@elevasis/ui 2.73.0 → 2.74.0

package/dist/api/index.js

@@ -1,7 +1,7 @@
-export { createElevasisQueryClient } from '../chunk-5B2ZFO44.js';
-export { ApiClientProvider, useApiClient, useApiClientContext } from '../chunk-NHNTX6ZL.js';
+export { createElevasisQueryClient } from '../chunk-RFNJ2PTO.js';
+export { ApiClientProvider, useApiClient, useApiClientContext } from '../chunk-O32UQ26A.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-IBCEAVB2.js';
+import '../chunk-R5UGIFYU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
 import '../chunk-TVTSASST.js';

package/dist/app/index.d.ts

@@ -1462,6 +1462,64 @@ type Database = {
                     }
                 ];
             };
+            content_distribution_metrics: {
+                Row: {
+                    captured_at: string;
+                    created_at: string;
+                    distribution_id: string;
+                    id: string;
+                    metrics: Json;
+                    organization_id: string;
+                    raw: Json;
+                    source: string;
+                    source_execution_id: string | null;
+                };
+                Insert: {
+                    captured_at?: string;
+                    created_at?: string;
+                    distribution_id: string;
+                    id?: string;
+                    metrics?: Json;
+                    organization_id: string;
+                    raw?: Json;
+                    source: string;
+                    source_execution_id?: string | null;
+                };
+                Update: {
+                    captured_at?: string;
+                    created_at?: string;
+                    distribution_id?: string;
+                    id?: string;
+                    metrics?: Json;
+                    organization_id?: string;
+                    raw?: Json;
+                    source?: string;
+                    source_execution_id?: string | null;
+                };
+                Relationships: [
+                    {
+                        foreignKeyName: "content_distribution_metrics_distribution_fkey";
+                        columns: ["distribution_id", "organization_id"];
+                        isOneToOne: false;
+                        referencedRelation: "content_distributions";
+                        referencedColumns: ["id", "organization_id"];
+                    },
+                    {
+                        foreignKeyName: "content_distribution_metrics_organization_id_fkey";
+                        columns: ["organization_id"];
+                        isOneToOne: false;
+                        referencedRelation: "organizations";
+                        referencedColumns: ["id"];
+                    },
+                    {
+                        foreignKeyName: "content_distribution_metrics_source_execution_id_fkey";
+                        columns: ["source_execution_id"];
+                        isOneToOne: false;
+                        referencedRelation: "execution_logs";
+                        referencedColumns: ["execution_id"];
+                    }
+                ];
+            };
             content_distributions: {
                 Row: {
                     adapted_body: string | null;

package/dist/app/index.js

@@ -1,19 +1,18 @@
-import { AppErrorBoundary } from '../chunk-LEPYXLJ2.js';
-import { SidebarProvider, AppShellContainer, Sidebar, AppShellRightSideContainer, AppShellRightSideOuterContainer } from '../chunk-CJ2232PQ.js';
-import '../chunk-Z4ICFQXG.js';
-import '../chunk-3TS5U5BL.js';
+import { AppErrorBoundary } from '../chunk-LN4UW6S4.js';
+import { SidebarProvider, AppShellContainer, Sidebar, AppShellRightSideContainer, AppShellRightSideOuterContainer } from '../chunk-GO4XJ5D4.js';
+import '../chunk-BA3AZJUR.js';
+import '../chunk-E6YGA5WH.js';
 import '../chunk-BZZCNLT6.js';
-import { useSessionCheck, ElevasisSystemsProvider, useElevasisSystems, SystemShell, ElevasisUIProvider } from '../chunk-OCVSPAKM.js';
+import { useSessionCheck, ElevasisSystemsProvider, useElevasisSystems, SystemShell, ElevasisUIProvider } from '../chunk-6JN2TLV2.js';
 import '../chunk-R6NMRXNO.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-MKH2KOAO.js';
-import '../chunk-NHNTX6ZL.js';
+import '../chunk-O32UQ26A.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-U2H3TIHD.js';
+import '../chunk-HYQOGRWG.js';
 import '../chunk-MISHPEJX.js';
 import '../chunk-62GVNH5U.js';
 import { useInitialization } from '../chunk-P45GQ3ZW.js';
-import '../chunk-M7WWRZ5Z.js';
+import '../chunk-2GIJBHZT.js';
 import '../chunk-3KMDHCAR.js';
 import { TanStackRouterBridge, ScrollToTop } from '../chunk-2IFYDILW.js';
 import '../chunk-BLXJEIQS.js';
@@ -21,7 +20,7 @@ import '../chunk-UD657ICS.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-IBCEAVB2.js';
+import '../chunk-R5UGIFYU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
 import '../chunk-BI5VDO2K.js';

package/dist/auth/index.js

@@ -1,14 +1,13 @@
-export { AccessGuard, AccessKeys, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-OCVSPAKM.js';
+export { AccessGuard, AccessKeys, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-6JN2TLV2.js';
 import '../chunk-R6NMRXNO.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-MKH2KOAO.js';
-import '../chunk-NHNTX6ZL.js';
+import '../chunk-O32UQ26A.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-U2H3TIHD.js';
+import '../chunk-HYQOGRWG.js';
 import '../chunk-MISHPEJX.js';
 import '../chunk-62GVNH5U.js';
 import '../chunk-P45GQ3ZW.js';
-import '../chunk-M7WWRZ5Z.js';
+import '../chunk-2GIJBHZT.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-2IFYDILW.js';
 import '../chunk-BLXJEIQS.js';
@@ -16,7 +15,7 @@ import '../chunk-UD657ICS.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-IBCEAVB2.js';
+import '../chunk-R5UGIFYU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
 import '../chunk-BI5VDO2K.js';

package/dist/charts/index.js

@@ -1,14 +1,13 @@
-export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-OCVSPAKM.js';
+export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-6JN2TLV2.js';
 import '../chunk-R6NMRXNO.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-MKH2KOAO.js';
-import '../chunk-NHNTX6ZL.js';
+import '../chunk-O32UQ26A.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-U2H3TIHD.js';
+import '../chunk-HYQOGRWG.js';
 import '../chunk-MISHPEJX.js';
 import '../chunk-62GVNH5U.js';
 import '../chunk-P45GQ3ZW.js';
-import '../chunk-M7WWRZ5Z.js';
+import '../chunk-2GIJBHZT.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-2IFYDILW.js';
 import '../chunk-BLXJEIQS.js';
@@ -16,7 +15,7 @@ import '../chunk-UD657ICS.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-IBCEAVB2.js';
+import '../chunk-R5UGIFYU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
 import '../chunk-BI5VDO2K.js';

package/dist/chunk-2GIJBHZT.js

@@ -0,0 +1,60 @@
+import { UuidSchema } from './chunk-TVTSASST.js';
+import { z } from 'zod';
+
+var SessionIdParamSchema = z.object({
+  sessionId: UuidSchema
+}).strict();
+var ExecutionIdParamsSchema = z.object({
+  sessionId: UuidSchema,
+  executionId: UuidSchema
+}).strict();
+var CreateSessionSchema = z.object({
+  resourceId: z.string().min(1).max(100),
+  userId: UuidSchema.optional(),
+  metadata: z.any().optional()
+}).strict();
+z.object({
+  input: z.unknown().refine(
+    (val) => {
+      let text;
+      if (typeof val === "string") {
+        text = val;
+      } else if (val && typeof val === "object" && "message" in val) {
+        text = String(val.message);
+      } else {
+        text = JSON.stringify(val);
+      }
+      return text.length > 0 && text.length <= 1e5;
+    },
+    { message: "Input must be between 1 and 100,000 characters" }
+  ),
+  metadata: z.any().optional()
+}).strict();
+z.object({
+  userId: UuidSchema.optional(),
+  resourceId: z.string().optional(),
+  limit: z.coerce.number().int().min(1).max(100).default(20)
+}).strict();
+z.object({
+  limit: z.coerce.number().int().min(1).max(100).default(100),
+  cursor: z.coerce.number().int().min(0).optional()
+}).strict();
+var WebSocketSessionTurnSchema = z.object({
+  type: z.literal("session:turn"),
+  input: z.unknown().refine(
+    (val) => {
+      let text;
+      if (typeof val === "string") {
+        text = val;
+      } else if (val && typeof val === "object" && "message" in val) {
+        text = String(val.message);
+      } else {
+        text = JSON.stringify(val) || "";
+      }
+      return text && text.length > 0 && text.length <= 1e5;
+    },
+    { message: "Input must be between 1 and 100,000 characters" }
+  )
+}).strict();
+
+export { CreateSessionSchema, ExecutionIdParamsSchema, SessionIdParamSchema, WebSocketSessionTurnSchema };

package/dist/{chunk-ETN3TTRT.js → chunk-2MRRDF32.js}

@@ -1,21 +1,23 @@
-import { SubshellLoader } from './chunk-Z4ICFQXG.js';
-import { CollapsibleJsonSection, ExecutionStats, UnifiedWorkflowGraph, WorkflowExecutionTimeline, AgentExecutionVisualizer, AgentExecutionTimeline, AgentIterationDetailPanel } from './chunk-ZDKPHFTH.js';
+import { SubshellLoader } from './chunk-BA3AZJUR.js';
+import { CollapsibleJsonSection, ExecutionStats, UnifiedWorkflowGraph, WorkflowExecutionTimeline, AgentExecutionVisualizer, AgentExecutionTimeline, AgentIterationDetailPanel } from './chunk-W2QRBQQA.js';
+import { useCommandViewData, useCommandViewStats, useCommandViewStore, useResourceExecutions, useCheckpointTasks, useSessionMessages, useSessionWebSocket, useSessionExecutions } from './chunk-FA7LMNQO.js';
+import { findNavigationSurfaceForSystem, getSystemApiInterfaceReadiness } from './chunk-CRA7WQZH.js';
 import { FormFieldRenderer } from './chunk-3MEXPLWT.js';
 import { ChatInterface, ChatHeader } from './chunk-SNZDFCOQ.js';
-import { ResourceHealthPanel } from './chunk-4CW2C5BD.js';
+import { mergeSessionMessages } from './chunk-QFGNRKIE.js';
+import { ResourceHealthPanel } from './chunk-WZU3MCKI.js';
 import { Graph_module_css_default } from './chunk-HENXLGVD.js';
-import { AppShellLoader } from './chunk-3TS5U5BL.js';
+import { AppShellLoader } from './chunk-E6YGA5WH.js';
 import { PageContainer } from './chunk-BZZCNLT6.js';
-import { DEFAULT_ORGANIZATION_GRAPH_FILTERS, resolveSemanticIconComponent, CustomModal, useAppearance, useErrorDetail, JsonViewer, useExecution, useArchivedLogs, useDeleteExecution, useRetryExecution, useCancelExecution, ConfirmationModal, PageTitleCaption, CollapsibleSection, useStatusFilter, useResourceSearch, useResourcesDomainFilters, usePaginationState, useResources, useRecentExecutionsByResource, filterByDomainFilters, TabCountBadge, ResourceCard, useResourceDefinition, isSessionCapable, useOptionalElevasisSystems, useDeleteTask, useCommandQueue, useSubmitAction, useCommandQueueTask, ContextViewer, useElevasisSystems, useCommandViewData, useCommandViewStats, useCommandViewStore, buildOrganizationGraph, useResourceExecutions, useCheckpointTasks, EmptyState, useExecutionPanelState, useSessionMessages, useSessionWebSocket, useSessions, SessionListItem, useSessionExecutions, useDeleteSession, useEndSession, useCreateSession, useSession, getSessionView, SubshellContentContainer, collectResourceFilterFacets, SemanticIcon, useSystemsViewState, aggregateSystemMetrics, useSystemHealth, ORGANIZATION_GRAPH_NODE_KIND_ORDER, formatResourceAttribution, SYSTEM_RESOURCE_KINDS, ORGANIZATION_GRAPH_NODE_KIND_LABELS, ORGANIZATION_GRAPH_EDGE_KIND_LABELS, ORGANIZATION_GRAPH_NODE_KIND_DETAIL_LABELS, ORGANIZATION_GRAPH_NODE_KIND_MEANINGS, ORGANIZATION_GRAPH_EDGE_KIND_MEANINGS } from './chunk-OCVSPAKM.js';
-import { showApiErrorNotification, showSuccessNotification } from './chunk-U2H3TIHD.js';
+import { DEFAULT_ORGANIZATION_GRAPH_FILTERS, resolveSemanticIconComponent, CustomModal, useAppearance, useErrorDetail, JsonViewer, useExecution, useArchivedLogs, useDeleteExecution, useRetryExecution, useCancelExecution, ConfirmationModal, PageTitleCaption, CollapsibleSection, useStatusFilter, useResourceSearch, useResourcesDomainFilters, usePaginationState, useResources, useRecentExecutionsByResource, filterByDomainFilters, TabCountBadge, ResourceCard, useResourceDefinition, isSessionCapable, useOptionalElevasisSystems, useDeleteTask, useCommandQueue, useSubmitAction, useCommandQueueTask, ContextViewer, useElevasisSystems, buildOrganizationGraph, EmptyState, useExecutionPanelState, useSessions, SessionListItem, useDeleteSession, useEndSession, useCreateSession, useSession, getSessionView, SubshellContentContainer, collectResourceFilterFacets, SemanticIcon, useSystemsViewState, aggregateSystemMetrics, useSystemHealth, ORGANIZATION_GRAPH_NODE_KIND_ORDER, formatResourceAttribution, SYSTEM_RESOURCE_KINDS, ORGANIZATION_GRAPH_NODE_KIND_LABELS, ORGANIZATION_GRAPH_EDGE_KIND_LABELS, ORGANIZATION_GRAPH_NODE_KIND_DETAIL_LABELS, ORGANIZATION_GRAPH_NODE_KIND_MEANINGS, ORGANIZATION_GRAPH_EDGE_KIND_MEANINGS } from './chunk-6JN2TLV2.js';
+import { showApiErrorNotification, showSuccessNotification } from './chunk-HYQOGRWG.js';
 import { topbarHeight } from './chunk-MISHPEJX.js';
 import { CardHeader } from './chunk-62GVNH5U.js';
 import { useInitialization } from './chunk-P45GQ3ZW.js';
-import { mergeSessionMessages } from './chunk-M7WWRZ5Z.js';
 import { StyledMarkdown } from './chunk-3KMDHCAR.js';
 import { getResourceStatusColor, useMergedExecution, useTimelineData, useAgentIterationData } from './chunk-BLXJEIQS.js';
 import { useOrganization } from './chunk-DD3CCMCZ.js';
-import { getErrorInfo, formatErrorMessage, getResourceIcon, formatRelativeTime, PAGE_SIZE_DEFAULT, listAllSystems, getSystem, compileOrganizationOntology, getSystemAncestors } from './chunk-IBCEAVB2.js';
+import { getErrorInfo, formatErrorMessage, getResourceIcon, formatRelativeTime, PAGE_SIZE_DEFAULT, listAllSystems, getSystem, compileOrganizationOntology, getSystemAncestors } from './chunk-R5UGIFYU.js';
 import { ResourceStatusColors, toWorkflowLogMessages } from './chunk-6SSQGWK7.js';
 import { useElevasisServices } from './chunk-BI5VDO2K.js';
 import { useRouterContext } from './chunk-Q7DJKLEN.js';
@@ -10759,6 +10761,110 @@ function ResourcesSection({ resources }) {
     ] }, resource.id)) })
   ] }) });
 }
+function buildAdoptionRows(model, systems) {
+  const { resolvedSystems, shellModel, shellRuntime } = systems;
+  return listAllSystems(model).map(({ path, system }) => {
+    const navSurface = findNavigationSurfaceForSystem(model, path, system.id);
+    const module = resolvedSystems.find(
+      (candidate) => candidate.systemId === path || candidate.systemId === system.id
+    );
+    const shellPath = shellModel.findById(path)?.path;
+    const routeMounted = shellPath !== void 0 && shellRuntime.resolveRoute(shellPath).status === "matched";
+    const unlinkedManifest = module === void 0 && shellPath !== void 0 ? resolvedSystems.filter((candidate) => candidate.systemId === void 0).flatMap(
+      (candidate) => (candidate.routePrefixes ?? []).filter((prefix) => shellPath === prefix || shellPath.startsWith(`${prefix}/`)).map((prefix) => ({ key: candidate.key, prefix }))
+    ).sort((a, b) => b.prefix.length - a.prefix.length)[0] : void 0;
+    return {
+      path,
+      system,
+      lifecycle: system.lifecycle ?? "active",
+      navSurfaceLabel: navSurface?.label,
+      routeMounted,
+      manifestMounted: module !== void 0,
+      unlinkedManifestKey: unlinkedManifest?.key,
+      apiReadiness: getSystemApiInterfaceReadiness(model, path)
+    };
+  }).sort((a, b) => a.path.localeCompare(b.path));
+}
+function adoptionGaps(row) {
+  const gaps = [];
+  if (row.lifecycle !== "active") {
+    gaps.push(`Lifecycle is "${row.lifecycle}" -- flip to "active" in systems.ts to make it reachable.`);
+  }
+  if (!row.navSurfaceLabel) {
+    gaps.push("No navigation.sidebar surface targets this System -- reachable only by typing the URL.");
+  }
+  if (!row.routeMounted) {
+    gaps.push("No mounted route currently resolves this System\u2019s path.");
+  }
+  if (!row.manifestMounted) {
+    gaps.push(
+      row.unlinkedManifestKey ? `The "${row.unlinkedManifestKey}" manifest owns this route but declares no systemId, so the shell never links it to this System.` : "Not present in the shell\u2019s SYSTEM_MANIFESTS."
+    );
+  }
+  if (row.apiReadiness.declared && !row.apiReadiness.ready) {
+    gaps.push(row.apiReadiness.reason ?? "Declared apiInterface is not ready.");
+  }
+  return gaps;
+}
+function AdoptionBooleanBadge({ ok, okLabel, missingLabel }) {
+  if (ok) {
+    return /* @__PURE__ */ jsx(Badge, { color: "green", variant: "light", leftSection: /* @__PURE__ */ jsx(IconCheck, { size: 12 }), children: okLabel });
+  }
+  return /* @__PURE__ */ jsx(Badge, { color: "red", variant: "light", leftSection: /* @__PURE__ */ jsx(IconX, { size: 12 }), children: missingLabel });
+}
+function SystemAdoptionReport({ model, onNavigate }) {
+  const systems = useElevasisSystems();
+  const rows = buildAdoptionRows(model, systems);
+  if (rows.length === 0) {
+    return /* @__PURE__ */ jsx(
+      EmptyState,
+      {
+        icon: IconRoute,
+        title: "No declared Systems",
+        description: "Declare a System in systems.ts to see it here."
+      }
+    );
+  }
+  return /* @__PURE__ */ jsx(Paper, { withBorder: true, p: "md", radius: "md", children: /* @__PURE__ */ jsxs(Stack, { gap: "sm", children: [
+    /* @__PURE__ */ jsxs(Stack, { gap: 4, children: [
+      /* @__PURE__ */ jsx(Title, { order: 2, size: "h5", children: "Adoption Report" }),
+      /* @__PURE__ */ jsx(Text, { size: "sm", c: "dimmed", children: "Every System declared in the organization model, with its lifecycle, navigation surface, mounted route, manifest, and API Interface readiness. Missing wiring is called out in plain language." })
+    ] }),
+    /* @__PURE__ */ jsx(Card, { withBorder: true, padding: 0, radius: "sm", children: /* @__PURE__ */ jsxs(Table, { verticalSpacing: "xs", horizontalSpacing: "md", children: [
+      /* @__PURE__ */ jsx(Table.Thead, { children: /* @__PURE__ */ jsxs(Table.Tr, { children: [
+        /* @__PURE__ */ jsx(Table.Th, { children: "System" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "Lifecycle" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "Nav surface" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "Route" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "Manifest" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "API readiness" }),
+        /* @__PURE__ */ jsx(Table.Th, { children: "What's missing" })
+      ] }) }),
+      /* @__PURE__ */ jsx(Table.Tbody, { children: rows.map((row) => {
+        const gaps = adoptionGaps(row);
+        return /* @__PURE__ */ jsxs(Table.Tr, { children: [
+          /* @__PURE__ */ jsxs(Table.Td, { children: [
+            /* @__PURE__ */ jsx(Anchor, { size: "sm", component: "button", onClick: () => onNavigate(row.path), children: row.system.label ?? row.system.id }),
+            /* @__PURE__ */ jsx(Text, { size: "xs", c: "dimmed", children: row.path })
+          ] }),
+          /* @__PURE__ */ jsx(Table.Td, { children: /* @__PURE__ */ jsx(Badge, { variant: "light", color: row.lifecycle === "active" ? "green" : "gray", children: row.lifecycle }) }),
+          /* @__PURE__ */ jsx(Table.Td, { children: /* @__PURE__ */ jsx(
+            AdoptionBooleanBadge,
+            {
+              ok: row.navSurfaceLabel !== void 0,
+              okLabel: row.navSurfaceLabel ?? "present",
+              missingLabel: "none"
+            }
+          ) }),
+          /* @__PURE__ */ jsx(Table.Td, { children: /* @__PURE__ */ jsx(AdoptionBooleanBadge, { ok: row.routeMounted, okLabel: "mounted", missingLabel: "none" }) }),
+          /* @__PURE__ */ jsx(Table.Td, { children: /* @__PURE__ */ jsx(AdoptionBooleanBadge, { ok: row.manifestMounted, okLabel: "mounted", missingLabel: "none" }) }),
+          /* @__PURE__ */ jsx(Table.Td, { children: row.apiReadiness.declared ? /* @__PURE__ */ jsx(AdoptionBooleanBadge, { ok: row.apiReadiness.ready, okLabel: "ready", missingLabel: "not ready" }) : /* @__PURE__ */ jsx(Badge, { variant: "light", color: "gray", children: "not declared" }) }),
+          /* @__PURE__ */ jsx(Table.Td, { children: gaps.length === 0 ? /* @__PURE__ */ jsx(Text, { size: "sm", c: "dimmed", children: "Fully wired." }) : /* @__PURE__ */ jsx(Stack, { gap: 2, children: gaps.map((gap, index) => /* @__PURE__ */ jsx(Text, { size: "xs", children: gap }, index)) }) })
+        ] }, row.path);
+      }) })
+    ] }) })
+  ] }) });
+}
 function SystemsIndex({ model, onNavigate }) {
   const searchQuery = useSystemsViewState((state) => state.searchQuery);
   const statusFilter = useSystemsViewState((state) => state.statusFilter);
@@ -10799,6 +10905,7 @@ function SystemsIndex({ model, onNavigate }) {
         /* @__PURE__ */ jsx(MetricCard2, { label: "Health", value: "--", detail: "System endpoint pending" })
       ] })
     ] }) }),
+    /* @__PURE__ */ jsx(SystemAdoptionReport, { model, onNavigate }),
     entries.length > 0 ? /* @__PURE__ */ jsx(SimpleGrid, { cols: 1, spacing: "md", children: entries.map((entry) => /* @__PURE__ */ jsx(SystemSummaryPaper, { entry, rollupMode, onNavigate }, entry.path)) }) : /* @__PURE__ */ jsx(
       EmptyState,
       {

package/dist/chunk-3LOKYZJC.js

@@ -0,0 +1,231 @@
+import { useNotificationAdapter } from './chunk-6JN2TLV2.js';
+import { useElevasisServices } from './chunk-BI5VDO2K.js';
+import { CredentialNameSchema, UuidSchema } from './chunk-TVTSASST.js';
+import { z } from 'zod';
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
+import { notifications } from '@mantine/notifications';
+
+var CredentialTypeSchema = z.enum([
+  "oauth",
+  "api-key",
+  "webhook-secret",
+  "api-key-secret",
+  "clickup",
+  "instagram"
+]);
+var CredentialValueSchema = z.record(z.string(), z.unknown()).refine((val) => Object.keys(val).length > 0, { message: "Credential value must not be empty" }).refine((val) => Object.keys(val).length <= 50, { message: "Credential value has too many keys (max 50)" }).refine(
+  (val) => {
+    for (const v of Object.values(val)) {
+      if (typeof v === "string" && v.length > 10240) {
+        return false;
+      }
+    }
+    return true;
+  },
+  { message: "Individual credential values too large (max 10KB per string)" }
+);
+var CreateCredentialRequestSchema = z.object({
+  name: CredentialNameSchema,
+  type: CredentialTypeSchema,
+  value: CredentialValueSchema,
+  provider: z.string().optional()
+  // OAuth provider ID ('dropbox', 'notion', 'google-sheets')
+}).strict();
+var CreateCredentialResponseSchema = z.object({
+  id: UuidSchema,
+  name: z.string()
+});
+var ListCredentialsResponseSchema = z.object({
+  credentials: z.array(
+    z.object({
+      id: UuidSchema,
+      name: z.string(),
+      type: z.string(),
+      provider: z.string().nullable(),
+      // OAuth provider or null for non-OAuth
+      createdAt: z.string().datetime()
+    })
+  )
+});
+var UpdateCredentialParamsSchema = z.object({
+  credentialId: UuidSchema
+});
+var UpdateCredentialRequestSchema = z.object({
+  value: CredentialValueSchema.optional(),
+  name: CredentialNameSchema.optional()
+}).strict().refine((data) => data.value !== void 0 || data.name !== void 0, {
+  message: "At least one field (value or name) must be provided"
+});
+var DeleteCredentialParamsSchema = z.object({
+  credentialId: UuidSchema
+});
+var VerifyCredentialParamsSchema = z.object({
+  credentialId: UuidSchema
+});
+var VerifyCredentialResponseSchema = z.object({
+  ok: z.boolean(),
+  provider: z.string(),
+  checkedAt: z.string().datetime(),
+  message: z.string().optional(),
+  details: z.record(z.string(), z.unknown()).optional()
+});
+var CredentialSchemas = {
+  CreateRequest: CreateCredentialRequestSchema,
+  CreateResponse: CreateCredentialResponseSchema,
+  ListResponse: ListCredentialsResponseSchema,
+  UpdateParams: UpdateCredentialParamsSchema,
+  UpdateRequest: UpdateCredentialRequestSchema,
+  DeleteParams: DeleteCredentialParamsSchema,
+  VerifyParams: VerifyCredentialParamsSchema,
+  VerifyResponse: VerifyCredentialResponseSchema
+};
+
+// src/hooks/settings/credentials/credentialService.ts
+var CredentialService = class {
+  constructor(apiRequest) {
+    this.apiRequest = apiRequest;
+  }
+  /**
+   * List credentials for the current organization
+   * Organization context is provided via workos-organization-id header
+   */
+  async listCredentials() {
+    const response = await this.apiRequest("/credentials");
+    return response.credentials;
+  }
+  /**
+   * Create a new credential
+   * Organization context is provided via workos-organization-id header
+   */
+  async createCredential(data) {
+    const validated = CredentialSchemas.CreateRequest.parse(data);
+    return await this.apiRequest(`/credentials`, {
+      method: "POST",
+      body: JSON.stringify(validated)
+    });
+  }
+  /**
+   * Update a credential value or metadata
+   * Organization context is provided via workos-organization-id header
+   */
+  async updateCredential(credentialId, updates) {
+    CredentialSchemas.UpdateParams.parse({ credentialId });
+    const validated = CredentialSchemas.UpdateRequest.parse(updates);
+    await this.apiRequest(`/credentials/${credentialId}`, {
+      method: "PATCH",
+      body: JSON.stringify(validated)
+    });
+  }
+  /**
+   * Delete a credential
+   * Organization context is provided via workos-organization-id header
+   */
+  async deleteCredential(credentialId) {
+    CredentialSchemas.DeleteParams.parse({ credentialId });
+    await this.apiRequest(`/credentials/${credentialId}`, {
+      method: "DELETE"
+    });
+  }
+  /**
+   * Verify a credential server-side without exposing secret material
+   */
+  async verifyCredential(credentialId) {
+    CredentialSchemas.VerifyParams.parse({ credentialId });
+    const response = await this.apiRequest(`/credentials/${credentialId}/verify`, {
+      method: "POST"
+    });
+    return CredentialSchemas.VerifyResponse.parse(response);
+  }
+};
+function useCredentials() {
+  const { apiRequest, workOSOrganizationId, isReady } = useElevasisServices();
+  return useQuery({
+    queryKey: ["credentials", workOSOrganizationId],
+    queryFn: async () => {
+      const service = new CredentialService(apiRequest);
+      return await service.listCredentials();
+    },
+    enabled: isReady && Boolean(workOSOrganizationId),
+    retry: false
+  });
+}
+function useVerifyCredential() {
+  const { apiRequest } = useElevasisServices();
+  return useMutation({
+    mutationFn: async (credentialId) => {
+      const service = new CredentialService(apiRequest);
+      return await service.verifyCredential(credentialId);
+    }
+  });
+}
+function useCreateCredential() {
+  const { apiRequest } = useElevasisServices();
+  const adapter = useNotificationAdapter();
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async (data) => {
+      const service = new CredentialService(apiRequest);
+      return await service.createCredential(data);
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["credentials"] });
+      notifications.show({
+        title: "Success",
+        message: "Credential created successfully",
+        color: "green"
+      });
+    },
+    onError: (error) => {
+      console.error("Failed to create credential:", error);
+      adapter.apiError(error);
+    }
+  });
+}
+function useDeleteCredential() {
+  const { apiRequest } = useElevasisServices();
+  const adapter = useNotificationAdapter();
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async (credentialId) => {
+      const service = new CredentialService(apiRequest);
+      return await service.deleteCredential(credentialId);
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["credentials"] });
+      notifications.show({
+        title: "Success",
+        message: "Credential deleted successfully",
+        color: "green"
+      });
+    },
+    onError: (error) => {
+      console.error("Failed to delete credential:", error);
+      adapter.apiError(error);
+    }
+  });
+}
+function useUpdateCredential() {
+  const { apiRequest } = useElevasisServices();
+  const adapter = useNotificationAdapter();
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async ({ credentialId, updates }) => {
+      const service = new CredentialService(apiRequest);
+      return await service.updateCredential(credentialId, updates);
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["credentials"] });
+      notifications.show({
+        title: "Success",
+        message: "Credential updated successfully",
+        color: "green"
+      });
+    },
+    onError: (error) => {
+      console.error("Failed to update credential:", error);
+      adapter.apiError(error);
+    }
+  });
+}
+
+export { CredentialSchemas, CredentialService, useCreateCredential, useCredentials, useDeleteCredential, useUpdateCredential, useVerifyCredential };