@lucern/contracts 0.3.0-alpha.10 → 0.3.0-alpha.11

package/dist/generated/schema-manifest.json

@@ -1,16 +1,16 @@
 {
   "generatedFrom": "packages/contracts/src/schemas/manifest.ts",
   "counts": {
-    "total": 112,
+    "total": 131,
     "byComponent": {
       "kernel": 55,
-      "identity": 24,
-      "mc": 33,
+      "control-plane": 38,
+      "mc": 38,
       "developer-pack": 0
     },
     "byLayer": {
-      "L": 33,
-      "I": 24,
+      "L": 38,
+      "C": 38,
       "K": 55,
       "D": 0,
       "A": 0
@@ -113,8 +113,8 @@
     },
     {
       "name": "agents",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "agent",
       "indices": [
         {
@@ -918,6 +918,62 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "controlPlaneTenantProxyTokenLeases",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_leaseId",
+          "columns": [
+            "leaseId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_proxyTokenId",
+          "columns": [
+            "proxyTokenId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_sessionId",
+          "columns": [
+            "sessionId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_expiresAt",
+          "columns": [
+            "status",
+            "expiresAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "controlPlaneToolAcls",
       "component": "mc",
@@ -1353,6 +1409,61 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "deploymentHosts",
+      "component": "mc",
+      "layer": "L",
+      "category": "workspace",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_host",
+          "columns": [
+            "host"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_environment",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "environment"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "epistemicAudit",
       "component": "kernel",
@@ -2326,8 +2437,8 @@
     },
     {
       "name": "mcpWritePolicy",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -2384,6 +2495,15 @@
             "tenantId"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_principal_tenant_workspace",
+          "columns": [
+            "principalId",
+            "tenantId",
+            "workspaceId"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_workspace_principal",
@@ -2437,8 +2557,8 @@
     },
     {
       "name": "modelCallLogs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2475,8 +2595,8 @@
     },
     {
       "name": "modelFunctionSlots",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2506,8 +2626,8 @@
     },
     {
       "name": "modelRegistry",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2537,8 +2657,8 @@
     },
     {
       "name": "modelSlotConfigs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -3048,57 +3168,47 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRunPolicyDecisions",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitAccessReviewItems",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_decisionId",
+          "name": "by_reviewKey",
           "columns": [
-            "decisionId"
+            "reviewKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_tenant_reviewKey",
           "columns": [
-            "runId",
-            "createdAt"
+            "tenantId",
+            "reviewKey"
           ]
-        }
-      ],
-      "deprecated": null,
-      "invariants": []
-    },
-    {
-      "name": "platformAgentRunPromptResolutions",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
-      "indices": [
+        },
         {
           "kind": "index",
-          "name": "by_promptResolutionId",
+          "name": "by_tenant_itemKey",
           "columns": [
-            "promptResolutionId"
+            "tenantId",
+            "itemKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_subject",
           "columns": [
-            "runId",
-            "createdAt"
+            "subjectType",
+            "subjectId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_prompt_createdAt",
+          "name": "by_status",
           "columns": [
-            "promptName",
-            "createdAt"
+            "status"
           ]
         }
       ],
@@ -3106,71 +3216,57 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRuns",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitAccessReviews",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_runId",
-          "columns": [
-            "runId"
-          ]
-        },
-        {
-          "kind": "index",
-          "name": "by_status_lastHeartbeatAt",
-          "columns": [
-            "status",
-            "lastHeartbeatAt"
-          ]
-        },
-        {
-          "kind": "index",
-          "name": "by_status_startedAt",
+          "name": "by_tenant_status",
           "columns": [
-            "status",
-            "startedAt"
+            "tenantId",
+            "status"
           ]
         },
         {
           "kind": "index",
-          "name": "by_tenant_status",
+          "name": "by_tenant_reviewKey",
           "columns": [
             "tenantId",
-            "status"
+            "reviewKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_workspace_status",
+          "name": "by_subject",
           "columns": [
-            "workspaceId",
-            "status"
+            "subjectType",
+            "subjectId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_principal_createdAt",
+          "name": "by_tenant_subject",
           "columns": [
-            "principalId",
-            "createdAt"
+            "tenantId",
+            "subjectType",
+            "subjectId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_agentDefinition_createdAt",
+          "name": "by_outcome",
           "columns": [
-            "agentDefinitionId",
-            "createdAt"
+            "outcome"
           ]
         },
         {
           "kind": "index",
-          "name": "by_topicId",
+          "name": "by_workspace_status",
           "columns": [
-            "topicId"
+            "workspaceId",
+            "status"
           ]
         }
       ],
@@ -3178,32 +3274,44 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRunToolCalls",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitAttributeBindings",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_toolCallId",
+          "name": "by_tenant_target",
           "columns": [
-            "toolCallId"
+            "tenantId",
+            "targetType",
+            "targetId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_tenant_target_attribute",
           "columns": [
-            "runId",
-            "createdAt"
+            "tenantId",
+            "targetType",
+            "targetId",
+            "attributeName"
           ]
         },
         {
           "kind": "index",
-          "name": "by_tool_createdAt",
+          "name": "by_tenant_name",
           "columns": [
-            "toolName",
-            "createdAt"
+            "tenantId",
+            "attributeName"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
           ]
         }
       ],
@@ -3211,10 +3319,10 @@
       "invariants": []
     },
     {
-      "name": "platformAudienceGrants",
-      "component": "identity",
-      "layer": "I",
-      "category": "platform",
+      "name": "permitGroupMemberships",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
@@ -3226,45 +3334,65 @@
         },
         {
           "kind": "index",
-          "name": "by_tenant_group",
+          "name": "by_tenant_member",
+          "columns": [
+            "tenantId",
+            "memberType",
+            "memberId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_member_group",
           "columns": [
             "tenantId",
+            "memberType",
+            "memberId",
             "groupId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_tenant_audienceKey",
+          "name": "by_tenant_group",
           "columns": [
             "tenantId",
-            "audienceKey"
+            "groupId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_principal_status",
+          "name": "by_member_group",
           "columns": [
-            "principalId",
-            "status"
+            "memberType",
+            "memberId",
+            "groupId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_group_status",
+          "name": "by_tenant_status",
           "columns": [
-            "groupId",
+            "tenantId",
             "status"
           ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_principal",
+          "columns": [
+            "workspaceId",
+            "principalId"
+          ]
         }
       ],
       "deprecated": null,
       "invariants": []
     },
     {
-      "name": "platformAudiences",
-      "component": "identity",
-      "layer": "I",
-      "category": "platform",
+      "name": "permitGroups",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
@@ -3282,19 +3410,18 @@
         },
         {
           "kind": "index",
-          "name": "by_tenant_audienceKey",
+          "name": "by_tenant_groupId",
           "columns": [
             "tenantId",
-            "audienceKey"
+            "groupId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_tenant_workspace_audienceKey",
+          "name": "by_tenant_groupKey",
           "columns": [
             "tenantId",
-            "workspaceId",
-            "audienceKey"
+            "groupKey"
           ]
         },
         {
@@ -3310,14 +3437,737 @@
       "invariants": []
     },
     {
-      "name": "platformHarnessShadowAudit",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitPolicyBundles",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_shadowAuditId",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_bundleKey",
+          "columns": [
+            "tenantId",
+            "bundleKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_bundle_version",
+          "columns": [
+            "tenantId",
+            "bundleKey",
+            "version"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPolicyDecisionReceipts",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_principal_createdAt",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_createdAt",
+          "columns": [
+            "tenantId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_resource",
+          "columns": [
+            "resourceType",
+            "resourceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_decision_createdAt",
+          "columns": [
+            "decision",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_traceId",
+          "columns": [
+            "traceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_action",
+          "columns": [
+            "action"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPrincipalAliases",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_subject",
+          "columns": [
+            "tenantId",
+            "provider",
+            "providerSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_alias",
+          "columns": [
+            "tenantId",
+            "provider",
+            "alias"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_alias",
+          "columns": [
+            "tenantId",
+            "alias"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_status",
+          "columns": [
+            "tenantId",
+            "provider",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPrincipals",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_principalId",
+          "columns": [
+            "tenantId",
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_principalType_status",
+          "columns": [
+            "tenantId",
+            "principalType",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitProjectionOutbox",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_objectType",
+          "columns": [
+            "objectType",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitRelationshipTuples",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_subject",
+          "columns": [
+            "tenantId",
+            "subject"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_object",
+          "columns": [
+            "tenantId",
+            "object"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_relation",
+          "columns": [
+            "tenantId",
+            "relation"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_relation_subject",
+          "columns": [
+            "tenantId",
+            "relation",
+            "subject"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitResourceInstances",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_resource_type",
+          "columns": [
+            "tenantId",
+            "resourceType"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_resource_key",
+          "columns": [
+            "tenantId",
+            "resourceType",
+            "resourceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_ownerPrincipalId",
+          "columns": [
+            "ownerPrincipalId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitRoleAssignments",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_target",
+          "columns": [
+            "tenantId",
+            "targetType",
+            "targetId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_resource",
+          "columns": [
+            "tenantId",
+            "resourceType",
+            "resourceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_role",
+          "columns": [
+            "tenantId",
+            "role",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_resource",
+          "columns": [
+            "workspaceId",
+            "resourceType",
+            "resourceKey"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitSyncStates",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunPolicyDecisions",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_decisionId",
+          "columns": [
+            "decisionId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunPromptResolutions",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_promptResolutionId",
+          "columns": [
+            "promptResolutionId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_prompt_createdAt",
+          "columns": [
+            "promptName",
+            "createdAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRuns",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_runId",
+          "columns": [
+            "runId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_lastHeartbeatAt",
+          "columns": [
+            "status",
+            "lastHeartbeatAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_startedAt",
+          "columns": [
+            "status",
+            "startedAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_createdAt",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_agentDefinition_createdAt",
+          "columns": [
+            "agentDefinitionId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_topicId",
+          "columns": [
+            "topicId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunToolCalls",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_toolCallId",
+          "columns": [
+            "toolCallId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tool_createdAt",
+          "columns": [
+            "toolName",
+            "createdAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAudienceGrants",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_principal",
+          "columns": [
+            "tenantId",
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_group",
+          "columns": [
+            "tenantId",
+            "groupId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_audienceKey",
+          "columns": [
+            "tenantId",
+            "audienceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_group_status",
+          "columns": [
+            "groupId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAudiences",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_audienceKey",
+          "columns": [
+            "tenantId",
+            "audienceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_audienceKey",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "audienceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformHarnessShadowAudit",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_shadowAuditId",
           "columns": [
             "shadowAuditId"
           ]
@@ -3350,8 +4200,8 @@
     },
     {
       "name": "platformPolicyDecisionLogs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -3575,6 +4425,66 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "principalIdentityAliases",
+      "component": "mc",
+      "layer": "L",
+      "category": "identity",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_provider_subject",
+          "columns": [
+            "provider",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_provider_project_subject",
+          "columns": [
+            "provider",
+            "providerProjectId",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_subject",
+          "columns": [
+            "tenantId",
+            "provider",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_provider_subject",
+          "columns": [
+            "workspaceId",
+            "provider",
+            "externalSubjectId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "principals",
       "component": "mc",
@@ -3622,8 +4532,8 @@
     },
     {
       "name": "projectGrants",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "project",
       "indices": [
         {
@@ -3825,8 +4735,8 @@
     },
     {
       "name": "reasoningPermissions",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "epistemic",
       "indices": [
         {
@@ -3940,6 +4850,45 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "secretSyncDriftReports",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_reportId",
+          "columns": [
+            "reportId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_reportHash",
+          "columns": [
+            "reportHash"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_generatedAt",
+          "columns": [
+            "generatedAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_generatedAt",
+          "columns": [
+            "status",
+            "generatedAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "servicePrincipalKeys",
       "component": "mc",
@@ -4196,8 +5145,8 @@
     },
     {
       "name": "tenantApiKeys",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4235,8 +5184,8 @@
     },
     {
       "name": "tenantConfig",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4270,6 +5219,13 @@
             "tenantId"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_tenant_target",
@@ -4297,6 +5253,17 @@
             "status"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_target_environment_status",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "target",
+            "environment",
+            "status"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_status",
@@ -4310,8 +5277,8 @@
     },
     {
       "name": "tenantIntegrations",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4367,8 +5334,8 @@
     },
     {
       "name": "tenantModelSlotBindings",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4420,10 +5387,58 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "tenantPermitSyncStates",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "tenantPolicies",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4454,8 +5469,8 @@
     },
     {
       "name": "tenantProviderSecrets",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4502,8 +5517,8 @@
     },
     {
       "name": "tenantProxyGatewayUsage",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4544,8 +5559,8 @@
     },
     {
       "name": "tenantProxyTokenMints",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4608,8 +5623,8 @@
     },
     {
       "name": "tenantSandboxAuditEvents",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4641,8 +5656,8 @@
     },
     {
       "name": "tenantSecrets",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4673,8 +5688,8 @@
     },
     {
       "name": "toolAcls",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4750,8 +5765,8 @@
     },
     {
       "name": "toolRegistry",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4932,8 +5947,8 @@
     },
     {
       "name": "users",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "user",
       "indices": [
         {