@lucern/contracts 0.3.0-alpha.1 → 0.3.0-alpha.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/dist/api-enums.contract.d.ts +5 -3
- package/dist/api-enums.contract.js +14 -12
- package/dist/api-enums.contract.js.map +1 -1
- package/dist/component-boundary.contract.d.ts +14 -0
- package/dist/component-boundary.contract.js +174 -0
- package/dist/component-boundary.contract.js.map +1 -0
- package/dist/component-host-boundary.contract.d.ts +46 -0
- package/dist/component-host-boundary.contract.js +60 -0
- package/dist/component-host-boundary.contract.js.map +1 -0
- package/dist/context-pack.contract.d.ts +5 -3
- package/dist/context-pack.contract.js.map +1 -1
- package/dist/{defineTable-CBQ03FXl.d.ts → defineTable-t1wr5wgn.d.ts} +1 -1
- package/dist/{dsl-BgpoVOVQ.d.ts → dsl-DVPthQGY.d.ts} +2 -2
- package/dist/dsl.d.ts +2 -2
- package/dist/dsl.js +1 -4
- package/dist/dsl.js.map +1 -1
- package/dist/edge-policy-manifest-Dw5IhT1L.d.ts +133 -0
- package/dist/function-registry/beliefs.d.ts +54 -41
- package/dist/function-registry/beliefs.js +759 -38
- package/dist/function-registry/beliefs.js.map +1 -1
- package/dist/function-registry/coding.d.ts +9 -0
- package/dist/function-registry/coding.js +811 -39
- package/dist/function-registry/coding.js.map +1 -1
- package/dist/function-registry/context.d.ts +19 -13
- package/dist/function-registry/context.js +750 -42
- package/dist/function-registry/context.js.map +1 -1
- package/dist/function-registry/contracts.d.ts +6 -0
- package/dist/function-registry/contracts.js +715 -35
- package/dist/function-registry/contracts.js.map +1 -1
- package/dist/function-registry/coordination.d.ts +12 -0
- package/dist/function-registry/coordination.js +715 -35
- package/dist/function-registry/coordination.js.map +1 -1
- package/dist/function-registry/edges.d.ts +165 -0
- package/dist/function-registry/edges.js +923 -67
- package/dist/function-registry/edges.js.map +1 -1
- package/dist/function-registry/evidence.d.ts +44 -33
- package/dist/function-registry/evidence.js +769 -47
- package/dist/function-registry/evidence.js.map +1 -1
- package/dist/function-registry/graph.d.ts +149 -53
- package/dist/function-registry/graph.js +831 -42
- package/dist/function-registry/graph.js.map +1 -1
- package/dist/function-registry/helpers.d.ts +6 -3
- package/dist/function-registry/helpers.js +716 -36
- package/dist/function-registry/helpers.js.map +1 -1
- package/dist/function-registry/identity.d.ts +6 -0
- package/dist/function-registry/identity.js +715 -35
- package/dist/function-registry/identity.js.map +1 -1
- package/dist/function-registry/index.d.ts +5 -3
- package/dist/function-registry/index.js +722 -39
- package/dist/function-registry/index.js.map +1 -1
- package/dist/function-registry/judgments.d.ts +14 -9
- package/dist/function-registry/judgments.js +727 -38
- package/dist/function-registry/judgments.js.map +1 -1
- package/dist/function-registry/legacy.d.ts +4 -0
- package/dist/function-registry/legacy.js +715 -35
- package/dist/function-registry/legacy.js.map +1 -1
- package/dist/function-registry/lenses.d.ts +24 -17
- package/dist/function-registry/lenses.js +738 -38
- package/dist/function-registry/lenses.js.map +1 -1
- package/dist/function-registry/manifest.d.ts +6 -6
- package/dist/function-registry/manifest.js +18 -2
- package/dist/function-registry/manifest.js.map +1 -1
- package/dist/function-registry/nodes.d.ts +412 -0
- package/dist/function-registry/nodes.js +5303 -0
- package/dist/function-registry/nodes.js.map +1 -0
- package/dist/function-registry/ontologies.d.ts +59 -45
- package/dist/function-registry/ontologies.js +733 -41
- package/dist/function-registry/ontologies.js.map +1 -1
- package/dist/function-registry/pipeline.d.ts +19 -13
- package/dist/function-registry/pipeline.js +724 -38
- package/dist/function-registry/pipeline.js.map +1 -1
- package/dist/function-registry/questions.d.ts +64 -49
- package/dist/function-registry/questions.js +812 -43
- package/dist/function-registry/questions.js.map +1 -1
- package/dist/function-registry/tasks.d.ts +24 -17
- package/dist/function-registry/tasks.js +776 -44
- package/dist/function-registry/tasks.js.map +1 -1
- package/dist/function-registry/topics.d.ts +109 -21
- package/dist/function-registry/topics.js +797 -39
- package/dist/function-registry/topics.js.map +1 -1
- package/dist/function-registry/types.d.ts +6 -2
- package/dist/function-registry/worktrees.d.ts +94 -41
- package/dist/function-registry/worktrees.js +854 -47
- package/dist/function-registry/worktrees.js.map +1 -1
- package/dist/function-registry-input-audit.d.ts +13 -0
- package/dist/function-registry-input-audit.js +166 -0
- package/dist/function-registry-input-audit.js.map +1 -0
- package/dist/gateway.contract.d.ts +5 -0
- package/dist/gateway.contract.js.map +1 -1
- package/dist/generated/convexSchemas.d.ts +3 -3
- package/dist/generated/convexSchemas.js +38 -18
- package/dist/generated/convexSchemas.js.map +1 -1
- package/dist/generated/infisicalRuntimeEnv.d.ts +70 -0
- package/dist/generated/infisicalRuntimeEnv.js +26572 -0
- package/dist/generated/infisicalRuntimeEnv.js.map +1 -0
- package/dist/generated/lucernGatewayEnv.d.ts +17 -0
- package/dist/generated/lucernGatewayEnv.js +38 -0
- package/dist/generated/lucernGatewayEnv.js.map +1 -0
- package/dist/generated/lucernWebPublicEnv.d.ts +26 -0
- package/dist/generated/lucernWebPublicEnv.js +32 -0
- package/dist/generated/lucernWebPublicEnv.js.map +1 -0
- package/dist/generated/lucernWebServerEnv.d.ts +33 -0
- package/dist/generated/lucernWebServerEnv.js +51 -0
- package/dist/generated/lucernWebServerEnv.js.map +1 -0
- package/dist/generated/schema-manifest.json +1199 -138
- package/dist/generated/tableOwnership.d.ts +47 -27
- package/dist/generated/tableOwnership.js +66 -26
- package/dist/generated/tableOwnership.js.map +1 -1
- package/dist/generated/tier-expectations.json +62 -8
- package/dist/graph-intelligence.contract.d.ts +506 -0
- package/dist/graph-intelligence.contract.js +595 -0
- package/dist/graph-intelligence.contract.js.map +1 -0
- package/dist/graph-types/index.d.ts +5 -1
- package/dist/graph-types/index.js +15 -4
- package/dist/graph-types/index.js.map +1 -1
- package/dist/index-CM1Pl_vI.d.ts +28 -0
- package/dist/index.d.ts +29 -414
- package/dist/index.js +34791 -1088
- package/dist/index.js.map +1 -1
- package/dist/infisical-runtime.contract.d.ts +1768 -0
- package/dist/infisical-runtime.contract.js +3093 -0
- package/dist/infisical-runtime.contract.js.map +1 -0
- package/dist/lens-filter.contract.js +4 -3
- package/dist/lens-filter.contract.js.map +1 -1
- package/dist/lens-workflow.contract.js +4 -3
- package/dist/lens-workflow.contract.js.map +1 -1
- package/dist/manifests/edge-policy-manifest.d.ts +2 -0
- package/dist/manifests/edge-policy-manifest.data.d.ts +13 -0
- package/dist/manifests/edge-policy-manifest.data.js +26 -0
- package/dist/manifests/edge-policy-manifest.data.js.map +1 -0
- package/dist/manifests/edge-policy-manifest.js +92 -0
- package/dist/manifests/edge-policy-manifest.js.map +1 -0
- package/dist/manifests/infisical-runtime-manifest.d.ts +1672 -0
- package/dist/manifests/infisical-runtime-manifest.js +2948 -0
- package/dist/manifests/infisical-runtime-manifest.js.map +1 -0
- package/dist/manifests/invariant-manifest.d.ts +65 -0
- package/dist/manifests/invariant-manifest.js +18 -0
- package/dist/manifests/invariant-manifest.js.map +1 -0
- package/dist/manifests/invariants/ast-utils.d.ts +14 -0
- package/dist/manifests/invariants/ast-utils.js +54 -0
- package/dist/manifests/invariants/ast-utils.js.map +1 -0
- package/dist/manifests/invariants/index.d.ts +15 -0
- package/dist/manifests/invariants/index.js +183 -0
- package/dist/manifests/invariants/index.js.map +1 -0
- package/dist/manifests/invariants/inv-1-beliefs-append-only.d.ts +12 -0
- package/dist/manifests/invariants/inv-1-beliefs-append-only.js +94 -0
- package/dist/manifests/invariants/inv-1-beliefs-append-only.js.map +1 -0
- package/dist/manifests/invariants/inv-14-no-silent-transitions.d.ts +12 -0
- package/dist/manifests/invariants/inv-14-no-silent-transitions.js +99 -0
- package/dist/manifests/invariants/inv-14-no-silent-transitions.js.map +1 -0
- package/dist/manifests/invariants/manifest-1-projections-declare-audit.d.ts +12 -0
- package/dist/manifests/invariants/manifest-1-projections-declare-audit.js +42 -0
- package/dist/manifests/invariants/manifest-1-projections-declare-audit.js.map +1 -0
- package/dist/manifests/tenant-client-manifest.d.ts +322 -0
- package/dist/manifests/tenant-client-manifest.js +432 -0
- package/dist/manifests/tenant-client-manifest.js.map +1 -0
- package/dist/mcp-gateway-boundary.contract.d.ts +201 -0
- package/dist/mcp-gateway-boundary.contract.js +45 -0
- package/dist/mcp-gateway-boundary.contract.js.map +1 -0
- package/dist/projections/check-convex-args-shape.d.ts +3 -0
- package/dist/projections/check-convex-args-shape.js +403 -0
- package/dist/projections/check-convex-args-shape.js.map +1 -0
- package/dist/projections/create-evidence.projection.d.ts +176 -0
- package/dist/projections/create-evidence.projection.js +130 -0
- package/dist/projections/create-evidence.projection.js.map +1 -0
- package/dist/projections/index.d.ts +102 -0
- package/dist/projections/index.js +352 -0
- package/dist/projections/index.js.map +1 -0
- package/dist/projections/list-beliefs.projection.d.ts +36 -0
- package/dist/projections/list-beliefs.projection.js +54 -0
- package/dist/projections/list-beliefs.projection.js.map +1 -0
- package/dist/projections/list-tasks.projection.d.ts +44 -0
- package/dist/projections/list-tasks.projection.js +57 -0
- package/dist/projections/list-tasks.projection.js.map +1 -0
- package/dist/projections/modulate-confidence.projection.d.ts +219 -0
- package/dist/projections/modulate-confidence.projection.js +148 -0
- package/dist/projections/modulate-confidence.projection.js.map +1 -0
- package/dist/projections/projection-dsl.d.ts +11 -0
- package/dist/projections/projection-dsl.js +8 -0
- package/dist/projections/projection-dsl.js.map +1 -0
- package/dist/proof-attestation.json +45 -0
- package/dist/schema-helpers/enumValidation.js +2 -5
- package/dist/schema-helpers/enumValidation.js.map +1 -1
- package/dist/schema-helpers/spine/nodes/decision.js +2 -1
- package/dist/schema-helpers/spine/nodes/decision.js.map +1 -1
- package/dist/schema-helpers/spine/tables/epistemicNodes.js +27 -27
- package/dist/schema-helpers/spine/tables/epistemicNodes.js.map +1 -1
- package/dist/schemas/component-table-manifest.d.ts +6 -6
- package/dist/schemas/component-table-manifest.js +2 -2
- package/dist/schemas/component-table-manifest.js.map +1 -1
- package/dist/schemas/enums.d.ts +5 -2
- package/dist/schemas/enums.js +5 -2
- package/dist/schemas/enums.js.map +1 -1
- package/dist/schemas/index.d.ts +3 -3
- package/dist/schemas/index.js +1129 -139
- package/dist/schemas/index.js.map +1 -1
- package/dist/schemas/manifest.d.ts +2979 -949
- package/dist/schemas/manifest.js +1127 -137
- package/dist/schemas/manifest.js.map +1 -1
- package/dist/schemas/sl-opinion.d.ts +4 -4
- package/dist/schemas/tables/controlPlane/accessControl.d.ts +260 -0
- package/dist/schemas/tables/controlPlane/accessControl.js +653 -0
- package/dist/schemas/tables/controlPlane/accessControl.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/agent.d.ts +1 -1
- package/dist/schemas/tables/{identity → controlPlane}/agent.js +3 -3
- package/dist/schemas/tables/controlPlane/agent.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/epistemic.d.ts +1 -1
- package/dist/schemas/tables/{identity → controlPlane}/epistemic.js +3 -3
- package/dist/schemas/tables/controlPlane/epistemic.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/model.d.ts +1 -1
- package/dist/schemas/tables/{identity → controlPlane}/model.js +6 -6
- package/dist/schemas/tables/controlPlane/model.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/platform.d.ts +11 -11
- package/dist/schemas/tables/{identity → controlPlane}/platform.js +18 -18
- package/dist/schemas/tables/controlPlane/platform.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/project.d.ts +1 -1
- package/dist/schemas/tables/{identity → controlPlane}/project.js +3 -3
- package/dist/schemas/tables/controlPlane/project.js.map +1 -0
- package/dist/schemas/tables/{identity → controlPlane}/user.d.ts +1 -1
- package/dist/schemas/tables/{identity → controlPlane}/user.js +3 -3
- package/dist/schemas/tables/controlPlane/user.js.map +1 -0
- package/dist/schemas/tables/kernel/config.d.ts +1 -1
- package/dist/schemas/tables/kernel/config.js.map +1 -1
- package/dist/schemas/tables/kernel/coordination.d.ts +1 -1
- package/dist/schemas/tables/kernel/coordination.js.map +1 -1
- package/dist/schemas/tables/kernel/decision.d.ts +1 -1
- package/dist/schemas/tables/kernel/decision.js.map +1 -1
- package/dist/schemas/tables/kernel/embedding.d.ts +1 -1
- package/dist/schemas/tables/kernel/embedding.js.map +1 -1
- package/dist/schemas/tables/kernel/epistemic.d.ts +7 -7
- package/dist/schemas/tables/kernel/epistemic.js.map +1 -1
- package/dist/schemas/tables/kernel/idempotency.d.ts +1 -1
- package/dist/schemas/tables/kernel/idempotency.js.map +1 -1
- package/dist/schemas/tables/kernel/infra.d.ts +5 -5
- package/dist/schemas/tables/kernel/infra.js.map +1 -1
- package/dist/schemas/tables/kernel/intelligence.d.ts +11 -11
- package/dist/schemas/tables/kernel/intelligence.js.map +1 -1
- package/dist/schemas/tables/kernel/lens.d.ts +5 -5
- package/dist/schemas/tables/kernel/lens.js.map +1 -1
- package/dist/schemas/tables/kernel/ontology.d.ts +1 -1
- package/dist/schemas/tables/kernel/ontology.js.map +1 -1
- package/dist/schemas/tables/kernel/platform.d.ts +13 -13
- package/dist/schemas/tables/kernel/platform.js.map +1 -1
- package/dist/schemas/tables/kernel/spine.d.ts +5 -4
- package/dist/schemas/tables/kernel/spine.js +6 -2
- package/dist/schemas/tables/kernel/spine.js.map +1 -1
- package/dist/schemas/tables/kernel/task.d.ts +43 -43
- package/dist/schemas/tables/kernel/task.js.map +1 -1
- package/dist/schemas/tables/kernel/topic.d.ts +1 -1
- package/dist/schemas/tables/kernel/topic.js +5 -1
- package/dist/schemas/tables/kernel/topic.js.map +1 -1
- package/dist/schemas/tables/kernel/workflow.d.ts +1 -1
- package/dist/schemas/tables/kernel/workflow.js.map +1 -1
- package/dist/schemas/tables/kernel/worktree.d.ts +55 -55
- package/dist/schemas/tables/kernel/worktree.js.map +1 -1
- package/dist/schemas/tables/mc/identity.d.ts +44 -4
- package/dist/schemas/tables/mc/identity.js +66 -1
- package/dist/schemas/tables/mc/identity.js.map +1 -1
- package/dist/schemas/tables/mc/methodology.d.ts +1 -1
- package/dist/schemas/tables/mc/methodology.js.map +1 -1
- package/dist/schemas/tables/mc/pack.d.ts +21 -21
- package/dist/schemas/tables/mc/pack.js.map +1 -1
- package/dist/schemas/tables/mc/policy.d.ts +2 -2
- package/dist/schemas/tables/mc/policy.js +1 -1
- package/dist/schemas/tables/mc/policy.js.map +1 -1
- package/dist/schemas/tables/mc/registry.d.ts +5 -5
- package/dist/schemas/tables/mc/registry.js.map +1 -1
- package/dist/schemas/tables/mc/runtime.d.ts +109 -3
- package/dist/schemas/tables/mc/runtime.js +330 -104
- package/dist/schemas/tables/mc/runtime.js.map +1 -1
- package/dist/schemas/tables/mc/tenant.d.ts +3 -2
- package/dist/schemas/tables/mc/tenant.js +2 -1
- package/dist/schemas/tables/mc/tenant.js.map +1 -1
- package/dist/schemas/tables/mc/workspace.d.ts +28 -5
- package/dist/schemas/tables/mc/workspace.js +36 -2
- package/dist/schemas/tables/mc/workspace.js.map +1 -1
- package/dist/sdk-methods.contract.d.ts +2 -2
- package/dist/{sdk-tools.contract-S4ia0TTo.d.ts → sdk-tools.contract-BNklQDfB.d.ts} +2 -2
- package/dist/sdk-tools.contract.d.ts +2 -2
- package/dist/sdk-tools.contract.js +672 -24
- package/dist/sdk-tools.contract.js.map +1 -1
- package/dist/tenant-bootstrap-seed.contract.d.ts +1269 -0
- package/dist/tenant-bootstrap-seed.contract.js +751 -0
- package/dist/tenant-bootstrap-seed.contract.js.map +1 -0
- package/dist/tenant-bootstrap-seed.defaults.d.ts +16 -0
- package/dist/tenant-bootstrap-seed.defaults.js +303 -0
- package/dist/tenant-bootstrap-seed.defaults.js.map +1 -0
- package/dist/tenant-client.contract.d.ts +349 -0
- package/dist/tenant-client.contract.js +488 -0
- package/dist/tenant-client.contract.js.map +1 -0
- package/dist/{tool-contracts-C92-9ueT.d.ts → tool-contracts-BevD9Ho2.d.ts} +36 -2
- package/dist/tool-contracts.d.ts +1 -1
- package/dist/tool-contracts.js +673 -25
- package/dist/tool-contracts.js.map +1 -1
- package/package.json +30 -1
- package/dist/index-CV-0_VWJ.d.ts +0 -25
- package/dist/schemas/tables/identity/agent.js.map +0 -1
- package/dist/schemas/tables/identity/epistemic.js.map +0 -1
- package/dist/schemas/tables/identity/model.js.map +0 -1
- package/dist/schemas/tables/identity/platform.js.map +0 -1
- package/dist/schemas/tables/identity/project.js.map +0 -1
- package/dist/schemas/tables/identity/user.js.map +0 -1
|
@@ -0,0 +1,751 @@
|
|
|
1
|
+
// src/tenant-bootstrap-seed.contract.ts
|
|
2
|
+
var TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION = "2026-04-30";
|
|
3
|
+
var TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [
|
|
4
|
+
"tenantId",
|
|
5
|
+
"workspaceId",
|
|
6
|
+
"principalId",
|
|
7
|
+
"role",
|
|
8
|
+
"authMode",
|
|
9
|
+
"correlationId",
|
|
10
|
+
"auditMetadata"
|
|
11
|
+
];
|
|
12
|
+
var TENANT_BOOTSTRAP_SEED_COMPONENTS = {
|
|
13
|
+
kernel: {
|
|
14
|
+
componentName: "lucern",
|
|
15
|
+
migrationModule: "adapters/migration",
|
|
16
|
+
templateService: "services/kernel-template",
|
|
17
|
+
templateDeployments: {
|
|
18
|
+
staging: "kindly-goldfish-162",
|
|
19
|
+
prod: "cool-badger-368"
|
|
20
|
+
}
|
|
21
|
+
},
|
|
22
|
+
"control-plane": {
|
|
23
|
+
componentName: "controlPlane",
|
|
24
|
+
migrationModule: "dist/migration",
|
|
25
|
+
templateService: "services/control-plane-template",
|
|
26
|
+
templateDeployments: {
|
|
27
|
+
staging: "industrious-cheetah-864",
|
|
28
|
+
prod: "combative-beagle-879"
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
};
|
|
32
|
+
function isCopyableSeedRequirement(entry) {
|
|
33
|
+
return (entry.copyMode === "template_global" || entry.copyMode === "template_tenant_rewrite" || entry.copyMode === "template_reference_remap") && Boolean(entry.scope) && Array.isArray(entry.uniqueKey) && entry.uniqueKey.length > 0;
|
|
34
|
+
}
|
|
35
|
+
var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
|
|
36
|
+
{
|
|
37
|
+
component: "kernel",
|
|
38
|
+
table: "agentMessages",
|
|
39
|
+
prepopulation: "runtime_data",
|
|
40
|
+
copyMode: "none",
|
|
41
|
+
description: "Agent coordination messages are session data, not template data."
|
|
42
|
+
},
|
|
43
|
+
{
|
|
44
|
+
component: "kernel",
|
|
45
|
+
table: "agentSessions",
|
|
46
|
+
prepopulation: "runtime_data",
|
|
47
|
+
copyMode: "none",
|
|
48
|
+
description: "Agent coordination sessions are created by active clients."
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
component: "kernel",
|
|
52
|
+
table: "autofixJobs",
|
|
53
|
+
prepopulation: "runtime_queue",
|
|
54
|
+
copyMode: "none",
|
|
55
|
+
description: "Autofix work items are runtime queue rows."
|
|
56
|
+
},
|
|
57
|
+
{
|
|
58
|
+
component: "kernel",
|
|
59
|
+
table: "backgroundJobRuns",
|
|
60
|
+
prepopulation: "runtime_log",
|
|
61
|
+
copyMode: "none",
|
|
62
|
+
description: "Background job executions are runtime logs."
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
component: "kernel",
|
|
66
|
+
table: "backgroundJobSettings",
|
|
67
|
+
prepopulation: "required_template",
|
|
68
|
+
copyMode: "template_global",
|
|
69
|
+
scope: "global",
|
|
70
|
+
uniqueKey: ["jobKey"],
|
|
71
|
+
description: "Default job enablement settings must come from the K template."
|
|
72
|
+
},
|
|
73
|
+
{
|
|
74
|
+
component: "kernel",
|
|
75
|
+
table: "beliefConfidence",
|
|
76
|
+
prepopulation: "runtime_data",
|
|
77
|
+
copyMode: "none",
|
|
78
|
+
description: "Belief confidence rows are created with tenant graph facts."
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
component: "kernel",
|
|
82
|
+
table: "beliefEvidenceLinks",
|
|
83
|
+
prepopulation: "runtime_data",
|
|
84
|
+
copyMode: "none",
|
|
85
|
+
description: "Belief-to-evidence links are tenant graph data."
|
|
86
|
+
},
|
|
87
|
+
{
|
|
88
|
+
component: "kernel",
|
|
89
|
+
table: "beliefHistory",
|
|
90
|
+
prepopulation: "runtime_data",
|
|
91
|
+
copyMode: "none",
|
|
92
|
+
description: "Belief history is append-only tenant graph data."
|
|
93
|
+
},
|
|
94
|
+
{
|
|
95
|
+
component: "kernel",
|
|
96
|
+
table: "beliefScenarios",
|
|
97
|
+
prepopulation: "runtime_data",
|
|
98
|
+
copyMode: "none",
|
|
99
|
+
description: "Scenario rows are tenant-authored reasoning data."
|
|
100
|
+
},
|
|
101
|
+
{
|
|
102
|
+
component: "kernel",
|
|
103
|
+
table: "beliefVotes",
|
|
104
|
+
prepopulation: "runtime_data",
|
|
105
|
+
copyMode: "none",
|
|
106
|
+
description: "Decision belief votes are tenant-authored data."
|
|
107
|
+
},
|
|
108
|
+
{
|
|
109
|
+
component: "kernel",
|
|
110
|
+
table: "calibrationScores",
|
|
111
|
+
prepopulation: "runtime_derived",
|
|
112
|
+
copyMode: "none",
|
|
113
|
+
description: "Calibration scores are computed from tenant outcomes."
|
|
114
|
+
},
|
|
115
|
+
{
|
|
116
|
+
component: "kernel",
|
|
117
|
+
table: "contractEvaluations",
|
|
118
|
+
prepopulation: "runtime_log",
|
|
119
|
+
copyMode: "none",
|
|
120
|
+
description: "Contract evaluation rows are runtime computation logs."
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
component: "kernel",
|
|
124
|
+
table: "contradictions",
|
|
125
|
+
prepopulation: "runtime_data",
|
|
126
|
+
copyMode: "none",
|
|
127
|
+
description: "Contradictions are tenant graph facts."
|
|
128
|
+
},
|
|
129
|
+
{
|
|
130
|
+
component: "kernel",
|
|
131
|
+
table: "crossProjectConnections",
|
|
132
|
+
prepopulation: "runtime_data",
|
|
133
|
+
copyMode: "none",
|
|
134
|
+
description: "Cross-topic connections are tenant graph facts."
|
|
135
|
+
},
|
|
136
|
+
{
|
|
137
|
+
component: "kernel",
|
|
138
|
+
table: "decisionComputedSummaries",
|
|
139
|
+
prepopulation: "runtime_derived",
|
|
140
|
+
copyMode: "none",
|
|
141
|
+
description: "Decision summaries are derived tenant outputs."
|
|
142
|
+
},
|
|
143
|
+
{
|
|
144
|
+
component: "kernel",
|
|
145
|
+
table: "decisionEvents",
|
|
146
|
+
prepopulation: "runtime_data",
|
|
147
|
+
copyMode: "none",
|
|
148
|
+
description: "Decision events are lifecycle data."
|
|
149
|
+
},
|
|
150
|
+
{
|
|
151
|
+
component: "kernel",
|
|
152
|
+
table: "decisionParticipants",
|
|
153
|
+
prepopulation: "runtime_data",
|
|
154
|
+
copyMode: "none",
|
|
155
|
+
description: "Decision participants are tenant-selected actors."
|
|
156
|
+
},
|
|
157
|
+
{
|
|
158
|
+
component: "kernel",
|
|
159
|
+
table: "decisionRiskLedger",
|
|
160
|
+
prepopulation: "runtime_data",
|
|
161
|
+
copyMode: "none",
|
|
162
|
+
description: "Decision risk rows are tenant decision data."
|
|
163
|
+
},
|
|
164
|
+
{
|
|
165
|
+
component: "kernel",
|
|
166
|
+
table: "decisionSnapshots",
|
|
167
|
+
prepopulation: "runtime_derived",
|
|
168
|
+
copyMode: "none",
|
|
169
|
+
description: "Decision snapshots are derived from tenant state."
|
|
170
|
+
},
|
|
171
|
+
{
|
|
172
|
+
component: "kernel",
|
|
173
|
+
table: "deliberationContributions",
|
|
174
|
+
prepopulation: "runtime_data",
|
|
175
|
+
copyMode: "none",
|
|
176
|
+
description: "Deliberation contributions are tenant-authored data."
|
|
177
|
+
},
|
|
178
|
+
{
|
|
179
|
+
component: "kernel",
|
|
180
|
+
table: "deliberationSessions",
|
|
181
|
+
prepopulation: "runtime_data",
|
|
182
|
+
copyMode: "none",
|
|
183
|
+
description: "Deliberation sessions are created by tenant workflows."
|
|
184
|
+
},
|
|
185
|
+
{
|
|
186
|
+
component: "kernel",
|
|
187
|
+
table: "epistemicAudit",
|
|
188
|
+
prepopulation: "runtime_log",
|
|
189
|
+
copyMode: "none",
|
|
190
|
+
description: "Epistemic audit rows are append-only runtime audit data."
|
|
191
|
+
},
|
|
192
|
+
{
|
|
193
|
+
component: "kernel",
|
|
194
|
+
table: "epistemicContracts",
|
|
195
|
+
prepopulation: "runtime_data",
|
|
196
|
+
copyMode: "none",
|
|
197
|
+
description: "Epistemic contracts are tenant-authored governance data."
|
|
198
|
+
},
|
|
199
|
+
{
|
|
200
|
+
component: "kernel",
|
|
201
|
+
table: "epistemicEdges",
|
|
202
|
+
prepopulation: "runtime_data",
|
|
203
|
+
copyMode: "none",
|
|
204
|
+
description: "Edges are tenant reasoning graph data."
|
|
205
|
+
},
|
|
206
|
+
{
|
|
207
|
+
component: "kernel",
|
|
208
|
+
table: "epistemicNodeEmbeddings",
|
|
209
|
+
prepopulation: "runtime_derived",
|
|
210
|
+
copyMode: "none",
|
|
211
|
+
description: "Embeddings are derived from tenant graph nodes."
|
|
212
|
+
},
|
|
213
|
+
{
|
|
214
|
+
component: "kernel",
|
|
215
|
+
table: "epistemicNodes",
|
|
216
|
+
prepopulation: "runtime_data",
|
|
217
|
+
copyMode: "none",
|
|
218
|
+
description: "Nodes are tenant reasoning graph data."
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
component: "kernel",
|
|
222
|
+
table: "graphAnalysisCache",
|
|
223
|
+
prepopulation: "runtime_derived",
|
|
224
|
+
copyMode: "none",
|
|
225
|
+
description: "Graph analysis cache rows are derived from tenant graph state."
|
|
226
|
+
},
|
|
227
|
+
{
|
|
228
|
+
component: "kernel",
|
|
229
|
+
table: "graphAnalysisResults",
|
|
230
|
+
prepopulation: "runtime_derived",
|
|
231
|
+
copyMode: "none",
|
|
232
|
+
description: "Graph analysis result rows are derived tenant outputs."
|
|
233
|
+
},
|
|
234
|
+
{
|
|
235
|
+
component: "kernel",
|
|
236
|
+
table: "graphSuggestions",
|
|
237
|
+
prepopulation: "runtime_derived",
|
|
238
|
+
copyMode: "none",
|
|
239
|
+
description: "Graph suggestions are derived recommendations."
|
|
240
|
+
},
|
|
241
|
+
{
|
|
242
|
+
component: "kernel",
|
|
243
|
+
table: "harnessReplays",
|
|
244
|
+
prepopulation: "runtime_log",
|
|
245
|
+
copyMode: "none",
|
|
246
|
+
description: "Harness replay rows are runtime verification logs."
|
|
247
|
+
},
|
|
248
|
+
{
|
|
249
|
+
component: "kernel",
|
|
250
|
+
table: "harnessRuns",
|
|
251
|
+
prepopulation: "runtime_log",
|
|
252
|
+
copyMode: "none",
|
|
253
|
+
description: "Harness run rows are runtime verification logs."
|
|
254
|
+
},
|
|
255
|
+
{
|
|
256
|
+
component: "kernel",
|
|
257
|
+
table: "idempotencyTokens",
|
|
258
|
+
prepopulation: "runtime_log",
|
|
259
|
+
copyMode: "none",
|
|
260
|
+
description: "Idempotency tokens are request-scoped runtime guards."
|
|
261
|
+
},
|
|
262
|
+
{
|
|
263
|
+
component: "kernel",
|
|
264
|
+
table: "lenses",
|
|
265
|
+
prepopulation: "optional_template",
|
|
266
|
+
copyMode: "none",
|
|
267
|
+
description: "Reusable lens templates may live in K templates, but workspace-specific copies are not required for core SDK boot."
|
|
268
|
+
},
|
|
269
|
+
{
|
|
270
|
+
component: "kernel",
|
|
271
|
+
table: "lensTopicBindings",
|
|
272
|
+
prepopulation: "runtime_data",
|
|
273
|
+
copyMode: "none",
|
|
274
|
+
description: "Lens bindings attach runtime topics to runtime/workspace lenses."
|
|
275
|
+
},
|
|
276
|
+
{
|
|
277
|
+
component: "kernel",
|
|
278
|
+
table: "neo4jSyncQueue",
|
|
279
|
+
prepopulation: "runtime_queue",
|
|
280
|
+
copyMode: "none",
|
|
281
|
+
description: "Neo4j sync queue rows are runtime work items."
|
|
282
|
+
},
|
|
283
|
+
{
|
|
284
|
+
component: "kernel",
|
|
285
|
+
table: "ontologyDefinitions",
|
|
286
|
+
prepopulation: "required_template",
|
|
287
|
+
copyMode: "template_global",
|
|
288
|
+
scope: "global",
|
|
289
|
+
uniqueKey: ["ontologyKey"],
|
|
290
|
+
description: "Platform ontology definitions power taxonomy reads and effective ontology resolution."
|
|
291
|
+
},
|
|
292
|
+
{
|
|
293
|
+
component: "kernel",
|
|
294
|
+
table: "ontologyVersions",
|
|
295
|
+
prepopulation: "required_template",
|
|
296
|
+
copyMode: "template_reference_remap",
|
|
297
|
+
scope: "global",
|
|
298
|
+
uniqueKey: ["ontologyKey", "version"],
|
|
299
|
+
dependsOn: ["ontologyDefinitions"],
|
|
300
|
+
description: "Ontology versions must be copied with ontologyDefinition ID remapping."
|
|
301
|
+
},
|
|
302
|
+
{
|
|
303
|
+
component: "kernel",
|
|
304
|
+
table: "platformAgentRunPolicyDecisions",
|
|
305
|
+
prepopulation: "runtime_log",
|
|
306
|
+
copyMode: "none",
|
|
307
|
+
description: "Agent-run policy decisions are audit logs."
|
|
308
|
+
},
|
|
309
|
+
{
|
|
310
|
+
component: "kernel",
|
|
311
|
+
table: "platformAgentRunPromptResolutions",
|
|
312
|
+
prepopulation: "runtime_log",
|
|
313
|
+
copyMode: "none",
|
|
314
|
+
description: "Agent-run prompt resolution rows are runtime logs."
|
|
315
|
+
},
|
|
316
|
+
{
|
|
317
|
+
component: "kernel",
|
|
318
|
+
table: "platformAgentRuns",
|
|
319
|
+
prepopulation: "runtime_log",
|
|
320
|
+
copyMode: "none",
|
|
321
|
+
description: "Agent runs are runtime execution records."
|
|
322
|
+
},
|
|
323
|
+
{
|
|
324
|
+
component: "kernel",
|
|
325
|
+
table: "platformAgentRunToolCalls",
|
|
326
|
+
prepopulation: "runtime_log",
|
|
327
|
+
copyMode: "none",
|
|
328
|
+
description: "Agent-run tool calls are runtime execution records."
|
|
329
|
+
},
|
|
330
|
+
{
|
|
331
|
+
component: "kernel",
|
|
332
|
+
table: "platformHarnessShadowAudit",
|
|
333
|
+
prepopulation: "runtime_log",
|
|
334
|
+
copyMode: "none",
|
|
335
|
+
description: "Harness shadow audit rows are runtime audit records."
|
|
336
|
+
},
|
|
337
|
+
{
|
|
338
|
+
component: "kernel",
|
|
339
|
+
table: "publicationRules",
|
|
340
|
+
prepopulation: "required_template",
|
|
341
|
+
copyMode: "template_tenant_rewrite",
|
|
342
|
+
scope: "tenant",
|
|
343
|
+
uniqueKey: ["tenantId", "workspaceId", "name"],
|
|
344
|
+
description: "Default publication policy rules are rewritten into each tenant."
|
|
345
|
+
},
|
|
346
|
+
{
|
|
347
|
+
component: "kernel",
|
|
348
|
+
table: "questionEvidenceLinks",
|
|
349
|
+
prepopulation: "runtime_data",
|
|
350
|
+
copyMode: "none",
|
|
351
|
+
description: "Question-to-evidence links are tenant graph data."
|
|
352
|
+
},
|
|
353
|
+
{
|
|
354
|
+
component: "kernel",
|
|
355
|
+
table: "researchJobs",
|
|
356
|
+
prepopulation: "runtime_queue",
|
|
357
|
+
copyMode: "none",
|
|
358
|
+
description: "Research job rows are runtime queue items."
|
|
359
|
+
},
|
|
360
|
+
{
|
|
361
|
+
component: "kernel",
|
|
362
|
+
table: "schemaEnumConfig",
|
|
363
|
+
prepopulation: "required_template",
|
|
364
|
+
copyMode: "template_global",
|
|
365
|
+
scope: "global",
|
|
366
|
+
uniqueKey: ["category", "value"],
|
|
367
|
+
description: "Runtime-extensible enum defaults required by SDK graph APIs."
|
|
368
|
+
},
|
|
369
|
+
{
|
|
370
|
+
component: "kernel",
|
|
371
|
+
table: "stakeholderGroups",
|
|
372
|
+
prepopulation: "runtime_data",
|
|
373
|
+
copyMode: "none",
|
|
374
|
+
description: "Stakeholder groups are tenant decision data."
|
|
375
|
+
},
|
|
376
|
+
{
|
|
377
|
+
component: "kernel",
|
|
378
|
+
table: "systemLogs",
|
|
379
|
+
prepopulation: "runtime_log",
|
|
380
|
+
copyMode: "none",
|
|
381
|
+
description: "System logs are runtime telemetry."
|
|
382
|
+
},
|
|
383
|
+
{
|
|
384
|
+
component: "kernel",
|
|
385
|
+
table: "tasks",
|
|
386
|
+
prepopulation: "runtime_data",
|
|
387
|
+
copyMode: "none",
|
|
388
|
+
description: "Tasks are tenant-authored work items."
|
|
389
|
+
},
|
|
390
|
+
{
|
|
391
|
+
component: "kernel",
|
|
392
|
+
table: "topics",
|
|
393
|
+
prepopulation: "runtime_bootstrap",
|
|
394
|
+
copyMode: "none",
|
|
395
|
+
description: "Default topics are created by tenant provisioning, not copied from templates."
|
|
396
|
+
},
|
|
397
|
+
{
|
|
398
|
+
component: "kernel",
|
|
399
|
+
table: "workflowDefinitions",
|
|
400
|
+
prepopulation: "optional_template",
|
|
401
|
+
copyMode: "none",
|
|
402
|
+
description: "Table-driven workflow definitions can be template data after the workflow engine leaves legacy mode."
|
|
403
|
+
},
|
|
404
|
+
{
|
|
405
|
+
component: "kernel",
|
|
406
|
+
table: "workflowPullRequests",
|
|
407
|
+
prepopulation: "runtime_data",
|
|
408
|
+
copyMode: "none",
|
|
409
|
+
description: "Workflow pull requests are tenant workflow data."
|
|
410
|
+
},
|
|
411
|
+
{
|
|
412
|
+
component: "kernel",
|
|
413
|
+
table: "workflowStages",
|
|
414
|
+
prepopulation: "optional_template",
|
|
415
|
+
copyMode: "none",
|
|
416
|
+
dependsOn: ["workflowDefinitions"],
|
|
417
|
+
description: "Workflow stages can be template data after workflowDefinitions are enabled for bootstrap copying."
|
|
418
|
+
},
|
|
419
|
+
{
|
|
420
|
+
component: "kernel",
|
|
421
|
+
table: "worktreeBeliefCluster",
|
|
422
|
+
prepopulation: "runtime_data",
|
|
423
|
+
copyMode: "none",
|
|
424
|
+
description: "Worktree cluster rows link runtime worktrees to runtime beliefs."
|
|
425
|
+
},
|
|
426
|
+
{
|
|
427
|
+
component: "kernel",
|
|
428
|
+
table: "worktrees",
|
|
429
|
+
prepopulation: "runtime_data",
|
|
430
|
+
copyMode: "none",
|
|
431
|
+
description: "Worktrees are tenant/runtime planning data."
|
|
432
|
+
},
|
|
433
|
+
{
|
|
434
|
+
component: "control-plane",
|
|
435
|
+
table: "agents",
|
|
436
|
+
prepopulation: "runtime_bootstrap",
|
|
437
|
+
copyMode: "none",
|
|
438
|
+
description: "Service agents are provisioned per tenant or service, not copied."
|
|
439
|
+
},
|
|
440
|
+
{
|
|
441
|
+
component: "control-plane",
|
|
442
|
+
table: "mcpWritePolicy",
|
|
443
|
+
prepopulation: "required_template",
|
|
444
|
+
copyMode: "template_global",
|
|
445
|
+
scope: "global",
|
|
446
|
+
uniqueKey: ["topicId", "role", "toolCategory"],
|
|
447
|
+
description: "Global write policy defaults govern service and interactive MCP writes."
|
|
448
|
+
},
|
|
449
|
+
{
|
|
450
|
+
component: "control-plane",
|
|
451
|
+
table: "modelCallLogs",
|
|
452
|
+
prepopulation: "runtime_log",
|
|
453
|
+
copyMode: "none",
|
|
454
|
+
description: "Model call logs are runtime telemetry."
|
|
455
|
+
},
|
|
456
|
+
{
|
|
457
|
+
component: "control-plane",
|
|
458
|
+
table: "modelFunctionSlots",
|
|
459
|
+
prepopulation: "required_template",
|
|
460
|
+
copyMode: "template_global",
|
|
461
|
+
scope: "global",
|
|
462
|
+
uniqueKey: ["slot"],
|
|
463
|
+
description: "Function-to-model slots are required by model runtime resolution."
|
|
464
|
+
},
|
|
465
|
+
{
|
|
466
|
+
component: "control-plane",
|
|
467
|
+
table: "modelRegistry",
|
|
468
|
+
prepopulation: "required_template",
|
|
469
|
+
copyMode: "template_global",
|
|
470
|
+
scope: "global",
|
|
471
|
+
uniqueKey: ["key"],
|
|
472
|
+
description: "Model catalog defaults are required by model runtime clients."
|
|
473
|
+
},
|
|
474
|
+
{
|
|
475
|
+
component: "control-plane",
|
|
476
|
+
table: "modelSlotConfigs",
|
|
477
|
+
prepopulation: "required_template",
|
|
478
|
+
copyMode: "template_global",
|
|
479
|
+
scope: "global",
|
|
480
|
+
uniqueKey: ["slot"],
|
|
481
|
+
description: "Slot-level defaults are required before tenant overrides exist."
|
|
482
|
+
},
|
|
483
|
+
{
|
|
484
|
+
component: "control-plane",
|
|
485
|
+
table: "permitAccessReviewItems",
|
|
486
|
+
prepopulation: "runtime_data",
|
|
487
|
+
copyMode: "none",
|
|
488
|
+
description: "Permit access-review item rows are tenant review data projected from Permit."
|
|
489
|
+
},
|
|
490
|
+
{
|
|
491
|
+
component: "control-plane",
|
|
492
|
+
table: "permitAccessReviews",
|
|
493
|
+
prepopulation: "runtime_data",
|
|
494
|
+
copyMode: "none",
|
|
495
|
+
description: "Permit access-review campaigns are tenant review data projected from Permit."
|
|
496
|
+
},
|
|
497
|
+
{
|
|
498
|
+
component: "control-plane",
|
|
499
|
+
table: "permitAttributeBindings",
|
|
500
|
+
prepopulation: "runtime_data",
|
|
501
|
+
copyMode: "none",
|
|
502
|
+
description: "Permit ABAC attribute bindings are tenant policy projection rows."
|
|
503
|
+
},
|
|
504
|
+
{
|
|
505
|
+
component: "control-plane",
|
|
506
|
+
table: "permitGroups",
|
|
507
|
+
prepopulation: "runtime_data",
|
|
508
|
+
copyMode: "none",
|
|
509
|
+
description: "Permit groups are tenant-defined policy subjects, not template data."
|
|
510
|
+
},
|
|
511
|
+
{
|
|
512
|
+
component: "control-plane",
|
|
513
|
+
table: "permitGroupMemberships",
|
|
514
|
+
prepopulation: "runtime_data",
|
|
515
|
+
copyMode: "none",
|
|
516
|
+
description: "Permit group memberships are tenant-specific policy projection rows."
|
|
517
|
+
},
|
|
518
|
+
{
|
|
519
|
+
component: "control-plane",
|
|
520
|
+
table: "permitPolicyBundles",
|
|
521
|
+
prepopulation: "runtime_derived",
|
|
522
|
+
copyMode: "none",
|
|
523
|
+
description: "Permit policy bundles are derived from the Permit control plane."
|
|
524
|
+
},
|
|
525
|
+
{
|
|
526
|
+
component: "control-plane",
|
|
527
|
+
table: "permitPolicyDecisionReceipts",
|
|
528
|
+
prepopulation: "runtime_log",
|
|
529
|
+
copyMode: "none",
|
|
530
|
+
description: "Permit decision receipts are runtime authorization audit logs."
|
|
531
|
+
},
|
|
532
|
+
{
|
|
533
|
+
component: "control-plane",
|
|
534
|
+
table: "permitPrincipalAliases",
|
|
535
|
+
prepopulation: "runtime_data",
|
|
536
|
+
copyMode: "none",
|
|
537
|
+
description: "Permit principal aliases are tenant-specific identity projection rows."
|
|
538
|
+
},
|
|
539
|
+
{
|
|
540
|
+
component: "control-plane",
|
|
541
|
+
table: "permitPrincipals",
|
|
542
|
+
prepopulation: "runtime_data",
|
|
543
|
+
copyMode: "none",
|
|
544
|
+
description: "Permit principals are projected from Clerk, Permit, and tenant onboarding flows."
|
|
545
|
+
},
|
|
546
|
+
{
|
|
547
|
+
component: "control-plane",
|
|
548
|
+
table: "permitProjectionOutbox",
|
|
549
|
+
prepopulation: "runtime_queue",
|
|
550
|
+
copyMode: "none",
|
|
551
|
+
description: "Permit projection outbox rows are runtime sync queue data."
|
|
552
|
+
},
|
|
553
|
+
{
|
|
554
|
+
component: "control-plane",
|
|
555
|
+
table: "permitRelationshipTuples",
|
|
556
|
+
prepopulation: "runtime_data",
|
|
557
|
+
copyMode: "none",
|
|
558
|
+
description: "Permit ReBAC relationship tuples are tenant policy projection rows."
|
|
559
|
+
},
|
|
560
|
+
{
|
|
561
|
+
component: "control-plane",
|
|
562
|
+
table: "permitResourceInstances",
|
|
563
|
+
prepopulation: "runtime_data",
|
|
564
|
+
copyMode: "none",
|
|
565
|
+
description: "Permit resource instances are tenant/workspace graph and deployment projection rows."
|
|
566
|
+
},
|
|
567
|
+
{
|
|
568
|
+
component: "control-plane",
|
|
569
|
+
table: "permitRoleAssignments",
|
|
570
|
+
prepopulation: "runtime_data",
|
|
571
|
+
copyMode: "none",
|
|
572
|
+
description: "Permit role assignments are tenant-specific policy projection rows."
|
|
573
|
+
},
|
|
574
|
+
{
|
|
575
|
+
component: "control-plane",
|
|
576
|
+
table: "platformAudienceGrants",
|
|
577
|
+
prepopulation: "runtime_data",
|
|
578
|
+
copyMode: "none",
|
|
579
|
+
description: "Audience grants are principal/group-specific access rows."
|
|
580
|
+
},
|
|
581
|
+
{
|
|
582
|
+
component: "control-plane",
|
|
583
|
+
table: "platformAudiences",
|
|
584
|
+
prepopulation: "required_template",
|
|
585
|
+
copyMode: "template_tenant_rewrite",
|
|
586
|
+
scope: "tenant",
|
|
587
|
+
uniqueKey: ["tenantId", "workspaceId", "audienceKey"],
|
|
588
|
+
description: "Default tenant audience taxonomy rows are rewritten into each tenant."
|
|
589
|
+
},
|
|
590
|
+
{
|
|
591
|
+
component: "control-plane",
|
|
592
|
+
table: "platformPolicyDecisionLogs",
|
|
593
|
+
prepopulation: "runtime_log",
|
|
594
|
+
copyMode: "none",
|
|
595
|
+
description: "Policy decisions are runtime audit logs."
|
|
596
|
+
},
|
|
597
|
+
{
|
|
598
|
+
component: "control-plane",
|
|
599
|
+
table: "projectGrants",
|
|
600
|
+
prepopulation: "runtime_data",
|
|
601
|
+
copyMode: "none",
|
|
602
|
+
description: "Project/topic grants are principal or group-specific access rows."
|
|
603
|
+
},
|
|
604
|
+
{
|
|
605
|
+
component: "control-plane",
|
|
606
|
+
table: "reasoningPermissions",
|
|
607
|
+
prepopulation: "runtime_data",
|
|
608
|
+
copyMode: "none",
|
|
609
|
+
description: "Reasoning permissions are principal-specific policy rows."
|
|
610
|
+
},
|
|
611
|
+
{
|
|
612
|
+
component: "control-plane",
|
|
613
|
+
table: "tenantApiKeys",
|
|
614
|
+
prepopulation: "runtime_secret",
|
|
615
|
+
copyMode: "none",
|
|
616
|
+
description: "API keys are tenant credentials and must never be copied."
|
|
617
|
+
},
|
|
618
|
+
{
|
|
619
|
+
component: "control-plane",
|
|
620
|
+
table: "tenantConfig",
|
|
621
|
+
prepopulation: "required_template",
|
|
622
|
+
copyMode: "template_tenant_rewrite",
|
|
623
|
+
scope: "tenant",
|
|
624
|
+
uniqueKey: ["tenantId"],
|
|
625
|
+
description: "Tenant-local config defaults are rewritten during bootstrap."
|
|
626
|
+
},
|
|
627
|
+
{
|
|
628
|
+
component: "control-plane",
|
|
629
|
+
table: "tenantIntegrations",
|
|
630
|
+
prepopulation: "required_template",
|
|
631
|
+
copyMode: "template_tenant_rewrite",
|
|
632
|
+
scope: "tenant",
|
|
633
|
+
uniqueKey: ["tenantId", "integrationKey"],
|
|
634
|
+
description: "Non-secret integration descriptors are rewritten into each tenant."
|
|
635
|
+
},
|
|
636
|
+
{
|
|
637
|
+
component: "control-plane",
|
|
638
|
+
table: "tenantModelSlotBindings",
|
|
639
|
+
prepopulation: "runtime_secret",
|
|
640
|
+
copyMode: "none",
|
|
641
|
+
description: "Tenant model slot bindings reference provider secrets and are runtime-only."
|
|
642
|
+
},
|
|
643
|
+
{
|
|
644
|
+
component: "control-plane",
|
|
645
|
+
table: "tenantPermitSyncStates",
|
|
646
|
+
prepopulation: "runtime_derived",
|
|
647
|
+
copyMode: "none",
|
|
648
|
+
description: "Tenant Permit sync state rows are runtime reconciliation state."
|
|
649
|
+
},
|
|
650
|
+
{
|
|
651
|
+
component: "control-plane",
|
|
652
|
+
table: "tenantPolicies",
|
|
653
|
+
prepopulation: "required_template",
|
|
654
|
+
copyMode: "template_tenant_rewrite",
|
|
655
|
+
scope: "tenant",
|
|
656
|
+
uniqueKey: ["tenantId", "workspaceId", "roleName"],
|
|
657
|
+
description: "Default tenant policy roles are rewritten during bootstrap."
|
|
658
|
+
},
|
|
659
|
+
{
|
|
660
|
+
component: "control-plane",
|
|
661
|
+
table: "tenantProviderSecrets",
|
|
662
|
+
prepopulation: "runtime_secret",
|
|
663
|
+
copyMode: "none",
|
|
664
|
+
description: "Provider secrets are credentials and must never be copied."
|
|
665
|
+
},
|
|
666
|
+
{
|
|
667
|
+
component: "control-plane",
|
|
668
|
+
table: "tenantProxyGatewayUsage",
|
|
669
|
+
prepopulation: "runtime_log",
|
|
670
|
+
copyMode: "none",
|
|
671
|
+
description: "Proxy gateway usage rows are runtime telemetry."
|
|
672
|
+
},
|
|
673
|
+
{
|
|
674
|
+
component: "control-plane",
|
|
675
|
+
table: "tenantProxyTokenMints",
|
|
676
|
+
prepopulation: "runtime_secret",
|
|
677
|
+
copyMode: "none",
|
|
678
|
+
description: "Proxy token mints are ephemeral secret-bearing runtime rows."
|
|
679
|
+
},
|
|
680
|
+
{
|
|
681
|
+
component: "control-plane",
|
|
682
|
+
table: "tenantSandboxAuditEvents",
|
|
683
|
+
prepopulation: "runtime_log",
|
|
684
|
+
copyMode: "none",
|
|
685
|
+
description: "Sandbox audit rows are runtime security logs."
|
|
686
|
+
},
|
|
687
|
+
{
|
|
688
|
+
component: "control-plane",
|
|
689
|
+
table: "tenantSecrets",
|
|
690
|
+
prepopulation: "runtime_secret",
|
|
691
|
+
copyMode: "none",
|
|
692
|
+
description: "Tenant secrets are credentials and must never be copied."
|
|
693
|
+
},
|
|
694
|
+
{
|
|
695
|
+
component: "control-plane",
|
|
696
|
+
table: "toolAcls",
|
|
697
|
+
prepopulation: "required_template",
|
|
698
|
+
copyMode: "template_global",
|
|
699
|
+
scope: "global",
|
|
700
|
+
uniqueKey: ["role", "toolName"],
|
|
701
|
+
description: "Default role-to-tool grants are required for SDK/MCP tool access."
|
|
702
|
+
},
|
|
703
|
+
{
|
|
704
|
+
component: "control-plane",
|
|
705
|
+
table: "toolRegistry",
|
|
706
|
+
prepopulation: "required_template",
|
|
707
|
+
copyMode: "template_global",
|
|
708
|
+
scope: "global",
|
|
709
|
+
uniqueKey: ["toolName"],
|
|
710
|
+
description: "Core tool catalog rows are required before pack or tenant tools exist."
|
|
711
|
+
},
|
|
712
|
+
{
|
|
713
|
+
component: "control-plane",
|
|
714
|
+
table: "users",
|
|
715
|
+
prepopulation: "runtime_bootstrap",
|
|
716
|
+
copyMode: "none",
|
|
717
|
+
description: "Users are created from Clerk/MC principal resolution, not copied."
|
|
718
|
+
}
|
|
719
|
+
];
|
|
720
|
+
var TENANT_BOOTSTRAP_SEED_TABLES = TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(
|
|
721
|
+
isCopyableSeedRequirement
|
|
722
|
+
);
|
|
723
|
+
var TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES = TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(
|
|
724
|
+
(entry) => !isCopyableSeedRequirement(entry)
|
|
725
|
+
).map((entry) => entry.table);
|
|
726
|
+
var TENANT_BOOTSTRAP_SEED_MANIFEST = {
|
|
727
|
+
contractVersion: TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION,
|
|
728
|
+
authMetadataFields: TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS,
|
|
729
|
+
components: TENANT_BOOTSTRAP_SEED_COMPONENTS,
|
|
730
|
+
tableRequirements: TENANT_BOOTSTRAP_TABLE_REQUIREMENTS,
|
|
731
|
+
tables: TENANT_BOOTSTRAP_SEED_TABLES,
|
|
732
|
+
forbiddenTables: TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES
|
|
733
|
+
};
|
|
734
|
+
function findTenantBootstrapTableRequirement(table) {
|
|
735
|
+
return TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.find(
|
|
736
|
+
(entry) => entry.table === table
|
|
737
|
+
);
|
|
738
|
+
}
|
|
739
|
+
function findTenantBootstrapSeedTable(table) {
|
|
740
|
+
return TENANT_BOOTSTRAP_SEED_TABLES.find((entry) => entry.table === table);
|
|
741
|
+
}
|
|
742
|
+
function isTenantBootstrapSeedTable(table) {
|
|
743
|
+
return Boolean(findTenantBootstrapSeedTable(table));
|
|
744
|
+
}
|
|
745
|
+
function isTenantBootstrapForbiddenSeedTable(table) {
|
|
746
|
+
return TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES.some((entry) => entry === table);
|
|
747
|
+
}
|
|
748
|
+
|
|
749
|
+
export { TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES, TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS, TENANT_BOOTSTRAP_SEED_COMPONENTS, TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION, TENANT_BOOTSTRAP_SEED_MANIFEST, TENANT_BOOTSTRAP_SEED_TABLES, TENANT_BOOTSTRAP_TABLE_REQUIREMENTS, findTenantBootstrapSeedTable, findTenantBootstrapTableRequirement, isTenantBootstrapForbiddenSeedTable, isTenantBootstrapSeedTable };
|
|
750
|
+
//# sourceMappingURL=tenant-bootstrap-seed.contract.js.map
|
|
751
|
+
//# sourceMappingURL=tenant-bootstrap-seed.contract.js.map
|