fix

.cursor/Dockerfile

@@ -1,34 +0,0 @@
-FROM ubuntu:22.04
-
-ENV DEBIAN_FRONTEND=noninteractive
-
-RUN apt-get update && apt-get install -y \
-    curl \
-    git \
-    make \
-    build-essential \
-    postgresql-client \
-    docker.io \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install nvm (project recommends nvm + .nvmrc for consistent Node versions)
-ENV NVM_DIR=/usr/local/nvm
-RUN mkdir -p $NVM_DIR \
-    && curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/master/install.sh | bash
-
-SHELL ["/bin/bash", "-c"]
-
-# Copy .nvmrc so nvm install picks up the right version
-COPY .nvmrc /tmp/.nvmrc
-
-# Install Node.js from .nvmrc, enable Corepack, and symlink binaries
-# so they're available on PATH without hardcoding a version
-RUN . $NVM_DIR/nvm.sh \
-    && nvm install $(cat /tmp/.nvmrc) \
-    && nvm alias default $(cat /tmp/.nvmrc) \
-    && corepack enable \
-    && BIN_DIR=$(dirname $(nvm which default)) \
-    && ln -sf $BIN_DIR/node /usr/local/bin/node \
-    && ln -sf $BIN_DIR/npm /usr/local/bin/npm \
-    && ln -sf $BIN_DIR/npx /usr/local/bin/npx \
-    && ln -sf $BIN_DIR/corepack /usr/local/bin/corepack

.cursor/environment.docker-compose.json

@@ -0,0 +1,18 @@
+{
+  "install": "curl -fsSL https://deb.nodesource.com/setup_24.x | sudo -E bash - && sudo apt-get install -y nodejs && node --version && yarn install && echo 'Setting up Docker Compose environment...' && cd packages/twenty-docker && cp -n docker-compose.yml docker-compose.dev.yml || true && echo 'Dependencies installed and docker-compose prepared'",
+  "start": "sudo service docker start && echo 'Docker service started' && cd packages/twenty-docker && echo 'Installing yq for YAML processing...' && sudo apt-get update -qq && sudo apt-get install -y wget && wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 && sudo chmod +x /usr/local/bin/yq && echo 'Patching docker-compose for local development...' && yq eval 'del(.services.server.image)' -i docker-compose.dev.yml && yq eval '.services.server.build.context = \"../../\"' -i docker-compose.dev.yml && yq eval '.services.server.build.dockerfile = \"./packages/twenty-docker/twenty/Dockerfile\"' -i docker-compose.dev.yml && yq eval 'del(.services.worker.image)' -i docker-compose.dev.yml && yq eval '.services.worker.build.context = \"../../\"' -i docker-compose.dev.yml && yq eval '.services.worker.build.dockerfile = \"./packages/twenty-docker/twenty/Dockerfile\"' -i docker-compose.dev.yml && echo 'Setting up .env file with database configuration...' && echo 'SERVER_URL=http://localhost:3000' > .env && echo 'APP_SECRET='$(openssl rand -base64 32) >> .env && echo 'PG_DATABASE_PASSWORD='$(openssl rand -hex 16) >> .env && echo 'PG_DATABASE_URL=postgres://postgres:password@localhost:5432/postgres' >> .env && echo 'SIGN_IN_PREFILLED=true' >> .env && echo 'Building and starting services...' && docker-compose -f docker-compose.dev.yml up -d --build && echo 'Waiting for services to initialize...' && sleep 30 && echo 'Checking service health...' && docker-compose -f docker-compose.dev.yml ps && echo 'Environment setup complete!'",
+  "terminals": [
+    {
+      "name": "Database Setup & Seed",
+      "command": "sleep 40 && cd packages/twenty-docker && echo 'Waiting for PostgreSQL to be ready...' && until docker-compose -f docker-compose.dev.yml exec -T db pg_isready -U postgres; do echo 'Waiting for PostgreSQL...'; sleep 5; done && echo 'PostgreSQL is ready!' && echo 'Waiting for Twenty server to be healthy...' && until docker-compose -f docker-compose.dev.yml exec -T server curl --fail http://localhost:3000/healthz 2>/dev/null; do echo 'Waiting for server...'; sleep 5; done && echo 'Server is healthy!' && echo 'Running database setup and seeding...' && docker-compose -f docker-compose.dev.yml exec -T server npx nx database:reset twenty-server && echo 'Database seeded successfully!' && bash"
+    },
+    {
+      "name": "Application Logs",
+      "command": "sleep 35 && cd packages/twenty-docker && echo 'Following application logs...' && docker-compose -f docker-compose.dev.yml logs -f server worker"
+    },
+    {
+      "name": "Service Monitor",
+      "command": "sleep 15 && cd packages/twenty-docker && echo '=== Service Status Monitor ===' && while true; do clear; echo '=== Service Status at $(date) ===' && docker-compose -f docker-compose.dev.yml ps && echo '\\n=== Health Status ===' && (docker-compose -f docker-compose.dev.yml exec -T server curl -s http://localhost:3000/healthz 2>/dev/null && echo '✅ Twenty Server: Healthy') || echo '❌ Twenty Server: Not Ready' && (docker-compose -f docker-compose.dev.yml exec -T db pg_isready -U postgres 2>/dev/null && echo '✅ PostgreSQL: Ready') || echo '❌ PostgreSQL: Not Ready' && echo '\\n=== Database Connection Test ===' && docker-compose -f docker-compose.dev.yml exec -T server node -e \"const { Client } = require('pg'); const client = new Client({connectionString: process.env.PG_DATABASE_URL}); client.connect().then(() => {console.log('✅ Database Connection: OK'); client.end();}).catch(e => console.log('❌ Database Connection: Failed -', e.message));\" || echo 'Connection test failed' && sleep 45; done"
+    }
+  ]
+} 

.cursor/environment.json

@@ -1,10 +1,18 @@
 {
-  "install": "yarn install",
-  "start": "(sudo service docker start || service docker start || true) && bash packages/twenty-utils/setup-dev-env.sh && npx nx database:reset twenty-server",
+  "install": "curl -fsSL https://deb.nodesource.com/setup_24.x | sudo -E bash - && sudo apt-get install -y nodejs && node --version && yarn install && echo 'Installing dependencies complete'",
+  "start": "sudo service docker start && echo 'Docker service started' && sleep 3 && echo 'Starting PostgreSQL and Redis containers...' && make postgres-on-docker && make redis-on-docker && echo 'Waiting for containers to initialize...' && sleep 20 && echo 'Checking container status...' && docker ps --filter name=twenty_ && echo 'Waiting for PostgreSQL to be ready...' && until docker exec twenty_pg pg_isready -U postgres -h localhost; do echo 'PostgreSQL not ready yet, waiting...'; sleep 3; done && echo 'PostgreSQL is ready!' && echo 'Setting up database...' && cd packages/twenty-server && npx nx database:reset twenty-server || echo 'Database already initialized' && echo 'Environment setup complete!'",
   "terminals": [
     {
       "name": "Development Server",
-      "command": "yarn start"
+      "command": "echo 'Waiting for database to be fully ready...' && sleep 30 && until docker exec twenty_pg pg_isready -U postgres -h localhost; do echo 'Waiting for PostgreSQL...'; sleep 2; done && echo 'Starting Twenty development server...' && export SERVER_URL=http://localhost:3000 && export PG_DATABASE_URL=postgres://postgres:postgres@localhost:5432/postgres && yarn start"
+    },
+    {
+      "name": "Database Management",
+      "command": "sleep 25 && echo 'Database management terminal ready' && echo 'Waiting for PostgreSQL to be available...' && until docker exec twenty_pg pg_isready -U postgres -h localhost; do echo 'Waiting for PostgreSQL...'; sleep 2; done && echo 'PostgreSQL is ready for database operations!' && echo 'You can now run database commands like:' && echo '  npx nx database:reset twenty-server' && echo '  npx nx database:migrate twenty-server' && bash"
+    },
+    {
+      "name": "Container Logs & Status",
+      "command": "sleep 10 && echo '=== Container Status Monitor ===' && while true; do echo '\\n=== Container Status at $(date) ===' && docker ps --filter name=twenty_ --format 'table {{.Names}}\\t{{.Status}}\\t{{.Ports}}' && echo '\\n=== PostgreSQL Status ===' && (docker exec twenty_pg pg_isready -U postgres -h localhost && echo 'PostgreSQL: ✅ Ready') || echo 'PostgreSQL: ❌ Not Ready' && echo '\\n=== Redis Status ===' && (docker exec twenty_redis redis-cli ping && echo 'Redis: ✅ Ready') || echo 'Redis: ❌ Not Ready' && sleep 30; done"
     }
   ]
-}
+} 

.cursor/rules/README.mdc

@@ -12,7 +12,7 @@ This directory contains Twenty's development guidelines and best practices in th
 ### Core Guidelines
 - **architecture.mdc** - Project overview, technology stack, and infrastructure setup (Always Applied)
 - **nx-rules.mdc** - Nx workspace guidelines and best practices (Auto-attached to Nx files)
-- **server-migrations.mdc** - Upgrade command guidelines (instance commands and workspace commands) for `twenty-server` (Auto-attached to server entities and upgrade command files)
+- **server-migrations.mdc** - Backend migration and TypeORM guidelines for `twenty-server` (Auto-attached to server entities and migration files)
 - **creating-syncable-entity.mdc** - Comprehensive guide for creating new syncable entities (with universalIdentifier and applicationId) in the workspace migration system (Agent-requested for metadata-modules and workspace-migration files)
 
 ### Code Quality
@@ -22,7 +22,7 @@ This directory contains Twenty's development guidelines and best practices in th
 
 ### React Development
 - **react-general-guidelines.mdc** - Core React development principles (Auto-attached to React files)
-- **react-state-management.mdc** - State management approaches with Jotai (Auto-attached to state files)
+- **react-state-management.mdc** - State management approaches with Recoil (Auto-attached to state files)
 
 ### Testing & Quality
 - **testing-guidelines.mdc** - Testing strategies and best practices (Auto-attached to test files)
@@ -81,8 +81,11 @@ npx nx run twenty-server:typecheck         # Type checking
 npx nx run twenty-server:test              # Run unit tests
 npx nx run twenty-server:test:integration:with-db-reset # Run integration tests
 
-# Upgrade commands (instance + workspace)
-npx nx run twenty-server:database:migrate:generate --name <name> --type <fast|slow>
+# Migrations
+npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/[name] -d src/database/typeorm/core/core.datasource.ts
+
+# Workspace
+npx nx run twenty-server:command workspace:sync-metadata -f  # Sync metadata
 ```
 
 ## Usage Guidelines

.cursor/rules/architecture.mdc

@@ -7,7 +7,7 @@ alwaysApply: true
 # Twenty Architecture
 
 ## Tech Stack
-- **Frontend**: React 18, TypeScript, Jotai, Styled Components, Vite
+- **Frontend**: React 18, TypeScript, Recoil, Styled Components, Vite
 - **Backend**: NestJS, TypeORM, PostgreSQL, Redis, GraphQL
 - **Monorepo**: Nx workspace with yarn
 

.cursor/rules/changelog-process.mdc

@@ -55,8 +55,7 @@ If feature descriptions are not provided or need enhancement, research the codeb
 - Services: Look for `*.service.ts` files
 
 **For Database/ORM Changes:**
-- Instance commands (fast/slow): `packages/twenty-server/src/database/commands/upgrade-version-command/`
-- Legacy TypeORM migrations: `packages/twenty-server/src/database/typeorm/`
+- Migrations: `packages/twenty-server/src/database/typeorm/`
 - Entities: `packages/twenty-server/src/entities/`
 
 ### Research Commands
@@ -125,16 +124,15 @@ mkdir -p packages/twenty-website/public/images/releases/{MINOR_VERSION}
 
 **Destination:** `packages/twenty-website/public/images/releases/{MINOR_VERSION}/`
 
-**Naming Convention:** `{VERSION}-descriptive-name.webp`
+**Naming Convention:** `{VERSION}-descriptive-name.png`
 
 Examples:
-- `1.9.0-feature-name.webp`
-- `1.9.0-another-feature.webp`
+- `1.9.0-feature-name.png`
+- `1.9.0-another-feature.png`
 
 ```bash
-# Move and rename source files, then convert to webp if needed
+# Move and rename files
 cp ~/Downloads/🆕/source-file.png packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-name.png
-cd packages/twenty-website && node scripts/convert-png-to-webp.mjs
 ```
 
 ### 4. Research Features (if needed)
@@ -159,19 +157,19 @@ Date: {YYYY-MM-DD}
 
 Short description explaining what the feature does and why it's useful. Keep it user-focused and concise (1-2 sentences).
 
-![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.webp)
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.png)
 
 # Feature 2 Name
 
 Another short description of the second feature.
 
-![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.webp)
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.png)
 
 # Feature 3 Name
 
 Description of the third feature.
 
-![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-3.webp)
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-3.png)
 ```
 
 **Style Guidelines:**
@@ -222,8 +220,8 @@ I've created the changelog for version {VERSION}. Here's the content for your re
 [Show full MDX content]
 
 Images moved to:
-- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.webp
-- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.webp
+- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.png
+- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.png
 
 Please review the content. Once you approve, I'll commit the changes and create the pull request.
 ```
@@ -289,12 +287,12 @@ Or visit: `https://github.com/twentyhq/twenty/pull/new/{VERSION}`
 - **Location**: `packages/twenty-website/public/images/releases/`
 
 ### Image Files
-- **Format**: `{VERSION}-descriptive-name.webp`
+- **Format**: `{VERSION}-descriptive-name.png`
 - **Convention**: Kebab-case descriptive names
 - **Examples**: 
-  - `1.8.0-workflow-iterator.webp`
-  - `1.8.0-bulk-select.webp`
-  - `1.9.0-new-feature.webp`
+  - `1.8.0-workflow-iterator.png`
+  - `1.8.0-bulk-select.png`
+  - `1.9.0-new-feature.png`
 
 ## Quick Reference Template
 

.cursor/rules/code-style.mdc

@@ -8,7 +8,7 @@ alwaysApply: true
 ## Formatting Standards
 - **Prettier**: 2-space indentation, single quotes, trailing commas, semicolons
 - **Print width**: 80 characters
-- **Oxlint**: No unused imports, consistent import ordering, prefer const over let
+- **ESLint**: No unused imports, consistent import ordering, prefer const over let
 
 ## Naming Conventions
 ```typescript

.cursor/rules/github-actions-security.mdc

@@ -1,72 +0,0 @@
----
-description: GitHub Actions security guidelines for supply chain protection
-globs: **/.github/**/*.yml, **/.github/**/*.yaml
-alwaysApply: false
----
-
-# GitHub Actions Security
-
-## Pin Third-Party Actions to Commit SHAs
-
-Always reference external actions and reusable workflows by their full commit SHA, never by a mutable tag or branch. Tags can be force-pushed by a compromised maintainer account.
-
-```yaml
-# ❌ Mutable tag — vulnerable to supply chain attacks
-uses: actions/checkout@v4
-uses: actions/setup-node@v4
-
-# ✅ Pinned to commit SHA with tag comment for readability
-uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-```
-
-## Prefer `gh api` Over Third-Party Dispatch Actions
-
-For repository dispatch calls, use `gh api` directly instead of third-party actions like `peter-evans/repository-dispatch`. This eliminates a supply-chain dependency entirely.
-
-```yaml
-# ✅ Use env vars + bracket notation to prevent injection
-- name: Dispatch to target repo
-  env:
-    GH_TOKEN: ${{ secrets.DISPATCH_TOKEN }}
-    PR_NUMBER: ${{ github.event.pull_request.number }}
-    BRANCH: ${{ github.event.workflow_run.head_branch }}
-  run: |
-    gh api repos/org/repo/dispatches \
-      -f event_type=my-event \
-      -f "client_payload[pr_number]=$PR_NUMBER" \
-      -f "client_payload[branch]=$BRANCH"
-
-# ✅ Simple dispatch without payload
-- name: Trigger workflow
-  env:
-    GH_TOKEN: ${{ secrets.DISPATCH_TOKEN }}
-  run: |
-    gh api repos/org/repo/dispatches -f event_type=my-event
-
-# ❌ Third-party action dependency
-- uses: peter-evans/repository-dispatch@v2
-  with:
-    token: ${{ secrets.DISPATCH_TOKEN }}
-    repository: org/repo
-    event-type: my-event
-
-# ❌ Inline ${{ }} in shell — vulnerable to injection
-- run: |
-    gh api repos/org/repo/dispatches --input - <<EOF
-    {"event_type": "x", "client_payload": {"branch": "${{ github.head_ref }}"}}
-    EOF
-```
-
-## Minimal Permissions
-
-Always declare explicit `permissions` at the job level with the least privilege required. Never rely on the default `GITHUB_TOKEN` permissions.
-
-```yaml
-# ✅ Explicit minimal permissions
-permissions:
-  contents: read
-
-# ❌ Overly broad or implicit permissions
-permissions: write-all
-```

.cursor/rules/react-state-management.mdc

@@ -4,20 +4,16 @@ alwaysApply: false
 ---
 # React State Management
 
-## Jotai Patterns
+## Recoil Patterns
 ```typescript
-// ✅ Atoms for primitive state (use createAtomState for keyed state with optional persistence)
-import { createAtomState } from '@/ui/utilities/state/jotai/utils/createAtomState';
-
-export const currentUserState = createAtomState<User | null>({
+// ✅ Atoms for primitive state
+export const currentUserState = atom<User | null>({
   key: 'currentUserState',
-  defaultValue: null,
+  default: null,
 });
 
-// ✅ Derived atoms for computed state (use createAtomSelector)
-import { createAtomSelector } from '@/ui/utilities/state/jotai/utils/createAtomSelector';
-
-export const userDisplayNameSelector = createAtomSelector({
+// ✅ Selectors for derived state
+export const userDisplayNameSelector = selector({
   key: 'userDisplayNameSelector',
   get: ({ get }) => {
     const user = get(currentUserState);
@@ -25,30 +21,13 @@ export const userDisplayNameSelector = createAtomSelector({
   },
 });
 
-// ✅ Atom factory pattern for dynamic atoms (use createAtomFamilyState)
-import { createAtomFamilyState } from '@/ui/utilities/state/jotai/utils/createAtomFamilyState';
-
-export const userByIdState = createAtomFamilyState<User | null, string>({
+// ✅ Atom families for dynamic atoms
+export const userByIdState = atomFamily<User | null, string>({
   key: 'userByIdState',
-  defaultValue: null,
+  default: null,
 });
 ```
 
-## Jotai Hooks
-```typescript
-// useAtomState - read and write
-import { useAtomState } from '@/ui/utilities/state/jotai/hooks/useAtomState';
-
-// useAtomStateValue - read only
-import { useAtomStateValue } from '@/ui/utilities/state/jotai/hooks/useAtomStateValue';
-
-// useSetAtomState - write only
-import { useSetAtomState } from '@/ui/utilities/state/jotai/hooks/useSetAtomState';
-```
-
-## Provider
-Jotai works without a Provider by default. For scoped stores or testing, use `Provider` from `jotai`.
-
 ## Local State Guidelines
 ```typescript
 // ✅ Multiple useState for unrelated state
@@ -95,7 +74,7 @@ const increment = useCallback(() => {
 ```
 
 ## Performance Tips
-- Use atom factory pattern (createAtomFamilyState) for dynamic data collections
-- Derived atoms (createAtomSelector) are automatically memoized by Jotai
-- Avoid heavy computations in derived atoms
+- Use atom families for dynamic data collections
+- Implement proper selector caching
+- Avoid heavy computations in selectors
 - Batch state updates when possible

.cursor/rules/sdk-esm-dependencies.mdc

@@ -1,53 +0,0 @@
----
-description: ESM dependency guidelines for twenty-sdk and create-twenty-app packages
-globs: ["packages/twenty-sdk/**", "packages/create-twenty-app/**"]
-alwaysApply: false
----
-
-# ESM Dependency Guidelines
-
-## Context
-
-`twenty-sdk` and `create-twenty-app` are published as dual-format npm packages (ESM `.mjs` + CJS `.cjs`). Dependencies listed in `dependencies` are **externalized** by the Vite/Rollup build — they are not bundled, and consumers resolve them from `node_modules` at runtime.
-
-This means **CJS-only dependencies break the ESM output**. When Rollup emits `import { foo } from 'cjs-package'`, Node.js ESM cannot resolve named exports from CommonJS modules, causing `SyntaxError: Named export 'foo' not found`.
-
-## Rules
-
-### Only add ESM-compatible dependencies
-
-Before adding a new dependency to `package.json`, verify it supports ESM:
-- Check for `"type": "module"` in its `package.json`
-- Or check for an `"exports"` map with ESM entries
-- Or check for a `"module"` field pointing to an ESM build
-
-### Use native `node:fs/promises` for standard fs operations
-
-```typescript
-// ✅ Import native fs functions directly
-import { readFile, writeFile, mkdir, rm, cp } from 'node:fs/promises';
-import { createWriteStream, existsSync } from 'node:fs';
-
-// ✅ Import only custom helpers from fs-utils (no native re-exports)
-import { pathExists, ensureDir, emptyDir, copy, move, remove, readJson, writeJson, ensureFile } from '@/cli/utilities/file/fs-utils';
-
-// ❌ Don't use fs-extra (CJS-only, breaks ESM bundle)
-import * as fs from 'fs-extra';
-
-// ❌ Don't use import * as fs from fs-utils (it doesn't re-export native fs)
-import * as fs from '@/cli/utilities/file/fs-utils';
-```
-
-### Use `@/cli/utilities/string/kebab-case` instead of lodash
-
-```typescript
-// ✅ Use internal utility
-import { kebabCase } from '@/cli/utilities/string/kebab-case';
-
-// ❌ Don't use lodash single-function packages (CJS-only, unmaintained)
-import kebabCase from 'lodash.kebabcase';
-```
-
-### When no ESM alternative exists
-
-If a CJS-only package has no ESM replacement (e.g. `archiver`), add it to the `cjsOnlyPackages` list in `vite.config.node.ts` so it gets inlined into the bundle instead of externalized.

.cursor/rules/server-migrations.mdc

@@ -1,46 +1,29 @@
 ---
-description: Guidelines for generating and managing upgrade commands (instance commands and workspace commands) in twenty-server
+description: Guidelines for generating and managing TypeORM migrations in twenty-server
 globs: [
   "packages/twenty-server/src/**/*.entity.ts",
-  "packages/twenty-server/src/database/commands/upgrade-version-command/**/*.ts"
+  "packages/twenty-server/src/database/typeorm/**/*.ts"
 ]
 alwaysApply: false
 ---
 
-## Upgrade Commands (twenty-server)
+## Server Migrations (twenty-server)
 
-The upgrade system uses two types of commands instead of raw TypeORM migrations:
-- **Instance commands** — schema and data migrations that run once at the instance level.
-- **Workspace commands** — commands that iterate over all active/suspended workspaces.
-
-See `packages/twenty-server/docs/UPGRADE_COMMANDS.md` for full documentation.
-
-### Instance Commands
-
-- **When changing a `*.entity.ts` file**, generate an instance command:
+- **When changing an entity, always generate a migration**
+  - If you modify a `*.entity.ts` file in `packages/twenty-server/src`, you **must** generate a corresponding TypeORM migration instead of manually editing the database schema.
+  - Use the Nx + TypeORM command from the project root:
 
     ```bash
-    npx nx run twenty-server:database:migrate:generate --name <name> --type <fast|slow>
+    npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/common/[name] -d src/database/typeorm/core/core.datasource.ts
     ```
 
-- **Fast commands** (`--type fast`, default) are for schema-only changes that must run immediately. They implement `FastInstanceCommand` with `up`/`down` methods and use the `@RegisteredInstanceCommand` decorator.
+  - Replace `[name]` with a descriptive, kebab-case migration name that reflects the change (for example, `add-agent-turn-evaluation`).
 
-- **Slow commands** (`--type slow`) add a `runDataMigration` method for potentially long-running data backfills that execute before `up`. They only run when `--include-slow` is passed. Use the decorator with `{ type: 'slow' }`.
+- **Prefer generated migrations over manual edits**
+  - Let TypeORM infer schema changes from the updated entities; only adjust the generated migration file manually if absolutely necessary (for example, for data backfills or complex constraints).
+  - Keep schema changes (DDL) in these generated migrations and avoid mixing in heavy data migrations unless there is a strong reason and clear comments.
 
-- The generator auto-registers the command in `instance-commands.constant.ts` — do not edit that file manually.
-
-- **Keep commands consistent and reversible**: include both `up` and `down` logic. Do not delete or rewrite existing, committed commands unless on a pre-release branch.
-
-### Workspace Commands
-
-- Use the `@RegisteredWorkspaceCommand` decorator alongside nest-commander's `@Command` decorator.
-- Extend `ActiveOrSuspendedWorkspaceCommandRunner` and implement `runOnWorkspace`.
-- The base class provides `--dry-run`, `--verbose`, and workspace filter options automatically.
-
-### Execution Order
-
-Within a given version, commands run in this order (timestamp-sorted within each group):
-1. Instance fast commands
-2. Instance slow commands (only with `--include-slow`)
-3. Workspace commands
+- **Keep migrations consistent and reversible**
+  - Ensure the generated migration includes both `up` and `down` logic that correctly applies and reverts the entity change when possible.
+  - Do not delete or rewrite existing, committed migrations unless you are explicitly working on a pre-release branch where history rewrites are allowed by team conventions.
 

.cursor/skills/syncable-entity-builder-and-validation/SKILL.md

@@ -1,393 +0,0 @@
----
-name: syncable-entity-builder-and-validation
-description: Create validation logic and migration action builders for syncable entities in Twenty. Use when implementing business rule validation, uniqueness checks, foreign key validation, or building workspace migration actions for syncable entities. Validators never throw and never mutate.
----
-
-# Syncable Entity: Builder & Validation (Step 3/6)
-
-**Purpose**: Implement business rule validation and create migration action builders.
-
-**When to use**: After completing Steps 1-2 (Types, Cache, Transform). Required before implementing action handlers.
-
----
-
-## Quick Start
-
-This step creates:
-1. Validator service (business logic validation)
-2. Builder service (action creation)
-3. Orchestrator wiring (**CRITICAL** - often forgotten!)
-
-**Key principles**:
-- Validators **never throw** - return error arrays
-- Validators **never mutate** - pass optimistic entity maps
-- Use indexed lookups (O(1)) not `Object.values().find()` (O(n))
-
----
-
-## Step 1: Create Validator Service
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { t, msg } from '@lingui/macro';
-import { isDefined } from 'twenty-shared/utils';
-
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-import { type FlatMyEntityMaps } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity-maps.type';
-import { WorkspaceMigrationValidationError } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/types/workspace-migration-validation-error.type';
-import { MyEntityExceptionCode } from 'src/engine/metadata-modules/my-entity/exceptions/my-entity-exception-code.enum';
-
-@Injectable()
-export class FlatMyEntityValidatorService {
-  validateMyEntityForCreate(
-    flatMyEntity: FlatMyEntity,
-    optimisticFlatMyEntityMaps: FlatMyEntityMaps,
-  ): WorkspaceMigrationValidationError[] {
-    const errors: WorkspaceMigrationValidationError[] = [];
-
-    // Pattern 1: Required field validation
-    if (!isDefined(flatMyEntity.name) || flatMyEntity.name.trim() === '') {
-      errors.push({
-        code: MyEntityExceptionCode.NAME_REQUIRED,
-        message: t`Name is required`,
-        userFriendlyMessage: msg`Please provide a name for this entity`,
-      });
-    }
-
-    // Pattern 2: Uniqueness check - use indexed map (O(1))
-    const existingEntityWithName = optimisticFlatMyEntityMaps.byName[flatMyEntity.name];
-
-    if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
-      errors.push({
-        code: MyEntityExceptionCode.MY_ENTITY_ALREADY_EXISTS,
-        message: t`Entity with name ${flatMyEntity.name} already exists`,
-        userFriendlyMessage: msg`An entity with this name already exists`,
-      });
-    }
-
-    // Pattern 3: Foreign key validation
-    if (isDefined(flatMyEntity.parentEntityId)) {
-      const parentEntity = optimisticFlatParentEntityMaps.byId[flatMyEntity.parentEntityId];
-
-      if (!isDefined(parentEntity)) {
-        errors.push({
-          code: MyEntityExceptionCode.PARENT_ENTITY_NOT_FOUND,
-          message: t`Parent entity with ID ${flatMyEntity.parentEntityId} not found`,
-          userFriendlyMessage: msg`The specified parent entity does not exist`,
-        });
-      } else if (isDefined(parentEntity.deletedAt)) {
-        errors.push({
-          code: MyEntityExceptionCode.PARENT_ENTITY_DELETED,
-          message: t`Parent entity is deleted`,
-          userFriendlyMessage: msg`Cannot reference a deleted parent entity`,
-        });
-      }
-    }
-
-    // Pattern 4: Standard entity protection
-    if (flatMyEntity.isCustom === false) {
-      errors.push({
-        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_CREATED,
-        message: t`Cannot create standard entity`,
-        userFriendlyMessage: msg`Standard entities can only be created by the system`,
-      });
-    }
-
-    return errors;
-  }
-
-  validateMyEntityForUpdate(
-    flatMyEntity: FlatMyEntity,
-    updates: Partial<FlatMyEntity>,
-    optimisticFlatMyEntityMaps: FlatMyEntityMaps,
-  ): WorkspaceMigrationValidationError[] {
-    const errors: WorkspaceMigrationValidationError[] = [];
-
-    // Standard entity protection
-    if (flatMyEntity.isCustom === false) {
-      errors.push({
-        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_UPDATED,
-        message: t`Cannot update standard entity`,
-        userFriendlyMessage: msg`Standard entities cannot be modified`,
-      });
-      return errors; // Early return if standard
-    }
-
-    // Uniqueness check for name changes
-    if (isDefined(updates.name) && updates.name !== flatMyEntity.name) {
-      const existingEntityWithName = optimisticFlatMyEntityMaps.byName[updates.name];
-
-      if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
-        errors.push({
-          code: MyEntityExceptionCode.MY_ENTITY_ALREADY_EXISTS,
-          message: t`Entity with name ${updates.name} already exists`,
-          userFriendlyMessage: msg`An entity with this name already exists`,
-        });
-      }
-    }
-
-    return errors;
-  }
-
-  validateMyEntityForDelete(
-    flatMyEntity: FlatMyEntity,
-  ): WorkspaceMigrationValidationError[] {
-    const errors: WorkspaceMigrationValidationError[] = [];
-
-    // Standard entity protection
-    if (flatMyEntity.isCustom === false) {
-      errors.push({
-        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_DELETED,
-        message: t`Cannot delete standard entity`,
-        userFriendlyMessage: msg`Standard entities cannot be deleted`,
-      });
-    }
-
-    return errors;
-  }
-}
-```
-
-**Performance warning**: Avoid `Object.values().find()` - use indexed maps instead!
-
-```typescript
-// ❌ BAD: O(n) - slow for large datasets
-const duplicate = Object.values(optimisticFlatMyEntityMaps.byId).find(
-  (entity) => entity.name === flatMyEntity.name && entity.id !== flatMyEntity.id
-);
-
-// ✅ GOOD: O(1) - use indexed map
-const existingEntityWithName = optimisticFlatMyEntityMaps.byName[flatMyEntity.name];
-if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
-  // Handle duplicate
-}
-```
-
----
-
-## Step 2: Create Builder Service
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/workspace-migration-my-entity-actions-builder.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-
-import { WorkspaceEntityMigrationBuilderService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-entity-migration-builder.service';
-import { FlatMyEntityValidatorService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service';
-import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
-import {
-  type UniversalCreateMyEntityAction,
-  type UniversalUpdateMyEntityAction,
-  type UniversalDeleteMyEntityAction,
-} from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type';
-
-@Injectable()
-export class WorkspaceMigrationMyEntityActionsBuilderService extends WorkspaceEntityMigrationBuilderService<
-  'myEntity',
-  UniversalFlatMyEntity,
-  UniversalCreateMyEntityAction,
-  UniversalUpdateMyEntityAction,
-  UniversalDeleteMyEntityAction
-> {
-  constructor(
-    private readonly flatMyEntityValidatorService: FlatMyEntityValidatorService,
-  ) {
-    super();
-  }
-
-  protected buildCreateAction(
-    universalFlatMyEntity: UniversalFlatMyEntity,
-    flatEntityMaps: AllFlatEntityMapsByMetadataName,
-  ): BuildWorkspaceMigrationActionReturnType<UniversalCreateMyEntityAction> {
-    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForCreate(
-      universalFlatMyEntity,
-      flatEntityMaps.flatMyEntityMaps,
-    );
-
-    if (validationResult.length > 0) {
-      return {
-        status: 'failed',
-        errors: validationResult,
-      };
-    }
-
-    return {
-      status: 'success',
-      action: {
-        type: 'create',
-        metadataName: 'myEntity',
-        universalFlatEntity: universalFlatMyEntity,
-      },
-    };
-  }
-
-  protected buildUpdateAction(
-    universalFlatMyEntity: UniversalFlatMyEntity,
-    universalUpdates: Partial<UniversalFlatMyEntity>,
-    flatEntityMaps: AllFlatEntityMapsByMetadataName,
-  ): BuildWorkspaceMigrationActionReturnType<UniversalUpdateMyEntityAction> {
-    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForUpdate(
-      universalFlatMyEntity,
-      universalUpdates,
-      flatEntityMaps.flatMyEntityMaps,
-    );
-
-    if (validationResult.length > 0) {
-      return {
-        status: 'failed',
-        errors: validationResult,
-      };
-    }
-
-    return {
-      status: 'success',
-      action: {
-        type: 'update',
-        metadataName: 'myEntity',
-        universalFlatEntity: universalFlatMyEntity,
-        universalUpdates,
-      },
-    };
-  }
-
-  protected buildDeleteAction(
-    universalFlatMyEntity: UniversalFlatMyEntity,
-  ): BuildWorkspaceMigrationActionReturnType<UniversalDeleteMyEntityAction> {
-    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForDelete(
-      universalFlatMyEntity,
-    );
-
-    if (validationResult.length > 0) {
-      return {
-        status: 'failed',
-        errors: validationResult,
-      };
-    }
-
-    return {
-      status: 'success',
-      action: {
-        type: 'delete',
-        metadataName: 'myEntity',
-        universalFlatEntity: universalFlatMyEntity,
-      },
-    };
-  }
-}
-```
-
----
-
-## Step 3: Wire into Orchestrator (**CRITICAL**)
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-migration-build-orchestrator.service.ts`
-
-```typescript
-@Injectable()
-export class WorkspaceMigrationBuildOrchestratorService {
-  constructor(
-    // ... existing builders
-    private readonly workspaceMigrationMyEntityActionsBuilderService: WorkspaceMigrationMyEntityActionsBuilderService,
-  ) {}
-
-  async buildWorkspaceMigration({
-    allFlatEntityOperationByMetadataName,
-    flatEntityMaps,
-    isSystemBuild,
-  }: BuildWorkspaceMigrationInput): Promise<BuildWorkspaceMigrationOutput> {
-    // ... existing code
-
-    // Add your entity builder
-    const myEntityResult = await this.workspaceMigrationMyEntityActionsBuilderService.build({
-      flatEntitiesToCreate: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToCreate ?? [],
-      flatEntitiesToUpdate: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToUpdate ?? [],
-      flatEntitiesToDelete: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToDelete ?? [],
-      flatEntityMaps,
-      isSystemBuild,
-    });
-
-    // ... aggregate errors
-
-    return {
-      status: aggregatedErrors.length > 0 ? 'failed' : 'success',
-      errors: aggregatedErrors,
-      actions: [
-        ...existingActions,
-        ...myEntityResult.actions,
-      ],
-    };
-  }
-}
-```
-
-**⚠️ This step is the most commonly forgotten!** Your entity won't sync without orchestrator wiring.
-
----
-
-## Validation Patterns
-
-### Pattern 1: Required Field
-```typescript
-if (!isDefined(field) || field.trim() === '') {
-  errors.push({ code: ..., message: ..., userFriendlyMessage: ... });
-}
-```
-
-### Pattern 2: Uniqueness (O(1) lookup)
-```typescript
-const existing = optimisticMaps.byName[entity.name];
-if (isDefined(existing) && existing.id !== entity.id) {
-  errors.push({ ... });
-}
-```
-
-### Pattern 3: Foreign Key Validation
-```typescript
-if (isDefined(entity.parentId)) {
-  const parent = parentMaps.byId[entity.parentId];
-  if (!isDefined(parent)) {
-    errors.push({ code: NOT_FOUND, ... });
-  } else if (isDefined(parent.deletedAt)) {
-    errors.push({ code: DELETED, ... });
-  }
-}
-```
-
-### Pattern 4: Standard Entity Protection
-```typescript
-if (entity.isCustom === false) {
-  errors.push({ code: STANDARD_ENTITY_PROTECTED, ... });
-  return errors; // Early return
-}
-```
-
----
-
-## Checklist
-
-Before moving to Step 4:
-
-- [ ] Validator service created
-- [ ] Validator **never throws** (returns error arrays)
-- [ ] Validator **never mutates** (uses optimistic maps)
-- [ ] All uniqueness checks use indexed maps (O(1))
-- [ ] Required field validation implemented
-- [ ] Foreign key validation implemented
-- [ ] Standard entity protection implemented
-- [ ] Builder service extends `WorkspaceEntityMigrationBuilderService`
-- [ ] Builder creates actions with universal entities
-- [ ] **Builder wired into orchestrator** (**CRITICAL**)
-- [ ] **Builder injected in orchestrator constructor**
-- [ ] **Builder called in `buildWorkspaceMigration`**
-- [ ] **Actions added to orchestrator return statement**
-
----
-
-## Next Step
-
-Once builder and validation are complete, proceed to:
-**[Syncable Entity: Runner & Actions (Step 4/6)](../syncable-entity-runner-and-actions/SKILL.md)**
-
-For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-cache-and-transform/SKILL.md

@@ -1,303 +0,0 @@
----
-name: syncable-entity-cache-and-transform
-description: Create cache services and transformation utilities for syncable entities in Twenty. Use when implementing entity-to-flat conversions, input DTO transpilation to universal flat entities, or cache recomputation for syncable entities.
----
-
-# Syncable Entity: Cache & Transform (Step 2/6)
-
-**Purpose**: Create cache layer and transformation utilities to convert between different entity representations.
-
-**When to use**: After completing Step 1 (Types & Constants). Required before building validators and action handlers.
-
----
-
-## Quick Start
-
-This step creates:
-1. Cache service for flat entity maps
-2. Entity-to-flat conversion utility
-3. Input transform utils (DTO → Universal Flat Entity)
-
-**Key principle**: Input transform utils must output **universal flat entities** (with `universalIdentifier` and foreign keys mapped to universal identifiers).
-
----
-
-## Step 1: Create Cache Service
-
-**File**: `src/engine/metadata-modules/flat-my-entity/services/flat-my-entity-cache.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { InjectRepository } from '@nestjs/typeorm';
-import { Repository } from 'typeorm';
-import { v4 } from 'uuid';
-
-import { WorkspaceCache } from 'src/engine/twenty-orm/decorators/workspace-cache.decorator';
-import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { type FlatMyEntityMaps } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity-maps.type';
-import { fromMyEntityEntityToFlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/utils/from-my-entity-entity-to-flat-my-entity.util';
-
-@Injectable()
-export class FlatMyEntityCacheService {
-  constructor(
-    @InjectRepository(MyEntityEntity, 'metadata')
-    private readonly myEntityRepository: Repository<MyEntityEntity>,
-  ) {}
-
-  @WorkspaceCache({ flatMapsKey: 'flatMyEntityMaps' })
-  async getFlatMyEntityMaps(): Promise<FlatMyEntityMaps> {
-    const myEntities = await this.myEntityRepository.find({
-      withDeleted: true, // CRITICAL: Include soft-deleted entities
-    });
-
-    const flatMyEntities = myEntities.map((entity) =>
-      fromMyEntityEntityToFlatMyEntity(entity),
-    );
-
-    return {
-      byId: Object.fromEntries(flatMyEntities.map((e) => [e.id, e])),
-      byName: Object.fromEntries(flatMyEntities.map((e) => [e.name, e])),
-    };
-  }
-}
-```
-
-**Critical rules**:
-- Use `@WorkspaceCache` decorator with unique `flatMapsKey`
-- **Always** use `withDeleted: true` to include soft-deleted entities
-- Cache key pattern: `flat{EntityName}Maps` (camelCase)
-
----
-
-## Step 2: Entity-to-Flat Conversion
-
-**File**: `src/engine/metadata-modules/flat-my-entity/utils/from-my-entity-entity-to-flat-my-entity.util.ts`
-
-```typescript
-import { v4 } from 'uuid';
-import { type MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-
-export const fromMyEntityEntityToFlatMyEntity = (
-  entity: MyEntityEntity,
-): FlatMyEntity => {
-  return {
-    id: entity.id,
-    // Critical: generate a new UUID for universalIdentifier
-    universalIdentifier: v4(),
-    workspaceId: entity.workspaceId,
-    applicationId: entity.applicationId,
-    name: entity.name,
-    label: entity.label,
-    description: entity.description,
-    isCustom: entity.isCustom,
-    parentEntityId: entity.parentEntityId,
-    settings: entity.settings,
-    createdAt: entity.createdAt.toISOString(),
-    updatedAt: entity.updatedAt.toISOString(),
-    deletedAt: entity.deletedAt?.toISOString() ?? null,
-  };
-};
-```
-
-**Critical**: `universalIdentifier` must be a new UUID generated with `v4()` (not `entity.id`)
-
----
-
-## Step 3: Input Transform Utils (DTO → Universal Flat Entity)
-
-**File**: `src/engine/metadata-modules/flat-my-entity/utils/from-create-my-entity-input-to-universal-flat-my-entity.util.ts`
-
-```typescript
-import { v4 } from 'uuid';
-import { sanitizeString } from 'twenty-shared/string';
-import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
-import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
-import { resolveEntityRelationUniversalIdentifiers } from 'src/engine/metadata-modules/flat-entity/utils/resolve-entity-relation-universal-identifiers.util';
-import { type AllFlatEntityMapsByMetadataName } from 'src/engine/metadata-modules/flat-entity/types/all-flat-entity-maps-by-metadata-name.type';
-
-export const fromCreateMyEntityInputToUniversalFlatMyEntity = ({
-  input,
-  workspaceId,
-  flatEntityMaps,
-}: {
-  input: CreateMyEntityInput;
-  workspaceId: string;
-  flatEntityMaps?: AllFlatEntityMapsByMetadataName;
-}): UniversalFlatMyEntity => {
-  const id = v4();
-  const universalIdentifier = v4();
-
-  // 1. Extract foreign key IDs BEFORE sanitization
-  const parentEntityId = input.parentEntityId ?? null;
-
-  // 2. Sanitize string properties
-  const name = sanitizeString(input.name);
-  const label = sanitizeString(input.label);
-  const description = input.description ? sanitizeString(input.description) : null;
-
-  // 3. Build base flat entity
-  const baseFlatEntity = {
-    id,
-    universalIdentifier,
-    workspaceId,
-    applicationId: null,
-    name,
-    label,
-    description,
-    isCustom: true,
-    parentEntityId,
-    settings: input.settings ?? null,
-    createdAt: new Date().toISOString(),
-    updatedAt: new Date().toISOString(),
-    deletedAt: null,
-  };
-
-  // 4. Resolve foreign keys to universal identifiers (if flatEntityMaps provided)
-  if (flatEntityMaps) {
-    return resolveEntityRelationUniversalIdentifiers({
-      metadataName: 'myEntity',
-      flatEntity: baseFlatEntity,
-      flatEntityMaps,
-    });
-  }
-
-  // 5. Return with null universal foreign keys if no maps
-  return {
-    ...baseFlatEntity,
-    parentEntityUniversalIdentifier: null,
-  };
-};
-```
-
-**Key steps**:
-1. Generate IDs (`id` and `universalIdentifier` with `v4()`)
-2. Extract foreign keys **before** sanitization
-3. Sanitize all string properties
-4. Build base flat entity
-5. Resolve foreign keys → universal identifiers
-
----
-
-## Step 4: Create Flat Entity Module
-
-**File**: `src/engine/metadata-modules/flat-my-entity/flat-my-entity.module.ts`
-
-```typescript
-import { Module } from '@nestjs/common';
-import { TypeOrmModule } from '@nestjs/typeorm';
-
-import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { FlatMyEntityCacheService } from 'src/engine/metadata-modules/flat-my-entity/services/flat-my-entity-cache.service';
-
-@Module({
-  imports: [TypeOrmModule.forFeature([MyEntityEntity], 'metadata')],
-  providers: [FlatMyEntityCacheService],
-  exports: [FlatMyEntityCacheService],
-})
-export class FlatMyEntityModule {}
-```
-
-**Rules**:
-- Import entity with `'metadata'` datasource
-- Export cache service for use in other modules
-
----
-
-## Common Patterns
-
-### Pattern: Foreign Key Resolution
-
-```typescript
-// Extract foreign keys BEFORE sanitization
-const parentEntityId = input.parentEntityId ?? null;
-
-// After building base entity, resolve to universal identifiers
-const universalFlatEntity = resolveEntityRelationUniversalIdentifiers({
-  metadataName: 'myEntity',
-  flatEntity: baseFlatEntity,
-  flatEntityMaps,
-});
-```
-
-### Pattern: JSONB with SerializedRelation
-
-```typescript
-// For JSONB properties containing foreign keys
-const settings = input.settings
-  ? {
-      ...input.settings,
-      fieldMetadataId: input.settings.fieldMetadataId,
-    }
-  : null;
-
-// After resolution, JSONB foreign keys become universal identifiers
-return resolveEntityRelationUniversalIdentifiers({
-  metadataName: 'myEntity',
-  flatEntity: { ...baseFlatEntity, settings },
-  flatEntityMaps,
-});
-```
-
-### Pattern: Update Transform
-
-```typescript
-// from-update-my-entity-input-to-universal-flat-my-entity-updates.util.ts
-export const fromUpdateMyEntityInputToUniversalFlatMyEntityUpdates = ({
-  input,
-  flatEntityMaps,
-}: {
-  input: UpdateMyEntityInput;
-  flatEntityMaps?: AllFlatEntityMapsByMetadataName;
-}): Partial<UniversalFlatMyEntity> => {
-  const updates: Partial<UniversalFlatMyEntity> = {};
-
-  if (input.name !== undefined) {
-    updates.name = sanitizeString(input.name);
-  }
-
-  if (input.parentEntityId !== undefined) {
-    updates.parentEntityId = input.parentEntityId;
-  }
-
-  updates.updatedAt = new Date().toISOString();
-
-  // Resolve foreign keys if maps provided
-  if (flatEntityMaps) {
-    return resolveEntityRelationUniversalIdentifiers({
-      metadataName: 'myEntity',
-      flatEntity: updates as any,
-      flatEntityMaps,
-    });
-  }
-
-  return updates;
-};
-```
-
----
-
-## Checklist
-
-Before moving to Step 3:
-
-- [ ] Cache service created with `@WorkspaceCache` decorator
-- [ ] Cache uses `withDeleted: true`
-- [ ] Cache key follows `flat{EntityName}Maps` pattern
-- [ ] Entity-to-flat conversion implemented
-- [ ] `universalIdentifier` set correctly (generated with `v4()`)
-- [ ] Create input transform implemented
-- [ ] Update input transform implemented (if needed)
-- [ ] Foreign keys extracted before sanitization
-- [ ] String properties sanitized
-- [ ] Foreign keys resolved to universal identifiers
-- [ ] Flat entity module created and exports cache service
-
----
-
-## Next Step
-
-Once cache and transform utilities are complete, proceed to:
-**[Syncable Entity: Builder & Validation (Step 3/6)](../syncable-entity-builder-and-validation/SKILL.md)**
-
-For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-integration/SKILL.md

@@ -1,326 +0,0 @@
----
-name: syncable-entity-integration
-description: Wire syncable entity services into NestJS modules, create service layer and resolvers for Twenty entities. Use when registering builders, validators, and action handlers in modules, creating business services, or exposing entities via GraphQL API with proper exception handling.
----
-
-# Syncable Entity: Integration (Step 5/6)
-
-**Purpose**: Wire everything together, register in modules, create services and resolvers.
-
-**When to use**: After completing Steps 1-4 (all previous steps). Required before testing.
-
----
-
-## Quick Start
-
-This step:
-1. Registers services in 3 NestJS modules
-2. Creates service layer (returns flat entities)
-3. Creates resolver layer (converts flat → DTO)
-4. Uses exception interceptor for GraphQL
-
-**Key principle**: Services return flat entities, resolvers transpile flat → DTO.
-
----
-
-## Step 1: Register in Builder Module
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-migration-builder.module.ts`
-
-```typescript
-import { WorkspaceMigrationMyEntityActionsBuilderService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/workspace-migration-my-entity-actions-builder.service';
-
-@Module({
-  imports: [
-    // ... existing imports
-  ],
-  providers: [
-    // ... existing providers
-    WorkspaceMigrationMyEntityActionsBuilderService,
-  ],
-  exports: [
-    // ... existing exports
-    WorkspaceMigrationMyEntityActionsBuilderService,
-  ],
-})
-export class WorkspaceMigrationBuilderModule {}
-```
-
-**Important**: Add to both `providers` AND `exports` (builder needs to be exported for orchestrator).
-
----
-
-## Step 2: Register in Validators Module
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/workspace-migration-builder-validators.module.ts`
-
-```typescript
-import { FlatMyEntityValidatorService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service';
-
-@Module({
-  imports: [
-    // ... existing imports
-  ],
-  providers: [
-    // ... existing providers
-    FlatMyEntityValidatorService,
-  ],
-  exports: [
-    // ... existing exports
-    FlatMyEntityValidatorService,
-  ],
-})
-export class WorkspaceMigrationBuilderValidatorsModule {}
-```
-
----
-
-## Step 3: Register Action Handlers
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-schema-migration-runner-action-handlers.module.ts`
-
-```typescript
-import { CreateMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/create-my-entity-action-handler.service';
-import { UpdateMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/update-my-entity-action-handler.service';
-import { DeleteMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/delete-my-entity-action-handler.service';
-
-@Module({
-  imports: [
-    // ... existing imports
-  ],
-  providers: [
-    // ... existing providers
-    CreateMyEntityActionHandlerService,
-    UpdateMyEntityActionHandlerService,
-    DeleteMyEntityActionHandlerService,
-  ],
-  exports: [
-    // ... existing exports (action handlers typically not exported)
-  ],
-})
-export class WorkspaceSchemaMigrationRunnerActionHandlersModule {}
-```
-
-**Note**: Action handlers are typically only in `providers`, not `exports`.
-
----
-
-## Step 4: Create Service Layer
-
-**File**: `src/engine/metadata-modules/my-entity/my-entity.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { isDefined } from 'twenty-shared/utils';
-
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-import { WorkspaceManyOrAllFlatEntityMapsCacheService } from 'src/engine/metadata-modules/flat-entity/services/workspace-many-or-all-flat-entity-maps-cache.service';
-import { findFlatEntityByIdInFlatEntityMapsOrThrow } from 'src/engine/metadata-modules/flat-entity/utils/find-flat-entity-by-id-in-flat-entity-maps-or-throw.util';
-import { fromCreateMyEntityInputToUniversalFlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/utils/from-create-my-entity-input-to-universal-flat-my-entity.util';
-import { WorkspaceMigrationBuilderException } from 'src/engine/workspace-manager/workspace-migration/exceptions/workspace-migration-builder-exception';
-import { WorkspaceMigrationValidateBuildAndRunService } from 'src/engine/workspace-manager/workspace-migration/services/workspace-migration-validate-build-and-run-service';
-
-@Injectable()
-export class MyEntityService {
-  constructor(
-    private readonly workspaceMigrationValidateBuildAndRunService: WorkspaceMigrationValidateBuildAndRunService,
-    private readonly workspaceManyOrAllFlatEntityMapsCacheService: WorkspaceManyOrAllFlatEntityMapsCacheService,
-  ) {}
-
-  async create(input: CreateMyEntityInput, workspaceId: string): Promise<FlatMyEntity> {
-    // 1. Transform input to universal flat entity
-    const universalFlatMyEntityToCreate = fromCreateMyEntityInputToUniversalFlatMyEntity({
-      input,
-      workspaceId,
-    });
-
-    // 2. Validate, build, and run
-    const result =
-      await this.workspaceMigrationValidateBuildAndRunService.validateBuildAndRunWorkspaceMigration(
-        {
-          allFlatEntityOperationByMetadataName: {
-            myEntity: {
-              flatEntityToCreate: [universalFlatMyEntityToCreate],
-              flatEntityToDelete: [],
-              flatEntityToUpdate: [],
-            },
-          },
-          workspaceId,
-          isSystemBuild: false,
-        },
-      );
-
-    // 3. Throw if validation failed
-    if (isDefined(result)) {
-      throw new WorkspaceMigrationBuilderException(
-        result,
-        'Validation errors occurred while creating entity',
-      );
-    }
-
-    // 4. Return freshly cached flat entity
-    const { flatMyEntityMaps } =
-      await this.workspaceManyOrAllFlatEntityMapsCacheService.getOrRecomputeManyOrAllFlatEntityMaps(
-        {
-          workspaceId,
-          flatMapsKeys: ['flatMyEntityMaps'],
-        },
-      );
-
-    return findFlatEntityByIdInFlatEntityMapsOrThrow({
-      flatEntityId: universalFlatMyEntityToCreate.id,
-      flatEntityMaps: flatMyEntityMaps,
-    });
-  }
-}
-```
-
-**Service pattern**:
-1. Transform input → universal flat entity
-2. Call `validateBuildAndRunWorkspaceMigration`
-3. Throw if validation errors
-4. **Return flat entity** (not DTO)
-
----
-
-## Step 5: Create Resolver Layer
-
-**File**: `src/engine/metadata-modules/my-entity/my-entity.resolver.ts`
-
-```typescript
-import { UseInterceptors } from '@nestjs/common';
-import { Args, Mutation, Resolver } from '@nestjs/graphql';
-
-import { WorkspaceMigrationGraphqlApiExceptionInterceptor } from 'src/engine/workspace-manager/workspace-migration/interceptors/workspace-migration-graphql-api-exception.interceptor';
-import { MyEntityService } from 'src/engine/metadata-modules/my-entity/my-entity.service';
-import { fromFlatMyEntityToMyEntityDto } from 'src/engine/metadata-modules/my-entity/utils/from-flat-my-entity-to-my-entity-dto.util';
-
-@Resolver(() => MyEntityDto)
-@UseInterceptors(WorkspaceMigrationGraphqlApiExceptionInterceptor)
-export class MyEntityResolver {
-  constructor(private readonly myEntityService: MyEntityService) {}
-
-  @Mutation(() => MyEntityDto)
-  async createMyEntity(
-    @Args('input') input: CreateMyEntityInput,
-    @Workspace() { id: workspaceId }: Workspace,
-  ): Promise<MyEntityDto> {
-    // Service returns flat entity
-    const flatMyEntity = await this.myEntityService.create(input, workspaceId);
-    
-    // Resolver converts flat entity to DTO
-    return fromFlatMyEntityToMyEntityDto(flatMyEntity);
-  }
-
-  @Mutation(() => MyEntityDto)
-  async updateMyEntity(
-    @Args('id') id: string,
-    @Args('input') input: UpdateMyEntityInput,
-    @Workspace() { id: workspaceId }: Workspace,
-  ): Promise<MyEntityDto> {
-    const flatMyEntity = await this.myEntityService.update(id, input, workspaceId);
-    return fromFlatMyEntityToMyEntityDto(flatMyEntity);
-  }
-
-  @Mutation(() => Boolean)
-  async deleteMyEntity(
-    @Args('id') id: string,
-    @Workspace() { id: workspaceId }: Workspace,
-  ) {
-    await this.myEntityService.delete(id, workspaceId);
-    return true;
-  }
-}
-```
-
-**Resolver responsibilities**:
-- Receives flat entities from service
-- **Converts flat → DTO** using conversion utility
-- Returns DTOs to GraphQL API
-- Uses exception interceptor for error formatting
-
----
-
-## Step 6: Flat-to-DTO Conversion
-
-**File**: `src/engine/metadata-modules/my-entity/utils/from-flat-my-entity-to-my-entity-dto.util.ts`
-
-```typescript
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-import { type MyEntityDto } from 'src/engine/metadata-modules/my-entity/dtos/my-entity.dto';
-
-export const fromFlatMyEntityToMyEntityDto = (
-  flatMyEntity: FlatMyEntity,
-): MyEntityDto => {
-  return {
-    id: flatMyEntity.id,
-    name: flatMyEntity.name,
-    label: flatMyEntity.label,
-    description: flatMyEntity.description,
-    isCustom: flatMyEntity.isCustom,
-    createdAt: flatMyEntity.createdAt,
-    updatedAt: flatMyEntity.updatedAt,
-    // Convert foreign key IDs to relation objects if needed
-    // parentEntity: flatMyEntity.parentEntityId ? { id: flatMyEntity.parentEntityId } : null,
-  };
-};
-```
-
----
-
-## Layer Responsibilities
-
-| Layer | Input | Output | Responsibility |
-|-------|-------|--------|----------------|
-| **Service** | Input DTO | Flat Entity | Business logic, validation orchestration |
-| **Resolver** | Service result | DTO | Flat → DTO conversion, GraphQL exposure |
-
-**Service Layer**:
-- Works with flat entities internally
-- Returns `FlatMyEntity` type
-- No knowledge of DTOs or GraphQL types
-
-**Resolver Layer**:
-- Receives flat entities from service
-- Converts flat entities to DTOs
-- Returns DTOs to GraphQL API
-
----
-
-## Exception Interceptor
-
-The `WorkspaceMigrationGraphqlApiExceptionInterceptor` automatically handles:
-
-1. `FlatEntityMapsException` → Converts to GraphQL errors (NotFoundError, etc.)
-2. `WorkspaceMigrationBuilderException` → Formats validation errors with i18n
-3. `WorkspaceMigrationRunnerException` → Formats runner errors
-
-**What it does**:
-- Catches exceptions and formats for API responses
-- Translates error messages based on user locale
-- Ensures consistent error structure for frontend
-
----
-
-## Checklist
-
-Before moving to Step 6 (Testing):
-
-- [ ] Builder registered in builder module (providers + exports)
-- [ ] Validator registered in validators module (providers + exports)
-- [ ] All 3 action handlers registered in action handlers module (providers)
-- [ ] Service layer created
-- [ ] Service returns flat entities (not DTOs)
-- [ ] Resolver layer created
-- [ ] Resolver uses exception interceptor
-- [ ] Resolver converts flat → DTO
-- [ ] Flat-to-DTO conversion utility created
-
----
-
-## Next Step
-
-Once integration is complete, proceed to (**MANDATORY**):
-**[Syncable Entity: Integration Testing (Step 6/6)](../syncable-entity-testing/SKILL.md)**
-
-For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-runner-and-actions/SKILL.md

@@ -1,355 +0,0 @@
----
-name: syncable-entity-runner-and-actions
-description: Implement action handlers for executing workspace migrations in Twenty. Use when creating database operations for syncable entities, implementing universal-to-flat entity transpilation, or handling create/update/delete actions in the runner layer.
----
-
-# Syncable Entity: Runner & Actions (Step 4/6)
-
-**Purpose**: Execute migration actions against the database with proper transpilation from universal to flat entities.
-
-**When to use**: After completing Steps 1-3 (Types, Cache, Builder). Required before integration.
-
----
-
-## Quick Start
-
-This step creates:
-1. Create action handler
-2. Update action handler
-3. Delete action handler
-4. Universal-to-flat conversion utilities
-
-**Key pattern**: Each handler has two phases:
-1. **Transpilation**: Universal action → Flat action
-2. **Execution**: Flat action → Database operation
-
----
-
-## Step 1: Create Action Handler
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/create-my-entity-action-handler.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { InjectRepository } from '@nestjs/typeorm';
-import { Repository } from 'typeorm';
-
-import { WorkspaceCreateActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-create-action-handler.service';
-import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
-import {
-  type UniversalCreateMyEntityAction,
-  type FlatCreateMyEntityAction,
-} from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type';
-
-@Injectable()
-export class CreateMyEntityActionHandlerService extends WorkspaceCreateActionHandlerService<
-  'myEntity',
-  UniversalCreateMyEntityAction,
-  FlatCreateMyEntityAction
-> {
-  constructor(
-    @InjectRepository(MyEntityEntity, 'metadata')
-    private readonly myEntityRepository: Repository<MyEntityEntity>,
-  ) {
-    super();
-  }
-
-  // Phase 1: Transpile universal action to flat action
-  protected transpileUniversalActionToFlatAction(
-    universalAction: UniversalCreateMyEntityAction,
-    flatEntityMaps: AllFlatEntityMapsByMetadataName,
-  ): FlatCreateMyEntityAction {
-    return {
-      type: 'create',
-      metadataName: 'myEntity',
-      flatEntity: fromUniversalFlatMyEntityToFlatMyEntity(
-        universalAction.universalFlatEntity,
-        flatEntityMaps,
-      ),
-    };
-  }
-
-  // Phase 2: Execute flat action against database
-  protected async executeForMetadata(
-    flatActions: FlatCreateMyEntityAction[],
-  ): Promise<void> {
-    const flatEntities = flatActions.map((action) => action.flatEntity);
-
-    await this.insertFlatEntitiesInRepository({
-      repository: this.myEntityRepository,
-      flatEntities,
-    });
-  }
-
-  protected async executeForWorkspaceSchema(): Promise<void> {
-    // No workspace schema changes needed for metadata-only entity
-    return;
-  }
-}
-```
-
-**Key helper methods**:
-- `transpileUniversalActionToFlatAction`: Converts universal → flat
-- `insertFlatEntitiesInRepository`: Base class helper for inserts
-- `executeForMetadata`: Metadata database operations
-- `executeForWorkspaceSchema`: Workspace schema changes (if needed)
-
----
-
-## Step 2: Update Action Handler
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/update-my-entity-action-handler.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { InjectRepository } from '@nestjs/typeorm';
-import { Repository } from 'typeorm';
-
-import { WorkspaceUpdateActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-update-action-handler.service';
-import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
-import { resolveUniversalUpdateRelationIdentifiersToIds } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/utils/resolve-universal-relation-identifiers-to-ids.util';
-
-@Injectable()
-export class UpdateMyEntityActionHandlerService extends WorkspaceUpdateActionHandlerService<
-  'myEntity',
-  UniversalUpdateMyEntityAction,
-  FlatUpdateMyEntityAction
-> {
-  constructor(
-    @InjectRepository(MyEntityEntity, 'metadata')
-    private readonly myEntityRepository: Repository<MyEntityEntity>,
-  ) {
-    super();
-  }
-
-  protected transpileUniversalActionToFlatAction(
-    universalAction: UniversalUpdateMyEntityAction,
-    flatEntityMaps: AllFlatEntityMapsByMetadataName,
-  ): FlatUpdateMyEntityAction {
-    const flatEntity = fromUniversalFlatMyEntityToFlatMyEntity(
-      universalAction.universalFlatEntity,
-      flatEntityMaps,
-    );
-
-    // Resolve universal foreign keys in updates to regular IDs
-    const flatUpdates = resolveUniversalUpdateRelationIdentifiersToIds({
-      metadataName: 'myEntity',
-      universalUpdates: universalAction.universalUpdates,
-      flatEntityMaps,
-    });
-
-    return {
-      type: 'update',
-      metadataName: 'myEntity',
-      flatEntity,
-      updates: flatUpdates,
-    };
-  }
-
-  protected async executeForMetadata(
-    flatActions: FlatUpdateMyEntityAction[],
-  ): Promise<void> {
-    for (const action of flatActions) {
-      await this.myEntityRepository.update(
-        { id: action.flatEntity.id },
-        action.updates,
-      );
-    }
-  }
-
-  protected async executeForWorkspaceSchema(): Promise<void> {
-    return;
-  }
-}
-```
-
-**Update-specific helper**:
-- `resolveUniversalUpdateRelationIdentifiersToIds`: Maps universal identifiers back to regular IDs in the updates object
-
----
-
-## Step 3: Delete Action Handler
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/delete-my-entity-action-handler.service.ts`
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { InjectRepository } from '@nestjs/typeorm';
-import { Repository } from 'typeorm';
-
-import { WorkspaceDeleteActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-delete-action-handler.service';
-import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
-
-@Injectable()
-export class DeleteMyEntityActionHandlerService extends WorkspaceDeleteActionHandlerService<
-  'myEntity',
-  UniversalDeleteMyEntityAction,
-  FlatDeleteMyEntityAction
-> {
-  constructor(
-    @InjectRepository(MyEntityEntity, 'metadata')
-    private readonly myEntityRepository: Repository<MyEntityEntity>,
-  ) {
-    super();
-  }
-
-  protected transpileUniversalActionToFlatAction(
-    universalAction: UniversalDeleteMyEntityAction,
-    flatEntityMaps: AllFlatEntityMapsByMetadataName,
-  ): FlatDeleteMyEntityAction {
-    // Use base class helper for delete transpilation
-    return this.transpileUniversalDeleteActionToFlatDeleteAction({
-      universalAction,
-      flatEntityMaps,
-      fromUniversalFlatEntityToFlatEntity: fromUniversalFlatMyEntityToFlatMyEntity,
-    });
-  }
-
-  protected async executeForMetadata(
-    flatActions: FlatDeleteMyEntityAction[],
-  ): Promise<void> {
-    const ids = flatActions.map((action) => action.flatEntity.id);
-
-    await this.myEntityRepository.delete(ids);
-  }
-
-  protected async executeForWorkspaceSchema(): Promise<void> {
-    return;
-  }
-}
-```
-
-**Delete-specific helper**:
-- `transpileUniversalDeleteActionToFlatDeleteAction`: Base class helper that handles standard delete transpilation
-
----
-
-## Step 4: Universal-to-Flat Conversion
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util.ts`
-
-```typescript
-import { resolveUniversalRelationIdentifiersToIds } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/utils/resolve-universal-relation-identifiers-to-ids.util';
-import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-import { type AllFlatEntityMapsByMetadataName } from 'src/engine/metadata-modules/flat-entity/types/all-flat-entity-maps-by-metadata-name.type';
-
-export const fromUniversalFlatMyEntityToFlatMyEntity = (
-  universalFlatMyEntity: UniversalFlatMyEntity,
-  flatEntityMaps: AllFlatEntityMapsByMetadataName,
-): FlatMyEntity => {
-  // Resolve universal foreign keys back to regular IDs
-  return resolveUniversalRelationIdentifiersToIds({
-    metadataName: 'myEntity',
-    universalFlatEntity: universalFlatMyEntity,
-    flatEntityMaps,
-  }) as FlatMyEntity;
-};
-```
-
-**Key utility**:
-- `resolveUniversalRelationIdentifiersToIds`: Maps universal identifiers → regular IDs (reverse of `resolveEntityRelationUniversalIdentifiers`)
-
----
-
-## Action Handler Patterns
-
-### Pattern: Create Handler
-```typescript
-// 1. Transpile: Universal → Flat
-protected transpileUniversalActionToFlatAction(
-  universalAction,
-  flatEntityMaps,
-) {
-  return {
-    type: 'create',
-    metadataName: 'myEntity',
-    flatEntity: fromUniversalFlatMyEntityToFlatMyEntity(
-      universalAction.universalFlatEntity,
-      flatEntityMaps,
-    ),
-  };
-}
-
-// 2. Execute: Flat → Database
-protected async executeForMetadata(flatActions) {
-  await this.insertFlatEntitiesInRepository({
-    repository: this.myEntityRepository,
-    flatEntities: flatActions.map(a => a.flatEntity),
-  });
-}
-```
-
-### Pattern: Update Handler
-```typescript
-// Transpile with update-specific resolution
-protected transpileUniversalActionToFlatAction(
-  universalAction,
-  flatEntityMaps,
-) {
-  const flatEntity = fromUniversalFlatMyEntityToFlatMyEntity(
-    universalAction.universalFlatEntity,
-    flatEntityMaps,
-  );
-
-  const flatUpdates = resolveUniversalUpdateRelationIdentifiersToIds({
-    metadataName: 'myEntity',
-    universalUpdates: universalAction.universalUpdates,
-    flatEntityMaps,
-  });
-
-  return { type: 'update', metadataName: 'myEntity', flatEntity, updates: flatUpdates };
-}
-```
-
-### Pattern: Delete Handler
-```typescript
-// Use base class helper
-protected transpileUniversalActionToFlatAction(
-  universalAction,
-  flatEntityMaps,
-) {
-  return this.transpileUniversalDeleteActionToFlatDeleteAction({
-    universalAction,
-    flatEntityMaps,
-    fromUniversalFlatEntityToFlatEntity: fromUniversalFlatMyEntityToFlatMyEntity,
-  });
-}
-
-// Delete
-protected async executeForMetadata(flatActions) {
-  const ids = flatActions.map(a => a.flatEntity.id);
-  await this.myEntityRepository.delete(ids);
-}
-```
-
----
-
-## Checklist
-
-Before moving to Step 5:
-
-- [ ] Create action handler implemented
-- [ ] Update action handler implemented
-- [ ] Delete action handler implemented
-- [ ] All handlers extend appropriate base class
-- [ ] `transpileUniversalActionToFlatAction` implemented in all handlers
-- [ ] `executeForMetadata` implemented in all handlers
-- [ ] `executeForWorkspaceSchema` implemented (or returns empty)
-- [ ] Universal-to-flat conversion utility created
-- [ ] Create handler uses `insertFlatEntitiesInRepository`
-- [ ] Update handler uses `resolveUniversalUpdateRelationIdentifiersToIds`
-- [ ] Delete handler uses `transpileUniversalDeleteActionToFlatDeleteAction`
-- [ ] Delete handler uses hard delete (`delete()`)
-
----
-
-## Next Step
-
-Once action handlers are complete, proceed to:
-**[Syncable Entity: Integration (Step 5/6)](../syncable-entity-integration/SKILL.md)**
-
-For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-testing/SKILL.md

@@ -1,494 +0,0 @@
----
-name: syncable-entity-testing
-description: Create comprehensive integration tests for syncable entities in Twenty. Use when writing integration tests for metadata entities, covering validator exceptions, input transpilation errors, and CRUD operations. Tests are MANDATORY for all syncable entities.
----
-
-# Syncable Entity: Integration Testing (Step 6/6 - MANDATORY)
-
-**Purpose**: Create comprehensive test suite covering all validation scenarios, input transpilation exceptions, and successful use cases.
-
-**When to use**: After completing Steps 1-5. Integration tests are **REQUIRED** for all syncable entities.
-
----
-
-## Quick Start
-
-Tests must cover:
-1. **Failing scenarios** - All validator exceptions and input transpilation errors
-2. **Successful scenarios** - All CRUD operations and edge cases
-3. **Test utilities** - Reusable query factories and helper functions
-
-**Test pattern**: Two-file pattern (query factory + wrapper) for each operation.
-
----
-
-## Step 1: Create Test Utilities
-
-### Pattern: Query Factory
-
-**File**: `test/integration/metadata/suites/my-entity/utils/create-my-entity-query-factory.util.ts`
-
-```typescript
-import gql from 'graphql-tag';
-import { type PerformMetadataQueryParams } from 'test/integration/metadata/types/perform-metadata-query.type';
-import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
-
-export type CreateMyEntityFactoryInput = CreateMyEntityInput;
-
-const DEFAULT_MY_ENTITY_GQL_FIELDS = `
-  id
-  name
-  label
-  description
-  isCustom
-  createdAt
-  updatedAt
-`;
-
-export const createMyEntityQueryFactory = ({
-  input,
-  gqlFields = DEFAULT_MY_ENTITY_GQL_FIELDS,
-}: PerformMetadataQueryParams<CreateMyEntityFactoryInput>) => ({
-  query: gql`
-    mutation CreateMyEntity($input: CreateMyEntityInput!) {
-      createMyEntity(input: $input) {
-        ${gqlFields}
-      }
-    }
-  `,
-  variables: {
-    input,
-  },
-});
-```
-
-### Pattern: Wrapper Utility
-
-**File**: `test/integration/metadata/suites/my-entity/utils/create-my-entity.util.ts`
-
-```typescript
-import {
-  type CreateMyEntityFactoryInput,
-  createMyEntityQueryFactory,
-} from 'test/integration/metadata/suites/my-entity/utils/create-my-entity-query-factory.util';
-import { makeMetadataAPIRequest } from 'test/integration/metadata/suites/utils/make-metadata-api-request.util';
-import { type CommonResponseBody } from 'test/integration/metadata/types/common-response-body.type';
-import { type PerformMetadataQueryParams } from 'test/integration/metadata/types/perform-metadata-query.type';
-import { warnIfErrorButNotExpectedToFail } from 'test/integration/metadata/utils/warn-if-error-but-not-expected-to-fail.util';
-import { warnIfNoErrorButExpectedToFail } from 'test/integration/metadata/utils/warn-if-no-error-but-expected-to-fail.util';
-import { type MyEntityDto } from 'src/engine/metadata-modules/my-entity/dtos/my-entity.dto';
-
-export const createMyEntity = async ({
-  input,
-  gqlFields,
-  expectToFail = false,
-  token,
-}: PerformMetadataQueryParams<CreateMyEntityFactoryInput>): CommonResponseBody<{
-  createMyEntity: MyEntityDto;
-}> => {
-  const graphqlOperation = createMyEntityQueryFactory({
-    input,
-    gqlFields,
-  });
-
-  const response = await makeMetadataAPIRequest(graphqlOperation, token);
-
-  if (expectToFail === true) {
-    warnIfNoErrorButExpectedToFail({
-      response,
-      errorMessage: 'My entity creation should have failed but did not',
-    });
-  }
-
-  if (expectToFail === false) {
-    warnIfErrorButNotExpectedToFail({
-      response,
-      errorMessage: 'My entity creation has failed but should not',
-    });
-  }
-
-  return { data: response.body.data, errors: response.body.errors };
-};
-```
-
-**Required utilities** (follow same pattern):
-- `update-my-entity-query-factory.util.ts` + `update-my-entity.util.ts`
-- `delete-my-entity-query-factory.util.ts` + `delete-my-entity.util.ts`
-
----
-
-## Step 2: Failing Creation Tests
-
-**File**: `test/integration/metadata/suites/my-entity/failing-my-entity-creation.integration-spec.ts`
-
-```typescript
-import { expectOneNotInternalServerErrorSnapshot } from 'test/integration/graphql/utils/expect-one-not-internal-server-error-snapshot.util';
-import { createMyEntity } from 'test/integration/metadata/suites/my-entity/utils/create-my-entity.util';
-import { deleteMyEntity } from 'test/integration/metadata/suites/my-entity/utils/delete-my-entity.util';
-import {
-  eachTestingContextFilter,
-  type EachTestingContext,
-} from 'twenty-shared/testing';
-import { isDefined } from 'twenty-shared/utils';
-import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
-
-type TestContext = {
-  input: CreateMyEntityInput;
-};
-
-type GlobalTestContext = {
-  existingEntityLabel: string;
-  existingEntityName: string;
-};
-
-const globalTestContext: GlobalTestContext = {
-  existingEntityLabel: 'Existing Test Entity',
-  existingEntityName: 'existingTestEntity',
-};
-
-type CreateMyEntityTestingContext = EachTestingContext<TestContext>[];
-
-describe('My entity creation should fail', () => {
-  let existingEntityId: string | undefined;
-
-  beforeAll(async () => {
-    // Setup: Create entity for uniqueness tests
-    const { data } = await createMyEntity({
-      expectToFail: false,
-      input: {
-        name: globalTestContext.existingEntityName,
-        label: globalTestContext.existingEntityLabel,
-      },
-    });
-
-    existingEntityId = data.createMyEntity.id;
-  });
-
-  afterAll(async () => {
-    // Cleanup
-    if (isDefined(existingEntityId)) {
-      await deleteMyEntity({
-        expectToFail: false,
-        input: { id: existingEntityId },
-      });
-    }
-  });
-
-  const failingMyEntityCreationTestCases: CreateMyEntityTestingContext = [
-    // Input transpilation validation
-    {
-      title: 'when name is missing',
-      context: {
-        input: {
-          label: 'Entity Missing Name',
-        } as CreateMyEntityInput,
-      },
-    },
-    {
-      title: 'when label is missing',
-      context: {
-        input: {
-          name: 'entityMissingLabel',
-        } as CreateMyEntityInput,
-      },
-    },
-    {
-      title: 'when name is empty string',
-      context: {
-        input: {
-          name: '',
-          label: 'Empty Name Entity',
-        },
-      },
-    },
-
-    // Validator business logic
-    {
-      title: 'when name already exists (uniqueness)',
-      context: {
-        input: {
-          name: globalTestContext.existingEntityName,
-          label: 'Duplicate Name Entity',
-        },
-      },
-    },
-    {
-      title: 'when trying to create standard entity',
-      context: {
-        input: {
-          name: 'myEntity',
-          label: 'Standard Entity',
-          isCustom: false,
-        } as CreateMyEntityInput,
-      },
-    },
-
-    // Foreign key validation
-    {
-      title: 'when parentEntityId does not exist',
-      context: {
-        input: {
-          name: 'invalidParentEntity',
-          label: 'Invalid Parent Entity',
-          parentEntityId: '00000000-0000-0000-0000-000000000000',
-        },
-      },
-    },
-  ];
-
-  it.each(eachTestingContextFilter(failingMyEntityCreationTestCases))(
-    '$title',
-    async ({ context }) => {
-      const { errors } = await createMyEntity({
-        expectToFail: true,
-        input: context.input,
-      });
-
-      expectOneNotInternalServerErrorSnapshot({
-        errors,
-      });
-    },
-  );
-});
-```
-
-**Test coverage requirements**:
-- ✅ Missing required fields
-- ✅ Empty strings
-- ✅ Invalid format
-- ✅ Uniqueness violations
-- ✅ Standard entity protection
-- ✅ Foreign key validation
-
----
-
-## Step 3: Successful Creation Tests
-
-**File**: `test/integration/metadata/suites/my-entity/successful-my-entity-creation.integration-spec.ts`
-
-```typescript
-import { createMyEntity } from 'test/integration/metadata/suites/my-entity/utils/create-my-entity.util';
-import { deleteMyEntity } from 'test/integration/metadata/suites/my-entity/utils/delete-my-entity.util';
-import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
-
-describe('My entity creation should succeed', () => {
-  let createdEntityId: string;
-
-  afterEach(async () => {
-    if (createdEntityId) {
-      await deleteMyEntity({
-        expectToFail: false,
-        input: { id: createdEntityId },
-      });
-    }
-  });
-
-  it('should create entity with minimal required input', async () => {
-    const { data } = await createMyEntity({
-      expectToFail: false,
-      input: {
-        name: 'minimalEntity',
-        label: 'Minimal Entity',
-      },
-    });
-
-    createdEntityId = data?.createMyEntity?.id;
-
-    expect(data.createMyEntity).toMatchObject({
-      id: expect.any(String),
-      name: 'minimalEntity',
-      label: 'Minimal Entity',
-      description: null,
-      isCustom: true,
-      createdAt: expect.any(String),
-      updatedAt: expect.any(String),
-    });
-  });
-
-  it('should create entity with all optional fields', async () => {
-    const input = {
-      name: 'fullEntity',
-      label: 'Full Entity',
-      description: 'Entity with all fields specified',
-    } as const satisfies CreateMyEntityInput;
-
-    const { data } = await createMyEntity({
-      expectToFail: false,
-      input,
-    });
-
-    createdEntityId = data?.createMyEntity?.id;
-
-    expect(data.createMyEntity).toMatchObject({
-      id: expect.any(String),
-      name: 'fullEntity',
-      label: 'Full Entity',
-      description: 'Entity with all fields specified',
-      isCustom: true,
-    });
-  });
-
-  it('should sanitize input by trimming whitespace', async () => {
-    const { data } = await createMyEntity({
-      expectToFail: false,
-      input: {
-        name: '  entityWithSpaces  ',
-        label: '  Entity With Spaces  ',
-        description: '  Description with spaces  ',
-      },
-    });
-
-    createdEntityId = data?.createMyEntity?.id;
-
-    expect(data.createMyEntity).toMatchObject({
-      id: expect.any(String),
-      name: 'entityWithSpaces',
-      label: 'Entity With Spaces',
-      description: 'Description with spaces',
-    });
-  });
-
-  it('should handle long text content', async () => {
-    const longDescription = 'A'.repeat(1000);
-
-    const { data } = await createMyEntity({
-      expectToFail: false,
-      input: {
-        name: 'longDescEntity',
-        label: 'Long Description Entity',
-        description: longDescription,
-      },
-    });
-
-    createdEntityId = data?.createMyEntity?.id;
-
-    expect(data.createMyEntity).toMatchObject({
-      id: expect.any(String),
-      description: longDescription,
-    });
-  });
-});
-```
-
-**Test coverage requirements**:
-- ✅ Minimal required input
-- ✅ All optional fields
-- ✅ Input sanitization
-- ✅ Long text content
-- ✅ Special characters
-
----
-
-## Step 4: Update and Delete Tests
-
-Create similar test files for update and delete operations:
-
-**Required files**:
-- `failing-my-entity-update.integration-spec.ts`
-- `successful-my-entity-update.integration-spec.ts`
-- `failing-my-entity-deletion.integration-spec.ts`
-- `successful-my-entity-deletion.integration-spec.ts`
-
----
-
-## Testing Best Practices
-
-### Pattern: Cleanup
-```typescript
-afterEach(async () => {
-  if (createdEntityId) {
-    await deleteMyEntity({
-      expectToFail: false,
-      input: { id: createdEntityId },
-    });
-  }
-});
-```
-
-### Pattern: Type-Safe Inputs
-```typescript
-const input = {
-  name: 'myEntity',
-  label: 'My Entity',
-} as const satisfies CreateMyEntityInput;
-```
-
-### Pattern: Snapshot Testing
-```typescript
-expectOneNotInternalServerErrorSnapshot({
-  errors,
-});
-```
-
----
-
-## Running Tests
-
-```bash
-# Run all entity tests
-npx jest test/integration/metadata/suites/my-entity --config=packages/twenty-server/jest.config.mjs
-
-# Run specific test file
-npx jest test/integration/metadata/suites/my-entity/failing-my-entity-creation.integration-spec.ts --config=packages/twenty-server/jest.config.mjs
-
-# Update snapshots
-npx jest test/integration/metadata/suites/my-entity --updateSnapshot --config=packages/twenty-server/jest.config.mjs
-```
-
----
-
-## Complete Test Checklist
-
-### Test Utilities
-- [ ] `create-my-entity-query-factory.util.ts` created
-- [ ] `create-my-entity.util.ts` created
-- [ ] `update-my-entity-query-factory.util.ts` created
-- [ ] `update-my-entity.util.ts` created
-- [ ] `delete-my-entity-query-factory.util.ts` created
-- [ ] `delete-my-entity.util.ts` created
-
-### Failing Tests Coverage
-- [ ] Missing required fields
-- [ ] Empty string validation
-- [ ] Uniqueness violations
-- [ ] Standard entity protection
-- [ ] Foreign key validation
-- [ ] JSONB property validation (if applicable)
-
-### Successful Tests Coverage
-- [ ] Create with minimal input
-- [ ] Create with all optional fields
-- [ ] Input sanitization (whitespace)
-- [ ] Long text content
-- [ ] Update single field
-- [ ] Update multiple fields
-- [ ] Successful deletion
-
-### Snapshot Tests
-- [ ] All failing tests use `expectOneNotInternalServerErrorSnapshot`
-- [ ] Snapshots committed to `__snapshots__/` directory
-
----
-
-## Success Criteria
-
-Your integration tests are complete when:
-
-✅ All test utilities created (minimum 6 files)
-✅ Failing creation tests cover all validators
-✅ Failing update tests cover business rules
-✅ Failing deletion tests cover protection rules
-✅ Successful tests cover all use cases
-✅ All snapshots generated and committed
-✅ All tests pass consistently
-✅ Test coverage meets requirements (>80%)
-
----
-
-## Final Step
-
-✅ **Step 6 Complete!** → Your syncable entity is fully tested and production-ready!
-
-**Congratulations!** You've successfully created a new syncable entity in Twenty's workspace migration system.
-
-For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-types-and-constants/SKILL.md

@@ -1,340 +0,0 @@
----
-name: syncable-entity-types-and-constants
-description: Define types, entities, and central constant registrations for syncable entities in Twenty's workspace migration system. Use when creating new syncable entities, defining TypeORM entities, flat entity types, or registering in central constants (ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME, ALL_ONE_TO_MANY_METADATA_RELATIONS, ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY, ALL_MANY_TO_ONE_METADATA_RELATIONS).
----
-
-# Syncable Entity: Types & Constants (Step 1/6)
-
-**Purpose**: Define all types, entities, and register in central constants. This is the foundation - everything else depends on these types being correct.
-
-**When to use**: First step when creating any new syncable entity. Must be completed before other steps.
-
----
-
-## Quick Start
-
-This step creates:
-1. Metadata name constant (twenty-shared)
-2. TypeORM entity (extends `SyncableEntity`)
-3. Flat entity types
-4. Action types (universal + flat)
-5. Central constant registrations (5 constants)
-
----
-
-## Step 1: Add Metadata Name
-
-**File**: `packages/twenty-shared/src/metadata/all-metadata-name.constant.ts`
-
-```typescript
-export const ALL_METADATA_NAME = {
-  // ... existing entries
-  myEntity: 'myEntity',
-} as const;
-```
-
----
-
-## Step 2: Create TypeORM Entity
-
-**File**: `src/engine/metadata-modules/my-entity/entities/my-entity.entity.ts`
-
-```typescript
-import { Entity, Column, ManyToOne, JoinColumn } from 'typeorm';
-import { SyncableEntity } from 'src/engine/workspace-manager/types/syncable-entity.interface';
-
-@Entity({ name: 'myEntity' })
-export class MyEntityEntity extends SyncableEntity {
-  @Column({ type: 'varchar' })
-  name: string;
-
-  @Column({ type: 'varchar' })
-  label: string;
-
-  @Column({ type: 'boolean', default: true })
-  isCustom: boolean;
-
-  // Foreign key example (optional)
-  @Column({ type: 'uuid', nullable: true })
-  parentEntityId: string | null;
-
-  @ManyToOne(() => ParentEntityEntity, { nullable: true })
-  @JoinColumn({ name: 'parentEntityId' })
-  parentEntity: ParentEntityEntity | null;
-
-  // JSONB column example (optional)
-  @Column({ type: 'jsonb', nullable: true })
-  settings: Record<string, any> | null;
-}
-```
-
-**Key rules**:
-- Must extend `SyncableEntity` (provides `id`, `universalIdentifier`, `applicationId`, etc.)
-- Must have `isCustom` boolean column
-- Use `@Column({ type: 'jsonb' })` for JSON data
-
----
-
-## Step 3: Define Flat Entity Types
-
-**File**: `src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type.ts`
-
-```typescript
-import { type FlatEntityFrom } from 'src/engine/metadata-modules/flat-entity/types/flat-entity-from.type';
-import { type MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
-
-export type FlatMyEntity = FlatEntityFrom<MyEntityEntity>;
-```
-
-**Maps file** (if entity has indexed lookups):
-
-```typescript
-// flat-my-entity-maps.type.ts
-export type FlatMyEntityMaps = {
-  byId: Record<string, FlatMyEntity>;
-  byName: Record<string, FlatMyEntity>;
-  // Add other indexes as needed
-};
-```
-
----
-
-## Step 4: Define Editable Properties
-
-**File**: `src/engine/metadata-modules/flat-my-entity/constants/editable-flat-my-entity-properties.constant.ts`
-
-```typescript
-export const EDITABLE_FLAT_MY_ENTITY_PROPERTIES = [
-  'name',
-  'label',
-  'description',
-  'parentEntityId',
-  'settings',
-] as const satisfies ReadonlyArray<keyof FlatMyEntity>;
-```
-
-**Rule**: Only include properties that can be updated (exclude `id`, `createdAt`, `universalIdentifier`, etc.)
-
----
-
-## Step 5: Define Action Types
-
-**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type.ts`
-
-```typescript
-import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
-import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
-
-// Universal actions (used by builder/runner)
-export type UniversalCreateMyEntityAction = {
-  type: 'create';
-  metadataName: 'myEntity';
-  universalFlatEntity: UniversalFlatMyEntity;
-};
-
-export type UniversalUpdateMyEntityAction = {
-  type: 'update';
-  metadataName: 'myEntity';
-  universalFlatEntity: UniversalFlatMyEntity;
-  universalUpdates: Partial<UniversalFlatMyEntity>;
-};
-
-export type UniversalDeleteMyEntityAction = {
-  type: 'delete';
-  metadataName: 'myEntity';
-  universalFlatEntity: UniversalFlatMyEntity;
-};
-
-// Flat actions (internal to runner)
-export type FlatCreateMyEntityAction = {
-  type: 'create';
-  metadataName: 'myEntity';
-  flatEntity: FlatMyEntity;
-};
-
-export type FlatUpdateMyEntityAction = {
-  type: 'update';
-  metadataName: 'myEntity';
-  flatEntity: FlatMyEntity;
-  updates: Partial<FlatMyEntity>;
-};
-
-export type FlatDeleteMyEntityAction = {
-  type: 'delete';
-  metadataName: 'myEntity';
-  flatEntity: FlatMyEntity;
-};
-```
-
----
-
-## Step 6: Register in Central Constants
-
-### 6a. AllFlatEntityTypesByMetadataName
-
-**File**: `src/engine/metadata-modules/flat-entity/types/all-flat-entity-types-by-metadata-name.ts`
-
-```typescript
-export type AllFlatEntityTypesByMetadataName = {
-  // ... existing entries
-  myEntity: {
-    flatEntityMaps: FlatMyEntityMaps;
-    universalActions: {
-      create: UniversalCreateMyEntityAction;
-      update: UniversalUpdateMyEntityAction;
-      delete: UniversalDeleteMyEntityAction;
-    };
-    flatActions: {
-      create: FlatCreateMyEntityAction;
-      update: FlatUpdateMyEntityAction;
-      delete: FlatDeleteMyEntityAction;
-    };
-    flatEntity: FlatMyEntity;
-    universalFlatEntity: UniversalFlatMyEntity;
-    entity: MyEntityEntity;
-  };
-};
-```
-
-### 6b. ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME
-
-**File**: `src/engine/metadata-modules/flat-entity/constant/all-entity-properties-configuration-by-metadata-name.constant.ts`
-
-```typescript
-export const ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME = {
-  // ... existing entries
-  myEntity: {
-    name: { toCompare: true },
-    label: { toCompare: true },
-    description: { toCompare: true },
-    parentEntityId: {
-      toCompare: true,
-      universalProperty: 'parentEntityUniversalIdentifier',
-    },
-    settings: {
-      toCompare: true,
-      toStringify: true,
-      universalProperty: 'universalSettings',
-    },
-  },
-} as const;
-```
-
-**Rules**:
-- `toCompare: true` → Editable property (checked for changes)
-- `toStringify: true` → JSONB/object property (needs JSON serialization)
-- `universalProperty` → Maps to universal version (for foreign keys & JSONB with `SerializedRelation`)
-
-### 6c. ALL_ONE_TO_MANY_METADATA_RELATIONS
-
-**File**: `src/engine/metadata-modules/flat-entity/constant/all-one-to-many-metadata-relations.constant.ts`
-
-This constant is **type-checked** — values for `metadataName`, `flatEntityForeignKeyAggregator`, and `universalFlatEntityForeignKeyAggregator` are derived from entity type definitions. The aggregator names follow the pattern: remove trailing `'s'` from the relation property name, then append `Ids` or `UniversalIdentifiers`.
-
-```typescript
-export const ALL_ONE_TO_MANY_METADATA_RELATIONS = {
-  // ... existing entries
-  myEntity: {
-    // If myEntity has a `childEntities: ChildEntityEntity[]` property:
-    childEntities: {
-      metadataName: 'childEntity',
-      flatEntityForeignKeyAggregator: 'childEntityIds',
-      universalFlatEntityForeignKeyAggregator: 'childEntityUniversalIdentifiers',
-    },
-    // null for relations to non-syncable entities
-    someNonSyncableRelation: null,
-  },
-} as const;
-```
-
-### 6d. ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY
-
-**File**: `src/engine/metadata-modules/flat-entity/constant/all-many-to-one-metadata-foreign-key.constant.ts`
-
-Low-level primitive constant. Only contains `foreignKey` — the column name ending in `Id` that stores the foreign key. Type-checked against entity properties.
-
-```typescript
-export const ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY = {
-  // ... existing entries
-  myEntity: {
-    workspace: null,
-    application: null,
-    parentEntity: {
-      foreignKey: 'parentEntityId',
-    },
-  },
-} as const;
-```
-
-### 6e. ALL_MANY_TO_ONE_METADATA_RELATIONS
-
-**File**: `src/engine/metadata-modules/flat-entity/constant/all-many-to-one-metadata-relations.constant.ts`
-
-Derived from both `ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY` (for `foreignKey` type and `universalForeignKey` derivation) and `ALL_ONE_TO_MANY_METADATA_RELATIONS` (for `inverseOneToManyProperty` key constraint). This is the main constant consumed by utils and optimistic tooling.
-
-```typescript
-export const ALL_MANY_TO_ONE_METADATA_RELATIONS = {
-  // ... existing entries
-  myEntity: {
-    workspace: null,
-    application: null,
-    parentEntity: {
-      metadataName: 'parentEntity',
-      foreignKey: 'parentEntityId',
-      inverseOneToManyProperty: 'myEntities',  // key in ALL_ONE_TO_MANY_METADATA_RELATIONS['parentEntity'], or null if no inverse
-      isNullable: false,
-      universalForeignKey: 'parentEntityUniversalIdentifier',
-    },
-  },
-} as const;
-```
-
-**Derivation dependency graph**:
-
-```
-ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY     ALL_ONE_TO_MANY_METADATA_RELATIONS
-(foreignKey only)                        (metadataName, aggregators)
-  │                                        │
-  │ FK type + universalFK derivation       │ inverseOneToManyProperty keys
-  │                                        │
-  └────────────────┬───────────────────────┘
-                   ▼
-    ALL_MANY_TO_ONE_METADATA_RELATIONS
-    (metadataName, foreignKey, inverseOneToManyProperty,
-     isNullable, universalForeignKey)
-```
-
-**Rules**:
-- `workspace: null`, `application: null` — always present, always null (non-syncable relations)
-- `inverseOneToManyProperty` — must be a key in `ALL_ONE_TO_MANY_METADATA_RELATIONS[targetMetadataName]`, or `null` if the target entity doesn't expose an inverse one-to-many relation
-- `universalForeignKey` — derived from `foreignKey` by replacing the `Id` suffix with `UniversalIdentifier`
-- Optimistic utils resolve `flatEntityForeignKeyAggregator` / `universalFlatEntityForeignKeyAggregator` at runtime by looking up `inverseOneToManyProperty` in `ALL_ONE_TO_MANY_METADATA_RELATIONS`
-
----
-
-## Checklist
-
-Before moving to Step 2:
-
-- [ ] Metadata name added to `ALL_METADATA_NAME`
-- [ ] TypeORM entity created (extends `SyncableEntity`)
-- [ ] `isCustom` column added
-- [ ] Flat entity type defined
-- [ ] Flat entity maps type defined (if needed)
-- [ ] Editable properties constant defined
-- [ ] Universal and flat action types defined
-- [ ] Registered in `AllFlatEntityTypesByMetadataName`
-- [ ] Registered in `ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME`
-- [ ] Registered in `ALL_ONE_TO_MANY_METADATA_RELATIONS` (if entity has one-to-many relations)
-- [ ] Registered in `ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY`
-- [ ] Registered in `ALL_MANY_TO_ONE_METADATA_RELATIONS`
-- [ ] TypeScript compiles without errors
-
----
-
-## Next Step
-
-Once all types and constants are defined, proceed to:
-**[Syncable Entity: Cache & Transform (Step 2/6)](../syncable-entity-cache-and-transform/SKILL.md)**
-
-For complete workflow, see `@creating-syncable-entity` rule.

.dockerignore

@@ -1,5 +1,5 @@
 .git
 .env
-**/node_modules
+node_modules
 .nx/cache
 packages/twenty-server/.env

.github/CODEOWNERS

@@ -1,6 +0,0 @@
-/.github/              @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp
-/.github/CODEOWNERS    @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp
-/.github/workflows/    @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp
-/.github/actions/      @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp
-/.github/dependabot.yml @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp
-/.yarnrc.yml           @charlesBochet @FelixMalfait @Weiko @prastoin @bosiraphael @etiennejouan @ijreilly @martmull @thomtrp

.github/actions/deploy-twenty-app/action.yml

@@ -1,53 +0,0 @@
-name: Deploy Twenty App
-description: Build and deploy a Twenty app to a remote instance
-
-inputs:
-  api-url:
-    description: Base URL of the target Twenty instance (e.g. https://my.twenty.instance)
-    required: true
-  api-key:
-    description: API key or access token for the target instance
-    required: true
-  app-path:
-    description: Path to the app directory (relative to repo root). Defaults to repo root.
-    required: false
-    default: '.'
-
-runs:
-  using: composite
-  steps:
-    - name: Enable Corepack
-      shell: bash
-      run: corepack enable
-
-    - name: Setup Node.js
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-      with:
-        node-version-file: '${{ inputs.app-path }}/.nvmrc'
-        cache: yarn
-        cache-dependency-path: '${{ inputs.app-path }}/yarn.lock'
-
-    - name: Install dependencies
-      shell: bash
-      working-directory: ${{ inputs.app-path }}
-      run: yarn install --immutable
-
-    - name: Configure remote
-      shell: bash
-      run: |
-        mkdir -p ~/.twenty
-        node -e "
-          const fs = require('fs'), path = require('path'), os = require('os');
-          fs.writeFileSync(path.join(os.homedir(), '.twenty', 'config.json'), JSON.stringify({
-            version: 1,
-            remotes: { target: { apiUrl: process.env.API_URL, apiKey: process.env.API_KEY } }
-          }, null, 2));
-        "
-      env:
-        API_URL: ${{ inputs.api-url }}
-        API_KEY: ${{ inputs.api-key }}
-
-    - name: Deploy
-      shell: bash
-      working-directory: ${{ inputs.app-path }}
-      run: yarn twenty app:publish --private --remote target

.github/actions/install-twenty-app/action.yml

@@ -1,53 +0,0 @@
-name: Install Twenty App
-description: Install (or upgrade) a Twenty app on a specific workspace
-
-inputs:
-  api-url:
-    description: Base URL of the target Twenty instance (e.g. https://my.twenty.instance)
-    required: true
-  api-key:
-    description: API key or access token for the target workspace
-    required: true
-  app-path:
-    description: Path to the app directory (relative to repo root). Defaults to repo root.
-    required: false
-    default: '.'
-
-runs:
-  using: composite
-  steps:
-    - name: Enable Corepack
-      shell: bash
-      run: corepack enable
-
-    - name: Setup Node.js
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-      with:
-        node-version-file: '${{ inputs.app-path }}/.nvmrc'
-        cache: yarn
-        cache-dependency-path: '${{ inputs.app-path }}/yarn.lock'
-
-    - name: Install dependencies
-      shell: bash
-      working-directory: ${{ inputs.app-path }}
-      run: yarn install --immutable
-
-    - name: Configure remote
-      shell: bash
-      run: |
-        mkdir -p ~/.twenty
-        node -e "
-          const fs = require('fs'), path = require('path'), os = require('os');
-          fs.writeFileSync(path.join(os.homedir(), '.twenty', 'config.json'), JSON.stringify({
-            version: 1,
-            remotes: { target: { apiUrl: process.env.API_URL, apiKey: process.env.API_KEY } }
-          }, null, 2));
-        "
-      env:
-        API_URL: ${{ inputs.api-url }}
-        API_KEY: ${{ inputs.api-key }}
-
-    - name: Install
-      shell: bash
-      working-directory: ${{ inputs.app-path }}
-      run: yarn twenty app:install --remote target

.github/actions/nx-affected/action.yaml

@@ -15,22 +15,8 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: Fetch main branch for diff
-      shell: bash
-      run: git fetch origin main --depth=1
     - name: Get last successful commit
-      if: env.NX_BASE == ''
-      uses: nrwl/nx-set-shas@3e9ad7370203c1e93d109be57f3b72eb0eb511b1 # v4
-    - name: Fallback to origin/main if no base found
-      if: env.NX_BASE == ''
-      shell: bash
-      run: echo "NX_BASE=$(git rev-parse origin/main)" >> $GITHUB_ENV
+      uses: nrwl/nx-set-shas@v4
     - name: Run affected command
       shell: bash
-      env:
-        NX_CONFIGURATION: ${{ inputs.configuration }}
-        NX_TASKS: ${{ inputs.tasks }}
-        NX_PARALLEL: ${{ inputs.parallel }}
-        NX_TAG: ${{ inputs.tag }}
-        NX_ARGS: ${{ inputs.args }}
-      run: npx nx affected --nxBail --configuration="$NX_CONFIGURATION" -t="$NX_TASKS" --parallel="$NX_PARALLEL" --exclude="*,!tag:$NX_TAG" $NX_ARGS
+      run: npx nx affected --nxBail --configuration=${{ inputs.configuration }} -t=${{ inputs.tasks }} --parallel=${{ inputs.parallel }} --exclude='*,!tag:${{ inputs.tag }}' ${{ inputs.args }}

.github/actions/restore-cache/action.yaml

@@ -19,13 +19,10 @@ runs:
     - name: Cache primary key builder
       id: cache-primary-key-builder
       shell: bash
-      env:
-        CACHE_KEY: ${{ inputs.key }}
-        REF_NAME: ${{ github.ref_name }}
       run: |
-        echo "CACHE_PRIMARY_KEY_PREFIX=v4-${CACHE_KEY}-${REF_NAME}" >> "${GITHUB_OUTPUT}"
+        echo "CACHE_PRIMARY_KEY_PREFIX=v4-${{ inputs.key }}-${{ github.ref_name }}" >> "${GITHUB_OUTPUT}"
     - name: Restore cache
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (restore)
+      uses: actions/cache/restore@v4
       id: restore-cache
       with:
         key: ${{ steps.cache-primary-key-builder.outputs.CACHE_PRIMARY_KEY_PREFIX }}-${{ github.sha }}

.github/actions/save-cache/action.yaml

@@ -9,11 +9,8 @@ inputs:
 runs:
   using: "composite"
   steps:
-    # Fork PRs on pull_request already can't write to the base repo's cache (GitHub built-in).
-    # The fork guard is defense-in-depth for pull_request_target, which does have write access.
     - name: Save cache
-      if: ${{ format('{0}', github.event.pull_request.head.repo.fork) != 'true' }}
-      uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (save)
+      uses: actions/cache/save@v4
       with:
         key: ${{ inputs.key }}
         path: |

.github/actions/spawn-twenty-app-dev-test/action.yml

@@ -1,47 +0,0 @@
-name: Spawn Twenty App Dev Test
-description: >
-  Starts a Twenty all-in-one test instance (server, worker, database, redis)
-  using the twentycrm/twenty-app-dev Docker image on port 2021.
-  The server is available at http://localhost:2021 with seeded demo data.
-
-inputs:
-  twenty-version:
-    description: 'Twenty Docker Hub image tag for twenty-app-dev (e.g., "latest" or "v1.20.0").'
-    required: false
-    default: 'latest'
-
-outputs:
-  server-url:
-    description: 'URL where the Twenty test server can be reached'
-    value: http://localhost:2021
-  api-key:
-    description: 'API key (type: API_KEY) for the seeded Twenty dev workspace'
-    value: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC0xYzI1LTRkMDItYmYyNS02YWVjY2Y3ZWE0MTkiLCJ0eXBlIjoiQVBJX0tFWSIsIndvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWMyNS00ZDAyLWJmMjUtNmFlY2NmN2VhNDE5IiwiaWF0IjoxNzM1Njg5NjAwLCJleHAiOjQ4OTE0NDk2MDAsImp0aSI6IjIwMjAyMDIwLWY0MDEtNGQ4YS1hNzMxLTY0ZDAwN2MyN2JhZCJ9.bfQjfyN0NEtTCLE_xPyNcwonDzlSXFoP8kdCQTdnuDc
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Start twenty-app-dev-test container
-      shell: bash
-      run: |
-        docker run -d \
-          --name twenty-app-dev-test \
-          -p 2021:2021 \
-          -e NODE_PORT=2021 \
-          -e SERVER_URL=http://localhost:2021 \
-          twentycrm/twenty-app-dev:${{ inputs.twenty-version }}
-
-        echo "Waiting for Twenty test instance to become healthy…"
-        TIMEOUT=180
-        ELAPSED=0
-        until curl -sf http://localhost:2021/healthz > /dev/null 2>&1; do
-          if [ "$ELAPSED" -ge "$TIMEOUT" ]; then
-            echo "::error::Twenty did not become healthy within ${TIMEOUT}s"
-            docker logs twenty-app-dev-test 2>&1 | tail -80
-            exit 1
-          fi
-          sleep 3
-          ELAPSED=$((ELAPSED + 3))
-          echo "  … waited ${ELAPSED}s"
-        done
-        echo "Twenty test instance is ready at http://localhost:2021 (took ~${ELAPSED}s)"

.github/actions/spawn-twenty-docker-image/action.yaml

@@ -1,88 +0,0 @@
-name: Spawn Twenty Docker Image
-description: >
-  Starts a full Twenty instance (server, worker, database, redis) using Docker
-  Compose. The server is available at http://localhost:3000 for subsequent steps
-  in the caller's job.
-  Accepts "latest" (pulls the latest Docker Hub image, checks out main) or a
-  semver tag (e.g., v0.40.0).
-  Designed to be consumed from external repositories (e.g., twenty-app).
-
-inputs:
-  twenty-version:
-    description: 'Twenty Docker Hub image tag — either "latest" or a semver tag (e.g., v0.40.0).'
-    required: true
-  twenty-repository:
-    description: 'Twenty repository to checkout docker compose files from.'
-    required: false
-    default: 'twentyhq/twenty'
-  github-token:
-    description: 'GitHub token for cross-repo checkout. Required when calling from an external repository.'
-    required: false
-    default: ${{ github.token }}
-
-outputs:
-  server-url:
-    description: 'URL where the Twenty server can be reached'
-    value: http://localhost:3000
-  access-token:
-    description: 'Admin access token for the Twenty instance'
-    value: ${{ steps.admin-token.outputs.access-token }}
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Resolve version
-      id: resolve
-      shell: bash
-      run: |
-        VERSION="${{ inputs.twenty-version }}"
-        if [ "$VERSION" = "latest" ]; then
-          echo "docker-tag=latest" >> "$GITHUB_OUTPUT"
-          echo "git-ref=main" >> "$GITHUB_OUTPUT"
-        elif echo "$VERSION" | grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+$'; then
-          echo "docker-tag=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "git-ref=$VERSION" >> "$GITHUB_OUTPUT"
-        else
-          echo "::error::twenty-version must be \"latest\" or a semver tag (e.g., v0.40.0). Got: '$VERSION'"
-          exit 1
-        fi
-
-    - name: Checkout docker compose files
-      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-      with:
-        repository: ${{ inputs.twenty-repository }}
-        ref: ${{ steps.resolve.outputs.git-ref }}
-        token: ${{ inputs.github-token }}
-        sparse-checkout: |
-          packages/twenty-docker
-        sparse-checkout-cone-mode: false
-        path: .twenty-spawn
-
-    - name: Prepare environment
-      shell: bash
-      working-directory: ./.twenty-spawn/packages/twenty-docker
-      run: |
-        cp .env.example .env
-        echo "" >> .env
-        echo "TAG=${{ steps.resolve.outputs.docker-tag }}" >> .env
-        echo "APP_SECRET=replace_me_with_a_random_string" >> .env
-        echo "SERVER_URL=http://localhost:3000" >> .env
-
-    - name: Start Twenty instance
-      shell: bash
-      working-directory: ./.twenty-spawn/packages/twenty-docker
-      run: |
-        docker compose up -d --wait || {
-          echo "::error::Docker compose failed to start or health checks timed out"
-          docker compose logs
-          exit 1
-        }
-        echo "Twenty instance is ready at http://localhost:3000"
-
-    - name: Set admin access token
-      id: admin-token
-      shell: bash
-      run: |
-        ACCESS_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik"
-        echo "::add-mask::$ACCESS_TOKEN"
-        echo "access-token=$ACCESS_TOKEN" >> "$GITHUB_OUTPUT"

.github/actions/yarn-install/action.yaml

@@ -7,17 +7,6 @@ inputs:
 runs:
   using: 'composite'
   steps:
-    - name: Free disk space for install
-      if: runner.os == 'Linux'
-      shell: bash
-      run: |
-        # Default GitHub images ship large SDKs this repo does not use; removing
-        # them avoids ENOSPC when restoring or linking a full Yarn node_modules.
-        sudo rm -rf /usr/share/dotnet
-        sudo rm -rf /usr/local/lib/android
-        sudo rm -rf /opt/ghc
-        sudo rm -rf /opt/hostedtoolcache/CodeQL
-        df -h
     - name: Cache primary key builder
       id: globals
       shell: bash
@@ -29,12 +18,12 @@ runs:
         echo "packages/*/node_modules" >> $GITHUB_OUTPUT
         echo 'EOF' >> $GITHUB_OUTPUT
     - name: Setup Node.js and get yarn cache
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ inputs.node-version }}
     - name: Restore node_modules
       id: cache-node-modules
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (restore)
+      uses: actions/cache/restore@v4
       with:
         key: v4-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-${{github.sha}}
         restore-keys: v4-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-
@@ -44,13 +33,10 @@ runs:
       shell: ${{ steps.globals.outputs.ACTION_SHELL }}
       run: |
         yarn config set enableHardenedMode true
-        yarn config set enableScripts false
         yarn --immutable --check-cache
-    # Fork PRs on pull_request already can't write to the base repo's cache (GitHub built-in).
-    # The fork guard is defense-in-depth for pull_request_target, which does have write access.
     - name: Save cache
-      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' && format('{0}', github.event.pull_request.head.repo.fork) != 'true' }}
-      uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (save)
+      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' }}
+      uses: actions/cache/save@v4
       with:
         key: ${{ steps.cache-node-modules.outputs.cache-primary-key }}
         path: ${{ steps.globals.outputs.PATH_TO_CACHE }}

.github/crowdin-app.yml

@@ -4,19 +4,20 @@
 # See https://crowdin.github.io/crowdin-cli/configuration for more information
 #
 
-preserve_hierarchy: true
-base_path: ..
+"preserve_hierarchy": true
+"base_path": ".."
+
+files: [
+  {
+    #
+    # Source files filter - PO files for Lingui
+    #
+    "source": "**/en.po",
 
-files:
-  #
-  # Source files filter - PO files for Lingui
-  #
-  - source: packages/twenty-front/src/locales/en.po
     #
     # Translation files path
     #
-    translation: '%original_path%/%locale%.po'
-  - source: packages/twenty-server/src/engine/core-modules/i18n/locales/en.po
-    translation: '%original_path%/%locale%.po'
-  - source: packages/twenty-emails/src/locales/en.po
-    translation: '%original_path%/%locale%.po'
+    "translation": "%original_path%/%locale%.po",
+  }
+]
+

.github/crowdin-website.yml

@@ -1,23 +0,0 @@
-#
-# Crowdin CLI configuration for Website translations (twenty-website)
-# Project ID: 4
-# See https://crowdin.github.io/crowdin-cli/configuration for more information
-#
-
-project_id: 4
-preserve_hierarchy: true
-base_url: 'https://twenty.api.crowdin.com'
-base_path: ..
-languages_mapping:
-  locale:
-    fr: fr-FR
-
-files:
-  #
-  # Source file - PO file for Lingui
-  #
-  - source: packages/twenty-website/src/locales/en.po
-    #
-    # Translation files path
-    #
-    translation: '%original_path%/%locale%.po'

.github/verdaccio-config.yaml

@@ -1,22 +0,0 @@
-storage: /tmp/verdaccio-storage
-auth:
-  htpasswd:
-    file: /tmp/verdaccio-htpasswd
-    max_users: 100
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-packages:
-  'twenty-sdk':
-    access: $all
-    publish: $all
-  'twenty-client-sdk':
-    access: $all
-    publish: $all
-  'create-twenty-app':
-    access: $all
-    publish: $all
-  '**':
-    access: $all
-    proxy: npmjs
-log: { type: stdout, format: pretty, level: warn }

.github/workflows/cd-deploy-main.yaml

@@ -14,8 +14,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository Dispatch
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches \
-            -f event_type=auto-deploy-main
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.TWENTY_INFRA_TOKEN }}
+          repository: twentyhq/twenty-infra
+          event-type: auto-deploy-main
+          client-payload: '{"github": ${{ toJson(github) }}}' # Passes the entire github context to the downstream workflow

.github/workflows/cd-deploy-tag.yaml

@@ -6,43 +6,17 @@ permissions:
 on:
   push:
     tags:
-      - 'twenty/v*'
-      - 'sdk/v*'
-
-defaults:
-  run:
-    shell: bash --noprofile --norc -euo pipefail {0}
+      - 'v*'
 
 jobs:
-  dispatch-tag:
+  deploy-tag:
     timeout-minutes: 3
     runs-on: ubuntu-latest
     steps:
-      - name: Resolve dispatch event from tag family
-        id: target
-        env:
-          REF_NAME: ${{ github.ref_name }}
-        run: |
-          case "$REF_NAME" in
-            twenty/v*)
-              event_type=auto-deploy-twenty
-              ;;
-            sdk/v*)
-              event_type=auto-publish-npm
-              ;;
-            *)
-              echo "Unsupported tag '$REF_NAME', expected 'twenty/v*' or 'sdk/v*'." >&2
-              exit 1
-              ;;
-          esac
-          printf 'event_type=%s\n' "$event_type" >> "$GITHUB_OUTPUT"
-
       - name: Repository Dispatch
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-          EVENT_TYPE: ${{ steps.target.outputs.event_type }}
-          REF_NAME: ${{ github.ref_name }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches \
-            -f "event_type=$EVENT_TYPE" \
-            -f "client_payload[github][ref_name]=$REF_NAME"
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.TWENTY_INFRA_TOKEN }}
+          repository: twentyhq/twenty-infra
+          event-type: auto-deploy-tag
+          client-payload: '{"github": ${{ toJson(github) }}}' # Passes the entire github context to the downstream workflow

.github/workflows/changed-files.yaml

@@ -21,11 +21,11 @@ jobs:
       any_changed: ${{ steps.changed-files.outputs.any_changed }}
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Check for changed files
         id: changed-files
-        uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45.0.9
+        uses: tj-actions/changed-files@v45
         with:
           files: ${{ inputs.files }}

.github/workflows/ci-ai-catalog-sync.yaml

@@ -1,67 +0,0 @@
-name: AI Catalog Sync
-
-on:
-  schedule:
-    - cron: '0 6 * * *' # Daily at 6 AM UTC
-  workflow_dispatch: # Allow manual trigger
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  sync-catalog:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    env:
-      NODE_OPTIONS: '--max-old-space-size=4096'
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          ref: main
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build dependencies
-        run: npx nx build twenty-shared
-
-      - name: Run catalog sync
-        run: npx nx run twenty-server:ts-node-no-deps-transpile-only -- ./scripts/ai-sync-models-dev.ts
-
-      - name: Check for changes
-        id: changes
-        run: |
-          if git diff --quiet packages/twenty-server/src/engine/metadata-modules/ai/ai-models/ai-providers.json; then
-            echo "changed=false" >> "$GITHUB_OUTPUT"
-          else
-            echo "changed=true" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Create pull request
-        if: steps.changes.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7.0.6
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: 'chore: sync AI model catalog from models.dev'
-          title: 'chore: sync AI model catalog from models.dev'
-          body: |
-            Automated daily sync of `ai-providers.json` from [models.dev](https://models.dev).
-
-            This PR updates pricing, context windows, and model availability based on the latest data.
-            New models meeting inclusion criteria (tool calling, pricing data, context limits) are added automatically.
-            Deprecated models are detected based on cost-efficiency within the same model family.
-
-            **Please review before merging** — verify no critical models were incorrectly deprecated.
-          branch: chore/ai-catalog-sync
-          base: main
-          labels: ai, automated
-          delete-branch: true
-
-      - name: Trigger automerge
-        if: steps.changes.outputs.changed == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=automated-pr-ready

.github/workflows/ci-breaking-changes.yaml

@@ -16,6 +16,8 @@ env:
 
 permissions:
   contents: read
+  pull-requests: write
+  checks: write
 
 jobs:
   changed-files-check:
@@ -35,10 +37,12 @@ jobs:
     runs-on: ubuntu-latest
     services:
       postgres:
-        image: postgres:18
+        image: twentycrm/twenty-postgres-spilo
         env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
         ports:
           - 5432:5432
         options: >-
@@ -66,17 +70,15 @@ jobs:
 
     steps:
       - name: Checkout current branch
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
 
       - name: Try to merge main into current branch
         id: merge_attempt
         run: |
           echo "Attempting to merge main into current branch..."
 
-          git config user.email "ci@twenty.com"
-          git config user.name "CI"
           git fetch origin main
 
           CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
@@ -90,8 +92,8 @@ jobs:
             echo "❌ Merge failed due to conflicts"
             echo "⚠️ Falling back to comparing current branch against main without merge"
 
-            # Abort the failed merge (may not exist if merge never started)
-            git merge --abort 2>/dev/null || true
+            # Abort the failed merge
+            git merge --abort
 
             echo "merged=false" >> $GITHUB_OUTPUT
             echo "BRANCH_STATE=conflicts" >> $GITHUB_ENV
@@ -143,9 +145,7 @@ jobs:
           set_env_var "CLICKHOUSE_PASSWORD" "clickhousePassword"
 
           npx nx run twenty-server:database:init:prod
-
-      - name: Flush cache before seeding current branch
-        run: npx nx command-no-deps twenty-server -- cache:flush
+          npx nx run twenty-server:database:migrate:prod
 
       - name: Seed current branch database with test data
         run: |
@@ -163,21 +163,13 @@ jobs:
       - name: Wait for current branch server to be ready
         run: |
           echo "Waiting for current branch server to start..."
-          timeout=60
+          timeout=300
           interval=5
           elapsed=0
 
-          ADMIN_TOKEN=$(jq -r '.APPLE_JANE_ADMIN_ACCESS_TOKEN' packages/twenty-server/test/integration/constants/test-tokens.json)
-
           while [ $elapsed -lt $timeout ]; do
-            GRAPHQL_RESPONSE=$(curl -s -X POST "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" \
-              -H "Content-Type: application/json" \
-              -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-              -d '{"query":"{ __schema { queryType { name } } }"}' 2>/dev/null || echo '{}')
-
-            if echo "$GRAPHQL_RESPONSE" | jq -e '.data.__schema' > /dev/null 2>&1 && \
-               curl -fsS "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" \
-                 -H "Authorization: Bearer ${ADMIN_TOKEN}" > /dev/null 2>&1; then
+            if curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
+               curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
               echo "Current branch server is ready!"
               break
             fi
@@ -188,7 +180,7 @@ jobs:
           done
 
           if [ $elapsed -ge $timeout ]; then
-            echo "❌ Timed out waiting for current branch server to serve a valid schema."
+            echo "Timeout waiting for current branch server to start"
             echo "Current server log:"
             cat /tmp/current-server.log || echo "No current server log found"
             exit 1
@@ -262,14 +254,6 @@ jobs:
             rm -f /tmp/current-server.pid
           fi
 
-      - name: Flush Redis between server runs
-        run: |
-          # Clear all Redis caches to prevent stale data from the current branch
-          # server contaminating the main branch server. Both servers share the
-          # same Redis instance, and CoreEntityCacheService/WorkspaceCacheService
-          # persist cached entities across process restarts.
-          redis-cli -h localhost -p 6379 FLUSHALL || echo "::warning::Failed to flush Redis"
-
       - name: Checkout main branch
         run: |
           git stash
@@ -314,9 +298,7 @@ jobs:
           set_env_var "CLICKHOUSE_PASSWORD" "clickhousePassword"
 
           npx nx run twenty-server:database:init:prod
-
-      - name: Flush cache before seeding main branch
-        run: npx nx command-no-deps twenty-server -- cache:flush
+          npx nx run twenty-server:database:migrate:prod
 
       - name: Seed main branch database with test data
         run: |
@@ -338,17 +320,9 @@ jobs:
           interval=5
           elapsed=0
 
-          ADMIN_TOKEN=$(jq -r '.APPLE_JANE_ADMIN_ACCESS_TOKEN' packages/twenty-server/test/integration/constants/test-tokens.json)
-
           while [ $elapsed -lt $timeout ]; do
-            GRAPHQL_RESPONSE=$(curl -s -X POST "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" \
-              -H "Content-Type: application/json" \
-              -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-              -d '{"query":"{ __schema { queryType { name } } }"}' 2>/dev/null || echo '{}')
-
-            if echo "$GRAPHQL_RESPONSE" | jq -e '.data.__schema' > /dev/null 2>&1 && \
-               curl -fsS "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" \
-                 -H "Authorization: Bearer ${ADMIN_TOKEN}" > /dev/null 2>&1; then
+            if curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
+               curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
               echo "Main branch server is ready!"
               break
             fi
@@ -359,7 +333,7 @@ jobs:
           done
 
           if [ $elapsed -ge $timeout ]; then
-            echo "❌ Timed out waiting for main branch server to serve a valid schema."
+            echo "Timeout waiting for main branch server to start"
             echo "Main server log:"
             cat /tmp/main-server.log || echo "No main server log found"
             exit 1
@@ -423,43 +397,12 @@ jobs:
           # Clean up temp directory
           rm -rf /tmp/current-branch-files
 
-      - name: Validate downloaded schema files
-        id: validate-schemas
-        run: |
-          valid=true
-
-          for file in main-schema-introspection.json current-schema-introspection.json \
-                      main-metadata-schema-introspection.json current-metadata-schema-introspection.json; do
-            if [ ! -f "$file" ]; then
-              echo "::warning::Missing GraphQL schema file: $file"
-              valid=false
-            elif ! jq -e '.data.__schema' "$file" >/dev/null 2>&1; then
-              echo "::warning::File $file is not a valid GraphQL introspection result. First 200 bytes: $(head -c 200 "$file")"
-              valid=false
-            fi
-          done
-
-          for file in main-rest-api.json current-rest-api.json \
-                      main-rest-metadata-api.json current-rest-metadata-api.json; do
-            if [ ! -f "$file" ]; then
-              echo "::warning::Missing OpenAPI spec file: $file"
-              valid=false
-            elif ! jq -e '.openapi // .swagger' "$file" >/dev/null 2>&1; then
-              echo "::warning::File $file is not a valid OpenAPI spec. First 200 bytes: $(head -c 200 "$file")"
-              valid=false
-            fi
-          done
-
-          echo "valid=$valid" >> $GITHUB_OUTPUT
-
       - name: Install OpenAPI Diff Tool
         run: |
           # Using the Java-based OpenAPITools/openapi-diff via Docker
           echo "Using OpenAPITools/openapi-diff via Docker"
 
       - name: Generate GraphQL Schema Diff Reports
-        id: graphql-diff
-        if: steps.validate-schemas.outputs.valid == 'true'
         run: |
           echo "=== INSTALLING GRAPHQL INSPECTOR CLI ==="
           npm install -g @graphql-inspector/cli
@@ -470,9 +413,9 @@ jobs:
           echo "Checking GraphQL schema for changes..."
           if graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >/dev/null 2>&1; then
             echo "✅ No changes in GraphQL schema"
+            # Don't create a diff file for no changes
           else
             echo "⚠️ Changes detected in GraphQL schema, generating report..."
-            echo "core_breaking=true" >> $GITHUB_OUTPUT
             echo "# GraphQL Schema Changes" > graphql-schema-diff.md
             echo "" >> graphql-schema-diff.md
             graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >> graphql-schema-diff.md 2>&1 || {
@@ -488,9 +431,9 @@ jobs:
           echo "Checking GraphQL metadata schema for changes..."
           if graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >/dev/null 2>&1; then
             echo "✅ No changes in GraphQL metadata schema"
+            # Don't create a diff file for no changes
           else
             echo "⚠️ Changes detected in GraphQL metadata schema, generating report..."
-            echo "metadata_breaking=true" >> $GITHUB_OUTPUT
             echo "# GraphQL Metadata Schema Changes" > graphql-metadata-diff.md
             echo "" >> graphql-metadata-diff.md
             graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >> graphql-metadata-diff.md 2>&1 || {
@@ -507,8 +450,6 @@ jobs:
           ls -la *-diff.md 2>/dev/null || echo "No diff files generated (no changes detected)"
 
       - name: Check REST API Breaking Changes
-        id: rest-diff
-        if: steps.validate-schemas.outputs.valid == 'true'
         run: |
           echo "=== CHECKING REST API FOR BREAKING CHANGES ==="
 
@@ -530,7 +471,6 @@ jobs:
 
             if [ "$incompatible" = "true" ]; then
               echo "❌ Breaking changes detected in REST API"
-              echo "breaking=true" >> $GITHUB_OUTPUT
 
               # Generate breaking changes report
               echo "# REST API Breaking Changes" > rest-api-diff.md
@@ -578,8 +518,6 @@ jobs:
           fi
 
       - name: Check REST Metadata API Breaking Changes
-        id: rest-metadata-diff
-        if: steps.validate-schemas.outputs.valid == 'true'
         run: |
           echo "=== CHECKING REST METADATA API FOR BREAKING CHANGES ==="
 
@@ -601,7 +539,6 @@ jobs:
 
             if [ "$incompatible" = "true" ]; then
               echo "❌ Breaking changes detected in REST Metadata API"
-              echo "breaking=true" >> $GITHUB_OUTPUT
 
               # Generate breaking changes report (only for breaking changes)
               echo "# REST Metadata API Breaking Changes" > rest-metadata-api-diff.md
@@ -647,89 +584,182 @@ jobs:
             echo "::warning::REST Metadata API analysis tool error - continuing workflow"
           fi
 
-      - name: Fail on breaking changes
-        if: steps.validate-schemas.outputs.valid == 'true'
-        run: |
-          breaking=false
-
-          if [ "${{ steps.graphql-diff.outputs.core_breaking }}" = "true" ]; then
-            echo "❌ GraphQL core schema has breaking changes"
-            breaking=true
-            if [ -f graphql-schema-diff.md ]; then
-              echo ""
-              cat graphql-schema-diff.md
-              echo ""
-            fi
-          fi
-
-          if [ "${{ steps.graphql-diff.outputs.metadata_breaking }}" = "true" ]; then
-            echo "❌ GraphQL metadata schema has breaking changes"
-            breaking=true
-            if [ -f graphql-metadata-diff.md ]; then
-              echo ""
-              cat graphql-metadata-diff.md
-              echo ""
-            fi
-          fi
-
-          if [ "${{ steps.rest-diff.outputs.breaking }}" = "true" ]; then
-            echo "❌ REST core API has breaking changes"
-            breaking=true
-            if [ -f rest-api-diff.json ]; then
-              echo ""
-              jq -r '
-                (if (.missingEndpoints | length) > 0 then
-                  "  Removed endpoints:\n" +
-                  (.missingEndpoints | map("    - " + (.method // "?") + " " + (.pathUrl // "?")) | join("\n"))
-                else "" end),
-                (if (.changedOperations | length) > 0 then
-                  "  Changed operations:\n" +
-                  (.changedOperations | map("    - " + (.method // "?") + " " + (.pathUrl // "?")) | join("\n"))
-                else "" end)
-              ' rest-api-diff.json | sed '/^$/d'
-              echo ""
-            fi
-          fi
-
-          if [ "${{ steps.rest-metadata-diff.outputs.breaking }}" = "true" ]; then
-            echo "❌ REST metadata API has breaking changes"
-            breaking=true
-            if [ -f rest-metadata-api-diff.json ]; then
-              echo ""
-              jq -r '
-                (if (.missingEndpoints | length) > 0 then
-                  "  Removed endpoints:\n" +
-                  (.missingEndpoints | map("    - " + (.method // "?") + " " + (.pathUrl // "?")) | join("\n"))
-                else "" end),
-                (if (.changedOperations | length) > 0 then
-                  "  Changed operations:\n" +
-                  (.changedOperations | map("    - " + (.method // "?") + " " + (.pathUrl // "?")) | join("\n"))
-                else "" end)
-              ' rest-metadata-api-diff.json | sed '/^$/d'
-              echo ""
-            fi
-          fi
-
-          if [ "$breaking" = "true" ]; then
-            echo ""
-            echo "This PR introduces breaking changes to the public API."
-            echo "If intentional, deprecate the old endpoint and introduce a new one."
-            echo "See the breaking changes report artifact and PR comment for details."
-            exit 1
-          fi
-
-          echo "✅ No breaking API changes detected"
-
-      - name: Upload breaking changes report
+      - name: Comment API Changes on PR
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/github-script@v7
         with:
-          name: breaking-changes-report
-          path: |
-            *-diff.md
-            *-diff.json
-          if-no-files-found: ignore
-          retention-days: 3
+          script: |
+            const fs = require('fs');
+            let hasChanges = false;
+            let comment = '';
+
+            try {
+              if (fs.existsSync('graphql-schema-diff.md')) {
+                const graphqlDiff = fs.readFileSync('graphql-schema-diff.md', 'utf8');
+                if (graphqlDiff.trim()) {
+                  if (!hasChanges) {
+                    comment = '## 📊 API Changes Report\n\n';
+                    hasChanges = true;
+                  }
+                  comment += '### GraphQL Schema Changes\n' + graphqlDiff + '\n\n';
+                }
+              }
+
+              if (fs.existsSync('graphql-metadata-diff.md')) {
+                const graphqlMetadataDiff = fs.readFileSync('graphql-metadata-diff.md', 'utf8');
+                if (graphqlMetadataDiff.trim()) {
+                  if (!hasChanges) {
+                    comment = '## 📊 API Changes Report\n\n';
+                    hasChanges = true;
+                  }
+                  comment += '### GraphQL Metadata Schema Changes\n' + graphqlMetadataDiff + '\n\n';
+                }
+              }
+
+              if (fs.existsSync('rest-api-diff.md')) {
+                const restDiff = fs.readFileSync('rest-api-diff.md', 'utf8');
+                if (restDiff.trim()) {
+                  if (!hasChanges) {
+                    comment = '## 📊 API Changes Report\n\n';
+                    hasChanges = true;
+                  }
+                  comment += restDiff + '\n\n';
+                }
+              }
+
+              if (fs.existsSync('rest-metadata-api-diff.md')) {
+                const metadataDiff = fs.readFileSync('rest-metadata-api-diff.md', 'utf8');
+                if (metadataDiff.trim()) {
+                  if (!hasChanges) {
+                    comment = '## 📊 API Changes Report\n\n';
+                    hasChanges = true;
+                  }
+                  comment += metadataDiff + '\n\n';
+                }
+              }
+
+              // Only post comment if there are changes
+              if (hasChanges) {
+                // Add branch state information only if there were conflicts
+                const branchState = process.env.BRANCH_STATE || 'unknown';
+                let branchStateNote = '';
+
+                if (branchState === 'conflicts') {
+                  branchStateNote = '\n\n⚠️ **Note**: Could not merge with `main` due to conflicts. This comparison shows changes between the current branch and `main` as separate states.\n';
+                }
+                // Check if there are any breaking changes detected
+                let hasBreakingChanges = false;
+                let breakingChangeNote = '';
+
+                // Check for breaking changes in any of the diff files
+                if (fs.existsSync('rest-api-diff.md')) {
+                  const restDiff = fs.readFileSync('rest-api-diff.md', 'utf8');
+                  if (restDiff.includes('Breaking Changes') || restDiff.includes('🚨') ||
+                      restDiff.includes('Removed Endpoints') || restDiff.includes('Changed Operations')) {
+                    hasBreakingChanges = true;
+                  }
+                }
+
+                if (fs.existsSync('rest-metadata-api-diff.md')) {
+                  const metadataDiff = fs.readFileSync('rest-metadata-api-diff.md', 'utf8');
+                  if (metadataDiff.includes('Breaking Changes') || metadataDiff.includes('🚨') ||
+                      metadataDiff.includes('Removed Endpoints') || metadataDiff.includes('Changed Operations')) {
+                    hasBreakingChanges = true;
+                  }
+                }
+
+                // Also check GraphQL changes for breaking changes indicators
+                if (fs.existsSync('graphql-schema-diff.md')) {
+                  const graphqlDiff = fs.readFileSync('graphql-schema-diff.md', 'utf8');
+                  if (graphqlDiff.includes('Breaking changes') || graphqlDiff.includes('BREAKING')) {
+                    hasBreakingChanges = true;
+                  }
+                }
+
+                if (fs.existsSync('graphql-metadata-diff.md')) {
+                  const graphqlMetadataDiff = fs.readFileSync('graphql-metadata-diff.md', 'utf8');
+                  if (graphqlMetadataDiff.includes('Breaking changes') || graphqlMetadataDiff.includes('BREAKING')) {
+                    hasBreakingChanges = true;
+                  }
+                }
+
+                // Check PR title for "breaking"
+                const prTitle = ${{ toJSON(github.event.pull_request.title) }};
+                const titleContainsBreaking = prTitle.toLowerCase().includes('breaking');
+
+                if (hasBreakingChanges) {
+                  if (titleContainsBreaking) {
+                    breakingChangeNote = '\n\n## ✅ Breaking Change Protocol\n\n' +
+                      '**This PR title contains "breaking" and breaking changes were detected - the CI will fail as expected.**\n\n' +
+                      '📝 **Action Required**: Please add `BREAKING CHANGE:` to your commit message to trigger a major version bump.\n\n' +
+                      'Example:\n```\nfeat: add new API endpoint\n\nBREAKING CHANGE: removed deprecated field from User schema\n```';
+                  } else {
+                    breakingChangeNote = '\n\n## ⚠️ Breaking Change Protocol\n\n' +
+                      '**Breaking changes detected but PR title does not contain "breaking" - CI will pass but action needed.**\n\n' +
+                      '🔄 **Options**:\n' +
+                      '1. **If this IS a breaking change**: Add "breaking" to your PR title and add `BREAKING CHANGE:` to your commit message\n' +
+                      '2. **If this is NOT a breaking change**: The API diff tool may have false positives - please review carefully\n\n' +
+                      'For breaking changes, add to commit message:\n```\nfeat: add new API endpoint\n\nBREAKING CHANGE: removed deprecated field from User schema\n```';
+                  }
+                }
+
+                const COMMENT_MARKER = '<!-- API_CHANGES_REPORT -->';
+                const commentBody = COMMENT_MARKER + '\n' + comment + branchStateNote + '\n⚠️ **Please review these API changes carefully before merging.**' + breakingChangeNote;
+
+                // Get all comments to find existing API changes comment
+                const {data: comments} = await github.rest.issues.listComments({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  issue_number: context.issue.number,
+                });
+
+                // Find our existing comment
+                const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
+
+                if (botComment) {
+                  // Update existing comment
+                  await github.rest.issues.updateComment({
+                    owner: context.repo.owner,
+                    repo: context.repo.repo,
+                    comment_id: botComment.id,
+                    body: commentBody
+                  });
+                  console.log('Updated existing API changes comment');
+                } else {
+                  // Create new comment
+                  await github.rest.issues.createComment({
+                    issue_number: context.issue.number,
+                    owner: context.repo.owner,
+                    repo: context.repo.repo,
+                    body: commentBody
+                  });
+                  console.log('Created new API changes comment');
+                }
+              } else {
+                console.log('No API changes detected - skipping PR comment');
+
+                // Check if there's an existing comment to remove
+                const {data: comments} = await github.rest.issues.listComments({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  issue_number: context.issue.number,
+                });
+
+                const COMMENT_MARKER = '<!-- API_CHANGES_REPORT -->';
+                const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
+
+                if (botComment) {
+                  await github.rest.issues.deleteComment({
+                    owner: context.repo.owner,
+                    repo: context.repo.repo,
+                    comment_id: botComment.id,
+                  });
+                  console.log('Deleted existing API changes comment (no changes detected)');
+                }
+              }
+            } catch (error) {
+              console.log('Could not post comment:', error);
+            }
 
       - name: Cleanup servers
         if: always()
@@ -740,3 +770,17 @@ jobs:
           if [ -f /tmp/main-server.pid ]; then
             kill $(cat /tmp/main-server.pid) || true
           fi
+
+      - name: Upload API specifications and diffs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: api-specifications-and-diffs
+          path: |
+            /tmp/main-server.log
+            /tmp/current-server.log
+            *-api.json
+            *-schema-introspection.json
+            *-diff.md
+            *-diff.json
+

.github/workflows/ci-codex-plugin.yaml

@@ -1,44 +0,0 @@
-name: CI Codex Plugin
-
-on:
-  push:
-    branches:
-      - main
-
-  pull_request:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        package.json
-        packages/twenty-codex-plugin/**
-        .github/workflows/ci-codex-plugin.yaml
-
-  codex-plugin-validate:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch local actions
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Codex Plugin / Validate
-        run: npx nx run twenty-codex-plugin:validate
-
-      - name: Codex Plugin / Test
-        run: npx nx run twenty-codex-plugin:test

.github/workflows/ci-create-app-e2e-minimal.yaml

@@ -1,171 +0,0 @@
-name: CI Create App E2E minimal
-
-on:
-  push:
-    branches:
-      - main
-
-  pull_request:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        packages/create-twenty-app/**
-        packages/twenty-sdk/**
-        packages/twenty-client-sdk/**
-        packages/twenty-shared/**
-        !packages/create-twenty-app/package.json
-        !packages/twenty-sdk/package.json
-        !packages/twenty-client-sdk/package.json
-        !packages/twenty-shared/package.json
-  create-app-e2e-minimal:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest-4-cores
-    services:
-      postgres:
-        image: postgres:18
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    env:
-      PUBLISHABLE_PACKAGES: twenty-client-sdk twenty-sdk create-twenty-app
-      TWENTY_API_URL: http://localhost:3000
-      TWENTY_API_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Set CI version and prepare packages for publish
-        run: |
-          CI_VERSION="0.0.0-ci.$(date +%s)"
-          echo "CI_VERSION=$CI_VERSION" >> $GITHUB_ENV
-          npx nx run-many -t set-local-version -p $PUBLISHABLE_PACKAGES --releaseVersion=$CI_VERSION
-
-      - name: Build packages
-        run: |
-          for pkg in $PUBLISHABLE_PACKAGES; do
-            npx nx build $pkg
-          done
-
-      - name: Install and start Verdaccio
-        run: |
-          npx verdaccio --config .github/verdaccio-config.yaml &
-
-          for i in $(seq 1 30); do
-            if curl -s http://localhost:4873 > /dev/null 2>&1; then
-              echo "Verdaccio is ready"
-              break
-            fi
-            echo "Waiting for Verdaccio... ($i/30)"
-            sleep 1
-          done
-
-      - name: Publish packages to local registry
-        run: |
-          yarn config set npmRegistryServer http://localhost:4873
-          yarn config set unsafeHttpWhitelist --json '["localhost"]'
-          yarn config set npmAuthToken ci-auth-token
-
-          for pkg in $PUBLISHABLE_PACKAGES; do
-            cd packages/$pkg
-            yarn npm publish --tag ci
-            cd ../..
-          done
-
-      - name: Scaffold app using published create-twenty-app
-        run: |
-          npm install -g create-twenty-app@$CI_VERSION --registry http://localhost:4873
-          create-twenty-app --version
-          mkdir -p /tmp/e2e-test-workspace
-          cd /tmp/e2e-test-workspace
-          create-twenty-app test-app --display-name "Test scaffolded app" --description "E2E test scaffolded app" --url http://localhost:3000
-
-      - name: Install scaffolded app dependencies
-        run: |
-          cd /tmp/e2e-test-workspace/test-app
-          echo 'npmRegistryServer: "http://localhost:4873"' >> .yarnrc.yml
-          echo 'unsafeHttpWhitelist: ["localhost"]' >> .yarnrc.yml
-          YARN_ENABLE_IMMUTABLE_INSTALLS=false yarn install --no-immutable
-
-      - name: Verify installed app versions
-        run: |
-          cd /tmp/e2e-test-workspace/test-app
-          echo "--- Checking package.json references correct SDK version ---"
-          node -e "
-            const pkg = require('./package.json');
-            const sdkVersion = pkg.devDependencies['twenty-sdk'];
-            if (!sdkVersion.startsWith('0.0.0-ci.')) {
-              console.error('Expected twenty-sdk version to start with 0.0.0-ci., got:', sdkVersion);
-              process.exit(1);
-            }
-            console.log('SDK version in scaffolded app:', sdkVersion);
-          "
-
-      - name: Verify SDK CLI is available
-        run: |
-          cd /tmp/e2e-test-workspace/test-app
-          npx --no-install twenty --version
-
-      - name: Setup server environment
-        run: npx nx reset:env:e2e-testing-server twenty-server
-
-      - name: Create databases
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-
-      - name: Setup database
-        run: npx nx run twenty-server:database:reset
-
-      - name: Start server
-        run: nohup npx nx start:ci twenty-server &
-
-      - name: Wait for server to be ready
-        run: npx wait-on http://localhost:3000/healthz --timeout 120000 --interval 1000
-
-      - name: Authenticate with twenty-server
-        run: |
-          cd /tmp/e2e-test-workspace/test-app
-          npx --no-install twenty remote:add --api-key ${{ env.TWENTY_API_KEY }} --url ${{ env.TWENTY_API_URL }}
-
-      - name: Run scaffolded app integration test (deploys, installs, and verifies the app)
-        run: |
-          cd /tmp/e2e-test-workspace/test-app
-          yarn test
-
-  ci-create-app-e2e-minimal-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, create-app-e2e-minimal]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-create-app.yaml

@@ -20,7 +20,6 @@ jobs:
     with:
       files: |
         packages/create-twenty-app/**
-        !packages/create-twenty-app/package.json
   create-app-test:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
@@ -30,10 +29,14 @@ jobs:
       matrix:
         task: [lint, typecheck, test]
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Build

.github/workflows/ci-docs.yaml

@@ -21,6 +21,7 @@ jobs:
       files: |
         package.json
         packages/twenty-docs/**
+        eslint.config.mjs
 
   docs-lint:
     needs: changed-files-check
@@ -28,14 +29,19 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - name: Fetch local actions
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+
+      - name: Fetch local actions
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
 
-      - name: Docs / Lint
-        run: npx nx lint twenty-docs
+      - name: Docs / Lint English MDX files
+        run: npx eslint "packages/twenty-docs/{developers,user-guide,twenty-ui,getting-started,snippets}/**/*.mdx" --max-warnings 0
 

.github/workflows/ci-emails.yaml

@@ -25,12 +25,12 @@ jobs:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 10
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Build twenty-emails

.github/workflows/ci-example-app-hello-world.yaml

@@ -1,94 +0,0 @@
-name: CI Example App Hello World
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        packages/twenty-apps/examples/hello-world/**
-        packages/twenty-sdk/**
-        packages/twenty-client-sdk/**
-        packages/twenty-shared/**
-        !packages/twenty-sdk/package.json
-        !packages/twenty-client-sdk/package.json
-        !packages/twenty-shared/package.json
-
-  example-app-hello-world:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    services:
-      postgres:
-        image: postgres:18
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    env:
-      TWENTY_API_URL: http://localhost:3000
-      TWENTY_API_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build SDK packages
-        run: npx nx build twenty-sdk
-
-      - name: Setup server environment
-        run: npx nx reset:env:e2e-testing-server twenty-server
-
-      - name: Create databases
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-
-      - name: Setup database
-        run: npx nx run twenty-server:database:reset
-
-      - name: Start server
-        run: nohup npx nx start:ci twenty-server &
-
-      - name: Wait for server to be ready
-        run: npx wait-on http://localhost:3000/healthz --timeout 120000 --interval 1000
-
-      - name: Run integration tests
-        working-directory: packages/twenty-apps/examples/hello-world
-        run: npx vitest run
-
-  ci-example-app-hello-world-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, example-app-hello-world]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-example-app-postcard.yaml

@@ -1,121 +0,0 @@
-name: CI Example App Postcard
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        packages/twenty-apps/examples/postcard/**
-        packages/twenty-sdk/**
-        packages/twenty-client-sdk/**
-        packages/twenty-shared/**
-        packages/twenty-server/**
-        !packages/twenty-sdk/package.json
-        !packages/twenty-client-sdk/package.json
-        !packages/twenty-shared/package.json
-        !packages/twenty-server/package.json
-
-  example-app-postcard:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    services:
-      postgres:
-        image: postgres:18
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    env:
-      TWENTY_API_URL: http://localhost:3000
-      TWENTY_API_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build SDK packages
-        run: npx nx build twenty-sdk
-
-      - name: Setup server environment
-        run: npx nx reset:env:e2e-testing-server twenty-server
-
-      - name: Create databases
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-
-      - name: Setup database
-        run: npx nx run twenty-server:database:reset
-
-      - name: Start server
-        run: nohup npx nx start:ci twenty-server &
-
-      - name: Wait for server to be ready
-        run: npx wait-on http://localhost:3000/healthz --timeout 120000 --interval 1000
-
-      - name: Run integration tests
-        working-directory: packages/twenty-apps/examples/postcard
-        run: npx vitest run
-
-      - name: Configure remote for SDK CLI
-        run: |
-          mkdir -p ~/.twenty
-          cat > ~/.twenty/config.json <<EOF
-          {
-            "version": 1,
-            "remotes": {
-              "target": {
-                "apiUrl": "${TWENTY_API_URL}",
-                "apiKey": "${TWENTY_API_KEY}",
-                "accessToken": "${TWENTY_API_KEY}"
-              }
-            },
-            "defaultRemote": "target"
-          }
-          EOF
-
-      - name: Deploy postcard app (registry install path)
-        working-directory: packages/twenty-apps/examples/postcard
-        run: node ${{ github.workspace }}/packages/twenty-sdk/dist/cli.cjs deploy --remote target
-
-      - name: Install postcard app (registry install path)
-        working-directory: packages/twenty-apps/examples/postcard
-        run: node ${{ github.workspace }}/packages/twenty-sdk/dist/cli.cjs install --remote target
-
-  ci-example-app-postcard-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, example-app-postcard]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-front-component-renderer.yaml

@@ -1,116 +0,0 @@
-name: CI Front Component Renderer
-
-on:
-  pull_request:
-  merge_group:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    if: github.event_name != 'merge_group'
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        package.json
-        yarn.lock
-        packages/twenty-front-component-renderer/**
-        packages/twenty-sdk/**
-        packages/twenty-shared/**
-        !packages/twenty-sdk/package.json
-  renderer-task:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        task: [build, typecheck, lint]
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Run ${{ matrix.task }}
-        run: npx nx ${{ matrix.task }} twenty-front-component-renderer
-  renderer-sb-build:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build storybook
-        run: npx nx storybook:build twenty-front-component-renderer
-      - name: Upload storybook build
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: storybook-twenty-front-component-renderer
-          path: packages/twenty-front-component-renderer/storybook-static
-          retention-days: 1
-  renderer-sb-test:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    needs: renderer-sb-build
-    env:
-      STORYBOOK_URL: http://localhost:6008
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build dependencies
-        run: npx nx build twenty-sdk
-      - name: Download storybook build
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
-        with:
-          name: storybook-twenty-front-component-renderer
-          path: packages/twenty-front-component-renderer/storybook-static
-      - name: Resolve Playwright version
-        id: playwright-version
-        run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> "$GITHUB_OUTPUT"
-      - name: Cache Playwright browsers
-        id: playwright-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
-        with:
-          path: ~/.cache/ms-playwright
-          key: v4-playwright-browsers-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}
-      - name: Install Playwright
-        if: steps.playwright-cache.outputs.cache-hit != 'true'
-        run: |
-          cd packages/twenty-front-component-renderer
-          npx playwright install chromium
-      - name: Serve storybook & run tests
-        run: |
-          npx http-server packages/twenty-front-component-renderer/storybook-static --port 6008 --silent &
-          timeout 30 bash -c 'until curl -sf http://localhost:6008 > /dev/null 2>&1; do sleep 1; done'
-          npx nx storybook:test twenty-front-component-renderer
-  ci-front-component-renderer-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs:
-      [
-        changed-files-check,
-        renderer-task,
-        renderer-sb-build,
-        renderer-sb-test,
-      ]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-front.yaml

@@ -1,7 +1,8 @@
-name: CI Front
+name: CI Front and E2E
 
 on:
   pull_request:
+
   merge_group:
 
 permissions:
@@ -18,18 +19,22 @@ env:
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         package.json
         yarn.lock
         packages/twenty-front/**
-        packages/twenty-front-component-renderer/**
         packages/twenty-ui/**
         packages/twenty-shared/**
         packages/twenty-sdk/**
-        !packages/twenty-sdk/package.json
+  changed-files-check-e2e:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        packages/**
+        playwright.config.ts
+        .github/workflows/ci-front.yaml
   front-sb-build:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
@@ -38,10 +43,14 @@ jobs:
     env:
       REACT_APP_SERVER_BASE_URL: http://localhost:3000
     steps:
-      - name: Fetch local actions
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch local actions
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Diagnostic disk space issue
@@ -50,19 +59,13 @@ jobs:
         run: npx nx reset:env twenty-front
       - name: Front / Build storybook
         run: npx nx storybook:build twenty-front
-      - name: Upload storybook build
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: storybook-static
-          path: packages/twenty-front/storybook-static
-          retention-days: 1
       - name: Save storybook build cache
         uses: ./.github/actions/save-cache
         with:
           key: ${{ env.STORYBOOK_BUILD_CACHE_KEY_FOR_SAVE_ACTION }}
   front-sb-test:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
     needs: front-sb-build
     strategy:
       fail-fast: false
@@ -72,108 +75,112 @@ jobs:
     env:
       SHARD_COUNTER: 4
       REACT_APP_SERVER_BASE_URL: http://localhost:3000
-      STORYBOOK_URL: http://localhost:6006
     steps:
       - name: Fetch local actions
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build dependencies
+        run: |
+          npx nx build twenty-shared
+          npx nx build twenty-ui
+          npx nx build twenty-sdk
+      - name: Install Playwright
+        run: |
+          cd packages/twenty-front
+          npx playwright install
+      - name: Front / Write .env
+        run: npx nx reset:env twenty-front
+      - name: Run storybook tests
+        run: npx nx storybook:test twenty-front --configuration=${{ matrix.storybook_scope }} --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }}
+      - name: Rename coverage file
+        run: |
+          if [ -f "packages/twenty-front/coverage/storybook/coverage-final.json" ]; then
+            mv packages/twenty-front/coverage/storybook/coverage-final.json packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
+          else
+            echo "Error: coverage-final.json not found"
+            ls -la packages/twenty-front/coverage/storybook/ || echo "Coverage directory does not exist"
+            exit 1
+          fi
+      - name: Upload coverage artifact
+        uses: actions/upload-artifact@v4
+        with:
+          retention-days: 1
+          name: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-${{ matrix.shard }}
+          path: packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
+  merge-reports-and-check-coverage:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    needs: front-sb-test
+    env:
+      PATH_TO_COVERAGE: packages/twenty-front/coverage/storybook
+    strategy:
+      matrix:
+        storybook_scope: [modules, pages, performance]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-*
+          merge-multiple: true
+          path: coverage-artifacts
+      - name: Merge coverage reports
+        run: |
+          mkdir -p ${{ env.PATH_TO_COVERAGE }}
+          npx nyc merge coverage-artifacts ${{ env.PATH_TO_COVERAGE }}/coverage-storybook.json
+      - name: Checking coverage
+        run: npx nx storybook:coverage twenty-front --checkCoverage=true --configuration=${{ matrix.storybook_scope }}
+  front-chromatic-deployment:
+    timeout-minutes: 30
+    if: false
+    needs: front-sb-build
+    runs-on: ubuntu-latest-8-cores
+    env:
+      REACT_APP_SERVER_BASE_URL: http://127.0.0.1:3000
+      CHROMATIC_PROJECT_TOKEN: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Restore storybook build cache
         uses: ./.github/actions/restore-cache
         with:
           key: ${{ env.STORYBOOK_BUILD_CACHE_KEY_FOR_RESTORE_ACTION }}
-      - name: Clean stale storybook vitest cache
-        run: rm -rf packages/twenty-front/node_modules/.cache/storybook
-      - name: Build dependencies
-        run: |
-          npx nx build twenty-shared
-          npx nx build twenty-ui
-          npx nx build twenty-front-component-renderer
-      - name: Download storybook build
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
-        with:
-          name: storybook-static
-          path: packages/twenty-front/storybook-static
-      - name: Resolve Playwright version
-        id: playwright-version
-        run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> "$GITHUB_OUTPUT"
-      - name: Cache Playwright browsers
-        id: playwright-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
-        with:
-          path: ~/.cache/ms-playwright
-          key: v4-playwright-browsers-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}
-      - name: Install Playwright
-        if: steps.playwright-cache.outputs.cache-hit != 'true'
+      - name: Front / Write .env
         run: |
           cd packages/twenty-front
-          npx playwright install chromium
-      - name: Front / Write .env
-        run: npx nx reset:env twenty-front
-      - name: Serve storybook & run tests
-        run: |
-          npx http-server packages/twenty-front/storybook-static --port 6006 --silent &
-          timeout 30 bash -c 'until curl -sf http://localhost:6006 > /dev/null 2>&1; do sleep 1; done'
-          npx nx storybook:test twenty-front --configuration=${{ matrix.storybook_scope }} --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }}
-      # - name: Rename coverage file
-      #   run: |
-      #     if [ -f "packages/twenty-front/coverage/storybook/coverage-final.json" ]; then
-      #       mv packages/twenty-front/coverage/storybook/coverage-final.json packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
-      #     else
-      #       echo "Error: coverage-final.json not found"
-      #       ls -la packages/twenty-front/coverage/storybook/ || echo "Coverage directory does not exist"
-      #       exit 1
-      #     fi
-      # - name: Upload coverage artifact
-      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-      #   with:
-      #     retention-days: 1
-      #     name: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-${{ matrix.shard }}
-      #     path: packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
-  # merge-reports-and-check-coverage:
-  #   timeout-minutes: 30
-  #   runs-on: ubuntu-latest
-  #   needs: front-sb-test
-  #   env:
-  #     PATH_TO_COVERAGE: packages/twenty-front/coverage/storybook
-  #   strategy:
-  #     matrix:
-  #       storybook_scope: [modules, pages, performance]
-  #   steps:
-  #     - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-  #       with:
-  #         fetch-depth: 10
-  #     - name: Install dependencies
-  #       uses: ./.github/actions/yarn-install
-  #     - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
-  #       with:
-  #         pattern: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-*
-  #         merge-multiple: true
-  #         path: coverage-artifacts
-  #     - name: Merge coverage reports
-  #       run: |
-  #         mkdir -p ${{ env.PATH_TO_COVERAGE }}
-  #         npx nyc merge coverage-artifacts ${{ env.PATH_TO_COVERAGE }}/coverage-storybook.json
-  #     - name: Checking coverage
-  #       run: npx nx storybook:coverage twenty-front --checkCoverage=true --configuration=${{ matrix.storybook_scope }}
+          touch .env
+          echo "" >> .env
+          echo "REACT_APP_SERVER_BASE_URL=$REACT_APP_SERVER_BASE_URL" >> .env
+      - name: Publish to Chromatic
+        run: npx nx run twenty-front:chromatic:ci
   front-task:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
     runs-on: ubuntu-latest
     env:
-      NODE_OPTIONS: '--max-old-space-size=6144'
       TASK_CACHE_KEY: front-task-${{ matrix.task }}
     strategy:
       matrix:
         task: [lint, typecheck, test]
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Restore ${{ matrix.task }} cache
@@ -187,7 +194,6 @@ jobs:
           tag: scope:frontend
           tasks: reset:env
       - name: Run ${{ matrix.task }} task
-        id: run-task
         uses: ./.github/actions/nx-affected
         with:
           tag: scope:frontend
@@ -203,24 +209,135 @@ jobs:
     runs-on: ubuntu-latest-8-cores
     env:
       NODE_OPTIONS: "--max-old-space-size=10240"
-      ANALYZE: "true"
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Front / Write .env
         run: npx nx reset:env twenty-front
       - name: Build frontend
         run: npx nx build twenty-front
-      # - name: Upload frontend build artifact
-      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-      #   with:
-      #     name: frontend-build
-      #     path: packages/twenty-front/build
-      #     retention-days: 1
+      - name: Upload frontend build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: frontend-build
+          path: packages/twenty-front/build
+          retention-days: 1
+  e2e-test:
+    runs-on: ubuntu-latest
+    needs: [changed-files-check-e2e, front-build]
+    if: |
+      always() &&
+      needs.changed-files-check-e2e.outputs.any_changed == 'true' &&
+      (needs.front-build.result == 'success' || needs.front-build.result == 'skipped') &&
+      (github.event_name == 'push' || github.event_name == 'merge_group' || (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'run-e2e')))
+    timeout-minutes: 30
+    env:
+      NODE_OPTIONS: "--max-old-space-size=10240"
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: "true"
+          SPILO_PROVIDER: "local"
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      - name: Check system resources
+        run: |
+          echo "Available memory:"
+          free -h
+          echo "Available disk space:"
+          df -h
+          echo "CPU info:"
+          lscpu
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+
+      - name: Install Playwright Browsers
+        run: npx nx setup twenty-e2e-testing
+
+      - name: Setup environment files
+        run: |
+          cp packages/twenty-front/.env.example packages/twenty-front/.env
+          npx nx reset:env:e2e-testing-server twenty-server
+
+      - name: Download frontend build artifact
+        if: needs.front-build.result == 'success'
+        uses: actions/download-artifact@v4
+        with:
+          name: frontend-build
+          path: packages/twenty-front/build
+
+      - name: Build frontend (if not available from front-build)
+        if: needs.front-build.result == 'skipped'
+        run: NODE_ENV=production NODE_OPTIONS="--max-old-space-size=10240" npx nx build twenty-front
+
+      - name: Build server
+        run: npx nx build twenty-server
+
+      - name: Create and setup database
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
+          npx nx run twenty-server:database:reset
+
+      - name: Start server
+        run: |
+          npx nx start twenty-server &
+          echo "Waiting for server to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
+
+      - name: Start frontend
+        run: |
+          npm_config_yes=true npx serve -s packages/twenty-front/build -l 3001 &
+          echo "Waiting for frontend to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3001; do sleep 2; done'
+
+      - name: Start worker
+        run: |
+          npx nx run twenty-server:worker &
+          echo "Worker started"
+
+      - name: Run Playwright tests
+        run: npx nx test twenty-e2e-testing
+
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: playwright-report
+          path: packages/twenty-e2e-testing/run_results/
+          retention-days: 30
+
   ci-front-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
@@ -230,7 +347,7 @@ jobs:
         changed-files-check,
         front-task,
         front-build,
-        # merge-reports-and-check-coverage,
+        merge-reports-and-check-coverage,
         front-sb-test,
         front-sb-build,
       ]
@@ -238,3 +355,12 @@ jobs:
       - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')
         run: exit 1
+  ci-e2e-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [changed-files-check-e2e, e2e-test]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/ci-merge-queue.yaml

@@ -1,138 +0,0 @@
-name: CI Merge Queue
-
-on:
-  merge_group:
-
-  pull_request:
-    types: [labeled, synchronize, opened, reopened]
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  e2e-test:
-    if: >
-      github.event_name == 'merge_group' ||
-      (github.event_name == 'pull_request' &&
-       contains(github.event.pull_request.labels.*.name, 'run-merge-queue'))
-    runs-on: ubuntu-latest-8-cores
-    timeout-minutes: 30
-    env:
-      NODE_OPTIONS: "--max-old-space-size=10240"
-    services:
-      postgres:
-        image: postgres:18
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-        with:
-          node-version: lts/*
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Restore Nx build cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (restore)
-        with:
-          key: v4-e2e-build-${{ github.ref_name }}-${{ github.sha }}
-          restore-keys: |
-            v4-e2e-build-${{ github.ref_name }}-
-            v4-e2e-build-main-
-          path: |
-            .nx
-            node_modules/.cache
-            packages/*/node_modules/.cache
-
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
-
-      - name: Install Playwright Browsers
-        run: npx nx setup twenty-e2e-testing
-
-      - name: Setup environment files
-        run: |
-          cp packages/twenty-front/.env.example packages/twenty-front/.env
-          npx nx reset:env:e2e-testing-server twenty-server
-
-      - name: Build frontend
-        run: NODE_ENV=production npx nx build twenty-front
-
-      - name: Build server
-        run: npx nx build twenty-server
-
-      - name: Save Nx build cache
-        if: always()
-        uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (save)
-        with:
-          key: v4-e2e-build-${{ github.ref_name }}-${{ github.sha }}
-          path: |
-            .nx
-            node_modules/.cache
-            packages/*/node_modules/.cache
-
-      - name: Create and setup database
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-          npx nx run twenty-server:database:reset
-
-      - name: Start server
-        run: |
-          npx nx start twenty-server &
-          echo "Waiting for server to be ready..."
-          timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
-
-      - name: Start frontend
-        run: |
-          npm_config_yes=true npx serve -s packages/twenty-front/build -l 3001 &
-          echo "Waiting for frontend to be ready..."
-          timeout 60 bash -c 'until curl -s http://localhost:3001; do sleep 2; done'
-
-      - name: Start worker
-        run: |
-          npx nx run twenty-server:worker &
-          echo "Worker started"
-
-      - name: Run Playwright tests
-        run: npx nx test twenty-e2e-testing
-
-      - name: Upload Playwright results
-        if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: playwright-results
-          path: |
-            packages/twenty-e2e-testing/run_results/
-            packages/twenty-e2e-testing/test-results/
-          retention-days: 7
-
-  ci-merge-queue-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [e2e-test]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-release-create.yaml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.inputs.ref }}
 
@@ -47,7 +47,7 @@ jobs:
           printf '%s\n' "$VERSION" > version.txt
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
+        uses: peter-evans/create-pull-request@v6
         with:
           branch: release/${{ steps.sanitize.outputs.version }}
           commit-message: "chore: release v${{ steps.sanitize.outputs.version }}"

.github/workflows/ci-release-merge.yaml

@@ -0,0 +1,63 @@
+name: "Release: on merge"
+
+permissions:
+  contents: write
+
+on:
+  pull_request:
+    types:
+      - closed
+
+defaults:
+  run:
+    shell: bash --noprofile --norc -euo pipefail {0}
+
+jobs:
+  tag_and_release:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.merged == true && contains(github.event.pull_request.labels.*.name, 'release')
+    steps:
+      - name: Check PR Author
+        id: check_author
+        env:
+          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
+        run: |
+          set -euo pipefail
+          if [[ "$PR_AUTHOR" != "github-actions[bot]" ]]; then
+            echo "PR author ($PR_AUTHOR) is not trusted. Exiting."
+            exit 1
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: main
+
+      - name: Get version from PR title
+        id: extract_version
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          set -euo pipefail
+          VERSION=$(printf '%s' "$PR_TITLE" | sed -n 's/.*Release v\([0-9][0-9.]*\).*/\1/p')
+          if [ -z "$VERSION" ]; then
+            echo "No valid version found in PR title. Exiting."
+            exit 1
+          fi
+          printf 'VERSION=%s\n' "$VERSION" >> "$GITHUB_ENV"
+
+      - name: Push new tag
+        run: |
+          set -euo pipefail
+          git config --global user.name 'Github Action Deploy'
+          git config --global user.email 'github-action-deploy@twenty.com'
+          git tag "v${{ env.VERSION }}"
+          git push origin "v${{ env.VERSION }}"
+
+      - uses: release-drafter/release-drafter@v5
+        if: contains(github.event.pull_request.labels.*.name, 'create_release')
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag: v${{ env.VERSION }}

.github/workflows/ci-sdk.yaml

@@ -1,9 +1,10 @@
 name: CI SDK
 
 on:
-  pull_request:
   merge_group:
 
+  pull_request:
+
 permissions:
   contents: read
 
@@ -13,14 +14,10 @@ concurrency:
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         packages/twenty-sdk/**
-        packages/twenty-server/**
-        .github/workflows/ci-sdk.yaml
-        !packages/twenty-sdk/package.json
   sdk-test:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
@@ -28,16 +25,23 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        task: [lint, typecheck, test:unit, test:integration]
+        task: [lint, typecheck, test:unit, storybook:build, storybook:test, test:integration]
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Build
         run: npx nx build twenty-sdk
+      - name: Install Playwright
+        if: contains(matrix.task, 'storybook')
+        run: npx playwright install chromium
       - name: Run ${{ matrix.task }} task
         uses: ./.github/actions/nx-affected
         with:
@@ -45,15 +49,17 @@ jobs:
           tasks: ${{ matrix.task }}
   sdk-e2e-test:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
     needs: [changed-files-check, sdk-test]
     if: needs.changed-files-check.outputs.any_changed == 'true'
     services:
       postgres:
-        image: postgres:18
+        image: twentycrm/twenty-postgres-spilo
         env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
         ports:
           - 5432:5432
         options: >-
@@ -66,35 +72,24 @@ jobs:
         ports:
           - 6379:6379
     env:
-      TWENTY_API_URL: http://localhost:3000
-      TWENTY_API_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik
+      NODE_ENV: test
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
-      - name: Build SDK
+      - name: Build
         run: npx nx build twenty-sdk
-      - name: Setup server environment
-        run: npx nx reset:env:e2e-testing-server twenty-server
-      - name: Create databases
+      - name: Server / Create Test DB
         run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
           PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-      - name: Setup database
-        run: npx nx run twenty-server:database:reset
-      - name: Start server
-        run: nohup npx nx start:ci twenty-server > /tmp/twenty-server.log 2>&1 &
-      - name: Wait for server to be ready
-        run: npx wait-on http://localhost:3000/healthz --timeout 120000 --interval 1000
       - name: SDK / Run e2e Tests
-        run: NODE_ENV=test npx vitest run --config ./vitest.e2e.config.ts
-        working-directory: packages/twenty-sdk
-      - name: Server / Dump logs on failure
-        if: failure()
-        run: tail -100 /tmp/twenty-server.log || echo "No server log file found"
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:sdk
+          tasks: test:e2e
   ci-sdk-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5

.github/workflows/ci-server.yaml

@@ -2,6 +2,7 @@ name: CI Server
 
 on:
   pull_request:
+
   merge_group:
 
 permissions:
@@ -12,11 +13,10 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 env:
-  SERVER_BUILD_CACHE_KEY: server-build
+  SERVER_SETUP_CACHE_KEY: server-setup
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
@@ -25,146 +25,21 @@ jobs:
         packages/twenty-server/**
         packages/twenty-front/src/generated/**
         packages/twenty-front/src/generated-metadata/**
-        packages/twenty-front/src/generated-admin/**
-        packages/twenty-client-sdk/**
         packages/twenty-emails/**
         packages/twenty-shared/**
-
-  server-build:
+  server-setup:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Restore server build cache
-        id: restore-server-build-cache
-        uses: ./.github/actions/restore-cache
-        with:
-          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
-      - name: Server / Write .env
-        run: npx nx reset:env twenty-server
-      - name: Server / Build
-        run: npx nx build twenty-server
-      - name: Save server build cache
-        uses: ./.github/actions/save-cache
-        with:
-          key: ${{ steps.restore-server-build-cache.outputs.cache-primary-key }}
-
-  server-lint-typecheck:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
-      - name: Server / Run lint & typecheck
-        uses: ./.github/actions/nx-affected
-        with:
-          tag: scope:backend
-          tasks: lint,typecheck
-
-  server-previous-version-upgrade-mutation-guard:
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Get changed upgrade-version-command files
-        id: changed-files
-        uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45.0.9
-        with:
-          files: |
-            packages/twenty-server/src/database/commands/upgrade-version-command/**
-      - name: Check upgrade version commands are in current version only
-        if: >
-          steps.changed-files.outputs.any_changed == 'true' &&
-          !contains(github.event.pull_request.labels.*.name, 'ci:allow-previous-version-upgrade-mutation')
-        run: |
-          VERSION_CONSTANT_FILE="packages/twenty-server/src/engine/core-modules/upgrade/constants/twenty-current-version.constant.ts"
-
-          CURRENT_VERSION=$(sed -n "s/.*TWENTY_CURRENT_VERSION = '\([0-9.]*\)'.*/\1/p" "$VERSION_CONSTANT_FILE")
-
-          if [ -z "$CURRENT_VERSION" ]; then
-            echo "::error::Could not extract TWENTY_CURRENT_VERSION from $VERSION_CONSTANT_FILE"
-            exit 1
-          fi
-
-          CURRENT_DIR=$(echo "$CURRENT_VERSION" | sed -E 's/^([0-9]+)\.([0-9]+)\..*/\1-\2/')
-
-          echo "Current version: $CURRENT_VERSION (directory: $CURRENT_DIR)"
-
-          ADDED_OFFENDERS=""
-          MODIFIED_OFFENDERS=""
-
-          check_files() {
-            local category="$1"
-            shift
-            for file in "$@"; do
-              VERSION_DIR=$(echo "$file" | sed -n 's|.*upgrade-version-command/\([0-9]*-[0-9]*\)/.*|\1|p')
-
-              if [ -n "$VERSION_DIR" ] && [ "$VERSION_DIR" != "$CURRENT_DIR" ]; then
-                if [ "$category" = "added" ]; then
-                  ADDED_OFFENDERS="$ADDED_OFFENDERS\n  - $file (version directory: $VERSION_DIR)"
-                else
-                  MODIFIED_OFFENDERS="$MODIFIED_OFFENDERS\n  - $file (version directory: $VERSION_DIR)"
-                fi
-              fi
-            done
-          }
-
-          check_files "added" ${{ steps.changed-files.outputs.added_files }}
-          check_files "modified" ${{ steps.changed-files.outputs.modified_files }}
-
-          if [ -n "$ADDED_OFFENDERS" ] || [ -n "$MODIFIED_OFFENDERS" ]; then
-            echo "This PR touches upgrade command files outside the current version directory ($CURRENT_DIR / $CURRENT_VERSION)."
-
-            if [ -n "$ADDED_OFFENDERS" ]; then
-              echo ""
-              echo "New files added to non-current version directories:"
-              echo -e "$ADDED_OFFENDERS"
-            fi
-
-            if [ -n "$MODIFIED_OFFENDERS" ]; then
-              echo ""
-              echo "Existing files modified in non-current version directories:"
-              echo -e "$MODIFIED_OFFENDERS"
-            fi
-
-            echo ""
-            echo "If this is intentional, add the label 'ci:allow-previous-version-upgrade-mutation' to this PR and re-run CI."
-            echo "Otherwise, please move your changes to the current version directory ($CURRENT_DIR)."
-
-            echo "::error::Upgrade commands were added or modified in non-current version directories."
-            exit 1
-          fi
-
-  server-validation:
-    needs: server-build
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
     services:
       postgres:
-        image: postgres:18
+        image: twentycrm/twenty-postgres-spilo
         env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
         ports:
           - 5432:5432
         options: >-
@@ -178,17 +53,23 @@ jobs:
           - 6379:6379
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
-      - name: Restore server build cache
+      - name: Restore server setup
+        id: restore-server-setup-cache
         uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
+          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
       - name: Build twenty-shared
         run: npx nx build twenty-shared
+      - name: Server / Run lint & typecheck
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:backend
+          tasks: lint,typecheck
       - name: Server / Write .env
         run: npx nx reset:env twenty-server
       - name: Server / Build
@@ -198,12 +79,15 @@ jobs:
           PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
           PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
           npx nx run twenty-server:database:init:prod
+          npx nx run twenty-server:database:migrate:prod
       - name: Worker / Run
         run: |
           timeout 30s npx nx run twenty-server:worker || exit_code=$?
           if [ $exit_code -eq 124 ]; then
+            # If timeout was reached (exit code 124), consider it a success
             exit 0
           elif [ $exit_code -ne 0 ]; then
+            # If worker failed for other reasons, fail the build
             exit $exit_code
           fi
       - name: Server / Start
@@ -222,73 +106,56 @@ jobs:
           exit 1
       - name: Server / Check for Pending Migrations
         run: |
-          npx nx database:migrate:generate twenty-server -- --name pending-migration-check || true
+          CORE_MIGRATION_OUTPUT=$(npx nx run twenty-server:typeorm migration:generate core-migration-check -d src/database/typeorm/core/core.datasource.ts || true)
 
-          if ! git diff --quiet; then
-            echo "::error::Unexpected migration files were generated. Please run 'npx nx database:migrate:generate twenty-server -- --name <migration-name>' and commit the result."
-            echo ""
-            echo "The following migration changes were detected:"
-            echo "==================================================="
-            git diff
-            echo "==================================================="
-            echo ""
+          CORE_MIGRATION_FILE=$(ls packages/twenty-server/*core-migration-check.ts 2>/dev/null || echo "")
 
-            git checkout -- .
+          if [ -n "$CORE_MIGRATION_FILE" ]; then
+            echo "::error::Unexpected migration files were generated. Please create a proper migration manually."
+            echo "$CORE_MIGRATION_OUTPUT"
+
+            rm -f packages/twenty-server/*core-migration-check.ts
 
             exit 1
           fi
-      - name: Check for Pending Code Generation
+      - name: GraphQL / Check for Pending Generation
         run: |
-          HAS_ERRORS=false
-
+          # Run GraphQL generation commands
           npx nx run twenty-front:graphql:generate
           npx nx run twenty-front:graphql:generate --configuration=metadata
-          npx nx run twenty-front:graphql:generate --configuration=admin
 
-          if ! git diff --quiet -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata packages/twenty-front/src/generated-admin; then
-            echo "::error::GraphQL schema changes detected. Please run the three graphql:generate configurations ('data', 'metadata', 'admin') and commit the changes."
+          # Check if GraphQL generated files were modified
+          if ! git diff --quiet -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata; then
+            echo "::error::GraphQL schema changes detected. Please run 'npx nx run twenty-front:graphql:generate' and 'npx nx run twenty-front:graphql:generate --configuration=metadata' and commit the changes."
             echo ""
             echo "The following GraphQL schema changes were detected:"
             echo "==================================================="
-            git diff -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata packages/twenty-front/src/generated-admin
+            git diff -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata
             echo "==================================================="
             echo ""
-            HAS_ERRORS=true
-          fi
-
-          npx nx run twenty-client-sdk:generate-metadata-client
-
-          if ! git diff --quiet -- packages/twenty-client-sdk/src/metadata/generated; then
-            echo "::error::SDK metadata client changes detected. Please run 'npx nx run twenty-client-sdk:generate-metadata-client' and commit the changes."
+            echo "Please run 'npx nx run twenty-front:graphql:generate' and 'npx nx run twenty-front:graphql:generate --configuration=metadata' and commit the changes."
             echo ""
-            echo "The following SDK metadata client changes were detected:"
-            echo "==================================================="
-            git diff -- packages/twenty-client-sdk/src/metadata/generated
-            echo "==================================================="
-            echo ""
-            HAS_ERRORS=true
-          fi
-
-          if [ "$HAS_ERRORS" = true ]; then
             exit 1
           fi
+      - name: Save server setup
+        uses: ./.github/actions/save-cache
+        with:
+          key: ${{ steps.restore-server-setup-cache.outputs.cache-primary-key }}
   server-test:
-    needs: server-build
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
+    needs: server-setup
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
-      - name: Restore server build cache
+      - name: Restore server setup
         uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
+          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
       - name: Server / Run Tests
         uses: ./.github/actions/nx-affected
         with:
@@ -297,18 +164,20 @@ jobs:
 
   server-integration-test:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
-    needs: server-build
+    runs-on: ubuntu-latest-8-cores
+    needs: server-setup
     strategy:
       fail-fast: false
       matrix:
-        shard: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]
+        shard: [1, 2, 3, 4, 5, 6, 7, 8]
     services:
       postgres:
-        image: postgres:18
+        image: twentycrm/twenty-postgres-spilo
         env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
         ports:
           - 5432:5432
         options: >-
@@ -338,12 +207,12 @@ jobs:
       ANALYTICS_ENABLED: true
       CLICKHOUSE_URL: "http://default:clickhousePassword@localhost:8123/twenty"
       CLICKHOUSE_PASSWORD: clickhousePassword
-      SHARD_COUNTER: 10
+      SHARD_COUNTER: 8
     steps:
       - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Update .env.test for integrations tests
@@ -354,10 +223,10 @@ jobs:
           echo "BILLING_STRIPE_BASE_PLAN_PRODUCT_ID=test-base-plan-product-id" >> .env.test
           echo "BILLING_STRIPE_WEBHOOK_SECRET=test-webhook-secret" >> .env.test
           echo "BILLING_PLAN_REQUIRED_LINK=http://localhost:3001/stripe-redirection" >> .env.test
-      - name: Restore server build cache
+      - name: Restore server setup
         uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
+          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
       - name: Server / Build
         run: npx nx build twenty-server
       - name: Build dependencies
@@ -378,21 +247,11 @@ jobs:
           tasks: 'test:integration'
           configuration: 'with-db-reset'
           args: --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }}
-
   ci-server-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
     runs-on: ubuntu-latest
-    needs:
-      [
-        changed-files-check,
-        server-build,
-        server-lint-typecheck,
-        server-previous-version-upgrade-mutation-guard,
-        server-validation,
-        server-test,
-        server-integration-test,
-      ]
+    needs: [changed-files-check, server-setup, server-test, server-integration-test]
     steps:
       - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')

.github/workflows/ci-shared.yaml

@@ -1,9 +1,10 @@
 name: CI Shared
 
 on:
-  pull_request:
   merge_group:
 
+  pull_request:
+
 permissions:
   contents: read
 
@@ -13,7 +14,6 @@ concurrency:
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
@@ -23,22 +23,24 @@ jobs:
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
     runs-on: ubuntu-latest
-    env:
-      NODE_OPTIONS: '--max-old-space-size=4096'
     strategy:
       matrix:
         task: [lint, typecheck, test]
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
         with:
-          fetch-depth: 10
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Run ${{ matrix.task }} task
         uses: ./.github/actions/nx-affected
         with:
-          tag: scope:shared
+          tag: scope:frontend
           tasks: ${{ matrix.task }}
   ci-shared-status-check:
     if: always() && !cancelled()

.github/workflows/ci-test-docker-compose.yaml

@@ -1,45 +1,39 @@
-name: CI Docker
+name: CI Docker Compose
 
 permissions:
   contents: read
 
 on:
-  pull_request:
   merge_group:
 
+  pull_request:
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         packages/twenty-docker/**
         docker-compose.yml
-  test-compose:
+  test:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-      # Pull base images through Google's Docker Hub mirror — avoids Docker Hub
-      # rate limits and needs no credentials (this repo is public).
-      - name: Configure Docker Hub mirror
-        run: |
-          echo '{"registry-mirrors":["https://mirror.gcr.io"]}' | sudo tee /etc/docker/daemon.json
-          sudo systemctl restart docker
+        uses: actions/checkout@v4
       - name: Run compose
         run: |
           echo "Patching docker-compose.yml..."
+          # change image to localbuild using yq
           yq eval 'del(.services.server.image)' -i docker-compose.yml
           yq eval '.services.server.build.context = "../../"' -i docker-compose.yml
           yq eval '.services.server.build.dockerfile = "./packages/twenty-docker/twenty/Dockerfile"' -i docker-compose.yml
-          yq eval '.services.server.build.target = "twenty"' -i docker-compose.yml
           yq eval '.services.server.restart = "no"' -i docker-compose.yml
 
           echo "Setting up .env file..."
@@ -95,70 +89,11 @@ jobs:
               echo "Still waiting for server... (${count}/300s)"
           done
         working-directory: ./packages/twenty-docker/
-  test-app-dev:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-      # Pull base images through Google's Docker Hub mirror — avoids Docker Hub
-      # rate limits and needs no credentials (this repo is public).
-      - name: Configure Docker Hub mirror
-        run: |
-          echo '{"registry-mirrors":["https://mirror.gcr.io"]}' | sudo tee /etc/docker/daemon.json
-          sudo systemctl restart docker
-      - name: Create frontend placeholder
-        run: |
-          mkdir -p packages/twenty-front/build
-          echo '<html><body>CI placeholder</body></html>' > packages/twenty-front/build/index.html
-      - name: Build app-dev image
-        run: |
-          docker build \
-            --target twenty-app-dev \
-            -f packages/twenty-docker/twenty/Dockerfile \
-            -t twenty-app-dev-ci \
-            .
-      - name: Start container
-        run: |
-          docker run -d --name twenty-app-dev \
-            -p 2020:2020 \
-            twenty-app-dev-ci
-          docker logs twenty-app-dev -f &
-      - name: Wait for server health
-        run: |
-          echo "Waiting for twenty-app-dev to become healthy..."
-          count=0
-          while true; do
-            status=$(curl -s -o /dev/null -w '%{http_code}' http://localhost:2020/healthz 2>/dev/null || echo "000")
-            if [ "$status" = "200" ]; then
-              echo "Server is healthy!"
-              curl -s http://localhost:2020/healthz
-              break
-            fi
-
-            container_status=$(docker inspect --format='{{.State.Status}}' twenty-app-dev 2>/dev/null || echo "unknown")
-            if [ "$container_status" = "exited" ]; then
-              echo "Container exited unexpectedly"
-              docker logs twenty-app-dev
-              exit 1
-            fi
-
-            count=$((count+1))
-            if [ $count -gt 300 ]; then
-              echo "Server did not become healthy within 5 minutes"
-              docker logs twenty-app-dev
-              exit 1
-            fi
-            echo "Still waiting... (${count}/300s) [HTTP ${status}]"
-            sleep 1
-          done
-  ci-test-docker-status-check:
+  ci-test-docker-compose-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
     runs-on: ubuntu-latest
-    needs: [changed-files-check, test-compose, test-app-dev]
+    needs: [changed-files-check, test]
     steps:
       - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')

.github/workflows/ci-ui.yaml

@@ -1,106 +0,0 @@
-name: CI UI
-
-on:
-  pull_request:
-  merge_group:
-  push:
-    branches: [main]
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  changed-files-check:
-    if: github.event_name == 'pull_request'
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        package.json
-        yarn.lock
-        packages/twenty-ui/**
-        packages/twenty-shared/**
-  ui-task:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        task: [lint, typecheck, test]
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Run ${{ matrix.task }}
-        run: npx nx ${{ matrix.task }} twenty-ui
-  ui-sb-build:
-    needs: changed-files-check
-    if: >-
-      always() &&
-      (github.event_name == 'push' ||
-      needs.changed-files-check.outputs.any_changed == 'true')
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build storybook
-        run: npx nx storybook:build twenty-ui
-      - name: Upload storybook build
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: storybook-twenty-ui
-          path: packages/twenty-ui/storybook-static
-          retention-days: 1
-  ui-sb-test:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    needs: ui-sb-build
-    if: always() && needs.ui-sb-build.result == 'success'
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build dependencies
-        run: npx nx build twenty-shared
-      - name: Download storybook build
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
-        with:
-          name: storybook-twenty-ui
-          path: packages/twenty-ui/storybook-static
-      - name: Install Playwright
-        run: |
-          cd packages/twenty-ui
-          npx playwright install
-      - name: Run storybook tests
-        run: npx nx storybook:test twenty-ui
-      - name: Upload screenshots for visual regression
-        if: always() && !cancelled()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: argos-screenshots-twenty-ui
-          path: packages/twenty-ui/screenshots
-          retention-days: 1
-  ci-ui-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, ui-task, ui-sb-build, ui-sb-test]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-utils.yaml

@@ -9,7 +9,10 @@ on:
     types: [opened, synchronize, reopened, closed]
 
 permissions:
+  actions: write
   checks: write
+  contents: write
+  issues: write
   pull-requests: write
   statuses: write
 
@@ -25,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.action != 'closed'
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@v4
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Utils / Run Danger.js
@@ -38,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.action == 'closed' && github.event.pull_request.merged == true
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@v4
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Run congratulate-dangerfile.js

.github/workflows/ci-website.yaml

@@ -1,53 +1,72 @@
 name: CI Website
 
-on:
-  pull_request:
-  merge_group:
-
 permissions:
   contents: read
 
+on:
+  merge_group:
+
+  pull_request:
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
-    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         package.json
-        yarn.lock
         packages/twenty-website/**
-        packages/twenty-shared/**
-  website-task:
+  website-build:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
+    timeout-minutes: 10
     runs-on: ubuntu-latest
-    env:
-      NODE_OPTIONS: '--max-old-space-size=6144'
-    strategy:
-      matrix:
-        task: [lint, typecheck, test]
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
     steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@v4
         with:
-          fetch-depth: 10
+          fetch-depth: 0
+
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
-      - name: Run ${{ matrix.task }} task
-        uses: ./.github/actions/nx-affected
-        with:
-          tag: scope:website
-          tasks: ${{ matrix.task }}
+
+      - name: Server / Create DB
+        run: PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
+
+      - name: Website / Run migrations
+        run: npx nx database:migrate twenty-website
+        env:
+          DATABASE_PG_URL: postgres://postgres:postgres@localhost:5432/default
+      - name: Website / Build Website
+        run: npx nx build twenty-website
+        env:
+          DATABASE_PG_URL: postgres://postgres:postgres@localhost:5432/default
+          KEYSTATIC_GITHUB_CLIENT_ID: xxx
+          KEYSTATIC_GITHUB_CLIENT_SECRET: xxx
+          KEYSTATIC_SECRET: xxx
+          NEXT_PUBLIC_KEYSTATIC_GITHUB_APP_SLUG: xxx
   ci-website-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
     runs-on: ubuntu-latest
-    needs: [changed-files-check, website-task]
+    needs: [changed-files-check, website-build]
     steps:
       - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')

.github/workflows/ci-zapier.yaml

@@ -1,121 +0,0 @@
-name: CI Zapier
-
-on:
-  pull_request:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-env:
-  SERVER_SETUP_CACHE_KEY: server-setup
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        packages/twenty-zapier/**
-        packages/twenty-server/**
-        !packages/twenty-zapier/package.json
-        !packages/twenty-zapier/CHANGELOG.md
-  server-setup:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    services:
-      postgres:
-        image: postgres:18
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
-
-      - name: Server / Write .env
-        run: npx nx reset:env:e2e-testing-server twenty-server
-
-      - name: Server / Build
-        run: npx nx build twenty-server
-
-      - name: Create and setup database
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-          npx nx run twenty-server:database:reset
-
-      - name: Server / Start
-        run: |
-          npx nx run twenty-server:start:ci &
-          echo "Waiting for server to be ready..."
-          timeout 60 bash -c 'until curl -sf http://localhost:3000/healthz; do sleep 2; done'
-
-      - name: Start worker
-        working-directory: packages/twenty-server
-        run: |
-          NODE_ENV=development node dist/queue-worker/queue-worker.js &
-          echo "Worker started"
-
-      - name: Zapier / Build
-        run: npx nx build twenty-zapier
-
-      - name: Zapier / Run Tests
-        uses: ./.github/actions/nx-affected
-        with:
-          tag: scope:zapier
-          tasks: test
-
-  zapier-test:
-    needs: server-setup
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        task: [lint, typecheck, validate]
-    steps:
-      - name: Fetch custom Github Actions and base branch history
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 10
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-      - name: Build
-        run: npx nx build twenty-zapier
-      - name: Run ${{ matrix.task }} task
-        uses: ./.github/actions/nx-affected
-        with:
-          tag: scope:zapier
-          tasks: ${{ matrix.task }}
-  ci-zapier-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, zapier-test]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/claude.yml

@@ -8,12 +8,10 @@ on:
   pull_request_review:
     types: [submitted]
   issues:
-    types: [opened]
+    types: [opened, assigned]
   repository_dispatch:
     types: [claude-core-team-issues]
 
-permissions: {}
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.issue.number || github.event.pull_request.number || github.event.client_payload.issue_number }}
   cancel-in-progress: false
@@ -21,30 +19,10 @@ concurrency:
 jobs:
   claude:
     if: |
-      (
-        github.event_name == 'issue_comment' &&
-        contains(github.event.comment.body, '@claude') &&
-        github.event.comment.user.type != 'Bot' &&
-        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)
-      ) ||
-      (
-        github.event_name == 'pull_request_review_comment' &&
-        contains(github.event.comment.body, '@claude') &&
-        github.event.comment.user.type != 'Bot' &&
-        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)
-      ) ||
-      (
-        github.event_name == 'pull_request_review' &&
-        contains(github.event.review.body, '@claude') &&
-        github.event.review.user.type != 'Bot' &&
-        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.review.author_association)
-      ) ||
-      (
-        github.event_name == 'issues' &&
-        github.event.action == 'opened' &&
-        (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) &&
-        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.issue.author_association)
-      )
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.type != 'Bot') ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.type != 'Bot') ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.type != 'Bot') ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
     runs-on: ubuntu-latest
     timeout-minutes: 60
     permissions:
@@ -72,14 +50,14 @@ jobs:
           - 6379:6379
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Run Claude Code
         id: claude-code
-        uses: anthropics/claude-code-action@dde2242db6af13460b916652159b6ba19a598f30 # v1
+        uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           additional_permissions: |
@@ -109,7 +87,7 @@ jobs:
             exit 0
           fi
           ISSUE_NUMBER="${{ github.event.issue.number || github.event.pull_request.number }}"
-          ENCODED_BRANCH=$(python3 -c "import urllib.parse, sys; print(urllib.parse.quote(sys.argv[1], safe=''))" "$BRANCH")
+          ENCODED_BRANCH=$(python3 -c "import urllib.parse; print(urllib.parse.quote('$BRANCH', safe=''))")
           PR_URL="https://github.com/${{ github.repository }}/compare/main...${ENCODED_BRANCH}?quick_pull=1"
           BODY="⚠️ Claude ran out of turns before creating a PR. Work has been pushed to [\`$BRANCH\`](https://github.com/${{ github.repository }}/tree/$ENCODED_BRANCH).\n\n[**Create PR →**]($PR_URL)"
           if [ -n "$ISSUE_NUMBER" ]; then
@@ -144,14 +122,14 @@ jobs:
         ports:
           - 6379:6379
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
       - name: Build prompt from dispatch payload
         id: prompt
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
+        uses: actions/github-script@v7
         with:
           script: |
             const p = context.payload.client_payload;
@@ -166,7 +144,7 @@ jobs:
             core.setOutput('issue_number', p.issue_number);
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@dde2242db6af13460b916652159b6ba19a598f30 # v1
+        uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           prompt: ${{ steps.prompt.outputs.prompt }}
@@ -179,18 +157,18 @@ jobs:
                 "PG_DATABASE_URL": "postgres://postgres:postgres@localhost:5432/default"
               }
             }
-      - name: Dispatch response to ci-privileged
+      - name: Post response to source issue
         if: always()
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          REPO: ${{ steps.prompt.outputs.repo }}
-          ISSUE_NUMBER: ${{ steps.prompt.outputs.issue_number }}
-          RUN_ID: ${{ github.run_id }}
-          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=claude-cross-repo-response \
-            -f "client_payload[repo]=$REPO" \
-            -f "client_payload[issue_number]=$ISSUE_NUMBER" \
-            -f "client_payload[run_id]=$RUN_ID" \
-            -f "client_payload[run_url]=$RUN_URL"
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.TWENTY_DISPATCH_TOKEN }}
+          script: |
+            const [owner, repo] = '${{ steps.prompt.outputs.repo }}'.split('/');
+            const issueNumber = parseInt('${{ steps.prompt.outputs.issue_number }}', 10);
+
+            await github.rest.issues.createComment({
+              owner,
+              repo,
+              issue_number: issueNumber,
+              body: `Claude finished processing this request. [See workflow run](${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId})`
+            });

.github/workflows/docs-i18n-pull.yaml

@@ -37,11 +37,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           token: ${{ github.token }}
-          repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
-          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
+          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
 
       - name: Install dependencies
         uses: ./.github/actions/yarn-install
@@ -112,7 +111,7 @@ jobs:
         run: yarn docs:generate-paths
 
       - name: Commit artifacts to pull request branch
-        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        if: github.event_name == 'pull_request'
         run: |
           git add packages/twenty-docs/docs.json packages/twenty-docs/navigation/navigation.template.json packages/twenty-shared/src/constants/DocumentationPaths.ts
           if git diff --staged --quiet --exit-code; then
@@ -151,9 +150,3 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Trigger i18n automerge
-        if: github.event_name != 'pull_request' && steps.check_changes.outputs.changes_detected == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=i18n-pr-ready

.github/workflows/docs-i18n-push.yaml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           token: ${{ github.token }}
           ref: ${{ github.ref }}
@@ -36,7 +36,7 @@ jobs:
         run: yarn docs:generate-navigation-template
 
       - name: Upload docs to Crowdin
-        uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2
+        uses: crowdin/github-action@v2
         with:
           upload_sources: true
           upload_translations: false

.github/workflows/external-contributor-pr-auto-draft.yaml

@@ -1,28 +0,0 @@
-name: Auto-Draft External PRs
-
-on:
-  pull_request_target:
-    types: [opened]
-
-permissions: {}
-
-jobs:
-  dispatch:
-    if: |
-      github.event.pull_request.draft == false &&
-      github.event.pull_request.author_association != 'MEMBER' &&
-      github.event.pull_request.author_association != 'OWNER' &&
-      github.event.pull_request.author_association != 'COLLABORATOR'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Dispatch to ci-privileged
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          PR_NODE_ID: ${{ github.event.pull_request.node_id }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=convert-pr-to-draft \
-            -f "client_payload[pr_number]=$PR_NUMBER" \
-            -f "client_payload[pr_node_id]=$PR_NODE_ID"

.github/workflows/i18n-pull.yaml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           token: ${{ github.token }}
           ref: ${{ github.head_ref || github.ref_name }}
@@ -69,11 +69,13 @@ jobs:
 
       - name: Pull translations from Crowdin
         if: inputs.force_pull || steps.compile_translations_strict.outcome == 'failure'
-        uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2
+        uses: crowdin/github-action@v2
         with:
           upload_sources: false
           upload_translations: false
           download_translations: true
+          source: '**/en.po'
+          translation: '%original_path%/%locale%.po'
           export_only_approved: false
           localization_branch_name: i18n
           base_url: 'https://twenty.api.crowdin.com'
@@ -136,10 +138,3 @@ jobs:
           fi
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Trigger i18n automerge
-        if: steps.compile_translations.outputs.changes_detected == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=i18n-pr-ready

.github/workflows/i18n-push.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@v4
         with:
           token: ${{ github.token }}
           ref: main
@@ -80,7 +80,7 @@ jobs:
 
       - name: Upload missing translations
         if: steps.check_extract_changes.outputs.changes_detected == 'true'
-        uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2
+        uses: crowdin/github-action@v2
         with:
           upload_sources: true
           upload_translations: true
@@ -102,10 +102,3 @@ jobs:
           fi
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Trigger i18n automerge
-        if: steps.check_extract_changes.outputs.changes_detected == 'true' || steps.check_compile_changes.outputs.changes_detected == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=i18n-pr-ready

.github/workflows/i18n-qa-report.yaml

@@ -0,0 +1,118 @@
+# Weekly translation QA report using Crowdin's native QA checks
+
+name: 'Weekly Translation QA Report'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+on:
+  schedule:
+    - cron: '0 9 * * 1' # Every Monday at 9am UTC
+  workflow_dispatch: # Allow manual trigger
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  qa_report:
+    name: Generate QA Report
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+
+      - name: Generate QA report from Crowdin
+        id: generate_report
+        run: |
+          npx ts-node packages/twenty-utils/translation-qa-report.ts || true
+          if [ -f TRANSLATION_QA_REPORT.md ]; then
+            echo "report_generated=true" >> $GITHUB_OUTPUT
+            # Count critical issues (exclude spellcheck)
+            CRITICAL=$(grep -oP '⚠️\s+\K\d+' TRANSLATION_QA_REPORT.md 2>/dev/null || echo "0")
+            echo "critical_issues=$CRITICAL" >> $GITHUB_OUTPUT
+          else
+            echo "report_generated=false" >> $GITHUB_OUTPUT
+            echo "critical_issues=0" >> $GITHUB_OUTPUT
+          fi
+        env:
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
+
+      - name: Create QA branch and commit report
+        if: steps.generate_report.outputs.report_generated == 'true'
+        run: |
+          git config --global user.name 'github-actions'
+          git config --global user.email 'github-actions@twenty.com'
+
+          BRANCH_NAME="i18n-qa-report-$(date +%Y-%m-%d)"
+          git checkout -B $BRANCH_NAME
+
+          git add TRANSLATION_QA_REPORT.md
+          if ! git diff --staged --quiet --exit-code; then
+            git commit -m "docs: weekly translation QA report"
+            git push origin HEAD:$BRANCH_NAME --force
+            echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
+          else
+            echo "No changes to commit"
+            echo "BRANCH_NAME=" >> $GITHUB_ENV
+          fi
+
+      - name: Create pull request
+        if: steps.generate_report.outputs.report_generated == 'true' && env.BRANCH_NAME != ''
+        run: |
+          CRITICAL="${{ steps.generate_report.outputs.critical_issues }}"
+
+          BODY=$(cat <<EOF
+          ## Weekly Translation QA Report
+
+          **Critical issues (excluding spellcheck): $CRITICAL**
+
+          📊 **View in Crowdin**: https://twenty.crowdin.com/u/projects/1/all?filter=qa-issue
+
+          ### For AI-Assisted Fixing
+
+          Open this PR in Cursor and say:
+
+          > "Fix the translation QA issues using the Crowdin API"
+
+          The AI can help fix:
+          - ✅ Variables mismatch (missing/wrong placeholders)
+          - ✅ Escaped Unicode sequences
+          - ⚠️ Tags mismatch
+          - ⚠️ Empty translations
+
+          ### Available Scripts
+
+          \`\`\`bash
+          # View QA report
+          CROWDIN_PERSONAL_TOKEN=xxx npx ts-node packages/twenty-utils/translation-qa-report.ts
+
+          # Fix encoding issues automatically
+          CROWDIN_PERSONAL_TOKEN=xxx npx ts-node packages/twenty-utils/fix-crowdin-translations.ts
+          \`\`\`
+
+          ---
+          *Close without merging after issues are addressed*
+          EOF
+          )
+
+          EXISTING_PR=$(gh pr list --head $BRANCH_NAME --json number --jq '.[0].number' 2>/dev/null || echo "")
+
+          if [ -n "$EXISTING_PR" ]; then
+            gh pr edit $EXISTING_PR --body "$BODY"
+          else
+            gh pr create \
+              --base main \
+              --head $BRANCH_NAME \
+              --title "i18n: Translation QA Report ($CRITICAL critical issues)" \
+              --body "$BODY" || true
+          fi
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/post-ci-comments.yaml

@@ -1,78 +0,0 @@
-name: Post CI Comments
-
-on:
-  workflow_run:
-    workflows: ['GraphQL and OpenAPI Breaking Changes Detection']
-    types: [completed]
-
-permissions:
-  actions: read
-
-jobs:
-  dispatch-breaking-changes:
-    if: github.event.workflow_run.conclusion == 'success'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Get PR number from workflow run
-        id: pr-info
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
-        with:
-          script: |
-            const runId = context.payload.workflow_run.id;
-            const headSha = context.payload.workflow_run.head_sha;
-            const headBranch = context.payload.workflow_run.head_branch;
-            const headRepo = context.payload.workflow_run.head_repository;
-
-            // workflow_run.pull_requests is empty for fork PRs,
-            // so fall back to searching by head SHA
-            let pullRequests = context.payload.workflow_run.pull_requests;
-            let prNumber;
-
-            if (pullRequests && pullRequests.length > 0) {
-              prNumber = pullRequests[0].number;
-            } else {
-              core.info(`pull_requests is empty (likely a fork PR), searching by SHA ${headSha}`);
-              const owner = context.repo.owner;
-              const repo = context.repo.repo;
-              const headLabel = `${headRepo.owner.login}:${headBranch}`;
-
-              const { data: prs } = await github.rest.pulls.list({
-                owner,
-                repo,
-                state: 'open',
-                head: headLabel,
-                per_page: 1,
-              });
-
-              if (prs.length > 0) {
-                prNumber = prs[0].number;
-              }
-            }
-
-            if (!prNumber) {
-              core.info('No pull request found for this workflow run');
-              core.setOutput('has_pr', 'false');
-              return;
-            }
-
-            core.setOutput('pr_number', prNumber);
-            core.setOutput('run_id', runId);
-            core.setOutput('has_pr', 'true');
-            core.info(`PR #${prNumber}, Run ID: ${runId}`);
-
-      - name: Dispatch to ci-privileged
-        if: steps.pr-info.outputs.has_pr == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ steps.pr-info.outputs.pr_number }}
-          RUN_ID: ${{ steps.pr-info.outputs.run_id }}
-          REPOSITORY: ${{ github.repository }}
-          BRANCH_STATE: ${{ github.event.workflow_run.head_branch }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=breaking-changes-report \
-            -f "client_payload[pr_number]=$PR_NUMBER" \
-            -f "client_payload[run_id]=$RUN_ID" \
-            -f "client_payload[repo]=$REPOSITORY" \
-            -f "client_payload[branch_state]=$BRANCH_STATE"

.github/workflows/pr-auto-review-dispatch.yaml

@@ -1,26 +0,0 @@
-name: PR Review Dispatch
-
-on:
-  pull_request_target:
-    types: [ready_for_review, synchronize]
-
-permissions: {}
-
-concurrency:
-  group: pr-review-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  dispatch:
-    if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Dispatch to ci-privileged
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=pr-review \
-            -f "client_payload[pr_number]=$PR_NUMBER"

.github/workflows/preview-env-dispatch.yaml

@@ -1,8 +1,14 @@
 name: 'Preview Environment Dispatch'
 
-permissions: {}
+permissions:
+  contents: write
+  actions: write
+  pull-requests: read
 
 on:
+  # Using pull_request_target instead of pull_request to have access to secrets for external contributors
+  # Security note: This is safe because we're only using the repository-dispatch action with limited scope
+  # and not checking out or running any code from the external contributor's PR
   pull_request_target:
     types: [opened, synchronize, reopened, labeled]
     paths:
@@ -10,6 +16,7 @@ on:
       - packages/twenty-server/**
       - packages/twenty-front/**
       - .github/workflows/preview-env-dispatch.yaml
+      - .github/workflows/preview-env-keepalive.yaml
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -17,31 +24,14 @@ concurrency:
 
 jobs:
   trigger-preview:
-    if: |
-      (github.event.action == 'labeled' && github.event.label.name == 'preview-app') ||
-      (
-        (
-          github.event.pull_request.author_association == 'MEMBER' ||
-          github.event.pull_request.author_association == 'OWNER' ||
-          github.event.pull_request.author_association == 'COLLABORATOR'
-        ) && (
-          github.event.action == 'opened' ||
-          github.event.action == 'synchronize' ||
-          github.event.action == 'reopened'
-        )
-      )
+    if: github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || (github.event.action == 'labeled' && github.event.label.name == 'preview-app')
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - name: Dispatch preview-env to ci-privileged
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-          REPOSITORY: ${{ github.repository }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=preview-environment \
-            -f "client_payload[pr_number]=$PR_NUMBER" \
-            -f "client_payload[pr_head_sha]=$PR_HEAD_SHA" \
-            -f "client_payload[repo]=$REPOSITORY"
+      - name: Trigger preview environment workflow
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          repository: ${{ github.repository }}
+          event-type: preview-environment
+          client-payload: '{"pr_number": "${{ github.event.pull_request.number }}", "pr_head_sha": "${{ github.event.pull_request.head.sha }}", "repo_full_name": "${{ github.repository }}"}'

.github/workflows/preview-env-keepalive.yaml

@@ -0,0 +1,159 @@
+name: 'Preview Environment Keep Alive'
+
+permissions:
+  contents: read
+  pull-requests: write
+
+on:
+  repository_dispatch:
+    types: [preview-environment]
+
+jobs:
+  preview-environment:
+    timeout-minutes: 310
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout PR
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.client_payload.pr_head_sha }}
+      
+      - name: Run compose setup
+        run: |
+          echo "Patching docker-compose.yml..."
+          # change image to localbuild using yq
+          yq eval 'del(.services.server.image)' -i packages/twenty-docker/docker-compose.yml
+          yq eval '.services.server.build.context = "../../"' -i packages/twenty-docker/docker-compose.yml
+          yq eval '.services.server.build.dockerfile = "./packages/twenty-docker/twenty/Dockerfile"' -i packages/twenty-docker/docker-compose.yml
+          
+          yq eval 'del(.services.worker.image)' -i packages/twenty-docker/docker-compose.yml
+          yq eval '.services.worker.build.context = "../../"' -i packages/twenty-docker/docker-compose.yml
+          yq eval '.services.worker.build.dockerfile = "./packages/twenty-docker/twenty/Dockerfile"' -i packages/twenty-docker/docker-compose.yml
+          
+          echo "Adding SIGN_IN_PREFILLED environment variable to server service..."
+          yq eval '.services.server.environment.SIGN_IN_PREFILLED = "${SIGN_IN_PREFILLED}"' -i packages/twenty-docker/docker-compose.yml
+          
+          echo "Setting up .env file..."
+          cp packages/twenty-docker/.env.example packages/twenty-docker/.env
+          
+          echo "Generating secrets..."
+          echo "" >> packages/twenty-docker/.env
+          echo "# === Randomly generated secrets ===" >> packages/twenty-docker/.env
+          echo "APP_SECRET=$(openssl rand -base64 32)" >> packages/twenty-docker/.env
+          echo "PG_DATABASE_PASSWORD=$(openssl rand -hex 16)" >> packages/twenty-docker/.env
+          echo "SIGN_IN_PREFILLED=true" >> packages/twenty-docker/.env
+          echo "Docker compose build..."
+          cd packages/twenty-docker/
+          docker compose build
+        working-directory: ./
+      
+      - name: Create Tunnel
+        id: expose-tunnel
+        uses: codetalkio/expose-tunnel@v1.5.0
+        with:
+          service: bore.pub
+          port: 3000
+      
+      - name: Start services with correct SERVER_URL
+        run: |
+          cd packages/twenty-docker/
+          
+          # Update the SERVER_URL with the tunnel URL
+          echo "Setting SERVER_URL to ${{ steps.expose-tunnel.outputs.tunnel-url }}"
+          sed -i '/SERVER_URL=/d' .env
+          echo "" >> .env
+          echo "SERVER_URL=${{ steps.expose-tunnel.outputs.tunnel-url }}" >> .env
+          
+          # Start the services
+          echo "Docker compose up..."
+          docker compose up -d || {
+              echo "Docker compose failed to start"
+              docker compose logs
+              exit 1
+          }
+          
+          echo "Waiting for services to be ready..."
+          count=0
+          while [ ! $(docker inspect --format='{{.State.Health.Status}}' twenty-db-1) = "healthy" ] || [ ! $(docker inspect --format='{{.State.Health.Status}}' twenty-server-1) = "healthy" ]; do
+              sleep 5
+              count=$((count+1))
+              if [ $count -gt 60 ]; then
+                  echo "Timeout waiting for services to be ready"
+                  docker compose logs
+                  exit 1
+              fi
+              echo "Still waiting for services... ($count/60)"
+          done
+          
+          echo "All services are up and running!"
+        working-directory: ./
+
+      - name: Seed Dev Workspace
+        run: |
+          cd packages/twenty-docker/
+          echo "Seeding full dev workspace..."
+          if ! docker compose exec -T server yarn command:prod -- workspace:seed:dev; then
+            echo "❌ Seeding full dev workspace failed. Dumping server logs..."
+            docker compose logs server
+            exit 1
+          fi
+        working-directory: ./
+
+      - name: Output tunnel URL to logs
+        run: |
+          echo "✅ Preview Environment Ready!"
+          echo "🔗 Preview URL: ${{ steps.expose-tunnel.outputs.tunnel-url }}"
+          echo "⏱️ This environment will be available for 5 hours"
+      
+      - name: Post comment on PR
+        uses: actions/github-script@v6
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            const COMMENT_MARKER = '<!-- PR_PREVIEW_ENV -->';
+            const commentBody = `${COMMENT_MARKER}
+            🚀 **Preview Environment Ready!**
+            
+            Your preview environment is available at: ${{ steps.expose-tunnel.outputs.tunnel-url }}
+            
+            This environment will automatically shut down when the PR is closed or after 5 hours.`;
+            
+            // Get all comments
+            const {data: comments} = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: ${{ github.event.client_payload.pr_number }},
+            });
+            
+            // Find our comment
+            const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
+            
+            if (botComment) {
+              // Update existing comment
+              await github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: botComment.id,
+                body: commentBody
+              });
+              console.log('Updated existing comment');
+            } else {
+              // Create new comment
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: ${{ github.event.client_payload.pr_number }},
+                body: commentBody
+              });
+              console.log('Created new comment');
+            }
+      
+      - name: Keep tunnel alive for 5 hours
+        run: timeout 300m sleep 18000 # Stop on whichever we reach first (300m or 5hour sleep)
+      
+      - name: Cleanup
+        if: always()
+        run: |
+          cd packages/twenty-docker/
+          docker compose down -v
+        working-directory: ./ 

.github/workflows/visual-regression-dispatch.yaml

@@ -1,183 +0,0 @@
-name: Visual Regression Dispatch
-
-# Dispatches visual regression processing to ci-privileged after CI completes.
-# Runs in the context of the base repo (not the fork) so it has access to secrets,
-# making it work for external contributor PRs.
-
-on:
-  workflow_run:
-    workflows: ['CI UI']
-    types: [completed]
-
-permissions:
-  actions: read
-  contents: read
-  pull-requests: read
-
-jobs:
-  dispatch-pr:
-    if: >-
-      github.event.workflow_run.event == 'pull_request' &&
-      github.event.workflow_run.conclusion == 'success'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Check if screenshots artifact exists
-        id: check-artifact
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
-        with:
-          script: |
-            const artifactName = 'argos-screenshots-twenty-ui';
-            const runId = context.payload.workflow_run.id;
-
-            const { data: artifacts } = await github.rest.actions.listWorkflowRunArtifacts({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              run_id: runId,
-            });
-
-            const found = artifacts.artifacts.some(a => a.name === artifactName);
-            core.setOutput('exists', found ? 'true' : 'false');
-
-            if (!found) {
-              core.info(`Artifact "${artifactName}" not found in run ${runId} — skipping`);
-            }
-
-      - name: Get PR number
-        if: steps.check-artifact.outputs.exists == 'true'
-        id: pr-info
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
-        with:
-          script: |
-            const headBranch = context.payload.workflow_run.head_branch;
-            const headRepo = context.payload.workflow_run.head_repository;
-
-            let pullRequests = context.payload.workflow_run.pull_requests;
-            let prNumber;
-
-            if (pullRequests && pullRequests.length > 0) {
-              prNumber = pullRequests[0].number;
-            } else {
-              const headLabel = `${headRepo.owner.login}:${headBranch}`;
-              core.info(`Searching for PR by head label: ${headLabel}`);
-
-              const { data: prs } = await github.rest.pulls.list({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                state: 'open',
-                head: headLabel,
-                per_page: 1,
-              });
-
-              if (prs.length > 0) {
-                prNumber = prs[0].number;
-              }
-            }
-
-            if (!prNumber) {
-              core.info('No pull request found — skipping');
-              core.setOutput('has_pr', 'false');
-              return;
-            }
-
-            core.setOutput('pr_number', prNumber);
-            core.setOutput('has_pr', 'true');
-            core.info(`PR #${prNumber}`);
-
-      - name: Compute merge-base for Argos reference
-        if: steps.check-artifact.outputs.exists == 'true' && steps.pr-info.outputs.has_pr == 'true'
-        id: merge-base
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
-        with:
-          script: |
-            const headSha = context.payload.workflow_run.head_sha;
-
-            try {
-              const { data: comparison } = await github.rest.repos.compareCommitsWithBasehead({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                basehead: `main...${headSha}`,
-              });
-
-              if (comparison.merge_base_commit?.sha) {
-                core.setOutput('sha', comparison.merge_base_commit.sha);
-                core.info(`Merge base: ${comparison.merge_base_commit.sha}`);
-              } else {
-                core.info('Could not determine merge base — will skip reference_commit');
-                core.setOutput('sha', '');
-              }
-            } catch (error) {
-              core.warning(`Failed to compute merge base: ${error instanceof Error ? error.message : String(error)}`);
-              core.setOutput('sha', '');
-            }
-
-      - name: Dispatch to ci-privileged
-        if: steps.check-artifact.outputs.exists == 'true' && steps.pr-info.outputs.has_pr == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ steps.pr-info.outputs.pr_number }}
-          WORKFLOW_RUN_ID: ${{ github.event.workflow_run.id }}
-          REPOSITORY: ${{ github.repository }}
-          BRANCH: ${{ github.event.workflow_run.head_branch }}
-          COMMIT: ${{ github.event.workflow_run.head_sha }}
-          REFERENCE_COMMIT: ${{ steps.merge-base.outputs.sha }}
-        run: |
-          ARGS=(
-            --method POST
-            -f event_type=visual-regression
-            -f "client_payload[pr_number]=$PR_NUMBER"
-            -f "client_payload[run_id]=$WORKFLOW_RUN_ID"
-            -f "client_payload[repo]=$REPOSITORY"
-            -f "client_payload[branch]=$BRANCH"
-            -f "client_payload[commit]=$COMMIT"
-          )
-
-          if [ -n "$REFERENCE_COMMIT" ]; then
-            ARGS+=(-f "client_payload[reference_commit]=$REFERENCE_COMMIT")
-          fi
-
-          gh api repos/twentyhq/ci-privileged/dispatches "${ARGS[@]}"
-
-  dispatch-main:
-    if: >-
-      github.event.workflow_run.event == 'push' &&
-      github.event.workflow_run.head_branch == 'main' &&
-      github.event.workflow_run.conclusion == 'success'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Check if screenshots artifact exists
-        id: check-artifact
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
-        with:
-          script: |
-            const runId = context.payload.workflow_run.id;
-            const { data: artifacts } = await github.rest.actions.listWorkflowRunArtifacts({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              run_id: runId,
-            });
-
-            const found = artifacts.artifacts.some(a => a.name === 'argos-screenshots-twenty-ui');
-            core.setOutput('exists', found ? 'true' : 'false');
-
-            if (!found) {
-              core.info(`Artifact not found in run ${runId} — skipping`);
-            }
-
-      - name: Dispatch to ci-privileged
-        if: steps.check-artifact.outputs.exists == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          WORKFLOW_RUN_ID: ${{ github.event.workflow_run.id }}
-          REPOSITORY: ${{ github.repository }}
-          BRANCH: ${{ github.event.workflow_run.head_branch }}
-          COMMIT: ${{ github.event.workflow_run.head_sha }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            --method POST \
-            -f event_type=visual-regression \
-            -f "client_payload[run_id]=$WORKFLOW_RUN_ID" \
-            -f "client_payload[repo]=$REPOSITORY" \
-            -f "client_payload[branch]=$BRANCH" \
-            -f "client_payload[commit]=$COMMIT"

.github/workflows/website-i18n-pull.yaml

@@ -1,134 +0,0 @@
-# Pull down website translations from Crowdin every two hours or when triggered manually.
-# When force_pull input is true, translations will be pulled regardless of compilation status.
-
-name: 'Pull website translations from Crowdin'
-
-permissions:
-  contents: write
-  pull-requests: write
-
-on:
-  schedule:
-    - cron: '0 */2 * * *' # Every two hours.
-  workflow_dispatch:
-    inputs:
-      force_pull:
-        description: 'Force pull translations regardless of compilation status'
-        required: false
-        type: boolean
-        default: false
-  workflow_call:
-    inputs:
-      force_pull:
-        description: 'Force pull translations regardless of compilation status'
-        required: false
-        type: boolean
-        default: false
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  pull_website_translations:
-    name: Pull website translations
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          token: ${{ github.token }}
-          ref: ${{ github.head_ref || github.ref_name }}
-
-      - name: Setup website i18n branch
-        run: |
-          git fetch origin i18n-website || true
-          git checkout -B i18n-website origin/i18n-website || git checkout -b i18n-website
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build twenty-shared
-        run: npx nx build twenty-shared
-
-      # Strict mode fails if there are missing website translations.
-      - name: Compile website translations
-        id: compile_translations_strict
-        run: npx nx run twenty-website:lingui:compile --strict
-        continue-on-error: true
-
-      - name: Stash any changes before pulling translations
-        run: |
-          git config --global user.name 'github-actions'
-          git config --global user.email 'github-actions@twenty.com'
-          git add .
-          git stash
-
-      - name: Pull website translations from Crowdin
-        if: inputs.force_pull || steps.compile_translations_strict.outcome == 'failure'
-        uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2
-        with:
-          upload_sources: false
-          upload_translations: false
-          download_translations: true
-          source: 'packages/twenty-website/src/locales/en.po'
-          translation: 'packages/twenty-website/src/locales/%locale%.po'
-          export_only_approved: false
-          localization_branch_name: i18n-website
-          base_url: 'https://twenty.api.crowdin.com'
-          auto_approve_imported: false
-          import_eq_suggestions: false
-          download_sources: false
-          push_sources: false
-          skip_untranslated_strings: false
-          skip_untranslated_files: false
-          push_translations: false
-          create_pull_request: false
-          skip_ref_checkout: true
-          dryrun_action: false
-          config: '.github/crowdin-website.yml'
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-          # Website translations project
-          CROWDIN_PROJECT_ID: '4'
-          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
-
-      # As the files are extracted from a Docker container, they belong to root:root.
-      # We need to fix this before the next steps.
-      - name: Fix file permissions
-        run: sudo chown -R runner:docker .
-
-      - name: Compile website translations
-        id: compile_translations
-        run: |
-          npx nx run twenty-website:lingui:compile
-          git status
-          git add packages/twenty-website/src/locales
-          if ! git diff --staged --quiet --exit-code; then
-            git commit -m "chore: compile website translations"
-            echo "changes_detected=true" >> $GITHUB_OUTPUT
-          else
-            echo "changes_detected=false" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Push changes
-        if: steps.compile_translations.outputs.changes_detected == 'true'
-        run: git push origin HEAD:i18n-website
-
-      - name: Create pull request
-        if: steps.compile_translations.outputs.changes_detected == 'true'
-        run: |
-          if git diff --name-only origin/main..HEAD | grep -q .; then
-            gh pr create -B main -H i18n-website --title 'i18n - website translations' --body 'Created by Github action' || true
-          else
-            echo "No file differences between branches, skipping PR creation"
-          fi
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Trigger i18n automerge
-        if: steps.compile_translations.outputs.changes_detected == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=i18n-pr-ready

.github/workflows/website-i18n-push.yaml

@@ -1,110 +0,0 @@
-name: 'Push website translations to Crowdin'
-
-permissions:
-  contents: write
-  pull-requests: write
-
-on:
-  workflow_dispatch:
-  workflow_call:
-  push:
-    branches: ['main']
-    paths:
-      - 'packages/twenty-website/**'
-      - '.github/crowdin-website.yml'
-      - '.github/workflows/website-i18n-push.yaml'
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-jobs:
-  extract_website_translations:
-    name: Extract and upload website translations
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          token: ${{ github.token }}
-          ref: main
-
-      - name: Setup website i18n branch
-        run: |
-          git fetch origin i18n-website || true
-          git checkout -B i18n-website origin/i18n-website || git checkout -b i18n-website
-
-      - name: Install dependencies
-        uses: ./.github/actions/yarn-install
-
-      - name: Build dependencies
-        run: npx nx build twenty-shared
-
-      - name: Extract website translations
-        run: npx nx run twenty-website:lingui:extract
-
-      - name: Check and commit extracted files
-        id: check_extract_changes
-        run: |
-          git config --global user.name 'github-actions'
-          git config --global user.email 'github-actions@twenty.com'
-          git add packages/twenty-website/src/locales
-          if ! git diff --staged --quiet --exit-code; then
-            git commit -m "chore: extract website translations"
-            echo "changes_detected=true" >> $GITHUB_OUTPUT
-          else
-            echo "changes_detected=false" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Compile website translations
-        run: npx nx run twenty-website:lingui:compile
-
-      - name: Check and commit compiled files
-        id: check_compile_changes
-        run: |
-          git config --global user.name 'github-actions'
-          git config --global user.email 'github-actions@twenty.com'
-          git add packages/twenty-website/src/locales/generated
-          if ! git diff --staged --quiet --exit-code; then
-            git commit -m "chore: compile website translations"
-            echo "changes_detected=true" >> $GITHUB_OUTPUT
-          else
-            echo "changes_detected=false" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Push changes and create remote branch if needed
-        if: steps.check_extract_changes.outputs.changes_detected == 'true' || steps.check_compile_changes.outputs.changes_detected == 'true'
-        run: git push origin HEAD:i18n-website
-
-      - name: Upload missing website translations
-        if: steps.check_extract_changes.outputs.changes_detected == 'true'
-        uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2
-        with:
-          upload_sources: true
-          upload_translations: true
-          download_translations: false
-          localization_branch_name: i18n-website
-          base_url: 'https://twenty.api.crowdin.com'
-          config: '.github/crowdin-website.yml'
-        env:
-          # Website translations project
-          CROWDIN_PROJECT_ID: '4'
-          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
-
-      - name: Create a pull request
-        if: steps.check_extract_changes.outputs.changes_detected == 'true' || steps.check_compile_changes.outputs.changes_detected == 'true'
-        run: |
-          if git diff --name-only origin/main..HEAD | grep -q .; then
-            gh pr create -B main -H i18n-website --title 'i18n - website translations' --body 'Created by Github action' || true
-          else
-            echo "No file differences between branches, skipping PR creation"
-          fi
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Trigger i18n automerge
-        if: steps.check_extract_changes.outputs.changes_detected == 'true' || steps.check_compile_changes.outputs.changes_detected == 'true'
-        env:
-          GH_TOKEN: ${{ secrets.TWENTY_INFRA_TOKEN }}
-        run: |
-          gh api repos/twentyhq/twenty-infra/dispatches -f event_type=i18n-pr-ready

.github/workflows/website-preview-dispatch.yaml

@@ -1,69 +0,0 @@
-name: 'Website Preview Dispatch'
-
-permissions:
-  contents: read
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, closed, labeled]
-    paths:
-      - packages/twenty-website/**
-      - .github/workflows/website-preview-dispatch.yaml
-
-concurrency:
-  # Keyed on PR number so independent PRs don't cancel each other. `github.ref`
-  # would resolve to the base branch under pull_request and collide.
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  trigger-build:
-    # Same fork PRs from outside the org don't have `secrets.*` so the dispatch
-    # call would fail anyway — skip explicitly to avoid noise.
-    if: |
-      github.event.pull_request.head.repo.full_name == github.repository &&
-      github.event.action != 'closed' && (
-        (github.event.action == 'labeled' && github.event.label.name == 'preview-website') ||
-        (
-          (
-            github.event.pull_request.author_association == 'MEMBER' ||
-            github.event.pull_request.author_association == 'OWNER' ||
-            github.event.pull_request.author_association == 'COLLABORATOR'
-          ) && contains(fromJSON('["opened","synchronize","reopened"]'), github.event.action)
-        )
-      )
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Dispatch website-preview-build to ci-privileged
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-          PR_HEAD_REF: ${{ github.event.pull_request.head.ref }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=website-preview-build \
-            -f "client_payload[pr_number]=$PR_NUMBER" \
-            -f "client_payload[pr_head_sha]=$PR_HEAD_SHA" \
-            -f "client_payload[pr_head_ref]=$PR_HEAD_REF"
-
-  trigger-cleanup:
-    # Covers both merge and close-without-merge — pull_request `closed` fires
-    # for both. PRs left open forever are covered by OpenNext's
-    # `maxVersionAgeDays: 14` + `maxNumberOfVersions: 50` auto-pruning in
-    # open-next.config.ts, so nothing leaks even if cleanup never runs.
-    if: |
-      github.event.pull_request.head.repo.full_name == github.repository &&
-      github.event.action == 'closed'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Dispatch website-preview-cleanup to ci-privileged
-        env:
-          GH_TOKEN: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-        run: |
-          gh api repos/twentyhq/ci-privileged/dispatches \
-            -f event_type=website-preview-cleanup \
-            -f "client_payload[pr_number]=$PR_NUMBER"

.gitignore

@@ -1,8 +1,6 @@
 **/**/.env
 .DS_Store
 /.idea
-.claude/
-.cursor/debug-*.log
 **/**/node_modules/
 .cache
 
@@ -12,7 +10,6 @@
 .nx/installation
 .nx/cache
 .nx/workspace-data
-.nx/nxw.js
 
 .pnp.*
 .yarn/*
@@ -30,7 +27,7 @@ coverage
 dist
 storybook-static
 *.tsbuildinfo
-.oxlintcache
+.eslintcache
 .nyc_output
 test-results/
 dump.rdb
@@ -51,9 +48,4 @@ dump.rdb
 
 mcp.json
 /.junie/
-/.agents/plugins/marketplace.json
 TRANSLATION_QA_REPORT.md
-.playwright-mcp/
-.playwright-cli/
-output/playwright/
-screenshots/

.mcp.json

@@ -2,8 +2,8 @@
   "mcpServers": {
     "postgres": {
       "type": "stdio",
-      "command": "bash",
-      "args": ["-c", "source packages/twenty-server/.env && npx -y @modelcontextprotocol/server-postgres \"$PG_DATABASE_URL\""],
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-postgres", "${PG_DATABASE_URL}"],
       "env": {}
     },
     "playwright": {

.nx/nxw.js

@@ -0,0 +1,115 @@
+"use strict";
+// This file should be committed to your repository! It wraps Nx and ensures
+// that your local installation matches nx.json.
+// See: https://nx.dev/recipes/installation/install-non-javascript for more info.
+
+
+
+
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = require('fs');
+const path = require('path');
+const cp = require('child_process');
+const installationPath = path.join(__dirname, 'installation', 'package.json');
+function matchesCurrentNxInstall(currentInstallation, nxJsonInstallation) {
+    if (!currentInstallation.devDependencies ||
+        !Object.keys(currentInstallation.devDependencies).length) {
+        return false;
+    }
+    try {
+        if (currentInstallation.devDependencies['nx'] !==
+            nxJsonInstallation.version ||
+            require(path.join(path.dirname(installationPath), 'node_modules', 'nx', 'package.json')).version !== nxJsonInstallation.version) {
+            return false;
+        }
+        for (const [plugin, desiredVersion] of Object.entries(nxJsonInstallation.plugins || {})) {
+            if (currentInstallation.devDependencies[plugin] !== desiredVersion) {
+                return false;
+            }
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function ensureDir(p) {
+    if (!fs.existsSync(p)) {
+        fs.mkdirSync(p, { recursive: true });
+    }
+}
+function getCurrentInstallation() {
+    try {
+        return require(installationPath);
+    }
+    catch {
+        return {
+            name: 'nx-installation',
+            version: '0.0.0',
+            devDependencies: {},
+        };
+    }
+}
+function performInstallation(currentInstallation, nxJson) {
+    fs.writeFileSync(installationPath, JSON.stringify({
+        name: 'nx-installation',
+        devDependencies: {
+            nx: nxJson.installation.version,
+            ...nxJson.installation.plugins,
+        },
+    }));
+    try {
+        cp.execSync('npm i', {
+            cwd: path.dirname(installationPath),
+            stdio: 'inherit',
+        });
+    }
+    catch (e) {
+        // revert possible changes to the current installation
+        fs.writeFileSync(installationPath, JSON.stringify(currentInstallation));
+        // rethrow
+        throw e;
+    }
+}
+function ensureUpToDateInstallation() {
+    const nxJsonPath = path.join(__dirname, '..', 'nx.json');
+    let nxJson;
+    try {
+        nxJson = require(nxJsonPath);
+        if (!nxJson.installation) {
+            console.error('[NX]: The "installation" entry in the "nx.json" file is required when running the nx wrapper. See https://nx.dev/recipes/installation/install-non-javascript');
+            process.exit(1);
+        }
+    }
+    catch {
+        console.error('[NX]: The "nx.json" file is required when running the nx wrapper. See https://nx.dev/recipes/installation/install-non-javascript');
+        process.exit(1);
+    }
+    try {
+        ensureDir(path.join(__dirname, 'installation'));
+        const currentInstallation = getCurrentInstallation();
+        if (!matchesCurrentNxInstall(currentInstallation, nxJson.installation)) {
+            performInstallation(currentInstallation, nxJson);
+        }
+    }
+    catch (e) {
+        const messageLines = [
+            '[NX]: Nx wrapper failed to synchronize installation.',
+        ];
+        if (e instanceof Error) {
+            messageLines.push('');
+            messageLines.push(e.message);
+            messageLines.push(e.stack);
+        }
+        else {
+            messageLines.push(e.toString());
+        }
+        console.error(messageLines.join('\n'));
+        process.exit(1);
+    }
+}
+if (!process.env.NX_WRAPPER_SKIP_INSTALL) {
+    ensureUpToDateInstallation();
+}
+
+require('./installation/node_modules/nx/bin/nx');

.oxfmtrc.jsonc

@@ -1,27 +0,0 @@
-{
-  "$schema": "./node_modules/oxfmt/configuration_schema.json",
-  "singleQuote": true,
-  "trailingComma": "all",
-  "endOfLine": "lf",
-  "printWidth": 80,
-  "sortPackageJson": false,
-  "ignorePatterns": [
-    "**/dist/**",
-    "**/build/**",
-    "**/lib/**",
-    "**/.next/**",
-    "**/coverage/**",
-    "**/generated/**",
-    "**/generated-admin/**",
-    "**/generated-metadata/**",
-    "**/.cache/**",
-    "**/node_modules/**",
-    "**/*.min.js",
-    "**/*.snap",
-    "**/*.md",
-    "**/*.mdx",
-    "**/seed-project/**/*.mjs",
-    "packages/twenty-zapier/build/**",
-    "**/upgrade-version-command/**"
-  ]
-}

.vscode/extensions.json

@@ -1,7 +1,7 @@
 {
   "recommendations": [
     "arcanis.vscode-zipfs",
-    "oxc.oxc-vscode",
+    "dbaeumer.vscode-eslint",
     "esbenp.prettier-vscode",
     "figma.figma-vscode-extension",
     "firsttris.vscode-jest-runner",

.vscode/settings.json

@@ -4,28 +4,25 @@
   "files.insertFinalNewline": true,
   "files.trimTrailingWhitespace": true,
   "[typescript]": {
-    "editor.formatOnSave": true,
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": false,
     "editor.codeActionsOnSave": {
-      "source.fixAll.oxc": "explicit",
+      "source.fixAll.eslint": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
   },
   "[javascript]": {
-    "editor.formatOnSave": true,
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": false,
     "editor.codeActionsOnSave": {
-      "source.fixAll.oxc": "explicit",
+      "source.fixAll.eslint": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
   },
   "[typescriptreact]": {
-    "editor.formatOnSave": true,
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": false,
     "editor.codeActionsOnSave": {
-      "source.fixAll.oxc": "explicit",
+      "source.fixAll.eslint": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
@@ -51,7 +48,7 @@
   "search.exclude": {
     "**/.yarn": true
   },
-  "oxc.lint.enable": true,
+  "eslint.debug": true,
   "files.associations": {
     ".cursorrules": "markdown"
   },

.vscode/twenty.code-workspace

@@ -37,78 +37,35 @@
       "path": "../packages/twenty-zapier"
     },
     {
-      "name": "packages/twenty-oxlint-rules",
-      "path": "../packages/twenty-oxlint-rules"
+      "name": "tools/eslint-rules",
+      "path": "../tools/eslint-rules"
     },
     {
       "name": "packages/twenty-e2e-testing",
       "path": "../packages/twenty-e2e-testing"
-    },
-    {
-      "name": "packages/twenty-docs",
-      "path": "../packages/twenty-docs"
-    },
-    {
-      "name": "packages/create-twenty-app",
-      "path": "../packages/create-twenty-app"
-    },
-    {
-      "name": "packages/twenty-apps",
-      "path": "../packages/twenty-apps"
-    },
-    {
-      "name": "packages/twenty-claude-skills",
-      "path": "../packages/twenty-claude-skills"
-    },
-    {
-      "name": "packages/twenty-cli",
-      "path": "../packages/twenty-cli"
-    },
-    {
-      "name": "packages/twenty-client-sdk",
-      "path": "../packages/twenty-client-sdk"
-    },
-    {
-      "name": "packages/twenty-companion",
-      "path": "../packages/twenty-companion"
-    },
-    {
-      "name": "packages/twenty-front-component-renderer",
-      "path": "../packages/twenty-front-component-renderer"
-    },
-    {
-      "name": "packages/twenty-sdk",
-      "path": "../packages/twenty-sdk"
-    },
-    {
-      "name": "packages/twenty-website",
-      "path": "../packages/twenty-website"
     }
   ],
   "settings": {
     "editor.formatOnSave": false,
     "files.eol": "auto",
     "[typescript]": {
-      "editor.formatOnSave": true,
-      "editor.defaultFormatter": "esbenp.prettier-vscode",
+      "editor.formatOnSave": false,
       "editor.codeActionsOnSave": {
-        "source.fixAll.oxc": "explicit",
+        "source.fixAll.eslint": "explicit",
         "source.addMissingImports": "always"
       }
     },
     "[javascript]": {
-      "editor.formatOnSave": true,
-      "editor.defaultFormatter": "esbenp.prettier-vscode",
+      "editor.formatOnSave": false,
       "editor.codeActionsOnSave": {
-        "source.fixAll.oxc": "explicit",
+        "source.fixAll.eslint": "explicit",
         "source.addMissingImports": "always"
       }
     },
     "[typescriptreact]": {
-      "editor.formatOnSave": true,
-      "editor.defaultFormatter": "esbenp.prettier-vscode",
+      "editor.formatOnSave": false,
       "editor.codeActionsOnSave": {
-        "source.fixAll.oxc": "explicit",
+        "source.fixAll.eslint": "explicit",
         "source.addMissingImports": "always"
       }
     },
@@ -131,7 +88,7 @@
     "typescript.preferences.importModuleSpecifier": "non-relative",
     "[javascript][typescript][typescriptreact]": {
       "editor.codeActionsOnSave": {
-        "source.fixAll.oxc": "explicit",
+        "source.fixAll.eslint": "explicit",
         "source.addMissingImports": "always"
       }
     },
@@ -141,7 +98,6 @@
     "files.exclude": {
       "packages/": true
     },
-    "oxc.lint.enable": true,
     "jest.runMode": "on-demand",
     "jest.disabledWorkspaceFolders": [
       "ROOT",

.yarn/patches/@wyw-in-js-transform-npm-0.7.0-ba641dc99f.patch

@@ -1,58 +0,0 @@
-diff --git a/esm/cache.js b/esm/cache.js
-index 07cf6d7dd99effb9c3464b620ba67a7f445224f5..248bb527923499a6be8065ee7a3613b55819c58c 100644
---- a/esm/cache.js
-+++ b/esm/cache.js
-@@ -69,17 +69,20 @@ export class TransformCacheCollection {
-       this.invalidate(cacheName, filename);
-     });
-   }
--  invalidateIfChanged(filename, content) {
-+  invalidateIfChanged(filename, content, _visited) {
-+    const visited = _visited || new Set();
-+    if (visited.has(filename)) {
-+      return false;
-+    }
-+    visited.add(filename);
-     const fileEntrypoint = this.get('entrypoints', filename);
- 
--    // We need to check all dependencies of the file
--    // because they might have changed as well.
-     if (fileEntrypoint) {
-       for (const [, dependency] of fileEntrypoint.dependencies) {
-         const dependencyFilename = dependency.resolved;
-         if (dependencyFilename) {
-           const dependencyContent = fs.readFileSync(dependencyFilename, 'utf8');
--          this.invalidateIfChanged(dependencyFilename, dependencyContent);
-+          this.invalidateIfChanged(dependencyFilename, dependencyContent, visited);
-         }
-       }
-     }
-diff --git a/lib/cache.js b/lib/cache.js
-index 0762ed7d3c39b31000f7aa7d8156da15403c8e64..6955410cd3c9ec53cf7a01c8346abc4c47fff791 100644
---- a/lib/cache.js
-+++ b/lib/cache.js
-@@ -77,17 +77,20 @@ class TransformCacheCollection {
-       this.invalidate(cacheName, filename);
-     });
-   }
--  invalidateIfChanged(filename, content) {
-+  invalidateIfChanged(filename, content, _visited) {
-+    const visited = _visited || new Set();
-+    if (visited.has(filename)) {
-+      return false;
-+    }
-+    visited.add(filename);
-     const fileEntrypoint = this.get('entrypoints', filename);
- 
--    // We need to check all dependencies of the file
--    // because they might have changed as well.
-     if (fileEntrypoint) {
-       for (const [, dependency] of fileEntrypoint.dependencies) {
-         const dependencyFilename = dependency.resolved;
-         if (dependencyFilename) {
-           const dependencyContent = _nodeFs.default.readFileSync(dependencyFilename, 'utf8');
--          this.invalidateIfChanged(dependencyFilename, dependencyContent);
-+          this.invalidateIfChanged(dependencyFilename, dependencyContent, visited);
-         }
-       }
-     }

.yarnrc.yml

@@ -4,14 +4,6 @@ enableHardenedMode: true
 
 enableInlineHunks: true
 
-enableScripts: false
-
 nodeLinker: node-modules
 
-npmMinimalAgeGate: 3d
-
-npmPreapprovedPackages:
-  - twenty-sdk
-  - twenty-client-sdk
-
-yarnPath: .yarn/releases/yarn-4.13.0.cjs
+yarnPath: .yarn/releases/yarn-4.9.2.cjs

CLAUDE.md

@@ -28,8 +28,6 @@ npx jest path/to/test.test.ts --config=packages/PROJECT/jest.config.mjs
 npx nx test twenty-front      # Frontend unit tests
 npx nx test twenty-server     # Backend unit tests
 npx nx run twenty-server:test:integration:with-db-reset  # Integration tests with DB reset
-# To run an indivual test or a pattern of tests, use the following command:
-cd packages/{workspace} && npx jest "pattern or filename"
 
 # Storybook
 npx nx storybook:build twenty-front
@@ -71,23 +69,15 @@ npx nx build twenty-server
 # Database management
 npx nx database:reset twenty-server         # Reset database
 npx nx run twenty-server:database:init:prod # Initialize database
-npx nx run twenty-server:database:migrate:prod # Run instance commands (fast only)
+npx nx run twenty-server:database:migrate:prod # Run migrations
 
-# Generate an instance command (fast or slow)
-npx nx run twenty-server:database:migrate:generate --name <name> --type <fast|slow>
+# Generate migration (replace [name] with kebab-case descriptive name)
+npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/common/[name] -d src/database/typeorm/core/core.datasource.ts
+
+# Sync metadata
+npx nx run twenty-server:command workspace:sync-metadata
 ```
 
-### Database Inspection (Postgres MCP)
-
-A read-only Postgres MCP server is configured in `.mcp.json`. Use it to:
-- Inspect workspace data, metadata, and object definitions while developing
-- Verify migration results (columns, types, constraints) after running migrations
-- Explore the multi-tenant schema structure (core, metadata, workspace-specific schemas)
-- Debug issues by querying raw data to confirm whether a bug is frontend, backend, or data-level
-- Inspect metadata tables to debug GraphQL schema generation issues
-
-This server is read-only — for write operations (reset, migrations, sync), use the CLI commands above.
-
 ### GraphQL
 ```bash
 # Generate GraphQL types (run after schema changes)
@@ -98,7 +88,7 @@ npx nx run twenty-front:graphql:generate --configuration=metadata
 ## Architecture Overview
 
 ### Tech Stack
-- **Frontend**: React 18, TypeScript, Jotai (state management), Linaria (styling), Vite
+- **Frontend**: React 18, TypeScript, Recoil (state management), Emotion (styling), Vite
 - **Backend**: NestJS, TypeORM, PostgreSQL, Redis, GraphQL (with GraphQL Yoga)
 - **Monorepo**: Nx workspace managed with Yarn 4
 
@@ -110,8 +100,7 @@ packages/
 ├── twenty-ui/             # Shared UI components library
 ├── twenty-shared/         # Common types and utilities
 ├── twenty-emails/         # Email templates with React Email
-├── twenty-website/    # Next.js marketing website
-├── twenty-docs/           # Documentation website
+├── twenty-website/        # Next.js documentation website
 ├── twenty-zapier/         # Zapier integration
 └── twenty-e2e-testing/    # Playwright E2E tests
 ```
@@ -147,7 +136,7 @@ packages/
 - Multi-line comments use multiple `//` lines, not `/** */`
 
 ### State Management
-- **Jotai** for global state: atoms for primitive state, selectors for derived state, atom families for dynamic collections
+- **Recoil** for global state: atoms for primitive state, selectors for derived state, atom families for dynamic collections
 - Component-specific state with React hooks (`useState`, `useReducer` for complex logic)
 - GraphQL cache managed by Apollo Client
 - Use functional state updates: `setState(prev => prev + 1)`
@@ -159,17 +148,14 @@ packages/
 - **Redis** for caching and session management
 - **BullMQ** for background job processing
 
-### Database & Upgrade Commands
+### Database & Migrations
 - **PostgreSQL** as primary database
 - **Redis** for caching and sessions
 - **ClickHouse** for analytics (when enabled)
-- When changing entity files, generate an **instance command** (`database:migrate:generate --name <name> --type <fast|slow>`)
-- **Fast** instance commands handle schema changes; **slow** ones add a `runDataMigration` step for data backfills
-- **Workspace commands** iterate over all active/suspended workspaces for per-workspace upgrades
-- Commands use `@RegisteredInstanceCommand` and `@RegisteredWorkspaceCommand` decorators for automatic discovery
-- Include both `up` and `down` logic in instance commands
-- Never delete or rewrite committed instance command `up`/`down` logic
-- See `packages/twenty-server/docs/UPGRADE_COMMANDS.md` for full documentation
+- Always generate migrations when changing entity files
+- Migration names must be kebab-case (e.g. `add-agent-turn-evaluation`)
+- Include both `up` and `down` logic in migrations
+- Never delete or rewrite committed migrations
 
 ### Utility Helpers
 Use existing helpers from `twenty-shared` instead of manual type guards:
@@ -182,12 +168,12 @@ IMPORTANT: Use Context7 for code generation, setup or configuration steps, or li
 ### Before Making Changes
 1. Always run linting (`lint:diff-with-main`) and type checking after code changes
 2. Test changes with relevant test suites (prefer single-file test runs)
-3. Ensure instance commands are generated for entity changes (`database:migrate:generate`)
+3. Ensure database migrations are generated for entity changes
 4. Check that GraphQL schema changes are backward compatible
 5. Run `graphql:generate` after any GraphQL schema changes
 
 ### Code Style Notes
-- Use **Linaria** for styling with zero-runtime CSS-in-JS (styled-components pattern)
+- Use **Emotion** for styling with styled-components pattern
 - Follow **Nx** workspace conventions for imports
 - Use **Lingui** for internationalization
 - Apply security first, then formatting (sanitize before format)
@@ -200,22 +186,13 @@ IMPORTANT: Use Context7 for code generation, setup or configuration steps, or li
 - Descriptive test names: "should [behavior] when [condition]"
 - Clear mocks between tests with `jest.clearAllMocks()`
 
-## Dev Environment Setup
+## CI Environment (GitHub Actions)
 
-All dev environments (Claude Code web, Cursor, local) use one script:
+When running in CI, the dev environment is **not** pre-configured. Dependencies are installed but builds, env files, and databases are not set up.
 
-```bash
-bash packages/twenty-utils/setup-dev-env.sh
-```
-
-This handles everything: starts Postgres + Redis (auto-detects local services vs Docker), creates databases, and copies `.env` files. Idempotent — safe to run multiple times.
-
-- `--docker` — force Docker mode (uses `packages/twenty-docker/docker-compose.dev.yml`)
-- `--down` — stop services
-- `--reset` — wipe data and restart fresh
+- **Before running tests, builds, lint, type checks, or DB operations**, run: `bash packages/twenty-utils/setup-dev-env.sh`
 - **Skip the setup script** for tasks that only read code — architecture questions, code review, documentation, etc.
-
-**Note:** CI workflows (GitHub Actions) manage services via Actions service containers and run setup steps individually — they don't use this script.
+- The script is idempotent and safe to run multiple times.
 
 ## Important Files
 - `nx.json` - Nx workspace configuration with task definitions

DESIGN.md

@@ -1,159 +0,0 @@
-# Twenty Website — DESIGN.md
-
-> Visual system for the Twenty marketing site. Distilled from `packages/twenty-website/src/theme/`. Loaded by every `impeccable` invocation alongside PRODUCT.md.
-
-## Theme
-
-**Light by default.** A founder browsing a partner profile in daylight on a 14–27 inch monitor is the default scene. The site does ship a `data-scheme="dark"` override (see `css-variables.ts`), but no current public page opts into it. Treat dark as a deferred surface.
-
-## Color
-
-Palette is OKLCH-equivalent neutrals at the surface level. The brand accents (blue, pink, yellow, green) are present in the token system but used sparingly — none of them appear on the partner pages.
-
-### Strategy: Restrained
-
-Tinted neutrals + one accent ≤10%. The accent for partner pages is the deep ink black (`var(--color-black-100)`) used in CTAs and hover states. Anything beyond a hairline border, an icon glyph, or a primary CTA should question whether it needs color at all.
-
-### Tokens (from `src/theme/colors.ts` + `css-variables.ts`)
-
-Neutrals (the workhorses):
-
-| Token | Hex (computed) | Role |
-| --- | --- | --- |
-| `colors.primary.background[100]` | `#ffffff` | Page + card surface |
-| `colors.primary.text[100]` | `#1c1c1c` | Headlines, primary text |
-| `colors.primary.text[80]` | `#1c1c1ccc` | Body text |
-| `colors.primary.text[60]` | `#1c1c1c99` | Eyebrows, meta, captions |
-| `colors.primary.text[40]` | `#1c1c1c66` | Disabled / placeholder |
-| `colors.primary.text[20]` | `#1c1c1c33` | Subtle separators |
-| `colors.primary.text[10]` | `#1c1c1c1a` | Hairline borders |
-| `colors.primary.text[5]` | `#1c1c1c0d` | Subtle fills (rates panel, skill chips) |
-| `colors.primary.border[10]` | `#1c1c1c1a` | Default border |
-| `colors.primary.border[20]` | `#1c1c1c33` | Hover border |
-
-Reverse palette (for dark CTAs):
-
-| Token | Role |
-| --- | --- |
-| `colors.secondary.background[100]` | Filled CTA background (deep ink) |
-| `colors.secondary.text[100]` | Filled CTA text (white) |
-
-Brand accents (currently absent from partner pages; available if needed):
-
-- `colors.accent.blue` — `#4a38f5` / `#8174f8`
-- `colors.accent.pink` — `#ed87fc` / `#f3abfd`
-- `colors.accent.yellow` — `#feffb7` / `#feffd9`
-- `colors.accent.green` — `#89fc9a` / `#b0fdbe`
-- `colors.highlight` — same hue as blue accent
-
-**Do not introduce gradients, glass blurs, or saturated fills on partner pages.** Color is conviction here, not decoration.
-
-## Typography
-
-Three families, each load-balanced via CSS variables:
-
-| Family | Var | Use |
-| --- | --- | --- |
-| `theme.font.family.serif` | `--font-serif` | Headlines, partner names, headline values |
-| `theme.font.family.sans` | `--font-sans` | Body, prose, interactive labels |
-| `theme.font.family.mono` | `--font-mono` | Eyebrows, meta, currency labels, tabular numerics |
-| `theme.font.family.retro` | `--font-retro` | Reserved (not used on partner pages) |
-
-### Weight + Size Contrast
-
-Weights: `light: 300`, `regular: 400`, `medium: 500`. No bold. Hierarchy is driven by scale and family contrast, never by weight alone.
-
-Scale (`theme.font.size(n)` → `calc(var(--font-base) * n)`, where `--font-base: 0.25rem` ≈ 4px):
-
-- Display / h1: size 9–12 (36–48px)
-- h2 / section heads: size 7–8 (28–32px)
-- h3 / card heads: size 5–6 (20–24px)
-- Body / prose: size 4–5 (16–20px)
-- Eyebrow / meta: size 3 (12px) with `letter-spacing: 0.06–0.08em` and `text-transform: uppercase`
-
-Body line length: cap at 65–75ch (the existing `PartnerProfileIntro` uses `max-width: 62ch` — keep that order of magnitude).
-
-### Hierarchy contract
-
-- A serif `<h1>` at size 9 light reads as a partner's name on the detail page.
-- A mono eyebrow above or below it locates the partner (region · city · country).
-- A serif size 6 light reads as a section head.
-- Body prose is sans regular.
-- Currency values are serif (they read as headline numbers, not stats).
-- Currency labels and meta are mono.
-
-## Spacing & Layout
-
-Base unit `4px`. Spacing helper `theme.spacing(n)` returns `n * 4px`. Common rhythms on the partner pages:
-
-- Inter-section gap on the detail page: `theme.spacing(10–14)` — generous, editorial breathing room.
-- Inter-element gap inside a section: `theme.spacing(3–5)`.
-- Card padding: `theme.spacing(6)`.
-- Page horizontal padding: `theme.spacing(4)` mobile, `theme.spacing(10)` ≥ md breakpoint.
-
-### Radius
-
-`theme.radius(n)` returns `n * 2px`. The default card radius is `theme.radius(2)` = 4px. Pills use `999px`. No softer rounding than that.
-
-### Borders
-
-Borders are hairline (`1px solid theme.colors.primary.border[10]`). They define edges quietly. On hover they step to `border[20]`. Never use a chunky border as decoration.
-
-## Components
-
-### Card (PartnerCard, RatesPanel)
-
-White surface, hairline border, 4px radius, 24px padding, soft shadow on hover only:
-
-```css
-background-color: ${theme.colors.primary.background[100]};
-border: 1px solid ${theme.colors.primary.border[10]};
-border-radius: ${theme.radius(2)};
-padding: ${theme.spacing(6)};
-
-&:hover {
-  border-color: ${theme.colors.primary.border[20]};
-  box-shadow: 0 12px 32px -16px rgba(0, 0, 0, 0.18);
-  transform: translateY(-2px);
-}
-```
-
-### Chip / Pill
-
-Rounded `999px`, 1px border, subtle background fill (`primary.text[5]` for filter pills, transparent for chip rows), `text[80]` color, mono or sans font.
-
-### Button / LinkButton
-
-Lives in `@/design-system/components`. Two color modes: `primary` (deep ink fill, white text) and `secondary` (transparent fill, ink text + 1px border). `variant="contained"` is what partner pages use.
-
-### Avatar
-
-`PartnerAvatar` is a deterministic generated mark from name + slug. Used as fallback when `profilePictureUrl` is missing. The real photo overlays it at 120px circle on the detail page, 56px on the list card.
-
-## Motion
-
-- Hover transitions: 250ms, ease-out (cubic-bezier curve in `PartnerCard`: `0.25s ease`).
-- Card entrance: 700ms cubic-bezier `0.22, 1, 0.36, 1` (ease-out-quart), 90ms stagger per index.
-- All motion respects `@media (prefers-reduced-motion: reduce)` — animations stop, hover translate disabled.
-- **No bounce, no elastic, no parallax.** Editorial restraint.
-
-## Iconography
-
-`@tabler/icons-react`, 14–16px on body-level chips, 18–24px on buttons. Always `aria-hidden="true"` when decorative. Stroke width `2` (default).
-
-## Accessibility Defaults
-
-- Focus ring: `outline: 2px solid theme.colors.primary.text[100]; outline-offset: 4px` (already used on the card link).
-- Touch target ≥ 40×40px on mobile.
-- `aria-label` on icon-only buttons, `aria-labelledby` on sectioned regions.
-- All `<a target="_blank">` includes `rel="noopener noreferrer"`.
-- Color is never the sole carrier of meaning. The money pills carry both an icon and a text label.
-
-## Anti-patterns (project-specific)
-
-In addition to the impeccable shared absolute bans:
-
-- **Do not use the brand accent colors (blue/pink/yellow/green) on partner pages** unless we have a stronger reason than "to add color".
-- **No skeuomorphic shadows on cards.** The hover shadow is `0 12px 32px -16px rgba(0,0,0,0.18)` — that's the ceiling.
-- **No gradients on anything.** Including text, borders, and backgrounds.
-- **No floating "Trusted by" logo bars** on partner pages.

PRODUCT.md

@@ -1,80 +0,0 @@
-# Twenty Website — Product & Brand Context
-
-> Strategic context for design work on the Twenty marketing site (`packages/twenty-website`). Loaded by every `impeccable` invocation.
-
-## Register
-
-**Brand.** The marketing site is a public-facing surface where the design itself is part of the credibility argument. Prospects evaluate Twenty partly by how the site feels. The product app (`packages/twenty-front`) is a separate product-register surface, governed elsewhere.
-
-## Users & Purpose
-
-The primary audience varies by route, but the working assumption for partner-related pages is:
-
-- **Who:** A budget-holding decision maker (founder, RevOps lead, or COO) shopping for a CRM implementation partner. Already on Twenty's site, evaluating a shortlist of partners.
-- **Context:** Doing a side-by-side comparison across 2–5 candidates over a single browsing session. Will spend 30–90 seconds on each profile before deciding whether to book a call.
-- **Decision being made:** "Is this partner credible, the right size, the right specialty, and within budget? Do I trust them enough to commit 30 minutes to a discovery call?"
-
-What the partner pages must do, in priority order:
-1. Communicate credibility (real firm, real person, real work).
-2. Surface fit signals fast (skills, region, languages, deployment expertise, budget range).
-3. Give the visitor a confident "next step" affordance (book a call or vet via LinkedIn) without pressure.
-
-## Desired Outcome
-
-The redesign should make `/partners/profile/[slug]` feel like a *thoughtfully curated profile of a top-tier partner*, not a generic templated card. A visitor should leave thinking "this firm is serious" even if they don't book a call this session.
-
-Specifically:
-- **Confidence over information density.** A short, well-typeset profile beats a packed-but-busy one.
-- **Editorial restraint.** White space, deliberate type hierarchy, and a few well-chosen details say more than dozens of small components.
-- **Quiet conviction.** No hype copy, no growth-hack patterns, no "Trusted by" logo strips. The partner's own work and intro speak for themselves.
-
-## Brand Personality
-
-**Editorial · Founder-led · Considered.**
-
-The site reads like a thoughtful indie publication, not a SaaS landing page. Serif headlines, plenty of whitespace, deliberate typographic rhythm. Quietly opinionated — Twenty has a point of view about CRM (open-source, customizable, well-designed) and the site reflects that without shouting.
-
-Tonal anchors:
-- Stripe's documentation for clarity, Linear's marketing for restraint, an editorial print magazine for typography choices.
-
-## Anti-references
-
-**Reject these patterns. They make the work read as generic AI / generic SaaS:**
-
-- **Generic SaaS landing.** Big-number heroes, identical icon-grid cards, gradient text, navy + lime accent color schemes, "supercharge your workflow" language.
-- **Corporate enterprise tone.** Stock photos of diverse handshakes. "Trusted by Fortune 500" logo strips as the primary credibility move. Trust-badge bars.
-- **Bento templates.** Repetitive same-size cards. Vercel-style scroll-pin animations on every section.
-- **Side-stripe borders, gradient text, glassmorphism, hero-metric templates, identical card grids** — see impeccable's shared absolute bans.
-
-## Strategic Design Principles
-
-1. **Typography carries the design.** The brand has a serif/sans/mono trio. Hierarchy is set by scale + weight contrast, not by color or borders.
-2. **Restrained palette.** Tinted neutrals (black/white via CSS variables, with alpha-tone variants for text and borders) carry 90%+ of the surface. Accent color used sparingly when it appears at all.
-3. **Whitespace is a feature.** Tight cards feel cheap. Pages should breathe.
-4. **Asymmetry over grid.** A 12-col bento is the wrong shape for a profile page. Use asymmetric two-column layouts where one column does heavy lifting.
-5. **One opinionated detail per page.** Each surface should have one moment of editorial conviction (a typographic flourish, a precise micro-interaction, a deliberate space) rather than five generic flourishes.
-
-## Accessibility
-
-**WCAG AA + keyboard + screen reader baseline:**
-
-- All interactive elements reachable by keyboard, focus visible (`outline: 2px solid`, not just color shift).
-- Semantic landmarks: `<header>`, `<main>`, `<nav>`, `<section aria-labelledby=…>`, headings in order.
-- All images with informational content have alt text. Decorative icons have `aria-hidden="true"`.
-- Body text ≥ 4.5:1 contrast; large text (≥18pt or 14pt bold) ≥ 3:1.
-- Respect `prefers-reduced-motion`. Animations stop, don't slow.
-- Forms have explicit labels. Errors are announced.
-
-## Tech & Constraints
-
-- Next.js 16 app router (Server Components by default, `'use client'` for interactivity).
-- Linaria styled-components (`@linaria/react`) for zero-runtime CSS-in-JS.
-- Lingui (`@lingui/react`) for i18n; never hardcode user-visible strings.
-- Theme tokens in `packages/twenty-website/src/theme/`. Colors are CSS variables resolved to OKLCH-tinted neutrals.
-- `@tabler/icons-react` for iconography (no Heroicons, no custom SVGs unless purposeful).
-- `@radix-ui/react-*` for primitives (Popover etc) where headless behavior is needed.
-
-## Out of Scope for This File
-
-- Detailed visual tokens (colors, type scale, motion specs) live in `DESIGN.md`.
-- Per-page IA decisions live in shape briefs (`docs/superpowers/specs/`).

README.md

@@ -4,161 +4,132 @@
   </a>
 </p>
 
-<h2 align="center">The #1 Open-Source CRM</h2>
+<h2 align="center" >The #1 Open-Source CRM </h2>
+
+<p align="center"><a href="https://twenty.com">🌐 Website</a> · <a href="https://docs.twenty.com">📚 Documentation</a> · <a href="https://github.com/orgs/twentyhq/projects/1"><img src="./packages/twenty-website/public/images/readme/planner-icon.svg" width="12" height="12"/> Roadmap </a> · <a href="https://discord.gg/cx5n4Jzs57"><img src="./packages/twenty-website/public/images/readme/discord-icon.svg" width="12" height="12"/> Discord</a> · <a href="https://www.figma.com/file/xt8O9mFeLl46C5InWwoMrN/Twenty"><img src="./packages/twenty-website/public/images/readme/figma-icon.png"  width="12" height="12"/>  Figma</a></p>
+<br />
 
-<p align="center"><a href="https://twenty.com"><img src="./packages/twenty-website/public/images/readme/globe-icon.svg" width="12" height="12"/> Website</a> · <a href="https://docs.twenty.com"><img src="./packages/twenty-website/public/images/readme/book-icon.svg" width="12" height="12"/> Documentation</a> · <a href="https://github.com/orgs/twentyhq/projects/1"><img src="./packages/twenty-website/public/images/readme/map-icon.svg" width="12" height="12"/> Roadmap </a> · <a href="https://discord.gg/cx5n4Jzs57"><img src="./packages/twenty-website/public/images/readme/discord-icon.svg" width="12" height="12"/> Discord</a> · <a href="https://www.figma.com/file/xt8O9mFeLl46C5InWwoMrN/Twenty"><img src="./packages/twenty-website/public/images/readme/figma-icon.webp"  width="12" height="12"/>  Figma</a></p>
 
 <p align="center">
   <a href="https://www.twenty.com">
     <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/github-cover-dark.webp" />
-      <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/github-cover-light.webp" />
-      <img src="./packages/twenty-website/public/images/readme/github-cover-light.webp" alt="Twenty banner" />
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/github-cover-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/github-cover-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/github-cover-light.png" alt="Cover" />
     </picture>
   </a>
 </p>
 
 <br />
 
-# Why Twenty
-
-Twenty gives technical teams the building blocks for a custom CRM that meets complex business needs and quickly adapts as the business evolves. Twenty is the CRM you build, ship, and version like the rest of your stack.
-
-<a href="https://twenty.com/resources/why-twenty"><img src="./packages/twenty-website/public/images/readme/star-icon.svg" width="14" height="14"/> Learn more about why we built Twenty</a>
-
-<br />
-
 # Installation
 
-### <img src="./packages/twenty-website/public/images/readme/globe-icon.svg" width="14" height="14"/> Cloud
+See:
+🚀 [Self-hosting](https://docs.twenty.com/developers/self-hosting/docker-compose)
+🖥️ [Local Setup](https://docs.twenty.com/developers/local-setup)
 
-The fastest way to get started. Sign up at [twenty.com](https://twenty.com) and spin up a workspace in under a minute, with no infrastructure to manage and always up to date.
+# Does the world need another CRM?
 
-### <img src="./packages/twenty-website/public/images/readme/book-icon.svg" width="14" height="14"/> Build an app
+We built Twenty for three reasons:
 
-Scaffold a new app with the Twenty CLI:
+**CRMs are too expensive, and users are trapped.** Companies use locked-in customer data to hike prices. It shouldn't be that way.
 
-```bash
-npx create-twenty-app my-app
-```
+**A fresh start is required to build a better experience.** We can learn from past mistakes and craft a cohesive experience inspired by new UX patterns from tools like Notion, Airtable or Linear.
 
-Define objects, fields, and views as code:
-
-```ts
-import { defineObject, FieldType } from 'twenty-sdk/define';
-
-export default defineObject({
-  nameSingular: 'deal',
-  namePlural: 'deals',
-  labelSingular: 'Deal',
-  labelPlural: 'Deals',
-  fields: [
-    { name: 'name', label: 'Name', type: FieldType.TEXT },
-    { name: 'amount', label: 'Amount', type: FieldType.CURRENCY },
-    { name: 'closeDate', label: 'Close Date', type: FieldType.DATE_TIME },
-  ],
-});
-```
-
-Then ship it to your workspace:
-
-```bash
-npx twenty app:publish --private
-```
-
-See the [app development guide](https://docs.twenty.com/developers/extend/apps/getting-started) for objects, views, agents, and logic functions.
-
-### <img src="./packages/twenty-website/public/images/readme/rocket-icon.svg" width="14" height="14"/> Self-hosting
-
-Run Twenty on your own infrastructure with [Docker Compose](https://docs.twenty.com/developers/self-host/capabilities/docker-compose), or contribute locally via the [local setup guide](https://docs.twenty.com/developers/contribute/capabilities/local-setup).
+**We believe in Open-source and community.** Hundreds of developers are already building Twenty together. Once we have plugin capabilities, a whole ecosystem will grow around it.
 
-<br />
 <br />
 
-# Everything you need
+# What You Can Do With Twenty
 
-Twenty gives you the building blocks of a modern CRM (objects, views, workflows, and agents) and lets you extend them as code. Here's a tour of what's in the box.
+Please feel free to flag any specific needs you have by creating an issue.
 
-Want to go deeper? Read the <a href="https://docs.twenty.com/user-guide/introduction"><img src="./packages/twenty-website/public/images/readme/planner-icon.svg" width="14" height="14"/> User Guide</a> for product walkthroughs, or the <a href="https://docs.twenty.com"><img src="./packages/twenty-website/public/images/readme/book-icon.svg" width="14" height="14"/> Documentation</a> for developer reference.
+Below are a few features we have implemented to date:
 
-<table align="center">
-  <tr>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-build-apps-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-build-apps-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-build-apps-light.webp" alt="Create your apps" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/developers/extend/apps/getting-started"><img src="./packages/twenty-website/public/images/readme/code-icon.svg" width="16" height="16"/> Learn more about apps in doc</a></p>
-    </td>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-version-control-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-version-control-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-version-control-light.webp" alt="Stay on top with version control" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/developers/extend/apps/publishing"><img src="./packages/twenty-website/public/images/readme/monitor-icon.svg" width="16" height="16"/> Learn more about version control in doc</a></p>
-    </td>
-  </tr>
-  <tr>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-all-tools-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-all-tools-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-all-tools-light.webp" alt="All the tools you need to build anything" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/developers/extend/apps/building"><img src="./packages/twenty-website/public/images/readme/rocket-icon.svg" width="16" height="16"/> Learn more about primitives in doc</a></p>
-    </td>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-tools-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-tools-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-tools-light.webp" alt="Customize your layouts" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/user-guide/layout/overview"><img src="./packages/twenty-website/public/images/readme/planner-icon.svg" width="16" height="16"/> Learn more about layouts in doc</a></p>
-    </td>
-  </tr>
-  <tr>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-ai-agents-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-ai-agents-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-ai-agents-light.webp" alt="AI agents and chats" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/user-guide/ai/overview"><img src="./packages/twenty-website/public/images/readme/message-icon.svg" width="16" height="16"/> Learn more about AI in doc</a></p>
-    </td>
-    <td width="50%">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./packages/twenty-website/public/images/readme/v2-crm-tools-dark.webp" />
-        <source media="(prefers-color-scheme: light)" srcset="./packages/twenty-website/public/images/readme/v2-crm-tools-light.webp" />
-        <img src="./packages/twenty-website/public/images/readme/v2-crm-tools-light.webp" alt="Plus all the tools of a good CRM" />
-      </picture>
-      <p align="center"><a href="https://docs.twenty.com/user-guide/introduction"><img src="./packages/twenty-website/public/images/readme/star-icon.svg" width="16" height="16"/> Learn more about CRM features in doc</a></p>
-    </td>
-  </tr>
-</table>
++ [Personalize layouts with filters, sort, group by, kanban and table views](#personalize-layouts-with-filters-sort-group-by-kanban-and-table-views)
++ [Customize your objects and fields](#customize-your-objects-and-fields)
++ [Create and manage permissions with custom roles](#create-and-manage-permissions-with-custom-roles)
++ [Automate workflow with triggers and actions](#automate-workflow-with-triggers-and-actions)
++ [Emails, calendar events, files, and more](#emails-calendar-events-files-and-more)
+
+
+## Personalize layouts with filters, sort, group by, kanban and table views
+
+<p align="center">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/views-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/views-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/views-light.png" alt="Companies Kanban Views" />
+    </picture>
+</p>
+
+## Customize your objects and fields
+
+<p align="center">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/data-model-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/data-model-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/data-model-light.png" alt="Setting Custom Objects" />
+    </picture>
+</p>
+
+## Create and manage permissions with custom roles
+
+<p align="center">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/permissions-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/permissions-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/permissions-light.png" alt="Permissions" />
+    </picture>
+</p>
+
+## Automate workflow with triggers and actions
+
+<p align="center">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/workflows-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/workflows-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/workflows-light.png" alt="Workflows" />
+    </picture>
+</p>
+
+## Emails, calendar events, files, and more
+
+<p align="center">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/plus-other-features-dark.png" />
+      <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/twentyhq/twenty/refs/heads/main/packages/twenty-website/public/images/readme/plus-other-features-light.png" />
+      <img src="./packages/twenty-website/public/images/readme/plus-other-features-light.png" alt="Other Features" />
+    </picture>
+</p>
 
 <br />
 
 # Stack
+- [TypeScript](https://www.typescriptlang.org/)
+- [Nx](https://nx.dev/)
+- [NestJS](https://nestjs.com/), with [BullMQ](https://bullmq.io/), [PostgreSQL](https://www.postgresql.org/), [Redis](https://redis.io/)
+- [React](https://reactjs.org/), with [Recoil](https://recoiljs.org/), [Emotion](https://emotion.sh/) and [Lingui](https://lingui.dev/)
+
 
-- <a href="https://www.typescriptlang.org/"><img src="./packages/twenty-website/public/images/readme/stack-typescript.svg" width="14" height="14"/> TypeScript</a>
-- <a href="https://nx.dev/"><img src="./packages/twenty-website/public/images/readme/stack-nx.svg" width="14" height="14"/> Nx</a>
-- <a href="https://nestjs.com/"><img src="./packages/twenty-website/public/images/readme/stack-nestjs.svg" width="14" height="14"/> NestJS</a>, with <a href="https://bullmq.io/">BullMQ</a>, <a href="https://www.postgresql.org/"><img src="./packages/twenty-website/public/images/readme/stack-postgresql.svg" width="14" height="14"/> PostgreSQL</a>, <a href="https://redis.io/"><img src="./packages/twenty-website/public/images/readme/stack-redis.svg" width="14" height="14"/> Redis</a>
-- <a href="https://reactjs.org/"><img src="./packages/twenty-website/public/images/readme/stack-react.svg" width="14" height="14"/> React</a>, with <a href="https://jotai.org/">Jotai</a>, <a href="https://linaria.dev/">Linaria</a> and <a href="https://lingui.dev/">Lingui</a>
 
 # Thanks
 
 <p align="center">
-  <a href="https://greptile.com"><img src="./packages/twenty-website/public/images/readme/greptile.webp" height="28" alt="Greptile" /></a>
-  &nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://sentry.io/"><img src="./packages/twenty-website/public/images/readme/sentry.webp" height="28" alt="Sentry" /></a>
-  &nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://crowdin.com/"><img src="./packages/twenty-website/public/images/readme/crowdin.webp" height="28" alt="Crowdin" /></a>
+  <a href="https://www.chromatic.com/"><img src="./packages/twenty-website/public/images/readme/chromatic.png" height="30" alt="Chromatic" /></a>
+  <a href="https://greptile.com"><img src="./packages/twenty-website/public/images/readme/greptile.png" height="30" alt="Greptile" /></a>
+  <a href="https://sentry.io/"><img src="./packages/twenty-website/public/images/readme/sentry.png" height="30" alt="Sentry" /></a>
+  <a href="https://crowdin.com/"><img src="./packages/twenty-website/public/images/readme/crowdin.png" height="30" alt="Crowdin" /></a>
 </p>
 
-Thanks to these amazing services that we use and recommend for code review (Greptile), catching bugs (Sentry) and translating (Crowdin).
+  Thanks to these amazing services that we use and recommend for UI testing (Chromatic), code review (Greptile), catching bugs (Sentry) and translating (Crowdin).
+
 
 # Join the Community
 
-<p><a href="https://github.com/twentyhq/twenty"><img src="./packages/twenty-website/public/images/readme/star-icon.svg" width="12" height="12"/> Star the repo</a> · <a href="https://discord.gg/cx5n4Jzs57"><img src="./packages/twenty-website/public/images/readme/discord-icon.svg" width="12" height="12"/> Discord</a> · <a href="https://github.com/twentyhq/twenty/discussions"><img src="./packages/twenty-website/public/images/readme/message-icon.svg" width="12" height="12"/> Feature requests</a> · <a href="https://github.com/orgs/twentyhq/projects/1/views/35"><img src="./packages/twenty-website/public/images/readme/rocket-icon.svg" width="12" height="12"/> Releases</a> · <a href="https://twitter.com/twentycrm"><img src="./packages/twenty-website/public/images/readme/x-icon.svg" width="12" height="12"/> X</a> · <a href="https://www.linkedin.com/company/twenty/"><img src="./packages/twenty-website/public/images/readme/linkedin-icon.svg" width="12" height="12"/> LinkedIn</a> · <a href="https://twenty.crowdin.com/twenty"><img src="./packages/twenty-website/public/images/readme/language-icon.svg" width="12" height="12"/> Crowdin</a> · <a href="https://github.com/twentyhq/twenty/contribute"><img src="./packages/twenty-website/public/images/readme/code-icon.svg" width="12" height="12"/> Contribute</a></p>
+- Star the repo
+- Subscribe to releases (watch -> custom -> releases)
+- Follow us on [Twitter](https://twitter.com/twentycrm) or [LinkedIn](https://www.linkedin.com/company/twenty/)
+- Join our [Discord](https://discord.gg/cx5n4Jzs57)
+- Improve translations on [Crowdin](https://twenty.crowdin.com/twenty)
+- [Contributions](https://github.com/twentyhq/twenty/contribute) are, of course, most welcome!

eslint.config.mjs

@@ -0,0 +1,222 @@
+import js from '@eslint/js';
+import nxPlugin from '@nx/eslint-plugin';
+import typescriptEslint from '@typescript-eslint/eslint-plugin';
+import typescriptParser from '@typescript-eslint/parser';
+import importPlugin from 'eslint-plugin-import';
+import linguiPlugin from 'eslint-plugin-lingui';
+import * as mdxPlugin from 'eslint-plugin-mdx';
+import preferArrowPlugin from 'eslint-plugin-prefer-arrow';
+import prettierPlugin from 'eslint-plugin-prettier';
+import unicornPlugin from 'eslint-plugin-unicorn';
+import unusedImportsPlugin from 'eslint-plugin-unused-imports';
+import jsoncParser from 'jsonc-eslint-parser';
+
+const twentyRules = await nxPlugin.loadWorkspaceRules(
+  'packages/twenty-eslint-rules',
+);
+
+export default [
+  // Base JavaScript configuration
+  js.configs.recommended,
+
+  // Lingui recommended rules
+  linguiPlugin.configs['flat/recommended'],
+
+  // Global ignores
+  {
+    ignores: ['**/node_modules/**'],
+  },
+
+  // Base configuration for all files
+  {
+    files: ['**/*.{js,jsx,ts,tsx}'],
+    plugins: {
+      prettier: prettierPlugin,
+      lingui: linguiPlugin,
+      '@nx': nxPlugin,
+      'prefer-arrow': preferArrowPlugin,
+      import: importPlugin,
+      'unused-imports': unusedImportsPlugin,
+      unicorn: unicornPlugin,
+    },
+    rules: {
+      // General rules
+      'func-style': ['error', 'declaration', { allowArrowFunctions: true }],
+      'no-console': [
+        'warn',
+        { allow: ['group', 'groupCollapsed', 'groupEnd'] },
+      ],
+      'no-control-regex': 0,
+      'no-debugger': 'error',
+      'no-duplicate-imports': 'error',
+      'no-undef': 'off',
+      'no-unused-vars': 'off',
+
+      // Nx rules
+      '@nx/enforce-module-boundaries': [
+        'error',
+        {
+          enforceBuildableLibDependency: true,
+          allow: [],
+          depConstraints: [
+            {
+              sourceTag: 'scope:apps',
+              onlyDependOnLibsWithTags: ['scope:apps', 'scope:sdk'],
+            },
+            {
+              sourceTag: 'scope:sdk',
+              onlyDependOnLibsWithTags: ['scope:sdk', 'scope:shared'],
+            },
+            {
+              sourceTag: 'scope:create-app',
+              onlyDependOnLibsWithTags: ['scope:create-app', 'scope:shared'],
+            },
+            {
+              sourceTag: 'scope:shared',
+              onlyDependOnLibsWithTags: ['scope:shared'],
+            },
+            {
+              sourceTag: 'scope:backend',
+              onlyDependOnLibsWithTags: ['scope:shared', 'scope:backend'],
+            },
+            {
+              sourceTag: 'scope:frontend',
+              onlyDependOnLibsWithTags: ['scope:shared', 'scope:frontend'],
+            },
+          ],
+        },
+      ],
+
+      // Import rules
+      'import/no-relative-packages': 'error',
+      'import/no-useless-path-segments': 'error',
+      'import/no-duplicates': ['error', { considerQueryString: true }],
+
+      // Prefer arrow functions
+      'prefer-arrow/prefer-arrow-functions': [
+        'error',
+        {
+          disallowPrototype: true,
+          singleReturnOnly: false,
+          classPropertiesAllowed: false,
+        },
+      ],
+
+      // Unused imports
+      'unused-imports/no-unused-imports': 'warn',
+      'unused-imports/no-unused-vars': [
+        'warn',
+        {
+          vars: 'all',
+          varsIgnorePattern: '^_',
+          args: 'after-used',
+          argsIgnorePattern: '^_',
+        },
+      ],
+    },
+  },
+
+  // TypeScript specific configuration
+  {
+    files: ['**/*.{ts,tsx}'],
+    languageOptions: {
+      parser: typescriptParser,
+      parserOptions: {
+        ecmaFeatures: {
+          jsx: true,
+        },
+      },
+    },
+    plugins: {
+      '@typescript-eslint': typescriptEslint,
+    },
+    rules: {
+      // TypeScript rules
+      'no-redeclare': 'off', // Turn off base rule for TypeScript
+      '@typescript-eslint/no-redeclare': 'error', // Use TypeScript-aware version
+      '@typescript-eslint/ban-ts-comment': 'error',
+      '@typescript-eslint/consistent-type-imports': [
+        'error',
+        {
+          prefer: 'type-imports',
+          fixStyle: 'inline-type-imports',
+        },
+      ],
+      '@typescript-eslint/explicit-function-return-type': 'off',
+      '@typescript-eslint/explicit-module-boundary-types': 'off',
+      '@typescript-eslint/interface-name-prefix': 'off',
+      '@typescript-eslint/no-empty-object-type': [
+        'error',
+        {
+          allowInterfaces: 'with-single-extends',
+        },
+      ],
+      '@typescript-eslint/no-explicit-any': 'off',
+      '@typescript-eslint/no-empty-function': 'off',
+      '@typescript-eslint/no-unused-vars': 'off',
+    },
+  },
+
+  // JavaScript specific configuration
+  {
+    files: ['*.{js,jsx}'],
+    rules: {
+      // JavaScript-specific rules if needed
+    },
+  },
+
+  // Test files
+  {
+    files: [
+      '*.spec.@(ts|tsx|js|jsx)',
+      '*.integration-spec.@(ts|tsx|js|jsx)',
+      '*.test.@(ts|tsx|js|jsx)',
+    ],
+    languageOptions: {
+      globals: {
+        jest: true,
+        describe: true,
+        it: true,
+        expect: true,
+        beforeEach: true,
+        afterEach: true,
+        beforeAll: true,
+        afterAll: true,
+      },
+    },
+    rules: {
+      '@typescript-eslint/no-non-null-assertion': 'off',
+    },
+  },
+
+  // JSON files
+  {
+    files: ['**/*.json'],
+    languageOptions: {
+      parser: jsoncParser,
+    },
+  },
+
+  // MDX files
+  {
+    ...mdxPlugin.flat,
+    plugins: {
+      ...mdxPlugin.flat.plugins,
+      '@nx': nxPlugin,
+      twenty: { rules: twentyRules },
+    },
+  },
+  mdxPlugin.flatCodeBlocks,
+  {
+    files: ['**/*.mdx'],
+    rules: {
+      'no-unused-vars': 'off',
+      'unused-imports/no-unused-imports': 'off',
+      'unused-imports/no-unused-vars': 'off',
+      // Enforce JSX tags on separate lines to prevent Crowdin translation issues
+      'twenty/mdx-component-newlines': 'error',
+      // Disallow angle bracket placeholders to prevent Crowdin translation errors
+      'twenty/no-angle-bracket-placeholders': 'error',
+    },
+  },
+];

nx.json

@@ -40,31 +40,34 @@
       "dependsOn": ["^build"]
     },
     "lint": {
-      "executor": "nx:run-commands",
+      "executor": "@nx/eslint:lint",
       "cache": true,
+      "outputs": ["{options.outputFile}"],
       "options": {
-        "cwd": "{projectRoot}",
-        "command": "npx oxlint -c .oxlintrc.json . && (npx oxfmt --check . || (echo 'ERROR: oxfmt formatting check failed! Fix with: npx nx lint --configuration=fix' && false))"
+        "eslintConfig": "{projectRoot}/eslint.config.mjs",
+        "cache": true,
+        "cacheLocation": "{workspaceRoot}/.cache/eslint"
       },
       "configurations": {
-        "ci": {},
+        "ci": {
+          "cacheStrategy": "content"
+        },
         "fix": {
-          "command": "npx oxlint --fix -c .oxlintrc.json . && npx oxfmt ."
+          "fix": true
         }
       },
-      "dependsOn": ["^build", "twenty-oxlint-rules:build"]
+      "dependsOn": ["^build"]
     },
     "lint:diff-with-main": {
       "executor": "nx:run-commands",
       "cache": false,
-      "dependsOn": ["twenty-oxlint-rules:build"],
       "options": {
-        "command": "FILES=$(git diff --name-only --diff-filter=d main -- {projectRoot}/ | grep -E '{args.pattern}'); [ -z \"$FILES\" ] && echo 'No changed files.' || (npx oxlint -c {projectRoot}/.oxlintrc.json $FILES && (npx oxfmt --check $FILES || (echo 'ERROR: oxfmt formatting check failed! Fix with: npx nx lint:diff-with-main --configuration=fix' && false)))",
+        "command": "git diff --name-only --diff-filter=d main | grep -E '{args.pattern}' | grep '^{projectRoot}/' | xargs sh -c 'if [ $# -gt 0 ]; then npx eslint --config {projectRoot}/eslint.config.mjs \"$@\"; fi' _",
         "pattern": "\\.(ts|tsx|js|jsx)$"
       },
       "configurations": {
         "fix": {
-          "command": "FILES=$(git diff --name-only --diff-filter=d main -- {projectRoot}/ | grep -E '{args.pattern}'); [ -z \"$FILES\" ] && echo 'No changed files.' || (npx oxlint --fix -c {projectRoot}/.oxlintrc.json $FILES && npx oxfmt $FILES)"
+          "command": "git diff --name-only --diff-filter=d main | grep -E '{args.pattern}' | grep '^{projectRoot}/' | xargs sh -c 'if [ $# -gt 0 ]; then npx eslint --config {projectRoot}/eslint.config.mjs --fix \"$@\"; fi' _"
         }
       }
     },
@@ -73,14 +76,18 @@
       "cache": true,
       "options": {
         "cwd": "{projectRoot}",
-        "command": "npx oxfmt --check {args.files} {args.write}",
-        "files": ".",
-        "write": ""
+        "command": "prettier {args.files} --check --cache {args.cache} --cache-location {args.cacheLocation} --write {args.write} --cache-strategy {args.cacheStrategy}",
+        "cache": true,
+        "cacheLocation": "../../.cache/prettier/{projectRoot}",
+        "cacheStrategy": "metadata",
+        "write": false
       },
       "configurations": {
-        "ci": {},
+        "ci": {
+          "cacheStrategy": "content"
+        },
         "fix": {
-          "command": "npx oxfmt {args.files}"
+          "write": true
         }
       },
       "dependsOn": ["^build"]
@@ -111,7 +118,6 @@
       "outputs": ["{projectRoot}/coverage"],
       "options": {
         "jestConfig": "{projectRoot}/jest.config.mjs",
-        "silent": true,
         "coverage": true,
         "coverageReporters": ["text-summary"],
         "cacheDirectory": "../../.cache/jest/{projectRoot}"
@@ -119,7 +125,7 @@
       "configurations": {
         "ci": {
           "ci": true,
-          "maxWorkers": 1
+          "maxWorkers": 3
         },
         "coverage": {
           "coverageReporters": ["lcov", "text"]
@@ -133,14 +139,6 @@
       "cache": true,
       "dependsOn": ["^build"]
     },
-    "set-local-version": {
-      "executor": "nx:run-commands",
-      "cache": false,
-      "options": {
-        "cwd": "{projectRoot}",
-        "command": "node -e \"const fs=require('fs'),p=JSON.parse(fs.readFileSync('package.json','utf8'));p.version='{args.releaseVersion}';fs.writeFileSync('package.json',JSON.stringify(p,null,2)+'\\n');\""
-      }
-    },
     "storybook:build": {
       "executor": "nx:run-commands",
       "cache": true,
@@ -148,7 +146,7 @@
       "outputs": ["{projectRoot}/{options.output-dir}"],
       "options": {
         "cwd": "{projectRoot}",
-        "command": "NODE_OPTIONS='--max-old-space-size=10240' storybook build --test",
+        "command": "NODE_OPTIONS='--max-old-space-size=10240' VITE_DISABLE_TYPESCRIPT_CHECKER=true storybook build --test",
         "output-dir": "storybook-static",
         "config-dir": ".storybook"
       },
@@ -220,6 +218,25 @@
         }
       }
     },
+    "chromatic": {
+      "executor": "nx:run-commands",
+      "options": {
+        "cwd": "{projectRoot}",
+        "commands": [
+          {
+            "command": "nx storybook:build {projectName}",
+            "forwardAllArgs": false
+          },
+          "chromatic --storybook-build-dir=storybook-static {args.ci}"
+        ],
+        "parallel": false
+      },
+      "configurations": {
+        "ci": {
+          "ci": "--exit-zero-on-changes"
+        }
+      }
+    },
     "@nx/jest:jest": {
       "cache": true,
       "inputs": [
@@ -237,6 +254,14 @@
         }
       }
     },
+    "@nx/eslint:lint": {
+      "cache": true,
+      "inputs": [
+        "default",
+        "{workspaceRoot}/eslint.config.mjs",
+        "{workspaceRoot}/packages/twenty-eslint-rules/**/*"
+      ]
+    },
     "@nx/vite:build": {
       "cache": true,
       "dependsOn": ["^build"],
@@ -247,24 +272,29 @@
       "inputs": ["default", "^default"]
     }
   },
+  "installation": {
+    "version": "22.3.3"
+  },
   "generators": {
     "@nx/react": {
       "application": {
-        "style": "@linaria/react",
+        "style": "@emotion/styled",
+        "linter": "eslint",
         "bundler": "vite",
         "compiler": "swc",
         "unitTestRunner": "jest",
         "projectNameAndRootFormat": "derived"
       },
       "library": {
-        "style": "@linaria/react",
+        "style": "@emotion/styled",
+        "linter": "eslint",
         "bundler": "vite",
         "compiler": "swc",
         "unitTestRunner": "jest",
         "projectNameAndRootFormat": "derived"
       },
       "component": {
-        "style": "@linaria/react"
+        "style": "@emotion/styled"
       }
     }
   },

package.json

@@ -1,21 +1,191 @@
 {
   "private": true,
+  "dependencies": {
+    "@apollo/client": "^3.7.17",
+    "@emotion/react": "^11.11.1",
+    "@emotion/styled": "^11.11.0",
+    "@floating-ui/react": "^0.24.3",
+    "@linaria/core": "^6.2.0",
+    "@linaria/react": "^6.2.1",
+    "@radix-ui/colors": "^3.0.0",
+    "@sniptt/guards": "^0.2.0",
+    "@tabler/icons-react": "^3.31.0",
+    "@wyw-in-js/vite": "^0.7.0",
+    "archiver": "^7.0.1",
+    "danger-plugin-todos": "^1.3.1",
+    "date-fns": "^2.30.0",
+    "date-fns-tz": "^2.0.0",
+    "deep-equal": "^2.2.2",
+    "file-type": "16.5.4",
+    "framer-motion": "^11.18.0",
+    "fuse.js": "^7.1.0",
+    "googleapis": "105",
+    "hex-rgb": "^5.0.0",
+    "immer": "^10.1.1",
+    "libphonenumber-js": "^1.10.26",
+    "lodash.camelcase": "^4.3.0",
+    "lodash.chunk": "^4.2.0",
+    "lodash.compact": "^3.0.1",
+    "lodash.escaperegexp": "^4.1.2",
+    "lodash.groupby": "^4.6.0",
+    "lodash.identity": "^3.0.0",
+    "lodash.isempty": "^4.4.0",
+    "lodash.isequal": "^4.5.0",
+    "lodash.isobject": "^3.0.2",
+    "lodash.kebabcase": "^4.1.1",
+    "lodash.mapvalues": "^4.6.0",
+    "lodash.merge": "^4.6.2",
+    "lodash.omit": "^4.5.0",
+    "lodash.pickby": "^4.6.0",
+    "lodash.snakecase": "^4.1.1",
+    "lodash.upperfirst": "^4.3.1",
+    "microdiff": "^1.3.2",
+    "planer": "^1.2.0",
+    "pluralize": "^8.0.0",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "react-responsive": "^9.0.2",
+    "react-router-dom": "^6.4.4",
+    "react-tooltip": "^5.13.1",
+    "recoil": "^0.7.7",
+    "remark-gfm": "^3.0.1",
+    "rxjs": "^7.2.0",
+    "semver": "^7.5.4",
+    "slash": "^5.1.0",
+    "temporal-polyfill": "^0.3.0",
+    "ts-key-enum": "^2.0.12",
+    "tslib": "^2.8.1",
+    "type-fest": "4.10.1",
+    "typescript": "5.9.2",
+    "uuid": "^9.0.0",
+    "vite-tsconfig-paths": "^4.2.1",
+    "xlsx-ugnis": "^0.19.3",
+    "zod": "^4.1.11"
+  },
   "devDependencies": {
-    "@nx/jest": "22.5.4",
-    "@nx/js": "22.5.4",
-    "@nx/react": "22.5.4",
-    "@nx/storybook": "22.5.4",
-    "@nx/vite": "22.5.4",
-    "@nx/web": "22.5.4",
+    "@babel/core": "^7.14.5",
+    "@babel/preset-react": "^7.14.5",
+    "@babel/preset-typescript": "^7.24.6",
+    "@chromatic-com/storybook": "^4.1.3",
+    "@graphql-codegen/cli": "^3.3.1",
+    "@graphql-codegen/client-preset": "^4.1.0",
+    "@graphql-codegen/typescript": "^3.0.4",
+    "@graphql-codegen/typescript-operations": "^3.0.4",
+    "@graphql-codegen/typescript-react-apollo": "^3.3.7",
+    "@nx/eslint": "22.3.3",
+    "@nx/eslint-plugin": "22.3.3",
+    "@nx/jest": "22.3.3",
+    "@nx/js": "22.3.3",
+    "@nx/react": "22.3.3",
+    "@nx/storybook": "22.3.3",
+    "@nx/vite": "22.3.3",
+    "@nx/web": "22.3.3",
+    "@sentry/types": "^8",
+    "@storybook-community/storybook-addon-cookie": "^5.0.0",
+    "@storybook/addon-coverage": "^3.0.0",
+    "@storybook/addon-docs": "^10.1.11",
+    "@storybook/addon-links": "^10.1.11",
+    "@storybook/addon-vitest": "^10.1.11",
+    "@storybook/icons": "^2.0.1",
+    "@storybook/react-vite": "^10.1.11",
+    "@storybook/test-runner": "^0.24.2",
+    "@stylistic/eslint-plugin": "^1.5.0",
+    "@swc-node/register": "1.8.0",
+    "@swc/cli": "^0.3.12",
+    "@swc/core": "1.13.3",
+    "@swc/helpers": "~0.5.2",
+    "@swc/jest": "^0.2.39",
+    "@testing-library/dom": "^10.4.0",
+    "@testing-library/jest-dom": "^6.6.3",
+    "@testing-library/react": "^16.3.0",
+    "@types/addressparser": "^1.0.3",
+    "@types/bcrypt": "^5.0.0",
+    "@types/bytes": "^3.1.1",
+    "@types/chrome": "^0.0.267",
+    "@types/deep-equal": "^1.0.1",
+    "@types/fs-extra": "^11.0.4",
+    "@types/graphql-fields": "^1.3.6",
+    "@types/inquirer": "^9.0.9",
+    "@types/jest": "^30.0.0",
+    "@types/lodash.camelcase": "^4.3.7",
+    "@types/lodash.compact": "^3.0.9",
+    "@types/lodash.escaperegexp": "^4.1.9",
+    "@types/lodash.groupby": "^4.6.9",
+    "@types/lodash.identity": "^3.0.9",
+    "@types/lodash.isempty": "^4.4.7",
+    "@types/lodash.isequal": "^4.5.7",
+    "@types/lodash.isobject": "^3.0.7",
+    "@types/lodash.kebabcase": "^4.1.7",
+    "@types/lodash.mapvalues": "^4.6.9",
+    "@types/lodash.omit": "^4.5.9",
+    "@types/lodash.pickby": "^4.6.9",
+    "@types/lodash.snakecase": "^4.1.7",
+    "@types/lodash.upperfirst": "^4.3.7",
+    "@types/ms": "^0.7.31",
+    "@types/node": "^24.0.0",
+    "@types/passport-google-oauth20": "^2.0.11",
+    "@types/passport-jwt": "^3.0.8",
+    "@types/passport-microsoft": "^2.1.0",
+    "@types/pluralize": "^0.0.33",
     "@types/react": "^18.2.39",
+    "@types/react-datepicker": "^6.2.0",
     "@types/react-dom": "^18.2.15",
+    "@types/supertest": "^2.0.11",
+    "@types/uuid": "^9.0.2",
+    "@typescript-eslint/eslint-plugin": "^8.39.0",
+    "@typescript-eslint/parser": "^8.39.0",
+    "@typescript-eslint/utils": "^8.39.0",
+    "@typescript/native-preview": "^7.0.0-dev.20260116.1",
+    "@vitejs/plugin-react-swc": "3.11.0",
+    "@vitest/browser-playwright": "^4.0.17",
+    "@vitest/coverage-istanbul": "^4.0.17",
+    "@vitest/coverage-v8": "^4.0.17",
     "@yarnpkg/types": "^4.0.0",
+    "chromatic": "^6.18.0",
     "concurrently": "^8.2.2",
+    "danger": "^13.0.4",
+    "dotenv-cli": "^7.4.4",
+    "esbuild": "^0.25.10",
+    "eslint": "^9.32.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jsx-a11y": "^6.10.2",
+    "eslint-plugin-lingui": "^0.9.0",
+    "eslint-plugin-mdx": "^3.6.2",
+    "eslint-plugin-prefer-arrow": "^1.2.3",
+    "eslint-plugin-prettier": "^5.1.2",
+    "eslint-plugin-project-structure": "^3.9.1",
+    "eslint-plugin-react": "^7.37.2",
+    "eslint-plugin-react-hooks": "^5.0.0",
+    "eslint-plugin-react-refresh": "^0.4.4",
+    "eslint-plugin-simple-import-sort": "^10.0.0",
+    "eslint-plugin-storybook": "^10.1.11",
+    "eslint-plugin-unicorn": "^56.0.1",
+    "eslint-plugin-unused-imports": "^3.0.0",
     "http-server": "^14.1.1",
-    "nx": "22.5.4",
-    "oxfmt": "0.50.0",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "30.0.0-beta.3",
+    "jest-environment-node": "^29.4.1",
+    "jest-fetch-mock": "^3.0.3",
+    "jsdom": "~22.1.0",
+    "msw": "^2.12.7",
+    "msw-storybook-addon": "^2.0.6",
+    "nx": "22.3.3",
+    "prettier": "^3.1.1",
+    "raw-loader": "^4.0.2",
+    "rimraf": "^5.0.5",
+    "source-map-support": "^0.5.20",
+    "storybook": "^10.1.11",
+    "storybook-addon-mock-date": "2.0.0",
+    "storybook-addon-pseudo-states": "^10.1.11",
+    "supertest": "^6.1.3",
+    "ts-jest": "^29.1.1",
+    "ts-loader": "^9.2.3",
+    "ts-node": "10.9.1",
+    "tsconfig-paths": "^4.2.0",
     "tsx": "^4.17.0",
-    "verdaccio": "^6.3.1"
+    "vite": "^7.0.0",
+    "vitest": "^4.0.17"
   },
   "engines": {
     "node": "^24.5.0",
@@ -24,19 +194,16 @@
   },
   "license": "AGPL-3.0",
   "name": "twenty",
-  "packageManager": "yarn@4.13.0",
+  "packageManager": "yarn@4.9.2",
   "resolutions": {
     "graphql": "16.8.1",
     "type-fest": "4.10.1",
-    "typescript": "5.9.3",
-    "nodemailer": "8.0.4",
+    "typescript": "5.9.2",
     "graphql-redis-subscriptions/ioredis": "^5.6.0",
+    "prosemirror-view": "1.40.0",
+    "prosemirror-transform": "1.10.4",
     "@lingui/core": "5.1.2",
-    "@types/qs": "6.9.16",
-    "@wyw-in-js/transform@npm:0.6.0": "patch:@wyw-in-js/transform@npm%3A0.7.0#~/.yarn/patches/@wyw-in-js-transform-npm-0.7.0-ba641dc99f.patch",
-    "@wyw-in-js/transform@npm:0.7.0": "patch:@wyw-in-js/transform@npm%3A0.7.0#~/.yarn/patches/@wyw-in-js-transform-npm-0.7.0-ba641dc99f.patch",
-    "@opentelemetry/api": "1.9.1",
-    "chokidar": "^3.6.0"
+    "@types/qs": "6.9.16"
   },
   "version": "0.2.1",
   "nx": {},
@@ -52,7 +219,6 @@
       "packages/twenty-server",
       "packages/twenty-emails",
       "packages/twenty-ui",
-      "packages/twenty-new-ui",
       "packages/twenty-utils",
       "packages/twenty-zapier",
       "packages/twenty-website",
@@ -60,14 +226,10 @@
       "packages/twenty-e2e-testing",
       "packages/twenty-shared",
       "packages/twenty-sdk",
-      "packages/twenty-front-component-renderer",
-      "packages/twenty-client-sdk",
+      "packages/twenty-apps",
       "packages/twenty-cli",
       "packages/create-twenty-app",
-      "packages/twenty-codex-plugin",
-      "packages/twenty-oxlint-rules",
-      "packages/twenty-companion",
-      "packages/twenty-claude-skills"
+      "packages/twenty-eslint-rules"
     ]
   },
   "prettier": {

packages/create-twenty-app/.oxlintrc.json

@@ -1,47 +0,0 @@
-{
-  "$schema": "./node_modules/oxlint/configuration_schema.json",
-  "plugins": ["typescript", "import", "unicorn"],
-  "categories": {
-    "correctness": "off"
-  },
-  "ignorePatterns": ["node_modules", "dist"],
-  "rules": {
-    "func-style": ["error", "declaration", { "allowArrowFunctions": true }],
-    "no-console": "off",
-    "no-control-regex": "off",
-    "no-debugger": "error",
-    "no-duplicate-imports": "error",
-    "no-undef": "off",
-    "no-unused-vars": "off",
-    "no-redeclare": "off",
-    "import/no-duplicates": "error",
-    "typescript/no-redeclare": "error",
-    "typescript/ban-ts-comment": "error",
-    "typescript/consistent-type-imports": [
-      "error",
-      {
-        "prefer": "type-imports",
-        "fixStyle": "inline-type-imports"
-      }
-    ],
-    "typescript/explicit-function-return-type": "off",
-    "typescript/explicit-module-boundary-types": "off",
-    "typescript/no-empty-object-type": [
-      "error",
-      {
-        "allowInterfaces": "with-single-extends"
-      }
-    ],
-    "typescript/no-empty-function": "off",
-    "typescript/no-explicit-any": "off",
-    "typescript/no-unused-vars": [
-      "warn",
-      {
-        "vars": "all",
-        "varsIgnorePattern": "^_",
-        "args": "after-used",
-        "argsIgnorePattern": "^_"
-      }
-    ]
-  }
-}

packages/create-twenty-app/.prettierignore

@@ -1 +0,0 @@
-dist

packages/create-twenty-app/README.md

@@ -1,7 +1,7 @@
 <div align="center">
   <a href="https://twenty.com">
     <picture>
-      <img alt="Twenty logo" src="https://raw.githubusercontent.com/twentyhq/twenty/main/packages/twenty-website/public/images/core/logo.svg" height="128">
+      <img alt="Twenty logo" src="https://raw.githubusercontent.com/twentyhq/twenty/2f25922f4cd5bd61e1427c57c4f8ea224e1d552c/packages/twenty-website/public/images/core/logo.svg" height="128">
     </picture>
   </a>
   <h1>Create Twenty App</h1>
@@ -12,47 +12,98 @@
 
 </div>
 
-The official scaffolding CLI for building apps on top of [Twenty CRM](https://twenty.com). Sets up a ready-to-run project with [twenty-sdk](https://www.npmjs.com/package/twenty-sdk).
+Create Twenty App is the official scaffolding CLI for building apps on top of [Twenty CRM](https://twenty.com). It sets up a ready‑to‑run project that works seamlessly with the [twenty-sdk](https://www.npmjs.com/package/twenty-sdk).
+
+- Zero‑config project bootstrap
+- Preconfigured scripts for auth, dev mode (watch & sync), generate, uninstall, and function management
+- Strong TypeScript support and typed client generation
+
+## Documentation
+See Twenty application documentation https://docs.twenty.com/developers/extend/capabilities/apps
+
+## Prerequisites
+- Node.js 24+ (recommended) and Yarn 4
+- A Twenty workspace and an API key (create one at https://app.twenty.com/settings/api-webhooks)
 
 ## Quick start
 
 ```bash
 npx create-twenty-app@latest my-twenty-app
 cd my-twenty-app
-yarn twenty dev
+
+# If you don't use yarn@4
+corepack enable
+yarn install
+
+# Get help
+yarn run help
+
+# Authenticate using your API key (you'll be prompted)
+yarn auth:login
+
+# Add a new entity to your application (guided)
+yarn entity:add
+
+# Generate a typed Twenty client and workspace entity types
+yarn app:generate
+
+# Start dev mode: watches, builds, and syncs local changes to your workspace
+yarn app:dev
+
+# Watch your application's function logs
+yarn function:logs
+
+# Execute a function with a JSON payload
+yarn function:execute -n my-function -p '{"key": "value"}'
+
+# Uninstall the application from the current workspace
+yarn app:uninstall
 ```
 
-The scaffolder will:
+## What gets scaffolded
+- A minimal app structure ready for Twenty with example files:
+  - `application-config.ts` - Application metadata configuration
+  - `roles/default-role.ts` - Default role for logic functions
+  - `logic-functions/hello-world.ts` - Example logic function with HTTP trigger
+  - `front-components/hello-world.tsx` - Example front component
+- TypeScript configuration
+- Prewired scripts that wrap the `twenty` CLI from twenty-sdk
 
-1. Create a new project with TypeScript, linting, tests, and a preconfigured `twenty` CLI
-2. Start a local Twenty server via Docker (pulls the latest image automatically)
-3. Authenticate with the development API key
+## Next steps
+- Use `yarn auth:login` to authenticate with your Twenty workspace.
+- Explore the generated project and add your first entity with `yarn entity:add` (logic functions, front components, objects, roles).
+- Use `yarn app:dev` while you iterate — it watches, builds, and syncs changes to your workspace in real time.
+- Keep your types up‑to‑date using `yarn app:generate`.
 
-## Options
 
-| Flag                               | Description                                                           |
-| ---------------------------------- | --------------------------------------------------------------------- |
-| `--name <name>`                    | Set the app name                                                      |
-| `--display-name <displayName>`     | Set the display name                                                  |
-| `--description <description>`      | Set the description                                                   |
-| `--url <url>`                      | Twenty workspace URL (default: `http://localhost:2020`)               |
-| `--authentication-method <method>` | `oauth` or `apiKey` (default: `apiKey` for local, `oauth` for remote) |
+## Publish your application
+Applications are currently stored in `twenty/packages/twenty-apps`.
 
-## Documentation
+You can share your application with all Twenty users:
 
-Full documentation is available at **[docs.twenty.com/developers/extend/apps](https://docs.twenty.com/developers/extend/apps/getting-started/quick-start)**:
+```bash
+# pull the Twenty project
+git clone https://github.com/twentyhq/twenty.git
+cd twenty
 
-- [Quick Start](https://docs.twenty.com/developers/extend/apps/getting-started/quick-start) — scaffold, run a local server, sync your code
-- [Concepts](https://docs.twenty.com/developers/extend/apps/getting-started/concepts) — how apps work: entity model, sandboxing, lifecycle
-- [Operations](https://docs.twenty.com/developers/extend/apps/operations/overview) — CLI, testing, CI, deploy and publish
+# create a new branch
+git checkout -b feature/my-awesome-app
+```
+
+- Copy your app folder into `twenty/packages/twenty-apps`.
+- Commit your changes and open a pull request on https://github.com/twentyhq/twenty
+
+```bash
+git commit -m "Add new application"
+git push
+```
+
+Our team reviews contributions for quality, security, and reusability before merging.
 
 ## Troubleshooting
-
-- Server not starting: check Docker is running (`docker info`), then try `yarn twenty docker:logs`.
-- Auth not working: run `yarn twenty remote:add --local` to re-authenticate.
-- Types not generated: ensure `yarn twenty dev` is running — it auto-generates the typed client.
+- Auth prompts not appearing: run `yarn auth:login` again and verify the API key permissions.
+- Types not generated: ensure `yarn app:generate` runs without errors, then re‑start `yarn app:dev`.
 
 ## Contributing
-
 - See our [GitHub](https://github.com/twentyhq/twenty)
 - Join our [Discord](https://discord.gg/cx5n4Jzs57)

packages/create-twenty-app/eslint.config.mjs

@@ -0,0 +1,20 @@
+import baseConfig from '../../eslint.config.mjs';
+
+export default [
+  ...baseConfig,
+  {
+    ignores: ['**/dist/**'],
+  },
+  {
+    files: ['**/*.{js,jsx,ts,tsx}'],
+    rules: {
+      'prettier/prettier': 'error',
+    },
+  },
+  {
+    rules: {
+      'no-console': 'off',
+    },
+    ignores: ['src/**/*.ts', '!src/cli/**/*.ts'],
+  },
+];

packages/create-twenty-app/jest.config.mjs

@@ -1,5 +1,5 @@
 const jestConfig = {
-  displayName: 'create-twenty-app',
+  displayName: 'twenty-cli',
   preset: '../../jest.preset.js',
   testEnvironment: 'node',
   transformIgnorePatterns: ['../../node_modules/'],
@@ -15,7 +15,6 @@ const jestConfig = {
   },
   moduleNameMapper: {
     '^@/(.*)$': '<rootDir>/src/$1',
-    '^package.json$': '<rootDir>/package.json',
   },
   moduleFileExtensions: ['ts', 'js'],
   extensionsToTreatAsEsm: ['.ts'],

packages/create-twenty-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-twenty-app",
-  "version": "2.11.0",
+  "version": "0.5.0",
   "description": "Command-line interface to create Twenty application",
   "main": "dist/cli.cjs",
   "bin": "dist/cli.cjs",
@@ -10,7 +10,9 @@
     "package.json"
   ],
   "scripts": {
-    "build": "npx rimraf dist && npx vite build"
+    "build": "npx rimraf dist && npx vite build",
+    "prepublishOnly": "tsx ../twenty-utils/pack-scripts/pre-publish-only.ts",
+    "postpublish": "tsx ../twenty-utils/pack-scripts/post-publish.ts"
   },
   "keywords": [
     "twenty",
@@ -32,25 +34,21 @@
     "chalk": "^5.3.0",
     "commander": "^12.0.0",
     "fs-extra": "^11.2.0",
+    "inquirer": "^10.0.0",
     "lodash.camelcase": "^4.3.0",
     "lodash.kebabcase": "^4.1.1",
     "lodash.startcase": "^4.4.0",
-    "twenty-sdk": "workspace:*",
+    "twenty-shared": "workspace:*",
     "uuid": "^13.0.0"
   },
   "devDependencies": {
-    "@swc/core": "^1.15.11",
-    "@swc/jest": "^0.2.39",
     "@types/fs-extra": "^11.0.0",
-    "@types/jest": "^30.0.0",
+    "@types/inquirer": "^9.0.0",
     "@types/lodash.camelcase": "^4.3.7",
     "@types/lodash.kebabcase": "^4.1.7",
     "@types/lodash.startcase": "^4",
     "@types/node": "^20.0.0",
-    "jest": "29.7.0",
-    "jest-environment-node": "^29.4.1",
-    "twenty-shared": "workspace:*",
-    "typescript": "^5.9.3",
+    "typescript": "^5.9.2",
     "vite": "^7.0.0",
     "vite-plugin-dts": "^4.5.4",
     "vite-tsconfig-paths": "^4.2.1"

packages/create-twenty-app/project.json

@@ -24,9 +24,20 @@
         "command": "node dist/cli.cjs"
       }
     },
-    "set-local-version": {},
     "typecheck": {},
-    "lint": {},
+    "lint": {
+      "options": {
+        "lintFilePatterns": ["{projectRoot}/src/**/*.{ts,json}"],
+        "maxWarnings": 0
+      },
+      "configurations": {
+        "ci": {
+          "lintFilePatterns": ["{projectRoot}/src/**/*.{ts,json}"],
+          "maxWarnings": 0
+        },
+        "fix": {}
+      }
+    },
     "test": {
       "executor": "@nx/jest:jest",
       "outputs": ["{workspaceRoot}/coverage/{projectRoot}"],

packages/create-twenty-app/src/cli.ts

@@ -1,10 +1,7 @@
 #!/usr/bin/env node
 import chalk from 'chalk';
 import { Command, CommanderError } from 'commander';
-import {
-  type AuthenticationMethod,
-  CreateAppCommand,
-} from '@/create-app.command';
+import { CreateAppCommand } from '@/create-app.command';
 import packageJson from '../package.json';
 
 const program = new Command(packageJson.name)
@@ -15,72 +12,18 @@ const program = new Command(packageJson.name)
     'Output the current version of create-twenty-app.',
   )
   .argument('[directory]')
-  .option('-n, --name <name>', 'Application name')
-  .option('-d, --display-name <displayName>', 'Application display name')
-  .option('--description <description>', 'Application description')
-  .option('--url <url>', 'Twenty server URL (default: http://localhost:2020)')
-  .option('--api-url <apiUrl>', '[deprecated: use --url]')
-  .option(
-    '--authentication-method <method>',
-    'Authentication method: oauth or apiKey (default: apiKey for local, oauth for remote)',
-  )
   .helpOption('-h, --help', 'Display this help message.')
-  .action(
-    async (
-      directory?: string,
-      options?: {
-        name?: string;
-        displayName?: string;
-        description?: string;
-        url?: string;
-        apiUrl?: string;
-        authenticationMethod?: AuthenticationMethod;
-      },
-    ) => {
-      if (directory && !/^[a-z0-9-]+$/.test(directory)) {
-        console.error(
-          chalk.red(
-            `Invalid directory "${directory}". Must contain only lowercase letters, numbers, and hyphens`,
-          ),
-        );
-        process.exit(1);
-      }
-
-      if (options?.name !== undefined && options.name.trim().length === 0) {
-        console.error(chalk.red('Error: --name cannot be empty.'));
-        process.exit(1);
-      }
-
-      if (
-        options?.authenticationMethod &&
-        !['oauth', 'apiKey'].includes(options.authenticationMethod)
-      ) {
-        console.error(
-          chalk.red(
-            'Error: --authentication-method must be "oauth" or "apiKey".',
-          ),
-        );
-        process.exit(1);
-      }
-
-      if (options?.apiUrl) {
-        console.warn(
-          chalk.yellow('Warning: --api-url is deprecated. Use --url instead.'),
-        );
-      }
-
-      const serverUrl = (options?.url ?? options?.apiUrl)?.replace(/\/+$/, '');
-
-      await new CreateAppCommand().execute({
-        directory,
-        name: options?.name,
-        displayName: options?.displayName,
-        description: options?.description,
-        serverUrl,
-        authenticationMethod: options?.authenticationMethod,
-      });
-    },
-  );
+  .action(async (directory?: string) => {
+    if (directory && !/^[a-z0-9-]+$/.test(directory)) {
+      console.error(
+        chalk.red(
+          `Invalid directory "${directory}". Must contain only lowercase letters, numbers, and hyphens`,
+        ),
+      );
+      process.exit(1);
+    }
+    await new CreateAppCommand().execute(directory);
+  });
 
 program.exitOverride();