@lucern/contracts 0.3.0-alpha.15 → 0.3.0-alpha.17

package/dist/index.js

@@ -202,7 +202,7 @@ var SESSION_LIFECYCLE_STATUSES = [
   "revoked"
 ];
 function inferSessionPrincipalType(principalId) {
-  if (principalId.startsWith("user:")) {
+  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {
     return "human";
   }
   if (principalId.startsWith("agent:")) {
@@ -2253,6 +2253,7 @@ var apiKeys = defineTable({
   shape: z.object({
     "tenantId": idOf("tenants"),
     "workspaceId": idOf("workspaces").optional(),
+    "environment": z.enum(["dev", "staging", "prod"]).optional(),
     "keyPrefix": z.enum(["luc", "stk"]),
     "keyHash": z.string(),
     "keyHint": z.string(),
@@ -2280,7 +2281,7 @@ var auditLog = defineTable({
   shape: z.object({
     "tenantId": idOf("tenants").optional(),
     "apiKeyId": idOf("apiKeys").optional(),
-    "action": z.enum(["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]),
+    "action": z.enum(["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]),
     "actorClerkId": z.string(),
     "details": z.any().optional(),
     "createdAt": z.number()
@@ -8171,6 +8172,21 @@ var INFISICAL_RUNTIME_PATHS = [
       }
     ]
   },
+  {
+    id: "platform-operator-credentials",
+    secretPath: "/platform/runtime",
+    description: "Lucern-owned operator credential material for local CLI, MCP, and SDK sessions.",
+    variables: [
+      {
+        name: "LUCERN_API_KEY",
+        required: false,
+        secret: true,
+        public: false,
+        aliases: ["LUCERN_KEY"],
+        description: "Lucern-owned operator API key for gateway calls from trusted local tooling."
+      }
+    ]
+  },
   {
     id: "tenant-shared-install",
     secretPath: TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH,
@@ -8206,7 +8222,7 @@ var INFISICAL_RUNTIME_SURFACES = [
     id: "lucern-sdk",
     packageName: "@lucern/sdk",
     delivery: "runtime_fetch",
-    sourcePathIds: ["platform-runtime"],
+    sourcePathIds: ["platform-runtime", "platform-operator-credentials"],
     consumer: "server-side SDK operator contexts with a scoped Infisical identity",
     description: "SDK exposes the runtime Infisical resolver used by clients that have machine identity credentials."
   },
@@ -8215,7 +8231,7 @@ var INFISICAL_RUNTIME_SURFACES = [
     packageName: "@lucern/cli",
     delivery: "runtime_fetch",
     fallback: "device_auth",
-    sourcePathIds: ["platform-runtime"],
+    sourcePathIds: ["platform-runtime", "platform-operator-credentials"],
     consumer: "developer/operator CLI processes",
     description: "CLI hydrates runtime defaults from Infisical when configured, then authenticates users through Lucern device login."
   },
@@ -8224,7 +8240,7 @@ var INFISICAL_RUNTIME_SURFACES = [
     packageName: "@lucern/mcp",
     delivery: "runtime_fetch",
     fallback: "device_auth",
-    sourcePathIds: ["platform-runtime"],
+    sourcePathIds: ["platform-runtime", "platform-operator-credentials"],
     consumer: "MCP server/client processes",
     description: "MCP hydrates runtime defaults through the SDK resolver and remains a Lucern client, not a platform secret owner."
   },
@@ -9805,6 +9821,37 @@ var PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS = [
     ],
     description: "Local/hosted MCP auth token material. Tenant apps must use MC/API-key sessions instead."
   },
+  {
+    id: "platform.operator.api-key",
+    canonicalName: "LUCERN_API_KEY",
+    aliases: ["LUCERN_KEY"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-cli", "lucern-mcp", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+  },
   {
     id: "platform.graph-sync.proxy",
     canonicalName: "LUCERN_GRAPH_SYNC_QUERY_BASE_URL",
@@ -11272,6 +11319,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_KERNEL_NPM_TOKEN",
     "LUCERN_KERNEL_SCOPE_REGISTRY",
     "LUCERN_KERNEL_SKIP_CONVEX",
+    "LUCERN_KEY",
     "LUCERN_LOGIN_BASE_URL",
     "LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH",
     "LUCERN_MCP_DEBUG",
@@ -11528,6 +11576,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_KERNEL_NPM_TOKEN",
     "LUCERN_KERNEL_SCOPE_REGISTRY",
     "LUCERN_KERNEL_SKIP_CONVEX",
+    "LUCERN_KEY",
     "LUCERN_LOGIN_BASE_URL",
     "LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH",
     "LUCERN_MCP_DEBUG",
@@ -13621,13 +13670,15 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "description": "stack/frontend: Tenant-owned Linear API key for support/slash-command flows. stack/stackos: Tenant-owned Linear API key for support/slash-command flows."
     },
     "LUCERN_API_KEY": {
-      "secretId": "tenant.stack-frontend.lucern.gateway-api-key",
+      "secretId": "platform.operator.api-key",
       "canonicalName": "LUCERN_API_KEY",
       "envNames": [
         "LUCERN_API_KEY",
+        "LUCERN_KEY",
         "STACK_API_KEY"
       ],
       "aliases": [
+        "LUCERN_KEY",
         "STACK_API_KEY"
       ],
       "writeNames": [
@@ -13636,13 +13687,38 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "required": false,
       "secret": true,
       "public": false,
-      "sourcePath": "/tenants/stack",
+      "sourcePath": "/platform/runtime",
       "environmentPolicy": "environment_specific",
       "consumers": [
+        "lucern-cli",
+        "lucern-mcp",
+        "lucern-repo-ci",
+        "lucern-sdk",
         "tenant-agent-runtime",
         "tenant-vercel-app"
       ],
       "destinations": [
+        {
+          "kind": "runtime_fetch",
+          "target": "lucern-cli-mcp-sdk",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
+        {
+          "kind": "operator_local",
+          "target": "lucern-repo",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
+        {
+          "kind": "github_actions",
+          "target": "LucernAI/lucern",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
         {
           "kind": "vercel",
           "target": "ai-chatbot-diao",
@@ -13686,7 +13762,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           ]
         }
       ],
-      "description": "stack/frontend: Tenant-scoped Lucern/MC gateway API key for product front-door calls. stack/stackos: Tenant-scoped Lucern/MC gateway API key for product front-door calls."
+      "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files. stack/frontend: Tenant-scoped Lucern/MC gateway API key for product front-door calls. stack/stackos: Tenant-scoped Lucern/MC gateway API key for product front-door calls. Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for gateway calls from trusted local tooling."
     },
     "LUCERN_API_URL": {
       "secretId": "platform.runtime.api-base-url",
@@ -17165,6 +17241,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LANGFUSE_SECRET_KEY": "LANGFUSE_SECRET_KEY",
     "LINEAR_API_KEY": "LINEAR_API_KEY",
     "LUCERN_API_KEY": "LUCERN_API_KEY",
+    "LUCERN_KEY": "LUCERN_API_KEY",
     "STACK_API_KEY": "LUCERN_API_KEY",
     "LUCERN_API_BASE_URL": "LUCERN_BASE_URL",
     "LUCERN_API_URL": "LUCERN_API_URL",
@@ -18900,9 +18977,33 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "server-side SDK operator contexts with a scoped Infisical identity",
       "description": "SDK exposes the runtime Infisical resolver used by clients that have machine identity credentials.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-sdk"
+          ],
+          "destinations": [],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -19003,9 +19104,57 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "developer/operator CLI processes",
       "description": "CLI hydrates runtime defaults from Infisical when configured, then authenticates users through Lucern device login.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-cli",
+            "lucern-mcp",
+            "lucern-repo-ci"
+          ],
+          "destinations": [
+            {
+              "kind": "runtime_fetch",
+              "target": "lucern-cli-mcp-sdk",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "operator_local",
+              "target": "lucern-repo",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "github_actions",
+              "target": "LucernAI/lucern",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            }
+          ],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -19344,7 +19493,8 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "MCP server/client processes",
       "description": "MCP hydrates runtime defaults through the SDK resolver and remains a Lucern client, not a platform secret owner.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
         {
@@ -19432,6 +19582,53 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           ],
           "description": "Lucern-owned Clerk backend secret. Never route to tenant-owned apps unless that tenant is Lucern itself."
         },
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-cli",
+            "lucern-mcp",
+            "lucern-repo-ci"
+          ],
+          "destinations": [
+            {
+              "kind": "runtime_fetch",
+              "target": "lucern-cli-mcp-sdk",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "operator_local",
+              "target": "lucern-repo",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "github_actions",
+              "target": "LucernAI/lucern",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            }
+          ],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -25153,6 +25350,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Lucern-owned Langfuse secret key for prompt sync, prompt reads, and AI tracing."
       },
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.gateway.mode",
         "canonicalName": "LUCERN_GATEWAY_MODE",
@@ -29794,6 +30039,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Operator-only Infisical CLI/API location knobs. Machine credentials are handled by the bootstrap contract."
       },
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.convex-deploy.local-names",
         "canonicalName": "LUCERN_CONVEX_DEPLOYMENT_NAME",
@@ -31064,6 +31357,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       }
     ],
     "runtime_fetch:lucern-cli-mcp-sdk": [
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.runtime.api-base-url",
         "canonicalName": "LUCERN_API_URL",
@@ -40997,7 +41338,7 @@ var IDENTITY_WHOAMI = {
   response: {
     description: "Canonical identity summary for the current session",
     fields: {
-      principalId: "string \u2014 canonical federated principal identifier",
+      principalId: "string \u2014 canonical principal identifier; for humans this is the Clerk user_... ID",
       principalType: "string \u2014 human, service, agent, group, or external_viewer",
       tenantId: "string | undefined \u2014 resolved tenant scope",
       workspaceId: "string | undefined \u2014 resolved workspace scope",
@@ -41011,7 +41352,7 @@ var IDENTITY_WHOAMI = {
 };
 var RESOLVE_INTERACTIVE_PRINCIPAL = {
   name: "resolve_interactive_principal",
-  description: "Read the Permit-backed Lucern principal context for an authenticated Clerk user. Like `git config --get user.email` plus the repository ACL \u2014 resolves the identity alias into the canonical authorization subject.",
+  description: "Read the Permit-backed Lucern principal context for an authenticated Clerk user. Like `git config --get user.email` plus the repository ACL \u2014 resolves the Clerk subject into tenant/workspace authorization context.",
   parameters: {
     clerkId: {
       type: "string",
@@ -41034,7 +41375,7 @@ var RESOLVE_INTERACTIVE_PRINCIPAL = {
   response: {
     description: "Permit-backed Lucern principal context for tenant SDK bootstrap",
     fields: {
-      principalId: "string \u2014 canonical Lucern principal identifier",
+      principalId: "string \u2014 canonical Clerk user_... ID for human sessions",
       principalType: "string \u2014 human, service, agent, group, or external_viewer",
       clerkId: "string \u2014 authenticated Clerk subject alias",
       tenantId: "string \u2014 resolved tenant scope",
@@ -41862,7 +42203,7 @@ var MANAGE_WRITE_POLICY = {
     },
     role: {
       type: "string",
-      description: "Role to set policy for (required for 'set'). E.g. 'agent:internal', 'user:analyst'."
+      description: "Role to set policy for (required for 'set'). E.g. 'agent:internal' or a Permit role key such as 'workspace_admin'."
     },
     permission: {
       type: "string",
@@ -43459,6 +43800,10 @@ function highestPlatformRole(roles) {
 function isClerkAliasFor(alias, clerkId) {
   return isActivePermitProjectionStatus(alias.status) && readPermitProjectionString(alias.provider)?.toLowerCase() === "clerk" && (readPermitProjectionString(alias.providerSubjectId) === clerkId || readPermitProjectionString(alias.alias) === clerkId);
 }
+function isHumanPermitPrincipal(principal) {
+  const principalType = readPermitProjectionString(principal.principalType)?.toLowerCase();
+  return !principalType || principalType === "human" || principalType === "user";
+}
 function emailFromAlias(aliases, principal) {
   return aliases.find(
     (alias) => readPermitProjectionString(alias.aliasKind)?.toLowerCase() === "email"
@@ -43517,6 +43862,9 @@ function buildProjectedUserFromPermitPrincipal(rows, principal, matchingAlias, n
       (entry) => readPermitProjectionString(entry.provider)?.toLowerCase() === "clerk"
     )?.providerSubjectId
   ) ?? principalId;
+  if (isHumanPermitPrincipal(principal) && principalId !== clerkId) {
+    return null;
+  }
   return {
     clerkId,
     email: emailFromAlias(aliases, principal) ?? `${principalId}@permit.local`,
@@ -43550,7 +43898,7 @@ function findProjectedUserByPermitClerkId(rows, clerkId, now = Date.now()) {
   const principal = matchingAlias ? rows.principals.find(
     (row) => readPermitProjectionString(row.tenantId) === readPermitProjectionString(matchingAlias.tenantId) && readPermitProjectionString(row.principalId) === readPermitProjectionString(matchingAlias.principalId)
   ) : rows.principals.find(
-    (row) => readPermitProjectionString(row.principalId) === normalizedClerkId || readPermitProjectionString(row.principalId) === `user:${normalizedClerkId}`
+    (row) => readPermitProjectionString(row.principalId) === normalizedClerkId
   );
   return principal ? buildProjectedUserFromPermitPrincipal(rows, principal, matchingAlias, now) : null;
 }