@segmentstream/ontology 0.0.0-stage → 0.92.1

package/dist/manifest.d.ts

@@ -0,0 +1,3329 @@
+import type { ChatAttributionSettings } from "./chat.js";
+import { Effect, Schema } from "effect";
+import type { ResolvedConnection, ResolvedEntity } from "./analyze.js";
+import type { ResolvedFeedback } from "./feedback-config.js";
+import type { Role } from "./role.js";
+import { type SignInOptions, type SignInPolicy } from "./sign-in.js";
+/**
+ * The manifest format this SDK writes. Readers accept any version and ignore unknown fields. Version
+ * 2 replaced the actions' `allow` with `permission`, and added the roles' `permissions` and the
+ * entities' `permissions`; those fields are optional when decoding, so version 1 manifests still read.
+ * `signIn` came later within version 2 and is optional too, as are the actions' `connections` and the
+ * top-level `connections`, which are written only when an action calls a connection. Version 3 added
+ * warehouse sources and metrics. Version 4 writes snake_case names on the wire. Version 5 lets
+ * relationships target warehouse-backed entities and warehouse-backed properties declare `unique`:
+ * a relationship with a warehouse-backed end carries `on` and omits `optional` and `onDelete`.
+ * Version 6 adds the `countDistinct` metric operator and lets stored entities declare `metrics`,
+ * whose columns name the stored properties' replication view columns. Version 7 adds the avg, min,
+ * max and filtered metric operators and balanceOver on metrics. Version 8 adds the top-level
+ * `metrics`, the metrics of the model, written only when the ontology declares some: each combines
+ * metrics of entities, named `entity.metric`, with its inputs and its alignment. Version 9 adds the
+ * top-level `workflows`, written only when the ontology declares some: each names its role, its
+ * input as JSON Schema, the connections its steps call and its triggers, whose input is in wire form.
+ * Within version 9, a property may have the type `list` with its `items` type: only the built-in
+ * user's managed `roles`, which has no column.
+ * Within version 9, triggers may also be `action` and `webhook` triggers; readers ignore kinds they
+ * do not know.
+ * Version 10 adds the roles' `scopes`, written only when a role scopes some of its permissions: each
+ * names the permission and its `where` in the wire form of a query, with `me` as `{ "$me": [] }`
+ * and a path from it as `{ "$me": ["staff_member", "division"] }`. `permissions` still lists every
+ * permission the role holds, scoped or not. Version 11 adds resolved `feedback` settings and the
+ * reserved built-in `feedback_reporter` role, which is implicit for humans and never assignable.
+ * Within version 11, actions may opt in to SQL deadlock recovery with `retryOnDeadlock`; its absence
+ * disables retries and older readers may ignore it.
+ * Within version 11, the top-level `emails`, written only when the ontology declares some, holds the
+ * workspace's own emails by wire name: plain-text fields with `{{value}}` placeholders, which the
+ * platform renders when it sends a sign-in link. Older readers ignore it.
+ * Version 12 changes no field: it marks an SDK whose actions arm a recovery run for their triggers,
+ * so publication writes no sweep cron for it. For earlier versions publication keeps the
+ * five-minute sweep cron, which their service still needs.
+ * Version 13 adds optional `signIn.browser` declarations for workspace-owned browser sign-in
+ * methods, primary method, automatic redirect behavior, and local callback port.
+ * Within version 13, an entity may carry `writes: "actions"`: it has no generated writes, and its
+ * `permissions` hold only `read`, so readers that derive the generated actions from `permissions`
+ * need no change. Older readers ignore the field.
+ * Within version 13, an action may carry `writes`, the names of the entities its handler writes,
+ * which the runtime enforces; absent means it declares none. Older readers ignore the field.
+ * Version 14 gives metrics their current names: entities' and the model's `metrics`, and `metric`
+ * expression nodes (`{ op: "metric", name }`). Readers accept the earlier names, which the history
+ * above calls metrics too; `legacy.ts` names them and renames every document it decodes.
+ * Within version 14, `signIn` may carry `codeLink`, written only when declared: whether the
+ * platform's sign-in code emails also link to the app's sign-in page with the code filled in.
+ * Older readers ignore it and send the code alone.
+ * Version 15 changes no field this SDK writes. Ontology SDKs 0.86.0 to 0.88.0 introduced it with
+ * `executionCompatibility` and three workflow capabilities for a deploy guard that was withdrawn;
+ * readers ignore them.
+ */
+export declare const MANIFEST_VERSION = 15;
+/** The phrase used for a direction the author did not phrase. */
+export declare const DEFAULT_PHRASE = "has";
+export declare const SelectOptionManifest: Schema.Struct<{
+    readonly value: Schema.String;
+    readonly label: Schema.String;
+    readonly description: Schema.String;
+}>;
+export declare const PropertyManifest: Schema.Struct<{
+    readonly column: Schema.optionalKey<Schema.String>;
+    readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly name: Schema.String;
+    readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+    readonly label: Schema.String;
+    readonly description: Schema.optionalKey<Schema.String>;
+    readonly optional: Schema.Boolean;
+    readonly unique: Schema.Boolean;
+    readonly managed: Schema.Boolean;
+    readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly display: Schema.optionalKey<Schema.String>;
+    readonly renamedFrom: Schema.optionalKey<Schema.String>;
+    readonly min: Schema.optionalKey<Schema.Number>;
+    readonly max: Schema.optionalKey<Schema.Number>;
+    readonly maxLength: Schema.optionalKey<Schema.Number>;
+    readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly maxBytes: Schema.optionalKey<Schema.Number>;
+    readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly value: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+    }>>>;
+    /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+    readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+}>;
+export type PropertyManifest = typeof PropertyManifest.Type;
+/**
+ * A relationship as declared. The inverse is not repeated on the target entity: readers derive it
+ * from `to`, `inverse` and the second `phrase`.
+ */
+export declare const RelationshipManifest: Schema.Struct<{
+    /**
+     * The property pair of a value-matched relationship, one with a warehouse-backed end. Absent
+     * between stored entities, which use a `<name>_id` key instead.
+     */
+    readonly on: Schema.optionalKey<Schema.Struct<{
+        readonly property: Schema.String;
+        readonly targetProperty: Schema.String;
+    }>>;
+    readonly name: Schema.String;
+    readonly to: Schema.String;
+    readonly inverse: Schema.String;
+    readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+    /** `rel.one` between stored entities only. */
+    readonly optional: Schema.optionalKey<Schema.Boolean>;
+    /**
+     * `rel.one` between stored entities only. Before version 5, warehouse → stored relationships
+     * carried it too, as `restrict`, though nothing enforced it.
+     */
+    readonly onDelete: Schema.optionalKey<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>>;
+    /** `rel.many` only. */
+    readonly ordered: Schema.optionalKey<Schema.Boolean>;
+    /** Forward and inverse phrases; unphrased directions read "has". */
+    readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+    readonly description: Schema.String;
+}>;
+export type RelationshipManifest = typeof RelationshipManifest.Type;
+/**
+ * Whether a relationship is matched by value: either end is warehouse-backed. A value-matched
+ * relationship always declares `on`; a stored → stored relationship never does. It has no
+ * `<name>_id` column, foreign key, index or traversal route.
+ */
+export declare function isValueMatched(relationship: {
+    readonly on?: unknown;
+}): boolean;
+export declare const IndexManifest: Schema.Struct<{
+    readonly properties: Schema.$Array<Schema.String>;
+    readonly unique: Schema.Boolean;
+}>;
+export declare const ActionManifest: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    /**
+     * The permission a principal needs to run the action, for example `lead:changeStatus`. Always
+     * written; absent from version 1 manifests, where it reads as `<entity>:<action name>`.
+     */
+    readonly permission: Schema.optionalKey<Schema.String>;
+    /** JSON Schema (draft 2020-12) of the input object. */
+    readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    /** Opt-in SQL handler replay after a confirmed deadlock rollback; absent means disabled. */
+    readonly retryOnDeadlock: Schema.optionalKey<Schema.Boolean>;
+    /**
+     * The entities the handler writes, by name, as the action declares them; the runtime refuses any
+     * other write. Absent means it declares none and may write any entity; `[]` writes nothing.
+     */
+    readonly writes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /**
+     * The keys of the workspace connections the action calls before its transaction. Written only
+     * when there are some; absent reads as none.
+     */
+    readonly connections: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /** File writes declared in code; absence grants preparation no staging targets. */
+    readonly files: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly entity: Schema.String;
+        readonly property: Schema.String;
+    }>>>;
+    /**
+     * How the action behaves, as MCP tool annotations tell agents. Written only when the action
+     * declares hints; absent safety labels require agent confirmation for compatibility.
+     */
+    readonly hints: Schema.optionalKey<Schema.Struct<{
+        readonly readOnly: Schema.optionalKey<Schema.Boolean>;
+        readonly connectionsReadOnly: Schema.optionalKey<Schema.Boolean>;
+        readonly destructive: Schema.optionalKey<Schema.Boolean>;
+        readonly irreversible: Schema.optionalKey<Schema.Boolean>;
+        readonly idempotent: Schema.optionalKey<Schema.Boolean>;
+    }>>;
+}>;
+export type ActionManifest = typeof ActionManifest.Type;
+/**
+ * The permissions of an entity's reads and generated actions, so that readers need not rebuild the
+ * convention. The built-in user has only `read`; `link` and `unlink` exist with a `rel.many`. The
+ * generated `upsert_by_<property>` requires both `create` and `update`.
+ */
+export declare const EntityPermissionsManifest: Schema.Struct<{
+    readonly read: Schema.String;
+    readonly create: Schema.optionalKey<Schema.String>;
+    readonly update: Schema.optionalKey<Schema.String>;
+    readonly delete: Schema.optionalKey<Schema.String>;
+    readonly link: Schema.optionalKey<Schema.String>;
+    readonly unlink: Schema.optionalKey<Schema.String>;
+}>;
+export type EntityPermissionsManifest = typeof EntityPermissionsManifest.Type;
+/** A metric of an entity: its metadata and the expression the platform computes. */
+export declare const MetricManifest: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly label: Schema.String;
+    readonly description: Schema.String;
+    readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+    readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+    readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+    /**
+     * The column of the date or timestamp property a balance metric snapshots over; absent for
+     * additive metrics and in manifests before version 7. `balance_over` on the wire.
+     */
+    readonly balanceOver: Schema.optionalKey<Schema.String>;
+}>;
+export type MetricManifest = typeof MetricManifest.Type;
+/**
+ * A metric of the model, `defineOntology({ metrics })`. Its expression is an entity metric's
+ * arithmetic whose `metric` nodes name `entity.metric`, with references to other model metrics
+ * expanded. Names are wire names throughout.
+ */
+export declare const ModelMetricManifest: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly label: Schema.String;
+    readonly description: Schema.String;
+    readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+    readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+    readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+    /** The entity metrics the expression reads, `entity.metric`, each once, in reading order. */
+    readonly inputs: Schema.$Array<Schema.String>;
+    /**
+     * Groups of properties that stand for one another: each names every entity the metric reads,
+     * with a property or `null` for an entity without a counterpart.
+     */
+    readonly align: Schema.$Array<Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>>;
+}>;
+export type ModelMetricManifest = typeof ModelMetricManifest.Type;
+export declare const EntityManifest: Schema.Struct<{
+    readonly source: Schema.optionalKey<Schema.Struct<{
+        readonly asset: Schema.String;
+        readonly key: Schema.$Array<Schema.String>;
+        readonly currency: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly metrics: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+        readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+        readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        /**
+         * The column of the date or timestamp property a balance metric snapshots over; absent for
+         * additive metrics and in manifests before version 7. `balance_over` on the wire.
+         */
+        readonly balanceOver: Schema.optionalKey<Schema.String>;
+    }>>>;
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+    readonly label: Schema.String;
+    readonly plural: Schema.String;
+    readonly title: Schema.String;
+    readonly description: Schema.String;
+    readonly builtIn: Schema.Boolean;
+    readonly renamedFrom: Schema.optionalKey<Schema.String>;
+    readonly guide: Schema.optionalKey<Schema.String>;
+    readonly properties: Schema.$Array<Schema.Struct<{
+        readonly column: Schema.optionalKey<Schema.String>;
+        readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly name: Schema.String;
+        readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+        readonly label: Schema.String;
+        readonly description: Schema.optionalKey<Schema.String>;
+        readonly optional: Schema.Boolean;
+        readonly unique: Schema.Boolean;
+        readonly managed: Schema.Boolean;
+        readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly display: Schema.optionalKey<Schema.String>;
+        readonly renamedFrom: Schema.optionalKey<Schema.String>;
+        readonly min: Schema.optionalKey<Schema.Number>;
+        readonly max: Schema.optionalKey<Schema.Number>;
+        readonly maxLength: Schema.optionalKey<Schema.Number>;
+        readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly maxBytes: Schema.optionalKey<Schema.Number>;
+        readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly value: Schema.String;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+        }>>>;
+        /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+        readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+    }>>;
+    readonly relationships: Schema.$Array<Schema.Struct<{
+        /**
+         * The property pair of a value-matched relationship, one with a warehouse-backed end. Absent
+         * between stored entities, which use a `<name>_id` key instead.
+         */
+        readonly on: Schema.optionalKey<Schema.Struct<{
+            readonly property: Schema.String;
+            readonly targetProperty: Schema.String;
+        }>>;
+        readonly name: Schema.String;
+        readonly to: Schema.String;
+        readonly inverse: Schema.String;
+        readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+        /** `rel.one` between stored entities only. */
+        readonly optional: Schema.optionalKey<Schema.Boolean>;
+        /**
+         * `rel.one` between stored entities only. Before version 5, warehouse → stored relationships
+         * carried it too, as `restrict`, though nothing enforced it.
+         */
+        readonly onDelete: Schema.optionalKey<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>>;
+        /** `rel.many` only. */
+        readonly ordered: Schema.optionalKey<Schema.Boolean>;
+        /** Forward and inverse phrases; unphrased directions read "has". */
+        readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+        readonly description: Schema.String;
+    }>>;
+    readonly indexes: Schema.$Array<Schema.Struct<{
+        readonly properties: Schema.$Array<Schema.String>;
+        readonly unique: Schema.Boolean;
+    }>>;
+    readonly actions: Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        /**
+         * The permission a principal needs to run the action, for example `lead:changeStatus`. Always
+         * written; absent from version 1 manifests, where it reads as `<entity>:<action name>`.
+         */
+        readonly permission: Schema.optionalKey<Schema.String>;
+        /** JSON Schema (draft 2020-12) of the input object. */
+        readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        /** Opt-in SQL handler replay after a confirmed deadlock rollback; absent means disabled. */
+        readonly retryOnDeadlock: Schema.optionalKey<Schema.Boolean>;
+        /**
+         * The entities the handler writes, by name, as the action declares them; the runtime refuses any
+         * other write. Absent means it declares none and may write any entity; `[]` writes nothing.
+         */
+        readonly writes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /**
+         * The keys of the workspace connections the action calls before its transaction. Written only
+         * when there are some; absent reads as none.
+         */
+        readonly connections: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /** File writes declared in code; absence grants preparation no staging targets. */
+        readonly files: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly entity: Schema.String;
+            readonly property: Schema.String;
+        }>>>;
+        /**
+         * How the action behaves, as MCP tool annotations tell agents. Written only when the action
+         * declares hints; absent safety labels require agent confirmation for compatibility.
+         */
+        readonly hints: Schema.optionalKey<Schema.Struct<{
+            readonly readOnly: Schema.optionalKey<Schema.Boolean>;
+            readonly connectionsReadOnly: Schema.optionalKey<Schema.Boolean>;
+            readonly destructive: Schema.optionalKey<Schema.Boolean>;
+            readonly irreversible: Schema.optionalKey<Schema.Boolean>;
+            readonly idempotent: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+    }>>;
+    /** Always written; absent from version 1 manifests. */
+    readonly permissions: Schema.optionalKey<Schema.Struct<{
+        readonly read: Schema.String;
+        readonly create: Schema.optionalKey<Schema.String>;
+        readonly update: Schema.optionalKey<Schema.String>;
+        readonly delete: Schema.optionalKey<Schema.String>;
+        readonly link: Schema.optionalKey<Schema.String>;
+        readonly unlink: Schema.optionalKey<Schema.String>;
+    }>>;
+    /**
+     * `"actions"` when only the entity's authored actions write its records, so it has no generated
+     * writes and its `permissions` hold only `read`. Absent means the generated writes exist.
+     */
+    readonly writes: Schema.optionalKey<Schema.Literal<"actions">>;
+}>;
+export type EntityManifest = typeof EntityManifest.Type;
+/**
+ * A scoped permission of a role: `<entity>:<verb>` and the `where` of the records it covers, in the
+ * wire form of a query on the entity, where `{ "$me": [...] }` stands for the caller or a path from
+ * them. Readers that do not enforce scopes may show the `where` or ignore it.
+ */
+export declare const ScopeManifest: Schema.Struct<{
+    readonly permission: Schema.String;
+    readonly where: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+}>;
+export type ScopeManifest = typeof ScopeManifest.Type;
+export declare const RoleManifest: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly builtIn: Schema.Boolean;
+    /**
+     * What the role may do, wildcards included; for the built-in `member`, what every active app user
+     * may do. Always written; absent from version 1 manifests.
+     */
+    readonly permissions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /**
+     * The permissions the role holds only for the records their `where` matches, since version 10.
+     * Written only when there are some; absent reads as none.
+     */
+    readonly scopes: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly permission: Schema.String;
+        readonly where: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    }>>>;
+}>;
+export type RoleManifest = typeof RoleManifest.Type;
+/**
+ * A cron trigger of a workflow: the platform writes a Vercel cron for it, whose invocation starts the
+ * workflow with `input`, the wire form of the workflow's input, sent as it is.
+ */
+export declare const CronTriggerManifest: Schema.Struct<{
+    readonly kind: Schema.Literal<"cron">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    /** Five fields, UTC. */
+    readonly cron: Schema.String;
+    readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>;
+export type CronTriggerManifest = typeof CronTriggerManifest.Type;
+/**
+ * An action trigger of a workflow: the ontology service starts the workflow after an action of
+ * `entity` commits, `action` or, when it is absent, any of them. Wire names; the trigger's
+ * predicate and input mapping are code and never in the manifest.
+ */
+export declare const ActionTriggerManifest: Schema.Struct<{
+    readonly kind: Schema.Literal<"action">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly entity: Schema.String;
+    readonly action: Schema.optionalKey<Schema.String>;
+}>;
+export type ActionTriggerManifest = typeof ActionTriggerManifest.Type;
+/**
+ * A webhook trigger of a workflow: the ontology service starts the workflow for each genuine
+ * delivery to `/api/webhooks/<name>`. With `signature`, deliveries are checked with the provider's
+ * scheme against the named workspace secret; without it, the URL ends in a derived token.
+ * `verification` opts into a registration handshake; `headers` lists the request headers the
+ * delivery carries. Optional settings are written only when declared.
+ */
+export declare const WebhookTriggerManifest: Schema.Struct<{
+    readonly kind: Schema.Literal<"webhook">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly signature: Schema.optionalKey<Schema.Struct<{
+        readonly scheme: Schema.String;
+        readonly secret: Schema.String;
+    }>>;
+    readonly verification: Schema.optionalKey<Schema.Struct<{
+        readonly scheme: Schema.String;
+        readonly verifyToken: Schema.String;
+    }>>;
+    readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+export type WebhookTriggerManifest = typeof WebhookTriggerManifest.Type;
+/**
+ * A trigger of a kind this reader does not know, kept as written: a manifest a later SDK built
+ * keeps its hash, and readers that present triggers drop it.
+ */
+export declare const OtherTriggerManifest: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+export type OtherTriggerManifest = typeof OtherTriggerManifest.Type;
+/**
+ * A trigger of a workflow, by `kind`: `cron`, `action`, `webhook`, or a kind this reader keeps
+ * without knowing.
+ */
+export declare const WorkflowTriggerManifest: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"cron">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    /** Five fields, UTC. */
+    readonly cron: Schema.String;
+    readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"action">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly entity: Schema.String;
+    readonly action: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"webhook">;
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly signature: Schema.optionalKey<Schema.Struct<{
+        readonly scheme: Schema.String;
+        readonly secret: Schema.String;
+    }>>;
+    readonly verification: Schema.optionalKey<Schema.Struct<{
+        readonly scheme: Schema.String;
+        readonly verifyToken: Schema.String;
+    }>>;
+    readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+export type WorkflowTriggerManifest = typeof WorkflowTriggerManifest.Type;
+/** Whether a trigger is a cron trigger. */
+export declare function isCronTrigger(trigger: WorkflowTriggerManifest): trigger is CronTriggerManifest;
+/** Whether a trigger is an action trigger. */
+export declare function isActionTrigger(trigger: WorkflowTriggerManifest): trigger is ActionTriggerManifest;
+/** Whether a trigger is a webhook trigger. */
+export declare function isWebhookTrigger(trigger: WorkflowTriggerManifest): trigger is WebhookTriggerManifest;
+/**
+ * A workflow, `defineOntology({ workflows })`: a durable process the ontology service runs as the
+ * workflow's own service user holding `role`. Names are wire names; `input` is the JSON Schema of
+ * the workflow's input and `connections` the keys of the connections its steps call.
+ */
+export declare const WorkflowManifest: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly description: Schema.String;
+    readonly role: Schema.String;
+    readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly connections: Schema.$Array<Schema.String>;
+    readonly triggers: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"cron">;
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        /** Five fields, UTC. */
+        readonly cron: Schema.String;
+        readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"action">;
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly entity: Schema.String;
+        readonly action: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"webhook">;
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly signature: Schema.optionalKey<Schema.Struct<{
+            readonly scheme: Schema.String;
+            readonly secret: Schema.String;
+        }>>;
+        readonly verification: Schema.optionalKey<Schema.Struct<{
+            readonly scheme: Schema.String;
+            readonly verifyToken: Schema.String;
+        }>>;
+        readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    }>, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+}>;
+export type WorkflowManifest = typeof WorkflowManifest.Type;
+/** A workspace connection the ontology's actions call, by its key in `connections/connections.py`. */
+export declare const ConnectionManifest: Schema.Struct<{
+    readonly key: Schema.String;
+    readonly description: Schema.String;
+    /** Written only when the ontology sends data out through the connection. */
+    readonly delivers: Schema.optionalKey<Schema.Literal<true>>;
+}>;
+export type ConnectionManifest = typeof ConnectionManifest.Type;
+/**
+ * Who may become a member by signing in: `invited` or `open` as this SDK writes it. The policy is
+ * read as text, not as a closed set, because nothing is stored by it: a reader that meets a policy it
+ * does not know keeps the manifest and treats the policy as `invited`.
+ */
+export declare const BrowserSignInManifest: Schema.encodeKeys<Schema.Struct<{
+    readonly methods: Schema.$Array<Schema.String>;
+    readonly primary: Schema.String;
+    readonly autoRedirect: Schema.Boolean;
+    readonly local: Schema.optionalKey<Schema.Struct<{
+        readonly port: Schema.Int;
+    }>>;
+}>, {
+    readonly autoRedirect: "auto_redirect";
+}>;
+export declare const SignInManifest: Schema.encodeKeys<Schema.Struct<{
+    readonly browser: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+        readonly methods: Schema.$Array<Schema.String>;
+        readonly primary: Schema.String;
+        readonly autoRedirect: Schema.Boolean;
+        readonly local: Schema.optionalKey<Schema.Struct<{
+            readonly port: Schema.Int;
+        }>>;
+    }>, {
+        readonly autoRedirect: "auto_redirect";
+    }>>;
+    readonly policy: Schema.String;
+    readonly channels: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
+    readonly onNewUser: Schema.optionalKey<Schema.String>;
+    readonly codeLink: Schema.optionalKey<Schema.Boolean>;
+}>, {
+    readonly onNewUser: "on_new_user";
+    readonly codeLink: "code_link";
+}>;
+export type SignInManifest = typeof SignInManifest.Type;
+/** One of the workspace's emails, as `defineOntology({ emails })` declares it; see `EmailTemplate`. */
+export declare const EmailTemplateManifest: Schema.encodeKeys<Schema.Struct<{
+    readonly subject: Schema.String;
+    readonly eyebrow: Schema.optionalKey<Schema.String>;
+    readonly heading: Schema.String;
+    readonly card: Schema.optionalKey<Schema.Struct<{
+        readonly title: Schema.String;
+        readonly detail: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly note: Schema.optionalKey<Schema.String>;
+    readonly paragraphs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly action: Schema.String;
+    readonly footer: Schema.optionalKey<Schema.String>;
+    readonly replyTo: Schema.optionalKey<Schema.String>;
+}>, {
+    readonly replyTo: "reply_to";
+}>;
+export type EmailTemplateManifest = typeof EmailTemplateManifest.Type;
+/** A property in the snake_case wire spelling, for records that store definitions. */
+export declare const PropertyManifestWire: Schema.encodeKeys<Schema.Struct<{
+    readonly column: Schema.optionalKey<Schema.String>;
+    readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly name: Schema.String;
+    readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+    readonly label: Schema.String;
+    readonly description: Schema.optionalKey<Schema.String>;
+    readonly optional: Schema.Boolean;
+    readonly unique: Schema.Boolean;
+    readonly managed: Schema.Boolean;
+    readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly display: Schema.optionalKey<Schema.String>;
+    readonly renamedFrom: Schema.optionalKey<Schema.String>;
+    readonly min: Schema.optionalKey<Schema.Number>;
+    readonly max: Schema.optionalKey<Schema.Number>;
+    readonly maxLength: Schema.optionalKey<Schema.Number>;
+    readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly maxBytes: Schema.optionalKey<Schema.Number>;
+    readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly value: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+    }>>>;
+    /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+    readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+}>, {
+    readonly renamedFrom: "renamed_from";
+    readonly maxLength: "max_length";
+    readonly maxBytes: "max_bytes";
+}>;
+/** A relationship in the snake_case wire spelling, for records that store definitions. */
+export declare const RelationshipManifestWire: Schema.encodeKeys<Schema.Struct<{
+    readonly on: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+        readonly property: Schema.String;
+        readonly targetProperty: Schema.String;
+    }>, {
+        readonly targetProperty: "target_property";
+    }>>;
+    readonly onDelete: Schema.optionalKey<Schema.decodeTo<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>, Schema.Literals<readonly ["set_null", "cascade", "restrict"]>, never, never>>;
+    readonly name: Schema.String;
+    readonly to: Schema.String;
+    readonly inverse: Schema.String;
+    readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+    /** `rel.one` between stored entities only. */
+    readonly optional: Schema.optionalKey<Schema.Boolean>;
+    /** `rel.many` only. */
+    readonly ordered: Schema.optionalKey<Schema.Boolean>;
+    /** Forward and inverse phrases; unphrased directions read "has". */
+    readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+    readonly description: Schema.String;
+}>, {
+    readonly onDelete: "on_delete";
+}>;
+/** The JSON contract written since version 4; decoded SDK models remain camelCase. */
+export declare const OntologyManifestWire: Schema.encodeKeys<Schema.Struct<{
+    readonly entities: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+        readonly metrics: Schema.optionalKey<Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+            readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+            readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+            /**
+             * The column of the date or timestamp property a balance metric snapshots over; absent for
+             * additive metrics and in manifests before version 7. `balance_over` on the wire.
+             */
+            readonly balanceOver: Schema.optionalKey<Schema.String>;
+        }>, {
+            readonly balanceOver: "balance_over";
+        }>>>;
+        readonly properties: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly column: Schema.optionalKey<Schema.String>;
+            readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly name: Schema.String;
+            readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+            readonly label: Schema.String;
+            readonly description: Schema.optionalKey<Schema.String>;
+            readonly optional: Schema.Boolean;
+            readonly unique: Schema.Boolean;
+            readonly managed: Schema.Boolean;
+            readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly display: Schema.optionalKey<Schema.String>;
+            readonly renamedFrom: Schema.optionalKey<Schema.String>;
+            readonly min: Schema.optionalKey<Schema.Number>;
+            readonly max: Schema.optionalKey<Schema.Number>;
+            readonly maxLength: Schema.optionalKey<Schema.Number>;
+            readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly maxBytes: Schema.optionalKey<Schema.Number>;
+            readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly value: Schema.String;
+                readonly label: Schema.String;
+                readonly description: Schema.String;
+            }>>>;
+            /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+            readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+        }>, {
+            readonly renamedFrom: "renamed_from";
+            readonly maxLength: "max_length";
+            readonly maxBytes: "max_bytes";
+        }>>;
+        readonly relationships: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly on: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+                readonly property: Schema.String;
+                readonly targetProperty: Schema.String;
+            }>, {
+                readonly targetProperty: "target_property";
+            }>>;
+            readonly onDelete: Schema.optionalKey<Schema.decodeTo<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>, Schema.Literals<readonly ["set_null", "cascade", "restrict"]>, never, never>>;
+            readonly name: Schema.String;
+            readonly to: Schema.String;
+            readonly inverse: Schema.String;
+            readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+            /** `rel.one` between stored entities only. */
+            readonly optional: Schema.optionalKey<Schema.Boolean>;
+            /** `rel.many` only. */
+            readonly ordered: Schema.optionalKey<Schema.Boolean>;
+            /** Forward and inverse phrases; unphrased directions read "has". */
+            readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+            readonly description: Schema.String;
+        }>, {
+            readonly onDelete: "on_delete";
+        }>>;
+        readonly source: Schema.optionalKey<Schema.Struct<{
+            readonly asset: Schema.String;
+            readonly key: Schema.$Array<Schema.String>;
+            readonly currency: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly plural: Schema.String;
+        readonly title: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        readonly renamedFrom: Schema.optionalKey<Schema.String>;
+        readonly guide: Schema.optionalKey<Schema.String>;
+        readonly indexes: Schema.$Array<Schema.Struct<{
+            readonly properties: Schema.$Array<Schema.String>;
+            readonly unique: Schema.Boolean;
+        }>>;
+        readonly actions: Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /**
+             * The permission a principal needs to run the action, for example `lead:changeStatus`. Always
+             * written; absent from version 1 manifests, where it reads as `<entity>:<action name>`.
+             */
+            readonly permission: Schema.optionalKey<Schema.String>;
+            /** JSON Schema (draft 2020-12) of the input object. */
+            readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            /** Opt-in SQL handler replay after a confirmed deadlock rollback; absent means disabled. */
+            readonly retryOnDeadlock: Schema.optionalKey<Schema.Boolean>;
+            /**
+             * The entities the handler writes, by name, as the action declares them; the runtime refuses any
+             * other write. Absent means it declares none and may write any entity; `[]` writes nothing.
+             */
+            readonly writes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /**
+             * The keys of the workspace connections the action calls before its transaction. Written only
+             * when there are some; absent reads as none.
+             */
+            readonly connections: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /** File writes declared in code; absence grants preparation no staging targets. */
+            readonly files: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly entity: Schema.String;
+                readonly property: Schema.String;
+            }>>>;
+            /**
+             * How the action behaves, as MCP tool annotations tell agents. Written only when the action
+             * declares hints; absent safety labels require agent confirmation for compatibility.
+             */
+            readonly hints: Schema.optionalKey<Schema.Struct<{
+                readonly readOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly connectionsReadOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly destructive: Schema.optionalKey<Schema.Boolean>;
+                readonly irreversible: Schema.optionalKey<Schema.Boolean>;
+                readonly idempotent: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+        }>>;
+        /** Always written; absent from version 1 manifests. */
+        readonly permissions: Schema.optionalKey<Schema.Struct<{
+            readonly read: Schema.String;
+            readonly create: Schema.optionalKey<Schema.String>;
+            readonly update: Schema.optionalKey<Schema.String>;
+            readonly delete: Schema.optionalKey<Schema.String>;
+            readonly link: Schema.optionalKey<Schema.String>;
+            readonly unlink: Schema.optionalKey<Schema.String>;
+        }>>;
+        /**
+         * `"actions"` when only the entity's authored actions write its records, so it has no generated
+         * writes and its `permissions` hold only `read`. Absent means the generated writes exist.
+         */
+        readonly writes: Schema.optionalKey<Schema.Literal<"actions">>;
+    }>, {
+        readonly builtIn: "built_in";
+        readonly renamedFrom: "renamed_from";
+    }>>;
+    readonly roles: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        /**
+         * What the role may do, wildcards included; for the built-in `member`, what every active app user
+         * may do. Always written; absent from version 1 manifests.
+         */
+        readonly permissions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /**
+         * The permissions the role holds only for the records their `where` matches, since version 10.
+         * Written only when there are some; absent reads as none.
+         */
+        readonly scopes: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly permission: Schema.String;
+            readonly where: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        }>>>;
+    }>, {
+        readonly builtIn: "built_in";
+    }>>;
+    /** Resolved feedback settings since version 11; absence preserves historical opt-in behavior. */
+    readonly feedback: Schema.optionalKey<Schema.Struct<{
+        readonly enabled: Schema.Boolean;
+        readonly files: Schema.Boolean;
+        readonly builders: Schema.$Array<Schema.String>;
+        readonly automaticFailureReports: Schema.optionalKey<Schema.Boolean>;
+    }>>;
+    readonly runtimeCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /** Written by ontology SDKs 0.86.0 to 0.88.0 and never read; decoded so their manifests encode back. */
+    readonly executionCompatibility: Schema.optionalKey<Schema.Struct<{
+        readonly version: Schema.Int;
+        readonly hash: Schema.String;
+    }>>;
+    readonly version: Schema.Int;
+    /** `sha256:` and the hex digest of the canonical JSON of the manifest without `hash`. */
+    readonly hash: Schema.String;
+    /** Always written; absent from manifests built before sign-in policies, which read as `invited`. */
+    readonly signIn: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+        readonly browser: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+            readonly methods: Schema.$Array<Schema.String>;
+            readonly primary: Schema.String;
+            readonly autoRedirect: Schema.Boolean;
+            readonly local: Schema.optionalKey<Schema.Struct<{
+                readonly port: Schema.Int;
+            }>>;
+        }>, {
+            readonly autoRedirect: "auto_redirect";
+        }>>;
+        readonly policy: Schema.String;
+        readonly channels: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
+        readonly onNewUser: Schema.optionalKey<Schema.String>;
+        readonly codeLink: Schema.optionalKey<Schema.Boolean>;
+    }>, {
+        readonly onNewUser: "on_new_user";
+        readonly codeLink: "code_link";
+    }>>;
+    /** The workspace's own emails by wire name. Written only when there are some; absent reads as none. */
+    readonly emails: Schema.optionalKey<Schema.$Record<Schema.String, Schema.encodeKeys<Schema.Struct<{
+        readonly subject: Schema.String;
+        readonly eyebrow: Schema.optionalKey<Schema.String>;
+        readonly heading: Schema.String;
+        readonly card: Schema.optionalKey<Schema.Struct<{
+            readonly title: Schema.String;
+            readonly detail: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly note: Schema.optionalKey<Schema.String>;
+        readonly paragraphs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly action: Schema.String;
+        readonly footer: Schema.optionalKey<Schema.String>;
+        readonly replyTo: Schema.optionalKey<Schema.String>;
+    }>, {
+        readonly replyTo: "reply_to";
+    }>>>;
+    /** The connections the actions call. Written only when there are some; absent reads as none. */
+    readonly connections: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly description: Schema.String;
+        /** Written only when the ontology sends data out through the connection. */
+        readonly delivers: Schema.optionalKey<Schema.Literal<true>>;
+    }>>>;
+    readonly chat: Schema.optionalKey<Schema.Struct<{
+        readonly telegram: Schema.optionalKey<Schema.Struct<{
+            readonly connection: Schema.String;
+        }>>;
+        readonly attribution: Schema.optionalKey<Schema.Struct<{
+            readonly template: Schema.optionalKey<Schema.String>;
+            readonly separator: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>>;
+    /**
+     * The metrics of the model, since version 8. Written only when there are some; absent reads as
+     * none.
+     */
+    readonly metrics: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+        readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+        readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        /** The entity metrics the expression reads, `entity.metric`, each once, in reading order. */
+        readonly inputs: Schema.$Array<Schema.String>;
+        /**
+         * Groups of properties that stand for one another: each names every entity the metric reads,
+         * with a property or `null` for an entity without a counterpart.
+         */
+        readonly align: Schema.$Array<Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>>;
+    }>>>;
+    /**
+     * The workflows, since version 9. Written only when there are some; absent reads as none.
+     */
+    readonly workflows: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly role: Schema.String;
+        readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly connections: Schema.$Array<Schema.String>;
+        readonly triggers: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"cron">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /** Five fields, UTC. */
+            readonly cron: Schema.String;
+            readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"action">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly entity: Schema.String;
+            readonly action: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"webhook">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly signature: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly secret: Schema.String;
+            }>>;
+            readonly verification: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly verifyToken: Schema.String;
+            }>>;
+            readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+    }>>>;
+}>, {
+    readonly signIn: "sign_in";
+}>;
+/**
+ * Historical readers accept either metadata spelling and any manifest version, with the names of
+ * metrics before version 14: every decode, of the type side too, reads a document through
+ * `withCurrentManifestNames`.
+ */
+export declare const OntologyManifest: Schema.declareConstructor<{
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+} | {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+}, {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+            readonly renamed_from?: string | undefined;
+            readonly max_length?: number | undefined;
+            readonly max_bytes?: number | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly target_property: string;
+            } | undefined;
+            readonly ordered?: boolean | undefined;
+            readonly on_delete?: "cascade" | "restrict" | "set_null" | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly built_in: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balance_over?: string | undefined;
+        }[] | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+        readonly renamed_from?: string | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly built_in: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly [x: string]: Schema.Json;
+        } | {
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+            readonly reply_to?: string | undefined;
+        };
+    } | undefined;
+    readonly sign_in?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly auto_redirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly on_new_user?: string | undefined;
+        readonly code_link?: boolean | undefined;
+    } | undefined;
+} | {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly [x: string]: Schema.Json;
+        } | {
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly auto_redirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly on_new_user?: string | undefined;
+        readonly code_link?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+            readonly reply_to?: string | undefined;
+        };
+    } | undefined;
+}, readonly [Schema.Union<readonly [Schema.encodeKeys<Schema.Struct<{
+    readonly entities: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+        readonly metrics: Schema.optionalKey<Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+            readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+            readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+            /**
+             * The column of the date or timestamp property a balance metric snapshots over; absent for
+             * additive metrics and in manifests before version 7. `balance_over` on the wire.
+             */
+            readonly balanceOver: Schema.optionalKey<Schema.String>;
+        }>, {
+            readonly balanceOver: "balance_over";
+        }>>>;
+        readonly properties: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly column: Schema.optionalKey<Schema.String>;
+            readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly name: Schema.String;
+            readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+            readonly label: Schema.String;
+            readonly description: Schema.optionalKey<Schema.String>;
+            readonly optional: Schema.Boolean;
+            readonly unique: Schema.Boolean;
+            readonly managed: Schema.Boolean;
+            readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly display: Schema.optionalKey<Schema.String>;
+            readonly renamedFrom: Schema.optionalKey<Schema.String>;
+            readonly min: Schema.optionalKey<Schema.Number>;
+            readonly max: Schema.optionalKey<Schema.Number>;
+            readonly maxLength: Schema.optionalKey<Schema.Number>;
+            readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly maxBytes: Schema.optionalKey<Schema.Number>;
+            readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly value: Schema.String;
+                readonly label: Schema.String;
+                readonly description: Schema.String;
+            }>>>;
+            /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+            readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+        }>, {
+            readonly renamedFrom: "renamed_from";
+            readonly maxLength: "max_length";
+            readonly maxBytes: "max_bytes";
+        }>>;
+        readonly relationships: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+            readonly on: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+                readonly property: Schema.String;
+                readonly targetProperty: Schema.String;
+            }>, {
+                readonly targetProperty: "target_property";
+            }>>;
+            readonly onDelete: Schema.optionalKey<Schema.decodeTo<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>, Schema.Literals<readonly ["set_null", "cascade", "restrict"]>, never, never>>;
+            readonly name: Schema.String;
+            readonly to: Schema.String;
+            readonly inverse: Schema.String;
+            readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+            /** `rel.one` between stored entities only. */
+            readonly optional: Schema.optionalKey<Schema.Boolean>;
+            /** `rel.many` only. */
+            readonly ordered: Schema.optionalKey<Schema.Boolean>;
+            /** Forward and inverse phrases; unphrased directions read "has". */
+            readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+            readonly description: Schema.String;
+        }>, {
+            readonly onDelete: "on_delete";
+        }>>;
+        readonly source: Schema.optionalKey<Schema.Struct<{
+            readonly asset: Schema.String;
+            readonly key: Schema.$Array<Schema.String>;
+            readonly currency: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly plural: Schema.String;
+        readonly title: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        readonly renamedFrom: Schema.optionalKey<Schema.String>;
+        readonly guide: Schema.optionalKey<Schema.String>;
+        readonly indexes: Schema.$Array<Schema.Struct<{
+            readonly properties: Schema.$Array<Schema.String>;
+            readonly unique: Schema.Boolean;
+        }>>;
+        readonly actions: Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /**
+             * The permission a principal needs to run the action, for example `lead:changeStatus`. Always
+             * written; absent from version 1 manifests, where it reads as `<entity>:<action name>`.
+             */
+            readonly permission: Schema.optionalKey<Schema.String>;
+            /** JSON Schema (draft 2020-12) of the input object. */
+            readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            /** Opt-in SQL handler replay after a confirmed deadlock rollback; absent means disabled. */
+            readonly retryOnDeadlock: Schema.optionalKey<Schema.Boolean>;
+            /**
+             * The entities the handler writes, by name, as the action declares them; the runtime refuses any
+             * other write. Absent means it declares none and may write any entity; `[]` writes nothing.
+             */
+            readonly writes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /**
+             * The keys of the workspace connections the action calls before its transaction. Written only
+             * when there are some; absent reads as none.
+             */
+            readonly connections: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /** File writes declared in code; absence grants preparation no staging targets. */
+            readonly files: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly entity: Schema.String;
+                readonly property: Schema.String;
+            }>>>;
+            /**
+             * How the action behaves, as MCP tool annotations tell agents. Written only when the action
+             * declares hints; absent safety labels require agent confirmation for compatibility.
+             */
+            readonly hints: Schema.optionalKey<Schema.Struct<{
+                readonly readOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly connectionsReadOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly destructive: Schema.optionalKey<Schema.Boolean>;
+                readonly irreversible: Schema.optionalKey<Schema.Boolean>;
+                readonly idempotent: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+        }>>;
+        /** Always written; absent from version 1 manifests. */
+        readonly permissions: Schema.optionalKey<Schema.Struct<{
+            readonly read: Schema.String;
+            readonly create: Schema.optionalKey<Schema.String>;
+            readonly update: Schema.optionalKey<Schema.String>;
+            readonly delete: Schema.optionalKey<Schema.String>;
+            readonly link: Schema.optionalKey<Schema.String>;
+            readonly unlink: Schema.optionalKey<Schema.String>;
+        }>>;
+        /**
+         * `"actions"` when only the entity's authored actions write its records, so it has no generated
+         * writes and its `permissions` hold only `read`. Absent means the generated writes exist.
+         */
+        readonly writes: Schema.optionalKey<Schema.Literal<"actions">>;
+    }>, {
+        readonly builtIn: "built_in";
+        readonly renamedFrom: "renamed_from";
+    }>>;
+    readonly roles: Schema.$Array<Schema.encodeKeys<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        /**
+         * What the role may do, wildcards included; for the built-in `member`, what every active app user
+         * may do. Always written; absent from version 1 manifests.
+         */
+        readonly permissions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /**
+         * The permissions the role holds only for the records their `where` matches, since version 10.
+         * Written only when there are some; absent reads as none.
+         */
+        readonly scopes: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly permission: Schema.String;
+            readonly where: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        }>>>;
+    }>, {
+        readonly builtIn: "built_in";
+    }>>;
+    /** Resolved feedback settings since version 11; absence preserves historical opt-in behavior. */
+    readonly feedback: Schema.optionalKey<Schema.Struct<{
+        readonly enabled: Schema.Boolean;
+        readonly files: Schema.Boolean;
+        readonly builders: Schema.$Array<Schema.String>;
+        readonly automaticFailureReports: Schema.optionalKey<Schema.Boolean>;
+    }>>;
+    readonly runtimeCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /** Written by ontology SDKs 0.86.0 to 0.88.0 and never read; decoded so their manifests encode back. */
+    readonly executionCompatibility: Schema.optionalKey<Schema.Struct<{
+        readonly version: Schema.Int;
+        readonly hash: Schema.String;
+    }>>;
+    readonly version: Schema.Int;
+    /** `sha256:` and the hex digest of the canonical JSON of the manifest without `hash`. */
+    readonly hash: Schema.String;
+    /** Always written; absent from manifests built before sign-in policies, which read as `invited`. */
+    readonly signIn: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+        readonly browser: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+            readonly methods: Schema.$Array<Schema.String>;
+            readonly primary: Schema.String;
+            readonly autoRedirect: Schema.Boolean;
+            readonly local: Schema.optionalKey<Schema.Struct<{
+                readonly port: Schema.Int;
+            }>>;
+        }>, {
+            readonly autoRedirect: "auto_redirect";
+        }>>;
+        readonly policy: Schema.String;
+        readonly channels: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
+        readonly onNewUser: Schema.optionalKey<Schema.String>;
+        readonly codeLink: Schema.optionalKey<Schema.Boolean>;
+    }>, {
+        readonly onNewUser: "on_new_user";
+        readonly codeLink: "code_link";
+    }>>;
+    /** The workspace's own emails by wire name. Written only when there are some; absent reads as none. */
+    readonly emails: Schema.optionalKey<Schema.$Record<Schema.String, Schema.encodeKeys<Schema.Struct<{
+        readonly subject: Schema.String;
+        readonly eyebrow: Schema.optionalKey<Schema.String>;
+        readonly heading: Schema.String;
+        readonly card: Schema.optionalKey<Schema.Struct<{
+            readonly title: Schema.String;
+            readonly detail: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly note: Schema.optionalKey<Schema.String>;
+        readonly paragraphs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly action: Schema.String;
+        readonly footer: Schema.optionalKey<Schema.String>;
+        readonly replyTo: Schema.optionalKey<Schema.String>;
+    }>, {
+        readonly replyTo: "reply_to";
+    }>>>;
+    /** The connections the actions call. Written only when there are some; absent reads as none. */
+    readonly connections: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly description: Schema.String;
+        /** Written only when the ontology sends data out through the connection. */
+        readonly delivers: Schema.optionalKey<Schema.Literal<true>>;
+    }>>>;
+    readonly chat: Schema.optionalKey<Schema.Struct<{
+        readonly telegram: Schema.optionalKey<Schema.Struct<{
+            readonly connection: Schema.String;
+        }>>;
+        readonly attribution: Schema.optionalKey<Schema.Struct<{
+            readonly template: Schema.optionalKey<Schema.String>;
+            readonly separator: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>>;
+    /**
+     * The metrics of the model, since version 8. Written only when there are some; absent reads as
+     * none.
+     */
+    readonly metrics: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+        readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+        readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        /** The entity metrics the expression reads, `entity.metric`, each once, in reading order. */
+        readonly inputs: Schema.$Array<Schema.String>;
+        /**
+         * Groups of properties that stand for one another: each names every entity the metric reads,
+         * with a property or `null` for an entity without a counterpart.
+         */
+        readonly align: Schema.$Array<Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>>;
+    }>>>;
+    /**
+     * The workflows, since version 9. Written only when there are some; absent reads as none.
+     */
+    readonly workflows: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly role: Schema.String;
+        readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly connections: Schema.$Array<Schema.String>;
+        readonly triggers: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"cron">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /** Five fields, UTC. */
+            readonly cron: Schema.String;
+            readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"action">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly entity: Schema.String;
+            readonly action: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"webhook">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly signature: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly secret: Schema.String;
+            }>>;
+            readonly verification: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly verifyToken: Schema.String;
+            }>>;
+            readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+    }>>>;
+}>, {
+    readonly signIn: "sign_in";
+}>, Schema.Struct<{
+    /** Resolved feedback settings since version 11; absence preserves historical opt-in behavior. */
+    readonly feedback: Schema.optionalKey<Schema.Struct<{
+        readonly enabled: Schema.Boolean;
+        readonly files: Schema.Boolean;
+        readonly builders: Schema.$Array<Schema.String>;
+        readonly automaticFailureReports: Schema.optionalKey<Schema.Boolean>;
+    }>>;
+    readonly runtimeCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /** Written by ontology SDKs 0.86.0 to 0.88.0 and never read; decoded so their manifests encode back. */
+    readonly executionCompatibility: Schema.optionalKey<Schema.Struct<{
+        readonly version: Schema.Int;
+        readonly hash: Schema.String;
+    }>>;
+    readonly version: Schema.Int;
+    /** `sha256:` and the hex digest of the canonical JSON of the manifest without `hash`. */
+    readonly hash: Schema.String;
+    readonly entities: Schema.$Array<Schema.Struct<{
+        readonly source: Schema.optionalKey<Schema.Struct<{
+            readonly asset: Schema.String;
+            readonly key: Schema.$Array<Schema.String>;
+            readonly currency: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly metrics: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+            readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+            readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+            /**
+             * The column of the date or timestamp property a balance metric snapshots over; absent for
+             * additive metrics and in manifests before version 7. `balance_over` on the wire.
+             */
+            readonly balanceOver: Schema.optionalKey<Schema.String>;
+        }>>>;
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly plural: Schema.String;
+        readonly title: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        readonly renamedFrom: Schema.optionalKey<Schema.String>;
+        readonly guide: Schema.optionalKey<Schema.String>;
+        readonly properties: Schema.$Array<Schema.Struct<{
+            readonly column: Schema.optionalKey<Schema.String>;
+            readonly scope: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly name: Schema.String;
+            readonly type: Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>;
+            readonly label: Schema.String;
+            readonly description: Schema.optionalKey<Schema.String>;
+            readonly optional: Schema.Boolean;
+            readonly unique: Schema.Boolean;
+            readonly managed: Schema.Boolean;
+            readonly default: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly display: Schema.optionalKey<Schema.String>;
+            readonly renamedFrom: Schema.optionalKey<Schema.String>;
+            readonly min: Schema.optionalKey<Schema.Number>;
+            readonly max: Schema.optionalKey<Schema.Number>;
+            readonly maxLength: Schema.optionalKey<Schema.Number>;
+            readonly accept: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly maxBytes: Schema.optionalKey<Schema.Number>;
+            readonly options: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly value: Schema.String;
+                readonly label: Schema.String;
+                readonly description: Schema.String;
+            }>>>;
+            /** The item type of a `list`, the built-in user's `roles`, which has no column. */
+            readonly items: Schema.optionalKey<Schema.Literals<readonly ["text", "email", "url", "integer", "number", "boolean", "date", "timestamp", "select", "json", "blob", "list"]>>;
+        }>>;
+        readonly relationships: Schema.$Array<Schema.Struct<{
+            /**
+             * The property pair of a value-matched relationship, one with a warehouse-backed end. Absent
+             * between stored entities, which use a `<name>_id` key instead.
+             */
+            readonly on: Schema.optionalKey<Schema.Struct<{
+                readonly property: Schema.String;
+                readonly targetProperty: Schema.String;
+            }>>;
+            readonly name: Schema.String;
+            readonly to: Schema.String;
+            readonly inverse: Schema.String;
+            readonly cardinality: Schema.Literals<readonly ["one", "many"]>;
+            /** `rel.one` between stored entities only. */
+            readonly optional: Schema.optionalKey<Schema.Boolean>;
+            /**
+             * `rel.one` between stored entities only. Before version 5, warehouse → stored relationships
+             * carried it too, as `restrict`, though nothing enforced it.
+             */
+            readonly onDelete: Schema.optionalKey<Schema.Literals<readonly ["setNull", "cascade", "restrict"]>>;
+            /** `rel.many` only. */
+            readonly ordered: Schema.optionalKey<Schema.Boolean>;
+            /** Forward and inverse phrases; unphrased directions read "has". */
+            readonly phrase: Schema.Tuple<readonly [Schema.String, Schema.String]>;
+            readonly description: Schema.String;
+        }>>;
+        readonly indexes: Schema.$Array<Schema.Struct<{
+            readonly properties: Schema.$Array<Schema.String>;
+            readonly unique: Schema.Boolean;
+        }>>;
+        readonly actions: Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /**
+             * The permission a principal needs to run the action, for example `lead:changeStatus`. Always
+             * written; absent from version 1 manifests, where it reads as `<entity>:<action name>`.
+             */
+            readonly permission: Schema.optionalKey<Schema.String>;
+            /** JSON Schema (draft 2020-12) of the input object. */
+            readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            /** Opt-in SQL handler replay after a confirmed deadlock rollback; absent means disabled. */
+            readonly retryOnDeadlock: Schema.optionalKey<Schema.Boolean>;
+            /**
+             * The entities the handler writes, by name, as the action declares them; the runtime refuses any
+             * other write. Absent means it declares none and may write any entity; `[]` writes nothing.
+             */
+            readonly writes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /**
+             * The keys of the workspace connections the action calls before its transaction. Written only
+             * when there are some; absent reads as none.
+             */
+            readonly connections: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            /** File writes declared in code; absence grants preparation no staging targets. */
+            readonly files: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly entity: Schema.String;
+                readonly property: Schema.String;
+            }>>>;
+            /**
+             * How the action behaves, as MCP tool annotations tell agents. Written only when the action
+             * declares hints; absent safety labels require agent confirmation for compatibility.
+             */
+            readonly hints: Schema.optionalKey<Schema.Struct<{
+                readonly readOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly connectionsReadOnly: Schema.optionalKey<Schema.Boolean>;
+                readonly destructive: Schema.optionalKey<Schema.Boolean>;
+                readonly irreversible: Schema.optionalKey<Schema.Boolean>;
+                readonly idempotent: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+        }>>;
+        /** Always written; absent from version 1 manifests. */
+        readonly permissions: Schema.optionalKey<Schema.Struct<{
+            readonly read: Schema.String;
+            readonly create: Schema.optionalKey<Schema.String>;
+            readonly update: Schema.optionalKey<Schema.String>;
+            readonly delete: Schema.optionalKey<Schema.String>;
+            readonly link: Schema.optionalKey<Schema.String>;
+            readonly unlink: Schema.optionalKey<Schema.String>;
+        }>>;
+        /**
+         * `"actions"` when only the entity's authored actions write its records, so it has no generated
+         * writes and its `permissions` hold only `read`. Absent means the generated writes exist.
+         */
+        readonly writes: Schema.optionalKey<Schema.Literal<"actions">>;
+    }>>;
+    readonly roles: Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly builtIn: Schema.Boolean;
+        /**
+         * What the role may do, wildcards included; for the built-in `member`, what every active app user
+         * may do. Always written; absent from version 1 manifests.
+         */
+        readonly permissions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /**
+         * The permissions the role holds only for the records their `where` matches, since version 10.
+         * Written only when there are some; absent reads as none.
+         */
+        readonly scopes: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly permission: Schema.String;
+            readonly where: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        }>>>;
+    }>>;
+    /** Always written; absent from manifests built before sign-in policies, which read as `invited`. */
+    readonly signIn: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+        readonly browser: Schema.optionalKey<Schema.encodeKeys<Schema.Struct<{
+            readonly methods: Schema.$Array<Schema.String>;
+            readonly primary: Schema.String;
+            readonly autoRedirect: Schema.Boolean;
+            readonly local: Schema.optionalKey<Schema.Struct<{
+                readonly port: Schema.Int;
+            }>>;
+        }>, {
+            readonly autoRedirect: "auto_redirect";
+        }>>;
+        readonly policy: Schema.String;
+        readonly channels: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
+        readonly onNewUser: Schema.optionalKey<Schema.String>;
+        readonly codeLink: Schema.optionalKey<Schema.Boolean>;
+    }>, {
+        readonly onNewUser: "on_new_user";
+        readonly codeLink: "code_link";
+    }>>;
+    /** The workspace's own emails by wire name. Written only when there are some; absent reads as none. */
+    readonly emails: Schema.optionalKey<Schema.$Record<Schema.String, Schema.encodeKeys<Schema.Struct<{
+        readonly subject: Schema.String;
+        readonly eyebrow: Schema.optionalKey<Schema.String>;
+        readonly heading: Schema.String;
+        readonly card: Schema.optionalKey<Schema.Struct<{
+            readonly title: Schema.String;
+            readonly detail: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly note: Schema.optionalKey<Schema.String>;
+        readonly paragraphs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly action: Schema.String;
+        readonly footer: Schema.optionalKey<Schema.String>;
+        readonly replyTo: Schema.optionalKey<Schema.String>;
+    }>, {
+        readonly replyTo: "reply_to";
+    }>>>;
+    /** The connections the actions call. Written only when there are some; absent reads as none. */
+    readonly connections: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly description: Schema.String;
+        /** Written only when the ontology sends data out through the connection. */
+        readonly delivers: Schema.optionalKey<Schema.Literal<true>>;
+    }>>>;
+    readonly chat: Schema.optionalKey<Schema.Struct<{
+        readonly telegram: Schema.optionalKey<Schema.Struct<{
+            readonly connection: Schema.String;
+        }>>;
+        readonly attribution: Schema.optionalKey<Schema.Struct<{
+            readonly template: Schema.optionalKey<Schema.String>;
+            readonly separator: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>>;
+    /**
+     * The metrics of the model, since version 8. Written only when there are some; absent reads as
+     * none.
+     */
+    readonly metrics: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly unit: Schema.Literals<readonly ["number", "currency", "ratio", "percent"]>;
+        readonly format: Schema.Literals<readonly ["decimal", "currency", "percent"]>;
+        readonly expression: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        /** The entity metrics the expression reads, `entity.metric`, each once, in reading order. */
+        readonly inputs: Schema.$Array<Schema.String>;
+        /**
+         * Groups of properties that stand for one another: each names every entity the metric reads,
+         * with a property or `null` for an entity without a counterpart.
+         */
+        readonly align: Schema.$Array<Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>>;
+    }>>>;
+    /**
+     * The workflows, since version 9. Written only when there are some; absent reads as none.
+     */
+    readonly workflows: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly description: Schema.String;
+        readonly role: Schema.String;
+        readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly connections: Schema.$Array<Schema.String>;
+        readonly triggers: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"cron">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            /** Five fields, UTC. */
+            readonly cron: Schema.String;
+            readonly input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"action">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly entity: Schema.String;
+            readonly action: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"webhook">;
+            readonly name: Schema.String;
+            readonly description: Schema.String;
+            readonly signature: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly secret: Schema.String;
+            }>>;
+            readonly verification: Schema.optionalKey<Schema.Struct<{
+                readonly scheme: Schema.String;
+                readonly verifyToken: Schema.String;
+            }>>;
+            readonly headers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+    }>>>;
+}>]>], {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+} | {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+}>;
+export type OntologyManifest = typeof OntologyManifest.Type;
+/**
+ * Retain the complete document when decoding a persisted or published manifest: encoding the decoded
+ * manifest returns it untouched, earlier names included, so its hash still verifies.
+ */
+export declare const decodeManifestDocument: (value: unknown) => Effect.Effect<{
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+} | {
+    readonly version: number;
+    readonly hash: string;
+    readonly entities: readonly {
+        readonly id: string;
+        readonly name: string;
+        readonly description: string;
+        readonly label: string;
+        readonly properties: readonly {
+            readonly optional: boolean;
+            readonly name: string;
+            readonly label: string;
+            readonly type: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list";
+            readonly unique: boolean;
+            readonly managed: boolean;
+            readonly max?: number | undefined;
+            readonly description?: string | undefined;
+            readonly default?: Schema.Json | undefined;
+            readonly min?: number | undefined;
+            readonly column?: string | undefined;
+            readonly renamedFrom?: string | undefined;
+            readonly scope?: readonly string[] | undefined;
+            readonly display?: string | undefined;
+            readonly maxLength?: number | undefined;
+            readonly accept?: readonly string[] | undefined;
+            readonly maxBytes?: number | undefined;
+            readonly options?: readonly {
+                readonly value: string;
+                readonly label: string;
+                readonly description: string;
+            }[] | undefined;
+            readonly items?: "number" | "boolean" | "email" | "text" | "url" | "date" | "timestamp" | "select" | "integer" | "json" | "blob" | "list" | undefined;
+        }[];
+        readonly relationships: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly to: string;
+            readonly cardinality: "one" | "many";
+            readonly phrase: readonly [string, string];
+            readonly inverse: string;
+            readonly optional?: boolean | undefined;
+            readonly on?: {
+                readonly property: string;
+                readonly targetProperty: string;
+            } | undefined;
+            readonly onDelete?: "setNull" | "cascade" | "restrict" | undefined;
+            readonly ordered?: boolean | undefined;
+        }[];
+        readonly indexes: readonly {
+            readonly properties: readonly string[];
+            readonly unique: boolean;
+        }[];
+        readonly actions: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly input: {
+                readonly [x: string]: Schema.Json;
+            };
+            readonly permission?: string | undefined;
+            readonly retryOnDeadlock?: boolean | undefined;
+            readonly writes?: readonly string[] | undefined;
+            readonly connections?: readonly string[] | undefined;
+            readonly files?: readonly {
+                readonly entity: string;
+                readonly property: string;
+            }[] | undefined;
+            readonly hints?: {
+                readonly readOnly?: boolean | undefined;
+                readonly connectionsReadOnly?: boolean | undefined;
+                readonly destructive?: boolean | undefined;
+                readonly irreversible?: boolean | undefined;
+                readonly idempotent?: boolean | undefined;
+            } | undefined;
+        }[];
+        readonly plural: string;
+        readonly title: string;
+        readonly builtIn: boolean;
+        readonly source?: {
+            readonly key: readonly string[];
+            readonly asset: string;
+            readonly currency?: string | undefined;
+        } | undefined;
+        readonly metrics?: readonly {
+            readonly name: string;
+            readonly description: string;
+            readonly label: string;
+            readonly unit: "number" | "currency" | "ratio" | "percent";
+            readonly format: "decimal" | "currency" | "percent";
+            readonly expression: Schema.Json;
+            readonly balanceOver?: string | undefined;
+        }[] | undefined;
+        readonly renamedFrom?: string | undefined;
+        readonly guide?: string | undefined;
+        readonly writes?: "actions" | undefined;
+        readonly permissions?: {
+            readonly read: string;
+            readonly create?: string | undefined;
+            readonly update?: string | undefined;
+            readonly delete?: string | undefined;
+            readonly link?: string | undefined;
+            readonly unlink?: string | undefined;
+        } | undefined;
+    }[];
+    readonly roles: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly builtIn: boolean;
+        readonly scopes?: readonly {
+            readonly permission: string;
+            readonly where: {
+                readonly [x: string]: Schema.Json;
+            };
+        }[] | undefined;
+        readonly permissions?: readonly string[] | undefined;
+    }[];
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        } | undefined;
+        readonly attribution?: {
+            readonly template?: string | undefined;
+            readonly separator?: string | undefined;
+        } | undefined;
+    } | undefined;
+    readonly workflows?: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly role: string;
+        readonly input: {
+            readonly [x: string]: Schema.Json;
+        };
+        readonly connections: readonly string[];
+        readonly triggers: readonly ({
+            readonly kind: "cron";
+            readonly name: string;
+            readonly description: string;
+            readonly cron: string;
+            readonly input: Schema.Json;
+        } | {
+            readonly kind: "action";
+            readonly entity: string;
+            readonly name: string;
+            readonly description: string;
+            readonly action?: string | undefined;
+        } | {
+            readonly kind: "webhook";
+            readonly name: string;
+            readonly description: string;
+            readonly signature?: {
+                readonly scheme: string;
+                readonly secret: string;
+            } | undefined;
+            readonly verification?: {
+                readonly scheme: string;
+                readonly verifyToken: string;
+            } | undefined;
+            readonly headers?: readonly string[] | undefined;
+        } | {
+            readonly [x: string]: Schema.Json;
+        })[];
+    }[] | undefined;
+    readonly metrics?: readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly description: string;
+        readonly unit: "number" | "currency" | "ratio" | "percent";
+        readonly format: "decimal" | "currency" | "percent";
+        readonly expression: Schema.Json;
+        readonly inputs: readonly string[];
+        readonly align: readonly {
+            readonly [x: string]: string | null;
+        }[];
+    }[] | undefined;
+    readonly connections?: readonly {
+        readonly description: string;
+        readonly key: string;
+        readonly delivers?: true | undefined;
+    }[] | undefined;
+    readonly feedback?: {
+        readonly files: boolean;
+        readonly builders: readonly string[];
+        readonly enabled: boolean;
+        readonly automaticFailureReports?: boolean | undefined;
+    } | undefined;
+    readonly runtimeCapabilities?: readonly string[] | undefined;
+    readonly executionCompatibility?: {
+        readonly version: number;
+        readonly hash: string;
+    } | undefined;
+    readonly signIn?: {
+        readonly policy: string;
+        readonly browser?: {
+            readonly methods: readonly string[];
+            readonly primary: string;
+            readonly autoRedirect: boolean;
+            readonly local?: {
+                readonly port: number;
+            } | undefined;
+        } | undefined;
+        readonly channels?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly onNewUser?: string | undefined;
+        readonly codeLink?: boolean | undefined;
+    } | undefined;
+    readonly emails?: {
+        readonly [x: string]: {
+            readonly subject: string;
+            readonly action: string;
+            readonly heading: string;
+            readonly replyTo?: string | undefined;
+            readonly eyebrow?: string | undefined;
+            readonly card?: {
+                readonly title: string;
+                readonly detail?: string | undefined;
+            } | undefined;
+            readonly note?: string | undefined;
+            readonly paragraphs?: readonly string[] | undefined;
+            readonly footer?: string | undefined;
+        };
+    } | undefined;
+}, Schema.SchemaError, never>;
+/** Encode only ontology-owned metadata. JSON values and JSON Schema keywords remain opaque. */
+export declare function encodeManifest(manifest: OntologyManifest): Readonly<Record<string, unknown>>;
+/**
+ * The sign-in policy a manifest declares. A manifest without one, or with a policy this reader does
+ * not know, reads as `invited`: the closed choice, so that a misread never lets strangers in.
+ */
+export declare function signInPolicyOf(manifest: Pick<OntologyManifest, "signIn">): SignInPolicy;
+/** Unsupported providers and missing or unknown channel policies require invitation. */
+export declare function channelPolicyOf(manifest: Pick<OntologyManifest, "signIn">, provider: string): SignInPolicy;
+/** JSON with object keys sorted at every level and no whitespace: the input of the manifest hash. */
+export declare function canonicalJson(value: unknown): string;
+/** The manifest as a file: canonical key order, two-space indentation and a final newline. */
+export declare function formatManifest(manifest: OntologyManifest): string;
+/** The hash of a manifest, computed over its canonical JSON without the `hash` field. */
+export declare function manifestHash(manifest: Readonly<Record<string, unknown>>): string;
+/**
+ * The metrics of an entity, of one that passed `check`. A warehouse-backed property's column is its
+ * `column`; a stored property has none, and its column in the replication view is its wire name.
+ * Conditions name columns too, and so does `balanceOver`, which comes from the metric's own
+ * aggregates, top-level or inside arithmetic: `check` lets them name one property at most.
+ */
+export declare function metricsManifest(resolved: ResolvedEntity): ReadonlyArray<MetricManifest>;
+/** Builds the manifest of a resolved ontology that passed `check`. */
+export declare function buildManifest(input: {
+    readonly feedback?: ResolvedFeedback;
+    readonly chat?: {
+        readonly telegram?: {
+            readonly connection: string;
+        };
+        readonly attribution?: ChatAttributionSettings;
+    };
+    readonly entities: ReadonlyArray<ResolvedEntity>;
+    readonly roles: ReadonlyArray<Role>;
+    readonly signIn: SignInOptions;
+    /** The workspace's own emails by wire name. */
+    readonly emails?: Readonly<Record<string, EmailTemplateManifest>>;
+    readonly connections?: ReadonlyArray<ResolvedConnection>;
+    /** The metrics of the model, resolved to their manifest form. */
+    readonly metrics?: ReadonlyArray<ModelMetricManifest>;
+    /** The workflows, resolved to their manifest form. */
+    readonly workflows?: ReadonlyArray<WorkflowManifest>;
+}): OntologyManifest;
+/** The keys of every connection the manifest's actions call, without duplicates. */
+export declare function actionConnectionKeys(manifest: Pick<OntologyManifest, "entities">): Array<string>;