.enum(["workflow", "agent", "trigger", "integration", "external", "human_checkpoint"]),
-  systemIds: ReferenceIdsSchema,
-  entityIds: ReferenceIdsSchema,
-  surfaceIds: ReferenceIdsSchema,
-  actionIds: ReferenceIdsSchema,
-  /** Optional tech-stack metadata for external-SaaS integrations. */
-  techStack: TechStackEntrySchema.optional()
+var OntologyActionTypeSchema = OntologyRecordBaseSchema.extend({
+  actsOn: OntologyReferenceListSchema,
+  input: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
+  effects: z.array(z.record(z.string(), z.unknown())).optional()
 });
-
-// ../core/src/organization-model/domains/branding.ts
-var OrganizationModelBrandingSchema = z.object({
-  organizationName: LabelSchema,
-  productName: LabelSchema,
-  shortName: z.string().trim().min(1).max(40),
-  description: DescriptionSchema.optional(),
-  logos: z.object({
-    light: z.string().trim().min(1).max(2048).optional(),
-    dark: z.string().trim().min(1).max(2048).optional()
-  }).default({})
+var OntologyCatalogTypeSchema = OntologyRecordBaseSchema.extend({
+  kind: z.string().trim().min(1).max(120).optional(),
+  appliesTo: OntologyIdSchema.optional(),
+  entries: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
 });
-var DEFAULT_ORGANIZATION_MODEL_BRANDING = {
-  organizationName: "Default Organization",
-  productName: "Elevasis",
-  shortName: "Elevasis",
-  logos: {}
-};
-var SurfaceTypeSchema = z.enum(["page", "dashboard", "graph", "detail", "list", "settings"]).meta({ label: "Surface type", color: "blue" });
-z.object({
-  id: ModelIdSchema,
-  label: LabelSchema,
-  path: PathSchema,
-  surfaceType: SurfaceTypeSchema,
-  description: DescriptionSchema.optional(),
-  enabled: z.boolean().default(true),
-  devOnly: z.boolean().optional(),
-  icon: IconNameSchema.optional(),
-  systemIds: z.array(ModelIdSchema.meta({ ref: "system" })).default([]),
-  entityIds: z.array(ModelIdSchema.meta({ ref: "entity" })).default([]),
-  resourceIds: z.array(ModelIdSchema.meta({ ref: "resource" })).default([]),
-  actionIds: z.array(ModelIdSchema.meta({ ref: "action" })).default([]),
-  parentId: ModelIdSchema.meta({ ref: "surface" }).optional()
+var OntologyEventTypeSchema = OntologyRecordBaseSchema.extend({
+  payload: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
 });
-var SidebarSurfaceTargetsSchema = z.object({
-  systems: z.array(ModelIdSchema.meta({ ref: "system" })).default([]).optional(),
-  entities: z.array(ModelIdSchema.meta({ ref: "entity" })).default([]).optional(),
-  resources: z.array(ModelIdSchema.meta({ ref: "resource" })).default([]).optional(),
-  actions: z.array(ModelIdSchema.meta({ ref: "action" })).default([]).optional()
-}).default({});
-var SidebarNodeSchema = z.lazy(
-  () => z.discriminatedUnion("type", [
-    z.object({
-      type: z.literal("group"),
-      label: LabelSchema,
-      description: DescriptionSchema.optional(),
-      icon: IconNameSchema.optional(),
-      order: z.number().int().optional(),
-      children: z.record(z.string(), SidebarNodeSchema).default({})
-    }),
-    z.object({
-      type: z.literal("surface"),
-      label: LabelSchema,
-      path: PathSchema,
-      surfaceType: SurfaceTypeSchema,
-      description: DescriptionSchema.optional(),
-      icon: IconNameSchema.optional(),
-      order: z.number().int().optional(),
-      targets: SidebarSurfaceTargetsSchema.optional(),
-      devOnly: z.boolean().optional(),
-      requiresAdmin: z.boolean().optional()
-    })
-  ])
-);
-var SidebarSectionSchema = z.record(z.string(), SidebarNodeSchema).default({});
-var SidebarNavigationSchema = z.object({
-  primary: SidebarSectionSchema,
-  bottom: SidebarSectionSchema
-}).default({ primary: {}, bottom: {} });
-var OrganizationModelNavigationSchema = z.object({
-  sidebar: SidebarNavigationSchema
-}).default({ sidebar: { primary: {}, bottom: {} } });
-z.object({
-  id: ModelIdSchema,
-  label: LabelSchema,
-  placement: z.string().trim().min(1).max(50),
-  surfaceIds: z.array(ModelIdSchema.meta({ ref: "surface" })).default([])
+var OntologyInterfaceTypeSchema = OntologyRecordBaseSchema.extend({
+  properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
 });
-var BusinessHoursDaySchema = z.object({
-  open: z.string().trim().regex(/^\d{2}:\d{2}$/, "Expected HH:MM format"),
-  close: z.string().trim().regex(/^\d{2}:\d{2}$/, "Expected HH:MM format")
+var OntologyValueTypeSchema = OntologyRecordBaseSchema.extend({
+  primitive: z.string().trim().min(1).max(120).optional()
 });
-var BusinessHoursSchema = z.object({
-  monday: BusinessHoursDaySchema.optional(),
-  tuesday: BusinessHoursDaySchema.optional(),
-  wednesday: BusinessHoursDaySchema.optional(),
-  thursday: BusinessHoursDaySchema.optional(),
-  friday: BusinessHoursDaySchema.optional(),
-  saturday: BusinessHoursDaySchema.optional(),
-  sunday: BusinessHoursDaySchema.optional()
-}).default({});
-var IdentityDomainSchema = z.object({
-  /** Why the organization exists — one or two plain-language sentences. */
-  mission: z.string().trim().max(1e3).default(""),
-  /** Long-term direction the organization is moving toward. */
-  vision: z.string().trim().max(1e3).default(""),
-  /** Legal registered name of the entity. */
-  legalName: z.string().trim().max(200).default(""),
-  /**
-   * Type of legal entity (e.g. "LLC", "Corporation", "Sole Proprietor",
-   * "Non-profit"). Free-form string so it covers any jurisdiction.
-   */
-  entityType: z.string().trim().max(100).default(""),
-  /**
-   * Primary jurisdiction of registration or operation
-   * (e.g. "United States – Delaware", "Canada – Ontario").
-   */
-  jurisdiction: z.string().trim().max(200).default(""),
-  /**
-   * Industry category — broad classification (e.g. "Marketing Agency",
-   * "Software / SaaS", "Professional Services").
-   */
-  industryCategory: z.string().trim().max(200).default(""),
-  /**
-   * Geographic focus — where the organization primarily operates or serves
-   * (e.g. "North America", "Global", "Southeast Asia").
-   */
-  geographicFocus: z.string().trim().max(200).default(""),
-  /**
-   * IANA timezone identifier for the organization's primary operating timezone
-   * (e.g. "America/Los_Angeles", "Europe/London", "UTC").
-   */
-  timeZone: z.string().trim().max(100).default("UTC"),
-  /** Typical operating hours per day of week. Empty object means not configured. */
-  businessHours: BusinessHoursSchema,
-  /**
-   * Long-form markdown capturing client context, problem narrative, and domain
-   * background. Populated by /setup; surfaced to agents as organizational context.
-   * Optional — many projects have no external client.
-   */
-  clientBrief: z.string().trim().default("")
+var OntologySharedPropertySchema = OntologyRecordBaseSchema.extend({
+  valueType: OntologyIdSchema.optional(),
+  searchable: z.boolean().optional(),
+  pii: z.boolean().optional()
 });
-var DEFAULT_ORGANIZATION_MODEL_IDENTITY = {
-  mission: "",
-  vision: "",
-  legalName: "",
-  entityType: "",
-  jurisdiction: "",
-  industryCategory: "",
-  geographicFocus: "",
-  timeZone: "UTC",
-  businessHours: {},
-  clientBrief: ""
-};
-var FirmographicsSchema = z.object({
-  /** Industry vertical (e.g. "Marketing Agency", "Legal", "Real Estate"). */
-  industry: z.string().trim().max(200).optional(),
-  /**
-   * Company headcount band (e.g. "1–10", "11–50", "51–200", "200+").
-   * Free-form string to accommodate any band notation.
-   */
-  companySize: z.string().trim().max(100).optional(),
-  /**
-   * Primary geographic region the segment operates in or is targeted from
-   * (e.g. "North America", "Europe", "Global").
-   */
-  region: z.string().trim().max(200).optional()
+var OntologyGroupSchema = OntologyRecordBaseSchema.extend({
+  members: OntologyReferenceListSchema
 });
-var CustomerSegmentSchema = z.object({
-  /** Stable unique identifier for the segment (e.g. "segment-smb-agencies"). */
-  id: z.string().trim().min(1).max(100),
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  /** Human-readable name shown to agents and in UI (e.g. "SMB Marketing Agencies"). */
-  name: z.string().trim().max(200).default(""),
-  /** One or two sentences describing who this segment is. */
-  description: z.string().trim().max(2e3).default(""),
-  /**
-   * The primary job(s) this segment is trying to get done — the goal they hire
-   * a product/service to accomplish. Plain-language narrative or bullet list.
-   */
-  jobsToBeDone: z.string().trim().max(2e3).default(""),
-  /**
-   * Pains — frustrations, obstacles, and risks the segment experiences
-   * when trying to accomplish their jobs-to-be-done.
-   */
-  pains: z.array(z.string().trim().max(500)).default([]),
-  /**
-   * Gains — outcomes and benefits the segment desires; positive motivators
-   * beyond merely resolving pains.
-   */
-  gains: z.array(z.string().trim().max(500)).default([]),
-  /** Firmographic profile for targeting and filtering. */
-  firmographics: FirmographicsSchema.default({}),
-  /**
-   * Value proposition — one or two sentences stating why this organization's
-   * offering is uniquely suited for this segment's needs.
-   */
-  valueProp: z.string().trim().max(2e3).default("")
+var OntologySurfaceTypeSchema = OntologyRecordBaseSchema.extend({
+  route: z.string().trim().min(1).max(500).optional()
 });
-var CustomersDomainSchema = z.record(z.string(), CustomerSegmentSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each segment entry id must match its map key"
+var OntologyScopeSchema = z.object({
+  objectTypes: z.record(OntologyIdSchema, OntologyObjectTypeSchema).default({}).optional(),
+  linkTypes: z.record(OntologyIdSchema, OntologyLinkTypeSchema).default({}).optional(),
+  actionTypes: z.record(OntologyIdSchema, OntologyActionTypeSchema).default({}).optional(),
+  catalogTypes: z.record(OntologyIdSchema, OntologyCatalogTypeSchema).default({}).optional(),
+  eventTypes: z.record(OntologyIdSchema, OntologyEventTypeSchema).default({}).optional(),
+  interfaceTypes: z.record(OntologyIdSchema, OntologyInterfaceTypeSchema).default({}).optional(),
+  valueTypes: z.record(OntologyIdSchema, OntologyValueTypeSchema).default({}).optional(),
+  sharedProperties: z.record(OntologyIdSchema, OntologySharedPropertySchema).default({}).optional(),
+  groups: z.record(OntologyIdSchema, OntologyGroupSchema).default({}).optional(),
+  surfaces: z.record(OntologyIdSchema, OntologySurfaceTypeSchema).default({}).optional()
 }).default({});
-var DEFAULT_ORGANIZATION_MODEL_CUSTOMERS = {};
-var PricingModelSchema = z.enum(["one-time", "subscription", "usage-based", "custom"]).meta({ label: "Pricing model", color: "green" });
-var ProductSchema = z.object({
-  /** Stable unique identifier for the product (e.g. "product-starter-plan"). */
-  id: z.string().trim().min(1).max(100),
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  /** Human-readable name shown to agents and in UI (e.g. "Starter Plan"). */
-  name: z.string().trim().max(200).default(""),
-  /** One or two sentences describing what this product/service delivers. */
-  description: z.string().trim().max(2e3).default(""),
-  /**
-   * How this product is priced:
-   * - "one-time" — single purchase (setup fee, project fee)
-   * - "subscription" — recurring (monthly/annual SaaS, retainer)
-   * - "usage-based" — metered by consumption (API calls, seats)
-   * - "custom" — negotiated or bespoke pricing
-   */
-  pricingModel: PricingModelSchema.default("custom"),
-  /** Base price amount (≥ 0). Currency unit defined by `currency`. */
-  price: z.number().min(0).default(0),
-  /**
-   * ISO 4217 currency code (e.g. "USD", "EUR", "GBP").
-   * Free-form string to accommodate any currency; defaults to "USD".
-   */
-  currency: z.string().trim().max(10).default("USD"),
-  /**
-   * IDs of customer segments this product targets.
-   * Each id must reference a declared `customers.segments[].id`.
-   * Cross-reference enforced in `OrganizationModelSchema.superRefine()`.
-   */
-  targetSegmentIds: z.array(z.string().trim().min(1)).default([]),
-  /**
-   * Optional: ID of the platform system responsible for delivering this product.
-   * When present, must reference a declared `systems.systems[].id`.
-   * Cross-reference enforced in `OrganizationModelSchema.superRefine()`.
-   */
-  deliveryFeatureId: z.string().trim().min(1).optional()
-});
-var OfferingsDomainSchema = z.record(z.string(), ProductSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each product entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_OFFERINGS = {};
-var EntityIdSchema = ModelIdSchema;
-var EntityLinkKindSchema = z.enum(["belongs-to", "has-many", "has-one", "many-to-many"]).meta({ label: "Link kind" });
-var EntityLinkSchema = z.object({
-  toEntity: EntityIdSchema.meta({ ref: "entity" }),
-  kind: EntityLinkKindSchema,
-  via: z.string().trim().min(1).max(255).optional(),
-  label: LabelSchema.optional()
-});
-var EntitySchema = z.object({
-  id: EntityIdSchema,
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  label: LabelSchema,
-  description: DescriptionSchema.optional(),
-  ownedBySystemId: ModelIdSchema.meta({ ref: "system" }),
-  table: z.string().trim().min(1).max(255).optional(),
-  rowSchema: ModelIdSchema.optional(),
-  stateCatalogId: ModelIdSchema.optional(),
-  links: z.array(EntityLinkSchema).optional()
-});
-var EntitiesDomainSchema = z.record(z.string(), EntitySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each entity entry id must match its map key"
-}).default({});
-var ENTITY_ENTRY_INPUTS = [
-  {
-    id: "crm.deal",
-    order: 10,
-    label: "Deal",
-    description: "A CRM opportunity or sales pipeline record.",
-    ownedBySystemId: "sales.crm",
-    table: "crm_deals",
-    stateCatalogId: "crm.pipeline",
-    links: [{ toEntity: "crm.contact", kind: "has-many", via: "deal_contacts", label: "contacts" }]
-  },
-  {
-    id: "crm.contact",
-    order: 20,
-    label: "CRM Contact",
-    description: "A person associated with a CRM relationship or deal.",
-    ownedBySystemId: "sales.crm",
-    table: "crm_contacts"
-  },
-  {
-    id: "leadgen.list",
-    order: 30,
-    label: "Lead List",
-    description: "A prospecting list that groups companies and contacts for acquisition workflows.",
-    ownedBySystemId: "sales.lead-gen",
-    table: "acq_lists",
-    links: [
-      { toEntity: "leadgen.company", kind: "has-many", via: "acq_list_companies", label: "companies" },
-      { toEntity: "leadgen.contact", kind: "has-many", via: "acq_list_members", label: "contacts" }
-    ]
-  },
-  {
-    id: "leadgen.company",
-    order: 40,
-    label: "Lead Company",
-    description: "A company record sourced, enriched, and qualified during prospecting.",
-    ownedBySystemId: "sales.lead-gen",
-    table: "acq_list_companies",
-    stateCatalogId: "lead-gen.company",
-    links: [
-      { toEntity: "leadgen.list", kind: "belongs-to", via: "list_id", label: "list" },
-      { toEntity: "leadgen.contact", kind: "has-many", via: "company_id", label: "contacts" }
-    ]
-  },
-  {
-    id: "leadgen.contact",
-    order: 50,
-    label: "Lead Contact",
-    description: "A prospect contact discovered or enriched during lead generation.",
-    ownedBySystemId: "sales.lead-gen",
-    table: "acq_list_members",
-    stateCatalogId: "lead-gen.contact",
-    links: [
-      { toEntity: "leadgen.list", kind: "belongs-to", via: "list_id", label: "list" },
-      { toEntity: "leadgen.company", kind: "belongs-to", via: "company_id", label: "company" }
-    ]
-  },
-  {
-    id: "delivery.project",
-    order: 60,
-    label: "Project",
-    description: "A client delivery project.",
-    ownedBySystemId: "projects",
-    table: "projects",
-    links: [
-      { toEntity: "delivery.milestone", kind: "has-many", via: "project_id", label: "milestones" },
-      { toEntity: "delivery.task", kind: "has-many", via: "project_id", label: "tasks" }
-    ]
-  },
-  {
-    id: "delivery.milestone",
-    order: 70,
-    label: "Milestone",
-    description: "A delivery checkpoint within a project.",
-    ownedBySystemId: "projects",
-    table: "project_milestones",
-    links: [
-      { toEntity: "delivery.project", kind: "belongs-to", via: "project_id", label: "project" },
-      { toEntity: "delivery.task", kind: "has-many", via: "milestone_id", label: "tasks" }
-    ]
-  },
-  {
-    id: "delivery.task",
-    order: 80,
-    label: "Task",
-    description: "A delivery task that can move through the task status catalog.",
-    ownedBySystemId: "projects",
-    table: "project_tasks",
-    stateCatalogId: "delivery.task",
-    links: [
-      { toEntity: "delivery.project", kind: "belongs-to", via: "project_id", label: "project" },
-      { toEntity: "delivery.milestone", kind: "belongs-to", via: "milestone_id", label: "milestone" }
-    ]
-  }
-];
-var DEFAULT_ORGANIZATION_MODEL_ENTITIES = Object.fromEntries(
-  ENTITY_ENTRY_INPUTS.map((entity) => {
-    const parsed = EntitySchema.parse(entity);
-    return [parsed.id, parsed];
-  })
-);
-
-// ../core/src/organization-model/domains/actions.ts
-var ActionResourceIdSchema = z.string().trim().min(1).max(255).regex(/^[A-Za-z0-9]+(?:[-._][A-Za-z0-9]+)*$/, "Resource IDs must use letters, numbers, -, _, or . separators");
-z.enum(["slash-command", "mcp-tool", "api-endpoint", "script-execution"]).meta({ label: "Invocation kind" });
-var ActionIdSchema = ModelIdSchema;
-var ActionScopeSchema = z.union([
-  z.literal("global"),
-  z.object({
-    domain: ModelIdSchema
-  })
-]);
-var ActionRefSchema = z.object({
-  actionId: ActionIdSchema.meta({ ref: "action" }),
-  intent: z.enum(["exposes", "consumes"]).meta({ label: "Intent" })
-});
-var SlashCommandInvocationSchema = z.object({
-  kind: z.literal("slash-command"),
-  command: z.string().trim().min(1).max(200).regex(/^\/[^\s].*$/, "Slash commands must start with /"),
-  toolFactory: ModelIdSchema.optional()
-});
-var McpToolInvocationSchema = z.object({
-  kind: z.literal("mcp-tool"),
-  server: ModelIdSchema,
-  name: ModelIdSchema
-});
-var ApiEndpointInvocationSchema = z.object({
-  kind: z.literal("api-endpoint"),
-  method: z.enum(["GET", "POST", "PATCH", "DELETE"]).meta({ label: "HTTP method" }),
-  path: z.string().trim().startsWith("/").max(500),
-  requestSchema: ModelIdSchema.optional(),
-  responseSchema: ModelIdSchema.optional()
-});
-var ScriptExecutionInvocationSchema = z.object({
-  kind: z.literal("script-execution"),
-  resourceId: ActionResourceIdSchema
-});
-var ActionInvocationSchema = z.discriminatedUnion("kind", [
-  SlashCommandInvocationSchema,
-  McpToolInvocationSchema,
-  ApiEndpointInvocationSchema,
-  ScriptExecutionInvocationSchema
-]);
-var ActionSchema = z.object({
-  id: ActionIdSchema,
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  label: LabelSchema,
-  description: DescriptionSchema.optional(),
-  scope: ActionScopeSchema.default("global"),
-  resourceId: ActionResourceIdSchema.optional(),
-  affects: z.array(EntityIdSchema.meta({ ref: "entity" })).optional(),
-  invocations: z.array(ActionInvocationSchema).default([]),
-  knowledge: z.array(ModelIdSchema.meta({ ref: "knowledge" })).default([]).optional(),
-  lifecycle: z.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({ label: "Lifecycle", color: "teal" }).default("active")
-});
-var ActionsDomainSchema = z.record(z.string(), ActionSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each action entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_ACTIONS = {};
-var OntologyKindSchema = z.enum([
-  "object",
-  "link",
-  "action",
-  "catalog",
-  "event",
-  "interface",
-  "value-type",
-  "property",
-  "group",
-  "surface"
-]);
-var SYSTEM_PATH_PATTERN = "[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9][a-z0-9-]*)*";
-var LOCAL_ID_PATTERN = "[a-z0-9][a-z0-9._-]*";
-var ONTOLOGY_ID_PATTERN = `^(global|${SYSTEM_PATH_PATTERN}):(${OntologyKindSchema.options.join("|")})\\/(${LOCAL_ID_PATTERN})$`;
-var ONTOLOGY_ID_REGEX = new RegExp(ONTOLOGY_ID_PATTERN);
-var OntologyIdSchema = z.string().trim().min(1).max(300).regex(
-  ONTOLOGY_ID_REGEX,
-  "Ontology IDs must use <system-path>:<kind>/<local-id> or global:<kind>/<local-id>"
-);
-function parseOntologyId(id) {
-  const normalized = OntologyIdSchema.parse(id);
-  const match = ONTOLOGY_ID_REGEX.exec(normalized);
-  if (match === null) {
-    throw new Error(`Invalid ontology ID "${id}"`);
-  }
-  return {
-    id: normalized,
-    scope: match[1],
-    kind: match[2],
-    localId: match[3],
-    isGlobal: match[1] === "global"
-  };
-}
-function formatOntologyId(input) {
-  return OntologyIdSchema.parse(`${input.scope}:${input.kind}/${input.localId}`);
-}
-var OntologyReferenceListSchema = z.array(OntologyIdSchema).default([]).optional();
-var OntologyRecordBaseSchema = z.object({
-  id: OntologyIdSchema,
-  label: z.string().trim().min(1).max(160).optional(),
-  description: z.string().trim().min(1).max(2e3).optional(),
-  ownerSystemId: z.string().trim().min(1).max(200).optional(),
-  aliases: z.array(OntologyIdSchema).optional()
-}).passthrough();
-var OntologyObjectTypeSchema = OntologyRecordBaseSchema.extend({
-  properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
-  storage: z.record(z.string(), z.unknown()).optional()
-});
-var OntologyLinkTypeSchema = OntologyRecordBaseSchema.extend({
-  from: OntologyIdSchema,
-  to: OntologyIdSchema,
-  cardinality: z.string().trim().min(1).max(80).optional(),
-  via: z.string().trim().min(1).max(255).optional()
-});
-var OntologyActionTypeSchema = OntologyRecordBaseSchema.extend({
-  actsOn: OntologyReferenceListSchema,
-  input: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
-  effects: z.array(z.record(z.string(), z.unknown())).optional()
-});
-var OntologyCatalogTypeSchema = OntologyRecordBaseSchema.extend({
-  kind: z.string().trim().min(1).max(120).optional(),
-  appliesTo: OntologyIdSchema.optional(),
-  entries: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
-var OntologyEventTypeSchema = OntologyRecordBaseSchema.extend({
-  payload: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
-var OntologyInterfaceTypeSchema = OntologyRecordBaseSchema.extend({
-  properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
-var OntologyValueTypeSchema = OntologyRecordBaseSchema.extend({
-  primitive: z.string().trim().min(1).max(120).optional()
-});
-var OntologySharedPropertySchema = OntologyRecordBaseSchema.extend({
-  valueType: OntologyIdSchema.optional(),
-  searchable: z.boolean().optional(),
-  pii: z.boolean().optional()
-});
-var OntologyGroupSchema = OntologyRecordBaseSchema.extend({
-  members: OntologyReferenceListSchema
-});
-var OntologySurfaceTypeSchema = OntologyRecordBaseSchema.extend({
-  route: z.string().trim().min(1).max(500).optional()
-});
-var OntologyScopeSchema = z.object({
-  objectTypes: z.record(OntologyIdSchema, OntologyObjectTypeSchema).default({}).optional(),
-  linkTypes: z.record(OntologyIdSchema, OntologyLinkTypeSchema).default({}).optional(),
-  actionTypes: z.record(OntologyIdSchema, OntologyActionTypeSchema).default({}).optional(),
-  catalogTypes: z.record(OntologyIdSchema, OntologyCatalogTypeSchema).default({}).optional(),
-  eventTypes: z.record(OntologyIdSchema, OntologyEventTypeSchema).default({}).optional(),
-  interfaceTypes: z.record(OntologyIdSchema, OntologyInterfaceTypeSchema).default({}).optional(),
-  valueTypes: z.record(OntologyIdSchema, OntologyValueTypeSchema).default({}).optional(),
-  sharedProperties: z.record(OntologyIdSchema, OntologySharedPropertySchema).default({}).optional(),
-  groups: z.record(OntologyIdSchema, OntologyGroupSchema).default({}).optional(),
-  surfaces: z.record(OntologyIdSchema, OntologySurfaceTypeSchema).default({}).optional()
-}).default({});
-var DEFAULT_ONTOLOGY_SCOPE = {
-  valueTypes: {
-    "global:value-type/uuid": {
-      id: "global:value-type/uuid",
-      label: "UUID",
-      primitive: "string"
-    },
-    "global:value-type/text": {
-      id: "global:value-type/text",
-      label: "Text",
-      primitive: "string"
-    },
-    "global:value-type/url": {
-      id: "global:value-type/url",
-      label: "URL",
-      primitive: "string"
-    },
-    "global:value-type/email": {
-      id: "global:value-type/email",
-      label: "Email",
-      primitive: "string"
-    }
-  }
-};
 var SCOPE_KIND = {
   objectTypes: "object",
   linkTypes: "link",
@@ -698,16 +131,6 @@ var SCOPE_KIND = {
   surfaces: "surface"
 };
 var SCOPE_KEYS = Object.keys(SCOPE_KIND);
-function listResolvedOntologyRecords(index) {
-  return SCOPE_KEYS.flatMap((scopeKey) => {
-    const kind = SCOPE_KIND[scopeKey];
-    return Object.entries(index[scopeKey]).sort(([leftId], [rightId]) => leftId.localeCompare(rightId)).map(([id, record]) => ({
-      id,
-      kind,
-      record
-    }));
-  });
-}
 function originFromContext(context) {
   return {
     kind: context.kind,
@@ -905,17 +328,343 @@ function addSystemScopes(index, diagnostics, sourcesById, systems, prefix, schem
       system.systems !== void 0 ? "systems" : "subsystems"
     ]);
   }
-}
-function compileOrganizationOntology(model) {
-  const ontology = createEmptyIndex();
-  const diagnostics = [];
-  const sourcesById = /* @__PURE__ */ new Map();
-  addScope(ontology, diagnostics, sourcesById, model.ontology, "organization.ontology", ["ontology"]);
-  addSystemScopes(ontology, diagnostics, sourcesById, model.systems ?? {}, "", ["systems"]);
-  addLegacyEntityProjections(ontology, diagnostics, sourcesById, model.entities ?? {});
-  addLegacyActionProjections(ontology, diagnostics, sourcesById, model.actions ?? {}, model.entities ?? {});
-  return { ontology: sortResolvedOntologyIndex(ontology), diagnostics };
-}
+}
+function compileOrganizationOntology(model) {
+  const ontology = createEmptyIndex();
+  const diagnostics = [];
+  const sourcesById = /* @__PURE__ */ new Map();
+  addScope(ontology, diagnostics, sourcesById, model.ontology, "organization.ontology", ["ontology"]);
+  addSystemScopes(ontology, diagnostics, sourcesById, model.systems ?? {}, "", ["systems"]);
+  addLegacyEntityProjections(ontology, diagnostics, sourcesById, model.entities ?? {});
+  addLegacyActionProjections(ontology, diagnostics, sourcesById, model.actions ?? {}, model.entities ?? {});
+  return { ontology: sortResolvedOntologyIndex(ontology), diagnostics };
+}
+
+// ../core/src/organization-model/helpers.ts
+function childSystemsOf2(system) {
+  return system.systems ?? system.subsystems ?? {};
+}
+function listAllSystems(model) {
+  const results = [];
+  function walk(map, prefix) {
+    for (const [localId, system] of Object.entries(map)) {
+      const fullPath = prefix ? `${prefix}.${localId}` : localId;
+      results.push({ path: fullPath, system });
+      const childSystems = childSystemsOf2(system);
+      if (Object.keys(childSystems).length > 0) {
+        walk(childSystems, fullPath);
+      }
+    }
+  }
+  walk(model.systems, "");
+  return results;
+}
+var ORGANIZATION_MODEL_ICON_TOKENS = [
+  // Navigation / app areas
+  "dashboard",
+  "calendar",
+  "sales",
+  "crm",
+  "lead-gen",
+  "projects",
+  "clients",
+  "operations",
+  "monitoring",
+  "knowledge",
+  "settings",
+  "admin",
+  "archive",
+  "business",
+  "finance",
+  "platform",
+  "seo",
+  // Knowledge kinds
+  "playbook",
+  "strategy",
+  "reference",
+  // Resource kinds
+  "agent",
+  "workflow",
+  "integration",
+  "database",
+  "user",
+  "team",
+  // Integration specifics
+  "gmail",
+  "google-sheets",
+  "attio",
+  // Surface / UI views
+  "overview",
+  "command-view",
+  "command-queue",
+  "pipeline",
+  "lists",
+  "resources",
+  // Actions
+  "approve",
+  "reject",
+  "retry",
+  "edit",
+  "view",
+  "launch",
+  "message",
+  "escalate",
+  "promote",
+  "submit",
+  "email",
+  // Status
+  "success",
+  "error",
+  "warning",
+  "info",
+  "pending",
+  // OM / UI group icons
+  "bolt",
+  "building",
+  "briefcase",
+  "apps",
+  "graph",
+  "shield",
+  "users",
+  "chart-bar",
+  "search"
+];
+var CustomIconTokenSchema = z.string().trim().max(80).regex(
+  /^custom\.[a-z0-9]+(?:[-._][a-z0-9]+)*$/,
+  'Custom icon tokens must start with "custom." followed by lowercase alphanumeric segments'
+);
+var OrganizationModelBuiltinIconTokenSchema = z.enum(ORGANIZATION_MODEL_ICON_TOKENS);
+var OrganizationModelIconTokenSchema = z.union([
+  OrganizationModelBuiltinIconTokenSchema,
+  CustomIconTokenSchema
+]);
+
+// ../core/src/organization-model/domains/shared.ts
+var ModelIdSchema = z.string().trim().min(1).max(100).regex(/^[a-z0-9]+(?:[-._][a-z0-9]+)*$/, "IDs must be lowercase and use -, _, or . separators");
+var LabelSchema = z.string().trim().min(1).max(120);
+var DescriptionSchema = z.string().trim().min(1).max(2e3);
+var ColorTokenSchema = z.string().trim().min(1).max(50);
+var IconNameSchema = OrganizationModelIconTokenSchema;
+var PathSchema = z.string().trim().startsWith("/").max(300);
+var ReferenceIdsSchema = z.array(ModelIdSchema).default([]);
+var DisplayMetadataSchema = z.object({
+  label: LabelSchema,
+  description: DescriptionSchema.optional(),
+  color: ColorTokenSchema.optional(),
+  icon: IconNameSchema.optional()
+});
+var TechStackEntrySchema = z.object({
+  /** Name of the external platform (e.g. "HubSpot", "Stripe", "Notion"). */
+  platform: z.string().trim().min(1).max(200),
+  /** Free-form description of what this integration is used for. */
+  purpose: z.string().trim().min(1).max(500),
+  /**
+   * Health of the credential backing this integration.
+   * - configured: credential present and valid
+   * - pending: not yet set up
+   * - expired: credential existed but has lapsed
+   * - missing: expected but not present
+   */
+  credentialStatus: z.enum(["configured", "pending", "expired", "missing"]),
+  /**
+   * Whether this integration is the primary system of record for its domain
+   * (e.g. HubSpot is SoR for contacts). Defaults to false.
+   */
+  isSystemOfRecord: z.boolean().default(false)
+});
+DisplayMetadataSchema.extend({
+  id: ModelIdSchema,
+  resourceId: z.string().trim().min(1).max(255),
+  resourceType: z.enum(["workflow", "agent", "trigger", "integration", "external", "human_checkpoint"]),
+  systemIds: ReferenceIdsSchema,
+  entityIds: ReferenceIdsSchema,
+  surfaceIds: ReferenceIdsSchema,
+  actionIds: ReferenceIdsSchema,
+  /** Optional tech-stack metadata for external-SaaS integrations. */
+  techStack: TechStackEntrySchema.optional()
+});
+var EntityIdSchema = ModelIdSchema;
+var EntityLinkKindSchema = z.enum(["belongs-to", "has-many", "has-one", "many-to-many"]).meta({ label: "Link kind" });
+var EntityLinkSchema = z.object({
+  toEntity: EntityIdSchema.meta({ ref: "entity" }),
+  kind: EntityLinkKindSchema,
+  via: z.string().trim().min(1).max(255).optional(),
+  label: LabelSchema.optional()
+});
+var EntitySchema = z.object({
+  id: EntityIdSchema,
+  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
+  order: z.number(),
+  label: LabelSchema,
+  description: DescriptionSchema.optional(),
+  ownedBySystemId: ModelIdSchema.meta({ ref: "system" }),
+  table: z.string().trim().min(1).max(255).optional(),
+  rowSchema: ModelIdSchema.optional(),
+  stateCatalogId: ModelIdSchema.optional(),
+  links: z.array(EntityLinkSchema).optional()
+});
+z.record(z.string(), EntitySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
+  message: "Each entity entry id must match its map key"
+}).default({});
+var ENTITY_ENTRY_INPUTS = [
+  {
+    id: "crm.deal",
+    order: 10,
+    label: "Deal",
+    description: "A CRM opportunity or sales pipeline record.",
+    ownedBySystemId: "sales.crm",
+    table: "crm_deals",
+    stateCatalogId: "crm.pipeline",
+    links: [{ toEntity: "crm.contact", kind: "has-many", via: "deal_contacts", label: "contacts" }]
+  },
+  {
+    id: "crm.contact",
+    order: 20,
+    label: "CRM Contact",
+    description: "A person associated with a CRM relationship or deal.",
+    ownedBySystemId: "sales.crm",
+    table: "crm_contacts"
+  },
+  {
+    id: "leadgen.list",
+    order: 30,
+    label: "Lead List",
+    description: "A prospecting list that groups companies and contacts for acquisition workflows.",
+    ownedBySystemId: "sales.lead-gen",
+    table: "acq_lists",
+    links: [
+      { toEntity: "leadgen.company", kind: "has-many", via: "acq_list_companies", label: "companies" },
+      { toEntity: "leadgen.contact", kind: "has-many", via: "acq_list_members", label: "contacts" }
+    ]
+  },
+  {
+    id: "leadgen.company",
+    order: 40,
+    label: "Lead Company",
+    description: "A company record sourced, enriched, and qualified during prospecting.",
+    ownedBySystemId: "sales.lead-gen",
+    table: "acq_list_companies",
+    stateCatalogId: "lead-gen.company",
+    links: [
+      { toEntity: "leadgen.list", kind: "belongs-to", via: "list_id", label: "list" },
+      { toEntity: "leadgen.contact", kind: "has-many", via: "company_id", label: "contacts" }
+    ]
+  },
+  {
+    id: "leadgen.contact",
+    order: 50,
+    label: "Lead Contact",
+    description: "A prospect contact discovered or enriched during lead generation.",
+    ownedBySystemId: "sales.lead-gen",
+    table: "acq_list_members",
+    stateCatalogId: "lead-gen.contact",
+    links: [
+      { toEntity: "leadgen.list", kind: "belongs-to", via: "list_id", label: "list" },
+      { toEntity: "leadgen.company", kind: "belongs-to", via: "company_id", label: "company" }
+    ]
+  },
+  {
+    id: "delivery.project",
+    order: 60,
+    label: "Project",
+    description: "A client delivery project.",
+    ownedBySystemId: "projects",
+    table: "projects",
+    links: [
+      { toEntity: "delivery.milestone", kind: "has-many", via: "project_id", label: "milestones" },
+      { toEntity: "delivery.task", kind: "has-many", via: "project_id", label: "tasks" }
+    ]
+  },
+  {
+    id: "delivery.milestone",
+    order: 70,
+    label: "Milestone",
+    description: "A delivery checkpoint within a project.",
+    ownedBySystemId: "projects",
+    table: "project_milestones",
+    links: [
+      { toEntity: "delivery.project", kind: "belongs-to", via: "project_id", label: "project" },
+      { toEntity: "delivery.task", kind: "has-many", via: "milestone_id", label: "tasks" }
+    ]
+  },
+  {
+    id: "delivery.task",
+    order: 80,
+    label: "Task",
+    description: "A delivery task that can move through the task status catalog.",
+    ownedBySystemId: "projects",
+    table: "project_tasks",
+    stateCatalogId: "delivery.task",
+    links: [
+      { toEntity: "delivery.project", kind: "belongs-to", via: "project_id", label: "project" },
+      { toEntity: "delivery.milestone", kind: "belongs-to", via: "milestone_id", label: "milestone" }
+    ]
+  }
+];
+Object.fromEntries(
+  ENTITY_ENTRY_INPUTS.map((entity) => {
+    const parsed = EntitySchema.parse(entity);
+    return [parsed.id, parsed];
+  })
+);
+
+// ../core/src/organization-model/domains/actions.ts
+var ActionResourceIdSchema = z.string().trim().min(1).max(255).regex(/^[A-Za-z0-9]+(?:[-._][A-Za-z0-9]+)*$/, "Resource IDs must use letters, numbers, -, _, or . separators");
+z.enum(["slash-command", "mcp-tool", "api-endpoint", "script-execution"]).meta({ label: "Invocation kind" });
+var ActionIdSchema = ModelIdSchema;
+var ActionScopeSchema = z.union([
+  z.literal("global"),
+  z.object({
+    domain: ModelIdSchema
+  })
+]);
+var ActionRefSchema = z.object({
+  actionId: ActionIdSchema.meta({ ref: "action" }),
+  intent: z.enum(["exposes", "consumes"]).meta({ label: "Intent" })
+});
+var SlashCommandInvocationSchema = z.object({
+  kind: z.literal("slash-command"),
+  command: z.string().trim().min(1).max(200).regex(/^\/[^\s].*$/, "Slash commands must start with /"),
+  toolFactory: ModelIdSchema.optional()
+});
+var McpToolInvocationSchema = z.object({
+  kind: z.literal("mcp-tool"),
+  server: ModelIdSchema,
+  name: ModelIdSchema
+});
+var ApiEndpointInvocationSchema = z.object({
+  kind: z.literal("api-endpoint"),
+  method: z.enum(["GET", "POST", "PATCH", "DELETE"]).meta({ label: "HTTP method" }),
+  path: z.string().trim().startsWith("/").max(500),
+  requestSchema: ModelIdSchema.optional(),
+  responseSchema: ModelIdSchema.optional()
+});
+var ScriptExecutionInvocationSchema = z.object({
+  kind: z.literal("script-execution"),
+  resourceId: ActionResourceIdSchema
+});
+var ActionInvocationSchema = z.discriminatedUnion("kind", [
+  SlashCommandInvocationSchema,
+  McpToolInvocationSchema,
+  ApiEndpointInvocationSchema,
+  ScriptExecutionInvocationSchema
+]);
+var ActionSchema = z.object({
+  id: ActionIdSchema,
+  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
+  order: z.number(),
+  label: LabelSchema,
+  description: DescriptionSchema.optional(),
+  scope: ActionScopeSchema.default("global"),
+  resourceId: ActionResourceIdSchema.optional(),
+  affects: z.array(EntityIdSchema.meta({ ref: "entity" })).optional(),
+  invocations: z.array(ActionInvocationSchema).default([]),
+  knowledge: z.array(ModelIdSchema.meta({ ref: "knowledge" })).default([]).optional(),
+  lifecycle: z.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({ label: "Lifecycle", color: "teal" }).default("active")
+});
+z.record(z.string(), ActionSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
+  message: "Each action entry id must match its map key"
+}).default({});
 
 // ../core/src/organization-model/domains/systems.ts
 var SystemKindSchema = z.enum(["product", "operational", "platform", "diagnostic"]).meta({ label: "System kind", color: "blue" });
@@ -927,7 +676,7 @@ var SystemPathSchema = z.string().trim().min(1).regex(
   'must be a dotted lowercase path (e.g. "sales.lead-gen" or "sales.crm")'
 );
 var UiPositionSchema = z.enum(["sidebar-primary", "sidebar-bottom"]).meta({ label: "UI position" });
-var NodeIdStringSchema = z.string().trim().min(1).max(200).regex(
+z.string().trim().min(1).max(200).regex(
   /^[a-z][a-z-]*:([a-z0-9-]+)(\.[a-z0-9-]+)*(:[a-z0-9.-]+)*$/,
   "Node references must use kind:dotted-path (e.g. system:sales.crm or resource:lead-gen.company.qualify)"
 );
@@ -1022,10 +771,9 @@ var SystemEntrySchema = z.object({
   console.warn("[organization-model] System.status is deprecated; use System.lifecycle instead.");
   return normalizedSystem.lifecycle === void 0 ? { ...normalizedSystem, lifecycle: normalizedSystem.status } : normalizedSystem;
 });
-var SystemsDomainSchema = z.record(z.string(), SystemEntrySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
+z.record(z.string(), SystemEntrySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
   message: "Each system entry id must match its map key"
 }).default({});
-var DEFAULT_ORGANIZATION_MODEL_SYSTEMS = {};
 
 // ../core/src/organization-model/domains/resources.ts
 var ContractRefSchema = z.string().trim().min(1).max(500).regex(
@@ -1092,1236 +840,264 @@ var ResourceOntologyBindingSchema = z.object({
 }).superRefine((binding, ctx) => {
   if (binding.primaryAction === void 0) return;
   if (binding.actions?.includes(binding.primaryAction)) return;
-  ctx.addIssue({
-    code: z.ZodIssueCode.custom,
-    path: ["primaryAction"],
-    message: "Resource ontology primaryAction must be included in actions"
-  });
-});
-var CodeReferenceSchema = z.object({
-  path: z.string().trim().min(1).max(500).regex(/^[A-Za-z0-9_./$@()[\] -]+$/, "Code reference paths must be repo-relative paths"),
-  role: CodeReferenceRoleSchema,
-  symbol: z.string().trim().min(1).max(200).optional(),
-  description: z.string().trim().min(1).max(300).optional()
-});
-var ResourceEntryBaseSchema = z.object({
-  /** Canonical resource id; runtime resourceId derives from this value. */
-  id: ResourceIdSchema,
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number().default(0),
-  /** Required single System membership — value is a dot-separated system path (e.g. "sales.lead-gen"). */
-  systemPath: SystemPathSchema.meta({ ref: "system" }),
-  /** Executable display title owned by the OM Resource descriptor. */
-  title: LabelSchema.optional(),
-  /** Executable display description owned by the OM Resource descriptor. */
-  description: DescriptionSchema.optional(),
-  /** Optional role responsible for maintaining this resource. */
-  ownerRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
-  status: ResourceGovernanceStatusSchema,
-  /**
-   * Ontology contract bindings for the semantic work this resource performs.
-   * `emits` stays nested here so top-level resource emits descriptors remain
-   * compatible with graph event projection during the bridge.
-   */
-  ontology: ResourceOntologyBindingSchema.optional(),
-  /** Repo-relative implementation breadcrumbs for agents and operators. */
-  codeRefs: z.array(CodeReferenceSchema).default([])
-});
-var WorkflowResourceEntrySchema = ResourceEntryBaseSchema.extend({
-  kind: z.literal("workflow"),
-  emits: z.array(EventEmissionDescriptorSchema).optional()
-});
-var AgentResourceEntrySchema = ResourceEntryBaseSchema.extend({
-  kind: z.literal("agent"),
-  /** Mirrors code-side AgentConfig.kind. */
-  agentKind: AgentKindSchema,
-  /** Role this agent embodies, if any. */
-  actsAsRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
-  /** Mirrors AgentConfig.sessionCapable. */
-  sessionCapable: z.boolean(),
-  /** Broad/composite callable entry points orchestrated by this agent. */
-  invocations: z.array(ActionInvocationSchema).default([]),
-  emits: z.array(EventEmissionDescriptorSchema).optional()
-});
-var IntegrationResourceEntrySchema = ResourceEntryBaseSchema.extend({
-  kind: z.literal("integration"),
-  provider: z.string().trim().min(1).max(100)
-});
-var ScriptResourceSourceSchema = z.union([
-  z.string().trim().min(1).max(5e4),
-  z.object({
-    file: z.string().trim().min(1).max(500)
-  })
-]);
-var ScriptResourceEntrySchema = ResourceEntryBaseSchema.extend({
-  kind: z.literal("script"),
-  language: ScriptResourceLanguageSchema,
-  source: ScriptResourceSourceSchema
-});
-var ResourceEntrySchema = z.discriminatedUnion("kind", [
-  WorkflowResourceEntrySchema,
-  AgentResourceEntrySchema,
-  IntegrationResourceEntrySchema,
-  ScriptResourceEntrySchema
-]);
-var ResourcesDomainSchema = z.record(z.string(), ResourceEntrySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each resource entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_RESOURCES = {};
-function defineResource(resource) {
-  return ResourceEntrySchema.parse(resource);
-}
-function defineResources(resources) {
-  return Object.fromEntries(
-    Object.entries(resources).map(([key, resource]) => [key, ResourceEntrySchema.parse(resource)])
-  );
-}
-function ontologyIdFrom(input) {
-  return typeof input === "string" ? input : input.id;
-}
-function ontologyIdArrayFrom(input) {
-  return input?.map(ontologyIdFrom);
-}
-function defineResourceOntology(input) {
-  return ResourceOntologyBindingSchema.parse({
-    actions: ontologyIdArrayFrom(input.actions),
-    primaryAction: input.primaryAction === void 0 ? void 0 : ontologyIdFrom(input.primaryAction),
-    reads: ontologyIdArrayFrom(input.reads),
-    writes: ontologyIdArrayFrom(input.writes),
-    usesCatalogs: ontologyIdArrayFrom(input.usesCatalogs),
-    emits: ontologyIdArrayFrom(input.emits)
-  });
-}
-
-// ../core/src/organization-model/domains/roles.ts
-var RoleIdSchema = ModelIdSchema;
-var HumanRoleHolderSchema = z.object({
-  kind: z.literal("human"),
-  userId: z.string().trim().min(1).max(200)
-});
-var AgentRoleHolderSchema = z.object({
-  kind: z.literal("agent"),
-  agentId: ResourceIdSchema.meta({ ref: "resource" })
-});
-var TeamRoleHolderSchema = z.object({
-  kind: z.literal("team"),
-  memberIds: z.array(z.string().trim().min(1).max(200)).min(1)
-});
-var RoleHolderSchema = z.discriminatedUnion("kind", [
-  HumanRoleHolderSchema,
-  AgentRoleHolderSchema,
-  TeamRoleHolderSchema
-]);
-var RoleHoldersSchema = z.union([RoleHolderSchema, z.array(RoleHolderSchema).min(1)]);
-var RoleSchema = z.object({
-  /** Stable unique identifier for the role (e.g. "role-ceo", "role-head-of-sales"). */
-  id: RoleIdSchema,
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  /** Human-readable title shown to agents and in UI (e.g. "CEO", "Head of Sales"). */
-  title: z.string().trim().min(1).max(200),
-  /**
-   * List of responsibilities this role owns - plain-language descriptions of
-   * what the person in this role is accountable for delivering.
-   * Defaults to empty array so minimal role definitions stay concise.
-   */
-  responsibilities: z.array(z.string().trim().max(500)).default([]),
-  /**
-   * Optional: ID of another role this role reports to.
-   * When present, must reference another `roles[].id` in the same organization.
-   */
-  reportsToId: RoleIdSchema.meta({ ref: "role" }).optional(),
-  /**
-   * Optional: human, agent, or team holder currently filling this role.
-   * Agent holders reference OM Resource IDs and are validated at the model level.
-   */
-  heldBy: RoleHoldersSchema.optional(),
-  /**
-   * Optional Systems this role is accountable for.
-   * Cross-reference enforced in `OrganizationModelSchema.superRefine()`.
-   */
-  responsibleFor: z.array(SystemIdSchema.meta({ ref: "system" })).optional()
-});
-var RolesDomainSchema = z.record(z.string(), RoleSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each role entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_ROLES = {};
-var KeyResultSchema = z.object({
-  /** Stable unique identifier for the measurable outcome (e.g. "kr-revenue-q1"). */
-  id: z.string().trim().min(1).max(100),
-  /** Plain-language description of this measurable outcome (e.g. "Increase trial-to-paid conversion"). */
-  description: z.string().trim().min(1).max(500),
-  /**
-   * What is being measured — the metric name (e.g. "monthly revenue", "NPS score",
-   * "trial-to-paid conversion rate"). Free-form string.
-   */
-  targetMetric: z.string().trim().min(1).max(200),
-  /** Current measured value. Defaults to 0 when not yet tracked. */
-  currentValue: z.number().default(0),
-  /**
-   * Target value to reach for this measurable outcome to be considered achieved.
-   * Optional — omit if the outcome is directional (e.g. "reduce churn") without
-   * a hard numeric target.
-   */
-  targetValue: z.number().optional()
-});
-var ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}$/;
-var ObjectiveSchema = z.object({
-  /** Stable unique identifier for the goal (e.g. "goal-grow-arr-q1-2026"). */
-  id: z.string().trim().min(1).max(100),
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  /** Plain-language description of what the organization wants to achieve. */
-  description: z.string().trim().min(1).max(1e3),
-  /**
-   * Start of the period this goal is active for — ISO 8601 date string (YYYY-MM-DD).
-   * Must be strictly before `periodEnd`.
-   */
-  periodStart: z.string().regex(ISO_DATE_REGEX, "periodStart must be an ISO date string (YYYY-MM-DD)"),
-  /**
-   * End of the period this goal is active for — ISO 8601 date string (YYYY-MM-DD).
-   * Must be strictly after `periodStart`.
-   * Enforced via `OrganizationModelSchema.superRefine()`.
-   */
-  periodEnd: z.string().regex(ISO_DATE_REGEX, "periodEnd must be an ISO date string (YYYY-MM-DD)"),
-  /**
-   * List of measurable outcomes that define success for this goal.
-   * Defaults to empty array so goals can be declared before outcomes are defined.
-   */
-  keyResults: z.array(KeyResultSchema).default([])
-});
-var GoalsDomainSchema = z.record(z.string(), ObjectiveSchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each objective entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_GOALS = {};
-var KnowledgeTargetKindSchema = z.enum([
-  "system",
-  "resource",
-  "knowledge",
-  "stage",
-  "action",
-  "role",
-  "goal",
-  "customer-segment",
-  "offering",
-  "ontology"
-]).meta({ label: "Target kind" });
-var KnowledgeTargetRefSchema = z.object({
-  kind: KnowledgeTargetKindSchema,
-  // Ontology targets use the canonical '<scope>:<kind>/<local-id>' ontology id format.
-  // Business-logic validation of target existence is done in OrganizationModelSchema.superRefine.
-  id: z.string().trim().min(1).max(300)
-}).superRefine((target, ctx) => {
-  if (target.kind !== "ontology") return;
-  const result = OntologyIdSchema.safeParse(target.id);
-  if (!result.success) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      path: ["id"],
-      message: "Ontology knowledge targets must use <system-path>:<kind>/<local-id> or global:<kind>/<local-id>"
-    });
-  }
-});
-var LegacyKnowledgeLinkSchema = z.object({
-  nodeId: z.union([NodeIdStringSchema, z.templateLiteral(["ontology:", OntologyIdSchema])])
-}).superRefine((link, ctx) => {
-  const [kind] = link.nodeId.split(":");
-  if (!KnowledgeTargetKindSchema.safeParse(kind).success) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      path: ["nodeId"],
-      message: `Unknown knowledge target kind "${kind}"`
-    });
-  }
-});
-var CanonicalKnowledgeLinkSchema = z.object({
-  target: KnowledgeTargetRefSchema
+  ctx.addIssue({
+    code: z.ZodIssueCode.custom,
+    path: ["primaryAction"],
+    message: "Resource ontology primaryAction must be included in actions"
+  });
 });
-function nodeIdFromTarget(target) {
-  return `${target.kind}:${target.id}`;
-}
-function targetFromNodeId(nodeId) {
-  const [kind, ...idParts] = nodeId.split(":");
-  return {
-    kind: KnowledgeTargetKindSchema.parse(kind),
-    id: idParts.join(":")
-  };
-}
-var KnowledgeLinkSchema = z.union([CanonicalKnowledgeLinkSchema, LegacyKnowledgeLinkSchema]).transform((link) => {
-  const target = "target" in link ? link.target : targetFromNodeId(link.nodeId);
-  return {
-    target,
-    nodeId: nodeIdFromTarget(target)
-  };
+var CodeReferenceSchema = z.object({
+  path: z.string().trim().min(1).max(500).regex(/^[A-Za-z0-9_./$@()[\] -]+$/, "Code reference paths must be repo-relative paths"),
+  role: CodeReferenceRoleSchema,
+  symbol: z.string().trim().min(1).max(200).optional(),
+  description: z.string().trim().min(1).max(300).optional()
 });
-var OrgKnowledgeKindSchema = z.enum(["playbook", "strategy", "reference"]).meta({ label: "Knowledge kind", color: "grape" });
-var OrgKnowledgeNodeSchema = z.object({
-  id: ModelIdSchema,
-  kind: OrgKnowledgeKindSchema,
-  title: z.string().trim().min(1).max(200),
-  summary: z.string().trim().min(1).max(1e3),
-  icon: IconNameSchema.optional(),
-  /** Canonical documentation URL when body content is a local summary. */
-  externalUrl: z.string().trim().url().max(500).optional(),
-  /** Optional generated source file path for local MDX-backed knowledge nodes. */
-  sourceFilePath: z.string().trim().min(1).max(500).optional(),
-  /** Raw MDX string. Phase 2 will introduce a structured block format. */
-  body: z.string().trim().min(1),
+var ResourceEntryBaseSchema = z.object({
+  /** Canonical resource id; runtime resourceId derives from this value. */
+  id: ResourceIdSchema,
+  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
+  order: z.number().default(0),
+  /** Required single System membership — value is a dot-separated system path (e.g. "sales.lead-gen"). */
+  systemPath: SystemPathSchema.meta({ ref: "system" }),
+  /** Executable display title owned by the OM Resource descriptor. */
+  title: LabelSchema.optional(),
+  /** Executable display description owned by the OM Resource descriptor. */
+  description: DescriptionSchema.optional(),
+  /** Optional role responsible for maintaining this resource. */
+  ownerRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
+  status: ResourceGovernanceStatusSchema,
   /**
-   * Graph links to other OM nodes this knowledge node governs.
-   * Each link emits a `governs` edge: knowledge-node -> target node.
+   * Ontology contract bindings for the semantic work this resource performs.
+   * `emits` stays nested here so top-level resource emits descriptors remain
+   * compatible with graph event projection during the bridge.
    */
-  links: z.array(KnowledgeLinkSchema).default([]),
-  /** Role identifiers that own this knowledge node. */
-  ownerIds: z.array(RoleIdSchema.meta({ ref: "role" })).default([]),
-  /** ISO date string (YYYY-MM-DD or full ISO 8601) of last meaningful update. */
-  updatedAt: z.string().trim().min(1).max(50)
+  ontology: ResourceOntologyBindingSchema.optional(),
+  /** Repo-relative implementation breadcrumbs for agents and operators. */
+  codeRefs: z.array(CodeReferenceSchema).default([])
 });
-var KnowledgeDomainSchema = z.record(ModelIdSchema, OrgKnowledgeNodeSchema).default({});
-var SecretLikeMetadataKeySchema = /(?:secret|password|passwd|token|api[-_]?key|credential|private[-_]?key)/i;
-var SecretLikeMetadataValueSchema = /(?:sk-[A-Za-z0-9_-]{12,}|pk_live_[A-Za-z0-9_-]{12,}|eyJ[A-Za-z0-9_-]{20,}|-----BEGIN (?:RSA |OPENSSH |EC )?PRIVATE KEY-----)/;
-var OmTopologyNodeKindSchema = z.enum([
-  "system",
-  "resource",
-  "ontology",
-  "policy",
-  "role",
-  "trigger",
-  "humanCheckpoint",
-  "externalResource"
-]);
-var OmTopologyRelationshipKindSchema = z.enum(["triggers", "uses", "approval"]);
-var OmTopologyNodeRefSchema = z.discriminatedUnion("kind", [
-  z.object({ kind: z.literal("system"), id: ModelIdSchema }),
-  z.object({ kind: z.literal("resource"), id: ResourceIdSchema }),
-  z.object({ kind: z.literal("ontology"), id: OntologyIdSchema }),
-  z.object({ kind: z.literal("policy"), id: ModelIdSchema }),
-  z.object({ kind: z.literal("role"), id: ModelIdSchema }),
-  z.object({ kind: z.literal("trigger"), id: ResourceIdSchema }),
-  z.object({ kind: z.literal("humanCheckpoint"), id: ResourceIdSchema }),
-  z.object({ kind: z.literal("externalResource"), id: ResourceIdSchema })
-]);
-var OmTopologyMetadataSchema = z.record(z.string().trim().min(1).max(120), JsonValueSchema).superRefine((metadata, ctx) => {
-  function visit(value, path) {
-    if (typeof value === "string" && SecretLikeMetadataValueSchema.test(value)) {
-      ctx.addIssue({
-        code: z.ZodIssueCode.custom,
-        path,
-        message: "Topology metadata must not contain secret-like values"
-      });
-      return;
-    }
-    if (Array.isArray(value)) {
-      value.forEach((entry, index) => visit(entry, [...path, index]));
-      return;
-    }
-    if (typeof value !== "object" || value === null) return;
-    Object.entries(value).forEach(([key, entry]) => {
-      if (SecretLikeMetadataKeySchema.test(key)) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          path: [...path, key],
-          message: `Topology metadata key "${key}" looks secret-like`
-        });
-      }
-      visit(entry, [...path, key]);
-    });
-  }
-  visit(metadata, []);
+var WorkflowResourceEntrySchema = ResourceEntryBaseSchema.extend({
+  kind: z.literal("workflow"),
+  emits: z.array(EventEmissionDescriptorSchema).optional()
 });
-var OmTopologyRelationshipSchema = z.object({
-  from: OmTopologyNodeRefSchema,
-  kind: OmTopologyRelationshipKindSchema,
-  to: OmTopologyNodeRefSchema,
-  systemPath: SystemPathSchema.optional(),
-  required: z.boolean().optional(),
-  metadata: OmTopologyMetadataSchema.optional()
+var AgentResourceEntrySchema = ResourceEntryBaseSchema.extend({
+  kind: z.literal("agent"),
+  /** Mirrors code-side AgentConfig.kind. */
+  agentKind: AgentKindSchema,
+  /** Role this agent embodies, if any. */
+  actsAsRoleId: ModelIdSchema.meta({ ref: "role" }).optional(),
+  /** Mirrors AgentConfig.sessionCapable. */
+  sessionCapable: z.boolean(),
+  /** Broad/composite callable entry points orchestrated by this agent. */
+  invocations: z.array(ActionInvocationSchema).default([]),
+  emits: z.array(EventEmissionDescriptorSchema).optional()
 });
-var OmTopologyDomainSchema = z.object({
-  version: z.literal(1).default(1),
-  relationships: z.record(z.string().trim().min(1).max(255), OmTopologyRelationshipSchema).default({})
-}).default({ version: 1, relationships: {} });
-var DEFAULT_ORGANIZATION_MODEL_TOPOLOGY = {
-  version: 1,
-  relationships: {}
-};
-function idFrom(input) {
-  return typeof input === "string" ? input : input.id;
-}
-function parseRef(kind, id) {
-  return OmTopologyNodeRefSchema.parse({ kind, id });
-}
-function isNodeRef(input) {
-  return OmTopologyNodeRefSchema.safeParse(input).success;
-}
-function isResourceEntry(input) {
-  if (typeof input !== "object" || input === null) return false;
-  const candidate = input;
-  return typeof candidate.id === "string" && typeof candidate.systemPath === "string" && typeof candidate.status === "string" && ["workflow", "agent", "integration", "script"].includes(String(candidate.kind));
-}
-var topologyRef = {
-  system: (system) => parseRef("system", idFrom(system)),
-  resource: (resource) => parseRef("resource", idFrom(resource)),
-  ontology: (record) => parseRef("ontology", idFrom(record)),
-  policy: (policy) => parseRef("policy", idFrom(policy)),
-  role: (role) => parseRef("role", idFrom(role)),
-  trigger: (trigger) => parseRef("trigger", idFrom(trigger)),
-  humanCheckpoint: (checkpoint) => parseRef("humanCheckpoint", idFrom(checkpoint)),
-  externalResource: (externalResource) => parseRef("externalResource", idFrom(externalResource))
-};
-var topologyRelationship = {
-  triggers: (from, to, options = {}) => defineTopologyRelationship({
-    ...options,
-    from,
-    kind: "triggers",
-    to
-  }),
-  uses: (from, to, options = {}) => defineTopologyRelationship({
-    ...options,
-    from,
-    kind: "uses",
-    to
-  }),
-  approval: (from, to, options = {}) => defineTopologyRelationship({
-    ...options,
-    from,
-    kind: "approval",
-    to
-  }),
-  usesIntegration: (from, integration, options = {}) => defineTopologyRelationship({
-    required: true,
-    ...options,
-    from,
-    kind: "uses",
-    to: integration
-  }),
-  requestsApproval: (from, checkpoint, options = {}) => defineTopologyRelationship({
-    required: true,
-    ...options,
-    from,
-    kind: "approval",
-    to: topologyRef.humanCheckpoint(checkpoint)
-  }),
-  checkpointRoutesTo: (checkpoint, to, options = {}) => defineTopologyRelationship({
-    required: true,
-    ...options,
-    from: topologyRef.humanCheckpoint(checkpoint),
-    kind: "triggers",
-    to
-  })
-};
-function compileTopologyNodeRef(input) {
-  if (isNodeRef(input)) return input;
-  if (isResourceEntry(input)) return topologyRef.resource(input);
-  throw new Error("Topology node refs must be typed node objects or serializable { kind, id } refs");
-}
-function parseTopologyNodeRef(input) {
-  if (typeof input !== "string") return OmTopologyNodeRefSchema.parse(input);
-  const separatorIndex = input.indexOf(":");
-  if (separatorIndex === -1) {
-    throw new Error(`Topology node ref "${input}" must use <kind>:<id>`);
-  }
-  const kind = input.slice(0, separatorIndex);
-  const id = input.slice(separatorIndex + 1);
-  if (!OmTopologyNodeKindSchema.safeParse(kind).success) {
-    throw new Error(`Topology node ref "${input}" has unsupported kind "${kind}"`);
-  }
-  return OmTopologyNodeRefSchema.parse({ kind, id });
-}
-function defineTopologyRelationship(input) {
-  return OmTopologyRelationshipSchema.parse({
-    ...input,
-    from: compileTopologyNodeRef(input.from),
-    to: compileTopologyNodeRef(input.to)
-  });
-}
-function defineTopology(relationships) {
-  const entries = Array.isArray(relationships) ? relationships.map((relationship, index) => [`relationship-${index + 1}`, relationship]) : Object.entries(relationships);
-  return OmTopologyDomainSchema.parse({
-    version: 1,
-    relationships: Object.fromEntries(entries.map(([key, relationship]) => [key, defineTopologyRelationship(relationship)]))
-  });
-}
-var PolicyIdSchema = ModelIdSchema;
-var PolicyApplicabilitySchema = z.object({
-  systemIds: z.array(ModelIdSchema.meta({ ref: "system" })).default([]),
-  actionIds: z.array(ModelIdSchema.meta({ ref: "action" })).default([]),
-  resourceIds: z.array(ModelIdSchema.meta({ ref: "resource" })).default([]),
-  roleIds: z.array(ModelIdSchema.meta({ ref: "role" })).default([])
+var IntegrationResourceEntrySchema = ResourceEntryBaseSchema.extend({
+  kind: z.literal("integration"),
+  provider: z.string().trim().min(1).max(100)
 });
-var PolicyTriggerSchema = z.discriminatedUnion("kind", [
-  z.object({
-    kind: z.literal("event"),
-    eventId: EventIdSchema.meta({ ref: "event" })
-  }),
-  z.object({
-    kind: z.literal("action-invocation"),
-    actionId: ModelIdSchema.meta({ ref: "action" })
-  }),
-  z.object({
-    kind: z.literal("schedule"),
-    cron: z.string().trim().min(1).max(120)
-  }),
-  z.object({
-    kind: z.literal("manual")
-  })
-]);
-var PolicyPredicateSchema = z.discriminatedUnion("kind", [
-  z.object({
-    kind: z.literal("always")
-  }),
-  z.object({
-    kind: z.literal("expression"),
-    expression: z.string().trim().min(1).max(2e3)
-  }),
-  z.object({
-    kind: z.literal("threshold"),
-    metric: ModelIdSchema,
-    operator: z.enum(["lt", "lte", "eq", "gte", "gt"]).meta({ label: "Operator" }),
-    value: z.number()
-  })
-]);
-var PolicyEffectSchema = z.discriminatedUnion("kind", [
-  z.object({
-    kind: z.literal("require-approval"),
-    roleId: ModelIdSchema.meta({ ref: "role" }).optional()
-  }),
-  z.object({
-    kind: z.literal("invoke-action"),
-    actionId: ModelIdSchema.meta({ ref: "action" })
-  }),
-  z.object({
-    kind: z.literal("notify-role"),
-    roleId: ModelIdSchema.meta({ ref: "role" })
-  }),
+var ScriptResourceSourceSchema = z.union([
+  z.string().trim().min(1).max(5e4),
   z.object({
-    kind: z.literal("block")
+    file: z.string().trim().min(1).max(500)
   })
 ]);
-var PolicySchema = z.object({
-  id: PolicyIdSchema,
-  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
-  order: z.number(),
-  label: LabelSchema,
-  description: DescriptionSchema.optional(),
-  trigger: PolicyTriggerSchema,
-  predicate: PolicyPredicateSchema.default({ kind: "always" }),
-  actions: z.array(PolicyEffectSchema).min(1),
-  appliesTo: PolicyApplicabilitySchema.default({
-    systemIds: [],
-    actionIds: [],
-    resourceIds: [],
-    roleIds: []
-  }),
-  lifecycle: z.enum(["draft", "beta", "active", "deprecated", "archived"]).meta({ label: "Lifecycle", color: "teal" }).default("active")
-});
-var PoliciesDomainSchema = z.record(z.string(), PolicySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
-  message: "Each policy entry id must match its map key"
-}).default({});
-var DEFAULT_ORGANIZATION_MODEL_POLICIES = {};
-
-// ../core/src/organization-model/schema.ts
-z.enum([
-  "branding",
-  "identity",
-  "customers",
-  "offerings",
-  "roles",
-  "goals",
-  "systems",
-  "ontology",
-  "resources",
-  "topology",
-  "actions",
-  "entities",
-  "policies",
-  "knowledge"
-]);
-var OrganizationModelDomainMetadataSchema = z.object({
-  version: z.literal(1).default(1),
-  lastModified: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "lastModified must be an ISO date string (YYYY-MM-DD)")
-});
-var DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA = {
-  branding: { version: 1, lastModified: "2026-05-10" },
-  identity: { version: 1, lastModified: "2026-05-10" },
-  customers: { version: 1, lastModified: "2026-05-10" },
-  offerings: { version: 1, lastModified: "2026-05-10" },
-  roles: { version: 1, lastModified: "2026-05-10" },
-  goals: { version: 1, lastModified: "2026-05-10" },
-  systems: { version: 1, lastModified: "2026-05-10" },
-  ontology: { version: 1, lastModified: "2026-05-14" },
-  resources: { version: 1, lastModified: "2026-05-10" },
-  topology: { version: 1, lastModified: "2026-05-14" },
-  actions: { version: 1, lastModified: "2026-05-10" },
-  entities: { version: 1, lastModified: "2026-05-10" },
-  policies: { version: 1, lastModified: "2026-05-10" },
-  knowledge: { version: 1, lastModified: "2026-05-10" }
-};
-var OrganizationModelDomainMetadataByDomainSchema = z.object({
-  branding: OrganizationModelDomainMetadataSchema,
-  identity: OrganizationModelDomainMetadataSchema,
-  customers: OrganizationModelDomainMetadataSchema,
-  offerings: OrganizationModelDomainMetadataSchema,
-  roles: OrganizationModelDomainMetadataSchema,
-  goals: OrganizationModelDomainMetadataSchema,
-  systems: OrganizationModelDomainMetadataSchema,
-  ontology: OrganizationModelDomainMetadataSchema,
-  resources: OrganizationModelDomainMetadataSchema,
-  topology: OrganizationModelDomainMetadataSchema,
-  actions: OrganizationModelDomainMetadataSchema,
-  entities: OrganizationModelDomainMetadataSchema,
-  policies: OrganizationModelDomainMetadataSchema,
-  knowledge: OrganizationModelDomainMetadataSchema
-}).partial().default(DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA).transform((metadata) => ({ ...DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA, ...metadata }));
-var OrganizationModelSchemaBase = z.object({
-  version: z.literal(1).default(1),
-  domainMetadata: OrganizationModelDomainMetadataByDomainSchema,
-  branding: OrganizationModelBrandingSchema,
-  navigation: OrganizationModelNavigationSchema,
-  identity: IdentityDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_IDENTITY),
-  customers: CustomersDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_CUSTOMERS),
-  offerings: OfferingsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_OFFERINGS),
-  roles: RolesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ROLES),
-  goals: GoalsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_GOALS),
-  systems: SystemsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_SYSTEMS),
-  ontology: OntologyScopeSchema.default(DEFAULT_ONTOLOGY_SCOPE),
-  resources: ResourcesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_RESOURCES),
-  topology: OmTopologyDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_TOPOLOGY),
-  actions: ActionsDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ACTIONS),
-  entities: EntitiesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_ENTITIES),
-  policies: PoliciesDomainSchema.default(DEFAULT_ORGANIZATION_MODEL_POLICIES),
-  // D3: flat Record<id, OrgKnowledgeNode> — no wrapper object
-  knowledge: KnowledgeDomainSchema.default({})
+var ScriptResourceEntrySchema = ResourceEntryBaseSchema.extend({
+  kind: z.literal("script"),
+  language: ScriptResourceLanguageSchema,
+  source: ScriptResourceSourceSchema
 });
-function addIssue(ctx, path, message) {
-  ctx.addIssue({
-    code: z.ZodIssueCode.custom,
-    path,
-    message
-  });
+var ResourceEntrySchema = z.discriminatedUnion("kind", [
+  WorkflowResourceEntrySchema,
+  AgentResourceEntrySchema,
+  IntegrationResourceEntrySchema,
+  ScriptResourceEntrySchema
+]);
+z.record(z.string(), ResourceEntrySchema).refine((record) => Object.entries(record).every(([key, entry]) => entry.id === key), {
+  message: "Each resource entry id must match its map key"
+}).default({});
+function defineResource(resource) {
+  return ResourceEntrySchema.parse(resource);
 }
-function isLifecycleEnabled(lifecycle, enabled) {
-  if (enabled === false) return false;
-  return lifecycle !== "deprecated" && lifecycle !== "archived";
-}
-function defaultSystemPathFor(id) {
-  return `/${id.replaceAll(".", "/")}`;
-}
-function asRoleHolderArray(heldBy) {
-  return Array.isArray(heldBy) ? heldBy : [heldBy];
-}
-function isKnowledgeKindCompatibleWithTarget(knowledgeKind, targetKind) {
-  if (knowledgeKind === "reference") return true;
-  if (knowledgeKind === "playbook") {
-    return ["system", "resource", "stage", "action", "ontology"].includes(targetKind);
-  }
-  if (knowledgeKind === "strategy") {
-    return ["system", "goal", "offering", "customer-segment", "ontology"].includes(targetKind);
-  }
-  return false;
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-OrganizationModelSchemaBase.superRefine((model, ctx) => {
-  function collectAllSystems(systems, prefix = "", schemaPath = ["systems"]) {
-    const result = [];
-    for (const [key, system] of Object.entries(systems)) {
-      const path = prefix ? `${prefix}.${key}` : key;
-      const currentSchemaPath = [...schemaPath, key];
-      result.push({ path, schemaPath: currentSchemaPath, system });
-      const childSystems = system.systems ?? system.subsystems;
-      if (childSystems !== void 0) {
-        result.push(
-          ...collectAllSystems(childSystems, path, [
-            ...currentSchemaPath,
-            system.systems !== void 0 ? "systems" : "subsystems"
-          ])
-        );
-      }
-    }
-    return result;
-  }
-  const allSystems = collectAllSystems(model.systems);
-  const systemsById = /* @__PURE__ */ new Map();
-  for (const { path, system } of allSystems) {
-    systemsById.set(path, system);
-    systemsById.set(system.id, system);
-  }
-  const systemIdsByEffectivePath = /* @__PURE__ */ new Map();
-  allSystems.forEach(({ path, schemaPath, system }) => {
-    if (system.parentSystemId !== void 0 && !systemsById.has(system.parentSystemId)) {
-      addIssue(
-        ctx,
-        [...schemaPath, "parentSystemId"],
-        `System "${system.id}" references unknown parent "${system.parentSystemId}"`
-      );
-    }
-    const hasChildren = Object.keys(system.systems ?? system.subsystems ?? {}).length > 0 || allSystems.some(
-      (candidate) => candidate.path.startsWith(`${path}.`) && !candidate.path.slice(path.length + 1).includes(".")
-    );
-    const contributesRoutePath = system.ui?.path !== void 0 || system.path !== void 0 || !hasChildren;
-    if (contributesRoutePath) {
-      const effectivePath = system.ui?.path ?? system.path ?? defaultSystemPathFor(path);
-      const existingSystemId = systemIdsByEffectivePath.get(effectivePath);
-      if (existingSystemId !== void 0) {
-        addIssue(
-          ctx,
-          [...schemaPath, system.ui?.path !== void 0 ? "ui" : "path"],
-          `System "${path}" effective path "${effectivePath}" duplicates system "${existingSystemId}"`
-        );
-      } else {
-        systemIdsByEffectivePath.set(effectivePath, path);
-      }
-    }
-    if (hasChildren && isLifecycleEnabled(system.lifecycle, system.enabled)) {
-      const hasEnabledDescendant = Object.values(system.systems ?? system.subsystems ?? {}).some(
-        (candidate) => isLifecycleEnabled(candidate.lifecycle, candidate.enabled)
-      ) || allSystems.some(
-        (candidate) => candidate.path.startsWith(`${path}.`) && !candidate.path.slice(path.length + 1).includes(".") && isLifecycleEnabled(candidate.system.lifecycle, candidate.system.enabled)
-      );
-      if (!hasEnabledDescendant) {
-        addIssue(ctx, [...schemaPath, "lifecycle"], `System "${path}" is active but has no active descendants`);
-      }
-    }
-  });
-  allSystems.forEach(({ schemaPath, system }) => {
-    const visited = /* @__PURE__ */ new Set();
-    let currentParentId = system.parentSystemId;
-    while (currentParentId !== void 0) {
-      if (currentParentId === system.id || visited.has(currentParentId)) {
-        addIssue(ctx, [...schemaPath, "parentSystemId"], `System "${system.id}" has a parent cycle`);
-        return;
-      }
-      visited.add(currentParentId);
-      currentParentId = systemsById.get(currentParentId)?.parentSystemId;
-    }
+function defineResources(resources) {
+  return Object.fromEntries(
+    Object.entries(resources).map(([key, resource]) => [key, ResourceEntrySchema.parse(resource)])
+  );
+}
+function ontologyIdFrom(input) {
+  return typeof input === "string" ? input : input.id;
+}
+function ontologyIdArrayFrom(input) {
+  return input?.map(ontologyIdFrom);
+}
+function defineResourceOntology(input) {
+  return ResourceOntologyBindingSchema.parse({
+    actions: ontologyIdArrayFrom(input.actions),
+    primaryAction: input.primaryAction === void 0 ? void 0 : ontologyIdFrom(input.primaryAction),
+    reads: ontologyIdArrayFrom(input.reads),
+    writes: ontologyIdArrayFrom(input.writes),
+    usesCatalogs: ontologyIdArrayFrom(input.usesCatalogs),
+    emits: ontologyIdArrayFrom(input.emits)
   });
-  function normalizeRoutePath(path) {
-    return path.length > 1 ? path.replace(/\/+$/, "") : path;
-  }
-  const sidebarNodeIds = /* @__PURE__ */ new Map();
-  const sidebarSurfacePaths = /* @__PURE__ */ new Map();
-  const sidebarSurfaces = [];
-  function collectSidebarNodes(nodes, schemaPath) {
-    Object.entries(nodes).forEach(([nodeId, node]) => {
-      const nodePath = [...schemaPath, nodeId];
-      const existingNodePath = sidebarNodeIds.get(nodeId);
-      if (existingNodePath !== void 0) {
-        addIssue(ctx, nodePath, `Sidebar node id "${nodeId}" duplicates another sidebar node`);
-      } else {
-        sidebarNodeIds.set(nodeId, nodePath);
-      }
-      if (node.type === "group") {
-        collectSidebarNodes(node.children, [...nodePath, "children"]);
-        return;
-      }
-      sidebarSurfaces.push({ id: nodeId, node, path: nodePath });
-      const normalizedPath = normalizeRoutePath(node.path);
-      const existingSurfaceId = sidebarSurfacePaths.get(normalizedPath);
-      if (existingSurfaceId !== void 0) {
-        addIssue(
-          ctx,
-          [...nodePath, "path"],
-          `Sidebar surface path "${node.path}" duplicates surface "${existingSurfaceId}"`
-        );
-      } else {
-        sidebarSurfacePaths.set(normalizedPath, nodeId);
-      }
-      node.targets?.systems?.forEach((systemId, systemIndex) => {
-        if (!systemsById.has(systemId)) {
-          addIssue(
-            ctx,
-            [...nodePath, "targets", "systems", systemIndex],
-            `Sidebar surface "${nodeId}" references unknown system "${systemId}"`
-          );
-        }
+}
+var SecretLikeMetadataKeySchema = /(?:secret|password|passwd|token|api[-_]?key|credential|private[-_]?key)/i;
+var SecretLikeMetadataValueSchema = /(?:sk-[A-Za-z0-9_-]{12,}|pk_live_[A-Za-z0-9_-]{12,}|eyJ[A-Za-z0-9_-]{20,}|-----BEGIN (?:RSA |OPENSSH |EC )?PRIVATE KEY-----)/;
+var OmTopologyNodeKindSchema = z.enum([
+  "system",
+  "resource",
+  "ontology",
+  "policy",
+  "role",
+  "trigger",
+  "humanCheckpoint",
+  "externalResource"
+]);
+var OmTopologyRelationshipKindSchema = z.enum(["triggers", "uses", "approval"]);
+var OmTopologyNodeRefSchema = z.discriminatedUnion("kind", [
+  z.object({ kind: z.literal("system"), id: ModelIdSchema }),
+  z.object({ kind: z.literal("resource"), id: ResourceIdSchema }),
+  z.object({ kind: z.literal("ontology"), id: OntologyIdSchema }),
+  z.object({ kind: z.literal("policy"), id: ModelIdSchema }),
+  z.object({ kind: z.literal("role"), id: ModelIdSchema }),
+  z.object({ kind: z.literal("trigger"), id: ResourceIdSchema }),
+  z.object({ kind: z.literal("humanCheckpoint"), id: ResourceIdSchema }),
+  z.object({ kind: z.literal("externalResource"), id: ResourceIdSchema })
+]);
+var OmTopologyMetadataSchema = z.record(z.string().trim().min(1).max(120), JsonValueSchema).superRefine((metadata, ctx) => {
+  function visit(value, path) {
+    if (typeof value === "string" && SecretLikeMetadataValueSchema.test(value)) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path,
+        message: "Topology metadata must not contain secret-like values"
       });
-    });
-  }
-  collectSidebarNodes(model.navigation.sidebar.primary, ["navigation", "sidebar", "primary"]);
-  collectSidebarNodes(model.navigation.sidebar.bottom, ["navigation", "sidebar", "bottom"]);
-  const segmentsById = new Map(Object.entries(model.customers));
-  Object.values(model.offerings).forEach((product) => {
-    product.targetSegmentIds.forEach((segmentId, segmentIndex) => {
-      if (!segmentsById.has(segmentId)) {
-        addIssue(
-          ctx,
-          ["offerings", product.id, "targetSegmentIds", segmentIndex],
-          `Product "${product.id}" references unknown customer segment "${segmentId}"`
-        );
-      }
-    });
-    if (product.deliveryFeatureId !== void 0 && !systemsById.has(product.deliveryFeatureId)) {
-      addIssue(
-        ctx,
-        ["offerings", product.id, "deliveryFeatureId"],
-        `Product "${product.id}" references unknown delivery system "${product.deliveryFeatureId}"`
-      );
-    }
-  });
-  Object.values(model.goals).forEach((objective) => {
-    if (objective.periodEnd <= objective.periodStart) {
-      addIssue(
-        ctx,
-        ["goals", objective.id, "periodEnd"],
-        `Goal "${objective.id}" has periodEnd "${objective.periodEnd}" which must be strictly after periodStart "${objective.periodStart}"`
-      );
-    }
-  });
-  const goalsById = new Map(Object.entries(model.goals));
-  const knowledgeById = new Map(Object.entries(model.knowledge));
-  const actionsById = new Map(Object.entries(model.actions));
-  const entitiesById = new Map(Object.entries(model.entities));
-  const policiesById = new Map(Object.entries(model.policies));
-  sidebarSurfaces.forEach(({ id, node, path }) => {
-    node.targets?.entities?.forEach((entityId, entityIndex) => {
-      if (!entitiesById.has(entityId)) {
-        addIssue(
-          ctx,
-          [...path, "targets", "entities", entityIndex],
-          `Sidebar surface "${id}" references unknown entity "${entityId}"`
-        );
-      }
-    });
-    node.targets?.actions?.forEach((actionId, actionIndex) => {
-      if (!actionsById.has(actionId)) {
-        addIssue(
-          ctx,
-          [...path, "targets", "actions", actionIndex],
-          `Sidebar surface "${id}" references unknown action "${actionId}"`
-        );
-      }
-    });
-  });
-  Object.values(model.entities).forEach((entity) => {
-    if (!systemsById.has(entity.ownedBySystemId)) {
-      addIssue(
-        ctx,
-        ["entities", entity.id, "ownedBySystemId"],
-        `Entity "${entity.id}" references unknown ownedBySystemId "${entity.ownedBySystemId}"`
-      );
-    }
-    entity.links?.forEach((link, linkIndex) => {
-      if (!entitiesById.has(link.toEntity)) {
-        addIssue(
-          ctx,
-          ["entities", entity.id, "links", linkIndex, "toEntity"],
-          `Entity "${entity.id}" links to unknown entity "${link.toEntity}"`
-        );
-      }
-    });
-  });
-  const rolesById = new Map(Object.entries(model.roles));
-  Object.values(model.roles).forEach((role) => {
-    if (role.reportsToId !== void 0 && !rolesById.has(role.reportsToId)) {
-      addIssue(
-        ctx,
-        ["roles", role.id, "reportsToId"],
-        `Role "${role.id}" references unknown reportsToId "${role.reportsToId}"`
-      );
-    }
-  });
-  Object.values(model.roles).forEach((role) => {
-    const visited = /* @__PURE__ */ new Set();
-    let currentReportsToId = role.reportsToId;
-    while (currentReportsToId !== void 0) {
-      if (currentReportsToId === role.id || visited.has(currentReportsToId)) {
-        addIssue(ctx, ["roles", role.id, "reportsToId"], `Role "${role.id}" has a reportsToId cycle`);
-        return;
-      }
-      visited.add(currentReportsToId);
-      currentReportsToId = rolesById.get(currentReportsToId)?.reportsToId;
-    }
-  });
-  Object.values(model.roles).forEach((role) => {
-    role.responsibleFor?.forEach((systemId, systemIndex) => {
-      if (!systemsById.has(systemId)) {
-        addIssue(
-          ctx,
-          ["roles", role.id, "responsibleFor", systemIndex],
-          `Role "${role.id}" references unknown responsibleFor system "${systemId}"`
-        );
-      }
-    });
-  });
-  allSystems.forEach(({ schemaPath, system }) => {
-    if (system.responsibleRoleId !== void 0 && !rolesById.has(system.responsibleRoleId)) {
-      addIssue(
-        ctx,
-        [...schemaPath, "responsibleRoleId"],
-        `System "${system.id}" references unknown responsibleRoleId "${system.responsibleRoleId}"`
-      );
-    }
-    system.governedByKnowledge?.forEach((nodeId, nodeIndex) => {
-      if (!knowledgeById.has(nodeId)) {
-        addIssue(
-          ctx,
-          [...schemaPath, "governedByKnowledge", nodeIndex],
-          `System "${system.id}" references unknown knowledge node "${nodeId}"`
-        );
-      }
-    });
-    system.drivesGoals?.forEach((goalId, goalIndex) => {
-      if (!goalsById.has(goalId)) {
-        addIssue(
-          ctx,
-          [...schemaPath, "drivesGoals", goalIndex],
-          `System "${system.id}" references unknown goal "${goalId}"`
-        );
-      }
-    });
-    system.actions?.forEach((actionRef, actionIndex) => {
-      if (!actionsById.has(actionRef.actionId)) {
-        addIssue(
-          ctx,
-          [...schemaPath, "actions", actionIndex, "actionId"],
-          `System "${system.id}" references unknown action "${actionRef.actionId}"`
-        );
-      }
-    });
-    system.policies?.forEach((policyId, policyIndex) => {
-      if (!policiesById.has(policyId)) {
-        addIssue(
-          ctx,
-          [...schemaPath, "policies", policyIndex],
-          `System "${system.id}" references unknown policy "${policyId}"`
-        );
-      }
-    });
-  });
-  Object.values(model.actions).forEach((action) => {
-    action.affects?.forEach((entityId, entityIndex) => {
-      if (!entitiesById.has(entityId)) {
-        addIssue(
-          ctx,
-          ["actions", action.id, "affects", entityIndex],
-          `Action "${action.id}" affects unknown entity "${entityId}"`
-        );
-      }
-    });
-  });
-  const resourcesById = new Map(Object.entries(model.resources));
-  sidebarSurfaces.forEach(({ id, node, path }) => {
-    node.targets?.resources?.forEach((resourceId, resourceIndex) => {
-      if (!resourcesById.has(resourceId)) {
-        addIssue(
-          ctx,
-          [...path, "targets", "resources", resourceIndex],
-          `Sidebar surface "${id}" references unknown resource "${resourceId}"`
-        );
-      }
-    });
-  });
-  const actionIds = new Set(Object.keys(model.actions));
-  const offeringsById = new Map(Object.entries(model.offerings));
-  const ontologyCompilation = compileOrganizationOntology(model);
-  const stageIds = /* @__PURE__ */ new Set();
-  for (const catalog of Object.values(ontologyCompilation.ontology.catalogTypes)) {
-    if (catalog.kind !== "stage") continue;
-    for (const stageId of Object.keys(catalog.entries ?? {})) {
-      stageIds.add(stageId);
+      return;
     }
-  }
-  const ontologyIndexByKind = {
-    object: ontologyCompilation.ontology.objectTypes,
-    link: ontologyCompilation.ontology.linkTypes,
-    action: ontologyCompilation.ontology.actionTypes,
-    catalog: ontologyCompilation.ontology.catalogTypes,
-    event: ontologyCompilation.ontology.eventTypes,
-    interface: ontologyCompilation.ontology.interfaceTypes,
-    "value-type": ontologyCompilation.ontology.valueTypes,
-    property: ontologyCompilation.ontology.sharedProperties,
-    group: ontologyCompilation.ontology.groups,
-    surface: ontologyCompilation.ontology.surfaces
-  };
-  const ontologyIds = new Set(Object.values(ontologyIndexByKind).flatMap((index) => Object.keys(index)));
-  function topologyTargetExists(ref) {
-    if (ref.kind === "system") return systemsById.has(ref.id);
-    if (ref.kind === "resource") return resourcesById.has(ref.id);
-    if (ref.kind === "ontology") return ontologyIds.has(ref.id);
-    if (ref.kind === "policy") return policiesById.has(ref.id);
-    if (ref.kind === "role") return rolesById.has(ref.id);
-    return true;
-  }
-  Object.entries(model.topology.relationships).forEach(([relationshipId, relationship]) => {
-    ["from", "to"].forEach((side) => {
-      const ref = relationship[side];
-      if (topologyTargetExists(ref)) return;
-      addIssue(
-        ctx,
-        ["topology", "relationships", relationshipId, side],
-        `Topology relationship "${relationshipId}" ${side} references unknown ${ref.kind} "${ref.id}"`
-      );
-    });
-  });
-  const ontologyReferenceKeyKinds = {
-    valueType: "value-type",
-    catalogType: "catalog",
-    objectType: "object",
-    eventType: "event",
-    actionType: "action",
-    linkType: "link",
-    interfaceType: "interface",
-    propertyType: "property",
-    groupType: "group",
-    surfaceType: "surface",
-    stepCatalog: "catalog"
-  };
-  function validateKnownOntologyReferences(ownerId, value, path, seen = /* @__PURE__ */ new WeakSet()) {
     if (Array.isArray(value)) {
-      value.forEach((entry, index) => validateKnownOntologyReferences(ownerId, entry, [...path, index], seen));
+      value.forEach((entry, index) => visit(entry, [...path, index]));
       return;
     }
-    if (!isRecord(value)) return;
-    if (seen.has(value)) return;
-    seen.add(value);
+    if (typeof value !== "object" || value === null) return;
     Object.entries(value).forEach(([key, entry]) => {
-      const expectedKind = ontologyReferenceKeyKinds[key];
-      if (expectedKind !== void 0) {
-        if (typeof entry !== "string") {
-          addIssue(ctx, [...path, key], `Ontology record "${ownerId}" ${key} must be an ontology ID string`);
-        } else if (ontologyIndexByKind[expectedKind][entry] === void 0) {
-          addIssue(
-            ctx,
-            [...path, key],
-            `Ontology record "${ownerId}" ${key} references unknown ${expectedKind} ontology ID "${entry}"`
-          );
-        }
-      }
-      validateKnownOntologyReferences(ownerId, entry, [...path, key], seen);
-    });
-  }
-  for (const { id, record } of listResolvedOntologyRecords(ontologyCompilation.ontology)) {
-    validateKnownOntologyReferences(id, record, record.origin.path);
-  }
-  Object.values(model.policies).forEach((policy) => {
-    policy.appliesTo.systemIds.forEach((systemId, systemIndex) => {
-      if (!systemsById.has(systemId)) {
-        addIssue(
-          ctx,
-          ["policies", policy.id, "appliesTo", "systemIds", systemIndex],
-          `Policy "${policy.id}" applies to unknown system "${systemId}"`
-        );
-      }
-    });
-    policy.appliesTo.actionIds.forEach((actionId, actionIndex) => {
-      if (!actionsById.has(actionId)) {
-        addIssue(
-          ctx,
-          ["policies", policy.id, "appliesTo", "actionIds", actionIndex],
-          `Policy "${policy.id}" applies to unknown action "${actionId}"`
-        );
-      }
-    });
-    policy.actions.forEach((action, actionIndex) => {
-      if (action.kind === "invoke-action" && !actionsById.has(action.actionId)) {
-        addIssue(
-          ctx,
-          ["policies", policy.id, "actions", actionIndex, "actionId"],
-          `Policy "${policy.id}" invokes unknown action "${action.actionId}"`
-        );
-      }
-      if ((action.kind === "notify-role" || action.kind === "require-approval") && action.roleId !== void 0 && !rolesById.has(action.roleId)) {
-        addIssue(
-          ctx,
-          ["policies", policy.id, "actions", actionIndex, "roleId"],
-          `Policy "${policy.id}" references unknown role "${action.roleId}"`
-        );
-      }
-    });
-    if (policy.trigger.kind === "action-invocation" && !actionsById.has(policy.trigger.actionId)) {
-      addIssue(
-        ctx,
-        ["policies", policy.id, "trigger", "actionId"],
-        `Policy "${policy.id}" references unknown trigger action "${policy.trigger.actionId}"`
-      );
-    }
-  });
-  function knowledgeTargetExists(kind, id) {
-    if (kind === "system") return systemsById.has(id);
-    if (kind === "resource") return resourcesById.has(id);
-    if (kind === "knowledge") return knowledgeById.has(id);
-    if (kind === "stage") return stageIds.has(id);
-    if (kind === "action") return actionIds.has(id);
-    if (kind === "role") return rolesById.has(id);
-    if (kind === "goal") return goalsById.has(id);
-    if (kind === "customer-segment") return segmentsById.has(id);
-    if (kind === "offering") return offeringsById.has(id);
-    if (kind === "ontology") return ontologyIds.has(id);
-    return false;
-  }
-  Object.entries(model.knowledge).forEach(([nodeId, node]) => {
-    node.links.forEach((link, linkIndex) => {
-      if (!knowledgeTargetExists(link.target.kind, link.target.id)) {
-        addIssue(
-          ctx,
-          ["knowledge", nodeId, "links", linkIndex, "target"],
-          `Knowledge node "${node.id}" references unknown ${link.target.kind} target "${link.target.id}"`
-        );
-      }
-      if (!isKnowledgeKindCompatibleWithTarget(node.kind, link.target.kind)) {
-        addIssue(
-          ctx,
-          ["knowledge", nodeId, "links", linkIndex, "target", "kind"],
-          `Knowledge node "${node.id}" kind "${node.kind}" cannot govern ${link.target.kind} targets`
-        );
-      }
-    });
-  });
-  Object.values(model.resources).forEach((resource) => {
-    if (!systemsById.has(resource.systemPath)) {
-      addIssue(
-        ctx,
-        ["resources", resource.id, "systemPath"],
-        `Resource "${resource.id}" references unknown system path "${resource.systemPath}"`
-      );
-    }
-    if (resource.ownerRoleId !== void 0 && !rolesById.has(resource.ownerRoleId)) {
-      addIssue(
-        ctx,
-        ["resources", resource.id, "ownerRoleId"],
-        `Resource "${resource.id}" references unknown ownerRoleId "${resource.ownerRoleId}"`
-      );
-    }
-    if (resource.kind === "agent" && resource.actsAsRoleId !== void 0 && !rolesById.has(resource.actsAsRoleId)) {
-      addIssue(
-        ctx,
-        ["resources", resource.id, "actsAsRoleId"],
-        `Agent resource "${resource.id}" references unknown actsAsRoleId "${resource.actsAsRoleId}"`
-      );
-    }
-  });
-  function validateResourceOntologyBinding(resourceId, bindingKey, expectedKind, ids) {
-    const ontologyIds2 = ids === void 0 ? [] : Array.isArray(ids) ? ids : [ids];
-    ontologyIds2.forEach((ontologyId, ontologyIndex) => {
-      if (ontologyIndexByKind[expectedKind][ontologyId] === void 0) {
-        addIssue(
-          ctx,
-          ["resources", resourceId, "ontology", bindingKey, ...Array.isArray(ids) ? [ontologyIndex] : []],
-          `Resource "${resourceId}" ontology binding "${bindingKey}" references unknown ${expectedKind} ontology ID "${ontologyId}"`
-        );
-      }
-    });
-  }
-  Object.values(model.resources).forEach((resource) => {
-    const binding = resource.ontology;
-    if (binding === void 0) return;
-    validateResourceOntologyBinding(resource.id, "actions", "action", binding.actions);
-    validateResourceOntologyBinding(resource.id, "primaryAction", "action", binding.primaryAction);
-    validateResourceOntologyBinding(resource.id, "reads", "object", binding.reads);
-    validateResourceOntologyBinding(resource.id, "writes", "object", binding.writes);
-    validateResourceOntologyBinding(resource.id, "usesCatalogs", "catalog", binding.usesCatalogs);
-    validateResourceOntologyBinding(resource.id, "emits", "event", binding.emits);
-    if (binding.contract !== void 0) {
-      const contractEntries = [
-        ["input", binding.contract.input],
-        ["output", binding.contract.output]
-      ];
-      for (const [side, ref] of contractEntries) {
-        if (ref === void 0) continue;
-        const result = ContractRefSchema.safeParse(ref);
-        if (!result.success) {
-          addIssue(
-            ctx,
-            ["resources", resource.id, "ontology", "contract", side],
-            `Resource "${resource.id}" contract.${side} "${ref}" is not a valid ContractRef (expected "package/subpath#ExportName")`
-          );
-        }
-      }
-    }
-  });
-  Object.values(model.roles).forEach((role) => {
-    if (role.heldBy === void 0) return;
-    asRoleHolderArray(role.heldBy).forEach((holder, holderIndex) => {
-      if (holder.kind !== "agent") return;
-      const resource = resourcesById.get(holder.agentId);
-      if (resource === void 0) {
-        addIssue(
-          ctx,
-          ["roles", role.id, "heldBy", Array.isArray(role.heldBy) ? holderIndex : "agentId"],
-          `Role "${role.id}" references unknown agent holder resource "${holder.agentId}"`
-        );
-        return;
-      }
-      if (resource.kind !== "agent") {
-        addIssue(
-          ctx,
-          ["roles", role.id, "heldBy", Array.isArray(role.heldBy) ? holderIndex : "agentId"],
-          `Role "${role.id}" agent holder "${holder.agentId}" must reference an agent resource`
-        );
-      }
-    });
-  });
-  Object.entries(model.knowledge).forEach(([nodeId, node]) => {
-    node.ownerIds.forEach((roleId, ownerIndex) => {
-      if (!rolesById.has(roleId)) {
-        addIssue(
-          ctx,
-          ["knowledge", nodeId, "ownerIds", ownerIndex],
-          `Knowledge node "${node.id}" references unknown owner role "${roleId}"`
-        );
+      if (SecretLikeMetadataKeySchema.test(key)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: [...path, key],
+          message: `Topology metadata key "${key}" looks secret-like`
+        });
       }
+      visit(entry, [...path, key]);
     });
-  });
-  for (const diagnostic of ontologyCompilation.diagnostics) {
-    addIssue(ctx, diagnostic.path, diagnostic.message);
   }
+  visit(metadata, []);
 });
-
-// ../core/src/organization-model/defaults.ts
-var DEFAULT_ORGANIZATION_MODEL_KNOWLEDGE = {};
-var DEFAULT_ORGANIZATION_MODEL_ENTITIES2 = {};
-var DEFAULT_ORGANIZATION_MODEL_NAVIGATION = {
-  sidebar: {
-    primary: {},
-    bottom: {}
-  }
+var OmTopologyRelationshipSchema = z.object({
+  from: OmTopologyNodeRefSchema,
+  kind: OmTopologyRelationshipKindSchema,
+  to: OmTopologyNodeRefSchema,
+  systemPath: SystemPathSchema.optional(),
+  required: z.boolean().optional(),
+  metadata: OmTopologyMetadataSchema.optional()
+});
+var OmTopologyDomainSchema = z.object({
+  version: z.literal(1).default(1),
+  relationships: z.record(z.string().trim().min(1).max(255), OmTopologyRelationshipSchema).default({})
+}).default({ version: 1, relationships: {} });
+function idFrom(input) {
+  return typeof input === "string" ? input : input.id;
+}
+function parseRef(kind, id) {
+  return OmTopologyNodeRefSchema.parse({ kind, id });
+}
+function isNodeRef(input) {
+  return OmTopologyNodeRefSchema.safeParse(input).success;
+}
+function isResourceEntry(input) {
+  if (typeof input !== "object" || input === null) return false;
+  const candidate = input;
+  return typeof candidate.id === "string" && typeof candidate.systemPath === "string" && typeof candidate.status === "string" && ["workflow", "agent", "integration", "script"].includes(String(candidate.kind));
+}
+var topologyRef = {
+  system: (system) => parseRef("system", idFrom(system)),
+  resource: (resource) => parseRef("resource", idFrom(resource)),
+  ontology: (record) => parseRef("ontology", idFrom(record)),
+  policy: (policy) => parseRef("policy", idFrom(policy)),
+  role: (role) => parseRef("role", idFrom(role)),
+  trigger: (trigger) => parseRef("trigger", idFrom(trigger)),
+  humanCheckpoint: (checkpoint) => parseRef("humanCheckpoint", idFrom(checkpoint)),
+  externalResource: (externalResource) => parseRef("externalResource", idFrom(externalResource))
 };
-var DEFAULT_ORGANIZATION_MODEL = {
-  version: 1,
-  domainMetadata: DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA,
-  branding: DEFAULT_ORGANIZATION_MODEL_BRANDING,
-  navigation: DEFAULT_ORGANIZATION_MODEL_NAVIGATION,
-  identity: DEFAULT_ORGANIZATION_MODEL_IDENTITY,
-  customers: DEFAULT_ORGANIZATION_MODEL_CUSTOMERS,
-  offerings: DEFAULT_ORGANIZATION_MODEL_OFFERINGS,
-  roles: DEFAULT_ORGANIZATION_MODEL_ROLES,
-  goals: DEFAULT_ORGANIZATION_MODEL_GOALS,
-  // Generic empty systems map. Elevasis-specific systems (platform, sales, sales.crm,
-  // sales.lead-gen, monitoring, settings, admin, etc.) have been relocated to
-  // `@repo/elevasis-core/src/organization-model/systems.ts` via `canonicalOrganizationModel`.
-  // Tenant OM configs supply their own systems via `resolveOrganizationModel`.
-  systems: {},
-  ontology: DEFAULT_ONTOLOGY_SCOPE,
-  resources: DEFAULT_ORGANIZATION_MODEL_RESOURCES,
-  topology: DEFAULT_ORGANIZATION_MODEL_TOPOLOGY,
-  // Generic empty actions map. Elevasis-specific action entries have been relocated to
-  // `@repo/elevasis-core/src/organization-model/actions.ts`.
-  actions: {},
-  entities: DEFAULT_ORGANIZATION_MODEL_ENTITIES2,
-  policies: DEFAULT_ORGANIZATION_MODEL_POLICIES,
-  knowledge: DEFAULT_ORGANIZATION_MODEL_KNOWLEDGE
+var topologyRelationship = {
+  triggers: (from, to, options = {}) => defineTopologyRelationship({
+    ...options,
+    from,
+    kind: "triggers",
+    to
+  }),
+  uses: (from, to, options = {}) => defineTopologyRelationship({
+    ...options,
+    from,
+    kind: "uses",
+    to
+  }),
+  approval: (from, to, options = {}) => defineTopologyRelationship({
+    ...options,
+    from,
+    kind: "approval",
+    to
+  }),
+  usesIntegration: (from, integration, options = {}) => defineTopologyRelationship({
+    required: true,
+    ...options,
+    from,
+    kind: "uses",
+    to: integration
+  }),
+  requestsApproval: (from, checkpoint, options = {}) => defineTopologyRelationship({
+    required: true,
+    ...options,
+    from,
+    kind: "approval",
+    to: topologyRef.humanCheckpoint(checkpoint)
+  }),
+  checkpointRoutesTo: (checkpoint, to, options = {}) => defineTopologyRelationship({
+    required: true,
+    ...options,
+    from: topologyRef.humanCheckpoint(checkpoint),
+    kind: "triggers",
+    to
+  })
 };
-
-// ../core/src/organization-model/helpers.ts
-function childSystemsOf2(system) {
-  return system.systems ?? system.subsystems ?? {};
+function compileTopologyNodeRef(input) {
+  if (isNodeRef(input)) return input;
+  if (isResourceEntry(input)) return topologyRef.resource(input);
+  throw new Error("Topology node refs must be typed node objects or serializable { kind, id } refs");
 }
-function listAllSystems(model) {
-  const results = [];
-  function walk(map, prefix) {
-    for (const [localId, system] of Object.entries(map)) {
-      const fullPath = prefix ? `${prefix}.${localId}` : localId;
-      results.push({ path: fullPath, system });
-      const childSystems = childSystemsOf2(system);
-      if (Object.keys(childSystems).length > 0) {
-        walk(childSystems, fullPath);
-      }
-    }
+function parseTopologyNodeRef(input) {
+  if (typeof input !== "string") return OmTopologyNodeRefSchema.parse(input);
+  const separatorIndex = input.indexOf(":");
+  if (separatorIndex === -1) {
+    throw new Error(`Topology node ref "${input}" must use <kind>:<id>`);
   }
-  walk(model.systems, "");
-  return results;
+  const kind = input.slice(0, separatorIndex);
+  const id = input.slice(separatorIndex + 1);
+  if (!OmTopologyNodeKindSchema.safeParse(kind).success) {
+    throw new Error(`Topology node ref "${input}" has unsupported kind "${kind}"`);
+  }
+  return OmTopologyNodeRefSchema.parse({ kind, id });
+}
+function defineTopologyRelationship(input) {
+  return OmTopologyRelationshipSchema.parse({
+    ...input,
+    from: compileTopologyNodeRef(input.from),
+    to: compileTopologyNodeRef(input.to)
+  });
+}
+function defineTopology(relationships) {
+  const entries = Array.isArray(relationships) ? relationships.map((relationship, index) => [`relationship-${index + 1}`, relationship]) : Object.entries(relationships);
+  return OmTopologyDomainSchema.parse({
+    version: 1,
+    relationships: Object.fromEntries(entries.map(([key, relationship]) => [key, defineTopologyRelationship(relationship)]))
+  });
 }
 
 // ../core/src/organization-model/migration-helpers.ts
@@ -2387,80 +1163,6 @@ function getLeadGenStageCatalog(model) {
     Object.entries(results).sort(([, a], [, b]) => a.order - b.order || a.key.localeCompare(b.key))
   );
 }
-var SalesStageSemanticClassSchema = z.enum(["open", "active", "nurturing", "closed_won", "closed_lost"]);
-var SalesStageSchema = DisplayMetadataSchema.extend({
-  id: ModelIdSchema,
-  order: z.number().int().min(0),
-  semanticClass: SalesStageSemanticClassSchema,
-  surfaceIds: ReferenceIdsSchema,
-  resourceIds: ReferenceIdsSchema
-});
-z.object({
-  id: ModelIdSchema,
-  label: z.string().trim().min(1).max(120),
-  description: DescriptionSchema.optional(),
-  entityId: ModelIdSchema,
-  stages: z.array(SalesStageSchema).min(1)
-});
-var CRM_DISCOVERY_REPLIED_STATE = {
-  stateKey: "discovery_replied",
-  label: "Discovery Replied"
-};
-var CRM_DISCOVERY_LINK_SENT_STATE = {
-  stateKey: "discovery_link_sent",
-  label: "Discovery Link Sent"
-};
-var CRM_DISCOVERY_NUDGING_STATE = {
-  stateKey: "discovery_nudging",
-  label: "Discovery Nudging"
-};
-var CRM_DISCOVERY_BOOKING_CANCELLED_STATE = {
-  stateKey: "discovery_booking_cancelled",
-  label: "Discovery Booking Cancelled"
-};
-var CRM_REPLY_SENT_STATE = {
-  stateKey: "reply_sent",
-  label: "Reply Sent"
-};
-var CRM_FOLLOWUP_1_SENT_STATE = {
-  stateKey: "followup_1_sent",
-  label: "Follow-up 1 Sent"
-};
-var CRM_FOLLOWUP_2_SENT_STATE = {
-  stateKey: "followup_2_sent",
-  label: "Follow-up 2 Sent"
-};
-var CRM_FOLLOWUP_3_SENT_STATE = {
-  stateKey: "followup_3_sent",
-  label: "Follow-up 3 Sent"
-};
-var CRM_PIPELINE_DEFINITION = {
-  pipelineKey: "crm",
-  label: "CRM",
-  entityKey: "crm.deal",
-  stages: [
-    {
-      stageKey: "interested",
-      label: "Interested",
-      color: "blue",
-      states: [
-        CRM_DISCOVERY_REPLIED_STATE,
-        CRM_DISCOVERY_LINK_SENT_STATE,
-        CRM_DISCOVERY_NUDGING_STATE,
-        CRM_DISCOVERY_BOOKING_CANCELLED_STATE,
-        CRM_REPLY_SENT_STATE,
-        CRM_FOLLOWUP_1_SENT_STATE,
-        CRM_FOLLOWUP_2_SENT_STATE,
-        CRM_FOLLOWUP_3_SENT_STATE
-      ]
-    },
-    { stageKey: "proposal", label: "Proposal", color: "yellow", states: [] },
-    { stageKey: "closing", label: "Closing", color: "orange", states: [] },
-    { stageKey: "closed_won", label: "Closed Won", color: "green", states: [] },
-    { stageKey: "closed_lost", label: "Closed Lost", color: "red", states: [] },
-    { stageKey: "nurturing", label: "Nurturing", color: "grape", states: [] }
-  ]
-};
 DisplayMetadataSchema.extend({
   id: ModelIdSchema,
   order: z.number().min(0)
@@ -6856,298 +5558,89 @@ var ResourceRegistry = class {
    * @param organizationName - Organization name
    * @param resourceId - Resource ID
    * @returns Serialized definition or null if not found
-   */
-  getSerializedDefinition(organizationName, resourceId) {
-    const cache = this.serializedCache.get(organizationName);
-    if (!cache) return null;
-    return cache.definitions.agents.get(resourceId) ?? cache.definitions.workflows.get(resourceId) ?? null;
-  }
-  /**
-   * Get resource list for organization (instant lookup)
-   * Use for /resources endpoint - returns pre-computed ResourceDefinition array
-   *
-   * @param organizationName - Organization name
-   * @returns Resource list with workflows, agents, and total count
-   */
-  getResourceList(organizationName) {
-    const cache = this.serializedCache.get(organizationName);
-    if (!cache) {
-      return { workflows: [], agents: [], total: 0 };
-    }
-    return cache.resources;
-  }
-  /**
-   * Get Command View data for organization (instant lookup)
-   * Use for /command-view endpoint - returns complete graph data
-   *
-   * @param organizationName - Organization name
-   * @returns Command View data with nodes and edges
-   */
-  getCommandViewData(organizationName) {
-    const cache = this.serializedCache.get(organizationName);
-    if (!cache) {
-      return {
-        workflows: [],
-        agents: [],
-        triggers: [],
-        integrations: [],
-        externalResources: [],
-        humanCheckpoints: [],
-        edges: []
-      };
-    }
-    return cache.commandView;
-  }
-};
-
-// ../core/src/platform/registry/types.ts
-function bindResourceDescriptor(definition) {
-  const { resource, ...rest } = definition;
-  return {
-    ...rest,
-    resource,
-    resourceId: resource.id,
-    type: resource.kind
-  };
-}
-
-// ../core/src/business/acquisition/build-templates.ts
-var BUILD_TEMPLATE_CATALOG = [
-  {
-    id: "local-services",
-    label: "Local Services",
-    description: "Source, analyze, qualify, and personalize local service businesses for outreach.",
-    steps: Object.values(PROSPECTING_STEPS.localServices)
-  },
-  {
-    id: "dtc-subscription-apollo-clickup",
-    label: "DTC Subscription (Apollo + ClickUp)",
-    description: "Import DTC brand leads from Apollo, crawl their websites, score fit, enrich contacts, and export via ClickUp.",
-    steps: Object.values(PROSPECTING_STEPS.dtcApolloClickup)
-  }
-];
-var PROSPECTING_BUILD_TEMPLATE_OPTIONS = BUILD_TEMPLATE_CATALOG.map(({ id, label, description }) => ({
-  id,
-  label,
-  description
-}));
-function isProspectingBuildTemplateId(value) {
-  return PROSPECTING_BUILD_TEMPLATE_OPTIONS.some((template) => template.id === value);
-}
-
-// ../core/src/business/acquisition/ontology-validation.ts
-var CRM_PIPELINE_CATALOG_ONTOLOGY_ID = formatOntologyId({
-  scope: "sales.crm",
-  kind: "catalog",
-  localId: "crm.pipeline"
-});
-var LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID = formatOntologyId({
-  scope: "sales.lead-gen",
-  kind: "catalog",
-  localId: "lead-gen.stage-catalog"
-});
-var CRM_DEAL_OBJECT_ONTOLOGY_ID = formatOntologyId({
-  scope: "sales.crm",
-  kind: "object",
-  localId: "crm.deal"
-});
-function createCrmPipelineCatalog() {
-  return {
-    id: CRM_PIPELINE_CATALOG_ONTOLOGY_ID,
-    label: CRM_PIPELINE_DEFINITION.label,
-    ownerSystemId: "sales.crm",
-    kind: "pipeline",
-    appliesTo: CRM_DEAL_OBJECT_ONTOLOGY_ID,
-    entries: Object.fromEntries(
-      CRM_PIPELINE_DEFINITION.stages.map((stage, index) => [
-        stage.stageKey,
-        {
-          key: stage.stageKey,
-          label: stage.label,
-          order: (index + 1) * 10,
-          ...stage.color !== void 0 ? { color: stage.color } : {},
-          states: stage.states.map((state) => ({ ...state }))
-        }
-      ])
-    ),
-    legacyPipelineKey: CRM_PIPELINE_DEFINITION.pipelineKey,
-    legacyEntityKey: CRM_PIPELINE_DEFINITION.entityKey
-  };
-}
-function createLeadGenStageCatalog(model) {
-  return {
-    id: LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID,
-    label: "Lead Gen Processing Stages",
-    ownerSystemId: "sales.lead-gen",
-    kind: "processing-stage-catalog",
-    entries: Object.fromEntries(
-      Object.entries(getLeadGenStageCatalog(model)).map(([key, entry]) => [
-        key,
-        {
-          ...entry
-        }
-      ])
-    ),
-    legacyCatalogKey: "LEAD_GEN_STAGE_CATALOG"
-  };
-}
-function isPlainRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function mergeBridgeCatalogs(model) {
-  const baseCatalogTypes = model.ontology?.catalogTypes ?? {};
-  const bridgeCatalogTypes = {};
-  if (baseCatalogTypes[CRM_PIPELINE_CATALOG_ONTOLOGY_ID] === void 0) {
-    bridgeCatalogTypes[CRM_PIPELINE_CATALOG_ONTOLOGY_ID] = createCrmPipelineCatalog();
-  }
-  if (baseCatalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID] === void 0) {
-    bridgeCatalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID] = createLeadGenStageCatalog(model);
-  }
-  if (Object.keys(bridgeCatalogTypes).length === 0) return model;
-  return {
-    ...model,
-    ontology: {
-      ...model.ontology ?? {},
-      catalogTypes: {
-        ...baseCatalogTypes,
-        ...bridgeCatalogTypes
-      }
-    }
-  };
-}
-function compileBusinessOntologyValidationIndex(model = DEFAULT_ORGANIZATION_MODEL) {
-  const compilation = compileOrganizationOntology(mergeBridgeCatalogs(model));
-  if (compilation.diagnostics.length > 0) {
-    const summary = compilation.diagnostics.map((diagnostic) => diagnostic.message).join("; ");
-    throw new Error(`Business ontology validation index failed to compile: ${summary}`);
+   */
+  getSerializedDefinition(organizationName, resourceId) {
+    const cache = this.serializedCache.get(organizationName);
+    if (!cache) return null;
+    return cache.definitions.agents.get(resourceId) ?? cache.definitions.workflows.get(resourceId) ?? null;
   }
-  const crmPipelineCatalog = compilation.ontology.catalogTypes[CRM_PIPELINE_CATALOG_ONTOLOGY_ID];
-  const leadGenStageCatalog = compilation.ontology.catalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID];
-  if (crmPipelineCatalog === void 0 || leadGenStageCatalog === void 0) {
-    throw new Error("Business ontology validation index is missing CRM or lead-gen catalog bridge records");
+  /**
+   * Get resource list for organization (instant lookup)
+   * Use for /resources endpoint - returns pre-computed ResourceDefinition array
+   *
+   * @param organizationName - Organization name
+   * @returns Resource list with workflows, agents, and total count
+   */
+  getResourceList(organizationName) {
+    const cache = this.serializedCache.get(organizationName);
+    if (!cache) {
+      return { workflows: [], agents: [], total: 0 };
+    }
+    return cache.resources;
   }
-  return {
-    ontology: compilation.ontology,
-    crmPipelineCatalog,
-    leadGenStageCatalog,
-    actionTypesByLegacyId: indexActionTypesByLegacyId(compilation.ontology.actionTypes)
-  };
-}
-function indexActionTypesByLegacyId(actionTypes) {
-  const byLegacyId = {};
-  for (const actionType of Object.values(actionTypes)) {
-    const legacyActionId = actionType["legacyActionId"];
-    if (typeof legacyActionId === "string") {
-      byLegacyId[legacyActionId] = actionType;
+  /**
+   * Get Command View data for organization (instant lookup)
+   * Use for /command-view endpoint - returns complete graph data
+   *
+   * @param organizationName - Organization name
+   * @returns Command View data with nodes and edges
+   */
+  getCommandViewData(organizationName) {
+    const cache = this.serializedCache.get(organizationName);
+    if (!cache) {
+      return {
+        workflows: [],
+        agents: [],
+        triggers: [],
+        integrations: [],
+        externalResources: [],
+        humanCheckpoints: [],
+        edges: []
+      };
     }
+    return cache.commandView;
   }
-  return byLegacyId;
-}
-var BUSINESS_ONTOLOGY_VALIDATION_INDEX = compileBusinessOntologyValidationIndex();
-function getCatalogEntries(catalog) {
-  return isPlainRecord(catalog.entries) ? catalog.entries : {};
-}
-function asCrmStageEntry(key, value) {
-  const record = isPlainRecord(value) ? value : {};
-  const label = typeof record.label === "string" ? record.label : key;
-  const order = typeof record.order === "number" ? record.order : 0;
-  const color = typeof record.color === "string" ? record.color : void 0;
-  const rawStates = Array.isArray(record.states) ? record.states : [];
-  const states = rawStates.flatMap((state) => {
-    if (!isPlainRecord(state) || typeof state.stateKey !== "string") return [];
-    return [
-      {
-        stateKey: state.stateKey,
-        label: typeof state.label === "string" ? state.label : state.stateKey
-      }
-    ];
-  });
+};
+
+// ../core/src/platform/registry/types.ts
+function bindResourceDescriptor(definition) {
+  const { resource, ...rest } = definition;
   return {
-    key,
-    label,
-    order,
-    ...color !== void 0 ? { color } : {},
-    states
+    ...rest,
+    resource,
+    resourceId: resource.id,
+    type: resource.kind
   };
 }
-var CRM_STAGE_KEYS_FROM_ONTOLOGY = Object.keys(
-  getCatalogEntries(BUSINESS_ONTOLOGY_VALIDATION_INDEX.crmPipelineCatalog)
-);
-var CRM_STATE_KEYS_FROM_ONTOLOGY = Object.values(
-  getCatalogEntries(BUSINESS_ONTOLOGY_VALIDATION_INDEX.crmPipelineCatalog)
-).flatMap((entry, index) => {
-  const stageKey = CRM_STAGE_KEYS_FROM_ONTOLOGY[index];
-  if (stageKey === void 0) return [];
-  return asCrmStageEntry(stageKey, entry).states.map((state) => state.stateKey);
-});
-Object.keys(
-  getCatalogEntries(BUSINESS_ONTOLOGY_VALIDATION_INDEX.leadGenStageCatalog)
-);
 
-// ../core/src/business/acquisition/deal-ownership.ts
-var INBOUND_EVENT_TYPES = ["reply_received"];
-var OUTBOUND_EVENT_TYPES = [
-  "reply_sent_to_lead",
-  "booking_nudge_sent",
-  "reminder_sent",
-  "rebook_sent",
-  "followup_email_sent",
-  "reply_followup_sent",
-  "lead_deferred_next_step"
-];
-var INBOUND_SET = new Set(INBOUND_EVENT_TYPES);
-var OUTBOUND_SET = new Set(OUTBOUND_EVENT_TYPES);
-function getDealOwnership(deal) {
-  if (deal.state_key === "closed_won" || deal.state_key === "closed_lost") {
-    return null;
-  }
-  if (!Array.isArray(deal.activity_log)) return null;
-  let latestInboundMs = null;
-  let latestOutboundMs = null;
-  for (const entry of deal.activity_log) {
-    if (!entry || typeof entry !== "object" || Array.isArray(entry)) continue;
-    const record = entry;
-    const type = typeof record.type === "string" ? record.type : null;
-    if (!type) continue;
-    const isInbound = INBOUND_SET.has(type);
-    const isOutbound = OUTBOUND_SET.has(type);
-    if (!isInbound && !isOutbound) continue;
-    const occurredAt = resolveTimestamp(record);
-    if (occurredAt === null) continue;
-    if (isInbound && (latestInboundMs === null || occurredAt > latestInboundMs)) {
-      latestInboundMs = occurredAt;
-    }
-    if (isOutbound && (latestOutboundMs === null || occurredAt > latestOutboundMs)) {
-      latestOutboundMs = occurredAt;
-    }
-  }
-  if (latestInboundMs === null && latestOutboundMs === null) return null;
-  if (latestOutboundMs !== null && (latestInboundMs === null || latestOutboundMs >= latestInboundMs)) {
-    return "them";
-  }
-  return "us";
-}
-function resolveTimestamp(record) {
-  return parseMs(record.timestamp) ?? parseMs(record.occurredAt) ?? parseMs(record.createdAt) ?? parseMs(record.updatedAt) ?? parseMs(record.sentAt) ?? null;
-}
-function parseMs(value) {
-  if (value instanceof Date) {
-    const ms2 = value.getTime();
-    return Number.isNaN(ms2) ? null : ms2;
+// ../core/src/business/acquisition/build-templates.ts
+var BUILD_TEMPLATE_CATALOG = [
+  {
+    id: "local-services",
+    label: "Local Services",
+    description: "Source, analyze, qualify, and personalize local service businesses for outreach.",
+    steps: Object.values(PROSPECTING_STEPS.localServices)
+  },
+  {
+    id: "dtc-subscription-apollo-clickup",
+    label: "DTC Subscription (Apollo + ClickUp)",
+    description: "Import DTC brand leads from Apollo, crawl their websites, score fit, enrich contacts, and export via ClickUp.",
+    steps: Object.values(PROSPECTING_STEPS.dtcApolloClickup)
   }
-  if (typeof value !== "string") return null;
-  const ms = new Date(value).getTime();
-  return Number.isNaN(ms) ? null : ms;
+];
+var PROSPECTING_BUILD_TEMPLATE_OPTIONS = BUILD_TEMPLATE_CATALOG.map(({ id, label, description }) => ({
+  id,
+  label,
+  description
+}));
+function isProspectingBuildTemplateId(value) {
+  return PROSPECTING_BUILD_TEMPLATE_OPTIONS.some((template) => template.id === value);
 }
-
-// ../core/src/business/acquisition/api-schemas.ts
 var ProcessingStageStatusSchema = z.enum(["success", "no_result", "skipped", "error"]);
 var LeadGenStageKeySchema = z.string().trim().min(1);
 var LeadGenActionKeySchema = z.string().trim().min(1);
-var crmStageKeys = CRM_STAGE_KEYS_FROM_ONTOLOGY;
-var crmStateKeys = CRM_STATE_KEYS_FROM_ONTOLOGY;
-var CrmStageKeySchema = z.enum(crmStageKeys);
-var CrmStateKeySchema = z.enum(crmStateKeys);
+var CrmStageKeySchema = z.string().trim().min(1);
+var CrmStateKeySchema = z.string().trim().min(1);
 var ProcessingStateEntrySchema = z.object({
   status: ProcessingStageStatusSchema,
   data: z.unknown().optional()
@@ -8044,116 +6537,280 @@ var ActivityEventSchema = z.discriminatedUnion("type", [
   DealCreatedEventSchema,
   ActionFailedEventSchema
 ]);
-var SendReplyActionPayloadSchema = z.object({
+z.object({
   replyBody: z.string().trim().min(1).max(1e4)
 }).strict();
-var CRM_RUNTIME_ACTION_METADATA = {
-  move_to_proposal: {
-    key: "move_to_proposal",
-    label: "Move to Proposal",
-    workflowId: "move_to_proposal-workflow"
-  },
-  move_to_closing: {
-    key: "move_to_closing",
-    label: "Move to Closing",
-    workflowId: "move_to_closing-workflow"
-  },
-  move_to_closed_won: {
-    key: "move_to_closed_won",
-    label: "Close Won",
-    workflowId: "move_to_closed_won-workflow"
-  },
-  move_to_closed_lost: {
-    key: "move_to_closed_lost",
-    label: "Close Lost",
-    workflowId: "move_to_closed_lost-workflow"
-  },
-  move_to_nurturing: {
-    key: "move_to_nurturing",
-    label: "Move to Nurturing",
-    workflowId: "move_to_nurturing-workflow"
-  },
-  send_reply: {
-    key: "send_reply",
-    label: "Send Reply",
-    workflowId: "crm-send-reply-workflow"
-  },
-  send_link: {
-    key: "send_link",
-    label: "Send Booking Link",
-    workflowId: "crm-send-booking-link-workflow"
-  },
-  send_nudge: {
-    key: "send_nudge",
-    label: "Send Nudge",
-    workflowId: "crm-send-nudge-workflow"
-  },
-  rebook: {
-    key: "rebook",
-    label: "Rebook",
-    workflowId: "crm-rebook-workflow"
+function deriveActions(deal, actions = []) {
+  return actions.filter((a) => a.isAvailableFor(deal)).map(({ key, label, payloadSchema }) => ({ key, label, payloadSchema }));
+}
+
+// ../core/src/business/acquisition/ontology-validation.ts
+var CRM_PIPELINE_CATALOG_ONTOLOGY_ID = formatOntologyId({
+  scope: "sales.crm",
+  kind: "catalog",
+  localId: "crm.pipeline"
+});
+var LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID = formatOntologyId({
+  scope: "sales.lead-gen",
+  kind: "catalog",
+  localId: "lead-gen.stage-catalog"
+});
+function createLeadGenStageCatalog(model) {
+  return {
+    id: LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID,
+    label: "Lead Gen Processing Stages",
+    ownerSystemId: "sales.lead-gen",
+    kind: "processing-stage-catalog",
+    entries: Object.fromEntries(
+      Object.entries(getLeadGenStageCatalog(model)).map(([key, entry]) => [
+        key,
+        {
+          ...entry
+        }
+      ])
+    ),
+    legacyCatalogKey: "LEAD_GEN_STAGE_CATALOG"
+  };
+}
+function isPlainRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function mergeBridgeCatalogs(model) {
+  const baseCatalogTypes = model.ontology?.catalogTypes ?? {};
+  const bridgeCatalogTypes = {};
+  if (baseCatalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID] === void 0) {
+    bridgeCatalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID] = createLeadGenStageCatalog(model);
   }
-};
-function crmAction(actionId, runtime) {
-  const metadata = CRM_RUNTIME_ACTION_METADATA[actionId];
-  if (!metadata?.workflowId) {
-    throw new Error(`CRM action metadata for "${actionId}" must define resourceId`);
+  if (Object.keys(bridgeCatalogTypes).length === 0) return model;
+  return {
+    ...model,
+    ontology: {
+      ...model.ontology ?? {},
+      catalogTypes: {
+        ...baseCatalogTypes,
+        ...bridgeCatalogTypes
+      }
+    }
+  };
+}
+function compileBusinessOntologyValidationIndex(model) {
+  const compilation = compileOrganizationOntology(mergeBridgeCatalogs(model));
+  if (compilation.diagnostics.length > 0) {
+    const summary = compilation.diagnostics.map((diagnostic) => diagnostic.message).join("; ");
+    throw new Error(`Business ontology validation index failed to compile: ${summary}`);
+  }
+  const crmPipelineCatalog = compilation.ontology.catalogTypes[CRM_PIPELINE_CATALOG_ONTOLOGY_ID];
+  const leadGenStageCatalog = compilation.ontology.catalogTypes[LEAD_GEN_STAGE_CATALOG_ONTOLOGY_ID];
+  if (crmPipelineCatalog === void 0 || leadGenStageCatalog === void 0) {
+    throw new Error("Business ontology validation index is missing CRM or lead-gen catalog bridge records");
   }
   return {
-    key: metadata.key,
-    label: metadata.label,
-    workflowId: metadata.workflowId,
-    ...runtime
+    ontology: compilation.ontology,
+    crmPipelineCatalog,
+    leadGenStageCatalog,
+    actionTypesByLegacyId: indexActionTypesByLegacyId(compilation.ontology.actionTypes)
   };
 }
-var DEFAULT_CRM_ACTIONS = [
-  crmAction("move_to_proposal", {
-    isAvailableFor: (deal) => deal.stage_key === "interested"
-  }),
-  crmAction("move_to_closing", {
-    isAvailableFor: (deal) => deal.stage_key === "proposal"
-  }),
-  crmAction("move_to_closed_won", {
-    isAvailableFor: (deal) => deal.stage_key === "closing"
-  }),
-  crmAction("move_to_closed_lost", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" || deal.stage_key === "proposal" || deal.stage_key === "closing"
-  }),
-  crmAction("move_to_nurturing", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" || deal.stage_key === "proposal" || deal.stage_key === "closing"
-  }),
-  crmAction("send_reply", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" && isOurReplyAction(deal) && (deal.state_key === CRM_DISCOVERY_REPLIED_STATE.stateKey || deal.state_key === CRM_DISCOVERY_LINK_SENT_STATE.stateKey || deal.state_key === CRM_DISCOVERY_NUDGING_STATE.stateKey),
-    payloadSchema: SendReplyActionPayloadSchema
-  }),
-  crmAction("send_link", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" && deal.state_key === CRM_DISCOVERY_REPLIED_STATE.stateKey
-  }),
-  crmAction("send_nudge", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" && (deal.state_key === CRM_DISCOVERY_LINK_SENT_STATE.stateKey || deal.state_key === CRM_DISCOVERY_NUDGING_STATE.stateKey)
-  }),
-  {
-    key: "mark_no_show",
-    label: "Mark No-Show",
-    isAvailableFor: (deal) => deal.stage_key === "interested" && deal.state_key === CRM_DISCOVERY_NUDGING_STATE.stateKey,
-    // Mirrors the auto-timeout precedent in operations/sales/crm/pipeline/timeout-actions.ts:
-    // both manual-click and timeout move the deal to closed_lost. The action_taken activity
-    // event captures operator intent and distinguishes the manual variant from the timed one.
-    workflowId: "mark_no_show-workflow"
-  },
-  crmAction("rebook", {
-    isAvailableFor: (deal) => deal.stage_key === "interested" && deal.state_key === CRM_DISCOVERY_BOOKING_CANCELLED_STATE.stateKey
-  })
-];
-function deriveActions(deal, actions = DEFAULT_CRM_ACTIONS) {
-  return actions.filter((a) => a.isAvailableFor(deal)).map(({ key, label, payloadSchema }) => ({ key, label, payloadSchema }));
+function indexActionTypesByLegacyId(actionTypes) {
+  const byLegacyId = {};
+  for (const actionType of Object.values(actionTypes)) {
+    const legacyActionId = actionType["legacyActionId"];
+    if (typeof legacyActionId === "string") {
+      byLegacyId[legacyActionId] = actionType;
+    }
+  }
+  return byLegacyId;
+}
+function getCatalogEntries(catalog) {
+  return isPlainRecord(catalog.entries) ? catalog.entries : {};
+}
+function asLeadGenStageEntry(key, value) {
+  const record = isPlainRecord(value) ? value : {};
+  const entity = record.entity === "contact" ? "contact" : "company";
+  const additionalEntities = Array.isArray(record.additionalEntities) ? record.additionalEntities.filter(
+    (item) => item === "company" || item === "contact"
+  ) : void 0;
+  const recordEntity = record.recordEntity === "company" || record.recordEntity === "contact" ? record.recordEntity : void 0;
+  const recordStageKey = typeof record.recordStageKey === "string" ? record.recordStageKey : void 0;
+  return {
+    key: typeof record.key === "string" ? record.key : key,
+    label: typeof record.label === "string" ? record.label : key,
+    description: typeof record.description === "string" ? record.description : "",
+    order: typeof record.order === "number" ? record.order : 0,
+    entity,
+    ...additionalEntities !== void 0 ? { additionalEntities } : {},
+    ...recordEntity !== void 0 ? { recordEntity } : {},
+    ...recordStageKey !== void 0 ? { recordStageKey } : {}
+  };
+}
+function createLeadGenStageValidators(index) {
+  const getCatalog = () => Object.fromEntries(
+    Object.entries(getCatalogEntries(index.leadGenStageCatalog)).map(([key, value]) => [
+      key,
+      asLeadGenStageEntry(key, value)
+    ])
+  );
+  const getEntry = (stageKey) => getCatalog()[stageKey];
+  return {
+    getLeadGenStageCatalog: getCatalog,
+    getLeadGenStageEntry: getEntry,
+    isLeadGenStageKey: (stageKey) => getEntry(stageKey) !== void 0,
+    isLeadGenStageValidForEntity: (stageKey, entity) => {
+      const stage = getEntry(stageKey);
+      return stage !== void 0 && (stage.entity === entity || stage.additionalEntities?.includes(entity) === true);
+    },
+    isLeadGenRecordStageValidForEntity: (stageKey, entity) => {
+      const stage = getEntry(stageKey);
+      return stage !== void 0 && (stage.entity === entity || stage.additionalEntities?.includes(entity) === true || stage.recordEntity === entity);
+    },
+    resolveLeadGenRecordStageKey: (stageKey, entity) => {
+      const stage = getEntry(stageKey);
+      return stage?.recordEntity === entity && stage.recordStageKey ? stage.recordStageKey : stageKey;
+    }
+  };
+}
+
+// src/project-deployment-spec.ts
+function toSdkResourceDescriptor(resource, getResourceOntologyBinding) {
+  const ontologyBinding = getResourceOntologyBinding?.(resource.id);
+  return {
+    ...resource,
+    ...ontologyBinding ?? {},
+    systemId: resource.systemPath
+  };
+}
+function withPlatformResourceDescriptor(workflow, getWorkflowResourceDescriptor, getResourceOntologyBinding) {
+  const resource = getWorkflowResourceDescriptor(workflow.config.resourceId);
+  const sdkResource = toSdkResourceDescriptor(resource, getResourceOntologyBinding);
+  return {
+    ...workflow,
+    config: {
+      ...workflow.config,
+      resource: sdkResource,
+      resourceId: sdkResource.id,
+      type: sdkResource.kind
+    }
+  };
+}
+function withPlatformResourceDescriptors(workflows, getWorkflowResourceDescriptor, getResourceOntologyBinding) {
+  return workflows.map(
+    (workflow) => withPlatformResourceDescriptor(workflow, getWorkflowResourceDescriptor, getResourceOntologyBinding)
+  );
+}
+function withPlatformIntegrationResourceDescriptor(integration, getIntegrationResourceDescriptor, getResourceOntologyBinding) {
+  const resource = getIntegrationResourceDescriptor(integration.resourceId);
+  const sdkResource = toSdkResourceDescriptor(resource, getResourceOntologyBinding);
+  return {
+    ...integration,
+    resource: sdkResource,
+    resourceId: sdkResource.id,
+    type: sdkResource.kind
+  };
+}
+function withPlatformIntegrationResourceDescriptors(integrations, getIntegrationResourceDescriptor, getResourceOntologyBinding) {
+  return integrations.map(
+    (integration) => withPlatformIntegrationResourceDescriptor(integration, getIntegrationResourceDescriptor, getResourceOntologyBinding)
+  );
 }
-function isOurReplyAction(deal) {
-  if (Object.prototype.hasOwnProperty.call(deal, "nextAction")) {
-    return deal.nextAction === "send_reply";
+function projectTopologyRelationships(model) {
+  const projected = {};
+  function ensure(sourceId) {
+    projected[sourceId] ??= {};
+    return projected[sourceId];
+  }
+  for (const relationship of Object.values(model.topology.relationships)) {
+    if (relationship.from.kind === "humanCheckpoint") continue;
+    if (relationship.kind === "triggers" && relationship.to.kind === "resource") {
+      const target = model.resources[relationship.to.id];
+      if (target?.kind !== "workflow" && target?.kind !== "agent") continue;
+      const source = ensure(relationship.from.id);
+      source.triggers ??= {};
+      if (target.kind === "workflow") {
+        source.triggers.workflows ??= [];
+        source.triggers.workflows.push(target.id);
+      } else {
+        source.triggers.agents ??= [];
+        source.triggers.agents.push(target.id);
+      }
+      continue;
+    }
+    if (relationship.kind === "uses" && relationship.from.kind === "resource" && relationship.to.kind === "resource") {
+      const target = model.resources[relationship.to.id];
+      if (target?.kind !== "integration") continue;
+      const source = ensure(relationship.from.id);
+      source.uses ??= {};
+      source.uses.integrations ??= [];
+      source.uses.integrations.push(target.id);
+    }
   }
-  return (deal.ownership ?? getDealOwnership(deal)) === "us";
+  return projected;
+}
+function projectDeploymentSpec(options) {
+  const workflows = withPlatformResourceDescriptors(
+    options.workflows,
+    options.getWorkflowResourceDescriptor,
+    options.getResourceOntologyBinding
+  );
+  const integrations = withPlatformIntegrationResourceDescriptors(
+    options.integrations ?? [],
+    options.getIntegrationResourceDescriptor,
+    options.getResourceOntologyBinding
+  );
+  const workflowResourceIds = new Set(workflows.map((workflow) => workflow.config.resourceId));
+  const integrationResourceIds = new Set(integrations.map((integration) => integration.resourceId));
+  const resources = projectDeploymentResources(
+    options.organizationModel.resources,
+    workflowResourceIds,
+    integrationResourceIds,
+    options.getResourceOntologyBinding
+  );
+  return {
+    version: options.version,
+    organizationModel: {
+      systems: projectDeploymentSystems(options.organizationModel),
+      resources
+    },
+    workflows,
+    agents: options.agents ?? [],
+    triggers: options.triggers,
+    integrations,
+    humanCheckpoints: options.humanCheckpoints,
+    relationships: projectTopologyRelationships(options.organizationModel),
+    ...options.externalResources ? { externalResources: options.externalResources } : {}
+  };
+}
+function projectDeploymentResources(resources, workflowResourceIds, integrationResourceIds, getResourceOntologyBinding) {
+  return Object.fromEntries(
+    Object.values(resources).filter((resource) => workflowResourceIds.has(resource.id) || integrationResourceIds.has(resource.id)).map((resource) => {
+      const sdkResource = toSdkResourceDescriptor(resource, getResourceOntologyBinding);
+      return [sdkResource.id, sdkResource];
+    })
+  );
+}
+function projectDeploymentSystems(model) {
+  return Object.fromEntries(
+    listAllSystems(model).map(({ path, system }, index) => {
+      const lifecycle = system.lifecycle === "archived" ? "archived" : system.lifecycle === "deprecated" ? "deprecated" : "active";
+      return [
+        system.id,
+        {
+          id: system.id,
+          order: system.order ?? (index + 1) * 10,
+          title: system.label ?? system.title ?? system.id,
+          description: system.description ?? "",
+          kind: system.kind ?? "product",
+          ...system.parentSystemId ? { parentSystemId: system.parentSystemId } : {},
+          ...path !== system.id ? { systemPath: path } : {},
+          governedByKnowledge: system.governedByKnowledge ?? [],
+          drivesGoals: system.drivesGoals ?? [],
+          lifecycle,
+          status: lifecycle,
+          ...system.responsibleRoleId ? { responsibleRoleId: system.responsibleRoleId } : {}
+        }
+      ];
+    })
+  );
 }
 var ListBuilderStageKeySchema = z.string().min(1);
 
-export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, DEFAULT_CRM_ACTIONS, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, concurrentPool, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, resolveContractRef, runDiagnostic, splitName, topologyRef, topologyRelationship, validateResourceGovernance };
+export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, compileBusinessOntologyValidationIndex, concurrentPool, createLeadGenStageValidators, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, projectDeploymentSpec, projectTopologyRelationships, resolveContractRef, runDiagnostic, splitName, toSdkResourceDescriptor, topologyRef, topologyRelationship, validateResourceGovernance, withPlatformIntegrationResourceDescriptor, withPlatformIntegrationResourceDescriptors, withPlatformResourceDescriptor, withPlatformResourceDescriptors };