@lucern/contracts 0.3.0-alpha.14 → 0.3.0-alpha.16

package/dist/index.js

@@ -2253,6 +2253,7 @@ var apiKeys = defineTable({
   shape: z.object({
     "tenantId": idOf("tenants"),
     "workspaceId": idOf("workspaces").optional(),
+    "environment": z.enum(["dev", "staging", "prod"]).optional(),
     "keyPrefix": z.enum(["luc", "stk"]),
     "keyHash": z.string(),
     "keyHint": z.string(),
@@ -8244,6 +8245,7 @@ var INFISICAL_TENANT_SOFTWARE_SYSTEMS = [
     vercelProjectName: "ai-chatbot-diao",
     vercelTeamId: "team_mZBKwvXSSu7qxrWdg2go29sK",
     vercelProjectId: "prj_PihFw8kohSSw14nZs9YQV3xVo517",
+    vercelWriterTokenEnv: "STACK_VERCEL_TOKEN",
     repository: {
       owner: "stack-vc",
       name: "front-end"
@@ -8264,6 +8266,7 @@ var INFISICAL_TENANT_SOFTWARE_SYSTEMS = [
     vercelProjectName: "stackos",
     vercelTeamId: "team_mZBKwvXSSu7qxrWdg2go29sK",
     vercelProjectId: "prj_rXLAL0Z6v9p1fasKbomby6GI7kau",
+    vercelWriterTokenEnv: "STACK_VERCEL_TOKEN",
     repository: {
       owner: "stack-vc",
       name: "stackos"
@@ -8284,6 +8287,7 @@ var INFISICAL_TENANT_SOFTWARE_SYSTEMS = [
     vercelProjectName: "stackos-engineering-graph",
     vercelTeamId: "team_mZBKwvXSSu7qxrWdg2go29sK",
     vercelProjectId: "prj_zAU0Zn9GkbHjHI63dxW4vLpmoqTJ",
+    vercelWriterTokenEnv: "STACK_VERCEL_TOKEN",
     repository: {
       owner: "stack-vc",
       name: "stackos-engineering-graph"
@@ -8304,6 +8308,7 @@ var INFISICAL_TENANT_SOFTWARE_SYSTEMS = [
     vercelProjectName: "lucern-graph",
     vercelTeamId: "team_vTHxxs8GAoAFUe6RWMlYt7fY",
     vercelProjectId: "prj_KJ8EKV8vGM5xURpqmwTwmECEGPgQ",
+    vercelWriterTokenEnv: "LUCERN_VERCEL_TOKEN",
     repository: {
       owner: "LucernAI",
       name: "lucern-graph"
@@ -9523,6 +9528,46 @@ var PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [
     ],
     description: "Vercel API token for the future reviewed live writer. Never copy into tenant apps."
   },
+  {
+    id: "platform.deploy.vercel-token.stack",
+    canonicalName: "STACK_VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps."
+  },
+  {
+    id: "platform.deploy.vercel-token.lucern",
+    canonicalName: "LUCERN_VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Lucern Vercel API token for manifest-scoped Lucern tenant Vercel secret sync. Never copy into tenant apps."
+  },
   {
     id: "platform.deploy.vercel-org-id",
     canonicalName: "VERCEL_ORG_ID",
@@ -11267,6 +11312,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_TENANT_SECRET_ENCRYPTION_KEY",
     "LUCERN_TOPIC_ID",
     "LUCERN_USER_TOKEN",
+    "LUCERN_VERCEL_TOKEN",
     "LUCERN_WEB_BASE_URL",
     "LUCERN_WORKSPACE_ID",
     "LUCERN_WORKTREE_ID",
@@ -11338,6 +11384,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "STACK_CONVEX_URL",
     "STACK_DEPLOY_KEY",
     "STACK_DEPLOY_RECONCILIATION_SCHEMA_JSON",
+    "STACK_VERCEL_TOKEN",
     "STACKOS_DEPLOY_ENTRYPOINT",
     "STACKOS_DEPLOY_TARGET",
     "STACKOS_ENGINEERING_GRAPH_CONVEX_URL",
@@ -11521,6 +11568,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_TENANT_SECRET_ENCRYPTION_KEY",
     "LUCERN_TOPIC_ID",
     "LUCERN_USER_TOKEN",
+    "LUCERN_VERCEL_TOKEN",
     "LUCERN_WEB_BASE_URL",
     "LUCERN_WORKSPACE_ID",
     "LUCERN_WORKTREE_ID",
@@ -11596,6 +11644,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "STACK_CONVEX_URL",
     "STACK_DEPLOY_KEY",
     "STACK_DEPLOY_RECONCILIATION_SCHEMA_JSON",
+    "STACK_VERCEL_TOKEN",
     "STACKOS_DEPLOY_ENTRYPOINT",
     "STACKOS_DEPLOY_TARGET",
     "STACKOS_ENGINEERING_GRAPH_CONVEX_URL",
@@ -14718,6 +14767,35 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       ],
       "description": "Encrypts tenant deployment credentials stored in MC. Session-token fallback is legacy only."
     },
+    "LUCERN_VERCEL_TOKEN": {
+      "secretId": "platform.deploy.vercel-token.lucern",
+      "canonicalName": "LUCERN_VERCEL_TOKEN",
+      "envNames": [
+        "LUCERN_VERCEL_TOKEN"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_VERCEL_TOKEN"
+      ],
+      "required": false,
+      "secret": true,
+      "public": false,
+      "sourcePath": "/platform/deploy/vercel",
+      "environmentPolicy": "same_all_environments",
+      "consumers": [
+        "lucern-repo-ci"
+      ],
+      "destinations": [
+        {
+          "kind": "operator_local",
+          "target": "secret-sync-writer",
+          "writeNames": [
+            "LUCERN_VERCEL_TOKEN"
+          ]
+        }
+      ],
+      "description": "Lucern Vercel API token for manifest-scoped Lucern tenant Vercel secret sync. Never copy into tenant apps."
+    },
     "NEO4J_DATABASE": {
       "secretId": "platform.neo4j.database",
       "canonicalName": "NEO4J_DATABASE",
@@ -16782,6 +16860,35 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       ],
       "description": "stack/frontend: Tenant-owned Sentry webhook verification secret. stack/stackos: Tenant-owned Sentry webhook verification secret."
     },
+    "STACK_VERCEL_TOKEN": {
+      "secretId": "platform.deploy.vercel-token.stack",
+      "canonicalName": "STACK_VERCEL_TOKEN",
+      "envNames": [
+        "STACK_VERCEL_TOKEN"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "STACK_VERCEL_TOKEN"
+      ],
+      "required": false,
+      "secret": true,
+      "public": false,
+      "sourcePath": "/platform/deploy/vercel",
+      "environmentPolicy": "same_all_environments",
+      "consumers": [
+        "lucern-repo-ci"
+      ],
+      "destinations": [
+        {
+          "kind": "operator_local",
+          "target": "secret-sync-writer",
+          "writeNames": [
+            "STACK_VERCEL_TOKEN"
+          ]
+        }
+      ],
+      "description": "Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps."
+    },
     "STACKOS_DEPLOY_TARGET": {
       "secretId": "tenant.stackos.deploy-guard.local",
       "canonicalName": "STACKOS_DEPLOY_TARGET",
@@ -17146,6 +17253,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_WORKSPACE_ID": "LUCERN_TENANT_ID",
     "LUCERN_WORKTREE_ID": "LUCERN_TENANT_ID",
     "LUCERN_TENANT_SECRET_ENCRYPTION_KEY": "LUCERN_TENANT_SECRET_ENCRYPTION_KEY",
+    "LUCERN_VERCEL_TOKEN": "LUCERN_VERCEL_TOKEN",
     "NEO4J_DATABASE": "NEO4J_DATABASE",
     "NEO4J_ENG_PASSWORD": "NEO4J_PASSWORD",
     "NEO4J_PASSWORD": "NEO4J_PASSWORD",
@@ -17199,6 +17307,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "SENTRY_PROJECT": "SENTRY_PROJECT",
     "SENTRY_PROJECT_NEXTJS": "SENTRY_PROJECT",
     "SENTRY_WEBHOOK_SECRET": "SENTRY_WEBHOOK_SECRET",
+    "STACK_VERCEL_TOKEN": "STACK_VERCEL_TOKEN",
     "STACK_DEPLOY_RECONCILIATION_SCHEMA_JSON": "STACKOS_DEPLOY_TARGET",
     "STACKOS_DEPLOY_ENTRYPOINT": "STACKOS_DEPLOY_TARGET",
     "STACKOS_DEPLOY_TARGET": "STACKOS_DEPLOY_TARGET",
@@ -30128,6 +30237,64 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       }
     ],
     "operator_local:secret-sync-writer": [
+      {
+        "secretId": "platform.deploy.vercel-token.lucern",
+        "canonicalName": "LUCERN_VERCEL_TOKEN",
+        "envNames": [
+          "LUCERN_VERCEL_TOKEN"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_VERCEL_TOKEN"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/deploy/vercel",
+        "environmentPolicy": "same_all_environments",
+        "consumers": [
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "operator_local",
+            "target": "secret-sync-writer",
+            "writeNames": [
+              "LUCERN_VERCEL_TOKEN"
+            ]
+          }
+        ],
+        "description": "Lucern Vercel API token for manifest-scoped Lucern tenant Vercel secret sync. Never copy into tenant apps."
+      },
+      {
+        "secretId": "platform.deploy.vercel-token.stack",
+        "canonicalName": "STACK_VERCEL_TOKEN",
+        "envNames": [
+          "STACK_VERCEL_TOKEN"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "STACK_VERCEL_TOKEN"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/deploy/vercel",
+        "environmentPolicy": "same_all_environments",
+        "consumers": [
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "operator_local",
+            "target": "secret-sync-writer",
+            "writeNames": [
+              "STACK_VERCEL_TOKEN"
+            ]
+          }
+        ],
+        "description": "Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps."
+      },
       {
         "secretId": "platform.deploy.vercel-org-id",
         "canonicalName": "VERCEL_ORG_ID",