@lucern/contracts 0.3.0-alpha.15 → 0.3.0-alpha.17

package/dist/schemas/tables/mc/tenant.d.ts

@@ -5,6 +5,7 @@ import { C as ConvexIdSchema } from '../../../idOf-DR8tkhQS.js';
 declare const apiKeys: TableContract<{
     tenantId: ConvexIdSchema<"tenants">;
     workspaceId: z.ZodOptional<ConvexIdSchema<"workspaces">>;
+    environment: z.ZodOptional<z.ZodEnum<["dev", "staging", "prod"]>>;
     keyPrefix: z.ZodEnum<["luc", "stk"]>;
     keyHash: z.ZodString;
     keyHint: z.ZodString;
@@ -21,7 +22,7 @@ declare const apiKeys: TableContract<{
 declare const auditLog: TableContract<{
     tenantId: z.ZodOptional<ConvexIdSchema<"tenants">>;
     apiKeyId: z.ZodOptional<ConvexIdSchema<"apiKeys">>;
-    action: z.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
+    action: z.ZodEnum<["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]>;
     actorClerkId: z.ZodString;
     details: z.ZodOptional<z.ZodAny>;
     createdAt: z.ZodNumber;

package/dist/schemas/tables/mc/tenant.js

@@ -26,6 +26,7 @@ var apiKeys = defineTable({
   shape: z.object({
     "tenantId": idOf("tenants"),
     "workspaceId": idOf("workspaces").optional(),
+    "environment": z.enum(["dev", "staging", "prod"]).optional(),
     "keyPrefix": z.enum(["luc", "stk"]),
     "keyHash": z.string(),
     "keyHint": z.string(),
@@ -53,7 +54,7 @@ var auditLog = defineTable({
   shape: z.object({
     "tenantId": idOf("tenants").optional(),
     "apiKeyId": idOf("apiKeys").optional(),
-    "action": z.enum(["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]),
+    "action": z.enum(["key_created", "key_revoked", "key_expired", "key_used", "tenant_secret_created", "tenant_secret_rotated", "tenant_secret_revoked", "tenant_slot_binding_upserted", "tenant_slot_binding_revoked", "proxy_token_minted", "proxy_token_lease_issued", "proxy_token_lease_renewed", "proxy_token_lease_revoked", "proxy_request_recorded", "tenant_created", "tenant_updated", "tenant_suspended", "tenant_archived", "tenant_reactivated", "tenant_clerk_organization_linked", "principal_created", "principal_updated", "principal_suspended", "principal_identity_alias_upserted", "principal_identity_alias_revoked", "membership_created", "membership_updated", "membership_revoked", "group_created", "group_updated", "group_deleted", "group_member_added", "group_member_removed", "workspace_created", "workspace_updated", "workspace_archived", "workspace_deployment_set", "workspace_deployment_removed", "deployment_host_registered", "deployment_host_revoked", "service_key_created", "service_key_rotated", "service_key_revoked", "service_key_used", "service_key_auth_failed", "session_created", "session_validated", "session_revoked", "session_cascade_revoked", "session_expired", "sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated", "policy_created", "policy_updated", "policy_enforced", "policy_archived", "permit_sync_enqueued", "permit_sync_succeeded", "permit_sync_failed", "permit_sync_skipped", "agent_registered", "agent_updated", "tool_registered", "tool_updated", "pack_entitled", "pack_installed", "pack_enabled", "pack_disabled", "pack_entitlement_revoked", "pack_upgraded", "pack_upgrade_committed", "pack_upgrade_rolled_back", "pack_group_assigned", "pack_group_unassigned", "methodology_pack_created", "methodology_pack_updated", "methodology_pack_assigned", "methodology_pack_removed", "pack_assigned_to_group", "pack_revoked_from_group", "pack_ontology_materialized", "pack_ontology_topic_bound", "cutover_flag_set", "cutover_flag_cleared"]),
     "actorClerkId": z.string(),
     "details": z.any().optional(),
     "createdAt": z.number()

package/dist/schemas/tables/mc/tenant.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/dsl/defineTable.ts","../../../../src/dsl/idOf.ts","../../../../src/schemas/tables/mc/tenant.ts"],"names":["z"],"mappings":";;;;;AAwCO,SAAS,YACd,IAAA,EACkB;AAClB,EAAA,OAAO,IAAA;AACT;AC1CO,IAAM,eAAA,mBAAkB,MAAA,CAAO,GAAA,CAAI,gCAAgC,CAAA;AASnE,SAAS,KAAuB,KAAA,EAA6B;AAClE,EAAA,MAAM,MAAA,GAAS,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAkB;AAC5C,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,eAAA,EAAiB;AAAA,IAC7C,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,EAAO,KAAA;AAAA,IACP,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,MAAA;AACT;;;ACVO,IAAM,UAAU,WAAA,CAAY;AAAA,EACjC,IAAA,EAAM,SAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,aAAaA,CAAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,KAAK,CAAC,CAAA;AAAA,IAClC,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,IACpB,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,IACpB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,oBAAoB,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IAC9E,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,WAAW,WAAA,CAAY;AAAA,EAClC,IAAA,EAAM,UAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,aAAA,EAAe,aAAA,EAAe,eAAe,UAAA,EAAY,uBAAA,EAAyB,yBAAyB,uBAAA,EAAyB,8BAAA,EAAgC,+BAA+B,oBAAA,EAAsB,0BAAA,EAA4B,6BAA6B,2BAAA,EAA6B,wBAAA,EAA0B,kBAAkB,gBAAA,EAAkB,kBAAA,EAAoB,mBAAmB,oBAAA,EAAsB,mBAAA,EAAqB,qBAAqB,qBAAA,EAAuB,mCAAA,EAAqC,oCAAoC,oBAAA,EAAsB,oBAAA,EAAsB,sBAAsB,eAAA,EAAiB,eAAA,EAAiB,iBAAiB,oBAAA,EAAsB,sBAAA,EAAwB,qBAAqB,mBAAA,EAAqB,oBAAA,EAAsB,4BAA4B,8BAAA,EAAgC,4BAAA,EAA8B,2BAA2B,qBAAA,EAAuB,qBAAA,EAAuB,qBAAA,EAAuB,kBAAA,EAAoB,2BAA2B,iBAAA,EAAmB,mBAAA,EAAqB,mBAAmB,yBAAA,EAA2B,iBAAA,EAAmB,mBAAmB,yBAAA,EAA2B,2BAAA,EAA6B,+BAA+B,wBAAA,EAA0B,gBAAA,EAAkB,kBAAkB,iBAAA,EAAmB,iBAAA,EAAmB,wBAAwB,uBAAA,EAAyB,oBAAA,EAAsB,uBAAuB,kBAAA,EAAoB,eAAA,EAAiB,mBAAmB,cAAA,EAAgB,eAAA,EAAiB,kBAAkB,cAAA,EAAgB,eAAA,EAAiB,4BAA4B,eAAA,EAAiB,wBAAA,EAA0B,4BAA4B,qBAAA,EAAuB,uBAAA,EAAyB,4BAA4B,0BAAA,EAA4B,2BAAA,EAA6B,4BAA4B,wBAAA,EAA0B,yBAAA,EAA2B,8BAA8B,2BAAA,EAA6B,kBAAA,EAAoB,sBAAsB,CAAC,CAAA;AAAA,IACl9D,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,SAAA,EAAWA,CAAAA,CAAE,GAAA,EAAI,CAAE,QAAA,EAAS;AAAA,IAC5B,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IACzE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IACzE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAA,EAAU,WAAW,CAAA;AAAE;AAE3E,CAAC;AAEM,IAAM,UAAU,WAAA,CAAY;AAAA,EACjC,IAAA,EAAM,SAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,gBAAgB,QAAA,EAAU,WAAA,EAAa,UAAU,CAAC,CAAA;AAAA,IACpE,MAAA,EAAQA,EAAE,IAAA,CAAK,CAAC,QAAQ,WAAA,EAAa,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA,IAC1D,kBAAA,EAAoBA,EAAE,MAAA,CAAO;AAAA,MAC7B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,kBAAA,EAAoBA,EAAE,MAAA,CAAO;AAAA,MAC7B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,eAAA,EAAiBA,EAAE,MAAA,CAAO;AAAA,MAC1B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,UAAA,EAAYA,CAAAA,CAAE,GAAA,EAAI,CAAE,QAAA,EAAS;AAAA,IAC7B,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,WAAW,OAAA,EAAS,CAAC,MAAM,CAAA,EAAE;AAAA,IACpD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA,EAAE;AAAA,IACxD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,mBAAmB,OAAA,EAAS,CAAC,cAAc,CAAA;AAAE;AAE1E,CAAC","file":"tenant.js","sourcesContent":["import type { ZodObject, ZodRawShape } from \"zod\";\n\nexport type TableComponent = \"mc\" | \"kernel\" | \"control-plane\" | \"developer-pack\";\n\nexport type TableIndex =\n  | {\n      kind: \"index\";\n      name: string;\n      columns: readonly string[];\n    }\n  | {\n      kind: \"search\";\n      name: string;\n      searchField: string;\n      filterFields?: readonly string[];\n    }\n  | {\n      kind: \"vector\";\n      name: string;\n      vectorField: string;\n      dimensions: number;\n      filterFields?: readonly string[];\n    };\n\nexport type TableDeprecation = {\n  since: string;\n  reason: string;\n  replacement?: string;\n};\n\nexport type TableContract<S extends ZodRawShape = ZodRawShape> = {\n  name: string;\n  component: TableComponent;\n  category: string;\n  shape: ZodObject<S>;\n  indices: readonly TableIndex[];\n  deprecated?: TableDeprecation;\n  invariants?: readonly string[];\n};\n\nexport function defineTable<S extends ZodRawShape>(\n  spec: TableContract<S>\n): TableContract<S> {\n  return spec;\n}\n","import { z } from \"zod\";\n\nexport const CONVEX_ID_TABLE = Symbol.for(\"lucern.contracts.convexIdTable\");\n\nexport type ConvexIdSchema<T extends string> = z.ZodBranded<\n  z.ZodString,\n  `Id<${T}>`\n> & {\n  readonly [CONVEX_ID_TABLE]: T;\n};\n\nexport function idOf<T extends string>(table: T): ConvexIdSchema<T> {\n  const schema = z.string().brand<`Id<${T}>`>();\n  Object.defineProperty(schema, CONVEX_ID_TABLE, {\n    configurable: false,\n    enumerable: false,\n    value: table,\n    writable: false,\n  });\n  return schema as ConvexIdSchema<T>;\n}\n\nexport function getConvexIdTable(schema: z.ZodTypeAny): string | undefined {\n  return (schema as Partial<Record<typeof CONVEX_ID_TABLE, string>>)[\n    CONVEX_ID_TABLE\n  ];\n}\n","/**\n * Schema contracts for mc/tenant.\n *\n * Mirrored from:\n *   - services/master-control/convex/schema.ts\n */\n\nimport { z } from 'zod';\nimport { defineTable, idOf } from '../../../dsl.js';\n\nexport const apiKeys = defineTable({\n  name: \"apiKeys\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"keyPrefix\": z.enum([\"luc\", \"stk\"]),\n    \"keyHash\": z.string(),\n    \"keyHint\": z.string(),\n    \"label\": z.string().optional(),\n    \"status\": z.enum([\"active\", \"revoked\", \"expired\"]),\n    \"expiresAt\": z.number().optional(),\n    \"lastUsedAt\": z.number().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"revokedBy\": z.string().optional(),\n    \"createdBy\": z.string(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_keyHash\", columns: [\"keyHash\"] },\n      { kind: 'index', name: \"by_tenant_prefix\", columns: [\"tenantId\", \"keyPrefix\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const auditLog = defineTable({\n  name: \"auditLog\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"apiKeyId\": idOf(\"apiKeys\").optional(),\n    \"action\": z.enum([\"key_created\", \"key_revoked\", \"key_expired\", \"key_used\", \"tenant_secret_created\", \"tenant_secret_rotated\", \"tenant_secret_revoked\", \"tenant_slot_binding_upserted\", \"tenant_slot_binding_revoked\", \"proxy_token_minted\", \"proxy_token_lease_issued\", \"proxy_token_lease_renewed\", \"proxy_token_lease_revoked\", \"proxy_request_recorded\", \"tenant_created\", \"tenant_updated\", \"tenant_suspended\", \"tenant_archived\", \"tenant_reactivated\", \"principal_created\", \"principal_updated\", \"principal_suspended\", \"principal_identity_alias_upserted\", \"principal_identity_alias_revoked\", \"membership_created\", \"membership_updated\", \"membership_revoked\", \"group_created\", \"group_updated\", \"group_deleted\", \"group_member_added\", \"group_member_removed\", \"workspace_created\", \"workspace_updated\", \"workspace_archived\", \"workspace_deployment_set\", \"workspace_deployment_removed\", \"deployment_host_registered\", \"deployment_host_revoked\", \"service_key_created\", \"service_key_rotated\", \"service_key_revoked\", \"service_key_used\", \"service_key_auth_failed\", \"session_created\", \"session_validated\", \"session_revoked\", \"session_cascade_revoked\", \"session_expired\", \"sandbox_created\", \"sandbox_secret_injected\", \"sandbox_execution_started\", \"sandbox_execution_completed\", \"sandbox_limit_violated\", \"policy_created\", \"policy_updated\", \"policy_enforced\", \"policy_archived\", \"permit_sync_enqueued\", \"permit_sync_succeeded\", \"permit_sync_failed\", \"permit_sync_skipped\", \"agent_registered\", \"agent_updated\", \"tool_registered\", \"tool_updated\", \"pack_entitled\", \"pack_installed\", \"pack_enabled\", \"pack_disabled\", \"pack_entitlement_revoked\", \"pack_upgraded\", \"pack_upgrade_committed\", \"pack_upgrade_rolled_back\", \"pack_group_assigned\", \"pack_group_unassigned\", \"methodology_pack_created\", \"methodology_pack_updated\", \"methodology_pack_assigned\", \"methodology_pack_removed\", \"pack_assigned_to_group\", \"pack_revoked_from_group\", \"pack_ontology_materialized\", \"pack_ontology_topic_bound\", \"cutover_flag_set\", \"cutover_flag_cleared\"]),\n    \"actorClerkId\": z.string(),\n    \"details\": z.any().optional(),\n    \"createdAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\", \"createdAt\"] },\n      { kind: 'index', name: \"by_apiKeyId\", columns: [\"apiKeyId\", \"createdAt\"] },\n      { kind: 'index', name: \"by_action\", columns: [\"action\", \"createdAt\"] }\n    ],\n});\n\nexport const tenants = defineTable({\n  name: \"tenants\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"slug\": z.string(),\n    \"name\": z.string(),\n    \"status\": z.enum([\"provisioning\", \"active\", \"suspended\", \"archived\"]),\n    \"tier\": z.enum([\"free\", \"developer\", \"team\", \"enterprise\"]),\n    \"kernelDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"lucernDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"appDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"ownerClerkId\": z.string(),\n    \"ownerEmail\": z.string().optional(),\n    \"metadata\": z.any().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_slug\", columns: [\"slug\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] },\n      { kind: 'index', name: \"by_ownerClerkId\", columns: [\"ownerClerkId\"] }\n    ],\n});\n"]}
+{"version":3,"sources":["../../../../src/dsl/defineTable.ts","../../../../src/dsl/idOf.ts","../../../../src/schemas/tables/mc/tenant.ts"],"names":["z"],"mappings":";;;;;AAwCO,SAAS,YACd,IAAA,EACkB;AAClB,EAAA,OAAO,IAAA;AACT;AC1CO,IAAM,eAAA,mBAAkB,MAAA,CAAO,GAAA,CAAI,gCAAgC,CAAA;AASnE,SAAS,KAAuB,KAAA,EAA6B;AAClE,EAAA,MAAM,MAAA,GAAS,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAkB;AAC5C,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,eAAA,EAAiB;AAAA,IAC7C,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,EAAO,KAAA;AAAA,IACP,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,MAAA;AACT;;;ACVO,IAAM,UAAU,WAAA,CAAY;AAAA,EACjC,IAAA,EAAM,SAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,aAAA,EAAeA,EAAE,IAAA,CAAK,CAAC,OAAO,SAAA,EAAW,MAAM,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3D,aAAaA,CAAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,KAAK,CAAC,CAAA;AAAA,IAClC,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,IACpB,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,IACpB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,oBAAoB,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IAC9E,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,WAAW,WAAA,CAAY;AAAA,EAClC,IAAA,EAAM,UAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,aAAA,EAAe,aAAA,EAAe,eAAe,UAAA,EAAY,uBAAA,EAAyB,yBAAyB,uBAAA,EAAyB,8BAAA,EAAgC,+BAA+B,oBAAA,EAAsB,0BAAA,EAA4B,6BAA6B,2BAAA,EAA6B,wBAAA,EAA0B,kBAAkB,gBAAA,EAAkB,kBAAA,EAAoB,mBAAmB,oBAAA,EAAsB,kCAAA,EAAoC,qBAAqB,mBAAA,EAAqB,qBAAA,EAAuB,qCAAqC,kCAAA,EAAoC,oBAAA,EAAsB,sBAAsB,oBAAA,EAAsB,eAAA,EAAiB,iBAAiB,eAAA,EAAiB,oBAAA,EAAsB,wBAAwB,mBAAA,EAAqB,mBAAA,EAAqB,sBAAsB,0BAAA,EAA4B,8BAAA,EAAgC,8BAA8B,yBAAA,EAA2B,qBAAA,EAAuB,uBAAuB,qBAAA,EAAuB,kBAAA,EAAoB,2BAA2B,iBAAA,EAAmB,mBAAA,EAAqB,mBAAmB,yBAAA,EAA2B,iBAAA,EAAmB,mBAAmB,yBAAA,EAA2B,2BAAA,EAA6B,+BAA+B,wBAAA,EAA0B,gBAAA,EAAkB,kBAAkB,iBAAA,EAAmB,iBAAA,EAAmB,wBAAwB,uBAAA,EAAyB,oBAAA,EAAsB,uBAAuB,kBAAA,EAAoB,eAAA,EAAiB,mBAAmB,cAAA,EAAgB,eAAA,EAAiB,kBAAkB,cAAA,EAAgB,eAAA,EAAiB,4BAA4B,eAAA,EAAiB,wBAAA,EAA0B,4BAA4B,qBAAA,EAAuB,uBAAA,EAAyB,4BAA4B,0BAAA,EAA4B,2BAAA,EAA6B,4BAA4B,wBAAA,EAA0B,yBAAA,EAA2B,8BAA8B,2BAAA,EAA6B,kBAAA,EAAoB,sBAAsB,CAAC,CAAA;AAAA,IACt/D,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,SAAA,EAAWA,CAAAA,CAAE,GAAA,EAAI,CAAE,QAAA,EAAS;AAAA,IAC5B,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IACzE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IACzE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAA,EAAU,WAAW,CAAA;AAAE;AAE3E,CAAC;AAEM,IAAM,UAAU,WAAA,CAAY;AAAA,EACjC,IAAA,EAAM,SAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,QAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,gBAAgB,QAAA,EAAU,WAAA,EAAa,UAAU,CAAC,CAAA;AAAA,IACpE,MAAA,EAAQA,EAAE,IAAA,CAAK,CAAC,QAAQ,WAAA,EAAa,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA,IAC1D,kBAAA,EAAoBA,EAAE,MAAA,CAAO;AAAA,MAC7B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,kBAAA,EAAoBA,EAAE,MAAA,CAAO;AAAA,MAC7B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,eAAA,EAAiBA,EAAE,MAAA,CAAO;AAAA,MAC1B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,MACnB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,MAClB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,EAAE,QAAA,EAAS;AAAA,IACV,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,UAAA,EAAYA,CAAAA,CAAE,GAAA,EAAI,CAAE,QAAA,EAAS;AAAA,IAC7B,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,WAAW,OAAA,EAAS,CAAC,MAAM,CAAA,EAAE;AAAA,IACpD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA,EAAE;AAAA,IACxD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,mBAAmB,OAAA,EAAS,CAAC,cAAc,CAAA;AAAE;AAE1E,CAAC","file":"tenant.js","sourcesContent":["import type { ZodObject, ZodRawShape } from \"zod\";\n\nexport type TableComponent = \"mc\" | \"kernel\" | \"control-plane\" | \"developer-pack\";\n\nexport type TableIndex =\n  | {\n      kind: \"index\";\n      name: string;\n      columns: readonly string[];\n    }\n  | {\n      kind: \"search\";\n      name: string;\n      searchField: string;\n      filterFields?: readonly string[];\n    }\n  | {\n      kind: \"vector\";\n      name: string;\n      vectorField: string;\n      dimensions: number;\n      filterFields?: readonly string[];\n    };\n\nexport type TableDeprecation = {\n  since: string;\n  reason: string;\n  replacement?: string;\n};\n\nexport type TableContract<S extends ZodRawShape = ZodRawShape> = {\n  name: string;\n  component: TableComponent;\n  category: string;\n  shape: ZodObject<S>;\n  indices: readonly TableIndex[];\n  deprecated?: TableDeprecation;\n  invariants?: readonly string[];\n};\n\nexport function defineTable<S extends ZodRawShape>(\n  spec: TableContract<S>\n): TableContract<S> {\n  return spec;\n}\n","import { z } from \"zod\";\n\nexport const CONVEX_ID_TABLE = Symbol.for(\"lucern.contracts.convexIdTable\");\n\nexport type ConvexIdSchema<T extends string> = z.ZodBranded<\n  z.ZodString,\n  `Id<${T}>`\n> & {\n  readonly [CONVEX_ID_TABLE]: T;\n};\n\nexport function idOf<T extends string>(table: T): ConvexIdSchema<T> {\n  const schema = z.string().brand<`Id<${T}>`>();\n  Object.defineProperty(schema, CONVEX_ID_TABLE, {\n    configurable: false,\n    enumerable: false,\n    value: table,\n    writable: false,\n  });\n  return schema as ConvexIdSchema<T>;\n}\n\nexport function getConvexIdTable(schema: z.ZodTypeAny): string | undefined {\n  return (schema as Partial<Record<typeof CONVEX_ID_TABLE, string>>)[\n    CONVEX_ID_TABLE\n  ];\n}\n","/**\n * Schema contracts for mc/tenant.\n *\n * Mirrored from:\n *   - services/master-control/convex/schema.ts\n */\n\nimport { z } from 'zod';\nimport { defineTable, idOf } from '../../../dsl.js';\n\nexport const apiKeys = defineTable({\n  name: \"apiKeys\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"environment\": z.enum([\"dev\", \"staging\", \"prod\"]).optional(),\n    \"keyPrefix\": z.enum([\"luc\", \"stk\"]),\n    \"keyHash\": z.string(),\n    \"keyHint\": z.string(),\n    \"label\": z.string().optional(),\n    \"status\": z.enum([\"active\", \"revoked\", \"expired\"]),\n    \"expiresAt\": z.number().optional(),\n    \"lastUsedAt\": z.number().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"revokedBy\": z.string().optional(),\n    \"createdBy\": z.string(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_keyHash\", columns: [\"keyHash\"] },\n      { kind: 'index', name: \"by_tenant_prefix\", columns: [\"tenantId\", \"keyPrefix\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const auditLog = defineTable({\n  name: \"auditLog\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"apiKeyId\": idOf(\"apiKeys\").optional(),\n    \"action\": z.enum([\"key_created\", \"key_revoked\", \"key_expired\", \"key_used\", \"tenant_secret_created\", \"tenant_secret_rotated\", \"tenant_secret_revoked\", \"tenant_slot_binding_upserted\", \"tenant_slot_binding_revoked\", \"proxy_token_minted\", \"proxy_token_lease_issued\", \"proxy_token_lease_renewed\", \"proxy_token_lease_revoked\", \"proxy_request_recorded\", \"tenant_created\", \"tenant_updated\", \"tenant_suspended\", \"tenant_archived\", \"tenant_reactivated\", \"tenant_clerk_organization_linked\", \"principal_created\", \"principal_updated\", \"principal_suspended\", \"principal_identity_alias_upserted\", \"principal_identity_alias_revoked\", \"membership_created\", \"membership_updated\", \"membership_revoked\", \"group_created\", \"group_updated\", \"group_deleted\", \"group_member_added\", \"group_member_removed\", \"workspace_created\", \"workspace_updated\", \"workspace_archived\", \"workspace_deployment_set\", \"workspace_deployment_removed\", \"deployment_host_registered\", \"deployment_host_revoked\", \"service_key_created\", \"service_key_rotated\", \"service_key_revoked\", \"service_key_used\", \"service_key_auth_failed\", \"session_created\", \"session_validated\", \"session_revoked\", \"session_cascade_revoked\", \"session_expired\", \"sandbox_created\", \"sandbox_secret_injected\", \"sandbox_execution_started\", \"sandbox_execution_completed\", \"sandbox_limit_violated\", \"policy_created\", \"policy_updated\", \"policy_enforced\", \"policy_archived\", \"permit_sync_enqueued\", \"permit_sync_succeeded\", \"permit_sync_failed\", \"permit_sync_skipped\", \"agent_registered\", \"agent_updated\", \"tool_registered\", \"tool_updated\", \"pack_entitled\", \"pack_installed\", \"pack_enabled\", \"pack_disabled\", \"pack_entitlement_revoked\", \"pack_upgraded\", \"pack_upgrade_committed\", \"pack_upgrade_rolled_back\", \"pack_group_assigned\", \"pack_group_unassigned\", \"methodology_pack_created\", \"methodology_pack_updated\", \"methodology_pack_assigned\", \"methodology_pack_removed\", \"pack_assigned_to_group\", \"pack_revoked_from_group\", \"pack_ontology_materialized\", \"pack_ontology_topic_bound\", \"cutover_flag_set\", \"cutover_flag_cleared\"]),\n    \"actorClerkId\": z.string(),\n    \"details\": z.any().optional(),\n    \"createdAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\", \"createdAt\"] },\n      { kind: 'index', name: \"by_apiKeyId\", columns: [\"apiKeyId\", \"createdAt\"] },\n      { kind: 'index', name: \"by_action\", columns: [\"action\", \"createdAt\"] }\n    ],\n});\n\nexport const tenants = defineTable({\n  name: \"tenants\",\n  component: \"mc\",\n  category: \"tenant\",\n  shape: z.object({\n    \"slug\": z.string(),\n    \"name\": z.string(),\n    \"status\": z.enum([\"provisioning\", \"active\", \"suspended\", \"archived\"]),\n    \"tier\": z.enum([\"free\", \"developer\", \"team\", \"enterprise\"]),\n    \"kernelDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"lucernDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"appDeployment\": z.object({\n    \"devUrl\": z.string(),\n    \"devId\": z.string(),\n    \"stagingUrl\": z.string().optional(),\n    \"stagingId\": z.string().optional(),\n    \"prodUrl\": z.string().optional(),\n    \"prodId\": z.string().optional()\n  }).optional(),\n    \"ownerClerkId\": z.string(),\n    \"ownerEmail\": z.string().optional(),\n    \"metadata\": z.any().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_slug\", columns: [\"slug\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] },\n      { kind: 'index', name: \"by_ownerClerkId\", columns: [\"ownerClerkId\"] }\n    ],\n});\n"]}

package/dist/sdk-tools.contract.js

@@ -2323,7 +2323,7 @@ var IDENTITY_WHOAMI = {
   response: {
     description: "Canonical identity summary for the current session",
     fields: {
-      principalId: "string \u2014 canonical federated principal identifier",
+      principalId: "string \u2014 canonical principal identifier; for humans this is the Clerk user_... ID",
       principalType: "string \u2014 human, service, agent, group, or external_viewer",
       tenantId: "string | undefined \u2014 resolved tenant scope",
       workspaceId: "string | undefined \u2014 resolved workspace scope",
@@ -2337,7 +2337,7 @@ var IDENTITY_WHOAMI = {
 };
 var RESOLVE_INTERACTIVE_PRINCIPAL = {
   name: "resolve_interactive_principal",
-  description: "Read the Permit-backed Lucern principal context for an authenticated Clerk user. Like `git config --get user.email` plus the repository ACL \u2014 resolves the identity alias into the canonical authorization subject.",
+  description: "Read the Permit-backed Lucern principal context for an authenticated Clerk user. Like `git config --get user.email` plus the repository ACL \u2014 resolves the Clerk subject into tenant/workspace authorization context.",
   parameters: {
     clerkId: {
       type: "string",
@@ -2360,7 +2360,7 @@ var RESOLVE_INTERACTIVE_PRINCIPAL = {
   response: {
     description: "Permit-backed Lucern principal context for tenant SDK bootstrap",
     fields: {
-      principalId: "string \u2014 canonical Lucern principal identifier",
+      principalId: "string \u2014 canonical Clerk user_... ID for human sessions",
       principalType: "string \u2014 human, service, agent, group, or external_viewer",
       clerkId: "string \u2014 authenticated Clerk subject alias",
       tenantId: "string \u2014 resolved tenant scope",
@@ -3188,7 +3188,7 @@ var MANAGE_WRITE_POLICY = {
     },
     role: {
       type: "string",
-      description: "Role to set policy for (required for 'set'). E.g. 'agent:internal', 'user:analyst'."
+      description: "Role to set policy for (required for 'set'). E.g. 'agent:internal' or a Permit role key such as 'workspace_admin'."
     },
     permission: {
       type: "string",