@elevasis/sdk 1.30.2 → 1.31.0

package/dist/cli.cjs

@@ -39771,6 +39771,18 @@ var OrganizationModelDomainMetadataByDomainSchema = external_exports.object({
 }).partial().default(DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA).transform((metadata) => ({ ...DEFAULT_ORGANIZATION_MODEL_DOMAIN_METADATA, ...metadata }));
 var OrganizationModelSchemaBase = external_exports.object({
   version: external_exports.literal(1).default(1),
+  /**
+   * Deterministic SHA-256 hex hash of the full resolved model, excluding this
+   * field itself and volatile domainMetadata.lastModified values.
+   *
+   * Stamped at deploy time by the platform OM assembly and persisted alongside
+   * the snapshot in the DB. Compared at API boot to detect stale deployed
+   * snapshots (primary gate: deploy; secondary backstop: boot).
+   *
+   * Optional — absent on models that predate Step 2 versioning or that have
+   * not been stamped (e.g. tenant partial overrides before re-deploy).
+   */
+  snapshotHash: external_exports.string().optional(),
   domainMetadata: OrganizationModelDomainMetadataByDomainSchema,
   branding: OrganizationModelBrandingSchema.default(DEFAULT_ORGANIZATION_MODEL_BRANDING),
   navigation: OrganizationModelNavigationSchema,
@@ -41585,7 +41597,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" is missing.`,
       { ref: request.systemPath }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface === void 0) {
     addReadinessIssue(
@@ -41595,7 +41613,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" does not declare interface "${request.interfaceKey}".`,
       { path: readinessMarkerPath(request) }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface.lifecycle !== "active") {
     addReadinessIssue(
@@ -45608,7 +45632,7 @@ function wrapAction(commandName, fn) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "1.30.2",
+  version: "1.31.0",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -48381,6 +48405,15 @@ function governedBy(graph, nodeId2) {
   }
   return results;
 }
+function listAllSystemsFlat(model) {
+  return listAllSystems(model);
+}
+function listAllResources(model) {
+  return Object.values(model.resources ?? {}).sort((a, b) => a.id.localeCompare(b.id));
+}
+function listAllRoles(model) {
+  return Object.values(model.roles ?? {}).sort((a, b) => a.id.localeCompare(b.id));
+}
 function parsePath(pathString) {
   if (!pathString || typeof pathString !== "string") {
     throw new Error("parsePath: path must be a non-empty string");
@@ -48431,11 +48464,20 @@ function parsePath(pathString) {
     }
     return { mount: "graph", args: [graphNodeId, verb] };
   }
+  if (first === "all-systems" && rest.length === 0) {
+    return { mount: "all-systems", args: [] };
+  }
+  if (first === "all-resources" && rest.length === 0) {
+    return { mount: "all-resources", args: [] };
+  }
+  if (first === "all-roles" && rest.length === 0) {
+    return { mount: "all-roles", args: [] };
+  }
   if (segments.length === 1) {
     return { mount: "node", args: [first] };
   }
   throw new Error(
-    `parsePath: unrecognized path pattern "${pathString}". Supported: /by-system/<id>, /by-kind/<kind>, /by-owner/<id>, /graph/<nodeId>/governs, /graph/<nodeId>/governed-by, /<nodeId>`
+    `parsePath: unrecognized path pattern "${pathString}". Supported: /by-system/<id>, /by-kind/<kind>, /by-owner/<id>, /graph/<nodeId>/governs, /graph/<nodeId>/governed-by, /<nodeId>, /all-systems, /all-resources, /all-roles`
   );
 }
 function omSearch(model, query, options = {}) {
@@ -49099,9 +49141,37 @@ async function loadOrgModel(projectRoot) {
 }
 
 // src/cli/commands/knowledge/ls.ts
+function formatAllSystems(entries) {
+  if (entries.length === 0) return "(no results)";
+  const pathWidth = Math.max(...entries.map((e) => e.path.length), 4);
+  const header = `${"PATH".padEnd(pathWidth)}  LABEL`;
+  const divider = "-".repeat(header.length + 20);
+  const rows = entries.map((e) => {
+    const label = e.system.label ?? e.system.title ?? e.path;
+    return `${e.path.padEnd(pathWidth)}  ${label}`;
+  });
+  return [header, divider, ...rows].join("\n");
+}
+function formatAllResources(resources) {
+  if (resources.length === 0) return "(no results)";
+  const idWidth = Math.max(...resources.map((r) => r.id.length), 4);
+  const kindWidth = Math.max(...resources.map((r) => r.kind.length), 4);
+  const header = `${"ID".padEnd(idWidth)}  ${"KIND".padEnd(kindWidth)}  TITLE`;
+  const divider = "-".repeat(header.length + 20);
+  const rows = resources.map((r) => `${r.id.padEnd(idWidth)}  ${r.kind.padEnd(kindWidth)}  ${r.title}`);
+  return [header, divider, ...rows].join("\n");
+}
+function formatAllRoles(roles) {
+  if (roles.length === 0) return "(no results)";
+  const idWidth = Math.max(...roles.map((r) => r.id.length), 4);
+  const header = `${"ID".padEnd(idWidth)}  TITLE`;
+  const divider = "-".repeat(header.length + 20);
+  const rows = roles.map((r) => `${r.id.padEnd(idWidth)}  ${r.title}`);
+  return [header, divider, ...rows].join("\n");
+}
 function registerKnowledgeLs(program3) {
   program3.command("knowledge:ls <path>").alias("om:ls").description(
-    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk om:ls /by-kind/playbook\n    elevasis-sdk om:ls /by-system/sales.crm\n    elevasis-sdk om:ls /by-ontology/sales.crm:object/deal\n    elevasis-sdk om:ls /by-owner/role.ops-lead\n    elevasis-sdk om:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk om:ls /graph/system:sales.crm/governed-by"
+    "List knowledge nodes for a Knowledge Map path\n  Examples:\n    elevasis-sdk om:ls /by-kind/playbook\n    elevasis-sdk om:ls /by-system/sales.crm\n    elevasis-sdk om:ls /by-ontology/sales.crm:object/deal\n    elevasis-sdk om:ls /by-owner/role.ops-lead\n    elevasis-sdk om:ls /graph/knowledge.outreach-playbook/governs\n    elevasis-sdk om:ls /graph/system:sales.crm/governed-by\n    elevasis-sdk om:ls /all-systems\n    elevasis-sdk om:ls /all-resources\n    elevasis-sdk om:ls /all-roles"
   ).option("--json", "Print wrapped JSON envelope { path, mount, args, results }").option("--ids-only", "Print one ID per line (for piping)").action(
     wrapAction("knowledge:ls", async (pathArg, options) => {
       let parsed;
@@ -49114,6 +49184,42 @@ function registerKnowledgeLs(program3) {
       }
       const projectRoot = getProjectRoot();
       const model = await loadOrgModel(projectRoot);
+      if (parsed.mount === "all-systems") {
+        const entries = listAllSystemsFlat(model);
+        if (options.json) {
+          process.stdout.write(formatJson({ path: pathArg, parsed, results: entries.map((e) => e.path) }) + "\n");
+        } else if (options.idsOnly) {
+          const out = entries.map((e) => e.path).join("\n");
+          if (out) process.stdout.write(out + "\n");
+        } else {
+          process.stdout.write(formatAllSystems(entries) + "\n");
+        }
+        return;
+      }
+      if (parsed.mount === "all-resources") {
+        const resources = listAllResources(model);
+        if (options.json) {
+          process.stdout.write(formatJson({ path: pathArg, parsed, results: resources.map((r) => r.id) }) + "\n");
+        } else if (options.idsOnly) {
+          const out = resources.map((r) => r.id).join("\n");
+          if (out) process.stdout.write(out + "\n");
+        } else {
+          process.stdout.write(formatAllResources(resources) + "\n");
+        }
+        return;
+      }
+      if (parsed.mount === "all-roles") {
+        const roles = listAllRoles(model);
+        if (options.json) {
+          process.stdout.write(formatJson({ path: pathArg, parsed, results: roles.map((r) => r.id) }) + "\n");
+        } else if (options.idsOnly) {
+          const out = roles.map((r) => r.id).join("\n");
+          if (out) process.stdout.write(out + "\n");
+        } else {
+          process.stdout.write(formatAllRoles(roles) + "\n");
+        }
+        return;
+      }
       const graph = buildOrganizationGraph({ organizationModel: model });
       const knowledgeNodes = Object.values(model.knowledge);
       let results;

package/dist/index.d.ts

@@ -6441,7 +6441,7 @@ declare const ActivityEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>], "type">;
 type ActivityEvent = z.infer<typeof ActivityEventSchema>;
 
-interface Action {
+interface Action$1 {
     key: string;
     label: string;
     payloadSchema?: z.ZodTypeAny;
@@ -6457,7 +6457,7 @@ type DealActionInput = AcqDealRow & {
     ownership?: 'us' | 'them' | null;
     nextAction?: string | null;
 };
-declare function deriveActions(deal: DealActionInput, actions?: ActionDef[]): Action[];
+declare function deriveActions(deal: DealActionInput, actions?: ActionDef[]): Action$1[];
 
 declare const OntologyIdSchema: z.ZodString;
 type OntologyId = z.infer<typeof OntologyIdSchema>;
@@ -6798,6 +6798,7 @@ type Link = z.infer<typeof LinkSchema>;
 
 declare const OrganizationModelSchema$1: z.ZodObject<{
     version: z.ZodDefault<z.ZodLiteral<1>>;
+    snapshotHash: z.ZodOptional<z.ZodString>;
     domainMetadata: z.ZodPipe<z.ZodDefault<z.ZodObject<{
         branding: z.ZodOptional<z.ZodObject<{
             version: z.ZodDefault<z.ZodLiteral<1>>;
@@ -7807,7 +7808,12 @@ type CrmApiOntologyValidationIndex = BusinessOntologyValidationIndexBase & {
     crmPipelineCatalog: OntologyCatalogType;
 };
 type BusinessOntologyValidationIndex = LeadGenApiOntologyValidationIndex & CrmApiOntologyValidationIndex;
-type SystemInterfaceReadinessIssueFamily = 'SYSTEM_INTERFACE_MISSING' | 'SYSTEM_INTERFACE_DISABLED' | 'SYSTEM_INTERFACE_INVALID' | 'SYSTEM_INTERFACE_NOT_READY' | 'SYSTEM_BRIDGE_NOT_READY';
+type SystemInterfaceReadinessIssueFamily = 'SYSTEM_INTERFACE_MISSING' | 'SYSTEM_INTERFACE_DISABLED' | 'SYSTEM_INTERFACE_INVALID' | 'SYSTEM_INTERFACE_NOT_READY' | 'SYSTEM_BRIDGE_NOT_READY'
+/**
+ * The deployed OM snapshot hash does not match the canonical source hash.
+ * Redeploy with `pnpm operations:deploy` to refresh the snapshot.
+ */
+ | 'STALE_OM_SNAPSHOT';
 /**
  * Legacy mixed acquisition index.
  *
@@ -12383,6 +12389,27 @@ type OrganizationModelTopology = z.infer<typeof OmTopologyDomainSchema>
 type OrganizationModelTopologyNodeRef = z.infer<typeof OmTopologyNodeRefSchema>
 type OrganizationModelTopologyRelationship = z.infer<typeof OmTopologyRelationshipSchema>
 
+declare const ActionSchema = z.object({
+  id: ActionIdSchema,
+  /** Domain-map iteration order. Convention: multiples of 10 (10, 20, 30, ...) to allow easy insertion. */
+  order: z.number(),
+  label: LabelSchema,
+  description: DescriptionSchema.optional(),
+  scope: ActionScopeSchema.default('global'),
+  resourceId: ActionResourceIdSchema.optional(),
+  affects: z.array(EntityIdSchema.meta({ ref: 'entity' })).optional(),
+  invocations: z.array(ActionInvocationSchema).default([]),
+  knowledge: z
+    .array(ModelIdSchema.meta({ ref: 'knowledge' }))
+    .default([])
+    .optional(),
+  lifecycle: z
+    .enum(['draft', 'beta', 'active', 'deprecated', 'archived'])
+    .meta({ label: 'Lifecycle', color: 'teal' })
+    .default('active')
+})
+type Action = z.infer<typeof ActionSchema>
+
 // CRM stage/state catalogs are model-owned (authored in @repo/elevasis-core
 // canonicalOrganizationModel). The published core schema validates only the
 // transport shape; closed-catalog membership is enforced by the caller/API
@@ -12421,6 +12448,28 @@ declare function withPlatformIntegrationResourceDescriptors(integrations: Integr
 declare function projectTopologyRelationships(model: Pick<OrganizationModel, 'resources' | 'topology'>): ResourceRelationships;
 declare function projectDeploymentSpec(options: ProjectDeploymentSpecOptions): DeploymentSpec;
 
+/**
+ * Browser-safe generic workflow config helper.
+ *
+ * Promoted from @repo/elevasis-core so any workflow family (lead-gen, CRM, etc.)
+ * can derive resourceId, actions, primaryAction, name, and description from
+ * the canonical OM Resource descriptor without duplicating validation logic.
+ *
+ * This file intentionally imports NOTHING from @elevasis/sdk/worker or any
+ * Node.js-only module. It is safe to import from browser bundlers (Vite, etc.).
+ */
+
+type WorkflowResourceDescriptorMap = Record<string, OrganizationModelResourceEntry>;
+type WorkflowConfigActionRegistry = readonly Pick<Action, 'id' | 'resourceId'>[];
+declare function defineWorkflowConfig<const TResourceId extends string>(resourceId: TResourceId, descriptors: WorkflowResourceDescriptorMap, actionRegistry?: WorkflowConfigActionRegistry): {
+    readonly name: string;
+    readonly description: string;
+    readonly buildActionKey?: string | undefined;
+    readonly resourceId: TResourceId;
+    readonly actions: string[];
+    readonly primaryAction: string;
+};
+
 /**
  * @elevasis/sdk - Types and utilities for building Elevasis organization resources
  *
@@ -12431,5 +12480,5 @@ declare function projectDeploymentSpec(options: ProjectDeploymentSpecOptions): D
 declare const ListBuilderStageKeySchema: z.ZodString;
 type ListBuilderStageKey = z.infer<typeof ListBuilderStageKeySchema>;
 
-export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, compileBusinessOntologyValidationIndex, concurrentPool, createLeadGenStageValidators, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, projectDeploymentSpec, projectTopologyRelationships, resolveContractRef, runDiagnostic, splitName, toSdkResourceDescriptor, topologyRef, topologyRelationship, validateDeclaredSystemInterfaceReadiness, validateResourceGovernance, withPlatformIntegrationResourceDescriptor, withPlatformIntegrationResourceDescriptors, withPlatformResourceDescriptor, withPlatformResourceDescriptors };
-export type { AbsoluteScheduleConfig, AcqCompany, AcqContact, AcqDeal, AcqDealRow, AcqList, Action, ActionDef, ActivityEvent, AddToCampaignLead, AddToCampaignParams, AddToCampaignResult, AgentConfig, AgentConstraints, AgentDefinition, AgentMemory, FindCompanyEmailParams as AnymailfinderFindCompanyEmailParams, FindCompanyEmailResult as AnymailfinderFindCompanyEmailResult, FindDecisionMakerEmailParams as AnymailfinderFindDecisionMakerEmailParams, FindDecisionMakerEmailResult as AnymailfinderFindDecisionMakerEmailResult, FindPersonEmailParams as AnymailfinderFindPersonEmailParams, FindPersonEmailResult as AnymailfinderFindPersonEmailResult, AnymailfinderToolMap, VerifyEmailParams as AnymailfinderVerifyEmailParams, VerifyEmailResult as AnymailfinderVerifyEmailResult, ApifyToolMap, ApifyWebhookConfig, AppendRowsParams, AppendRowsResult, ApprovalToolMap, AttioToolMap, BatchUpdateParams, BatchUpdateResult, BuildPlanSnapshotStep, BulkDeleteLeadsParams, BulkDeleteLeadsResult, BulkImportParams, BulkImportResult, BusinessOntologyValidationIndex, CancelHitlByDealIdParams, CancelSchedulesAndHitlByEmailParams, ClearDealFieldsParams, ClearRangeParams, ClearRangeResult, ClickUpToolMap, CompanyFilters, ConcurrentPoolOptions, ConcurrentPoolResult, ConditionalNext, ContactFilters, Contract, ContractRefResolutionErrorCode, ContractRegistry, CreateAttributeParams, CreateAttributeResult, CreateAutoPaymentLinkParams, CreateAutoPaymentLinkResult, CreateCheckoutSessionParams, CreateCheckoutSessionResult, CreateCompanyParams, CreateContactParams, CreateEnvelopeParams, CreateEnvelopeResult, CreateFolderParams, CreateFolderResult, CreateListParams, CreateNoteParams, CreateNoteResult, CreatePaymentLinkParams, CreatePaymentLinkResult, CreateRecordParams, CreateRecordResult, CreateScheduleInput, CrmStageKey, CrmStateKey, CrmToolMap, DeleteDealParams, DeleteNoteParams, DeleteNoteResult, DeleteRecordParams, DeleteRecordResult, DeleteRowByValueParams, DeleteRowByValueResult, DeploymentSpec, DiagnosticOutput, DownloadDocumentParams, DownloadDocumentResult, DropboxToolMap, ElevasConfig, EmailToolMap, EnvelopeDocument, EventTriggerConfig, ExecutionContext, ExecutionInterface, ExecutionMetadata, ExecutionToolMap, FilterExpression, FilterRowsParams, FilterRowsResult, FormField, FormFieldType, FormSchema, GetDailyCampaignAnalyticsParams, GetDailyCampaignAnalyticsResult, GetEmailsParams, GetEmailsResult, GetEnvelopeParams, GetEnvelopeResult, GetHeadersParams, GetHeadersResult, GetLastRowParams, GetLastRowResult, GetPaymentLinkParams, GetPaymentLinkResult, GetRecordParams, GetRecordResult, GetRowByValueParams, GetRowByValueResult, GetSpreadsheetMetadataParams, GetSpreadsheetMetadataResult, GmailSendEmailParams, GmailSendEmailResult, GmailToolMap, GoogleSheetsToolMap, HumanCheckpointDefinition, InstantlyToolMap, IntegrationDefinition, IntegrationResourceDescriptorResolver, LLMAdapterFactory, LLMGenerateRequest, LLMGenerateResponse, LLMMessage, LLMModel, LeadGenStageValidators, LeadToolMap, LinearNext, ListAttributesParams, ListAttributesResult, ListBuilderStageKey, ListBuilderStep, ListLeadsParams, ListLeadsResult, ListNotesParams, ListNotesResult, ListObjectsResult, ListPaymentLinksParams, ListPaymentLinksResult, ListToolMap, MarkProposalReviewedParams, MarkProposalSentParams, MethodEntry, MillionVerifierToolMap, ModelConfig, NextConfig, NotificationSDKInput, NotificationToolMap, OrganizationModelIntegrationResourceEntry, OrganizationModelResourceEntry, OrganizationModelResourceOntologyBinding, OrganizationModelTopology, OrganizationModelTopologyNodeRef, OrganizationModelTopologyRelationship, OrganizationModelWorkflowResourceEntry, PaginatedResult, PaginationParams, PdfToolMap, ProcessingStageStatus, ProjectDeploymentSpecOptions, ProjectsToolMap, QueryRecordsParams, QueryRecordsResult, ReadSheetParams, ReadSheetResult, Recipient, RecurringScheduleConfig, RelationshipDeclaration, RelativeScheduleConfig, RemoveFromSubsequenceParams, RemoveFromSubsequenceResult, ResendGetEmailParams, ResendGetEmailResult, ResendSendEmailParams, ResendSendEmailResult, ResendToolMap, ResolvedContractRef, ResourceCategory, ResourceDefinition, ResourceLink, ResourceMetricsConfig, ResourceOntologyBindingResolver, ResourceRelationships, ResourceStatus$1 as ResourceStatus, ResourceType, RunActorParams, RunActorResult, SDKLLMGenerateParams, ScheduleOriginTracking, ScheduleTarget, ScheduleTriggerConfig, SchedulerToolMap, SendReplyParams, SendReplyResult, SetContactNurtureParams, SheetInfo, SignatureApiFieldType, SignatureApiToolMap, SigningPlace, SortCriteria, StartActorParams, StartActorResult, StepHandler, StorageDeleteInput, StorageDeleteOutput, StorageDownloadInput, StorageDownloadOutput, StorageListInput, StorageListOutput, StorageSignedUrlInput, StorageSignedUrlOutput, StorageToolMap, StorageUploadInput, StorageUploadOutput, StripeToolMap, TaskSchedule, TaskScheduleConfig, TombaToolMap, Tool, ToolExecutionOptions, ToolMethodMap, ToolingErrorType, TransitionItemParams, TriggerConfig, TriggerDefinition, UpdateAttributeParams, UpdateAttributeResult, UpdateCloseLostReasonParams, UpdateCompanyParams, UpdateContactParams, UpdateDiscoveryDataParams, UpdateFeesParams, UpdateInterestStatusParams, UpdateInterestStatusResult, UpdateListParams, UpdatePaymentLinkParams, UpdatePaymentLinkResult, UpdateProposalDataParams, UpdateRecordParams, UpdateRecordResult, UpdateRowByValueParams, UpdateRowByValueResult, UploadFileParams, UploadFileResult, UpsertCompanyParams, UpsertContactParams, UpsertDealParams, UpsertRowParams, UpsertRowResult, VoidEnvelopeParams, VoidEnvelopeResult, WebhookProviderType, WebhookTriggerConfig, WorkflowConfig, WorkflowDefinition, WorkflowLogger, WorkflowResourceDescriptorResolver, WorkflowStep, WriteSheetParams, WriteSheetResult };
+export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, compileBusinessOntologyValidationIndex, concurrentPool, createLeadGenStageValidators, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, defineWorkflowConfig, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, projectDeploymentSpec, projectTopologyRelationships, resolveContractRef, runDiagnostic, splitName, toSdkResourceDescriptor, topologyRef, topologyRelationship, validateDeclaredSystemInterfaceReadiness, validateResourceGovernance, withPlatformIntegrationResourceDescriptor, withPlatformIntegrationResourceDescriptors, withPlatformResourceDescriptor, withPlatformResourceDescriptors };
+export type { AbsoluteScheduleConfig, AcqCompany, AcqContact, AcqDeal, AcqDealRow, AcqList, Action$1 as Action, ActionDef, ActivityEvent, AddToCampaignLead, AddToCampaignParams, AddToCampaignResult, AgentConfig, AgentConstraints, AgentDefinition, AgentMemory, FindCompanyEmailParams as AnymailfinderFindCompanyEmailParams, FindCompanyEmailResult as AnymailfinderFindCompanyEmailResult, FindDecisionMakerEmailParams as AnymailfinderFindDecisionMakerEmailParams, FindDecisionMakerEmailResult as AnymailfinderFindDecisionMakerEmailResult, FindPersonEmailParams as AnymailfinderFindPersonEmailParams, FindPersonEmailResult as AnymailfinderFindPersonEmailResult, AnymailfinderToolMap, VerifyEmailParams as AnymailfinderVerifyEmailParams, VerifyEmailResult as AnymailfinderVerifyEmailResult, ApifyToolMap, ApifyWebhookConfig, AppendRowsParams, AppendRowsResult, ApprovalToolMap, AttioToolMap, BatchUpdateParams, BatchUpdateResult, BuildPlanSnapshotStep, BulkDeleteLeadsParams, BulkDeleteLeadsResult, BulkImportParams, BulkImportResult, BusinessOntologyValidationIndex, CancelHitlByDealIdParams, CancelSchedulesAndHitlByEmailParams, ClearDealFieldsParams, ClearRangeParams, ClearRangeResult, ClickUpToolMap, CompanyFilters, ConcurrentPoolOptions, ConcurrentPoolResult, ConditionalNext, ContactFilters, Contract, ContractRefResolutionErrorCode, ContractRegistry, CreateAttributeParams, CreateAttributeResult, CreateAutoPaymentLinkParams, CreateAutoPaymentLinkResult, CreateCheckoutSessionParams, CreateCheckoutSessionResult, CreateCompanyParams, CreateContactParams, CreateEnvelopeParams, CreateEnvelopeResult, CreateFolderParams, CreateFolderResult, CreateListParams, CreateNoteParams, CreateNoteResult, CreatePaymentLinkParams, CreatePaymentLinkResult, CreateRecordParams, CreateRecordResult, CreateScheduleInput, CrmStageKey, CrmStateKey, CrmToolMap, DeleteDealParams, DeleteNoteParams, DeleteNoteResult, DeleteRecordParams, DeleteRecordResult, DeleteRowByValueParams, DeleteRowByValueResult, DeploymentSpec, DiagnosticOutput, DownloadDocumentParams, DownloadDocumentResult, DropboxToolMap, ElevasConfig, EmailToolMap, EnvelopeDocument, EventTriggerConfig, ExecutionContext, ExecutionInterface, ExecutionMetadata, ExecutionToolMap, FilterExpression, FilterRowsParams, FilterRowsResult, FormField, FormFieldType, FormSchema, GetDailyCampaignAnalyticsParams, GetDailyCampaignAnalyticsResult, GetEmailsParams, GetEmailsResult, GetEnvelopeParams, GetEnvelopeResult, GetHeadersParams, GetHeadersResult, GetLastRowParams, GetLastRowResult, GetPaymentLinkParams, GetPaymentLinkResult, GetRecordParams, GetRecordResult, GetRowByValueParams, GetRowByValueResult, GetSpreadsheetMetadataParams, GetSpreadsheetMetadataResult, GmailSendEmailParams, GmailSendEmailResult, GmailToolMap, GoogleSheetsToolMap, HumanCheckpointDefinition, InstantlyToolMap, IntegrationDefinition, IntegrationResourceDescriptorResolver, LLMAdapterFactory, LLMGenerateRequest, LLMGenerateResponse, LLMMessage, LLMModel, LeadGenStageValidators, LeadToolMap, LinearNext, ListAttributesParams, ListAttributesResult, ListBuilderStageKey, ListBuilderStep, ListLeadsParams, ListLeadsResult, ListNotesParams, ListNotesResult, ListObjectsResult, ListPaymentLinksParams, ListPaymentLinksResult, ListToolMap, MarkProposalReviewedParams, MarkProposalSentParams, MethodEntry, MillionVerifierToolMap, ModelConfig, NextConfig, NotificationSDKInput, NotificationToolMap, OrganizationModelIntegrationResourceEntry, OrganizationModelResourceEntry, OrganizationModelResourceOntologyBinding, OrganizationModelTopology, OrganizationModelTopologyNodeRef, OrganizationModelTopologyRelationship, OrganizationModelWorkflowResourceEntry, PaginatedResult, PaginationParams, PdfToolMap, ProcessingStageStatus, ProjectDeploymentSpecOptions, ProjectsToolMap, QueryRecordsParams, QueryRecordsResult, ReadSheetParams, ReadSheetResult, Recipient, RecurringScheduleConfig, RelationshipDeclaration, RelativeScheduleConfig, RemoveFromSubsequenceParams, RemoveFromSubsequenceResult, ResendGetEmailParams, ResendGetEmailResult, ResendSendEmailParams, ResendSendEmailResult, ResendToolMap, ResolvedContractRef, ResourceCategory, ResourceDefinition, ResourceLink, ResourceMetricsConfig, ResourceOntologyBindingResolver, ResourceRelationships, ResourceStatus$1 as ResourceStatus, ResourceType, RunActorParams, RunActorResult, SDKLLMGenerateParams, ScheduleOriginTracking, ScheduleTarget, ScheduleTriggerConfig, SchedulerToolMap, SendReplyParams, SendReplyResult, SetContactNurtureParams, SheetInfo, SignatureApiFieldType, SignatureApiToolMap, SigningPlace, SortCriteria, StartActorParams, StartActorResult, StepHandler, StorageDeleteInput, StorageDeleteOutput, StorageDownloadInput, StorageDownloadOutput, StorageListInput, StorageListOutput, StorageSignedUrlInput, StorageSignedUrlOutput, StorageToolMap, StorageUploadInput, StorageUploadOutput, StripeToolMap, TaskSchedule, TaskScheduleConfig, TombaToolMap, Tool, ToolExecutionOptions, ToolMethodMap, ToolingErrorType, TransitionItemParams, TriggerConfig, TriggerDefinition, UpdateAttributeParams, UpdateAttributeResult, UpdateCloseLostReasonParams, UpdateCompanyParams, UpdateContactParams, UpdateDiscoveryDataParams, UpdateFeesParams, UpdateInterestStatusParams, UpdateInterestStatusResult, UpdateListParams, UpdatePaymentLinkParams, UpdatePaymentLinkResult, UpdateProposalDataParams, UpdateRecordParams, UpdateRecordResult, UpdateRowByValueParams, UpdateRowByValueResult, UploadFileParams, UploadFileResult, UpsertCompanyParams, UpsertContactParams, UpsertDealParams, UpsertRowParams, UpsertRowResult, VoidEnvelopeParams, VoidEnvelopeResult, WebhookProviderType, WebhookTriggerConfig, WorkflowConfig, WorkflowConfigActionRegistry, WorkflowDefinition, WorkflowLogger, WorkflowResourceDescriptorMap, WorkflowResourceDescriptorResolver, WorkflowStep, WriteSheetParams, WriteSheetResult };

package/dist/index.js

@@ -1964,7 +1964,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" is missing.`,
       { ref: request.systemPath }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface === void 0) {
     addReadinessIssue(
@@ -1974,7 +1980,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" does not declare interface "${request.interfaceKey}".`,
       { path: readinessMarkerPath(request) }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface.lifecycle !== "active") {
     addReadinessIssue(
@@ -6923,6 +6935,31 @@ function projectDeploymentSpec(options) {
     ...options.externalResources ? { externalResources: options.externalResources } : {}
   };
 }
+
+// src/workflow-config.ts
+function defineWorkflowConfig(resourceId, descriptors, actionRegistry = []) {
+  const descriptor = descriptors[resourceId];
+  if (descriptor === void 0) {
+    throw new Error(`Missing platform OM Resource descriptor for workflow "${resourceId}"`);
+  }
+  if (descriptor.kind !== "workflow") {
+    throw new Error(`Platform OM Resource descriptor "${resourceId}" is not a workflow`);
+  }
+  const workflowDescriptor = descriptor;
+  const ontology = workflowDescriptor.ontology;
+  if (ontology?.primaryAction === void 0) {
+    throw new Error(`Platform OM workflow Resource descriptor "${resourceId}" is missing ontology.primaryAction`);
+  }
+  const buildAction = actionRegistry.find((entry) => entry.resourceId === workflowDescriptor.id);
+  return {
+    resourceId: workflowDescriptor.id,
+    actions: ontology.actions ?? [],
+    primaryAction: ontology.primaryAction,
+    ...buildAction ? { buildActionKey: buildAction.id } : {},
+    name: workflowDescriptor.title ?? workflowDescriptor.id,
+    description: workflowDescriptor.description ?? ""
+  };
+}
 var ListBuilderStageKeySchema = z.string().min(1);
 
-export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, compileBusinessOntologyValidationIndex, concurrentPool, createLeadGenStageValidators, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, projectDeploymentSpec, projectTopologyRelationships, resolveContractRef, runDiagnostic, splitName, toSdkResourceDescriptor, topologyRef, topologyRelationship, validateDeclaredSystemInterfaceReadiness, validateResourceGovernance, withPlatformIntegrationResourceDescriptor, withPlatformIntegrationResourceDescriptors, withPlatformResourceDescriptor, withPlatformResourceDescriptors };
+export { ActivityEventSchema, BuildPlanSnapshotStepSchema, ProspectingBuildTemplateSchema as BuildTemplateSchema, ContractRefResolutionError, CrmStageKeySchema, CrmStateKeySchema, EmailSchema, ExecutionError, ListBuilderStageKeySchema, ProcessingStageStatusSchema, RegistryValidationError, ResourceRegistry, StepType, ToolingError, bindResourceDescriptor, compileBusinessOntologyValidationIndex, concurrentPool, createLeadGenStageValidators, defineContract, defineResource, defineResourceOntology, defineResources, defineStep, defineTopology, defineTopologyRelationship, defineWorkflow, defineWorkflowConfig, deriveActions, diagnosticOutput, integrationInput, isZodType, parseTopologyNodeRef, projectDeploymentSpec, projectTopologyRelationships, resolveContractRef, runDiagnostic, splitName, toSdkResourceDescriptor, topologyRef, topologyRelationship, validateDeclaredSystemInterfaceReadiness, validateResourceGovernance, withPlatformIntegrationResourceDescriptor, withPlatformIntegrationResourceDescriptors, withPlatformResourceDescriptor, withPlatformResourceDescriptors };

package/dist/node/index.d.ts

@@ -1509,6 +1509,7 @@ type Link = z.infer<typeof LinkSchema>;
 
 declare const OrganizationModelSchema$1: z.ZodObject<{
     version: z.ZodDefault<z.ZodLiteral<1>>;
+    snapshotHash: z.ZodOptional<z.ZodString>;
     domainMetadata: z.ZodPipe<z.ZodDefault<z.ZodObject<{
         branding: z.ZodOptional<z.ZodObject<{
             version: z.ZodDefault<z.ZodLiteral<1>>;

package/dist/test-utils/index.d.ts

@@ -5993,6 +5993,7 @@ type Link = z.infer<typeof LinkSchema>;
 
 declare const OrganizationModelSchema: z.ZodObject<{
     version: z.ZodDefault<z.ZodLiteral<1>>;
+    snapshotHash: z.ZodOptional<z.ZodString>;
     domainMetadata: z.ZodPipe<z.ZodDefault<z.ZodObject<{
         branding: z.ZodOptional<z.ZodObject<{
             version: z.ZodDefault<z.ZodLiteral<1>>;

package/dist/test-utils/index.js

@@ -9200,7 +9200,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" is missing.`,
       { ref: request.systemPath }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface === void 0) {
     addReadinessIssue(
@@ -9210,7 +9216,13 @@ function computeInterfaceReadiness(model, request) {
       `System "${request.systemPath}" does not declare interface "${request.interfaceKey}".`,
       { path: readinessMarkerPath(request) }
     );
-    return { ready: false, systemPath: request.systemPath, interfaceKey: request.interfaceKey, scopedResourceIds, issues };
+    return {
+      ready: false,
+      systemPath: request.systemPath,
+      interfaceKey: request.interfaceKey,
+      scopedResourceIds,
+      issues
+    };
   }
   if (systemInterface.lifecycle !== "active") {
     addReadinessIssue(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "1.30.2",
+  "version": "1.31.0",
   "description": "SDK for building Elevasis organization resources",
   "type": "module",
   "bin": {
@@ -58,7 +58,7 @@
     "tsup": "^8.0.0",
     "typescript": "5.9.2",
     "zod": "^4.1.0",
-    "@repo/core": "0.39.0",
+    "@repo/core": "0.40.0",
     "@repo/eslint-config": "0.0.0",
     "@repo/typescript-config": "0.0.0"
   },

package/reference/claude-config/skills/om/SKILL.md

@@ -93,13 +93,13 @@ Auto-invocation is driven by frontmatter `description`, `metadata.pathPatterns`,
 Once invoked, classify the user's input into ONE of these buckets and dispatch the matching
 primitive. When two buckets fit, prefer the higher one (more specific → more general).
 
-| #   | Bucket                         | Trigger                                                                           | Dispatch                                                                        |
-| --- | ------------------------------ | --------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- |
-| 1   | Named knowledge/role/policy id | User names `knowledge.<id>`, `role.<id>`, `policy.<id>` directly                  | `om:cat <id>` for body, `om:describe <id>` for neighborhood                     |
-| 2   | Named system                   | User names a system path (`sales.crm`, `sales.lead-gen`)                          | `om:describe <id>`                                                              |
+| #   | Bucket                         | Trigger                                                                                          | Dispatch                                                                        |
+| --- | ------------------------------ | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------- |
+| 1   | Named knowledge/role/policy id | User names `knowledge.<id>`, `role.<id>`, `policy.<id>` directly                                 | `om:cat <id>` for body, `om:describe <id>` for neighborhood                     |
+| 2   | Named system                   | User names a system path (`sales.crm`, `sales.lead-gen`)                                         | `om:describe <id>`                                                              |
 | 3   | Named ontology id              | Id contains `:object/`, `:action/`, `:event/`, `:catalog/`, `:interface/`, `:link/`, `:surface/` | `om:describe <id>` (or `om:ls /by-ontology/<id> --ids-only` then `om:cat` each) |
-| 4   | Kind keyword                   | "playbooks", "strategies", "all references", "list policies"                      | `om:ls /by-kind/<kind> --ids-only` then `om:cat` each                           |
-| 5   | Free-text discovery            | Anything else ("lead gen", "outreach", "what governs X?")                         | `om:search "<query>"` then drill into top hit with `om:describe`                |
+| 4   | Kind keyword                   | "playbooks", "strategies", "all references", "list policies"                                     | `om:ls /by-kind/<kind> --ids-only` then `om:cat` each                           |
+| 5   | Free-text discovery            | Anything else ("lead gen", "outreach", "what governs X?")                                        | `om:search "<query>"` then drill into top hit with `om:describe`                |
 
 On ambiguous input, default to **bucket 5 (search)** and surface the top hits. Codify and Toggle
 intents are write paths -- see "Write Power" below.
@@ -110,15 +110,15 @@ intents are write paths -- see "Write Power" below.
 
 All commands run with `pnpm exec elevasis-sdk <cmd>` (or the `om:` alias of the legacy `knowledge:` name).
 
-| Command            | Alias                | Purpose                                                                                                                   |
-| ------------------ | -------------------- | ------------------------------------------------------------------------------------------------------------------------- |
-| `om:search <q>`    | `knowledge:search`   | Universal keyword search across all 6 OM surfaces                                                                         |
-| `om:describe <id>` | `knowledge:describe` | Structured neighborhood view; kind auto-detected from id shape                                                            |
-| `om:cat <id>`      | `knowledge:cat`      | Raw MDX body of a knowledge node                                                                                          |
-| `om:ls <path>`     | `knowledge:ls`       | List nodes by mount path (`/by-system/`, `/by-kind/`, `/by-ontology/`, `/by-owner/`, `/graph/<id>/{governs,governed-by}`) |
-| `om:graph <id>`    | `knowledge:graph`    | Show outgoing + incoming graph edges                                                                                      |
-| `om:skills <id>`   | `knowledge:skills`   | Show callable invocations on graph neighbors                                                                              |
-| `om:generate`      | `knowledge:generate` | Regenerate `_generated/nodes.ts` from MDX sources                                                                         |
+| Command            | Alias                | Purpose                                                                                                                                                                                 |
+| ------------------ | -------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `om:search <q>`    | `knowledge:search`   | Universal keyword search across all 6 OM surfaces                                                                                                                                       |
+| `om:describe <id>` | `knowledge:describe` | Structured neighborhood view; kind auto-detected from id shape                                                                                                                          |
+| `om:cat <id>`      | `knowledge:cat`      | Raw MDX body of a knowledge node                                                                                                                                                        |
+| `om:ls <path>`     | `knowledge:ls`       | List by mount path. Enumeration: `/all-systems`, `/all-resources`, `/all-roles`. Scoped: `/by-system/`, `/by-kind/`, `/by-ontology/`, `/by-owner/`, `/graph/<id>/{governs,governed-by}` |
+| `om:graph <id>`    | `knowledge:graph`    | Show outgoing + incoming graph edges                                                                                                                                                    |
+| `om:skills <id>`   | `knowledge:skills`   | Show callable invocations on graph neighbors                                                                                                                                            |
+| `om:generate`      | `knowledge:generate` | Regenerate `_generated/nodes.ts` from MDX sources                                                                                                                                       |
 
 Common flags: `--json`, `--ids-only`, `--limit <n>`, `--kinds <list>`.
 
@@ -148,7 +148,22 @@ pnpm exec elevasis-sdk om:describe sales.crm:object/deal
 pnpm exec elevasis-sdk om:cat knowledge.outreach-playbook
 ```
 
-### Mount-path listings
+### Top-level enumeration (drill-down entry point)
+
+Start here when an agent needs to discover what this tenant's custom OM contains before
+building on it -- list everything in a domain, then narrow with `om:describe` / `om:cat`:
+
+```bash
+pnpm exec elevasis-sdk om:ls /all-systems              # every System (path + label)
+pnpm exec elevasis-sdk om:ls /all-resources            # every resource (id, kind, title)
+pnpm exec elevasis-sdk om:ls /all-roles                # every role (id, title)
+pnpm exec elevasis-sdk om:ls /all-systems --ids-only   # pipe paths into om:describe
+```
+
+These resolve against this tenant's resolved model -- they enumerate the project's own custom
+OM, not the platform's. Use `--json` for the wrapped envelope or `--ids-only` for piping.
+
+### Scoped mount-path listings
 
 ```bash
 pnpm exec elevasis-sdk om:ls /by-system/sales.crm
@@ -193,16 +208,18 @@ current task makes it relevant.
 Use this map whenever the task asks what something is, where it lives, what governs it, or
 what adjacent context may matter:
 
-| Question                           | Start here                                                                                    | Then inspect                                                               |
-| ---------------------------------- | --------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------- |
-| What Systems exist?                | `om:ls /by-kind/system` or `core/config/organization-model.ts`                                | System IDs, parentage, lifecycle, UI metadata, and content                 |
-| What governs a System?             | `om:describe <system-id>` or `om:ls /by-system/<id>`                                          | system entry, governed knowledge, roles, policies, graph `governs` edges   |
-| What resources belong to a System? | the id-keyed `organizationModel.resources` map and `getResourcesForSystem(model, systemPath)` | use `{ includeDescendants: true }` only for parent-scope rollups           |
-| What can a System do?              | system action refs and the actions domain                                                     | `action.resourceId`, invocation metadata, affected entities, policies      |
-| What data does it own?             | entities domain                                                                               | owning System refs, state catalogs, entity links, emitted/projected events |
+| Question                           | Start here                                                                                                                        | Then inspect                                                                                                                         |
+| ---------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
+| What Systems exist?                | `om:ls /all-systems`                                                                                                              | System IDs, parentage, lifecycle, UI metadata, and content                                                                           |
+| What resources exist?              | `om:ls /all-resources`                                                                                                            | resource ids, kinds, owning System refs                                                                                              |
+| What roles exist?                  | `om:ls /all-roles`                                                                                                                | role ids, titles, responsibilities                                                                                                   |
+| What governs a System?             | `om:describe <system-id>` or `om:ls /by-system/<id>`                                                                              | system entry, governed knowledge, roles, policies, graph `governs` edges                                                             |
+| What resources belong to a System? | the id-keyed `organizationModel.resources` map and `getResourcesForSystem(model, systemPath)`                                     | use `{ includeDescendants: true }` only for parent-scope rollups                                                                     |
+| What can a System do?              | system action refs and the actions domain                                                                                         | `action.resourceId`, invocation metadata, affected entities, policies                                                                |
+| What data does it own?             | entities domain                                                                                                                   | owning System refs, state catalogs, entity links, emitted/projected events                                                           |
 | Is a platform API interface ready? | the System's `apiInterface` marker and `node_modules/@elevasis/sdk/reference/scaffold/reference/system-interface-capabilities.md` | matching convention-locked System path, cataloged `readinessProfile`, derived resource ontology bindings, and scoped topology grants |
-| What UI surface exposes it?        | `navigation.sidebar` plus `SystemModule` manifests                                            | route files, surface targets, route-prefix modules, guards                 |
-| What knowledge applies?            | `om:ls /by-system/<id>` plus graph edges                                                      | `om:cat`, `om:graph`, `/graph/<id>/governed-by`                            |
+| What UI surface exposes it?        | `navigation.sidebar` plus `SystemModule` manifests                                                                                | route files, surface targets, route-prefix modules, guards                                                                           |
+| What knowledge applies?            | `om:ls /by-system/<id>` plus graph edges                                                                                          | `om:cat`, `om:graph`, `/graph/<id>/governed-by`                                                                                      |
 
 Do not treat any one read as a complete system snapshot. The OM is a set of related domain maps;
 follow the relationship that matches the work. Prefer structured helpers from

package/reference/claude-config/skills/om/operations/scaffold.md

@@ -91,7 +91,7 @@ Re-run the command without `--dry-run`. The CLI:
 Always run both gates after a scaffold write:
 
 ```bash
-pnpm -C operations check-types   # tsc --noEmit
+pnpm -C operations check-types   # type-check only, no emit
 pnpm -C operations check         # elevasis-sdk resource validator (incl. conformance gate)
 ```
 

package/reference/claude-config/sync-notes/2026-05-28-om-snapshot-sdk-workflow-config.md

@@ -0,0 +1,33 @@
+# OM snapshot stamp + `@elevasis/sdk` workflow-config promotion + `om:ls` enumeration
+
+## Why this note exists
+
+The 2026-05-28 SDK ship train publishes two coordinated package bumps and propagates two template-authored changes:
+
+- **`@elevasis/core` 0.40.0** — adds an optional `snapshotHash` field to the Organization Model schema (deploy-time + runtime OM snapshot-drift detection), a `STALE_OM_SNAPSHOT` validation member, and three new `@elevasis/core/knowledge` enumeration helpers (`listAllSystemsFlat`, `listAllResources`, `listAllRoles`).
+- **`@elevasis/sdk` 1.31.0** — promotes the generic `defineWorkflowConfig(resourceId, descriptors, actionRegistry)` helper out of the private platform package into the published SDK barrel, and adds `om:ls /all-systems | /all-resources | /all-roles` enumeration mounts to the tenant `elevasis-sdk om:ls` CLI.
+
+These change tenant-visible behavior (a new readiness diagnostic, new CLI mounts, and a new recommended deployment-binding pattern), so they cannot be left to silent dependency-baseline drift.
+
+## Applies to
+
+- All tenant SDK consumers depending on `@elevasis/core` and/or `@elevasis/sdk` (`external/nirvana-marketing`, and any project scaffolded from `external/_template`).
+- New scaffolds: pick up the `operations/src/metadata.ts` convention seed and (after the post-publish template authoring lands) the `projectDeploymentSpec`-based `operations/src/index.ts`.
+
+## Required actions
+
+1. **Adopt the bumped baselines.** `core/package.json` → `@elevasis/core` `^0.40.0`; `operations/package.json` → `@elevasis/core` `^0.40.0` and `@elevasis/sdk` `^1.31.0`. (Handled by the package-cascade entries in `_external-sync-prep.json`; verify, do not hand-edit.)
+2. **Redeploy operations after the bump** so the deployment writes a hash-stamped OM snapshot. Until you redeploy, the deployed snapshot carries no `snapshotHash` and the new drift diagnostic stays dormant. Stale-snapshot 503s now name the cause and the fix ("redeploy via `pnpm operations:deploy`") instead of the old opaque "not ready for this API surface".
+3. **New enumeration CLI is available after the `@elevasis/sdk` bump:** `pnpm -C external/<project>/operations exec elevasis-sdk om:ls /all-systems` (also `/all-resources`, `/all-roles`; supports `--json` / `--ids-only`). The tenant `/om` skill documents the drill-down surface.
+4. **Deployment-binding convention (informational for existing tenants; default for new scaffolds):** the template now deploys through `projectDeploymentSpec` with injected descriptor getters and derives per-workflow `config` via the promoted `defineWorkflowConfig`. `operations/src/**` is project-owned, so existing tenants are NOT auto-rewritten; adopt the pattern at your discretion. A typed `operations/src/metadata.ts` stub (triggers / integrations / human checkpoints) is seeded as the home for deployment mechanics.
+
+## Verification
+
+- `pnpm -C external/<project>/operations exec elevasis-sdk om:ls /all-systems` returns systems (not an empty list).
+- After redeploy, the system-interface readiness probe no longer returns a stale-snapshot 503; a deliberate source/deploy mismatch now surfaces `STALE_OM_SNAPSHOT` with an actionable message.
+- `pnpm sync:verify` and `pnpm external:verify-template-family` pass after the sync.
+
+## Not handled by /git-sync
+
+- The **operations redeploy** (action 2) is a deliberate deploy, not a file sync — `/git-sync` will not run it.
+- **Adopting `projectDeploymentSpec` / wiring `metadata.ts`** in an existing tenant's `operations/src/**` (project-owned) is a manual, tenant-authored migration; the sync only seeds it into fresh scaffolds.

package/reference/index.mdx

@@ -31,7 +31,7 @@ You do not need all three packages. A pure automation project needs only `@eleva
 
 ## Packages
 
-### @elevasis/sdk (v1.28.1)
+### @elevasis/sdk (v1.30.2)
 
 The primary developer package. Provides the TypeScript API for defining workflows and agents, the `elevasis-sdk` CLI for validation and deployment, and typed worker adapters for 25 platform and integration tools.
 
@@ -41,7 +41,7 @@ The primary developer package. Provides the TypeScript API for defining workflow
 
 See [@elevasis/sdk](sdk/index.mdx) for the full group overview, getting started guide, CLI reference, adapter catalog, and more.
 
-### @elevasis/core (v0.35.1)
+### @elevasis/core (v0.39.0)
 
 The shared contract layer. Exports Zod schemas and TypeScript types that are shared between the SDK, the UI, and the platform API. Useful when you need the typed contracts (organization model, entities, knowledge, auth) in a package that does not pull in the full SDK runtime.
 
@@ -51,7 +51,7 @@ The shared contract layer. Exports Zod schemas and TypeScript types that are sha
 
 See [@elevasis/core](core/index.mdx) for subpath details, browser/server split, and when to use it.
 
-### @elevasis/ui (v2.39.1)
+### @elevasis/ui (v2.42.0)
 
 The shared React feature-shell. Provides an `ElevasisProvider` and manifest-backed feature modules that a host UI embeds. Many peer dependencies are optional -- pull only what the features you use require.
 
@@ -60,3 +60,7 @@ The shared React feature-shell. Provides an `ElevasisProvider` and manifest-back
 **Peer deps:** React 19, Mantine 8.2.7, TanStack Query, TanStack Router, Zod 4.1, Zustand 5, cytoscape (many optional)
 
 See [@elevasis/ui](ui/index.mdx) for the provider model, feature modules, peer dependency details, and when to use it.
+
+## Authoring Note
+
+These pages have a dual surface. At SDK build time, `packages/sdk/scripts/copy-reference-docs.mjs` copies every `apps/docs/content/docs/sdk/**.mdx` into `packages/sdk/reference/`, which ships inside the npm package (`files: ["reference/"]`). The `external/_template/CLAUDE.md` points tenant-project agents at `node_modules/@elevasis/sdk/reference/` as their primary reference bundle. Drift in these docs does not just affect the public site -- it actively misleads every agent building a tenant project.