@lucern/contracts 0.3.0-alpha.9 → 1.0.0

package/dist/generated/schema-manifest.json

@@ -1,17 +1,17 @@
 {
   "generatedFrom": "packages/contracts/src/schemas/manifest.ts",
   "counts": {
-    "total": 112,
+    "total": 132,
     "byComponent": {
-      "kernel": 55,
-      "identity": 24,
-      "mc": 33,
+      "kernel": 56,
+      "control-plane": 38,
+      "mc": 38,
       "developer-pack": 0
     },
     "byLayer": {
-      "L": 33,
-      "I": 24,
-      "K": 55,
+      "L": 38,
+      "C": 38,
+      "K": 56,
       "D": 0,
       "A": 0
     }
@@ -113,8 +113,8 @@
     },
     {
       "name": "agents",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "agent",
       "indices": [
         {
@@ -918,6 +918,62 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "controlPlaneTenantProxyTokenLeases",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_leaseId",
+          "columns": [
+            "leaseId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_proxyTokenId",
+          "columns": [
+            "proxyTokenId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_sessionId",
+          "columns": [
+            "sessionId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_expiresAt",
+          "columns": [
+            "status",
+            "expiresAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "controlPlaneToolAcls",
       "component": "mc",
@@ -1353,6 +1409,119 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "deploymentHosts",
+      "component": "mc",
+      "layer": "L",
+      "category": "workspace",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_host",
+          "columns": [
+            "host"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_environment",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "environment"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "domainEvents",
+      "component": "kernel",
+      "layer": "K",
+      "category": "events",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_eventId",
+          "columns": [
+            "eventId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_topic_timestamp",
+          "columns": [
+            "topicId",
+            "timestamp"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_timestamp",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "timestamp"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_type_timestamp",
+          "columns": [
+            "type",
+            "timestamp"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_resource",
+          "columns": [
+            "resourceType",
+            "resourceId",
+            "timestamp"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_expiresAt",
+          "columns": [
+            "expiresAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "epistemicAudit",
       "component": "kernel",
@@ -2326,8 +2495,8 @@
     },
     {
       "name": "mcpWritePolicy",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -2384,6 +2553,15 @@
             "tenantId"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_principal_tenant_workspace",
+          "columns": [
+            "principalId",
+            "tenantId",
+            "workspaceId"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_workspace_principal",
@@ -2437,8 +2615,8 @@
     },
     {
       "name": "modelCallLogs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2475,8 +2653,8 @@
     },
     {
       "name": "modelFunctionSlots",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2506,8 +2684,8 @@
     },
     {
       "name": "modelRegistry",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -2537,8 +2715,8 @@
     },
     {
       "name": "modelSlotConfigs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "model",
       "indices": [
         {
@@ -3048,57 +3226,47 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRunPolicyDecisions",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitAccessReviewItems",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_decisionId",
+          "name": "by_reviewKey",
           "columns": [
-            "decisionId"
+            "reviewKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_tenant_reviewKey",
           "columns": [
-            "runId",
-            "createdAt"
+            "tenantId",
+            "reviewKey"
           ]
-        }
-      ],
-      "deprecated": null,
-      "invariants": []
-    },
-    {
-      "name": "platformAgentRunPromptResolutions",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
-      "indices": [
+        },
         {
           "kind": "index",
-          "name": "by_promptResolutionId",
+          "name": "by_tenant_itemKey",
           "columns": [
-            "promptResolutionId"
+            "tenantId",
+            "itemKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_subject",
           "columns": [
-            "runId",
-            "createdAt"
+            "subjectType",
+            "subjectId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_prompt_createdAt",
+          "name": "by_status",
           "columns": [
-            "promptName",
-            "createdAt"
+            "status"
           ]
         }
       ],
@@ -3106,40 +3274,49 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRuns",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitAccessReviews",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_runId",
+          "name": "by_tenant_status",
           "columns": [
-            "runId"
+            "tenantId",
+            "status"
           ]
         },
         {
           "kind": "index",
-          "name": "by_status_lastHeartbeatAt",
+          "name": "by_tenant_reviewKey",
           "columns": [
-            "status",
-            "lastHeartbeatAt"
+            "tenantId",
+            "reviewKey"
           ]
         },
         {
           "kind": "index",
-          "name": "by_status_startedAt",
+          "name": "by_subject",
           "columns": [
-            "status",
-            "startedAt"
+            "subjectType",
+            "subjectId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_tenant_status",
+          "name": "by_tenant_subject",
           "columns": [
             "tenantId",
-            "status"
+            "subjectType",
+            "subjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_outcome",
+          "columns": [
+            "outcome"
           ]
         },
         {
@@ -3149,28 +3326,50 @@
             "workspaceId",
             "status"
           ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitAttributeBindings",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_target",
+          "columns": [
+            "tenantId",
+            "targetType",
+            "targetId"
+          ]
         },
         {
           "kind": "index",
-          "name": "by_principal_createdAt",
+          "name": "by_tenant_target_attribute",
           "columns": [
-            "principalId",
-            "createdAt"
+            "tenantId",
+            "targetType",
+            "targetId",
+            "attributeName"
           ]
         },
         {
           "kind": "index",
-          "name": "by_agentDefinition_createdAt",
+          "name": "by_tenant_name",
           "columns": [
-            "agentDefinitionId",
-            "createdAt"
+            "tenantId",
+            "attributeName"
           ]
         },
         {
           "kind": "index",
-          "name": "by_topicId",
+          "name": "by_tenant_status",
           "columns": [
-            "topicId"
+            "tenantId",
+            "status"
           ]
         }
       ],
@@ -3178,24 +3377,760 @@
       "invariants": []
     },
     {
-      "name": "platformAgentRunToolCalls",
-      "component": "kernel",
-      "layer": "K",
-      "category": "platform",
+      "name": "permitGroupMemberships",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
       "indices": [
         {
           "kind": "index",
-          "name": "by_toolCallId",
+          "name": "by_tenant_principal",
           "columns": [
-            "toolCallId"
+            "tenantId",
+            "principalId"
           ]
         },
         {
           "kind": "index",
-          "name": "by_run_createdAt",
+          "name": "by_tenant_member",
           "columns": [
-            "runId",
-            "createdAt"
+            "tenantId",
+            "memberType",
+            "memberId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_member_group",
+          "columns": [
+            "tenantId",
+            "memberType",
+            "memberId",
+            "groupId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_group",
+          "columns": [
+            "tenantId",
+            "groupId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_member_group",
+          "columns": [
+            "memberType",
+            "memberId",
+            "groupId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_principal",
+          "columns": [
+            "workspaceId",
+            "principalId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitGroups",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_groupId",
+          "columns": [
+            "tenantId",
+            "groupId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_groupKey",
+          "columns": [
+            "tenantId",
+            "groupKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPolicyBundles",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_bundleKey",
+          "columns": [
+            "tenantId",
+            "bundleKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_bundle_version",
+          "columns": [
+            "tenantId",
+            "bundleKey",
+            "version"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPolicyDecisionReceipts",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_principal_createdAt",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_createdAt",
+          "columns": [
+            "tenantId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_resource",
+          "columns": [
+            "resourceType",
+            "resourceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_decision_createdAt",
+          "columns": [
+            "decision",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_traceId",
+          "columns": [
+            "traceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_action",
+          "columns": [
+            "action"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPrincipalAliases",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_provider_subject",
+          "columns": [
+            "provider",
+            "providerSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_provider_project_subject",
+          "columns": [
+            "provider",
+            "providerProjectId",
+            "providerSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_subject",
+          "columns": [
+            "tenantId",
+            "provider",
+            "providerSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_project_subject",
+          "columns": [
+            "tenantId",
+            "provider",
+            "providerProjectId",
+            "providerSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_alias",
+          "columns": [
+            "tenantId",
+            "provider",
+            "alias"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_alias",
+          "columns": [
+            "tenantId",
+            "alias"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_status",
+          "columns": [
+            "tenantId",
+            "provider",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitPrincipals",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_principalId",
+          "columns": [
+            "tenantId",
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_principalType_status",
+          "columns": [
+            "tenantId",
+            "principalType",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitProjectionOutbox",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenantId",
+          "columns": [
+            "tenantId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_objectType",
+          "columns": [
+            "objectType",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitRelationshipTuples",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_subject",
+          "columns": [
+            "tenantId",
+            "subject"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_object",
+          "columns": [
+            "tenantId",
+            "object"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_relation",
+          "columns": [
+            "tenantId",
+            "relation"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_relation_subject",
+          "columns": [
+            "tenantId",
+            "relation",
+            "subject"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitResourceInstances",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_resource_type",
+          "columns": [
+            "tenantId",
+            "resourceType"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_resource_key",
+          "columns": [
+            "tenantId",
+            "resourceType",
+            "resourceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_ownerPrincipalId",
+          "columns": [
+            "ownerPrincipalId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitRoleAssignments",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_tenant_target",
+          "columns": [
+            "tenantId",
+            "targetType",
+            "targetId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_resource",
+          "columns": [
+            "tenantId",
+            "resourceType",
+            "resourceKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_role",
+          "columns": [
+            "tenantId",
+            "role",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_resource",
+          "columns": [
+            "workspaceId",
+            "resourceType",
+            "resourceKey"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "permitSyncStates",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunPolicyDecisions",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_decisionId",
+          "columns": [
+            "decisionId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunPromptResolutions",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_promptResolutionId",
+          "columns": [
+            "promptResolutionId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_prompt_createdAt",
+          "columns": [
+            "promptName",
+            "createdAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRuns",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_runId",
+          "columns": [
+            "runId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_lastHeartbeatAt",
+          "columns": [
+            "status",
+            "lastHeartbeatAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_startedAt",
+          "columns": [
+            "status",
+            "startedAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_createdAt",
+          "columns": [
+            "principalId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_agentDefinition_createdAt",
+          "columns": [
+            "agentDefinitionId",
+            "createdAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_topicId",
+          "columns": [
+            "topicId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
+    {
+      "name": "platformAgentRunToolCalls",
+      "component": "kernel",
+      "layer": "K",
+      "category": "platform",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_toolCallId",
+          "columns": [
+            "toolCallId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_run_createdAt",
+          "columns": [
+            "runId",
+            "createdAt"
           ]
         },
         {
@@ -3212,8 +4147,8 @@
     },
     {
       "name": "platformAudienceGrants",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -3262,8 +4197,8 @@
     },
     {
       "name": "platformAudiences",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -3350,8 +4285,8 @@
     },
     {
       "name": "platformPolicyDecisionLogs",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -3575,6 +4510,66 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "principalIdentityAliases",
+      "component": "mc",
+      "layer": "L",
+      "category": "identity",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_provider_subject",
+          "columns": [
+            "provider",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_provider_project_subject",
+          "columns": [
+            "provider",
+            "providerProjectId",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principalId",
+          "columns": [
+            "principalId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_provider_subject",
+          "columns": [
+            "tenantId",
+            "provider",
+            "externalSubjectId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_provider_subject",
+          "columns": [
+            "workspaceId",
+            "provider",
+            "externalSubjectId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "principals",
       "component": "mc",
@@ -3622,8 +4617,8 @@
     },
     {
       "name": "projectGrants",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "project",
       "indices": [
         {
@@ -3825,8 +4820,8 @@
     },
     {
       "name": "reasoningPermissions",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "epistemic",
       "indices": [
         {
@@ -3940,6 +4935,45 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "secretSyncDriftReports",
+      "component": "mc",
+      "layer": "L",
+      "category": "runtime",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_reportId",
+          "columns": [
+            "reportId"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_reportHash",
+          "columns": [
+            "reportHash"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_generatedAt",
+          "columns": [
+            "generatedAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_generatedAt",
+          "columns": [
+            "status",
+            "generatedAt"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "servicePrincipalKeys",
       "component": "mc",
@@ -4196,8 +5230,8 @@
     },
     {
       "name": "tenantApiKeys",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4235,8 +5269,8 @@
     },
     {
       "name": "tenantConfig",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4270,6 +5304,13 @@
             "tenantId"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_workspaceId",
+          "columns": [
+            "workspaceId"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_tenant_target",
@@ -4297,6 +5338,17 @@
             "status"
           ]
         },
+        {
+          "kind": "index",
+          "name": "by_tenant_workspace_target_environment_status",
+          "columns": [
+            "tenantId",
+            "workspaceId",
+            "target",
+            "environment",
+            "status"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_status",
@@ -4310,8 +5362,8 @@
     },
     {
       "name": "tenantIntegrations",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4367,8 +5419,8 @@
     },
     {
       "name": "tenantModelSlotBindings",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4420,10 +5472,58 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "tenantPermitSyncStates",
+      "component": "control-plane",
+      "layer": "C",
+      "category": "access-control",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_syncKey",
+          "columns": [
+            "syncKey"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status",
+          "columns": [
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_tenant_status",
+          "columns": [
+            "tenantId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_workspace_status",
+          "columns": [
+            "workspaceId",
+            "status"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_principal_status",
+          "columns": [
+            "principalId",
+            "status"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "tenantPolicies",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4454,8 +5554,8 @@
     },
     {
       "name": "tenantProviderSecrets",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4502,8 +5602,8 @@
     },
     {
       "name": "tenantProxyGatewayUsage",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4544,8 +5644,8 @@
     },
     {
       "name": "tenantProxyTokenMints",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4608,8 +5708,8 @@
     },
     {
       "name": "tenantSandboxAuditEvents",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4641,8 +5741,8 @@
     },
     {
       "name": "tenantSecrets",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4673,8 +5773,8 @@
     },
     {
       "name": "toolAcls",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4750,8 +5850,8 @@
     },
     {
       "name": "toolRegistry",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "platform",
       "indices": [
         {
@@ -4868,6 +5968,13 @@
       "layer": "K",
       "category": "topic",
       "indices": [
+        {
+          "kind": "index",
+          "name": "by_globalId",
+          "columns": [
+            "globalId"
+          ]
+        },
         {
           "kind": "index",
           "name": "by_parent",
@@ -4925,8 +6032,8 @@
     },
     {
       "name": "users",
-      "component": "identity",
-      "layer": "I",
+      "component": "control-plane",
+      "layer": "C",
       "category": "user",
       "indices": [
         {