@elevasis/sdk 1.45.0 → 1.46.0

package/dist/worker/index.js

@@ -3058,8 +3058,8 @@ function preview(text, n = 120) {
 // ../core/src/platform/utils/token-counter.ts
 var CHARS_PER_TOKEN = 3.5;
 function estimateTokens(text) {
-  const content = typeof text === "string" ? text : JSON.stringify(text);
-  const chars = content.length;
+  const content2 = typeof text === "string" ? text : JSON.stringify(text);
+  const chars = content2.length;
   return Math.ceil(chars / CHARS_PER_TOKEN);
 }
 function truncationCharBudget(maxTokens, noticeLength = 0) {
@@ -3099,7 +3099,7 @@ function buildUntrustedDataPolicy(securityLevel) {
 }
 function buildAgentMessages(systemPrompt, memory, currentInput, securityLevel, conversationHistory = []) {
   const policy = buildUntrustedDataPolicy(securityLevel);
-  const historyMessages = conversationHistory.map(({ role, content }) => ({ role, content }));
+  const historyMessages = conversationHistory.map(({ role, content: content2 }) => ({ role, content: content2 }));
   if (historyMessages.length > 0) {
     historyMessages[historyMessages.length - 1].cacheBreakpoint = true;
   }
@@ -3613,11 +3613,11 @@ function safeStructuralPrefix(raw, cutAt) {
   const base = stripDanglingTail(raw.slice(0, cutPoint), stack[stack.length - 1] === "}");
   return base + [...stack].reverse().join("");
 }
-function truncateContent(content, maxTokens) {
-  const estimated = estimateTokens(content);
-  if (estimated <= maxTokens) return { content };
+function truncateContent(content2, maxTokens) {
+  const estimated = estimateTokens(content2);
+  if (estimated <= maxTokens) return { content: content2 };
   const cutAt = truncationCharBudget(maxTokens, CLOSING_BRACKET_RESERVE);
-  const safeContent = safeStructuralPrefix(content, cutAt);
+  const safeContent = safeStructuralPrefix(content2, cutAt);
   const omittedTokens = estimated - maxTokens;
   return { content: safeContent, truncated: { omittedTokens } };
 }
@@ -3713,9 +3713,9 @@ async function executeToolCall(iterationContext, action) {
     const validatedResult = tool.outputSchema.parse(rawResult);
     let boundedResult = validatedResult;
     if (tool.maxOutputTokens !== void 0) {
-      const { content, truncated } = truncateContent(JSON.stringify(validatedResult), tool.maxOutputTokens);
+      const { content: content2, truncated } = truncateContent(JSON.stringify(validatedResult), tool.maxOutputTokens);
       if (truncated) {
-        boundedResult = content;
+        boundedResult = content2;
       }
     }
     const toolEndTime = Date.now();
@@ -4024,7 +4024,7 @@ async function processMemory(memoryManager, response, logger, iteration) {
   if (!response.memoryOps) return;
   const { memoryOps } = response;
   if (memoryOps.set) {
-    for (const [key, content] of Object.entries(memoryOps.set)) {
+    for (const [key, content2] of Object.entries(memoryOps.set)) {
       if (!validateMemoryKeyOwnership(key, logger, iteration)) {
         continue;
       }
@@ -4032,7 +4032,7 @@ async function processMemory(memoryManager, response, logger, iteration) {
         "memory-set",
         iteration,
         // Auto-stringify non-string values (arrays, objects, etc.)
-        () => memoryManager.set(key, typeof content === "string" ? content : JSON.stringify(content)),
+        () => memoryManager.set(key, typeof content2 === "string" ? content2 : JSON.stringify(content2)),
         () => `Set: ${key}`
       );
     }
@@ -4152,13 +4152,13 @@ var MAX_TOOL_RESULT_TOKENS = 4e3;
 
 // ../core/src/execution/engine/agent/memory/manager.ts
 var ENVELOPE_FULL_RESULT_WINDOW = 3;
-function parseIfJson(content) {
-  const trimmed = content.trim();
-  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return content;
+function parseIfJson(content2) {
+  const trimmed = content2.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return content2;
   try {
-    return JSON.parse(content);
+    return JSON.parse(content2);
   } catch {
-    return content;
+    return content2;
   }
 }
 function isInTurnScope(entry, currentTurn) {
@@ -4221,8 +4221,8 @@ var MemoryManager = class {
    * @param key - Session memory key
    * @param content - String content from agent
    */
-  set(key, content, source = "model") {
-    const entryTokens = estimateTokens(content);
+  set(key, content2, source = "model") {
+    const entryTokens = estimateTokens(content2);
     let truncated;
     if (entryTokens > MAX_SINGLE_ENTRY_TOKENS) {
       const truncateTime = Date.now();
@@ -4234,13 +4234,13 @@ var MemoryManager = class {
         truncateTime,
         0
       );
-      const result = truncateContent(content, MAX_SINGLE_ENTRY_TOKENS);
-      content = result.content;
+      const result = truncateContent(content2, MAX_SINGLE_ENTRY_TOKENS);
+      content2 = result.content;
       truncated = result.truncated;
     }
     this.memory.sessionMemory[key] = {
       type: "context",
-      content,
+      content: content2,
       timestamp: Date.now(),
       turnNumber: null,
       // Session memory entries are not turn-specific
@@ -4250,7 +4250,7 @@ var MemoryManager = class {
       ...truncated && { truncated },
       // Screened once, here, instead of by re-scanning the whole envelope on every iteration this
       // key gets re-sent for — see `MemoryEntry.warnings`.
-      warnings: sanitizeUserInput(content).warnings
+      warnings: sanitizeUserInput(content2).warnings
     };
   }
   /**
@@ -4288,14 +4288,14 @@ var MemoryManager = class {
         iterationNumber: entry.iterationNumber
       });
     }
-    let content = entry.content;
+    let content2 = entry.content;
     let truncated;
     if (entry.type === "tool-result" || entry.type === "error") {
-      const before = content;
-      const result = truncateContent(content, MAX_TOOL_RESULT_TOKENS);
-      content = result.content;
+      const before = content2;
+      const result = truncateContent(content2, MAX_TOOL_RESULT_TOKENS);
+      content2 = result.content;
       truncated = result.truncated;
-      if (content !== before) {
+      if (content2 !== before) {
         const truncateTime = Date.now();
         this.logger?.action(
           "memory-tool-result-truncate",
@@ -4309,12 +4309,12 @@ var MemoryManager = class {
     }
     this.memory.history.push({
       ...entry,
-      content,
+      content: content2,
       timestamp: Date.now(),
       ...truncated && { truncated },
       // Screened once, here, instead of by re-scanning the whole accumulated envelope on every
       // iteration this entry gets re-sent for — see `MemoryEntry.warnings`.
-      warnings: sanitizeUserInput(content).warnings
+      warnings: sanitizeUserInput(content2).warnings
     });
     this.autoCompact();
   }
@@ -6123,28 +6123,42 @@ z.object({
   limit: z.number().int(),
   offset: z.number().int()
 });
-var AcqArtifactOwnerKindSchema = z.enum(["company", "contact", "deal", "list", "list_member"]);
+var AcqArtifactOwnerKindSchema = z.enum(["company", "contact", "deal", "list", "list_member", "organization"]);
 z.object({
   ownerKind: AcqArtifactOwnerKindSchema,
-  ownerId: UuidSchema
+  ownerId: UuidSchema.optional()
 }).strict();
+var PipelineIdSchema = z.string().trim().min(1).max(255);
 z.object({
   ownerKind: AcqArtifactOwnerKindSchema,
-  ownerId: UuidSchema,
+  // Nullable + optional: an org-owned artifact (ownerKind: 'organization') has no
+  // single owning entity row. See the comment on AcqArtifactOwnerKindSchema above.
+  ownerId: UuidSchema.nullable().optional(),
   kind: z.string().trim().min(1).max(255),
   content: z.record(z.string(), z.unknown()),
-  sourceExecutionId: UuidSchema.optional()
+  sourceExecutionId: UuidSchema.optional(),
+  // Nullable + optional: acquisition's own artifacts (audits, proposals, ICP docs) predate the
+  // pipeline concept and have none. `getActiveArtifact` filters on it, so any artifact meant to
+  // be resolvable as "the active document for pipeline X" MUST supply it -- artifacts-platform-tool
+  // .mdx Step 3 defect 1.
+  pipelineId: PipelineIdSchema.nullable().optional()
 }).strict();
 var AcqArtifactResponseSchema = z.object({
   id: z.string(),
   organizationId: z.string(),
   ownerKind: z.string(),
-  ownerId: z.string(),
+  // Nullable as of content-pipeline-foundation D14: an org-owned artifact has no owning entity row.
+  // CreateArtifactRequestSchema already accepted a null ownerId; this response schema not doing so
+  // was Step 3 defect 2 -- an org-owned artifact inserted fine and then failed serialization.
+  ownerId: z.string().nullable(),
   kind: z.string(),
+  pipelineId: z.string().nullable(),
   content: z.record(z.string(), z.unknown()),
   sourceExecutionId: z.string().nullable(),
   createdBy: z.string().nullable(),
   createdAt: z.string(),
+  updatedAt: z.string(),
+  isActive: z.boolean(),
   version: z.number().int()
 });
 z.object({
@@ -6793,6 +6807,25 @@ var list = createAdapter("list", [
   "listPendingContactIds"
 ]);
 
+// src/worker/adapters/artifacts.ts
+var artifacts = createAdapter("artifacts", [
+  "listArtifacts",
+  "createArtifact",
+  "getActive"
+]);
+
+// src/worker/adapters/content.ts
+var content = createAdapter("content", [
+  "createItem",
+  "getItem",
+  "listItems",
+  "updateItem",
+  "createAttempt",
+  "listAttempts",
+  "createDistribution",
+  "updateDistribution"
+]);
+
 // src/worker/adapters/pdf.ts
 var pdf = createAdapter("pdf", ["render", "renderToBuffer"]);
 
@@ -7352,4 +7385,4 @@ if (workerData != null && workerData.kind === "static") {
   })();
 }
 
-export { ListBuilderResultSchema, ListBuilderResultsSchema, PlatformToolError, acqDb, approval, classifyPlatformToolError, createAdapter, createAnymailfinderAdapter, createApifyAdapter, createAttioAdapter, createClickUpAdapter, createDropboxAdapter, createGmailAdapter, createGoogleSheetsAdapter, createInstantlyAdapter, createMillionVerifierAdapter, createResendAdapter, createSignatureApiAdapter, createStripeAdapter, createTombaAdapter, crm, email, executeWorkflow, execution, generateHmacToken, list, listBuilderWorkflow, llm, notifications, pdf, platform, projects, scheduler, startWorker, storage };
+export { ListBuilderResultSchema, ListBuilderResultsSchema, PlatformToolError, acqDb, approval, artifacts, classifyPlatformToolError, content, createAdapter, createAnymailfinderAdapter, createApifyAdapter, createAttioAdapter, createClickUpAdapter, createDropboxAdapter, createGmailAdapter, createGoogleSheetsAdapter, createInstantlyAdapter, createMillionVerifierAdapter, createResendAdapter, createSignatureApiAdapter, createStripeAdapter, createTombaAdapter, crm, email, executeWorkflow, execution, generateHmacToken, list, listBuilderWorkflow, llm, notifications, pdf, platform, projects, scheduler, startWorker, storage };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "1.45.0",
+  "version": "1.46.0",
   "description": "SDK for building Elevasis organization resources",
   "type": "module",
   "bin": {
@@ -55,9 +55,9 @@
     "tsup": "^8.0.0",
     "typescript": "5.9.2",
     "zod": "^4.1.0",
-    "@repo/core": "0.60.0",
-    "@repo/eslint-config": "0.0.0",
-    "@repo/typescript-config": "0.0.0"
+    "@repo/core": "0.61.0",
+    "@repo/typescript-config": "0.0.0",
+    "@repo/eslint-config": "0.0.0"
   },
   "scripts": {
     "lint": "eslint src --max-warnings 0",

package/reference/_navigation.md

@@ -4,7 +4,7 @@
 
 Auto-generated from the package reference manifests.
 
-Package entries indexed: 61.
+Package entries indexed: 64.
 
 ## @elevasis/core / Auth
 
@@ -12,6 +12,12 @@ Package entries indexed: 61.
 | --- | --- | --- | --- |
 | Auth | `packages/core/src/README.md` | Published browser-safe auth contracts, AccessKeys, and Access Model primitives. | (not specified) |
 
+## @elevasis/core / Content
+
+| Resource | Location | Description | When to Load |
+| --- | --- | --- | --- |
+| Content | `packages/core/src/content/README.md` | Published content pipeline API schemas: content items, the payload envelope, a content-keyed processing state, attempts, review, and distributions, plus platform-content typed interfaces. | (not specified) |
+
 ## @elevasis/core / Core
 
 | Resource | Location | Description | When to Load |
@@ -35,6 +41,7 @@ Package entries indexed: 61.
 | Resource | Location | Description | When to Load |
 | --- | --- | --- | --- |
 | Organization Model | `packages/core/src/organization-model/README.md` | Published organization-model schema, defaults, resolver, and types. | (not specified) |
+| System Interface Readiness | `packages/core/src/organization-model/readiness/README.md` | Generic System Interface readiness engine, plus registerBuiltInReadinessProfile — the extension point for registering a readiness profile that carries real structural validation. | (not specified) |
 
 ## @elevasis/core / Testing
 
@@ -102,6 +109,7 @@ Package entries indexed: 61.
 | Features Notes | `packages/ui/src/features/README.md` | Published Notes panel view and supporting note components for shared right-panel integrations. | (not specified) |
 | Features Right Panel Host | `packages/ui/src/features/README.md` | Published right-panel host provider, layer, trigger, keyboard shortcut, store, and view contract. | (not specified) |
 | Features Public Agent Chat | `packages/ui/src/features/README.md` | Published public agent chat surface for downstream shells. | (not specified) |
+| Features Content | `packages/ui/src/features/README.md` | Published, data-free content review card surface (ContentReviewCard and its sub-components) for downstream shells. | (not specified) |
 
 ## @elevasis/ui / Foundation
 
@@ -186,6 +194,7 @@ Universal scaffold documentation for all SDK projects. Source locations are co-l
 | Gate by System or Admin | `scaffold/recipes/gate-by-feature-or-admin.md` | Decision table and recipes for gating routes, sidebar entries, and UI elements with AccessGuard and the unified Access Model. |
 | Build and Extend CRM | `scaffold/recipes/extend-crm.md` | Map the CRM platform primitives available to SDK projects: shared UI pages, sidebar composition, data hooks, action definitions, workflow adapters, System Interfaces, and org-model extension boundaries. |
 | Build and Extend Lead Gen | `scaffold/recipes/extend-lead-gen.md` | Map the lead-gen platform primitives available to SDK projects: shared UI pages, provider-injected Organization Model config, data hooks, list/member state, artifacts, workflow adapters, System Interfaces, and tenant-owned extension boundaries. |
+| Build and Extend Content | `scaffold/recipes/extend-content.md` | Map the content platform primitives available to SDK projects: pipeline and step catalogs, shared review/pipeline/distribution pages, data hooks, the content workflow adapter, artifacts as rules documents, and org-model extension boundaries. |
 | Customize CRM Actions | `scaffold/recipes/customize-crm-actions.md` | Add, hide, or replace CRM deal action buttons in a template-derived project, and override default platform action workflows with project-owned implementations. |
 | Customize Knowledge Browser | `scaffold/recipes/customize-knowledge-browser.md` | Author knowledge nodes and customize the Knowledge Browser in a template-derived project -- from zero-config authoring through sidebar composition, custom dispatchers, and direct query access. |
 | Query the Knowledge Graph | `scaffold/recipes/query-the-knowledge-graph.md` | Use the `knowledge:*` CLI subcommands on `elevasis-sdk` (external projects) and `elevasis` (monorepo) to browse, inspect, and traverse the OrganizationModel knowledge graph via six mount axes. |
@@ -287,7 +296,7 @@ Docs-site pages indexed: 38.
 | Human-in-the-Loop (HITL) Workflows | `sdk/human-in-the-loop.mdx` | How a workflow step opens an approval task, how it reaches the command queue, and how selecting an action resumes work -- the story that connects the approval adapter, checkpoint metadata, and the queue CLI. |
 | Elevasis SDK | `sdk/index.mdx` | Build and deploy workflows, agents, and resources with the Elevasis SDK |
 | Integration Adapters | `sdk/platform-tools/adapters-integration.mdx` | Auto-generated table of all 13 integration (credential-bound) adapters exported from @elevasis/sdk/worker, derived from static analysis of the adapter source files. |
-| Platform Adapters | `sdk/platform-tools/adapters-platform.mdx` | Auto-generated table of all 12 platform (singleton, no credential) adapters exported from @elevasis/sdk/worker, derived from static analysis of the adapter source files. |
+| Platform Adapters | `sdk/platform-tools/adapters-platform.mdx` | Auto-generated table of all 14 platform (singleton, no credential) adapters exported from @elevasis/sdk/worker, derived from static analysis of the adapter source files. |
 | Platform Tools | `sdk/platform-tools/index.mdx` | Access 25 adapters (13 integration + 12 platform) from your SDK workflows -- typed adapters, credential security model, and working code examples |
 | Adapter Type Safety | `sdk/platform-tools/type-safety.mdx` | SDK worker adapter type safety patterns - required fields, discriminated unions, and intentionally loose types |
 | The Deployment Spec Pattern | `sdk/project-deployment-spec.mdx` | How projectDeploymentSpec and defineWorkflowConfig assemble the DeploymentSpec a scaffolded project actually ships, using operations/src/index.ts as the reference. |

package/reference/_reference-manifest.json

@@ -15,6 +15,20 @@
       "referencePath": "packages/core/src/README.md",
       "publishedExportPath": "./dist/auth/index.js"
     },
+    {
+      "packageName": "@elevasis/core",
+      "packageDir": "packages/core",
+      "subpath": "./content",
+      "kind": "subpath",
+      "title": "Content",
+      "description": "Published content pipeline API schemas: content items, the payload envelope, a content-keyed processing state, attempts, review, and distributions, plus platform-content typed interfaces.",
+      "group": "Content",
+      "order": 1,
+      "sourcePath": "packages/core/src/content/index.ts",
+      "docPath": "packages/core/src/content/README.md",
+      "referencePath": "packages/core/src/content/README.md",
+      "publishedExportPath": "./dist/content/index.js"
+    },
     {
       "packageName": "@elevasis/core",
       "packageDir": "packages/core",
@@ -71,6 +85,20 @@
       "referencePath": "packages/core/src/organization-model/README.md",
       "publishedExportPath": "./dist/organization-model/index.js"
     },
+    {
+      "packageName": "@elevasis/core",
+      "packageDir": "packages/core",
+      "subpath": "./organization-model/readiness",
+      "kind": "subpath",
+      "title": "System Interface Readiness",
+      "description": "Generic System Interface readiness engine, plus registerBuiltInReadinessProfile — the extension point for registering a readiness profile that carries real structural validation.",
+      "group": "Organization Model",
+      "order": 2,
+      "sourcePath": "packages/core/src/organization-model/readiness/index.ts",
+      "docPath": "packages/core/src/organization-model/readiness/README.md",
+      "referencePath": "packages/core/src/organization-model/readiness/README.md",
+      "publishedExportPath": "./dist/organization-model/readiness/index.js"
+    },
     {
       "packageName": "@elevasis/core",
       "packageDir": "packages/core",
@@ -449,6 +477,20 @@
       "referencePath": "packages/ui/src/features/README.md",
       "publishedExportPath": "./dist/features/public-agent-chat/index.js"
     },
+    {
+      "packageName": "@elevasis/ui",
+      "packageDir": "packages/ui",
+      "subpath": "./features/content",
+      "kind": "subpath",
+      "title": "Features Content",
+      "description": "Published, data-free content review card surface (ContentReviewCard and its sub-components) for downstream shells.",
+      "group": "Features",
+      "order": 16,
+      "sourcePath": "packages/ui/src/features/content/index.ts",
+      "docPath": "packages/ui/src/features/README.md",
+      "referencePath": "packages/ui/src/features/README.md",
+      "publishedExportPath": "./dist/features/content/index.js"
+    },
     {
       "packageName": "@elevasis/ui",
       "packageDir": "packages/ui",

package/reference/core/exports.mdx

@@ -11,6 +11,8 @@ description: "Auto-generated catalog of all published @elevasis/core subpath exp
 | `@elevasis/core` | Core | Core | Published core wrapper for the curated contract surface. |
 | `@elevasis/core/auth` | Auth | Auth | Published browser-safe auth contracts, AccessKeys, and Access Model primitives. |
 | `@elevasis/core/organization-model` | Organization Model | Organization Model | Published organization-model schema, defaults, resolver, and types. |
+| `@elevasis/core/organization-model/readiness` | System Interface Readiness | Organization Model | Generic System Interface readiness engine, plus registerBuiltInReadinessProfile — the extension point for registering a readiness profile that carries real structural validation. |
 | `@elevasis/core/knowledge` | Knowledge | Knowledge | Published knowledge query layer: bySystem/byKind/byOwner/governs/governedBy queries, parsePath, and output formatters. |
+| `@elevasis/core/content` | Content | Content | Published content pipeline API schemas: content items, the payload envelope, a content-keyed processing state, attempts, review, and distributions, plus platform-content typed interfaces. |
 | `@elevasis/core/entities` | Entities | Entities | Published base entity contracts (Project, Milestone, Task, Deal, Company, Contact) generic over a metadata extension slot. |
 | `@elevasis/core/test-utils` | Test Utilities | Testing | Published test fixtures, mocks, and shared helpers for downstream automated tests. |

package/reference/packages/core/src/business/README.md

@@ -47,6 +47,9 @@ export type Deal = BaseDeal
 
 ## Recipe
 
-The full pattern is documented in the SDK scaffold bundle: `operations/node_modules/@elevasis/sdk/reference/scaffold/recipes/extend-a-base-entity.md`.
+The full pattern is documented in the SDK scaffold bundle. Internally, read the workspace source at
+`packages/sdk/docs/scaffold/recipes/extend-a-base-entity.md`; a tenant reads the published mirror at
+`operations/node_modules/@elevasis/sdk/reference/scaffold/recipes/extend-a-base-entity.md`, which does
+not resolve from the monorepo root.
 
 The canonical template demo lives at `external/_template/core/types/entities.ts`.

package/reference/packages/core/src/content/README.md

@@ -0,0 +1,19 @@
+# @elevasis/core/content
+
+Content pipeline API schemas and platform-content typed interfaces. Browser-safe (no Node APIs).
+
+## Surface
+
+| Export                                                                                                                                         | Purpose                                                                                                                                                                 |
+| ---------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `ContentItemResponseSchema`, `CreateContentItemRequestSchema`, `UpdateContentItemRequestSchema`                                                | `content_items` transport shape. `processingState` is intentionally absent from create/update — factory-write-only.                                                     |
+| `ContentProcessingStateSchema`                                                                                                                 | `{ stepKey: { status, data? } }`, keyed by `ContentStepKeySchema` — a content-specific key, not lead-gen's `LeadGenStageKeySchema`.                                     |
+| `ContentPayloadEnvelopeSchema`                                                                                                                 | The producer's immutable emission stored in `payload`. Never edited — `body` is the human's canonical text.                                                             |
+| `ReviewContentItemRequestSchema`                                                                                                               | Approve, or reject with a required `rejectReason`. Writes `reviewed_at` / `reviewed_by`.                                                                                |
+| `ContentItemAttemptResponseSchema`, `CreateContentItemAttemptRequestSchema`                                                                    | `content_item_attempts` transport shape. No `attemptNumber` field on create — the API service assigns it inside the write. `stepKey` is producer-supplied and nullable. |
+| `ContentDistributionResponseSchema`, `CreateContentDistributionRequestSchema`, `UpdateContentDistributionRequestSchema`                        | `content_distributions` transport shape, including the manual-publish fields (`publishMethod`, `platformPostId`, `platformUrl`).                                        |
+| `PlatformContent`, `YouTubeContent`, `LinkedInContent`, `InstagramContent`, `XContent`, `AnyPlatformContent`, `PlatformContentMap`, `Platform` | Typed interfaces for platform-specific content stored in `content_distributions.platform_content`.                                                                      |
+
+## Step catalog reconciliation
+
+`ContentStepKeySchema` is free text today — the content System's step catalog (`content:catalog/<pipeline>-steps`) is authored separately in `packages/elevasis/core/config/organization-model`. Closed-catalog membership is enforced by the caller/API layer via model-injected validators once that catalog lands, mirroring how `LeadGenStageKeySchema` and `CrmStageKeySchema` are validated today.