@lucern/contracts 0.3.0-alpha.10 → 0.3.0-alpha.12

package/dist/tenant-bootstrap-seed.contract.js

@@ -19,10 +19,10 @@ var TENANT_BOOTSTRAP_SEED_COMPONENTS = {
       prod: "cool-badger-368"
     }
   },
-  identity: {
-    componentName: "identity",
-    migrationModule: "migration",
-    templateService: "services/identity-template",
+  "control-plane": {
+    componentName: "controlPlane",
+    migrationModule: "dist/migration",
+    templateService: "services/control-plane-template",
     templateDeployments: {
       staging: "industrious-cheetah-864",
       prod: "combative-beagle-879"
@@ -431,14 +431,14 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Worktrees are tenant/runtime planning data."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "agents",
     prepopulation: "runtime_bootstrap",
     copyMode: "none",
     description: "Service agents are provisioned per tenant or service, not copied."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "mcpWritePolicy",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -447,14 +447,14 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Global write policy defaults govern service and interactive MCP writes."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "modelCallLogs",
     prepopulation: "runtime_log",
     copyMode: "none",
     description: "Model call logs are runtime telemetry."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "modelFunctionSlots",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -463,7 +463,7 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Function-to-model slots are required by model runtime resolution."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "modelRegistry",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -472,7 +472,7 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Model catalog defaults are required by model runtime clients."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "modelSlotConfigs",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -481,14 +481,105 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Slot-level defaults are required before tenant overrides exist."
   },
   {
-    component: "identity",
+    component: "control-plane",
+    table: "permitAccessReviewItems",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit access-review item rows are tenant review data projected from Permit."
+  },
+  {
+    component: "control-plane",
+    table: "permitAccessReviews",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit access-review campaigns are tenant review data projected from Permit."
+  },
+  {
+    component: "control-plane",
+    table: "permitAttributeBindings",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit ABAC attribute bindings are tenant policy projection rows."
+  },
+  {
+    component: "control-plane",
+    table: "permitGroups",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit groups are tenant-defined policy subjects, not template data."
+  },
+  {
+    component: "control-plane",
+    table: "permitGroupMemberships",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit group memberships are tenant-specific policy projection rows."
+  },
+  {
+    component: "control-plane",
+    table: "permitPolicyBundles",
+    prepopulation: "runtime_derived",
+    copyMode: "none",
+    description: "Permit policy bundles are derived from the Permit control plane."
+  },
+  {
+    component: "control-plane",
+    table: "permitPolicyDecisionReceipts",
+    prepopulation: "runtime_log",
+    copyMode: "none",
+    description: "Permit decision receipts are runtime authorization audit logs."
+  },
+  {
+    component: "control-plane",
+    table: "permitPrincipalAliases",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit principal aliases are tenant-specific identity projection rows."
+  },
+  {
+    component: "control-plane",
+    table: "permitPrincipals",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit principals are projected from Clerk, Permit, and tenant onboarding flows."
+  },
+  {
+    component: "control-plane",
+    table: "permitProjectionOutbox",
+    prepopulation: "runtime_queue",
+    copyMode: "none",
+    description: "Permit projection outbox rows are runtime sync queue data."
+  },
+  {
+    component: "control-plane",
+    table: "permitRelationshipTuples",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit ReBAC relationship tuples are tenant policy projection rows."
+  },
+  {
+    component: "control-plane",
+    table: "permitResourceInstances",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit resource instances are tenant/workspace graph and deployment projection rows."
+  },
+  {
+    component: "control-plane",
+    table: "permitRoleAssignments",
+    prepopulation: "runtime_data",
+    copyMode: "none",
+    description: "Permit role assignments are tenant-specific policy projection rows."
+  },
+  {
+    component: "control-plane",
     table: "platformAudienceGrants",
     prepopulation: "runtime_data",
     copyMode: "none",
     description: "Audience grants are principal/group-specific access rows."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "platformAudiences",
     prepopulation: "required_template",
     copyMode: "template_tenant_rewrite",
@@ -497,35 +588,35 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Default tenant audience taxonomy rows are rewritten into each tenant."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "platformPolicyDecisionLogs",
     prepopulation: "runtime_log",
     copyMode: "none",
     description: "Policy decisions are runtime audit logs."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "projectGrants",
     prepopulation: "runtime_data",
     copyMode: "none",
     description: "Project/topic grants are principal or group-specific access rows."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "reasoningPermissions",
     prepopulation: "runtime_data",
     copyMode: "none",
     description: "Reasoning permissions are principal-specific policy rows."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantApiKeys",
     prepopulation: "runtime_secret",
     copyMode: "none",
     description: "API keys are tenant credentials and must never be copied."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantConfig",
     prepopulation: "required_template",
     copyMode: "template_tenant_rewrite",
@@ -534,7 +625,7 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Tenant-local config defaults are rewritten during bootstrap."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantIntegrations",
     prepopulation: "required_template",
     copyMode: "template_tenant_rewrite",
@@ -543,14 +634,21 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Non-secret integration descriptors are rewritten into each tenant."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantModelSlotBindings",
     prepopulation: "runtime_secret",
     copyMode: "none",
     description: "Tenant model slot bindings reference provider secrets and are runtime-only."
   },
   {
-    component: "identity",
+    component: "control-plane",
+    table: "tenantPermitSyncStates",
+    prepopulation: "runtime_derived",
+    copyMode: "none",
+    description: "Tenant Permit sync state rows are runtime reconciliation state."
+  },
+  {
+    component: "control-plane",
     table: "tenantPolicies",
     prepopulation: "required_template",
     copyMode: "template_tenant_rewrite",
@@ -559,42 +657,42 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Default tenant policy roles are rewritten during bootstrap."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantProviderSecrets",
     prepopulation: "runtime_secret",
     copyMode: "none",
     description: "Provider secrets are credentials and must never be copied."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantProxyGatewayUsage",
     prepopulation: "runtime_log",
     copyMode: "none",
     description: "Proxy gateway usage rows are runtime telemetry."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantProxyTokenMints",
     prepopulation: "runtime_secret",
     copyMode: "none",
     description: "Proxy token mints are ephemeral secret-bearing runtime rows."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantSandboxAuditEvents",
     prepopulation: "runtime_log",
     copyMode: "none",
     description: "Sandbox audit rows are runtime security logs."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "tenantSecrets",
     prepopulation: "runtime_secret",
     copyMode: "none",
     description: "Tenant secrets are credentials and must never be copied."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "toolAcls",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -603,7 +701,7 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Default role-to-tool grants are required for SDK/MCP tool access."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "toolRegistry",
     prepopulation: "required_template",
     copyMode: "template_global",
@@ -612,7 +710,7 @@ var TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [
     description: "Core tool catalog rows are required before pack or tenant tools exist."
   },
   {
-    component: "identity",
+    component: "control-plane",
     table: "users",
     prepopulation: "runtime_bootstrap",
     copyMode: "none",

package/dist/tenant-bootstrap-seed.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tenant-bootstrap-seed.contract.ts"],"names":[],"mappings":";AAUO,IAAM,sCAAA,GAAyC;AAE/C,IAAM,0CAAA,GAA6C;AAAA,EACxD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA,EAAQ;AAAA,IACN,aAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAiB,oBAAA;AAAA,IACjB,eAAA,EAAiB,0BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,qBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,UAAA;AAAA,IACf,eAAA,EAAiB,WAAA;AAAA,IACjB,eAAA,EAAiB,4BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,yBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ;AA0CA,SAAS,0BACP,KAAA,EACmC;AACnC,EAAA,OAAA,CACG,KAAA,CAAM,aAAa,iBAAA,IAClB,KAAA,CAAM,aAAa,yBAAA,IACnB,KAAA,CAAM,aAAa,0BAAA,KACrB,OAAA,CAAQ,MAAM,KAAK,CAAA,IACnB,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,IAC7B,KAAA,CAAM,UAAU,MAAA,GAAS,CAAA;AAE7B;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,QAAQ,CAAA;AAAA,IACpB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAa,CAAA;AAAA,IACzB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,0BAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAA,EAAe,SAAS,CAAA;AAAA,IACpC,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,MAAM,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,OAAO,CAAA;AAAA,IAC/B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,YAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,WAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,SAAA,EAAW,MAAA,EAAQ,cAAc,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,KAAK,CAAA;AAAA,IACjB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,aAAa,CAAA;AAAA,IACpD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,gBAAgB,CAAA;AAAA,IACxC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,UAAU,CAAA;AAAA,IACjD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,0BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,UAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,IAC9B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAEO,IAAM,+BACX,mCAAA,CAAoC,MAAA;AAAA,EAClC;AACF;AAKK,IAAM,yCACX,mCAAA,CAAoC,MAAA;AAAA,EAClC,CAAC,KAAA,KAAU,CAAC,yBAAA,CAA0B,KAAK;AAC7C,CAAA,CAAE,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,KAAK;AAIvB,IAAM,8BAAA,GAAiC;AAAA,EAC5C,eAAA,EAAiB,sCAAA;AAAA,EACjB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,UAAA,EAAY,gCAAA;AAAA,EACZ,iBAAA,EAAmB,mCAAA;AAAA,EACnB,MAAA,EAAQ,4BAAA;AAAA,EACR,eAAA,EAAiB;AACnB;AAEO,SAAS,oCACd,KAAA,EAC6C;AAC7C,EAAA,OAAO,mCAAA,CAAoC,IAAA;AAAA,IACzC,CAAC,KAAA,KAAU,KAAA,CAAM,KAAA,KAAU;AAAA,GAC7B;AACF;AAEO,SAAS,6BACd,KAAA,EACsC;AACtC,EAAA,OAAO,6BAA6B,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,UAAU,KAAK,CAAA;AAC3E;AAEO,SAAS,2BAA2B,KAAA,EAAwB;AACjE,EAAA,OAAO,OAAA,CAAQ,4BAAA,CAA6B,KAAK,CAAC,CAAA;AACpD;AAEO,SAAS,oCAAoC,KAAA,EAAwB;AAC1E,EAAA,OAAO,sCAAA,CAAuC,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AAC/E","file":"tenant-bootstrap-seed.contract.js","sourcesContent":["/**\n * Tenant bootstrap seed contract.\n *\n * Fresh tenant deployments install the Lucern kernel and identity components\n * from npm, then copy canonical template rows for non-secret runtime defaults.\n * This contract is intentionally exhaustive for the K/I tables: it separates\n * rows that must be carried by the template deployments from rows that are\n * runtime data, runtime credentials, logs, queues, or derived caches.\n */\n\nexport const TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION = \"2026-04-30\" as const;\n\nexport const TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"role\",\n  \"authMode\",\n  \"correlationId\",\n  \"auditMetadata\",\n] as const;\nexport type TenantBootstrapSeedAuthMetadataField =\n  (typeof TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_COMPONENTS = {\n  kernel: {\n    componentName: \"lucern\",\n    migrationModule: \"adapters/migration\",\n    templateService: \"services/kernel-template\",\n    templateDeployments: {\n      staging: \"kindly-goldfish-162\",\n      prod: \"cool-badger-368\",\n    },\n  },\n  identity: {\n    componentName: \"identity\",\n    migrationModule: \"migration\",\n    templateService: \"services/identity-template\",\n    templateDeployments: {\n      staging: \"industrious-cheetah-864\",\n      prod: \"combative-beagle-879\",\n    },\n  },\n} as const;\nexport type TenantBootstrapSeedComponent =\n  keyof typeof TENANT_BOOTSTRAP_SEED_COMPONENTS;\n\nexport type TenantBootstrapSeedScope = \"global\" | \"tenant\";\n\nexport type TenantBootstrapPrepopulation =\n  | \"required_template\"\n  | \"optional_template\"\n  | \"runtime_bootstrap\"\n  | \"runtime_data\"\n  | \"runtime_log\"\n  | \"runtime_secret\"\n  | \"runtime_derived\"\n  | \"runtime_queue\";\n\nexport type TenantBootstrapCopyMode =\n  | \"template_global\"\n  | \"template_tenant_rewrite\"\n  | \"template_reference_remap\"\n  | \"none\";\n\nexport type TenantBootstrapTableRequirement = {\n  component: TenantBootstrapSeedComponent;\n  table: string;\n  prepopulation: TenantBootstrapPrepopulation;\n  copyMode: TenantBootstrapCopyMode;\n  scope?: TenantBootstrapSeedScope;\n  uniqueKey?: readonly string[];\n  dependsOn?: readonly string[];\n  description: string;\n};\n\nexport type TenantBootstrapSeedTable = TenantBootstrapTableRequirement & {\n  copyMode:\n    | \"template_global\"\n    | \"template_tenant_rewrite\"\n    | \"template_reference_remap\";\n  scope: TenantBootstrapSeedScope;\n  uniqueKey: readonly string[];\n};\n\nfunction isCopyableSeedRequirement(\n  entry: TenantBootstrapTableRequirement\n): entry is TenantBootstrapSeedTable {\n  return (\n    (entry.copyMode === \"template_global\" ||\n      entry.copyMode === \"template_tenant_rewrite\" ||\n      entry.copyMode === \"template_reference_remap\") &&\n    Boolean(entry.scope) &&\n    Array.isArray(entry.uniqueKey) &&\n    entry.uniqueKey.length > 0\n  );\n}\n\nexport const TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [\n  {\n    component: \"kernel\",\n    table: \"agentMessages\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination messages are session data, not template data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"agentSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination sessions are created by active clients.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"autofixJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Autofix work items are runtime queue rows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Background job executions are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobSettings\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"jobKey\"],\n    description: \"Default job enablement settings must come from the K template.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefConfidence\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief confidence rows are created with tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefHistory\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief history is append-only tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefScenarios\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Scenario rows are tenant-authored reasoning data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefVotes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision belief votes are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"calibrationScores\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Calibration scores are computed from tenant outcomes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contractEvaluations\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Contract evaluation rows are runtime computation logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contradictions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Contradictions are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"crossProjectConnections\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Cross-topic connections are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionComputedSummaries\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision summaries are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionEvents\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision events are lifecycle data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionParticipants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision participants are tenant-selected actors.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionRiskLedger\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision risk rows are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionSnapshots\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision snapshots are derived from tenant state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationContributions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation contributions are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation sessions are created by tenant workflows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Epistemic audit rows are append-only runtime audit data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicContracts\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Epistemic contracts are tenant-authored governance data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicEdges\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Edges are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodeEmbeddings\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Embeddings are derived from tenant graph nodes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Nodes are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisCache\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis cache rows are derived from tenant graph state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisResults\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis result rows are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphSuggestions\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph suggestions are derived recommendations.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessReplays\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness replay rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness run rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"idempotencyTokens\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Idempotency tokens are request-scoped runtime guards.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lenses\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Reusable lens templates may live in K templates, but workspace-specific copies are not required for core SDK boot.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lensTopicBindings\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Lens bindings attach runtime topics to runtime/workspace lenses.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"neo4jSyncQueue\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Neo4j sync queue rows are runtime work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyDefinitions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\"],\n    description: \"Platform ontology definitions power taxonomy reads and effective ontology resolution.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyVersions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_reference_remap\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\", \"version\"],\n    dependsOn: [\"ontologyDefinitions\"],\n    description: \"Ontology versions must be copied with ontologyDefinition ID remapping.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPolicyDecisions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run policy decisions are audit logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPromptResolutions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run prompt resolution rows are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent runs are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunToolCalls\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run tool calls are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformHarnessShadowAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness shadow audit rows are runtime audit records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"publicationRules\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"name\"],\n    description: \"Default publication policy rules are rewritten into each tenant.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"questionEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Question-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"researchJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Research job rows are runtime queue items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"schemaEnumConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"category\", \"value\"],\n    description: \"Runtime-extensible enum defaults required by SDK graph APIs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"stakeholderGroups\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Stakeholder groups are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"systemLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"System logs are runtime telemetry.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"tasks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Tasks are tenant-authored work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"topics\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Default topics are created by tenant provisioning, not copied from templates.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowDefinitions\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Table-driven workflow definitions can be template data after the workflow engine leaves legacy mode.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowPullRequests\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Workflow pull requests are tenant workflow data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowStages\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    dependsOn: [\"workflowDefinitions\"],\n    description:\n      \"Workflow stages can be template data after workflowDefinitions are enabled for bootstrap copying.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktreeBeliefCluster\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktree cluster rows link runtime worktrees to runtime beliefs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktrees\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktrees are tenant/runtime planning data.\",\n  },\n  {\n    component: \"identity\",\n    table: \"agents\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Service agents are provisioned per tenant or service, not copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"mcpWritePolicy\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"topicId\", \"role\", \"toolCategory\"],\n    description: \"Global write policy defaults govern service and interactive MCP writes.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelCallLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Model call logs are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelFunctionSlots\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Function-to-model slots are required by model runtime resolution.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"key\"],\n    description: \"Model catalog defaults are required by model runtime clients.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelSlotConfigs\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Slot-level defaults are required before tenant overrides exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudienceGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Audience grants are principal/group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudiences\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"audienceKey\"],\n    description: \"Default tenant audience taxonomy rows are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformPolicyDecisionLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Policy decisions are runtime audit logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"projectGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Project/topic grants are principal or group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"reasoningPermissions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Reasoning permissions are principal-specific policy rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantApiKeys\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"API keys are tenant credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\"],\n    description: \"Tenant-local config defaults are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantIntegrations\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"integrationKey\"],\n    description: \"Non-secret integration descriptors are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantModelSlotBindings\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant model slot bindings reference provider secrets and are runtime-only.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantPolicies\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"roleName\"],\n    description: \"Default tenant policy roles are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProviderSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Provider secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyGatewayUsage\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Proxy gateway usage rows are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyTokenMints\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Proxy token mints are ephemeral secret-bearing runtime rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSandboxAuditEvents\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Sandbox audit rows are runtime security logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolAcls\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"role\", \"toolName\"],\n    description: \"Default role-to-tool grants are required for SDK/MCP tool access.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"toolName\"],\n    description: \"Core tool catalog rows are required before pack or tenant tools exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"users\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Users are created from Clerk/MC principal resolution, not copied.\",\n  },\n] as const satisfies readonly TenantBootstrapTableRequirement[];\n\nexport const TENANT_BOOTSTRAP_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    isCopyableSeedRequirement\n  ) as readonly TenantBootstrapSeedTable[];\n\nexport type TenantBootstrapSeedTableName =\n  (typeof TENANT_BOOTSTRAP_SEED_TABLES)[number][\"table\"];\n\nexport const TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    (entry) => !isCopyableSeedRequirement(entry)\n  ).map((entry) => entry.table) as readonly string[];\nexport type TenantBootstrapForbiddenSeedTable =\n  (typeof TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_MANIFEST = {\n  contractVersion: TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION,\n  authMetadataFields: TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS,\n  components: TENANT_BOOTSTRAP_SEED_COMPONENTS,\n  tableRequirements: TENANT_BOOTSTRAP_TABLE_REQUIREMENTS,\n  tables: TENANT_BOOTSTRAP_SEED_TABLES,\n  forbiddenTables: TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES,\n} as const;\n\nexport function findTenantBootstrapTableRequirement(\n  table: string\n): TenantBootstrapTableRequirement | undefined {\n  return TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.find(\n    (entry) => entry.table === table\n  );\n}\n\nexport function findTenantBootstrapSeedTable(\n  table: string\n): TenantBootstrapSeedTable | undefined {\n  return TENANT_BOOTSTRAP_SEED_TABLES.find((entry) => entry.table === table);\n}\n\nexport function isTenantBootstrapSeedTable(table: string): boolean {\n  return Boolean(findTenantBootstrapSeedTable(table));\n}\n\nexport function isTenantBootstrapForbiddenSeedTable(table: string): boolean {\n  return TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES.some((entry) => entry === table);\n}\n"]}
+{"version":3,"sources":["../src/tenant-bootstrap-seed.contract.ts"],"names":[],"mappings":";AAUO,IAAM,sCAAA,GAAyC;AAE/C,IAAM,0CAAA,GAA6C;AAAA,EACxD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA,EAAQ;AAAA,IACN,aAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAiB,oBAAA;AAAA,IACjB,eAAA,EAAiB,0BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,qBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,eAAA,EAAiB;AAAA,IACf,aAAA,EAAe,cAAA;AAAA,IACf,eAAA,EAAiB,gBAAA;AAAA,IACjB,eAAA,EAAiB,iCAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,yBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ;AA0CA,SAAS,0BACP,KAAA,EACmC;AACnC,EAAA,OAAA,CACG,KAAA,CAAM,aAAa,iBAAA,IAClB,KAAA,CAAM,aAAa,yBAAA,IACnB,KAAA,CAAM,aAAa,0BAAA,KACrB,OAAA,CAAQ,MAAM,KAAK,CAAA,IACnB,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,IAC7B,KAAA,CAAM,UAAU,MAAA,GAAS,CAAA;AAE7B;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,QAAQ,CAAA;AAAA,IACpB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAa,CAAA;AAAA,IACzB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,0BAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAA,EAAe,SAAS,CAAA;AAAA,IACpC,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,MAAM,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,OAAO,CAAA;AAAA,IAC/B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,YAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,WAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,SAAA,EAAW,MAAA,EAAQ,cAAc,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,KAAK,CAAA;AAAA,IACjB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,8BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,0BAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,aAAa,CAAA;AAAA,IACpD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,gBAAgB,CAAA;AAAA,IACxC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,UAAU,CAAA;AAAA,IACjD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,0BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,UAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,IAC9B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,eAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAEO,IAAM,+BACX,mCAAA,CAAoC,MAAA;AAAA,EAClC;AACF;AAKK,IAAM,yCACX,mCAAA,CAAoC,MAAA;AAAA,EAClC,CAAC,KAAA,KAAU,CAAC,yBAAA,CAA0B,KAAK;AAC7C,CAAA,CAAE,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,KAAK;AAIvB,IAAM,8BAAA,GAAiC;AAAA,EAC5C,eAAA,EAAiB,sCAAA;AAAA,EACjB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,UAAA,EAAY,gCAAA;AAAA,EACZ,iBAAA,EAAmB,mCAAA;AAAA,EACnB,MAAA,EAAQ,4BAAA;AAAA,EACR,eAAA,EAAiB;AACnB;AAEO,SAAS,oCACd,KAAA,EAC6C;AAC7C,EAAA,OAAO,mCAAA,CAAoC,IAAA;AAAA,IACzC,CAAC,KAAA,KAAU,KAAA,CAAM,KAAA,KAAU;AAAA,GAC7B;AACF;AAEO,SAAS,6BACd,KAAA,EACsC;AACtC,EAAA,OAAO,6BAA6B,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,UAAU,KAAK,CAAA;AAC3E;AAEO,SAAS,2BAA2B,KAAA,EAAwB;AACjE,EAAA,OAAO,OAAA,CAAQ,4BAAA,CAA6B,KAAK,CAAC,CAAA;AACpD;AAEO,SAAS,oCAAoC,KAAA,EAAwB;AAC1E,EAAA,OAAO,sCAAA,CAAuC,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AAC/E","file":"tenant-bootstrap-seed.contract.js","sourcesContent":["/**\n * Tenant bootstrap seed contract.\n *\n * Fresh tenant deployments install the Lucern kernel and control-plane components\n * from npm, then copy canonical template rows for non-secret runtime defaults.\n * This contract is intentionally exhaustive for the K/CP tables: it separates\n * rows that must be carried by the template deployments from rows that are\n * runtime data, runtime credentials, logs, queues, or derived caches.\n */\n\nexport const TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION = \"2026-04-30\" as const;\n\nexport const TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"role\",\n  \"authMode\",\n  \"correlationId\",\n  \"auditMetadata\",\n] as const;\nexport type TenantBootstrapSeedAuthMetadataField =\n  (typeof TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_COMPONENTS = {\n  kernel: {\n    componentName: \"lucern\",\n    migrationModule: \"adapters/migration\",\n    templateService: \"services/kernel-template\",\n    templateDeployments: {\n      staging: \"kindly-goldfish-162\",\n      prod: \"cool-badger-368\",\n    },\n  },\n  \"control-plane\": {\n    componentName: \"controlPlane\",\n    migrationModule: \"dist/migration\",\n    templateService: \"services/control-plane-template\",\n    templateDeployments: {\n      staging: \"industrious-cheetah-864\",\n      prod: \"combative-beagle-879\",\n    },\n  },\n} as const;\nexport type TenantBootstrapSeedComponent =\n  keyof typeof TENANT_BOOTSTRAP_SEED_COMPONENTS;\n\nexport type TenantBootstrapSeedScope = \"global\" | \"tenant\";\n\nexport type TenantBootstrapPrepopulation =\n  | \"required_template\"\n  | \"optional_template\"\n  | \"runtime_bootstrap\"\n  | \"runtime_data\"\n  | \"runtime_log\"\n  | \"runtime_secret\"\n  | \"runtime_derived\"\n  | \"runtime_queue\";\n\nexport type TenantBootstrapCopyMode =\n  | \"template_global\"\n  | \"template_tenant_rewrite\"\n  | \"template_reference_remap\"\n  | \"none\";\n\nexport type TenantBootstrapTableRequirement = {\n  component: TenantBootstrapSeedComponent;\n  table: string;\n  prepopulation: TenantBootstrapPrepopulation;\n  copyMode: TenantBootstrapCopyMode;\n  scope?: TenantBootstrapSeedScope;\n  uniqueKey?: readonly string[];\n  dependsOn?: readonly string[];\n  description: string;\n};\n\nexport type TenantBootstrapSeedTable = TenantBootstrapTableRequirement & {\n  copyMode:\n    | \"template_global\"\n    | \"template_tenant_rewrite\"\n    | \"template_reference_remap\";\n  scope: TenantBootstrapSeedScope;\n  uniqueKey: readonly string[];\n};\n\nfunction isCopyableSeedRequirement(\n  entry: TenantBootstrapTableRequirement\n): entry is TenantBootstrapSeedTable {\n  return (\n    (entry.copyMode === \"template_global\" ||\n      entry.copyMode === \"template_tenant_rewrite\" ||\n      entry.copyMode === \"template_reference_remap\") &&\n    Boolean(entry.scope) &&\n    Array.isArray(entry.uniqueKey) &&\n    entry.uniqueKey.length > 0\n  );\n}\n\nexport const TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [\n  {\n    component: \"kernel\",\n    table: \"agentMessages\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination messages are session data, not template data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"agentSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination sessions are created by active clients.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"autofixJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Autofix work items are runtime queue rows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Background job executions are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobSettings\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"jobKey\"],\n    description: \"Default job enablement settings must come from the K template.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefConfidence\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief confidence rows are created with tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefHistory\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief history is append-only tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefScenarios\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Scenario rows are tenant-authored reasoning data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefVotes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision belief votes are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"calibrationScores\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Calibration scores are computed from tenant outcomes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contractEvaluations\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Contract evaluation rows are runtime computation logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contradictions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Contradictions are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"crossProjectConnections\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Cross-topic connections are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionComputedSummaries\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision summaries are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionEvents\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision events are lifecycle data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionParticipants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision participants are tenant-selected actors.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionRiskLedger\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision risk rows are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionSnapshots\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision snapshots are derived from tenant state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationContributions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation contributions are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation sessions are created by tenant workflows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Epistemic audit rows are append-only runtime audit data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicContracts\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Epistemic contracts are tenant-authored governance data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicEdges\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Edges are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodeEmbeddings\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Embeddings are derived from tenant graph nodes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Nodes are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisCache\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis cache rows are derived from tenant graph state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisResults\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis result rows are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphSuggestions\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph suggestions are derived recommendations.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessReplays\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness replay rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness run rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"idempotencyTokens\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Idempotency tokens are request-scoped runtime guards.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lenses\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Reusable lens templates may live in K templates, but workspace-specific copies are not required for core SDK boot.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lensTopicBindings\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Lens bindings attach runtime topics to runtime/workspace lenses.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"neo4jSyncQueue\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Neo4j sync queue rows are runtime work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyDefinitions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\"],\n    description: \"Platform ontology definitions power taxonomy reads and effective ontology resolution.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyVersions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_reference_remap\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\", \"version\"],\n    dependsOn: [\"ontologyDefinitions\"],\n    description: \"Ontology versions must be copied with ontologyDefinition ID remapping.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPolicyDecisions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run policy decisions are audit logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPromptResolutions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run prompt resolution rows are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent runs are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunToolCalls\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run tool calls are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformHarnessShadowAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness shadow audit rows are runtime audit records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"publicationRules\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"name\"],\n    description: \"Default publication policy rules are rewritten into each tenant.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"questionEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Question-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"researchJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Research job rows are runtime queue items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"schemaEnumConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"category\", \"value\"],\n    description: \"Runtime-extensible enum defaults required by SDK graph APIs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"stakeholderGroups\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Stakeholder groups are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"systemLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"System logs are runtime telemetry.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"tasks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Tasks are tenant-authored work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"topics\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Default topics are created by tenant provisioning, not copied from templates.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowDefinitions\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Table-driven workflow definitions can be template data after the workflow engine leaves legacy mode.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowPullRequests\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Workflow pull requests are tenant workflow data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowStages\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    dependsOn: [\"workflowDefinitions\"],\n    description:\n      \"Workflow stages can be template data after workflowDefinitions are enabled for bootstrap copying.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktreeBeliefCluster\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktree cluster rows link runtime worktrees to runtime beliefs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktrees\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktrees are tenant/runtime planning data.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"agents\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Service agents are provisioned per tenant or service, not copied.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"mcpWritePolicy\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"topicId\", \"role\", \"toolCategory\"],\n    description: \"Global write policy defaults govern service and interactive MCP writes.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"modelCallLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Model call logs are runtime telemetry.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"modelFunctionSlots\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Function-to-model slots are required by model runtime resolution.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"modelRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"key\"],\n    description: \"Model catalog defaults are required by model runtime clients.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"modelSlotConfigs\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Slot-level defaults are required before tenant overrides exist.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitAccessReviewItems\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit access-review item rows are tenant review data projected from Permit.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitAccessReviews\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit access-review campaigns are tenant review data projected from Permit.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitAttributeBindings\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit ABAC attribute bindings are tenant policy projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitGroups\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit groups are tenant-defined policy subjects, not template data.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitGroupMemberships\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit group memberships are tenant-specific policy projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitPolicyBundles\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Permit policy bundles are derived from the Permit control plane.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitPolicyDecisionReceipts\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Permit decision receipts are runtime authorization audit logs.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitPrincipalAliases\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit principal aliases are tenant-specific identity projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitPrincipals\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit principals are projected from Clerk, Permit, and tenant onboarding flows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitProjectionOutbox\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Permit projection outbox rows are runtime sync queue data.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitRelationshipTuples\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit ReBAC relationship tuples are tenant policy projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitResourceInstances\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit resource instances are tenant/workspace graph and deployment projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"permitRoleAssignments\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Permit role assignments are tenant-specific policy projection rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"platformAudienceGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Audience grants are principal/group-specific access rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"platformAudiences\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"audienceKey\"],\n    description: \"Default tenant audience taxonomy rows are rewritten into each tenant.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"platformPolicyDecisionLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Policy decisions are runtime audit logs.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"projectGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Project/topic grants are principal or group-specific access rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"reasoningPermissions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Reasoning permissions are principal-specific policy rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantApiKeys\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"API keys are tenant credentials and must never be copied.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\"],\n    description: \"Tenant-local config defaults are rewritten during bootstrap.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantIntegrations\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"integrationKey\"],\n    description: \"Non-secret integration descriptors are rewritten into each tenant.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantModelSlotBindings\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant model slot bindings reference provider secrets and are runtime-only.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantPermitSyncStates\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Tenant Permit sync state rows are runtime reconciliation state.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantPolicies\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"roleName\"],\n    description: \"Default tenant policy roles are rewritten during bootstrap.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantProviderSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Provider secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantProxyGatewayUsage\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Proxy gateway usage rows are runtime telemetry.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantProxyTokenMints\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Proxy token mints are ephemeral secret-bearing runtime rows.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantSandboxAuditEvents\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Sandbox audit rows are runtime security logs.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"tenantSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"toolAcls\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"role\", \"toolName\"],\n    description: \"Default role-to-tool grants are required for SDK/MCP tool access.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"toolRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"toolName\"],\n    description: \"Core tool catalog rows are required before pack or tenant tools exist.\",\n  },\n  {\n    component: \"control-plane\",\n    table: \"users\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Users are created from Clerk/MC principal resolution, not copied.\",\n  },\n] as const satisfies readonly TenantBootstrapTableRequirement[];\n\nexport const TENANT_BOOTSTRAP_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    isCopyableSeedRequirement\n  ) as readonly TenantBootstrapSeedTable[];\n\nexport type TenantBootstrapSeedTableName =\n  (typeof TENANT_BOOTSTRAP_SEED_TABLES)[number][\"table\"];\n\nexport const TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    (entry) => !isCopyableSeedRequirement(entry)\n  ).map((entry) => entry.table) as readonly string[];\nexport type TenantBootstrapForbiddenSeedTable =\n  (typeof TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_MANIFEST = {\n  contractVersion: TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION,\n  authMetadataFields: TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS,\n  components: TENANT_BOOTSTRAP_SEED_COMPONENTS,\n  tableRequirements: TENANT_BOOTSTRAP_TABLE_REQUIREMENTS,\n  tables: TENANT_BOOTSTRAP_SEED_TABLES,\n  forbiddenTables: TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES,\n} as const;\n\nexport function findTenantBootstrapTableRequirement(\n  table: string\n): TenantBootstrapTableRequirement | undefined {\n  return TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.find(\n    (entry) => entry.table === table\n  );\n}\n\nexport function findTenantBootstrapSeedTable(\n  table: string\n): TenantBootstrapSeedTable | undefined {\n  return TENANT_BOOTSTRAP_SEED_TABLES.find((entry) => entry.table === table);\n}\n\nexport function isTenantBootstrapSeedTable(table: string): boolean {\n  return Boolean(findTenantBootstrapSeedTable(table));\n}\n\nexport function isTenantBootstrapForbiddenSeedTable(table: string): boolean {\n  return TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES.some((entry) => entry === table);\n}\n"]}

package/dist/tenant-bootstrap-seed.defaults.d.ts

@@ -3,7 +3,7 @@ declare const TENANT_BOOTSTRAP_TEMPLATE_TENANT_ID: "tenant_template";
 declare const TENANT_BOOTSTRAP_TEMPLATE_ACTOR: "system:lucern-template-seed";
 type TenantBootstrapTemplateSeedRows = {
     kernel: Record<string, Array<Record<string, unknown>>>;
-    identity: Record<string, Array<Record<string, unknown>>>;
+    "control-plane": Record<string, Array<Record<string, unknown>>>;
 };
 type TenantBootstrapTemplateSeedOptions = {
     now?: number;

package/dist/tenant-bootstrap-seed.defaults.js

@@ -275,7 +275,7 @@ function buildTenantBootstrapTemplateSeedRows(options = {}) {
       ],
       schemaEnumConfig: schemaEnumRows(ctx.now)
     },
-    identity: {
+    "control-plane": {
       mcpWritePolicy: buildMcpWritePolicy(ctx.now, ctx.actor),
       modelFunctionSlots: modelFunctionSlotRows(ctx.now),
       modelRegistry: modelRegistryRows(ctx.now),