@elevasis/ui 2.36.0 → 2.37.0

package/dist/hooks/index.d.ts

@@ -1,640 +1,159 @@
-import * as _tanstack_react_query from '@tanstack/react-query';
 import { z } from 'zod';
+import * as _tanstack_react_query from '@tanstack/react-query';
 import { EventSourceMessage } from '@microsoft/fetch-event-source';
 import * as react from 'react';
 import * as zustand_middleware from 'zustand/middleware';
 import * as zustand from 'zustand';
 
 /**
- * Error categories for observability grouping and classification.
- * Used to categorize errors in the execution_errors table metadata.
+ * Canonical permission catalog.
+ *
+ * Source of truth for the permission keys used by:
+ *   - RLS policies in Supabase (via has_org_permission(org_id, key))
+ *   - API middleware (via requireOrganizationPermission(key))
+ *   - UI access checks (via useAccess() permission-backed AccessKeys)
+ *
+ * The DB table `org_rol_permissions` mirrors this constant. There is no
+ * runtime reconciler; parity is enforced two ways:
+ *   1. Each migration that adds/removes/modifies a permission must INSERT
+ *      (or UPDATE / DELETE) the corresponding `org_rol_permissions` row in
+ *      the same transaction.
+ *   2. `apps/api/src/auth/multi-tenancy/__tests__/permissions-catalog-sync.integration.test.ts`
+ *      asserts the TS catalog and the DB rows agree; CI fails on drift.
+ *
+ * Adding a permission:
+ *   1. Add an entry below.
+ *   2. Add a row to the migration (INSERT INTO org_rol_permissions ...) in
+ *      the same transaction as any policies/grants that reference the key.
+ *   3. Reference it in RLS / middleware as needed.
+ *   4. Optionally grant it to one or more system roles in org_rol_grants.
+ *
+ * Removing a permission: follow the deletion runbook — never just delete
+ * the entry. Existing role grants and policy references must be cleared first.
  */
-type ExecutionErrorCategory = 'llm' | 'tool' | 'workflow' | 'agent' | 'validation' | 'system';
-
+declare const PERMISSIONS: {
+    readonly ORG_READ: "org.read";
+    readonly ORG_MANAGE: "org.manage";
+    readonly ORG_DELETE: "org.delete";
+    readonly MEMBERS_MANAGE: "members.manage";
+    readonly ROLES_MANAGE: "roles.manage";
+    readonly SECRETS_MANAGE: "secrets.manage";
+    readonly OPERATIONS_READ: "operations.read";
+    readonly OPERATIONS_MANAGE: "operations.manage";
+    readonly ACQUISITION_MANAGE: "acquisition.manage";
+    readonly PROJECTS_MANAGE: "projects.manage";
+    readonly CLIENTS_MANAGE: "clients.manage";
+};
+type PermissionKey = (typeof PERMISSIONS)[keyof typeof PERMISSIONS];
 /**
- * Workflow-specific logging types and utilities
+ * Static metadata for each permission. Mirrored into org_rol_permissions by
+ * a migration `INSERT` in the same transaction as any change to this catalog.
+ * is_org_grantable=false means the permission is reserved to system roles
+ * only — custom roles cannot include it (privilege-escalation guard).
  */
-
-interface WorkflowExecutionContext {
-    type: 'workflow';
-    contextType: 'workflow-execution';
-    executionId: string;
-    workflowId: string;
-    workflowName?: string;
-    organizationId: string;
-    executionPath?: string[];
-}
-interface WorkflowFailureContext {
-    type: 'workflow';
-    contextType: 'workflow-failure';
-    executionId: string;
-    workflowId: string;
-    error: string;
-}
-interface StepStartedContext {
-    type: 'workflow';
-    contextType: 'step-started';
-    stepId: string;
-    stepStatus: 'started';
-    input: unknown;
-    startTime: number;
-}
-interface StepCompletedContext {
-    type: 'workflow';
-    contextType: 'step-completed';
-    stepId: string;
-    stepStatus: 'completed';
-    output: unknown;
-    duration: number;
-    isTerminal: boolean;
-    startTime: number;
-    endTime: number;
-}
-interface StepFailedContext {
-    type: 'workflow';
-    contextType: 'step-failed';
-    stepId: string;
-    stepStatus: 'failed';
-    error: string;
-    duration: number;
-    startTime: number;
-    endTime: number;
-}
-interface ConditionalRouteContext {
-    type: 'workflow';
-    contextType: 'conditional-route';
-    stepId: string;
-    target: string;
-    error?: string;
-}
-interface ExecutionPathContext {
-    type: 'workflow';
-    contextType: 'execution-path';
-    executionPath: string[];
+interface PermissionDescriptor {
+    key: PermissionKey;
+    description: string;
+    isOrgGrantable: boolean;
 }
-type WorkflowLogContext = WorkflowExecutionContext | WorkflowFailureContext | StepStartedContext | StepCompletedContext | StepFailedContext | ConditionalRouteContext | ExecutionPathContext;
 
 /**
- * Agent-specific logging types
- * Simplified 2-event model: lifecycle, iteration
+ * Memberships Domain - Zod Validation Schemas
  *
- * Design Philosophy:
- * - LIFECYCLE EVENTS: Structural checkpoints (initialization, iteration, completion)
- * - ITERATION EVENTS: Execution activities (reasoning, actions during iterations)
+ * Validation schemas for membership management endpoints.
+ * Includes request bodies, query params, and path params.
+ *
+ * Security:
+ * - All schemas use .strict() to prevent mass assignment attacks
+ * - UUID validation prevents invalid references
+ * - Role enum validation prevents privilege escalation
+ * - organizationId never accepted in body (from JWT when needed)
  */
 
 /**
- * Agent lifecycle stages
- * Universal checkpoints that apply to all agent executions
- */
-type AgentLifecycle = 'initialization' | 'iteration' | 'completion';
-/**
- * Iteration event types
- * Activities that occur during agent iterations
+ * Membership status validation
+ * Note: Database constraint only allows 'active' | 'inactive'
  */
-type IterationEventType = 'reasoning' | 'action' | 'tool-call';
+declare const MembershipStatusSchema: z.ZodEnum<{
+    active: "active";
+    inactive: "inactive";
+}>;
+type MembershipStatus = z.infer<typeof MembershipStatusSchema>;
+
 /**
- * Base fields shared by all lifecycle events
+ * Organization Membership types based on WorkOS API
  */
-interface AgentLifecycleEventBase {
-    type: 'agent';
-    agentId: string;
-    lifecycle: AgentLifecycle;
-    sessionId?: string;
+interface OrganizationMembership {
+    object: 'organization_membership';
+    id: string;
+    userId: string;
+    organizationId: string;
+    role: {
+        slug: string;
+    };
+    status: 'active' | 'inactive';
+    createdAt: string;
+    updatedAt: string;
 }
 /**
- * Lifecycle started event - emitted when a phase begins
- * REQUIRED: startTime (phase has started, no end yet)
+ * Request interfaces for membership operations
  */
-interface AgentLifecycleStartedEvent extends AgentLifecycleEventBase {
-    stage: 'started';
-    startTime: number;
-    iteration?: number;
+interface CreateMembershipRequest {
+    userId: string;
+    organizationId: string;
+    roleSlug?: string;
 }
-/**
- * Lifecycle completed event - emitted when a phase succeeds
- * REQUIRED: startTime, endTime, duration (phase has finished successfully)
- */
-interface AgentLifecycleCompletedEvent extends AgentLifecycleEventBase {
-    stage: 'completed';
-    startTime: number;
-    endTime: number;
-    duration: number;
-    iteration?: number;
-    attempts?: number;
-    memorySize?: {
-        sessionMemoryKeys: number;
-        historyEntries: number;
-    };
+interface UpdateMembershipRequest {
+    roleSlug: string;
 }
-/**
- * Lifecycle failed event - emitted when a phase fails
- * REQUIRED: startTime, endTime, duration, error (phase has finished with error)
- */
-interface AgentLifecycleFailedEvent extends AgentLifecycleEventBase {
-    stage: 'failed';
-    startTime: number;
-    endTime: number;
-    duration: number;
-    error: string;
-    iteration?: number;
+interface ListMembershipsParams {
+    userId?: string;
+    organizationId?: string;
+    statuses?: MembershipStatus[];
+    limit?: number;
+    before?: string;
+    after?: string;
+    order?: 'asc' | 'desc';
 }
 /**
- * Union type for all lifecycle events
- * Discriminated by 'stage' field for type narrowing
- */
-type AgentLifecycleEvent = AgentLifecycleStartedEvent | AgentLifecycleCompletedEvent | AgentLifecycleFailedEvent;
-/**
- * Placeholder data for MVP
- * Will be typed per actionType in future
+ * Response interfaces
  */
-interface ActionPlaceholderData {
-    message: string;
+interface ListMembershipsResponse {
+    data: OrganizationMembership[];
+    listMetadata?: {
+        before?: string | null;
+        after?: string | null;
+    };
 }
 /**
- * Iteration event - captures activities during agent iterations
- * Consolidates reasoning (LLM thought process) and actions (tool use, memory ops, etc.)
+ * Extended membership with user and organization details for UI
  */
-interface AgentIterationEvent {
-    type: 'agent';
-    agentId: string;
-    lifecycle: 'iteration';
-    eventType: IterationEventType;
-    iteration: number;
-    sessionId?: string;
-    startTime: number;
-    endTime: number;
-    duration: number;
-    output?: string;
-    actionType?: string;
-    data?: ActionPlaceholderData;
+interface MembershipWithDetails extends OrganizationMembership {
+    user?: {
+        id: string;
+        email: string;
+        firstName?: string;
+        lastName?: string;
+        profilePictureUrl?: string;
+    };
+    organization?: {
+        id: string;
+        name: string;
+        workos_org_id: string;
+        primaryDomain?: string;
+        is_test?: boolean;
+        status?: string;
+        metadata?: Record<string, unknown>;
+        config?: Record<string, unknown>;
+    };
 }
-/**
- * Tool call event - captures individual tool executions during iterations
- * Provides granular timing for each tool invocation
- */
-interface AgentToolCallEvent {
-    type: 'agent';
-    agentId: string;
-    lifecycle: 'iteration';
-    eventType: 'tool-call';
-    iteration: number;
-    sessionId?: string;
-    toolName: string;
-    startTime: number;
-    endTime: number;
-    duration: number;
-    success: boolean;
-    error?: string;
-    input?: Record<string, unknown>;
-    output?: unknown;
-}
-/**
- * Union type for all agent log contexts
- * 3 event types total (lifecycle, iteration, tool-call)
- */
-type AgentLogContext = AgentLifecycleEvent | AgentIterationEvent | AgentToolCallEvent;
-
-/**
- * Base execution logger for Execution Engine
- */
-type ExecutionLogLevel = 'debug' | 'info' | 'warn' | 'error';
-
-type LogContext = WorkflowLogContext | AgentLogContext;
-interface ExecutionLogMessage {
-    level: ExecutionLogLevel;
-    message: string;
-    timestamp: number;
-    context?: LogContext;
-}
-
-/**
- * Serialized Registry Types
- *
- * Pre-computed JSON-safe types for API responses and Command View.
- * Serialization happens once at API startup, enabling instant response times.
- */
 
-/**
- * Serialized agent definition (JSON-safe)
- * Result of serializeDefinition(AgentDefinition)
- */
-interface SerializedAgentDefinition {
-    config: {
-        resourceId: string;
-        name: string;
-        description: string;
-        version: string;
-        type: 'agent';
-        kind: 'orchestrator' | 'specialist' | 'utility' | 'system';
-        status: 'dev' | 'prod';
-        links?: ResourceLink[];
-        category?: ResourceCategory;
-        /** Whether this resource is archived and should be excluded from registration and deployment */
-        archived?: boolean;
-        systemPrompt: string;
-        constraints?: {
-            maxIterations?: number;
-            timeout?: number;
-            maxSessionMemoryKeys?: number;
-            maxMemoryTokens?: number;
-        };
-        sessionCapable?: boolean;
-        memoryPreferences?: string;
-    };
-    modelConfig: {
-        provider: string;
-        model: string;
-        apiKey: string;
-        temperature: number;
-        maxOutputTokens: number;
-        topP?: number;
-        modelOptions?: Record<string, unknown>;
-    };
-    contract: {
-        inputSchema: object;
-        outputSchema?: object;
-    };
-    tools: Array<{
-        name: string;
-        description: string;
-        inputSchema?: object;
-        outputSchema?: object;
-    }>;
-    knowledgeMap?: {
-        nodeCount: number;
-        nodes: Array<{
-            id: string;
-            description: string;
-            loaded: boolean;
-            hasPrompt: boolean;
-        }>;
-    };
-    metricsConfig?: object;
-}
-/**
- * Serialized workflow definition (JSON-safe)
- * Result of serializeDefinition(WorkflowDefinition)
- */
-interface SerializedWorkflowDefinition {
-    config: {
-        resourceId: string;
-        name: string;
-        description: string;
-        version: string;
-        type: 'workflow';
-        status: 'dev' | 'prod';
-        links?: ResourceLink[];
-        category?: ResourceCategory;
-        /** Whether this resource is archived and should be excluded from registration and deployment */
-        archived?: boolean;
-    };
-    entryPoint: string;
-    steps: Array<{
-        id: string;
-        name: string;
-        description: string;
-        inputSchema?: object;
-        outputSchema?: object;
-        next: {
-            type: 'linear' | 'conditional';
-            target?: string;
-            routes?: Array<{
-                target: string;
-            }>;
-            default?: string;
-        } | null;
-    }>;
-    contract: {
-        inputSchema: object;
-        outputSchema?: object;
-    };
-    metricsConfig?: object;
-}
-
-declare const ResourceGovernanceStatusSchema: z.ZodEnum<{
-    active: "active";
-    deprecated: "deprecated";
-    archived: "archived";
-}>;
-declare const ResourceEntrySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    id: z.ZodString;
-    order: z.ZodDefault<z.ZodNumber>;
-    systemPath: z.ZodString;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    ownerRoleId: z.ZodOptional<z.ZodString>;
-    status: z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-    }>;
-    ontology: z.ZodOptional<z.ZodObject<{
-        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        primaryAction: z.ZodOptional<z.ZodString>;
-        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        contract: z.ZodOptional<z.ZodObject<{
-            input: z.ZodOptional<z.ZodString>;
-            output: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        role: z.ZodEnum<{
-            entrypoint: "entrypoint";
-            handler: "handler";
-            schema: "schema";
-            test: "test";
-            docs: "docs";
-            config: "config";
-        }>;
-        symbol: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    kind: z.ZodLiteral<"workflow">;
-    emits: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        eventKey: z.ZodString;
-        label: z.ZodString;
-        payloadSchema: z.ZodOptional<z.ZodString>;
-        lifecycle: z.ZodOptional<z.ZodEnum<{
-            active: "active";
-            deprecated: "deprecated";
-            draft: "draft";
-            beta: "beta";
-            archived: "archived";
-        }>>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    order: z.ZodDefault<z.ZodNumber>;
-    systemPath: z.ZodString;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    ownerRoleId: z.ZodOptional<z.ZodString>;
-    status: z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-    }>;
-    ontology: z.ZodOptional<z.ZodObject<{
-        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        primaryAction: z.ZodOptional<z.ZodString>;
-        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        contract: z.ZodOptional<z.ZodObject<{
-            input: z.ZodOptional<z.ZodString>;
-            output: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        role: z.ZodEnum<{
-            entrypoint: "entrypoint";
-            handler: "handler";
-            schema: "schema";
-            test: "test";
-            docs: "docs";
-            config: "config";
-        }>;
-        symbol: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    kind: z.ZodLiteral<"agent">;
-    agentKind: z.ZodEnum<{
-        platform: "platform";
-        orchestrator: "orchestrator";
-        specialist: "specialist";
-        utility: "utility";
-    }>;
-    actsAsRoleId: z.ZodOptional<z.ZodString>;
-    sessionCapable: z.ZodBoolean;
-    invocations: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"slash-command">;
-        command: z.ZodString;
-        toolFactory: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        kind: z.ZodLiteral<"mcp-tool">;
-        server: z.ZodString;
-        name: z.ZodString;
-    }, z.core.$strip>, z.ZodObject<{
-        kind: z.ZodLiteral<"api-endpoint">;
-        method: z.ZodEnum<{
-            GET: "GET";
-            POST: "POST";
-            PATCH: "PATCH";
-            DELETE: "DELETE";
-        }>;
-        path: z.ZodString;
-        requestSchema: z.ZodOptional<z.ZodString>;
-        responseSchema: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        kind: z.ZodLiteral<"script-execution">;
-        resourceId: z.ZodString;
-    }, z.core.$strip>], "kind">>>;
-    emits: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        eventKey: z.ZodString;
-        label: z.ZodString;
-        payloadSchema: z.ZodOptional<z.ZodString>;
-        lifecycle: z.ZodOptional<z.ZodEnum<{
-            active: "active";
-            deprecated: "deprecated";
-            draft: "draft";
-            beta: "beta";
-            archived: "archived";
-        }>>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    order: z.ZodDefault<z.ZodNumber>;
-    systemPath: z.ZodString;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    ownerRoleId: z.ZodOptional<z.ZodString>;
-    status: z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-    }>;
-    ontology: z.ZodOptional<z.ZodObject<{
-        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        primaryAction: z.ZodOptional<z.ZodString>;
-        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        contract: z.ZodOptional<z.ZodObject<{
-            input: z.ZodOptional<z.ZodString>;
-            output: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        role: z.ZodEnum<{
-            entrypoint: "entrypoint";
-            handler: "handler";
-            schema: "schema";
-            test: "test";
-            docs: "docs";
-            config: "config";
-        }>;
-        symbol: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    kind: z.ZodLiteral<"integration">;
-    provider: z.ZodString;
-}, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    order: z.ZodDefault<z.ZodNumber>;
-    systemPath: z.ZodString;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    ownerRoleId: z.ZodOptional<z.ZodString>;
-    status: z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-    }>;
-    ontology: z.ZodOptional<z.ZodObject<{
-        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        primaryAction: z.ZodOptional<z.ZodString>;
-        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        contract: z.ZodOptional<z.ZodObject<{
-            input: z.ZodOptional<z.ZodString>;
-            output: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        role: z.ZodEnum<{
-            entrypoint: "entrypoint";
-            handler: "handler";
-            schema: "schema";
-            test: "test";
-            docs: "docs";
-            config: "config";
-        }>;
-        symbol: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    kind: z.ZodLiteral<"script">;
-    language: z.ZodEnum<{
-        shell: "shell";
-        sql: "sql";
-        typescript: "typescript";
-        python: "python";
-    }>;
-    source: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-        file: z.ZodString;
-    }, z.core.$strip>]>;
-}, z.core.$strip>], "kind">;
-type ResourceGovernanceStatus = z.infer<typeof ResourceGovernanceStatusSchema>;
-type ResourceEntry = z.infer<typeof ResourceEntrySchema>;
-
-/**
- * Shared form field types for dynamic form generation
- * Used by: Command Queue, Execution Runner UI, future form-based features
- */
-/**
- * Supported form field types for action payloads
- * Maps to Mantine form components
- */
-type FormFieldType = 'text' | 'textarea' | 'number' | 'select' | 'checkbox' | 'radio' | 'richtext';
-/**
- * Form field definition
- */
-interface FormField {
-    /** Field key in payload object */
-    name: string;
-    /** Field label for UI */
-    label: string;
-    /** Field type (determines UI component) */
-    type: FormFieldType;
-    /** Default value */
-    defaultValue?: unknown;
-    /** Required field */
-    required?: boolean;
-    /** Placeholder text */
-    placeholder?: string;
-    /** Help text */
-    description?: string;
-    /** Options for select/radio */
-    options?: Array<{
-        label: string;
-        value: string | number;
-    }>;
-    /** Min/max for number */
-    min?: number;
-    max?: number;
-    /** Path to context value for pre-filling (dot notation, e.g., 'proposal.summary') */
-    defaultValueFromContext?: string;
-}
-/**
- * Form schema for action payload collection
- */
-interface FormSchema {
-    /** Form title */
-    title?: string;
-    /** Form description */
-    description?: string;
-    /** Form fields */
-    fields: FormField[];
-}
-
-/**
- * Memory type definitions
- * Types for agent memory management with semantic entry types
- */
-/**
- * Semantic memory entry types
- * Use-case agnostic types that describe the purpose of each entry
- * Memory types mirror action types for clarity and filtering
- */
-type MemoryEntryType = 'context' | 'input' | 'reasoning' | 'tool-result' | 'delegation-result' | 'error';
-/**
- * Memory entry - represents a single entry in agent memory
- * Stored in agent memory, translated by adapters to vendor-specific formats
- */
-interface MemoryEntry {
-    type: MemoryEntryType;
-    content: string;
-    timestamp: number;
-    turnNumber: number | null;
-    iterationNumber: number | null;
-}
-/**
- * Agent memory - Self-orchestrated memory with session + working storage
- * Agent has full control over what persists, framework handles auto-compaction
- */
-interface AgentMemory {
-    /**
-     * Session memory - Persists for session/conversation duration
-     * Never auto-trimmed by framework
-     * Agent-managed key-value store for critical information
-     * Agent provides strings, framework wraps in MemoryEntry
-     */
-    sessionMemory: Record<string, MemoryEntry>;
-    /**
-     * Working memory - Execution history
-     * Automatically compacted by framework when needed
-     * Agent doesn't control compaction
-     */
-    history: MemoryEntry[];
-}
-
-type Json = string | number | boolean | null | {
-    [key: string]: Json | undefined;
-} | Json[];
-type Database = {
-    __InternalSupabase: {
-        PostgrestVersion: "12.2.3 (519615d)";
+type Json = string | number | boolean | null | {
+    [key: string]: Json | undefined;
+} | Json[];
+type Database = {
+    __InternalSupabase: {
+        PostgrestVersion: "12.2.3 (519615d)";
     };
     public: {
         Tables: {
@@ -3610,6 +3129,12 @@ type Database = {
                 Args: never;
                 Returns: boolean;
             };
+            current_user_shares_org_with: {
+                Args: {
+                    other_user_id: string;
+                };
+                Returns: boolean;
+            };
             current_user_supabase_id: {
                 Args: never;
                 Returns: string;
@@ -3649,6 +3174,20 @@ type Database = {
                 Args: never;
                 Returns: string;
             };
+            has_org_access: {
+                Args: {
+                    action?: string;
+                    org_id: string;
+                    system_path: string;
+                };
+                Returns: boolean;
+            } | {
+                Args: {
+                    action?: string;
+                    system_path: string;
+                };
+                Returns: boolean;
+            };
             has_org_permission: {
                 Args: {
                     org_id: string;
@@ -3715,25 +3254,819 @@ type Database = {
             [_ in never]: never;
         };
     };
-};
-type DatabaseWithoutInternals = Omit<Database, "__InternalSupabase">;
-type DefaultSchema = DatabaseWithoutInternals[Extract<keyof Database, "public">];
-type Tables<DefaultSchemaTableNameOrOptions extends keyof (DefaultSchema["Tables"] & DefaultSchema["Views"]) | {
-    schema: keyof DatabaseWithoutInternals;
-}, TableName extends DefaultSchemaTableNameOrOptions extends {
-    schema: keyof DatabaseWithoutInternals;
-} ? keyof (DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Tables"] & DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Views"]) : never = never> = DefaultSchemaTableNameOrOptions extends {
-    schema: keyof DatabaseWithoutInternals;
-} ? (DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Tables"] & DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Views"])[TableName] extends {
-    Row: infer R;
-} ? R : never : DefaultSchemaTableNameOrOptions extends keyof (DefaultSchema["Tables"] & DefaultSchema["Views"]) ? (DefaultSchema["Tables"] & DefaultSchema["Views"])[DefaultSchemaTableNameOrOptions] extends {
-    Row: infer R;
-} ? R : never : never;
+};
+type DatabaseWithoutInternals = Omit<Database, "__InternalSupabase">;
+type DefaultSchema = DatabaseWithoutInternals[Extract<keyof Database, "public">];
+type Tables<DefaultSchemaTableNameOrOptions extends keyof (DefaultSchema["Tables"] & DefaultSchema["Views"]) | {
+    schema: keyof DatabaseWithoutInternals;
+}, TableName extends DefaultSchemaTableNameOrOptions extends {
+    schema: keyof DatabaseWithoutInternals;
+} ? keyof (DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Tables"] & DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Views"]) : never = never> = DefaultSchemaTableNameOrOptions extends {
+    schema: keyof DatabaseWithoutInternals;
+} ? (DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Tables"] & DatabaseWithoutInternals[DefaultSchemaTableNameOrOptions["schema"]]["Views"])[TableName] extends {
+    Row: infer R;
+} ? R : never : DefaultSchemaTableNameOrOptions extends keyof (DefaultSchema["Tables"] & DefaultSchema["Views"]) ? (DefaultSchema["Tables"] & DefaultSchema["Views"])[DefaultSchemaTableNameOrOptions] extends {
+    Row: infer R;
+} ? R : never : never;
+
+type SupabaseApiKey = Tables<'api_keys'>;
+/** API response type for API key list items (omits sensitive key_hash) */
+type ApiKeyListItem = Omit<SupabaseApiKey, 'key_hash'>;
+
+declare const OntologyScopeSchema: z.ZodDefault<z.ZodObject<{
+    objectTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        storage: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>>>;
+    linkTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        from: z.ZodString;
+        to: z.ZodString;
+        cardinality: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>>;
+    actionTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        actsOn: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        effects: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$loose>>>>;
+    catalogTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        kind: z.ZodOptional<z.ZodString>;
+        appliesTo: z.ZodOptional<z.ZodString>;
+        entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>>>;
+    eventTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>>>;
+    interfaceTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>>>;
+    valueTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        primitive: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>>;
+    sharedProperties: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        valueType: z.ZodOptional<z.ZodString>;
+        searchable: z.ZodOptional<z.ZodBoolean>;
+        pii: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$loose>>>>;
+    groups: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        members: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    }, z.core.$loose>>>>;
+    surfaces: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        ownerSystemId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        route: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>>;
+}, z.core.$strip>>;
+type OntologyScope = z.infer<typeof OntologyScopeSchema>;
+
+type JsonPrimitive = string | number | boolean | null;
+type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+/** Explicit interface needed to annotate the recursive SystemEntrySchema. */
+interface SystemEntry {
+    id: string;
+    label?: string;
+    title?: string;
+    description?: string;
+    kind?: 'product' | 'operational' | 'platform' | 'diagnostic';
+    parentSystemId?: string;
+    ui?: {
+        path: string;
+        surfaces: string[];
+        icon?: string;
+        order?: number;
+    };
+    lifecycle?: 'draft' | 'beta' | 'active' | 'deprecated' | 'archived';
+    responsibleRoleId?: string;
+    governedByKnowledge?: string[];
+    actions?: {
+        actionId: string;
+        intent: 'exposes' | 'consumes';
+        invocation?: unknown;
+    }[];
+    policies?: string[];
+    drivesGoals?: string[];
+    /** @deprecated Use lifecycle. Accepted for one publish cycle. */
+    status?: 'active' | 'deprecated' | 'archived';
+    path?: string;
+    icon?: string;
+    color?: string;
+    uiPosition?: 'sidebar-primary' | 'sidebar-bottom';
+    enabled?: boolean;
+    devOnly?: boolean;
+    requiresAdmin?: boolean;
+    order: number;
+    config?: Record<string, JsonValue>;
+    ontology?: OntologyScope;
+    systems?: Record<string, SystemEntry>;
+    subsystems?: Record<string, SystemEntry>;
+}
+
+declare const ResourceGovernanceStatusSchema: z.ZodEnum<{
+    active: "active";
+    deprecated: "deprecated";
+    archived: "archived";
+}>;
+declare const ResourceEntrySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    order: z.ZodDefault<z.ZodNumber>;
+    systemPath: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    ownerRoleId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        deprecated: "deprecated";
+        archived: "archived";
+    }>;
+    ontology: z.ZodOptional<z.ZodObject<{
+        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        primaryAction: z.ZodOptional<z.ZodString>;
+        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contract: z.ZodOptional<z.ZodObject<{
+            input: z.ZodOptional<z.ZodString>;
+            output: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        role: z.ZodEnum<{
+            entrypoint: "entrypoint";
+            handler: "handler";
+            schema: "schema";
+            test: "test";
+            docs: "docs";
+            config: "config";
+        }>;
+        symbol: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    kind: z.ZodLiteral<"workflow">;
+    emits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        eventKey: z.ZodString;
+        label: z.ZodString;
+        payloadSchema: z.ZodOptional<z.ZodString>;
+        lifecycle: z.ZodOptional<z.ZodEnum<{
+            active: "active";
+            deprecated: "deprecated";
+            draft: "draft";
+            beta: "beta";
+            archived: "archived";
+        }>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    order: z.ZodDefault<z.ZodNumber>;
+    systemPath: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    ownerRoleId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        deprecated: "deprecated";
+        archived: "archived";
+    }>;
+    ontology: z.ZodOptional<z.ZodObject<{
+        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        primaryAction: z.ZodOptional<z.ZodString>;
+        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contract: z.ZodOptional<z.ZodObject<{
+            input: z.ZodOptional<z.ZodString>;
+            output: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        role: z.ZodEnum<{
+            entrypoint: "entrypoint";
+            handler: "handler";
+            schema: "schema";
+            test: "test";
+            docs: "docs";
+            config: "config";
+        }>;
+        symbol: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    kind: z.ZodLiteral<"agent">;
+    agentKind: z.ZodEnum<{
+        platform: "platform";
+        orchestrator: "orchestrator";
+        specialist: "specialist";
+        utility: "utility";
+    }>;
+    actsAsRoleId: z.ZodOptional<z.ZodString>;
+    sessionCapable: z.ZodBoolean;
+    invocations: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"slash-command">;
+        command: z.ZodString;
+        toolFactory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp-tool">;
+        server: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-endpoint">;
+        method: z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+        }>;
+        path: z.ZodString;
+        requestSchema: z.ZodOptional<z.ZodString>;
+        responseSchema: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"script-execution">;
+        resourceId: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    emits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        eventKey: z.ZodString;
+        label: z.ZodString;
+        payloadSchema: z.ZodOptional<z.ZodString>;
+        lifecycle: z.ZodOptional<z.ZodEnum<{
+            active: "active";
+            deprecated: "deprecated";
+            draft: "draft";
+            beta: "beta";
+            archived: "archived";
+        }>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    order: z.ZodDefault<z.ZodNumber>;
+    systemPath: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    ownerRoleId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        deprecated: "deprecated";
+        archived: "archived";
+    }>;
+    ontology: z.ZodOptional<z.ZodObject<{
+        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        primaryAction: z.ZodOptional<z.ZodString>;
+        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contract: z.ZodOptional<z.ZodObject<{
+            input: z.ZodOptional<z.ZodString>;
+            output: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        role: z.ZodEnum<{
+            entrypoint: "entrypoint";
+            handler: "handler";
+            schema: "schema";
+            test: "test";
+            docs: "docs";
+            config: "config";
+        }>;
+        symbol: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    kind: z.ZodLiteral<"integration">;
+    provider: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    order: z.ZodDefault<z.ZodNumber>;
+    systemPath: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    ownerRoleId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        deprecated: "deprecated";
+        archived: "archived";
+    }>;
+    ontology: z.ZodOptional<z.ZodObject<{
+        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        primaryAction: z.ZodOptional<z.ZodString>;
+        reads: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        writes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        usesCatalogs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        emits: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contract: z.ZodOptional<z.ZodObject<{
+            input: z.ZodOptional<z.ZodString>;
+            output: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    codeRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        role: z.ZodEnum<{
+            entrypoint: "entrypoint";
+            handler: "handler";
+            schema: "schema";
+            test: "test";
+            docs: "docs";
+            config: "config";
+        }>;
+        symbol: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    kind: z.ZodLiteral<"script">;
+    language: z.ZodEnum<{
+        shell: "shell";
+        sql: "sql";
+        typescript: "typescript";
+        python: "python";
+    }>;
+    source: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strip>]>;
+}, z.core.$strip>], "kind">;
+type ResourceGovernanceStatus = z.infer<typeof ResourceGovernanceStatusSchema>;
+type ResourceEntry = z.infer<typeof ResourceEntrySchema>;
+
+/**
+ * Error categories for observability grouping and classification.
+ * Used to categorize errors in the execution_errors table metadata.
+ */
+type ExecutionErrorCategory = 'llm' | 'tool' | 'workflow' | 'agent' | 'validation' | 'system';
+
+/**
+ * Workflow-specific logging types and utilities
+ */
+
+interface WorkflowExecutionContext {
+    type: 'workflow';
+    contextType: 'workflow-execution';
+    executionId: string;
+    workflowId: string;
+    workflowName?: string;
+    organizationId: string;
+    executionPath?: string[];
+}
+interface WorkflowFailureContext {
+    type: 'workflow';
+    contextType: 'workflow-failure';
+    executionId: string;
+    workflowId: string;
+    error: string;
+}
+interface StepStartedContext {
+    type: 'workflow';
+    contextType: 'step-started';
+    stepId: string;
+    stepStatus: 'started';
+    input: unknown;
+    startTime: number;
+}
+interface StepCompletedContext {
+    type: 'workflow';
+    contextType: 'step-completed';
+    stepId: string;
+    stepStatus: 'completed';
+    output: unknown;
+    duration: number;
+    isTerminal: boolean;
+    startTime: number;
+    endTime: number;
+}
+interface StepFailedContext {
+    type: 'workflow';
+    contextType: 'step-failed';
+    stepId: string;
+    stepStatus: 'failed';
+    error: string;
+    duration: number;
+    startTime: number;
+    endTime: number;
+}
+interface ConditionalRouteContext {
+    type: 'workflow';
+    contextType: 'conditional-route';
+    stepId: string;
+    target: string;
+    error?: string;
+}
+interface ExecutionPathContext {
+    type: 'workflow';
+    contextType: 'execution-path';
+    executionPath: string[];
+}
+type WorkflowLogContext = WorkflowExecutionContext | WorkflowFailureContext | StepStartedContext | StepCompletedContext | StepFailedContext | ConditionalRouteContext | ExecutionPathContext;
+
+/**
+ * Agent-specific logging types
+ * Simplified 2-event model: lifecycle, iteration
+ *
+ * Design Philosophy:
+ * - LIFECYCLE EVENTS: Structural checkpoints (initialization, iteration, completion)
+ * - ITERATION EVENTS: Execution activities (reasoning, actions during iterations)
+ */
+
+/**
+ * Agent lifecycle stages
+ * Universal checkpoints that apply to all agent executions
+ */
+type AgentLifecycle = 'initialization' | 'iteration' | 'completion';
+/**
+ * Iteration event types
+ * Activities that occur during agent iterations
+ */
+type IterationEventType = 'reasoning' | 'action' | 'tool-call';
+/**
+ * Base fields shared by all lifecycle events
+ */
+interface AgentLifecycleEventBase {
+    type: 'agent';
+    agentId: string;
+    lifecycle: AgentLifecycle;
+    sessionId?: string;
+}
+/**
+ * Lifecycle started event - emitted when a phase begins
+ * REQUIRED: startTime (phase has started, no end yet)
+ */
+interface AgentLifecycleStartedEvent extends AgentLifecycleEventBase {
+    stage: 'started';
+    startTime: number;
+    iteration?: number;
+}
+/**
+ * Lifecycle completed event - emitted when a phase succeeds
+ * REQUIRED: startTime, endTime, duration (phase has finished successfully)
+ */
+interface AgentLifecycleCompletedEvent extends AgentLifecycleEventBase {
+    stage: 'completed';
+    startTime: number;
+    endTime: number;
+    duration: number;
+    iteration?: number;
+    attempts?: number;
+    memorySize?: {
+        sessionMemoryKeys: number;
+        historyEntries: number;
+    };
+}
+/**
+ * Lifecycle failed event - emitted when a phase fails
+ * REQUIRED: startTime, endTime, duration, error (phase has finished with error)
+ */
+interface AgentLifecycleFailedEvent extends AgentLifecycleEventBase {
+    stage: 'failed';
+    startTime: number;
+    endTime: number;
+    duration: number;
+    error: string;
+    iteration?: number;
+}
+/**
+ * Union type for all lifecycle events
+ * Discriminated by 'stage' field for type narrowing
+ */
+type AgentLifecycleEvent = AgentLifecycleStartedEvent | AgentLifecycleCompletedEvent | AgentLifecycleFailedEvent;
+/**
+ * Placeholder data for MVP
+ * Will be typed per actionType in future
+ */
+interface ActionPlaceholderData {
+    message: string;
+}
+/**
+ * Iteration event - captures activities during agent iterations
+ * Consolidates reasoning (LLM thought process) and actions (tool use, memory ops, etc.)
+ */
+interface AgentIterationEvent {
+    type: 'agent';
+    agentId: string;
+    lifecycle: 'iteration';
+    eventType: IterationEventType;
+    iteration: number;
+    sessionId?: string;
+    startTime: number;
+    endTime: number;
+    duration: number;
+    output?: string;
+    actionType?: string;
+    data?: ActionPlaceholderData;
+}
+/**
+ * Tool call event - captures individual tool executions during iterations
+ * Provides granular timing for each tool invocation
+ */
+interface AgentToolCallEvent {
+    type: 'agent';
+    agentId: string;
+    lifecycle: 'iteration';
+    eventType: 'tool-call';
+    iteration: number;
+    sessionId?: string;
+    toolName: string;
+    startTime: number;
+    endTime: number;
+    duration: number;
+    success: boolean;
+    error?: string;
+    input?: Record<string, unknown>;
+    output?: unknown;
+}
+/**
+ * Union type for all agent log contexts
+ * 3 event types total (lifecycle, iteration, tool-call)
+ */
+type AgentLogContext = AgentLifecycleEvent | AgentIterationEvent | AgentToolCallEvent;
+
+/**
+ * Base execution logger for Execution Engine
+ */
+type ExecutionLogLevel = 'debug' | 'info' | 'warn' | 'error';
+
+type LogContext = WorkflowLogContext | AgentLogContext;
+interface ExecutionLogMessage {
+    level: ExecutionLogLevel;
+    message: string;
+    timestamp: number;
+    context?: LogContext;
+}
+
+declare const LinkSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    kind: z.ZodEnum<{
+        affects: "affects";
+        actions: "actions";
+        effects: "effects";
+        links: "links";
+        reads: "reads";
+        writes: "writes";
+        emits: "emits";
+        triggers: "triggers";
+        uses: "uses";
+        approval: "approval";
+        contains: "contains";
+        references: "references";
+        maps_to: "maps_to";
+        governs: "governs";
+        originates_from: "originates_from";
+        applies_to: "applies_to";
+        uses_catalog: "uses_catalog";
+    }>;
+}, z.core.$strip>;
+type Link = z.infer<typeof LinkSchema>;
+
+declare const ResourceCategorySchema: z.ZodEnum<{
+    diagnostic: "diagnostic";
+    production: "production";
+    internal: "internal";
+    testing: "testing";
+}>;
+type ResourceCategory = z.infer<typeof ResourceCategorySchema>;
+type ResourceLink = Link;
+
+/**
+ * Serialized Registry Types
+ *
+ * Pre-computed JSON-safe types for API responses and Command View.
+ * Serialization happens once at API startup, enabling instant response times.
+ */
+
+/**
+ * Serialized agent definition (JSON-safe)
+ * Result of serializeDefinition(AgentDefinition)
+ */
+interface SerializedAgentDefinition {
+    config: {
+        resourceId: string;
+        name: string;
+        description: string;
+        version: string;
+        type: 'agent';
+        kind: 'orchestrator' | 'specialist' | 'utility' | 'system';
+        status: 'dev' | 'prod';
+        links?: ResourceLink[];
+        category?: ResourceCategory;
+        /** Whether this resource is archived and should be excluded from registration and deployment */
+        archived?: boolean;
+        systemPrompt: string;
+        constraints?: {
+            maxIterations?: number;
+            timeout?: number;
+            maxSessionMemoryKeys?: number;
+            maxMemoryTokens?: number;
+        };
+        sessionCapable?: boolean;
+        memoryPreferences?: string;
+    };
+    modelConfig: {
+        provider: string;
+        model: string;
+        apiKey: string;
+        temperature: number;
+        maxOutputTokens: number;
+        topP?: number;
+        modelOptions?: Record<string, unknown>;
+    };
+    contract: {
+        inputSchema: object;
+        outputSchema?: object;
+    };
+    tools: Array<{
+        name: string;
+        description: string;
+        inputSchema?: object;
+        outputSchema?: object;
+    }>;
+    knowledgeMap?: {
+        nodeCount: number;
+        nodes: Array<{
+            id: string;
+            description: string;
+            loaded: boolean;
+            hasPrompt: boolean;
+        }>;
+    };
+    metricsConfig?: object;
+}
+/**
+ * Serialized workflow definition (JSON-safe)
+ * Result of serializeDefinition(WorkflowDefinition)
+ */
+interface SerializedWorkflowDefinition {
+    config: {
+        resourceId: string;
+        name: string;
+        description: string;
+        version: string;
+        type: 'workflow';
+        status: 'dev' | 'prod';
+        links?: ResourceLink[];
+        category?: ResourceCategory;
+        /** Whether this resource is archived and should be excluded from registration and deployment */
+        archived?: boolean;
+    };
+    entryPoint: string;
+    steps: Array<{
+        id: string;
+        name: string;
+        description: string;
+        inputSchema?: object;
+        outputSchema?: object;
+        next: {
+            type: 'linear' | 'conditional';
+            target?: string;
+            routes?: Array<{
+                target: string;
+            }>;
+            default?: string;
+        } | null;
+    }>;
+    contract: {
+        inputSchema: object;
+        outputSchema?: object;
+    };
+    metricsConfig?: object;
+}
 
-type SupabaseUserProfile = Tables<'users'>;
-type SupabaseApiKey = Tables<'api_keys'>;
-/** API response type for API key list items (omits sensitive key_hash) */
-type ApiKeyListItem = Omit<SupabaseApiKey, 'key_hash'>;
+/**
+ * Shared form field types for dynamic form generation
+ * Used by: Command Queue, Execution Runner UI, future form-based features
+ */
+/**
+ * Supported form field types for action payloads
+ * Maps to Mantine form components
+ */
+type FormFieldType = 'text' | 'textarea' | 'number' | 'select' | 'checkbox' | 'radio' | 'richtext';
+/**
+ * Form field definition
+ */
+interface FormField {
+    /** Field key in payload object */
+    name: string;
+    /** Field label for UI */
+    label: string;
+    /** Field type (determines UI component) */
+    type: FormFieldType;
+    /** Default value */
+    defaultValue?: unknown;
+    /** Required field */
+    required?: boolean;
+    /** Placeholder text */
+    placeholder?: string;
+    /** Help text */
+    description?: string;
+    /** Options for select/radio */
+    options?: Array<{
+        label: string;
+        value: string | number;
+    }>;
+    /** Min/max for number */
+    min?: number;
+    max?: number;
+    /** Path to context value for pre-filling (dot notation, e.g., 'proposal.summary') */
+    defaultValueFromContext?: string;
+}
+/**
+ * Form schema for action payload collection
+ */
+interface FormSchema {
+    /** Form title */
+    title?: string;
+    /** Form description */
+    description?: string;
+    /** Form fields */
+    fields: FormField[];
+}
+
+/**
+ * Memory type definitions
+ * Types for agent memory management with semantic entry types
+ */
+/**
+ * Semantic memory entry types
+ * Use-case agnostic types that describe the purpose of each entry
+ * Memory types mirror action types for clarity and filtering
+ */
+type MemoryEntryType = 'context' | 'input' | 'reasoning' | 'tool-result' | 'delegation-result' | 'error';
+/**
+ * Memory entry - represents a single entry in agent memory
+ * Stored in agent memory, translated by adapters to vendor-specific formats
+ */
+interface MemoryEntry {
+    type: MemoryEntryType;
+    content: string;
+    timestamp: number;
+    turnNumber: number | null;
+    iterationNumber: number | null;
+}
+/**
+ * Agent memory - Self-orchestrated memory with session + working storage
+ * Agent has full control over what persists, framework handles auto-compaction
+ */
+interface AgentMemory {
+    /**
+     * Session memory - Persists for session/conversation duration
+     * Never auto-trimmed by framework
+     * Agent-managed key-value store for critical information
+     * Agent provides strings, framework wraps in MemoryEntry
+     */
+    sessionMemory: Record<string, MemoryEntry>;
+    /**
+     * Working memory - Execution history
+     * Automatically compacted by framework when needed
+     * Agent doesn't control compaction
+     */
+    history: MemoryEntry[];
+}
 
 declare const TransitionItemRequestSchema: z.ZodObject<{
     pipelineKey: z.ZodString;
@@ -4016,785 +4349,474 @@ interface DealPriority {
     label: string;
     color: string;
     reason: string;
-    latestActivityAt: string | null;
-    nextActionAt: string | null;
-}
-interface DealContact {
-    id: string;
-    first_name: string | null;
-    last_name: string | null;
-    email: string;
-    title: string | null;
-    headline: string | null;
-    linkedin_url: string | null;
-    processing_state: Record<string, unknown> | null;
-    enrichment_data: Record<string, unknown> | null;
-    company: {
-        id: string;
-        name: string;
-        domain: string | null;
-        website: string | null;
-        linkedin_url: string | null;
-        segment: string | null;
-        category: string | null;
-        num_employees: number | null;
-    } | null;
-}
-interface DealFilters {
-    stage?: DealStage;
-    search?: string;
-    limit?: number;
-    offset?: number;
-}
-/** Deal list item with joined contact and company data */
-interface DealListItem extends AcqDealRow {
-    priority: DealPriority;
-    ownership: 'us' | 'them' | null;
-    nextAction: string | null;
-    contact: DealContact | null;
-}
-type DealDetail$1 = DealListItem;
-/** Task kind options for a deal task (human follow-up action type) */
-type AcqDealTaskKind = 'call' | 'email' | 'meeting' | 'other';
-/**
- * A CRM to-do item attached to a deal representing a human follow-up action.
- * Transformed from AcqDealTaskRow with camelCase properties.
- */
-interface AcqDealTask {
-    id: string;
-    organizationId: string;
-    dealId: string;
-    title: string;
-    description: string | null;
-    kind: AcqDealTaskKind;
-    dueAt: string | null;
-    assigneeUserId: string | null;
-    completedAt: string | null;
-    completedByUserId: string | null;
-    createdAt: string;
-    updatedAt: string;
-    createdByUserId: string | null;
-}
-/**
- * Live-scan aggregate telemetry for a single list, computed on demand from
- * the list junction tables and current contact deliverability state.
- * `stageCounts` are attempted counts from list-row processing_state.
- */
-interface ListTelemetry {
-    listId: string;
-    totalCompanies: number;
-    totalContacts: number;
-    stageCounts: {
-        populated: number;
-        extracted: number;
-        qualified: number;
-        discovered: number;
-        verified: number;
-        personalized: number;
-        uploaded: number;
-    };
-    deliverability: {
-        valid: number;
-        risky: number;
-        invalid: number;
-        unknown: number;
-        bounced: number;
-    };
-    /** Reserved -- active workflow IDs associated with this list. */
-    activeWorkflows?: string[];
-}
-
-/**
- * Lead Service Types
- * CRUD operation types for the acquisition platform (lists, companies, contacts, deals)
- *
- * Implementation: apps/api/src/acquisition/lead-service.ts (LeadService class)
- */
-
-interface AcqDealNote {
-    id: string;
-    dealId: string;
-    organizationId: string;
-    authorUserId: string | null;
-    body: string;
-    createdAt: string;
-    updatedAt: string;
-}
-
-/**
- * Action configuration for HITL tasks
- * Defines available user actions and their behavior
- */
-interface ActionConfig {
-    /** Unique action identifier (e.g., 'approve', 'retry', 'escalate') */
-    id: string;
-    /** Display label for UI button */
-    label: string;
-    /** Button variant/style */
-    type: 'primary' | 'secondary' | 'danger' | 'outline';
-    /** Tabler icon name (e.g., 'IconCheck', 'IconRefresh') */
-    icon?: string;
-    /** Button color (Mantine theme colors) */
-    color?: string;
-    /** Button variant (Mantine button variant, e.g., 'light', 'filled', 'outline') */
-    variant?: string;
-    /** Execution target (agent/workflow to invoke) */
-    target?: {
-        resourceType: 'agent' | 'workflow';
-        resourceId: string;
-        /**
-         * Optional session ID for agent continuation.
-         * If provided, invokes a new turn on the existing session instead of standalone execution.
-         * Only valid when resourceType is 'agent'.
-         */
-        sessionId?: string;
-    };
-    /** Form schema for collecting action-specific data */
-    form?: FormSchema;
-    /** Payload template for pre-filling forms */
-    payloadTemplate?: unknown;
-    /** Requires confirmation dialog */
-    requiresConfirmation?: boolean;
-    /** Confirmation message */
-    confirmationMessage?: string;
-    /** Help text / tooltip */
-    description?: string;
-}
-
-/**
- * Origin resource type - where an execution/task originated from.
- * Used for audit trails and tracking execution lineage.
- */
-type OriginResourceType = 'agent' | 'workflow' | 'scheduler' | 'api';
-/**
- * Origin tracking metadata - who/what created this execution/task.
- * Used by both TaskScheduler and CommandQueue for complete audit trails.
- */
-interface OriginTracking {
-    originExecutionId: string;
-    originResourceType: OriginResourceType;
-    originResourceId: string;
-}
-
-/**
- * Command queue task with flexible action system
- */
-interface Task extends OriginTracking {
-    id: string;
-    organizationId: string;
-    actions: ActionConfig[];
-    context: unknown;
-    selectedAction?: string;
-    actionPayload?: unknown;
-    description?: string;
-    priority: number;
-    /** Optional checkpoint identifier for grouping related human approval tasks */
-    humanCheckpoint?: string;
-    status: QueueTaskStatus;
-    /**
-     * Target resource tracking — mirrors origin columns.
-     * Set when task is created; patchable to redirect execution to a different resource.
-     */
-    targetResourceId?: string;
-    targetResourceType?: 'agent' | 'workflow';
-    /**
-     * Execution ID for the action that runs AFTER user approval.
-     * NULL until execution starts.
-     *
-     * Naming distinction:
-     * - originExecutionId = Parent execution that CREATED the HITL task
-     * - targetExecutionId = Child execution that RUNS AFTER user approval
-     */
-    targetExecutionId?: string;
-    createdAt: Date;
-    completedAt?: Date;
-    completedBy?: string;
-    expiresAt?: Date;
-    idempotencyKey?: string | null;
-}
-/**
- * Task status values
- * - pending: awaiting action
- * - processing: execution in progress after user approval
- * - completed: action was taken and execution succeeded
- * - failed: execution failed, task can be retried
- * - expired: timed out before action
- */
-type QueueTaskStatus = 'pending' | 'processing' | 'completed' | 'failed' | 'expired';
-/**
- * Parameters for patching mutable metadata on a task
- */
-interface PatchTaskParams {
-    humanCheckpoint?: string | null;
-    description?: string;
-    priority?: number;
-    context?: Record<string, unknown>;
-    actions?: unknown[];
-    targetResourceId?: string | null;
-    targetResourceType?: 'agent' | 'workflow' | null;
-    targetExecutionId?: string;
-    status?: 'pending' | 'failed' | 'completed';
-}
-interface CommandQueueListResponse {
-    tasks: Task[];
-    total: number;
+    latestActivityAt: string | null;
+    nextActionAt: string | null;
 }
-
-/**
- * Checkpoint list item for sidebar grouping
- * The id field contains the resourceId of the human checkpoint
- */
-interface CheckpointListItem {
-    /** Human checkpoint resourceId (or 'ungrouped' for tasks without checkpoint) */
+interface DealContact {
     id: string;
-    /** Display name (same as id, or "Ungrouped" for null) */
-    name: string;
-    /** Task count for this checkpoint */
-    count: number;
-}
-/**
- * Status counts for pie chart display
- */
-interface StatusCounts {
-    pending: number;
-    completed: number;
-    expired: number;
+    first_name: string | null;
+    last_name: string | null;
+    email: string;
+    title: string | null;
+    headline: string | null;
+    linkedin_url: string | null;
+    processing_state: Record<string, unknown> | null;
+    enrichment_data: Record<string, unknown> | null;
+    company: {
+        id: string;
+        name: string;
+        domain: string | null;
+        website: string | null;
+        linkedin_url: string | null;
+        segment: string | null;
+        category: string | null;
+        num_employees: number | null;
+    } | null;
 }
-/**
- * Priority counts for donut chart display
- */
-interface PriorityCounts {
-    critical: number;
-    high: number;
-    medium: number;
-    low: number;
+interface DealFilters {
+    stage?: DealStage;
+    search?: string;
+    limit?: number;
+    offset?: number;
 }
-/**
- * Response from GET /command-queue/checkpoints endpoint
- */
-interface CheckpointListResponse {
-    checkpoints: CheckpointListItem[];
-    /** Total tasks across all checkpoints */
-    total: number;
-    /** Breakdown by status for donut chart */
-    statusCounts: StatusCounts;
-    /** Breakdown by priority for donut chart */
-    priorityCounts: PriorityCounts;
+/** Deal list item with joined contact and company data */
+interface DealListItem extends AcqDealRow {
+    priority: DealPriority;
+    ownership: 'us' | 'them' | null;
+    nextAction: string | null;
+    contact: DealContact | null;
 }
-
+type DealDetail$1 = DealListItem;
+/** Task kind options for a deal task (human follow-up action type) */
+type AcqDealTaskKind = 'call' | 'email' | 'meeting' | 'other';
 /**
- * Target for schedule execution - identifies what resource to execute.
- * Unlike ExecutionTarget, payload is NOT included here because schedules
- * store payload in the scheduleConfig (varies per step/item).
+ * A CRM to-do item attached to a deal representing a human follow-up action.
+ * Transformed from AcqDealTaskRow with camelCase properties.
  */
-interface ScheduleTarget {
-    resourceType: 'agent' | 'workflow';
-    resourceId: string;
+interface AcqDealTask {
+    id: string;
+    organizationId: string;
+    dealId: string;
+    title: string;
+    description: string | null;
+    kind: AcqDealTaskKind;
+    dueAt: string | null;
+    assigneeUserId: string | null;
+    completedAt: string | null;
+    completedByUserId: string | null;
+    createdAt: string;
+    updatedAt: string;
+    createdByUserId: string | null;
 }
 /**
- * Optional origin tracking for schedules.
- * Unlike OriginTracking (which is required), these fields are all optional
- * for schedules created directly via API (not triggered by another resource).
+ * Live-scan aggregate telemetry for a single list, computed on demand from
+ * the list junction tables and current contact deliverability state.
+ * `stageCounts` are attempted counts from list-row processing_state.
  */
-interface ScheduleOriginTracking {
-    originExecutionId?: string;
-    originResourceType?: OriginResourceType;
-    originResourceId?: string;
-}
-type TaskScheduleConfig = RecurringScheduleConfig | RelativeScheduleConfig | AbsoluteScheduleConfig;
-interface RecurringScheduleConfig {
-    type: 'recurring';
-    cron?: string;
-    interval?: 'daily' | 'weekly' | 'monthly';
-    time?: string;
-    timezone: string;
-    payload: Record<string, unknown>;
-    endAt?: string | null;
-    overduePolicy?: 'skip' | 'execute';
-}
-interface RelativeScheduleConfig {
-    type: 'relative';
-    anchorAt: string;
-    anchorLabel?: string;
-    items: RelativeScheduleItem[];
-    overduePolicy?: 'skip' | 'execute';
-}
-interface RelativeScheduleItem {
-    offset: string;
-    payload: Record<string, unknown>;
-    label?: string;
-}
-interface AbsoluteScheduleConfig {
-    type: 'absolute';
-    items: AbsoluteScheduleItem[];
-    overduePolicy?: 'skip' | 'execute';
-}
-interface AbsoluteScheduleItem {
-    runAt: string;
-    payload: Record<string, unknown>;
-    label?: string;
-}
-interface TaskSchedule extends ScheduleOriginTracking {
-    id: string;
-    organizationId: string;
-    name: string;
-    description?: string;
-    target: ScheduleTarget;
-    scheduleConfig: TaskScheduleConfig;
-    nextRunAt?: Date;
-    currentStep: number;
-    status: 'active' | 'paused' | 'completed' | 'cancelled';
-    lastRunAt?: Date;
-    lastExecutionId?: string;
-    maxRetries: number;
-    idempotencyKey?: string;
-    createdAt: Date;
-    updatedAt: Date;
+interface ListTelemetry {
+    listId: string;
+    totalCompanies: number;
+    totalContacts: number;
+    stageCounts: {
+        populated: number;
+        extracted: number;
+        qualified: number;
+        discovered: number;
+        verified: number;
+        personalized: number;
+        uploaded: number;
+    };
+    deliverability: {
+        valid: number;
+        risky: number;
+        invalid: number;
+        unknown: number;
+        bounced: number;
+    };
+    /** Reserved -- active workflow IDs associated with this list. */
+    activeWorkflows?: string[];
 }
 
 /**
- * Wire-format DTO for notification API responses.
- * Dates are ISO 8601 strings (not Date objects like the domain Notification type).
- * Used by frontend hooks that consume /api/notifications.
+ * Lead Service Types
+ * CRUD operation types for the acquisition platform (lists, companies, contacts, deals)
+ *
+ * Implementation: apps/api/src/acquisition/lead-service.ts (LeadService class)
  */
-interface NotificationDTO {
+
+interface AcqDealNote {
     id: string;
-    userId: string;
+    dealId: string;
     organizationId: string;
-    category: string;
-    title: string;
-    message: string;
-    actionUrl: string | null;
-    read: boolean;
-    readAt: string | null;
+    authorUserId: string | null;
+    body: string;
     createdAt: string;
-}
-
-type ProjectRow = Database['public']['Tables']['prj_projects']['Row'];
-type ProjectUpdate = Database['public']['Tables']['prj_projects']['Update'];
-type MilestoneRow = Database['public']['Tables']['prj_milestones']['Row'];
-type MilestoneUpdate = Database['public']['Tables']['prj_milestones']['Update'];
-type TaskRow = Database['public']['Tables']['prj_tasks']['Row'];
-type TaskUpdate = Database['public']['Tables']['prj_tasks']['Update'];
-type ProjectStatus = 'active' | 'on_track' | 'at_risk' | 'blocked' | 'completed' | 'paused';
-type ProjectKind = 'client_engagement' | 'internal' | 'research' | 'other';
-type MilestoneStatus = 'upcoming' | 'in_progress' | 'completed' | 'overdue' | 'blocked';
-type TaskStatus = 'planned' | 'in_progress' | 'blocked' | 'completed' | 'cancelled' | 'submitted' | 'approved' | 'rejected' | 'revision_requested';
-type TaskType = 'documentation' | 'code' | 'report' | 'design' | 'other';
-type NoteType = 'call_note' | 'status_update' | 'issue' | 'blocker' | 'agent_learning';
-interface ProjectFilters {
-    status?: ProjectStatus;
-    kind?: ProjectKind;
-    companyId?: string;
-    search?: string;
-}
-interface MilestoneFilters {
-    status?: MilestoneStatus;
-    projectId?: string;
-}
-interface TaskFilters {
-    status?: TaskStatus;
-    type?: TaskType;
-    milestoneId?: string;
-    projectId?: string;
-}
-interface NoteFilters {
-    type?: NoteType;
-    projectId?: string;
-}
-interface ProjectWithCounts extends ProjectRow {
-    milestoneCount: number;
-    taskCount: number;
-    completedMilestones?: number;
-    completedTasks?: number;
-}
-interface ProjectDetail extends ProjectRow {
-    milestones: MilestoneRow[];
-    tasks: TaskRow[];
-    company: {
-        id: string;
-        name: string;
-        domain: string | null;
-    } | null;
-    deal: ProjectSourceDealRef | null;
-    client: ProjectClientRef | null;
-}
-interface ProjectSourceDealRef {
-    id: string;
-    clientId?: string | null;
-    contactEmail: string;
-    stageKey: string | null;
-    stateKey: string | null;
-    sourceListId: string | null;
     updatedAt: string;
 }
-interface ProjectClientRef {
-    id: string;
-    name: string;
-    status: string;
-}
-
-interface Action {
-    key: string;
-    label: string;
-    payloadSchema?: z.ZodTypeAny;
-}
-
-declare const OntologyScopeSchema: z.ZodDefault<z.ZodObject<{
-    objectTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        storage: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>>>;
-    linkTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        from: z.ZodString;
-        to: z.ZodString;
-        cardinality: z.ZodOptional<z.ZodString>;
-        via: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>>>;
-    actionTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        actsOn: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
-        input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        effects: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-    }, z.core.$loose>>>>;
-    catalogTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        kind: z.ZodOptional<z.ZodString>;
-        appliesTo: z.ZodOptional<z.ZodString>;
-        entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>>>;
-    eventTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>>>;
-    interfaceTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>>>;
-    valueTypes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        primitive: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>>>;
-    sharedProperties: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        valueType: z.ZodOptional<z.ZodString>;
-        searchable: z.ZodOptional<z.ZodBoolean>;
-        pii: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$loose>>>>;
-    groups: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        members: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
-    }, z.core.$loose>>>>;
-    surfaces: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
-        ownerSystemId: z.ZodOptional<z.ZodString>;
-        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        route: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>>>;
-}, z.core.$strip>>;
-type OntologyScope = z.infer<typeof OntologyScopeSchema>;
 
-type JsonPrimitive = string | number | boolean | null;
-type JsonValue = JsonPrimitive | JsonValue[] | {
-    [key: string]: JsonValue;
-};
-/** Explicit interface needed to annotate the recursive SystemEntrySchema. */
-interface SystemEntry {
+/**
+ * Action configuration for HITL tasks
+ * Defines available user actions and their behavior
+ */
+interface ActionConfig {
+    /** Unique action identifier (e.g., 'approve', 'retry', 'escalate') */
     id: string;
-    label?: string;
-    title?: string;
-    description?: string;
-    kind?: 'product' | 'operational' | 'platform' | 'diagnostic';
-    parentSystemId?: string;
-    ui?: {
-        path: string;
-        surfaces: string[];
-        icon?: string;
-        order?: number;
-    };
-    lifecycle?: 'draft' | 'beta' | 'active' | 'deprecated' | 'archived';
-    responsibleRoleId?: string;
-    governedByKnowledge?: string[];
-    actions?: {
-        actionId: string;
-        intent: 'exposes' | 'consumes';
-        invocation?: unknown;
-    }[];
-    policies?: string[];
-    drivesGoals?: string[];
-    /** @deprecated Use lifecycle. Accepted for one publish cycle. */
-    status?: 'active' | 'deprecated' | 'archived';
-    path?: string;
+    /** Display label for UI button */
+    label: string;
+    /** Button variant/style */
+    type: 'primary' | 'secondary' | 'danger' | 'outline';
+    /** Tabler icon name (e.g., 'IconCheck', 'IconRefresh') */
     icon?: string;
+    /** Button color (Mantine theme colors) */
     color?: string;
-    uiPosition?: 'sidebar-primary' | 'sidebar-bottom';
-    enabled?: boolean;
-    devOnly?: boolean;
-    requiresAdmin?: boolean;
-    order: number;
-    config?: Record<string, JsonValue>;
-    ontology?: OntologyScope;
-    systems?: Record<string, SystemEntry>;
-    subsystems?: Record<string, SystemEntry>;
+    /** Button variant (Mantine button variant, e.g., 'light', 'filled', 'outline') */
+    variant?: string;
+    /** Execution target (agent/workflow to invoke) */
+    target?: {
+        resourceType: 'agent' | 'workflow';
+        resourceId: string;
+        /**
+         * Optional session ID for agent continuation.
+         * If provided, invokes a new turn on the existing session instead of standalone execution.
+         * Only valid when resourceType is 'agent'.
+         */
+        sessionId?: string;
+    };
+    /** Form schema for collecting action-specific data */
+    form?: FormSchema;
+    /** Payload template for pre-filling forms */
+    payloadTemplate?: unknown;
+    /** Requires confirmation dialog */
+    requiresConfirmation?: boolean;
+    /** Confirmation message */
+    confirmationMessage?: string;
+    /** Help text / tooltip */
+    description?: string;
 }
 
-declare const LinkSchema: z.ZodObject<{
-    nodeId: z.ZodString;
-    kind: z.ZodEnum<{
-        affects: "affects";
-        actions: "actions";
-        effects: "effects";
-        links: "links";
-        reads: "reads";
-        writes: "writes";
-        emits: "emits";
-        triggers: "triggers";
-        uses: "uses";
-        approval: "approval";
-        contains: "contains";
-        references: "references";
-        maps_to: "maps_to";
-        governs: "governs";
-        originates_from: "originates_from";
-        applies_to: "applies_to";
-        uses_catalog: "uses_catalog";
-    }>;
-}, z.core.$strip>;
-type Link = z.infer<typeof LinkSchema>;
+/**
+ * Origin resource type - where an execution/task originated from.
+ * Used for audit trails and tracking execution lineage.
+ */
+type OriginResourceType = 'agent' | 'workflow' | 'scheduler' | 'api';
+/**
+ * Origin tracking metadata - who/what created this execution/task.
+ * Used by both TaskScheduler and CommandQueue for complete audit trails.
+ */
+interface OriginTracking {
+    originExecutionId: string;
+    originResourceType: OriginResourceType;
+    originResourceId: string;
+}
 
-type MessageType = MessageEvent['type'];
 /**
- * Session Data Transfer Object (DTO)
- * Transform type for API responses (snake_case DB → camelCase frontend)
- * Used by frontend apps to display session data
+ * Command queue task with flexible action system
  */
-interface SessionDTO {
-    sessionId: string;
-    resourceId: string;
+interface Task extends OriginTracking {
+    id: string;
     organizationId: string;
-    userId?: string | null;
-    turnCount: number;
-    isEnded: boolean;
-    title?: string | null;
-    memorySnapshot?: AgentMemory;
-    metadata?: Record<string, unknown> | null;
+    actions: ActionConfig[];
+    context: unknown;
+    selectedAction?: string;
+    actionPayload?: unknown;
+    description?: string;
+    priority: number;
+    /** Optional checkpoint identifier for grouping related human approval tasks */
+    humanCheckpoint?: string;
+    status: QueueTaskStatus;
+    /**
+     * Target resource tracking — mirrors origin columns.
+     * Set when task is created; patchable to redirect execution to a different resource.
+     */
+    targetResourceId?: string;
+    targetResourceType?: 'agent' | 'workflow';
+    /**
+     * Execution ID for the action that runs AFTER user approval.
+     * NULL until execution starts.
+     *
+     * Naming distinction:
+     * - originExecutionId = Parent execution that CREATED the HITL task
+     * - targetExecutionId = Child execution that RUNS AFTER user approval
+     */
+    targetExecutionId?: string;
     createdAt: Date;
-    updatedAt: Date;
-    endedAt?: Date | null;
+    completedAt?: Date;
+    completedBy?: string;
+    expiresAt?: Date;
+    idempotencyKey?: string | null;
 }
-interface ChatMessage {
-    id: string;
-    role: 'user' | 'assistant';
-    messageType: MessageType;
-    text: string;
-    metadata?: MessageEvent;
-    turnNumber: number;
-    messageIndex?: number;
-    createdAt: Date;
+/**
+ * Task status values
+ * - pending: awaiting action
+ * - processing: execution in progress after user approval
+ * - completed: action was taken and execution succeeded
+ * - failed: execution failed, task can be retried
+ * - expired: timed out before action
+ */
+type QueueTaskStatus = 'pending' | 'processing' | 'completed' | 'failed' | 'expired';
+/**
+ * Parameters for patching mutable metadata on a task
+ */
+interface PatchTaskParams {
+    humanCheckpoint?: string | null;
+    description?: string;
+    priority?: number;
+    context?: Record<string, unknown>;
+    actions?: unknown[];
+    targetResourceId?: string | null;
+    targetResourceType?: 'agent' | 'workflow' | null;
+    targetExecutionId?: string;
+    status?: 'pending' | 'failed' | 'completed';
 }
-/** Token usage data sent with turn:complete WebSocket events */
-interface SessionTokenUsage {
-    /** Tokens consumed by this turn's input */
-    turnInputTokens: number;
-    /** Tokens generated by this turn's output */
-    turnOutputTokens: number;
-    /** Total tokens for this turn (turnInputTokens + turnOutputTokens) */
-    turnTotalTokens: number;
-    /** Cumulative input tokens across all turns in this session */
-    cumulativeInputTokens: number;
-    /** Cumulative output tokens across all turns in this session */
-    cumulativeOutputTokens: number;
-    /** The model's context window size for this session (e.g., 200K) */
-    contextWindowSize: number;
+interface CommandQueueListResponse {
+    tasks: Task[];
+    total: number;
 }
 
 /**
- * Single source of truth for all active theme preset names.
- *
- * This is the canonical list. To add a preset:
- *   1. Add the name here.
- *   2. Create `packages/ui/src/theme/presets/{name}.ts` exporting `{name}Preset: ThemePreset`.
- *   3. Add to `PRESETS` record in `packages/ui/src/theme/presets/index.ts`.
- *   4. Add to `PresetName` union in `packages/ui/src/theme/presets/types.ts`.
- *   5. Add a card in `apps/command-center/src/features/settings/appearance/components/AppearanceSettings.tsx`.
- *
- * The union type (`ThemePresetName`) and Zod enum (`ThemePresetEnum`) are derived
- * automatically — no other files need updating.
+ * Checkpoint list item for sidebar grouping
+ * The id field contains the resourceId of the human checkpoint
  */
-declare const THEME_PRESETS: readonly ["default", "tactical", "regal", "cyber-volt", "aurora", "rose-gold", "midnight", "titanium", "canopy", "slate", "cyber-strike", "cyber-chrome", "cyber-void", "nirvana", "wave", "synapse", "cortex", "helios", "graphite", "quarry"];
-type ThemePresetName = (typeof THEME_PRESETS)[number];
-
+interface CheckpointListItem {
+    /** Human checkpoint resourceId (or 'ungrouped' for tasks without checkpoint) */
+    id: string;
+    /** Display name (same as id, or "Ungrouped" for null) */
+    name: string;
+    /** Task count for this checkpoint */
+    count: number;
+}
 /**
- * Multi-tenancy configuration types
- *
- * Config is stored in dedicated `config` columns (NOT nested in metadata):
- * - organizations.config: Org-level config (no feature toggles -- all features available by default)
- * - org_memberships.config: Per-user-per-org feature overrides
- * - users.config: User-global config
+ * Status counts for pie chart display
  */
-
+interface StatusCounts {
+    pending: number;
+    completed: number;
+    expired: number;
+}
 /**
- * Per-user-per-org config (stored in org_memberships.config)
- * Controls which features a specific member can access within their org.
- * Keys are feature IDs from the organization model (e.g. crm, lead-gen, projects, seo).
+ * Priority counts for donut chart display
  */
-interface MembershipFeatureConfig {
-    features?: Record<string, boolean>;
+interface PriorityCounts {
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
 }
 /**
- * User-global config (stored in users.config)
- * Theme and onboarding are user-specific, NOT org-specific
+ * Response from GET /command-queue/checkpoints endpoint
  */
-interface UserConfig {
-    theme?: {
-        preset?: ThemePresetName;
-        colorScheme?: 'light' | 'dark' | 'auto';
-    };
-    onboarding?: {
-        completed?: boolean;
-        completedAt?: string;
-        role?: string;
-        primaryUseCase?: string[];
-        experienceLevel?: string;
-        /** Onboarding guide system state (set by checklist/tour system) */
-        guides?: {
-            completedIds?: string[];
-            dismissed?: boolean;
-            completedAt?: string;
-        };
-    };
+interface CheckpointListResponse {
+    checkpoints: CheckpointListItem[];
+    /** Total tasks across all checkpoints */
+    total: number;
+    /** Breakdown by status for donut chart */
+    statusCounts: StatusCounts;
+    /** Breakdown by priority for donut chart */
+    priorityCounts: PriorityCounts;
 }
 
 /**
- * Memberships Domain - Zod Validation Schemas
- *
- * Validation schemas for membership management endpoints.
- * Includes request bodies, query params, and path params.
- *
- * Security:
- * - All schemas use .strict() to prevent mass assignment attacks
- * - UUID validation prevents invalid references
- * - Role enum validation prevents privilege escalation
- * - organizationId never accepted in body (from JWT when needed)
+ * Target for schedule execution - identifies what resource to execute.
+ * Unlike ExecutionTarget, payload is NOT included here because schedules
+ * store payload in the scheduleConfig (varies per step/item).
  */
-
+interface ScheduleTarget {
+    resourceType: 'agent' | 'workflow';
+    resourceId: string;
+}
 /**
- * Membership status validation
- * Note: Database constraint only allows 'active' | 'inactive'
+ * Optional origin tracking for schedules.
+ * Unlike OriginTracking (which is required), these fields are all optional
+ * for schedules created directly via API (not triggered by another resource).
  */
-declare const MembershipStatusSchema: z.ZodEnum<{
-    active: "active";
-    inactive: "inactive";
-}>;
-type MembershipStatus = z.infer<typeof MembershipStatusSchema>;
+interface ScheduleOriginTracking {
+    originExecutionId?: string;
+    originResourceType?: OriginResourceType;
+    originResourceId?: string;
+}
+type TaskScheduleConfig = RecurringScheduleConfig | RelativeScheduleConfig | AbsoluteScheduleConfig;
+interface RecurringScheduleConfig {
+    type: 'recurring';
+    cron?: string;
+    interval?: 'daily' | 'weekly' | 'monthly';
+    time?: string;
+    timezone: string;
+    payload: Record<string, unknown>;
+    endAt?: string | null;
+    overduePolicy?: 'skip' | 'execute';
+}
+interface RelativeScheduleConfig {
+    type: 'relative';
+    anchorAt: string;
+    anchorLabel?: string;
+    items: RelativeScheduleItem[];
+    overduePolicy?: 'skip' | 'execute';
+}
+interface RelativeScheduleItem {
+    offset: string;
+    payload: Record<string, unknown>;
+    label?: string;
+}
+interface AbsoluteScheduleConfig {
+    type: 'absolute';
+    items: AbsoluteScheduleItem[];
+    overduePolicy?: 'skip' | 'execute';
+}
+interface AbsoluteScheduleItem {
+    runAt: string;
+    payload: Record<string, unknown>;
+    label?: string;
+}
+interface TaskSchedule extends ScheduleOriginTracking {
+    id: string;
+    organizationId: string;
+    name: string;
+    description?: string;
+    target: ScheduleTarget;
+    scheduleConfig: TaskScheduleConfig;
+    nextRunAt?: Date;
+    currentStep: number;
+    status: 'active' | 'paused' | 'completed' | 'cancelled';
+    lastRunAt?: Date;
+    lastExecutionId?: string;
+    maxRetries: number;
+    idempotencyKey?: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
 
 /**
- * Organization Membership types based on WorkOS API
+ * Wire-format DTO for notification API responses.
+ * Dates are ISO 8601 strings (not Date objects like the domain Notification type).
+ * Used by frontend hooks that consume /api/notifications.
  */
-interface OrganizationMembership {
-    object: 'organization_membership';
+interface NotificationDTO {
     id: string;
     userId: string;
     organizationId: string;
-    role: {
-        slug: string;
-    };
-    status: 'active' | 'inactive';
+    category: string;
+    title: string;
+    message: string;
+    actionUrl: string | null;
+    read: boolean;
+    readAt: string | null;
     createdAt: string;
-    updatedAt: string;
 }
-/**
- * Request interfaces for membership operations
- */
-interface CreateMembershipRequest {
-    userId: string;
-    organizationId: string;
-    roleSlug?: string;
+
+type ProjectRow = Database['public']['Tables']['prj_projects']['Row'];
+type ProjectUpdate = Database['public']['Tables']['prj_projects']['Update'];
+type MilestoneRow = Database['public']['Tables']['prj_milestones']['Row'];
+type MilestoneUpdate = Database['public']['Tables']['prj_milestones']['Update'];
+type TaskRow = Database['public']['Tables']['prj_tasks']['Row'];
+type TaskUpdate = Database['public']['Tables']['prj_tasks']['Update'];
+type ProjectStatus = 'active' | 'on_track' | 'at_risk' | 'blocked' | 'completed' | 'paused';
+type ProjectKind = 'client_engagement' | 'internal' | 'research' | 'other';
+type MilestoneStatus = 'upcoming' | 'in_progress' | 'completed' | 'overdue' | 'blocked';
+type TaskStatus = 'planned' | 'in_progress' | 'blocked' | 'completed' | 'cancelled' | 'submitted' | 'approved' | 'rejected' | 'revision_requested';
+type TaskType = 'documentation' | 'code' | 'report' | 'design' | 'other';
+type NoteType = 'call_note' | 'status_update' | 'issue' | 'blocker' | 'agent_learning';
+interface ProjectFilters {
+    status?: ProjectStatus;
+    kind?: ProjectKind;
+    companyId?: string;
+    search?: string;
+}
+interface MilestoneFilters {
+    status?: MilestoneStatus;
+    projectId?: string;
+}
+interface TaskFilters {
+    status?: TaskStatus;
+    type?: TaskType;
+    milestoneId?: string;
+    projectId?: string;
+}
+interface NoteFilters {
+    type?: NoteType;
+    projectId?: string;
+}
+interface ProjectWithCounts extends ProjectRow {
+    milestoneCount: number;
+    taskCount: number;
+    completedMilestones?: number;
+    completedTasks?: number;
+}
+interface ProjectDetail extends ProjectRow {
+    milestones: MilestoneRow[];
+    tasks: TaskRow[];
+    company: {
+        id: string;
+        name: string;
+        domain: string | null;
+    } | null;
+    deal: ProjectSourceDealRef | null;
+    client: ProjectClientRef | null;
+}
+interface ProjectSourceDealRef {
+    id: string;
+    clientId?: string | null;
+    contactEmail: string;
+    stageKey: string | null;
+    stateKey: string | null;
+    sourceListId: string | null;
+    updatedAt: string;
 }
-interface UpdateMembershipRequest {
-    roleSlug: string;
+interface ProjectClientRef {
+    id: string;
+    name: string;
+    status: string;
 }
-interface ListMembershipsParams {
-    userId?: string;
-    organizationId?: string;
-    statuses?: MembershipStatus[];
-    limit?: number;
-    before?: string;
-    after?: string;
-    order?: 'asc' | 'desc';
+
+interface Action {
+    key: string;
+    label: string;
+    payloadSchema?: z.ZodTypeAny;
 }
+
+type MessageType = MessageEvent['type'];
 /**
- * Response interfaces
+ * Session Data Transfer Object (DTO)
+ * Transform type for API responses (snake_case DB → camelCase frontend)
+ * Used by frontend apps to display session data
  */
-interface ListMembershipsResponse {
-    data: OrganizationMembership[];
-    listMetadata?: {
-        before?: string | null;
-        after?: string | null;
-    };
+interface SessionDTO {
+    sessionId: string;
+    resourceId: string;
+    organizationId: string;
+    userId?: string | null;
+    turnCount: number;
+    isEnded: boolean;
+    title?: string | null;
+    memorySnapshot?: AgentMemory;
+    metadata?: Record<string, unknown> | null;
+    createdAt: Date;
+    updatedAt: Date;
+    endedAt?: Date | null;
 }
-/**
- * Extended membership with user and organization details for UI
- */
-interface MembershipWithDetails extends OrganizationMembership {
-    user?: {
-        id: string;
-        email: string;
-        firstName?: string;
-        lastName?: string;
-        profilePictureUrl?: string;
-    };
-    organization?: {
-        id: string;
-        name: string;
-        workos_org_id: string;
-        primaryDomain?: string;
-        is_test?: boolean;
-        status?: string;
-        metadata?: Record<string, unknown>;
-        config?: Record<string, unknown>;
-    };
-    config?: MembershipFeatureConfig;
+interface ChatMessage {
+    id: string;
+    role: 'user' | 'assistant';
+    messageType: MessageType;
+    text: string;
+    metadata?: MessageEvent;
+    turnNumber: number;
+    messageIndex?: number;
+    createdAt: Date;
+}
+/** Token usage data sent with turn:complete WebSocket events */
+interface SessionTokenUsage {
+    /** Tokens consumed by this turn's input */
+    turnInputTokens: number;
+    /** Tokens generated by this turn's output */
+    turnOutputTokens: number;
+    /** Total tokens for this turn (turnInputTokens + turnOutputTokens) */
+    turnTotalTokens: number;
+    /** Cumulative input tokens across all turns in this session */
+    cumulativeInputTokens: number;
+    /** Cumulative output tokens across all turns in this session */
+    cumulativeOutputTokens: number;
+    /** The model's context window size for this session (e.g., 200K) */
+    contextWindowSize: number;
 }
 
 /**
@@ -5441,14 +5463,104 @@ interface CommandViewData {
     edges: CommandViewEdge[];
 }
 
-declare const ResourceCategorySchema: z.ZodEnum<{
-    diagnostic: "diagnostic";
-    production: "production";
-    internal: "internal";
-    testing: "testing";
-}>;
-type ResourceCategory = z.infer<typeof ResourceCategorySchema>;
-type ResourceLink = Link;
+declare const AccessKeyInputSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    systemPath: z.ZodString;
+    action: z.ZodDefault<z.ZodEnum<{
+        view: "view";
+        manage: "manage";
+    }>>;
+}, z.core.$strict>]>;
+type AccessKeyInput = z.input<typeof AccessKeyInputSchema>;
+declare const AccessKeys: {
+    readonly platformAdmin: {
+        readonly systemPath: "platform.admin";
+        readonly action: "view";
+    };
+    readonly organizationManage: {
+        readonly systemPath: "permission.org";
+        readonly action: "manage";
+    };
+    readonly membersManage: {
+        readonly systemPath: "permission.members";
+        readonly action: "manage";
+    };
+    readonly rolesManage: {
+        readonly systemPath: "permission.roles";
+        readonly action: "manage";
+    };
+    readonly secretsManage: {
+        readonly systemPath: "permission.secrets";
+        readonly action: "manage";
+    };
+    readonly operationsRead: {
+        readonly systemPath: "permission.operations";
+        readonly action: "view";
+    };
+    readonly operationsManage: {
+        readonly systemPath: "permission.operations";
+        readonly action: "manage";
+    };
+    readonly acquisitionManage: {
+        readonly systemPath: "permission.acquisition";
+        readonly action: "manage";
+    };
+    readonly projectsManage: {
+        readonly systemPath: "permission.projects";
+        readonly action: "manage";
+    };
+    readonly clientsManage: {
+        readonly systemPath: "permission.clients";
+        readonly action: "manage";
+    };
+    readonly operationsOverview: {
+        readonly systemPath: "diagnostic.operations.overview";
+        readonly action: "view";
+    };
+    readonly operationsRecentExecutions: {
+        readonly systemPath: "diagnostic.operations.recent-executions";
+        readonly action: "view";
+    };
+    readonly monitoringExecutionLogs: {
+        readonly systemPath: "diagnostic.monitoring.execution-logs";
+        readonly action: "view";
+    };
+    readonly monitoringNotifications: {
+        readonly systemPath: "diagnostic.monitoring.notifications";
+        readonly action: "view";
+    };
+};
+
+type AccessRestrictedBy = 'catalog' | 'membership' | 'system-lifecycle' | 'role-permission' | 'diagnostic-allowlist' | null;
+type AccessReason = 'allowed' | 'platform-admin-bypass' | 'invalid-access-key' | 'unknown-access-key' | 'organization-mismatch' | 'missing-membership' | 'system-not-active' | 'role-permission-denied' | 'diagnostic-key-not-allowed';
+interface AccessAnswer {
+    allowed: boolean;
+    restrictedBy: AccessRestrictedBy;
+    reason: AccessReason;
+}
+
+interface UseAccessResult extends AccessAnswer {
+    isReady: boolean;
+    isPlatformAdmin: boolean;
+    permissions: readonly string[];
+}
+/**
+ * Unified access hook for Organization Model system lifecycle, diagnostic keys,
+ * role permissions, organization membership, and platform-admin bypass.
+ */
+declare function useAccess(key: AccessKeyInput): UseAccessResult;
+
+/**
+ * Query key factory for executions TanStack Query hooks.
+ * Uses organization UUID (not name) for cache isolation.
+ */
+declare const executionsKeys: {
+    all: readonly ["executions"];
+    resources: (orgId: string | null) => readonly ["executions", "resources", string | null];
+    resourceDefinition: (orgId: string | null, resourceId: string) => readonly ["executions", "definition", string | null, string];
+    executionsListBase: (orgId: string | null, resourceId: string) => readonly ["executions", "list", string | null, string];
+    executions: (orgId: string | null, resourceId: string, resourceStatus?: string, limit?: number, offset?: number) => readonly ["executions", "list", string | null, string, string, number | null, number];
+    execution: (orgId: string | null, resourceId: string, executionId: string) => readonly ["executions", "execution", string | null, string, string];
+};
 
 type ExecutionStatus = 'pending' | 'running' | 'completed' | 'failed' | 'warning';
 /**
@@ -5509,25 +5621,147 @@ interface APIExecutionSummary {
     endTime?: number;
     resourceStatus?: ResourceStatus;
 }
-interface APIExecutionDetail extends APIExecutionSummary {
-    executionLogs: ExecutionLogMessage[];
-    input?: unknown;
-    result?: unknown;
-    error?: string;
-    resourceStatus: ResourceStatus;
-    apiVersion?: string | null;
-    resourceVersion?: string | null;
-    sdkVersion?: string | null;
-    isArchived?: boolean;
-    archivedLogCount?: number;
+interface APIExecutionDetail extends APIExecutionSummary {
+    executionLogs: ExecutionLogMessage[];
+    input?: unknown;
+    result?: unknown;
+    error?: string;
+    resourceStatus: ResourceStatus;
+    apiVersion?: string | null;
+    resourceVersion?: string | null;
+    sdkVersion?: string | null;
+    isArchived?: boolean;
+    archivedLogCount?: number;
+}
+interface APIExecutionListResponse {
+    executions: APIExecutionSummary[];
+    total?: number;
+    limit?: number;
+    offset?: number;
+    hasMore?: boolean;
+}
+
+/**
+ * Execution history item.
+ * Represents a single execution triggered by a schedule.
+ */
+declare const ExecutionHistoryItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    createdAt: z.ZodString;
+    status: z.ZodEnum<{
+        completed: "completed";
+        failed: "failed";
+        running: "running";
+        cancelled: "cancelled";
+    }>;
+    step: z.ZodNullable<z.ZodNumber>;
+    itemLabel: z.ZodNullable<z.ZodString>;
+    duration: z.ZodNullable<z.ZodNumber>;
+    error: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Execution history response.
+ * Returned by GET /schedules/:id/executions with pagination.
+ */
+declare const ExecutionHistoryResponseSchema: z.ZodObject<{
+    executions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        createdAt: z.ZodString;
+        status: z.ZodEnum<{
+            completed: "completed";
+            failed: "failed";
+            running: "running";
+            cancelled: "cancelled";
+        }>;
+        step: z.ZodNullable<z.ZodNumber>;
+        itemLabel: z.ZodNullable<z.ZodString>;
+        duration: z.ZodNullable<z.ZodNumber>;
+        error: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    total: z.ZodNumber;
+    limit: z.ZodNumber;
+    offset: z.ZodNumber;
+}, z.core.$strip>;
+type ExecutionHistoryItem = z.infer<typeof ExecutionHistoryItemSchema>;
+type ExecutionHistoryResponse = z.infer<typeof ExecutionHistoryResponseSchema>;
+
+/**
+ * Fetch the execution list for a given resource.
+ *
+ * @example
+ * const { data, isLoading } = useExecutions(resourceId)
+ *
+ * @example
+ * // With status filter and limit
+ * const { data } = useExecutions(resourceId, 'running', 20)
+ */
+declare function useExecutions(resourceId: string, resourceStatus?: ResourceStatus | 'all', limit?: number, offset?: number): _tanstack_react_query.UseQueryResult<APIExecutionListResponse, Error>;
+
+interface UseInFlightExecutionsOptions {
+    enabled?: boolean;
+    refetchInterval?: number | false;
+    limit?: number;
+    offset?: number;
+    listId?: string;
+}
+declare function useInFlightExecutions(resourceId: string, options?: UseInFlightExecutionsOptions): _tanstack_react_query.UseQueryResult<APIExecutionListResponse, Error>;
+
+/**
+ * Fetch a single execution detail.
+ * Automatically polls every 2 seconds while the execution status is 'running'.
+ *
+ * @example
+ * const { data: execution, isLoading } = useExecution(resourceId, executionId)
+ */
+declare function useExecution(resourceId: string, executionId: string): _tanstack_react_query.UseQueryResult<APIExecutionDetail, Error>;
+
+interface ExecuteAsyncParams {
+    resourceId: string;
+    resourceType: ResourceType;
+    input: unknown;
+    listId?: string;
+}
+interface ExecuteAsyncResult {
+    executionId: string;
+    status: string;
+    resourceId: string;
+}
+/**
+ * Trigger an async execution for a workflow or agent.
+ * Invalidates the executions list on success so the new execution appears immediately.
+ *
+ * @example
+ * const { mutate: execute, isPending } = useExecuteAsync()
+ * execute({ resourceId, resourceType: 'workflow', input: { ... } })
+ */
+declare function useExecuteAsync(): _tanstack_react_query.UseMutationResult<ExecuteAsyncResult, Error, ExecuteAsyncParams, unknown>;
+
+interface UseWorkflowExecutionOptions {
+    workflowId: string;
+    listId?: string;
+}
+interface WorkflowExecutionTriggerParams {
+    input: unknown;
 }
-interface APIExecutionListResponse {
-    executions: APIExecutionSummary[];
-    total?: number;
-    limit?: number;
-    offset?: number;
-    hasMore?: boolean;
+interface UseWorkflowExecutionResult {
+    execute: (params: WorkflowExecutionTriggerParams) => Promise<ExecuteAsyncResult>;
+    executionId: string | null;
+    status: string | null;
+    isIdle: boolean;
+    isPending: boolean;
+    isSuccess: boolean;
+    isError: boolean;
+    error: Error | null;
+    data: ExecuteAsyncResult | undefined;
+    reset: () => void;
 }
+/**
+ * List-builder-friendly wrapper around async workflow execution.
+ *
+ * Binds a workflow ID once, exposes a small trigger API, and refreshes both
+ * platform execution lists and list execution history when a list ID is known.
+ */
+declare function useWorkflowExecution({ workflowId, listId }: UseWorkflowExecutionOptions): UseWorkflowExecutionResult;
 
 /**
  * @deprecated Use TimeRange from '@elevasis/core' directly. Kept as alias for backward compatibility.
@@ -5606,102 +5840,6 @@ interface Activity {
     createdAt: Date;
 }
 
-/**
- * Canonical permission catalog.
- *
- * Source of truth for the permission keys used by:
- *   - RLS policies in Supabase (via has_org_permission(org_id, key))
- *   - API middleware (via requireOrganizationPermission(key))
- *   - UI hooks (via useOrganizationPermissions().hasPermission(key))
- *
- * The DB table `org_rol_permissions` mirrors this constant. There is no
- * runtime reconciler; parity is enforced two ways:
- *   1. Each migration that adds/removes/modifies a permission must INSERT
- *      (or UPDATE / DELETE) the corresponding `org_rol_permissions` row in
- *      the same transaction.
- *   2. `apps/api/src/auth/multi-tenancy/__tests__/permissions-catalog-sync.integration.test.ts`
- *      asserts the TS catalog and the DB rows agree; CI fails on drift.
- *
- * Adding a permission:
- *   1. Add an entry below.
- *   2. Add a row to the migration (INSERT INTO org_rol_permissions ...) in
- *      the same transaction as any policies/grants that reference the key.
- *   3. Reference it in RLS / middleware as needed.
- *   4. Optionally grant it to one or more system roles in org_rol_grants.
- *
- * Removing a permission: follow the deletion runbook — never just delete
- * the entry. Existing role grants and policy references must be cleared first.
- */
-declare const PERMISSIONS: {
-    readonly ORG_READ: "org.read";
-    readonly ORG_MANAGE: "org.manage";
-    readonly ORG_DELETE: "org.delete";
-    readonly MEMBERS_MANAGE: "members.manage";
-    readonly ROLES_MANAGE: "roles.manage";
-    readonly SECRETS_MANAGE: "secrets.manage";
-    readonly OPERATIONS_READ: "operations.read";
-    readonly OPERATIONS_MANAGE: "operations.manage";
-    readonly ACQUISITION_MANAGE: "acquisition.manage";
-    readonly PROJECTS_MANAGE: "projects.manage";
-    readonly CLIENTS_MANAGE: "clients.manage";
-};
-type PermissionKey = (typeof PERMISSIONS)[keyof typeof PERMISSIONS];
-/**
- * Static metadata for each permission. Mirrored into org_rol_permissions by
- * a migration `INSERT` in the same transaction as any change to this catalog.
- * is_org_grantable=false means the permission is reserved to system roles
- * only — custom roles cannot include it (privilege-escalation guard).
- */
-interface PermissionDescriptor {
-    key: PermissionKey;
-    description: string;
-    isOrgGrantable: boolean;
-}
-
-/**
- * Execution history item.
- * Represents a single execution triggered by a schedule.
- */
-declare const ExecutionHistoryItemSchema: z.ZodObject<{
-    id: z.ZodString;
-    createdAt: z.ZodString;
-    status: z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
-        running: "running";
-        cancelled: "cancelled";
-    }>;
-    step: z.ZodNullable<z.ZodNumber>;
-    itemLabel: z.ZodNullable<z.ZodString>;
-    duration: z.ZodNullable<z.ZodNumber>;
-    error: z.ZodNullable<z.ZodString>;
-}, z.core.$strip>;
-/**
- * Execution history response.
- * Returned by GET /schedules/:id/executions with pagination.
- */
-declare const ExecutionHistoryResponseSchema: z.ZodObject<{
-    executions: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        createdAt: z.ZodString;
-        status: z.ZodEnum<{
-            completed: "completed";
-            failed: "failed";
-            running: "running";
-            cancelled: "cancelled";
-        }>;
-        step: z.ZodNullable<z.ZodNumber>;
-        itemLabel: z.ZodNullable<z.ZodString>;
-        duration: z.ZodNullable<z.ZodNumber>;
-        error: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>>;
-    total: z.ZodNumber;
-    limit: z.ZodNumber;
-    offset: z.ZodNumber;
-}, z.core.$strip>;
-type ExecutionHistoryItem = z.infer<typeof ExecutionHistoryItemSchema>;
-type ExecutionHistoryResponse = z.infer<typeof ExecutionHistoryResponseSchema>;
-
 /**
  * Deployment types — browser-safe
  *
@@ -5863,105 +6001,6 @@ declare const ListCredentialsResponseSchema: z.ZodObject<{
 /** API response type for a single credential list item */
 type CredentialListItem = z.infer<typeof ListCredentialsResponseSchema>['credentials'][number];
 
-declare function useOrganizationPermissions(): {
-    hasPermission: (key: PermissionKey | string) => boolean;
-    permissions: string[];
-    isPlatformAdmin: boolean;
-    isReady: boolean;
-};
-declare function useHasPermission(key: PermissionKey | string): boolean;
-
-/**
- * Query key factory for executions TanStack Query hooks.
- * Uses organization UUID (not name) for cache isolation.
- */
-declare const executionsKeys: {
-    all: readonly ["executions"];
-    resources: (orgId: string | null) => readonly ["executions", "resources", string | null];
-    resourceDefinition: (orgId: string | null, resourceId: string) => readonly ["executions", "definition", string | null, string];
-    executionsListBase: (orgId: string | null, resourceId: string) => readonly ["executions", "list", string | null, string];
-    executions: (orgId: string | null, resourceId: string, resourceStatus?: string, limit?: number, offset?: number) => readonly ["executions", "list", string | null, string, string, number | null, number];
-    execution: (orgId: string | null, resourceId: string, executionId: string) => readonly ["executions", "execution", string | null, string, string];
-};
-
-/**
- * Fetch the execution list for a given resource.
- *
- * @example
- * const { data, isLoading } = useExecutions(resourceId)
- *
- * @example
- * // With status filter and limit
- * const { data } = useExecutions(resourceId, 'running', 20)
- */
-declare function useExecutions(resourceId: string, resourceStatus?: ResourceStatus | 'all', limit?: number, offset?: number): _tanstack_react_query.UseQueryResult<APIExecutionListResponse, Error>;
-
-interface UseInFlightExecutionsOptions {
-    enabled?: boolean;
-    refetchInterval?: number | false;
-    limit?: number;
-    offset?: number;
-    listId?: string;
-}
-declare function useInFlightExecutions(resourceId: string, options?: UseInFlightExecutionsOptions): _tanstack_react_query.UseQueryResult<APIExecutionListResponse, Error>;
-
-/**
- * Fetch a single execution detail.
- * Automatically polls every 2 seconds while the execution status is 'running'.
- *
- * @example
- * const { data: execution, isLoading } = useExecution(resourceId, executionId)
- */
-declare function useExecution(resourceId: string, executionId: string): _tanstack_react_query.UseQueryResult<APIExecutionDetail, Error>;
-
-interface ExecuteAsyncParams {
-    resourceId: string;
-    resourceType: ResourceType;
-    input: unknown;
-    listId?: string;
-}
-interface ExecuteAsyncResult {
-    executionId: string;
-    status: string;
-    resourceId: string;
-}
-/**
- * Trigger an async execution for a workflow or agent.
- * Invalidates the executions list on success so the new execution appears immediately.
- *
- * @example
- * const { mutate: execute, isPending } = useExecuteAsync()
- * execute({ resourceId, resourceType: 'workflow', input: { ... } })
- */
-declare function useExecuteAsync(): _tanstack_react_query.UseMutationResult<ExecuteAsyncResult, Error, ExecuteAsyncParams, unknown>;
-
-interface UseWorkflowExecutionOptions {
-    workflowId: string;
-    listId?: string;
-}
-interface WorkflowExecutionTriggerParams {
-    input: unknown;
-}
-interface UseWorkflowExecutionResult {
-    execute: (params: WorkflowExecutionTriggerParams) => Promise<ExecuteAsyncResult>;
-    executionId: string | null;
-    status: string | null;
-    isIdle: boolean;
-    isPending: boolean;
-    isSuccess: boolean;
-    isError: boolean;
-    error: Error | null;
-    data: ExecuteAsyncResult | undefined;
-    reset: () => void;
-}
-/**
- * List-builder-friendly wrapper around async workflow execution.
- *
- * Binds a workflow ID once, exposes a small trigger API, and refreshes both
- * platform execution lists and list execution history when a list ID is known.
- */
-declare function useWorkflowExecution({ workflowId, listId }: UseWorkflowExecutionOptions): UseWorkflowExecutionResult;
-
 interface FetchEventSourceWithTokenRefreshOptions {
     url: string;
     getToken: () => Promise<string | undefined>;
@@ -6963,91 +7002,6 @@ declare function useSortedData<T>(data: T[], defaultColumn: string, accessors: R
     toggleSort: (column: string) => void;
 };
 
-interface InitializationError {
-    layer: 'auth' | 'profile' | 'organization';
-    message: string;
-    originalError?: Error;
-}
-interface AppInitializationState {
-    userReady: boolean;
-    organizationReady: boolean;
-    allReady: boolean;
-    isInitializing: boolean;
-    error: InitializationError | null;
-    retry: () => void;
-    profile: SupabaseUserProfile | null;
-}
-
-/**
- * The value exposed by OrganizationProvider to all consumers.
- */
-interface OrganizationContextValue {
-    /** WorkOS organization ID of the currently selected organization. */
-    currentWorkOSOrganizationId: string | null;
-    /** Supabase (UUID) organization ID of the currently selected organization. */
-    currentSupabaseOrganizationId: string | null;
-    /** Full membership record for the currently selected organization. */
-    currentMembership: MembershipWithDetails | null;
-    /** All memberships for the authenticated user. */
-    memberships: MembershipWithDetails[];
-    /** True while the initial membership list is being fetched. */
-    isInitializing: boolean;
-    /** True while a subsequent org switch / refresh is in flight. */
-    isOrgRefreshing: boolean;
-    /** Error message if the membership fetch or org switch failed. */
-    error: string | null;
-    /**
-     * Switch the active organization.
-     *
-     * Persists the selection to `last_visited_org` on the user profile and
-     * invalidates all org-scoped TanStack Query cache entries.
-     *
-     * @param workosOrgId - WorkOS organization ID to switch to.
-     */
-    switchOrganization: (workosOrgId: string) => void;
-    /**
-     * Re-fetch memberships and retry org selection after an error.
-     */
-    retry: () => Promise<void>;
-}
-
-type RestrictionSource = 'membership' | null;
-interface FeatureAccessResult {
-    allowed: boolean;
-    restrictedBy: RestrictionSource;
-}
-/**
- * Factory that creates a `useFeatureAccess` hook scoped to the consumer's
- * feature configuration.
- *
- * @param useInitialization - Initialization hook providing `profile` and `organizationReady`
- * @param useOrganization   - Organization hook providing `currentMembership`
- *
- * @example
- * ```typescript
- * // In your app's feature-access module
- * import { createFeatureAccessHook } from '@repo/ui/hooks'
- * import { useInitialization } from '@repo/ui/initialization'
- * import { useOrganization } from '@repo/ui/organization'
- *
- * export const useFeatureAccess = createFeatureAccessHook({
- *   useInitialization,
- *   useOrganization,
- * })
- * ```
- */
-declare function createFeatureAccessHook({ useInitialization, useOrganization }: {
-    useInitialization: () => Pick<AppInitializationState, 'profile' | 'organizationReady'>;
-    useOrganization: () => Pick<OrganizationContextValue, 'currentMembership'>;
-}): () => {
-    orgConfig: Record<string, unknown> | undefined;
-    membershipConfig: MembershipFeatureConfig | undefined;
-    userConfig: UserConfig | undefined;
-    hasFeature: (featureKey: string) => boolean;
-    checkFeature: (featureKey: string) => FeatureAccessResult;
-    isReady: boolean;
-};
-
 interface UseSSEConnectionOptions {
     manager: SSEConnectionManagerLike;
     /** Shared connection key — all subscribers with the same key share ONE connection. */
@@ -9537,12 +9491,6 @@ declare class OrganizationMembershipService {
 
 declare function useUserMemberships(userId: string, params?: Omit<ListMembershipsParams, 'userId'>): _tanstack_react_query.UseQueryResult<MembershipWithDetails[], Error>;
 
-interface UpdateMemberConfigParams {
-    membershipId: string;
-    config: MembershipFeatureConfig;
-}
-declare function useUpdateMemberConfig(): _tanstack_react_query.UseMutationResult<unknown, Error, UpdateMemberConfigParams, unknown>;
-
 interface DeactivateMembershipMutationData {
     membershipId: string;
     userId?: string;
@@ -10279,5 +10227,5 @@ declare function useCreateNote(): _tanstack_react_query.UseMutationResult<{
     type?: string;
 }, "organization_id">, unknown>;
 
-export { ApiKeyService, CredentialService, DeploymentService, OperationsService, OrganizationMembershipService, REFETCH_INTERVAL_RUNNING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, WebhookEndpointService, acquisitionListKeys, clientsKeys, collectResourceFilterFacets, companyKeys, contactKeys, createFeatureAccessHook, dealKeys, dealNoteKeys, dealTaskKeys, executionsKeys, filterByDomainFilters, getResourceFilterFacetIds, isSessionCapable, labelResourceFilterFacet, leadGenArtifactKeys, leadGenListCompanyKeys, leadGenListMemberKeys, milestoneKeys, noteKeys, observabilityKeys, operationsKeys, projectActivityKeys, projectKeys, requestsKeys, scheduleKeys, sessionsKeys, sortData, taskKeys, useActivateDeployment, useActivities, useActivitiesRealtime, useActivityFilters, useActivityTrend, useAddCompaniesToList, useAddContactsToList, useArchiveSession, useArchivedLogs, useArtifacts, useAssignRole, useBatchDelete, useBatchTelemetry, useBatchedResourcesHealth, useBulkDeleteExecutions, useBusinessImpact, useCancelExecution, useCancelSchedule, useCheckpointTasks, useClient, useClientStatus, useClients, useCommandQueue, useCommandQueueTotals, useCommandViewData, useCommandViewDomainFilters, useCommandViewStats, useCommandViewStore, useCompanies, useCompany, useCompanyFacets, useCompleteDealTask, useContact, useContacts, useCostBreakdown, useCostByModel, useCostSummary, useCostTrends, useCreateApiKey, useCreateArtifact, useCreateClient, useCreateCompany, useCreateContact, useCreateCredential, useCreateDealNote, useCreateDealTask, useCreateProject as useCreateDeliveryProject, useCreateList, useCreateMilestone, useCreateNote, useCreateOrgRole, useCreateSchedule, useCreateSession, useCreateTask, useCreateWebhookEndpoint, useCredentials, useDashboardMetrics, useDeactivateDeployment, useDeactivateMembership, useDealDetail, useDealNotes, useDealTasks, useDealTasksDue, useDeals, useDealsLookup, useDealsSummary, useDeleteApiKey, useDeleteClient, useDeleteCompanies, useDeleteContacts, useDeleteCredential, useDeleteDeal, useDeleteProject as useDeleteDeliveryProject, useDeleteTask as useDeleteDeliveryTask, useDeleteDeployment, useDeleteExecution, useDeleteList, useDeleteMilestone, useDeleteOrgRole, useDeleteRequest, useDeleteSchedule, useDeleteSession, useDeleteTask$1 as useDeleteTask, useDeleteWebhookEndpoint, useDeriveActions, useEffectivePermissions, useErrorAnalysis, useErrorDetail, useErrorDetails, useErrorDistribution, useErrorNotification, useErrorTrends, useExecuteAction, useExecuteAsync, useExecuteResource, useExecution, useExecutionHealth, useExecutionLogSSE, useExecutionLogs, useExecutionLogsFilters, useExecutionPanelState, useExecutionSSE, useExecutions, useGetExecutionHistory, useGetSchedule, useHasPermission, useInFlightExecutions, useList, useListApiKeys, useListDeployments, useListExecutions, useListMember, useListMembers, useListProgress, useListRecords, useListSchedules, useListWebhookEndpoints, useLists, useListsTelemetry, useMarkAllAsRead, useMarkAsRead, useMergedExecution, useMilestones, useNotificationCount as useNotificationCountSSE, useNotifications, useOrgRoles, useOrganizationMembers, useOrganizationPermissions, usePaginationState, usePatchTask, usePauseSchedule, usePermissionCatalog, useProject, useProjectActivities, useProjectMilestones, useProjectNotes, useProjectRealtime, useProjectTasks, useProjects, useReactivateMembership, useRecentExecutionsByResource, useRemoveCompaniesFromList, useRequest, useRequestsList, useResolveAllErrors, useResolveError, useResolveErrorsByExecution, useResourceDefinition, useResourceErrors, useResourceExecutions, useResourceSearch, useResources, useResourcesDomainFilters, useResourcesHealth, useResumeSchedule, useRetryExecution, useRevokeRole, useSSEConnection, useScheduledTasks, useSession, useSessionExecution, useSessionExecutions, useSessionMessages, useSessionWebSocket, useSessions, useSortedData, useStatusFilter, useSubmitAction, useSuccessNotification, useSystemHealth, useTableSelection, useTableSort, useTasks, useTestNotification, useTimeRangeDates, useTopFailingResources, useTransitionItem, useTransitionListCompany, useTransitionListMember, useTransitionState, useUnresolveError, useUnresolvedErrors, useUpdateAnchor, useUpdateApiKey, useUpdateClient, useUpdateCompany, useUpdateContact, useUpdateCredential, useUpdateProject as useUpdateDeliveryProject, useUpdateList, useUpdateListConfig, useUpdateListStatus, useUpdateMemberConfig, useUpdateMilestone, useUpdateOrgRole, useUpdateRequestStatus, useUpdateSchedule, useUpdateTask, useUpdateWebhookEndpoint, useUserMemberships, useVerifyCredential, useVisibleResources, useWarningNotification, useWorkflowExecution };
-export type { AcqCompanyWithCount, AcqContactWithCompany, AcqDealNote, AcqDealTask, AcqDealTaskKind, ActivityFilters, ActivityTrendResponse, AddCompaniesToListResult, AddContactsToListResult, AssignRoleInput, BulkDeleteExecutionsParams, BulkDeleteExecutionsResult, BusinessImpactMetrics, CancelExecutionParams, CancelExecutionResult, ChatMessage, ClientDetailResponse, ClientResponse, ClientStatus, ClientStatusResponse, ClientsListFilters, CreateApiKeyRequest, CreateApiKeyResponse, CreateClientRequest, CreateCredentialRequest, CreateCredentialResponse, CreateOrgRoleInput, CreateScheduleInput, CreateSessionResponse, CredentialListItem, DealDetail, DealLookupFilters, DealLookupItem, DealSummaryStageItem, DealsSummaryResponse, DeleteExecutionParams, Deployment, ErrorDistributionItem, ErrorDistributionParams, ErrorFilters, ErrorTrendsParams, ExecuteActionInput, ExecuteAsyncParams, ExecuteAsyncResult, ExecutionErrorDetails, ExecutionHistoryItem, ExecutionHistoryResponse, ExecutionLogsFilters, ExecutionLogsPageResponse, FailingResource, FeatureAccessResult, GetMessagesResponse, ListActivitiesResponse, ListApiKeysResponse, ListCredentialsResponse, ListExecutionsFilters, ListRecordsFilters, ListSchedulesFilters, ListSchedulesResponse, ListWebhookEndpointsResponse, MessageEvent, MessageType, OrgRole, RemoveCompaniesFromListResult, RequestRow, RequestsListFilters, ResourceFilterFacet, ResourcesResponse, RetryExecutionParams, RevokeRoleInput, SessionDTO, SessionExecution, SessionExecutionsResponse, SessionListItem, SessionTokenUsage, SortDirection, SortState, StaleDealSummaryItem, StatefulItem, StatusFilter, SubmitActionRequest, SubmitActionResponse, SystemHealthExecutionSummary, SystemHealthResponse, TaskSchedule, TopFailingResourcesParams, TransitionItemInput, TransitionListCompanyInput, TransitionListMemberInput, TransitionStateInput, UpdateClientRequest, UpdateListStatusInput, UpdateOrgRoleInput, UpdateScheduleInput, UseActivitiesParams, UseActivityTrendParams, UseArtifactsParams, UseBatchedResourcesHealthParams, UseExecuteResourceOptions, UseExecutionHealthParams, UseExecutionLogsParams, UseExecutionPanelStateOptions, UseExecutionPanelStateReturn, UseExecutionSSEOptions, UseExecutionSSEResult, UseInFlightExecutionsOptions, UseListProgressOptions, UseNotificationCountArgs, UseResourcesHealthParams, UseSSEConnectionOptions, UseScheduledTasksOptions, UseSystemHealthParams, UseWorkflowExecutionOptions, UseWorkflowExecutionResult, VerifyCredentialResponse, WebSocketState, WorkflowExecutionTriggerParams };
+export { AccessKeys, ApiKeyService, CredentialService, DeploymentService, OperationsService, OrganizationMembershipService, REFETCH_INTERVAL_RUNNING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, WebhookEndpointService, acquisitionListKeys, clientsKeys, collectResourceFilterFacets, companyKeys, contactKeys, dealKeys, dealNoteKeys, dealTaskKeys, executionsKeys, filterByDomainFilters, getResourceFilterFacetIds, isSessionCapable, labelResourceFilterFacet, leadGenArtifactKeys, leadGenListCompanyKeys, leadGenListMemberKeys, milestoneKeys, noteKeys, observabilityKeys, operationsKeys, projectActivityKeys, projectKeys, requestsKeys, scheduleKeys, sessionsKeys, sortData, taskKeys, useAccess, useActivateDeployment, useActivities, useActivitiesRealtime, useActivityFilters, useActivityTrend, useAddCompaniesToList, useAddContactsToList, useArchiveSession, useArchivedLogs, useArtifacts, useAssignRole, useBatchDelete, useBatchTelemetry, useBatchedResourcesHealth, useBulkDeleteExecutions, useBusinessImpact, useCancelExecution, useCancelSchedule, useCheckpointTasks, useClient, useClientStatus, useClients, useCommandQueue, useCommandQueueTotals, useCommandViewData, useCommandViewDomainFilters, useCommandViewStats, useCommandViewStore, useCompanies, useCompany, useCompanyFacets, useCompleteDealTask, useContact, useContacts, useCostBreakdown, useCostByModel, useCostSummary, useCostTrends, useCreateApiKey, useCreateArtifact, useCreateClient, useCreateCompany, useCreateContact, useCreateCredential, useCreateDealNote, useCreateDealTask, useCreateProject as useCreateDeliveryProject, useCreateList, useCreateMilestone, useCreateNote, useCreateOrgRole, useCreateSchedule, useCreateSession, useCreateTask, useCreateWebhookEndpoint, useCredentials, useDashboardMetrics, useDeactivateDeployment, useDeactivateMembership, useDealDetail, useDealNotes, useDealTasks, useDealTasksDue, useDeals, useDealsLookup, useDealsSummary, useDeleteApiKey, useDeleteClient, useDeleteCompanies, useDeleteContacts, useDeleteCredential, useDeleteDeal, useDeleteProject as useDeleteDeliveryProject, useDeleteTask as useDeleteDeliveryTask, useDeleteDeployment, useDeleteExecution, useDeleteList, useDeleteMilestone, useDeleteOrgRole, useDeleteRequest, useDeleteSchedule, useDeleteSession, useDeleteTask$1 as useDeleteTask, useDeleteWebhookEndpoint, useDeriveActions, useEffectivePermissions, useErrorAnalysis, useErrorDetail, useErrorDetails, useErrorDistribution, useErrorNotification, useErrorTrends, useExecuteAction, useExecuteAsync, useExecuteResource, useExecution, useExecutionHealth, useExecutionLogSSE, useExecutionLogs, useExecutionLogsFilters, useExecutionPanelState, useExecutionSSE, useExecutions, useGetExecutionHistory, useGetSchedule, useInFlightExecutions, useList, useListApiKeys, useListDeployments, useListExecutions, useListMember, useListMembers, useListProgress, useListRecords, useListSchedules, useListWebhookEndpoints, useLists, useListsTelemetry, useMarkAllAsRead, useMarkAsRead, useMergedExecution, useMilestones, useNotificationCount as useNotificationCountSSE, useNotifications, useOrgRoles, useOrganizationMembers, usePaginationState, usePatchTask, usePauseSchedule, usePermissionCatalog, useProject, useProjectActivities, useProjectMilestones, useProjectNotes, useProjectRealtime, useProjectTasks, useProjects, useReactivateMembership, useRecentExecutionsByResource, useRemoveCompaniesFromList, useRequest, useRequestsList, useResolveAllErrors, useResolveError, useResolveErrorsByExecution, useResourceDefinition, useResourceErrors, useResourceExecutions, useResourceSearch, useResources, useResourcesDomainFilters, useResourcesHealth, useResumeSchedule, useRetryExecution, useRevokeRole, useSSEConnection, useScheduledTasks, useSession, useSessionExecution, useSessionExecutions, useSessionMessages, useSessionWebSocket, useSessions, useSortedData, useStatusFilter, useSubmitAction, useSuccessNotification, useSystemHealth, useTableSelection, useTableSort, useTasks, useTestNotification, useTimeRangeDates, useTopFailingResources, useTransitionItem, useTransitionListCompany, useTransitionListMember, useTransitionState, useUnresolveError, useUnresolvedErrors, useUpdateAnchor, useUpdateApiKey, useUpdateClient, useUpdateCompany, useUpdateContact, useUpdateCredential, useUpdateProject as useUpdateDeliveryProject, useUpdateList, useUpdateListConfig, useUpdateListStatus, useUpdateMilestone, useUpdateOrgRole, useUpdateRequestStatus, useUpdateSchedule, useUpdateTask, useUpdateWebhookEndpoint, useUserMemberships, useVerifyCredential, useVisibleResources, useWarningNotification, useWorkflowExecution };
+export type { AccessKeyInput, AcqCompanyWithCount, AcqContactWithCompany, AcqDealNote, AcqDealTask, AcqDealTaskKind, ActivityFilters, ActivityTrendResponse, AddCompaniesToListResult, AddContactsToListResult, AssignRoleInput, BulkDeleteExecutionsParams, BulkDeleteExecutionsResult, BusinessImpactMetrics, CancelExecutionParams, CancelExecutionResult, ChatMessage, ClientDetailResponse, ClientResponse, ClientStatus, ClientStatusResponse, ClientsListFilters, CreateApiKeyRequest, CreateApiKeyResponse, CreateClientRequest, CreateCredentialRequest, CreateCredentialResponse, CreateOrgRoleInput, CreateScheduleInput, CreateSessionResponse, CredentialListItem, DealDetail, DealLookupFilters, DealLookupItem, DealSummaryStageItem, DealsSummaryResponse, DeleteExecutionParams, Deployment, ErrorDistributionItem, ErrorDistributionParams, ErrorFilters, ErrorTrendsParams, ExecuteActionInput, ExecuteAsyncParams, ExecuteAsyncResult, ExecutionErrorDetails, ExecutionHistoryItem, ExecutionHistoryResponse, ExecutionLogsFilters, ExecutionLogsPageResponse, FailingResource, GetMessagesResponse, ListActivitiesResponse, ListApiKeysResponse, ListCredentialsResponse, ListExecutionsFilters, ListRecordsFilters, ListSchedulesFilters, ListSchedulesResponse, ListWebhookEndpointsResponse, MessageEvent, MessageType, OrgRole, RemoveCompaniesFromListResult, RequestRow, RequestsListFilters, ResourceFilterFacet, ResourcesResponse, RetryExecutionParams, RevokeRoleInput, SessionDTO, SessionExecution, SessionExecutionsResponse, SessionListItem, SessionTokenUsage, SortDirection, SortState, StaleDealSummaryItem, StatefulItem, StatusFilter, SubmitActionRequest, SubmitActionResponse, SystemHealthExecutionSummary, SystemHealthResponse, TaskSchedule, TopFailingResourcesParams, TransitionItemInput, TransitionListCompanyInput, TransitionListMemberInput, TransitionStateInput, UpdateClientRequest, UpdateListStatusInput, UpdateOrgRoleInput, UpdateScheduleInput, UseAccessResult, UseActivitiesParams, UseActivityTrendParams, UseArtifactsParams, UseBatchedResourcesHealthParams, UseExecuteResourceOptions, UseExecutionHealthParams, UseExecutionLogsParams, UseExecutionPanelStateOptions, UseExecutionPanelStateReturn, UseExecutionSSEOptions, UseExecutionSSEResult, UseInFlightExecutionsOptions, UseListProgressOptions, UseNotificationCountArgs, UseResourcesHealthParams, UseSSEConnectionOptions, UseScheduledTasksOptions, UseSystemHealthParams, UseWorkflowExecutionOptions, UseWorkflowExecutionResult, VerifyCredentialResponse, WebSocketState, WorkflowExecutionTriggerParams };