@lucern/contracts 0.3.0-alpha.17 → 0.3.0-alpha.3

package/dist/generated/convexSchemas.js

@@ -24,12 +24,11 @@ var KERNEL_SCHEMA_TABLES = {
   "decisionSnapshots": defineTable(v.object({ "anonymizationClass": v.optional(v.union(v.literal("none"), v.literal("standard"), v.literal("strict"))), "audienceLabel": v.optional(v.string()), "createdAt": v.number(), "decisionEventId": v.id("decisionEvents"), "exportClass": v.optional(v.union(v.literal("public_safe"), v.literal("client_safe"), v.literal("internal_only"))), "lineageParentDecisionEventId": v.optional(v.id("decisionEvents")), "lineageParentSnapshotId": v.optional(v.id("decisionSnapshots")), "lockedAt": v.number(), "lockedBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "outcome": v.optional(v.union(v.literal("approve"), v.literal("conditional"), v.literal("defer"), v.literal("reject"), v.literal("reopen_on_trigger"))), "ownerPrincipalId": v.optional(v.string()), "payload": v.record(v.string(), v.any()), "payloadHash": v.string(), "policyTags": v.optional(v.array(v.string())), "policyTraceId": v.optional(v.string()), "sensitivityTier": v.optional(v.union(v.literal("low"), v.literal("medium"), v.literal("high"))), "snapshotLabel": v.optional(v.string()), "tenantId": v.optional(v.string()), "topicId": v.optional(v.string()), "version": v.number(), "weightingModelVersion": v.string(), "weightingParameters": v.optional(v.record(v.string(), v.any())), "workspaceId": v.optional(v.string()) })).index("by_decisionEventId", ["decisionEventId"]).index("by_topicId", ["topicId"]).index("by_topic_lockedAt", ["topicId", "lockedAt"]).index("by_decision_version", ["decisionEventId", "version"]).index("by_decision_lockedAt", ["decisionEventId", "lockedAt"]).index("by_payloadHash", ["payloadHash"]),
   "deliberationContributions": defineTable(v.object({ "answer": v.string(), "confidence": v.number(), "contradictionHypotheses": v.array(v.string()), "createdAt": v.number(), "escalationQuestions": v.array(v.string()), "modelKey": v.optional(v.string()), "parsedResponse": v.optional(v.any()), "principalId": v.string(), "promptName": v.optional(v.string()), "rawResponse": v.string(), "reasoningChain": v.array(v.string()), "role": v.union(v.literal("support"), v.literal("oppose"), v.literal("uncertain"), v.literal("synthesize")), "sessionId": v.id("deliberationSessions"), "slot": v.string(), "topicId": v.optional(v.string()), "traceId": v.optional(v.string()), "uncertaintyZones": v.array(v.object({ "explanation": v.string(), "label": v.string() })), "updatedAt": v.number() })).index("by_sessionId", ["sessionId"]).index("by_topicId", ["topicId"]).index("by_session_slot", ["sessionId", "slot"]),
   "deliberationSessions": defineTable(v.object({ "completedAt": v.optional(v.number()), "contextBrief": v.optional(v.string()), "contextSnapshot": v.optional(v.any()), "contradictionIds": v.array(v.id("contradictions")), "createdAt": v.number(), "createdBy": v.string(), "error": v.optional(v.string()), "escalationQuestionIds": v.array(v.id("epistemicNodes")), "linkedBeliefNodeId": v.optional(v.id("epistemicNodes")), "modelSlots": v.array(v.string()), "outcomeSummary": v.optional(v.any()), "principalId": v.string(), "question": v.string(), "replayBaseline": v.optional(v.any()), "replayBaselineAt": v.number(), "replayDelta": v.optional(v.any()), "replayHeadAt": v.optional(v.number()), "status": v.union(v.literal("running"), v.literal("completed"), v.literal("failed")), "tenantId": v.optional(v.string()), "topicId": v.optional(v.string()), "traceId": v.optional(v.string()), "uncertaintyZones": v.array(v.object({ "explanation": v.string(), "label": v.string(), "slots": v.array(v.string()) })), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_topicId", ["topicId"]).index("by_status", ["status"]).index("by_topic_status", ["topicId", "status"]).index("by_createdBy", ["createdBy"]),
-  "domainEvents": defineTable(v.object({ "actorId": v.string(), "actorType": v.union(v.literal("human"), v.literal("agent"), v.literal("service")), "correlationId": v.optional(v.string()), "data": v.record(v.string(), v.any()), "eventId": v.string(), "expiresAt": v.number(), "resourceId": v.string(), "resourceType": v.string(), "tenantId": v.optional(v.string()), "timestamp": v.number(), "topicId": v.string(), "type": v.string(), "version": v.string(), "workspaceId": v.optional(v.string()) })).index("by_eventId", ["eventId"]).index("by_topic_timestamp", ["topicId", "timestamp"]).index("by_tenant_workspace_timestamp", ["tenantId", "workspaceId", "timestamp"]).index("by_type_timestamp", ["type", "timestamp"]).index("by_resource", ["resourceType", "resourceId", "timestamp"]).index("by_expiresAt", ["expiresAt"]),
   "epistemicAudit": defineTable(v.object({ "agentType": v.optional(v.string()), "changedAt": v.number(), "changedBy": v.string(), "changeType": v.union(v.literal("created"), v.literal("status_changed"), v.literal("confidence_changed"), v.literal("criticality_changed"), v.literal("formulation_modified"), v.literal("forked"), v.literal("superseded"), v.literal("archived"), v.literal("resolved"), v.literal("severity_changed"), v.literal("edge_added"), v.literal("edge_removed"), v.literal("annotated"), v.literal("blocked"), v.literal("unblocked"), v.literal("decision_finalized"), v.literal("proposal_accepted"), v.literal("proposal_rejected"), v.literal("pillar_changed"), v.literal("updated"), v.literal("deleted"), v.literal("entity_merged"), v.literal("entity_attributes_updated"), v.literal("entity_archived"), v.literal("published"), v.literal("deprecated"), v.literal("source_created"), v.literal("source_metadata_updated")), "entityId": v.string(), "entityType": v.union(v.literal("belief"), v.literal("evidence"), v.literal("question"), v.literal("answer"), v.literal("contradiction"), v.literal("decision"), v.literal("proposal"), v.literal("edge"), v.literal("node"), v.literal("entity"), v.literal("source"), v.literal("belief_conditional"), v.literal("belief_scenario"), v.literal("ontologyDefinition"), v.literal("ontologyVersion")), "isAgent": v.boolean(), "mcpSessionId": v.optional(v.string()), "mcpToolName": v.optional(v.string()), "newState": v.optional(v.union(v.record(v.string(), v.any()), v.null())), "previousState": v.optional(v.union(v.record(v.string(), v.any()), v.null())), "proposalId": v.optional(v.string()), "rationale": v.optional(v.string()), "sourceCommit": v.optional(v.string()), "topicId": v.optional(v.string()), "triggeringAction": v.optional(v.string()) })).index("by_entityId", ["entityId"]).index("by_entityType", ["entityType"]).index("by_entityType_id", ["entityType", "entityId"]).index("by_changedAt", ["changedAt"]).index("by_changedBy", ["changedBy"]).index("by_topicId", ["topicId"]).index("by_changeType", ["changeType"]).index("by_mcpSessionId", ["mcpSessionId"]),
   "epistemicContracts": defineTable(v.object({ "beliefNodeId": v.string(), "compositeOf": v.optional(v.array(v.string())), "compositeOperator": v.optional(v.union(v.literal("all"), v.literal("any"), v.literal("majority"))), "condition": v.object({ "evaluator": v.string(), "evaluatorConfig": v.optional(v.union(v.string(), v.number(), v.boolean(), v.null(), v.record(v.string(), v.any()), v.array(v.any()))), "expression": v.string() }), "conditionType": v.union(v.literal("assertion"), v.literal("temporal"), v.literal("evidential"), v.literal("threshold"), v.literal("composite")), "contractId": v.string(), "createdAt": v.number(), "createdBy": v.string(), "deadline": v.optional(v.number()), "description": v.optional(v.string()), "direction": v.union(v.literal("confirms"), v.literal("falsifies")), "evaluationCount": v.optional(v.number()), "evaluationSchedule": v.union(v.literal("on_demand"), v.literal("on_evidence"), v.literal("periodic"), v.literal("event_driven")), "inheritedAt": v.optional(v.number()), "inheritedFromBeliefNodeId": v.optional(v.string()), "inheritedFromContractId": v.optional(v.string()), "lastEvaluatedAt": v.optional(v.number()), "lineageSource": v.union(v.literal("declared"), v.literal("inherited")), "modulation": v.object({ "onConfirmed": v.object({ "ceiling": v.optional(v.number()), "delta": v.number() }), "onDisconfirmed": v.object({ "delta": v.number(), "floor": v.optional(v.number()) }), "onExpired": v.optional(v.object({ "delta": v.number() })), "onPartial": v.optional(v.object({ "delta": v.number(), "threshold": v.number() })) }), "periodicIntervalMs": v.optional(v.number()), "status": v.union(v.literal("active"), v.literal("satisfied"), v.literal("violated"), v.literal("expired"), v.literal("suspended"), v.literal("archived")), "title": v.string(), "topicId": v.optional(v.string()), "updatedAt": v.number() })).index("by_contractId", ["contractId"]).index("by_belief", ["beliefNodeId"]).index("by_status", ["status"]).index("by_evaluator", ["condition.evaluator"]).index("by_topic", ["topicId"]).index("by_schedule", ["evaluationSchedule"]),
-  "epistemicEdges": defineTable(v.object({ "analogyBasis": v.optional(v.string()), "analogyStrength": v.optional(v.number()), "anonymizationClass": v.optional(v.union(v.literal("none"), v.literal("standard"), v.literal("strict"))), "audienceLabel": v.optional(v.string()), "blocking": v.optional(v.boolean()), "causal": v.optional(v.boolean()), "conditionalA": v.optional(v.object({ "a": v.number(), "b": v.number(), "d": v.number(), "u": v.number() })), "conditionalNotA": v.optional(v.object({ "a": v.number(), "b": v.number(), "d": v.number(), "u": v.number() })), "confidence": v.optional(v.number()), "constraint": v.optional(v.string()), "containment": v.optional(v.string()), "context": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.string(), "defeatType": v.optional(v.union(v.literal("rebuts"), v.literal("undercuts"), v.literal("undermines"))), "derivation": v.optional(v.string()), "derivationType": v.optional(v.string()), "disanalogies": v.optional(v.array(v.string())), "domainNamespace": v.optional(v.string()), "edgeTier": v.optional(v.string()), "edgeType": v.union(v.literal("supports"), v.literal("informs"), v.literal("depends_on"), v.literal("derived_from"), v.literal("contains"), v.literal("tests"), v.literal("supersedes"), v.literal("responds_to"), v.literal("belongs_to"), v.literal("relates_to_thesis"), v.literal("works_at"), v.literal("invested_in"), v.literal("competes_with"), v.literal("participates_in"), v.literal("founded_by"), v.literal("evaluates"), v.literal("performs"), v.literal("function_in"), v.literal("impacts"), v.literal("raised_from"), v.literal("mentioned_in"), v.literal("perspective_on"), v.literal("plays_theme"), v.literal("answers"), v.literal("explores"), v.literal("qualifies"), v.literal("based_on"), v.literal("based_on_belief"), v.literal("based_on_question"), v.literal("blocked_by_contradiction"), v.literal("informed_by_theme"), v.literal("same_as"), v.literal("reinforces"), v.literal("parent_of"), v.literal("child_of"), v.literal("falsified_by"), v.literal("exclusive_with"), v.literal("collapses_if"), v.literal("cascade_from"), v.literal("counterfactual_of"), v.literal("cascade_to"), v.literal("mutually_exclusive"), v.literal("correlates_with"), v.literal("amplifies"), v.literal("precondition_for"), v.literal("in_tension_with"), v.literal("strengthened_by"), v.literal("weakened_by"), v.literal("alternative_to"), v.literal("subsumes"), v.literal("validated_by"), v.literal("required_for"), v.literal("blocks"), v.literal("prerequisite_for"), v.literal("parallel_to"), v.literal("corroborates"), v.literal("extends"), v.literal("same_source_as"), v.literal("same_theme_as"), v.literal("assumes"), v.literal("would_predict"), v.literal("analogous_to"), v.literal("independent_of"), v.literal("implements"), v.literal("violates"), v.literal("co_changes_with"), v.literal("migrating_from"), v.literal("migrating_to"), v.literal("scoped_by"), v.literal("about_entity"), v.literal("entity_referenced_in"), v.literal("contradicts"), v.literal("cites"), v.literal("summarizes"), v.literal("related_to"), v.literal("partially_answers"), v.literal("refines"), v.literal("branches_from"), v.literal("extracted_from")), "endDate": v.optional(v.number()), "evidence": v.optional(v.string()), "exportClass": v.optional(v.union(v.literal("internal_only"), v.literal("client_safe"), v.literal("public_safe"), v.literal("restricted"))), "fromLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "fromNodeId": v.string(), "fromNodeType": v.optional(v.string()), "globalId": v.string(), "implicit": v.optional(v.boolean()), "interrogation": v.optional(v.string()), "keywords": v.optional(v.array(v.string())), "logicalRole": v.optional(v.union(v.literal("necessary"), v.literal("sufficient"), v.literal("necessary_sufficient"), v.literal("contributory"), v.literal("corroborative"))), "metadata": v.optional(v.record(v.string(), v.any())), "normalization": v.optional(v.string()), "ownerPrincipalId": v.optional(v.string()), "policyTags": v.optional(v.array(v.string())), "predictionFulfilled": v.optional(v.boolean()), "predictionFulfilledAt": v.optional(v.number()), "predictionFulfilledBy": v.optional(v.string()), "projectId": v.optional(v.string()), "propagation": v.optional(v.string()), "reasoningMethod": v.optional(v.union(v.literal("deductive"), v.literal("inductive"), v.literal("abductive"), v.literal("analogical"), v.literal("causal"), v.literal("correlational"), v.literal("testimonial"), v.literal("statistical"), v.literal("implicit"), v.literal("pattern_match"))), "sensitivityTier": v.optional(v.union(v.literal("low"), v.literal("medium"), v.literal("high"), v.literal("restricted"))), "sourceGlobalId": v.optional(v.string()), "startDate": v.optional(v.number()), "surpriseScore": v.optional(v.number()), "targetGlobalId": v.optional(v.string()), "temporalClass": v.optional(v.union(v.literal("structural"), v.literal("cyclical"), v.literal("transient"), v.literal("point_in_time"))), "tenantId": v.optional(v.string()), "toLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "toNodeId": v.optional(v.string()), "toNodeType": v.optional(v.string()), "topicId": v.optional(v.string()), "updatedAt": v.optional(v.number()), "validFrom": v.optional(v.number()), "validUntil": v.optional(v.number()), "weight": v.optional(v.number()), "workspaceId": v.optional(v.string()) })).index("by_globalId", ["globalId"]).index("by_from", ["fromNodeId"]).index("by_to", ["toNodeId"]).index("by_from_type", ["fromNodeId", "edgeType"]).index("by_to_type", ["toNodeId", "edgeType"]).index("by_topic", ["topicId"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace", ["tenantId", "workspaceId"]).index("by_audienceLabel", ["audienceLabel"]).index("by_sensitivityTier", ["sensitivityTier"]).index("by_exportClass", ["exportClass"]).index("by_type", ["edgeType"]).index("by_from_to", ["fromNodeId", "toNodeId"]).index("by_fromLayer", ["fromLayer"]).index("by_toLayer", ["toLayer"]).index("by_layer_pair", ["fromLayer", "toLayer"]).index("by_source_global_id", ["sourceGlobalId"]).index("by_target_global_id", ["targetGlobalId"]).index("by_reasoning_method", ["edgeType", "reasoningMethod"]).index("by_logical_role", ["edgeType", "logicalRole"]).index("by_temporal_class", ["temporalClass", "validUntil"]).index("by_surprise", ["edgeType", "surpriseScore"]),
+  "epistemicEdges": defineTable(v.object({ "analogyBasis": v.optional(v.string()), "analogyStrength": v.optional(v.number()), "anonymizationClass": v.optional(v.union(v.literal("none"), v.literal("standard"), v.literal("strict"))), "audienceLabel": v.optional(v.string()), "blocking": v.optional(v.boolean()), "causal": v.optional(v.boolean()), "conditionalA": v.optional(v.object({ "a": v.number(), "b": v.number(), "d": v.number(), "u": v.number() })), "conditionalNotA": v.optional(v.object({ "a": v.number(), "b": v.number(), "d": v.number(), "u": v.number() })), "confidence": v.optional(v.number()), "constraint": v.optional(v.string()), "containment": v.optional(v.string()), "context": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.string(), "defeatType": v.optional(v.union(v.literal("rebuts"), v.literal("undercuts"), v.literal("undermines"))), "derivation": v.optional(v.string()), "derivationType": v.optional(v.string()), "disanalogies": v.optional(v.array(v.string())), "domainNamespace": v.optional(v.string()), "edgeTier": v.optional(v.string()), "edgeType": v.union(v.literal("supports"), v.literal("informs"), v.literal("depends_on"), v.literal("extracted_from"), v.literal("contains"), v.literal("tests"), v.literal("supersedes"), v.literal("responds_to"), v.literal("belongs_to"), v.literal("relates_to_thesis"), v.literal("works_at"), v.literal("invested_in"), v.literal("competes_with"), v.literal("participates_in"), v.literal("founded_by"), v.literal("evaluates"), v.literal("performs"), v.literal("function_in"), v.literal("impacts"), v.literal("raised_from"), v.literal("mentioned_in"), v.literal("perspective_on"), v.literal("plays_theme"), v.literal("answers"), v.literal("explores"), v.literal("qualifies"), v.literal("based_on"), v.literal("based_on_belief"), v.literal("based_on_question"), v.literal("blocked_by_contradiction"), v.literal("informed_by_theme"), v.literal("same_as"), v.literal("reinforces"), v.literal("parent_of"), v.literal("child_of"), v.literal("falsified_by"), v.literal("exclusive_with"), v.literal("collapses_if"), v.literal("cascade_from"), v.literal("counterfactual_of"), v.literal("cascade_to"), v.literal("mutually_exclusive"), v.literal("correlates_with"), v.literal("amplifies"), v.literal("precondition_for"), v.literal("in_tension_with"), v.literal("strengthened_by"), v.literal("weakened_by"), v.literal("alternative_to"), v.literal("subsumes"), v.literal("validated_by"), v.literal("required_for"), v.literal("blocks"), v.literal("prerequisite_for"), v.literal("parallel_to"), v.literal("corroborates"), v.literal("extends"), v.literal("same_source_as"), v.literal("same_theme_as"), v.literal("assumes"), v.literal("would_predict"), v.literal("analogous_to"), v.literal("independent_of"), v.literal("implements"), v.literal("violates"), v.literal("co_changes_with"), v.literal("migrating_from"), v.literal("migrating_to"), v.literal("scoped_by"), v.literal("about_entity"), v.literal("entity_referenced_in"), v.literal("contradicts"), v.literal("cites"), v.literal("summarizes"), v.literal("related_to"), v.literal("partially_answers"), v.literal("refines"), v.literal("branches_from")), "endDate": v.optional(v.number()), "evidence": v.optional(v.string()), "exportClass": v.optional(v.union(v.literal("internal_only"), v.literal("client_safe"), v.literal("public_safe"), v.literal("restricted"))), "fromLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "fromNodeId": v.string(), "fromNodeType": v.optional(v.string()), "globalId": v.string(), "implicit": v.optional(v.boolean()), "interrogation": v.optional(v.string()), "keywords": v.optional(v.array(v.string())), "logicalRole": v.optional(v.union(v.literal("necessary"), v.literal("sufficient"), v.literal("necessary_sufficient"), v.literal("contributory"), v.literal("corroborative"))), "metadata": v.optional(v.record(v.string(), v.any())), "normalization": v.optional(v.string()), "ownerPrincipalId": v.optional(v.string()), "policyTags": v.optional(v.array(v.string())), "predictionFulfilled": v.optional(v.boolean()), "predictionFulfilledAt": v.optional(v.number()), "predictionFulfilledBy": v.optional(v.string()), "projectId": v.optional(v.string()), "propagation": v.optional(v.string()), "reasoningMethod": v.optional(v.union(v.literal("deductive"), v.literal("inductive"), v.literal("abductive"), v.literal("analogical"), v.literal("causal"), v.literal("correlational"), v.literal("testimonial"), v.literal("statistical"), v.literal("implicit"), v.literal("pattern_match"))), "sensitivityTier": v.optional(v.union(v.literal("low"), v.literal("medium"), v.literal("high"), v.literal("restricted"))), "sourceGlobalId": v.optional(v.string()), "startDate": v.optional(v.number()), "surpriseScore": v.optional(v.number()), "targetGlobalId": v.optional(v.string()), "temporalClass": v.optional(v.union(v.literal("structural"), v.literal("cyclical"), v.literal("transient"), v.literal("point_in_time"))), "tenantId": v.optional(v.string()), "toLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "toNodeId": v.optional(v.string()), "toNodeType": v.optional(v.string()), "topicId": v.optional(v.string()), "updatedAt": v.optional(v.number()), "validFrom": v.optional(v.number()), "validUntil": v.optional(v.number()), "weight": v.optional(v.number()), "workspaceId": v.optional(v.string()) })).index("by_globalId", ["globalId"]).index("by_from", ["fromNodeId"]).index("by_to", ["toNodeId"]).index("by_from_type", ["fromNodeId", "edgeType"]).index("by_to_type", ["toNodeId", "edgeType"]).index("by_topic", ["topicId"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace", ["tenantId", "workspaceId"]).index("by_audienceLabel", ["audienceLabel"]).index("by_sensitivityTier", ["sensitivityTier"]).index("by_exportClass", ["exportClass"]).index("by_type", ["edgeType"]).index("by_from_to", ["fromNodeId", "toNodeId"]).index("by_fromLayer", ["fromLayer"]).index("by_toLayer", ["toLayer"]).index("by_layer_pair", ["fromLayer", "toLayer"]).index("by_source_global_id", ["sourceGlobalId"]).index("by_target_global_id", ["targetGlobalId"]).index("by_reasoning_method", ["edgeType", "reasoningMethod"]).index("by_logical_role", ["edgeType", "logicalRole"]).index("by_temporal_class", ["temporalClass", "validUntil"]).index("by_surprise", ["edgeType", "surpriseScore"]),
   "epistemicNodeEmbeddings": defineTable(v.object({ "confidence": v.optional(v.number()), "createdAt": v.number(), "createdBy": v.string(), "embedding": v.array(v.number()), "hasAnswer": v.optional(v.boolean()), "importance": v.optional(v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low"))), "nodeId": v.id("epistemicNodes"), "nodeType": v.union(v.literal("belief"), v.literal("question"), v.literal("evidence"), v.literal("answer"), v.literal("synthesis"), v.literal("theme"), v.literal("source")), "topicId": v.optional(v.string()), "updatedAt": v.optional(v.number()) })).index("by_nodeId", ["nodeId"]).index("by_topicId_type", ["topicId", "nodeType"]).index("by_topicId", ["topicId"]).vectorIndex("by_embedding", { vectorField: "embedding", dimensions: 1024, filterFields: ["nodeType", "createdBy"] }),
-  "epistemicNodes": defineTable(v.object({ "aiProvider": v.optional(v.string()), "anonymizationClass": v.optional(v.union(v.literal("none"), v.literal("standard"), v.literal("strict"))), "answerQuality": v.optional(v.union(v.literal("definitive"), v.literal("strong"), v.literal("moderate"), v.literal("weak"), v.literal("speculative"), v.literal("unanswered"))), "audienceLabel": v.optional(v.string()), "beliefStatus": v.optional(v.union(v.literal("assumption"), v.literal("hypothesis"), v.literal("belief"), v.literal("fact"))), "beliefType": v.optional(v.string()), "canonicalText": v.string(), "confidence": v.optional(v.number()), "consensusConfidence": v.optional(v.number()), "consensusSource": v.optional(v.string()), "consensusView": v.optional(v.union(v.literal("aligned"), v.literal("ahead_of"), v.literal("contrarian"), v.literal("orthogonal"), v.literal("unknown"))), "content": v.optional(v.string()), "contentHash": v.string(), "contentType": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.string(), "decisionOutcome": v.optional(v.union(v.literal("pending"), v.literal("successful"), v.literal("unsuccessful"), v.literal("mixed"), v.literal("unknown"))), "decisionType": v.optional(v.union(v.literal("invest"), v.literal("pass"), v.literal("follow_on"), v.literal("exit"), v.literal("deep_dive"), v.literal("monitor"), v.literal("deprioritize"), v.literal("thesis_adopt"), v.literal("thesis_revise"), v.literal("thesis_abandon"))), "domain": v.optional(v.string()), "epistemicLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "epistemicStatus": v.optional(v.union(v.literal("hypothesis"), v.literal("emerging"), v.literal("established"), v.literal("challenged"), v.literal("assumption"), v.literal("deprecated"))), "exportClass": v.optional(v.union(v.literal("internal_only"), v.literal("client_safe"), v.literal("public_safe"), v.literal("restricted"))), "externalIds": v.optional(v.object({ "crunchbase": v.optional(v.string()), "linkedin": v.optional(v.string()), "pitchbook": v.optional(v.string()), "twitter": v.optional(v.string()), "website": v.optional(v.string()) })), "extractedFromNodeId": v.optional(v.id("epistemicNodes")), "extractionLangfuseTraceId": v.optional(v.string()), "extractionModel": v.optional(v.string()), "extractionPromptName": v.optional(v.string()), "extractionPromptVersion": v.optional(v.number()), "extractionTemperature": v.optional(v.number()), "globalId": v.string(), "groundingConfidence": v.optional(v.number()), "groundingEndOffset": v.optional(v.number()), "groundingMatchedText": v.optional(v.string()), "groundingRejectionReason": v.optional(v.string()), "groundingStartOffset": v.optional(v.number()), "groundingVerified": v.optional(v.boolean()), "informationAsymmetry": v.optional(v.union(v.literal("proprietary"), v.literal("early"), v.literal("common"))), "metadata": v.optional(v.record(v.string(), v.any())), "methodology": v.optional(v.union(v.literal("primary_research"), v.literal("expert_interview"), v.literal("customer_interview"), v.literal("field_observation"), v.literal("proprietary_data"), v.literal("desk_research"), v.literal("regulatory_filing"), v.literal("news_article"), v.literal("academic_paper"), v.literal("ai_synthesis"), v.literal("ai_extraction"))), "nodeType": v.union(v.literal("decision"), v.literal("belief"), v.literal("question"), v.literal("theme"), v.literal("deal"), v.literal("topic"), v.literal("claim"), v.literal("evidence"), v.literal("synthesis"), v.literal("answer"), v.literal("atomic_fact"), v.literal("excerpt"), v.literal("source"), v.literal("company"), v.literal("person"), v.literal("investor"), v.literal("function"), v.literal("value_chain")), "ownerPrincipalId": v.optional(v.string()), "policyTags": v.optional(v.array(v.string())), "predictionMeta": v.optional(v.object({ "actualVsPredicted": v.optional(v.string()), "confidenceAtPrediction": v.optional(v.number()), "expectedBy": v.optional(v.number()), "isPrediction": v.boolean(), "outcome": v.optional(v.union(v.literal("pending"), v.literal("confirmed"), v.literal("disconfirmed"), v.literal("partial"), v.literal("expired"))), "outcomeEvidenceId": v.optional(v.string()), "outcomeRecordedAt": v.optional(v.number()), "registeredAt": v.number() })), "projectId": v.optional(v.string()), "questionPriority": v.optional(v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low"))), "questionType": v.optional(v.union(v.literal("validation"), v.literal("falsification"), v.literal("assumption_probe"), v.literal("prediction_test"), v.literal("counterfactual"), v.literal("discovery"), v.literal("clarification"), v.literal("comparison"), v.literal("causal"), v.literal("mechanism"), v.literal("general"))), "reversibility": v.optional(v.union(v.literal("irreversible"), v.literal("hard_to_reverse"), v.literal("reversible"), v.literal("trivial"))), "sensitivityTier": v.optional(v.union(v.literal("low"), v.literal("medium"), v.literal("high"), v.literal("restricted"))), "sourceType": v.union(v.literal("human"), v.literal("ai_extracted"), v.literal("ai_generated"), v.literal("imported"), v.literal("system"), v.literal("verified"), v.literal("proprietary")), "status": v.union(v.literal("active"), v.literal("superseded"), v.literal("archived"), v.literal("deleted")), "subtype": v.optional(v.string()), "supersededBy": v.optional(v.id("epistemicNodes")), "syncError": v.optional(v.string()), "syncStatus": v.optional(v.union(v.literal("synced"), v.literal("pending_edges"), v.literal("edge_creation_failed"))), "tags": v.optional(v.array(v.string())), "temporalNature": v.optional(v.union(v.literal("factual"), v.literal("forecast"), v.literal("unknown"))), "tenantId": v.optional(v.string()), "themeConviction": v.optional(v.union(v.literal("high"), v.literal("medium"), v.literal("low"), v.literal("negative"))), "themeStatus": v.optional(v.union(v.literal("emerging"), v.literal("active"), v.literal("mature"), v.literal("declining"), v.literal("archived"))), "title": v.optional(v.string()), "topicId": v.optional(v.string()), "updatedAt": v.number(), "verificationStatus": v.optional(v.union(v.literal("unverified"), v.literal("human_verified"), v.literal("ai_verified"), v.literal("contradicted"), v.literal("outdated"))), "workspaceId": v.optional(v.string()) })).index("by_globalId", ["globalId"]).index("by_contentHash", ["contentHash"]).index("by_nodeType", ["nodeType"]).index("by_subtype", ["nodeType", "subtype"]).index("by_domain", ["domain"]).index("by_topic", ["topicId"]).index("by_topic_type", ["topicId", "nodeType"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace", ["tenantId", "workspaceId"]).index("by_audienceLabel", ["audienceLabel"]).index("by_sensitivityTier", ["sensitivityTier"]).index("by_exportClass", ["exportClass"]).index("by_status", ["status"]).index("by_sourceType", ["sourceType"]).index("by_verification", ["verificationStatus"]).index("by_layer", ["epistemicLayer"]).index("by_layer_type", ["epistemicLayer", "nodeType"]).index("by_syncStatus", ["syncStatus"]).index("by_belief_status", ["nodeType", "beliefStatus"]).index("by_epistemic_status", ["nodeType", "epistemicStatus"]).index("by_temporal_nature", ["nodeType", "temporalNature"]).index("by_methodology", ["nodeType", "methodology"]).index("by_reversibility", ["nodeType", "reversibility"]).index("by_questionType", ["nodeType", "questionType"]).index("by_questionPriority", ["nodeType", "questionPriority"]).searchIndex("search_canonicalText", { searchField: "canonicalText", filterFields: ["nodeType", "topicId", "topicId", "status"] }),
+  "epistemicNodes": defineTable(v.object({ "aiProvider": v.optional(v.string()), "anonymizationClass": v.optional(v.union(v.literal("none"), v.literal("standard"), v.literal("strict"))), "answerQuality": v.optional(v.union(v.literal("definitive"), v.literal("strong"), v.literal("moderate"), v.literal("weak"), v.literal("speculative"), v.literal("unanswered"))), "audienceLabel": v.optional(v.string()), "beliefStatus": v.optional(v.union(v.literal("assumption"), v.literal("hypothesis"), v.literal("belief"), v.literal("fact"))), "beliefType": v.optional(v.string()), "canonicalText": v.string(), "confidence": v.optional(v.number()), "consensusConfidence": v.optional(v.number()), "consensusSource": v.optional(v.string()), "consensusView": v.optional(v.union(v.literal("aligned"), v.literal("ahead_of"), v.literal("contrarian"), v.literal("orthogonal"), v.literal("unknown"))), "content": v.optional(v.string()), "contentHash": v.string(), "contentType": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.string(), "decisionOutcome": v.optional(v.union(v.literal("pending"), v.literal("successful"), v.literal("unsuccessful"), v.literal("mixed"), v.literal("unknown"))), "decisionType": v.optional(v.union(v.literal("invest"), v.literal("pass"), v.literal("follow_on"), v.literal("exit"), v.literal("deep_dive"), v.literal("monitor"), v.literal("deprioritize"), v.literal("thesis_adopt"), v.literal("thesis_revise"), v.literal("thesis_abandon"))), "domain": v.optional(v.string()), "epistemicLayer": v.optional(v.union(v.literal("L4"), v.literal("L3"), v.literal("L2"), v.literal("L1"), v.literal("ontological"), v.literal("organizational"))), "epistemicStatus": v.optional(v.union(v.literal("hypothesis"), v.literal("emerging"), v.literal("established"), v.literal("challenged"), v.literal("assumption"), v.literal("deprecated"))), "exportClass": v.optional(v.union(v.literal("internal_only"), v.literal("client_safe"), v.literal("public_safe"), v.literal("restricted"))), "externalIds": v.optional(v.object({ "crunchbase": v.optional(v.string()), "linkedin": v.optional(v.string()), "pitchbook": v.optional(v.string()), "twitter": v.optional(v.string()), "website": v.optional(v.string()) })), "extractedFromNodeId": v.optional(v.id("epistemicNodes")), "extractionLangfuseTraceId": v.optional(v.string()), "extractionModel": v.optional(v.string()), "extractionPromptName": v.optional(v.string()), "extractionPromptVersion": v.optional(v.number()), "extractionTemperature": v.optional(v.number()), "globalId": v.string(), "groundingConfidence": v.optional(v.number()), "groundingEndOffset": v.optional(v.number()), "groundingMatchedText": v.optional(v.string()), "groundingRejectionReason": v.optional(v.string()), "groundingStartOffset": v.optional(v.number()), "groundingVerified": v.optional(v.boolean()), "informationAsymmetry": v.optional(v.union(v.literal("proprietary"), v.literal("early"), v.literal("common"))), "metadata": v.optional(v.record(v.string(), v.any())), "methodology": v.optional(v.union(v.literal("primary_research"), v.literal("expert_interview"), v.literal("customer_interview"), v.literal("field_observation"), v.literal("proprietary_data"), v.literal("desk_research"), v.literal("regulatory_filing"), v.literal("news_article"), v.literal("academic_paper"), v.literal("ai_synthesis"), v.literal("ai_extraction"))), "nodeType": v.union(v.literal("decision"), v.literal("belief"), v.literal("question"), v.literal("theme"), v.literal("deal"), v.literal("topic"), v.literal("claim"), v.literal("evidence"), v.literal("synthesis"), v.literal("answer"), v.literal("atomic_fact"), v.literal("excerpt"), v.literal("source"), v.literal("company"), v.literal("person"), v.literal("investor"), v.literal("function"), v.literal("value_chain")), "ownerPrincipalId": v.optional(v.string()), "policyTags": v.optional(v.array(v.string())), "predictionMeta": v.optional(v.object({ "actualVsPredicted": v.optional(v.string()), "confidenceAtPrediction": v.optional(v.number()), "expectedBy": v.optional(v.number()), "isPrediction": v.boolean(), "outcome": v.optional(v.union(v.literal("pending"), v.literal("confirmed"), v.literal("disconfirmed"), v.literal("partial"), v.literal("expired"))), "outcomeEvidenceId": v.optional(v.string()), "outcomeRecordedAt": v.optional(v.number()), "registeredAt": v.number() })), "projectId": v.optional(v.string()), "questionPriority": v.optional(v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low"))), "questionType": v.optional(v.union(v.literal("validation"), v.literal("falsification"), v.literal("assumption_probe"), v.literal("prediction_test"), v.literal("counterfactual"), v.literal("discovery"), v.literal("clarification"), v.literal("comparison"), v.literal("causal"), v.literal("mechanism"), v.literal("general"))), "reversibility": v.optional(v.union(v.literal("irreversible"), v.literal("hard_to_reverse"), v.literal("reversible"), v.literal("trivial"))), "sensitivityTier": v.optional(v.union(v.literal("low"), v.literal("medium"), v.literal("high"), v.literal("restricted"))), "sourceType": v.union(v.literal("human"), v.literal("ai_extracted"), v.literal("ai_generated"), v.literal("imported"), v.literal("system"), v.literal("verified"), v.literal("proprietary")), "status": v.union(v.literal("active"), v.literal("superseded"), v.literal("archived"), v.literal("deleted")), "subtype": v.optional(v.string()), "supersededBy": v.optional(v.id("epistemicNodes")), "syncError": v.optional(v.string()), "syncStatus": v.optional(v.union(v.literal("synced"), v.literal("pending_edges"), v.literal("edge_creation_failed"))), "tags": v.optional(v.array(v.string())), "temporalNature": v.optional(v.union(v.literal("factual"), v.literal("forecast"), v.literal("unknown"))), "tenantId": v.optional(v.string()), "themeConviction": v.optional(v.union(v.literal("high"), v.literal("medium"), v.literal("low"), v.literal("negative"))), "title": v.optional(v.string()), "topicId": v.optional(v.string()), "updatedAt": v.number(), "verificationStatus": v.optional(v.union(v.literal("unverified"), v.literal("human_verified"), v.literal("ai_verified"), v.literal("contradicted"), v.literal("outdated"))), "workspaceId": v.optional(v.string()) })).index("by_globalId", ["globalId"]).index("by_contentHash", ["contentHash"]).index("by_nodeType", ["nodeType"]).index("by_subtype", ["nodeType", "subtype"]).index("by_domain", ["domain"]).index("by_topic", ["topicId"]).index("by_topic_type", ["topicId", "nodeType"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace", ["tenantId", "workspaceId"]).index("by_audienceLabel", ["audienceLabel"]).index("by_sensitivityTier", ["sensitivityTier"]).index("by_exportClass", ["exportClass"]).index("by_status", ["status"]).index("by_sourceType", ["sourceType"]).index("by_verification", ["verificationStatus"]).index("by_layer", ["epistemicLayer"]).index("by_layer_type", ["epistemicLayer", "nodeType"]).index("by_syncStatus", ["syncStatus"]).index("by_belief_status", ["nodeType", "beliefStatus"]).index("by_epistemic_status", ["nodeType", "epistemicStatus"]).index("by_temporal_nature", ["nodeType", "temporalNature"]).index("by_methodology", ["nodeType", "methodology"]).index("by_reversibility", ["nodeType", "reversibility"]).index("by_questionType", ["nodeType", "questionType"]).index("by_questionPriority", ["nodeType", "questionPriority"]).searchIndex("search_canonicalText", { searchField: "canonicalText", filterFields: ["nodeType", "topicId", "topicId", "status"] }),
   "graphAnalysisCache": defineTable(v.object({ "analysisVersion": v.string(), "analyzedAt": v.number(), "changesSinceRefresh": v.number(), "findings": v.array(v.object({ "category": v.union(v.literal("structural_risk"), v.literal("evidence_gap"), v.literal("reasoning_flaw"), v.literal("staleness"), v.literal("opportunity"), v.literal("propagation_risk"), v.literal("epistemology"), v.literal("temporal"), v.literal("semantic_gap")), "description": v.string(), "detector": v.string(), "id": v.string(), "importance": v.optional(v.number()), "nodeIds": v.array(v.string()), "nodeLabels": v.array(v.string()), "severity": v.union(v.literal("critical"), v.literal("warning"), v.literal("info")), "title": v.string(), "totalCount": v.optional(v.number()) })), "healthScore": v.number(), "isStale": v.boolean(), "killerQueryResults": v.optional(v.object({ "anchoringBias": v.optional(v.array(v.any())), "confirmationBias": v.optional(v.array(v.any())), "contradictionTensions": v.optional(v.array(v.any())), "knowledgeFrontier": v.optional(v.array(v.any())), "minimumFalsificationSet": v.optional(v.union(v.string(), v.number(), v.boolean(), v.null(), v.record(v.string(), v.any()), v.array(v.any()))), "missingQuestions": v.optional(v.array(v.any())), "nonConsensusBeliefs": v.optional(v.array(v.any())), "portfolioConviction": v.optional(v.array(v.any())), "reasoningDepth": v.optional(v.array(v.any())), "sourceConcentration": v.optional(v.array(v.any())), "staleThemes": v.optional(v.array(v.any())) })), "lastGraphChange": v.optional(v.number()), "stats": v.object({ "algebraicConnectivity": v.number(), "averageResilience": v.number(), "beliefs": v.number(), "beliefStatus": v.optional(v.object({ "assumption": v.number(), "belief": v.number(), "fact": v.number(), "hypothesis": v.number() })), "bridgeNodeCount": v.number(), "coherenceScore": v.number(), "communityCount": v.number(), "cycleCount": v.number(), "evidence": v.number(), "evidenceTemporalNature": v.optional(v.object({ "factual": v.number(), "forecast": v.number(), "unknown": v.number() })), "orphanCount": v.number(), "overconfidentCount": v.number(), "propagationRisks": v.number(), "questions": v.number(), "sccCount": v.number(), "temporalDecayCount": v.number(), "tensionPairs": v.number(), "totalEdges": v.number(), "totalNodes": v.number(), "ungroundedCount": v.number() }), "topicId": v.optional(v.string()) })).index("by_topic", ["topicId"]).index("by_topic_stale", ["topicId", "isStale"]).index("by_analyzedAt", ["analyzedAt"]),
   "graphAnalysisResults": defineTable(v.object({ "analysisText": v.string(), "archivedAt": v.optional(v.number()), "createdAt": v.number(), "customQuery": v.optional(v.string()), "findingId": v.optional(v.string()), "findingSnapshot": v.optional(v.object({ "category": v.string(), "description": v.string(), "nodeIds": v.array(v.string()), "nodeLabels": v.array(v.string()), "severity": v.string(), "title": v.string() })), "mode": v.union(v.literal("explain"), v.literal("query")), "modelId": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("archived"), v.literal("deleted")), "topicId": v.optional(v.string()), "userId": v.string() })).index("by_topicId", ["topicId"]).index("by_topic_user", ["topicId", "userId"]).index("by_topic_finding", ["topicId", "findingId"]).index("by_topic_status", ["topicId", "status"]).index("by_createdAt", ["createdAt"]),
   "graphSuggestions": defineTable(v.object({ "actedAt": v.optional(v.number()), "analysisResultId": v.id("graphAnalysisResults"), "createdAt": v.number(), "errorMessage": v.optional(v.string()), "payload": v.union(v.string(), v.number(), v.boolean(), v.null(), v.record(v.string(), v.any()), v.array(v.any())), "priority": v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low")), "rationale": v.string(), "resultNodeId": v.optional(v.string()), "secondaryNodeId": v.optional(v.string()), "status": v.union(v.literal("pending"), v.literal("accepted"), v.literal("declined"), v.literal("failed"), v.literal("superseded")), "suggestionHash": v.string(), "suggestionType": v.string(), "targetNodeId": v.optional(v.string()), "title": v.string(), "topicId": v.optional(v.string()), "userId": v.string() })).index("by_analysis", ["analysisResultId"]).index("by_suggestion_hash", ["topicId", "suggestionHash"]).index("by_topicId", ["topicId"]).index("by_topic_user", ["topicId", "userId"]).index("by_topic_status", ["topicId", "status"]).index("by_createdAt", ["createdAt"]),
@@ -53,33 +52,20 @@ var KERNEL_SCHEMA_TABLES = {
   "stakeholderGroups": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "decisionEventId": v.id("decisionEvents"), "description": v.optional(v.string()), "groupKey": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "status": v.union(v.literal("active"), v.literal("archived")), "tenantId": v.optional(v.string()), "topicId": v.optional(v.string()), "updatedAt": v.number(), "weight": v.number(), "workspaceId": v.optional(v.string()) })).index("by_decisionEventId", ["decisionEventId"]).index("by_topicId", ["topicId"]).index("by_decision_groupKey", ["decisionEventId", "groupKey"]).index("by_decision_status", ["decisionEventId", "status"]),
   "systemLogs": defineTable(v.object({ "chatId": v.optional(v.string()), "createdAt": v.number(), "level": v.string(), "message": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "source": v.string(), "threadId": v.optional(v.string()), "traceId": v.optional(v.string()), "workflowId": v.optional(v.string()) })).index("by_chatId", ["chatId"]).index("by_workflowId", ["workflowId"]).index("by_threadId", ["threadId"]).index("by_traceId", ["traceId"]).index("by_level", ["level"]).index("by_source", ["source"]),
   "tasks": defineTable(v.object({ "assigneeId": v.optional(v.string()), "attachments": v.optional(v.array(v.object({ "capturedAsEvidence": v.optional(v.boolean()), "capturedAt": v.optional(v.number()), "capturedInsightId": v.optional(v.id("epistemicNodes")), "content": v.string(), "createdAt": v.number(), "createdBy": v.string(), "id": v.string(), "metadata": v.optional(v.object({ "capturedAsEvidence": v.optional(v.boolean()), "capturedAt": v.optional(v.number()), "capturedImpact": v.optional(v.number()), "capturedInsightId": v.optional(v.string()), "continueOnFailure": v.optional(v.boolean()), "dependsOnStepIds": v.optional(v.array(v.string())), "editable": v.optional(v.boolean()), "executionTool": v.optional(v.string()), "experts": v.optional(v.array(v.object({ "expertise": v.string(), "potentialSources": v.array(v.string()), "questions": v.array(v.string()), "searchStrategy": v.optional(v.string()) }))), "expertSearchAt": v.optional(v.number()), "expertSearchResults": v.optional(v.array(v.any())), "factChecker": v.optional(v.object({ "claimsToVerify": v.array(v.string()), "sourcesToCheck": v.array(v.string()), "verificationCriteria": v.array(v.string()) })), "fileName": v.optional(v.string()), "fileSize": v.optional(v.number()), "fileUrl": v.optional(v.string()), "frameworkType": v.optional(v.string()), "generatedPersonas": v.optional(v.array(v.any())), "items": v.optional(v.array(v.object({ "completed": v.boolean(), "id": v.string(), "text": v.string() }))), "linkedBeliefId": v.optional(v.string()), "linkedCallScriptId": v.optional(v.string()), "linkedQuestionId": v.optional(v.string()), "mappedQuestions": v.optional(v.array(v.object({ "answered": v.optional(v.boolean()), "answerExcerpt": v.optional(v.string()), "answerTimestamp": v.optional(v.string()), "capturedAsInsight": v.optional(v.boolean()), "category": v.optional(v.string()), "id": v.string(), "insightId": v.optional(v.id("epistemicNodes")), "linkedBeliefId": v.optional(v.string()), "linkedQuestionId": v.optional(v.string()), "priority": v.optional(v.union(v.literal("must_ask"), v.literal("nice_to_have"))), "questionText": v.string() }))), "metrics": v.optional(v.array(v.object({ "currentValue": v.optional(v.string()), "frequency": v.string(), "metric": v.string(), "source": v.string() }))), "personas": v.optional(v.array(v.object({ "company": v.string(), "rationale": v.string(), "role": v.string(), "title": v.string() }))), "personasGeneratedAt": v.optional(v.number()), "researchCitations": v.optional(v.array(v.union(v.string(), v.object({ "snippet": v.optional(v.string()), "title": v.optional(v.string()), "url": v.string() })))), "researchCompletedAt": v.optional(v.number()), "researchResult": v.optional(v.string()), "researchStatus": v.optional(v.union(v.literal("pending"), v.literal("running"), v.literal("completed"), v.literal("failed"))), "runCondition": v.optional(v.string()), "stepFailureReason": v.optional(v.string()), "stepLastRunAt": v.optional(v.number()), "stepOutputData": v.optional(v.string()), "stepOutputSummary": v.optional(v.string()), "stepRunCount": v.optional(v.number()), "stepStatus": v.optional(v.union(v.literal("pending"), v.literal("running"), v.literal("completed"), v.literal("failed"), v.literal("skipped"))), "tools": v.optional(v.array(v.object({ "purpose": v.string(), "suggestedQuery": v.string(), "tool": v.string() }))), "variables": v.optional(v.array(v.string())), "workflowOrder": v.optional(v.number()), "workflowStepId": v.optional(v.string()) })), "title": v.string(), "type": v.union(v.literal("call_script"), v.literal("email_template"), v.literal("research_plan"), v.literal("framework"), v.literal("checklist"), v.literal("note"), v.literal("file"), v.literal("transcript")) }))), "blockedBy": v.optional(v.array(v.id("tasks"))), "blockedReason": v.optional(v.string()), "blocks": v.optional(v.array(v.id("tasks"))), "comments": v.optional(v.array(v.object({ "content": v.string(), "createdAt": v.number(), "id": v.string(), "userId": v.string() }))), "completedAt": v.optional(v.number()), "completedBy": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.string(), "description": v.optional(v.string()), "dueDate": v.optional(v.number()), "executionCompletedAt": v.optional(v.number()), "executionError": v.optional(v.string()), "executionOrder": v.optional(v.number()), "executionResults": v.optional(v.union(v.string(), v.number(), v.boolean(), v.null(), v.record(v.string(), v.any()), v.array(v.any()))), "executionStartedAt": v.optional(v.number()), "executionStatus": v.optional(v.union(v.literal("pending"), v.literal("running"), v.literal("completed"), v.literal("failed"))), "executionType": v.optional(v.union(v.literal("research_search"), v.literal("find_news"), v.literal("identify_experts"), v.literal("market_research"), v.literal("generate_primer"), v.literal("verify_claim"), v.literal("manual"), v.literal("mcp_research"), v.literal("mcp_web_search"), v.literal("mcp_capture"), v.literal("mcp_network_search"))), "linkedBeliefId": v.optional(v.string()), "linkedChatId": v.optional(v.string()), "linkedQuestionId": v.optional(v.string()), "linkedWorktreeId": v.optional(v.id("worktrees")), "mcpDatasetIds": v.optional(v.array(v.string())), "mcpExecutionId": v.optional(v.string()), "mcpSkillIds": v.optional(v.array(v.string())), "priority": v.union(v.literal("urgent"), v.literal("high"), v.literal("medium"), v.literal("low")), "sortOrder": v.optional(v.number()), "status": v.union(v.literal("todo"), v.literal("in_progress"), v.literal("blocked"), v.literal("done")), "subtasks": v.optional(v.array(v.object({ "completed": v.boolean(), "completedAt": v.optional(v.number()), "id": v.string(), "title": v.string() }))), "tags": v.optional(v.array(v.string())), "taskType": v.optional(v.union(v.literal("general"), v.literal("find_evidence"), v.literal("verify_claim"), v.literal("research"), v.literal("review"), v.literal("interview"), v.literal("analysis"), v.literal("track_metrics"))), "tenantId": v.optional(v.string()), "title": v.string(), "topicId": v.optional(v.string()), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_topicId", ["topicId"]).index("by_topicId_status", ["topicId", "status"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_worktreeId", ["linkedWorktreeId"]).index("by_beliefId", ["linkedBeliefId"]).index("by_questionId", ["linkedQuestionId"]).index("by_status", ["status"]).index("by_assigneeId", ["assigneeId"]).index("by_dueDate", ["dueDate"]).index("by_priority", ["priority"]).index("by_executionType", ["executionType"]).index("by_executionStatus", ["executionStatus"]),
-  "topics": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "depth": v.number(), "description": v.optional(v.string()), "globalId": v.string(), "graphScopeProjectId": v.optional(v.string()), "metadata": v.optional(v.any()), "name": v.string(), "ontologyId": v.optional(v.id("ontologyDefinitions")), "parentTopicId": v.optional(v.id("topics")), "path": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("archived"), v.literal("watching")), "tenantId": v.optional(v.string()), "type": v.string(), "updatedAt": v.number(), "visibility": v.optional(v.union(v.literal("private"), v.literal("team"), v.literal("firm"), v.literal("external"), v.literal("public"))), "workspaceId": v.optional(v.string()) })).index("by_globalId", ["globalId"]).index("by_parent", ["parentTopicId"]).index("by_type", ["type"]).index("by_graph_scope_project", ["graphScopeProjectId"]).index("by_tenant", ["tenantId"]).index("by_ontology", ["ontologyId"]).index("by_path", ["path"]).searchIndex("search_name", { searchField: "name", filterFields: ["tenantId", "type"] }),
+  "topics": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "depth": v.number(), "description": v.optional(v.string()), "globalId": v.string(), "graphScopeProjectId": v.optional(v.string()), "metadata": v.optional(v.any()), "name": v.string(), "ontologyId": v.optional(v.id("ontologyDefinitions")), "parentTopicId": v.optional(v.id("topics")), "path": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("archived"), v.literal("watching")), "tenantId": v.optional(v.string()), "type": v.string(), "updatedAt": v.number(), "visibility": v.optional(v.union(v.literal("private"), v.literal("team"), v.literal("firm"), v.literal("external"), v.literal("public"))), "workspaceId": v.optional(v.string()) })).index("by_parent", ["parentTopicId"]).index("by_type", ["type"]).index("by_graph_scope_project", ["graphScopeProjectId"]).index("by_tenant", ["tenantId"]).index("by_ontology", ["ontologyId"]).index("by_path", ["path"]).searchIndex("search_name", { searchField: "name", filterFields: ["tenantId", "type"] }),
   "workflowDefinitions": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "description": v.optional(v.string()), "displayName": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "status": v.union(v.literal("draft"), v.literal("active"), v.literal("deprecated")), "tenantId": v.string(), "updatedAt": v.number(), "version": v.number() })).index("by_tenant", ["tenantId"]).index("by_tenant_name", ["tenantId", "name"]).index("by_tenant_status", ["tenantId", "status"]),
   "workflowPullRequests": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "resolvedAt": v.optional(v.number()), "resolvedBy": v.optional(v.string()), "reviewers": v.optional(v.array(v.string())), "status": v.union(v.literal("pending_review"), v.literal("changes_requested"), v.literal("approved"), v.literal("blocked")), "summary": v.string(), "topicId": v.optional(v.string()), "updatedAt": v.number(), "worktreeId": v.id("worktrees") })).index("by_worktreeId", ["worktreeId"]).index("by_status", ["status"]).index("by_topicId", ["topicId"]).index("by_topic_status", ["topicId", "status"]),
   "workflowStages": defineTable(v.object({ "createdAt": v.number(), "description": v.optional(v.string()), "displayName": v.string(), "entryConditions": v.optional(v.record(v.string(), v.any())), "exitConditions": v.optional(v.record(v.string(), v.any())), "gateRules": v.optional(v.record(v.string(), v.any())), "isOptional": v.optional(v.boolean()), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "order": v.number(), "updatedAt": v.number(), "workflowDefinitionId": v.id("workflowDefinitions") })).index("by_workflow", ["workflowDefinitionId"]).index("by_workflow_order", ["workflowDefinitionId", "order"]),
   "worktreeBeliefCluster": defineTable(v.object({ "addedAt": v.number(), "beliefId": v.string(), "cascadeText": v.optional(v.string()), "confidenceDelta": v.optional(v.number()), "counterfactualText": v.optional(v.string()), "dependencyText": v.optional(v.string()), "finalConfidence": v.optional(v.number()), "finalEvidenceCount": v.optional(v.number()), "initialConfidence": v.optional(v.number()), "initialEvidenceCount": v.optional(v.number()), "llmAssessedAt": v.optional(v.number()), "llmCertainty": v.optional(v.number()), "llmEvidenceScores": v.optional(v.string()), "llmReasoning": v.optional(v.string()), "llmValence": v.optional(v.number()), "relationDescription": v.optional(v.string()), "relationType": v.union(v.literal("primary"), v.literal("counterfactual"), v.literal("dependency"), v.literal("cascade"), v.literal("conditional"), v.literal("supporting"), v.literal("contradicting"), v.literal("alternative"), v.literal("prerequisite")), "updatedAt": v.number(), "worktreeId": v.id("worktrees") })).index("by_worktree", ["worktreeId"]).index("by_belief", ["beliefId"]).index("by_worktree_relation", ["worktreeId", "relationType"]),
   "worktrees": defineTable(v.object({ "beliefFocus": v.optional(v.string()), "beliefRefinement": v.optional(v.object({ "checklist": v.optional(v.object({ "hasMeasurableCriteria": v.boolean(), "hasSpecificClaim": v.boolean(), "hasTestability": v.boolean(), "hasTimeframe": v.boolean() })), "isRefined": v.boolean(), "measurableCriteria": v.optional(v.string()), "originalText": v.optional(v.string()), "refinedAt": v.optional(v.number()), "refinedBy": v.optional(v.string()), "refinedText": v.optional(v.string()), "testingCriteria": v.optional(v.string()), "timeframe": v.optional(v.string()) })), "beliefRefinements": v.optional(v.array(v.any())), "blocks": v.optional(v.array(v.id("worktrees"))), "branchThesis": v.optional(v.object({ "approvedAt": v.optional(v.number()), "approvedBy": v.optional(v.string()), "content": v.string(), "generatedAt": v.optional(v.number()), "generationMetadata": v.optional(v.object({ "langfuseTraceId": v.optional(v.string()), "modelUsed": v.string(), "promptName": v.string() })), "memoContent": v.optional(v.string()), "status": v.union(v.literal("ai_draft"), v.literal("user_draft"), v.literal("final")) })), "campaign": v.optional(v.number()), "chatId": v.optional(v.string()), "clusterStatus": v.optional(v.object({ "conditionalsByType": v.optional(v.object({ "cascades": v.number(), "counterfactuals": v.number(), "dependencies": v.number(), "other": v.number() })), "hasCascades": v.boolean(), "hasCounterfactuals": v.boolean(), "hasDependencies": v.boolean(), "mappingCompletedAt": v.optional(v.number()), "mappingCompletedBy": v.optional(v.string()), "totalConditionals": v.number() })), "confidenceImpact": v.optional(v.union(v.literal("high"), v.literal("medium"), v.literal("low"))), "createdAt": v.optional(v.number()), "createdBy": v.string(), "decisionGate": v.optional(v.object({ "decidedAt": v.optional(v.number()), "decidedBy": v.optional(v.string()), "goCriteria": v.array(v.string()), "noGoSignals": v.array(v.string()), "verdict": v.optional(v.union(v.literal("go"), v.literal("no_go"), v.literal("pivot"), v.literal("pending"))), "verdictRationale": v.optional(v.string()) })), "decisionsReached": v.optional(v.array(v.string())), "dependsOn": v.optional(v.array(v.id("worktrees"))), "dismissedReason": v.optional(v.string()), "durationWeeks": v.number(), "endDate": v.number(), "endingConfidence": v.optional(v.object({ "beliefConfidences": v.array(v.object({ "beliefId": v.string(), "confidence": v.number() })), "overall": v.number() })), "epistemicChain": v.optional(v.object({ "capturedAt": v.number(), "capturedBy": v.string(), "clusterEdges": v.array(v.object({ "createdAt": v.optional(v.number()), "edgeId": v.optional(v.string()), "edgeType": v.string(), "sourceId": v.string(), "targetId": v.string(), "weight": v.optional(v.number()) })), "confidenceHistory": v.optional(v.array(v.object({ "beliefId": v.string(), "recentChanges": v.array(v.object({ "confidence": v.optional(v.string()), "timestamp": v.optional(v.number()), "trigger": v.optional(v.string()) })) }))), "evidence": v.array(v.object({ "createdAt": v.optional(v.number()), "id": v.string(), "sourceType": v.optional(v.string()), "text": v.string(), "verificationStatus": v.optional(v.string()), "verified": v.boolean() })), "outcome": v.object({ "confidenceChange": v.number(), "endingConfidence": v.number(), "startingConfidence": v.number(), "summary": v.string(), "verdict": v.string() }), "primaryBelief": v.optional(v.object({ "confidenceScore": v.optional(v.number()), "criticality": v.optional(v.string()), "endingConfidence": v.number(), "endingConfidenceLabel": v.optional(v.string()), "id": v.string(), "startingConfidence": v.number(), "startingConfidenceLabel": v.optional(v.string()), "status": v.optional(v.string()), "text": v.string() })), "questions": v.array(v.object({ "answer": v.optional(v.string()), "answeredAt": v.optional(v.number()), "answeredBy": v.optional(v.string()), "answerStatus": v.optional(v.string()), "evidenceCount": v.number(), "id": v.string(), "priority": v.optional(v.string()), "status": v.string(), "text": v.string() })), "relatedBeliefs": v.optional(v.array(v.object({ "confidence": v.optional(v.string()), "confidenceScore": v.optional(v.number()), "id": v.string(), "text": v.optional(v.string()) }))), "tasksCompleted": v.optional(v.number()), "topicId": v.optional(v.string()), "totalTasks": v.optional(v.number()), "worktreeId": v.id("worktrees") })), "epistemicOrigin": v.optional(v.string()), "evidenceReviewState": v.optional(v.object({ "evidenceGaps": v.array(v.string()), "evidenceQuestionMapping": v.optional(v.array(v.object({ "coverageNote": v.optional(v.string()), "evidenceId": v.string(), "questionIds": v.array(v.string()) }))), "existingEvidenceReviewed": v.boolean(), "reviewCompletedAt": v.optional(v.number()), "reviewCompletedBy": v.optional(v.string()), "strengthAreas": v.array(v.string()) })), "evidenceSignals": v.optional(v.array(v.object({ "collected": v.boolean(), "notes": v.optional(v.string()), "progress": v.optional(v.string()), "signal": v.string() }))), "gate": v.optional(v.string()), "generatedAt": v.optional(v.number()), "generatedBy": v.optional(v.string()), "hypothesis": v.optional(v.string()), "index": v.number(), "keyFindings": v.optional(v.array(v.string())), "keyQuestions": v.optional(v.array(v.object({ "answer": v.optional(v.string()), "answerConfidence": v.optional(v.union(v.literal("high"), v.literal("medium"), v.literal("low"))), "linkedQuestionId": v.optional(v.string()), "question": v.string(), "status": v.union(v.literal("open"), v.literal("answered"), v.literal("forked")) }))), "lane": v.optional(v.string()), "laneOrderInCampaign": v.optional(v.number()), "linkedCallIds": v.optional(v.array(v.string())), "linkedDeepResearchIds": v.optional(v.array(v.string())), "linkedDocumentIds": v.optional(v.array(v.string())), "linkedEvidenceIds": v.optional(v.array(v.string())), "linkedNewsIds": v.optional(v.array(v.string())), "linkedPrimerIds": v.optional(v.array(v.string())), "metadata": v.optional(v.any()), "name": v.string(), "nextSteps": v.optional(v.array(v.string())), "notes": v.optional(v.array(v.object({ "content": v.string(), "createdAt": v.number(), "createdBy": v.string(), "id": v.string(), "linkedBeliefId": v.optional(v.string()), "linkedQuestionId": v.optional(v.string()), "linkedTaskId": v.optional(v.string()) }))), "objective": v.string(), "orderInLane": v.optional(v.number()), "outcome": v.optional(v.object({ "confidenceChange": v.number(), "summary": v.string(), "verdict": v.union(v.literal("validated"), v.literal("invalidated"), v.literal("forked"), v.literal("inconclusive")), "whatChanged": v.string() })), "phase": v.optional(v.string()), "phaseHistory": v.optional(v.array(v.object({ "completedAt": v.optional(v.number()), "completedBy": v.optional(v.string()), "enteredAt": v.number(), "pausedAt": v.optional(v.number()), "phase": v.string(), "resumedAt": v.optional(v.number()) }))), "priority": v.optional(v.number()), "questionsCoverage": v.optional(v.object({ "clusterNodesCovered": v.number(), "coveragePercent": v.number(), "gapsIdentified": v.optional(v.array(v.string())), "totalQuestions": v.number() })), "rationale": v.optional(v.string()), "researchEfficiency": v.optional(v.object({ "clusterCoverage": v.number(), "efficiencyScore": v.number(), "questionsPerTask": v.number(), "totalTasks": v.number() })), "retrospective": v.optional(v.object({ "confidenceChange": v.number(), "lessonsLearned": v.array(v.string()), "whatDidnt": v.array(v.string()), "whatWorked": v.array(v.string()) })), "sourceProposalId": v.optional(v.string()), "startDate": v.number(), "startingConfidence": v.optional(v.object({ "beliefConfidences": v.array(v.object({ "beliefId": v.string(), "confidence": v.number() })), "overall": v.number() })), "status": v.union(v.literal("suggested"), v.literal("planning"), v.literal("active"), v.literal("paused"), v.literal("completed"), v.literal("dismissed"), v.literal("abandoned")), "synthesisState": v.optional(v.object({ "originalBeliefIds": v.array(v.string()), "synthesisComplete": v.boolean(), "synthesisCompletedAt": v.optional(v.number()), "synthesisCompletedBy": v.optional(v.string()), "synthesisRationale": v.optional(v.string()), "synthesizedBeliefIds": v.array(v.string()) })), "targetBeliefIds": v.array(v.string()), "targetBranch": v.optional(v.string()), "targetQuestionIds": v.array(v.string()), "tasks": v.optional(v.union(v.string(), v.number(), v.boolean(), v.null(), v.record(v.string(), v.any()), v.array(v.any()))), "thesisReportId": v.optional(v.string()), "topicId": v.optional(v.string()), "triggerReason": v.optional(v.string()), "updatedAt": v.optional(v.number()), "userId": v.optional(v.string()), "worktreeScope": v.optional(v.union(v.literal("belief"), v.literal("branch"))), "worktreeType": v.optional(v.string()) })).index("by_topicId", ["topicId"]).index("by_topicId_status", ["topicId", "status"]).index("by_topicId_index", ["topicId", "index"]).index("by_worktreeType", ["topicId", "worktreeType"]).index("by_topicId_priority", ["topicId", "priority"]).index("by_topicId_campaign_lane_order", ["topicId", "campaign", "laneOrderInCampaign", "orderInLane"]).index("by_topicId_lane_order", ["topicId", "lane", "orderInLane"]).index("by_topicId_branch", ["topicId", "targetBranch"]).index("by_topicId_scope", ["topicId", "worktreeScope"])
 };
-var CONTROL_PLANE_SCHEMA_TABLES = {
+var IDENTITY_SCHEMA_TABLES = {
   "agents": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "displayName": v.optional(v.string()), "groupIds": v.optional(v.array(v.string())), "permittedPackKeys": v.optional(v.array(v.string())), "permittedToolNames": v.optional(v.array(v.string())), "principalId": v.string(), "principalType": v.literal("service"), "roles": v.array(v.string()), "slug": v.string(), "status": v.union(v.literal("active"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.string(), "updatedAt": v.number(), "workspaceId": v.string() })).index("by_slug", ["slug"]).index("by_principalId", ["principalId"]).index("by_tenantId", ["tenantId"]).index("by_status", ["status"]),
   "mcpWritePolicy": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "enabled": v.boolean(), "maxWritesPerSession": v.optional(v.number()), "permission": v.union(v.literal("allow"), v.literal("deny"), v.literal("review_required")), "rationale": v.optional(v.string()), "role": v.string(), "toolCategory": v.string(), "topicId": v.optional(v.string()), "updatedAt": v.number() })).index("by_topicId", ["topicId"]).index("by_role", ["role"]).index("by_topicId_role", ["topicId", "role"]).index("by_enabled", ["enabled"]),
   "modelCallLogs": defineTable(v.object({ "cost": v.optional(v.number()), "durationMs": v.optional(v.number()), "error": v.optional(v.string()), "inputTokens": v.optional(v.number()), "modelKey": v.string(), "outputTokens": v.optional(v.number()), "provider": v.string(), "sessionId": v.optional(v.string()), "slot": v.string(), "success": v.boolean(), "timestamp": v.number(), "traceId": v.optional(v.string()), "userId": v.optional(v.string()) })).index("by_slot", ["slot"]).index("by_model", ["modelKey"]).index("by_timestamp", ["timestamp"]).index("by_user", ["userId"]),
   "modelFunctionSlots": defineTable(v.object({ "category": v.string(), "createdAt": v.number(), "description": v.string(), "enabled": v.boolean(), "isDefault": v.boolean(), "maxTokens": v.optional(v.number()), "modelKey": v.string(), "notes": v.optional(v.string()), "promptName": v.optional(v.string()), "requiredCapabilities": v.optional(v.array(v.string())), "slot": v.string(), "temperature": v.optional(v.number()), "updatedAt": v.number() })).index("by_slot", ["slot"]).index("by_category", ["category"]).index("by_enabled", ["enabled"]),
   "modelRegistry": defineTable(v.object({ "capabilities": v.array(v.string()), "contextWindow": v.number(), "createdAt": v.number(), "defaultTemperature": v.number(), "enabled": v.boolean(), "inputCostPer1M": v.number(), "key": v.string(), "maxOutputTokens": v.number(), "modelId": v.string(), "name": v.string(), "notes": v.optional(v.string()), "outputCostPer1M": v.number(), "provider": v.string(), "recommended": v.boolean(), "updatedAt": v.number() })).index("by_key", ["key"]).index("by_provider", ["provider"]).index("by_enabled", ["enabled"]),
   "modelSlotConfigs": defineTable(v.object({ "createdAt": v.number(), "enabled": v.boolean(), "maxTokens": v.optional(v.number()), "modelKey": v.string(), "notes": v.optional(v.string()), "slot": v.string(), "temperature": v.optional(v.number()), "updatedAt": v.number() })).index("by_slot", ["slot"]),
-  "permitAccessReviewItems": defineTable(v.object({ "createdAt": v.number(), "decisionAt": v.optional(v.number()), "itemKey": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "rationale": v.optional(v.string()), "relation": v.optional(v.string()), "resourceKey": v.optional(v.string()), "resourceType": v.optional(v.string()), "reviewerId": v.optional(v.string()), "reviewKey": v.string(), "role": v.optional(v.string()), "status": v.union(v.literal("open"), v.literal("approved"), v.literal("revoked"), v.literal("changed"), v.literal("deferred")), "subjectId": v.string(), "subjectType": v.union(v.literal("principal"), v.literal("group"), v.literal("role_assignment"), v.literal("resource_instance")), "tenantId": v.string(), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_reviewKey", ["reviewKey"]).index("by_tenant_reviewKey", ["tenantId", "reviewKey"]).index("by_tenant_itemKey", ["tenantId", "itemKey"]).index("by_subject", ["subjectType", "subjectId"]).index("by_status", ["status"]),
-  "permitAccessReviews": defineTable(v.object({ "createdAt": v.number(), "dueAt": v.optional(v.number()), "justification": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "outcome": v.optional(v.union(v.literal("allow"), v.literal("deny"))), "policyBundleId": v.optional(v.string()), "rationale": v.optional(v.string()), "requestedAt": v.number(), "requestedBy": v.string(), "resourceKey": v.optional(v.string()), "resourceType": v.optional(v.string()), "reviewedAt": v.optional(v.number()), "reviewedBy": v.optional(v.string()), "reviewKey": v.string(), "scope": v.union(v.literal("tenant"), v.literal("workspace"), v.literal("resource_instance"), v.literal("group"), v.literal("principal"), v.literal("api_key"), v.literal("admin_action")), "status": v.union(v.literal("open"), v.literal("in_progress"), v.literal("approved"), v.literal("denied"), v.literal("expired"), v.literal("cancelled")), "subjectId": v.string(), "subjectType": v.union(v.literal("principal"), v.literal("group"), v.literal("role_assignment"), v.literal("resource_instance")), "tenantId": v.string(), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_tenant_status", ["tenantId", "status"]).index("by_tenant_reviewKey", ["tenantId", "reviewKey"]).index("by_subject", ["subjectType", "subjectId"]).index("by_tenant_subject", ["tenantId", "subjectType", "subjectId"]).index("by_outcome", ["outcome"]).index("by_workspace_status", ["workspaceId", "status"]),
-  "permitAttributeBindings": defineTable(v.object({ "attributeName": v.string(), "attributeOperator": v.union(v.literal("eq"), v.literal("neq"), v.literal("in"), v.literal("not_in"), v.literal("gt"), v.literal("gte"), v.literal("lt"), v.literal("lte"), v.literal("contains"), v.literal("not_contains"), v.literal("matches")), "attributeType": v.union(v.literal("string"), v.literal("number"), v.literal("bool"), v.literal("json"), v.literal("time")), "attributeValue": v.any(), "createdAt": v.number(), "createdBy": v.string(), "expiresAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "source": v.optional(v.string()), "sourceRef": v.optional(v.string()), "status": v.union(v.literal("queued"), v.literal("inflight"), v.literal("completed"), v.literal("failed"), v.literal("skipped"), v.literal("stale")), "targetId": v.string(), "targetType": v.union(v.literal("principal"), v.literal("group")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenant_target", ["tenantId", "targetType", "targetId"]).index("by_tenant_target_attribute", ["tenantId", "targetType", "targetId", "attributeName"]).index("by_tenant_name", ["tenantId", "attributeName"]).index("by_tenant_status", ["tenantId", "status"]),
-  "permitGroupMemberships": defineTable(v.object({ "addedBy": v.optional(v.string()), "childGroupId": v.optional(v.string()), "createdAt": v.number(), "expiresAt": v.optional(v.number()), "groupId": v.string(), "memberId": v.string(), "memberType": v.union(v.literal("principal"), v.literal("group")), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.optional(v.string()), "revocationReason": v.optional(v.string()), "revokedBy": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenant_principal", ["tenantId", "principalId"]).index("by_tenant_member", ["tenantId", "memberType", "memberId"]).index("by_tenant_member_group", ["tenantId", "memberType", "memberId", "groupId"]).index("by_tenant_group", ["tenantId", "groupId"]).index("by_member_group", ["memberType", "memberId", "groupId"]).index("by_tenant_status", ["tenantId", "status"]).index("by_workspace_principal", ["workspaceId", "principalId"]),
-  "permitGroups": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "description": v.optional(v.string()), "groupId": v.string(), "groupKey": v.string(), "groupName": v.string(), "groupType": v.union(v.literal("tenant"), v.literal("workspace"), v.literal("external"), v.literal("system"), v.literal("dynamic")), "metadata": v.optional(v.record(v.string(), v.any())), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_groupId", ["tenantId", "groupId"]).index("by_tenant_groupKey", ["tenantId", "groupKey"]).index("by_tenant_status", ["tenantId", "status"]),
-  "permitPolicyBundles": defineTable(v.object({ "bundleKey": v.string(), "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "policyHash": v.optional(v.string()), "policyPayload": v.record(v.string(), v.any()), "retiredAt": v.optional(v.number()), "reviewedBy": v.optional(v.string()), "status": v.union(v.literal("draft"), v.literal("validated"), v.literal("enforced"), v.literal("archived")), "tenantId": v.string(), "updatedAt": v.number(), "version": v.number(), "workspaceId": v.optional(v.string()) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_bundleKey", ["tenantId", "bundleKey"]).index("by_tenant_bundle_version", ["tenantId", "bundleKey", "version"]).index("by_tenant_status", ["tenantId", "status"]),
-  "permitPolicyDecisionReceipts": defineTable(v.object({ "action": v.string(), "audienceClass": v.optional(v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public"))), "audienceKey": v.optional(v.string()), "audienceMode": v.optional(v.string()), "createdAt": v.number(), "createdBy": v.optional(v.string()), "decision": v.union(v.literal("allow"), v.literal("deny")), "expiresAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "policyBundleId": v.optional(v.string()), "policyVersion": v.string(), "principalId": v.string(), "reasonCode": v.string(), "requestId": v.optional(v.string()), "resourceId": v.string(), "resourceType": v.string(), "subjectId": v.optional(v.string()), "subjectType": v.optional(v.union(v.literal("principal"), v.literal("group"), v.literal("role_assignment"), v.literal("resource_instance"))), "tenantId": v.optional(v.string()), "traceId": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_principal_createdAt", ["principalId", "createdAt"]).index("by_tenant_createdAt", ["tenantId", "createdAt"]).index("by_resource", ["resourceType", "resourceId"]).index("by_decision_createdAt", ["decision", "createdAt"]).index("by_traceId", ["traceId"]).index("by_action", ["action"]),
-  "permitPrincipalAliases": defineTable(v.object({ "alias": v.string(), "aliasKind": v.string(), "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.string(), "provider": v.string(), "providerProjectId": v.optional(v.string()), "providerSubjectId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_principalId", ["principalId"]).index("by_provider_subject", ["provider", "providerSubjectId"]).index("by_provider_project_subject", ["provider", "providerProjectId", "providerSubjectId"]).index("by_tenant_provider_subject", ["tenantId", "provider", "providerSubjectId"]).index("by_tenant_provider_project_subject", ["tenantId", "provider", "providerProjectId", "providerSubjectId"]).index("by_tenant_provider_alias", ["tenantId", "provider", "alias"]).index("by_tenant_alias", ["tenantId", "alias"]).index("by_tenant_provider_status", ["tenantId", "provider", "status"]),
-  "permitPrincipals": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "displayName": v.optional(v.string()), "lastSeenAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.string(), "principalType": v.union(v.literal("human"), v.literal("agent"), v.literal("service_principal"), v.literal("external_stakeholder"), v.literal("system")), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_principalId", ["tenantId", "principalId"]).index("by_tenant_status", ["tenantId", "status"]).index("by_tenant_principalType_status", ["tenantId", "principalType", "status"]),
-  "permitProjectionOutbox": defineTable(v.object({ "attemptCount": v.number(), "createdAt": v.number(), "lastError": v.optional(v.string()), "lastHandledAt": v.optional(v.number()), "nextAttemptAt": v.optional(v.number()), "objectId": v.string(), "objectType": v.union(v.literal("resource"), v.literal("role"), v.literal("resource_role"), v.literal("resource_relation"), v.literal("tenant"), v.literal("workspace"), v.literal("principal"), v.literal("membership"), v.literal("group"), v.literal("resource_instance"), v.literal("relationship_tuple"), v.literal("role_assignment"), v.literal("attribute_binding"), v.literal("policy_bundle")), "operation": v.union(v.literal("upsert"), v.literal("delete"), v.literal("sync"), v.literal("resync"), v.literal("delete_sync"), v.literal("noop")), "payload": v.record(v.string(), v.any()), "permitResourceKey": v.optional(v.string()), "permitResourceType": v.optional(v.string()), "permitTenantKey": v.optional(v.string()), "principalId": v.optional(v.string()), "status": v.union(v.literal("queued"), v.literal("inflight"), v.literal("completed"), v.literal("failed"), v.literal("skipped"), v.literal("stale")), "syncKey": v.string(), "tenantId": v.optional(v.string()), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_syncKey", ["syncKey"]).index("by_status", ["status"]).index("by_tenantId", ["tenantId"]).index("by_tenant_status", ["tenantId", "status"]).index("by_objectType", ["objectType", "status"]),
-  "permitRelationshipTuples": defineTable(v.object({ "attributes": v.optional(v.record(v.string(), v.any())), "createdAt": v.number(), "createdBy": v.string(), "lastSeenAt": v.optional(v.number()), "object": v.string(), "relation": v.string(), "resourceKey": v.optional(v.string()), "resourceType": v.optional(v.string()), "status": v.union(v.literal("queued"), v.literal("inflight"), v.literal("completed"), v.literal("failed"), v.literal("skipped"), v.literal("stale")), "subject": v.string(), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenant_subject", ["tenantId", "subject"]).index("by_tenant_object", ["tenantId", "object"]).index("by_tenant_relation", ["tenantId", "relation"]).index("by_tenant_relation_subject", ["tenantId", "relation", "subject"]).index("by_tenant_status", ["tenantId", "status"]),
-  "permitResourceInstances": defineTable(v.object({ "attributes": v.optional(v.record(v.string(), v.any())), "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "ownerPrincipalId": v.optional(v.string()), "resourceId": v.string(), "resourceKey": v.string(), "resourceType": v.string(), "status": v.union(v.literal("active"), v.literal("deleted"), v.literal("archived")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenant_resource_type", ["tenantId", "resourceType"]).index("by_tenant_resource_key", ["tenantId", "resourceType", "resourceKey"]).index("by_workspaceId", ["workspaceId"]).index("by_status", ["status"]).index("by_tenant_status", ["tenantId", "status"]).index("by_ownerPrincipalId", ["ownerPrincipalId"]),
-  "permitRoleAssignments": defineTable(v.object({ "attributes": v.optional(v.record(v.string(), v.any())), "createdAt": v.number(), "expiresAt": v.optional(v.number()), "grantedBy": v.optional(v.string()), "resourceInstanceId": v.optional(v.string()), "resourceKey": v.string(), "resourceType": v.string(), "revokedBy": v.optional(v.string()), "role": v.string(), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked"), v.literal("suspended"), v.literal("disabled")), "targetId": v.string(), "targetType": v.union(v.literal("principal"), v.literal("group")), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenant_target", ["tenantId", "targetType", "targetId"]).index("by_tenant_resource", ["tenantId", "resourceType", "resourceKey"]).index("by_tenant_role", ["tenantId", "role", "status"]).index("by_status", ["status"]).index("by_workspace_resource", ["workspaceId", "resourceType", "resourceKey"]),
   "platformAudienceGrants": defineTable(v.object({ "audienceClass": v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public")), "audienceKey": v.string(), "createdAt": v.number(), "expiresAt": v.optional(v.number()), "grantedBy": v.optional(v.string()), "groupId": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked"), v.literal("expired")), "tenantId": v.string(), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_tenant_principal", ["tenantId", "principalId"]).index("by_tenant_group", ["tenantId", "groupId"]).index("by_tenant_audienceKey", ["tenantId", "audienceKey"]).index("by_principal_status", ["principalId", "status"]).index("by_group_status", ["groupId", "status"]),
   "platformAudiences": defineTable(v.object({ "audienceClass": v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public")), "audienceKey": v.string(), "audienceLabel": v.string(), "createdAt": v.number(), "createdBy": v.optional(v.string()), "description": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "status": v.union(v.literal("active"), v.literal("disabled"), v.literal("archived")), "tenantId": v.string(), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_audienceKey", ["tenantId", "audienceKey"]).index("by_tenant_workspace_audienceKey", ["tenantId", "workspaceId", "audienceKey"]).index("by_tenant_status", ["tenantId", "status"]),
   "platformPolicyDecisionLogs": defineTable(v.object({ "action": v.union(v.literal("read"), v.literal("summarize"), v.literal("export"), v.literal("mutate"), v.literal("admin"), v.literal("comment"), v.literal("escalate"), v.literal("resolve"), v.literal("vote")), "audienceClass": v.optional(v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public"))), "audienceKey": v.optional(v.string()), "audienceMode": v.optional(v.string()), "createdAt": v.number(), "decision": v.union(v.literal("allow"), v.literal("deny")), "metadata": v.optional(v.record(v.string(), v.any())), "packKey": v.optional(v.string()), "policyBundleId": v.optional(v.string()), "policyVersion": v.string(), "principalId": v.string(), "reasonCode": v.string(), "resourceId": v.string(), "resourceType": v.string(), "tenantId": v.optional(v.string()), "topicId": v.optional(v.string()), "traceId": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_principal_createdAt", ["principalId", "createdAt"]).index("by_tenant_createdAt", ["tenantId", "createdAt"]).index("by_pack_createdAt", ["packKey", "createdAt"]).index("by_audienceKey_createdAt", ["audienceKey", "createdAt"]).index("by_audienceClass_createdAt", ["audienceClass", "createdAt"]).index("by_decision_createdAt", ["decision", "createdAt"]).index("by_traceId", ["traceId"]).index("by_topicId", ["topicId"]).index("by_topic_createdAt", ["topicId", "createdAt"]),
@@ -89,7 +75,6 @@ var CONTROL_PLANE_SCHEMA_TABLES = {
   "tenantConfig": defineTable(v.object({ "authPolicyMode": v.union(v.literal("open"), v.literal("invite_only"), v.literal("sso_required")), "defaultModelSlotOverrides": v.record(v.string(), v.string()), "defaultSessionTTL": v.number(), "defaultTopicVisibility": v.union(v.literal("private"), v.literal("tenant"), v.literal("public")), "featureFlags": v.record(v.string(), v.boolean()), "maxWorkspaceCount": v.number(), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.string() })).index("by_tenantId", ["tenantId"]),
   "tenantIntegrations": defineTable(v.object({ "capabilities": v.array(v.union(v.literal("search"), v.literal("deep_research"), v.literal("scrape"), v.literal("summarize"), v.literal("generate"))), "category": v.union(v.literal("search"), v.literal("scraper"), v.literal("llm"), v.literal("analysis"), v.literal("custom")), "config": v.object({ "apiBaseUrl": v.string(), "authHeaderName": v.optional(v.string()), "authType": v.union(v.literal("api_key"), v.literal("bearer"), v.literal("basic"), v.literal("none")), "credentialSecretName": v.optional(v.string()), "customHeaders": v.optional(v.record(v.string(), v.any())), "defaultParams": v.optional(v.record(v.string(), v.any())), "timeout": v.optional(v.number()) }), "createdAt": v.number(), "createdBy": v.optional(v.string()), "description": v.optional(v.string()), "displayName": v.string(), "endpoints": v.optional(v.object({ "deepResearch": v.optional(v.object({ "async": v.optional(v.boolean()), "method": v.optional(v.string()), "path": v.string(), "pollIntervalMs": v.optional(v.number()), "pollPath": v.optional(v.string()), "resultPath": v.optional(v.string()) })), "scrape": v.optional(v.object({ "method": v.optional(v.string()), "path": v.string(), "resultPath": v.optional(v.string()) })), "search": v.optional(v.object({ "method": v.optional(v.string()), "path": v.string(), "queryParamName": v.optional(v.string()), "resultPath": v.optional(v.string()) })) })), "integrationKey": v.string(), "lastError": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "status": v.union(v.literal("active"), v.literal("disabled"), v.literal("error")), "tenantId": v.string(), "updatedAt": v.number(), "usageCount": v.optional(v.number()) })).index("by_tenant", ["tenantId"]).index("by_tenant_key", ["tenantId", "integrationKey"]).index("by_tenant_status", ["tenantId", "status"]),
   "tenantModelSlotBindings": defineTable(v.object({ "bindingId": v.string(), "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "modelSlotId": v.string(), "passThroughOnly": v.boolean(), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.string(), "updatedAt": v.number() })).index("by_bindingId", ["bindingId"]).index("by_tenantId", ["tenantId"]).index("by_tenant_slot", ["tenantId", "modelSlotId"]).index("by_tenant_provider_slot", ["tenantId", "providerId", "modelSlotId"]).index("by_secretRef", ["secretRef"]).index("by_status", ["status"]),
-  "tenantPermitSyncStates": defineTable(v.object({ "attemptCount": v.number(), "createdAt": v.number(), "createdBy": v.string(), "desiredPayload": v.record(v.string(), v.any()), "lastAppliedPayloadHash": v.optional(v.string()), "lastError": v.optional(v.string()), "lastSyncedAt": v.optional(v.number()), "nextAttemptAt": v.optional(v.number()), "objectId": v.string(), "objectType": v.union(v.literal("resource"), v.literal("role"), v.literal("resource_role"), v.literal("resource_relation"), v.literal("tenant"), v.literal("workspace"), v.literal("principal"), v.literal("membership"), v.literal("group"), v.literal("resource_instance"), v.literal("relationship_tuple"), v.literal("role_assignment"), v.literal("attribute_binding"), v.literal("policy_bundle")), "permitResourceKey": v.optional(v.string()), "permitResourceType": v.optional(v.string()), "permitTenantKey": v.optional(v.string()), "principalId": v.optional(v.string()), "status": v.union(v.literal("pending"), v.literal("synced"), v.literal("error"), v.literal("skipped")), "syncKey": v.string(), "tenantId": v.optional(v.string()), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_syncKey", ["syncKey"]).index("by_status", ["status"]).index("by_tenant_status", ["tenantId", "status"]).index("by_workspace_status", ["workspaceId", "status"]).index("by_principal_status", ["principalId", "status"]),
   "tenantPolicies": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "description": v.optional(v.string()), "groupBindings": v.array(v.string()), "permissions": v.array(v.object({ "actions": v.array(v.string()), "resource": v.string() })), "roleName": v.string(), "tenantId": v.string(), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.string()) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_roleName", ["tenantId", "roleName"]),
   "tenantProviderSecrets": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "encryptedSecret": v.string(), "encryptionVersion": v.string(), "keyHint": v.string(), "label": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedFromSecretRef": v.optional(v.string()), "secretFingerprint": v.string(), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("rotated"), v.literal("revoked")), "tenantId": v.string(), "updatedAt": v.number() })).index("by_secretRef", ["secretRef"]).index("by_tenantId", ["tenantId"]).index("by_tenant_provider", ["tenantId", "providerId"]).index("by_tenant_provider_status", ["tenantId", "providerId", "status"]).index("by_status", ["status"]),
   "tenantProxyGatewayUsage": defineTable(v.object({ "createdAt": v.number(), "estimatedCostUsd": v.optional(v.number()), "failureCode": v.optional(v.string()), "inputTokens": v.optional(v.number()), "latencyMs": v.number(), "metadata": v.optional(v.record(v.string(), v.any())), "modelId": v.optional(v.string()), "modelSlotId": v.string(), "outputTokens": v.optional(v.number()), "principalId": v.string(), "providerId": v.string(), "proxyTokenId": v.string(), "requestPath": v.string(), "responseStatus": v.optional(v.number()), "secretRef": v.string(), "sessionId": v.string(), "status": v.union(v.literal("success"), v.literal("error")), "tenantId": v.string(), "tokenCount": v.optional(v.number()), "updatedAt": v.number(), "usageId": v.string(), "workspaceId": v.optional(v.string()) })).index("by_usageId", ["usageId"]).index("by_tenantId", ["tenantId", "createdAt"]).index("by_tenant_provider", ["tenantId", "providerId", "createdAt"]).index("by_proxyTokenId", ["proxyTokenId", "createdAt"]),
@@ -102,19 +87,17 @@ var CONTROL_PLANE_SCHEMA_TABLES = {
 };
 var MC_SCHEMA_TABLES = {
   "agentRegistryEntries": defineTable(v.object({ "agentDefinitionId": v.string(), "agentKey": v.string(), "createdAt": v.number(), "createdBy": v.string(), "description": v.string(), "displayName": v.string(), "exampleInvocations": v.array(v.object({ "expectedOutput": v.optional(v.record(v.string(), v.any())), "input": v.record(v.string(), v.any()) })), "executionAdapter": v.union(v.literal("convex_mutation"), v.literal("convex_action"), v.literal("http_callback"), v.literal("mcp_tool"), v.literal("sdk_invocation"), v.literal("external_observed")), "guardrails": v.optional(v.object({ "allowedOrigins": v.optional(v.array(v.string())), "allowNetworkEgress": v.optional(v.boolean()), "heartbeatIntervalMs": v.optional(v.number()), "isolationMode": v.optional(v.union(v.literal("direct"), v.literal("sandbox"))), "maxExecutionMs": v.optional(v.number()), "maxToolCalls": v.optional(v.number()) })), "metadata": v.optional(v.record(v.string(), v.any())), "modelSlot": v.optional(v.string()), "outputSchema": v.optional(v.record(v.string(), v.any())), "parameterSchema": v.record(v.string(), v.any()), "promptName": v.optional(v.string()), "promptReleaseChannel": v.union(v.literal("dev"), v.literal("staging"), v.literal("prod")), "requiredModelCapabilities": v.optional(v.array(v.string())), "runtimeConfig": v.optional(v.object({ "auditMode": v.optional(v.union(v.literal("harness"), v.literal("master_control"))), "callbackUrl": v.optional(v.string()), "entryPoint": v.optional(v.string()), "modelRouting": v.optional(v.union(v.literal("model_machine"), v.literal("tenant_proxy"), v.literal("bring_your_own"))) })), "scopeRequirements": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("deprecated"), v.literal("disabled")), "systemPrompt": v.optional(v.string()), "tenantId": v.id("tenants"), "toolIds": v.optional(v.array(v.string())), "updatedAt": v.number(), "version": v.string(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_agentDefinitionId", ["agentDefinitionId"]).index("by_tenant_agentDefinitionId", ["tenantId", "agentDefinitionId"]).index("by_tenant_agentDefinitionId_version", ["tenantId", "agentDefinitionId", "version"]).index("by_tenant_agentKey", ["tenantId", "agentKey"]).index("by_tenant_agentKey_version", ["tenantId", "agentKey", "version"]).index("by_workspace_agentKey_version", ["workspaceId", "agentKey", "version"]).index("by_tenant_status", ["tenantId", "status"]),
-  "apiKeys": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "environment": v.optional(v.union(v.literal("dev"), v.literal("staging"), v.literal("prod"))), "expiresAt": v.optional(v.number()), "keyHash": v.string(), "keyHint": v.string(), "keyPrefix": v.union(v.literal("luc"), v.literal("stk")), "label": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked"), v.literal("expired")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_tenantId", ["tenantId"]).index("by_keyHash", ["keyHash"]).index("by_tenant_prefix", ["tenantId", "keyPrefix"]).index("by_status", ["status"]),
-  "auditLog": defineTable(v.object({ "action": v.union(v.literal("key_created"), v.literal("key_revoked"), v.literal("key_expired"), v.literal("key_used"), v.literal("tenant_secret_created"), v.literal("tenant_secret_rotated"), v.literal("tenant_secret_revoked"), v.literal("tenant_slot_binding_upserted"), v.literal("tenant_slot_binding_revoked"), v.literal("proxy_token_minted"), v.literal("proxy_token_lease_issued"), v.literal("proxy_token_lease_renewed"), v.literal("proxy_token_lease_revoked"), v.literal("proxy_request_recorded"), v.literal("tenant_created"), v.literal("tenant_updated"), v.literal("tenant_suspended"), v.literal("tenant_archived"), v.literal("tenant_reactivated"), v.literal("tenant_clerk_organization_linked"), v.literal("principal_created"), v.literal("principal_updated"), v.literal("principal_suspended"), v.literal("principal_identity_alias_upserted"), v.literal("principal_identity_alias_revoked"), v.literal("membership_created"), v.literal("membership_updated"), v.literal("membership_revoked"), v.literal("group_created"), v.literal("group_updated"), v.literal("group_deleted"), v.literal("group_member_added"), v.literal("group_member_removed"), v.literal("workspace_created"), v.literal("workspace_updated"), v.literal("workspace_archived"), v.literal("workspace_deployment_set"), v.literal("workspace_deployment_removed"), v.literal("deployment_host_registered"), v.literal("deployment_host_revoked"), v.literal("service_key_created"), v.literal("service_key_rotated"), v.literal("service_key_revoked"), v.literal("service_key_used"), v.literal("service_key_auth_failed"), v.literal("session_created"), v.literal("session_validated"), v.literal("session_revoked"), v.literal("session_cascade_revoked"), v.literal("session_expired"), v.literal("sandbox_created"), v.literal("sandbox_secret_injected"), v.literal("sandbox_execution_started"), v.literal("sandbox_execution_completed"), v.literal("sandbox_limit_violated"), v.literal("policy_created"), v.literal("policy_updated"), v.literal("policy_enforced"), v.literal("policy_archived"), v.literal("permit_sync_enqueued"), v.literal("permit_sync_succeeded"), v.literal("permit_sync_failed"), v.literal("permit_sync_skipped"), v.literal("agent_registered"), v.literal("agent_updated"), v.literal("tool_registered"), v.literal("tool_updated"), v.literal("pack_entitled"), v.literal("pack_installed"), v.literal("pack_enabled"), v.literal("pack_disabled"), v.literal("pack_entitlement_revoked"), v.literal("pack_upgraded"), v.literal("pack_upgrade_committed"), v.literal("pack_upgrade_rolled_back"), v.literal("pack_group_assigned"), v.literal("pack_group_unassigned"), v.literal("methodology_pack_created"), v.literal("methodology_pack_updated"), v.literal("methodology_pack_assigned"), v.literal("methodology_pack_removed"), v.literal("pack_assigned_to_group"), v.literal("pack_revoked_from_group"), v.literal("pack_ontology_materialized"), v.literal("pack_ontology_topic_bound"), v.literal("cutover_flag_set"), v.literal("cutover_flag_cleared")), "actorClerkId": v.string(), "apiKeyId": v.optional(v.id("apiKeys")), "createdAt": v.number(), "details": v.optional(v.any()), "tenantId": v.optional(v.id("tenants")) })).index("by_tenantId", ["tenantId", "createdAt"]).index("by_apiKeyId", ["apiKeyId", "createdAt"]).index("by_action", ["action", "createdAt"]),
+  "apiKeys": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "expiresAt": v.optional(v.number()), "keyHash": v.string(), "keyHint": v.string(), "keyPrefix": v.union(v.literal("luc"), v.literal("stk")), "label": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked"), v.literal("expired")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_tenantId", ["tenantId"]).index("by_keyHash", ["keyHash"]).index("by_tenant_prefix", ["tenantId", "keyPrefix"]).index("by_status", ["status"]),
+  "auditLog": defineTable(v.object({ "action": v.union(v.literal("key_created"), v.literal("key_revoked"), v.literal("key_expired"), v.literal("key_used"), v.literal("tenant_secret_created"), v.literal("tenant_secret_rotated"), v.literal("tenant_secret_revoked"), v.literal("tenant_slot_binding_upserted"), v.literal("tenant_slot_binding_revoked"), v.literal("proxy_token_minted"), v.literal("proxy_request_recorded"), v.literal("tenant_created"), v.literal("tenant_updated"), v.literal("tenant_suspended"), v.literal("tenant_archived"), v.literal("tenant_reactivated"), v.literal("principal_created"), v.literal("principal_updated"), v.literal("principal_suspended"), v.literal("membership_created"), v.literal("membership_updated"), v.literal("membership_revoked"), v.literal("group_created"), v.literal("group_updated"), v.literal("group_deleted"), v.literal("group_member_added"), v.literal("group_member_removed"), v.literal("workspace_created"), v.literal("workspace_updated"), v.literal("workspace_archived"), v.literal("workspace_deployment_set"), v.literal("workspace_deployment_removed"), v.literal("service_key_created"), v.literal("service_key_rotated"), v.literal("service_key_revoked"), v.literal("service_key_used"), v.literal("service_key_auth_failed"), v.literal("session_created"), v.literal("session_validated"), v.literal("session_revoked"), v.literal("session_cascade_revoked"), v.literal("session_expired"), v.literal("sandbox_created"), v.literal("sandbox_secret_injected"), v.literal("sandbox_execution_started"), v.literal("sandbox_execution_completed"), v.literal("sandbox_limit_violated"), v.literal("policy_created"), v.literal("policy_updated"), v.literal("policy_enforced"), v.literal("policy_archived"), v.literal("agent_registered"), v.literal("agent_updated"), v.literal("tool_registered"), v.literal("tool_updated"), v.literal("pack_entitled"), v.literal("pack_installed"), v.literal("pack_enabled"), v.literal("pack_disabled"), v.literal("pack_entitlement_revoked"), v.literal("pack_upgraded"), v.literal("pack_upgrade_committed"), v.literal("pack_upgrade_rolled_back"), v.literal("pack_group_assigned"), v.literal("pack_group_unassigned"), v.literal("methodology_pack_created"), v.literal("methodology_pack_updated"), v.literal("methodology_pack_assigned"), v.literal("methodology_pack_removed"), v.literal("pack_assigned_to_group"), v.literal("pack_revoked_from_group"), v.literal("pack_ontology_materialized"), v.literal("pack_ontology_topic_bound"), v.literal("cutover_flag_set"), v.literal("cutover_flag_cleared")), "actorClerkId": v.string(), "apiKeyId": v.optional(v.id("apiKeys")), "createdAt": v.number(), "details": v.optional(v.any()), "tenantId": v.optional(v.id("tenants")) })).index("by_tenantId", ["tenantId", "createdAt"]).index("by_apiKeyId", ["apiKeyId", "createdAt"]).index("by_action", ["action", "createdAt"]),
   "compatibilityShims": defineTable(v.object({ "bridgeTarget": v.object({ "harnessPath": v.string(), "legacyPath": v.string(), "type": v.union(v.literal("tool"), v.literal("agent")) }), "bridgeType": v.union(v.literal("tool"), v.literal("agent")), "createdAt": v.string(), "description": v.string(), "gateId": v.string(), "lastAuditedAt": v.number(), "metadata": v.optional(v.record(v.string(), v.any())), "owner": v.string(), "producesLedgerEntries": v.boolean(), "removalDate": v.string(), "removalPriority": v.union(v.literal("P1"), v.literal("P2"), v.literal("P3")), "shimBehavior": v.union(v.literal("passthrough_with_logging"), v.literal("adapter"), v.literal("feature_flag_gate")), "shimId": v.string(), "status": v.union(v.literal("active"), v.literal("overdue"), v.literal("removed")) })).index("by_shimId", ["shimId"]).index("by_status", ["status"]).index("by_bridgeType_status", ["bridgeType", "status"]),
-  "controlPlaneTenantModelSlotBindings": defineTable(v.object({ "bindingId": v.string(), "createdAt": v.number(), "createdBy": v.string(), "environment": v.optional(v.union(v.literal("dev"), v.literal("staging"), v.literal("prod"))), "metadata": v.optional(v.record(v.string(), v.any())), "modelSlotId": v.string(), "passThroughOnly": v.boolean(), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_bindingId", ["bindingId"]).index("by_tenantId", ["tenantId"]).index("by_tenant_slot", ["tenantId", "modelSlotId"]).index("by_tenant_provider_slot", ["tenantId", "providerId", "modelSlotId"]).index("by_secretRef", ["secretRef"]).index("by_status", ["status"]),
-  "controlPlaneTenantProviderSecrets": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "encryptedSecret": v.optional(v.string()), "encryptionVersion": v.string(), "environment": v.optional(v.union(v.literal("dev"), v.literal("staging"), v.literal("prod"))), "infisicalPath": v.optional(v.string()), "infisicalProjectId": v.optional(v.string()), "infisicalSecretKey": v.optional(v.string()), "keyHint": v.string(), "label": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedFromSecretRef": v.optional(v.string()), "secretFingerprint": v.string(), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_secretRef", ["secretRef"]).index("by_tenantId", ["tenantId"]).index("by_tenant_provider", ["tenantId", "providerId"]).index("by_tenant_provider_status", ["tenantId", "providerId", "status"]).index("by_status", ["status"]),
+  "controlPlaneTenantModelSlotBindings": defineTable(v.object({ "bindingId": v.string(), "createdAt": v.number(), "createdBy": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "modelSlotId": v.string(), "passThroughOnly": v.boolean(), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_bindingId", ["bindingId"]).index("by_tenantId", ["tenantId"]).index("by_tenant_slot", ["tenantId", "modelSlotId"]).index("by_tenant_provider_slot", ["tenantId", "providerId", "modelSlotId"]).index("by_secretRef", ["secretRef"]).index("by_status", ["status"]),
+  "controlPlaneTenantProviderSecrets": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "encryptedSecret": v.string(), "encryptionVersion": v.string(), "keyHint": v.string(), "label": v.optional(v.string()), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "providerId": v.string(), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedFromSecretRef": v.optional(v.string()), "secretFingerprint": v.string(), "secretRef": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_secretRef", ["secretRef"]).index("by_tenantId", ["tenantId"]).index("by_tenant_provider", ["tenantId", "providerId"]).index("by_tenant_provider_status", ["tenantId", "providerId", "status"]).index("by_status", ["status"]),
   "controlPlaneTenantProxyGatewayUsage": defineTable(v.object({ "createdAt": v.number(), "estimatedCostUsd": v.optional(v.number()), "failureCode": v.optional(v.string()), "inputTokens": v.optional(v.number()), "latencyMs": v.number(), "metadata": v.optional(v.record(v.string(), v.any())), "modelId": v.optional(v.string()), "modelSlotId": v.string(), "outputTokens": v.optional(v.number()), "principalId": v.string(), "providerId": v.string(), "proxyTokenId": v.string(), "requestPath": v.string(), "responseStatus": v.optional(v.number()), "secretRef": v.string(), "sessionId": v.string(), "status": v.union(v.literal("success"), v.literal("error")), "tenantId": v.id("tenants"), "tokenCount": v.optional(v.number()), "updatedAt": v.number(), "usageId": v.string(), "workspaceId": v.optional(v.string()) })).index("by_usageId", ["usageId"]).index("by_tenantId", ["tenantId", "createdAt"]).index("by_tenant_provider", ["tenantId", "providerId", "createdAt"]).index("by_proxyTokenId", ["proxyTokenId", "createdAt"]).index("by_sessionId", ["sessionId", "createdAt"]),
-  "controlPlaneTenantProxyTokenLeases": defineTable(v.object({ "agentSessionId": v.optional(v.string()), "bindingId": v.string(), "createdAt": v.number(), "environment": v.union(v.literal("dev"), v.literal("staging"), v.literal("prod")), "expiresAt": v.number(), "leaseId": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "modelSlotId": v.string(), "permitDecisionLogId": v.optional(v.id("policyDecisionLogs")), "permitTraceId": v.optional(v.string()), "principalId": v.string(), "providerId": v.string(), "proxyTokenId": v.string(), "renewedAt": v.optional(v.number()), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "revokeReason": v.optional(v.string()), "secretRef": v.string(), "sessionId": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_leaseId", ["leaseId"]).index("by_proxyTokenId", ["proxyTokenId"]).index("by_tenantId", ["tenantId", "createdAt"]).index("by_sessionId", ["sessionId", "createdAt"]).index("by_principalId", ["principalId", "createdAt"]).index("by_status_expiresAt", ["status", "expiresAt"]),
   "controlPlaneToolAcls": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "role": v.string(), "tenantId": v.id("tenants"), "toolName": v.string(), "updatedAt": v.number() })).index("by_tenant_role", ["tenantId", "role"]).index("by_tenant_toolName", ["tenantId", "toolName"]),
   "cutoverFlags": defineTable(v.object({ "createdAt": v.number(), "domain": v.union(v.literal("graph"), v.literal("schema"), v.literal("identity"), v.literal("policy"), v.literal("audit"), v.literal("admin"), v.literal("agent"), v.literal("tool"), v.literal("prompt"), v.literal("intelligence")), "metadata": v.optional(v.record(v.string(), v.any())), "state": v.union(v.literal("legacy"), v.literal("cutover"), v.literal("disabled")), "updatedAt": v.number(), "updatedBy": v.string() })).index("by_domain", ["domain"]).index("by_state", ["state"]),
-  "deploymentHosts": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "deploymentName": v.optional(v.string()), "deploymentUrl": v.optional(v.string()), "environment": v.union(v.literal("dev"), v.literal("staging"), v.literal("prod")), "host": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "source": v.union(v.literal("vercel_preview"), v.literal("vercel_production"), v.literal("vercel_custom_environment"), v.literal("custom_domain"), v.literal("manual")), "status": v.union(v.literal("active"), v.literal("revoked")), "target": v.union(v.literal("kernelDeployment"), v.literal("appDeployment")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "vercelEnvironment": v.optional(v.union(v.literal("development"), v.literal("preview"), v.literal("staging"), v.literal("production"))), "vercelProjectId": v.optional(v.string()), "vercelProjectName": v.optional(v.string()), "workspaceId": v.id("workspaces") })).index("by_host", ["host"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace_environment", ["tenantId", "workspaceId", "environment"]).index("by_workspace_status", ["workspaceId", "status"]).index("by_status", ["status"]),
   "groupMemberships": defineTable(v.object({ "addedBy": v.optional(v.string()), "createdAt": v.number(), "groupId": v.id("groups"), "principalId": v.string(), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_groupId", ["groupId"]).index("by_principalId", ["principalId"]).index("by_principal_group", ["principalId", "groupId"]).index("by_status", ["status"]),
   "groups": defineTable(v.object({ "createdAt": v.number(), "description": v.optional(v.string()), "groupKey": v.string(), "groupType": v.union(v.literal("internal"), v.literal("external"), v.literal("system")), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenantId_groupKey", ["tenantId", "groupKey"]),
-  "memberships": defineTable(v.object({ "createdAt": v.number(), "grantedBy": v.optional(v.string()), "principalId": v.string(), "principalRefId": v.optional(v.id("principals")), "role": v.union(v.literal("platform_admin"), v.literal("tenant_admin"), v.literal("workspace_admin"), v.literal("editor"), v.literal("viewer"), v.literal("auditor"), v.literal("service_agent")), "source": v.union(v.literal("manual"), v.literal("sso"), v.literal("bootstrap"), v.literal("api"), v.literal("scim")), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_principalId", ["principalId"]).index("by_principal_tenant", ["principalId", "tenantId"]).index("by_principal_tenant_workspace", ["principalId", "tenantId", "workspaceId"]).index("by_workspace_principal", ["workspaceId", "principalId"]).index("by_tenant_role", ["tenantId", "role"]).index("by_status", ["status"]),
+  "memberships": defineTable(v.object({ "createdAt": v.number(), "grantedBy": v.optional(v.string()), "principalId": v.string(), "principalRefId": v.optional(v.id("principals")), "role": v.union(v.literal("platform_admin"), v.literal("tenant_admin"), v.literal("workspace_admin"), v.literal("editor"), v.literal("viewer"), v.literal("auditor"), v.literal("service_agent")), "source": v.union(v.literal("manual"), v.literal("sso"), v.literal("bootstrap"), v.literal("api"), v.literal("scim")), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_principalId", ["principalId"]).index("by_principal_tenant", ["principalId", "tenantId"]).index("by_workspace_principal", ["workspaceId", "principalId"]).index("by_tenant_role", ["tenantId", "role"]).index("by_status", ["status"]),
   "methodologyPacks": defineTable(v.object({ "createdAt": v.number(), "description": v.string(), "enforcementLevel": v.union(v.literal("strict"), v.literal("guided"), v.literal("advisory")), "name": v.string(), "packId": v.string(), "phases": v.array(v.object({ "description": v.string(), "gate": v.optional(v.string()), "instructions": v.string(), "name": v.string(), "requiredTools": v.array(v.string()), "title": v.string() })), "principles": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("draft"), v.literal("archived")), "updatedAt": v.number(), "version": v.string() })).index("by_packId", ["packId"]).index("by_status", ["status"]),
   "oauthDeviceCodes": defineTable(v.object({ "approvedAt": v.optional(v.number()), "clerkUserId": v.optional(v.string()), "clientId": v.string(), "consumedAt": v.optional(v.number()), "createdAt": v.number(), "deniedAt": v.optional(v.number()), "deviceCodeHash": v.string(), "expiresAt": v.number(), "intervalSeconds": v.number(), "lastPolledAt": v.optional(v.number()), "principalId": v.optional(v.string()), "role": v.optional(v.string()), "scope": v.string(), "scopes": v.optional(v.array(v.string())), "sessionId": v.optional(v.string()), "slowDownCount": v.optional(v.number()), "status": v.union(v.literal("pending"), v.literal("approved"), v.literal("denied"), v.literal("expired"), v.literal("consumed")), "tenantId": v.optional(v.id("tenants")), "updatedAt": v.number(), "userCode": v.string(), "workspaceId": v.optional(v.string()) })).index("by_deviceCodeHash", ["deviceCodeHash"]).index("by_userCode", ["userCode"]).index("by_status_expiresAt", ["status", "expiresAt"]).index("by_sessionId", ["sessionId"]),
   "packAssignments": defineTable(v.object({ "assignedBy": v.string(), "createdAt": v.number(), "groupId": v.id("groups"), "packKey": v.string(), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_groupId", ["groupId"]).index("by_tenantId", ["tenantId"]).index("by_tenant_packKey", ["tenantId", "packKey"]).index("by_group_packKey", ["groupId", "packKey"]).index("by_status", ["status"]),
@@ -123,27 +106,24 @@ var MC_SCHEMA_TABLES = {
   "packGroupAssignments": defineTable(v.object({ "assignedBy": v.string(), "createdAt": v.number(), "groupId": v.id("groups"), "packKey": v.string(), "packVersion": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("disabled")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_groupId", ["groupId"]).index("by_tenantId", ["tenantId"]).index("by_tenant_packKey", ["tenantId", "packKey"]).index("by_group_packKey", ["groupId", "packKey"]),
   "packInstallations": defineTable(v.object({ "candidateVersion": v.optional(v.string()), "componentStatus": v.optional(v.record(v.string(), v.any())), "createdAt": v.number(), "disabledBy": v.optional(v.string()), "enabledBy": v.optional(v.string()), "healthStatus": v.union(v.literal("unknown"), v.literal("healthy"), v.literal("degraded"), v.literal("failing")), "installedBy": v.optional(v.string()), "installScope": v.optional(v.union(v.literal("tenant"), v.literal("workspace"))), "installStatus": v.optional(v.union(v.literal("installing"), v.literal("installed"), v.literal("partial_failure"), v.literal("uninstalling"))), "lastError": v.optional(v.string()), "lastHealthCheckAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "packKey": v.string(), "packVersion": v.string(), "runtimeState": v.union(v.literal("registered"), v.literal("validated"), v.literal("installed"), v.literal("enabled"), v.literal("degraded"), v.literal("disabled"), v.literal("removed")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "upgradeCompletedAt": v.optional(v.number()), "upgradeStartedAt": v.optional(v.number()), "versionWindowState": v.optional(v.union(v.literal("none"), v.literal("prepared"), v.literal("canary"), v.literal("committed"), v.literal("rolled_back"))), "workspaceId": v.optional(v.id("workspaces")) })).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_packKey", ["packKey"]).index("by_packKey_version", ["packKey", "packVersion"]).index("by_tenant_packKey", ["tenantId", "packKey"]).index("by_tenant_workspace_packKey", ["tenantId", "workspaceId", "packKey"]).index("by_tenant_runtimeState", ["tenantId", "runtimeState"]).index("by_workspace_runtimeState", ["workspaceId", "runtimeState"]).index("by_tenant_healthStatus", ["tenantId", "healthStatus"]).index("by_workspace_healthStatus", ["workspaceId", "healthStatus"]),
   "packVersions": defineTable(v.object({ "agentManifest": v.optional(v.array(v.string())), "configSnapshot": v.optional(v.record(v.string(), v.any())), "createdAt": v.number(), "lensManifest": v.optional(v.array(v.object({ "description": v.optional(v.string()), "filterCriteria": v.optional(v.any()), "lensKey": v.string(), "metadata": v.optional(v.any()), "name": v.string(), "perspectiveType": v.string(), "promptTemplates": v.array(v.object({ "key": v.string(), "metadata": v.optional(v.any()), "phase": v.optional(v.string()), "promptRef": v.string(), "required": v.optional(v.boolean()), "role": v.optional(v.string()), "version": v.optional(v.string()) })), "questionTemplates": v.optional(v.array(v.object({ "key": v.string(), "linkedBeliefKey": v.optional(v.string()), "metadata": v.optional(v.any()), "priority": v.optional(v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low"))), "text": v.string() }))), "taskTemplates": v.array(v.object({ "description": v.optional(v.string()), "key": v.string(), "metadata": v.optional(v.any()), "phase": v.optional(v.string()), "priority": v.optional(v.union(v.literal("critical"), v.literal("high"), v.literal("medium"), v.literal("low"))), "title": v.string() })), "topicTypeAffinity": v.optional(v.array(v.string())), "workflowTemplates": v.array(v.object({ "description": v.optional(v.string()), "key": v.string(), "metadata": v.optional(v.any()), "name": v.string(), "steps": v.array(v.object({ "description": v.optional(v.string()), "key": v.string(), "metadata": v.optional(v.any()), "promptTemplateKey": v.optional(v.string()), "taskTemplateKeys": v.optional(v.array(v.string())), "title": v.string() })) })) }))), "methodologyManifest": v.optional(v.array(v.string())), "ontologySnapshot": v.optional(v.object({ "edgeTypes": v.array(v.object({ "constraintSeverity": v.optional(v.union(v.literal("warn"), v.literal("info"))), "description": v.optional(v.string()), "label": v.string(), "sourceTypes": v.optional(v.array(v.string())), "targetTypes": v.optional(v.array(v.string())), "value": v.string() })), "entityTypes": v.array(v.object({ "description": v.optional(v.string()), "label": v.string(), "schema": v.optional(v.any()), "subtypes": v.optional(v.array(v.object({ "description": v.optional(v.string()), "label": v.string(), "value": v.string() }))), "value": v.string() })), "ontologyKey": v.string(), "topicBindings": v.optional(v.array(v.object({ "autoBindNewTopics": v.boolean(), "topicType": v.string() }))), "version": v.string() })), "packKey": v.string(), "promptManifest": v.optional(v.array(v.string())), "publishedAt": v.optional(v.number()), "releasedBy": v.string(), "releaseNotes": v.optional(v.string()), "status": v.union(v.literal("draft"), v.literal("published"), v.literal("deprecated")), "toolManifest": v.array(v.object({ "category": v.optional(v.union(v.literal("read"), v.literal("write"), v.literal("admin"), v.literal("system"))), "description": v.optional(v.string()), "executionAdapter": v.optional(v.union(v.literal("convex_mutation"), v.literal("convex_action"), v.literal("http_callback"), v.literal("mcp_tool"), v.literal("sdk_invocation"), v.literal("external_observed"))), "handlerRef": v.optional(v.string()), "parameterSchema": v.optional(v.record(v.string(), v.any())), "requiredAction": v.optional(v.union(v.literal("read"), v.literal("mutate"), v.literal("admin"), v.literal("summarize"), v.literal("export"), v.literal("create"), v.literal("delete"), v.literal("grant"), v.literal("revoke"))), "requiredRole": v.optional(v.union(v.literal("platform_admin"), v.literal("tenant_admin"), v.literal("workspace_admin"), v.literal("editor"), v.literal("viewer"), v.literal("auditor"), v.literal("service_agent"))), "returnSchema": v.optional(v.record(v.string(), v.any())), "safetyMetadata": v.optional(v.object({ "idempotent": v.boolean(), "readOnly": v.boolean(), "sideEffectLevel": v.union(v.literal("none"), v.literal("low"), v.literal("high")) })), "surfaces": v.optional(v.array(v.union(v.literal("mcp"), v.literal("chat"), v.literal("voice"), v.literal("sprint"), v.literal("api"), v.literal("sdk"), v.literal("cli")))), "toolName": v.string(), "toolVersion": v.string() })), "topicIds": v.optional(v.array(v.string())), "version": v.string() })).index("by_packKey", ["packKey"]).index("by_packKey_version", ["packKey", "version"]).index("by_status", ["status"]).index("by_publishedAt", ["publishedAt"]),
-  "permitSyncStates": defineTable(v.object({ "attemptCount": v.number(), "createdAt": v.number(), "createdBy": v.string(), "desiredPayload": v.record(v.string(), v.any()), "lastAppliedPayloadHash": v.optional(v.string()), "lastError": v.optional(v.string()), "lastSyncedAt": v.optional(v.number()), "nextAttemptAt": v.optional(v.number()), "objectId": v.string(), "objectType": v.union(v.literal("resource"), v.literal("role"), v.literal("resource_role"), v.literal("resource_relation"), v.literal("tenant"), v.literal("workspace"), v.literal("principal"), v.literal("membership"), v.literal("group"), v.literal("resource_instance"), v.literal("relationship_tuple"), v.literal("role_assignment")), "permitResourceKey": v.optional(v.string()), "permitResourceType": v.optional(v.string()), "permitTenantKey": v.optional(v.string()), "principalId": v.optional(v.string()), "status": v.union(v.literal("pending"), v.literal("synced"), v.literal("error"), v.literal("skipped")), "syncKey": v.string(), "tenantId": v.optional(v.id("tenants")), "updatedAt": v.number(), "updatedBy": v.optional(v.string()), "workspaceId": v.optional(v.id("workspaces")) })).index("by_syncKey", ["syncKey"]).index("by_status", ["status"]).index("by_tenant_status", ["tenantId", "status"]).index("by_workspace_status", ["workspaceId", "status"]).index("by_principal_status", ["principalId", "status"]),
   "policyBundles": defineTable(v.object({ "bundleKey": v.string(), "createdAt": v.number(), "createdBy": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "policyHash": v.optional(v.string()), "rules": v.record(v.string(), v.any()), "scope": v.union(v.literal("platform"), v.literal("tenant"), v.literal("workspace")), "status": v.union(v.literal("draft"), v.literal("validated"), v.literal("enforced"), v.literal("archived")), "tenantId": v.optional(v.id("tenants")), "updatedAt": v.number(), "version": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_bundle_key", ["bundleKey"]).index("by_bundle_key_version", ["bundleKey", "version"]).index("by_scope_status", ["scope", "status"]).index("by_tenant_status", ["tenantId", "status"]).index("by_workspace_status", ["workspaceId", "status"]),
-  "policyDecisionLogs": defineTable(v.object({ "action": v.union(v.literal("read"), v.literal("summarize"), v.literal("export"), v.literal("mutate"), v.literal("admin"), v.literal("comment"), v.literal("escalate"), v.literal("resolve"), v.literal("vote"), v.literal("route"), v.literal("invoke"), v.literal("manage"), v.literal("deploy"), v.literal("promote"), v.literal("rollback"), v.literal("audit"), v.literal("read_ref"), v.literal("fetch_value"), v.literal("rotate"), v.literal("administer"), v.literal("mint"), v.literal("delegate"), v.literal("revoke")), "audienceClass": v.optional(v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public"))), "audienceKey": v.optional(v.string()), "audienceMode": v.optional(v.string()), "createdAt": v.number(), "decision": v.union(v.literal("allow"), v.literal("deny")), "metadata": v.optional(v.record(v.string(), v.any())), "packKey": v.optional(v.string()), "policyBundleId": v.optional(v.id("policyBundles")), "policyVersion": v.string(), "principalId": v.string(), "reasonCode": v.string(), "resourceId": v.string(), "resourceType": v.string(), "tenantId": v.optional(v.id("tenants")), "traceId": v.optional(v.string()), "workspaceId": v.optional(v.id("workspaces")) })).index("by_principal_createdAt", ["principalId", "createdAt"]).index("by_tenant_createdAt", ["tenantId", "createdAt"]).index("by_pack_createdAt", ["packKey", "createdAt"]).index("by_audienceKey_createdAt", ["audienceKey", "createdAt"]).index("by_decision_createdAt", ["decision", "createdAt"]).index("by_traceId", ["traceId"]),
+  "policyDecisionLogs": defineTable(v.object({ "action": v.union(v.literal("read"), v.literal("summarize"), v.literal("export"), v.literal("mutate"), v.literal("admin"), v.literal("comment"), v.literal("escalate"), v.literal("resolve"), v.literal("vote")), "audienceClass": v.optional(v.union(v.literal("internal"), v.literal("restricted_external"), v.literal("public"))), "audienceKey": v.optional(v.string()), "audienceMode": v.optional(v.string()), "createdAt": v.number(), "decision": v.union(v.literal("allow"), v.literal("deny")), "metadata": v.optional(v.record(v.string(), v.any())), "packKey": v.optional(v.string()), "policyBundleId": v.optional(v.id("policyBundles")), "policyVersion": v.string(), "principalId": v.string(), "reasonCode": v.string(), "resourceId": v.string(), "resourceType": v.string(), "tenantId": v.optional(v.id("tenants")), "traceId": v.optional(v.string()), "workspaceId": v.optional(v.id("workspaces")) })).index("by_principal_createdAt", ["principalId", "createdAt"]).index("by_tenant_createdAt", ["tenantId", "createdAt"]).index("by_pack_createdAt", ["packKey", "createdAt"]).index("by_audienceKey_createdAt", ["audienceKey", "createdAt"]).index("by_decision_createdAt", ["decision", "createdAt"]).index("by_traceId", ["traceId"]),
   "policySimulations": defineTable(v.object({ "actorPrincipalId": v.string(), "createdAt": v.number(), "input": v.record(v.string(), v.any()), "metadata": v.optional(v.record(v.string(), v.any())), "result": v.record(v.string(), v.any()), "simulationKey": v.string(), "tenantId": v.optional(v.id("tenants")), "workspaceId": v.optional(v.id("workspaces")) })).index("by_simulation_key", ["simulationKey"]).index("by_tenant_createdAt", ["tenantId", "createdAt"]).index("by_workspace_createdAt", ["workspaceId", "createdAt"]).index("by_actor_createdAt", ["actorPrincipalId", "createdAt"]),
-  "principalIdentityAliases": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "email": v.optional(v.string()), "externalSubjectId": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.string(), "principalRefId": v.optional(v.id("principals")), "provider": v.string(), "providerProjectId": v.optional(v.string()), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked")), "tenantId": v.optional(v.id("tenants")), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_provider_subject", ["provider", "externalSubjectId"]).index("by_provider_project_subject", ["provider", "providerProjectId", "externalSubjectId"]).index("by_principalId", ["principalId"]).index("by_principal_status", ["principalId", "status"]).index("by_tenant_provider_subject", ["tenantId", "provider", "externalSubjectId"]).index("by_workspace_provider_subject", ["workspaceId", "provider", "externalSubjectId"]),
   "principals": defineTable(v.object({ "clerkId": v.optional(v.string()), "createdAt": v.number(), "displayName": v.optional(v.string()), "email": v.optional(v.string()), "groupIds": v.optional(v.array(v.id("groups"))), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.string(), "principalType": v.union(v.literal("user"), v.literal("group"), v.literal("service"), v.literal("external_viewer")), "status": v.union(v.literal("active"), v.literal("invited"), v.literal("suspended"), v.literal("disabled")), "tenantId": v.optional(v.id("tenants")), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_principalId", ["principalId"]).index("by_clerkId", ["clerkId"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_status", ["status"]),
   "rateLimitWindows": defineTable(v.object({ "createdAt": v.number(), "keyId": v.optional(v.string()), "limit": v.number(), "principalId": v.string(), "requestCount": v.number(), "tenantId": v.optional(v.id("tenants")), "tier": v.union(v.literal("free"), v.literal("developer"), v.literal("partner")), "updatedAt": v.number(), "windowEndMs": v.number(), "windowStartMs": v.number(), "windowType": v.union(v.literal("minute"), v.literal("hour")) })).index("by_principal_window", ["principalId", "windowType", "windowStartMs"]).index("by_window_type_start", ["windowType", "windowStartMs"]).index("by_window_end", ["windowEndMs"]).index("by_tier_window_end", ["tier", "windowEndMs"]),
-  "secretSyncDriftReports": defineTable(v.object({ "appliedReceiptId": v.optional(v.string()), "dryRunReceiptId": v.optional(v.string()), "generatedAt": v.number(), "manifestHash": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "recordedAt": v.number(), "recordedBy": v.string(), "redactedReport": v.record(v.string(), v.any()), "reportHash": v.string(), "reportId": v.string(), "source": v.union(v.literal("infisical_manifest"), v.literal("manual"), v.literal("ci")), "status": v.union(v.literal("in_sync"), v.literal("drift"), v.literal("exception"), v.literal("blocked"), v.literal("not_observed")), "summary": v.object({ "approvedExceptions": v.number(), "blocked": v.number(), "deniedConvexLeakage": v.number(), "drift": v.number(), "exception": v.number(), "extraKeys": v.number(), "inSync": v.number(), "missingKeys": v.number(), "notObserved": v.number(), "totalPipelines": v.number(), "valueDriftKeys": v.number() }) })).index("by_reportId", ["reportId"]).index("by_reportHash", ["reportHash"]).index("by_generatedAt", ["generatedAt"]).index("by_status_generatedAt", ["status", "generatedAt"]),
   "servicePrincipalKeys": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "environment": v.union(v.literal("sandbox"), v.literal("production")), "expiresAt": v.number(), "keyId": v.string(), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "principalId": v.string(), "rateLimitTier": v.optional(v.union(v.literal("free"), v.literal("developer"), v.literal("partner"))), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedToKeyId": v.optional(v.string()), "rotationGracePeriod": v.optional(v.number()), "scopes": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("rotating"), v.literal("rotated"), v.literal("expired"), v.literal("revoked")), "tenantId": v.id("tenants"), "tokenHash": v.string(), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_keyId", ["keyId"]).index("by_tokenHash", ["tokenHash"]).index("by_principalId", ["principalId"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_status", ["status"]).index("by_principal_status", ["principalId", "status"]),
-  "tenantDeploymentCredentials": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "credentialRef": v.string(), "encryptedDeployKey": v.string(), "encryptionVersion": v.string(), "environment": v.union(v.literal("dev"), v.literal("staging"), v.literal("prod")), "keyFingerprint": v.string(), "keyHint": v.string(), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedFromCredentialRef": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked")), "target": v.union(v.literal("kernelDeployment"), v.literal("appDeployment")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_credentialRef", ["credentialRef"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_target", ["tenantId", "target"]).index("by_tenant_target_environment", ["tenantId", "target", "environment"]).index("by_tenant_target_environment_status", ["tenantId", "target", "environment", "status"]).index("by_tenant_workspace_target_environment_status", ["tenantId", "workspaceId", "target", "environment", "status"]).index("by_status", ["status"]),
+  "tenantDeploymentCredentials": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.string(), "credentialRef": v.string(), "encryptedDeployKey": v.string(), "encryptionVersion": v.string(), "environment": v.union(v.literal("dev"), v.literal("staging"), v.literal("prod")), "keyFingerprint": v.string(), "keyHint": v.string(), "lastUsedAt": v.optional(v.number()), "metadata": v.optional(v.record(v.string(), v.any())), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "rotatedFromCredentialRef": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("revoked")), "target": v.union(v.literal("kernelDeployment"), v.literal("appDeployment")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_credentialRef", ["credentialRef"]).index("by_tenantId", ["tenantId"]).index("by_tenant_target", ["tenantId", "target"]).index("by_tenant_target_environment", ["tenantId", "target", "environment"]).index("by_tenant_target_environment_status", ["tenantId", "target", "environment", "status"]).index("by_status", ["status"]),
   "tenantMethodologyAssignments": defineTable(v.object({ "assignedAt": v.number(), "assignedBy": v.string(), "isDefault": v.boolean(), "methodologyPackId": v.id("methodologyPacks"), "tenantId": v.id("tenants") })).index("by_tenantId", ["tenantId"]).index("by_methodologyPackId", ["methodologyPackId"]),
   "tenants": defineTable(v.object({ "appDeployment": v.optional(v.object({ "devId": v.string(), "devUrl": v.string(), "prodId": v.optional(v.string()), "prodUrl": v.optional(v.string()), "stagingId": v.optional(v.string()), "stagingUrl": v.optional(v.string()) })), "createdAt": v.number(), "kernelDeployment": v.optional(v.object({ "devId": v.string(), "devUrl": v.string(), "prodId": v.optional(v.string()), "prodUrl": v.optional(v.string()), "stagingId": v.optional(v.string()), "stagingUrl": v.optional(v.string()) })), "lucernDeployment": v.optional(v.object({ "devId": v.string(), "devUrl": v.string(), "prodId": v.optional(v.string()), "prodUrl": v.optional(v.string()), "stagingId": v.optional(v.string()), "stagingUrl": v.optional(v.string()) })), "metadata": v.optional(v.any()), "name": v.string(), "ownerClerkId": v.string(), "ownerEmail": v.optional(v.string()), "slug": v.string(), "status": v.union(v.literal("provisioning"), v.literal("active"), v.literal("suspended"), v.literal("archived")), "tier": v.union(v.literal("free"), v.literal("developer"), v.literal("team"), v.literal("enterprise")), "updatedAt": v.number() })).index("by_slug", ["slug"]).index("by_status", ["status"]).index("by_ownerClerkId", ["ownerClerkId"]),
   "toolCatalog": defineTable(v.object({ "category": v.union(v.literal("read"), v.literal("write"), v.literal("admin"), v.literal("system")), "createdAt": v.number(), "description": v.string(), "distribution": v.union(v.literal("base"), v.literal("pack_only")), "executionAdapter": v.optional(v.union(v.literal("convex_mutation"), v.literal("convex_action"), v.literal("http_callback"), v.literal("mcp_tool"), v.literal("sdk_invocation"), v.literal("external_observed"))), "handlerRef": v.optional(v.string()), "metadata": v.optional(v.record(v.string(), v.any())), "parameterSchema": v.optional(v.record(v.string(), v.any())), "requiredAction": v.union(v.literal("read"), v.literal("mutate"), v.literal("admin"), v.literal("summarize"), v.literal("export"), v.literal("create"), v.literal("delete"), v.literal("grant"), v.literal("revoke")), "requiredRole": v.union(v.literal("platform_admin"), v.literal("tenant_admin"), v.literal("workspace_admin"), v.literal("editor"), v.literal("viewer"), v.literal("auditor"), v.literal("service_agent")), "returnSchema": v.optional(v.record(v.string(), v.any())), "safetyMetadata": v.optional(v.object({ "idempotent": v.boolean(), "readOnly": v.boolean(), "sideEffectLevel": v.union(v.literal("none"), v.literal("low"), v.literal("high")) })), "status": v.union(v.literal("active"), v.literal("deprecated"), v.literal("draft")), "surfaces": v.array(v.union(v.literal("mcp"), v.literal("chat"), v.literal("voice"), v.literal("sprint"), v.literal("api"), v.literal("sdk"), v.literal("cli"))), "toolName": v.string(), "updatedAt": v.number(), "version": v.string() })).index("by_toolName", ["toolName"]).index("by_status", ["status"]).index("by_distribution", ["distribution"]).index("by_distribution_status", ["distribution", "status"]).index("by_category", ["category"]).index("by_requiredRole", ["requiredRole"]),
   "toolRegistryEntries": defineTable(v.object({ "approvalGateId": v.optional(v.string()), "category": v.optional(v.union(v.literal("read"), v.literal("write"), v.literal("admin"), v.literal("system"))), "createdAt": v.number(), "createdBy": v.string(), "description": v.string(), "exampleInvocations": v.array(v.object({ "expectedOutput": v.optional(v.record(v.string(), v.any())), "input": v.record(v.string(), v.any()) })), "executionAdapter": v.union(v.literal("convex_mutation"), v.literal("convex_action"), v.literal("http_callback"), v.literal("mcp_tool"), v.literal("sdk_invocation"), v.literal("external_observed")), "gateClassification": v.union(v.literal("core"), v.literal("shimmed")), "isCore": v.optional(v.boolean()), "metadata": v.optional(v.record(v.string(), v.any())), "parameterSchema": v.record(v.string(), v.any()), "requiredAction": v.optional(v.union(v.literal("read"), v.literal("mutate"), v.literal("admin"), v.literal("summarize"), v.literal("export"), v.literal("create"), v.literal("delete"), v.literal("grant"), v.literal("revoke"))), "requiredRole": v.optional(v.union(v.literal("platform_admin"), v.literal("tenant_admin"), v.literal("workspace_admin"), v.literal("editor"), v.literal("viewer"), v.literal("auditor"), v.literal("service_agent"))), "safetyMetadata": v.object({ "idempotent": v.boolean(), "readOnly": v.boolean(), "sideEffectLevel": v.union(v.literal("none"), v.literal("low"), v.literal("high")) }), "scopeRequirements": v.array(v.string()), "status": v.union(v.literal("active"), v.literal("deprecated"), v.literal("disabled")), "surfaces": v.optional(v.array(v.union(v.literal("mcp"), v.literal("chat"), v.literal("voice"), v.literal("sprint"), v.literal("api"), v.literal("sdk"), v.literal("cli")))), "tenantId": v.id("tenants"), "toolId": v.string(), "toolName": v.string(), "updatedAt": v.number(), "version": v.string(), "workspaceId": v.optional(v.id("workspaces")) })).index("by_toolId", ["toolId"]).index("by_tenant_toolId", ["tenantId", "toolId"]).index("by_tenant_toolId_version", ["tenantId", "toolId", "version"]).index("by_tenant_toolName", ["tenantId", "toolName"]).index("by_tenant_toolName_version", ["tenantId", "toolName", "version"]).index("by_workspace_toolName_version", ["workspaceId", "toolName", "version"]).index("by_tenant_gateClassification", ["tenantId", "gateClassification"]).index("by_tenant_status", ["tenantId", "status"]),
   "userSessions": defineTable(v.object({ "apiKeyId": v.id("apiKeys"), "authMode": v.optional(v.union(v.literal("interactive_user"), v.literal("service_principal"), v.literal("tenant_api_key"), v.literal("session_token"))), "clerkUserId": v.string(), "createdAt": v.number(), "delegationChain": v.optional(v.array(v.object({ "authMode": v.optional(v.union(v.literal("interactive_user"), v.literal("service_principal"), v.literal("tenant_api_key"), v.literal("session_token"))), "delegatedAt": v.optional(v.number()), "principalId": v.string(), "principalType": v.union(v.literal("human"), v.literal("service"), v.literal("agent")), "reason": v.optional(v.string()), "sessionId": v.optional(v.string()) }))), "jwtExpiresAt": v.optional(v.number()), "jwtIssuedAt": v.optional(v.number()), "lastActivityAt": v.number(), "lastValidatedAt": v.optional(v.number()), "principalId": v.optional(v.string()), "principalType": v.optional(v.union(v.literal("human"), v.literal("service"), v.literal("agent"))), "revokedAt": v.optional(v.number()), "revokedBy": v.optional(v.string()), "revokeReason": v.optional(v.string()), "role": v.optional(v.string()), "scopes": v.optional(v.array(v.string())), "sessionExpiresAt": v.optional(v.number()), "sessionId": v.string(), "sessionType": v.union(v.literal("user"), v.literal("agent")), "sourceSessionId": v.optional(v.string()), "status": v.union(v.literal("active"), v.literal("expired"), v.literal("revoked")), "tenantId": v.id("tenants"), "updatedAt": v.number(), "workspaceId": v.optional(v.string()) })).index("by_sessionId", ["sessionId"]).index("by_sourceSessionId", ["sourceSessionId"]).index("by_tenantId", ["tenantId"]).index("by_clerkUserId", ["clerkUserId"]).index("by_status", ["status"]),
-  "workspaces": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.optional(v.string()), "defaultProjectVisibility": v.optional(v.union(v.literal("private"), v.literal("team"), v.literal("firm"), v.literal("external"), v.literal("public"))), "deployments": v.optional(v.record(v.string(), v.object({ "credentialRef": v.optional(v.string()), "target": v.optional(v.union(v.literal("kernelDeployment"), v.literal("appDeployment"))), "url": v.string() }))), "key": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "slug": v.string(), "status": v.union(v.literal("active"), v.literal("archived")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_tenantId", ["tenantId"]).index("by_tenantId_key", ["tenantId", "key"]).index("by_tenantId_slug", ["tenantId", "slug"]).index("by_status", ["status"])
+  "workspaces": defineTable(v.object({ "createdAt": v.number(), "createdBy": v.optional(v.string()), "defaultProjectVisibility": v.optional(v.union(v.literal("private"), v.literal("team"), v.literal("firm"), v.literal("external"), v.literal("public"))), "deployments": v.optional(v.record(v.string(), v.object({ "encryptedDeployKey": v.string(), "url": v.string() }))), "key": v.string(), "metadata": v.optional(v.record(v.string(), v.any())), "name": v.string(), "slug": v.string(), "status": v.union(v.literal("active"), v.literal("archived")), "tenantId": v.id("tenants"), "updatedAt": v.number() })).index("by_tenantId", ["tenantId"]).index("by_tenantId_key", ["tenantId", "key"]).index("by_tenantId_slug", ["tenantId", "slug"]).index("by_status", ["status"])
 };
 var DEVELOPER_PACK_SCHEMA_TABLES = {};
 var EMPTY_SCHEMA_TABLES = {};
-var CONTROL_PLANE_TIER_SCHEMA_TABLES = {
-  ...CONTROL_PLANE_SCHEMA_TABLES
+var IDENTITY_TIER_SCHEMA_TABLES = {
+  ...IDENTITY_SCHEMA_TABLES
 };
 var KERNEL_TIER_SCHEMA_TABLES = {
   ...KERNEL_SCHEMA_TABLES
@@ -151,7 +131,7 @@ var KERNEL_TIER_SCHEMA_TABLES = {
 var KERNEL_COMPONENT_TIER_SCHEMA_TABLES = {};
 var STACK_TIER_SCHEMA_TABLES = {
   ...KERNEL_SCHEMA_TABLES,
-  ...CONTROL_PLANE_SCHEMA_TABLES,
+  ...IDENTITY_SCHEMA_TABLES,
   ...DEVELOPER_PACK_SCHEMA_TABLES
 };
 var STACK_V2_TIER_SCHEMA_TABLES = {
@@ -162,12 +142,12 @@ var MC_TIER_SCHEMA_TABLES = {
 };
 var FULL_TIER_SCHEMA_TABLES = {
   ...MC_SCHEMA_TABLES,
-  ...CONTROL_PLANE_SCHEMA_TABLES,
+  ...IDENTITY_SCHEMA_TABLES,
   ...KERNEL_SCHEMA_TABLES,
   ...DEVELOPER_PACK_SCHEMA_TABLES
 };
 var TIER_SCHEMA_TABLES = {
-  "control-plane": CONTROL_PLANE_TIER_SCHEMA_TABLES,
+  identity: IDENTITY_TIER_SCHEMA_TABLES,
   kernel: KERNEL_TIER_SCHEMA_TABLES,
   "kernel-component": KERNEL_COMPONENT_TIER_SCHEMA_TABLES,
   stack: STACK_TIER_SCHEMA_TABLES,
@@ -177,6 +157,6 @@ var TIER_SCHEMA_TABLES = {
 };
 var convexSchemas_default = defineSchema(FULL_TIER_SCHEMA_TABLES);
 
-export { CONTROL_PLANE_SCHEMA_TABLES, CONTROL_PLANE_TIER_SCHEMA_TABLES, DEVELOPER_PACK_SCHEMA_TABLES, EMPTY_SCHEMA_TABLES, FULL_TIER_SCHEMA_TABLES, KERNEL_COMPONENT_TIER_SCHEMA_TABLES, KERNEL_SCHEMA_TABLES, KERNEL_TIER_SCHEMA_TABLES, MC_SCHEMA_TABLES, MC_TIER_SCHEMA_TABLES, STACK_TIER_SCHEMA_TABLES, STACK_V2_TIER_SCHEMA_TABLES, TIER_SCHEMA_TABLES, convexSchemas_default as default };
+export { DEVELOPER_PACK_SCHEMA_TABLES, EMPTY_SCHEMA_TABLES, FULL_TIER_SCHEMA_TABLES, IDENTITY_SCHEMA_TABLES, IDENTITY_TIER_SCHEMA_TABLES, KERNEL_COMPONENT_TIER_SCHEMA_TABLES, KERNEL_SCHEMA_TABLES, KERNEL_TIER_SCHEMA_TABLES, MC_SCHEMA_TABLES, MC_TIER_SCHEMA_TABLES, STACK_TIER_SCHEMA_TABLES, STACK_V2_TIER_SCHEMA_TABLES, TIER_SCHEMA_TABLES, convexSchemas_default as default };
 //# sourceMappingURL=convexSchemas.js.map
 //# sourceMappingURL=convexSchemas.js.map