feat(platform): settings permissions, admin, billing attribution (#5545)

* fix(invites): preserve active organization for external access

Keep organization activation server-owned so failed membership checks cannot clear a valid session context.

* feat(admin, billing, settings): cleanup settings visibility, billing actor resolution, new admin routes

* address comments

* chore(db): reset pending migrations before staging merge

Remove locally generated migrations so they can be regenerated against the latest staging schema without preserving stale snapshots or numbering.

* regen migrations

* address comments

* chore(db): reset generated migrations before staging merge

Remove this branch's generated migrations so they can be regenerated against the latest staging schema with fresh numbering.

* upgrade global work

* fix lint

* address comments

* legacy callbacks correctness

* address comments

* update

* guardrail attribution

packages/testing/src/mocks/schema.mock.ts

@@ -47,6 +47,19 @@ export const schemaMock = {
     createdAt: 'createdAt',
     updatedAt: 'updatedAt',
   },
+  outboxEvent: {
+    id: 'id',
+    eventType: 'eventType',
+    payload: 'payload',
+    status: 'status',
+    attempts: 'attempts',
+    maxAttempts: 'maxAttempts',
+    availableAt: 'availableAt',
+    lockedAt: 'lockedAt',
+    lastError: 'lastError',
+    createdAt: 'createdAt',
+    processedAt: 'processedAt',
+  },
   verification: {
     id: 'id',
     identifier: 'identifier',
@@ -187,11 +200,13 @@ export const schemaMock = {
     pausePoints: 'pausePoints',
     totalPauseCount: 'totalPauseCount',
     resumedCount: 'resumedCount',
+    automaticResumeRetryCount: 'automaticResumeRetryCount',
     status: 'status',
     metadata: 'metadata',
     pausedAt: 'pausedAt',
     updatedAt: 'updatedAt',
     expiresAt: 'expiresAt',
+    nextResumeAt: 'nextResumeAt',
   },
   resumeQueue: {
     id: 'id',
@@ -476,6 +491,7 @@ export const schemaMock = {
     organizationId: 'organizationId',
     workspaceMode: 'workspaceMode',
     billedAccountUserId: 'billedAccountUserId',
+    storageUsedBytes: 'storageUsedBytes',
     allowPersonalApiKeys: 'allowPersonalApiKeys',
     inboxEnabled: 'inboxEnabled',
     inboxAddress: 'inboxAddress',