WIP¨

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 7.0.11
to 7.0.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/releases">nodemailer's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.13</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.12...v7.0.13">7.0.13</a>
(2026-01-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>downgrade transient connection error logs to warn level (<a
href="https://github.com/nodemailer/nodemailer/commit/4c041db85d560e98bc5e1fd5d5a191835c5b7d2f">4c041db</a>)</li>
</ul>
<h2>v7.0.12</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.11...v7.0.12">7.0.12</a>
(2025-12-22)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>added support for REQUIRETLS (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1793">#1793</a>)
(<a
href="https://github.com/nodemailer/nodemailer/commit/053ce6a772a7c608e6bee7f58ebe9900afbd9b84">053ce6a</a>)</li>
<li>use 8bit encoding for message/rfc822 attachments (<a
href="https://github.com/nodemailer/nodemailer/commit/adf86113217b23ff3cd1191af5cd1d360fcc313b">adf8611</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.12...v7.0.13">7.0.13</a>
(2026-01-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>downgrade transient connection error logs to warn level (<a
href="https://github.com/nodemailer/nodemailer/commit/4c041db85d560e98bc5e1fd5d5a191835c5b7d2f">4c041db</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.11...v7.0.12">7.0.12</a>
(2025-12-22)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>added support for REQUIRETLS (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1793">#1793</a>)
(<a
href="https://github.com/nodemailer/nodemailer/commit/053ce6a772a7c608e6bee7f58ebe9900afbd9b84">053ce6a</a>)</li>
<li>use 8bit encoding for message/rfc822 attachments (<a
href="https://github.com/nodemailer/nodemailer/commit/adf86113217b23ff3cd1191af5cd1d360fcc313b">adf8611</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/893119505aa25723dd9a7d90c8dfd223d28a0cc4"><code>8931195</code></a>
chore(master): release 7.0.13 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1798">#1798</a>)</li>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/9398d633d2c1bf5bf08a0e258ff17d5d7a45f0e6"><code>9398d63</code></a>
Bumped deps</li>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/4c041db85d560e98bc5e1fd5d5a191835c5b7d2f"><code>4c041db</code></a>
fix: downgrade transient connection error logs to warn level</li>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/a208a0bc86a315d037d5be8849fab5862c488baa"><code>a208a0b</code></a>
chore(master): release 7.0.12 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1785">#1785</a>)</li>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/053ce6a772a7c608e6bee7f58ebe9900afbd9b84"><code>053ce6a</code></a>
fix: added support for REQUIRETLS (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1793">#1793</a>)</li>
<li><a
href="https://github.com/nodemailer/nodemailer/commit/adf86113217b23ff3cd1191af5cd1d360fcc313b"><code>adf8611</code></a>
fix: use 8bit encoding for message/rfc822 attachments</li>
<li>See full diff in <a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.11...v7.0.13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nodemailer&package-manager=npm_and_yarn&previous-version=7.0.11&new-version=7.0.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles Bochet <charlesBochet@users.noreply.github.com>

.cursor/Dockerfile

@@ -0,0 +1,34 @@
+FROM ubuntu:22.04
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y \
+    curl \
+    git \
+    make \
+    build-essential \
+    postgresql-client \
+    docker.io \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install nvm (project recommends nvm + .nvmrc for consistent Node versions)
+ENV NVM_DIR=/usr/local/nvm
+RUN mkdir -p $NVM_DIR \
+    && curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/master/install.sh | bash
+
+SHELL ["/bin/bash", "-c"]
+
+# Copy .nvmrc so nvm install picks up the right version
+COPY .nvmrc /tmp/.nvmrc
+
+# Install Node.js from .nvmrc, enable Corepack, and symlink binaries
+# so they're available on PATH without hardcoding a version
+RUN . $NVM_DIR/nvm.sh \
+    && nvm install $(cat /tmp/.nvmrc) \
+    && nvm alias default $(cat /tmp/.nvmrc) \
+    && corepack enable \
+    && BIN_DIR=$(dirname $(nvm which default)) \
+    && ln -sf $BIN_DIR/node /usr/local/bin/node \
+    && ln -sf $BIN_DIR/npm /usr/local/bin/npm \
+    && ln -sf $BIN_DIR/npx /usr/local/bin/npx \
+    && ln -sf $BIN_DIR/corepack /usr/local/bin/corepack

.cursor/environment.json

@@ -0,0 +1,10 @@
+{
+  "install": "yarn install",
+  "start": "(sudo service docker start || service docker start || true) && bash packages/twenty-utils/setup-dev-env.sh && npx nx database:reset twenty-server",
+  "terminals": [
+    {
+      "name": "Development Server",
+      "command": "yarn start"
+    }
+  ]
+}

.cursor/rules/README.md

@@ -1,65 +0,0 @@
-# Twenty Development Rules
-
-This directory contains Twenty's development guidelines and best practices. The rules are organized into several key categories:
-
-## Guidelines Structure
-
-### 1. Architecture and Structure
-- `architecture.md`: Project overview, technology stack, and infrastructure setup
-- `file-structure-guidelines.md`: File and directory organization patterns
-
-### 2. Code Style and Development
-- `typescript-guidelines.md`: TypeScript best practices and conventions
-- `code-style-guidelines.md`: General coding standards and style guide
-
-### 3. React Development
-- `react-general-guidelines.md`: Core React development principles and patterns
-- `react-state-management-guidelines.md`: State management approaches and best practices
-
-### 4. Testing
-- `testing-guidelines.md`: Testing strategies, patterns, and best practices
-
-### 5. Internationalization
-- `translations.md`: Translation workflow, i18n setup, and string management
-
-## Common Development Commands
-
-### Frontend Commands
-```bash
-# Testing
-npx nx test twenty-front                    # Run unit tests
-npx nx storybook:build twenty-front         # Build Storybook
-npx nx storybook:serve-and-test:static     # Run Storybook tests
-
-# Development
-npx nx lint twenty-front                    # Run linter
-npx nx typecheck twenty-front               # Type checking
-npx nx run twenty-front:graphql:generate    # Generate GraphQL types
-```
-
-### Backend Commands
-```bash
-# Database
-npx nx database:reset twenty-server         # Reset database
-npx nx run twenty-server:database:init:prod # Initialize database
-npx nx run twenty-server:database:migrate:prod # Run migrations
-
-# Development
-npx nx run twenty-server:start             # Start the server
-npx nx run twenty-server:lint              # Run linter (add --fix to auto-fix)
-npx nx run twenty-server:typecheck         # Type checking
-npx nx run twenty-server:test              # Run unit tests
-npx nx run twenty-server:test:integration:with-db-reset # Run integration tests
-
-# Migrations
-npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/[name] -d src/database/typeorm/core/core.datasource.ts
-
-# Workspace
-npx nx run twenty-server:command workspace:sync-metadata -f  # Sync metadata
-```
-
-## Usage
-
-These rules are automatically attached to relevant files in your workspace through Cursor's context system. They help maintain consistency and quality across the Twenty codebase.
-
-For the most up-to-date version of these guidelines, always refer to the files in this directory. 

.cursor/rules/README.mdc

@@ -0,0 +1,144 @@
+---
+description: Twenty CRM development rules and best practices
+globs: []
+alwaysApply: true
+---
+# Twenty Development Rules
+
+This directory contains Twenty's development guidelines and best practices in the modern Cursor Rules format (MDC). These rules are automatically applied based on file patterns and provide context-aware guidance to AI assistants.
+
+## Rules Overview
+
+### Core Guidelines
+- **architecture.mdc** - Project overview, technology stack, and infrastructure setup (Always Applied)
+- **nx-rules.mdc** - Nx workspace guidelines and best practices (Auto-attached to Nx files)
+- **server-migrations.mdc** - Backend migration and TypeORM guidelines for `twenty-server` (Auto-attached to server entities and migration files)
+- **creating-syncable-entity.mdc** - Comprehensive guide for creating new syncable entities (with universalIdentifier and applicationId) in the workspace migration system (Agent-requested for metadata-modules and workspace-migration files)
+
+### Code Quality
+- **typescript-guidelines.mdc** - TypeScript best practices and conventions (Auto-attached to .ts/.tsx files)
+- **code-style.mdc** - General coding standards and style guide (Auto-attached to code files)
+- **file-structure.mdc** - File and directory organization patterns (Auto-attached to config files)
+
+### React Development
+- **react-general-guidelines.mdc** - Core React development principles (Auto-attached to React files)
+- **react-state-management.mdc** - State management approaches with Jotai (Auto-attached to state files)
+
+### Testing & Quality
+- **testing-guidelines.mdc** - Testing strategies and best practices (Auto-attached to test files)
+
+### Internationalization
+- **translations.mdc** - Translation workflow and i18n setup (Auto-attached to locale files)
+
+## How Rules Work
+
+### Automatic Attachment
+Rules are automatically included in your AI context based on file patterns (globs). When you work on TypeScript files, the TypeScript guidelines are automatically loaded.
+
+### Manual Reference
+You can manually reference any rule using the `@ruleName` syntax:
+- `@nx-rules` - Include Nx-specific guidance
+- `@react-general-guidelines` - Load React best practices
+- `@testing-guidelines` - Get testing recommendations
+- `@creating-syncable-entity` - Guide for creating new syncable entities
+
+### Rule Types Used
+- **Always Applied** - Loaded in every context (architecture.mdc, README.mdc)
+- **Auto Attached** - Loaded when matching file patterns are referenced
+- **Agent Requested** - Available for AI to include when relevant
+- **Manual** - Only included when explicitly mentioned
+
+## Development Commands
+
+### Frontend Commands
+```bash
+# Testing
+npx nx test twenty-front                    # Run unit tests
+npx nx storybook:build twenty-front         # Build Storybook
+npx nx storybook:test                       # Run Storybook tests
+
+# Development
+npx nx lint:diff-with-main twenty-front            # Lint files changed vs main (fastest)
+npx nx lint:diff-with-main twenty-front --configuration=fix  # Auto-fix changed files
+npx nx lint twenty-front                    # Lint all files (slower)
+npx nx typecheck twenty-front               # Type checking
+npx nx run twenty-front:graphql:generate    # Generate GraphQL types
+```
+
+### Backend Commands
+```bash
+# Database
+npx nx database:reset twenty-server         # Reset database
+npx nx run twenty-server:database:init:prod # Initialize database
+npx nx run twenty-server:database:migrate:prod # Run migrations
+
+# Development
+npx nx run twenty-server:start             # Start the server
+npx nx lint:diff-with-main twenty-server          # Lint files changed vs main (fastest)
+npx nx lint:diff-with-main twenty-server --configuration=fix  # Auto-fix changed files
+npx nx run twenty-server:lint              # Lint all files (slower)
+npx nx run twenty-server:typecheck         # Type checking
+npx nx run twenty-server:test              # Run unit tests
+npx nx run twenty-server:test:integration:with-db-reset # Run integration tests
+
+# Migrations
+npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/[name] -d src/database/typeorm/core/core.datasource.ts
+
+# Workspace
+npx nx run twenty-server:command workspace:sync-metadata -f  # Sync metadata
+```
+
+## Usage Guidelines
+
+### For Developers
+- Rules are automatically applied based on file context
+- Check rule descriptions to understand when they're activated
+- Use manual references (`@ruleName`) for additional context
+- Keep rules updated as the codebase evolves
+
+### For AI Assistants
+- Rules provide consistent guidance across conversations
+- Use rule context to maintain coding standards
+- Reference specific rules when making recommendations
+- Apply rule principles in code suggestions and reviews
+
+## Contributing to Rules
+
+### Adding New Rules
+1. Create a new `.mdc` file in this directory
+2. Include proper metadata headers with description and globs
+3. Write clear, actionable guidelines with examples
+4. Test the rule with relevant file patterns
+5. Update this README if needed
+
+### Updating Existing Rules
+1. Modify the rule content while preserving metadata
+2. Test changes with affected file patterns
+3. Ensure consistency with other rules
+4. Update examples and best practices as needed
+
+## Rule Format Reference
+
+Each rule file uses the MDC format with metadata:
+
+```markdown
+---
+description: Brief description of the rule's purpose
+globs: ["**/*.ts", "**/*.tsx"]  # File patterns for auto-attachment
+alwaysApply: false              # Whether to always include this rule
+---
+
+# Rule Title
+
+Rule content in Markdown format...
+```
+
+## Migration from Legacy Format
+
+The rules have been migrated from the legacy `.md` format to the modern `.mdc` format, providing:
+- Better context awareness through file pattern matching
+- Improved organization with metadata headers
+- More flexible rule application strategies
+- Enhanced integration with Cursor's AI features
+
+For the most up-to-date version of these guidelines, always refer to the files in this directory.

.cursor/rules/architecture.md

@@ -1,97 +0,0 @@
-# Twenty Project Architecture
-
-## Overview
-Twenty is an open-source CRM built with modern technologies, using TypeScript for both frontend and backend development. This document outlines the core architectural decisions and structure of the project.
-
-## Monorepo Structure
-The project is organized as a monorepo using nx, with the following main packages:
-
-### Main Packages
-- `packages/twenty-front`: Main Frontend application
-  - Technology: React
-  - Purpose: Provides the main user interface for the CRM
-  - Key responsibilities: User interactions, state management, data display
-
-- `packages/twenty-server`: Main Backend application
-  - Technology: NestJS
-  - Purpose: Handles business logic, data persistence, and API
-  - Key responsibilities: Data processing, authentication, API endpoints
-
-- `packages/twenty-website`: Marketing Website and Documentation
-  - Technology: NextJS
-  - Purpose: Public-facing website and documentation
-  - Key responsibilities: Marketing content, documentation, SEO
-
-- `packages/twenty-ui`: UI Component Library
-  - Technology: React
-  - Purpose: Shared UI components and design system
-  - Key responsibilities: Reusable components, design consistency
-
-- `packages/twenty-shared`: Shared Utilities
-  - Purpose: Cross-package shared code between frontend and backend
-  - Contents: Utils, constants, types, interfaces
-
-## Core Technology Stack
-
-### Package Management
-- Package Manager: yarn
-- Monorepo Tool: nx
-- Benefits: Consistent dependency management, shared configurations
-
-### Database Layer
-- Primary Database: PostgreSQL
-- Schema Structure:
-  - Core schema: Main application data
-  - Metadata schema: Configuration and customization data
-  - Workspace schemas: One schema per tenant, containing tenant-specific data
-- ORM Layer:
-  - TypeORM: For core and metadata schemas
-    - Purpose: Type-safe database operations for system data
-    - Benefits: Strong typing, migration support
-  - TwentyORM: For workspace schemas
-    - Purpose: Manages tenant-specific entities and customizations
-    - Benefits: Dynamic entity management, per-tenant customization
-    - Example: Entities like CompanyWorkspaceEntity are managed per workspace
-
-### State Management
-- Frontend State: Recoil
-  - Purpose: Global state management
-  - Use cases: User preferences, UI state, cached data
-
-### Data Layer
-- API Technology: GraphQL
-- Client: Apollo Client
-  - Purpose: Data fetching and caching
-  - Benefits: Type safety, efficient data loading
-
-### Infrastructure
-- Cache: Redis
-  - Purpose: High-performance caching layer
-  - Use cases: Session data, frequent queries
-
-- Authentication: JWT
-  - Purpose: Secure user authentication
-  - Implementation: Token-based auth flow
-
-- Queue System: BullMQ
-  - Purpose: Background job processing
-  - Use cases: Emails, exports, imports
-
-- Storage: S3/Local Filesystem
-  - Purpose: File storage and management
-  - Flexibility: Configurable for cloud or local storage
-
-### Testing Infrastructure
-- Backend Testing:
-  - Framework: Jest
-  - API Testing: Supertest
-  - Coverage: Unit tests, integration tests
-
-- Frontend Testing:
-  - Framework: Jest
-  - Component Testing: Storybook
-  - API Mocking: MSW (Mock Service Worker)
-
-- End-to-End Testing:
-  - Framework: Playwright
-  - Coverage: Critical user journeys 

.cursor/rules/architecture.mdc

@@ -0,0 +1,30 @@
+---
+description: Twenty CRM architecture overview - monorepo structure, tech stack, and development principles
+globs: []
+alwaysApply: true
+---
+
+# Twenty Architecture
+
+## Tech Stack
+- **Frontend**: React 18, TypeScript, Jotai, Styled Components, Vite
+- **Backend**: NestJS, TypeORM, PostgreSQL, Redis, GraphQL
+- **Monorepo**: Nx workspace with yarn
+
+## Package Structure
+```
+packages/
+├── twenty-front/     # React app
+├── twenty-server/    # NestJS API  
+├── twenty-ui/        # Shared components
+├── twenty-shared/    # Common types/utils
+└── twenty-emails/    # Email templates
+```
+
+## Key Principles
+- **Functional components only** (no classes)
+- **Named exports only** (no default exports)
+- **Types over interfaces** (except for extending third-party)
+- **String literals over enums** (except GraphQL)
+- **No 'any' type allowed**
+- **Event handlers over useEffect** for state updates

.cursor/rules/changelog-process.mdc

@@ -0,0 +1,324 @@
+---
+description: Process and guidelines for creating release changelogs for Twenty CRM
+globs: ["**/releases/*.mdx", "**/releases/**"]
+alwaysApply: false
+---
+# Twenty Release Changelog Process
+
+Complete guide for creating release changelogs, including codebase research, file structure, and content guidelines.
+
+## Prerequisites
+
+Before starting, gather the following information:
+
+### Required Information
+
+**Version Number**: `{VERSION}` (e.g., 1.9.0, 2.0.0, 2.1.0)
+
+**Release Date**: Use today's date in format: YYYY-MM-DD
+
+### Changes/Features to Document
+
+List the features and changes to include in this release:
+
+1. **Feature Name**: ______________________________
+   - Brief description: ______________________________
+   - Related area (workflow, UI, backend, etc.): ______________________________
+
+2. **Feature Name**: ______________________________
+   - Brief description: ______________________________
+   - Related area: ______________________________
+
+3. **Feature Name**: ______________________________
+   - Brief description: ______________________________
+   - Related area: ______________________________
+
+## Codebase Research Guide
+
+If feature descriptions are not provided or need enhancement, research the codebase:
+
+### Where to Look
+
+**For Workflow Features:**
+- Frontend: `packages/twenty-front/src/modules/workflow/`
+- Backend: `packages/twenty-server/src/modules/workflow/`
+- Components: `packages/twenty-front/src/modules/workflow/components/`
+
+**For UI/UX Changes:**
+- Components: `packages/twenty-front/src/modules/ui/`
+- Layout: `packages/twenty-front/src/modules/layout/`
+- Design system: `packages/twenty-ui/src/`
+
+**For Backend/API Features:**
+- Server modules: `packages/twenty-server/src/modules/`
+- Entities: `packages/twenty-server/src/entities/`
+- Services: Look for `*.service.ts` files
+
+**For Database/ORM Changes:**
+- Migrations: `packages/twenty-server/src/database/typeorm/`
+- Entities: `packages/twenty-server/src/entities/`
+
+### Research Commands
+
+```bash
+# Find recent merged PRs (adjust date as needed)
+gh pr list --search "merged:>2025-10-01" --limit 50 --state merged
+
+# View recent commits
+git log --since="2 weeks ago" --oneline --no-merges
+
+# View commits between releases (replace with actual release tags)
+git log v1.7.0..v1.8.0 --oneline
+
+# Search for specific feature keywords in code
+grep -r "iterator" packages/twenty-front/src/modules/workflow/
+grep -r "bulk select" packages/twenty-front/src/modules/workflow/
+
+# Find recent changes in specific directory
+git log --since="2 weeks ago" --oneline -- packages/twenty-front/src/modules/workflow/
+```
+
+### Using Codebase Search
+
+Use the AI codebase search to find:
+- "How does the workflow iterator node work?"
+- "Where is bulk select implemented for workflows?"
+- "What changes were made to the search node limit?"
+
+## Step-by-Step Process
+
+### 1. Setup Git Branch
+
+**IMPORTANT**: Always start from an up-to-date main branch to avoid merge conflicts and ensure the changelog is based on the latest code.
+
+```bash
+cd /Users/thomascolasdesfrancs/code/twenty
+git checkout main
+git pull origin main
+git checkout -b {VERSION}
+```
+
+Replace `{VERSION}` with the actual version number (e.g., `1.9.0`)
+
+⚠️ **Do this first** before making any file changes. This ensures your branch is based on the latest main.
+
+### 2. Create File Structure
+
+**Create changelog file:**
+- Path: `packages/twenty-website/src/content/releases/{VERSION}.mdx`
+- Example: `packages/twenty-website/src/content/releases/1.9.0.mdx`
+
+**Create image folder:**
+- Path: `packages/twenty-website/public/images/releases/{MINOR_VERSION}/`
+- Example for version 1.9.0: `packages/twenty-website/public/images/releases/1.9/`
+- Example for version 2.0.0: `packages/twenty-website/public/images/releases/2.0/`
+
+```bash
+# Create the image folder
+mkdir -p packages/twenty-website/public/images/releases/{MINOR_VERSION}
+```
+
+### 3. Move Illustration Files
+
+**Source:** `/Users/thomascolasdesfrancs/Downloads/🆕`
+
+**Destination:** `packages/twenty-website/public/images/releases/{MINOR_VERSION}/`
+
+**Naming Convention:** `{VERSION}-descriptive-name.png`
+
+Examples:
+- `1.9.0-feature-name.png`
+- `1.9.0-another-feature.png`
+
+```bash
+# Move and rename files
+cp ~/Downloads/🆕/source-file.png packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-name.png
+```
+
+### 4. Research Features (if needed)
+
+If descriptions are not provided:
+1. Use the research commands above to find recent PRs and commits
+2. Search the codebase for feature-related code
+3. Read PR descriptions for context
+4. Check component comments and documentation
+
+### 5. Write Changelog Content
+
+Create the MDX file with this structure:
+
+```markdown
+---
+release: {VERSION}
+Date: {YYYY-MM-DD}
+---
+
+# Feature 1 Name
+
+Short description explaining what the feature does and why it's useful. Keep it user-focused and concise (1-2 sentences).
+
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.png)
+
+# Feature 2 Name
+
+Another short description of the second feature.
+
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.png)
+
+# Feature 3 Name
+
+Description of the third feature.
+
+![](/images/releases/{MINOR_VERSION}/{VERSION}-feature-3.png)
+```
+
+**Style Guidelines:**
+- Use H1 (`#`) for feature names
+- Keep descriptions to 1-2 sentences
+- Focus on user benefits, not technical implementation
+- Use active voice
+- Start with what the user can now do
+- **NEVER mention the brand name "Twenty"** in changelog text - use "your workspace", "the platform", or similar neutral references instead
+
+**Reference Previous Changelogs:**
+- Check `packages/twenty-website/src/content/releases/` for examples
+- Recent releases: 1.7.0.mdx, 1.6.0.mdx, 1.5.0.mdx
+
+### 6. Review
+
+Open the changelog file for review:
+```bash
+# Open in Cursor
+cursor packages/twenty-website/src/content/releases/{VERSION}.mdx
+
+# Open image folder to verify illustrations
+open packages/twenty-website/public/images/releases/{MINOR_VERSION}
+```
+
+Review checklist:
+- [ ] Version number is correct in frontmatter
+- [ ] Date is today's date
+- [ ] All features are documented
+- [ ] Image paths are correct
+- [ ] Image files exist in the folder
+- [ ] Descriptions are clear and user-focused
+- [ ] Spelling and grammar are correct
+
+### 7. Present Changelog for User Approval
+
+**IMPORTANT**: Before committing and creating the PR, always show the complete changelog content to the user and wait for explicit approval.
+
+**What to show:**
+1. Display the full MDX content of the changelog file
+2. Confirm that illustration files were moved to the correct location
+3. List the image file names and paths
+
+**What to say:**
+```
+I've created the changelog for version {VERSION}. Here's the content for your review:
+
+[Show full MDX content]
+
+Images moved to:
+- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-1.png
+- packages/twenty-website/public/images/releases/{MINOR_VERSION}/{VERSION}-feature-2.png
+
+Please review the content. Once you approve, I'll commit the changes and create the pull request.
+```
+
+**Wait for user approval before proceeding to step 8.**
+
+Possible user responses:
+- "Looks good" / "Approve" / "Create the PR" → Proceed to step 8
+- Requests changes → Make the requested edits, then show content again
+- Asks questions → Answer them, then wait for approval
+
+### 8. Commit Changes
+
+```bash
+# Check status
+git status
+
+# Add files
+git add packages/twenty-website/src/content/releases/{VERSION}.mdx
+git add packages/twenty-website/public/images/releases/{MINOR_VERSION}/
+
+# Commit
+git commit -m "Add {VERSION} release changelog"
+
+# Push branch
+git push -u origin {VERSION}
+```
+
+### 9. Create Pull Request
+
+```bash
+# Create PR using GitHub CLI
+gh pr create \
+  --title "Release {VERSION}" \
+  --body "## Release {VERSION}
+
+This release includes:
+
+- Feature 1
+- Feature 2
+- Feature 3
+
+Changelog file: \`packages/twenty-website/src/content/releases/{VERSION}.mdx\`
+Release date: {DATE}" \
+  --base main \
+  --head {VERSION}
+```
+
+Or visit: `https://github.com/twentyhq/twenty/pull/new/{VERSION}`
+
+## File Naming Conventions
+
+### Changelog Files
+- **Format**: `{MAJOR}.{MINOR}.{PATCH}.mdx`
+- **Convention**: One file per complete version
+- **Examples**: `1.6.0.mdx`, `1.7.0.mdx`, `2.0.0.mdx`
+- **Location**: `packages/twenty-website/src/content/releases/`
+
+### Image Folders
+- **Format**: `{MAJOR}.{MINOR}/`
+- **Convention**: One folder per minor version (shared across patches)
+- **Examples**: `1.6/`, `1.7/`, `2.0/`
+- **Location**: `packages/twenty-website/public/images/releases/`
+
+### Image Files
+- **Format**: `{VERSION}-descriptive-name.png`
+- **Convention**: Kebab-case descriptive names
+- **Examples**: 
+  - `1.8.0-workflow-iterator.png`
+  - `1.8.0-bulk-select.png`
+  - `1.9.0-new-feature.png`
+
+## Quick Reference Template
+
+Copy and fill this for each release:
+
+```
+VERSION: ___________
+DATE: ___________
+MINOR_VERSION: ___________
+
+Features to document:
+1. ___________________________
+2. ___________________________
+3. ___________________________
+
+Branch name: {VERSION}
+Changelog path: packages/twenty-website/src/content/releases/{VERSION}.mdx
+Images path: packages/twenty-website/public/images/releases/{MINOR_VERSION}/
+```
+
+## Tips
+
+- **Start early**: Begin documenting features as they're developed
+- **User perspective**: Write for users, not developers
+- **Be concise**: 1-2 sentences per feature
+- **Visual first**: Illustrations should showcase the feature clearly
+- **Consistent style**: Match tone and structure of previous changelogs
+- **Test links**: Verify all image paths work before committing
+- **Research thoroughly**: Use codebase search to understand features deeply

.cursor/rules/code-style-guidelines.md

@@ -1,259 +0,0 @@
-# Code Style Guidelines
-
-## Core Code Style Principles
-Twenty emphasizes clean, readable, and maintainable code. This document outlines our code style conventions and best practices.
-
-## Control Flow
-
-### Early Returns
-- Use early returns to reduce nesting
-- Handle edge cases first
-  ```typescript
-  // ✅ Correct
-  const processUser = (user: User | null) => {
-    if (!user) return null;
-    if (!user.isActive) return null;
-    
-    return {
-      id: user.id,
-      name: user.name,
-    };
-  };
-
-  // ❌ Incorrect
-  const processUser = (user: User | null) => {
-    if (user) {
-      if (user.isActive) {
-        return {
-          id: user.id,
-          name: user.name,
-        };
-      }
-    }
-    return null;
-  };
-  ```
-
-### No Nested Ternaries
-- Avoid nested ternary operators
-- Use if statements or early returns
-  ```typescript
-  // ✅ Correct
-  const getUserDisplay = (user: User) => {
-    if (!user.name) return 'Anonymous';
-    if (!user.isActive) return 'Inactive User';
-    return user.name;
-  };
-
-  // ❌ Incorrect
-  const getUserDisplay = (user: User) => 
-    user.name 
-      ? user.isActive 
-        ? user.name 
-        : 'Inactive User'
-      : 'Anonymous';
-  ```
-
-### No Else-If Chains
-- Use switch statements or lookup objects
-- Keep conditions flat
-  ```typescript
-  // ✅ Correct
-  const getStatusColor = (status: Status): string => {
-    switch (status) {
-      case 'success':
-        return 'green';
-      case 'warning':
-        return 'yellow';
-      case 'error':
-        return 'red';
-      default:
-        return 'gray';
-    }
-  };
-
-  // Or using a lookup object
-  const statusColors: Record<Status, string> = {
-    success: 'green',
-    warning: 'yellow',
-    error: 'red',
-    default: 'gray',
-  };
-
-  // ❌ Incorrect
-  const getStatusColor = (status: Status): string => {
-    if (status === 'success') {
-      return 'green';
-    } else if (status === 'warning') {
-      return 'yellow';
-    } else if (status === 'error') {
-      return 'red';
-    } else {
-      return 'gray';
-    }
-  };
-  ```
-
-## Operators and Expressions
-
-### Optional Chaining Over &&
-- Use optional chaining for null/undefined checks
-- Clearer intent and better type safety
-  ```typescript
-  // ✅ Correct
-  const userName = user?.name;
-  const userAddress = user?.address?.street;
-
-  // ❌ Incorrect
-  const userName = user && user.name;
-  const userAddress = user && user.address && user.address.street;
-  ```
-
-## Function Design
-
-### Small Focused Functions
-- Keep functions small and single-purpose
-- Extract complex logic into helper functions
-  ```typescript
-  // ✅ Correct
-  const validateUser = (user: User) => {
-    if (!isValidName(user.name)) return false;
-    if (!isValidEmail(user.email)) return false;
-    if (!isValidAge(user.age)) return false;
-    return true;
-  };
-
-  const isValidName = (name: string) => {
-    return name.length >= 2 && /^[a-zA-Z\s]*$/.test(name);
-  };
-
-  const isValidEmail = (email: string) => {
-    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
-  };
-
-  const isValidAge = (age: number) => {
-    return age >= 18 && age <= 120;
-  };
-
-  // ❌ Incorrect
-  const validateUser = (user: User) => {
-    if (user.name.length < 2 || !/^[a-zA-Z\s]*$/.test(user.name)) return false;
-    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(user.email)) return false;
-    if (user.age < 18 || user.age > 120) return false;
-    return true;
-  };
-  ```
-
-## Naming and Documentation
-
-### Clear Variable Names
-- Use descriptive, intention-revealing names
-- Avoid abbreviations unless common
-  ```typescript
-  // ✅ Correct
-  const isUserActive = user.status === 'active';
-  const hasRequiredPermissions = user.permissions.includes('admin');
-  const userDisplayName = user.name || 'Anonymous';
-
-  // ❌ Incorrect
-  const active = user.status === 'active';
-  const hasPerm = user.permissions.includes('admin');
-  const udn = user.name || 'Anonymous';
-  ```
-
-### No Console.logs in Commits
-- Remove all console.logs before committing
-- Use proper logging/error tracking in production
-  ```typescript
-  // ❌ Incorrect - Don't commit these
-  console.log('user:', user);
-  console.log('debug:', someValue);
-
-  // ✅ Correct - Use proper logging
-  logger.info('User action completed', { userId: user.id });
-  logger.error('Operation failed', { error });
-  ```
-
-### Minimal Comments
-- Write self-documenting code
-- Use comments only for complex business logic
-  ```typescript
-  // ✅ Correct
-  // Calculate pro-rated amount based on billing cycle
-  const calculateProRatedAmount = (amount: number, daysLeft: number, totalDays: number) => {
-    return (amount * daysLeft) / totalDays;
-  };
-
-  // ❌ Incorrect - Unnecessary comments
-  // Get the user's name
-  const getUserName = (user: User) => user.name;
-
-  // Check if user is active
-  const isUserActive = (user: User) => user.status === 'active';
-  ```
-
-## Error Handling
-
-### Proper Error Handling
-- Use try-catch blocks appropriately
-- Provide meaningful error messages
-  ```typescript
-  // ✅ Correct
-  const fetchUserData = async (userId: string) => {
-    try {
-      const response = await api.get(`/users/${userId}`);
-      return response.data;
-    } catch (error) {
-      logger.error('Failed to fetch user data', {
-        userId,
-        error: error instanceof Error ? error.message : 'Unknown error',
-      });
-      throw new UserFetchError('Failed to fetch user data');
-    }
-  };
-
-  // ❌ Incorrect
-  const fetchUserData = async (userId: string) => {
-    try {
-      const response = await api.get(`/users/${userId}`);
-      return response.data;
-    } catch (error) {
-      console.log('error:', error);
-      throw error;
-    }
-  };
-  ```
-
-## Code Organization
-
-### Logical Grouping
-- Group related code together
-- Maintain consistent organization
-  ```typescript
-  // ✅ Correct
-  class UserService {
-    // Properties
-    private readonly api: Api;
-    private readonly logger: Logger;
-
-    // Constructor
-    constructor(api: Api, logger: Logger) {
-      this.api = api;
-      this.logger = logger;
-    }
-
-    // Public methods
-    public async getUser(id: string): Promise<User> {
-      // Implementation
-    }
-
-    public async updateUser(user: User): Promise<User> {
-      // Implementation
-    }
-
-    // Private helpers
-    private validateUser(user: User): boolean {
-      // Implementation
-    }
-  }
-  ``` 

.cursor/rules/code-style.mdc

@@ -0,0 +1,172 @@
+---
+description: Code style guidelines for Twenty CRM
+globs: []
+alwaysApply: true
+---
+# Code Style Guidelines
+
+## Formatting Standards
+- **Prettier**: 2-space indentation, single quotes, trailing commas, semicolons
+- **Print width**: 80 characters
+- **Oxlint**: No unused imports, consistent import ordering, prefer const over let
+
+## Naming Conventions
+```typescript
+// ✅ Variables and functions - camelCase
+const userAccountBalance = 1000;
+const calculateMonthlyPayment = () => {};
+
+// ✅ Constants - SCREAMING_SNAKE_CASE
+const API_ENDPOINTS = {
+  USERS: '/api/users',
+  ORDERS: '/api/orders',
+} as const;
+
+// ✅ Types and Classes - PascalCase
+class UserService {}
+type UserAccountData = {};
+type ButtonProps = {}; // Component props suffix with 'Props'
+
+// ✅ Files and directories - kebab-case
+// user-profile.component.tsx
+// user-profile.styles.ts
+
+// ❌ NEVER use abbreviations in variable names
+// Bad
+const users = data.map((u) => u.name);
+const field = items.find((f) => f.id === id);
+
+// Good
+const users = data.map((user) => user.name);
+const field = items.find((item) => item.id === id);
+const fieldMetadata = inlineFields.find(
+  (fieldMetadataItem) => fieldMetadataItem.name === fieldName,
+);
+```
+
+## Import Organization
+```typescript
+// ✅ Correct import order
+// 1. External libraries
+import React from 'react';
+import { useCallback } from 'react';
+import styled from 'styled-components';
+
+// 2. Internal modules (absolute paths)
+import { Button } from '@/components/ui';
+import { UserService } from '@/services';
+
+// 3. Relative imports
+import { UserCardProps } from './types';
+```
+
+## Function Structure
+```typescript
+// ✅ Small, focused functions
+// ✅ Required parameters first, optional last
+const processUserData = (
+  user: User,
+  options: ProcessingOptions,
+  callback?: (result: ProcessedUser) => void
+): ProcessedUser => {
+  const processedUser = transformUserData(user);
+  applyOptions(processedUser, options);
+
+  if (callback) {
+    callback(processedUser);
+  }
+
+  return processedUser;
+};
+```
+
+## Comments
+```typescript
+// ✅ Use short-form comments, NOT JSDoc blocks
+// ✅ Explain business logic and non-obvious intentions (WHY, not WHAT)
+// Apply 15% discount for premium users with orders > $100
+const discount = isPremiumUser && orderTotal > 100 ? 0.15 : 0;
+
+// TODO: Replace with proper authentication service
+const isAuthenticated = localStorage.getItem('token') !== null;
+
+// ✅ Multi-line comments use multiple // lines (NOT /** */ blocks)
+// Calculates the total price after applying tax and discount
+// Returns the final price that should be charged to the customer
+const calculateTotalPrice = (basePrice: number): number => {
+  // Implementation
+};
+
+// ❌ AVOID obvious comments that just describe what code does
+// Bad: Get all inline fields dynamically
+const { inlineFieldMetadataItems } = useFieldListFieldMetadataItems({...});
+
+// Bad: Define standard fields in display order
+const standardFieldOrder = ['startsAt', 'endsAt', 'conferenceLink'];
+
+// Bad: Split fields into standard and custom
+const standardFields = standardFieldOrder.map(...)
+
+// ✅ GOOD: Only comment if explaining non-obvious business logic
+// Calendar events display standard fields first, then custom fields after participants
+// to maintain consistency with the legacy UI behavior
+const standardFields = standardFieldOrder.map(...)
+
+// ❌ AVOID JSDoc blocks - use short comments instead
+/**
+ * This style is NOT preferred in this codebase
+ */
+```
+
+**Comment Guidelines:**
+- **DO** comment complex business rules or domain-specific logic
+- **DO** comment non-obvious algorithmic decisions
+- **DO** add TODOs for future improvements
+- **DON'T** comment obvious variable declarations or function calls
+- **DON'T** comment what is already clear from well-named variables/functions
+- **DON'T** add comments that just repeat what the code says
+
+## Utility Helpers
+```typescript
+// ✅ Use existing utility helpers instead of manual checks
+import { isDefined } from 'twenty-shared/utils';
+import { isNonEmptyString, isNonEmptyArray } from '@sniptt/guards';
+
+// ❌ Manual type guards
+const validItems = items.filter((item): item is Item => item !== undefined);
+const hasValue = value !== null && value !== undefined;
+
+// ✅ Use utility helpers
+const validItems = items.filter(isDefined);
+const hasValue = isDefined(value);
+
+// Other useful helpers:
+// - isDefined(value) - checks !== null && !== undefined
+// - isNonEmptyString(value) - checks string is defined and not empty
+// - isNonEmptyArray(value) - checks array is defined and has items
+```
+
+## Security Patterns
+```typescript
+// ✅ CSV Export: Always apply security first, then formatting
+const safeValue = formatValueForCSV(sanitizeValueForCSVExport(userInput));
+
+// ✅ Input validation before processing
+const sanitizedInput = validateAndSanitize(userInput);
+const result = processData(sanitizedInput);
+```
+
+## Error Handling
+```typescript
+// ✅ Proper error types and meaningful messages
+try {
+  const user = await userService.findById(userId);
+  if (!user) {
+    throw new UserNotFoundError(`User with ID ${userId} not found`);
+  }
+  return user;
+} catch (error) {
+  logger.error('Failed to fetch user', { userId, error });
+  throw error;
+}
+```

.cursor/rules/creating-syncable-entity.mdc

@@ -0,0 +1,219 @@
+---
+description: Main guide for creating syncable entities in Twenty's workspace migration system
+globs: ["**/metadata-modules/**", "**/workspace-migration/**"]
+alwaysApply: false
+---
+
+# Creating a New Syncable Entity - Main Guide
+
+This is the main guide for creating **syncable entities** in Twenty's workspace migration architecture.
+
+## Documentation Structure
+
+This main guide provides a high-level overview and navigation hub.
+
+**⚡ Skills** (`.cursor/skills/syncable-entity-*/SKILL.md`) - Concise, action-oriented implementation guides for each step. Reference these when creating a new syncable entity.
+
+**When to use:**
+- Start here for architecture overview and workflow
+- Reference specific skills (`@syncable-entity-types-and-constants`) when implementing each step
+
+## What is a Syncable Entity?
+
+A syncable entity is a metadata entity that:
+- Has a **`universalIdentifier`**: A unique identifier used for syncing entities across workspaces/applications
+- Has an **`applicationId`**: Links the entity to an application (Twenty Standard or Custom applications)
+- Participates in the **workspace migration system**: Can be created, updated, and deleted through the migration pipeline
+- Is **cached as a flat entity**: Denormalized representation for efficient validation and change detection
+
+Examples: `skill`, `agent`, `view`, `viewField`, `role`, `pageLayout`, etc.
+
+## Architecture Overview
+
+```
+Input DTO → Transform → Universal Flat Entity → Builder/Validator → Runner → Database
+                              ↓
+                        Cache Service
+```
+
+**Key Components:**
+- **TypeORM Entity**: Database model extending `SyncableEntity`
+- **Flat Entity**: Denormalized type (no relations, dates as strings) - for caching
+- **Universal Flat Entity**: Flat entity with foreign keys mapped to universal identifiers - for migrations
+- **Transform Utils**: Convert DTOs to universal flat entities
+- **Builder/Validator**: Validate and create migration actions
+- **Runner**: Execute actions against the database
+
+## Implementation Steps
+
+Follow these skills in order:
+
+### 1️⃣ **Foundation: Types & Constants** → `@syncable-entity-types-and-constants`
+
+**What:** Define all types, entities, and register in central constants
+
+**Tasks:**
+- Create TypeORM entity (extends `SyncableEntity`)
+- Define flat entity types
+- Define action types (universal + flat)
+- Register in 5 central constants
+
+**Why first:** Everything else depends on these types
+
+---
+
+### 2️⃣ **Data Layer: Cache & Transform** → `@syncable-entity-cache-and-transform`
+
+**What:** Handle conversion between different representations
+
+**Tasks:**
+- Create cache service
+- Create entity-to-flat conversion
+- Create input transform utils
+- Handle foreign key resolution
+
+**Dependencies:** Requires Step 1
+
+---
+
+### 3️⃣ **Business Logic: Builder & Validation** → `@syncable-entity-builder-and-validation`
+
+**What:** Validate business rules and create actions
+
+**Tasks:**
+- Create validator service (never throws, never mutates)
+- Create builder service
+- Wire into orchestrator (⚠️ critical!)
+
+**Dependencies:** Requires Steps 1-2
+
+---
+
+### 4️⃣ **Execution: Runner & Actions** → `@syncable-entity-runner-and-actions`
+
+**What:** Execute migration actions against the database
+
+**Tasks:**
+- Create action handlers (create/update/delete)
+- Implement transpilation methods
+- Create universal-to-flat conversion utilities
+
+**Dependencies:** Requires Steps 1-3
+
+---
+
+### 5️⃣ **Assembly: Integration** → `@syncable-entity-integration`
+
+**What:** Wire everything together
+
+**Tasks:**
+- Register in 3 NestJS modules
+- Create service and resolver layers
+- Use exception interceptor
+
+**Dependencies:** Requires Steps 1-4
+
+---
+
+### 6️⃣ **Testing: Integration Tests** (**MANDATORY**) → `@syncable-entity-testing`
+
+**What:** Comprehensive test suite
+
+**Tasks:**
+- Create test utilities
+- Write failing tests (all validator exceptions)
+- Write successful tests (all CRUD operations)
+- Use snapshot testing
+
+**Dependencies:** Requires all previous steps
+
+---
+
+## Quick Reference
+
+### Multi-Agent Workflow
+
+For parallel development:
+1. **Agent 1** (Foundation): Complete Step 1 first - unblocks everyone
+2. **Agent 2** (Cache): Can start immediately after Step 1
+3. **Agent 3** (Builder): Can work in parallel with Agent 4 after Step 1
+4. **Agent 4** (Runner): Can work in parallel with Agent 3 after Step 1
+5. **Agent 5** (Integration): Assembles everything after Steps 2-4
+
+### Key Design Principles
+
+| Layer | Responsibility | Can Throw? | Can Mutate? |
+|-------|---------------|------------|-------------|
+| Transform Utils | Data transformation | Yes (input validation) | N/A (creates new) |
+| Validator | Business rule validation | **No** (returns errors) | **No** |
+| Builder | Action creation | **No** (returns errors) | **No** |
+| Runner | Database operations | Yes (DB errors) | Yes (via TypeORM) |
+
+### Common Pitfalls
+
+⚠️ **Most Commonly Forgotten:**
+1. Wiring builder in orchestrator service
+2. Registering in all 3 modules (builder, validators, action handlers)
+3. Setting `universalIdentifier` correctly in entity-to-flat conversion
+
+⚠️ **Common Mistakes:**
+1. Using regular IDs instead of universal identifiers in transform utils
+2. Throwing exceptions in validators/builders
+3. Mutating entity maps in validators/builders
+4. Forgetting to handle JSONB properties with `SerializedRelation`
+
+### File Locations
+
+```
+packages/twenty-shared/src/metadata/
+└── all-metadata-name.constant.ts
+
+packages/twenty-server/src/engine/metadata-modules/
+├── my-entity/                           # Step 1
+│   └── entities/
+├── flat-my-entity/                      # Steps 1-2
+│   ├── types/
+│   ├── constants/
+│   ├── services/
+│   └── utils/
+└── flat-entity/constant/                # Step 1 (central registries)
+    ├── all-entity-properties-configuration-by-metadata-name.constant.ts
+    ├── all-one-to-many-metadata-relations.constant.ts
+    ├── all-many-to-one-metadata-foreign-key.constant.ts
+    └── all-many-to-one-metadata-relations.constant.ts
+
+packages/twenty-server/src/engine/workspace-manager/workspace-migration/
+├── workspace-migration-builder/         # Step 3
+│   ├── builders/my-entity/
+│   └── validators/services/
+└── workspace-migration-runner/          # Step 4
+    └── action-handlers/my-entity/
+```
+
+### Complete Checklist
+
+Before considering complete:
+- [ ] All 6 guides completed
+- [ ] TypeORM entity extends `SyncableEntity`
+- [ ] All constants registered (5 central registries)
+- [ ] Cache service with correct decorator
+- [ ] Transform utils return universal flat entities
+- [ ] Validator never throws/mutates
+- [ ] Builder wired in orchestrator (⚠️ critical!)
+- [ ] All 3 action handlers implemented
+- [ ] All 3 modules updated
+- [ ] **Integration tests written (MANDATORY)**
+- [ ] **All failing scenarios covered**
+- [ ] **All successful use cases tested**
+
+---
+
+## Need Help?
+
+Reference the appropriate skill for step-by-step guidance:
+- `@syncable-entity-types-and-constants` - Types, entities, constants
+- `@syncable-entity-cache-and-transform` - Cache & transform
+- `@syncable-entity-builder-and-validation` - Builder & validation
+- `@syncable-entity-runner-and-actions` - Runner & actions
+- `@syncable-entity-integration` - Integration & wiring
+- `@syncable-entity-testing` - Testing patterns

.cursor/rules/feedback-incorporation.mdc

@@ -0,0 +1,100 @@
+---
+description: Guidelines for incorporating user feedback and improving cursor rules
+globs: []
+alwaysApply: true
+---
+# Feedback Incorporation Guidelines
+
+## Post-Interaction Reflection
+
+After each coding session or significant interaction, the AI should:
+
+### 1. Reflect on User Feedback
+- **Identify patterns** in user corrections or suggestions
+- **Note recurring issues** that could be prevented with better rules
+- **Recognize gaps** in current cursor rules or guidelines
+
+### 2. Suggest Rule Improvements
+When user provides feedback that reveals a pattern or preference:
+
+```typescript
+// Example feedback patterns to watch for:
+// - "We don't use useEffect, handle state changes in event callbacks"
+// - "We don't use JSDoc blocks, prefer // comments"
+// - "Always use named exports, never default exports"
+// - "We prefer functional components over class components"
+// - "Use event handlers over useEffect for state updates"
+```
+
+### 3. Proactive Rule Suggestions
+At the end of interactions, suggest:
+
+```markdown
+## 💡 Suggested Cursor Rule Updates
+
+Based on your feedback today, I recommend adding/updating these rules:
+
+**Code Style Rule Update:**
+- Add preference for // comments over JSDoc blocks
+- Enforce named exports only (no default exports)
+
+**React Guidelines Update:**
+- Document preference for event handlers over useEffect
+- Add functional components only rule
+
+Would you like me to help incorporate these into your cursor rules?
+```
+
+## Implementation Process
+
+### When to Suggest Updates
+- User corrects the same type of mistake multiple times
+- User explains a codebase-specific preference
+- User points out missing functionality or incomplete implementations
+- User provides context about existing patterns not captured in rules
+
+### How to Present Suggestions
+1. **Summarize the pattern** observed from feedback
+2. **Propose specific rule language** that would prevent the issue
+3. **Explain the benefit** of codifying this knowledge
+4. **Ask for confirmation** before implementing
+
+### Rule Categories to Consider
+- **Code Style**: Formatting, naming, comment styles, export patterns
+- **React Patterns**: Hook usage, component structure, state management
+- **Architecture**: File organization, import patterns, component composition
+- **Testing**: Test structure, naming, coverage expectations
+- **Performance**: Optimization patterns, anti-patterns to avoid
+
+## Example Feedback Integration
+
+```markdown
+## Today's Learning: React State Management Patterns
+
+**User Feedback Received:**
+- "We don't use useEffect, handle state changes in event callbacks"
+- "We don't use JSDoc blocks, prefer // comments"
+- "Always use named exports, never default exports"
+
+**Proposed Rule Additions:**
+```typescript
+// ✅ React State Updates - Use event handlers, not useEffect
+const handleButtonClick = () => {
+  setData(newData); // Direct state update in event handler
+};
+
+// ❌ Avoid useEffect for state updates
+// useEffect(() => { setData(newData); }, [trigger]);
+
+// ✅ Named exports only
+export const UserComponent = () => {};
+export const useUserData = () => {};
+```
+
+**Benefits:**
+- Prevents useEffect overuse and related bugs
+- Ensures consistent export patterns across codebase
+- Documents preferred React patterns for the team
+```
+
+This approach helps the AI learn from each interaction and continuously improve the development experience.

.cursor/rules/file-structure-guidelines.md

@@ -1,207 +0,0 @@
-# File Structure Guidelines
-
-## Core File Structure Principles
-Twenty follows a modular and organized file structure that promotes maintainability and scalability. This document outlines our file organization conventions and best practices.
-
-## Component Organization
-
-### One Component Per File
-- Each component should have its own file
-- File name should match component name
-  ```typescript
-  // ✅ Correct
-  // UserProfile.tsx
-  export const UserProfile = () => {
-    return <div>...</div>;
-  };
-
-  // ❌ Incorrect
-  // users.tsx
-  export const UserProfile = () => {
-    return <div>...</div>;
-  };
-
-  export const UserList = () => {
-    return <div>...</div>;
-  };
-  ```
-
-## Directory Structure
-
-### Feature Modules
-- Place features in `modules/` directory
-- Group related components and logic
-  ```
-  modules/
-  ├── users/
-  │   ├── components/
-  │   │   ├── UserList.tsx
-  │   │   ├── UserCard.tsx
-  │   │   └── UserProfile.tsx
-  │   ├── hooks/
-  │   │   └── useUser.ts
-  │   ├── states/
-  │   │   └── userStates.ts
-  │   └── types/
-  │       └── user.ts
-  ├── workspace/
-  │   ├── components/
-  │   ├── hooks/
-  │   └── states/
-  └── settings/
-      ├── components/
-      ├── hooks/
-      └── states/
-  ```
-
-### Hooks Organization
-- Place hooks in `hooks/` directory
-- Group by feature or global usage
-  ```
-  hooks/
-  ├── useClickOutside.ts
-  ├── useDebounce.ts
-  └── features/
-      ├── users/
-      │   ├── useUserActions.ts
-      │   └── useUserData.ts
-      └── workspace/
-          └── useWorkspaceSettings.ts
-  ```
-
-### State Management
-- Place state definitions in `states/` directory
-- Organize by feature
-  ```
-  states/
-  ├── global/
-  │   ├── theme.ts
-  │   └── navigation.ts
-  ├── users/
-  │   ├── atoms.ts
-  │   └── selectors.ts
-  └── workspace/
-      ├── atoms.ts
-      └── selectors.ts
-  ```
-
-### Types Organization
-- Place types in `types/` directory
-- Group by domain or feature
-  ```
-  types/
-  ├── common.ts
-  ├── api.ts
-  └── features/
-      ├── user.ts
-      ├── workspace.ts
-      └── settings.ts
-  ```
-
-## Naming Conventions
-
-### Component Files
-- Use PascalCase for component files
-- Use descriptive, feature-specific names
-  ```
-  components/
-  ├── UserProfile.tsx
-  ├── UserProfileHeader.tsx
-  └── UserProfileContent.tsx
-  ```
-
-### Non-Component Files
-- Use camelCase for non-component files
-- Use clear, descriptive names
-  ```
-  hooks/
-  ├── useClickOutside.ts
-  └── useDebounce.ts
-
-  utils/
-  ├── dateFormatter.ts
-  └── stringUtils.ts
-  ```
-
-## Module Structure
-
-### Feature Module Organization
-- Consistent structure across features
-- Clear separation of concerns
-  ```
-  modules/users/
-  ├── components/
-  │   ├── UserList/
-  │   │   ├── UserList.tsx
-  │   │   ├── UserListItem.tsx
-  │   │   └── UserListHeader.tsx
-  │   └── UserProfile/
-  │       ├── UserProfile.tsx
-  │       └── UserProfileHeader.tsx
-  ├── hooks/
-  │   ├── useUserList.ts
-  │   └── useUserProfile.ts
-  ├── states/
-  │   ├── atoms.ts
-  │   └── selectors.ts
-  ├── types/
-  │   └── user.ts
-  └── utils/
-      └── userFormatter.ts
-  ```
-
-## Best Practices
-
-### Import Organization
-- Group imports by type
-- Maintain consistent order
-  ```typescript
-  // External dependencies
-  import { useState } from 'react';
-  import { styled } from '@emotion/styled';
-
-  // Internal modules
-  import { useUser } from '~/modules/users/hooks';
-  import { userState } from '~/modules/users/states';
-
-  // Local imports
-  import { UserAvatar } from './UserAvatar';
-  import { type UserProfileProps } from './types';
-  ```
-
-### Path Aliases
-- Use path aliases for better imports
-- Avoid deep relative paths
-  ```typescript
-  // ✅ Correct
-  import { Button } from '~/components/Button';
-  import { useUser } from '~/modules/users/hooks';
-
-  // ❌ Incorrect
-  import { Button } from '../../../components/Button';
-  import { useUser } from '../../../modules/users/hooks';
-  ```
-
-### Component Co-location
-- Keep related files close together
-- Use index files for public APIs
-  ```
-  components/UserProfile/
-  ├── UserProfile.tsx
-  ├── UserProfileHeader.tsx
-  ├── UserProfileContent.tsx
-  ├── styles.ts
-  ├── types.ts
-  └── index.ts
-  ```
-
-### Test File Location
-- Place test files next to implementation
-- Use `.test.ts` or `.spec.ts` extension
-  ```
-  components/
-  ├── UserProfile.tsx
-  ├── UserProfile.test.tsx
-  ├── UserProfile.stories.tsx
-  └── types.ts
-  ``` 

.cursor/rules/file-structure.mdc

@@ -0,0 +1,107 @@
+---
+description: File structure guidelines for Twenty CRM
+globs: []
+alwaysApply: true
+---
+# File Structure Guidelines
+
+## Directory Organization
+```
+packages/twenty-front/src/
+├── components/      # Reusable UI components
+├── pages/          # Route components  
+├── modules/        # Feature modules
+├── hooks/          # Custom hooks
+├── services/       # API services
+└── types/          # Type definitions
+
+packages/twenty-server/src/
+├── modules/        # Feature modules
+├── entities/       # Database entities
+├── dto/           # Data transfer objects
+└── utils/         # Helper functions
+```
+
+## File Naming
+- **kebab-case** for all files and directories
+- **Descriptive suffixes** for clarity
+```
+// ✅ Correct naming
+user-profile.component.tsx
+user-profile.styles.ts
+user-profile.test.tsx
+user.service.ts
+user.entity.ts
+create-user.dto.ts
+```
+
+## Index Files & Barrel Exports
+```typescript
+// ✅ Clean barrel exports in index.ts
+export { UserCard } from './user-card.component';
+export { UserList } from './user-list.component';
+export type { UserCardProps, UserListProps } from './types';
+
+// ✅ Usage - clean imports
+import { UserCard, UserList } from '@/components/user';
+```
+
+## Module Structure
+```
+src/modules/user/
+├── components/     # Module-specific components
+├── hooks/         # Module hooks
+├── services/      # API services
+├── types/         # Type definitions
+└── index.ts       # Module exports
+```
+
+## Import/Export Patterns
+```typescript
+// ✅ Import organization
+// 1. External libraries
+import React from 'react';
+import styled from 'styled-components';
+
+// 2. Internal modules (absolute paths)
+import { Button } from '@/components/ui';
+import { UserService } from '@/services';
+
+// 3. Relative imports
+import { UserCardProps } from './types';
+
+// ✅ Named exports only (no default exports)
+export const UserComponent = ({ user }: UserProps) => {
+  // Component implementation
+};
+```
+
+## File Size Guidelines
+- **Components**: Under 300 lines
+- **Services**: Under 500 lines  
+- **Extract logic** into hooks/utilities when files grow large
+- **Use composition** over large monolithic components
+
+## Configuration Files
+
+### Project Configuration
+```
+.vscode/                       # VSCode settings
+├── settings.json
+├── extensions.json
+└── launch.json
+
+.github/                       # GitHub workflows
+├── workflows/
+└── templates/
+
+.cursor/                       # Cursor rules
+├── rules/
+└── environment.json
+```
+
+### Build Configuration
+- Keep build configs in root or package directories
+- Use consistent naming for config files
+- Comment complex configurations
+- Version control all configuration files

.cursor/rules/nx-rules.mdc

@@ -1,33 +1,89 @@
 ---
 description: Guidelines and best practices for working with Nx in the Twenty workspace, including workspace architecture understanding, configuration management, and generator usage.
-globs: 
-alwaysApply: false
+globs: ["**/nx.json", "**/project.json", "**/workspace.json"]
+alwaysApply: true
 ---
 
-// This file is automatically generated by Nx Console
+# Nx Guidelines
 
-You are in an nx workspace using Nx 18.3.3 and yarn as the package manager.
+## Core Commands
+```bash
+# Run target for specific project
+npx nx run twenty-front:build
+npx nx run twenty-server:test
 
-You have access to the Nx MCP server and the tools it provides. Use them. Follow these guidelines in order to best help the user:
+# Lint diff with main (recommended - much faster!)
+npx nx lint:diff-with-main twenty-front           # Lint only files changed vs main
+npx nx lint:diff-with-main twenty-server
+npx nx lint:diff-with-main twenty-front --configuration=fix  # Auto-fix changed files
 
-# General Guidelines
-- When answering questions, use the nx_workspace tool first to gain an understanding of the workspace architecture
-- For questions around nx configuration, best practices or if you're unsure, use the nx_docs tool to get relevant, up-to-date docs!! Always use this instead of assuming things about nx configuration
-- If the user needs help with an Nx configuration or project graph error, use the 'nx_workspace' tool to get any errors
-- To help answer questions about the workspace structure or simply help with demonstrating how tasks depend on each other, use the 'nx_visualize_graph' tool
+# Run target for all projects (slower)
+npx nx run-many --target=build --all
+npx nx run-many --target=test --projects=twenty-front,twenty-server
+
+# Generate/modify projects
+npx nx g @nx/react:app my-app
+npx nx g @nx/react:component my-component
+```
+
+## Project Structure
+- Each package has a `project.json` with targets
+- Dependencies managed through `tsconfig.json` path mappings
+- Shared libraries in `packages/` directory
+
+## Build Targets
+```json
+// project.json
+{
+  "targets": {
+    "build": {
+      "executor": "@nx/vite:build",
+      "options": { "outputPath": "dist/packages/twenty-front" }
+    },
+    "test": {
+      "executor": "@nx/jest:jest",
+      "options": { "jestConfig": "packages/twenty-front/jest.config.mjs" }
+    }
+  }
+}
+```
+
+## Linting Strategy
+For faster development, always prefer linting only changed files:
+- Use `npx nx lint:diff-with-main <project>` to lint only files changed vs main branch
+- Use `--configuration=fix` to auto-fix issues in changed files
+- Only use `npx nx lint <project>` when you need to lint the entire project
+
+## Dependency Graph
+```bash
+# View project dependencies
+npx nx graph
+
+# Check what's affected by changes (runs target on affected projects)
+npx nx affected --target=test
+npx nx affected --target=build --base=main
+```
+
+## Library Management
+- Use `npx nx g @nx/workspace:library` generator for shared libs
+- Internal imports use `@/` path mapping
+- Libraries must export through index.ts barrel files
+
+## Cache Configuration
+- Nx caches build outputs and test results
+- Configure `outputs` in project.json targets
+- Use `inputs` to define what invalidates cache
+
+```json
+{
+  "build": {
+    "outputs": ["dist/packages/my-app"],
+    "inputs": ["source", "^source"],
+    "cache": true
+  }
+}
+```
 
-# Generation Guidelines
-If the user wants to generate something, use the following flow: 
 
-- learn about the nx workspace and any specifics the user needs by using the 'nx_workspace' tool and the 'nx_project_details' tool if applicable
-- get the available generators using the 'nx_generators' tool
-- decide which generator to use. If no generators seem relevant, check the 'nx_available_plugins' tool to see if the user could install a plugin to help them
-- get generator details using the 'nx_generator_schema' tool
-- you may use the 'nx_docs' tool to learn more about a specific generator or technology if you're unsure
-- decide which options to provide in order to best complete the user's request. Don't make any assumptions and keep the options minimalistic
-- open the generator UI using the 'nx_open_generate_ui' tool
-- wait for the user to finish the generator
-- read the generator log file using the 'nx_read_generator_log' tool
-- use the information provided in the log file to answer the user's question or continue with what they were doing
 
 

.cursor/rules/react-general-guidelines.md

@@ -1,220 +0,0 @@
-# React Guidelines
-
-## Core React Principles
-Twenty follows modern React best practices with a focus on functional components and clean, maintainable code. This document outlines our React conventions and best practices.
-
-## Component Structure
-
-### Functional Components Only
-- Use functional components exclusively
-- No class components allowed
-  ```typescript
-  // ✅ Correct
-  export const UserProfile = ({ user }: UserProfileProps) => {
-    return (
-      <StyledContainer>
-        <h1>{user.name}</h1>
-      </StyledContainer>
-    );
-  };
-
-  // ❌ Incorrect
-  export class UserProfile extends React.Component<UserProfileProps> {
-    render() {
-      return (
-        <StyledContainer>
-          <h1>{this.props.user.name}</h1>
-        </StyledContainer>
-      );
-    }
-  }
-  ```
-
-### Named Exports
-- Use named exports exclusively
-- No default exports
-  ```typescript
-  // ✅ Correct
-  export const Button = ({ label }: ButtonProps) => {
-    return <button>{label}</button>;
-  };
-
-  // ❌ Incorrect
-  export default function Button({ label }: ButtonProps) {
-    return <button>{label}</button>;
-  }
-  ```
-
-## State and Effects
-
-### Event Handlers Over useEffect
-- Prefer event handlers for state updates
-- Avoid useEffect for state synchronization
-  ```typescript
-  // ✅ Correct
-  const UserForm = () => {
-    const handleSubmit = async (data: FormData) => {
-      await updateUser(data);
-      refreshUserList();
-    };
-
-    return <Form onSubmit={handleSubmit} />;
-  };
-
-  // ❌ Incorrect
-  const UserForm = () => {
-    useEffect(() => {
-      if (formData) {
-        updateUser(formData);
-      }
-    }, [formData]);
-
-    return <Form />;
-  };
-  ```
-
-## Component Design
-
-### Small, Focused Components
-- Keep components small and single-purpose
-- Extract reusable logic into custom hooks
-  ```typescript
-  // ✅ Correct
-  const UserCard = ({ user }: UserCardProps) => {
-    return (
-      <StyledCard>
-        <UserAvatar user={user} />
-        <UserInfo user={user} />
-        <UserActions user={user} />
-      </StyledCard>
-    );
-  };
-
-  // ❌ Incorrect
-  const UserCard = ({ user }: UserCardProps) => {
-    return (
-      <StyledCard>
-        {/* Too much logic in one component */}
-        <img src={user.avatar} />
-        <div>{user.name}</div>
-        <div>{user.email}</div>
-        <button onClick={() => handleEdit(user)}>Edit</button>
-        <button onClick={() => handleDelete(user)}>Delete</button>
-        {/* More complex logic... */}
-      </StyledCard>
-    );
-  };
-  ```
-
-## Props
-
-### Prop Naming
-- Use clear, descriptive prop names
-- Follow React conventions (onClick, isActive, etc.)
-  ```typescript
-  // ✅ Correct
-  type ButtonProps = {
-    onClick: () => void;
-    isDisabled?: boolean;
-    isLoading?: boolean;
-  };
-
-  // ❌ Incorrect
-  type ButtonProps = {
-    clickHandler: () => void;
-    disabled?: boolean;
-    loading?: boolean;
-  };
-  ```
-
-### Prop Destructuring
-- Destructure props with proper typing
-- Use TypeScript for prop types
-  ```typescript
-  // ✅ Correct
-  const Button = ({ onClick, isDisabled, children }: ButtonProps) => {
-    return (
-      <button onClick={onClick} disabled={isDisabled}>
-        {children}
-      </button>
-    );
-  };
-
-  // ❌ Incorrect
-  const Button = (props: ButtonProps) => {
-    return (
-      <button onClick={props.onClick} disabled={props.isDisabled}>
-        {props.children}
-      </button>
-    );
-  };
-  ```
-
-## Performance Optimization
-
-### Memoization
-- Use memo for expensive computations
-- Avoid premature optimization
-  ```typescript
-  // ✅ Correct - Complex computation
-  const MemoizedChart = memo(({ data }: ChartProps) => {
-    // Complex rendering logic
-    return <ComplexChart data={data} />;
-  });
-
-  // ❌ Incorrect - Unnecessary memoization
-  const MemoizedText = memo(({ text }: { text: string }) => {
-    return <span>{text}</span>;
-  });
-  ```
-
-### Event Handlers
-- Use callback refs for DOM manipulation
-- Memoize callbacks when needed
-  ```typescript
-  // ✅ Correct
-  const UserList = () => {
-    const handleScroll = useCallback((event: UIEvent) => {
-      // Complex scroll handling
-    }, []);
-
-    return <div onScroll={handleScroll}>{/* content */}</div>;
-  };
-  ```
-
-## Error Handling
-
-### Error Boundaries
-- Use error boundaries for component error handling
-- Provide meaningful fallback UIs
-  ```typescript
-  // ✅ Correct
-  const ErrorFallback = ({ error }: { error: Error }) => (
-    <StyledError>
-      <h2>Something went wrong</h2>
-      <pre>{error.message}</pre>
-    </StyledError>
-  );
-
-  const SafeComponent = () => (
-    <ErrorBoundary FallbackComponent={ErrorFallback}>
-      <ComponentThatMightError />
-    </ErrorBoundary>
-  );
-  ```
-
-### Loading States
-- Handle loading states gracefully
-- Provide meaningful loading indicators
-  ```typescript
-  // ✅ Correct
-  const UserProfile = () => {
-    const { data: user, isLoading, error } = useUser();
-
-    if (isLoading) return <LoadingSpinner />;
-    if (error) return <ErrorMessage error={error} />;
-    if (!user) return <NotFound />;
-
-    return <UserProfileContent user={user} />;
-  };
-  ``` 

.cursor/rules/react-general-guidelines.mdc

@@ -0,0 +1,85 @@
+---
+description: React general guidelines for Twenty CRM
+alwaysApply: false
+---
+# React Guidelines
+
+## Core Rules
+- **Functional components only** (no classes)
+- **Named exports only** (no default exports)
+- **Event handlers over useEffect** for state updates
+
+## Component Structure
+```typescript
+// ✅ Correct
+export const UserProfile = ({ user, onEdit }: UserProfileProps) => {
+  const handleEdit = () => onEdit(user.id);
+  
+  return (
+    <StyledContainer>
+      <h1>{user.name}</h1>
+      <Button onClick={handleEdit}>Edit</Button>
+    </StyledContainer>
+  );
+};
+```
+
+## Props & Event Handlers
+```typescript
+// ✅ Correct - Destructure props
+const Button = ({ onClick, isDisabled, children }: ButtonProps) => (
+  <button onClick={onClick} disabled={isDisabled}>
+    {children}
+  </button>
+);
+
+// ✅ Correct - Event handlers over useEffect
+const UserForm = ({ onSubmit }: UserFormProps) => {
+  const handleSubmit = async (data: FormData) => {
+    await onSubmit(data);
+    // Direct event handling, not useEffect
+  };
+
+  return <Form onSubmit={handleSubmit} />;
+};
+```
+
+## Component Design
+- **Small, focused components** - Single responsibility
+- **Composition over inheritance** - Combine simple components
+- **Extract complex logic** into custom hooks
+
+```typescript
+// ✅ Good - Composed from smaller components
+const UserCard = ({ user }: UserCardProps) => (
+  <StyledCard>
+    <UserAvatar user={user} />
+    <UserInfo user={user} />
+    <UserActions user={user} />
+  </StyledCard>
+);
+```
+
+## Performance
+```typescript
+// ✅ Use memo for expensive components only
+const ExpensiveChart = memo(({ data }: ChartProps) => {
+  // Complex rendering logic
+  return <ComplexChart data={data} />;
+});
+
+// ✅ Memoize callbacks when needed
+const UserList = ({ users, onUserSelect }: UserListProps) => {
+  const handleUserSelect = useCallback((user: User) => {
+    onUserSelect(user);
+  }, [onUserSelect]);
+
+  return (
+    <div>
+      {users.map(user => (
+        <UserItem key={user.id} user={user} onSelect={handleUserSelect} />
+      ))}
+    </div>
+  );
+};
+```

.cursor/rules/react-state-management-guidelines.md

@@ -1,219 +0,0 @@
-# State Management Guidelines
-
-## Core State Management Principles
-Twenty uses a combination of Recoil for global state and Apollo Client for server state management. This document outlines our state management conventions and best practices.
-
-## Global State Management
-
-### Recoil Usage
-- Use Recoil for global application state
-- Keep atoms small and focused
-  ```typescript
-  // ✅ Correct
-  // states/theme.ts
-  export const themeState = atom<'light' | 'dark'>({
-    key: 'themeState',
-    default: 'light',
-  });
-
-  // states/user.ts
-  export const userState = atom<User | null>({
-    key: 'userState',
-    default: null,
-  });
-
-  // ❌ Incorrect
-  // states/globalState.ts
-  export const globalState = atom({
-    key: 'globalState',
-    default: {
-      theme: 'light',
-      user: null,
-      settings: {},
-      // ... many other unrelated pieces of state
-    },
-  });
-  ```
-
-### Atom Organization
-- Place atoms in the `states/` directory
-- Group related atoms in feature-specific files
-  ```typescript
-  // states/workspace/atoms.ts
-  export const workspaceIdState = atom<string>({
-    key: 'workspaceIdState',
-    default: '',
-  });
-
-  export const workspaceSettingsState = atom<WorkspaceSettings>({
-    key: 'workspaceSettingsState',
-    default: defaultSettings,
-  });
-  ```
-
-## Server State Management
-
-### Apollo Client Usage
-- Use Apollo Client for all GraphQL operations
-- Leverage Apollo's caching capabilities
-  ```typescript
-  // ✅ Correct
-  const { data, loading } = useQuery(GET_USER_QUERY, {
-    variables: { id },
-    fetchPolicy: 'cache-first',
-  });
-
-  // ❌ Incorrect
-  const [user, setUser] = useState(null);
-  useEffect(() => {
-    fetch('/api/user/' + id).then(setUser);
-  }, [id]);
-  ```
-
-### Query Organization
-- Separate operation files
-- Use fragments for shared fields
-  ```typescript
-  // queries/user.ts
-  export const UserFragment = gql`
-    fragment UserFields on User {
-      id
-      name
-      email
-    }
-  `;
-
-  export const GET_USER = gql`
-    query GetUser($id: UUID!) {
-      user(id: $id) {
-        ...UserFields
-      }
-    }
-    ${UserFragment}
-  `;
-  ```
-
-## State Management Best Practices
-
-### Multiple Small Atoms
-- Prefer multiple small atoms over prop drilling
-- Keep atoms focused on specific features
-  ```typescript
-  // ✅ Correct
-  export const selectedViewState = atom<string>({
-    key: 'selectedViewState',
-    default: '',
-  });
-
-  export const viewFiltersState = atom<ViewFilters>({
-    key: 'viewFiltersState',
-    default: {},
-  });
-
-  // ❌ Incorrect - Prop drilling
-  const ViewContainer = ({ selectedView, filters, onViewChange }) => {
-    return (
-      <ViewHeader view={selectedView} onViewChange={onViewChange}>
-        <ViewContent>
-          <ViewFilters filters={filters} />
-        </ViewContent>
-      </ViewHeader>
-    );
-  };
-  ```
-
-### No useRef for State
-- Never use useRef for state management
-- Use proper state management tools
-  ```typescript
-  // ✅ Correct
-  const [count, setCount] = useState(0);
-  // or
-  const [count, setCount] = useRecoilState(countState);
-
-  // ❌ Incorrect
-  const countRef = useRef(0);
-  ```
-
-### Data Fetching
-- Extract data fetching to sibling components
-- Keep components focused on presentation
-  ```typescript
-  // ✅ Correct
-  const UserProfileContainer = () => {
-    const { data, loading } = useQuery(GET_USER);
-    if (loading) return <LoadingSpinner />;
-    return <UserProfile user={data.user} />;
-  };
-
-  const UserProfile = ({ user }: UserProfileProps) => {
-    return <div>{user.name}</div>;
-  };
-
-  // ❌ Incorrect
-  const UserProfile = () => {
-    const { data, loading } = useQuery(GET_USER);
-    if (loading) return <LoadingSpinner />;
-    return <div>{data.user.name}</div>;
-  };
-  ```
-
-### Hook Usage
-- Use appropriate hooks for state access
-- Choose between useRecoilValue and useRecoilState based on needs
-  ```typescript
-  // ✅ Correct - Read-only access
-  const theme = useRecoilValue(themeState);
-
-  // ✅ Correct - Read-write access
-  const [theme, setTheme] = useRecoilState(themeState);
-
-  // ❌ Incorrect - Using state setter when only reading
-  const [theme, _] = useRecoilState(themeState);
-  ```
-
-## Performance Considerations
-
-### Selector Usage
-- Use selectors for derived state
-- Memoize complex calculations
-  ```typescript
-  // ✅ Correct
-  const filteredUsersState = selector({
-    key: 'filteredUsersState',
-    get: ({ get }) => {
-      const users = get(usersState);
-      const filter = get(userFilterState);
-      return users.filter(user => 
-        user.name.toLowerCase().includes(filter.toLowerCase())
-      );
-    },
-  });
-
-  // ❌ Incorrect - Calculating in component
-  const UserList = () => {
-    const users = useRecoilValue(usersState);
-    const filter = useRecoilValue(userFilterState);
-    const filteredUsers = users.filter(user =>
-      user.name.toLowerCase().includes(filter.toLowerCase())
-    );
-    return <List users={filteredUsers} />;
-  };
-  ```
-
-### Cache Management
-- Configure appropriate cache policies
-- Handle cache invalidation properly
-  ```typescript
-  // ✅ Correct
-  const [updateUser] = useMutation(UPDATE_USER, {
-    update: (cache, { data }) => {
-      cache.modify({
-        id: cache.identify(data.updateUser),
-        fields: {
-          name: () => data.updateUser.name,
-        },
-      });
-    },
-  });
-  ``` 

.cursor/rules/react-state-management.mdc

@@ -0,0 +1,101 @@
+---
+description: React state management guidelines for Twenty CRM
+alwaysApply: false
+---
+# React State Management
+
+## Jotai Patterns
+```typescript
+// ✅ Atoms for primitive state (use createAtomState for keyed state with optional persistence)
+import { createAtomState } from '@/ui/utilities/state/jotai/utils/createAtomState';
+
+export const currentUserState = createAtomState<User | null>({
+  key: 'currentUserState',
+  defaultValue: null,
+});
+
+// ✅ Derived atoms for computed state (use createAtomSelector)
+import { createAtomSelector } from '@/ui/utilities/state/jotai/utils/createAtomSelector';
+
+export const userDisplayNameSelector = createAtomSelector({
+  key: 'userDisplayNameSelector',
+  get: ({ get }) => {
+    const user = get(currentUserState);
+    return user ? `${user.firstName} ${user.lastName}` : 'Guest';
+  },
+});
+
+// ✅ Atom factory pattern for dynamic atoms (use createAtomFamilyState)
+import { createAtomFamilyState } from '@/ui/utilities/state/jotai/utils/createAtomFamilyState';
+
+export const userByIdState = createAtomFamilyState<User | null, string>({
+  key: 'userByIdState',
+  defaultValue: null,
+});
+```
+
+## Jotai Hooks
+```typescript
+// useAtomState - read and write
+import { useAtomState } from '@/ui/utilities/state/jotai/hooks/useAtomState';
+
+// useAtomStateValue - read only
+import { useAtomStateValue } from '@/ui/utilities/state/jotai/hooks/useAtomStateValue';
+
+// useSetAtomState - write only
+import { useSetAtomState } from '@/ui/utilities/state/jotai/hooks/useSetAtomState';
+```
+
+## Provider
+Jotai works without a Provider by default. For scoped stores or testing, use `Provider` from `jotai`.
+
+## Local State Guidelines
+```typescript
+// ✅ Multiple useState for unrelated state
+const [isLoading, setIsLoading] = useState(false);
+const [error, setError] = useState<string | null>(null);
+const [data, setData] = useState<User[]>([]);
+
+// ✅ useReducer for complex state logic
+type FormAction = 
+  | { type: 'SET_FIELD'; field: string; value: string }
+  | { type: 'SET_ERRORS'; errors: Record<string, string> }
+  | { type: 'RESET' };
+
+const formReducer = (state: FormState, action: FormAction): FormState => {
+  switch (action.type) {
+    case 'SET_FIELD':
+      return { ...state, [action.field]: action.value };
+    case 'SET_ERRORS':
+      return { ...state, errors: action.errors };
+    case 'RESET':
+      return initialFormState;
+    default:
+      return state;
+  }
+};
+```
+
+## Data Flow Rules
+- **Props down, events up** - Unidirectional data flow
+- **Avoid bidirectional binding** - Use callback functions
+- **Normalize complex data** - Use lookup tables over nested objects
+
+```typescript
+// ✅ Normalized state structure
+type UsersState = {
+  byId: Record<string, User>;
+  allIds: string[];
+};
+
+// ✅ Functional state updates
+const increment = useCallback(() => {
+  setCount(prev => prev + 1);
+}, []);
+```
+
+## Performance Tips
+- Use atom factory pattern (createAtomFamilyState) for dynamic data collections
+- Derived atoms (createAtomSelector) are automatically memoized by Jotai
+- Avoid heavy computations in derived atoms
+- Batch state updates when possible

.cursor/rules/sdk-esm-dependencies.mdc

@@ -0,0 +1,53 @@
+---
+description: ESM dependency guidelines for twenty-sdk and create-twenty-app packages
+globs: ["packages/twenty-sdk/**", "packages/create-twenty-app/**"]
+alwaysApply: false
+---
+
+# ESM Dependency Guidelines
+
+## Context
+
+`twenty-sdk` and `create-twenty-app` are published as dual-format npm packages (ESM `.mjs` + CJS `.cjs`). Dependencies listed in `dependencies` are **externalized** by the Vite/Rollup build — they are not bundled, and consumers resolve them from `node_modules` at runtime.
+
+This means **CJS-only dependencies break the ESM output**. When Rollup emits `import { foo } from 'cjs-package'`, Node.js ESM cannot resolve named exports from CommonJS modules, causing `SyntaxError: Named export 'foo' not found`.
+
+## Rules
+
+### Only add ESM-compatible dependencies
+
+Before adding a new dependency to `package.json`, verify it supports ESM:
+- Check for `"type": "module"` in its `package.json`
+- Or check for an `"exports"` map with ESM entries
+- Or check for a `"module"` field pointing to an ESM build
+
+### Use native `node:fs/promises` for standard fs operations
+
+```typescript
+// ✅ Import native fs functions directly
+import { readFile, writeFile, mkdir, rm, cp } from 'node:fs/promises';
+import { createWriteStream, existsSync } from 'node:fs';
+
+// ✅ Import only custom helpers from fs-utils (no native re-exports)
+import { pathExists, ensureDir, emptyDir, copy, move, remove, readJson, writeJson, ensureFile } from '@/cli/utilities/file/fs-utils';
+
+// ❌ Don't use fs-extra (CJS-only, breaks ESM bundle)
+import * as fs from 'fs-extra';
+
+// ❌ Don't use import * as fs from fs-utils (it doesn't re-export native fs)
+import * as fs from '@/cli/utilities/file/fs-utils';
+```
+
+### Use `@/cli/utilities/string/kebab-case` instead of lodash
+
+```typescript
+// ✅ Use internal utility
+import { kebabCase } from '@/cli/utilities/string/kebab-case';
+
+// ❌ Don't use lodash single-function packages (CJS-only, unmaintained)
+import kebabCase from 'lodash.kebabcase';
+```
+
+### When no ESM alternative exists
+
+If a CJS-only package has no ESM replacement (e.g. `archiver`), add it to the `cjsOnlyPackages` list in `vite.config.node.ts` so it gets inlined into the bundle instead of externalized.

.cursor/rules/server-migrations.mdc

@@ -0,0 +1,29 @@
+---
+description: Guidelines for generating and managing TypeORM migrations in twenty-server
+globs: [
+  "packages/twenty-server/src/**/*.entity.ts",
+  "packages/twenty-server/src/database/typeorm/**/*.ts"
+]
+alwaysApply: false
+---
+
+## Server Migrations (twenty-server)
+
+- **When changing an entity, always generate a migration**
+  - If you modify a `*.entity.ts` file in `packages/twenty-server/src`, you **must** generate a corresponding TypeORM migration instead of manually editing the database schema.
+  - Use the Nx + TypeORM command from the project root:
+
+    ```bash
+    npx nx run twenty-server:typeorm migration:generate src/database/typeorm/core/migrations/common/[name] -d src/database/typeorm/core/core.datasource.ts
+    ```
+
+  - Replace `[name]` with a descriptive, kebab-case migration name that reflects the change (for example, `add-agent-turn-evaluation`).
+
+- **Prefer generated migrations over manual edits**
+  - Let TypeORM infer schema changes from the updated entities; only adjust the generated migration file manually if absolutely necessary (for example, for data backfills or complex constraints).
+  - Keep schema changes (DDL) in these generated migrations and avoid mixing in heavy data migrations unless there is a strong reason and clear comments.
+
+- **Keep migrations consistent and reversible**
+  - Ensure the generated migration includes both `up` and `down` logic that correctly applies and reverts the entity change when possible.
+  - Do not delete or rewrite existing, committed migrations unless you are explicitly working on a pre-release branch where history rewrites are allowed by team conventions.
+

.cursor/rules/testing-guidelines.md

@@ -1,253 +0,0 @@
-# Testing Guidelines
-
-## Core Testing Principles
-Twenty follows a comprehensive testing strategy across all packages, ensuring high-quality, maintainable code. This document outlines our testing conventions and best practices.
-
-## Testing Stack
-
-### Backend Testing
-- Primary Framework: Jest
-- API Testing: Supertest
-- Coverage Requirements: 80% minimum
-
-### Frontend Testing
-- Component Testing: Jest + React Testing Library
-- Visual Testing: Storybook
-- API Mocking: MSW (Mock Service Worker)
-
-### End-to-End Testing
-- Framework: Playwright
-- Coverage: Critical user journeys
-- Cross-browser testing
-
-## Test Organization
-
-### Test File Location
-- Co-locate tests with implementation files
-- Use consistent naming patterns
-  ```
-  src/
-  ├── components/
-  │   ├── UserProfile.tsx
-  │   ├── UserProfile.test.tsx
-  │   └── UserProfile.stories.tsx
-  ```
-
-### Test File Naming
-- Use `.test.ts(x)` for unit/integration tests
-- Use `.spec.ts(x)` for E2E tests
-- Use `.stories.tsx` for Storybook stories
-
-## Unit Testing
-
-### Component Testing
-- Test behavior, not implementation
-- Use React Testing Library best practices
-  ```typescript
-  // ✅ Correct
-  test('displays user name when provided', () => {
-    render(<UserProfile user={{ name: 'John Doe' }} />);
-    expect(screen.getByText('John Doe')).toBeInTheDocument();
-  });
-
-  // ❌ Incorrect - Testing implementation details
-  test('sets the text content', () => {
-    const { container } = render(<UserProfile user={{ name: 'John Doe' }} />);
-    expect(container.querySelector('h1').textContent).toBe('John Doe');
-  });
-  ```
-
-### Hook Testing
-- Use `renderHook` from @testing-library/react-hooks
-- Test all possible states
-  ```typescript
-  // ✅ Correct
-  test('useUser hook manages user state', () => {
-    const { result } = renderHook(() => useUser());
-    
-    act(() => {
-      result.current.setUser({ id: '1', name: 'John' });
-    });
-    
-    expect(result.current.user).toEqual({ id: '1', name: 'John' });
-  });
-  ```
-
-### Mocking
-- Mock external dependencies
-- Use jest.mock for module mocking
-  ```typescript
-  // ✅ Correct
-  jest.mock('~/services/api', () => ({
-    fetchUser: jest.fn().mockResolvedValue({ id: '1', name: 'John' }),
-  }));
-
-  test('fetches and displays user', async () => {
-    render(<UserProfile userId="1" />);
-    expect(await screen.findByText('John')).toBeInTheDocument();
-  });
-  ```
-
-## Integration Testing
-
-### API Testing
-- Test complete request/response cycles
-- Use Supertest for backend API testing
-  ```typescript
-  // ✅ Correct
-  describe('GET /api/users/:id', () => {
-    it('returns user when found', async () => {
-      const response = await request(app)
-        .get('/api/users/1')
-        .expect(200);
-      
-      expect(response.body).toEqual({
-        id: '1',
-        name: 'John Doe',
-      });
-    });
-
-    it('returns 404 when user not found', async () => {
-      await request(app)
-        .get('/api/users/999')
-        .expect(404);
-    });
-  });
-  ```
-
-## E2E Testing
-
-### Test Structure
-- Organize by user journey
-- Use page objects for reusability
-  ```typescript
-  // pages/login.ts
-  export class LoginPage {
-    async login(email: string, password: string) {
-      await this.page.fill('[data-testid="email-input"]', email);
-      await this.page.fill('[data-testid="password-input"]', password);
-      await this.page.click('[data-testid="login-button"]');
-    }
-  }
-
-  // tests/auth.spec.ts
-  test('user can login successfully', async ({ page }) => {
-    const loginPage = new LoginPage(page);
-    await loginPage.login('user@example.com', 'password');
-    await expect(page).toHaveURL('/dashboard');
-  });
-  ```
-
-### Test Data
-- Use dedicated test environments
-- Reset state between tests
-  ```typescript
-  // ✅ Correct
-  beforeEach(async () => {
-    await resetDatabase();
-    await seedTestData();
-  });
-
-  test('user workflow', async ({ page }) => {
-    // Test with clean, predictable state
-  });
-  ```
-
-## Visual Testing
-
-### Storybook Guidelines
-- Create stories for all components
-- Document component variants
-  ```typescript
-  // Button.stories.tsx
-  export default {
-    title: 'Components/Button',
-    component: Button,
-  } as Meta;
-
-  export const Primary = {
-    args: {
-      variant: 'primary',
-      label: 'Primary Button',
-    },
-  };
-
-  export const Secondary = {
-    args: {
-      variant: 'secondary',
-      label: 'Secondary Button',
-    },
-  };
-  ```
-
-### Visual Regression
-- Use Storybook's visual regression testing
-- Review changes carefully
-  ```typescript
-  // jest.config.js
-  module.exports = {
-    preset: 'jest-image-snapshot',
-    setupFilesAfterEnv: ['<rootDir>/setup-tests.ts'],
-  };
-
-  // Button.visual.test.tsx
-  describe('Button', () => {
-    it('matches visual snapshot', async () => {
-      const image = await page.screenshot();
-      expect(image).toMatchImageSnapshot();
-    });
-  });
-  ```
-
-## Test Quality
-
-### Test Data Attributes
-- Use data-testid for test selectors
-- Avoid selecting by CSS classes
-  ```typescript
-  // ✅ Correct
-  <button data-testid="submit-button">Submit</button>
-
-  // In tests
-  const button = screen.getByTestId('submit-button');
-
-  // ❌ Incorrect
-  const button = container.querySelector('.submit-btn');
-  ```
-
-### Assertion Best Practices
-- Use explicit assertions
-- Test both positive and negative cases
-  ```typescript
-  // ✅ Correct
-  test('form validation', async () => {
-    render(<UserForm />);
-    
-    // Negative case
-    await userEvent.click(screen.getByText('Submit'));
-    expect(screen.getByText('Name is required')).toBeInTheDocument();
-    
-    // Positive case
-    await userEvent.type(screen.getByLabelText('Name'), 'John Doe');
-    await userEvent.click(screen.getByText('Submit'));
-    expect(screen.queryByText('Name is required')).not.toBeInTheDocument();
-  });
-  ```
-
-### Coverage Requirements
-- A new feature should have at least 80% coverage
-- Focus on critical paths
-- Run coverage reports in CI
-  ```typescript
-  // jest.config.js
-  module.exports = {
-    coverageThreshold: {
-      global: {
-        statements: 80,
-        branches: 80,
-        functions: 80,
-        lines: 80,
-      },
-    },
-  };
-  ``` 

.cursor/rules/testing-guidelines.mdc

@@ -0,0 +1,127 @@
+---
+description: Testing guidelines for Twenty CRM
+alwaysApply: false
+---
+# Testing Guidelines
+
+## Test Structure (AAA Pattern)
+```typescript
+describe('UserService', () => {
+  describe('when getting user by ID', () => {
+    it('should return user data for valid ID', async () => {
+      // Arrange
+      const userId = '123';
+      const expectedUser = { id: '123', name: 'John' };
+      mockUserRepository.findById.mockResolvedValue(expectedUser);
+
+      // Act
+      const result = await userService.getUserById(userId);
+
+      // Assert
+      expect(result).toEqual(expectedUser);
+    });
+  });
+});
+```
+
+## React Component Testing
+```typescript
+// ✅ Test user behavior, not implementation
+describe('LoginForm', () => {
+  it('should display error message for invalid credentials', async () => {
+    const mockOnSubmit = jest.fn().mockRejectedValue(new Error('Invalid credentials'));
+    render(<LoginForm onSubmit={mockOnSubmit} />);
+
+    await user.type(screen.getByLabelText(/email/i), 'invalid@example.com');
+    await user.type(screen.getByLabelText(/password/i), 'wrongpassword');
+    await user.click(screen.getByRole('button', { name: /sign in/i }));
+
+    expect(await screen.findByText(/invalid credentials/i)).toBeInTheDocument();
+  });
+});
+```
+
+## Mocking Patterns
+```typescript
+// ✅ Service mocking
+const mockEmailService = {
+  sendEmail: jest.fn().mockResolvedValue({ success: true }),
+  validateEmail: jest.fn().mockReturnValue(true),
+};
+
+// ✅ Test data factories
+const createTestUser = (overrides = {}) => ({
+  id: uuid(),
+  email: 'test@example.com',
+  name: 'Test User',
+  ...overrides,
+});
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+```
+
+## Testing Principles
+- **Test behavior, not implementation** - Focus on what users see/do
+- **Use descriptive test names** - "should [behavior] when [condition]"
+- **Query by user-visible elements** - text, roles, labels over test IDs
+- **Keep tests isolated** - Independent and repeatable
+- **70% unit, 20% integration, 10% E2E** - Test pyramid
+
+## Running Tests
+
+### Single Test File Execution
+```bash
+# ✅ Run a specific test file (PREFERRED - Fast & Efficient)
+npx jest path/to/test.test.ts --config=packages/PROJECT/jest.config.mjs
+
+# Key Benefits:
+# - Only runs the specific test file (fast)
+# - No dependency resolution overhead
+# - Immediate feedback for test development
+
+# ✅ Examples:
+# Frontend tests (use .test.ts extension)
+npx jest packages/twenty-front/src/modules/localization/utils/detection/detectNumberFormat.test.ts --config=packages/twenty-front/jest.config.mjs
+
+# Server tests (use .spec.ts extension)
+npx jest packages/twenty-server/src/utils/__test__/is-work-email.spec.ts --config=packages/twenty-server/jest.config.mjs
+
+# ❌ AVOID - This runs ALL tests (slow):
+npx nx test twenty-front --testPathPattern=detectNumberFormat.test.ts
+
+# ✅ Run tests in watch mode for development:
+npx jest path/to/test.test.ts --config=packages/twenty-front/jest.config.mjs --watch
+
+# ✅ Run with coverage for single file:
+npx jest path/to/test.test.ts --config=packages/twenty-front/jest.config.mjs --coverage
+```
+
+### Test Suite Execution
+```bash
+# Run all tests for a project (use sparingly)
+npx nx test twenty-front
+npx nx test twenty-server
+
+# Run tests matching a pattern
+npx jest --testNamePattern="UserService" --config=packages/twenty-front/jest.config.mjs
+```
+
+## Common Patterns
+```typescript
+// Async testing
+await waitFor(() => {
+  expect(screen.getByText('Loading...')).not.toBeInTheDocument();
+});
+
+// User interactions
+await user.click(screen.getByRole('button'));
+await user.type(screen.getByLabelText(/search/i), 'query');
+
+// API integration tests
+const response = await request(app)
+  .post('/api/users')
+  .send(userData)
+  .expect(201);
+```

.cursor/rules/translations.md

@@ -1,162 +0,0 @@
-# Translation Guidelines
-
-## Core Translation Principles
-Twenty uses Lingui for internationalization (i18n) and Crowdin for translation management. This document outlines our translation workflow and best practices.
-
-## Technology Stack
-
-### Translation Tools
-- **Framework**: @lingui/react
-- **Translation Management**: Crowdin
-- **Workflow**: GitHub Actions for automation
-
-### Package Structure
-Translation files are managed in multiple packages:
-- `twenty-front`: Frontend translations
-- `twenty-server`: Backend translations
-- `twenty-emails`: Email template translations
-
-## Translation Process
-
-### Adding New Strings
-
-#### Using Lingui Macros
-- Use `<Trans>` for components
-- Use `t` macro for strings outside JSX
-  ```typescript
-  // ✅ Correct - In JSX
-  import { Trans } from '@lingui/react/macro';
-  
-  const WelcomeMessage = () => (
-    <h1>
-      <Trans>Welcome to Twenty</Trans>
-    </h1>
-  );
-
-  // ✅ Correct - Outside JSX
-  import { t } from '@lingui/react/macro';
-  
-  const getMessage = () => {
-    return t`Welcome to Twenty`;
-  };
-
-  // ❌ Incorrect - Don't use raw strings
-  const WelcomeMessage = () => (
-    <h1>Welcome to Twenty</h1>
-  );
-  ```
-
-### String Guidelines
-
-#### What to Translate
-- User interface text
-- Error messages
-- Notifications
-- Email content
-
-#### What Not to Translate
-- Variables
-- Test data/mocks
-
-### Translation Workflow
-
-#### 1. Extracting Translations
-- Automatically triggered on main branch changes
-- Can be manually triggered in GitHub Actions
-- Process:
-  ```bash
-  # Extract new strings
-  nx run twenty-front:lingui:extract
-  nx run twenty-server:lingui:extract
-  nx run twenty-emails:lingui:extract
-  ```
-
-#### 2. Translation Management
-- Translations are managed in Crowdin
-- Changes are synced every 2 hours
-- Process:
-  1. New strings are uploaded to Crowdin
-  2. Translators work on translations
-  3. Translations are pulled back to the repository
-
-#### 3. Compiling Translations
-- Happens automatically in CI/CD
-- Required before running the application
-  ```bash
-  # Compile translations
-  nx run twenty-front:lingui:compile
-  nx run twenty-server:lingui:compile
-  nx run twenty-emails:lingui:compile
-  ```
-
-## Best Practices
-
-### String Management
-
-#### Use Placeholders
-- Use placeholders for dynamic content
-  ```typescript
-  // ✅ Correct
-  <Trans>Hello {userName},</Trans>
-
-  // ❌ Incorrect - String concatenation
-  <Trans>Hello </Trans>{userName},
-  ```
-
-#### Provide Context
-- Lingui provides powerfulway to add context for translators but we don't use them as of today.
-
-### Code Organization
-
-#### Translation Files
-- Keep translation files organized by feature
-- Use consistent naming patterns
-  ```
-  src/
-  ├── locales/
-  │   ├── en/
-  │   │   ├── messages.po
-  │   │   └── messages.js
-  │   └── fr/
-  │       ├── messages.po
-  │       └── messages.js
-  ```
-
-### Quality Assurance
-
-#### Strict Mode
-- Use --strict mode when compiling to identify missing translations
-
-
-#### Testing Translations
-- Test with different locales
-- Verify string interpolation
-- Check layout with different language lengths
-
-## Automation
-
-### GitHub Actions
-
-#### Pull Workflow
-- Runs every 2 hours
-- Downloads new translations from Crowdin
-- Creates PR if changes detected
-- Can be manually triggered with force pull option
-
-#### Push Workflow
-- Runs on main branch changes
-- Extracts and uploads new strings
-- Compiles translations
-- Creates PR with changes
-
-### Error Handling
-
-#### Missing Translations
-- Development: Shown in original language
-- Production: Falls back to default language
-- Strict mode in CI catches missing translations
-
-#### Compilation Errors
-- Addressed before merging
-- PR created for fixing missing translations
-- Automated testing in CI pipeline 

.cursor/rules/translations.mdc

@@ -0,0 +1,290 @@
+---
+description: Translation guidelines for Twenty CRM
+alwaysApply: false
+---
+# Translation Guidelines
+
+## Internationalization (i18n) Overview
+
+### Supported Languages
+- English (en) - Primary language
+- French (fr) - Secondary language
+- German (de) - Planned
+- Spanish (es) - Planned
+- Additional languages based on community contributions
+
+### i18n Architecture
+- Use react-i18next for React components
+- Store translations in JSON files
+- Implement namespace-based organization
+- Support for interpolation and pluralization
+
+## File Structure
+
+### Translation Files
+```
+src/locales/
+├── en/                        # English translations
+│   ├── common.json           # Common UI strings
+│   ├── auth.json             # Authentication strings
+│   ├── dashboard.json        # Dashboard specific
+│   ├── forms.json            # Form labels and validation
+│   └── errors.json           # Error messages
+├── fr/                       # French translations
+│   ├── common.json
+│   ├── auth.json
+│   └── ...
+└── index.ts                  # i18n configuration
+```
+
+### Translation Keys
+- Use nested objects for organization
+- Follow consistent naming patterns
+- Include context in key names
+  ```json
+  {
+    "auth": {
+      "login": {
+        "title": "Sign In",
+        "email": "Email Address",
+        "password": "Password",
+        "submit": "Sign In",
+        "forgotPassword": "Forgot Password?"
+      },
+      "register": {
+        "title": "Create Account",
+        "confirmPassword": "Confirm Password"
+      }
+    }
+  }
+  ```
+
+## Translation Implementation
+
+### React Components
+- Use useTranslation hook
+- Specify namespaces for better organization
+- Handle loading states properly
+  ```typescript
+  // ✅ Correct
+  import { useTranslation } from 'react-i18next';
+
+  const LoginForm = () => {
+    const { t } = useTranslation('auth');
+
+    return (
+      <form>
+        <h1>{t('login.title')}</h1>
+        <input 
+          placeholder={t('login.email')}
+          type="email"
+        />
+        <input 
+          placeholder={t('login.password')}
+          type="password"
+        />
+        <button type="submit">
+          {t('login.submit')}
+        </button>
+      </form>
+    );
+  };
+  ```
+
+### Interpolation
+- Use interpolation for dynamic content
+- Pass variables through t() function
+- Keep interpolation simple and readable
+  ```typescript
+  // ✅ Correct
+  const WelcomeMessage = ({ userName }: { userName: string }) => {
+    const { t } = useTranslation('common');
+    
+    return (
+      <h1>{t('welcome.message', { name: userName })}</h1>
+    );
+  };
+
+  // Translation file
+  {
+    "welcome": {
+      "message": "Welcome back, {{name}}!"
+    }
+  }
+  ```
+
+### Pluralization
+- Handle singular/plural forms correctly
+- Use count-based pluralization
+- Support different plural rules per language
+  ```typescript
+  // ✅ Correct
+  const ItemCount = ({ count }: { count: number }) => {
+    const { t } = useTranslation('common');
+    
+    return (
+      <span>{t('items.count', { count })}</span>
+    );
+  };
+
+  // Translation file
+  {
+    "items": {
+      "count_one": "{{count}} item",
+      "count_other": "{{count}} items"
+    }
+  }
+  ```
+
+## Translation Management
+
+### Adding New Strings
+1. Add English translation first
+2. Use descriptive keys that indicate context
+3. Include comments for translators when needed
+4. Test with long translations to ensure UI flexibility
+  ```json
+  {
+    "user": {
+      "profile": {
+        // Displayed in user profile header
+        "displayName": "Display Name",
+        // Used in forms when editing profile
+        "editDisplayName": "Edit Display Name",
+        // Confirmation message after profile update
+        "updateSuccess": "Profile updated successfully"
+      }
+    }
+  }
+  ```
+
+### Translation Validation
+- Use TypeScript for translation key validation
+- Implement automated checks for missing translations
+- Validate interpolation parameters
+  ```typescript
+  // ✅ Correct - Type-safe translations
+  type TranslationKey = 
+    | 'auth.login.title'
+    | 'auth.login.email'
+    | 'auth.login.password'
+    | 'common.welcome.message';
+
+  const t = (key: TranslationKey, options?: any) => {
+    // Translation implementation
+  };
+  ```
+
+## Best Practices
+
+### Key Naming
+- Use descriptive, hierarchical keys
+- Avoid abbreviations
+- Group related translations
+- Keep keys consistent across languages
+  ```json
+  // ✅ Correct
+  {
+    "dashboard": {
+      "header": {
+        "title": "Dashboard",
+        "subtitle": "Welcome to your workspace"
+      },
+      "actions": {
+        "createNew": "Create New",
+        "refresh": "Refresh Data",
+        "export": "Export"
+      }
+    }
+  }
+
+  // ❌ Incorrect
+  {
+    "dash_title": "Dashboard",
+    "newBtn": "New",
+    "refreshData": "Refresh"
+  }
+  ```
+
+### String Guidelines
+- Write clear, concise text
+- Use consistent terminology
+- Consider character limits for UI elements
+- Avoid concatenating translated strings
+  ```json
+  // ✅ Correct
+  {
+    "user": {
+      "status": {
+        "online": "Online",
+        "offline": "Offline",
+        "away": "Away"
+      }
+    }
+  }
+
+  // ❌ Incorrect - Don't concatenate
+  {
+    "user": {
+      "statusPrefix": "User is ",
+      "statusOnline": "online"
+    }
+  }
+  ```
+
+### Context Information
+- Provide context for translators
+- Include character limits when relevant
+- Explain when/where text appears
+- Note any technical constraints
+  ```json
+  {
+    "button": {
+      // Primary action button, max 20 characters
+      "save": "Save Changes",
+      // Secondary button in modal footer
+      "cancel": "Cancel",
+      // Destructive action, should sound cautious
+      "delete": "Delete Permanently"
+    }
+  }
+  ```
+
+## Workflow
+
+### Development Process
+1. Develop features with English translations
+2. Use placeholder keys during development
+3. Finalize translation keys before feature completion
+4. Add translations to all supported languages
+5. Test with different language strings
+
+### Translation Updates
+1. Create translation tasks for new features
+2. Provide context and screenshots to translators
+3. Review translations for consistency
+4. Test UI with translated strings
+5. Update documentation when needed
+
+### Quality Assurance
+- Review translations in context
+- Test with longest expected translations
+- Verify formatting with interpolation
+- Check for cultural appropriateness
+- Ensure accessibility with screen readers
+
+## Maintenance
+
+### Regular Tasks
+- Review and update outdated translations
+- Check for unused translation keys
+- Maintain consistency across languages
+- Update translation documentation
+- Monitor for missing translations in new features
+
+### Tools and Automation
+- Use automated translation validation
+- Implement missing translation detection
+- Set up continuous integration checks
+- Maintain translation coverage reports
+- Use translation management platforms when needed

.cursor/rules/typescript-guidelines.md

@@ -1,172 +0,0 @@
-# TypeScript Guidelines
-
-## Core TypeScript Principles
-Twenty enforces strict TypeScript usage to ensure type safety and maintainable code. This document outlines our TypeScript conventions and best practices.
-
-## Type Safety
-
-### Strict Typing
-- **No 'any' type allowed**
-- TypeScript strict mode enabled
-- noImplicitAny enabled
-  ```typescript
-  // ✅ Correct
-  function processUser(user: User) {
-    return user.name;
-  }
-
-  // ❌ Incorrect
-  function processUser(user: any) {
-    return user.name;
-  }
-  ```
-
-### Type Definitions
-
-#### Types over Interfaces
-- Use `type` for all type definitions
-- Exception: When extending third-party interfaces
-  ```typescript
-  // ✅ Correct
-  type User = {
-    id: string;
-    name: string;
-    email: string;
-  };
-
-  // ❌ Incorrect
-  interface User {
-    id: string;
-    name: string;
-    email: string;
-  }
-  ```
-
-### String Literals over Enums
-- Use string literal unions instead of enums
-- Exception: GraphQL enums
-  ```typescript
-  // ✅ Correct
-  type UserRole = 'admin' | 'user' | 'guest';
-
-  // ❌ Incorrect
-  enum UserRole {
-    Admin = 'admin',
-    User = 'user',
-    Guest = 'guest',
-  }
-  ```
-
-## Naming Conventions
-
-### Component Props
-- Suffix component prop types with 'Props'
-- Keep props focused and single-purpose
-  ```typescript
-  // ✅ Correct
-  type ButtonProps = {
-    label: string;
-    onClick: () => void;
-    variant?: 'primary' | 'secondary';
-  };
-
-  // ❌ Incorrect
-  type ButtonParameters = {
-    label: string;
-    onClick: () => void;
-    variant?: 'primary' | 'secondary';
-  };
-  ```
-
-## Type Inference
-
-### Leverage TypeScript Inference
-- Use type inference when types are clear
-- Explicitly type when inference is ambiguous
-  ```typescript
-  // ✅ Correct - Clear inference
-  const users = ['John', 'Jane']; // inferred as string[]
-
-  // ✅ Correct - Explicit typing needed
-  const processUser = (user: User): UserResponse => {
-    // Complex processing
-    return response;
-  };
-
-  // ❌ Incorrect - Unnecessary explicit typing
-  const users: string[] = ['John', 'Jane'];
-  ```
-
-## Best Practices
-
-### Type Guards
-- Use type guards for runtime type checking
-- Prefer discriminated unions
-  ```typescript
-  // ✅ Correct
-  type Success = {
-    type: 'success';
-    data: User;
-  };
-
-  type Error = {
-    type: 'error';
-    message: string;
-  };
-
-  type Result = Success | Error;
-
-  function handleResult(result: Result) {
-    if (result.type === 'success') {
-      // TypeScript knows result.data exists
-      console.log(result.data);
-    }
-  }
-  ```
-
-### Generics
-- Use generics for reusable type patterns
-- Keep generic names descriptive
-  ```typescript
-  // ✅ Correct
-  type ApiResponse<TData> = {
-    data: TData;
-    status: number;
-    message: string;
-  };
-
-  // ❌ Incorrect
-  type ApiResponse<T> = {
-    data: T;
-    status: number;
-    message: string;
-  };
-  ```
-
-### Type Exports
-- Export types when they're used across files
-- Keep type definitions close to their usage
-  ```typescript
-  // types.ts
-  export type User = {
-    id: string;
-    name: string;
-  };
-
-  // UserComponent.tsx
-  import { type User } from './types';
-  ```
-
-### Utility Types
-- Leverage TypeScript utility types
-- Create custom utility types for repeated patterns
-  ```typescript
-  // Built-in utility types
-  type UserPartial = Partial<User>;
-  type UserReadonly = Readonly<User>;
-
-  // Custom utility types
-  type NonNullableProperties<T> = {
-    [P in keyof T]: NonNullable<T[P]>;
-  };
-  ``` 

.cursor/rules/typescript-guidelines.mdc

@@ -0,0 +1,182 @@
+---
+description: TypeScript best practices and conventions for the Twenty codebase, including strict typing, naming conventions, and type safety guidelines.
+alwaysApply: false
+---
+---
+description: TypeScript best practices and conventions for the Twenty codebase, including strict typing, naming conventions, and type safety guidelines.
+globs: ["**/*.ts", "**/*.tsx"]
+alwaysApply: false
+---
+
+# TypeScript Guidelines
+
+## Core TypeScript Principles
+Twenty enforces strict TypeScript usage to ensure type safety and maintainable code. This document outlines our TypeScript conventions and best practices.
+
+## Type Safety
+
+### Strict Typing
+- **No 'any' type allowed**
+- TypeScript strict mode enabled
+- noImplicitAny enabled
+  ```typescript
+  // ✅ Correct
+  function processUser(user: User) {
+    return user.name;
+  }
+
+  // ❌ Incorrect
+  function processUser(user: any) {
+    return user.name;
+  }
+  ```
+
+### Type Definitions
+
+#### Types over Interfaces
+- Use `type` for all type definitions
+- Exception: When extending third-party interfaces
+  ```typescript
+  // ✅ Correct
+  type User = {
+    id: string;
+    name: string;
+    email: string;
+  };
+
+  // ❌ Incorrect
+  interface User {
+    id: string;
+    name: string;
+    email: string;
+  }
+  ```
+
+### String Literals over Enums
+- Use string literal unions instead of enums
+- Exception: GraphQL enums
+  ```typescript
+  // ✅ Correct
+  type UserRole = 'admin' | 'user' | 'guest';
+
+  // ❌ Incorrect
+  enum UserRole {
+    Admin = 'admin',
+    User = 'user',
+    Guest = 'guest',
+  }
+  ```
+
+## Naming Conventions
+
+### Component Props
+- Suffix component prop types with 'Props'
+- Keep props focused and single-purpose
+  ```typescript
+  // ✅ Correct
+  type ButtonProps = {
+    label: string;
+    onClick: () => void;
+    variant?: 'primary' | 'secondary';
+  };
+
+  // ❌ Incorrect
+  type ButtonParameters = {
+    label: string;
+    onClick: () => void;
+    variant?: 'primary' | 'secondary';
+  };
+  ```
+
+## Type Inference
+
+### Leverage TypeScript Inference
+- Use type inference when types are clear
+- Explicitly type when inference is ambiguous
+  ```typescript
+  // ✅ Correct - Clear inference
+  const users = ['John', 'Jane']; // inferred as string[]
+
+  // ✅ Correct - Explicit typing needed
+  const processUser = (user: User): UserResponse => {
+    // Complex processing
+    return response;
+  };
+
+  // ❌ Incorrect - Unnecessary explicit typing
+  const users: string[] = ['John', 'Jane'];
+  ```
+
+## Best Practices
+
+### Type Guards
+- Use type guards for runtime type checking
+- Prefer discriminated unions
+  ```typescript
+  // ✅ Correct
+  type Success = {
+    type: 'success';
+    data: User;
+  };
+
+  type Error = {
+    type: 'error';
+    message: string;
+  };
+
+  type Result = Success | Error;
+
+  function handleResult(result: Result) {
+    if (result.type === 'success') {
+      // TypeScript knows result.data exists
+      console.log(result.data);
+    }
+  }
+  ```
+
+### Generics
+- Use generics for reusable type patterns
+- Keep generic names descriptive
+  ```typescript
+  // ✅ Correct
+  type ApiResponse<TData> = {
+    data: TData;
+    status: number;
+    message: string;
+  };
+
+  // ❌ Incorrect
+  type ApiResponse<T> = {
+    data: T;
+    status: number;
+    message: string;
+  };
+  ```
+
+### Type Exports
+- Export types when they're used across files
+- Keep type definitions close to their usage
+  ```typescript
+  // types.ts
+  export type User = {
+    id: string;
+    name: string;
+  };
+
+  // UserComponent.tsx
+  import { type User } from './types';
+  ```
+
+### Utility Types
+- Leverage TypeScript utility types
+- Create custom utility types for repeated patterns
+  ```typescript
+  // Built-in utility types
+  type UserPartial = Partial<User>;
+  type UserReadonly = Readonly<User>;
+
+  // Custom utility types
+  type NonNullableProperties<T> = {
+    [P in keyof T]: NonNullable<T[P]>;
+  };
+  ```

.cursor/skills/syncable-entity-builder-and-validation/SKILL.md

@@ -0,0 +1,393 @@
+---
+name: syncable-entity-builder-and-validation
+description: Create validation logic and migration action builders for syncable entities in Twenty. Use when implementing business rule validation, uniqueness checks, foreign key validation, or building workspace migration actions for syncable entities. Validators never throw and never mutate.
+---
+
+# Syncable Entity: Builder & Validation (Step 3/6)
+
+**Purpose**: Implement business rule validation and create migration action builders.
+
+**When to use**: After completing Steps 1-2 (Types, Cache, Transform). Required before implementing action handlers.
+
+---
+
+## Quick Start
+
+This step creates:
+1. Validator service (business logic validation)
+2. Builder service (action creation)
+3. Orchestrator wiring (**CRITICAL** - often forgotten!)
+
+**Key principles**:
+- Validators **never throw** - return error arrays
+- Validators **never mutate** - pass optimistic entity maps
+- Use indexed lookups (O(1)) not `Object.values().find()` (O(n))
+
+---
+
+## Step 1: Create Validator Service
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { t, msg } from '@lingui/macro';
+import { isDefined } from 'twenty-shared/utils';
+
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+import { type FlatMyEntityMaps } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity-maps.type';
+import { WorkspaceMigrationValidationError } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/types/workspace-migration-validation-error.type';
+import { MyEntityExceptionCode } from 'src/engine/metadata-modules/my-entity/exceptions/my-entity-exception-code.enum';
+
+@Injectable()
+export class FlatMyEntityValidatorService {
+  validateMyEntityForCreate(
+    flatMyEntity: FlatMyEntity,
+    optimisticFlatMyEntityMaps: FlatMyEntityMaps,
+  ): WorkspaceMigrationValidationError[] {
+    const errors: WorkspaceMigrationValidationError[] = [];
+
+    // Pattern 1: Required field validation
+    if (!isDefined(flatMyEntity.name) || flatMyEntity.name.trim() === '') {
+      errors.push({
+        code: MyEntityExceptionCode.NAME_REQUIRED,
+        message: t`Name is required`,
+        userFriendlyMessage: msg`Please provide a name for this entity`,
+      });
+    }
+
+    // Pattern 2: Uniqueness check - use indexed map (O(1))
+    const existingEntityWithName = optimisticFlatMyEntityMaps.byName[flatMyEntity.name];
+
+    if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
+      errors.push({
+        code: MyEntityExceptionCode.MY_ENTITY_ALREADY_EXISTS,
+        message: t`Entity with name ${flatMyEntity.name} already exists`,
+        userFriendlyMessage: msg`An entity with this name already exists`,
+      });
+    }
+
+    // Pattern 3: Foreign key validation
+    if (isDefined(flatMyEntity.parentEntityId)) {
+      const parentEntity = optimisticFlatParentEntityMaps.byId[flatMyEntity.parentEntityId];
+
+      if (!isDefined(parentEntity)) {
+        errors.push({
+          code: MyEntityExceptionCode.PARENT_ENTITY_NOT_FOUND,
+          message: t`Parent entity with ID ${flatMyEntity.parentEntityId} not found`,
+          userFriendlyMessage: msg`The specified parent entity does not exist`,
+        });
+      } else if (isDefined(parentEntity.deletedAt)) {
+        errors.push({
+          code: MyEntityExceptionCode.PARENT_ENTITY_DELETED,
+          message: t`Parent entity is deleted`,
+          userFriendlyMessage: msg`Cannot reference a deleted parent entity`,
+        });
+      }
+    }
+
+    // Pattern 4: Standard entity protection
+    if (flatMyEntity.isCustom === false) {
+      errors.push({
+        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_CREATED,
+        message: t`Cannot create standard entity`,
+        userFriendlyMessage: msg`Standard entities can only be created by the system`,
+      });
+    }
+
+    return errors;
+  }
+
+  validateMyEntityForUpdate(
+    flatMyEntity: FlatMyEntity,
+    updates: Partial<FlatMyEntity>,
+    optimisticFlatMyEntityMaps: FlatMyEntityMaps,
+  ): WorkspaceMigrationValidationError[] {
+    const errors: WorkspaceMigrationValidationError[] = [];
+
+    // Standard entity protection
+    if (flatMyEntity.isCustom === false) {
+      errors.push({
+        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_UPDATED,
+        message: t`Cannot update standard entity`,
+        userFriendlyMessage: msg`Standard entities cannot be modified`,
+      });
+      return errors; // Early return if standard
+    }
+
+    // Uniqueness check for name changes
+    if (isDefined(updates.name) && updates.name !== flatMyEntity.name) {
+      const existingEntityWithName = optimisticFlatMyEntityMaps.byName[updates.name];
+
+      if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
+        errors.push({
+          code: MyEntityExceptionCode.MY_ENTITY_ALREADY_EXISTS,
+          message: t`Entity with name ${updates.name} already exists`,
+          userFriendlyMessage: msg`An entity with this name already exists`,
+        });
+      }
+    }
+
+    return errors;
+  }
+
+  validateMyEntityForDelete(
+    flatMyEntity: FlatMyEntity,
+  ): WorkspaceMigrationValidationError[] {
+    const errors: WorkspaceMigrationValidationError[] = [];
+
+    // Standard entity protection
+    if (flatMyEntity.isCustom === false) {
+      errors.push({
+        code: MyEntityExceptionCode.STANDARD_ENTITY_CANNOT_BE_DELETED,
+        message: t`Cannot delete standard entity`,
+        userFriendlyMessage: msg`Standard entities cannot be deleted`,
+      });
+    }
+
+    return errors;
+  }
+}
+```
+
+**Performance warning**: Avoid `Object.values().find()` - use indexed maps instead!
+
+```typescript
+// ❌ BAD: O(n) - slow for large datasets
+const duplicate = Object.values(optimisticFlatMyEntityMaps.byId).find(
+  (entity) => entity.name === flatMyEntity.name && entity.id !== flatMyEntity.id
+);
+
+// ✅ GOOD: O(1) - use indexed map
+const existingEntityWithName = optimisticFlatMyEntityMaps.byName[flatMyEntity.name];
+if (isDefined(existingEntityWithName) && existingEntityWithName.id !== flatMyEntity.id) {
+  // Handle duplicate
+}
+```
+
+---
+
+## Step 2: Create Builder Service
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/workspace-migration-my-entity-actions-builder.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+
+import { WorkspaceEntityMigrationBuilderService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-entity-migration-builder.service';
+import { FlatMyEntityValidatorService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service';
+import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
+import {
+  type UniversalCreateMyEntityAction,
+  type UniversalUpdateMyEntityAction,
+  type UniversalDeleteMyEntityAction,
+} from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type';
+
+@Injectable()
+export class WorkspaceMigrationMyEntityActionsBuilderService extends WorkspaceEntityMigrationBuilderService<
+  'myEntity',
+  UniversalFlatMyEntity,
+  UniversalCreateMyEntityAction,
+  UniversalUpdateMyEntityAction,
+  UniversalDeleteMyEntityAction
+> {
+  constructor(
+    private readonly flatMyEntityValidatorService: FlatMyEntityValidatorService,
+  ) {
+    super();
+  }
+
+  protected buildCreateAction(
+    universalFlatMyEntity: UniversalFlatMyEntity,
+    flatEntityMaps: AllFlatEntityMapsByMetadataName,
+  ): BuildWorkspaceMigrationActionReturnType<UniversalCreateMyEntityAction> {
+    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForCreate(
+      universalFlatMyEntity,
+      flatEntityMaps.flatMyEntityMaps,
+    );
+
+    if (validationResult.length > 0) {
+      return {
+        status: 'failed',
+        errors: validationResult,
+      };
+    }
+
+    return {
+      status: 'success',
+      action: {
+        type: 'create',
+        metadataName: 'myEntity',
+        universalFlatEntity: universalFlatMyEntity,
+      },
+    };
+  }
+
+  protected buildUpdateAction(
+    universalFlatMyEntity: UniversalFlatMyEntity,
+    universalUpdates: Partial<UniversalFlatMyEntity>,
+    flatEntityMaps: AllFlatEntityMapsByMetadataName,
+  ): BuildWorkspaceMigrationActionReturnType<UniversalUpdateMyEntityAction> {
+    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForUpdate(
+      universalFlatMyEntity,
+      universalUpdates,
+      flatEntityMaps.flatMyEntityMaps,
+    );
+
+    if (validationResult.length > 0) {
+      return {
+        status: 'failed',
+        errors: validationResult,
+      };
+    }
+
+    return {
+      status: 'success',
+      action: {
+        type: 'update',
+        metadataName: 'myEntity',
+        universalFlatEntity: universalFlatMyEntity,
+        universalUpdates,
+      },
+    };
+  }
+
+  protected buildDeleteAction(
+    universalFlatMyEntity: UniversalFlatMyEntity,
+  ): BuildWorkspaceMigrationActionReturnType<UniversalDeleteMyEntityAction> {
+    const validationResult = this.flatMyEntityValidatorService.validateMyEntityForDelete(
+      universalFlatMyEntity,
+    );
+
+    if (validationResult.length > 0) {
+      return {
+        status: 'failed',
+        errors: validationResult,
+      };
+    }
+
+    return {
+      status: 'success',
+      action: {
+        type: 'delete',
+        metadataName: 'myEntity',
+        universalFlatEntity: universalFlatMyEntity,
+      },
+    };
+  }
+}
+```
+
+---
+
+## Step 3: Wire into Orchestrator (**CRITICAL**)
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-migration-build-orchestrator.service.ts`
+
+```typescript
+@Injectable()
+export class WorkspaceMigrationBuildOrchestratorService {
+  constructor(
+    // ... existing builders
+    private readonly workspaceMigrationMyEntityActionsBuilderService: WorkspaceMigrationMyEntityActionsBuilderService,
+  ) {}
+
+  async buildWorkspaceMigration({
+    allFlatEntityOperationByMetadataName,
+    flatEntityMaps,
+    isSystemBuild,
+  }: BuildWorkspaceMigrationInput): Promise<BuildWorkspaceMigrationOutput> {
+    // ... existing code
+
+    // Add your entity builder
+    const myEntityResult = await this.workspaceMigrationMyEntityActionsBuilderService.build({
+      flatEntitiesToCreate: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToCreate ?? [],
+      flatEntitiesToUpdate: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToUpdate ?? [],
+      flatEntitiesToDelete: allFlatEntityOperationByMetadataName.myEntity?.flatEntityToDelete ?? [],
+      flatEntityMaps,
+      isSystemBuild,
+    });
+
+    // ... aggregate errors
+
+    return {
+      status: aggregatedErrors.length > 0 ? 'failed' : 'success',
+      errors: aggregatedErrors,
+      actions: [
+        ...existingActions,
+        ...myEntityResult.actions,
+      ],
+    };
+  }
+}
+```
+
+**⚠️ This step is the most commonly forgotten!** Your entity won't sync without orchestrator wiring.
+
+---
+
+## Validation Patterns
+
+### Pattern 1: Required Field
+```typescript
+if (!isDefined(field) || field.trim() === '') {
+  errors.push({ code: ..., message: ..., userFriendlyMessage: ... });
+}
+```
+
+### Pattern 2: Uniqueness (O(1) lookup)
+```typescript
+const existing = optimisticMaps.byName[entity.name];
+if (isDefined(existing) && existing.id !== entity.id) {
+  errors.push({ ... });
+}
+```
+
+### Pattern 3: Foreign Key Validation
+```typescript
+if (isDefined(entity.parentId)) {
+  const parent = parentMaps.byId[entity.parentId];
+  if (!isDefined(parent)) {
+    errors.push({ code: NOT_FOUND, ... });
+  } else if (isDefined(parent.deletedAt)) {
+    errors.push({ code: DELETED, ... });
+  }
+}
+```
+
+### Pattern 4: Standard Entity Protection
+```typescript
+if (entity.isCustom === false) {
+  errors.push({ code: STANDARD_ENTITY_PROTECTED, ... });
+  return errors; // Early return
+}
+```
+
+---
+
+## Checklist
+
+Before moving to Step 4:
+
+- [ ] Validator service created
+- [ ] Validator **never throws** (returns error arrays)
+- [ ] Validator **never mutates** (uses optimistic maps)
+- [ ] All uniqueness checks use indexed maps (O(1))
+- [ ] Required field validation implemented
+- [ ] Foreign key validation implemented
+- [ ] Standard entity protection implemented
+- [ ] Builder service extends `WorkspaceEntityMigrationBuilderService`
+- [ ] Builder creates actions with universal entities
+- [ ] **Builder wired into orchestrator** (**CRITICAL**)
+- [ ] **Builder injected in orchestrator constructor**
+- [ ] **Builder called in `buildWorkspaceMigration`**
+- [ ] **Actions added to orchestrator return statement**
+
+---
+
+## Next Step
+
+Once builder and validation are complete, proceed to:
+**[Syncable Entity: Runner & Actions (Step 4/6)](../syncable-entity-runner-and-actions/SKILL.md)**
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-cache-and-transform/SKILL.md

@@ -0,0 +1,303 @@
+---
+name: syncable-entity-cache-and-transform
+description: Create cache services and transformation utilities for syncable entities in Twenty. Use when implementing entity-to-flat conversions, input DTO transpilation to universal flat entities, or cache recomputation for syncable entities.
+---
+
+# Syncable Entity: Cache & Transform (Step 2/6)
+
+**Purpose**: Create cache layer and transformation utilities to convert between different entity representations.
+
+**When to use**: After completing Step 1 (Types & Constants). Required before building validators and action handlers.
+
+---
+
+## Quick Start
+
+This step creates:
+1. Cache service for flat entity maps
+2. Entity-to-flat conversion utility
+3. Input transform utils (DTO → Universal Flat Entity)
+
+**Key principle**: Input transform utils must output **universal flat entities** (with `universalIdentifier` and foreign keys mapped to universal identifiers).
+
+---
+
+## Step 1: Create Cache Service
+
+**File**: `src/engine/metadata-modules/flat-my-entity/services/flat-my-entity-cache.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { InjectRepository } from '@nestjs/typeorm';
+import { Repository } from 'typeorm';
+import { v4 } from 'uuid';
+
+import { WorkspaceCache } from 'src/engine/twenty-orm/decorators/workspace-cache.decorator';
+import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { type FlatMyEntityMaps } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity-maps.type';
+import { fromMyEntityEntityToFlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/utils/from-my-entity-entity-to-flat-my-entity.util';
+
+@Injectable()
+export class FlatMyEntityCacheService {
+  constructor(
+    @InjectRepository(MyEntityEntity, 'metadata')
+    private readonly myEntityRepository: Repository<MyEntityEntity>,
+  ) {}
+
+  @WorkspaceCache({ flatMapsKey: 'flatMyEntityMaps' })
+  async getFlatMyEntityMaps(): Promise<FlatMyEntityMaps> {
+    const myEntities = await this.myEntityRepository.find({
+      withDeleted: true, // CRITICAL: Include soft-deleted entities
+    });
+
+    const flatMyEntities = myEntities.map((entity) =>
+      fromMyEntityEntityToFlatMyEntity(entity),
+    );
+
+    return {
+      byId: Object.fromEntries(flatMyEntities.map((e) => [e.id, e])),
+      byName: Object.fromEntries(flatMyEntities.map((e) => [e.name, e])),
+    };
+  }
+}
+```
+
+**Critical rules**:
+- Use `@WorkspaceCache` decorator with unique `flatMapsKey`
+- **Always** use `withDeleted: true` to include soft-deleted entities
+- Cache key pattern: `flat{EntityName}Maps` (camelCase)
+
+---
+
+## Step 2: Entity-to-Flat Conversion
+
+**File**: `src/engine/metadata-modules/flat-my-entity/utils/from-my-entity-entity-to-flat-my-entity.util.ts`
+
+```typescript
+import { v4 } from 'uuid';
+import { type MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+
+export const fromMyEntityEntityToFlatMyEntity = (
+  entity: MyEntityEntity,
+): FlatMyEntity => {
+  return {
+    id: entity.id,
+    // Critical: generate a new UUID for universalIdentifier
+    universalIdentifier: v4(),
+    workspaceId: entity.workspaceId,
+    applicationId: entity.applicationId,
+    name: entity.name,
+    label: entity.label,
+    description: entity.description,
+    isCustom: entity.isCustom,
+    parentEntityId: entity.parentEntityId,
+    settings: entity.settings,
+    createdAt: entity.createdAt.toISOString(),
+    updatedAt: entity.updatedAt.toISOString(),
+    deletedAt: entity.deletedAt?.toISOString() ?? null,
+  };
+};
+```
+
+**Critical**: `universalIdentifier` must be a new UUID generated with `v4()` (not `entity.id`)
+
+---
+
+## Step 3: Input Transform Utils (DTO → Universal Flat Entity)
+
+**File**: `src/engine/metadata-modules/flat-my-entity/utils/from-create-my-entity-input-to-universal-flat-my-entity.util.ts`
+
+```typescript
+import { v4 } from 'uuid';
+import { sanitizeString } from 'twenty-shared/string';
+import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
+import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
+import { resolveEntityRelationUniversalIdentifiers } from 'src/engine/metadata-modules/flat-entity/utils/resolve-entity-relation-universal-identifiers.util';
+import { type AllFlatEntityMapsByMetadataName } from 'src/engine/metadata-modules/flat-entity/types/all-flat-entity-maps-by-metadata-name.type';
+
+export const fromCreateMyEntityInputToUniversalFlatMyEntity = ({
+  input,
+  workspaceId,
+  flatEntityMaps,
+}: {
+  input: CreateMyEntityInput;
+  workspaceId: string;
+  flatEntityMaps?: AllFlatEntityMapsByMetadataName;
+}): UniversalFlatMyEntity => {
+  const id = v4();
+  const universalIdentifier = v4();
+
+  // 1. Extract foreign key IDs BEFORE sanitization
+  const parentEntityId = input.parentEntityId ?? null;
+
+  // 2. Sanitize string properties
+  const name = sanitizeString(input.name);
+  const label = sanitizeString(input.label);
+  const description = input.description ? sanitizeString(input.description) : null;
+
+  // 3. Build base flat entity
+  const baseFlatEntity = {
+    id,
+    universalIdentifier,
+    workspaceId,
+    applicationId: null,
+    name,
+    label,
+    description,
+    isCustom: true,
+    parentEntityId,
+    settings: input.settings ?? null,
+    createdAt: new Date().toISOString(),
+    updatedAt: new Date().toISOString(),
+    deletedAt: null,
+  };
+
+  // 4. Resolve foreign keys to universal identifiers (if flatEntityMaps provided)
+  if (flatEntityMaps) {
+    return resolveEntityRelationUniversalIdentifiers({
+      metadataName: 'myEntity',
+      flatEntity: baseFlatEntity,
+      flatEntityMaps,
+    });
+  }
+
+  // 5. Return with null universal foreign keys if no maps
+  return {
+    ...baseFlatEntity,
+    parentEntityUniversalIdentifier: null,
+  };
+};
+```
+
+**Key steps**:
+1. Generate IDs (`id` and `universalIdentifier` with `v4()`)
+2. Extract foreign keys **before** sanitization
+3. Sanitize all string properties
+4. Build base flat entity
+5. Resolve foreign keys → universal identifiers
+
+---
+
+## Step 4: Create Flat Entity Module
+
+**File**: `src/engine/metadata-modules/flat-my-entity/flat-my-entity.module.ts`
+
+```typescript
+import { Module } from '@nestjs/common';
+import { TypeOrmModule } from '@nestjs/typeorm';
+
+import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { FlatMyEntityCacheService } from 'src/engine/metadata-modules/flat-my-entity/services/flat-my-entity-cache.service';
+
+@Module({
+  imports: [TypeOrmModule.forFeature([MyEntityEntity], 'metadata')],
+  providers: [FlatMyEntityCacheService],
+  exports: [FlatMyEntityCacheService],
+})
+export class FlatMyEntityModule {}
+```
+
+**Rules**:
+- Import entity with `'metadata'` datasource
+- Export cache service for use in other modules
+
+---
+
+## Common Patterns
+
+### Pattern: Foreign Key Resolution
+
+```typescript
+// Extract foreign keys BEFORE sanitization
+const parentEntityId = input.parentEntityId ?? null;
+
+// After building base entity, resolve to universal identifiers
+const universalFlatEntity = resolveEntityRelationUniversalIdentifiers({
+  metadataName: 'myEntity',
+  flatEntity: baseFlatEntity,
+  flatEntityMaps,
+});
+```
+
+### Pattern: JSONB with SerializedRelation
+
+```typescript
+// For JSONB properties containing foreign keys
+const settings = input.settings
+  ? {
+      ...input.settings,
+      fieldMetadataId: input.settings.fieldMetadataId,
+    }
+  : null;
+
+// After resolution, JSONB foreign keys become universal identifiers
+return resolveEntityRelationUniversalIdentifiers({
+  metadataName: 'myEntity',
+  flatEntity: { ...baseFlatEntity, settings },
+  flatEntityMaps,
+});
+```
+
+### Pattern: Update Transform
+
+```typescript
+// from-update-my-entity-input-to-universal-flat-my-entity-updates.util.ts
+export const fromUpdateMyEntityInputToUniversalFlatMyEntityUpdates = ({
+  input,
+  flatEntityMaps,
+}: {
+  input: UpdateMyEntityInput;
+  flatEntityMaps?: AllFlatEntityMapsByMetadataName;
+}): Partial<UniversalFlatMyEntity> => {
+  const updates: Partial<UniversalFlatMyEntity> = {};
+
+  if (input.name !== undefined) {
+    updates.name = sanitizeString(input.name);
+  }
+
+  if (input.parentEntityId !== undefined) {
+    updates.parentEntityId = input.parentEntityId;
+  }
+
+  updates.updatedAt = new Date().toISOString();
+
+  // Resolve foreign keys if maps provided
+  if (flatEntityMaps) {
+    return resolveEntityRelationUniversalIdentifiers({
+      metadataName: 'myEntity',
+      flatEntity: updates as any,
+      flatEntityMaps,
+    });
+  }
+
+  return updates;
+};
+```
+
+---
+
+## Checklist
+
+Before moving to Step 3:
+
+- [ ] Cache service created with `@WorkspaceCache` decorator
+- [ ] Cache uses `withDeleted: true`
+- [ ] Cache key follows `flat{EntityName}Maps` pattern
+- [ ] Entity-to-flat conversion implemented
+- [ ] `universalIdentifier` set correctly (generated with `v4()`)
+- [ ] Create input transform implemented
+- [ ] Update input transform implemented (if needed)
+- [ ] Foreign keys extracted before sanitization
+- [ ] String properties sanitized
+- [ ] Foreign keys resolved to universal identifiers
+- [ ] Flat entity module created and exports cache service
+
+---
+
+## Next Step
+
+Once cache and transform utilities are complete, proceed to:
+**[Syncable Entity: Builder & Validation (Step 3/6)](../syncable-entity-builder-and-validation/SKILL.md)**
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-integration/SKILL.md

@@ -0,0 +1,326 @@
+---
+name: syncable-entity-integration
+description: Wire syncable entity services into NestJS modules, create service layer and resolvers for Twenty entities. Use when registering builders, validators, and action handlers in modules, creating business services, or exposing entities via GraphQL API with proper exception handling.
+---
+
+# Syncable Entity: Integration (Step 5/6)
+
+**Purpose**: Wire everything together, register in modules, create services and resolvers.
+
+**When to use**: After completing Steps 1-4 (all previous steps). Required before testing.
+
+---
+
+## Quick Start
+
+This step:
+1. Registers services in 3 NestJS modules
+2. Creates service layer (returns flat entities)
+3. Creates resolver layer (converts flat → DTO)
+4. Uses exception interceptor for GraphQL
+
+**Key principle**: Services return flat entities, resolvers transpile flat → DTO.
+
+---
+
+## Step 1: Register in Builder Module
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/workspace-migration-builder.module.ts`
+
+```typescript
+import { WorkspaceMigrationMyEntityActionsBuilderService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/workspace-migration-my-entity-actions-builder.service';
+
+@Module({
+  imports: [
+    // ... existing imports
+  ],
+  providers: [
+    // ... existing providers
+    WorkspaceMigrationMyEntityActionsBuilderService,
+  ],
+  exports: [
+    // ... existing exports
+    WorkspaceMigrationMyEntityActionsBuilderService,
+  ],
+})
+export class WorkspaceMigrationBuilderModule {}
+```
+
+**Important**: Add to both `providers` AND `exports` (builder needs to be exported for orchestrator).
+
+---
+
+## Step 2: Register in Validators Module
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/workspace-migration-builder-validators.module.ts`
+
+```typescript
+import { FlatMyEntityValidatorService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/validators/services/flat-my-entity-validator.service';
+
+@Module({
+  imports: [
+    // ... existing imports
+  ],
+  providers: [
+    // ... existing providers
+    FlatMyEntityValidatorService,
+  ],
+  exports: [
+    // ... existing exports
+    FlatMyEntityValidatorService,
+  ],
+})
+export class WorkspaceMigrationBuilderValidatorsModule {}
+```
+
+---
+
+## Step 3: Register Action Handlers
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-schema-migration-runner-action-handlers.module.ts`
+
+```typescript
+import { CreateMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/create-my-entity-action-handler.service';
+import { UpdateMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/update-my-entity-action-handler.service';
+import { DeleteMyEntityActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/delete-my-entity-action-handler.service';
+
+@Module({
+  imports: [
+    // ... existing imports
+  ],
+  providers: [
+    // ... existing providers
+    CreateMyEntityActionHandlerService,
+    UpdateMyEntityActionHandlerService,
+    DeleteMyEntityActionHandlerService,
+  ],
+  exports: [
+    // ... existing exports (action handlers typically not exported)
+  ],
+})
+export class WorkspaceSchemaMigrationRunnerActionHandlersModule {}
+```
+
+**Note**: Action handlers are typically only in `providers`, not `exports`.
+
+---
+
+## Step 4: Create Service Layer
+
+**File**: `src/engine/metadata-modules/my-entity/my-entity.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { isDefined } from 'twenty-shared/utils';
+
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+import { WorkspaceManyOrAllFlatEntityMapsCacheService } from 'src/engine/metadata-modules/flat-entity/services/workspace-many-or-all-flat-entity-maps-cache.service';
+import { findFlatEntityByIdInFlatEntityMapsOrThrow } from 'src/engine/metadata-modules/flat-entity/utils/find-flat-entity-by-id-in-flat-entity-maps-or-throw.util';
+import { fromCreateMyEntityInputToUniversalFlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/utils/from-create-my-entity-input-to-universal-flat-my-entity.util';
+import { WorkspaceMigrationBuilderException } from 'src/engine/workspace-manager/workspace-migration/exceptions/workspace-migration-builder-exception';
+import { WorkspaceMigrationValidateBuildAndRunService } from 'src/engine/workspace-manager/workspace-migration/services/workspace-migration-validate-build-and-run-service';
+
+@Injectable()
+export class MyEntityService {
+  constructor(
+    private readonly workspaceMigrationValidateBuildAndRunService: WorkspaceMigrationValidateBuildAndRunService,
+    private readonly workspaceManyOrAllFlatEntityMapsCacheService: WorkspaceManyOrAllFlatEntityMapsCacheService,
+  ) {}
+
+  async create(input: CreateMyEntityInput, workspaceId: string): Promise<FlatMyEntity> {
+    // 1. Transform input to universal flat entity
+    const universalFlatMyEntityToCreate = fromCreateMyEntityInputToUniversalFlatMyEntity({
+      input,
+      workspaceId,
+    });
+
+    // 2. Validate, build, and run
+    const result =
+      await this.workspaceMigrationValidateBuildAndRunService.validateBuildAndRunWorkspaceMigration(
+        {
+          allFlatEntityOperationByMetadataName: {
+            myEntity: {
+              flatEntityToCreate: [universalFlatMyEntityToCreate],
+              flatEntityToDelete: [],
+              flatEntityToUpdate: [],
+            },
+          },
+          workspaceId,
+          isSystemBuild: false,
+        },
+      );
+
+    // 3. Throw if validation failed
+    if (isDefined(result)) {
+      throw new WorkspaceMigrationBuilderException(
+        result,
+        'Validation errors occurred while creating entity',
+      );
+    }
+
+    // 4. Return freshly cached flat entity
+    const { flatMyEntityMaps } =
+      await this.workspaceManyOrAllFlatEntityMapsCacheService.getOrRecomputeManyOrAllFlatEntityMaps(
+        {
+          workspaceId,
+          flatMapsKeys: ['flatMyEntityMaps'],
+        },
+      );
+
+    return findFlatEntityByIdInFlatEntityMapsOrThrow({
+      flatEntityId: universalFlatMyEntityToCreate.id,
+      flatEntityMaps: flatMyEntityMaps,
+    });
+  }
+}
+```
+
+**Service pattern**:
+1. Transform input → universal flat entity
+2. Call `validateBuildAndRunWorkspaceMigration`
+3. Throw if validation errors
+4. **Return flat entity** (not DTO)
+
+---
+
+## Step 5: Create Resolver Layer
+
+**File**: `src/engine/metadata-modules/my-entity/my-entity.resolver.ts`
+
+```typescript
+import { UseInterceptors } from '@nestjs/common';
+import { Args, Mutation, Resolver } from '@nestjs/graphql';
+
+import { WorkspaceMigrationGraphqlApiExceptionInterceptor } from 'src/engine/workspace-manager/workspace-migration/interceptors/workspace-migration-graphql-api-exception.interceptor';
+import { MyEntityService } from 'src/engine/metadata-modules/my-entity/my-entity.service';
+import { fromFlatMyEntityToMyEntityDto } from 'src/engine/metadata-modules/my-entity/utils/from-flat-my-entity-to-my-entity-dto.util';
+
+@Resolver(() => MyEntityDto)
+@UseInterceptors(WorkspaceMigrationGraphqlApiExceptionInterceptor)
+export class MyEntityResolver {
+  constructor(private readonly myEntityService: MyEntityService) {}
+
+  @Mutation(() => MyEntityDto)
+  async createMyEntity(
+    @Args('input') input: CreateMyEntityInput,
+    @Workspace() { id: workspaceId }: Workspace,
+  ): Promise<MyEntityDto> {
+    // Service returns flat entity
+    const flatMyEntity = await this.myEntityService.create(input, workspaceId);
+    
+    // Resolver converts flat entity to DTO
+    return fromFlatMyEntityToMyEntityDto(flatMyEntity);
+  }
+
+  @Mutation(() => MyEntityDto)
+  async updateMyEntity(
+    @Args('id') id: string,
+    @Args('input') input: UpdateMyEntityInput,
+    @Workspace() { id: workspaceId }: Workspace,
+  ): Promise<MyEntityDto> {
+    const flatMyEntity = await this.myEntityService.update(id, input, workspaceId);
+    return fromFlatMyEntityToMyEntityDto(flatMyEntity);
+  }
+
+  @Mutation(() => Boolean)
+  async deleteMyEntity(
+    @Args('id') id: string,
+    @Workspace() { id: workspaceId }: Workspace,
+  ) {
+    await this.myEntityService.delete(id, workspaceId);
+    return true;
+  }
+}
+```
+
+**Resolver responsibilities**:
+- Receives flat entities from service
+- **Converts flat → DTO** using conversion utility
+- Returns DTOs to GraphQL API
+- Uses exception interceptor for error formatting
+
+---
+
+## Step 6: Flat-to-DTO Conversion
+
+**File**: `src/engine/metadata-modules/my-entity/utils/from-flat-my-entity-to-my-entity-dto.util.ts`
+
+```typescript
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+import { type MyEntityDto } from 'src/engine/metadata-modules/my-entity/dtos/my-entity.dto';
+
+export const fromFlatMyEntityToMyEntityDto = (
+  flatMyEntity: FlatMyEntity,
+): MyEntityDto => {
+  return {
+    id: flatMyEntity.id,
+    name: flatMyEntity.name,
+    label: flatMyEntity.label,
+    description: flatMyEntity.description,
+    isCustom: flatMyEntity.isCustom,
+    createdAt: flatMyEntity.createdAt,
+    updatedAt: flatMyEntity.updatedAt,
+    // Convert foreign key IDs to relation objects if needed
+    // parentEntity: flatMyEntity.parentEntityId ? { id: flatMyEntity.parentEntityId } : null,
+  };
+};
+```
+
+---
+
+## Layer Responsibilities
+
+| Layer | Input | Output | Responsibility |
+|-------|-------|--------|----------------|
+| **Service** | Input DTO | Flat Entity | Business logic, validation orchestration |
+| **Resolver** | Service result | DTO | Flat → DTO conversion, GraphQL exposure |
+
+**Service Layer**:
+- Works with flat entities internally
+- Returns `FlatMyEntity` type
+- No knowledge of DTOs or GraphQL types
+
+**Resolver Layer**:
+- Receives flat entities from service
+- Converts flat entities to DTOs
+- Returns DTOs to GraphQL API
+
+---
+
+## Exception Interceptor
+
+The `WorkspaceMigrationGraphqlApiExceptionInterceptor` automatically handles:
+
+1. `FlatEntityMapsException` → Converts to GraphQL errors (NotFoundError, etc.)
+2. `WorkspaceMigrationBuilderException` → Formats validation errors with i18n
+3. `WorkspaceMigrationRunnerException` → Formats runner errors
+
+**What it does**:
+- Catches exceptions and formats for API responses
+- Translates error messages based on user locale
+- Ensures consistent error structure for frontend
+
+---
+
+## Checklist
+
+Before moving to Step 6 (Testing):
+
+- [ ] Builder registered in builder module (providers + exports)
+- [ ] Validator registered in validators module (providers + exports)
+- [ ] All 3 action handlers registered in action handlers module (providers)
+- [ ] Service layer created
+- [ ] Service returns flat entities (not DTOs)
+- [ ] Resolver layer created
+- [ ] Resolver uses exception interceptor
+- [ ] Resolver converts flat → DTO
+- [ ] Flat-to-DTO conversion utility created
+
+---
+
+## Next Step
+
+Once integration is complete, proceed to (**MANDATORY**):
+**[Syncable Entity: Integration Testing (Step 6/6)](../syncable-entity-testing/SKILL.md)**
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-runner-and-actions/SKILL.md

@@ -0,0 +1,355 @@
+---
+name: syncable-entity-runner-and-actions
+description: Implement action handlers for executing workspace migrations in Twenty. Use when creating database operations for syncable entities, implementing universal-to-flat entity transpilation, or handling create/update/delete actions in the runner layer.
+---
+
+# Syncable Entity: Runner & Actions (Step 4/6)
+
+**Purpose**: Execute migration actions against the database with proper transpilation from universal to flat entities.
+
+**When to use**: After completing Steps 1-3 (Types, Cache, Builder). Required before integration.
+
+---
+
+## Quick Start
+
+This step creates:
+1. Create action handler
+2. Update action handler
+3. Delete action handler
+4. Universal-to-flat conversion utilities
+
+**Key pattern**: Each handler has two phases:
+1. **Transpilation**: Universal action → Flat action
+2. **Execution**: Flat action → Database operation
+
+---
+
+## Step 1: Create Action Handler
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/create-my-entity-action-handler.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { InjectRepository } from '@nestjs/typeorm';
+import { Repository } from 'typeorm';
+
+import { WorkspaceCreateActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-create-action-handler.service';
+import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
+import {
+  type UniversalCreateMyEntityAction,
+  type FlatCreateMyEntityAction,
+} from 'src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type';
+
+@Injectable()
+export class CreateMyEntityActionHandlerService extends WorkspaceCreateActionHandlerService<
+  'myEntity',
+  UniversalCreateMyEntityAction,
+  FlatCreateMyEntityAction
+> {
+  constructor(
+    @InjectRepository(MyEntityEntity, 'metadata')
+    private readonly myEntityRepository: Repository<MyEntityEntity>,
+  ) {
+    super();
+  }
+
+  // Phase 1: Transpile universal action to flat action
+  protected transpileUniversalActionToFlatAction(
+    universalAction: UniversalCreateMyEntityAction,
+    flatEntityMaps: AllFlatEntityMapsByMetadataName,
+  ): FlatCreateMyEntityAction {
+    return {
+      type: 'create',
+      metadataName: 'myEntity',
+      flatEntity: fromUniversalFlatMyEntityToFlatMyEntity(
+        universalAction.universalFlatEntity,
+        flatEntityMaps,
+      ),
+    };
+  }
+
+  // Phase 2: Execute flat action against database
+  protected async executeForMetadata(
+    flatActions: FlatCreateMyEntityAction[],
+  ): Promise<void> {
+    const flatEntities = flatActions.map((action) => action.flatEntity);
+
+    await this.insertFlatEntitiesInRepository({
+      repository: this.myEntityRepository,
+      flatEntities,
+    });
+  }
+
+  protected async executeForWorkspaceSchema(): Promise<void> {
+    // No workspace schema changes needed for metadata-only entity
+    return;
+  }
+}
+```
+
+**Key helper methods**:
+- `transpileUniversalActionToFlatAction`: Converts universal → flat
+- `insertFlatEntitiesInRepository`: Base class helper for inserts
+- `executeForMetadata`: Metadata database operations
+- `executeForWorkspaceSchema`: Workspace schema changes (if needed)
+
+---
+
+## Step 2: Update Action Handler
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/update-my-entity-action-handler.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { InjectRepository } from '@nestjs/typeorm';
+import { Repository } from 'typeorm';
+
+import { WorkspaceUpdateActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-update-action-handler.service';
+import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
+import { resolveUniversalUpdateRelationIdentifiersToIds } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/utils/resolve-universal-relation-identifiers-to-ids.util';
+
+@Injectable()
+export class UpdateMyEntityActionHandlerService extends WorkspaceUpdateActionHandlerService<
+  'myEntity',
+  UniversalUpdateMyEntityAction,
+  FlatUpdateMyEntityAction
+> {
+  constructor(
+    @InjectRepository(MyEntityEntity, 'metadata')
+    private readonly myEntityRepository: Repository<MyEntityEntity>,
+  ) {
+    super();
+  }
+
+  protected transpileUniversalActionToFlatAction(
+    universalAction: UniversalUpdateMyEntityAction,
+    flatEntityMaps: AllFlatEntityMapsByMetadataName,
+  ): FlatUpdateMyEntityAction {
+    const flatEntity = fromUniversalFlatMyEntityToFlatMyEntity(
+      universalAction.universalFlatEntity,
+      flatEntityMaps,
+    );
+
+    // Resolve universal foreign keys in updates to regular IDs
+    const flatUpdates = resolveUniversalUpdateRelationIdentifiersToIds({
+      metadataName: 'myEntity',
+      universalUpdates: universalAction.universalUpdates,
+      flatEntityMaps,
+    });
+
+    return {
+      type: 'update',
+      metadataName: 'myEntity',
+      flatEntity,
+      updates: flatUpdates,
+    };
+  }
+
+  protected async executeForMetadata(
+    flatActions: FlatUpdateMyEntityAction[],
+  ): Promise<void> {
+    for (const action of flatActions) {
+      await this.myEntityRepository.update(
+        { id: action.flatEntity.id },
+        action.updates,
+      );
+    }
+  }
+
+  protected async executeForWorkspaceSchema(): Promise<void> {
+    return;
+  }
+}
+```
+
+**Update-specific helper**:
+- `resolveUniversalUpdateRelationIdentifiersToIds`: Maps universal identifiers back to regular IDs in the updates object
+
+---
+
+## Step 3: Delete Action Handler
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/services/delete-my-entity-action-handler.service.ts`
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { InjectRepository } from '@nestjs/typeorm';
+import { Repository } from 'typeorm';
+
+import { WorkspaceDeleteActionHandlerService } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/workspace-delete-action-handler.service';
+import { MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+import { fromUniversalFlatMyEntityToFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util';
+
+@Injectable()
+export class DeleteMyEntityActionHandlerService extends WorkspaceDeleteActionHandlerService<
+  'myEntity',
+  UniversalDeleteMyEntityAction,
+  FlatDeleteMyEntityAction
+> {
+  constructor(
+    @InjectRepository(MyEntityEntity, 'metadata')
+    private readonly myEntityRepository: Repository<MyEntityEntity>,
+  ) {
+    super();
+  }
+
+  protected transpileUniversalActionToFlatAction(
+    universalAction: UniversalDeleteMyEntityAction,
+    flatEntityMaps: AllFlatEntityMapsByMetadataName,
+  ): FlatDeleteMyEntityAction {
+    // Use base class helper for delete transpilation
+    return this.transpileUniversalDeleteActionToFlatDeleteAction({
+      universalAction,
+      flatEntityMaps,
+      fromUniversalFlatEntityToFlatEntity: fromUniversalFlatMyEntityToFlatMyEntity,
+    });
+  }
+
+  protected async executeForMetadata(
+    flatActions: FlatDeleteMyEntityAction[],
+  ): Promise<void> {
+    const ids = flatActions.map((action) => action.flatEntity.id);
+
+    await this.myEntityRepository.delete(ids);
+  }
+
+  protected async executeForWorkspaceSchema(): Promise<void> {
+    return;
+  }
+}
+```
+
+**Delete-specific helper**:
+- `transpileUniversalDeleteActionToFlatDeleteAction`: Base class helper that handles standard delete transpilation
+
+---
+
+## Step 4: Universal-to-Flat Conversion
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-runner/action-handlers/my-entity/utils/from-universal-flat-my-entity-to-flat-my-entity.util.ts`
+
+```typescript
+import { resolveUniversalRelationIdentifiersToIds } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/utils/resolve-universal-relation-identifiers-to-ids.util';
+import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+import { type AllFlatEntityMapsByMetadataName } from 'src/engine/metadata-modules/flat-entity/types/all-flat-entity-maps-by-metadata-name.type';
+
+export const fromUniversalFlatMyEntityToFlatMyEntity = (
+  universalFlatMyEntity: UniversalFlatMyEntity,
+  flatEntityMaps: AllFlatEntityMapsByMetadataName,
+): FlatMyEntity => {
+  // Resolve universal foreign keys back to regular IDs
+  return resolveUniversalRelationIdentifiersToIds({
+    metadataName: 'myEntity',
+    universalFlatEntity: universalFlatMyEntity,
+    flatEntityMaps,
+  }) as FlatMyEntity;
+};
+```
+
+**Key utility**:
+- `resolveUniversalRelationIdentifiersToIds`: Maps universal identifiers → regular IDs (reverse of `resolveEntityRelationUniversalIdentifiers`)
+
+---
+
+## Action Handler Patterns
+
+### Pattern: Create Handler
+```typescript
+// 1. Transpile: Universal → Flat
+protected transpileUniversalActionToFlatAction(
+  universalAction,
+  flatEntityMaps,
+) {
+  return {
+    type: 'create',
+    metadataName: 'myEntity',
+    flatEntity: fromUniversalFlatMyEntityToFlatMyEntity(
+      universalAction.universalFlatEntity,
+      flatEntityMaps,
+    ),
+  };
+}
+
+// 2. Execute: Flat → Database
+protected async executeForMetadata(flatActions) {
+  await this.insertFlatEntitiesInRepository({
+    repository: this.myEntityRepository,
+    flatEntities: flatActions.map(a => a.flatEntity),
+  });
+}
+```
+
+### Pattern: Update Handler
+```typescript
+// Transpile with update-specific resolution
+protected transpileUniversalActionToFlatAction(
+  universalAction,
+  flatEntityMaps,
+) {
+  const flatEntity = fromUniversalFlatMyEntityToFlatMyEntity(
+    universalAction.universalFlatEntity,
+    flatEntityMaps,
+  );
+
+  const flatUpdates = resolveUniversalUpdateRelationIdentifiersToIds({
+    metadataName: 'myEntity',
+    universalUpdates: universalAction.universalUpdates,
+    flatEntityMaps,
+  });
+
+  return { type: 'update', metadataName: 'myEntity', flatEntity, updates: flatUpdates };
+}
+```
+
+### Pattern: Delete Handler
+```typescript
+// Use base class helper
+protected transpileUniversalActionToFlatAction(
+  universalAction,
+  flatEntityMaps,
+) {
+  return this.transpileUniversalDeleteActionToFlatDeleteAction({
+    universalAction,
+    flatEntityMaps,
+    fromUniversalFlatEntityToFlatEntity: fromUniversalFlatMyEntityToFlatMyEntity,
+  });
+}
+
+// Delete
+protected async executeForMetadata(flatActions) {
+  const ids = flatActions.map(a => a.flatEntity.id);
+  await this.myEntityRepository.delete(ids);
+}
+```
+
+---
+
+## Checklist
+
+Before moving to Step 5:
+
+- [ ] Create action handler implemented
+- [ ] Update action handler implemented
+- [ ] Delete action handler implemented
+- [ ] All handlers extend appropriate base class
+- [ ] `transpileUniversalActionToFlatAction` implemented in all handlers
+- [ ] `executeForMetadata` implemented in all handlers
+- [ ] `executeForWorkspaceSchema` implemented (or returns empty)
+- [ ] Universal-to-flat conversion utility created
+- [ ] Create handler uses `insertFlatEntitiesInRepository`
+- [ ] Update handler uses `resolveUniversalUpdateRelationIdentifiersToIds`
+- [ ] Delete handler uses `transpileUniversalDeleteActionToFlatDeleteAction`
+- [ ] Delete handler uses hard delete (`delete()`)
+
+---
+
+## Next Step
+
+Once action handlers are complete, proceed to:
+**[Syncable Entity: Integration (Step 5/6)](../syncable-entity-integration/SKILL.md)**
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-testing/SKILL.md

@@ -0,0 +1,494 @@
+---
+name: syncable-entity-testing
+description: Create comprehensive integration tests for syncable entities in Twenty. Use when writing integration tests for metadata entities, covering validator exceptions, input transpilation errors, and CRUD operations. Tests are MANDATORY for all syncable entities.
+---
+
+# Syncable Entity: Integration Testing (Step 6/6 - MANDATORY)
+
+**Purpose**: Create comprehensive test suite covering all validation scenarios, input transpilation exceptions, and successful use cases.
+
+**When to use**: After completing Steps 1-5. Integration tests are **REQUIRED** for all syncable entities.
+
+---
+
+## Quick Start
+
+Tests must cover:
+1. **Failing scenarios** - All validator exceptions and input transpilation errors
+2. **Successful scenarios** - All CRUD operations and edge cases
+3. **Test utilities** - Reusable query factories and helper functions
+
+**Test pattern**: Two-file pattern (query factory + wrapper) for each operation.
+
+---
+
+## Step 1: Create Test Utilities
+
+### Pattern: Query Factory
+
+**File**: `test/integration/metadata/suites/my-entity/utils/create-my-entity-query-factory.util.ts`
+
+```typescript
+import gql from 'graphql-tag';
+import { type PerformMetadataQueryParams } from 'test/integration/metadata/types/perform-metadata-query.type';
+import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
+
+export type CreateMyEntityFactoryInput = CreateMyEntityInput;
+
+const DEFAULT_MY_ENTITY_GQL_FIELDS = `
+  id
+  name
+  label
+  description
+  isCustom
+  createdAt
+  updatedAt
+`;
+
+export const createMyEntityQueryFactory = ({
+  input,
+  gqlFields = DEFAULT_MY_ENTITY_GQL_FIELDS,
+}: PerformMetadataQueryParams<CreateMyEntityFactoryInput>) => ({
+  query: gql`
+    mutation CreateMyEntity($input: CreateMyEntityInput!) {
+      createMyEntity(input: $input) {
+        ${gqlFields}
+      }
+    }
+  `,
+  variables: {
+    input,
+  },
+});
+```
+
+### Pattern: Wrapper Utility
+
+**File**: `test/integration/metadata/suites/my-entity/utils/create-my-entity.util.ts`
+
+```typescript
+import {
+  type CreateMyEntityFactoryInput,
+  createMyEntityQueryFactory,
+} from 'test/integration/metadata/suites/my-entity/utils/create-my-entity-query-factory.util';
+import { makeMetadataAPIRequest } from 'test/integration/metadata/suites/utils/make-metadata-api-request.util';
+import { type CommonResponseBody } from 'test/integration/metadata/types/common-response-body.type';
+import { type PerformMetadataQueryParams } from 'test/integration/metadata/types/perform-metadata-query.type';
+import { warnIfErrorButNotExpectedToFail } from 'test/integration/metadata/utils/warn-if-error-but-not-expected-to-fail.util';
+import { warnIfNoErrorButExpectedToFail } from 'test/integration/metadata/utils/warn-if-no-error-but-expected-to-fail.util';
+import { type MyEntityDto } from 'src/engine/metadata-modules/my-entity/dtos/my-entity.dto';
+
+export const createMyEntity = async ({
+  input,
+  gqlFields,
+  expectToFail = false,
+  token,
+}: PerformMetadataQueryParams<CreateMyEntityFactoryInput>): CommonResponseBody<{
+  createMyEntity: MyEntityDto;
+}> => {
+  const graphqlOperation = createMyEntityQueryFactory({
+    input,
+    gqlFields,
+  });
+
+  const response = await makeMetadataAPIRequest(graphqlOperation, token);
+
+  if (expectToFail === true) {
+    warnIfNoErrorButExpectedToFail({
+      response,
+      errorMessage: 'My entity creation should have failed but did not',
+    });
+  }
+
+  if (expectToFail === false) {
+    warnIfErrorButNotExpectedToFail({
+      response,
+      errorMessage: 'My entity creation has failed but should not',
+    });
+  }
+
+  return { data: response.body.data, errors: response.body.errors };
+};
+```
+
+**Required utilities** (follow same pattern):
+- `update-my-entity-query-factory.util.ts` + `update-my-entity.util.ts`
+- `delete-my-entity-query-factory.util.ts` + `delete-my-entity.util.ts`
+
+---
+
+## Step 2: Failing Creation Tests
+
+**File**: `test/integration/metadata/suites/my-entity/failing-my-entity-creation.integration-spec.ts`
+
+```typescript
+import { expectOneNotInternalServerErrorSnapshot } from 'test/integration/graphql/utils/expect-one-not-internal-server-error-snapshot.util';
+import { createMyEntity } from 'test/integration/metadata/suites/my-entity/utils/create-my-entity.util';
+import { deleteMyEntity } from 'test/integration/metadata/suites/my-entity/utils/delete-my-entity.util';
+import {
+  eachTestingContextFilter,
+  type EachTestingContext,
+} from 'twenty-shared/testing';
+import { isDefined } from 'twenty-shared/utils';
+import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
+
+type TestContext = {
+  input: CreateMyEntityInput;
+};
+
+type GlobalTestContext = {
+  existingEntityLabel: string;
+  existingEntityName: string;
+};
+
+const globalTestContext: GlobalTestContext = {
+  existingEntityLabel: 'Existing Test Entity',
+  existingEntityName: 'existingTestEntity',
+};
+
+type CreateMyEntityTestingContext = EachTestingContext<TestContext>[];
+
+describe('My entity creation should fail', () => {
+  let existingEntityId: string | undefined;
+
+  beforeAll(async () => {
+    // Setup: Create entity for uniqueness tests
+    const { data } = await createMyEntity({
+      expectToFail: false,
+      input: {
+        name: globalTestContext.existingEntityName,
+        label: globalTestContext.existingEntityLabel,
+      },
+    });
+
+    existingEntityId = data.createMyEntity.id;
+  });
+
+  afterAll(async () => {
+    // Cleanup
+    if (isDefined(existingEntityId)) {
+      await deleteMyEntity({
+        expectToFail: false,
+        input: { id: existingEntityId },
+      });
+    }
+  });
+
+  const failingMyEntityCreationTestCases: CreateMyEntityTestingContext = [
+    // Input transpilation validation
+    {
+      title: 'when name is missing',
+      context: {
+        input: {
+          label: 'Entity Missing Name',
+        } as CreateMyEntityInput,
+      },
+    },
+    {
+      title: 'when label is missing',
+      context: {
+        input: {
+          name: 'entityMissingLabel',
+        } as CreateMyEntityInput,
+      },
+    },
+    {
+      title: 'when name is empty string',
+      context: {
+        input: {
+          name: '',
+          label: 'Empty Name Entity',
+        },
+      },
+    },
+
+    // Validator business logic
+    {
+      title: 'when name already exists (uniqueness)',
+      context: {
+        input: {
+          name: globalTestContext.existingEntityName,
+          label: 'Duplicate Name Entity',
+        },
+      },
+    },
+    {
+      title: 'when trying to create standard entity',
+      context: {
+        input: {
+          name: 'myEntity',
+          label: 'Standard Entity',
+          isCustom: false,
+        } as CreateMyEntityInput,
+      },
+    },
+
+    // Foreign key validation
+    {
+      title: 'when parentEntityId does not exist',
+      context: {
+        input: {
+          name: 'invalidParentEntity',
+          label: 'Invalid Parent Entity',
+          parentEntityId: '00000000-0000-0000-0000-000000000000',
+        },
+      },
+    },
+  ];
+
+  it.each(eachTestingContextFilter(failingMyEntityCreationTestCases))(
+    '$title',
+    async ({ context }) => {
+      const { errors } = await createMyEntity({
+        expectToFail: true,
+        input: context.input,
+      });
+
+      expectOneNotInternalServerErrorSnapshot({
+        errors,
+      });
+    },
+  );
+});
+```
+
+**Test coverage requirements**:
+- ✅ Missing required fields
+- ✅ Empty strings
+- ✅ Invalid format
+- ✅ Uniqueness violations
+- ✅ Standard entity protection
+- ✅ Foreign key validation
+
+---
+
+## Step 3: Successful Creation Tests
+
+**File**: `test/integration/metadata/suites/my-entity/successful-my-entity-creation.integration-spec.ts`
+
+```typescript
+import { createMyEntity } from 'test/integration/metadata/suites/my-entity/utils/create-my-entity.util';
+import { deleteMyEntity } from 'test/integration/metadata/suites/my-entity/utils/delete-my-entity.util';
+import { type CreateMyEntityInput } from 'src/engine/metadata-modules/my-entity/dtos/create-my-entity.input';
+
+describe('My entity creation should succeed', () => {
+  let createdEntityId: string;
+
+  afterEach(async () => {
+    if (createdEntityId) {
+      await deleteMyEntity({
+        expectToFail: false,
+        input: { id: createdEntityId },
+      });
+    }
+  });
+
+  it('should create entity with minimal required input', async () => {
+    const { data } = await createMyEntity({
+      expectToFail: false,
+      input: {
+        name: 'minimalEntity',
+        label: 'Minimal Entity',
+      },
+    });
+
+    createdEntityId = data?.createMyEntity?.id;
+
+    expect(data.createMyEntity).toMatchObject({
+      id: expect.any(String),
+      name: 'minimalEntity',
+      label: 'Minimal Entity',
+      description: null,
+      isCustom: true,
+      createdAt: expect.any(String),
+      updatedAt: expect.any(String),
+    });
+  });
+
+  it('should create entity with all optional fields', async () => {
+    const input = {
+      name: 'fullEntity',
+      label: 'Full Entity',
+      description: 'Entity with all fields specified',
+    } as const satisfies CreateMyEntityInput;
+
+    const { data } = await createMyEntity({
+      expectToFail: false,
+      input,
+    });
+
+    createdEntityId = data?.createMyEntity?.id;
+
+    expect(data.createMyEntity).toMatchObject({
+      id: expect.any(String),
+      name: 'fullEntity',
+      label: 'Full Entity',
+      description: 'Entity with all fields specified',
+      isCustom: true,
+    });
+  });
+
+  it('should sanitize input by trimming whitespace', async () => {
+    const { data } = await createMyEntity({
+      expectToFail: false,
+      input: {
+        name: '  entityWithSpaces  ',
+        label: '  Entity With Spaces  ',
+        description: '  Description with spaces  ',
+      },
+    });
+
+    createdEntityId = data?.createMyEntity?.id;
+
+    expect(data.createMyEntity).toMatchObject({
+      id: expect.any(String),
+      name: 'entityWithSpaces',
+      label: 'Entity With Spaces',
+      description: 'Description with spaces',
+    });
+  });
+
+  it('should handle long text content', async () => {
+    const longDescription = 'A'.repeat(1000);
+
+    const { data } = await createMyEntity({
+      expectToFail: false,
+      input: {
+        name: 'longDescEntity',
+        label: 'Long Description Entity',
+        description: longDescription,
+      },
+    });
+
+    createdEntityId = data?.createMyEntity?.id;
+
+    expect(data.createMyEntity).toMatchObject({
+      id: expect.any(String),
+      description: longDescription,
+    });
+  });
+});
+```
+
+**Test coverage requirements**:
+- ✅ Minimal required input
+- ✅ All optional fields
+- ✅ Input sanitization
+- ✅ Long text content
+- ✅ Special characters
+
+---
+
+## Step 4: Update and Delete Tests
+
+Create similar test files for update and delete operations:
+
+**Required files**:
+- `failing-my-entity-update.integration-spec.ts`
+- `successful-my-entity-update.integration-spec.ts`
+- `failing-my-entity-deletion.integration-spec.ts`
+- `successful-my-entity-deletion.integration-spec.ts`
+
+---
+
+## Testing Best Practices
+
+### Pattern: Cleanup
+```typescript
+afterEach(async () => {
+  if (createdEntityId) {
+    await deleteMyEntity({
+      expectToFail: false,
+      input: { id: createdEntityId },
+    });
+  }
+});
+```
+
+### Pattern: Type-Safe Inputs
+```typescript
+const input = {
+  name: 'myEntity',
+  label: 'My Entity',
+} as const satisfies CreateMyEntityInput;
+```
+
+### Pattern: Snapshot Testing
+```typescript
+expectOneNotInternalServerErrorSnapshot({
+  errors,
+});
+```
+
+---
+
+## Running Tests
+
+```bash
+# Run all entity tests
+npx jest test/integration/metadata/suites/my-entity --config=packages/twenty-server/jest.config.mjs
+
+# Run specific test file
+npx jest test/integration/metadata/suites/my-entity/failing-my-entity-creation.integration-spec.ts --config=packages/twenty-server/jest.config.mjs
+
+# Update snapshots
+npx jest test/integration/metadata/suites/my-entity --updateSnapshot --config=packages/twenty-server/jest.config.mjs
+```
+
+---
+
+## Complete Test Checklist
+
+### Test Utilities
+- [ ] `create-my-entity-query-factory.util.ts` created
+- [ ] `create-my-entity.util.ts` created
+- [ ] `update-my-entity-query-factory.util.ts` created
+- [ ] `update-my-entity.util.ts` created
+- [ ] `delete-my-entity-query-factory.util.ts` created
+- [ ] `delete-my-entity.util.ts` created
+
+### Failing Tests Coverage
+- [ ] Missing required fields
+- [ ] Empty string validation
+- [ ] Uniqueness violations
+- [ ] Standard entity protection
+- [ ] Foreign key validation
+- [ ] JSONB property validation (if applicable)
+
+### Successful Tests Coverage
+- [ ] Create with minimal input
+- [ ] Create with all optional fields
+- [ ] Input sanitization (whitespace)
+- [ ] Long text content
+- [ ] Update single field
+- [ ] Update multiple fields
+- [ ] Successful deletion
+
+### Snapshot Tests
+- [ ] All failing tests use `expectOneNotInternalServerErrorSnapshot`
+- [ ] Snapshots committed to `__snapshots__/` directory
+
+---
+
+## Success Criteria
+
+Your integration tests are complete when:
+
+✅ All test utilities created (minimum 6 files)
+✅ Failing creation tests cover all validators
+✅ Failing update tests cover business rules
+✅ Failing deletion tests cover protection rules
+✅ Successful tests cover all use cases
+✅ All snapshots generated and committed
+✅ All tests pass consistently
+✅ Test coverage meets requirements (>80%)
+
+---
+
+## Final Step
+
+✅ **Step 6 Complete!** → Your syncable entity is fully tested and production-ready!
+
+**Congratulations!** You've successfully created a new syncable entity in Twenty's workspace migration system.
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/skills/syncable-entity-types-and-constants/SKILL.md

@@ -0,0 +1,340 @@
+---
+name: syncable-entity-types-and-constants
+description: Define types, entities, and central constant registrations for syncable entities in Twenty's workspace migration system. Use when creating new syncable entities, defining TypeORM entities, flat entity types, or registering in central constants (ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME, ALL_ONE_TO_MANY_METADATA_RELATIONS, ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY, ALL_MANY_TO_ONE_METADATA_RELATIONS).
+---
+
+# Syncable Entity: Types & Constants (Step 1/6)
+
+**Purpose**: Define all types, entities, and register in central constants. This is the foundation - everything else depends on these types being correct.
+
+**When to use**: First step when creating any new syncable entity. Must be completed before other steps.
+
+---
+
+## Quick Start
+
+This step creates:
+1. Metadata name constant (twenty-shared)
+2. TypeORM entity (extends `SyncableEntity`)
+3. Flat entity types
+4. Action types (universal + flat)
+5. Central constant registrations (5 constants)
+
+---
+
+## Step 1: Add Metadata Name
+
+**File**: `packages/twenty-shared/src/metadata/all-metadata-name.constant.ts`
+
+```typescript
+export const ALL_METADATA_NAME = {
+  // ... existing entries
+  myEntity: 'myEntity',
+} as const;
+```
+
+---
+
+## Step 2: Create TypeORM Entity
+
+**File**: `src/engine/metadata-modules/my-entity/entities/my-entity.entity.ts`
+
+```typescript
+import { Entity, Column, ManyToOne, JoinColumn } from 'typeorm';
+import { SyncableEntity } from 'src/engine/workspace-manager/types/syncable-entity.interface';
+
+@Entity({ name: 'myEntity' })
+export class MyEntityEntity extends SyncableEntity {
+  @Column({ type: 'varchar' })
+  name: string;
+
+  @Column({ type: 'varchar' })
+  label: string;
+
+  @Column({ type: 'boolean', default: true })
+  isCustom: boolean;
+
+  // Foreign key example (optional)
+  @Column({ type: 'uuid', nullable: true })
+  parentEntityId: string | null;
+
+  @ManyToOne(() => ParentEntityEntity, { nullable: true })
+  @JoinColumn({ name: 'parentEntityId' })
+  parentEntity: ParentEntityEntity | null;
+
+  // JSONB column example (optional)
+  @Column({ type: 'jsonb', nullable: true })
+  settings: Record<string, any> | null;
+}
+```
+
+**Key rules**:
+- Must extend `SyncableEntity` (provides `id`, `universalIdentifier`, `applicationId`, etc.)
+- Must have `isCustom` boolean column
+- Use `@Column({ type: 'jsonb' })` for JSON data
+
+---
+
+## Step 3: Define Flat Entity Types
+
+**File**: `src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type.ts`
+
+```typescript
+import { type FlatEntityFrom } from 'src/engine/metadata-modules/flat-entity/types/flat-entity-from.type';
+import { type MyEntityEntity } from 'src/engine/metadata-modules/my-entity/entities/my-entity.entity';
+
+export type FlatMyEntity = FlatEntityFrom<MyEntityEntity>;
+```
+
+**Maps file** (if entity has indexed lookups):
+
+```typescript
+// flat-my-entity-maps.type.ts
+export type FlatMyEntityMaps = {
+  byId: Record<string, FlatMyEntity>;
+  byName: Record<string, FlatMyEntity>;
+  // Add other indexes as needed
+};
+```
+
+---
+
+## Step 4: Define Editable Properties
+
+**File**: `src/engine/metadata-modules/flat-my-entity/constants/editable-flat-my-entity-properties.constant.ts`
+
+```typescript
+export const EDITABLE_FLAT_MY_ENTITY_PROPERTIES = [
+  'name',
+  'label',
+  'description',
+  'parentEntityId',
+  'settings',
+] as const satisfies ReadonlyArray<keyof FlatMyEntity>;
+```
+
+**Rule**: Only include properties that can be updated (exclude `id`, `createdAt`, `universalIdentifier`, etc.)
+
+---
+
+## Step 5: Define Action Types
+
+**File**: `src/engine/workspace-manager/workspace-migration/workspace-migration-builder/builders/my-entity/types/workspace-migration-my-entity-action.type.ts`
+
+```typescript
+import { type FlatMyEntity } from 'src/engine/metadata-modules/flat-my-entity/types/flat-my-entity.type';
+import { type UniversalFlatMyEntity } from 'src/engine/workspace-manager/workspace-migration/universal-flat-entity/types/universal-flat-my-entity.type';
+
+// Universal actions (used by builder/runner)
+export type UniversalCreateMyEntityAction = {
+  type: 'create';
+  metadataName: 'myEntity';
+  universalFlatEntity: UniversalFlatMyEntity;
+};
+
+export type UniversalUpdateMyEntityAction = {
+  type: 'update';
+  metadataName: 'myEntity';
+  universalFlatEntity: UniversalFlatMyEntity;
+  universalUpdates: Partial<UniversalFlatMyEntity>;
+};
+
+export type UniversalDeleteMyEntityAction = {
+  type: 'delete';
+  metadataName: 'myEntity';
+  universalFlatEntity: UniversalFlatMyEntity;
+};
+
+// Flat actions (internal to runner)
+export type FlatCreateMyEntityAction = {
+  type: 'create';
+  metadataName: 'myEntity';
+  flatEntity: FlatMyEntity;
+};
+
+export type FlatUpdateMyEntityAction = {
+  type: 'update';
+  metadataName: 'myEntity';
+  flatEntity: FlatMyEntity;
+  updates: Partial<FlatMyEntity>;
+};
+
+export type FlatDeleteMyEntityAction = {
+  type: 'delete';
+  metadataName: 'myEntity';
+  flatEntity: FlatMyEntity;
+};
+```
+
+---
+
+## Step 6: Register in Central Constants
+
+### 6a. AllFlatEntityTypesByMetadataName
+
+**File**: `src/engine/metadata-modules/flat-entity/types/all-flat-entity-types-by-metadata-name.ts`
+
+```typescript
+export type AllFlatEntityTypesByMetadataName = {
+  // ... existing entries
+  myEntity: {
+    flatEntityMaps: FlatMyEntityMaps;
+    universalActions: {
+      create: UniversalCreateMyEntityAction;
+      update: UniversalUpdateMyEntityAction;
+      delete: UniversalDeleteMyEntityAction;
+    };
+    flatActions: {
+      create: FlatCreateMyEntityAction;
+      update: FlatUpdateMyEntityAction;
+      delete: FlatDeleteMyEntityAction;
+    };
+    flatEntity: FlatMyEntity;
+    universalFlatEntity: UniversalFlatMyEntity;
+    entity: MyEntityEntity;
+  };
+};
+```
+
+### 6b. ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME
+
+**File**: `src/engine/metadata-modules/flat-entity/constant/all-entity-properties-configuration-by-metadata-name.constant.ts`
+
+```typescript
+export const ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME = {
+  // ... existing entries
+  myEntity: {
+    name: { toCompare: true },
+    label: { toCompare: true },
+    description: { toCompare: true },
+    parentEntityId: {
+      toCompare: true,
+      universalProperty: 'parentEntityUniversalIdentifier',
+    },
+    settings: {
+      toCompare: true,
+      toStringify: true,
+      universalProperty: 'universalSettings',
+    },
+  },
+} as const;
+```
+
+**Rules**:
+- `toCompare: true` → Editable property (checked for changes)
+- `toStringify: true` → JSONB/object property (needs JSON serialization)
+- `universalProperty` → Maps to universal version (for foreign keys & JSONB with `SerializedRelation`)
+
+### 6c. ALL_ONE_TO_MANY_METADATA_RELATIONS
+
+**File**: `src/engine/metadata-modules/flat-entity/constant/all-one-to-many-metadata-relations.constant.ts`
+
+This constant is **type-checked** — values for `metadataName`, `flatEntityForeignKeyAggregator`, and `universalFlatEntityForeignKeyAggregator` are derived from entity type definitions. The aggregator names follow the pattern: remove trailing `'s'` from the relation property name, then append `Ids` or `UniversalIdentifiers`.
+
+```typescript
+export const ALL_ONE_TO_MANY_METADATA_RELATIONS = {
+  // ... existing entries
+  myEntity: {
+    // If myEntity has a `childEntities: ChildEntityEntity[]` property:
+    childEntities: {
+      metadataName: 'childEntity',
+      flatEntityForeignKeyAggregator: 'childEntityIds',
+      universalFlatEntityForeignKeyAggregator: 'childEntityUniversalIdentifiers',
+    },
+    // null for relations to non-syncable entities
+    someNonSyncableRelation: null,
+  },
+} as const;
+```
+
+### 6d. ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY
+
+**File**: `src/engine/metadata-modules/flat-entity/constant/all-many-to-one-metadata-foreign-key.constant.ts`
+
+Low-level primitive constant. Only contains `foreignKey` — the column name ending in `Id` that stores the foreign key. Type-checked against entity properties.
+
+```typescript
+export const ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY = {
+  // ... existing entries
+  myEntity: {
+    workspace: null,
+    application: null,
+    parentEntity: {
+      foreignKey: 'parentEntityId',
+    },
+  },
+} as const;
+```
+
+### 6e. ALL_MANY_TO_ONE_METADATA_RELATIONS
+
+**File**: `src/engine/metadata-modules/flat-entity/constant/all-many-to-one-metadata-relations.constant.ts`
+
+Derived from both `ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY` (for `foreignKey` type and `universalForeignKey` derivation) and `ALL_ONE_TO_MANY_METADATA_RELATIONS` (for `inverseOneToManyProperty` key constraint). This is the main constant consumed by utils and optimistic tooling.
+
+```typescript
+export const ALL_MANY_TO_ONE_METADATA_RELATIONS = {
+  // ... existing entries
+  myEntity: {
+    workspace: null,
+    application: null,
+    parentEntity: {
+      metadataName: 'parentEntity',
+      foreignKey: 'parentEntityId',
+      inverseOneToManyProperty: 'myEntities',  // key in ALL_ONE_TO_MANY_METADATA_RELATIONS['parentEntity'], or null if no inverse
+      isNullable: false,
+      universalForeignKey: 'parentEntityUniversalIdentifier',
+    },
+  },
+} as const;
+```
+
+**Derivation dependency graph**:
+
+```
+ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY     ALL_ONE_TO_MANY_METADATA_RELATIONS
+(foreignKey only)                        (metadataName, aggregators)
+  │                                        │
+  │ FK type + universalFK derivation       │ inverseOneToManyProperty keys
+  │                                        │
+  └────────────────┬───────────────────────┘
+                   ▼
+    ALL_MANY_TO_ONE_METADATA_RELATIONS
+    (metadataName, foreignKey, inverseOneToManyProperty,
+     isNullable, universalForeignKey)
+```
+
+**Rules**:
+- `workspace: null`, `application: null` — always present, always null (non-syncable relations)
+- `inverseOneToManyProperty` — must be a key in `ALL_ONE_TO_MANY_METADATA_RELATIONS[targetMetadataName]`, or `null` if the target entity doesn't expose an inverse one-to-many relation
+- `universalForeignKey` — derived from `foreignKey` by replacing the `Id` suffix with `UniversalIdentifier`
+- Optimistic utils resolve `flatEntityForeignKeyAggregator` / `universalFlatEntityForeignKeyAggregator` at runtime by looking up `inverseOneToManyProperty` in `ALL_ONE_TO_MANY_METADATA_RELATIONS`
+
+---
+
+## Checklist
+
+Before moving to Step 2:
+
+- [ ] Metadata name added to `ALL_METADATA_NAME`
+- [ ] TypeORM entity created (extends `SyncableEntity`)
+- [ ] `isCustom` column added
+- [ ] Flat entity type defined
+- [ ] Flat entity maps type defined (if needed)
+- [ ] Editable properties constant defined
+- [ ] Universal and flat action types defined
+- [ ] Registered in `AllFlatEntityTypesByMetadataName`
+- [ ] Registered in `ALL_ENTITY_PROPERTIES_CONFIGURATION_BY_METADATA_NAME`
+- [ ] Registered in `ALL_ONE_TO_MANY_METADATA_RELATIONS` (if entity has one-to-many relations)
+- [ ] Registered in `ALL_MANY_TO_ONE_METADATA_FOREIGN_KEY`
+- [ ] Registered in `ALL_MANY_TO_ONE_METADATA_RELATIONS`
+- [ ] TypeScript compiles without errors
+
+---
+
+## Next Step
+
+Once all types and constants are defined, proceed to:
+**[Syncable Entity: Cache & Transform (Step 2/6)](../syncable-entity-cache-and-transform/SKILL.md)**
+
+For complete workflow, see `@creating-syncable-entity` rule.

.cursor/worktrees.json

@@ -0,0 +1,8 @@
+{
+  "setup-worktree": [
+    "nvm use",
+    "yarn",
+    "cp $ROOT_WORKTREE_PATH/packages/twenty-server/.env packages/twenty-server/.env || true",
+    "cp $ROOT_WORKTREE_PATH/packages/twenty-front/.env packages/twenty-front/.env || true"
+  ]
+}

.dockerignore

@@ -1,4 +1,5 @@
 .git
 .env
-node_modules
+**/node_modules
 .nx/cache
+packages/twenty-server/.env

.eslintrc.global.cjs

@@ -1,149 +0,0 @@
-module.exports = {
-  root: true,
-  extends: ['plugin:prettier/recommended', 'plugin:lingui/recommended'],
-  ignorePatterns: ['node_modules'],
-  plugins: [
-    '@nx',
-    'prefer-arrow',
-    'import',
-    'unused-imports',
-    'unicorn',
-    'lingui',
-  ],
-  rules: {
-    'lingui/no-single-variables-to-translate': 'off',
-    'func-style': ['error', 'declaration', { allowArrowFunctions: true }],
-    'no-console': ['warn', { allow: ['group', 'groupCollapsed', 'groupEnd'] }],
-    'no-control-regex': 0,
-    'no-debugger': 'error',
-    'no-duplicate-imports': 'error',
-    'no-undef': 'off',
-    'no-unused-vars': 'off',
-
-    '@nx/enforce-module-boundaries': [
-      'error',
-      {
-        enforceBuildableLibDependency: true,
-        allow: [],
-        depConstraints: [
-          {
-            sourceTag: 'scope:shared',
-            onlyDependOnLibsWithTags: ['scope:shared'],
-          },
-          {
-            sourceTag: 'scope:backend',
-            onlyDependOnLibsWithTags: ['scope:shared', 'scope:backend'],
-          },
-          {
-            sourceTag: 'scope:frontend',
-            onlyDependOnLibsWithTags: ['scope:shared', 'scope:frontend'],
-          },
-          {
-            sourceTag: 'scope:zapier',
-            onlyDependOnLibsWithTags: ['scope:shared'],
-          },
-        ],
-      },
-    ],
-
-    'import/no-relative-packages': 'error',
-    'import/no-useless-path-segments': 'error',
-    'import/no-duplicates': ['error', { considerQueryString: true }],
-
-    'prefer-arrow/prefer-arrow-functions': [
-      'error',
-      {
-        disallowPrototype: true,
-        singleReturnOnly: false,
-        classPropertiesAllowed: false,
-      },
-    ],
-
-    'unused-imports/no-unused-imports': 'warn',
-    'unused-imports/no-unused-vars': [
-      'warn',
-      {
-        vars: 'all',
-        varsIgnorePattern: '^_',
-        args: 'after-used',
-        argsIgnorePattern: '^_',
-      },
-    ],
-  },
-  overrides: [
-    {
-      files: ['**/*.ts', '**/*.tsx'],
-      extends: ['plugin:@nx/typescript'],
-      rules: {
-        '@typescript-eslint/ban-ts-comment': 'error',
-        '@typescript-eslint/consistent-type-imports': [
-          'error',
-          { prefer: 'no-type-imports' },
-        ],
-        '@typescript-eslint/explicit-function-return-type': 'off',
-        '@typescript-eslint/explicit-module-boundary-types': 'off',
-        '@typescript-eslint/interface-name-prefix': 'off',
-        '@typescript-eslint/no-empty-interface': [
-          'error',
-          {
-            allowSingleExtends: true,
-          },
-        ],
-        '@typescript-eslint/no-explicit-any': 'off',
-        '@typescript-eslint/no-empty-function': 'off',
-        '@typescript-eslint/no-unused-vars': [
-          'warn',
-          {
-            vars: 'all',
-            varsIgnorePattern: '^_',
-            args: 'after-used',
-            argsIgnorePattern: '^_',
-          },
-        ],
-      },
-    },
-    {
-      files: ['*.js', '*.jsx'],
-      extends: ['plugin:@nx/javascript'],
-      rules: {},
-    },
-    {
-      files: [
-        '*.spec.@(ts|tsx|js|jsx)',
-        '*.integration-spec.@(ts|tsx|js|jsx)',
-        '*.test.@(ts|tsx|js|jsx)',
-      ],
-      env: {
-        jest: true,
-      },
-      rules: {
-        '@typescript-eslint/no-non-null-assertion': 'off',
-      },
-    },
-    {
-      files: ['**/constants/*.ts', '**/*.constants.ts'],
-      rules: {
-        '@typescript-eslint/naming-convention': [
-          'error',
-          {
-            selector: 'variable',
-            format: ['UPPER_CASE'],
-          },
-        ],
-        'unicorn/filename-case': [
-          'warn',
-          {
-            cases: {
-              pascalCase: true,
-            },
-          },
-        ],
-        '@nx/workspace-max-consts-per-file': ['error', { max: 1 }],
-      },
-    },
-    {
-      files: ['*.json'],
-      parser: 'jsonc-eslint-parser',
-    },
-  ],
-};

.eslintrc.react.cjs

@@ -1,199 +0,0 @@
-var path = require('path');
-
-module.exports = {
-  extends: [
-    'plugin:@nx/react',
-    'plugin:react/recommended',
-    'plugin:react-hooks/recommended',
-    'plugin:storybook/recommended',
-    'plugin:prettier/recommended',
-    'plugin:lingui/recommended',
-    'plugin:@nx/typescript'
-  ],
-  plugins: ['react-hooks', 'react-refresh', '@nx', 'prefer-arrow', 'import', 'unused-imports', 'unicorn', 'lingui'],
-  rules: {
-    'lingui/no-single-variables-to-translate': 'off',
-    'func-style': ['error', 'declaration', { allowArrowFunctions: true }],
-    'no-console': ['warn', { allow: ['group', 'groupCollapsed', 'groupEnd'] }],
-    'no-control-regex': 0,
-    'no-debugger': 'error',
-    'no-duplicate-imports': 'error',
-    'no-undef': 'off',
-    'no-unused-vars': 'off',
-
-    '@nx/enforce-module-boundaries': [
-      'error',
-      {
-        enforceBuildableLibDependency: true,
-        allow: [],
-        depConstraints: [
-          {
-            sourceTag: 'scope:shared',
-            onlyDependOnLibsWithTags: ['scope:shared'],
-          },
-          {
-            sourceTag: 'scope:backend',
-            onlyDependOnLibsWithTags: ['scope:shared', 'scope:backend'],
-          },
-          {
-            sourceTag: 'scope:frontend',
-            onlyDependOnLibsWithTags: ['scope:shared', 'scope:frontend'],
-          },
-          {
-            sourceTag: 'scope:zapier',
-            onlyDependOnLibsWithTags: ['scope:shared'],
-          },
-        ],
-      },
-    ],
-
-    'import/no-relative-packages': 'error',
-    'import/no-useless-path-segments': 'error',
-    'import/no-duplicates': ['error', { considerQueryString: true }],
-
-    'prefer-arrow/prefer-arrow-functions': [
-      'error',
-      {
-        disallowPrototype: true,
-        singleReturnOnly: false,
-        classPropertiesAllowed: false,
-      },
-    ],
-
-    'unused-imports/no-unused-imports': 'warn',
-    'unused-imports/no-unused-vars': [
-      'warn',
-      {
-        vars: 'all',
-        varsIgnorePattern: '^_',
-        args: 'after-used',
-        argsIgnorePattern: '^_',
-      },
-    ],
-  },
-  overrides: [
-    {
-      files: ['**/*.ts', '**/*.tsx'],
-      rules: {
-        'no-restricted-imports': [
-          'error',
-          {
-            patterns: [
-              {
-                group: ['@tabler/icons-react'],
-                message: 'Please import icons from `twenty-ui`',
-              },
-              {
-                group: ['react-hotkeys-web-hook'],
-                importNames: ['useHotkeys'],
-                message:
-                  'Please use the custom wrapper: `useScopedHotkeys` from `twenty-ui`',
-              },
-              {
-                group: ['lodash'],
-                message:
-                  "Please use the standalone lodash package (for instance: `import groupBy from 'lodash.groupby'` instead of `import { groupBy } from 'lodash'`)",
-              },
-            ],
-          },
-        ],
-        '@typescript-eslint/no-empty-interface': [
-          'error',
-          {
-            allowSingleExtends: true,
-          },
-        ],
-        '@typescript-eslint/no-empty-function': 'off',
-        '@typescript-eslint/no-explicit-any': 'off',
-        '@nx/workspace-effect-components': 'error',
-        '@nx/workspace-no-hardcoded-colors': 'error',
-        '@nx/workspace-matching-state-variable': 'error',
-        '@nx/workspace-sort-css-properties-alphabetically': 'error',
-        '@nx/workspace-styled-components-prefixed-with-styled': 'error',
-        '@nx/workspace-no-state-useref': 'error',
-        '@nx/workspace-component-props-naming': 'error',
-        '@nx/workspace-explicit-boolean-predicates-in-if': 'error',
-        '@nx/workspace-use-getLoadable-and-getValue-to-get-atoms': 'error',
-        '@nx/workspace-useRecoilCallback-has-dependency-array': 'error',
-        '@nx/workspace-no-navigate-prefer-link': 'error',
-        'react/no-unescaped-entities': 'off',
-        'react/prop-types': 'off',
-        'react/jsx-key': 'off',
-        'react/display-name': 'off',
-        'react/jsx-uses-react': 'off',
-        'react/react-in-jsx-scope': 'off',
-        'react/jsx-no-useless-fragment': 'off',
-        'react/jsx-props-no-spreading': [
-          'error',
-          {
-            explicitSpread: 'ignore',
-          },
-        ],
-        'react-hooks/exhaustive-deps': [
-          'warn',
-          {
-            additionalHooks: 'useRecoilCallback',
-          },
-        ],
-      },
-    },
-    {
-      files: ['*.stories.@(ts|tsx|js|jsx)'],
-      rules: {
-        '@typescript-eslint/no-non-null-assertion': 'off',
-      },
-    },
-    {
-      files: ['.storybook/main.@(js|cjs|mjs|ts)'],
-      rules: {
-        'storybook/no-uninstalled-addons': [
-          'error',
-          {
-            packageJsonLocation: path.resolve(__dirname, './package.json'),
-          },
-        ],
-      },
-    },
-    {
-      files: ['*.js', '*.jsx'],
-      extends: ['plugin:@nx/javascript'],
-      rules: {},
-    },
-    {
-      files: [
-        '*.test.@(ts|tsx|js|jsx)',
-      ],
-      env: {
-        jest: true,
-      },
-      rules: {
-        '@typescript-eslint/no-non-null-assertion': 'off',
-      },
-    },
-    {
-      files: ['**/*.constants.ts'],
-      rules: {
-        '@typescript-eslint/naming-convention': [
-          'error',
-          {
-            selector: 'variable',
-            format: ['UPPER_CASE'],
-          },
-        ],
-        'unicorn/filename-case': [
-          'warn',
-          {
-            cases: {
-              pascalCase: true,
-            },
-          },
-        ],
-        '@nx/workspace-max-consts-per-file': ['error', { max: 1 }],
-      },
-    },
-    {
-      files: ['*.json'],
-      parser: 'jsonc-eslint-parser',
-    },
-  ],
-};

.gitattributes

@@ -0,0 +1,28 @@
+* text=auto eol=lf
+
+*.ts text eol=lf
+*.tsx text eol=lf
+*.js text eol=lf
+*.jsx text eol=lf
+*.json text eol=lf
+*.md text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.sh text eol=lf
+*.mjs text eol=lf
+*.cjs text eol=lf
+
+# Patch files may have mixed line endings by design
+*.patch -text
+
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.svg binary
+*.woff binary
+*.woff2 binary
+*.ttf binary
+*.eot binary
+

.github/CONTRIBUTING.md

@@ -1,21 +1,21 @@
 # Contributing to Twenty
 
-Thanks for considering contributing to Twenty! 
+Thanks for considering contributing to Twenty!
 
-Please make sure to go through the [documentation](https://docs.twenty.com) before. 
+Please make sure to go through the [documentation](https://docs.twenty.com) before.
 
 <br>
 
 
 ## Good first issues
 
-Good first issues are a great way to start contributing and get familiar with the codebase. You can find them on by filtering on the [good first issue](https://github.com/twentyhq/twenty/labels/good%20first%20issue) label. 
+Good first issues are a great way to start contributing and get familiar with the codebase. You can find them on by filtering on the [good first issue](https://github.com/twentyhq/twenty/labels/good%20first%20issue) label.
 
 ## Issue assignment
 
 To avoid conflicts, we follow these guidelines:
 
-1. For `Good First Issue` and `Experienced Contributor` issues without `size: long` labels, we'll merge the first PRs that meet our [code quality standards](https://twenty.com/developers). **We don't assign contributors to these issues**. For `priority: high` issues, our core team will step in within days if no adequate contributions are received.
+1. For `Good First Issue` and `Experienced Contributor` issues without `size: long` labels, we'll merge the first PRs that meet our [code quality standards](https://docs.twenty.com/developers). **We don't assign contributors to these issues**. For `priority: high` issues, our core team will step in within days if no adequate contributions are received.
 2. For `size: long` Issues, assigned contributors have one week to submit their first draft PR.
 
 ## How to Contribute
@@ -63,4 +63,4 @@ git push origin your-branch-name
 
 ## Reporting Issues
 
-If you face any issues or have suggestions, please feel free to (create an issue on Twenty's GitHub repository)[https://github.com/twentyhq/twenty/issues/new]. Please provide as much detail as possible.
+If you face any issues or have suggestions, please feel free to [create an issue on Twenty's GitHub repository](https://github.com/twentyhq/twenty/issues/new). Please provide as much detail as possible.

.github/ISSUE_TEMPLATE/request-technical-work.md

@@ -27,7 +27,7 @@ Having a list that is draggable will be useful, not only in dropdown.
 
 Create a folder @/ui/draggable-list with a DraggableList component
 This component should take as prop: itemsComponents, onDragEnd((previousIndex, nextIndex) => {})
-Use this component in ViewFieldsVisibilityDropdownSection (move the logic from ViewFieldsVisibilityDropdownSection to DraggableList) by passing a list of DraggableMenuItems
+Use this component in ObjectOptionsDropdownHiddenFieldsContent (move the logic from ObjectOptionsDropdownHiddenFieldsContent to DraggableList) by passing a list of DraggableMenuItems
 Add a storybook test on this list (we don't know how to actually test the draggable behavior, but we can at least make sure the component renders correctly a list of items)
 ```
 

.github/actions/nx-affected/action.yaml

@@ -0,0 +1,36 @@
+name: Nx Affected CI
+inputs:
+  parallel:
+    required: false
+    default: '3'
+  tag:
+    required: false
+  tasks:
+    required: true
+  configuration:
+    required: false
+    default: 'ci'
+  args:
+    required: false
+runs:
+  using: "composite"
+  steps:
+    - name: Fetch main branch for diff
+      shell: bash
+      run: git fetch origin main --depth=1
+    - name: Get last successful commit
+      if: env.NX_BASE == ''
+      uses: nrwl/nx-set-shas@v4
+    - name: Fallback to origin/main if no base found
+      if: env.NX_BASE == ''
+      shell: bash
+      run: echo "NX_BASE=$(git rev-parse origin/main)" >> $GITHUB_ENV
+    - name: Run affected command
+      shell: bash
+      env:
+        NX_CONFIGURATION: ${{ inputs.configuration }}
+        NX_TASKS: ${{ inputs.tasks }}
+        NX_PARALLEL: ${{ inputs.parallel }}
+        NX_TAG: ${{ inputs.tag }}
+        NX_ARGS: ${{ inputs.args }}
+      run: npx nx affected --nxBail --configuration="$NX_CONFIGURATION" -t="$NX_TASKS" --parallel="$NX_PARALLEL" --exclude="*,!tag:$NX_TAG" $NX_ARGS

.github/actions/restore-cache/action.yaml

@@ -0,0 +1,38 @@
+name: Restore cache
+inputs:
+  key:
+    required: true
+    description: Prefix to the cache key
+  additional-paths:
+    required: false
+outputs:
+  cache-primary-key:
+    description: actions/cache/restore cache-primary-key outputs proxy
+    value: ${{ steps.restore-cache.outputs.cache-primary-key }}
+  cache-hit:
+    description: String bool indicating whether cache has been directly or indirectly hit
+    value: ${{ steps.restore-cache.outputs.cache-hit == 'true' || steps.restore-cache.outputs.cache-matched-key != '' }}
+
+runs:
+  using: composite
+  steps:
+    - name: Cache primary key builder
+      id: cache-primary-key-builder
+      shell: bash
+      env:
+        CACHE_KEY: ${{ inputs.key }}
+        REF_NAME: ${{ github.ref_name }}
+      run: |
+        echo "CACHE_PRIMARY_KEY_PREFIX=v4-${CACHE_KEY}-${REF_NAME}" >> "${GITHUB_OUTPUT}"
+    - name: Restore cache
+      uses: actions/cache/restore@v4
+      id: restore-cache
+      with:
+        key: ${{ steps.cache-primary-key-builder.outputs.CACHE_PRIMARY_KEY_PREFIX }}-${{ github.sha }}
+        restore-keys: ${{ steps.cache-primary-key-builder.outputs.CACHE_PRIMARY_KEY_PREFIX }}-
+        path: |
+          .cache
+          .nx
+          node_modules/.cache
+          packages/*/node_modules/.cache
+          ${{ inputs.additional-paths }}

.github/actions/save-cache/action.yaml

@@ -0,0 +1,21 @@
+name: Save cache
+inputs:
+  key:
+    required: true
+    description: Primary key to the cache, should be retrieved from `cache-restore` composite action outputs.
+  additional-paths:
+    required: false
+
+runs:
+  using: "composite"
+  steps:
+    - name: Save cache
+      uses: actions/cache/save@v4
+      with:
+        key: ${{ inputs.key }}
+        path: |
+          .cache
+          .nx
+          node_modules/.cache
+          packages/*/node_modules/.cache
+          ${{ inputs.additional-paths }}

.github/actions/spawn-twenty-docker-image/action.yaml

@@ -0,0 +1,80 @@
+name: Spawn Twenty Docker Image
+description: >
+  Starts a full Twenty instance (server, worker, database, redis) using Docker
+  Compose. The server is available at http://localhost:3000 for subsequent steps
+  in the caller's job.
+  Pulls the specified semver image tag from Docker Hub.
+  Designed to be consumed from external repositories (e.g., twenty-app).
+
+inputs:
+  twenty-version:
+    description: 'Twenty Docker Hub image tag as semver (e.g., v0.40.0, v1.0.0).'
+    required: true
+  twenty-repository:
+    description: 'Twenty repository to checkout docker compose files from.'
+    required: false
+    default: 'twentyhq/twenty'
+  github-token:
+    description: 'GitHub token for cross-repo checkout. Required when calling from an external repository.'
+    required: false
+    default: ${{ github.token }}
+
+outputs:
+  server-url:
+    description: 'URL where the Twenty server can be reached'
+    value: http://localhost:3000
+  access-token:
+    description: 'Admin access token for the Twenty instance'
+    value: ${{ steps.admin-token.outputs.access-token }}
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Validate version
+      shell: bash
+      run: |
+        VERSION="${{ inputs.twenty-version }}"
+        if ! echo "$VERSION" | grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+$'; then
+          echo "::error::twenty-version must be a semver tag (e.g., v0.40.0). Got: '$VERSION'"
+          exit 1
+        fi
+
+    - name: Checkout docker compose files
+      uses: actions/checkout@v4
+      with:
+        repository: ${{ inputs.twenty-repository }}
+        ref: ${{ inputs.twenty-version }}
+        token: ${{ inputs.github-token }}
+        sparse-checkout: |
+          packages/twenty-docker
+        sparse-checkout-cone-mode: false
+        path: .twenty-spawn
+
+    - name: Prepare environment
+      shell: bash
+      working-directory: ./.twenty-spawn/packages/twenty-docker
+      run: |
+        cp .env.example .env
+        echo "" >> .env
+        echo "TAG=${{ inputs.twenty-version }}" >> .env
+        echo "APP_SECRET=replace_me_with_a_random_string" >> .env
+        echo "SERVER_URL=http://localhost:3000" >> .env
+
+    - name: Start Twenty instance
+      shell: bash
+      working-directory: ./.twenty-spawn/packages/twenty-docker
+      run: |
+        docker compose up -d --wait || {
+          echo "::error::Docker compose failed to start or health checks timed out"
+          docker compose logs
+          exit 1
+        }
+        echo "Twenty instance is ready at http://localhost:3000"
+
+    - name: Set admin access token
+      id: admin-token
+      shell: bash
+      run: |
+        ACCESS_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik"
+        echo "::add-mask::$ACCESS_TOKEN"
+        echo "access-token=$ACCESS_TOKEN" >> "$GITHUB_OUTPUT"

.github/actions/yarn-install/action.yaml

@@ -0,0 +1,42 @@
+name: Yarn Install
+inputs:
+  node-version:
+    required: false
+    default: '24'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Cache primary key builder
+      id: globals
+      shell: bash
+      run: |
+        echo "ACTION_SHELL=bash" >> "${GITHUB_OUTPUT}"
+        echo "CACHE_KEY_PREFIX=node_modules-cache-node-${{ inputs.node-version }}-${{ hashFiles('yarn.lock') }}"  >> "${GITHUB_OUTPUT}"
+        echo 'PATH_TO_CACHE<<EOF' >> $GITHUB_OUTPUT
+        echo "node_modules" >> $GITHUB_OUTPUT
+        echo "packages/*/node_modules" >> $GITHUB_OUTPUT
+        echo 'EOF' >> $GITHUB_OUTPUT
+    - name: Setup Node.js and get yarn cache
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+    - name: Restore node_modules
+      id: cache-node-modules
+      uses: actions/cache/restore@v4
+      with:
+        key: v4-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-${{github.sha}}
+        restore-keys: v4-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-
+        path: ${{ steps.globals.outputs.PATH_TO_CACHE }}
+    - name: Install Dependencies
+      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' }}
+      shell: ${{ steps.globals.outputs.ACTION_SHELL }}
+      run: |
+        yarn config set enableHardenedMode true
+        yarn --immutable --check-cache
+    - name: Save cache
+      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' }}
+      uses: actions/cache/save@v4
+      with:
+        key: ${{ steps.cache-node-modules.outputs.cache-primary-key }}
+        path: ${{ steps.globals.outputs.PATH_TO_CACHE }}

.github/crowdin-app.yml

@@ -0,0 +1,23 @@
+#
+# Crowdin CLI configuration for App translations (twenty-front, twenty-server, twenty-emails)
+# Project ID: 1
+# See https://crowdin.github.io/crowdin-cli/configuration for more information
+#
+
+"preserve_hierarchy": true
+"base_path": ".."
+
+files: [
+  {
+    #
+    # Source files filter - PO files for Lingui
+    #
+    "source": "**/en.po",
+
+    #
+    # Translation files path
+    #
+    "translation": "%original_path%/%locale%.po",
+  }
+]
+

.github/crowdin-docs.yml

@@ -0,0 +1,45 @@
+#
+# Crowdin CLI configuration for Documentation translations
+# See https://crowdin.github.io/crowdin-cli/configuration for more information
+#
+
+"project_id": 2
+"preserve_hierarchy": true
+"base_url": "https://twenty.api.crowdin.com"
+"base_path": ".."
+
+files: [
+  {
+    #
+    # MDX documentation files - user-guide
+    # Using md type to preserve JSX component structure
+    # This prevents Crowdin from reformatting <Warning>, <Accordion>, etc.
+    #
+    "source": "packages/twenty-docs/user-guide/**/*.mdx",
+    "translation": "packages/twenty-docs/l/%two_letters_code%/user-guide/**/%original_file_name%",
+  },
+  {
+    #
+    # MDX documentation files - developers
+    # Using md type to preserve JSX component structure
+    #
+    "source": "packages/twenty-docs/developers/**/*.mdx",
+    "translation": "packages/twenty-docs/l/%two_letters_code%/developers/**/%original_file_name%",
+  },
+  {
+    #
+    # MDX documentation files - twenty-ui
+    # Using md type to preserve JSX component structure
+    #
+    "source": "packages/twenty-docs/twenty-ui/**/*.mdx",
+    "translation": "packages/twenty-docs/l/%two_letters_code%/twenty-ui/**/%original_file_name%",
+  },
+  {
+    #
+    # Navigation labels template - translated into per-locale navigation.json
+    #
+    "source": "packages/twenty-docs/navigation/navigation.template.json",
+    "translation": "packages/twenty-docs/l/%two_letters_code%/navigation.json",
+  }
+]
+

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    exclude-paths:
+      - "packages/twenty-apps/community/**"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 3
+    versioning-strategy: "lockfile-only"
+    assignees:
+      - "mabdullahabaid"
+    ignore:
+      - dependency-name: "@graphql-yoga/nestjs"
+      - dependency-name: "@nestjs/graphql"
+      - dependency-name: "@ptc-org/nestjs-query-graphql"
+      - dependency-name: "typeorm"

.github/verdaccio-config.yaml

@@ -0,0 +1,19 @@
+storage: /tmp/verdaccio-storage
+auth:
+  htpasswd:
+    file: /tmp/verdaccio-htpasswd
+    max_users: 100
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+packages:
+  'twenty-sdk':
+    access: $all
+    publish: $all
+  'create-twenty-app':
+    access: $all
+    publish: $all
+  '**':
+    access: $all
+    proxy: npmjs
+log: { type: stdout, format: pretty, level: warn }

.github/workflows/actions/nx-affected/action.yaml

@@ -1,22 +0,0 @@
-name: Nx Affected CI
-inputs:
-  parallel:
-    required: false
-    default: '3'
-  tag:
-    required: false
-  tasks:
-    required: true
-  configuration:
-    required: false
-    default: 'ci'
-  args:
-    required: false
-runs:
-  using: "composite"
-  steps:
-    - name: Get last successful commit
-      uses: nrwl/nx-set-shas@v4
-    - name: Run affected command
-      shell: bash
-      run: npx nx affected --nxBail --configuration=${{ inputs.configuration }} -t=${{ inputs.tasks }} --parallel=${{ inputs.parallel }} --exclude='*,!tag:${{ inputs.tag }}' ${{ inputs.args }}

.github/workflows/actions/restore-cache/action.yaml

@@ -1,35 +0,0 @@
-name: Restore cache
-inputs:
-  key:
-    required: true
-    description: Prefix to the cache key
-  additional-paths:
-    required: false
-outputs:
-  cache-primary-key:
-    description: actions/cache/restore cache-primary-key outputs proxy
-    value: ${{ steps.restore-cache.outputs.cache-primary-key }}
-  cache-hit:
-    description: String bool indicating whether cache has been directly or indirectly hit
-    value: ${{ steps.restore-cache.outputs.cache-hit == 'true' || steps.restore-cache.outputs.cache-matched-key != '' }}
-
-runs:
-  using: composite
-  steps:
-    - name: Cache primary key builder
-      id: cache-primary-key-builder
-      shell: bash
-      run: |
-        echo "CACHE_PRIMARY_KEY_PREFIX=v3-${{ inputs.key }}-${{ github.ref_name }}" >> "${GITHUB_OUTPUT}"
-    - name: Restore cache
-      uses: actions/cache/restore@v4
-      id: restore-cache
-      with:
-        key:  ${{ steps.cache-primary-key-builder.outputs.CACHE_PRIMARY_KEY_PREFIX }}-${{ github.sha }}
-        restore-keys: ${{ steps.cache-primary-key-builder.outputs.CACHE_PRIMARY_KEY_PREFIX }}-
-        path: |
-          .cache
-          .nx/cache
-          node_modules/.cache
-          packages/*/node_modules/.cache
-          ${{ inputs.additional-paths }}

.github/workflows/actions/save-cache/action.yaml

@@ -1,21 +0,0 @@
-name: Save cache
-inputs:
-  key:
-    required: true
-    description: Primary key to the cache, should be retrieved from `cache-restore` composite action outputs.
-  additional-paths:
-    required: false
-
-runs:
-  using: "composite"
-  steps:
-    - name: Save cache
-      uses: actions/cache/save@v4
-      with:
-        key: ${{ inputs.key }}
-        path: |
-          .cache
-          .nx/cache
-          node_modules/.cache
-          packages/*/node_modules/.cache
-          ${{ inputs.additional-paths }}

.github/workflows/actions/yarn-install/action.yaml

@@ -1,43 +0,0 @@
-name: Yarn Install
-inputs:
-  node-version:
-    required: false
-    default: '22'
-
-runs:
-  using: "composite"
-  steps:
-    - name: Cache primary key builder
-      id: globals
-      shell: bash
-      run: |
-        echo "ACTION_SHELL=bash" >> "${GITHUB_OUTPUT}"
-        echo "CACHE_KEY_PREFIX=node_modules-cache-node-${{ inputs.node-version }}-${{ hashFiles('yarn.lock') }}"  >> "${GITHUB_OUTPUT}"
-        echo 'PATH_TO_CACHE<<EOF' >> $GITHUB_OUTPUT
-        echo "node_modules" >> $GITHUB_OUTPUT
-        echo "packages/*/node_modules" >> $GITHUB_OUTPUT
-        echo 'EOF' >> $GITHUB_OUTPUT
-    - name: Setup Node.js and get yarn cache
-      uses: actions/setup-node@v4
-      with:
-        node-version: ${{ inputs.node-version }}
-    - name: Restore node_modules
-      id: cache-node-modules
-      uses: actions/cache/restore@v4
-      with:
-        key: v3-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-${{github.sha}}
-        restore-keys: v3-${{ steps.globals.outputs.CACHE_KEY_PREFIX }}-
-        path: ${{ steps.globals.outputs.PATH_TO_CACHE }}
-    - name: Install Dependencies
-      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' }}
-      shell: ${{ steps.globals.outputs.ACTION_SHELL }}
-      run: |
-        yarn config set enableHardenedMode true
-        yarn --immutable --check-cache
-    - name: Save cache
-      if: ${{ steps.cache-node-modules.outputs.cache-hit != 'true' && steps.cache-node-modules.outputs.cache-matched-key == '' }}
-      uses: actions/cache/save@v4
-      with:
-        key: ${{ steps.cache-node-modules.outputs.cache-primary-key }}
-        path: ${{ steps.globals.outputs.PATH_TO_CACHE }}
-      

.github/workflows/breaking-changes.yaml

@@ -1,777 +0,0 @@
-name: GraphQL and OpenAPI Breaking Changes Detection
-
-on:
-  pull_request:
-    types: [opened, synchronize, edited]
-    branches:
-      - main
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-env:
-  MAIN_SERVER_PORT: 3000
-  CURRENT_SERVER_PORT: 3002
-
-permissions:
-  contents: read
-  pull-requests: write
-  checks: write
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        package.json
-        packages/twenty-server/**
-        packages/twenty-emails/**
-        packages/twenty-shared/**
-
-  api-breaking-changes:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 45
-    runs-on: depot-ubuntu-24.04-8
-    env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
-    services:
-      postgres:
-        image: twentycrm/twenty-postgres-spilo
-        env:
-          PGUSER_SUPERUSER: postgres
-          PGPASSWORD_SUPERUSER: postgres
-          ALLOW_NOSSL: 'true'
-          SPILO_PROVIDER: 'local'
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-      clickhouse:
-        image: clickhouse/clickhouse-server:latest
-        env:
-          CLICKHOUSE_PASSWORD: clickhousePassword
-          CLICKHOUSE_URL: "http://default:clickhousePassword@localhost:8123/twenty"
-        ports:
-          - 8123:8123
-          - 9000:9000
-        options: >-
-          --health-cmd "clickhouse-client --host=localhost --port=9000 --user=default --password=clickhousePassword --query='SELECT 1'" 
-          --health-interval 10s 
-          --health-timeout 5s 
-          --health-retries 5
-
-    steps:
-      - name: Checkout current branch
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-
-      - name: Build shared dependencies
-        run: |
-          npx nx build twenty-shared
-          npx nx build twenty-emails
-
-      - name: Build current branch server
-        run: npx nx build twenty-server
-
-      - name: Setup databases
-        run: |
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "current_branch";'
-          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "main_branch";'
-
-      - name: Run ClickHouse migrations
-        run: npx nx clickhouse:migrate twenty-server
-        env:
-          CLICKHOUSE_URL: http://default:clickhousePassword@localhost:8123/twenty
-          CLICKHOUSE_PASSWORD: clickhousePassword
-
-      - name: Setup current branch database
-        run: |
-          npx nx reset:env twenty-server
-          # Function to set or update environment variable
-          set_env_var() {
-            local var_name="$1"
-            local var_value="$2"
-            local env_file="packages/twenty-server/.env"
-            
-            if grep -q "^${var_name}=" "$env_file"; then
-              sed -i "s|^${var_name}=.*|${var_name}=${var_value}|" "$env_file"
-            else
-              echo "${var_name}=${var_value}" >> "$env_file"
-            fi
-          }
-          
-          set_env_var "PG_DATABASE_URL" "postgres://postgres:postgres@localhost:5432/current_branch"
-          set_env_var "NODE_PORT" "${{ env.CURRENT_SERVER_PORT }}"
-          set_env_var "REDIS_URL" "redis://localhost:6379"
-          set_env_var "CLICKHOUSE_URL" "http://default:clickhousePassword@localhost:8123/twenty"
-          set_env_var "CLICKHOUSE_PASSWORD" "clickhousePassword"
-          
-          npx nx run twenty-server:database:init:prod
-          npx nx run twenty-server:database:migrate:prod
-
-      - name: Seed current branch database with test data
-        run: |
-          npx nx command-no-deps twenty-server -- workspace:seed:dev
-
-      - name: Start current branch server in background
-        run: |
-          echo "=== Current branch .env file contents ==="
-          cat packages/twenty-server/.env
-          echo "=== Starting current branch server ==="
-          nohup npx nx run twenty-server:start:prod > /tmp/current-server.log 2>&1 &
-          echo $! > /tmp/current-server.pid
-          echo "Current server PID: $(cat /tmp/current-server.pid)"
-
-      - name: Wait for current branch server to be ready
-        run: |
-          echo "Waiting for current branch server to start..."
-          timeout=300
-          interval=5
-          elapsed=0
-          
-          while [ $elapsed -lt $timeout ]; do
-            if curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
-               curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
-              echo "Current branch server is ready!"
-              break
-            fi
-            
-            echo "Current branch server not ready yet, waiting ${interval}s..."
-            sleep $interval
-            elapsed=$((elapsed + interval))
-          done
-          
-          if [ $elapsed -ge $timeout ]; then
-            echo "Timeout waiting for current branch server to start"
-            echo "Current server log:"
-            cat /tmp/current-server.log || echo "No current server log found"
-            exit 1
-          fi
-
-      - name: Download GraphQL and REST responses from current branch
-        run: |
-          # Admin token from jest-integration.config.ts
-          ADMIN_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC05ZTNiLTQ2ZDQtYTU1Ni04OGI5ZGRjMmIwMzQiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtMDY4Ny00YzQxLWI3MDctZWQxYmZjYTk3MmE3IiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtOWUzYi00NmQ0LWE1NTYtODhiOWRkYzJiMDM1IiwiaWF0IjoxNzM5NTQ3NjYxLCJleHAiOjMzMjk3MTQ3NjYxfQ.fbOM9yhr3jWDicPZ1n771usUURiPGmNdeFApsgrbxOw"
-          
-          # Load introspection query from file
-          INTROSPECTION_QUERY=$(cat packages/twenty-utils/graphql-introspection-query.graphql)
-          
-          # Prepare the query payload
-          QUERY_PAYLOAD=$(echo "$INTROSPECTION_QUERY" | tr '\n' ' ' | sed 's/"/\\"/g')
-          
-          echo "Downloading GraphQL schema from current server..."
-          curl -X POST "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" \
-            -H "Content-Type: application/json" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
-            -o current-schema-introspection.json \
-            -w "HTTP Status: %{http_code}\n" \
-            -s
-          
-          echo "Downloading GraphQL metadata schema from current server..."
-          curl -X POST "http://localhost:${{ env.CURRENT_SERVER_PORT }}/metadata" \
-            -H "Content-Type: application/json" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
-            -o current-metadata-schema-introspection.json \
-            -w "HTTP Status: %{http_code}\n" \
-            -s
-          
-          # Download current branch OpenAPI specs
-          echo "Downloading OpenAPI specifications from current server..."
-          curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -o current-rest-api.json \
-            -w "HTTP Status: %{http_code}\n"
-          
-          curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/metadata" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -o current-rest-metadata-api.json \
-            -w "HTTP Status: %{http_code}\n"
-          
-          # Verify the downloads
-          echo "Current branch files downloaded:"
-          ls -la current-*
-          
-
-      - name: Preserve current branch files
-        run: |
-          # Create a temp directory to store current branch files
-          mkdir -p /tmp/current-branch-files
-          
-          # Move current branch files to temp directory
-          mv current-* /tmp/current-branch-files/ 2>/dev/null || echo "No current-* files to preserve"
-          
-          echo "Preserved current branch files for later restoration"
-
-      - name: Stop current branch server
-        run: |
-          if [ -f /tmp/current-server.pid ]; then
-            echo "Stopping current branch server..."
-            kill $(cat /tmp/current-server.pid) || true
-            # Wait a bit for graceful shutdown
-            sleep 5
-            # Force kill if still running
-            kill -9 $(cat /tmp/current-server.pid) 2>/dev/null || true
-            rm -f /tmp/current-server.pid
-          fi
-
-      - name: Checkout main branch
-        run: |
-          git stash
-          git checkout origin/main
-          git clean -fd
-
-      - name: Install dependencies for main branch
-        uses: ./.github/workflows/actions/yarn-install
-
-      - name: Build main branch dependencies
-        run: |
-          npx nx build twenty-shared
-          npx nx build twenty-emails
-
-      - name: Build main branch server
-        run: npx nx build twenty-server
-
-      - name: Setup main branch database
-        run: |
-          # Function to set or update environment variable
-          set_env_var() {
-            local var_name="$1"
-            local var_value="$2"
-            local env_file="packages/twenty-server/.env"
-            
-            if grep -q "^${var_name}=" "$env_file"; then
-              sed -i "s|^${var_name}=.*|${var_name}=${var_value}|" "$env_file"
-            else
-              echo "${var_name}=${var_value}" >> "$env_file"
-            fi
-          }
-          
-          set_env_var "PG_DATABASE_URL" "postgres://postgres:postgres@localhost:5432/main_branch"
-          set_env_var "NODE_PORT" "${{ env.MAIN_SERVER_PORT }}"
-          
-          npx nx run twenty-server:database:init:prod
-          npx nx run twenty-server:database:migrate:prod
-
-      - name: Seed main branch database with test data
-        run: |
-          npx nx command-no-deps twenty-server -- workspace:seed:dev
-
-      - name: Start main branch server in background
-        run: |
-          echo "=== Main branch .env file contents ==="
-          cat packages/twenty-server/.env
-          echo "=== Starting main branch server ==="
-          nohup npx nx run twenty-server:start:prod > /tmp/main-server.log 2>&1 &
-          echo $! > /tmp/main-server.pid
-          echo "Main server PID: $(cat /tmp/main-server.pid)"
-
-      - name: Wait for main branch server to be ready
-        run: |
-          echo "Waiting for main branch server to start..."
-          timeout=300
-          interval=5
-          elapsed=0
-          
-          while [ $elapsed -lt $timeout ]; do
-            if curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
-               curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
-              echo "Main branch server is ready!"
-              break
-            fi
-            
-            echo "Main branch server not ready yet, waiting ${interval}s..."
-            sleep $interval
-            elapsed=$((elapsed + interval))
-          done
-          
-          if [ $elapsed -ge $timeout ]; then
-            echo "Timeout waiting for main branch server to start"
-            echo "Main server log:"
-            cat /tmp/main-server.log || echo "No main server log found"
-            exit 1
-          fi
-
-      - name: Download GraphQL and REST responses from main branch
-        run: |
-          # Admin token from jest-integration.config.ts
-          ADMIN_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC05ZTNiLTQ2ZDQtYTU1Ni04OGI5ZGRjMmIwMzQiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtMDY4Ny00YzQxLWI3MDctZWQxYmZjYTk3MmE3IiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtOWUzYi00NmQ0LWE1NTYtODhiOWRkYzJiMDM1IiwiaWF0IjoxNzM5NTQ3NjYxLCJleHAiOjMzMjk3MTQ3NjYxfQ.fbOM9yhr3jWDicPZ1n771usUURiPGmNdeFApsgrbxOw"
-          
-          # Load introspection query from file
-          INTROSPECTION_QUERY=$(cat packages/twenty-utils/graphql-introspection-query.graphql)
-          
-          # Prepare the query payload
-          QUERY_PAYLOAD=$(echo "$INTROSPECTION_QUERY" | tr '\n' ' ' | sed 's/"/\\"/g')
-          
-          echo "Downloading GraphQL schema from main server..."
-          curl -X POST "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" \
-            -H "Content-Type: application/json" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
-            -o main-schema-introspection.json \
-            -w "HTTP Status: %{http_code}\n" \
-            -s
-          
-          echo "Downloading GraphQL metadata schema from main server..."
-          curl -X POST "http://localhost:${{ env.MAIN_SERVER_PORT }}/metadata" \
-            -H "Content-Type: application/json" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
-            -o main-metadata-schema-introspection.json \
-            -w "HTTP Status: %{http_code}\n" \
-            -s
-          
-          # Download main branch OpenAPI specs
-          echo "Downloading OpenAPI specifications from main server..."
-          curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -o main-rest-api.json \
-            -w "HTTP Status: %{http_code}\n"
-          
-          curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/metadata" \
-            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
-            -o main-rest-metadata-api.json \
-            -w "HTTP Status: %{http_code}\n"
-          
-          # Verify the downloads
-          echo "Main branch files downloaded:"
-          ls -la main-*
-          
-
-      - name: Restore current branch files
-        run: |
-          # Move current branch files back to working directory
-          mv /tmp/current-branch-files/* . 2>/dev/null || echo "No files to restore"
-          
-          # Verify all files are present
-          echo "All API files restored:"
-          ls -la current-* main-* 2>/dev/null || echo "Some files may be missing"
-          
-          # Clean up temp directory
-          rm -rf /tmp/current-branch-files
-
-      - name: Install OpenAPI Diff Tool
-        run: |
-          # Using the Java-based OpenAPITools/openapi-diff via Docker
-          echo "Using OpenAPITools/openapi-diff via Docker"
-
-      - name: Generate GraphQL Schema Diff Reports
-        run: |
-          echo "=== INSTALLING GRAPHQL INSPECTOR CLI ==="
-          npm install -g @graphql-inspector/cli
-          
-          echo "=== GENERATING GRAPHQL DIFF REPORTS ==="
-          
-          # Check if GraphQL schema has changes
-          echo "Checking GraphQL schema for changes..."
-          if graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >/dev/null 2>&1; then
-            echo "✅ No changes in GraphQL schema"
-            # Don't create a diff file for no changes
-          else
-            echo "⚠️ Changes detected in GraphQL schema, generating report..."
-            echo "# GraphQL Schema Changes" > graphql-schema-diff.md
-            echo "" >> graphql-schema-diff.md
-            graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >> graphql-schema-diff.md 2>&1 || {
-              echo "⚠️ **Breaking changes or errors detected in GraphQL schema**" >> graphql-schema-diff.md
-              echo "" >> graphql-schema-diff.md
-              echo "\`\`\`" >> graphql-schema-diff.md
-              graphql-inspector diff main-schema-introspection.json current-schema-introspection.json 2>&1 >> graphql-schema-diff.md || echo "Error generating diff" >> graphql-schema-diff.md
-              echo "\`\`\`" >> graphql-schema-diff.md
-            }
-          fi
-          
-          # Check if GraphQL metadata schema has changes
-          echo "Checking GraphQL metadata schema for changes..."
-          if graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >/dev/null 2>&1; then
-            echo "✅ No changes in GraphQL metadata schema"
-            # Don't create a diff file for no changes
-          else
-            echo "⚠️ Changes detected in GraphQL metadata schema, generating report..."
-            echo "# GraphQL Metadata Schema Changes" > graphql-metadata-diff.md
-            echo "" >> graphql-metadata-diff.md
-            graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >> graphql-metadata-diff.md 2>&1 || {
-              echo "⚠️ **Breaking changes or errors detected in GraphQL metadata schema**" >> graphql-metadata-diff.md
-              echo "" >> graphql-metadata-diff.md
-              echo "\`\`\`" >> graphql-metadata-diff.md
-              graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json 2>&1 >> graphql-metadata-diff.md || echo "Error generating diff" >> graphql-metadata-diff.md
-              echo "\`\`\`" >> graphql-metadata-diff.md
-            }
-          fi
-          
-          # Show summary
-          echo "Generated diff files:"
-          ls -la *-diff.md 2>/dev/null || echo "No diff files generated (no changes detected)"
-
-      - name: Check REST API Breaking Changes
-        run: |
-          echo "=== CHECKING REST API FOR BREAKING CHANGES ==="
-          
-          # Use the Java-based openapi-diff via Docker
-          docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest \
-            --json /specs/rest-api-diff.json \
-            /specs/main-rest-api.json /specs/current-rest-api.json || echo "OpenAPI diff completed with exit code $?"
-          
-          # Check if the output file was created and is valid JSON
-          if [ -f "rest-api-diff.json" ] && jq empty rest-api-diff.json 2>/dev/null; then
-            # Check for breaking changes using Java openapi-diff JSON structure
-            incompatible=$(jq -r '.incompatible // false' rest-api-diff.json)
-            different=$(jq -r '.different // false' rest-api-diff.json)
-            
-            # Count changes
-            new_endpoints=$(jq -r '.newEndpoints | length' rest-api-diff.json 2>/dev/null || echo "0")
-            missing_endpoints=$(jq -r '.missingEndpoints | length' rest-api-diff.json 2>/dev/null || echo "0")
-            changed_operations=$(jq -r '.changedOperations | length' rest-api-diff.json 2>/dev/null || echo "0")
-            
-            if [ "$incompatible" = "true" ]; then
-              echo "❌ Breaking changes detected in REST API"
-              
-              # Generate breaking changes report
-              echo "# REST API Breaking Changes" > rest-api-diff.md
-              echo "" >> rest-api-diff.md
-              echo "⚠️ **Breaking changes detected that may affect existing API consumers**" >> rest-api-diff.md
-              echo "" >> rest-api-diff.md
-              
-              # Parse and format the changes from Java openapi-diff
-              jq -r '
-                if (.missingEndpoints | length) > 0 then
-                  "## 🚨 Removed Endpoints (" + (.missingEndpoints | length | tostring) + ")\n" +
-                  (.missingEndpoints | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "")) | join("\n"))
-                else "" end,
-                if (.changedOperations | length) > 0 then
-                  "\n## ⚠️ Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
-                  (.changedOperations | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "Modified operation")) | join("\n"))
-                else "" end,
-                if (.newEndpoints | length) > 0 then
-                  "\n## ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
-                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
-                else "" end
-              ' rest-api-diff.json >> rest-api-diff.md
-              
-            elif [ "$different" = "true" ]; then
-              echo "📝 Non-breaking changes detected ($new_endpoints new endpoints, $missing_endpoints removed, $changed_operations changed)"
-              
-              # Generate non-breaking changes report
-              echo "# REST API Changes" > rest-api-diff.md
-              echo "" >> rest-api-diff.md
-              echo "## Summary" >> rest-api-diff.md
-              
-              jq -r '
-                if (.newEndpoints | length) > 0 then
-                  "### ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
-                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
-                else "" end,
-                if (.changedOperations | length) > 0 then
-                  "\n### 🔄 Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
-                  (.changedOperations | map("- " + .method + " " + .pathUrl + ": " + (.summary // "Modified operation")) | join("\n"))
-                else "" end
-              ' rest-api-diff.json >> rest-api-diff.md
-            else
-              echo "✅ No changes detected in REST API"
-              # Don't create diff file for no changes
-            fi
-          else
-            echo "⚠️ OpenAPI diff tool could not process the files"
-            
-            echo "# REST API Analysis Error" > rest-api-diff.md
-            echo "" >> rest-api-diff.md
-            echo "⚠️ **Error occurred while analyzing REST API changes**" >> rest-api-diff.md
-            echo "" >> rest-api-diff.md
-            echo "## Error Output" >> rest-api-diff.md
-            echo "\`\`\`" >> rest-api-diff.md
-            docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest /specs/main-rest-api.json /specs/current-rest-api.json 2>&1 >> rest-api-diff.md || echo "Could not capture error output"
-            echo "\`\`\`" >> rest-api-diff.md
-            
-            # Don't fail the workflow for tool errors
-            echo "::warning::REST API analysis tool error - continuing workflow"
-          fi
-
-      - name: Check REST Metadata API Breaking Changes
-        run: |
-          echo "=== CHECKING REST METADATA API FOR BREAKING CHANGES ==="
-          
-          # Use the Java-based openapi-diff for metadata API as well
-          docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest \
-            --json /specs/rest-metadata-api-diff.json \
-            /specs/main-rest-metadata-api.json /specs/current-rest-metadata-api.json || echo "OpenAPI diff completed with exit code $?"
-          
-          # Check if the output file was created and is valid JSON
-          if [ -f "rest-metadata-api-diff.json" ] && jq empty rest-metadata-api-diff.json 2>/dev/null; then
-            # Check for breaking changes using Java openapi-diff JSON structure
-            incompatible=$(jq -r '.incompatible // false' rest-metadata-api-diff.json)
-            different=$(jq -r '.different // false' rest-metadata-api-diff.json)
-            
-            # Count changes
-            new_endpoints=$(jq -r '.newEndpoints | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
-            missing_endpoints=$(jq -r '.missingEndpoints | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
-            changed_operations=$(jq -r '.changedOperations | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
-            
-            if [ "$incompatible" = "true" ]; then
-              echo "❌ Breaking changes detected in REST Metadata API"
-              
-              # Generate breaking changes report
-              echo "# REST Metadata API Breaking Changes" > rest-metadata-api-diff.md
-              echo "" >> rest-metadata-api-diff.md
-              echo "⚠️ **Breaking changes detected that may affect existing API consumers**" >> rest-metadata-api-diff.md
-              echo "" >> rest-metadata-api-diff.md
-              
-              # Parse and format the changes from Java openapi-diff
-              jq -r '
-                if (.missingEndpoints | length) > 0 then
-                  "## 🚨 Removed Endpoints (" + (.missingEndpoints | length | tostring) + ")\n" +
-                  (.missingEndpoints | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "")) | join("\n"))
-                else "" end,
-                if (.changedOperations | length) > 0 then
-                  "\n## ⚠️ Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
-                  (.changedOperations | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "Modified operation")) | join("\n"))
-                else "" end,
-                if (.newEndpoints | length) > 0 then
-                  "\n## ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
-                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
-                else "" end
-              ' rest-metadata-api-diff.json >> rest-metadata-api-diff.md
-
-            elif [ "$different" = "true" ]; then
-              echo "📝 Non-breaking changes detected ($new_endpoints new endpoints, $missing_endpoints removed, $changed_operations changed)"
-              
-              # Generate non-breaking changes report
-              echo "# REST Metadata API Changes" > rest-metadata-api-diff.md
-              echo "" >> rest-metadata-api-diff.md
-              echo "## Summary" >> rest-metadata-api-diff.md
-              
-              jq -r '
-                if (.newEndpoints | length) > 0 then
-                  "### ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
-                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
-                else "" end,
-                if (.changedOperations | length) > 0 then
-                  "\n### 🔄 Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
-                  (.changedOperations | map("- " + .method + " " + .pathUrl + ": " + (.summary // "Modified operation")) | join("\n"))
-                else "" end
-              ' rest-metadata-api-diff.json >> rest-metadata-api-diff.md
-            else
-              echo "✅ No changes detected in REST Metadata API"
-              # Don't create diff file for no changes
-            fi
-          else
-            echo "⚠️ OpenAPI diff tool could not process the metadata API files"
-            
-            echo "# REST Metadata API Analysis Error" > rest-metadata-api-diff.md
-            echo "" >> rest-metadata-api-diff.md
-            echo "⚠️ **Error occurred while analyzing REST Metadata API changes**" >> rest-metadata-api-diff.md
-            echo "" >> rest-metadata-api-diff.md
-            echo "## Error Output" >> rest-metadata-api-diff.md
-            echo "\`\`\`" >> rest-metadata-api-diff.md
-            docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest /specs/main-rest-metadata-api.json /specs/current-rest-metadata-api.json 2>&1 >> rest-metadata-api-diff.md || echo "Could not capture error output"
-            echo "\`\`\`" >> rest-metadata-api-diff.md
-            
-            # Don't fail the workflow for tool errors
-            echo "::warning::REST Metadata API analysis tool error - continuing workflow"
-          fi
-
-      - name: Comment API Changes on PR
-        if: always()
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const fs = require('fs');
-            let hasChanges = false;
-            let comment = '';
-            
-            try {
-              if (fs.existsSync('graphql-schema-diff.md')) {
-                const graphqlDiff = fs.readFileSync('graphql-schema-diff.md', 'utf8');
-                if (graphqlDiff.trim()) {
-                  if (!hasChanges) {
-                    comment = '## 📊 API Changes Report\n\n';
-                    hasChanges = true;
-                  }
-                  comment += '### GraphQL Schema Changes\n' + graphqlDiff + '\n\n';
-                }
-              }
-              
-              if (fs.existsSync('graphql-metadata-diff.md')) {
-                const graphqlMetadataDiff = fs.readFileSync('graphql-metadata-diff.md', 'utf8');
-                if (graphqlMetadataDiff.trim()) {
-                  if (!hasChanges) {
-                    comment = '## 📊 API Changes Report\n\n';
-                    hasChanges = true;
-                  }
-                  comment += '### GraphQL Metadata Schema Changes\n' + graphqlMetadataDiff + '\n\n';
-                }
-              }
-              
-              if (fs.existsSync('rest-api-diff.md')) {
-                const restDiff = fs.readFileSync('rest-api-diff.md', 'utf8');
-                if (restDiff.trim()) {
-                  if (!hasChanges) {
-                    comment = '## 📊 API Changes Report\n\n';
-                    hasChanges = true;
-                  }
-                  comment += restDiff + '\n\n';
-                }
-              }
-              
-              if (fs.existsSync('rest-metadata-api-diff.md')) {
-                const metadataDiff = fs.readFileSync('rest-metadata-api-diff.md', 'utf8');
-                if (metadataDiff.trim()) {
-                  if (!hasChanges) {
-                    comment = '## 📊 API Changes Report\n\n';
-                    hasChanges = true;
-                  }
-                  comment += metadataDiff + '\n\n';
-                }
-              }
-              
-              // Only post comment if there are changes
-              if (hasChanges) {
-                // Check if there are any breaking changes detected
-                let hasBreakingChanges = false;
-                let breakingChangeNote = '';
-                
-                // Check for breaking changes in any of the diff files
-                if (fs.existsSync('rest-api-diff.md')) {
-                  const restDiff = fs.readFileSync('rest-api-diff.md', 'utf8');
-                  if (restDiff.includes('Breaking Changes') || restDiff.includes('🚨') || 
-                      restDiff.includes('Removed Endpoints') || restDiff.includes('Changed Operations')) {
-                    hasBreakingChanges = true;
-                  }
-                }
-                
-                if (fs.existsSync('rest-metadata-api-diff.md')) {
-                  const metadataDiff = fs.readFileSync('rest-metadata-api-diff.md', 'utf8');
-                  if (metadataDiff.includes('Breaking Changes') || metadataDiff.includes('🚨') || 
-                      metadataDiff.includes('Removed Endpoints') || metadataDiff.includes('Changed Operations')) {
-                    hasBreakingChanges = true;
-                  }
-                }
-                
-                // Also check GraphQL changes for breaking changes indicators
-                if (fs.existsSync('graphql-schema-diff.md')) {
-                  const graphqlDiff = fs.readFileSync('graphql-schema-diff.md', 'utf8');
-                  if (graphqlDiff.includes('Breaking changes') || graphqlDiff.includes('BREAKING')) {
-                    hasBreakingChanges = true;
-                  }
-                }
-                
-                if (fs.existsSync('graphql-metadata-diff.md')) {
-                  const graphqlMetadataDiff = fs.readFileSync('graphql-metadata-diff.md', 'utf8');
-                  if (graphqlMetadataDiff.includes('Breaking changes') || graphqlMetadataDiff.includes('BREAKING')) {
-                    hasBreakingChanges = true;
-                  }
-                }
-                
-                // Check PR title for "breaking"
-                const prTitle = "${{ github.event.pull_request.title }}";
-                const titleContainsBreaking = prTitle.toLowerCase().includes('breaking');
-                
-                if (hasBreakingChanges) {
-                  if (titleContainsBreaking) {
-                    breakingChangeNote = '\n\n## ✅ Breaking Change Protocol\n\n' +
-                      '**This PR title contains "breaking" and breaking changes were detected - the CI will fail as expected.**\n\n' +
-                      '📝 **Action Required**: Please add `BREAKING CHANGE:` to your commit message to trigger a major version bump.\n\n' +
-                      'Example:\n```\nfeat: add new API endpoint\n\nBREAKING CHANGE: removed deprecated field from User schema\n```';
-                  } else {
-                    breakingChangeNote = '\n\n## ⚠️ Breaking Change Protocol\n\n' +
-                      '**Breaking changes detected but PR title does not contain "breaking" - CI will pass but action needed.**\n\n' +
-                      '🔄 **Options**:\n' +
-                      '1. **If this IS a breaking change**: Add "breaking" to your PR title and add `BREAKING CHANGE:` to your commit message\n' +
-                      '2. **If this is NOT a breaking change**: The API diff tool may have false positives - please review carefully\n\n' +
-                      'For breaking changes, add to commit message:\n```\nfeat: add new API endpoint\n\nBREAKING CHANGE: removed deprecated field from User schema\n```';
-                  }
-                }
-                
-                const COMMENT_MARKER = '<!-- API_CHANGES_REPORT -->';
-                const commentBody = COMMENT_MARKER + '\n' + comment + '⚠️ **Please review these API changes carefully before merging.**' + breakingChangeNote;
-                
-                // Get all comments to find existing API changes comment
-                const {data: comments} = await github.rest.issues.listComments({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  issue_number: context.issue.number,
-                });
-                
-                // Find our existing comment
-                const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
-                
-                if (botComment) {
-                  // Update existing comment
-                  await github.rest.issues.updateComment({
-                    owner: context.repo.owner,
-                    repo: context.repo.repo,
-                    comment_id: botComment.id,
-                    body: commentBody
-                  });
-                  console.log('Updated existing API changes comment');
-                } else {
-                  // Create new comment
-                  await github.rest.issues.createComment({
-                    issue_number: context.issue.number,
-                    owner: context.repo.owner,
-                    repo: context.repo.repo,
-                    body: commentBody
-                  });
-                  console.log('Created new API changes comment');
-                }
-              } else {
-                console.log('No API changes detected - skipping PR comment');
-                
-                // Check if there's an existing comment to remove
-                const {data: comments} = await github.rest.issues.listComments({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  issue_number: context.issue.number,
-                });
-                
-                const COMMENT_MARKER = '<!-- API_CHANGES_REPORT -->';
-                const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
-                
-                if (botComment) {
-                  await github.rest.issues.deleteComment({
-                    owner: context.repo.owner,
-                    repo: context.repo.repo,
-                    comment_id: botComment.id,
-                  });
-                  console.log('Deleted existing API changes comment (no changes detected)');
-                }
-              }
-            } catch (error) {
-              console.log('Could not post comment:', error);
-            }
-
-      - name: Cleanup servers
-        if: always()
-        run: |
-          if [ -f /tmp/current-server.pid ]; then
-            kill $(cat /tmp/current-server.pid) || true
-          fi
-          if [ -f /tmp/main-server.pid ]; then
-            kill $(cat /tmp/main-server.pid) || true
-          fi
-
-      - name: Upload API specifications and diffs
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: api-specifications-and-diffs
-          path: |
-            /tmp/main-server.log
-            /tmp/current-server.log
-            *-api.json
-            *-schema-introspection.json  
-            *-diff.md
-            *-diff.json
-

.github/workflows/cd-deploy-main.yaml

@@ -1,8 +1,13 @@
 name: CD deploy main
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
       - main
+
 jobs:
   deploy-main:
     timeout-minutes: 3

.github/workflows/cd-deploy-tag.yaml

@@ -1,8 +1,13 @@
 name: CD deploy tag
+
+permissions:
+  contents: read
+
 on:
   push:
     tags:
       - 'v*'
+
 jobs:
   deploy-tag:
     timeout-minutes: 3

.github/workflows/changed-files.yaml

@@ -1,4 +1,5 @@
 name: Changed files reusable workflow
+
 on:
   workflow_call:
     inputs:
@@ -9,6 +10,9 @@ on:
       any_changed:
         value: ${{ jobs.changed-files.outputs.any_changed }}
 
+permissions:
+  contents: read
+
 jobs:
   changed-files:
     timeout-minutes: 5
@@ -19,7 +23,7 @@ jobs:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Check for changed files
         id: changed-files
         uses: tj-actions/changed-files@v45

.github/workflows/ci-breaking-changes.yaml

@@ -0,0 +1,606 @@
+name: GraphQL and OpenAPI Breaking Changes Detection
+
+on:
+ pull_request:
+    types: [opened, synchronize, edited]
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+env:
+  MAIN_SERVER_PORT: 3000
+  CURRENT_SERVER_PORT: 3002
+
+permissions:
+  contents: read
+
+jobs:
+  changed-files-check:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        package.json
+        packages/twenty-server/**
+        packages/twenty-emails/**
+        packages/twenty-shared/**
+        .github/workflows/ci-breaking-changes.yaml
+
+  api-breaking-changes:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 45
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+      clickhouse:
+        image: clickhouse/clickhouse-server:25.8.8
+        env:
+          CLICKHOUSE_PASSWORD: clickhousePassword
+          CLICKHOUSE_URL: "http://default:clickhousePassword@localhost:8123/twenty"
+        ports:
+          - 8123:8123
+          - 9000:9000
+        options: >-
+          --health-cmd "clickhouse-client --host=localhost --port=9000 --user=default --password=clickhousePassword --query='SELECT 1'"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - name: Checkout current branch
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+
+      - name: Try to merge main into current branch
+        id: merge_attempt
+        run: |
+          echo "Attempting to merge main into current branch..."
+
+          git fetch origin main
+
+          CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
+          echo "Current branch: $CURRENT_BRANCH"
+
+          if git merge origin/main --no-edit; then
+            echo "✅ Successfully merged main into current branch"
+            echo "merged=true" >> $GITHUB_OUTPUT
+            echo "BRANCH_STATE=merged" >> $GITHUB_ENV
+          else
+            echo "❌ Merge failed due to conflicts"
+            echo "⚠️ Falling back to comparing current branch against main without merge"
+
+            # Abort the failed merge
+            git merge --abort
+
+            echo "merged=false" >> $GITHUB_OUTPUT
+            echo "BRANCH_STATE=conflicts" >> $GITHUB_ENV
+          fi
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Build shared dependencies
+        run: |
+          npx nx build twenty-shared
+          npx nx build twenty-emails
+
+      - name: Build current branch server
+        run: npx nx build twenty-server
+
+      - name: Setup databases
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "current_branch";'
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "main_branch";'
+
+      - name: Run ClickHouse migrations
+        run: npx nx clickhouse:migrate twenty-server
+        env:
+          CLICKHOUSE_URL: http://default:clickhousePassword@localhost:8123/twenty
+          CLICKHOUSE_PASSWORD: clickhousePassword
+
+      - name: Setup current branch database
+        run: |
+          npx nx reset:env twenty-server
+          set_env_var() {
+            local var_name="$1"
+            local var_value="$2"
+            local env_file="packages/twenty-server/.env"
+
+            echo "" >> "$env_file"
+
+            if grep -q "^${var_name}=" "$env_file" 2>/dev/null; then
+              sed -i "s|^${var_name}=.*|${var_name}=${var_value}|" "$env_file"
+            else
+              echo "${var_name}=${var_value}" >> "$env_file"
+            fi
+          }
+
+          set_env_var "PG_DATABASE_URL" "postgres://postgres:postgres@localhost:5432/current_branch"
+          set_env_var "NODE_PORT" "${{ env.CURRENT_SERVER_PORT }}"
+          set_env_var "REDIS_URL" "redis://localhost:6379"
+          set_env_var "CLICKHOUSE_URL" "http://default:clickhousePassword@localhost:8123/twenty"
+          set_env_var "CLICKHOUSE_PASSWORD" "clickhousePassword"
+
+          npx nx run twenty-server:database:init:prod
+          npx nx run twenty-server:database:migrate:prod
+
+      - name: Seed current branch database with test data
+        run: |
+          npx nx command-no-deps twenty-server -- workspace:seed:dev
+
+      - name: Start current branch server in background
+        run: |
+          echo "=== Current branch .env file contents ==="
+          cat packages/twenty-server/.env
+          echo "=== Starting current branch server ==="
+          nohup npx nx run twenty-server:start:prod > /tmp/current-server.log 2>&1 &
+          echo $! > /tmp/current-server.pid
+          echo "Current server PID: $(cat /tmp/current-server.pid)"
+
+      - name: Wait for current branch server to be ready
+        run: |
+          echo "Waiting for current branch server to start..."
+          timeout=300
+          interval=5
+          elapsed=0
+
+          while [ $elapsed -lt $timeout ]; do
+            if curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
+               curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
+              echo "Current branch server is ready!"
+              break
+            fi
+
+            echo "Current branch server not ready yet, waiting ${interval}s..."
+            sleep $interval
+            elapsed=$((elapsed + interval))
+          done
+
+          if [ $elapsed -ge $timeout ]; then
+            echo "Timeout waiting for current branch server to start"
+            echo "Current server log:"
+            cat /tmp/current-server.log || echo "No current server log found"
+            exit 1
+          fi
+
+      - name: Download GraphQL and REST responses from current branch
+        run: |
+          # Read admin token from shared test tokens file (single source of truth)
+          ADMIN_TOKEN=$(jq -r '.APPLE_JANE_ADMIN_ACCESS_TOKEN' packages/twenty-server/test/integration/constants/test-tokens.json)
+
+          # Load introspection query from file
+          INTROSPECTION_QUERY=$(cat packages/twenty-utils/graphql-introspection-query.graphql)
+
+          # Prepare the query payload
+          QUERY_PAYLOAD=$(echo "$INTROSPECTION_QUERY" | tr '\n' ' ' | sed 's/"/\\"/g')
+
+          echo "Downloading GraphQL schema from current server..."
+          curl -X POST "http://localhost:${{ env.CURRENT_SERVER_PORT }}/graphql" \
+            -H "Content-Type: application/json" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
+            -o current-schema-introspection.json \
+            -w "HTTP Status: %{http_code}\n" \
+            -s
+
+          echo "Downloading GraphQL metadata schema from current server..."
+          curl -X POST "http://localhost:${{ env.CURRENT_SERVER_PORT }}/metadata" \
+            -H "Content-Type: application/json" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
+            -o current-metadata-schema-introspection.json \
+            -w "HTTP Status: %{http_code}\n" \
+            -s
+
+          # Download current branch OpenAPI specs
+          echo "Downloading OpenAPI specifications from current server..."
+          curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/core" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -o current-rest-api.json \
+            -w "HTTP Status: %{http_code}\n"
+
+          curl -s "http://localhost:${{ env.CURRENT_SERVER_PORT }}/rest/open-api/metadata" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -o current-rest-metadata-api.json \
+            -w "HTTP Status: %{http_code}\n"
+
+          # Verify the downloads
+          echo "Current branch files downloaded:"
+          ls -la current-*
+
+
+      - name: Preserve current branch files
+        run: |
+          # Create a temp directory to store current branch files
+          mkdir -p /tmp/current-branch-files
+
+          # Move current branch files to temp directory
+          mv current-* /tmp/current-branch-files/ 2>/dev/null || echo "No current-* files to preserve"
+
+          echo "Preserved current branch files for later restoration"
+
+      - name: Stop current branch server
+        run: |
+          if [ -f /tmp/current-server.pid ]; then
+            echo "Stopping current branch server..."
+            kill $(cat /tmp/current-server.pid) || true
+            # Wait a bit for graceful shutdown
+            sleep 5
+            # Force kill if still running
+            kill -9 $(cat /tmp/current-server.pid) 2>/dev/null || true
+            rm -f /tmp/current-server.pid
+          fi
+
+      - name: Checkout main branch
+        run: |
+          git stash
+          git checkout origin/main
+          git reset --hard
+          git clean -xfd -ff
+          rm -rf node_modules packages/*/node_modules packages/*/dist dist .nx/cache
+
+      - name: Install dependencies for main branch
+        uses: ./.github/actions/yarn-install
+
+      - name: Build main branch dependencies
+        run: |
+          npx nx reset
+          npx nx build twenty-shared
+          npx nx build twenty-emails
+
+      - name: Build main branch server
+        run: npx nx build twenty-server
+
+      - name: Setup main branch database
+        run: |
+          npx nx reset:env twenty-server
+          set_env_var() {
+            local var_name="$1"
+            local var_value="$2"
+            local env_file="packages/twenty-server/.env"
+
+            echo "" >> "$env_file"
+
+            if grep -q "^${var_name}=" "$env_file" 2>/dev/null; then
+              sed -i "s|^${var_name}=.*|${var_name}=${var_value}|" "$env_file"
+            else
+              echo "${var_name}=${var_value}" >> "$env_file"
+            fi
+          }
+
+          set_env_var "PG_DATABASE_URL" "postgres://postgres:postgres@localhost:5432/main_branch"
+          set_env_var "NODE_PORT" "${{ env.MAIN_SERVER_PORT }}"
+          set_env_var "REDIS_URL" "redis://localhost:6379"
+          set_env_var "CLICKHOUSE_URL" "http://default:clickhousePassword@localhost:8123/twenty"
+          set_env_var "CLICKHOUSE_PASSWORD" "clickhousePassword"
+
+          npx nx run twenty-server:database:init:prod
+          npx nx run twenty-server:database:migrate:prod
+
+      - name: Seed main branch database with test data
+        run: |
+          npx nx command-no-deps twenty-server -- workspace:seed:dev
+
+      - name: Start main branch server in background
+        run: |
+          echo "=== Main branch .env file contents ==="
+          cat packages/twenty-server/.env
+          echo "=== Starting main branch server ==="
+          nohup npx nx run twenty-server:start:prod > /tmp/main-server.log 2>&1 &
+          echo $! > /tmp/main-server.pid
+          echo "Main server PID: $(cat /tmp/main-server.pid)"
+
+      - name: Wait for main branch server to be ready
+        run: |
+          echo "Waiting for main branch server to start..."
+          timeout=300
+          interval=5
+          elapsed=0
+
+          while [ $elapsed -lt $timeout ]; do
+            if curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" > /dev/null 2>&1 && \
+               curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" > /dev/null 2>&1; then
+              echo "Main branch server is ready!"
+              break
+            fi
+
+            echo "Main branch server not ready yet, waiting ${interval}s..."
+            sleep $interval
+            elapsed=$((elapsed + interval))
+          done
+
+          if [ $elapsed -ge $timeout ]; then
+            echo "Timeout waiting for main branch server to start"
+            echo "Main server log:"
+            cat /tmp/main-server.log || echo "No main server log found"
+            exit 1
+          fi
+
+      - name: Download GraphQL and REST responses from main branch
+        run: |
+          # Read admin token from shared test tokens file (single source of truth)
+          ADMIN_TOKEN=$(jq -r '.APPLE_JANE_ADMIN_ACCESS_TOKEN' packages/twenty-server/test/integration/constants/test-tokens.json)
+
+          # Load introspection query from file
+          INTROSPECTION_QUERY=$(cat packages/twenty-utils/graphql-introspection-query.graphql)
+
+          # Prepare the query payload
+          QUERY_PAYLOAD=$(echo "$INTROSPECTION_QUERY" | tr '\n' ' ' | sed 's/"/\\"/g')
+
+          echo "Downloading GraphQL schema from main server..."
+          curl -X POST "http://localhost:${{ env.MAIN_SERVER_PORT }}/graphql" \
+            -H "Content-Type: application/json" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
+            -o main-schema-introspection.json \
+            -w "HTTP Status: %{http_code}\n" \
+            -s
+
+          echo "Downloading GraphQL metadata schema from main server..."
+          curl -X POST "http://localhost:${{ env.MAIN_SERVER_PORT }}/metadata" \
+            -H "Content-Type: application/json" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -d "{\"query\":\"${QUERY_PAYLOAD}\"}" \
+            -o main-metadata-schema-introspection.json \
+            -w "HTTP Status: %{http_code}\n" \
+            -s
+
+          # Download main branch OpenAPI specs
+          echo "Downloading OpenAPI specifications from main server..."
+          curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/core" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -o main-rest-api.json \
+            -w "HTTP Status: %{http_code}\n"
+
+          curl -s "http://localhost:${{ env.MAIN_SERVER_PORT }}/rest/open-api/metadata" \
+            -H "Authorization: Bearer ${ADMIN_TOKEN}" \
+            -o main-rest-metadata-api.json \
+            -w "HTTP Status: %{http_code}\n"
+
+          # Verify the downloads
+          echo "Main branch files downloaded:"
+          ls -la main-*
+
+
+      - name: Restore current branch files
+        run: |
+          # Move current branch files back to working directory
+          mv /tmp/current-branch-files/* . 2>/dev/null || echo "No files to restore"
+
+          # Verify all files are present
+          echo "All API files restored:"
+          ls -la current-* main-* 2>/dev/null || echo "Some files may be missing"
+
+          # Clean up temp directory
+          rm -rf /tmp/current-branch-files
+
+      - name: Install OpenAPI Diff Tool
+        run: |
+          # Using the Java-based OpenAPITools/openapi-diff via Docker
+          echo "Using OpenAPITools/openapi-diff via Docker"
+
+      - name: Generate GraphQL Schema Diff Reports
+        run: |
+          echo "=== INSTALLING GRAPHQL INSPECTOR CLI ==="
+          npm install -g @graphql-inspector/cli
+
+          echo "=== GENERATING GRAPHQL DIFF REPORTS ==="
+
+          # Check if GraphQL schema has changes
+          echo "Checking GraphQL schema for changes..."
+          if graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >/dev/null 2>&1; then
+            echo "✅ No changes in GraphQL schema"
+            # Don't create a diff file for no changes
+          else
+            echo "⚠️ Changes detected in GraphQL schema, generating report..."
+            echo "# GraphQL Schema Changes" > graphql-schema-diff.md
+            echo "" >> graphql-schema-diff.md
+            graphql-inspector diff main-schema-introspection.json current-schema-introspection.json >> graphql-schema-diff.md 2>&1 || {
+              echo "⚠️ **Breaking changes or errors detected in GraphQL schema**" >> graphql-schema-diff.md
+              echo "" >> graphql-schema-diff.md
+              echo "\`\`\`" >> graphql-schema-diff.md
+              graphql-inspector diff main-schema-introspection.json current-schema-introspection.json 2>&1 >> graphql-schema-diff.md || echo "Error generating diff" >> graphql-schema-diff.md
+              echo "\`\`\`" >> graphql-schema-diff.md
+            }
+          fi
+
+          # Check if GraphQL metadata schema has changes
+          echo "Checking GraphQL metadata schema for changes..."
+          if graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >/dev/null 2>&1; then
+            echo "✅ No changes in GraphQL metadata schema"
+            # Don't create a diff file for no changes
+          else
+            echo "⚠️ Changes detected in GraphQL metadata schema, generating report..."
+            echo "# GraphQL Metadata Schema Changes" > graphql-metadata-diff.md
+            echo "" >> graphql-metadata-diff.md
+            graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json >> graphql-metadata-diff.md 2>&1 || {
+              echo "⚠️ **Breaking changes or errors detected in GraphQL metadata schema**" >> graphql-metadata-diff.md
+              echo "" >> graphql-metadata-diff.md
+              echo "\`\`\`" >> graphql-metadata-diff.md
+              graphql-inspector diff main-metadata-schema-introspection.json current-metadata-schema-introspection.json 2>&1 >> graphql-metadata-diff.md || echo "Error generating diff" >> graphql-metadata-diff.md
+              echo "\`\`\`" >> graphql-metadata-diff.md
+            }
+          fi
+
+          # Show summary
+          echo "Generated diff files:"
+          ls -la *-diff.md 2>/dev/null || echo "No diff files generated (no changes detected)"
+
+      - name: Check REST API Breaking Changes
+        run: |
+          echo "=== CHECKING REST API FOR BREAKING CHANGES ==="
+
+          # Use the Java-based openapi-diff via Docker
+          docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest \
+            --json /specs/rest-api-diff.json \
+            /specs/main-rest-api.json /specs/current-rest-api.json || echo "OpenAPI diff completed with exit code $?"
+
+          # Check if the output file was created and is valid JSON
+          if [ -f "rest-api-diff.json" ] && jq empty rest-api-diff.json 2>/dev/null; then
+            # Check for breaking changes using Java openapi-diff JSON structure
+            incompatible=$(jq -r '.incompatible // false' rest-api-diff.json)
+            different=$(jq -r '.different // false' rest-api-diff.json)
+
+            # Count changes
+            new_endpoints=$(jq -r '.newEndpoints | length' rest-api-diff.json 2>/dev/null || echo "0")
+            missing_endpoints=$(jq -r '.missingEndpoints | length' rest-api-diff.json 2>/dev/null || echo "0")
+            changed_operations=$(jq -r '.changedOperations | length' rest-api-diff.json 2>/dev/null || echo "0")
+
+            if [ "$incompatible" = "true" ]; then
+              echo "❌ Breaking changes detected in REST API"
+
+              # Generate breaking changes report
+              echo "# REST API Breaking Changes" > rest-api-diff.md
+              echo "" >> rest-api-diff.md
+              echo "⚠️ **Breaking changes detected that may affect existing API consumers**" >> rest-api-diff.md
+              echo "" >> rest-api-diff.md
+
+              # Parse and format the changes from Java openapi-diff
+              jq -r '
+                if (.missingEndpoints | length) > 0 then
+                  "## 🚨 Removed Endpoints (" + (.missingEndpoints | length | tostring) + ")\n" +
+                  (.missingEndpoints | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "")) | join("\n"))
+                else "" end,
+                if (.changedOperations | length) > 0 then
+                  "\n## ⚠️ Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
+                  (.changedOperations | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "Modified operation")) | join("\n"))
+                else "" end,
+                if (.newEndpoints | length) > 0 then
+                  "\n## ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
+                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
+                else "" end
+              ' rest-api-diff.json >> rest-api-diff.md
+
+            elif [ "$different" = "true" ]; then
+              echo "📝 Non-breaking changes detected ($new_endpoints new endpoints, $missing_endpoints removed, $changed_operations changed) - no PR comment will be posted"
+              # Don't create markdown file for non-breaking changes to avoid PR comments
+            else
+              echo "✅ No changes detected in REST API"
+              # Don't create diff file for no changes
+            fi
+          else
+            echo "⚠️ OpenAPI diff tool could not process the files"
+
+            echo "# REST API Analysis Error" > rest-api-diff.md
+            echo "" >> rest-api-diff.md
+            echo "⚠️ **Error occurred while analyzing REST API changes**" >> rest-api-diff.md
+            echo "" >> rest-api-diff.md
+            echo "## Error Output" >> rest-api-diff.md
+            echo "\`\`\`" >> rest-api-diff.md
+            docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest /specs/main-rest-api.json /specs/current-rest-api.json 2>&1 >> rest-api-diff.md || echo "Could not capture error output"
+            echo "\`\`\`" >> rest-api-diff.md
+
+            # Don't fail the workflow for tool errors
+            echo "::warning::REST API analysis tool error - continuing workflow"
+          fi
+
+      - name: Check REST Metadata API Breaking Changes
+        run: |
+          echo "=== CHECKING REST METADATA API FOR BREAKING CHANGES ==="
+
+          # Use the Java-based openapi-diff for metadata API as well
+          docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest \
+            --json /specs/rest-metadata-api-diff.json \
+            /specs/main-rest-metadata-api.json /specs/current-rest-metadata-api.json || echo "OpenAPI diff completed with exit code $?"
+
+          # Check if the output file was created and is valid JSON
+          if [ -f "rest-metadata-api-diff.json" ] && jq empty rest-metadata-api-diff.json 2>/dev/null; then
+            # Check for breaking changes using Java openapi-diff JSON structure
+            incompatible=$(jq -r '.incompatible // false' rest-metadata-api-diff.json)
+            different=$(jq -r '.different // false' rest-metadata-api-diff.json)
+
+            # Count changes
+            new_endpoints=$(jq -r '.newEndpoints | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
+            missing_endpoints=$(jq -r '.missingEndpoints | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
+            changed_operations=$(jq -r '.changedOperations | length' rest-metadata-api-diff.json 2>/dev/null || echo "0")
+
+            if [ "$incompatible" = "true" ]; then
+              echo "❌ Breaking changes detected in REST Metadata API"
+
+              # Generate breaking changes report (only for breaking changes)
+              echo "# REST Metadata API Breaking Changes" > rest-metadata-api-diff.md
+              echo "" >> rest-metadata-api-diff.md
+              echo "⚠️ **Breaking changes detected that may affect existing API consumers**" >> rest-metadata-api-diff.md
+              echo "" >> rest-metadata-api-diff.md
+
+              # Parse and format the changes from Java openapi-diff
+              jq -r '
+                if (.missingEndpoints | length) > 0 then
+                  "## 🚨 Removed Endpoints (" + (.missingEndpoints | length | tostring) + ")\n" +
+                  (.missingEndpoints | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "")) | join("\n"))
+                else "" end,
+                if (.changedOperations | length) > 0 then
+                  "\n## ⚠️ Changed Operations (" + (.changedOperations | length | tostring) + ")\n" +
+                  (.changedOperations | map("- **" + .method + " " + .pathUrl + "**: " + (.summary // "Modified operation")) | join("\n"))
+                else "" end,
+                if (.newEndpoints | length) > 0 then
+                  "\n## ✅ New Endpoints (" + (.newEndpoints | length | tostring) + ")\n" +
+                  (.newEndpoints | map("- " + .method + " " + .pathUrl + ": " + (.summary // "")) | join("\n"))
+                else "" end
+              ' rest-metadata-api-diff.json >> rest-metadata-api-diff.md
+
+            elif [ "$different" = "true" ]; then
+              echo "📝 Non-breaking changes detected ($new_endpoints new endpoints, $missing_endpoints removed, $changed_operations changed) - no PR comment will be posted"
+              # Don't create markdown file for non-breaking changes to avoid PR comments
+            else
+              echo "✅ No changes detected in REST Metadata API"
+            fi
+          else
+            echo "⚠️ OpenAPI diff tool could not process the metadata API files"
+
+            echo "# REST Metadata API Analysis Error" > rest-metadata-api-diff.md
+            echo "" >> rest-metadata-api-diff.md
+            echo "⚠️ **Error occurred while analyzing REST Metadata API changes**" >> rest-metadata-api-diff.md
+            echo "" >> rest-metadata-api-diff.md
+            echo "## Error Output" >> rest-metadata-api-diff.md
+            echo "\`\`\`" >> rest-metadata-api-diff.md
+            docker run --rm -v "$(pwd):/specs" openapitools/openapi-diff:latest /specs/main-rest-metadata-api.json /specs/current-rest-metadata-api.json 2>&1 >> rest-metadata-api-diff.md || echo "Could not capture error output"
+            echo "\`\`\`" >> rest-metadata-api-diff.md
+
+            # Don't fail the workflow for tool errors
+            echo "::warning::REST Metadata API analysis tool error - continuing workflow"
+          fi
+
+      - name: Upload breaking changes report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: breaking-changes-report
+          path: |
+            *-diff.md
+            *-diff.json
+          if-no-files-found: ignore
+          retention-days: 3
+
+      - name: Cleanup servers
+        if: always()
+        run: |
+          if [ -f /tmp/current-server.pid ]; then
+            kill $(cat /tmp/current-server.pid) || true
+          fi
+          if [ -f /tmp/main-server.pid ]; then
+            kill $(cat /tmp/main-server.pid) || true
+          fi
+
+

.github/workflows/ci-chrome-extension.yaml

@@ -1,48 +0,0 @@
-name: CI Chrome Extension
-on:
-  push:
-    branches:
-      - main
-
-  pull_request:
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-        package.json
-        packages/twenty-chrome-extension/**
-  chrome-extension-build:
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true'
-    timeout-minutes: 15
-    runs-on: ubuntu-latest
-    env:
-      VITE_SERVER_BASE_URL: http://localhost:3000
-      VITE_FRONT_BASE_URL: http://localhost:3001
-    steps:
-      - name: Cancel Previous Runs
-        uses: styfle/cancel-workflow-action@0.11.0
-        with:
-          access_token: ${{ github.token }}
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - name: Chrome Extension / Run build
-        run: npx nx build twenty-chrome-extension
-  ci-chrome-extension-status-check:
-    if: always() && !cancelled()
-    timeout-minutes: 5
-    runs-on: ubuntu-latest
-    needs: [changed-files-check, chrome-extension-build]
-    steps:
-      - name: Fail job if any needs failed
-        if: contains(needs.*.result, 'failure')
-        run: exit 1

.github/workflows/ci-create-app-e2e.yaml

@@ -0,0 +1,184 @@
+name: CI Create App E2E
+
+on:
+  push:
+    branches:
+      - main
+
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  changed-files-check:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        packages/create-twenty-app/**
+        packages/twenty-sdk/**
+        packages/twenty-shared/**
+        packages/twenty-server/**
+        !packages/create-twenty-app/package.json
+        !packages/twenty-sdk/package.json
+        !packages/twenty-shared/package.json
+        !packages/twenty-server/package.json
+  create-app-e2e:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest-4-cores
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Set CI version and prepare packages for publish
+        run: |
+          CI_VERSION="0.0.0-ci.$(date +%s)"
+          echo "CI_VERSION=$CI_VERSION" >> $GITHUB_ENV
+          npx nx run-many -t set-local-version -p twenty-sdk create-twenty-app --releaseVersion=$CI_VERSION
+
+      - name: Build packages
+        run: |
+          npx nx build twenty-sdk
+          npx nx build create-twenty-app
+
+      - name: Install and start Verdaccio
+        run: |
+          npx verdaccio --config .github/verdaccio-config.yaml &
+
+          for i in $(seq 1 30); do
+            if curl -s http://localhost:4873 > /dev/null 2>&1; then
+              echo "Verdaccio is ready"
+              break
+            fi
+            echo "Waiting for Verdaccio... ($i/30)"
+            sleep 1
+          done
+
+      - name: Publish packages to local registry
+        run: |
+          npm set //localhost:4873/:_authToken "ci-auth-token"
+
+          for pkg in twenty-sdk create-twenty-app; do
+            cd packages/$pkg
+            npm publish --registry http://localhost:4873 --tag ci
+            cd ../..
+          done
+
+      - name: Scaffold app using published create-twenty-app
+        run: |
+          npm install -g create-twenty-app@$CI_VERSION --registry http://localhost:4873
+          create-twenty-app --version
+          mkdir -p /tmp/e2e-test-workspace
+          cd /tmp/e2e-test-workspace
+          create-twenty-app test-app --exhaustive --display-name "Test App" --description "E2E test app" --skip-local-instance
+
+      - name: Install scaffolded app dependencies
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          echo 'npmRegistryServer: "http://localhost:4873"' >> .yarnrc.yml
+          echo 'unsafeHttpWhitelist: ["localhost"]' >> .yarnrc.yml
+          YARN_ENABLE_IMMUTABLE_INSTALLS=false yarn install --no-immutable
+
+      - name: Verify installed app versions
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          echo "--- Checking package.json references correct SDK version ---"
+          node -e "
+            const pkg = require('./package.json');
+            const sdkVersion = pkg.devDependencies['twenty-sdk'];
+            if (!sdkVersion.startsWith('0.0.0-ci.')) {
+              console.error('Expected twenty-sdk version to start with 0.0.0-ci., got:', sdkVersion);
+              process.exit(1);
+            }
+            console.log('SDK version in scaffolded app:', sdkVersion);
+          "
+
+      - name: Verify SDK CLI is available
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          npx --no-install twenty --version
+
+      - name: Setup server environment
+        run: npx nx reset:env:e2e-testing-server twenty-server
+
+      - name: Build server
+        run: npx nx build twenty-server
+
+      - name: Create and setup database
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
+          npx nx run twenty-server:database:reset
+
+      - name: Start server
+        run: |
+          npx nx start twenty-server &
+          echo "Waiting for server to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
+
+      - name: Authenticate with twenty-server
+        env:
+          SEED_API_KEY: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ1c2VySWQiOiIyMDIwMjAyMC1lNmI1LTQ2ODAtOGEzMi1iODIwOTczNzE1NmIiLCJ3b3Jrc3BhY2VJZCI6IjIwMjAyMDIwLTFjMjUtNGQwMi1iZjI1LTZhZWNjZjdlYTQxOSIsIndvcmtzcGFjZU1lbWJlcklkIjoiMjAyMDIwMjAtNDYzZi00MzViLTgyOGMtMTA3ZTAwN2EyNzExIiwidXNlcldvcmtzcGFjZUlkIjoiMjAyMDIwMjAtMWU3Yy00M2Q5LWE1ZGItNjg1YjUwNjlkODE2IiwidHlwZSI6IkFDQ0VTUyIsImF1dGhQcm92aWRlciI6InBhc3N3b3JkIiwiaWF0IjoxNzUxMjgxNzA0LCJleHAiOjIwNjY4NTc3MDR9.HMGqCsVlOAPVUBhKSGlD1X86VoHKt4LIUtET3CGIdik'
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          npx --no-install twenty remote add --token $SEED_API_KEY --url http://localhost:3000
+
+      - name: Build scaffolded app
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          npx --no-install twenty build
+          test -d .twenty/output
+
+      - name: Execute hello-world logic function
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          EXEC_OUTPUT=$(npx --no-install twenty exec --functionName hello-world-logic-function)
+          echo "$EXEC_OUTPUT"
+          echo "$EXEC_OUTPUT" | grep -q "Hello, World!"
+
+      - name: Run scaffolded app integration test
+        env:
+          TWENTY_API_URL: http://localhost:3000
+        run: |
+          cd /tmp/e2e-test-workspace/test-app
+          yarn test
+
+  ci-create-app-e2e-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [changed-files-check, create-app-e2e]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/ci-create-app.yaml

@@ -0,0 +1,58 @@
+name: CI Create App
+
+on:
+  push:
+    branches:
+      - main
+
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  changed-files-check:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        packages/create-twenty-app/**
+        !packages/create-twenty-app/package.json
+  create-app-test:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        task: [lint, typecheck, test]
+    steps:
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
+        with:
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build
+        run: npx nx build create-twenty-app
+      - name: Run ${{ matrix.task }} task
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:create-app
+          tasks: ${{ matrix.task }}
+  ci-create-app-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [changed-files-check, create-app-test]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/ci-demo-check.yml

@@ -1,63 +0,0 @@
-name: CI Demo check
-on:
-  schedule:
-    - cron: '30 7,19 * * *'
-  workflow_dispatch:
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  test:
-    timeout-minutes: 15
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: ./packages/twenty-e2e-testing
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-node@v4
-        with:
-          node-version: lts/*
-
-      - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-
-      - name: Install Playwright Browsers
-        run: yarn playwright install --with-deps
-
-      - name: Run Playwright tests
-        id: test
-        run: yarn playwright test --grep "@demo-only"
-
-      - name: Upload report after tests
-        uses: actions/upload-artifact@v4
-        with:
-          name: playwright-report
-          path: playwright-report/
-          retention-days: 90
-
-      - name: Send Discord notification
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.3.2
-        with:
-          args: 'Demo check ${{ steps.test.outcome }} - check ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}'
-
-      - name: Send email if demo is not working
-        if: steps.test.outcome == 'failure'
-        uses: dawidd6/action-send-mail@v3.12.0
-        with:
-          connection_url: ${{ secrets.MAIL_CONNECTION }}
-          server_address: smtp.gmail.com
-          server_port: 465
-          secure: true
-          username: ${{ secrets.MAIL_USERNAME }}
-          subject: 'Demo is not working'
-          from: 'Github CI Demo check'
-          to: ${{ secrets.RECIPIENTS }}
-          body: '<a href="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}">Link</a>'
-          priority: high

.github/workflows/ci-docs.yaml

@@ -0,0 +1,46 @@
+name: CI Docs
+
+on:
+  push:
+    branches:
+      - main
+
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  changed-files-check:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        package.json
+        packages/twenty-docs/**
+
+  docs-lint:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    steps:
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
+        with:
+          access_token: ${{ github.token }}
+
+      - name: Fetch local actions
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Docs / Lint
+        run: npx nx lint twenty-docs
+

.github/workflows/ci-e2e.yaml

@@ -1,133 +0,0 @@
-name: CI E2E Playwright Tests
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    types: [opened, synchronize, reopened, labeled]
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  changed-files-check:
-    uses: ./.github/workflows/changed-files.yaml
-    with:
-      files: |
-          packages/**
-          playwright.config.ts
-          .github/workflows/ci-e2e.yaml
-  test:
-    runs-on: ubuntu-latest
-    needs: changed-files-check
-    if: needs.changed-files-check.outputs.any_changed == 'true' && ( github.event_name == 'push' || (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'run-e2e')))
-    timeout-minutes: 30
-    env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
-      # https://github.com/actions/runner-images/issues/70#issuecomment-589562148
-      NODE_OPTIONS: "--max-old-space-size=10240"
-    services:
-      postgres:
-        image: twentycrm/twenty-postgres-spilo
-        env:
-          PGUSER_SUPERUSER: postgres
-          PGPASSWORD_SUPERUSER: postgres
-          ALLOW_NOSSL: "true"
-          SPILO_PROVIDER: "local"
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-      redis:
-        image: redis
-        ports:
-          - 6379:6379
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - uses: actions/setup-node@v4
-      with:
-        node-version: lts/*
-
-    - name: Check system resources
-      run: |
-        echo "Available memory:"
-        free -h
-        echo "Available disk space:"
-        df -h
-        echo "CPU info:"
-        lscpu
-
-    - name: Install dependencies
-      uses: ./.github/workflows/actions/yarn-install
-
-    - name: Build twenty-shared
-      run: npx nx build twenty-shared
-
-    - name: Install Playwright Browsers
-      run: npx nx setup twenty-e2e-testing
-
-    - name: Setup environment files
-      run: |
-        cp packages/twenty-front/.env.example packages/twenty-front/.env
-        npx nx reset:env twenty-server
-
-    - name: Build frontend
-      run: NODE_ENV=production NODE_OPTIONS="--max-old-space-size=10240" npx nx build twenty-front
-
-    - name: Build server
-      run: npx nx build twenty-server
-
-    - name: Create and setup database
-      run: |
-        PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
-        PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
-        npx nx run twenty-server:database:reset
-
-    - name: Start server
-      run: |
-        npx nx start twenty-server &
-        echo "Waiting for server to be ready..."
-        timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
-
-    - name: Start frontend
-      run: |
-        npm_config_yes=true npx serve -s packages/twenty-front/build -l 3001 &
-        echo "Waiting for frontend to be ready..."
-        timeout 60 bash -c 'until curl -s http://localhost:3001; do sleep 2; done'
-        
-    - name: Start worker
-      run: |
-        npx nx run twenty-server:worker &
-        echo "Worker started"
-
-    - name: Run Playwright tests
-      run: npx nx test twenty-e2e-testing
-
-    - uses: actions/upload-artifact@v4
-      if: always()
-      with:
-        name: playwright-report
-        path: packages/twenty-e2e-testing/run_results/
-        retention-days: 30
-
-    - uses: actions/upload-artifact@v4
-      if: always()
-      with:
-        name: playwright-report
-        path: packages/twenty-e2e-testing/playwright-report/
-        retention-days: 30
-  ci-e2e-status-check:
-      if: always() && !cancelled()
-      timeout-minutes: 5
-      runs-on: ubuntu-latest
-      needs: [changed-files-check, test]
-      steps:
-        - name: Fail job if any needs failed
-          if: contains(needs.*.result, 'failure')
-          run: exit 1

.github/workflows/ci-emails.yaml

@@ -1,4 +1,8 @@
 name: CI Emails
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -8,7 +12,7 @@ on:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
@@ -21,16 +25,14 @@ jobs:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 10
-    runs-on: depot-ubuntu-24.04-8
-    env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+    runs-on: ubuntu-latest
     steps:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Build twenty-emails
         run: npx nx build twenty-emails
       - name: Run email tests
@@ -38,25 +40,25 @@ jobs:
           # Start the email server in the background
           npx nx run twenty-emails:start &
           SERVER_PID=$!
-          
+
           # Wait for server to start
           sleep 20
-          
+
           # Check if server is running
           if ! curl -s http://localhost:4001/preview/test.email > /dev/null; then
             echo "Email server failed to start"
             kill $SERVER_PID
             exit 1
           fi
-          
+
           # Kill the server
           kill $SERVER_PID
   ci-emails-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
-    runs-on: depot-ubuntu-24.04-8
+    runs-on: ubuntu-latest
     needs: [changed-files-check, emails-test]
     steps:
       - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')
-        run: exit 1 
+        run: exit 1

.github/workflows/ci-front.yaml

@@ -1,35 +1,41 @@
 name: CI Front
-on:
-  push:
-    branches:
-      - main
 
+on:
   pull_request:
+  merge_group:
+
+permissions:
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 env:
-  STORYBOOK_BUILD_CACHE_KEY: storybook-build-depot-ubuntu-24.04-8-runner
+  # restore-cache action adds 'v4-' prefix and '-<branch>-<sha>' suffix to the key
+  STORYBOOK_BUILD_CACHE_KEY_FOR_RESTORE_ACTION: storybook-build-ubuntu-latest-8-cores-runner
+  STORYBOOK_BUILD_CACHE_KEY_FOR_SAVE_ACTION: v4-storybook-build-ubuntu-latest-8-cores-runner-${{ github.ref_name }}-${{ github.sha }}
 
 jobs:
   changed-files-check:
+    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         package.json
+        yarn.lock
         packages/twenty-front/**
         packages/twenty-ui/**
         packages/twenty-shared/**
+        packages/twenty-sdk/**
+        !packages/twenty-sdk/package.json
   front-sb-build:
-    needs: [changed-files-check]
+    needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
+    runs-on: ubuntu-latest-8-cores
     env:
       REACT_APP_SERVER_BASE_URL: http://localhost:3000
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
     steps:
       - name: Cancel Previous Runs
         uses: styfle/cancel-workflow-action@0.11.0
@@ -38,27 +44,28 @@ jobs:
       - name: Fetch local actions
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Diagnostic disk space issue
         run: df -h
-      - name: Restore storybook build cache
-        id: restore-storybook-build-cache
-        uses: ./.github/workflows/actions/restore-cache
-        with:
-          key: ${{ env.STORYBOOK_BUILD_CACHE_KEY }}
       - name: Front / Write .env
         run: npx nx reset:env twenty-front
       - name: Front / Build storybook
         run: npx nx storybook:build twenty-front
-      - name: Save storybook build cache
-        uses: ./.github/workflows/actions/save-cache
+      - name: Upload storybook build
+        uses: actions/upload-artifact@v4
         with:
-          key: ${{ steps.restore-storybook-build-cache.outputs.cache-primary-key }}
+          name: storybook-static
+          path: packages/twenty-front/storybook-static
+          retention-days: 1
+      - name: Save storybook build cache
+        uses: ./.github/actions/save-cache
+        with:
+          key: ${{ env.STORYBOOK_BUILD_CACHE_KEY_FOR_SAVE_ACTION }}
   front-sb-test:
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
+    runs-on: ubuntu-latest
     needs: front-sb-build
     strategy:
       fail-fast: false
@@ -68,91 +75,89 @@ jobs:
     env:
       SHARD_COUNTER: 4
       REACT_APP_SERVER_BASE_URL: http://localhost:3000
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+      STORYBOOK_URL: http://localhost:6006
     steps:
       - name: Fetch local actions
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - name: Install Playwright
-        run: cd packages/twenty-front && npx playwright install
+        uses: ./.github/actions/yarn-install
       - name: Restore storybook build cache
-        uses: ./.github/workflows/actions/restore-cache
+        uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.STORYBOOK_BUILD_CACHE_KEY }}
-      - name: Front / Write .env
-        run: npx nx reset:env twenty-front
-      - name: Run storybook tests
-        run: npx nx storybook:serve-and-test:static twenty-front --configuration=${{ matrix.storybook_scope }} --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }} --checkCoverage=false
-      - name: Rename coverage file
-        run: mv packages/twenty-front/coverage/storybook/coverage-storybook.json packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
-      - name: Upload coverage artifact
-        uses: actions/upload-artifact@v4
-        with:
-          retention-days: 1
-          name: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-${{ matrix.shard }}
-          path: packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
-  merge-reports-and-check-coverage:
-    timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
-    needs: front-sb-test
-    env:
-      PATH_TO_COVERAGE: packages/twenty-front/coverage/storybook
-    strategy:
-      matrix:
-        storybook_scope: [modules, pages, performance]
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-*
-          merge-multiple: true
-          path: coverage-artifacts
-      - name: Merge coverage reports
+          key: ${{ env.STORYBOOK_BUILD_CACHE_KEY_FOR_RESTORE_ACTION }}
+      - name: Clean stale storybook vitest cache
+        run: rm -rf packages/twenty-front/node_modules/.cache/storybook
+      - name: Build dependencies
         run: |
-          mkdir -p ${{ env.PATH_TO_COVERAGE }}
-          npx nyc merge coverage-artifacts ${{ env.PATH_TO_COVERAGE }}/coverage-storybook.json
-      - name: Checking coverage
-        run: npx nx storybook:coverage twenty-front --checkCoverage=true --configuration=${{ matrix.storybook_scope }}
-  front-chromatic-deployment:
-    timeout-minutes: 30
-    if: contains(github.event.pull_request.labels.*.name, 'run-chromatic') || github.event_name == 'push'
-    needs: front-sb-build
-    runs-on: depot-ubuntu-24.04-8
-    env:
-      REACT_APP_SERVER_BASE_URL: http://127.0.0.1:3000
-      CHROMATIC_PROJECT_TOKEN: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
-    steps:
-      - uses: actions/checkout@v4
+          npx nx build twenty-shared
+          npx nx build twenty-ui
+          npx nx build twenty-sdk
+      - name: Download storybook build
+        uses: actions/download-artifact@v4
         with:
-          fetch-depth: 0
-      - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - name: Restore storybook build cache
-        uses: ./.github/workflows/actions/restore-cache
-        with:
-          key: ${{ env.STORYBOOK_BUILD_CACHE_KEY }}
-      - name: Front / Write .env
+          name: storybook-static
+          path: packages/twenty-front/storybook-static
+      - name: Install Playwright
         run: |
           cd packages/twenty-front
-          touch .env
-          echo "REACT_APP_SERVER_BASE_URL: $REACT_APP_SERVER_BASE_URL" >> .env
-      - name: Publish to Chromatic
-        run: npx nx run twenty-front:chromatic:ci
+          npx playwright install
+      - name: Front / Write .env
+        run: npx nx reset:env twenty-front
+      - name: Serve storybook & run tests
+        run: |
+          npx http-server packages/twenty-front/storybook-static --port 6006 --silent &
+          timeout 30 bash -c 'until curl -sf http://localhost:6006 > /dev/null 2>&1; do sleep 1; done'
+          npx nx storybook:test twenty-front --configuration=${{ matrix.storybook_scope }} --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }}
+      # - name: Rename coverage file
+      #   run: |
+      #     if [ -f "packages/twenty-front/coverage/storybook/coverage-final.json" ]; then
+      #       mv packages/twenty-front/coverage/storybook/coverage-final.json packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
+      #     else
+      #       echo "Error: coverage-final.json not found"
+      #       ls -la packages/twenty-front/coverage/storybook/ || echo "Coverage directory does not exist"
+      #       exit 1
+      #     fi
+      # - name: Upload coverage artifact
+      #   uses: actions/upload-artifact@v4
+      #   with:
+      #     retention-days: 1
+      #     name: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-${{ matrix.shard }}
+      #     path: packages/twenty-front/coverage/storybook/coverage-shard-${{matrix.shard}}.json
+  # merge-reports-and-check-coverage:
+  #   timeout-minutes: 30
+  #   runs-on: ubuntu-latest
+  #   needs: front-sb-test
+  #   env:
+  #     PATH_TO_COVERAGE: packages/twenty-front/coverage/storybook
+  #   strategy:
+  #     matrix:
+  #       storybook_scope: [modules, pages, performance]
+  #   steps:
+  #     - uses: actions/checkout@v4
+  #       with:
+  #         fetch-depth: 10
+  #     - name: Install dependencies
+  #       uses: ./.github/actions/yarn-install
+  #     - uses: actions/download-artifact@v4
+  #       with:
+  #         pattern: coverage-artifacts-${{ matrix.storybook_scope }}-${{ github.run_id }}-*
+  #         merge-multiple: true
+  #         path: coverage-artifacts
+  #     - name: Merge coverage reports
+  #       run: |
+  #         mkdir -p ${{ env.PATH_TO_COVERAGE }}
+  #         npx nyc merge coverage-artifacts ${{ env.PATH_TO_COVERAGE }}/coverage-storybook.json
+  #     - name: Checking coverage
+  #       run: npx nx storybook:coverage twenty-front --checkCoverage=true --configuration=${{ matrix.storybook_scope }}
   front-task:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
+    runs-on: ubuntu-latest
     env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+      NODE_OPTIONS: '--max-old-space-size=4096'
       TASK_CACHE_KEY: front-task-${{ matrix.task }}
     strategy:
       matrix:
@@ -165,38 +170,68 @@ jobs:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Restore ${{ matrix.task }} cache
         id: restore-task-cache
-        uses: ./.github/workflows/actions/restore-cache
+        uses: ./.github/actions/restore-cache
         with:
           key: ${{ env.TASK_CACHE_KEY }}
       - name: Reset .env
-        uses: ./.github/workflows/actions/nx-affected
+        uses: ./.github/actions/nx-affected
         with:
           tag: scope:frontend
           tasks: reset:env
       - name: Run ${{ matrix.task }} task
-        uses: ./.github/workflows/actions/nx-affected
+        id: run-task
+        uses: ./.github/actions/nx-affected
         with:
           tag: scope:frontend
           tasks: ${{ matrix.task }}
       - name: Save ${{ matrix.task }} cache
-        uses: ./.github/workflows/actions/save-cache
+        uses: ./.github/actions/save-cache
         with:
           key: ${{ steps.restore-task-cache.outputs.cache-primary-key }}
+  front-build:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest-8-cores
+    env:
+      NODE_OPTIONS: "--max-old-space-size=10240"
+      ANALYZE: "true"
+    steps:
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
+        with:
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Front / Write .env
+        run: npx nx reset:env twenty-front
+      - name: Build frontend
+        run: npx nx build twenty-front
+      # - name: Upload frontend build artifact
+      #   uses: actions/upload-artifact@v4
+      #   with:
+      #     name: frontend-build
+      #     path: packages/twenty-front/build
+      #     retention-days: 1
   ci-front-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
-    runs-on: depot-ubuntu-24.04-8
+    runs-on: ubuntu-latest
     needs:
       [
         changed-files-check,
         front-task,
-        front-chromatic-deployment,
-        merge-reports-and-check-coverage,
+        front-build,
+        # merge-reports-and-check-coverage,
         front-sb-test,
         front-sb-build,
       ]

.github/workflows/ci-merge-queue.yaml

@@ -0,0 +1,140 @@
+name: CI Merge Queue
+
+on:
+  merge_group:
+
+  pull_request:
+    types: [labeled, synchronize, opened, reopened]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  e2e-test:
+    if: >
+      github.event_name == 'merge_group' ||
+      (github.event_name == 'pull_request' &&
+       contains(github.event.pull_request.labels.*.name, 'run-merge-queue'))
+    runs-on: ubuntu-latest-8-cores
+    timeout-minutes: 30
+    env:
+      NODE_OPTIONS: "--max-old-space-size=10240"
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: "true"
+          SPILO_PROVIDER: "local"
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Restore Nx build cache
+        uses: actions/cache/restore@v4
+        with:
+          key: v4-e2e-build-${{ github.ref_name }}-${{ github.sha }}
+          restore-keys: |
+            v4-e2e-build-${{ github.ref_name }}-
+            v4-e2e-build-main-
+          path: |
+            .nx
+            node_modules/.cache
+            packages/*/node_modules/.cache
+
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+
+      - name: Install Playwright Browsers
+        run: npx nx setup twenty-e2e-testing
+
+      - name: Setup environment files
+        run: |
+          cp packages/twenty-front/.env.example packages/twenty-front/.env
+          npx nx reset:env:e2e-testing-server twenty-server
+
+      - name: Build frontend
+        run: NODE_ENV=production npx nx build twenty-front
+
+      - name: Build server
+        run: npx nx build twenty-server
+
+      - name: Save Nx build cache
+        if: always()
+        uses: actions/cache/save@v4
+        with:
+          key: v4-e2e-build-${{ github.ref_name }}-${{ github.sha }}
+          path: |
+            .nx
+            node_modules/.cache
+            packages/*/node_modules/.cache
+
+      - name: Create and setup database
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
+          npx nx run twenty-server:database:reset
+
+      - name: Start server
+        run: |
+          npx nx start twenty-server &
+          echo "Waiting for server to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
+
+      - name: Start frontend
+        run: |
+          npm_config_yes=true npx serve -s packages/twenty-front/build -l 3001 &
+          echo "Waiting for frontend to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3001; do sleep 2; done'
+
+      - name: Start worker
+        run: |
+          npx nx run twenty-server:worker &
+          echo "Worker started"
+
+      - name: Run Playwright tests
+        run: npx nx test twenty-e2e-testing
+
+      - name: Upload Playwright results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-results
+          path: |
+            packages/twenty-e2e-testing/run_results/
+            packages/twenty-e2e-testing/test-results/
+          retention-days: 7
+
+  ci-merge-queue-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [e2e-test]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/ci-release-create.yaml

@@ -1,4 +1,9 @@
 name: "Release: create"
+
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   workflow_dispatch:
     inputs:
@@ -13,33 +18,42 @@ on:
         default: true
         description: Create a release after merging the PR
 
+defaults:
+  run:
+    shell: bash --noprofile --norc -euo pipefail {0}
+
 jobs:
   create_pr:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.inputs.ref }}
 
       - name: Sanitize version
         id: sanitize
+        env:
+          RAW_VERSION: ${{ github.event.inputs.version }}
         run: |
-          echo version=$(echo ${{ github.event.inputs.version }} | sed 's/^v//') >> $GITHUB_OUTPUT
+          VERSION="${RAW_VERSION#v}"
+          printf 'version=%s\n' "$VERSION" >> "$GITHUB_OUTPUT"
 
       - name: Update versions
+        env:
+          VERSION: ${{ steps.sanitize.outputs.version }}
         run: |
-          echo ${{ steps.sanitize.outputs.version }} > version.txt
+          printf '%s\n' "$VERSION" > version.txt
 
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v6
         with:
-            branch: release/${{ steps.sanitize.outputs.version }}
-            commit-message: "chore: release v${{ steps.sanitize.outputs.version }}"
-            committer: Github Action Deploy <github-action-deploy@twenty.com>
-            author: Github Action Deploy <github-action-deploy@twenty.com>
-            title: Release v${{ steps.sanitize.outputs.version }}
-            labels: |
-              release
-              ${{ github.event.inputs.create_release == true && 'create_release' || '' }}
+          branch: release/${{ steps.sanitize.outputs.version }}
+          commit-message: "chore: release v${{ steps.sanitize.outputs.version }}"
+          committer: Github Action Deploy <github-action-deploy@twenty.com>
+          author: Github Action Deploy <github-action-deploy@twenty.com>
+          title: Release v${{ steps.sanitize.outputs.version }}
+          labels: |
+            release
+            ${{ github.event.inputs.create_release == true && 'create_release' || '' }}

.github/workflows/ci-release-merge.yaml

@@ -1,9 +1,17 @@
 name: "Release: on merge"
+
+permissions:
+  contents: write
+
 on:
   pull_request:
     types:
       - closed
 
+defaults:
+  run:
+    shell: bash --noprofile --norc -euo pipefail {0}
+
 jobs:
   tag_and_release:
     timeout-minutes: 10
@@ -12,33 +20,40 @@ jobs:
     steps:
       - name: Check PR Author
         id: check_author
+        env:
+          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
         run: |
-          if [[ "${{ github.event.pull_request.user.login }}" != "github-actions[bot]" ]]; then
-            echo "PR author (${AUTHOR}) is not trusted. Exiting."
+          set -euo pipefail
+          if [[ "$PR_AUTHOR" != "github-actions[bot]" ]]; then
+            echo "PR author ($PR_AUTHOR) is not trusted. Exiting."
             exit 1
           fi
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           ref: main
 
       - name: Get version from PR title
         id: extract_version
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
         run: |
-          VERSION=$(echo "${{ github.event.pull_request.title }}" | sed -n 's/.*Release v\([0-9.]*\).*/\1/p')
+          set -euo pipefail
+          VERSION=$(printf '%s' "$PR_TITLE" | sed -n 's/.*Release v\([0-9][0-9.]*\).*/\1/p')
           if [ -z "$VERSION" ]; then
             echo "No valid version found in PR title. Exiting."
             exit 1
           fi
-          echo "VERSION=$VERSION" >> $GITHUB_ENV
+          printf 'VERSION=%s\n' "$VERSION" >> "$GITHUB_ENV"
 
       - name: Push new tag
         run: |
+          set -euo pipefail
           git config --global user.name 'Github Action Deploy'
           git config --global user.email 'github-action-deploy@twenty.com'
-          git tag v${{ env.VERSION }}
-          git push origin v${{ env.VERSION }}
+          git tag "v${{ env.VERSION }}"
+          git push origin "v${{ env.VERSION }}"
 
       - uses: release-drafter/release-drafter@v5
         if: contains(github.event.pull_request.labels.*.name, 'create_release')

.github/workflows/ci-sdk.yaml

@@ -0,0 +1,103 @@
+name: CI SDK
+
+on:
+  pull_request:
+  merge_group:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  changed-files-check:
+    if: github.event_name != 'merge_group'
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        packages/twenty-sdk/**
+        packages/twenty-server/**
+        !packages/twenty-sdk/package.json
+  sdk-test:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        task: [lint, typecheck, test:unit, storybook:build, storybook:test, test:integration]
+    steps:
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
+        with:
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build
+        run: npx nx build twenty-sdk
+      - name: Install Playwright
+        if: contains(matrix.task, 'storybook')
+        run: npx playwright install chromium
+      - name: Run ${{ matrix.task }} task
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:sdk
+          tasks: ${{ matrix.task }}
+  sdk-e2e-test:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    needs: [changed-files-check, sdk-test]
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    env:
+      NODE_ENV: test
+    steps:
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build
+        run: npx nx build twenty-sdk
+      - name: Server / Create Test DB
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
+      - name: SDK / Run e2e Tests
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:sdk
+          tasks: test:e2e
+  ci-sdk-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [changed-files-check, sdk-test, sdk-e2e-test]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/ci-server.yaml

@@ -1,34 +1,86 @@
 name: CI Server
-on:
-  push:
-    branches:
-      - main
 
+on:
   pull_request:
+  merge_group:
+
+permissions:
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 env:
-  SERVER_SETUP_CACHE_KEY: server-setup
+  SERVER_BUILD_CACHE_KEY: server-build
 
 jobs:
   changed-files-check:
+    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
         package.json
+        yarn.lock
         packages/twenty-server/**
+        packages/twenty-front/src/generated/**
+        packages/twenty-front/src/generated-metadata/**
+        packages/twenty-sdk/src/clients/generated/metadata/**
         packages/twenty-emails/**
         packages/twenty-shared/**
-  server-setup:
+
+  server-build:
     needs: changed-files-check
     if: needs.changed-files-check.outputs.any_changed == 'true'
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
-    env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Restore server build cache
+        id: restore-server-build-cache
+        uses: ./.github/actions/restore-cache
+        with:
+          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+      - name: Server / Write .env
+        run: npx nx reset:env twenty-server
+      - name: Server / Build
+        run: npx nx build twenty-server
+      - name: Save server build cache
+        uses: ./.github/actions/save-cache
+        with:
+          key: ${{ steps.restore-server-build-cache.outputs.cache-primary-key }}
+
+  server-lint-typecheck:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+      - name: Server / Run lint & typecheck
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:backend
+          tasks: lint,typecheck
+
+  server-validation:
+    needs: server-build
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
     services:
       postgres:
         image: twentycrm/twenty-postgres-spilo
@@ -52,25 +104,19 @@ jobs:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - name: Restore server setup
-        id: restore-server-setup-cache
-        uses: ./.github/workflows/actions/restore-cache
+        uses: ./.github/actions/yarn-install
+      - name: Restore server build cache
+        uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
+          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
       - name: Build twenty-shared
         run: npx nx build twenty-shared
-      - name: Server / Run lint & typecheck
-        uses: ./.github/workflows/actions/nx-affected
-        with:
-          tag: scope:backend
-          tasks: lint,typecheck
-      - name: Server / Build
-        run: npx nx build twenty-server
       - name: Server / Write .env
         run: npx nx reset:env twenty-server
+      - name: Server / Build
+        run: npx nx build twenty-server
       - name: Server / Create DB
         run: |
           PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
@@ -81,12 +127,24 @@ jobs:
         run: |
           timeout 30s npx nx run twenty-server:worker || exit_code=$?
           if [ $exit_code -eq 124 ]; then
-            # If timeout was reached (exit code 124), consider it a success
             exit 0
           elif [ $exit_code -ne 0 ]; then
-            # If worker failed for other reasons, fail the build
             exit $exit_code
           fi
+      - name: Server / Start
+        run: npx nx start:ci twenty-server &
+      - name: Waiting for server starting...
+        run: |
+          for i in {1..10}; do
+            if curl -f http://localhost:3000/healthz; then
+              echo "Server ready!"
+              exit 0
+            fi
+            echo "Waiting..."
+            sleep 2
+          done
+          echo "Server did not become healthy in time" >&2
+          exit 1
       - name: Server / Check for Pending Migrations
         run: |
           CORE_MIGRATION_OUTPUT=$(npx nx run twenty-server:typeorm migration:generate core-migration-check -d src/database/typeorm/core/core.datasource.ts || true)
@@ -98,57 +156,74 @@ jobs:
             echo "$CORE_MIGRATION_OUTPUT"
 
             rm -f packages/twenty-server/*core-migration-check.ts
-            
+
             exit 1
           fi
-      - name: GraphQL / Check for Pending Generation
-        if: steps.changed-files.outputs.any_changed == 'true'
+      - name: Check for Pending Code Generation
         run: |
-          # Run GraphQL generation commands
+          HAS_ERRORS=false
+
           npx nx run twenty-front:graphql:generate
           npx nx run twenty-front:graphql:generate --configuration=metadata
 
-          # Check if any files were modified
-          if ! git diff --quiet; then
+          if ! git diff --quiet -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata; then
             echo "::error::GraphQL schema changes detected. Please run 'npx nx run twenty-front:graphql:generate' and 'npx nx run twenty-front:graphql:generate --configuration=metadata' and commit the changes."
+            echo ""
+            echo "The following GraphQL schema changes were detected:"
+            echo "==================================================="
+            git diff -- packages/twenty-front/src/generated packages/twenty-front/src/generated-metadata
+            echo "==================================================="
+            echo ""
+            HAS_ERRORS=true
+          fi
+
+          npx nx run twenty-sdk:generate-metadata-client
+
+          if ! git diff --quiet -- packages/twenty-sdk/src/clients/generated/metadata; then
+            echo "::error::SDK metadata client changes detected. Please run 'npx nx run twenty-sdk:generate-metadata-client' and commit the changes."
+            echo ""
+            echo "The following SDK metadata client changes were detected:"
+            echo "==================================================="
+            git diff -- packages/twenty-sdk/src/clients/generated/metadata
+            echo "==================================================="
+            echo ""
+            HAS_ERRORS=true
+          fi
+
+          if [ "$HAS_ERRORS" = true ]; then
             exit 1
           fi
-      - name: Save server setup
-        uses: ./.github/workflows/actions/save-cache
-        with:
-          key: ${{ steps.restore-server-setup-cache.outputs.cache-primary-key }}
-
   server-test:
+    needs: server-build
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
-    needs: server-setup
-    env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+    runs-on: ubuntu-latest
     steps:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
-      - name: Restore server setup
-        uses: ./.github/workflows/actions/restore-cache
+        uses: ./.github/actions/yarn-install
+      - name: Restore server build cache
+        uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
+          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
       - name: Server / Run Tests
-        uses: ./.github/workflows/actions/nx-affected
+        uses: ./.github/actions/nx-affected
         with:
           tag: scope:backend
           tasks: test
 
   server-integration-test:
     timeout-minutes: 30
-    runs-on: depot-ubuntu-24.04-8
-    needs: server-setup
+    runs-on: ubuntu-latest
+    needs: server-build
     strategy:
       fail-fast: false
       matrix:
-        shard: [1, 2, 3, 4]
+        shard: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]
     services:
       postgres:
         image: twentycrm/twenty-postgres-spilo
@@ -169,7 +244,7 @@ jobs:
         ports:
           - 6379:6379
       clickhouse:
-        image: clickhouse/clickhouse-server:latest
+        image: clickhouse/clickhouse-server:25.8.8
         env:
           CLICKHOUSE_PASSWORD: clickhousePassword
           CLICKHOUSE_URL: "http://default:clickhousePassword@localhost:8123/twenty"
@@ -177,35 +252,35 @@ jobs:
           - 8123:8123
           - 9000:9000
         options: >-
-          --health-cmd "clickhouse-client --host=localhost --port=9000 --user=default --password=clickhousePassword --query='SELECT 1'" 
-          --health-interval 10s 
-          --health-timeout 5s 
+          --health-cmd "clickhouse-client --host=localhost --port=9000 --user=default --password=clickhousePassword --query='SELECT 1'"
+          --health-interval 10s
+          --health-timeout 5s
           --health-retries 5
     env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
       NODE_ENV: test
       ANALYTICS_ENABLED: true
       CLICKHOUSE_URL: "http://default:clickhousePassword@localhost:8123/twenty"
       CLICKHOUSE_PASSWORD: clickhousePassword
-      SHARD_COUNTER: 4
+      SHARD_COUNTER: 10
     steps:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Update .env.test for integrations tests
         run: |
+          echo "" >> .env.test
           echo "IS_BILLING_ENABLED=true" >> .env.test
           echo "BILLING_STRIPE_API_KEY=test-api-key" >> .env.test
           echo "BILLING_STRIPE_BASE_PLAN_PRODUCT_ID=test-base-plan-product-id" >> .env.test
           echo "BILLING_STRIPE_WEBHOOK_SECRET=test-webhook-secret" >> .env.test
           echo "BILLING_PLAN_REQUIRED_LINK=http://localhost:3001/stripe-redirection" >> .env.test
-      - name: Restore server setup
-        uses: ./.github/workflows/actions/restore-cache
+      - name: Restore server build cache
+        uses: ./.github/actions/restore-cache
         with:
-          key: ${{ env.SERVER_SETUP_CACHE_KEY }}
+          key: ${{ env.SERVER_BUILD_CACHE_KEY }}
       - name: Server / Build
         run: npx nx build twenty-server
       - name: Build dependencies
@@ -220,18 +295,27 @@ jobs:
       - name: Run ClickHouse seeds
         run: npx nx clickhouse:seed twenty-server
       - name: Server / Run Integration Tests
-        uses: ./.github/workflows/actions/nx-affected
+        uses: ./.github/actions/nx-affected
         with:
           tag: scope:backend
           tasks: 'test:integration'
           configuration: 'with-db-reset'
           args: --shard=${{ matrix.shard }}/${{ env.SHARD_COUNTER }}
+
   ci-server-status-check:
     if: always() && !cancelled()
     timeout-minutes: 5
-    runs-on: depot-ubuntu-24.04-8
-    needs: [changed-files-check, server-setup, server-test, server-integration-test]
+    runs-on: ubuntu-latest
+    needs:
+      [
+        changed-files-check,
+        server-build,
+        server-lint-typecheck,
+        server-validation,
+        server-test,
+        server-integration-test,
+      ]
     steps:
-      - name: Fail job if any needs failed 
+      - name: Fail job if any needs failed
         if: contains(needs.*.result, 'failure')
         run: exit 1

.github/workflows/ci-shared.yaml

@@ -1,17 +1,19 @@
 name: CI Shared
-on:
-  push:
-    branches:
-      - main
 
+on:
   pull_request:
+  merge_group:
+
+permissions:
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
+    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
@@ -22,7 +24,7 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     env:
-      NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
+      NODE_OPTIONS: '--max-old-space-size=4096'
     strategy:
       matrix:
         task: [lint, typecheck, test]
@@ -34,13 +36,13 @@ jobs:
       - name: Fetch custom Github Actions and base branch history
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Run ${{ matrix.task }} task
-        uses: ./.github/workflows/actions/nx-affected
+        uses: ./.github/actions/nx-affected
         with:
-          tag: scope:frontend
+          tag: scope:shared
           tasks: ${{ matrix.task }}
   ci-shared-status-check:
     if: always() && !cancelled()

.github/workflows/ci-test-docker-compose.yaml

@@ -1,13 +1,19 @@
-name: 'Test Docker Compose'
+name: CI Docker Compose
+
+permissions:
+  contents: read
+
 on:
   pull_request:
+  merge_group:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
+    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
@@ -33,6 +39,7 @@ jobs:
           echo "Setting up .env file..."
           cp .env.example .env
           echo "Generating secrets..."
+          echo "" >> .env
           echo "# === Randomly generated secrets ===" >>.env
           echo "APP_SECRET=$(openssl rand -base64 32)" >>.env
           echo "PGPASSWORD_SUPERUSER=$(openssl rand -hex 16)" >>.env

.github/workflows/ci-utils.yaml

@@ -1,4 +1,5 @@
 name: CI Utils
+
 on:
   # it's usually not recommended to use pull_request_target
   # but we consider it's safe here if we keep the same steps
@@ -6,13 +7,12 @@ on:
   # and: https://github.com/facebook/react-native/pull/34370/files
   pull_request_target:
     types: [opened, synchronize, reopened, closed]
+
 permissions:
-  actions: write
   checks: write
-  contents: write
-  issues: write
   pull-requests: write
   statuses: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   # We don't cancel in-progress because this workflow is triggered on
@@ -27,12 +27,12 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Utils / Run Danger.js
         run: cd packages/twenty-utils && npx nx danger:ci
         env:
           DANGER_GITHUB_API_TOKEN: ${{ github.token }}
-  
+
   congratulate:
     timeout-minutes: 3
     runs-on: ubuntu-latest
@@ -40,7 +40,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
       - name: Run congratulate-dangerfile.js
         run: cd packages/twenty-utils && npx nx danger:congratulate
         env:

.github/workflows/ci-website.yaml

@@ -1,17 +1,19 @@
 name: CI Website
-on:
-  push:
-    branches:
-      - main
 
+permissions:
+  contents: read
+
+on:
   pull_request:
+  merge_group:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   changed-files-check:
+    if: github.event_name != 'merge_group'
     uses: ./.github/workflows/changed-files.yaml
     with:
       files: |
@@ -40,10 +42,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          fetch-depth: 10
 
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
 
       - name: Server / Create DB
         run: PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'

.github/workflows/ci-zapier.yaml

@@ -0,0 +1,126 @@
+name: CI Zapier
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+env:
+  SERVER_SETUP_CACHE_KEY: server-setup
+
+jobs:
+  changed-files-check:
+    uses: ./.github/workflows/changed-files.yaml
+    with:
+      files: |
+        packages/twenty-zapier/**
+        packages/twenty-server/**
+        !packages/twenty-zapier/package.json
+        !packages/twenty-zapier/CHANGELOG.md
+  server-setup:
+    needs: changed-files-check
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: twentycrm/twenty-postgres-spilo
+        env:
+          PGUSER_SUPERUSER: postgres
+          PGPASSWORD_SUPERUSER: postgres
+          ALLOW_NOSSL: 'true'
+          SPILO_PROVIDER: 'local'
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Build twenty-shared
+        run: npx nx build twenty-shared
+
+      - name: Server / Write .env
+        run: npx nx reset:env:e2e-testing-server twenty-server
+
+      - name: Server / Build
+        run: npx nx build twenty-server
+
+      - name: Create and setup database
+        run: |
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "default";'
+          PGPASSWORD=postgres psql -h localhost -p 5432 -U postgres -d postgres -c 'CREATE DATABASE "test";'
+          npx nx run twenty-server:database:reset
+
+      - name: Server / Start
+        run: |
+          npx nx start twenty-server &
+          echo "Waiting for server to be ready..."
+          timeout 60 bash -c 'until curl -s http://localhost:3000/health; do sleep 2; done'
+
+      - name: Start worker
+        run: |
+          npx nx run twenty-server:worker &
+          echo "Worker started"
+
+      - name: Zapier / Build
+        run: npx nx build twenty-zapier
+
+      - name: Zapier / Run Tests
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:zapier
+          tasks: test
+
+  zapier-test:
+    needs: server-setup
+    if: needs.changed-files-check.outputs.any_changed == 'true'
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        task: [lint, typecheck, validate]
+    steps:
+      - name: Cancel Previous Runs
+        uses: styfle/cancel-workflow-action@0.11.0
+        with:
+          access_token: ${{ github.token }}
+      - name: Fetch custom Github Actions and base branch history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 10
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build
+        run: npx nx build twenty-zapier
+      - name: Run ${{ matrix.task }} task
+        uses: ./.github/actions/nx-affected
+        with:
+          tag: scope:zapier
+          tasks: ${{ matrix.task }}
+  ci-zapier-status-check:
+    if: always() && !cancelled()
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    needs: [changed-files-check, zapier-test]
+    steps:
+      - name: Fail job if any needs failed
+        if: contains(needs.*.result, 'failure')
+        run: exit 1

.github/workflows/claude.yml

@@ -0,0 +1,167 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  pull_request_review:
+    types: [submitted]
+  issues:
+    types: [opened, assigned]
+  repository_dispatch:
+    types: [claude-core-team-issues]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.issue.number || github.event.pull_request.number || github.event.client_payload.issue_number }}
+  cancel-in-progress: false
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.type != 'Bot') ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.type != 'Bot') ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.type != 'Bot') ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Run Claude Code
+        id: claude-code
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          additional_permissions: |
+            actions: read
+          claude_args: '--max-turns 200 --model opus --allowedTools "Edit,Write,WebFetch,Bash(bash packages/twenty-utils/setup-dev-env.sh),Bash(npx nx *),Bash(npx jest *),Bash(yarn *),Bash(git *),Bash(gh *),Bash(sed *),Bash(python3 *),Bash(rm *),Bash(find *),Bash(grep *),Bash(cat *),Bash(ls *),Bash(head *),Bash(tail *),Bash(wc *),Bash(sort *),Bash(uniq *),Bash(mkdir *),Bash(cp *),Bash(mv *),Bash(touch *),Bash(chmod *),Bash(echo *),Bash(curl *),Bash(cd *),Bash(pwd *),Bash(diff *),Bash(xargs *),Bash(awk *),Bash(cut *),Bash(tee *),Bash(tr *)"'
+          settings: |
+            {
+              "env": {
+                "PG_DATABASE_URL": "postgres://postgres:postgres@localhost:5432/default"
+              }
+            }
+      - name: Post Create-PR link if Claude ran out of turns
+        if: failure()
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          BRANCH=$(git branch --show-current)
+          if [ "$BRANCH" = "main" ] || [ "$BRANCH" = "" ]; then
+            exit 0
+          fi
+          AHEAD=$(git rev-list --count main.."$BRANCH" 2>/dev/null || echo "0")
+          if [ "$AHEAD" = "0" ]; then
+            exit 0
+          fi
+          EXISTING_PR=$(gh pr list --head "$BRANCH" --json number --jq '.[0].number' 2>/dev/null || echo "")
+          if [ -n "$EXISTING_PR" ]; then
+            exit 0
+          fi
+          ISSUE_NUMBER="${{ github.event.issue.number || github.event.pull_request.number }}"
+          ENCODED_BRANCH=$(python3 -c "import urllib.parse, sys; print(urllib.parse.quote(sys.argv[1], safe=''))" "$BRANCH")
+          PR_URL="https://github.com/${{ github.repository }}/compare/main...${ENCODED_BRANCH}?quick_pull=1"
+          BODY="⚠️ Claude ran out of turns before creating a PR. Work has been pushed to [\`$BRANCH\`](https://github.com/${{ github.repository }}/tree/$ENCODED_BRANCH).\n\n[**Create PR →**]($PR_URL)"
+          if [ -n "$ISSUE_NUMBER" ]; then
+            gh issue comment "$ISSUE_NUMBER" --body "$(echo -e "$BODY")"
+          fi
+
+  claude-cross-repo:
+    if: github.event_name == 'repository_dispatch'
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+      - name: Build prompt from dispatch payload
+        id: prompt
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const p = context.payload.client_payload;
+            let prompt;
+            if (p.comment_body) {
+              prompt = `You are responding to a comment on issue #${p.issue_number} ("${p.issue_title}") in the ${p.repo_full_name} repository.\n\nThe comment by @${p.sender} says:\n\n${p.comment_body}\n\nIssue body:\n\n${p.issue_body}\n\nPlease help with this request. The code you are working with is the twenty codebase (this repository).`;
+            } else {
+              prompt = `You are responding to issue #${p.issue_number} ("${p.issue_title}") in the ${p.repo_full_name} repository, opened by @${p.sender}.\n\nIssue body:\n\n${p.issue_body}\n\nPlease help with this request. The code you are working with is the twenty codebase (this repository).`;
+            }
+            core.setOutput('prompt', prompt);
+            core.setOutput('repo', p.repo_full_name);
+            core.setOutput('issue_number', p.issue_number);
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          prompt: ${{ steps.prompt.outputs.prompt }}
+          additional_permissions: |
+            actions: read
+          claude_args: '--max-turns 200 --model opus --allowedTools "Edit,Write,WebFetch,Bash(bash packages/twenty-utils/setup-dev-env.sh),Bash(npx nx *),Bash(npx jest *),Bash(yarn *),Bash(git *),Bash(gh *),Bash(sed *),Bash(python3 *),Bash(rm *),Bash(find *),Bash(grep *),Bash(cat *),Bash(ls *),Bash(head *),Bash(tail *),Bash(wc *),Bash(sort *),Bash(uniq *),Bash(mkdir *),Bash(cp *),Bash(mv *),Bash(touch *),Bash(chmod *),Bash(echo *),Bash(curl *),Bash(cd *),Bash(pwd *),Bash(diff *),Bash(xargs *),Bash(awk *),Bash(cut *),Bash(tee *),Bash(tr *)"'
+          settings: |
+            {
+              "env": {
+                "PG_DATABASE_URL": "postgres://postgres:postgres@localhost:5432/default"
+              }
+            }
+      - name: Dispatch response to ci-privileged
+        if: always()
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
+          repository: twentyhq/ci-privileged
+          event-type: claude-cross-repo-response
+          client-payload: '{"repo": ${{ toJSON(steps.prompt.outputs.repo) }}, "issue_number": ${{ toJSON(steps.prompt.outputs.issue_number) }}, "run_id": ${{ toJSON(github.run_id) }}, "run_url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"}'

.github/workflows/docs-i18n-pull.yaml

@@ -0,0 +1,152 @@
+name: 'Pull docs translations from Crowdin'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+on:
+  schedule:
+    - cron: '0 */2 * * *' # Every two hours
+  workflow_dispatch:
+    inputs:
+      force_pull:
+        description: 'Force pull translations regardless of status'
+        required: false
+        type: boolean
+        default: false
+  workflow_call:
+    inputs:
+      force_pull:
+        description: 'Force pull translations regardless of status'
+        required: false
+        type: boolean
+        default: false
+  pull_request:
+    paths:
+      - 'packages/twenty-docs/**'
+      - '.github/crowdin-docs.yml'
+      - '.github/workflows/docs-i18n-pull.yaml'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  pull_docs_translations:
+    name: Pull docs translations
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          token: ${{ github.token }}
+          repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Setup i18n-docs branch
+        if: github.event_name != 'pull_request'
+        run: |
+          git fetch origin i18n-docs || true
+          git checkout -B i18n-docs origin/i18n-docs || git checkout -b i18n-docs
+
+      - name: Configure git
+        run: |
+          git config --global user.name 'github-actions'
+          git config --global user.email 'github-actions@twenty.com'
+
+      - name: Stash any changes before pulling translations
+        if: github.event_name != 'pull_request'
+        run: |
+          git add .
+          git stash || true
+
+      # Install Crowdin CLI for downloading translations
+      - name: Install Crowdin CLI
+        if: github.event_name != 'pull_request' && (inputs.force_pull == true || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
+        run: npm install -g @crowdin/cli
+
+      # Pull docs translations from Crowdin one language at a time
+      # This avoids build timeout issues when processing all languages at once
+      - name: Pull translated docs from Crowdin
+        if: github.event_name != 'pull_request' && (inputs.force_pull == true || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
+        run: |
+          # Languages supported by Mintlify (see packages/twenty-docs/src/shared/supported-languages.ts)
+          LANGUAGES="fr ar cs de es it ja ko pt ro ru tr zh-CN"
+
+          for lang in $LANGUAGES; do
+            echo "=== Pulling translations for $lang ==="
+            crowdin download \
+              --config .github/crowdin-docs.yml \
+              --token "$CROWDIN_PERSONAL_TOKEN" \
+              --base-url "https://twenty.api.crowdin.com" \
+              --language "$lang" \
+              --skip-untranslated-strings=false \
+              --skip-untranslated-files=false \
+              --export-only-approved=false \
+              --verbose || echo "Warning: Failed to pull $lang, continuing with other languages..."
+            echo ""
+          done
+
+          echo "=== Download complete ==="
+        env:
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
+
+      - name: Fix file permissions
+        if: github.event_name != 'pull_request'
+        run: sudo chown -R runner:docker . || true
+
+      - name: Fix translated documentation links
+        run: bash packages/twenty-docs/scripts/fix-translated-links.sh
+
+      - name: Regenerate navigation template
+        if: github.event_name == 'pull_request'
+        run: yarn docs:generate-navigation-template
+
+      - name: Regenerate docs.json
+        run: yarn docs:generate
+
+      - name: Regenerate documentation paths constants
+        run: yarn docs:generate-paths
+
+      - name: Commit artifacts to pull request branch
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        run: |
+          git add packages/twenty-docs/docs.json packages/twenty-docs/navigation/navigation.template.json packages/twenty-shared/src/constants/DocumentationPaths.ts
+          if git diff --staged --quiet --exit-code; then
+            echo "No navigation/doc changes to commit."
+            exit 0
+          fi
+          git commit -m "chore: sync docs artifacts"
+          git push origin "HEAD:$HEAD_REF"
+        env:
+          HEAD_REF: ${{ github.head_ref }}
+
+      - name: Check for changes and commit
+        if: github.event_name != 'pull_request'
+        id: check_changes
+        run: |
+          git add .
+          if ! git diff --staged --quiet --exit-code; then
+            git commit -m "chore: update docs translations from Crowdin and fix internal links"
+            echo "changes_detected=true" >> $GITHUB_OUTPUT
+          else
+            echo "changes_detected=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Push changes
+        if: github.event_name != 'pull_request' && steps.check_changes.outputs.changes_detected == 'true'
+        run: git push origin HEAD:i18n-docs
+
+      - name: Create pull request
+        if: github.event_name != 'pull_request' && steps.check_changes.outputs.changes_detected == 'true'
+        run: |
+          if git diff --name-only origin/main..HEAD | grep -q .; then
+            gh pr create -B main -H i18n-docs --title 'i18n - docs translations' --body 'Created by Github action' || true
+          else
+            echo "No file differences between branches, skipping PR creation"
+          fi
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docs-i18n-push.yaml

@@ -0,0 +1,51 @@
+name: 'Push docs to Crowdin'
+
+permissions:
+  contents: write
+
+on:
+  workflow_dispatch:
+  workflow_call:
+  push:
+    branches: ['main']
+    paths:
+      - 'packages/twenty-docs/**/*.mdx'
+      - '!packages/twenty-docs/l/**'
+      - 'packages/twenty-docs/navigation/navigation.template.json'
+      - '.github/crowdin-docs.yml'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  push_docs:
+    name: Push documentation to Crowdin
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          token: ${{ github.token }}
+          ref: ${{ github.ref }}
+
+      - name: Install dependencies
+        uses: ./.github/actions/yarn-install
+
+      - name: Generate navigation template for Crowdin
+        run: yarn docs:generate-navigation-template
+
+      - name: Upload docs to Crowdin
+        uses: crowdin/github-action@v2
+        with:
+          upload_sources: true
+          upload_translations: false
+          download_translations: false
+          localization_branch_name: i18n-docs
+          base_url: 'https://twenty.api.crowdin.com'
+          config: '.github/crowdin-docs.yml'
+        env:
+          # Docs translations project
+          CROWDIN_PROJECT_ID: '2'
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
+

.github/workflows/i18n-pull.yaml

@@ -3,6 +3,10 @@
 
 name: 'Pull translations from Crowdin'
 
+permissions:
+  contents: write
+  pull-requests: write
+
 on:
   schedule:
     - cron: '0 */2 * * *' # Every two hours.
@@ -23,16 +27,12 @@ on:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   pull_translations:
     name: Pull translations
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -46,7 +46,7 @@ jobs:
           git checkout -B i18n origin/i18n || git checkout -b i18n
 
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
 
       - name: Build twenty-shared
         run: npx nx build twenty-shared
@@ -74,6 +74,8 @@ jobs:
           upload_sources: false
           upload_translations: false
           download_translations: true
+          source: '**/en.po'
+          translation: '%original_path%/%locale%.po'
           export_only_approved: false
           localization_branch_name: i18n
           base_url: 'https://twenty.api.crowdin.com'
@@ -83,30 +85,37 @@ jobs:
           push_sources: false
           skip_untranslated_strings: false
           skip_untranslated_files: false
-          push_translations: true
+          push_translations: false
           create_pull_request: false
           skip_ref_checkout: true
           dryrun_action: false
+          config: '.github/crowdin-app.yml'
         env:
           GITHUB_TOKEN: ${{ github.token }}
+          # App translations project
           CROWDIN_PROJECT_ID: '1'
           CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
-      
+
       # As the files are extracted from a Docker container, they belong to root:root
       # We need to fix this before the next steps
       - name: Fix file permissions
         run: sudo chown -R runner:docker .
 
+      # Fix encoding issues (escaped Unicode like \u62db -> 招) and push fixes back to Crowdin
+      - name: Fix translation encoding and sync to Crowdin
+        run: npx ts-node packages/twenty-utils/fix-crowdin-translations.ts
+        env:
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
+
       - name: Compile translations
         id: compile_translations
-        if: inputs.force_pull || steps.compile_translations_strict.outcome == 'failure'
+        # Because we have set English as a fallback locale, this condition does not work anymore
+        # if: inputs.force_pull || steps.compile_translations_strict.outcome == 'failure'
         run: |
           npx nx run twenty-server:lingui:compile
-          npx nx run twenty-emails:lingui:compile 
+          npx nx run twenty-emails:lingui:compile
           npx nx run twenty-front:lingui:compile
           git status
-          git config --global user.name 'github-actions'
-          git config --global user.email 'github-actions@twenty.com'
           git add .
           if ! git diff --staged --quiet --exit-code; then
             git commit -m "chore: compile translations"

.github/workflows/i18n-push.yaml

@@ -1,5 +1,9 @@
 name: 'Push translations to Crowdin'
 
+permissions:
+  contents: write
+  pull-requests: write
+
 on:
   workflow_dispatch:
   workflow_call:
@@ -8,15 +12,12 @@ on:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   extract_translations:
     name: Extract and upload translations
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -30,7 +31,7 @@ jobs:
           git checkout -B i18n origin/i18n || git checkout -b i18n
 
       - name: Install dependencies
-        uses: ./.github/workflows/actions/yarn-install
+        uses: ./.github/actions/yarn-install
 
       - name: Build dependencies
         run: npx nx build twenty-shared
@@ -86,11 +87,10 @@ jobs:
           download_translations: false
           localization_branch_name: i18n
           base_url: 'https://twenty.api.crowdin.com'
+          config: '.github/crowdin-app.yml'
         env:
-          # A numeric ID, found at https://crowdin.com/project/<projectName>/tools/api
-          CROWDIN_PROJECT_ID: 1
-
-          # Visit https://crowdin.com/settings#api-key to create this token
+          # App translations project
+          CROWDIN_PROJECT_ID: '1'
           CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
       - name: Create a pull request
         if: steps.check_extract_changes.outputs.changes_detected == 'true' || steps.check_compile_changes.outputs.changes_detected == 'true'

.github/workflows/post-ci-comments.yaml

@@ -0,0 +1,71 @@
+name: Post CI Comments
+
+on:
+  workflow_run:
+    workflows: ['GraphQL and OpenAPI Breaking Changes Detection']
+    types: [completed]
+
+permissions:
+  actions: read
+
+jobs:
+  dispatch-breaking-changes:
+    if: github.event.workflow_run.conclusion == 'success'
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Get PR number from workflow run
+        id: pr-info
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const runId = context.payload.workflow_run.id;
+            const headSha = context.payload.workflow_run.head_sha;
+            const headBranch = context.payload.workflow_run.head_branch;
+            const headRepo = context.payload.workflow_run.head_repository;
+
+            // workflow_run.pull_requests is empty for fork PRs,
+            // so fall back to searching by head SHA
+            let pullRequests = context.payload.workflow_run.pull_requests;
+            let prNumber;
+
+            if (pullRequests && pullRequests.length > 0) {
+              prNumber = pullRequests[0].number;
+            } else {
+              core.info(`pull_requests is empty (likely a fork PR), searching by SHA ${headSha}`);
+              const owner = context.repo.owner;
+              const repo = context.repo.repo;
+              const headLabel = `${headRepo.owner.login}:${headBranch}`;
+
+              const { data: prs } = await github.rest.pulls.list({
+                owner,
+                repo,
+                state: 'open',
+                head: headLabel,
+                per_page: 1,
+              });
+
+              if (prs.length > 0) {
+                prNumber = prs[0].number;
+              }
+            }
+
+            if (!prNumber) {
+              core.info('No pull request found for this workflow run');
+              core.setOutput('has_pr', 'false');
+              return;
+            }
+
+            core.setOutput('pr_number', prNumber);
+            core.setOutput('run_id', runId);
+            core.setOutput('has_pr', 'true');
+            core.info(`PR #${prNumber}, Run ID: ${runId}`);
+
+      - name: Dispatch to ci-privileged
+        if: steps.pr-info.outputs.has_pr == 'true'
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
+          repository: twentyhq/ci-privileged
+          event-type: breaking-changes-report
+          client-payload: '{"pr_number": ${{ toJSON(steps.pr-info.outputs.pr_number) }}, "run_id": ${{ toJSON(steps.pr-info.outputs.run_id) }}, "repo": ${{ toJSON(github.repository) }}, "branch_state": ${{ toJSON(github.event.workflow_run.head_branch) }}}'

.github/workflows/preview-env-dispatch.yaml

@@ -1,9 +1,9 @@
 name: 'Preview Environment Dispatch'
 
+permissions:
+  contents: write
+
 on:
-  # Using pull_request_target instead of pull_request to have access to secrets for external contributors
-  # Security note: This is safe because we're only using the repository-dispatch action with limited scope
-  # and not checking out or running any code from the external contributor's PR
   pull_request_target:
     types: [opened, synchronize, reopened, labeled]
     paths:
@@ -19,11 +19,19 @@ concurrency:
 
 jobs:
   trigger-preview:
-    permissions:
-      contents: write
-      actions: write
-      pull-requests: read
-    if: github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || (github.event.action == 'labeled' && github.event.label.name == 'preview-app')
+    if: |
+      (github.event.action == 'labeled' && github.event.label.name == 'preview-app') ||
+      (
+        (
+          github.event.pull_request.author_association == 'MEMBER' ||
+          github.event.pull_request.author_association == 'OWNER' ||
+          github.event.pull_request.author_association == 'COLLABORATOR'
+        ) && (
+          github.event.action == 'opened' ||
+          github.event.action == 'synchronize' ||
+          github.event.action == 'reopened'
+        )
+      )
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
@@ -34,3 +42,11 @@ jobs:
           repository: ${{ github.repository }}
           event-type: preview-environment
           client-payload: '{"pr_number": "${{ github.event.pull_request.number }}", "pr_head_sha": "${{ github.event.pull_request.head.sha }}", "repo_full_name": "${{ github.repository }}"}'
+
+      - name: Dispatch to ci-privileged for PR comment
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.CI_PRIVILEGED_DISPATCH_TOKEN }}
+          repository: twentyhq/ci-privileged
+          event-type: preview-env-url
+          client-payload: '{"pr_number": ${{ toJSON(github.event.pull_request.number) }}, "keepalive_dispatch_time": ${{ toJSON(github.event.pull_request.updated_at) }}, "repo": ${{ toJSON(github.repository) }}}'

.github/workflows/preview-env-keepalive.yaml

@@ -1,5 +1,8 @@
 name: 'Preview Environment Keep Alive'
 
+permissions:
+  contents: read
+
 on:
   repository_dispatch:
     types: [preview-environment]
@@ -13,7 +16,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.client_payload.pr_head_sha }}
-      
+
       - name: Run compose setup
         run: |
           echo "Patching docker-compose.yml..."
@@ -21,15 +24,19 @@ jobs:
           yq eval 'del(.services.server.image)' -i packages/twenty-docker/docker-compose.yml
           yq eval '.services.server.build.context = "../../"' -i packages/twenty-docker/docker-compose.yml
           yq eval '.services.server.build.dockerfile = "./packages/twenty-docker/twenty/Dockerfile"' -i packages/twenty-docker/docker-compose.yml
-          
+
           yq eval 'del(.services.worker.image)' -i packages/twenty-docker/docker-compose.yml
           yq eval '.services.worker.build.context = "../../"' -i packages/twenty-docker/docker-compose.yml
           yq eval '.services.worker.build.dockerfile = "./packages/twenty-docker/twenty/Dockerfile"' -i packages/twenty-docker/docker-compose.yml
-          
+
+          echo "Adding SIGN_IN_PREFILLED environment variable to server service..."
+          yq eval '.services.server.environment.SIGN_IN_PREFILLED = "${SIGN_IN_PREFILLED}"' -i packages/twenty-docker/docker-compose.yml
+
           echo "Setting up .env file..."
           cp packages/twenty-docker/.env.example packages/twenty-docker/.env
-          
+
           echo "Generating secrets..."
+          echo "" >> packages/twenty-docker/.env
           echo "# === Randomly generated secrets ===" >> packages/twenty-docker/.env
           echo "APP_SECRET=$(openssl rand -base64 32)" >> packages/twenty-docker/.env
           echo "PG_DATABASE_PASSWORD=$(openssl rand -hex 16)" >> packages/twenty-docker/.env
@@ -38,23 +45,25 @@ jobs:
           cd packages/twenty-docker/
           docker compose build
         working-directory: ./
-      
+
       - name: Create Tunnel
         id: expose-tunnel
         uses: codetalkio/expose-tunnel@v1.5.0
         with:
           service: bore.pub
           port: 3000
-      
+
       - name: Start services with correct SERVER_URL
+        env:
+          TUNNEL_URL: ${{ steps.expose-tunnel.outputs.tunnel-url }}
         run: |
           cd packages/twenty-docker/
-          
-          # Update the SERVER_URL with the tunnel URL
-          echo "Setting SERVER_URL to ${{ steps.expose-tunnel.outputs.tunnel-url }}"
+
+          echo "Setting SERVER_URL to $TUNNEL_URL"
           sed -i '/SERVER_URL=/d' .env
-          echo "SERVER_URL=${{ steps.expose-tunnel.outputs.tunnel-url }}" >> .env
-          
+          echo "" >> .env
+          echo "SERVER_URL=$TUNNEL_URL" >> .env
+
           # Start the services
           echo "Docker compose up..."
           docker compose up -d || {
@@ -62,7 +71,7 @@ jobs:
               docker compose logs
               exit 1
           }
-          
+
           echo "Waiting for services to be ready..."
           count=0
           while [ ! $(docker inspect --format='{{.State.Health.Status}}' twenty-db-1) = "healthy" ] || [ ! $(docker inspect --format='{{.State.Health.Status}}' twenty-server-1) = "healthy" ]; do
@@ -75,7 +84,7 @@ jobs:
               fi
               echo "Still waiting for services... ($count/60)"
           done
-          
+
           echo "All services are up and running!"
         working-directory: ./
 
@@ -90,61 +99,33 @@ jobs:
           fi
         working-directory: ./
 
-      - name: Output tunnel URL to logs
+      - name: Output tunnel URL
+        env:
+          TUNNEL_URL: ${{ steps.expose-tunnel.outputs.tunnel-url }}
         run: |
           echo "✅ Preview Environment Ready!"
-          echo "🔗 Preview URL: ${{ steps.expose-tunnel.outputs.tunnel-url }}"
+          echo "🔗 Preview URL: $TUNNEL_URL"
           echo "⏱️ This environment will be available for 5 hours"
-      
-      - name: Post comment on PR
-        uses: actions/github-script@v6
+          echo "## 🚀 Preview Environment Ready!" >> "$GITHUB_STEP_SUMMARY"
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          echo "Preview URL: $TUNNEL_URL" >> "$GITHUB_STEP_SUMMARY"
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          echo "This environment will automatically shut down after 5 hours." >> "$GITHUB_STEP_SUMMARY"
+          echo "$TUNNEL_URL" > tunnel-url.txt
+
+      - name: Upload tunnel URL artifact
+        uses: actions/upload-artifact@v4
         with:
-          github-token: ${{secrets.GITHUB_TOKEN}}
-          script: |
-            const COMMENT_MARKER = '<!-- PR_PREVIEW_ENV -->';
-            const commentBody = `${COMMENT_MARKER}
-            🚀 **Preview Environment Ready!**
-            
-            Your preview environment is available at: ${{ steps.expose-tunnel.outputs.tunnel-url }}
-            
-            This environment will automatically shut down when the PR is closed or after 5 hours.`;
-            
-            // Get all comments
-            const {data: comments} = await github.rest.issues.listComments({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: ${{ github.event.client_payload.pr_number }},
-            });
-            
-            // Find our comment
-            const botComment = comments.find(comment => comment.body.includes(COMMENT_MARKER));
-            
-            if (botComment) {
-              // Update existing comment
-              await github.rest.issues.updateComment({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                comment_id: botComment.id,
-                body: commentBody
-              });
-              console.log('Updated existing comment');
-            } else {
-              // Create new comment
-              await github.rest.issues.createComment({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                issue_number: ${{ github.event.client_payload.pr_number }},
-                body: commentBody
-              });
-              console.log('Created new comment');
-            }
-      
+          name: tunnel-url
+          path: tunnel-url.txt
+          retention-days: 1
+
       - name: Keep tunnel alive for 5 hours
         run: timeout 300m sleep 18000 # Stop on whichever we reach first (300m or 5hour sleep)
-      
+
       - name: Cleanup
         if: always()
         run: |
           cd packages/twenty-docker/
           docker compose down -v
-        working-directory: ./ 
+        working-directory: ./

.gitignore

@@ -9,6 +9,8 @@
 
 .nx/installation
 .nx/cache
+.nx/workspace-data
+.nx/nxw.js
 
 .pnp.*
 .yarn/*
@@ -26,7 +28,7 @@ coverage
 dist
 storybook-static
 *.tsbuildinfo
-.eslintcache
+.oxlintcache
 .nyc_output
 test-results/
 dump.rdb
@@ -45,4 +47,7 @@ dump.rdb
 .crowdin.yml
 .react-email/
 
-mcp.json
+mcp.json
+/.junie/
+TRANSLATION_QA_REPORT.md
+.playwright-mcp/

.mcp.json

@@ -0,0 +1,22 @@
+{
+  "mcpServers": {
+    "postgres": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-postgres", "${PG_DATABASE_URL}"],
+      "env": {}
+    },
+    "playwright": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["@playwright/mcp@latest", "--no-sandbox", "--headless"],
+      "env": {}
+    },
+    "context7": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@upstash/context7-mcp"],
+      "env": {}
+    }
+  }
+}

.nvmrc

@@ -1 +1 @@
-22.12.0
+24.5.0

.nx/nxw.js

@@ -1,115 +0,0 @@
-"use strict";
-// This file should be committed to your repository! It wraps Nx and ensures
-// that your local installation matches nx.json.
-// See: https://nx.dev/recipes/installation/install-non-javascript for more info.
-
-
-
-
-Object.defineProperty(exports, "__esModule", { value: true });
-const fs = require('fs');
-const path = require('path');
-const cp = require('child_process');
-const installationPath = path.join(__dirname, 'installation', 'package.json');
-function matchesCurrentNxInstall(currentInstallation, nxJsonInstallation) {
-    if (!currentInstallation.devDependencies ||
-        !Object.keys(currentInstallation.devDependencies).length) {
-        return false;
-    }
-    try {
-        if (currentInstallation.devDependencies['nx'] !==
-            nxJsonInstallation.version ||
-            require(path.join(path.dirname(installationPath), 'node_modules', 'nx', 'package.json')).version !== nxJsonInstallation.version) {
-            return false;
-        }
-        for (const [plugin, desiredVersion] of Object.entries(nxJsonInstallation.plugins || {})) {
-            if (currentInstallation.devDependencies[plugin] !== desiredVersion) {
-                return false;
-            }
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function ensureDir(p) {
-    if (!fs.existsSync(p)) {
-        fs.mkdirSync(p, { recursive: true });
-    }
-}
-function getCurrentInstallation() {
-    try {
-        return require(installationPath);
-    }
-    catch {
-        return {
-            name: 'nx-installation',
-            version: '0.0.0',
-            devDependencies: {},
-        };
-    }
-}
-function performInstallation(currentInstallation, nxJson) {
-    fs.writeFileSync(installationPath, JSON.stringify({
-        name: 'nx-installation',
-        devDependencies: {
-            nx: nxJson.installation.version,
-            ...nxJson.installation.plugins,
-        },
-    }));
-    try {
-        cp.execSync('npm i', {
-            cwd: path.dirname(installationPath),
-            stdio: 'inherit',
-        });
-    }
-    catch (e) {
-        // revert possible changes to the current installation
-        fs.writeFileSync(installationPath, JSON.stringify(currentInstallation));
-        // rethrow
-        throw e;
-    }
-}
-function ensureUpToDateInstallation() {
-    const nxJsonPath = path.join(__dirname, '..', 'nx.json');
-    let nxJson;
-    try {
-        nxJson = require(nxJsonPath);
-        if (!nxJson.installation) {
-            console.error('[NX]: The "installation" entry in the "nx.json" file is required when running the nx wrapper. See https://nx.dev/recipes/installation/install-non-javascript');
-            process.exit(1);
-        }
-    }
-    catch {
-        console.error('[NX]: The "nx.json" file is required when running the nx wrapper. See https://nx.dev/recipes/installation/install-non-javascript');
-        process.exit(1);
-    }
-    try {
-        ensureDir(path.join(__dirname, 'installation'));
-        const currentInstallation = getCurrentInstallation();
-        if (!matchesCurrentNxInstall(currentInstallation, nxJson.installation)) {
-            performInstallation(currentInstallation, nxJson);
-        }
-    }
-    catch (e) {
-        const messageLines = [
-            '[NX]: Nx wrapper failed to synchronize installation.',
-        ];
-        if (e instanceof Error) {
-            messageLines.push('');
-            messageLines.push(e.message);
-            messageLines.push(e.stack);
-        }
-        else {
-            messageLines.push(e.toString());
-        }
-        console.error(messageLines.join('\n'));
-        process.exit(1);
-    }
-}
-if (!process.env.NX_WRAPPER_SKIP_INSTALL) {
-    ensureUpToDateInstallation();
-}
-
-require('./installation/node_modules/nx/bin/nx');

.prettierignore

@@ -1,4 +0,0 @@
-# Add files here to ignore them from prettier formatting
-/dist
-/coverage
-/.nx/cache

.prettierrc

@@ -1,5 +0,0 @@
-{
-  "singleQuote": true,
-  "trailingComma": "all",
-  "endOfLine": "auto"
-}

.vscode/extensions.json

@@ -1,7 +1,7 @@
 {
   "recommendations": [
     "arcanis.vscode-zipfs",
-    "dbaeumer.vscode-eslint",
+    "oxc.oxc-vscode",
     "esbenp.prettier-vscode",
     "figma.figma-vscode-extension",
     "firsttris.vscode-jest-runner",

.vscode/launch.json

@@ -5,13 +5,10 @@
     {
       "name": "twenty-server - start debug",
       "type": "node",
+      "runtimeVersion": "24.5",
       "request": "launch",
       "runtimeExecutable": "npx",
-      "runtimeArgs": [
-        "nx",
-        "run",
-        "twenty-server:start"
-      ],
+      "runtimeArgs": ["nx", "run", "twenty-server:start"],
       "outputCapture": "std",
       "internalConsoleOptions": "openOnSessionStart",
       "console": "internalConsole",
@@ -22,11 +19,7 @@
       "type": "node",
       "request": "launch",
       "runtimeExecutable": "npx",
-      "runtimeArgs": [
-        "nx",
-        "run",
-        "twenty-server:worker"
-      ],
+      "runtimeArgs": ["nx", "run", "twenty-server:worker"],
       "outputCapture": "std",
       "internalConsoleOptions": "openOnSessionStart",
       "console": "internalConsole",
@@ -37,7 +30,7 @@
       "type": "node",
       "request": "launch",
       "runtimeExecutable": "npx",
-      "runtimeVersion": "^22.12.0",
+      "runtimeVersion": "24.5",
       "runtimeArgs": [
         "nx",
         "run",
@@ -73,6 +66,30 @@
         "--",
         "--config",
         "./jest-integration.config.ts",
+        "${relativeFile}",
+        "--silent=false",
+        "${input:updateSnapshot}"
+      ],
+      "cwd": "${workspaceFolder}/packages/twenty-server",
+      "console": "integratedTerminal",
+      "internalConsoleOptions": "neverOpen",
+      "env": {
+        "NODE_ENV": "test",
+        "NODE_OPTIONS": "--max-old-space-size=12288 --import tsx/esm"
+      }
+    },
+    {
+      "type": "node",
+      "request": "launch",
+      "name": "twenty-server - debug unit test file (to launch with test file open)",
+      "runtimeExecutable": "npx",
+      "runtimeArgs": [
+        "nx",
+        "run",
+        "twenty-server:jest",
+        "--",
+        "--config",
+        "./jest.config.mjs",
         "${relativeFile}"
       ],
       "cwd": "${workspaceFolder}/packages/twenty-server",
@@ -80,7 +97,16 @@
       "internalConsoleOptions": "neverOpen",
       "env": {
         "NODE_ENV": "test"
-      },
+      }
+    }
+  ],
+  "inputs": [
+    {
+      "id": "updateSnapshot",
+      "type": "pickString",
+      "description": "Update snapshots?",
+      "options": ["", "--updateSnapshot"],
+      "default": ""
     }
   ]
-}
+}

.vscode/settings.json

@@ -1,26 +1,31 @@
 {
   "editor.formatOnSave": false,
-  "files.eol": "auto",
+  "files.eol": "\n",
+  "files.insertFinalNewline": true,
+  "files.trimTrailingWhitespace": true,
   "[typescript]": {
-    "editor.formatOnSave": false,
+    "editor.formatOnSave": true,
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
     "editor.codeActionsOnSave": {
-      "source.fixAll.eslint": "explicit",
+      "source.fixAll.oxc": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
   },
   "[javascript]": {
-    "editor.formatOnSave": false,
+    "editor.formatOnSave": true,
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
     "editor.codeActionsOnSave": {
-      "source.fixAll.eslint": "explicit",
+      "source.fixAll.oxc": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
   },
   "[typescriptreact]": {
-    "editor.formatOnSave": false,
+    "editor.formatOnSave": true,
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
     "editor.codeActionsOnSave": {
-      "source.fixAll.eslint": "explicit",
+      "source.fixAll.oxc": "explicit",
       "source.addMissingImports": "always",
       "source.organizeImports": "always"
     }
@@ -29,6 +34,7 @@
     "editor.formatOnSave": true
   },
   "javascript.format.enable": false,
+  "javascript.preferences.importModuleSpecifier": "non-relative",
   "typescript.format.enable": false,
   "cSpell.enableFiletypes": [
     "!javascript",
@@ -45,9 +51,11 @@
   "search.exclude": {
     "**/.yarn": true
   },
-  "eslint.debug": true,
+  "oxc.lint.enable": true,
   "files.associations": {
     ".cursorrules": "markdown"
   },
-  "jestrunner.codeLensSelector": "**/*.{test,spec,integration-spec}.{js,jsx,ts,tsx}"
+  "jestrunner.codeLensSelector": "**/*.{test,spec,integration-spec}.{js,jsx,ts,tsx}",
+  "typescript.tsdk": "node_modules/typescript/lib",
+  "typescript.experimental.useTsgo": false
 }

.vscode/tasks.json

@@ -2,12 +2,64 @@
 	"version": "2.0.0",
 	"tasks": [
 		{
-			"type": "npm",
-			"script": "start",
-			"path": "server",
-			"problemMatcher": [],
-			"label": "yarn: start - server",
-			"detail": "yarn start"
+			"label": "twenty-server - run integration test file",
+			"type": "shell",
+			"command": "npx nx run twenty-server:jest -- --config ./jest-integration.config.ts ${relativeFile} --silent=false ${input:watchMode} ${input:updateSnapshot}",
+			"options": {
+				"cwd": "${workspaceFolder}/packages/twenty-server",
+				"env": {
+					"NODE_ENV": "test",
+					"NODE_OPTIONS": "--max-old-space-size=12288 --import tsx/esm"
+				},
+				"shell": {
+					"executable": "/bin/zsh",
+					"args": ["-l", "-c"]
+				}
+			},
+			"presentation": {
+				"reveal": "always",
+				"panel": "new",
+				"close": false
+			},
+			"problemMatcher": []
+		},
+		{
+			"label": "twenty-server - run unit test file",
+			"type": "shell",
+			"command": "npx nx run twenty-server:jest -- --config ./jest.config.mjs ${relativeFile} --silent=false ${input:watchMode} ${input:updateSnapshot}",
+			"options": {
+				"cwd": "${workspaceFolder}/packages/twenty-server",
+				"env": {
+					"NODE_ENV": "test",
+					"NODE_OPTIONS": "--max-old-space-size=12288 --import tsx/esm"
+				},
+				"shell": {
+					"executable": "/bin/zsh",
+					"args": ["-l", "-c"]
+				}
+			},
+			"presentation": {
+				"reveal": "always",
+				"panel": "new",
+				"close": false
+			},
+			"problemMatcher": []
+		}
+	],
+	"inputs": [
+		{
+			"id": "watchMode",
+			"type": "pickString",
+			"description": "Enable watch mode?",
+			"options": ["", "--watch"],
+			"default": ""
+		},
+		{
+			"id": "updateSnapshot",
+			"type": "pickString",
+			"description": "Update snapshots?",
+			"options": ["", "--updateSnapshot"],
+			"default": ""
 		}
 	]
-}
+}

.vscode/twenty.code-workspace

@@ -4,10 +4,6 @@
       "name": "ROOT",
       "path": "../"
     },
-    {
-      "name": "packages/twenty-chrome-extension",
-      "path": "../packages/twenty-chrome-extension"
-    },
     {
       "name": "packages/twenty-docker",
       "path": "../packages/twenty-docker"
@@ -41,8 +37,8 @@
       "path": "../packages/twenty-zapier"
     },
     {
-      "name": "tools/eslint-rules",
-      "path": "../tools/eslint-rules"
+      "name": "packages/twenty-oxlint-rules",
+      "path": "../packages/twenty-oxlint-rules"
     },
     {
       "name": "packages/twenty-e2e-testing",
@@ -53,23 +49,26 @@
     "editor.formatOnSave": false,
     "files.eol": "auto",
     "[typescript]": {
-      "editor.formatOnSave": false,
+      "editor.formatOnSave": true,
+      "editor.defaultFormatter": "esbenp.prettier-vscode",
       "editor.codeActionsOnSave": {
-        "source.fixAll.eslint": "explicit",
+        "source.fixAll.oxc": "explicit",
         "source.addMissingImports": "always"
       }
     },
     "[javascript]": {
-      "editor.formatOnSave": false,
+      "editor.formatOnSave": true,
+      "editor.defaultFormatter": "esbenp.prettier-vscode",
       "editor.codeActionsOnSave": {
-        "source.fixAll.eslint": "explicit",
+        "source.fixAll.oxc": "explicit",
         "source.addMissingImports": "always"
       }
     },
     "[typescriptreact]": {
-      "editor.formatOnSave": false,
+      "editor.formatOnSave": true,
+      "editor.defaultFormatter": "esbenp.prettier-vscode",
       "editor.codeActionsOnSave": {
-        "source.fixAll.eslint": "explicit",
+        "source.fixAll.oxc": "explicit",
         "source.addMissingImports": "always"
       }
     },
@@ -92,7 +91,7 @@
     "typescript.preferences.importModuleSpecifier": "non-relative",
     "[javascript][typescript][typescriptreact]": {
       "editor.codeActionsOnSave": {
-        "source.fixAll.eslint": "explicit",
+        "source.fixAll.oxc": "explicit",
         "source.addMissingImports": "always"
       }
     },
@@ -102,6 +101,7 @@
     "files.exclude": {
       "packages/": true
     },
+    "oxc.lint.enable": true,
     "jest.runMode": "on-demand",
     "jest.disabledWorkspaceFolders": [
       "ROOT",

.yarn/patches/@wyw-in-js-transform-npm-0.7.0-ba641dc99f.patch

@@ -0,0 +1,58 @@
+diff --git a/esm/cache.js b/esm/cache.js
+index 07cf6d7dd99effb9c3464b620ba67a7f445224f5..248bb527923499a6be8065ee7a3613b55819c58c 100644
+--- a/esm/cache.js
++++ b/esm/cache.js
+@@ -69,17 +69,20 @@ export class TransformCacheCollection {
+       this.invalidate(cacheName, filename);
+     });
+   }
+-  invalidateIfChanged(filename, content) {
++  invalidateIfChanged(filename, content, _visited) {
++    const visited = _visited || new Set();
++    if (visited.has(filename)) {
++      return false;
++    }
++    visited.add(filename);
+     const fileEntrypoint = this.get('entrypoints', filename);
+ 
+-    // We need to check all dependencies of the file
+-    // because they might have changed as well.
+     if (fileEntrypoint) {
+       for (const [, dependency] of fileEntrypoint.dependencies) {
+         const dependencyFilename = dependency.resolved;
+         if (dependencyFilename) {
+           const dependencyContent = fs.readFileSync(dependencyFilename, 'utf8');
+-          this.invalidateIfChanged(dependencyFilename, dependencyContent);
++          this.invalidateIfChanged(dependencyFilename, dependencyContent, visited);
+         }
+       }
+     }
+diff --git a/lib/cache.js b/lib/cache.js
+index 0762ed7d3c39b31000f7aa7d8156da15403c8e64..6955410cd3c9ec53cf7a01c8346abc4c47fff791 100644
+--- a/lib/cache.js
++++ b/lib/cache.js
+@@ -77,17 +77,20 @@ class TransformCacheCollection {
+       this.invalidate(cacheName, filename);
+     });
+   }
+-  invalidateIfChanged(filename, content) {
++  invalidateIfChanged(filename, content, _visited) {
++    const visited = _visited || new Set();
++    if (visited.has(filename)) {
++      return false;
++    }
++    visited.add(filename);
+     const fileEntrypoint = this.get('entrypoints', filename);
+ 
+-    // We need to check all dependencies of the file
+-    // because they might have changed as well.
+     if (fileEntrypoint) {
+       for (const [, dependency] of fileEntrypoint.dependencies) {
+         const dependencyFilename = dependency.resolved;
+         if (dependencyFilename) {
+           const dependencyContent = _nodeFs.default.readFileSync(dependencyFilename, 'utf8');
+-          this.invalidateIfChanged(dependencyFilename, dependencyContent);
++          this.invalidateIfChanged(dependencyFilename, dependencyContent, visited);
+         }
+       }
+     }

.yarn/patches/react-phone-number-input-npm-3.4.5-dc2895c306.patch

@@ -0,0 +1,45 @@
+diff --git a/commonjs/helpers/phoneInputHelpers.js b/commonjs/helpers/phoneInputHelpers.js
+index 8fd1b16ec670ab7d0abcb800a2edd7848e86ce1e..ab6e0dd90def507629c2ead59fba929a739f0759 100644
+--- a/commonjs/helpers/phoneInputHelpers.js
++++ b/commonjs/helpers/phoneInputHelpers.js
+@@ -574,7 +574,9 @@ function onPhoneDigitsChange(phoneDigits, _ref5) {
+   // Generate the new `value` property.
+   var value;
+   if (phoneDigits) {
+-    if (phoneDigits[0] === '+') {
++    if(phoneDigits === prevPhoneDigits) {
++			value = e164(phoneDigits, country, metadata)
++		} else if (phoneDigits[0] === '+') {
+       if (phoneDigits === '+') {
+         value = undefined;
+       } else if (country && (0, _getInternationalPhoneNumberPrefix["default"])(country, metadata).indexOf(phoneDigits) === 0) {
+diff --git a/modules/helpers/phoneInputHelpers.js b/modules/helpers/phoneInputHelpers.js
+index 75e8463f6b5d32c560d1dec2776671bee2af1d07..99af2904807cc3c23aea566bbeebda2a5bc9afa4 100644
+--- a/modules/helpers/phoneInputHelpers.js
++++ b/modules/helpers/phoneInputHelpers.js
+@@ -551,7 +551,9 @@ export function onPhoneDigitsChange(phoneDigits, _ref5) {
+   // Generate the new `value` property.
+   var value;
+   if (phoneDigits) {
+-    if (phoneDigits[0] === '+') {
++    if(phoneDigits === prevPhoneDigits) {
++			value = e164(phoneDigits, country, metadata)
++		} else if (phoneDigits[0] === '+') {
+       if (phoneDigits === '+') {
+         value = undefined;
+       } else if (country && getInternationalPhoneNumberPrefix(country, metadata).indexOf(phoneDigits) === 0) {
+diff --git a/react-styleguidist/project/source/helpers/phoneInputHelpers.js b/react-styleguidist/project/source/helpers/phoneInputHelpers.js
+index b844ef0fd183fe4f45e436bdb2382fc2987dcef2..8960834900e59a57e130521fd369e82fe05f5090 100644
+--- a/react-styleguidist/project/source/helpers/phoneInputHelpers.js
++++ b/react-styleguidist/project/source/helpers/phoneInputHelpers.js
+@@ -505,7 +505,9 @@ export function onPhoneDigitsChange(phoneDigits, {
+ 	// Generate the new `value` property.
+ 	let value
+ 	if (phoneDigits) {
+-		if (phoneDigits[0] === '+') {
++		if(phoneDigits === prevPhoneDigits) {
++			value = e164(phoneDigits, country, metadata)
++		} else if (phoneDigits[0] === '+') {
+ 			if (phoneDigits === '+') {
+ 				value = undefined
+ 			} else if (country && getInternationalPhoneNumberPrefix(country, metadata).indexOf(phoneDigits) !== 0) {

.yarnrc.yml

@@ -6,4 +6,4 @@ enableInlineHunks: true
 
 nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-4.4.0.cjs
+yarnPath: .yarn/releases/yarn-4.9.2.cjs