@lucern/contracts 0.1.0-alpha.1

package/README.md

@@ -0,0 +1,43 @@
+# @lucern/contracts
+
+Shared boundary contracts and public types for the Lucern reasoning platform.
+
+## What's in the box
+
+- **Versioned resource namespaces** at `./v1/<resource>/v1.ts`:
+  - `@lucern/contracts/v1/beliefs`, `/v1/evidence`, `/v1/questions`, `/v1/topics`,
+    `/v1/graph`, `/v1/agents`, `/v1/worktrees`, `/v1/ontologies`
+  - These are the contract surfaces for each Lucern resource type. Use them when you
+    want to commit to a specific major version of a resource's schema.
+- **Flat support contracts** at the package root:
+  - `auth`, `gateway`, `context-pack`, `prompt`, `workflow-runtime`, `lens-filter`,
+    `lens-workflow`, `mcp-tools`, `sdk-methods`, `sdk-tools`, `api-enums`,
+    `text-matching`, `ids`, `convex-admin`, `events`
+  - Cross-cutting surfaces that don't cleanly slot into a single resource namespace.
+
+## Stability
+
+This package is an **alpha preview** published during the EK-16 code-separation track.
+Breaking changes may land between alpha versions without a major-version bump until
+the first `1.0.0` release.
+
+Compatibility barrels at pre-reshape import paths (`auth-context`, `auth-session`,
+`events-types`, `topic-scope`, `ontology-matching`) are retained until the
+`1.0.0` cut to smooth the consumer migration.
+
+## Usage
+
+```ts
+// Versioned resource import (preferred for new code)
+import { ROOT_TOPIC_ID, type TopicDoc } from "@lucern/contracts/v1/topics";
+
+// Flat support contract import
+import type { AuthContext } from "@lucern/contracts/auth.contract";
+
+// Or via the package-root barrel (re-exports everything)
+import type { AuthContext, TopicDoc } from "@lucern/contracts";
+```
+
+## License
+
+UNLICENSED — internal Lucern / Stack use. See project root for details.

package/dist/api-enums.contract.d.ts

@@ -0,0 +1,59 @@
+/**
+ * API Enum Contract Definitions
+ *
+ * Canonical enum values for all API-facing enumerations.
+ * These are co-equal with MCP contracts as external contracts.
+ * SDK types are DERIVED from these — not independently authored.
+ *
+ * CONTRACT SURFACE: Adding a new enum value is additive (non-breaking).
+ * Removing or renaming an existing value is a BREAKING CHANGE.
+ */
+/** Fork reasons — why a scored belief was branched */
+export declare const FORK_REASONS: readonly ["refinement", "contradiction_response", "scope_change", "confidence_collapse", "manual"];
+export type ForkReason = (typeof FORK_REASONS)[number];
+/** Confidence modulation triggers — what caused a confidence change */
+export declare const CONFIDENCE_TRIGGERS: readonly ["evidence_added", "contradiction_detected", "merge_outcome", "manual", "decay"];
+export type ConfidenceTrigger = (typeof CONFIDENCE_TRIGGERS)[number];
+/** Belief status — lifecycle state */
+export declare const BELIEF_STATUSES: readonly ["unscored", "scored", "archived"];
+export type BeliefStatus = (typeof BELIEF_STATUSES)[number];
+/** Reasoning methods — how an edge relationship was determined */
+export declare const REASONING_METHODS: readonly ["deductive", "inductive", "abductive", "analogical", "empirical"];
+export type ReasoningMethod = (typeof REASONING_METHODS)[number];
+/** Defeat types (Pollock taxonomy) — how a contradiction operates */
+export declare const DEFEAT_TYPES: readonly ["rebuts", "undercuts", "undermines"];
+export type DefeatType = (typeof DEFEAT_TYPES)[number];
+/** Contradiction severity levels */
+export declare const CONTRADICTION_SEVERITIES: readonly ["low", "medium", "high", "critical"];
+export type ContradictionSeverity = (typeof CONTRADICTION_SEVERITIES)[number];
+/** Contradiction resolution status */
+export declare const CONTRADICTION_STATUSES: readonly ["unresolved", "resolved", "accepted"];
+export type ContradictionStatus = (typeof CONTRADICTION_STATUSES)[number];
+/** Merge outcome types — how a worktree merge resolved */
+export declare const MERGE_OUTCOMES: readonly ["validated", "invalidated", "forked", "inconclusive"];
+export type MergeOutcome = (typeof MERGE_OUTCOMES)[number];
+/** Worktree phases — investigation lifecycle within a checked-out worktree */
+export declare const WORKTREE_PHASES: readonly ["hypothesis", "investigation", "evaluation", "resolution"];
+export type WorktreePhase = (typeof WORKTREE_PHASES)[number];
+/** Branch status — thematic branch lifecycle */
+export declare const BRANCH_STATUSES: readonly ["dormant", "active", "archived"];
+export type BranchStatus = (typeof BRANCH_STATUSES)[number];
+/** Pull request status — review lifecycle before merge */
+export declare const PULL_REQUEST_STATUSES: readonly ["pending_review", "changes_requested", "approved", "blocked"];
+export type PullRequestStatus = (typeof PULL_REQUEST_STATUSES)[number];
+/** Epistemic layers — the hierarchy of knowledge */
+export declare const EPISTEMIC_LAYERS: readonly ["L1", "L2", "L3", "L4"];
+export type EpistemicLayer = (typeof EPISTEMIC_LAYERS)[number];
+/**
+ * Judgment type — classification of the determination.
+ *
+ * Phase 1: These are new enum values for the Judgment (L4) vocabulary.
+ * The existing code uses "Decision" — these are the forward-looking terms
+ * that will eventually replace the Decision vocabulary (Phase 2-3).
+ */
+export declare const JUDGMENT_TYPES: readonly ["investment_thesis", "thesis_maturity", "contradiction_ruling", "scope_determination", "confidence_ruling"];
+export type JudgmentType = (typeof JUDGMENT_TYPES)[number];
+/** Core edge types used in the Integration Surfaces */
+export declare const INTEGRATION_EDGE_TYPES: readonly ["informs", "grounds", "answers", "contradicts", "supports", "depends_on", "derived_from", "contains", "supersedes", "tests"];
+export type IntegrationEdgeType = (typeof INTEGRATION_EDGE_TYPES)[number];
+//# sourceMappingURL=api-enums.contract.d.ts.map

package/dist/api-enums.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-enums.contract.d.ts","sourceRoot":"","sources":["../src/api-enums.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,sDAAsD;AACtD,eAAO,MAAM,YAAY,oGAMf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,2FAMtB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,sCAAsC;AACtC,eAAO,MAAM,eAAe,6CAIlB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAM5D,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,6EAMpB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qEAAqE;AACrE,eAAO,MAAM,YAAY,gDAIf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,oCAAoC;AACpC,eAAO,MAAM,wBAAwB,gDAK3B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,iDAIzB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM1E,0DAA0D;AAC1D,eAAO,MAAM,cAAc,iEAKjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,8EAA8E;AAC9E,eAAO,MAAM,eAAe,sEAKlB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAM7D,gDAAgD;AAChD,eAAO,MAAM,eAAe,4CAIlB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAM5D,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,yEAKxB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMvE,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,mCAKnB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM/D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,uHAMjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAM3D,uDAAuD;AACvD,eAAO,MAAM,sBAAsB,wIAczB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/api-enums.contract.js

@@ -0,0 +1,148 @@
+/**
+ * API Enum Contract Definitions
+ *
+ * Canonical enum values for all API-facing enumerations.
+ * These are co-equal with MCP contracts as external contracts.
+ * SDK types are DERIVED from these — not independently authored.
+ *
+ * CONTRACT SURFACE: Adding a new enum value is additive (non-breaking).
+ * Removing or renaming an existing value is a BREAKING CHANGE.
+ */
+// =============================================================================
+// BELIEF ENUMS
+// =============================================================================
+/** Fork reasons — why a scored belief was branched */
+export const FORK_REASONS = [
+    "refinement", // Belief text evolved based on new understanding
+    "contradiction_response", // Created in response to a detected contradiction
+    "scope_change", // Belief scope narrowed or broadened
+    "confidence_collapse", // Confidence dropped below viability threshold
+    "manual", // User-initiated fork without specific trigger
+];
+/** Confidence modulation triggers — what caused a confidence change */
+export const CONFIDENCE_TRIGGERS = [
+    "evidence_added", // New evidence bore on the belief
+    "contradiction_detected", // A contradiction was flagged involving this belief
+    "merge_outcome", // Merge scoring determined this confidence
+    "manual", // User manually adjusted confidence
+    "decay", // Time-based confidence erosion
+];
+/** Belief status — lifecycle state */
+export const BELIEF_STATUSES = [
+    "unscored", // Draft — editable in worktree (on feature branch, pre-merge)
+    "scored", // Merged — formulation frozen (merged to main)
+    "archived", // Soft-deleted — preserved in history (git rm)
+];
+// =============================================================================
+// EDGE ENUMS
+// =============================================================================
+/** Reasoning methods — how an edge relationship was determined */
+export const REASONING_METHODS = [
+    "deductive", // Logically entailed
+    "inductive", // Generalized from instances
+    "abductive", // Best explanation inference
+    "analogical", // Reasoning by analogy
+    "empirical", // Direct observation/measurement
+];
+/** Defeat types (Pollock taxonomy) — how a contradiction operates */
+export const DEFEAT_TYPES = [
+    "rebuts", // Direct contradiction — reasons for the negation
+    "undercuts", // Breaks the inference link between evidence and belief
+    "undermines", // Attacks a premise the belief depends on
+];
+/** Contradiction severity levels */
+export const CONTRADICTION_SEVERITIES = [
+    "low", // Minor tension, may not require action
+    "medium", // Moderate conflict, should be investigated
+    "high", // Significant contradiction, likely needs resolution
+    "critical", // Blocks progress — must be addressed before judgment
+];
+/** Contradiction resolution status */
+export const CONTRADICTION_STATUSES = [
+    "unresolved", // Open conflict — may persist indefinitely
+    "resolved", // Conflict addressed (one belief forked, archived, or confidence adjusted)
+    "accepted", // Explicitly accepted as irreconcilable — both beliefs maintained
+];
+// =============================================================================
+// WORKTREE ENUMS (git worktree lifecycle)
+// =============================================================================
+/** Merge outcome types — how a worktree merge resolved */
+export const MERGE_OUTCOMES = [
+    "validated", // Beliefs confirmed — clean merge to main
+    "invalidated", // Defeat recorded — confidence collapsed (merge with revert)
+    "forked", // Beliefs split into competing versions (fork from merge point)
+    "inconclusive", // Insufficient evidence — stashed (git stash)
+];
+/** Worktree phases — investigation lifecycle within a checked-out worktree */
+export const WORKTREE_PHASES = [
+    "hypothesis", // Form testable claims (write the code — commits)
+    "investigation", // Collect evidence (run the tests — more commits)
+    "evaluation", // Update credences (review the results — amend as needed)
+    "resolution", // Determine outcome (merge to main, fork, or stash)
+];
+// =============================================================================
+// BRANCH ENUMS (git branch lifecycle)
+// =============================================================================
+/** Branch status — thematic branch lifecycle */
+export const BRANCH_STATUSES = [
+    "dormant", // Branch exists but no active worktree (no one investigating)
+    "active", // At least one worktree is investigating this branch
+    "archived", // Branch retired — no longer a relevant thematic container
+];
+// =============================================================================
+// PULL REQUEST ENUMS (git pull request lifecycle)
+// =============================================================================
+/** Pull request status — review lifecycle before merge */
+export const PULL_REQUEST_STATUSES = [
+    "pending_review", // PR opened — awaiting reviewer feedback
+    "changes_requested", // Reviewer requests changes before merge
+    "approved", // Approved — ready to merge
+    "blocked", // Blocked — cannot merge until contradiction is resolved
+];
+// =============================================================================
+// LAYER ENUMS
+// =============================================================================
+/** Epistemic layers — the hierarchy of knowledge */
+export const EPISTEMIC_LAYERS = [
+    "L1", // Source — the given (vendored deps)
+    "L2", // Evidence — the interpreted (test suite)
+    "L3", // Belief — the structural (source files)
+    "L4", // Judgment — the committed (release tags)
+];
+// =============================================================================
+// JUDGMENT ENUMS (Phase 1: new vocabulary)
+// =============================================================================
+/**
+ * Judgment type — classification of the determination.
+ *
+ * Phase 1: These are new enum values for the Judgment (L4) vocabulary.
+ * The existing code uses "Decision" — these are the forward-looking terms
+ * that will eventually replace the Decision vocabulary (Phase 2-3).
+ */
+export const JUDGMENT_TYPES = [
+    "investment_thesis", // Judgment on an investment opportunity
+    "thesis_maturity", // Judgment that a thesis is ready for IC presentation
+    "contradiction_ruling", // Judgment on how to handle an irreconcilable contradiction
+    "scope_determination", // Judgment that defines or redefines investigation scope
+    "confidence_ruling", // Judgment that overrides automated confidence for policy reasons
+];
+// =============================================================================
+// SUPPORT RELATION ENUMS
+// =============================================================================
+/** Core edge types used in the Integration Surfaces */
+export const INTEGRATION_EDGE_TYPES = [
+    // Support relations
+    "informs", // Evidence bears on a belief (weight = direction/strength)
+    "grounds", // Source provides raw basis for evidence
+    "answers", // Evidence or belief resolves a question
+    // Defeat relations (Pollock) — weight carries direction
+    "contradicts", // Rebuts — direct contradiction
+    "supports", // Weight carries valence (negative = weakens/undercuts)
+    // Structural relations
+    "depends_on", // Belief B requires Belief A
+    "derived_from", // Provenance lineage
+    "contains", // Hierarchical containment
+    "supersedes", // New version replaces old (lineage)
+    "tests", // Question tests a belief
+];
+//# sourceMappingURL=api-enums.contract.js.map

package/dist/api-enums.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-enums.contract.js","sourceRoot":"","sources":["../src/api-enums.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY,EAAE,iDAAiD;IAC/D,wBAAwB,EAAE,kDAAkD;IAC5E,cAAc,EAAE,qCAAqC;IACrD,qBAAqB,EAAE,+CAA+C;IACtE,QAAQ,EAAE,+CAA+C;CACjD,CAAC;AAGX,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,gBAAgB,EAAE,kCAAkC;IACpD,wBAAwB,EAAE,oDAAoD;IAC9E,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE,gCAAgC;CACjC,CAAC;AAGX,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,8DAA8D;IAC1E,QAAQ,EAAE,+CAA+C;IACzD,UAAU,EAAE,+CAA+C;CACnD,CAAC;AAGX,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,6BAA6B;IAC1C,WAAW,EAAE,6BAA6B;IAC1C,YAAY,EAAE,uBAAuB;IACrC,WAAW,EAAE,iCAAiC;CACtC,CAAC;AAGX,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,kDAAkD;IAC5D,WAAW,EAAE,wDAAwD;IACrE,YAAY,EAAE,0CAA0C;CAChD,CAAC;AAGX,oCAAoC;AACpC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,wCAAwC;IAC/C,QAAQ,EAAE,4CAA4C;IACtD,MAAM,EAAE,qDAAqD;IAC7D,UAAU,EAAE,sDAAsD;CAC1D,CAAC;AAGX,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,YAAY,EAAE,2CAA2C;IACzD,UAAU,EAAE,2EAA2E;IACvF,UAAU,EAAE,kEAAkE;CACtE,CAAC;AAGX,gFAAgF;AAChF,0CAA0C;AAC1C,gFAAgF;AAEhF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,WAAW,EAAE,0CAA0C;IACvD,aAAa,EAAE,6DAA6D;IAC5E,QAAQ,EAAE,gEAAgE;IAC1E,cAAc,EAAE,8CAA8C;CACtD,CAAC;AAGX,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,YAAY,EAAE,kDAAkD;IAChE,eAAe,EAAE,kDAAkD;IACnE,YAAY,EAAE,0DAA0D;IACxE,YAAY,EAAE,oDAAoD;CAC1D,CAAC;AAGX,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,8DAA8D;IACzE,QAAQ,EAAE,qDAAqD;IAC/D,UAAU,EAAE,2DAA2D;CAC/D,CAAC;AAGX,gFAAgF;AAChF,kDAAkD;AAClD,gFAAgF;AAEhF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,gBAAgB,EAAE,yCAAyC;IAC3D,mBAAmB,EAAE,yCAAyC;IAC9D,UAAU,EAAE,4BAA4B;IACxC,SAAS,EAAE,yDAAyD;CAC5D,CAAC;AAGX,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,oDAAoD;AACpD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,qCAAqC;IAC3C,IAAI,EAAE,0CAA0C;IAChD,IAAI,EAAE,yCAAyC;IAC/C,IAAI,EAAE,0CAA0C;CACxC,CAAC;AAGX,gFAAgF;AAChF,2CAA2C;AAC3C,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,mBAAmB,EAAE,wCAAwC;IAC7D,iBAAiB,EAAE,sDAAsD;IACzE,sBAAsB,EAAE,4DAA4D;IACpF,qBAAqB,EAAE,yDAAyD;IAChF,mBAAmB,EAAE,kEAAkE;CAC/E,CAAC;AAGX,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,oBAAoB;IACpB,SAAS,EAAE,2DAA2D;IACtE,SAAS,EAAE,yCAAyC;IACpD,SAAS,EAAE,yCAAyC;IACpD,wDAAwD;IACxD,aAAa,EAAE,gCAAgC;IAC/C,UAAU,EAAE,wDAAwD;IACpE,uBAAuB;IACvB,YAAY,EAAE,6BAA6B;IAC3C,cAAc,EAAE,qBAAqB;IACrC,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,qCAAqC;IACnD,OAAO,EAAE,0BAA0B;CAC3B,CAAC"}

package/dist/auth-context.contract.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @lucern/contracts — auth-context compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";
+//# sourceMappingURL=auth-context.contract.d.ts.map

package/dist/auth-context.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.contract.d.ts","sourceRoot":"","sources":["../src/auth-context.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,iBAAiB,CAAC"}

package/dist/auth-context.contract.js

@@ -0,0 +1,9 @@
+/**
+ * @lucern/contracts — auth-context compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";
+//# sourceMappingURL=auth-context.contract.js.map

package/dist/auth-context.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.contract.js","sourceRoot":"","sources":["../src/auth-context.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,iBAAiB,CAAC"}

package/dist/auth-session.contract.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @lucern/contracts — auth-session compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";
+//# sourceMappingURL=auth-session.contract.d.ts.map

package/dist/auth-session.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.contract.d.ts","sourceRoot":"","sources":["../src/auth-session.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,iBAAiB,CAAC"}

package/dist/auth-session.contract.js

@@ -0,0 +1,9 @@
+/**
+ * @lucern/contracts — auth-session compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";
+//# sourceMappingURL=auth-session.contract.js.map

package/dist/auth-session.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.contract.js","sourceRoot":"","sources":["../src/auth-session.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,iBAAiB,CAAC"}

package/dist/auth.contract.d.ts

@@ -0,0 +1,89 @@
+/**
+ * @lucern/contracts — auth (canonical support contract)
+ *
+ * Consolidated flat support surface for Lucern authentication:
+ *   - Session primitives (auth modes, principal types, lifecycle)
+ *   - AuthContext shape + McpTransportKind + LucernSdkClient alias
+ *
+ * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts
+ * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).
+ */
+export declare const SESSION_AUTH_MODES: readonly ["interactive_user", "service_principal", "tenant_api_key", "session_token"];
+export type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];
+export declare const SESSION_PRINCIPAL_TYPES: readonly ["human", "service", "agent"];
+export type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];
+export declare const SESSION_LIFECYCLE_STATUSES: readonly ["active", "expired", "revoked"];
+export type SessionLifecycleStatus = (typeof SESSION_LIFECYCLE_STATUSES)[number];
+export type SessionDelegationHop = {
+    principalId: string;
+    principalType: SessionPrincipalType;
+    authMode?: SessionAuthMode;
+    sessionId?: string;
+    delegatedAt?: number;
+    reason?: string;
+};
+export type SessionAuditOutcome = "accepted" | "rejected" | "revoked" | "expired";
+export type SessionAuditEnvelope = {
+    sessionId: string;
+    authMode: SessionAuthMode;
+    principalId: string;
+    principalType: SessionPrincipalType;
+    tenantId: string;
+    workspaceId?: string;
+    apiKeyId?: string;
+    scopes: readonly string[];
+    roles?: readonly string[];
+    delegationChain?: readonly SessionDelegationHop[];
+    sourceSessionId?: string;
+    expiresAt?: number;
+    request?: {
+        endpoint?: string;
+        method?: string;
+        correlationId?: string;
+    };
+    result?: {
+        outcome: SessionAuditOutcome;
+        reason?: string;
+    };
+};
+export declare function inferSessionPrincipalType(principalId: string): SessionPrincipalType;
+export declare function normalizeDelegationChain(args: {
+    delegationChain?: readonly SessionDelegationHop[];
+    delegatedBy?: string;
+    delegatedByType?: SessionPrincipalType;
+    delegatedAt?: number;
+    reason?: string;
+}): SessionDelegationHop[] | undefined;
+export declare function lastDelegator(delegationChain?: readonly SessionDelegationHop[]): string | undefined;
+import type { ConvexAdminClient } from "./convex-admin.contract";
+export type McpTransportKind = "stdio" | "hosted";
+export type LucernSdkClient = unknown;
+/**
+ * Session authentication context — injected by withAuth() middleware.
+ *
+ * Built from TenantConfig at dispatch time. Agent sessions get
+ * AGENT_IDENTITY + "agent:internal" role + unrestricted access.
+ * User sessions get Clerk userId + resolved role + tool ACLs.
+ */
+export type AuthContext = {
+    sessionType: "agent" | "user";
+    userId: string;
+    tenantId: string;
+    role: string;
+    allowedTopics: string[] | null;
+    groupIds: string[];
+    permittedPackKeys: string[];
+    sessionId: string;
+    principalId?: string;
+    principalType?: SessionPrincipalType;
+    workspaceId?: string;
+    scopes?: string[];
+    authMode?: SessionAuthMode;
+    roles?: string[];
+    transportKind?: McpTransportKind;
+    lucernClient?: LucernSdkClient;
+    convex?: ConvexAdminClient;
+    setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;
+    matchesWorkspaceReasoningScope?: (node: unknown, scope: unknown) => boolean;
+};
+//# sourceMappingURL=auth.contract.d.ts.map

package/dist/auth.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.contract.d.ts","sourceRoot":"","sources":["../src/auth.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,eAAO,MAAM,kBAAkB,uFAKrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB,wCAAyC,CAAC;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,0BAA0B,2CAI7B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,UAAU,GACV,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,oBAAoB,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,mBAAmB,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,GAClB,oBAAoB,CAQtB;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,oBAAoB,EAAE,GAAG,SAAS,CAgBrC;AAED,wBAAgB,aAAa,CAC3B,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAChD,MAAM,GAAG,SAAS,CAKpB;AAOD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,OAAO,GAAG,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE/B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,8BAA8B,CAAC,EAAE,CAC/B,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,OAAO,KACX,OAAO,CAAC;CACd,CAAC"}

package/dist/auth.contract.js

@@ -0,0 +1,58 @@
+/**
+ * @lucern/contracts — auth (canonical support contract)
+ *
+ * Consolidated flat support surface for Lucern authentication:
+ *   - Session primitives (auth modes, principal types, lifecycle)
+ *   - AuthContext shape + McpTransportKind + LucernSdkClient alias
+ *
+ * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts
+ * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).
+ */
+// =============================================================================
+// SESSION PRIMITIVES
+// (Formerly src/auth-session.contract.ts)
+// =============================================================================
+export const SESSION_AUTH_MODES = [
+    "interactive_user",
+    "service_principal",
+    "tenant_api_key",
+    "session_token",
+];
+export const SESSION_PRINCIPAL_TYPES = ["human", "service", "agent"];
+export const SESSION_LIFECYCLE_STATUSES = [
+    "active",
+    "expired",
+    "revoked",
+];
+export function inferSessionPrincipalType(principalId) {
+    if (principalId.startsWith("user:")) {
+        return "human";
+    }
+    if (principalId.startsWith("agent:")) {
+        return "agent";
+    }
+    return "service";
+}
+export function normalizeDelegationChain(args) {
+    if (args.delegationChain && args.delegationChain.length > 0) {
+        return [...args.delegationChain];
+    }
+    if (!args.delegatedBy) {
+        return;
+    }
+    return [
+        {
+            principalId: args.delegatedBy,
+            principalType: args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),
+            delegatedAt: args.delegatedAt,
+            reason: args.reason,
+        },
+    ];
+}
+export function lastDelegator(delegationChain) {
+    if (!delegationChain || delegationChain.length === 0) {
+        return;
+    }
+    return delegationChain[delegationChain.length - 1]?.principalId;
+}
+//# sourceMappingURL=auth.contract.js.map

package/dist/auth.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.contract.js","sourceRoot":"","sources":["../src/auth.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,qBAAqB;AACrB,0CAA0C;AAC1C,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;CACP,CAAC;AAGX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAG9E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ;IACR,SAAS;IACT,SAAS;CACD,CAAC;AA2CX,MAAM,UAAU,yBAAyB,CACvC,WAAmB;IAEnB,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAMxC;IACC,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,OAAO;QACL;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EACX,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;YACrE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,eAAiD;IAEjD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO;IACT,CAAC;IACD,OAAO,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;AAClE,CAAC"}