@lucern/contracts 0.3.0-alpha.11 → 0.3.0-alpha.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. package/dist/generated/convexSchemas.js +2 -2
  2. package/dist/generated/convexSchemas.js.map +1 -1
  3. package/dist/generated/infisicalRuntimeEnv.js +246 -0
  4. package/dist/generated/infisicalRuntimeEnv.js.map +1 -1
  5. package/dist/index.d.ts +1 -0
  6. package/dist/index.js +439 -2
  7. package/dist/index.js.map +1 -1
  8. package/dist/infisical-runtime.contract.d.ts +26 -0
  9. package/dist/infisical-runtime.contract.js +31 -0
  10. package/dist/infisical-runtime.contract.js.map +1 -1
  11. package/dist/manifests/infisical-runtime-manifest.d.ts +26 -0
  12. package/dist/manifests/infisical-runtime-manifest.js +31 -0
  13. package/dist/manifests/infisical-runtime-manifest.js.map +1 -1
  14. package/dist/permit-principal-projection.contract.d.ts +74 -0
  15. package/dist/permit-principal-projection.contract.js +161 -0
  16. package/dist/permit-principal-projection.contract.js.map +1 -0
  17. package/dist/proof-attestation.json +1 -1
  18. package/dist/schemas/index.js +3 -1
  19. package/dist/schemas/index.js.map +1 -1
  20. package/dist/schemas/manifest.d.ts +10 -10
  21. package/dist/schemas/manifest.js +3 -1
  22. package/dist/schemas/manifest.js.map +1 -1
  23. package/dist/schemas/tables/controlPlane/accessControl.d.ts +2 -2
  24. package/dist/schemas/tables/controlPlane/accessControl.js +3 -1
  25. package/dist/schemas/tables/controlPlane/accessControl.js.map +1 -1
  26. package/package.json +1 -1
package/dist/generated/infisicalRuntimeEnv.js CHANGED
@@ -239,6 +239,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
239
239
  "LUCERN_PERMIT_API_KEY",
240
240
  "LUCERN_PERMIT_API_URL",
241
241
  "LUCERN_PERMIT_PDP_URL",
242
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
242
243
  "LUCERN_PROD_DEPLOY_KEY",
243
244
  "LUCERN_PROD_URL",
244
245
  "LUCERN_PROFILE",
@@ -309,6 +310,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
309
310
  "PERMIT_API_KEY",
310
311
  "PERMIT_API_URL",
311
312
  "PERMIT_PDP_URL",
313
+ "PERMIT_WEBHOOK_SECRET",
312
314
  "PINECONE_API_KEY",
313
315
  "PINECONE_HOST",
314
316
  "PINECONE_INDEX",
@@ -488,6 +490,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
488
490
  "LUCERN_PERMIT_API_KEY",
489
491
  "LUCERN_PERMIT_API_URL",
490
492
  "LUCERN_PERMIT_PDP_URL",
493
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
491
494
  "LUCERN_PROD_DEPLOY_KEY",
492
495
  "LUCERN_PROD_URL",
493
496
  "LUCERN_PROFILE",
@@ -561,6 +564,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
561
564
  "PERMIT_API_KEY",
562
565
  "PERMIT_API_URL",
563
566
  "PERMIT_PDP_URL",
567
+ "PERMIT_WEBHOOK_SECRET",
564
568
  "PINECONE_API_KEY",
565
569
  "PINECONE_HOST",
566
570
  "PINECONE_INDEX",
@@ -3321,6 +3325,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
3321
3325
  ],
3322
3326
  "description": "Optional Permit PDP URL override."
3323
3327
  },
3328
+ "LUCERN_PERMIT_WEBHOOK_SECRET": {
3329
+ "secretId": "platform.permit.webhook-secret",
3330
+ "canonicalName": "LUCERN_PERMIT_WEBHOOK_SECRET",
3331
+ "envNames": [
3332
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
3333
+ "PERMIT_WEBHOOK_SECRET"
3334
+ ],
3335
+ "aliases": [
3336
+ "PERMIT_WEBHOOK_SECRET"
3337
+ ],
3338
+ "writeNames": [
3339
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
3340
+ ],
3341
+ "required": true,
3342
+ "secret": true,
3343
+ "public": false,
3344
+ "sourcePath": "/platform/permit",
3345
+ "environmentPolicy": "environment_specific",
3346
+ "consumers": [
3347
+ "mc-convex",
3348
+ "lucern-gateway",
3349
+ "mc-operator-tooling"
3350
+ ],
3351
+ "destinations": [
3352
+ {
3353
+ "kind": "convex",
3354
+ "target": "master-control",
3355
+ "writeNames": [
3356
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
3357
+ ]
3358
+ },
3359
+ {
3360
+ "kind": "vercel",
3361
+ "target": "lucern-gateway",
3362
+ "writeNames": [
3363
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
3364
+ ]
3365
+ },
3366
+ {
3367
+ "kind": "operator_local",
3368
+ "target": "mc-credential-maintenance",
3369
+ "writeNames": [
3370
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
3371
+ ]
3372
+ }
3373
+ ],
3374
+ "description": "Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing."
3375
+ },
3324
3376
  "LUCERN_PROXY_TOKEN_SECRET": {
3325
3377
  "secretId": "tenant.stack-frontend.lucern.proxy-token-secret",
3326
3378
  "canonicalName": "LUCERN_PROXY_TOKEN_SECRET",
@@ -6019,6 +6071,8 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
6019
6071
  "PERMIT_API_URL": "LUCERN_PERMIT_API_URL",
6020
6072
  "LUCERN_PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
6021
6073
  "PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
6074
+ "LUCERN_PERMIT_WEBHOOK_SECRET": "LUCERN_PERMIT_WEBHOOK_SECRET",
6075
+ "PERMIT_WEBHOOK_SECRET": "LUCERN_PERMIT_WEBHOOK_SECRET",
6022
6076
  "LUCERN_PROXY_TOKEN_SECRET": "LUCERN_PROXY_TOKEN_SECRET",
6023
6077
  "LUCERN_REQUIRE_DEPLOYMENT_HOST_REGISTRY": "LUCERN_REQUIRE_DEPLOYMENT_HOST_REGISTRY",
6024
6078
  "LUCERN_KERNEL_INSTALL_SPEC": "LUCERN_SDK_NPM_TOKEN",
@@ -7302,6 +7356,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
7302
7356
  ],
7303
7357
  "description": "Optional Permit PDP URL override."
7304
7358
  },
7359
+ {
7360
+ "secretId": "platform.permit.webhook-secret",
7361
+ "canonicalName": "LUCERN_PERMIT_WEBHOOK_SECRET",
7362
+ "envNames": [
7363
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
7364
+ "PERMIT_WEBHOOK_SECRET"
7365
+ ],
7366
+ "aliases": [
7367
+ "PERMIT_WEBHOOK_SECRET"
7368
+ ],
7369
+ "writeNames": [
7370
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
7371
+ ],
7372
+ "required": true,
7373
+ "secret": true,
7374
+ "public": false,
7375
+ "sourcePath": "/platform/permit",
7376
+ "environmentPolicy": "environment_specific",
7377
+ "consumers": [
7378
+ "mc-convex",
7379
+ "lucern-gateway",
7380
+ "mc-operator-tooling"
7381
+ ],
7382
+ "destinations": [
7383
+ {
7384
+ "kind": "convex",
7385
+ "target": "master-control",
7386
+ "writeNames": [
7387
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
7388
+ ]
7389
+ },
7390
+ {
7391
+ "kind": "vercel",
7392
+ "target": "lucern-gateway",
7393
+ "writeNames": [
7394
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
7395
+ ]
7396
+ },
7397
+ {
7398
+ "kind": "operator_local",
7399
+ "target": "mc-credential-maintenance",
7400
+ "writeNames": [
7401
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
7402
+ ]
7403
+ }
7404
+ ],
7405
+ "description": "Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing."
7406
+ },
7305
7407
  {
7306
7408
  "secretId": "platform.runtime.require-deployment-host-registry",
7307
7409
  "canonicalName": "LUCERN_REQUIRE_DEPLOYMENT_HOST_REGISTRY",
@@ -10994,6 +11096,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
10994
11096
  ],
10995
11097
  "description": "Optional Permit PDP URL override."
10996
11098
  },
11099
+ {
11100
+ "secretId": "platform.permit.webhook-secret",
11101
+ "canonicalName": "LUCERN_PERMIT_WEBHOOK_SECRET",
11102
+ "envNames": [
11103
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
11104
+ "PERMIT_WEBHOOK_SECRET"
11105
+ ],
11106
+ "aliases": [
11107
+ "PERMIT_WEBHOOK_SECRET"
11108
+ ],
11109
+ "writeNames": [
11110
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
11111
+ ],
11112
+ "required": true,
11113
+ "secret": true,
11114
+ "public": false,
11115
+ "sourcePath": "/platform/permit",
11116
+ "environmentPolicy": "environment_specific",
11117
+ "consumers": [
11118
+ "mc-convex",
11119
+ "lucern-gateway",
11120
+ "mc-operator-tooling"
11121
+ ],
11122
+ "destinations": [
11123
+ {
11124
+ "kind": "convex",
11125
+ "target": "master-control",
11126
+ "writeNames": [
11127
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
11128
+ ]
11129
+ },
11130
+ {
11131
+ "kind": "vercel",
11132
+ "target": "lucern-gateway",
11133
+ "writeNames": [
11134
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
11135
+ ]
11136
+ },
11137
+ {
11138
+ "kind": "operator_local",
11139
+ "target": "mc-credential-maintenance",
11140
+ "writeNames": [
11141
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
11142
+ ]
11143
+ }
11144
+ ],
11145
+ "description": "Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing."
11146
+ },
10997
11147
  {
10998
11148
  "secretId": "platform.mc.session-token-secret",
10999
11149
  "canonicalName": "LUCERN_SESSION_TOKEN_SECRET",
@@ -18806,6 +18956,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
18806
18956
  }
18807
18957
  ],
18808
18958
  "operator_local:mc-credential-maintenance": [
18959
+ {
18960
+ "secretId": "platform.permit.webhook-secret",
18961
+ "canonicalName": "LUCERN_PERMIT_WEBHOOK_SECRET",
18962
+ "envNames": [
18963
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
18964
+ "PERMIT_WEBHOOK_SECRET"
18965
+ ],
18966
+ "aliases": [
18967
+ "PERMIT_WEBHOOK_SECRET"
18968
+ ],
18969
+ "writeNames": [
18970
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
18971
+ ],
18972
+ "required": true,
18973
+ "secret": true,
18974
+ "public": false,
18975
+ "sourcePath": "/platform/permit",
18976
+ "environmentPolicy": "environment_specific",
18977
+ "consumers": [
18978
+ "mc-convex",
18979
+ "lucern-gateway",
18980
+ "mc-operator-tooling"
18981
+ ],
18982
+ "destinations": [
18983
+ {
18984
+ "kind": "convex",
18985
+ "target": "master-control",
18986
+ "writeNames": [
18987
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
18988
+ ]
18989
+ },
18990
+ {
18991
+ "kind": "vercel",
18992
+ "target": "lucern-gateway",
18993
+ "writeNames": [
18994
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
18995
+ ]
18996
+ },
18997
+ {
18998
+ "kind": "operator_local",
18999
+ "target": "mc-credential-maintenance",
19000
+ "writeNames": [
19001
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
19002
+ ]
19003
+ }
19004
+ ],
19005
+ "description": "Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing."
19006
+ },
18809
19007
  {
18810
19008
  "secretId": "platform.mc.tenant-secret-encryption-key",
18811
19009
  "canonicalName": "LUCERN_TENANT_SECRET_ENCRYPTION_KEY",
@@ -23128,6 +23326,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
23128
23326
  ],
23129
23327
  "description": "Optional Permit PDP URL override."
23130
23328
  },
23329
+ {
23330
+ "secretId": "platform.permit.webhook-secret",
23331
+ "canonicalName": "LUCERN_PERMIT_WEBHOOK_SECRET",
23332
+ "envNames": [
23333
+ "LUCERN_PERMIT_WEBHOOK_SECRET",
23334
+ "PERMIT_WEBHOOK_SECRET"
23335
+ ],
23336
+ "aliases": [
23337
+ "PERMIT_WEBHOOK_SECRET"
23338
+ ],
23339
+ "writeNames": [
23340
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
23341
+ ],
23342
+ "required": true,
23343
+ "secret": true,
23344
+ "public": false,
23345
+ "sourcePath": "/platform/permit",
23346
+ "environmentPolicy": "environment_specific",
23347
+ "consumers": [
23348
+ "mc-convex",
23349
+ "lucern-gateway",
23350
+ "mc-operator-tooling"
23351
+ ],
23352
+ "destinations": [
23353
+ {
23354
+ "kind": "convex",
23355
+ "target": "master-control",
23356
+ "writeNames": [
23357
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
23358
+ ]
23359
+ },
23360
+ {
23361
+ "kind": "vercel",
23362
+ "target": "lucern-gateway",
23363
+ "writeNames": [
23364
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
23365
+ ]
23366
+ },
23367
+ {
23368
+ "kind": "operator_local",
23369
+ "target": "mc-credential-maintenance",
23370
+ "writeNames": [
23371
+ "LUCERN_PERMIT_WEBHOOK_SECRET"
23372
+ ]
23373
+ }
23374
+ ],
23375
+ "description": "Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing."
23376
+ },
23131
23377
  {
23132
23378
  "secretId": "platform.runtime.require-deployment-host-registry",
23133
23379
  "canonicalName": "LUCERN_REQUIRE_DEPLOYMENT_HOST_REGISTRY",