@lucern/contracts 0.3.0-alpha.9 → 1.0.0

package/dist/schemas/manifest.d.ts

@@ -1,5 +1,5 @@
 import * as zod from 'zod';
-import { T as TableContract } from '../defineTable-CBQ03FXl.js';
+import { T as TableContract } from '../defineTable-t1wr5wgn.js';
 import { C as ConvexIdSchema } from '../idOf-DR8tkhQS.js';
 
 /**
@@ -193,6 +193,21 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
     lockedBy: zod.ZodString;
     lockedAt: zod.ZodNumber;
     createdAt: zod.ZodNumber;
+}>, TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }>, TableContract<{
     sessionId: ConvexIdSchema<"deliberationSessions">;
     topicId: zod.ZodOptional<zod.ZodString>;
@@ -1803,6 +1818,7 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
     questionType: zod.ZodOptional<zod.ZodEnum<["validation", "falsification", "assumption_probe", "prediction_test", "counterfactual", "discovery", "clarification", "comparison", "causal", "mechanism", "general"]>>;
     questionPriority: zod.ZodOptional<zod.ZodEnum<["critical", "high", "medium", "low"]>>;
     answerQuality: zod.ZodOptional<zod.ZodEnum<["definitive", "strong", "moderate", "weak", "speculative", "unanswered"]>>;
+    themeStatus: zod.ZodOptional<zod.ZodEnum<["emerging", "active", "mature", "declining", "archived"]>>;
     themeConviction: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low", "negative"]>>;
     decisionType: zod.ZodOptional<zod.ZodEnum<["invest", "pass", "follow_on", "exit", "deep_dive", "monitor", "deprioritize", "thesis_adopt", "thesis_revise", "thesis_abandon"]>>;
     decisionOutcome: zod.ZodOptional<zod.ZodEnum<["pending", "successful", "unsuccessful", "mixed", "unknown"]>>;
@@ -2570,13 +2586,13 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
         answerConfidence: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low"]>>;
         linkedQuestionId: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
@@ -2734,12 +2750,12 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
         confidenceChange: zod.ZodNumber;
     }, "strip", zod.ZodTypeAny, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }>>;
@@ -2787,16 +2803,16 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
             weight: zod.ZodOptional<zod.ZodNumber>;
             createdAt: zod.ZodOptional<zod.ZodNumber>;
         }, "strip", zod.ZodTypeAny, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
         }, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -2859,16 +2875,16 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }, {
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }>, "many">;
         tasksCompleted: zod.ZodOptional<zod.ZodNumber>;
         totalTasks: zod.ZodOptional<zod.ZodNumber>;
@@ -2926,9 +2942,9 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string & zod.BRAND<"Id<worktrees>">;
         questions: {
@@ -2952,9 +2968,9 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -2992,9 +3008,9 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string;
         questions: {
@@ -3018,9 +3034,9 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -3327,7 +3343,7 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
     createdBy: zod.ZodString;
     metadata: zod.ZodOptional<zod.ZodAny>;
 }>];
-declare const IDENTITY_TABLE_CONTRACTS: readonly [TableContract<{
+declare const CONTROL_PLANE_TABLE_CONTRACTS: readonly [TableContract<{
     slug: zod.ZodString;
     displayName: zod.ZodOptional<zod.ZodString>;
     principalId: zod.ZodString;
@@ -3354,6 +3370,247 @@ declare const IDENTITY_TABLE_CONTRACTS: readonly [TableContract<{
     createdAt: zod.ZodNumber;
     createdBy: zod.ZodString;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    reviewKey: zod.ZodString;
+    itemKey: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["open", "approved", "revoked", "changed", "deferred"]>;
+    reviewerId: zod.ZodOptional<zod.ZodString>;
+    decisionAt: zod.ZodOptional<zod.ZodNumber>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    reviewKey: zod.ZodString;
+    scope: zod.ZodEnum<["tenant", "workspace", "resource_instance", "group", "principal", "api_key", "admin_action"]>;
+    status: zod.ZodEnum<["open", "in_progress", "approved", "denied", "expired", "cancelled"]>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    outcome: zod.ZodOptional<zod.ZodEnum<["allow", "deny"]>>;
+    requestedBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    requestedAt: zod.ZodNumber;
+    reviewedAt: zod.ZodOptional<zod.ZodNumber>;
+    dueAt: zod.ZodOptional<zod.ZodNumber>;
+    justification: zod.ZodOptional<zod.ZodString>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    attributeName: zod.ZodString;
+    attributeType: zod.ZodEnum<["string", "number", "bool", "json", "time"]>;
+    attributeOperator: zod.ZodEnum<["eq", "neq", "in", "not_in", "gt", "gte", "lt", "lte", "contains", "not_contains", "matches"]>;
+    attributeValue: zod.ZodAny;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    source: zod.ZodOptional<zod.ZodString>;
+    sourceRef: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    groupKey: zod.ZodString;
+    groupName: zod.ZodString;
+    groupType: zod.ZodEnum<["tenant", "workspace", "external", "system", "dynamic"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    description: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    memberType: zod.ZodEnum<["principal", "group"]>;
+    memberId: zod.ZodString;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    childGroupId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    addedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    revocationReason: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    bundleKey: zod.ZodString;
+    version: zod.ZodNumber;
+    status: zod.ZodEnum<["draft", "validated", "enforced", "archived"]>;
+    policyHash: zod.ZodOptional<zod.ZodString>;
+    policyPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    retiredAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodString;
+    subjectType: zod.ZodOptional<zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>>;
+    subjectId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceId: zod.ZodString;
+    action: zod.ZodString;
+    decision: zod.ZodEnum<["allow", "deny"]>;
+    reasonCode: zod.ZodString;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    policyVersion: zod.ZodString;
+    traceId: zod.ZodOptional<zod.ZodString>;
+    requestId: zod.ZodOptional<zod.ZodString>;
+    audienceMode: zod.ZodOptional<zod.ZodString>;
+    audienceKey: zod.ZodOptional<zod.ZodString>;
+    audienceClass: zod.ZodOptional<zod.ZodEnum<["internal", "restricted_external", "public"]>>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    provider: zod.ZodString;
+    providerSubjectId: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    alias: zod.ZodString;
+    aliasKind: zod.ZodString;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalType: zod.ZodEnum<["human", "agent", "service_principal", "external_stakeholder", "system"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    displayName: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
+    payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attemptCount: zod.ZodNumber;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodString;
+    subject: zod.ZodString;
+    object: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceId: zod.ZodString;
+    status: zod.ZodEnum<["active", "deleted", "archived"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    ownerPrincipalId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodString;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceInstanceId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    grantedBy: zod.ZodOptional<zod.ZodString>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     slot: zod.ZodString;
     modelKey: zod.ZodString;
@@ -3880,6 +4137,22 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    principalRefId: zod.ZodOptional<ConvexIdSchema<"principals">>;
+    provider: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    externalSubjectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    email: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     principalId: zod.ZodString;
     keyId: zod.ZodOptional<zod.ZodString>;
@@ -4543,7 +4816,7 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     resourceType: zod.ZodString;
     resourceId: zod.ZodString;
-    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote", "route", "invoke", "manage", "deploy", "promote", "rollback", "audit", "read_ref", "fetch_value", "rotate", "administer", "mint", "delegate", "revoke"]>;
     decision: zod.ZodEnum<["allow", "deny"]>;
     reasonCode: zod.ZodString;
     policyVersion: zod.ZodString;
@@ -4571,6 +4844,27 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
@@ -4754,6 +5048,7 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     credentialRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
     environment: zod.ZodEnum<["dev", "staging", "prod"]>;
     encryptedDeployKey: zod.ZodString;
@@ -4769,9 +5064,61 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    reportId: zod.ZodString;
+    source: zod.ZodEnum<["infisical_manifest", "manual", "ci"]>;
+    generatedAt: zod.ZodNumber;
+    recordedAt: zod.ZodNumber;
+    recordedBy: zod.ZodString;
+    status: zod.ZodEnum<["in_sync", "drift", "exception", "blocked", "not_observed"]>;
+    reportHash: zod.ZodString;
+    manifestHash: zod.ZodOptional<zod.ZodString>;
+    dryRunReceiptId: zod.ZodOptional<zod.ZodString>;
+    appliedReceiptId: zod.ZodOptional<zod.ZodString>;
+    summary: zod.ZodObject<{
+        totalPipelines: zod.ZodNumber;
+        inSync: zod.ZodNumber;
+        drift: zod.ZodNumber;
+        exception: zod.ZodNumber;
+        blocked: zod.ZodNumber;
+        notObserved: zod.ZodNumber;
+        missingKeys: zod.ZodNumber;
+        valueDriftKeys: zod.ZodNumber;
+        extraKeys: zod.ZodNumber;
+        deniedConvexLeakage: zod.ZodNumber;
+        approvedExceptions: zod.ZodNumber;
+    }, "strip", zod.ZodTypeAny, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }>;
+    redactedReport: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
 }>, TableContract<{
     bindingId: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     modelSlotId: zod.ZodString;
     secretRef: zod.ZodString;
@@ -4786,9 +5133,14 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     secretRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     label: zod.ZodOptional<zod.ZodString>;
-    encryptedSecret: zod.ZodString;
+    encryptedSecret: zod.ZodOptional<zod.ZodString>;
+    infisicalPath: zod.ZodOptional<zod.ZodString>;
+    infisicalSecretKey: zod.ZodOptional<zod.ZodString>;
+    infisicalProjectId: zod.ZodOptional<zod.ZodString>;
     encryptionVersion: zod.ZodString;
     secretFingerprint: zod.ZodString;
     keyHint: zod.ZodString;
@@ -4824,8 +5176,34 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    leaseId: zod.ZodString;
+    proxyTokenId: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    providerId: zod.ZodString;
+    modelSlotId: zod.ZodString;
+    bindingId: zod.ZodString;
+    secretRef: zod.ZodString;
+    sessionId: zod.ZodString;
+    principalId: zod.ZodString;
+    agentSessionId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    expiresAt: zod.ZodNumber;
+    renewedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokeReason: zod.ZodOptional<zod.ZodString>;
+    permitDecisionLogId: zod.ZodOptional<ConvexIdSchema<"policyDecisionLogs">>;
+    permitTraceId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     keyPrefix: zod.ZodEnum<["luc", "stk"]>;
     keyHash: zod.ZodString;
     keyHint: zod.ZodString;
@@ -4841,7 +5219,7 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
     apiKeyId: zod.ZodOptional<ConvexIdSchema<"apiKeys">>;
-    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "tenant_canonical_identity_repaired", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
     actorClerkId: zod.ZodString;
     details: zod.ZodOptional<zod.ZodAny>;
     createdAt: zod.ZodNumber;
@@ -4931,23 +5309,39 @@ declare const MC_TABLE_CONTRACTS: readonly [TableContract<{
     deployments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
         url: zod.ZodString;
         target: zod.ZodOptional<zod.ZodEnum<["kernelDeployment", "appDeployment"]>>;
-        encryptedDeployKey: zod.ZodOptional<zod.ZodString>;
         credentialRef: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }>>>;
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdBy: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    host: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: ConvexIdSchema<"workspaces">;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
+    deploymentUrl: zod.ZodOptional<zod.ZodString>;
+    deploymentName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectId: zod.ZodOptional<zod.ZodString>;
+    vercelEnvironment: zod.ZodOptional<zod.ZodEnum<["development", "preview", "staging", "production"]>>;
+    source: zod.ZodEnum<["vercel_preview", "vercel_production", "vercel_custom_environment", "custom_domain", "manual"]>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
 }>];
 declare const TABLE_CONTRACTS_BY_COMPONENT: {
     readonly kernel: readonly [TableContract<{
@@ -5139,14 +5533,29 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         lockedAt: zod.ZodNumber;
         createdAt: zod.ZodNumber;
     }>, TableContract<{
-        sessionId: ConvexIdSchema<"deliberationSessions">;
-        topicId: zod.ZodOptional<zod.ZodString>;
-        principalId: zod.ZodString;
-        slot: zod.ZodString;
-        modelKey: zod.ZodOptional<zod.ZodString>;
-        promptName: zod.ZodOptional<zod.ZodString>;
-        role: zod.ZodEnum<["support", "oppose", "uncertain", "synthesize"]>;
-        answer: zod.ZodString;
+        eventId: zod.ZodString;
+        type: zod.ZodString;
+        version: zod.ZodString;
+        timestamp: zod.ZodNumber;
+        tenantId: zod.ZodOptional<zod.ZodString>;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        topicId: zod.ZodString;
+        resourceId: zod.ZodString;
+        resourceType: zod.ZodString;
+        actorId: zod.ZodString;
+        actorType: zod.ZodEnum<["human", "agent", "service"]>;
+        data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        correlationId: zod.ZodOptional<zod.ZodString>;
+        expiresAt: zod.ZodNumber;
+    }>, TableContract<{
+        sessionId: ConvexIdSchema<"deliberationSessions">;
+        topicId: zod.ZodOptional<zod.ZodString>;
+        principalId: zod.ZodString;
+        slot: zod.ZodString;
+        modelKey: zod.ZodOptional<zod.ZodString>;
+        promptName: zod.ZodOptional<zod.ZodString>;
+        role: zod.ZodEnum<["support", "oppose", "uncertain", "synthesize"]>;
+        answer: zod.ZodString;
         confidence: zod.ZodNumber;
         reasoningChain: zod.ZodArray<zod.ZodString, "many">;
         uncertaintyZones: zod.ZodArray<zod.ZodObject<{
@@ -6748,6 +7157,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         questionType: zod.ZodOptional<zod.ZodEnum<["validation", "falsification", "assumption_probe", "prediction_test", "counterfactual", "discovery", "clarification", "comparison", "causal", "mechanism", "general"]>>;
         questionPriority: zod.ZodOptional<zod.ZodEnum<["critical", "high", "medium", "low"]>>;
         answerQuality: zod.ZodOptional<zod.ZodEnum<["definitive", "strong", "moderate", "weak", "speculative", "unanswered"]>>;
+        themeStatus: zod.ZodOptional<zod.ZodEnum<["emerging", "active", "mature", "declining", "archived"]>>;
         themeConviction: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low", "negative"]>>;
         decisionType: zod.ZodOptional<zod.ZodEnum<["invest", "pass", "follow_on", "exit", "deep_dive", "monitor", "deprioritize", "thesis_adopt", "thesis_revise", "thesis_abandon"]>>;
         decisionOutcome: zod.ZodOptional<zod.ZodEnum<["pending", "successful", "unsuccessful", "mixed", "unknown"]>>;
@@ -7515,13 +7925,13 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
             answerConfidence: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low"]>>;
             linkedQuestionId: zod.ZodOptional<zod.ZodString>;
         }, "strip", zod.ZodTypeAny, {
-            status: "answered" | "open" | "forked";
+            status: "answered" | "forked" | "open";
             question: string;
             linkedQuestionId?: string | undefined;
             answer?: string | undefined;
             answerConfidence?: "high" | "medium" | "low" | undefined;
         }, {
-            status: "answered" | "open" | "forked";
+            status: "answered" | "forked" | "open";
             question: string;
             linkedQuestionId?: string | undefined;
             answer?: string | undefined;
@@ -7679,12 +8089,12 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
             confidenceChange: zod.ZodNumber;
         }, "strip", zod.ZodTypeAny, {
             summary: string;
-            verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+            verdict: "validated" | "invalidated" | "forked" | "inconclusive";
             whatChanged: string;
             confidenceChange: number;
         }, {
             summary: string;
-            verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+            verdict: "validated" | "invalidated" | "forked" | "inconclusive";
             whatChanged: string;
             confidenceChange: number;
         }>>;
@@ -7732,16 +8142,16 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
                 weight: zod.ZodOptional<zod.ZodNumber>;
                 createdAt: zod.ZodOptional<zod.ZodNumber>;
             }, "strip", zod.ZodTypeAny, {
-                sourceId: string;
-                targetId: string;
                 edgeType: string;
+                targetId: string;
+                sourceId: string;
                 weight?: number | undefined;
                 edgeId?: string | undefined;
                 createdAt?: number | undefined;
             }, {
-                sourceId: string;
-                targetId: string;
                 edgeType: string;
+                targetId: string;
+                sourceId: string;
                 weight?: number | undefined;
                 edgeId?: string | undefined;
                 createdAt?: number | undefined;
@@ -7804,16 +8214,16 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
                 id: string;
                 text: string;
                 verified: boolean;
-                createdAt?: number | undefined;
                 sourceType?: string | undefined;
                 verificationStatus?: string | undefined;
+                createdAt?: number | undefined;
             }, {
                 id: string;
                 text: string;
                 verified: boolean;
-                createdAt?: number | undefined;
                 sourceType?: string | undefined;
                 verificationStatus?: string | undefined;
+                createdAt?: number | undefined;
             }>, "many">;
             tasksCompleted: zod.ZodOptional<zod.ZodNumber>;
             totalTasks: zod.ZodOptional<zod.ZodNumber>;
@@ -7871,9 +8281,9 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
                 id: string;
                 text: string;
                 verified: boolean;
-                createdAt?: number | undefined;
                 sourceType?: string | undefined;
                 verificationStatus?: string | undefined;
+                createdAt?: number | undefined;
             }[];
             worktreeId: string & zod.BRAND<"Id<worktrees>">;
             questions: {
@@ -7897,9 +8307,9 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
             capturedAt: number;
             capturedBy: string;
             clusterEdges: {
-                sourceId: string;
-                targetId: string;
                 edgeType: string;
+                targetId: string;
+                sourceId: string;
                 weight?: number | undefined;
                 edgeId?: string | undefined;
                 createdAt?: number | undefined;
@@ -7937,9 +8347,9 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
                 id: string;
                 text: string;
                 verified: boolean;
-                createdAt?: number | undefined;
                 sourceType?: string | undefined;
                 verificationStatus?: string | undefined;
+                createdAt?: number | undefined;
             }[];
             worktreeId: string;
             questions: {
@@ -7963,9 +8373,9 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
             capturedAt: number;
             capturedBy: string;
             clusterEdges: {
-                sourceId: string;
-                targetId: string;
                 edgeType: string;
+                targetId: string;
+                sourceId: string;
                 weight?: number | undefined;
                 edgeId?: string | undefined;
                 createdAt?: number | undefined;
@@ -8272,7 +8682,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         createdBy: zod.ZodString;
         metadata: zod.ZodOptional<zod.ZodAny>;
     }>];
-    readonly identity: readonly [TableContract<{
+    readonly "control-plane": readonly [TableContract<{
         slug: zod.ZodString;
         displayName: zod.ZodOptional<zod.ZodString>;
         principalId: zod.ZodString;
@@ -8299,6 +8709,247 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         createdAt: zod.ZodNumber;
         createdBy: zod.ZodString;
         updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        reviewKey: zod.ZodString;
+        itemKey: zod.ZodString;
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+        subjectId: zod.ZodString;
+        resourceType: zod.ZodOptional<zod.ZodString>;
+        resourceKey: zod.ZodOptional<zod.ZodString>;
+        role: zod.ZodOptional<zod.ZodString>;
+        relation: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["open", "approved", "revoked", "changed", "deferred"]>;
+        reviewerId: zod.ZodOptional<zod.ZodString>;
+        decisionAt: zod.ZodOptional<zod.ZodNumber>;
+        rationale: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        reviewKey: zod.ZodString;
+        scope: zod.ZodEnum<["tenant", "workspace", "resource_instance", "group", "principal", "api_key", "admin_action"]>;
+        status: zod.ZodEnum<["open", "in_progress", "approved", "denied", "expired", "cancelled"]>;
+        subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+        subjectId: zod.ZodString;
+        resourceType: zod.ZodOptional<zod.ZodString>;
+        resourceKey: zod.ZodOptional<zod.ZodString>;
+        outcome: zod.ZodOptional<zod.ZodEnum<["allow", "deny"]>>;
+        requestedBy: zod.ZodString;
+        reviewedBy: zod.ZodOptional<zod.ZodString>;
+        requestedAt: zod.ZodNumber;
+        reviewedAt: zod.ZodOptional<zod.ZodNumber>;
+        dueAt: zod.ZodOptional<zod.ZodNumber>;
+        justification: zod.ZodOptional<zod.ZodString>;
+        rationale: zod.ZodOptional<zod.ZodString>;
+        policyBundleId: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        targetType: zod.ZodEnum<["principal", "group"]>;
+        targetId: zod.ZodString;
+        attributeName: zod.ZodString;
+        attributeType: zod.ZodEnum<["string", "number", "bool", "json", "time"]>;
+        attributeOperator: zod.ZodEnum<["eq", "neq", "in", "not_in", "gt", "gte", "lt", "lte", "contains", "not_contains", "matches"]>;
+        attributeValue: zod.ZodAny;
+        status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+        source: zod.ZodOptional<zod.ZodString>;
+        sourceRef: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        createdBy: zod.ZodString;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        groupId: zod.ZodString;
+        groupKey: zod.ZodString;
+        groupName: zod.ZodString;
+        groupType: zod.ZodEnum<["tenant", "workspace", "external", "system", "dynamic"]>;
+        status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+        description: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        groupId: zod.ZodString;
+        memberType: zod.ZodEnum<["principal", "group"]>;
+        memberId: zod.ZodString;
+        principalId: zod.ZodOptional<zod.ZodString>;
+        childGroupId: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+        addedBy: zod.ZodOptional<zod.ZodString>;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+        expiresAt: zod.ZodOptional<zod.ZodNumber>;
+        revocationReason: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        bundleKey: zod.ZodString;
+        version: zod.ZodNumber;
+        status: zod.ZodEnum<["draft", "validated", "enforced", "archived"]>;
+        policyHash: zod.ZodOptional<zod.ZodString>;
+        policyPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        reviewedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        retiredAt: zod.ZodOptional<zod.ZodNumber>;
+    }>, TableContract<{
+        tenantId: zod.ZodOptional<zod.ZodString>;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        principalId: zod.ZodString;
+        subjectType: zod.ZodOptional<zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>>;
+        subjectId: zod.ZodOptional<zod.ZodString>;
+        resourceType: zod.ZodString;
+        resourceId: zod.ZodString;
+        action: zod.ZodString;
+        decision: zod.ZodEnum<["allow", "deny"]>;
+        reasonCode: zod.ZodString;
+        policyBundleId: zod.ZodOptional<zod.ZodString>;
+        policyVersion: zod.ZodString;
+        traceId: zod.ZodOptional<zod.ZodString>;
+        requestId: zod.ZodOptional<zod.ZodString>;
+        audienceMode: zod.ZodOptional<zod.ZodString>;
+        audienceKey: zod.ZodOptional<zod.ZodString>;
+        audienceClass: zod.ZodOptional<zod.ZodEnum<["internal", "restricted_external", "public"]>>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        expiresAt: zod.ZodOptional<zod.ZodNumber>;
+        createdBy: zod.ZodOptional<zod.ZodString>;
+    }>, TableContract<{
+        principalId: zod.ZodString;
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        provider: zod.ZodString;
+        providerSubjectId: zod.ZodString;
+        providerProjectId: zod.ZodOptional<zod.ZodString>;
+        alias: zod.ZodString;
+        aliasKind: zod.ZodString;
+        status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+        revokedAt: zod.ZodOptional<zod.ZodNumber>;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+    }>, TableContract<{
+        principalId: zod.ZodString;
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        principalType: zod.ZodEnum<["human", "agent", "service_principal", "external_stakeholder", "system"]>;
+        status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+        displayName: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+    }>, TableContract<{
+        syncKey: zod.ZodString;
+        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+        objectId: zod.ZodString;
+        operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
+        payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+        attemptCount: zod.ZodNumber;
+        nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+        lastError: zod.ZodOptional<zod.ZodString>;
+        tenantId: zod.ZodOptional<zod.ZodString>;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        principalId: zod.ZodOptional<zod.ZodString>;
+        permitTenantKey: zod.ZodOptional<zod.ZodString>;
+        permitResourceType: zod.ZodOptional<zod.ZodString>;
+        permitResourceKey: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        relation: zod.ZodString;
+        subject: zod.ZodString;
+        object: zod.ZodString;
+        resourceType: zod.ZodOptional<zod.ZodString>;
+        resourceKey: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+        attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        resourceType: zod.ZodString;
+        resourceKey: zod.ZodString;
+        resourceId: zod.ZodString;
+        status: zod.ZodEnum<["active", "deleted", "archived"]>;
+        attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        ownerPrincipalId: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        tenantId: zod.ZodString;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        role: zod.ZodString;
+        targetType: zod.ZodEnum<["principal", "group"]>;
+        targetId: zod.ZodString;
+        resourceType: zod.ZodString;
+        resourceKey: zod.ZodString;
+        resourceInstanceId: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+        expiresAt: zod.ZodOptional<zod.ZodNumber>;
+        attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        grantedBy: zod.ZodOptional<zod.ZodString>;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        syncKey: zod.ZodString;
+        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+        objectId: zod.ZodString;
+        tenantId: zod.ZodOptional<zod.ZodString>;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        principalId: zod.ZodOptional<zod.ZodString>;
+        permitTenantKey: zod.ZodOptional<zod.ZodString>;
+        permitResourceType: zod.ZodOptional<zod.ZodString>;
+        permitResourceKey: zod.ZodOptional<zod.ZodString>;
+        desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+        attemptCount: zod.ZodNumber;
+        lastError: zod.ZodOptional<zod.ZodString>;
+        nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+        lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+        createdBy: zod.ZodString;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
     }>, TableContract<{
         slot: zod.ZodString;
         modelKey: zod.ZodString;
@@ -8825,6 +9476,22 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
         createdAt: zod.ZodNumber;
         updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        principalId: zod.ZodString;
+        principalRefId: zod.ZodOptional<ConvexIdSchema<"principals">>;
+        provider: zod.ZodString;
+        providerProjectId: zod.ZodOptional<zod.ZodString>;
+        externalSubjectId: zod.ZodString;
+        tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        email: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["active", "revoked"]>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        revokedAt: zod.ZodOptional<zod.ZodNumber>;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
     }>, TableContract<{
         principalId: zod.ZodString;
         keyId: zod.ZodOptional<zod.ZodString>;
@@ -9488,7 +10155,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
         resourceType: zod.ZodString;
         resourceId: zod.ZodString;
-        action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+        action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote", "route", "invoke", "manage", "deploy", "promote", "rollback", "audit", "read_ref", "fetch_value", "rotate", "administer", "mint", "delegate", "revoke"]>;
         decision: zod.ZodEnum<["allow", "deny"]>;
         reasonCode: zod.ZodString;
         policyVersion: zod.ZodString;
@@ -9516,6 +10183,27 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         createdBy: zod.ZodString;
         createdAt: zod.ZodNumber;
         updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        syncKey: zod.ZodString;
+        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+        objectId: zod.ZodString;
+        tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        principalId: zod.ZodOptional<zod.ZodString>;
+        permitTenantKey: zod.ZodOptional<zod.ZodString>;
+        permitResourceType: zod.ZodOptional<zod.ZodString>;
+        permitResourceKey: zod.ZodOptional<zod.ZodString>;
+        desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+        attemptCount: zod.ZodNumber;
+        lastError: zod.ZodOptional<zod.ZodString>;
+        nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+        lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+        createdBy: zod.ZodString;
+        updatedBy: zod.ZodOptional<zod.ZodString>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
     }>, TableContract<{
         tenantId: ConvexIdSchema<"tenants">;
         workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
@@ -9699,6 +10387,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
     }>, TableContract<{
         credentialRef: zod.ZodString;
         tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
         target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
         environment: zod.ZodEnum<["dev", "staging", "prod"]>;
         encryptedDeployKey: zod.ZodString;
@@ -9714,9 +10403,61 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         createdBy: zod.ZodString;
         createdAt: zod.ZodNumber;
         updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        reportId: zod.ZodString;
+        source: zod.ZodEnum<["infisical_manifest", "manual", "ci"]>;
+        generatedAt: zod.ZodNumber;
+        recordedAt: zod.ZodNumber;
+        recordedBy: zod.ZodString;
+        status: zod.ZodEnum<["in_sync", "drift", "exception", "blocked", "not_observed"]>;
+        reportHash: zod.ZodString;
+        manifestHash: zod.ZodOptional<zod.ZodString>;
+        dryRunReceiptId: zod.ZodOptional<zod.ZodString>;
+        appliedReceiptId: zod.ZodOptional<zod.ZodString>;
+        summary: zod.ZodObject<{
+            totalPipelines: zod.ZodNumber;
+            inSync: zod.ZodNumber;
+            drift: zod.ZodNumber;
+            exception: zod.ZodNumber;
+            blocked: zod.ZodNumber;
+            notObserved: zod.ZodNumber;
+            missingKeys: zod.ZodNumber;
+            valueDriftKeys: zod.ZodNumber;
+            extraKeys: zod.ZodNumber;
+            deniedConvexLeakage: zod.ZodNumber;
+            approvedExceptions: zod.ZodNumber;
+        }, "strip", zod.ZodTypeAny, {
+            blocked: number;
+            drift: number;
+            exception: number;
+            totalPipelines: number;
+            inSync: number;
+            notObserved: number;
+            missingKeys: number;
+            valueDriftKeys: number;
+            extraKeys: number;
+            deniedConvexLeakage: number;
+            approvedExceptions: number;
+        }, {
+            blocked: number;
+            drift: number;
+            exception: number;
+            totalPipelines: number;
+            inSync: number;
+            notObserved: number;
+            missingKeys: number;
+            valueDriftKeys: number;
+            extraKeys: number;
+            deniedConvexLeakage: number;
+            approvedExceptions: number;
+        }>;
+        redactedReport: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     }>, TableContract<{
         bindingId: zod.ZodString;
         tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
         providerId: zod.ZodString;
         modelSlotId: zod.ZodString;
         secretRef: zod.ZodString;
@@ -9731,9 +10472,14 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
     }>, TableContract<{
         secretRef: zod.ZodString;
         tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
         providerId: zod.ZodString;
         label: zod.ZodOptional<zod.ZodString>;
-        encryptedSecret: zod.ZodString;
+        encryptedSecret: zod.ZodOptional<zod.ZodString>;
+        infisicalPath: zod.ZodOptional<zod.ZodString>;
+        infisicalSecretKey: zod.ZodOptional<zod.ZodString>;
+        infisicalProjectId: zod.ZodOptional<zod.ZodString>;
         encryptionVersion: zod.ZodString;
         secretFingerprint: zod.ZodString;
         keyHint: zod.ZodString;
@@ -9769,8 +10515,34 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
         createdAt: zod.ZodNumber;
         updatedAt: zod.ZodNumber;
+    }>, TableContract<{
+        leaseId: zod.ZodString;
+        proxyTokenId: zod.ZodString;
+        tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+        providerId: zod.ZodString;
+        modelSlotId: zod.ZodString;
+        bindingId: zod.ZodString;
+        secretRef: zod.ZodString;
+        sessionId: zod.ZodString;
+        principalId: zod.ZodString;
+        agentSessionId: zod.ZodOptional<zod.ZodString>;
+        status: zod.ZodEnum<["active", "revoked"]>;
+        expiresAt: zod.ZodNumber;
+        renewedAt: zod.ZodOptional<zod.ZodNumber>;
+        revokedAt: zod.ZodOptional<zod.ZodNumber>;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+        revokeReason: zod.ZodOptional<zod.ZodString>;
+        permitDecisionLogId: zod.ZodOptional<ConvexIdSchema<"policyDecisionLogs">>;
+        permitTraceId: zod.ZodOptional<zod.ZodString>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
     }>, TableContract<{
         tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+        environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
         keyPrefix: zod.ZodEnum<["luc", "stk"]>;
         keyHash: zod.ZodString;
         keyHint: zod.ZodString;
@@ -9786,7 +10558,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
     }>, TableContract<{
         tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
         apiKeyId: zod.ZodOptional<ConvexIdSchema<"apiKeys">>;
-        action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+        action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "tenant_canonical_identity_repaired", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
         actorClerkId: zod.ZodString;
         details: zod.ZodOptional<zod.ZodAny>;
         createdAt: zod.ZodNumber;
@@ -9876,33 +10648,49 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         deployments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
             url: zod.ZodString;
             target: zod.ZodOptional<zod.ZodEnum<["kernelDeployment", "appDeployment"]>>;
-            encryptedDeployKey: zod.ZodOptional<zod.ZodString>;
             credentialRef: zod.ZodOptional<zod.ZodString>;
         }, "strip", zod.ZodTypeAny, {
             url: string;
             credentialRef?: string | undefined;
             target?: "kernelDeployment" | "appDeployment" | undefined;
-            encryptedDeployKey?: string | undefined;
         }, {
             url: string;
             credentialRef?: string | undefined;
             target?: "kernelDeployment" | "appDeployment" | undefined;
-            encryptedDeployKey?: string | undefined;
         }>>>;
         metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
         createdBy: zod.ZodOptional<zod.ZodString>;
         createdAt: zod.ZodNumber;
         updatedAt: zod.ZodNumber;
-    }>];
-    readonly 'developer-pack': readonly [];
-};
-declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
-    tenantId: zod.ZodOptional<zod.ZodString>;
-    category: zod.ZodString;
-    value: zod.ZodString;
-    label: zod.ZodString;
-    description: zod.ZodOptional<zod.ZodString>;
-    tier: zod.ZodEnum<["platform", "tenant"]>;
+    }>, TableContract<{
+        host: zod.ZodString;
+        tenantId: ConvexIdSchema<"tenants">;
+        workspaceId: ConvexIdSchema<"workspaces">;
+        environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+        target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
+        deploymentUrl: zod.ZodOptional<zod.ZodString>;
+        deploymentName: zod.ZodOptional<zod.ZodString>;
+        vercelProjectName: zod.ZodOptional<zod.ZodString>;
+        vercelProjectId: zod.ZodOptional<zod.ZodString>;
+        vercelEnvironment: zod.ZodOptional<zod.ZodEnum<["development", "preview", "staging", "production"]>>;
+        source: zod.ZodEnum<["vercel_preview", "vercel_production", "vercel_custom_environment", "custom_domain", "manual"]>;
+        status: zod.ZodEnum<["active", "revoked"]>;
+        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+        createdBy: zod.ZodString;
+        createdAt: zod.ZodNumber;
+        updatedAt: zod.ZodNumber;
+        revokedAt: zod.ZodOptional<zod.ZodNumber>;
+        revokedBy: zod.ZodOptional<zod.ZodString>;
+    }>];
+    readonly "developer-pack": readonly [];
+};
+declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    category: zod.ZodString;
+    value: zod.ZodString;
+    label: zod.ZodString;
+    description: zod.ZodOptional<zod.ZodString>;
+    tier: zod.ZodEnum<["platform", "tenant"]>;
     domainNamespace: zod.ZodOptional<zod.ZodString>;
     metadata: zod.ZodOptional<zod.ZodAny>;
     isDefault: zod.ZodOptional<zod.ZodBoolean>;
@@ -10084,6 +10872,21 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     lockedBy: zod.ZodString;
     lockedAt: zod.ZodNumber;
     createdAt: zod.ZodNumber;
+}>, TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }>, TableContract<{
     sessionId: ConvexIdSchema<"deliberationSessions">;
     topicId: zod.ZodOptional<zod.ZodString>;
@@ -11694,6 +12497,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     questionType: zod.ZodOptional<zod.ZodEnum<["validation", "falsification", "assumption_probe", "prediction_test", "counterfactual", "discovery", "clarification", "comparison", "causal", "mechanism", "general"]>>;
     questionPriority: zod.ZodOptional<zod.ZodEnum<["critical", "high", "medium", "low"]>>;
     answerQuality: zod.ZodOptional<zod.ZodEnum<["definitive", "strong", "moderate", "weak", "speculative", "unanswered"]>>;
+    themeStatus: zod.ZodOptional<zod.ZodEnum<["emerging", "active", "mature", "declining", "archived"]>>;
     themeConviction: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low", "negative"]>>;
     decisionType: zod.ZodOptional<zod.ZodEnum<["invest", "pass", "follow_on", "exit", "deep_dive", "monitor", "deprioritize", "thesis_adopt", "thesis_revise", "thesis_abandon"]>>;
     decisionOutcome: zod.ZodOptional<zod.ZodEnum<["pending", "successful", "unsuccessful", "mixed", "unknown"]>>;
@@ -12461,13 +13265,13 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
         answerConfidence: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low"]>>;
         linkedQuestionId: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
@@ -12625,12 +13429,12 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
         confidenceChange: zod.ZodNumber;
     }, "strip", zod.ZodTypeAny, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }>>;
@@ -12678,16 +13482,16 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
             weight: zod.ZodOptional<zod.ZodNumber>;
             createdAt: zod.ZodOptional<zod.ZodNumber>;
         }, "strip", zod.ZodTypeAny, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
         }, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -12750,16 +13554,16 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }, {
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }>, "many">;
         tasksCompleted: zod.ZodOptional<zod.ZodNumber>;
         totalTasks: zod.ZodOptional<zod.ZodNumber>;
@@ -12817,9 +13621,9 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string & zod.BRAND<"Id<worktrees>">;
         questions: {
@@ -12843,9 +13647,9 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -12883,9 +13687,9 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string;
         questions: {
@@ -12909,9 +13713,9 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -13244,6 +14048,247 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     createdAt: zod.ZodNumber;
     createdBy: zod.ZodString;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    reviewKey: zod.ZodString;
+    itemKey: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["open", "approved", "revoked", "changed", "deferred"]>;
+    reviewerId: zod.ZodOptional<zod.ZodString>;
+    decisionAt: zod.ZodOptional<zod.ZodNumber>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    reviewKey: zod.ZodString;
+    scope: zod.ZodEnum<["tenant", "workspace", "resource_instance", "group", "principal", "api_key", "admin_action"]>;
+    status: zod.ZodEnum<["open", "in_progress", "approved", "denied", "expired", "cancelled"]>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    outcome: zod.ZodOptional<zod.ZodEnum<["allow", "deny"]>>;
+    requestedBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    requestedAt: zod.ZodNumber;
+    reviewedAt: zod.ZodOptional<zod.ZodNumber>;
+    dueAt: zod.ZodOptional<zod.ZodNumber>;
+    justification: zod.ZodOptional<zod.ZodString>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    attributeName: zod.ZodString;
+    attributeType: zod.ZodEnum<["string", "number", "bool", "json", "time"]>;
+    attributeOperator: zod.ZodEnum<["eq", "neq", "in", "not_in", "gt", "gte", "lt", "lte", "contains", "not_contains", "matches"]>;
+    attributeValue: zod.ZodAny;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    source: zod.ZodOptional<zod.ZodString>;
+    sourceRef: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    groupKey: zod.ZodString;
+    groupName: zod.ZodString;
+    groupType: zod.ZodEnum<["tenant", "workspace", "external", "system", "dynamic"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    description: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    memberType: zod.ZodEnum<["principal", "group"]>;
+    memberId: zod.ZodString;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    childGroupId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    addedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    revocationReason: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    bundleKey: zod.ZodString;
+    version: zod.ZodNumber;
+    status: zod.ZodEnum<["draft", "validated", "enforced", "archived"]>;
+    policyHash: zod.ZodOptional<zod.ZodString>;
+    policyPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    retiredAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodString;
+    subjectType: zod.ZodOptional<zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>>;
+    subjectId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceId: zod.ZodString;
+    action: zod.ZodString;
+    decision: zod.ZodEnum<["allow", "deny"]>;
+    reasonCode: zod.ZodString;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    policyVersion: zod.ZodString;
+    traceId: zod.ZodOptional<zod.ZodString>;
+    requestId: zod.ZodOptional<zod.ZodString>;
+    audienceMode: zod.ZodOptional<zod.ZodString>;
+    audienceKey: zod.ZodOptional<zod.ZodString>;
+    audienceClass: zod.ZodOptional<zod.ZodEnum<["internal", "restricted_external", "public"]>>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    provider: zod.ZodString;
+    providerSubjectId: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    alias: zod.ZodString;
+    aliasKind: zod.ZodString;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalType: zod.ZodEnum<["human", "agent", "service_principal", "external_stakeholder", "system"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    displayName: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
+    payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attemptCount: zod.ZodNumber;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodString;
+    subject: zod.ZodString;
+    object: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceId: zod.ZodString;
+    status: zod.ZodEnum<["active", "deleted", "archived"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    ownerPrincipalId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodString;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceInstanceId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    grantedBy: zod.ZodOptional<zod.ZodString>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     slot: zod.ZodString;
     modelKey: zod.ZodString;
@@ -13769,6 +14814,22 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    principalId: zod.ZodString;
+    principalRefId: zod.ZodOptional<ConvexIdSchema<"principals">>;
+    provider: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    externalSubjectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    email: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     principalId: zod.ZodString;
     keyId: zod.ZodOptional<zod.ZodString>;
@@ -14432,7 +15493,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     resourceType: zod.ZodString;
     resourceId: zod.ZodString;
-    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote", "route", "invoke", "manage", "deploy", "promote", "rollback", "audit", "read_ref", "fetch_value", "rotate", "administer", "mint", "delegate", "revoke"]>;
     decision: zod.ZodEnum<["allow", "deny"]>;
     reasonCode: zod.ZodString;
     policyVersion: zod.ZodString;
@@ -14460,6 +15521,27 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
@@ -14643,6 +15725,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     credentialRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
     environment: zod.ZodEnum<["dev", "staging", "prod"]>;
     encryptedDeployKey: zod.ZodString;
@@ -14658,9 +15741,61 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    reportId: zod.ZodString;
+    source: zod.ZodEnum<["infisical_manifest", "manual", "ci"]>;
+    generatedAt: zod.ZodNumber;
+    recordedAt: zod.ZodNumber;
+    recordedBy: zod.ZodString;
+    status: zod.ZodEnum<["in_sync", "drift", "exception", "blocked", "not_observed"]>;
+    reportHash: zod.ZodString;
+    manifestHash: zod.ZodOptional<zod.ZodString>;
+    dryRunReceiptId: zod.ZodOptional<zod.ZodString>;
+    appliedReceiptId: zod.ZodOptional<zod.ZodString>;
+    summary: zod.ZodObject<{
+        totalPipelines: zod.ZodNumber;
+        inSync: zod.ZodNumber;
+        drift: zod.ZodNumber;
+        exception: zod.ZodNumber;
+        blocked: zod.ZodNumber;
+        notObserved: zod.ZodNumber;
+        missingKeys: zod.ZodNumber;
+        valueDriftKeys: zod.ZodNumber;
+        extraKeys: zod.ZodNumber;
+        deniedConvexLeakage: zod.ZodNumber;
+        approvedExceptions: zod.ZodNumber;
+    }, "strip", zod.ZodTypeAny, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }>;
+    redactedReport: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
 }>, TableContract<{
     bindingId: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     modelSlotId: zod.ZodString;
     secretRef: zod.ZodString;
@@ -14675,9 +15810,14 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     secretRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     label: zod.ZodOptional<zod.ZodString>;
-    encryptedSecret: zod.ZodString;
+    encryptedSecret: zod.ZodOptional<zod.ZodString>;
+    infisicalPath: zod.ZodOptional<zod.ZodString>;
+    infisicalSecretKey: zod.ZodOptional<zod.ZodString>;
+    infisicalProjectId: zod.ZodOptional<zod.ZodString>;
     encryptionVersion: zod.ZodString;
     secretFingerprint: zod.ZodString;
     keyHint: zod.ZodString;
@@ -14713,8 +15853,34 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    leaseId: zod.ZodString;
+    proxyTokenId: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    providerId: zod.ZodString;
+    modelSlotId: zod.ZodString;
+    bindingId: zod.ZodString;
+    secretRef: zod.ZodString;
+    sessionId: zod.ZodString;
+    principalId: zod.ZodString;
+    agentSessionId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    expiresAt: zod.ZodNumber;
+    renewedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokeReason: zod.ZodOptional<zod.ZodString>;
+    permitDecisionLogId: zod.ZodOptional<ConvexIdSchema<"policyDecisionLogs">>;
+    permitTraceId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }>, TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     keyPrefix: zod.ZodEnum<["luc", "stk"]>;
     keyHash: zod.ZodString;
     keyHint: zod.ZodString;
@@ -14730,7 +15896,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
 }>, TableContract<{
     tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
     apiKeyId: zod.ZodOptional<ConvexIdSchema<"apiKeys">>;
-    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "tenant_canonical_identity_repaired", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
     actorClerkId: zod.ZodString;
     details: zod.ZodOptional<zod.ZodAny>;
     createdAt: zod.ZodNumber;
@@ -14820,23 +15986,39 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     deployments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
         url: zod.ZodString;
         target: zod.ZodOptional<zod.ZodEnum<["kernelDeployment", "appDeployment"]>>;
-        encryptedDeployKey: zod.ZodOptional<zod.ZodString>;
         credentialRef: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }>>>;
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdBy: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}>, TableContract<{
+    host: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: ConvexIdSchema<"workspaces">;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
+    deploymentUrl: zod.ZodOptional<zod.ZodString>;
+    deploymentName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectId: zod.ZodOptional<zod.ZodString>;
+    vercelEnvironment: zod.ZodOptional<zod.ZodEnum<["development", "preview", "staging", "production"]>>;
+    source: zod.ZodEnum<["vercel_preview", "vercel_production", "vercel_custom_environment", "custom_domain", "manual"]>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
 }>];
 declare function listTableContractsByName(name: string): (TableContract<{
     fromSessionId: zod.ZodString;
@@ -15024,6 +16206,8 @@ declare function listTableContractsByName(name: string): (TableContract<{
     createdBy: zod.ZodString;
 }> | TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     keyPrefix: zod.ZodEnum<["luc", "stk"]>;
     keyHash: zod.ZodString;
     keyHint: zod.ZodString;
@@ -15039,7 +16223,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
 }> | TableContract<{
     tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
     apiKeyId: zod.ZodOptional<ConvexIdSchema<"apiKeys">>;
-    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "tenant_canonical_identity_repaired", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
     actorClerkId: zod.ZodString;
     details: zod.ZodOptional<zod.ZodAny>;
     createdAt: zod.ZodNumber;
@@ -15292,6 +16476,21 @@ declare function listTableContractsByName(name: string): (TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     traceId: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
+}> | TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }> | TableContract<{
     beliefId: zod.ZodString;
     belief: zod.ZodNumber;
@@ -15861,6 +17060,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
 }> | TableContract<{
     credentialRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
     environment: zod.ZodEnum<["dev", "staging", "prod"]>;
     encryptedDeployKey: zod.ZodString;
@@ -15876,9 +17076,82 @@ declare function listTableContractsByName(name: string): (TableContract<{
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    reportId: zod.ZodString;
+    source: zod.ZodEnum<["infisical_manifest", "manual", "ci"]>;
+    generatedAt: zod.ZodNumber;
+    recordedAt: zod.ZodNumber;
+    recordedBy: zod.ZodString;
+    status: zod.ZodEnum<["in_sync", "drift", "exception", "blocked", "not_observed"]>;
+    reportHash: zod.ZodString;
+    manifestHash: zod.ZodOptional<zod.ZodString>;
+    dryRunReceiptId: zod.ZodOptional<zod.ZodString>;
+    appliedReceiptId: zod.ZodOptional<zod.ZodString>;
+    summary: zod.ZodObject<{
+        totalPipelines: zod.ZodNumber;
+        inSync: zod.ZodNumber;
+        drift: zod.ZodNumber;
+        exception: zod.ZodNumber;
+        blocked: zod.ZodNumber;
+        notObserved: zod.ZodNumber;
+        missingKeys: zod.ZodNumber;
+        valueDriftKeys: zod.ZodNumber;
+        extraKeys: zod.ZodNumber;
+        deniedConvexLeakage: zod.ZodNumber;
+        approvedExceptions: zod.ZodNumber;
+    }, "strip", zod.ZodTypeAny, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }>;
+    redactedReport: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
 }> | TableContract<{
     bindingId: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     modelSlotId: zod.ZodString;
     secretRef: zod.ZodString;
@@ -15893,9 +17166,14 @@ declare function listTableContractsByName(name: string): (TableContract<{
 }> | TableContract<{
     secretRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     label: zod.ZodOptional<zod.ZodString>;
-    encryptedSecret: zod.ZodString;
+    encryptedSecret: zod.ZodOptional<zod.ZodString>;
+    infisicalPath: zod.ZodOptional<zod.ZodString>;
+    infisicalSecretKey: zod.ZodOptional<zod.ZodString>;
+    infisicalProjectId: zod.ZodOptional<zod.ZodString>;
     encryptionVersion: zod.ZodString;
     secretFingerprint: zod.ZodString;
     keyHint: zod.ZodString;
@@ -15931,6 +17209,30 @@ declare function listTableContractsByName(name: string): (TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    leaseId: zod.ZodString;
+    proxyTokenId: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    providerId: zod.ZodString;
+    modelSlotId: zod.ZodString;
+    bindingId: zod.ZodString;
+    secretRef: zod.ZodString;
+    sessionId: zod.ZodString;
+    principalId: zod.ZodString;
+    agentSessionId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    expiresAt: zod.ZodNumber;
+    renewedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokeReason: zod.ZodOptional<zod.ZodString>;
+    permitDecisionLogId: zod.ZodOptional<ConvexIdSchema<"policyDecisionLogs">>;
+    permitTraceId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     sourceProjectId: zod.ZodOptional<zod.ZodString>;
     sourceTopicId: zod.ZodOptional<ConvexIdSchema<"topics">>;
@@ -16365,6 +17667,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
     questionType: zod.ZodOptional<zod.ZodEnum<["validation", "falsification", "assumption_probe", "prediction_test", "counterfactual", "discovery", "clarification", "comparison", "causal", "mechanism", "general"]>>;
     questionPriority: zod.ZodOptional<zod.ZodEnum<["critical", "high", "medium", "low"]>>;
     answerQuality: zod.ZodOptional<zod.ZodEnum<["definitive", "strong", "moderate", "weak", "speculative", "unanswered"]>>;
+    themeStatus: zod.ZodOptional<zod.ZodEnum<["emerging", "active", "mature", "declining", "archived"]>>;
     themeConviction: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low", "negative"]>>;
     decisionType: zod.ZodOptional<zod.ZodEnum<["invest", "pass", "follow_on", "exit", "deep_dive", "monitor", "deprioritize", "thesis_adopt", "thesis_revise", "thesis_abandon"]>>;
     decisionOutcome: zod.ZodOptional<zod.ZodEnum<["pending", "successful", "unsuccessful", "mixed", "unknown"]>>;
@@ -16466,6 +17769,22 @@ declare function listTableContractsByName(name: string): (TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    principalRefId: zod.ZodOptional<ConvexIdSchema<"principals">>;
+    provider: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    externalSubjectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    email: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     principalId: zod.ZodString;
     keyId: zod.ZodOptional<zod.ZodString>;
@@ -18186,7 +19505,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     resourceType: zod.ZodString;
     resourceId: zod.ZodString;
-    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote", "route", "invoke", "manage", "deploy", "promote", "rollback", "audit", "read_ref", "fetch_value", "rotate", "administer", "mint", "delegate", "revoke"]>;
     decision: zod.ZodEnum<["allow", "deny"]>;
     reasonCode: zod.ZodString;
     policyVersion: zod.ZodString;
@@ -18230,6 +19549,247 @@ declare function listTableContractsByName(name: string): (TableContract<{
     expiresAt: zod.ZodOptional<zod.ZodNumber>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalType: zod.ZodEnum<["human", "agent", "service_principal", "external_stakeholder", "system"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    displayName: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    provider: zod.ZodString;
+    providerSubjectId: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    alias: zod.ZodString;
+    aliasKind: zod.ZodString;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    groupKey: zod.ZodString;
+    groupName: zod.ZodString;
+    groupType: zod.ZodEnum<["tenant", "workspace", "external", "system", "dynamic"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    description: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    memberType: zod.ZodEnum<["principal", "group"]>;
+    memberId: zod.ZodString;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    childGroupId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    addedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    revocationReason: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceId: zod.ZodString;
+    status: zod.ZodEnum<["active", "deleted", "archived"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    ownerPrincipalId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodString;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceInstanceId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    grantedBy: zod.ZodOptional<zod.ZodString>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodString;
+    subject: zod.ZodString;
+    object: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    attributeName: zod.ZodString;
+    attributeType: zod.ZodEnum<["string", "number", "bool", "json", "time"]>;
+    attributeOperator: zod.ZodEnum<["eq", "neq", "in", "not_in", "gt", "gte", "lt", "lte", "contains", "not_contains", "matches"]>;
+    attributeValue: zod.ZodAny;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    source: zod.ZodOptional<zod.ZodString>;
+    sourceRef: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    bundleKey: zod.ZodString;
+    version: zod.ZodNumber;
+    status: zod.ZodEnum<["draft", "validated", "enforced", "archived"]>;
+    policyHash: zod.ZodOptional<zod.ZodString>;
+    policyPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    retiredAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
+    payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attemptCount: zod.ZodNumber;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodString;
+    subjectType: zod.ZodOptional<zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>>;
+    subjectId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceId: zod.ZodString;
+    action: zod.ZodString;
+    decision: zod.ZodEnum<["allow", "deny"]>;
+    reasonCode: zod.ZodString;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    policyVersion: zod.ZodString;
+    traceId: zod.ZodOptional<zod.ZodString>;
+    requestId: zod.ZodOptional<zod.ZodString>;
+    audienceMode: zod.ZodOptional<zod.ZodString>;
+    audienceKey: zod.ZodOptional<zod.ZodString>;
+    audienceClass: zod.ZodOptional<zod.ZodEnum<["internal", "restricted_external", "public"]>>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    reviewKey: zod.ZodString;
+    scope: zod.ZodEnum<["tenant", "workspace", "resource_instance", "group", "principal", "api_key", "admin_action"]>;
+    status: zod.ZodEnum<["open", "in_progress", "approved", "denied", "expired", "cancelled"]>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    outcome: zod.ZodOptional<zod.ZodEnum<["allow", "deny"]>>;
+    requestedBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    requestedAt: zod.ZodNumber;
+    reviewedAt: zod.ZodOptional<zod.ZodNumber>;
+    dueAt: zod.ZodOptional<zod.ZodNumber>;
+    justification: zod.ZodOptional<zod.ZodString>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    reviewKey: zod.ZodString;
+    itemKey: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["open", "approved", "revoked", "changed", "deferred"]>;
+    reviewerId: zod.ZodOptional<zod.ZodString>;
+    decisionAt: zod.ZodOptional<zod.ZodNumber>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     topicId: zod.ZodOptional<zod.ZodString>;
     principalId: zod.ZodString;
@@ -18947,23 +20507,39 @@ declare function listTableContractsByName(name: string): (TableContract<{
     deployments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
         url: zod.ZodString;
         target: zod.ZodOptional<zod.ZodEnum<["kernelDeployment", "appDeployment"]>>;
-        encryptedDeployKey: zod.ZodOptional<zod.ZodString>;
         credentialRef: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }>>>;
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdBy: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    host: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: ConvexIdSchema<"workspaces">;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
+    deploymentUrl: zod.ZodOptional<zod.ZodString>;
+    deploymentName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectId: zod.ZodOptional<zod.ZodString>;
+    vercelEnvironment: zod.ZodOptional<zod.ZodEnum<["development", "preview", "staging", "production"]>>;
+    source: zod.ZodEnum<["vercel_preview", "vercel_production", "vercel_custom_environment", "custom_domain", "manual"]>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
 }> | TableContract<{
     worktreeId: ConvexIdSchema<"worktrees">;
     beliefId: zod.ZodString;
@@ -19023,13 +20599,13 @@ declare function listTableContractsByName(name: string): (TableContract<{
         answerConfidence: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low"]>>;
         linkedQuestionId: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
@@ -19187,12 +20763,12 @@ declare function listTableContractsByName(name: string): (TableContract<{
         confidenceChange: zod.ZodNumber;
     }, "strip", zod.ZodTypeAny, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }>>;
@@ -19240,16 +20816,16 @@ declare function listTableContractsByName(name: string): (TableContract<{
             weight: zod.ZodOptional<zod.ZodNumber>;
             createdAt: zod.ZodOptional<zod.ZodNumber>;
         }, "strip", zod.ZodTypeAny, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
         }, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -19312,16 +20888,16 @@ declare function listTableContractsByName(name: string): (TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }, {
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }>, "many">;
         tasksCompleted: zod.ZodOptional<zod.ZodNumber>;
         totalTasks: zod.ZodOptional<zod.ZodNumber>;
@@ -19379,9 +20955,9 @@ declare function listTableContractsByName(name: string): (TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string & zod.BRAND<"Id<worktrees>">;
         questions: {
@@ -19405,9 +20981,9 @@ declare function listTableContractsByName(name: string): (TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -19445,9 +21021,9 @@ declare function listTableContractsByName(name: string): (TableContract<{
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string;
         questions: {
@@ -19471,9 +21047,9 @@ declare function listTableContractsByName(name: string): (TableContract<{
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -19966,6 +21542,8 @@ declare function getTableContract(name: string, component?: string): TableContra
     createdBy: zod.ZodString;
 }> | TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     keyPrefix: zod.ZodEnum<["luc", "stk"]>;
     keyHash: zod.ZodString;
     keyHint: zod.ZodString;
@@ -19981,7 +21559,7 @@ declare function getTableContract(name: string, component?: string): TableContra
 }> | TableContract<{
     tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
     apiKeyId: zod.ZodOptional<ConvexIdSchema<"apiKeys">>;
-    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+    action: zod.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "tenant_canonical_identity_repaired", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
     actorClerkId: zod.ZodString;
     details: zod.ZodOptional<zod.ZodAny>;
     createdAt: zod.ZodNumber;
@@ -20234,6 +21812,21 @@ declare function getTableContract(name: string, component?: string): TableContra
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     traceId: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
+}> | TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }> | TableContract<{
     beliefId: zod.ZodString;
     belief: zod.ZodNumber;
@@ -20803,6 +22396,7 @@ declare function getTableContract(name: string, component?: string): TableContra
 }> | TableContract<{
     credentialRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
     environment: zod.ZodEnum<["dev", "staging", "prod"]>;
     encryptedDeployKey: zod.ZodString;
@@ -20818,9 +22412,82 @@ declare function getTableContract(name: string, component?: string): TableContra
     createdBy: zod.ZodString;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    reportId: zod.ZodString;
+    source: zod.ZodEnum<["infisical_manifest", "manual", "ci"]>;
+    generatedAt: zod.ZodNumber;
+    recordedAt: zod.ZodNumber;
+    recordedBy: zod.ZodString;
+    status: zod.ZodEnum<["in_sync", "drift", "exception", "blocked", "not_observed"]>;
+    reportHash: zod.ZodString;
+    manifestHash: zod.ZodOptional<zod.ZodString>;
+    dryRunReceiptId: zod.ZodOptional<zod.ZodString>;
+    appliedReceiptId: zod.ZodOptional<zod.ZodString>;
+    summary: zod.ZodObject<{
+        totalPipelines: zod.ZodNumber;
+        inSync: zod.ZodNumber;
+        drift: zod.ZodNumber;
+        exception: zod.ZodNumber;
+        blocked: zod.ZodNumber;
+        notObserved: zod.ZodNumber;
+        missingKeys: zod.ZodNumber;
+        valueDriftKeys: zod.ZodNumber;
+        extraKeys: zod.ZodNumber;
+        deniedConvexLeakage: zod.ZodNumber;
+        approvedExceptions: zod.ZodNumber;
+    }, "strip", zod.ZodTypeAny, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }, {
+        blocked: number;
+        drift: number;
+        exception: number;
+        totalPipelines: number;
+        inSync: number;
+        notObserved: number;
+        missingKeys: number;
+        valueDriftKeys: number;
+        extraKeys: number;
+        deniedConvexLeakage: number;
+        approvedExceptions: number;
+    }>;
+    redactedReport: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
 }> | TableContract<{
     bindingId: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     modelSlotId: zod.ZodString;
     secretRef: zod.ZodString;
@@ -20835,9 +22502,14 @@ declare function getTableContract(name: string, component?: string): TableContra
 }> | TableContract<{
     secretRef: zod.ZodString;
     tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodOptional<zod.ZodEnum<["dev", "staging", "prod"]>>;
     providerId: zod.ZodString;
     label: zod.ZodOptional<zod.ZodString>;
-    encryptedSecret: zod.ZodString;
+    encryptedSecret: zod.ZodOptional<zod.ZodString>;
+    infisicalPath: zod.ZodOptional<zod.ZodString>;
+    infisicalSecretKey: zod.ZodOptional<zod.ZodString>;
+    infisicalProjectId: zod.ZodOptional<zod.ZodString>;
     encryptionVersion: zod.ZodString;
     secretFingerprint: zod.ZodString;
     keyHint: zod.ZodString;
@@ -20873,6 +22545,30 @@ declare function getTableContract(name: string, component?: string): TableContra
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    leaseId: zod.ZodString;
+    proxyTokenId: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    providerId: zod.ZodString;
+    modelSlotId: zod.ZodString;
+    bindingId: zod.ZodString;
+    secretRef: zod.ZodString;
+    sessionId: zod.ZodString;
+    principalId: zod.ZodString;
+    agentSessionId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    expiresAt: zod.ZodNumber;
+    renewedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokeReason: zod.ZodOptional<zod.ZodString>;
+    permitDecisionLogId: zod.ZodOptional<ConvexIdSchema<"policyDecisionLogs">>;
+    permitTraceId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     sourceProjectId: zod.ZodOptional<zod.ZodString>;
     sourceTopicId: zod.ZodOptional<ConvexIdSchema<"topics">>;
@@ -21307,6 +23003,7 @@ declare function getTableContract(name: string, component?: string): TableContra
     questionType: zod.ZodOptional<zod.ZodEnum<["validation", "falsification", "assumption_probe", "prediction_test", "counterfactual", "discovery", "clarification", "comparison", "causal", "mechanism", "general"]>>;
     questionPriority: zod.ZodOptional<zod.ZodEnum<["critical", "high", "medium", "low"]>>;
     answerQuality: zod.ZodOptional<zod.ZodEnum<["definitive", "strong", "moderate", "weak", "speculative", "unanswered"]>>;
+    themeStatus: zod.ZodOptional<zod.ZodEnum<["emerging", "active", "mature", "declining", "archived"]>>;
     themeConviction: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low", "negative"]>>;
     decisionType: zod.ZodOptional<zod.ZodEnum<["invest", "pass", "follow_on", "exit", "deep_dive", "monitor", "deprioritize", "thesis_adopt", "thesis_revise", "thesis_abandon"]>>;
     decisionOutcome: zod.ZodOptional<zod.ZodEnum<["pending", "successful", "unsuccessful", "mixed", "unknown"]>>;
@@ -21408,6 +23105,22 @@ declare function getTableContract(name: string, component?: string): TableContra
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    principalRefId: zod.ZodOptional<ConvexIdSchema<"principals">>;
+    provider: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    externalSubjectId: zod.ZodString;
+    tenantId: zod.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
+    email: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     principalId: zod.ZodString;
     keyId: zod.ZodOptional<zod.ZodString>;
@@ -23128,7 +24841,7 @@ declare function getTableContract(name: string, component?: string): TableContra
     workspaceId: zod.ZodOptional<ConvexIdSchema<"workspaces">>;
     resourceType: zod.ZodString;
     resourceId: zod.ZodString;
-    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+    action: zod.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote", "route", "invoke", "manage", "deploy", "promote", "rollback", "audit", "read_ref", "fetch_value", "rotate", "administer", "mint", "delegate", "revoke"]>;
     decision: zod.ZodEnum<["allow", "deny"]>;
     reasonCode: zod.ZodString;
     policyVersion: zod.ZodString;
@@ -23172,6 +24885,247 @@ declare function getTableContract(name: string, component?: string): TableContra
     expiresAt: zod.ZodOptional<zod.ZodNumber>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalType: zod.ZodEnum<["human", "agent", "service_principal", "external_stakeholder", "system"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    displayName: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    principalId: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    provider: zod.ZodString;
+    providerSubjectId: zod.ZodString;
+    providerProjectId: zod.ZodOptional<zod.ZodString>;
+    alias: zod.ZodString;
+    aliasKind: zod.ZodString;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    groupKey: zod.ZodString;
+    groupName: zod.ZodString;
+    groupType: zod.ZodEnum<["tenant", "workspace", "external", "system", "dynamic"]>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    description: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    groupId: zod.ZodString;
+    memberType: zod.ZodEnum<["principal", "group"]>;
+    memberId: zod.ZodString;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    childGroupId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    addedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    revocationReason: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceId: zod.ZodString;
+    status: zod.ZodEnum<["active", "deleted", "archived"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    ownerPrincipalId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodString;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    resourceType: zod.ZodString;
+    resourceKey: zod.ZodString;
+    resourceInstanceId: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["active", "invited", "revoked", "suspended", "disabled"]>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    grantedBy: zod.ZodOptional<zod.ZodString>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodString;
+    subject: zod.ZodString;
+    object: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attributes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    targetType: zod.ZodEnum<["principal", "group"]>;
+    targetId: zod.ZodString;
+    attributeName: zod.ZodString;
+    attributeType: zod.ZodEnum<["string", "number", "bool", "json", "time"]>;
+    attributeOperator: zod.ZodEnum<["eq", "neq", "in", "not_in", "gt", "gte", "lt", "lte", "contains", "not_contains", "matches"]>;
+    attributeValue: zod.ZodAny;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    source: zod.ZodOptional<zod.ZodString>;
+    sourceRef: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    bundleKey: zod.ZodString;
+    version: zod.ZodNumber;
+    status: zod.ZodEnum<["draft", "validated", "enforced", "archived"]>;
+    policyHash: zod.ZodOptional<zod.ZodString>;
+    policyPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    retiredAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
+    payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    status: zod.ZodEnum<["queued", "inflight", "completed", "failed", "skipped", "stale"]>;
+    attemptCount: zod.ZodNumber;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
+}> | TableContract<{
+    syncKey: zod.ZodString;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
+    objectId: zod.ZodString;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodOptional<zod.ZodString>;
+    permitTenantKey: zod.ZodOptional<zod.ZodString>;
+    permitResourceType: zod.ZodOptional<zod.ZodString>;
+    permitResourceKey: zod.ZodOptional<zod.ZodString>;
+    desiredPayload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    lastAppliedPayloadHash: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["pending", "synced", "error", "skipped"]>;
+    attemptCount: zod.ZodNumber;
+    lastError: zod.ZodOptional<zod.ZodString>;
+    nextAttemptAt: zod.ZodOptional<zod.ZodNumber>;
+    lastSyncedAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodString;
+    updatedBy: zod.ZodOptional<zod.ZodString>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    principalId: zod.ZodString;
+    subjectType: zod.ZodOptional<zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>>;
+    subjectId: zod.ZodOptional<zod.ZodString>;
+    resourceType: zod.ZodString;
+    resourceId: zod.ZodString;
+    action: zod.ZodString;
+    decision: zod.ZodEnum<["allow", "deny"]>;
+    reasonCode: zod.ZodString;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    policyVersion: zod.ZodString;
+    traceId: zod.ZodOptional<zod.ZodString>;
+    requestId: zod.ZodOptional<zod.ZodString>;
+    audienceMode: zod.ZodOptional<zod.ZodString>;
+    audienceKey: zod.ZodOptional<zod.ZodString>;
+    audienceClass: zod.ZodOptional<zod.ZodEnum<["internal", "restricted_external", "public"]>>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    expiresAt: zod.ZodOptional<zod.ZodNumber>;
+    createdBy: zod.ZodOptional<zod.ZodString>;
+}> | TableContract<{
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    reviewKey: zod.ZodString;
+    scope: zod.ZodEnum<["tenant", "workspace", "resource_instance", "group", "principal", "api_key", "admin_action"]>;
+    status: zod.ZodEnum<["open", "in_progress", "approved", "denied", "expired", "cancelled"]>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    outcome: zod.ZodOptional<zod.ZodEnum<["allow", "deny"]>>;
+    requestedBy: zod.ZodString;
+    reviewedBy: zod.ZodOptional<zod.ZodString>;
+    requestedAt: zod.ZodNumber;
+    reviewedAt: zod.ZodOptional<zod.ZodNumber>;
+    dueAt: zod.ZodOptional<zod.ZodNumber>;
+    justification: zod.ZodOptional<zod.ZodString>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    policyBundleId: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    reviewKey: zod.ZodString;
+    itemKey: zod.ZodString;
+    tenantId: zod.ZodString;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    subjectType: zod.ZodEnum<["principal", "group", "role_assignment", "resource_instance"]>;
+    subjectId: zod.ZodString;
+    resourceType: zod.ZodOptional<zod.ZodString>;
+    resourceKey: zod.ZodOptional<zod.ZodString>;
+    role: zod.ZodOptional<zod.ZodString>;
+    relation: zod.ZodOptional<zod.ZodString>;
+    status: zod.ZodEnum<["open", "approved", "revoked", "changed", "deferred"]>;
+    reviewerId: zod.ZodOptional<zod.ZodString>;
+    decisionAt: zod.ZodOptional<zod.ZodNumber>;
+    rationale: zod.ZodOptional<zod.ZodString>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
 }> | TableContract<{
     topicId: zod.ZodOptional<zod.ZodString>;
     principalId: zod.ZodString;
@@ -23889,23 +25843,39 @@ declare function getTableContract(name: string, component?: string): TableContra
     deployments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
         url: zod.ZodString;
         target: zod.ZodOptional<zod.ZodEnum<["kernelDeployment", "appDeployment"]>>;
-        encryptedDeployKey: zod.ZodOptional<zod.ZodString>;
         credentialRef: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }, {
         url: string;
         credentialRef?: string | undefined;
         target?: "kernelDeployment" | "appDeployment" | undefined;
-        encryptedDeployKey?: string | undefined;
     }>>>;
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     createdBy: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
     updatedAt: zod.ZodNumber;
+}> | TableContract<{
+    host: zod.ZodString;
+    tenantId: ConvexIdSchema<"tenants">;
+    workspaceId: ConvexIdSchema<"workspaces">;
+    environment: zod.ZodEnum<["dev", "staging", "prod"]>;
+    target: zod.ZodEnum<["kernelDeployment", "appDeployment"]>;
+    deploymentUrl: zod.ZodOptional<zod.ZodString>;
+    deploymentName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectName: zod.ZodOptional<zod.ZodString>;
+    vercelProjectId: zod.ZodOptional<zod.ZodString>;
+    vercelEnvironment: zod.ZodOptional<zod.ZodEnum<["development", "preview", "staging", "production"]>>;
+    source: zod.ZodEnum<["vercel_preview", "vercel_production", "vercel_custom_environment", "custom_domain", "manual"]>;
+    status: zod.ZodEnum<["active", "revoked"]>;
+    metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+    createdBy: zod.ZodString;
+    createdAt: zod.ZodNumber;
+    updatedAt: zod.ZodNumber;
+    revokedAt: zod.ZodOptional<zod.ZodNumber>;
+    revokedBy: zod.ZodOptional<zod.ZodString>;
 }> | TableContract<{
     worktreeId: ConvexIdSchema<"worktrees">;
     beliefId: zod.ZodString;
@@ -23965,13 +25935,13 @@ declare function getTableContract(name: string, component?: string): TableContra
         answerConfidence: zod.ZodOptional<zod.ZodEnum<["high", "medium", "low"]>>;
         linkedQuestionId: zod.ZodOptional<zod.ZodString>;
     }, "strip", zod.ZodTypeAny, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }, {
-        status: "answered" | "open" | "forked";
+        status: "answered" | "forked" | "open";
         question: string;
         linkedQuestionId?: string | undefined;
         answer?: string | undefined;
@@ -24129,12 +26099,12 @@ declare function getTableContract(name: string, component?: string): TableContra
         confidenceChange: zod.ZodNumber;
     }, "strip", zod.ZodTypeAny, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }, {
         summary: string;
-        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
+        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }>>;
@@ -24182,16 +26152,16 @@ declare function getTableContract(name: string, component?: string): TableContra
             weight: zod.ZodOptional<zod.ZodNumber>;
             createdAt: zod.ZodOptional<zod.ZodNumber>;
         }, "strip", zod.ZodTypeAny, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
         }, {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -24254,16 +26224,16 @@ declare function getTableContract(name: string, component?: string): TableContra
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }, {
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }>, "many">;
         tasksCompleted: zod.ZodOptional<zod.ZodNumber>;
         totalTasks: zod.ZodOptional<zod.ZodNumber>;
@@ -24321,9 +26291,9 @@ declare function getTableContract(name: string, component?: string): TableContra
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string & zod.BRAND<"Id<worktrees>">;
         questions: {
@@ -24347,9 +26317,9 @@ declare function getTableContract(name: string, component?: string): TableContra
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -24387,9 +26357,9 @@ declare function getTableContract(name: string, component?: string): TableContra
             id: string;
             text: string;
             verified: boolean;
-            createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         worktreeId: string;
         questions: {
@@ -24413,9 +26383,9 @@ declare function getTableContract(name: string, component?: string): TableContra
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            sourceId: string;
-            targetId: string;
             edgeType: string;
+            targetId: string;
+            sourceId: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
             createdAt?: number | undefined;
@@ -24723,4 +26693,4 @@ declare function getTableContract(name: string, component?: string): TableContra
     metadata: zod.ZodOptional<zod.ZodAny>;
 }> | undefined;
 
-export { ALL_TABLE_CONTRACTS, IDENTITY_TABLE_CONTRACTS, KERNEL_TABLE_CONTRACTS, MC_TABLE_CONTRACTS, TABLE_CONTRACTS_BY_COMPONENT, getTableContract, listTableContractsByName };
+export { ALL_TABLE_CONTRACTS, CONTROL_PLANE_TABLE_CONTRACTS, KERNEL_TABLE_CONTRACTS, MC_TABLE_CONTRACTS, TABLE_CONTRACTS_BY_COMPONENT, getTableContract, listTableContractsByName };