@lucern/contracts 0.3.0-alpha.11 → 0.3.0-alpha.13

package/dist/schemas/manifest.d.ts

@@ -193,6 +193,21 @@ declare const KERNEL_TABLE_CONTRACTS: readonly [TableContract<{
     lockedBy: zod.ZodString;
     lockedAt: zod.ZodNumber;
     createdAt: zod.ZodNumber;
+}>, TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }>, TableContract<{
     sessionId: ConvexIdSchema<"deliberationSessions">;
     topicId: zod.ZodOptional<zod.ZodString>;
@@ -3512,7 +3527,7 @@ declare const CONTROL_PLANE_TABLE_CONTRACTS: readonly [TableContract<{
     lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
 }>, TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
     payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
@@ -3577,7 +3592,7 @@ declare const CONTROL_PLANE_TABLE_CONTRACTS: readonly [TableContract<{
     updatedAt: zod.ZodNumber;
 }>, TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     tenantId: zod.ZodOptional<zod.ZodString>;
     workspaceId: zod.ZodOptional<zod.ZodString>;
@@ -5516,6 +5531,21 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         lockedBy: zod.ZodString;
         lockedAt: zod.ZodNumber;
         createdAt: zod.ZodNumber;
+    }>, TableContract<{
+        eventId: zod.ZodString;
+        type: zod.ZodString;
+        version: zod.ZodString;
+        timestamp: zod.ZodNumber;
+        tenantId: zod.ZodOptional<zod.ZodString>;
+        workspaceId: zod.ZodOptional<zod.ZodString>;
+        topicId: zod.ZodString;
+        resourceId: zod.ZodString;
+        resourceType: zod.ZodString;
+        actorId: zod.ZodString;
+        actorType: zod.ZodEnum<["human", "agent", "service"]>;
+        data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+        correlationId: zod.ZodOptional<zod.ZodString>;
+        expiresAt: zod.ZodNumber;
     }>, TableContract<{
         sessionId: ConvexIdSchema<"deliberationSessions">;
         topicId: zod.ZodOptional<zod.ZodString>;
@@ -8835,7 +8865,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
     }>, TableContract<{
         syncKey: zod.ZodString;
-        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
         objectId: zod.ZodString;
         operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
         payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
@@ -8900,7 +8930,7 @@ declare const TABLE_CONTRACTS_BY_COMPONENT: {
         updatedAt: zod.ZodNumber;
     }>, TableContract<{
         syncKey: zod.ZodString;
-        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+        objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
         objectId: zod.ZodString;
         tenantId: zod.ZodOptional<zod.ZodString>;
         workspaceId: zod.ZodOptional<zod.ZodString>;
@@ -10840,6 +10870,21 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     lockedBy: zod.ZodString;
     lockedAt: zod.ZodNumber;
     createdAt: zod.ZodNumber;
+}>, TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }>, TableContract<{
     sessionId: ConvexIdSchema<"deliberationSessions">;
     topicId: zod.ZodOptional<zod.ZodString>;
@@ -14158,7 +14203,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     lastSeenAt: zod.ZodOptional<zod.ZodNumber>;
 }>, TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
     payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
@@ -14223,7 +14268,7 @@ declare const ALL_TABLE_CONTRACTS: readonly [TableContract<{
     updatedAt: zod.ZodNumber;
 }>, TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     tenantId: zod.ZodOptional<zod.ZodString>;
     workspaceId: zod.ZodOptional<zod.ZodString>;
@@ -16427,6 +16472,21 @@ declare function listTableContractsByName(name: string): (TableContract<{
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     traceId: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
+}> | TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }> | TableContract<{
     beliefId: zod.ZodString;
     belief: zod.ZodNumber;
@@ -19626,7 +19686,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
     retiredAt: zod.ZodOptional<zod.ZodNumber>;
 }> | TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
     payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
@@ -19645,7 +19705,7 @@ declare function listTableContractsByName(name: string): (TableContract<{
     lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
 }> | TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     tenantId: zod.ZodOptional<zod.ZodString>;
     workspaceId: zod.ZodOptional<zod.ZodString>;
@@ -21747,6 +21807,21 @@ declare function getTableContract(name: string, component?: string): TableContra
     metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
     traceId: zod.ZodOptional<zod.ZodString>;
     createdAt: zod.ZodNumber;
+}> | TableContract<{
+    eventId: zod.ZodString;
+    type: zod.ZodString;
+    version: zod.ZodString;
+    timestamp: zod.ZodNumber;
+    tenantId: zod.ZodOptional<zod.ZodString>;
+    workspaceId: zod.ZodOptional<zod.ZodString>;
+    topicId: zod.ZodString;
+    resourceId: zod.ZodString;
+    resourceType: zod.ZodString;
+    actorId: zod.ZodString;
+    actorType: zod.ZodEnum<["human", "agent", "service"]>;
+    data: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
+    correlationId: zod.ZodOptional<zod.ZodString>;
+    expiresAt: zod.ZodNumber;
 }> | TableContract<{
     beliefId: zod.ZodString;
     belief: zod.ZodNumber;
@@ -24946,7 +25021,7 @@ declare function getTableContract(name: string, component?: string): TableContra
     retiredAt: zod.ZodOptional<zod.ZodNumber>;
 }> | TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     operation: zod.ZodEnum<["upsert", "delete", "sync", "resync", "delete_sync", "noop"]>;
     payload: zod.ZodRecord<zod.ZodString, zod.ZodAny>;
@@ -24965,7 +25040,7 @@ declare function getTableContract(name: string, component?: string): TableContra
     lastHandledAt: zod.ZodOptional<zod.ZodNumber>;
 }> | TableContract<{
     syncKey: zod.ZodString;
-    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment"]>;
+    objectType: zod.ZodEnum<["resource", "role", "resource_role", "resource_relation", "tenant", "workspace", "principal", "membership", "group", "resource_instance", "relationship_tuple", "role_assignment", "attribute_binding", "policy_bundle"]>;
     objectId: zod.ZodString;
     tenantId: zod.ZodOptional<zod.ZodString>;
     workspaceId: zod.ZodOptional<zod.ZodString>;

package/dist/schemas/manifest.js

@@ -486,6 +486,35 @@ var systemLogs = defineTable({
     { kind: "index", name: "by_source", columns: ["source"] }
   ]
 });
+var domainEvents = defineTable({
+  name: "domainEvents",
+  component: "kernel",
+  category: "events",
+  shape: z.object({
+    "eventId": z.string(),
+    "type": z.string(),
+    "version": z.string(),
+    "timestamp": z.number(),
+    "tenantId": z.string().optional(),
+    "workspaceId": z.string().optional(),
+    "topicId": z.string(),
+    "resourceId": z.string(),
+    "resourceType": z.string(),
+    "actorId": z.string(),
+    "actorType": z.enum(["human", "agent", "service"]),
+    "data": z.record(z.any()),
+    "correlationId": z.string().optional(),
+    "expiresAt": z.number()
+  }),
+  indices: [
+    { kind: "index", name: "by_eventId", columns: ["eventId"] },
+    { kind: "index", name: "by_topic_timestamp", columns: ["topicId", "timestamp"] },
+    { kind: "index", name: "by_tenant_workspace_timestamp", columns: ["tenantId", "workspaceId", "timestamp"] },
+    { kind: "index", name: "by_type_timestamp", columns: ["type", "timestamp"] },
+    { kind: "index", name: "by_resource", columns: ["resourceType", "resourceId", "timestamp"] },
+    { kind: "index", name: "by_expiresAt", columns: ["expiresAt"] }
+  ]
+});
 var beliefConfidence = defineTable({
   name: "beliefConfidence",
   component: "kernel",
@@ -3793,7 +3822,9 @@ var permitObjectType = z.enum([
   "group",
   "resource_instance",
   "relationship_tuple",
-  "role_assignment"
+  "role_assignment",
+  "attribute_binding",
+  "policy_bundle"
 ]);
 var permitOutboxOperation = z.enum([
   "upsert",
@@ -3899,7 +3930,10 @@ var permitPrincipalAliases = defineTable({
   }),
   indices: [
     { kind: "index", name: "by_principalId", columns: ["principalId"] },
+    { kind: "index", name: "by_provider_subject", columns: ["provider", "providerSubjectId"] },
+    { kind: "index", name: "by_provider_project_subject", columns: ["provider", "providerProjectId", "providerSubjectId"] },
     { kind: "index", name: "by_tenant_provider_subject", columns: ["tenantId", "provider", "providerSubjectId"] },
+    { kind: "index", name: "by_tenant_provider_project_subject", columns: ["tenantId", "provider", "providerProjectId", "providerSubjectId"] },
     {
       kind: "index",
       name: "by_tenant_provider_alias",
@@ -5108,6 +5142,7 @@ var KERNEL_TABLE_CONTRACTS = [
   decisionParticipants,
   decisionRiskLedger,
   decisionSnapshots,
+  domainEvents,
   deliberationContributions,
   deliberationSessions,
   stakeholderGroups,