@lucern/contracts 0.3.0-alpha.16 → 0.3.0-alpha.17

package/dist/generated/infisicalRuntimeEnv.js

@@ -223,6 +223,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_KERNEL_NPM_TOKEN",
     "LUCERN_KERNEL_SCOPE_REGISTRY",
     "LUCERN_KERNEL_SKIP_CONVEX",
+    "LUCERN_KEY",
     "LUCERN_LOGIN_BASE_URL",
     "LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH",
     "LUCERN_MCP_DEBUG",
@@ -479,6 +480,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_KERNEL_NPM_TOKEN",
     "LUCERN_KERNEL_SCOPE_REGISTRY",
     "LUCERN_KERNEL_SKIP_CONVEX",
+    "LUCERN_KEY",
     "LUCERN_LOGIN_BASE_URL",
     "LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH",
     "LUCERN_MCP_DEBUG",
@@ -2572,13 +2574,15 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "description": "stack/frontend: Tenant-owned Linear API key for support/slash-command flows. stack/stackos: Tenant-owned Linear API key for support/slash-command flows."
     },
     "LUCERN_API_KEY": {
-      "secretId": "tenant.stack-frontend.lucern.gateway-api-key",
+      "secretId": "platform.operator.api-key",
       "canonicalName": "LUCERN_API_KEY",
       "envNames": [
         "LUCERN_API_KEY",
+        "LUCERN_KEY",
         "STACK_API_KEY"
       ],
       "aliases": [
+        "LUCERN_KEY",
         "STACK_API_KEY"
       ],
       "writeNames": [
@@ -2587,13 +2591,38 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "required": false,
       "secret": true,
       "public": false,
-      "sourcePath": "/tenants/stack",
+      "sourcePath": "/platform/runtime",
       "environmentPolicy": "environment_specific",
       "consumers": [
+        "lucern-cli",
+        "lucern-mcp",
+        "lucern-repo-ci",
+        "lucern-sdk",
         "tenant-agent-runtime",
         "tenant-vercel-app"
       ],
       "destinations": [
+        {
+          "kind": "runtime_fetch",
+          "target": "lucern-cli-mcp-sdk",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
+        {
+          "kind": "operator_local",
+          "target": "lucern-repo",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
+        {
+          "kind": "github_actions",
+          "target": "LucernAI/lucern",
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ]
+        },
         {
           "kind": "vercel",
           "target": "ai-chatbot-diao",
@@ -2637,7 +2666,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           ]
         }
       ],
-      "description": "stack/frontend: Tenant-scoped Lucern/MC gateway API key for product front-door calls. stack/stackos: Tenant-scoped Lucern/MC gateway API key for product front-door calls."
+      "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files. stack/frontend: Tenant-scoped Lucern/MC gateway API key for product front-door calls. stack/stackos: Tenant-scoped Lucern/MC gateway API key for product front-door calls. Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for gateway calls from trusted local tooling."
     },
     "LUCERN_API_URL": {
       "secretId": "platform.runtime.api-base-url",
@@ -6116,6 +6145,7 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LANGFUSE_SECRET_KEY": "LANGFUSE_SECRET_KEY",
     "LINEAR_API_KEY": "LINEAR_API_KEY",
     "LUCERN_API_KEY": "LUCERN_API_KEY",
+    "LUCERN_KEY": "LUCERN_API_KEY",
     "STACK_API_KEY": "LUCERN_API_KEY",
     "LUCERN_API_BASE_URL": "LUCERN_BASE_URL",
     "LUCERN_API_URL": "LUCERN_API_URL",
@@ -7851,9 +7881,33 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "server-side SDK operator contexts with a scoped Infisical identity",
       "description": "SDK exposes the runtime Infisical resolver used by clients that have machine identity credentials.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-sdk"
+          ],
+          "destinations": [],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -7954,9 +8008,57 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "developer/operator CLI processes",
       "description": "CLI hydrates runtime defaults from Infisical when configured, then authenticates users through Lucern device login.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-cli",
+            "lucern-mcp",
+            "lucern-repo-ci"
+          ],
+          "destinations": [
+            {
+              "kind": "runtime_fetch",
+              "target": "lucern-cli-mcp-sdk",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "operator_local",
+              "target": "lucern-repo",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "github_actions",
+              "target": "LucernAI/lucern",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            }
+          ],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -8295,7 +8397,8 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "consumer": "MCP server/client processes",
       "description": "MCP hydrates runtime defaults through the SDK resolver and remains a Lucern client, not a platform secret owner.",
       "sourcePathIds": [
-        "platform-runtime"
+        "platform-runtime",
+        "platform-operator-credentials"
       ],
       "variables": [
         {
@@ -8383,6 +8486,53 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           ],
           "description": "Lucern-owned Clerk backend secret. Never route to tenant-owned apps unless that tenant is Lucern itself."
         },
+        {
+          "canonicalName": "LUCERN_API_KEY",
+          "envNames": [
+            "LUCERN_API_KEY",
+            "LUCERN_KEY"
+          ],
+          "aliases": [
+            "LUCERN_KEY"
+          ],
+          "writeNames": [
+            "LUCERN_API_KEY"
+          ],
+          "required": false,
+          "secret": true,
+          "public": false,
+          "sourcePath": "/platform/runtime",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-cli",
+            "lucern-mcp",
+            "lucern-repo-ci"
+          ],
+          "destinations": [
+            {
+              "kind": "runtime_fetch",
+              "target": "lucern-cli-mcp-sdk",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "operator_local",
+              "target": "lucern-repo",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            },
+            {
+              "kind": "github_actions",
+              "target": "LucernAI/lucern",
+              "writeNames": [
+                "LUCERN_API_KEY"
+              ]
+            }
+          ],
+          "description": "Lucern-owned operator API key for gateway calls from trusted local tooling. Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+        },
         {
           "canonicalName": "LUCERN_API_URL",
           "envNames": [
@@ -14104,6 +14254,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Lucern-owned Langfuse secret key for prompt sync, prompt reads, and AI tracing."
       },
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.gateway.mode",
         "canonicalName": "LUCERN_GATEWAY_MODE",
@@ -18745,6 +18943,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Operator-only Infisical CLI/API location knobs. Machine credentials are handled by the bootstrap contract."
       },
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.convex-deploy.local-names",
         "canonicalName": "LUCERN_CONVEX_DEPLOYMENT_NAME",
@@ -20015,6 +20261,54 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       }
     ],
     "runtime_fetch:lucern-cli-mcp-sdk": [
+      {
+        "secretId": "platform.operator.api-key",
+        "canonicalName": "LUCERN_API_KEY",
+        "envNames": [
+          "LUCERN_API_KEY",
+          "LUCERN_KEY"
+        ],
+        "aliases": [
+          "LUCERN_KEY"
+        ],
+        "writeNames": [
+          "LUCERN_API_KEY"
+        ],
+        "required": false,
+        "secret": true,
+        "public": false,
+        "sourcePath": "/platform/runtime",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-cli",
+          "lucern-mcp",
+          "lucern-repo-ci"
+        ],
+        "destinations": [
+          {
+            "kind": "runtime_fetch",
+            "target": "lucern-cli-mcp-sdk",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "operator_local",
+            "target": "lucern-repo",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          },
+          {
+            "kind": "github_actions",
+            "target": "LucernAI/lucern",
+            "writeNames": [
+              "LUCERN_API_KEY"
+            ]
+          }
+        ],
+        "description": "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+      },
       {
         "secretId": "platform.runtime.api-base-url",
         "canonicalName": "LUCERN_API_URL",