@lucern/contracts 0.3.0-alpha.17 → 0.3.0-alpha.3

package/CHANGELOG.md

@@ -1,13 +1,3 @@
 # Changelog
 
 All notable changes to `@lucern/contracts` are tracked in this repository.
-
-## [0.3.0-alpha.16] - 2026-05-14
-- Adds the exact-row reasoning-kernel migration surface required for tenant identity/scope repairs.
-- Keeps the coherent Lucern package line aligned for StackOS and reasoning-environment adoption.
-
-## [0.3.0-alpha.7] - 2026-05-03
-- Rebuild the coherent Lucern package line after Campaign 1 SDK hardening fixes.
-
-## [0.3.0-alpha.17] - 2026-05-19
-- Release notes pending.

package/dist/api-enums.contract.d.ts

@@ -1,7 +1,3 @@
-/** Reasoning methods supported by the kernel edge schema. */
-declare const REASONING_METHODS: readonly ["deductive", "inductive", "abductive", "analogical", "causal", "correlational", "testimonial", "statistical", "implicit", "pattern_match"];
-type ReasoningMethod = (typeof REASONING_METHODS)[number];
-
 /**
  * API Enum Contract Definitions
  *
@@ -21,7 +17,9 @@ type ConfidenceTrigger = (typeof CONFIDENCE_TRIGGERS)[number];
 /** Belief status — lifecycle state */
 declare const BELIEF_STATUSES: readonly ["unscored", "scored", "archived"];
 type BeliefStatus = (typeof BELIEF_STATUSES)[number];
-
+/** Reasoning methods — how an edge relationship was determined */
+declare const REASONING_METHODS: readonly ["deductive", "inductive", "abductive", "analogical", "empirical"];
+type ReasoningMethod = (typeof REASONING_METHODS)[number];
 /** Defeat types (Pollock taxonomy) — how a contradiction operates */
 declare const DEFEAT_TYPES: readonly ["rebuts", "undercuts", "undermines"];
 type DefeatType = (typeof DEFEAT_TYPES)[number];

package/dist/api-enums.contract.js

@@ -1,17 +1,3 @@
-// src/types/reasoning-method.ts
-var REASONING_METHODS = [
-  "deductive",
-  "inductive",
-  "abductive",
-  "analogical",
-  "causal",
-  "correlational",
-  "testimonial",
-  "statistical",
-  "implicit",
-  "pattern_match"
-];
-
 // src/api-enums.contract.ts
 var FORK_REASONS = [
   "refinement",
@@ -59,6 +45,18 @@ var BELIEF_STATUSES = [
   "archived"
   // Soft-deleted — preserved in history (git rm)
 ];
+var REASONING_METHODS = [
+  "deductive",
+  // Logically entailed
+  "inductive",
+  // Generalized from instances
+  "abductive",
+  // Best explanation inference
+  "analogical",
+  // Reasoning by analogy
+  "empirical"
+  // Direct observation/measurement
+];
 var DEFEAT_TYPES = [
   "rebuts",
   // Direct contradiction — reasons for the negation

package/dist/api-enums.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types/reasoning-method.ts","../src/api-enums.contract.ts"],"names":[],"mappings":";AACO,IAAM,iBAAA,GAAoB;AAAA,EAC/B,WAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,QAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;;;ACIO,IAAM,YAAA,GAAe;AAAA,EAC1B,YAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,cAAA;AAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,mBAAA,GAAsB;AAAA,EACjC,gBAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,OAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,UAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAaO,IAAM,YAAA,GAAe;AAAA,EAC1B,QAAA;AAAA;AAAA,EACA,WAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,wBAAA,GAA2B;AAAA,EACtC,KAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,MAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,sBAAA,GAAyB;AAAA,EACpC,YAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,cAAA,GAAiB;AAAA,EAC5B,WAAA;AAAA;AAAA,EACA,aAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,YAAA;AAAA;AAAA,EACA,eAAA;AAAA;AAAA,EACA,YAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,eAAA,GAAkB;AAAA,EAC7B,SAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,qBAAA,GAAwB;AAAA,EACnC,gBAAA;AAAA;AAAA,EACA,mBAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,IAAA;AAAA;AAAA,EACA,IAAA;AAAA;AAAA,EACA,IAAA;AAAA;AAAA,EACA;AAAA;AACF;AAcO,IAAM,cAAA,GAAiB;AAAA,EAC5B,mBAAA;AAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,sBAAA,GAAyB;AAAA;AAAA,EAEpC,SAAA;AAAA;AAAA,EACA,SAAA;AAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA,EAEA,aAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA;AAAA,EAEA,YAAA;AAAA;AAAA,EACA,cAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA,YAAA;AAAA;AAAA,EACA;AAAA;AACF","file":"api-enums.contract.js","sourcesContent":["/** Reasoning methods supported by the kernel edge schema. */\nexport const REASONING_METHODS = [\n  \"deductive\",\n  \"inductive\",\n  \"abductive\",\n  \"analogical\",\n  \"causal\",\n  \"correlational\",\n  \"testimonial\",\n  \"statistical\",\n  \"implicit\",\n  \"pattern_match\",\n] as const;\n\nexport type ReasoningMethod = (typeof REASONING_METHODS)[number];\n","/**\n * API Enum Contract Definitions\n *\n * Canonical enum values for all API-facing enumerations.\n * These are co-equal with MCP contracts as external contracts.\n * SDK types are DERIVED from these — not independently authored.\n *\n * CONTRACT SURFACE: Adding a new enum value is additive (non-breaking).\n * Removing or renaming an existing value is a BREAKING CHANGE.\n */\n\n// =============================================================================\n// BELIEF ENUMS\n// =============================================================================\n\n/** Fork reasons — why a scored belief was branched */\nexport const FORK_REASONS = [\n  \"refinement\", // Belief text evolved based on new understanding\n  \"contradiction_response\", // Created in response to a detected contradiction\n  \"scope_change\", // Belief scope narrowed or broadened\n  \"confidence_collapse\", // Confidence dropped below viability threshold\n  \"manual\", // User-initiated fork without specific trigger\n] as const;\nexport type ForkReason = (typeof FORK_REASONS)[number];\n\n/** Confidence modulation triggers — what caused a confidence change */\nexport const CONFIDENCE_TRIGGERS = [\n  \"evidence_added\", // New evidence bore on the belief\n  \"evidence_removed\", // Evidence was removed or invalidated\n  \"contradiction_detected\", // A contradiction was flagged involving this belief\n  \"contradiction_resolved\", // A contradiction was resolved\n  \"manual\", // User manually adjusted confidence\n  \"decay\", // Time-based confidence erosion\n  \"agent_assessment\", // An agent provided a structured assessment\n  \"worktree_outcome\", // Worktree outcome determined this confidence\n  \"worktree_completed\", // Worktree completed and closed this scoring loop\n  \"fusion\", // Confidence came from subjective-logic fusion\n  \"discount\", // Confidence came from trust discounting\n  \"deduction\", // Confidence came from conditional deduction\n] as const;\nexport type ConfidenceTrigger = (typeof CONFIDENCE_TRIGGERS)[number];\n\n/** Belief status — lifecycle state */\nexport const BELIEF_STATUSES = [\n  \"unscored\", // Draft — editable in worktree (on feature branch, pre-merge)\n  \"scored\", // Merged — formulation frozen (merged to main)\n  \"archived\", // Soft-deleted — preserved in history (git rm)\n] as const;\nexport type BeliefStatus = (typeof BELIEF_STATUSES)[number];\n\n// =============================================================================\n// EDGE ENUMS\n// =============================================================================\n\nexport {\n  REASONING_METHODS,\n  type ReasoningMethod,\n} from \"./types/reasoning-method.js\";\n\n/** Defeat types (Pollock taxonomy) — how a contradiction operates */\nexport const DEFEAT_TYPES = [\n  \"rebuts\", // Direct contradiction — reasons for the negation\n  \"undercuts\", // Breaks the inference link between evidence and belief\n  \"undermines\", // Attacks a premise the belief depends on\n] as const;\nexport type DefeatType = (typeof DEFEAT_TYPES)[number];\n\n/** Contradiction severity levels */\nexport const CONTRADICTION_SEVERITIES = [\n  \"low\", // Minor tension, may not require action\n  \"medium\", // Moderate conflict, should be investigated\n  \"high\", // Significant contradiction, likely needs resolution\n  \"critical\", // Blocks progress — must be addressed before judgment\n] as const;\nexport type ContradictionSeverity = (typeof CONTRADICTION_SEVERITIES)[number];\n\n/** Contradiction resolution status */\nexport const CONTRADICTION_STATUSES = [\n  \"unresolved\", // Open conflict — may persist indefinitely\n  \"resolved\", // Conflict addressed (one belief forked, archived, or confidence adjusted)\n  \"accepted\", // Explicitly accepted as irreconcilable — both beliefs maintained\n] as const;\nexport type ContradictionStatus = (typeof CONTRADICTION_STATUSES)[number];\n\n// =============================================================================\n// WORKTREE ENUMS (git worktree lifecycle)\n// =============================================================================\n\n/** Merge outcome types — how a worktree merge resolved */\nexport const MERGE_OUTCOMES = [\n  \"validated\", // Beliefs confirmed — clean merge to main\n  \"invalidated\", // Defeat recorded — confidence collapsed (merge with revert)\n  \"forked\", // Beliefs split into competing versions (fork from merge point)\n  \"inconclusive\", // Insufficient evidence — stashed (git stash)\n] as const;\nexport type MergeOutcome = (typeof MERGE_OUTCOMES)[number];\n\n/** Worktree phases — investigation lifecycle within a checked-out worktree */\nexport const WORKTREE_PHASES = [\n  \"hypothesis\", // Form testable claims (write the code — commits)\n  \"investigation\", // Collect evidence (run the tests — more commits)\n  \"evaluation\", // Update credences (review the results — amend as needed)\n  \"resolution\", // Determine outcome (merge to main, fork, or stash)\n] as const;\nexport type WorktreePhase = (typeof WORKTREE_PHASES)[number];\n\n// =============================================================================\n// BRANCH ENUMS (git branch lifecycle)\n// =============================================================================\n\n/** Branch status — thematic branch lifecycle */\nexport const BRANCH_STATUSES = [\n  \"dormant\", // Branch exists but no active worktree (no one investigating)\n  \"active\", // At least one worktree is investigating this branch\n  \"archived\", // Branch retired — no longer a relevant thematic container\n] as const;\nexport type BranchStatus = (typeof BRANCH_STATUSES)[number];\n\n// =============================================================================\n// PULL REQUEST ENUMS (git pull request lifecycle)\n// =============================================================================\n\n/** Pull request status — review lifecycle before merge */\nexport const PULL_REQUEST_STATUSES = [\n  \"pending_review\", // PR opened — awaiting reviewer feedback\n  \"changes_requested\", // Reviewer requests changes before merge\n  \"approved\", // Approved — ready to merge\n  \"blocked\", // Blocked — cannot merge until contradiction is resolved\n] as const;\nexport type PullRequestStatus = (typeof PULL_REQUEST_STATUSES)[number];\n\n// =============================================================================\n// LAYER ENUMS\n// =============================================================================\n\n/** Epistemic layers — the hierarchy of knowledge */\nexport const EPISTEMIC_LAYERS = [\n  \"L1\", // Source — the given (vendored deps)\n  \"L2\", // Evidence — the interpreted (test suite)\n  \"L3\", // Belief — the structural (source files)\n  \"L4\", // Judgment — the committed (release tags)\n] as const;\nexport type EpistemicLayer = (typeof EPISTEMIC_LAYERS)[number];\n\n// =============================================================================\n// JUDGMENT ENUMS (Phase 1: new vocabulary)\n// =============================================================================\n\n/**\n * Judgment type — classification of the determination.\n *\n * Phase 1: These are new enum values for the Judgment (L4) vocabulary.\n * The existing code uses \"Decision\" — these are the forward-looking terms\n * that will eventually replace the Decision vocabulary (Phase 2-3).\n */\nexport const JUDGMENT_TYPES = [\n  \"investment_thesis\", // Judgment on an investment opportunity\n  \"thesis_maturity\", // Judgment that a thesis is ready for IC presentation\n  \"contradiction_ruling\", // Judgment on how to handle an irreconcilable contradiction\n  \"scope_determination\", // Judgment that defines or redefines investigation scope\n  \"confidence_ruling\", // Judgment that overrides automated confidence for policy reasons\n] as const;\nexport type JudgmentType = (typeof JUDGMENT_TYPES)[number];\n\n// =============================================================================\n// SUPPORT RELATION ENUMS\n// =============================================================================\n\n/** Core edge types used in the Integration Surfaces */\nexport const INTEGRATION_EDGE_TYPES = [\n  // Support relations\n  \"informs\", // Evidence bears on a belief (weight = direction/strength)\n  \"grounds\", // Source provides raw basis for evidence\n  \"answers\", // Evidence or belief resolves a question\n  // Defeat relations (Pollock) — weight carries direction\n  \"contradicts\", // Rebuts — direct contradiction\n  \"supports\", // Weight carries valence (negative = weakens/undercuts)\n  // Structural relations\n  \"depends_on\", // Belief B requires Belief A\n  \"derived_from\", // Provenance lineage\n  \"contains\", // Hierarchical containment\n  \"supersedes\", // New version replaces old (lineage)\n  \"tests\", // Question tests a belief\n] as const;\nexport type IntegrationEdgeType = (typeof INTEGRATION_EDGE_TYPES)[number];\n"]}
+{"version":3,"sources":["../src/api-enums.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,YAAA,GAAe;AAAA,EAC1B,YAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,cAAA;AAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,mBAAA,GAAsB;AAAA,EACjC,gBAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,OAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,kBAAA;AAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,UAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,iBAAA,GAAoB;AAAA,EAC/B,WAAA;AAAA;AAAA,EACA,WAAA;AAAA;AAAA,EACA,WAAA;AAAA;AAAA,EACA,YAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,YAAA,GAAe;AAAA,EAC1B,QAAA;AAAA;AAAA,EACA,WAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,wBAAA,GAA2B;AAAA,EACtC,KAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA,MAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,sBAAA,GAAyB;AAAA,EACpC,YAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,cAAA,GAAiB;AAAA,EAC5B,WAAA;AAAA;AAAA,EACA,aAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,YAAA;AAAA;AAAA,EACA,eAAA;AAAA;AAAA,EACA,YAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,eAAA,GAAkB;AAAA,EAC7B,SAAA;AAAA;AAAA,EACA,QAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,qBAAA,GAAwB;AAAA,EACnC,gBAAA;AAAA;AAAA,EACA,mBAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,IAAA;AAAA;AAAA,EACA,IAAA;AAAA;AAAA,EACA,IAAA;AAAA;AAAA,EACA;AAAA;AACF;AAcO,IAAM,cAAA,GAAiB;AAAA,EAC5B,mBAAA;AAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EACA;AAAA;AACF;AAQO,IAAM,sBAAA,GAAyB;AAAA;AAAA,EAEpC,SAAA;AAAA;AAAA,EACA,SAAA;AAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA,EAEA,aAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA;AAAA,EAEA,YAAA;AAAA;AAAA,EACA,cAAA;AAAA;AAAA,EACA,UAAA;AAAA;AAAA,EACA,YAAA;AAAA;AAAA,EACA;AAAA;AACF","file":"api-enums.contract.js","sourcesContent":["/**\n * API Enum Contract Definitions\n *\n * Canonical enum values for all API-facing enumerations.\n * These are co-equal with MCP contracts as external contracts.\n * SDK types are DERIVED from these — not independently authored.\n *\n * CONTRACT SURFACE: Adding a new enum value is additive (non-breaking).\n * Removing or renaming an existing value is a BREAKING CHANGE.\n */\n\n// =============================================================================\n// BELIEF ENUMS\n// =============================================================================\n\n/** Fork reasons — why a scored belief was branched */\nexport const FORK_REASONS = [\n  \"refinement\", // Belief text evolved based on new understanding\n  \"contradiction_response\", // Created in response to a detected contradiction\n  \"scope_change\", // Belief scope narrowed or broadened\n  \"confidence_collapse\", // Confidence dropped below viability threshold\n  \"manual\", // User-initiated fork without specific trigger\n] as const;\nexport type ForkReason = (typeof FORK_REASONS)[number];\n\n/** Confidence modulation triggers — what caused a confidence change */\nexport const CONFIDENCE_TRIGGERS = [\n  \"evidence_added\", // New evidence bore on the belief\n  \"evidence_removed\", // Evidence was removed or invalidated\n  \"contradiction_detected\", // A contradiction was flagged involving this belief\n  \"contradiction_resolved\", // A contradiction was resolved\n  \"manual\", // User manually adjusted confidence\n  \"decay\", // Time-based confidence erosion\n  \"agent_assessment\", // An agent provided a structured assessment\n  \"worktree_outcome\", // Worktree outcome determined this confidence\n  \"worktree_completed\", // Worktree completed and closed this scoring loop\n  \"fusion\", // Confidence came from subjective-logic fusion\n  \"discount\", // Confidence came from trust discounting\n  \"deduction\", // Confidence came from conditional deduction\n] as const;\nexport type ConfidenceTrigger = (typeof CONFIDENCE_TRIGGERS)[number];\n\n/** Belief status — lifecycle state */\nexport const BELIEF_STATUSES = [\n  \"unscored\", // Draft — editable in worktree (on feature branch, pre-merge)\n  \"scored\", // Merged — formulation frozen (merged to main)\n  \"archived\", // Soft-deleted — preserved in history (git rm)\n] as const;\nexport type BeliefStatus = (typeof BELIEF_STATUSES)[number];\n\n// =============================================================================\n// EDGE ENUMS\n// =============================================================================\n\n/** Reasoning methods — how an edge relationship was determined */\nexport const REASONING_METHODS = [\n  \"deductive\", // Logically entailed\n  \"inductive\", // Generalized from instances\n  \"abductive\", // Best explanation inference\n  \"analogical\", // Reasoning by analogy\n  \"empirical\", // Direct observation/measurement\n] as const;\nexport type ReasoningMethod = (typeof REASONING_METHODS)[number];\n\n/** Defeat types (Pollock taxonomy) — how a contradiction operates */\nexport const DEFEAT_TYPES = [\n  \"rebuts\", // Direct contradiction — reasons for the negation\n  \"undercuts\", // Breaks the inference link between evidence and belief\n  \"undermines\", // Attacks a premise the belief depends on\n] as const;\nexport type DefeatType = (typeof DEFEAT_TYPES)[number];\n\n/** Contradiction severity levels */\nexport const CONTRADICTION_SEVERITIES = [\n  \"low\", // Minor tension, may not require action\n  \"medium\", // Moderate conflict, should be investigated\n  \"high\", // Significant contradiction, likely needs resolution\n  \"critical\", // Blocks progress — must be addressed before judgment\n] as const;\nexport type ContradictionSeverity = (typeof CONTRADICTION_SEVERITIES)[number];\n\n/** Contradiction resolution status */\nexport const CONTRADICTION_STATUSES = [\n  \"unresolved\", // Open conflict — may persist indefinitely\n  \"resolved\", // Conflict addressed (one belief forked, archived, or confidence adjusted)\n  \"accepted\", // Explicitly accepted as irreconcilable — both beliefs maintained\n] as const;\nexport type ContradictionStatus = (typeof CONTRADICTION_STATUSES)[number];\n\n// =============================================================================\n// WORKTREE ENUMS (git worktree lifecycle)\n// =============================================================================\n\n/** Merge outcome types — how a worktree merge resolved */\nexport const MERGE_OUTCOMES = [\n  \"validated\", // Beliefs confirmed — clean merge to main\n  \"invalidated\", // Defeat recorded — confidence collapsed (merge with revert)\n  \"forked\", // Beliefs split into competing versions (fork from merge point)\n  \"inconclusive\", // Insufficient evidence — stashed (git stash)\n] as const;\nexport type MergeOutcome = (typeof MERGE_OUTCOMES)[number];\n\n/** Worktree phases — investigation lifecycle within a checked-out worktree */\nexport const WORKTREE_PHASES = [\n  \"hypothesis\", // Form testable claims (write the code — commits)\n  \"investigation\", // Collect evidence (run the tests — more commits)\n  \"evaluation\", // Update credences (review the results — amend as needed)\n  \"resolution\", // Determine outcome (merge to main, fork, or stash)\n] as const;\nexport type WorktreePhase = (typeof WORKTREE_PHASES)[number];\n\n// =============================================================================\n// BRANCH ENUMS (git branch lifecycle)\n// =============================================================================\n\n/** Branch status — thematic branch lifecycle */\nexport const BRANCH_STATUSES = [\n  \"dormant\", // Branch exists but no active worktree (no one investigating)\n  \"active\", // At least one worktree is investigating this branch\n  \"archived\", // Branch retired — no longer a relevant thematic container\n] as const;\nexport type BranchStatus = (typeof BRANCH_STATUSES)[number];\n\n// =============================================================================\n// PULL REQUEST ENUMS (git pull request lifecycle)\n// =============================================================================\n\n/** Pull request status — review lifecycle before merge */\nexport const PULL_REQUEST_STATUSES = [\n  \"pending_review\", // PR opened — awaiting reviewer feedback\n  \"changes_requested\", // Reviewer requests changes before merge\n  \"approved\", // Approved — ready to merge\n  \"blocked\", // Blocked — cannot merge until contradiction is resolved\n] as const;\nexport type PullRequestStatus = (typeof PULL_REQUEST_STATUSES)[number];\n\n// =============================================================================\n// LAYER ENUMS\n// =============================================================================\n\n/** Epistemic layers — the hierarchy of knowledge */\nexport const EPISTEMIC_LAYERS = [\n  \"L1\", // Source — the given (vendored deps)\n  \"L2\", // Evidence — the interpreted (test suite)\n  \"L3\", // Belief — the structural (source files)\n  \"L4\", // Judgment — the committed (release tags)\n] as const;\nexport type EpistemicLayer = (typeof EPISTEMIC_LAYERS)[number];\n\n// =============================================================================\n// JUDGMENT ENUMS (Phase 1: new vocabulary)\n// =============================================================================\n\n/**\n * Judgment type — classification of the determination.\n *\n * Phase 1: These are new enum values for the Judgment (L4) vocabulary.\n * The existing code uses \"Decision\" — these are the forward-looking terms\n * that will eventually replace the Decision vocabulary (Phase 2-3).\n */\nexport const JUDGMENT_TYPES = [\n  \"investment_thesis\", // Judgment on an investment opportunity\n  \"thesis_maturity\", // Judgment that a thesis is ready for IC presentation\n  \"contradiction_ruling\", // Judgment on how to handle an irreconcilable contradiction\n  \"scope_determination\", // Judgment that defines or redefines investigation scope\n  \"confidence_ruling\", // Judgment that overrides automated confidence for policy reasons\n] as const;\nexport type JudgmentType = (typeof JUDGMENT_TYPES)[number];\n\n// =============================================================================\n// SUPPORT RELATION ENUMS\n// =============================================================================\n\n/** Core edge types used in the Integration Surfaces */\nexport const INTEGRATION_EDGE_TYPES = [\n  // Support relations\n  \"informs\", // Evidence bears on a belief (weight = direction/strength)\n  \"grounds\", // Source provides raw basis for evidence\n  \"answers\", // Evidence or belief resolves a question\n  // Defeat relations (Pollock) — weight carries direction\n  \"contradicts\", // Rebuts — direct contradiction\n  \"supports\", // Weight carries valence (negative = weakens/undercuts)\n  // Structural relations\n  \"depends_on\", // Belief B requires Belief A\n  \"derived_from\", // Provenance lineage\n  \"contains\", // Hierarchical containment\n  \"supersedes\", // New version replaces old (lineage)\n  \"tests\", // Question tests a belief\n] as const;\nexport type IntegrationEdgeType = (typeof INTEGRATION_EDGE_TYPES)[number];\n"]}

package/dist/auth-context.contract.js

@@ -5,31 +5,19 @@ var SESSION_AUTH_MODES = [
   "tenant_api_key",
   "session_token"
 ];
-var SESSION_PRINCIPAL_TYPES = [
-  "human",
-  "service",
-  "agent",
-  "group",
-  "external_viewer"
-];
+var SESSION_PRINCIPAL_TYPES = ["human", "service", "agent"];
 var SESSION_LIFECYCLE_STATUSES = [
   "active",
   "expired",
   "revoked"
 ];
 function inferSessionPrincipalType(principalId) {
-  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {
+  if (principalId.startsWith("user:")) {
     return "human";
   }
   if (principalId.startsWith("agent:")) {
     return "agent";
   }
-  if (principalId.startsWith("group:")) {
-    return "group";
-  }
-  if (principalId.startsWith("external:") || principalId.startsWith("external_viewer:")) {
-    return "external_viewer";
-  }
   return "service";
 }
 function normalizeDelegationChain(args) {

package/dist/auth-context.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAGO,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,qBAAA,CAAsB,IAAA,CAAK,WAAW,CAAA,EAAG;AAC3C,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IACE,YAAY,UAAA,CAAW,WAAW,KAClC,WAAA,CAAY,UAAA,CAAW,kBAAkB,CAAA,EACzC;AACA,IAAA,OAAO,iBAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth-context.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\n  \"human\",\n  \"service\",\n  \"agent\",\n  \"group\",\n  \"external_viewer\",\n] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  if (principalId.startsWith(\"group:\")) {\n    return \"group\";\n  }\n  if (\n    principalId.startsWith(\"external:\") ||\n    principalId.startsWith(\"external_viewer:\")\n  ) {\n    return \"external_viewer\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}
+{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B,CAAC,OAAA,EAAS,SAAA,EAAW,OAAO;AAG5D,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,OAAO,CAAA,EAAG;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth-context.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\"human\", \"service\", \"agent\"] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (principalId.startsWith(\"user:\")) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}

package/dist/auth-session.contract.js

@@ -5,31 +5,19 @@ var SESSION_AUTH_MODES = [
   "tenant_api_key",
   "session_token"
 ];
-var SESSION_PRINCIPAL_TYPES = [
-  "human",
-  "service",
-  "agent",
-  "group",
-  "external_viewer"
-];
+var SESSION_PRINCIPAL_TYPES = ["human", "service", "agent"];
 var SESSION_LIFECYCLE_STATUSES = [
   "active",
   "expired",
   "revoked"
 ];
 function inferSessionPrincipalType(principalId) {
-  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {
+  if (principalId.startsWith("user:")) {
     return "human";
   }
   if (principalId.startsWith("agent:")) {
     return "agent";
   }
-  if (principalId.startsWith("group:")) {
-    return "group";
-  }
-  if (principalId.startsWith("external:") || principalId.startsWith("external_viewer:")) {
-    return "external_viewer";
-  }
   return "service";
 }
 function normalizeDelegationChain(args) {

package/dist/auth-session.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAGO,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,qBAAA,CAAsB,IAAA,CAAK,WAAW,CAAA,EAAG;AAC3C,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IACE,YAAY,UAAA,CAAW,WAAW,KAClC,WAAA,CAAY,UAAA,CAAW,kBAAkB,CAAA,EACzC;AACA,IAAA,OAAO,iBAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth-session.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\n  \"human\",\n  \"service\",\n  \"agent\",\n  \"group\",\n  \"external_viewer\",\n] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  if (principalId.startsWith(\"group:\")) {\n    return \"group\";\n  }\n  if (\n    principalId.startsWith(\"external:\") ||\n    principalId.startsWith(\"external_viewer:\")\n  ) {\n    return \"external_viewer\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}
+{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B,CAAC,OAAA,EAAS,SAAA,EAAW,OAAO;AAG5D,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,OAAO,CAAA,EAAG;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth-session.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\"human\", \"service\", \"agent\"] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (principalId.startsWith(\"user:\")) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}

package/dist/auth.contract.d.ts

@@ -12,7 +12,7 @@ import { ConvexAdminClient } from './convex-admin.contract.js';
  */
 declare const SESSION_AUTH_MODES: readonly ["interactive_user", "service_principal", "tenant_api_key", "session_token"];
 type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];
-declare const SESSION_PRINCIPAL_TYPES: readonly ["human", "service", "agent", "group", "external_viewer"];
+declare const SESSION_PRINCIPAL_TYPES: readonly ["human", "service", "agent"];
 type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];
 declare const SESSION_LIFECYCLE_STATUSES: readonly ["active", "expired", "revoked"];
 type SessionLifecycleStatus = (typeof SESSION_LIFECYCLE_STATUSES)[number];

package/dist/auth.contract.js

@@ -5,31 +5,19 @@ var SESSION_AUTH_MODES = [
   "tenant_api_key",
   "session_token"
 ];
-var SESSION_PRINCIPAL_TYPES = [
-  "human",
-  "service",
-  "agent",
-  "group",
-  "external_viewer"
-];
+var SESSION_PRINCIPAL_TYPES = ["human", "service", "agent"];
 var SESSION_LIFECYCLE_STATUSES = [
   "active",
   "expired",
   "revoked"
 ];
 function inferSessionPrincipalType(principalId) {
-  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {
+  if (principalId.startsWith("user:")) {
     return "human";
   }
   if (principalId.startsWith("agent:")) {
     return "agent";
   }
-  if (principalId.startsWith("group:")) {
-    return "group";
-  }
-  if (principalId.startsWith("external:") || principalId.startsWith("external_viewer:")) {
-    return "external_viewer";
-  }
   return "service";
 }
 function normalizeDelegationChain(args) {

package/dist/auth.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAGO,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,qBAAA,CAAsB,IAAA,CAAK,WAAW,CAAA,EAAG;AAC3C,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IACE,YAAY,UAAA,CAAW,WAAW,KAClC,WAAA,CAAY,UAAA,CAAW,kBAAkB,CAAA,EACzC;AACA,IAAA,OAAO,iBAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\n  \"human\",\n  \"service\",\n  \"agent\",\n  \"group\",\n  \"external_viewer\",\n] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (/^user_[A-Za-z0-9]+$/.test(principalId)) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  if (principalId.startsWith(\"group:\")) {\n    return \"group\";\n  }\n  if (\n    principalId.startsWith(\"external:\") ||\n    principalId.startsWith(\"external_viewer:\")\n  ) {\n    return \"external_viewer\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}
+{"version":3,"sources":["../src/auth.contract.ts"],"names":[],"mappings":";AAgBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B,CAAC,OAAA,EAAS,SAAA,EAAW,OAAO;AAG5D,IAAM,0BAAA,GAA6B;AAAA,EACxC,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AA2CO,SAAS,0BACd,WAAA,EACsB;AACtB,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,OAAO,CAAA,EAAG;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AACpC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,yBAAyB,IAAA,EAMF;AACrC,EAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC3D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,IAAA;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,aAAA,EACE,IAAA,CAAK,eAAA,IAAmB,yBAAA,CAA0B,KAAK,WAAW,CAAA;AAAA,MACpE,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,QAAQ,IAAA,CAAK;AAAA;AACf,GACF;AACF;AAEO,SAAS,cACd,eAAA,EACoB;AACpB,EAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,MAAA,KAAW,CAAA,EAAG;AACpD,IAAA;AAAA,EACF;AACA,EAAA,OAAO,eAAA,CAAgB,eAAA,CAAgB,MAAA,GAAS,CAAC,CAAA,EAAG,WAAA;AACtD","file":"auth.contract.js","sourcesContent":["/**\n * @lucern/contracts — auth (canonical support contract)\n *\n * Consolidated flat support surface for Lucern authentication:\n *   - Session primitives (auth modes, principal types, lifecycle)\n *   - AuthContext shape + McpTransportKind + LucernSdkClient alias\n *\n * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts\n * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).\n */\n\n// =============================================================================\n// SESSION PRIMITIVES\n// (Formerly src/auth-session.contract.ts)\n// =============================================================================\n\nexport const SESSION_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const;\nexport type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];\n\nexport const SESSION_PRINCIPAL_TYPES = [\"human\", \"service\", \"agent\"] as const;\nexport type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];\n\nexport const SESSION_LIFECYCLE_STATUSES = [\n  \"active\",\n  \"expired\",\n  \"revoked\",\n] as const;\nexport type SessionLifecycleStatus =\n  (typeof SESSION_LIFECYCLE_STATUSES)[number];\n\nexport type SessionDelegationHop = {\n  principalId: string;\n  principalType: SessionPrincipalType;\n  authMode?: SessionAuthMode;\n  sessionId?: string;\n  delegatedAt?: number;\n  reason?: string;\n};\n\nexport type SessionAuditOutcome =\n  | \"accepted\"\n  | \"rejected\"\n  | \"revoked\"\n  | \"expired\";\n\nexport type SessionAuditEnvelope = {\n  sessionId: string;\n  authMode: SessionAuthMode;\n  principalId: string;\n  principalType: SessionPrincipalType;\n  tenantId: string;\n  workspaceId?: string;\n  apiKeyId?: string;\n  scopes: readonly string[];\n  roles?: readonly string[];\n  delegationChain?: readonly SessionDelegationHop[];\n  sourceSessionId?: string;\n  expiresAt?: number;\n  request?: {\n    endpoint?: string;\n    method?: string;\n    correlationId?: string;\n  };\n  result?: {\n    outcome: SessionAuditOutcome;\n    reason?: string;\n  };\n};\n\nexport function inferSessionPrincipalType(\n  principalId: string\n): SessionPrincipalType {\n  if (principalId.startsWith(\"user:\")) {\n    return \"human\";\n  }\n  if (principalId.startsWith(\"agent:\")) {\n    return \"agent\";\n  }\n  return \"service\";\n}\n\nexport function normalizeDelegationChain(args: {\n  delegationChain?: readonly SessionDelegationHop[];\n  delegatedBy?: string;\n  delegatedByType?: SessionPrincipalType;\n  delegatedAt?: number;\n  reason?: string;\n}): SessionDelegationHop[] | undefined {\n  if (args.delegationChain && args.delegationChain.length > 0) {\n    return [...args.delegationChain];\n  }\n  if (!args.delegatedBy) {\n    return;\n  }\n  return [\n    {\n      principalId: args.delegatedBy,\n      principalType:\n        args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),\n      delegatedAt: args.delegatedAt,\n      reason: args.reason,\n    },\n  ];\n}\n\nexport function lastDelegator(\n  delegationChain?: readonly SessionDelegationHop[]\n): string | undefined {\n  if (!delegationChain || delegationChain.length === 0) {\n    return;\n  }\n  return delegationChain[delegationChain.length - 1]?.principalId;\n}\n\n// =============================================================================\n// AUTH CONTEXT\n// (Formerly src/auth-context.contract.ts)\n// =============================================================================\n\nimport type { ConvexAdminClient } from \"./convex-admin.contract\";\n\nexport type McpTransportKind = \"stdio\" | \"hosted\";\n\nexport type LucernSdkClient = unknown;\n\n/**\n * Session authentication context — injected by withAuth() middleware.\n *\n * Built from TenantConfig at dispatch time. Agent sessions get\n * AGENT_IDENTITY + \"agent:internal\" role + unrestricted access.\n * User sessions get Clerk userId + resolved role + tool ACLs.\n */\nexport type AuthContext = {\n  sessionType: \"agent\" | \"user\";\n  userId: string; // AGENT_IDENTITY for agents, Clerk userId for users\n  tenantId: string;\n  role: string; // \"agent:internal\" | \"platform_admin\" | \"tenant_admin\" | \"editor\" | \"viewer\" | ...\n  allowedTopics: string[] | null; // null = unrestricted (agents, admins). Block 11D populates this.\n  // Layer 2a: Group-pack binding — resolved at boot from MC resolveUserPackAccess\n  groupIds: string[]; // Groups this user belongs to (empty for agents)\n  permittedPackKeys: string[]; // Packs accessible via group assignments (empty = no pack filtering)\n  sessionId: string; // S2-13K: MCP process session UUID for audit attribution\n  principalId?: string;\n  principalType?: SessionPrincipalType;\n  workspaceId?: string;\n  scopes?: string[];\n  authMode?: SessionAuthMode;\n  roles?: string[];\n  transportKind?: McpTransportKind;\n  lucernClient?: LucernSdkClient;\n  convex?: ConvexAdminClient;\n  setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;\n  matchesWorkspaceReasoningScope?: (\n    node: unknown,\n    scope: unknown\n  ) => boolean;\n};\n"]}

package/dist/component-boundary.contract.d.ts

@@ -1,7 +1,7 @@
 import { TableOwnershipLayer, TABLE_OWNERSHIP } from './generated/tableOwnership.js';
 
 declare const COMPONENT_BOUNDARY_CONTRACT_VERSION: "2026-04-27";
-declare const COMPONENT_BOUNDARY_COMPONENT_LAYERS: readonly ["C", "K"];
+declare const COMPONENT_BOUNDARY_COMPONENT_LAYERS: readonly ["I", "K"];
 type ComponentBoundaryComponentLayer = (typeof COMPONENT_BOUNDARY_COMPONENT_LAYERS)[number];
 declare const COMPONENT_BOUNDARY_DIRECT_DB_METHODS: readonly ["insert", "patch", "replace", "delete", "query"];
 type ComponentBoundaryDirectDbMethod = (typeof COMPONENT_BOUNDARY_DIRECT_DB_METHODS)[number];

package/dist/component-boundary.contract.js

@@ -2,7 +2,7 @@
 var TABLE_OWNERSHIP = {
   "agentMessages": "K",
   "agentRegistryEntries": "L",
-  "agents": "C",
+  "agents": "I",
   "agentSessions": "K",
   "apiKeys": "L",
   "auditLog": "L",
@@ -21,7 +21,6 @@ var TABLE_OWNERSHIP = {
   "controlPlaneTenantModelSlotBindings": "L",
   "controlPlaneTenantProviderSecrets": "L",
   "controlPlaneTenantProxyGatewayUsage": "L",
-  "controlPlaneTenantProxyTokenLeases": "L",
   "controlPlaneToolAcls": "L",
   "crossProjectConnections": "K",
   "cutoverFlags": "L",
@@ -32,8 +31,6 @@ var TABLE_OWNERSHIP = {
   "decisionSnapshots": "K",
   "deliberationContributions": "K",
   "deliberationSessions": "K",
-  "deploymentHosts": "L",
-  "domainEvents": "K",
   "epistemicAudit": "K",
   "epistemicContracts": "K",
   "epistemicEdges": "K",
@@ -49,13 +46,13 @@ var TABLE_OWNERSHIP = {
   "idempotencyTokens": "K",
   "lenses": "K",
   "lensTopicBindings": "K",
-  "mcpWritePolicy": "C",
+  "mcpWritePolicy": "I",
   "memberships": "L",
   "methodologyPacks": "L",
-  "modelCallLogs": "C",
-  "modelFunctionSlots": "C",
-  "modelRegistry": "C",
-  "modelSlotConfigs": "C",
+  "modelCallLogs": "I",
+  "modelFunctionSlots": "I",
+  "modelRegistry": "I",
+  "modelSlotConfigs": "I",
   "neo4jSyncQueue": "K",
   "oauthDeviceCodes": "L",
   "ontologyDefinitions": "K",
@@ -66,65 +63,48 @@ var TABLE_OWNERSHIP = {
   "packGroupAssignments": "L",
   "packInstallations": "L",
   "packVersions": "L",
-  "permitAccessReviewItems": "C",
-  "permitAccessReviews": "C",
-  "permitAttributeBindings": "C",
-  "permitGroupMemberships": "C",
-  "permitGroups": "C",
-  "permitPolicyBundles": "C",
-  "permitPolicyDecisionReceipts": "C",
-  "permitPrincipalAliases": "C",
-  "permitPrincipals": "C",
-  "permitProjectionOutbox": "C",
-  "permitRelationshipTuples": "C",
-  "permitResourceInstances": "C",
-  "permitRoleAssignments": "C",
-  "permitSyncStates": "L",
   "platformAgentRunPolicyDecisions": "K",
   "platformAgentRunPromptResolutions": "K",
   "platformAgentRuns": "K",
   "platformAgentRunToolCalls": "K",
-  "platformAudienceGrants": "C",
-  "platformAudiences": "C",
+  "platformAudienceGrants": "I",
+  "platformAudiences": "I",
   "platformHarnessShadowAudit": "K",
-  "platformPolicyDecisionLogs": "C",
+  "platformPolicyDecisionLogs": "I",
   "policyBundles": "L",
   "policyDecisionLogs": "L",
   "policySimulations": "L",
-  "principalIdentityAliases": "L",
   "principals": "L",
-  "projectGrants": "C",
+  "projectGrants": "I",
   "publicationRules": "K",
   "questionEvidenceLinks": "K",
   "rateLimitWindows": "L",
-  "reasoningPermissions": "C",
+  "reasoningPermissions": "I",
   "researchJobs": "K",
   "schemaEnumConfig": "K",
-  "secretSyncDriftReports": "L",
   "servicePrincipalKeys": "L",
   "stakeholderGroups": "K",
   "systemLogs": "K",
   "tasks": "K",
-  "tenantApiKeys": "C",
-  "tenantConfig": "C",
+  "tenantApiKeys": "I",
+  "tenantConfig": "I",
   "tenantDeploymentCredentials": "L",
-  "tenantIntegrations": "C",
+  "tenantIntegrations": "I",
   "tenantMethodologyAssignments": "L",
-  "tenantModelSlotBindings": "C",
-  "tenantPermitSyncStates": "C",
-  "tenantPolicies": "C",
-  "tenantProviderSecrets": "C",
-  "tenantProxyGatewayUsage": "C",
-  "tenantProxyTokenMints": "C",
+  "tenantModelSlotBindings": "I",
+  "tenantPolicies": "I",
+  "tenantProviderSecrets": "I",
+  "tenantProxyGatewayUsage": "I",
+  "tenantProxyTokenMints": "I",
   "tenants": "L",
-  "tenantSandboxAuditEvents": "C",
-  "tenantSecrets": "C",
-  "toolAcls": "C",
+  "tenantSandboxAuditEvents": "I",
+  "tenantSecrets": "I",
+  "toolAcls": "I",
   "toolCatalog": "L",
-  "toolRegistry": "C",
+  "toolRegistry": "I",
   "toolRegistryEntries": "L",
   "topics": "K",
-  "users": "C",
+  "users": "I",
   "userSessions": "L",
   "workflowDefinitions": "K",
   "workflowPullRequests": "K",
@@ -137,7 +117,7 @@ var TABLE_OWNERSHIP = {
 // src/component-boundary.contract.ts
 var COMPONENT_BOUNDARY_CONTRACT_VERSION = "2026-04-27";
 var COMPONENT_BOUNDARY_COMPONENT_LAYERS = [
-  "C",
+  "I",
   "K"
 ];
 var COMPONENT_BOUNDARY_DIRECT_DB_METHODS = [
@@ -167,7 +147,7 @@ function getComponentBoundaryTableLayer(tableName) {
 }
 function isComponentBoundaryComponentOwnedTable(tableName) {
   const layer = getComponentBoundaryTableLayer(tableName);
-  return layer === "C" || layer === "K";
+  return layer === "I" || layer === "K";
 }
 
 export { COMPONENT_BOUNDARY_COMPONENT_LAYERS, COMPONENT_BOUNDARY_CONTRACT_VERSION, COMPONENT_BOUNDARY_DIRECT_DB_METHODS, COMPONENT_BOUNDARY_HIGH_RISK_TABLES, COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS, getComponentBoundaryTableLayer, isComponentBoundaryComponentOwnedTable };

package/dist/component-boundary.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/generated/tableOwnership.ts","../src/component-boundary.contract.ts"],"names":[],"mappings":";AAmJO,IAAM,eAAA,GAAkB;AAAA,EAC7B,eAAA,EAAiB,GAAA;AAAA,EACjB,sBAAA,EAAwB,GAAA;AAAA,EACxB,QAAA,EAAU,GAAA;AAAA,EACV,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,eAAA,EAAiB,GAAA;AAAA,EACjB,iBAAA,EAAmB,GAAA;AAAA,EACnB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,oBAAA,EAAsB,GAAA;AAAA,EACtB,qBAAA,EAAuB,GAAA;AAAA,EACvB,gBAAA,EAAkB,GAAA;AAAA,EAClB,qCAAA,EAAuC,GAAA;AAAA,EACvC,mCAAA,EAAqC,GAAA;AAAA,EACrC,qCAAA,EAAuC,GAAA;AAAA,EACvC,oCAAA,EAAsC,GAAA;AAAA,EACtC,sBAAA,EAAwB,GAAA;AAAA,EACxB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,cAAA,EAAgB,GAAA;AAAA,EAChB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,gBAAA,EAAkB,GAAA;AAAA,EAClB,sBAAA,EAAwB,GAAA;AAAA,EACxB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,sBAAA,EAAwB,GAAA;AAAA,EACxB,iBAAA,EAAmB,GAAA;AAAA,EACnB,cAAA,EAAgB,GAAA;AAAA,EAChB,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,gBAAA,EAAkB,GAAA;AAAA,EAClB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,sBAAA,EAAwB,GAAA;AAAA,EACxB,kBAAA,EAAoB,GAAA;AAAA,EACpB,kBAAA,EAAoB,GAAA;AAAA,EACpB,QAAA,EAAU,GAAA;AAAA,EACV,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,QAAA,EAAU,GAAA;AAAA,EACV,mBAAA,EAAqB,GAAA;AAAA,EACrB,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,kBAAA,EAAoB,GAAA;AAAA,EACpB,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,gBAAA,EAAkB,GAAA;AAAA,EAClB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,kBAAA,EAAoB,GAAA;AAAA,EACpB,iBAAA,EAAmB,GAAA;AAAA,EACnB,iBAAA,EAAmB,GAAA;AAAA,EACnB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,cAAA,EAAgB,GAAA;AAAA,EAChB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,qBAAA,EAAuB,GAAA;AAAA,EACvB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,8BAAA,EAAgC,GAAA;AAAA,EAChC,wBAAA,EAA0B,GAAA;AAAA,EAC1B,kBAAA,EAAoB,GAAA;AAAA,EACpB,wBAAA,EAA0B,GAAA;AAAA,EAC1B,0BAAA,EAA4B,GAAA;AAAA,EAC5B,yBAAA,EAA2B,GAAA;AAAA,EAC3B,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,iCAAA,EAAmC,GAAA;AAAA,EACnC,mCAAA,EAAqC,GAAA;AAAA,EACrC,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,mBAAA,EAAqB,GAAA;AAAA,EACrB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,4BAAA,EAA8B,GAAA;AAAA,EAC9B,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,0BAAA,EAA4B,GAAA;AAAA,EAC5B,YAAA,EAAc,GAAA;AAAA,EACd,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,wBAAA,EAA0B,GAAA;AAAA,EAC1B,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,GAAA;AAAA,EACT,eAAA,EAAiB,GAAA;AAAA,EACjB,cAAA,EAAgB,GAAA;AAAA,EAChB,6BAAA,EAA+B,GAAA;AAAA,EAC/B,oBAAA,EAAsB,GAAA;AAAA,EACtB,8BAAA,EAAgC,GAAA;AAAA,EAChC,yBAAA,EAA2B,GAAA;AAAA,EAC3B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,gBAAA,EAAkB,GAAA;AAAA,EAClB,uBAAA,EAAyB,GAAA;AAAA,EACzB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,uBAAA,EAAyB,GAAA;AAAA,EACzB,SAAA,EAAW,GAAA;AAAA,EACX,0BAAA,EAA4B,GAAA;AAAA,EAC5B,eAAA,EAAiB,GAAA;AAAA,EACjB,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,QAAA,EAAU,GAAA;AAAA,EACV,OAAA,EAAS,GAAA;AAAA,EACT,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,YAAA,EAAc,GAAA;AAAA,EACd,uBAAA,EAAyB,GAAA;AAAA,EACzB,WAAA,EAAa;AACf,CAAA;;;ACnRO,IAAM,mCAAA,GAAsC;AAE5C,IAAM,mCAAA,GAAsC;AAAA,EACjD,GAAA;AAAA,EACA;AACF;AAIO,IAAM,oCAAA,GAAuC;AAAA,EAClD,QAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAIO,IAAM,oCAAA,GAAuC;AAAA,EAClD,UAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,4BAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,SAAS,+BACd,SAAA,EACiC;AACjC,EAAA,OAAO,gBAAgB,SAAyC,CAAA;AAClE;AAEO,SAAS,uCACd,SAAA,EAC2C;AAC3C,EAAA,MAAM,KAAA,GAAQ,+BAA+B,SAAS,CAAA;AACtD,EAAA,OACE,KAAA,KAAU,OACV,KAAA,KAAU,GAAA;AAEd","file":"component-boundary.contract.js","sourcesContent":["/* GENERATED by scripts/generate-contract-schema.ts. DO NOT EDIT. */\n\nexport type TableOwnershipLayer = \"L\" | \"C\" | \"K\" | \"D\" | \"A\";\n\nexport const TABLES_BY_LAYER = {\n  \"L\": [\n    \"agentRegistryEntries\",\n    \"apiKeys\",\n    \"auditLog\",\n    \"compatibilityShims\",\n    \"controlPlaneTenantModelSlotBindings\",\n    \"controlPlaneTenantProviderSecrets\",\n    \"controlPlaneTenantProxyGatewayUsage\",\n    \"controlPlaneTenantProxyTokenLeases\",\n    \"controlPlaneToolAcls\",\n    \"cutoverFlags\",\n    \"deploymentHosts\",\n    \"groupMemberships\",\n    \"groups\",\n    \"memberships\",\n    \"methodologyPacks\",\n    \"oauthDeviceCodes\",\n    \"packAssignments\",\n    \"packDefinitions\",\n    \"packEntitlements\",\n    \"packGroupAssignments\",\n    \"packInstallations\",\n    \"packVersions\",\n    \"permitSyncStates\",\n    \"policyBundles\",\n    \"policyDecisionLogs\",\n    \"policySimulations\",\n    \"principalIdentityAliases\",\n    \"principals\",\n    \"rateLimitWindows\",\n    \"secretSyncDriftReports\",\n    \"servicePrincipalKeys\",\n    \"tenantDeploymentCredentials\",\n    \"tenantMethodologyAssignments\",\n    \"tenants\",\n    \"toolCatalog\",\n    \"toolRegistryEntries\",\n    \"userSessions\",\n    \"workspaces\"\n  ],\n  \"C\": [\n    \"agents\",\n    \"mcpWritePolicy\",\n    \"modelCallLogs\",\n    \"modelFunctionSlots\",\n    \"modelRegistry\",\n    \"modelSlotConfigs\",\n    \"permitAccessReviewItems\",\n    \"permitAccessReviews\",\n    \"permitAttributeBindings\",\n    \"permitGroupMemberships\",\n    \"permitGroups\",\n    \"permitPolicyBundles\",\n    \"permitPolicyDecisionReceipts\",\n    \"permitPrincipalAliases\",\n    \"permitPrincipals\",\n    \"permitProjectionOutbox\",\n    \"permitRelationshipTuples\",\n    \"permitResourceInstances\",\n    \"permitRoleAssignments\",\n    \"platformAudienceGrants\",\n    \"platformAudiences\",\n    \"platformPolicyDecisionLogs\",\n    \"projectGrants\",\n    \"reasoningPermissions\",\n    \"tenantApiKeys\",\n    \"tenantConfig\",\n    \"tenantIntegrations\",\n    \"tenantModelSlotBindings\",\n    \"tenantPermitSyncStates\",\n    \"tenantPolicies\",\n    \"tenantProviderSecrets\",\n    \"tenantProxyGatewayUsage\",\n    \"tenantProxyTokenMints\",\n    \"tenantSandboxAuditEvents\",\n    \"tenantSecrets\",\n    \"toolAcls\",\n    \"toolRegistry\",\n    \"users\"\n  ],\n  \"K\": [\n    \"agentMessages\",\n    \"agentSessions\",\n    \"autofixJobs\",\n    \"backgroundJobRuns\",\n    \"backgroundJobSettings\",\n    \"beliefConfidence\",\n    \"beliefEvidenceLinks\",\n    \"beliefHistory\",\n    \"beliefScenarios\",\n    \"beliefVotes\",\n    \"calibrationScores\",\n    \"contractEvaluations\",\n    \"contradictions\",\n    \"crossProjectConnections\",\n    \"decisionComputedSummaries\",\n    \"decisionEvents\",\n    \"decisionParticipants\",\n    \"decisionRiskLedger\",\n    \"decisionSnapshots\",\n    \"deliberationContributions\",\n    \"deliberationSessions\",\n    \"domainEvents\",\n    \"epistemicAudit\",\n    \"epistemicContracts\",\n    \"epistemicEdges\",\n    \"epistemicNodeEmbeddings\",\n    \"epistemicNodes\",\n    \"graphAnalysisCache\",\n    \"graphAnalysisResults\",\n    \"graphSuggestions\",\n    \"harnessReplays\",\n    \"harnessRuns\",\n    \"idempotencyTokens\",\n    \"lenses\",\n    \"lensTopicBindings\",\n    \"neo4jSyncQueue\",\n    \"ontologyDefinitions\",\n    \"ontologyVersions\",\n    \"platformAgentRunPolicyDecisions\",\n    \"platformAgentRunPromptResolutions\",\n    \"platformAgentRuns\",\n    \"platformAgentRunToolCalls\",\n    \"platformHarnessShadowAudit\",\n    \"publicationRules\",\n    \"questionEvidenceLinks\",\n    \"researchJobs\",\n    \"schemaEnumConfig\",\n    \"stakeholderGroups\",\n    \"systemLogs\",\n    \"tasks\",\n    \"topics\",\n    \"workflowDefinitions\",\n    \"workflowPullRequests\",\n    \"workflowStages\",\n    \"worktreeBeliefCluster\",\n    \"worktrees\"\n  ],\n  \"D\": [],\n  \"A\": []\n} as const;\n\nexport const TABLE_OWNERSHIP = {\n  \"agentMessages\": \"K\",\n  \"agentRegistryEntries\": \"L\",\n  \"agents\": \"C\",\n  \"agentSessions\": \"K\",\n  \"apiKeys\": \"L\",\n  \"auditLog\": \"L\",\n  \"autofixJobs\": \"K\",\n  \"backgroundJobRuns\": \"K\",\n  \"backgroundJobSettings\": \"K\",\n  \"beliefConfidence\": \"K\",\n  \"beliefEvidenceLinks\": \"K\",\n  \"beliefHistory\": \"K\",\n  \"beliefScenarios\": \"K\",\n  \"beliefVotes\": \"K\",\n  \"calibrationScores\": \"K\",\n  \"compatibilityShims\": \"L\",\n  \"contractEvaluations\": \"K\",\n  \"contradictions\": \"K\",\n  \"controlPlaneTenantModelSlotBindings\": \"L\",\n  \"controlPlaneTenantProviderSecrets\": \"L\",\n  \"controlPlaneTenantProxyGatewayUsage\": \"L\",\n  \"controlPlaneTenantProxyTokenLeases\": \"L\",\n  \"controlPlaneToolAcls\": \"L\",\n  \"crossProjectConnections\": \"K\",\n  \"cutoverFlags\": \"L\",\n  \"decisionComputedSummaries\": \"K\",\n  \"decisionEvents\": \"K\",\n  \"decisionParticipants\": \"K\",\n  \"decisionRiskLedger\": \"K\",\n  \"decisionSnapshots\": \"K\",\n  \"deliberationContributions\": \"K\",\n  \"deliberationSessions\": \"K\",\n  \"deploymentHosts\": \"L\",\n  \"domainEvents\": \"K\",\n  \"epistemicAudit\": \"K\",\n  \"epistemicContracts\": \"K\",\n  \"epistemicEdges\": \"K\",\n  \"epistemicNodeEmbeddings\": \"K\",\n  \"epistemicNodes\": \"K\",\n  \"graphAnalysisCache\": \"K\",\n  \"graphAnalysisResults\": \"K\",\n  \"graphSuggestions\": \"K\",\n  \"groupMemberships\": \"L\",\n  \"groups\": \"L\",\n  \"harnessReplays\": \"K\",\n  \"harnessRuns\": \"K\",\n  \"idempotencyTokens\": \"K\",\n  \"lenses\": \"K\",\n  \"lensTopicBindings\": \"K\",\n  \"mcpWritePolicy\": \"C\",\n  \"memberships\": \"L\",\n  \"methodologyPacks\": \"L\",\n  \"modelCallLogs\": \"C\",\n  \"modelFunctionSlots\": \"C\",\n  \"modelRegistry\": \"C\",\n  \"modelSlotConfigs\": \"C\",\n  \"neo4jSyncQueue\": \"K\",\n  \"oauthDeviceCodes\": \"L\",\n  \"ontologyDefinitions\": \"K\",\n  \"ontologyVersions\": \"K\",\n  \"packAssignments\": \"L\",\n  \"packDefinitions\": \"L\",\n  \"packEntitlements\": \"L\",\n  \"packGroupAssignments\": \"L\",\n  \"packInstallations\": \"L\",\n  \"packVersions\": \"L\",\n  \"permitAccessReviewItems\": \"C\",\n  \"permitAccessReviews\": \"C\",\n  \"permitAttributeBindings\": \"C\",\n  \"permitGroupMemberships\": \"C\",\n  \"permitGroups\": \"C\",\n  \"permitPolicyBundles\": \"C\",\n  \"permitPolicyDecisionReceipts\": \"C\",\n  \"permitPrincipalAliases\": \"C\",\n  \"permitPrincipals\": \"C\",\n  \"permitProjectionOutbox\": \"C\",\n  \"permitRelationshipTuples\": \"C\",\n  \"permitResourceInstances\": \"C\",\n  \"permitRoleAssignments\": \"C\",\n  \"permitSyncStates\": \"L\",\n  \"platformAgentRunPolicyDecisions\": \"K\",\n  \"platformAgentRunPromptResolutions\": \"K\",\n  \"platformAgentRuns\": \"K\",\n  \"platformAgentRunToolCalls\": \"K\",\n  \"platformAudienceGrants\": \"C\",\n  \"platformAudiences\": \"C\",\n  \"platformHarnessShadowAudit\": \"K\",\n  \"platformPolicyDecisionLogs\": \"C\",\n  \"policyBundles\": \"L\",\n  \"policyDecisionLogs\": \"L\",\n  \"policySimulations\": \"L\",\n  \"principalIdentityAliases\": \"L\",\n  \"principals\": \"L\",\n  \"projectGrants\": \"C\",\n  \"publicationRules\": \"K\",\n  \"questionEvidenceLinks\": \"K\",\n  \"rateLimitWindows\": \"L\",\n  \"reasoningPermissions\": \"C\",\n  \"researchJobs\": \"K\",\n  \"schemaEnumConfig\": \"K\",\n  \"secretSyncDriftReports\": \"L\",\n  \"servicePrincipalKeys\": \"L\",\n  \"stakeholderGroups\": \"K\",\n  \"systemLogs\": \"K\",\n  \"tasks\": \"K\",\n  \"tenantApiKeys\": \"C\",\n  \"tenantConfig\": \"C\",\n  \"tenantDeploymentCredentials\": \"L\",\n  \"tenantIntegrations\": \"C\",\n  \"tenantMethodologyAssignments\": \"L\",\n  \"tenantModelSlotBindings\": \"C\",\n  \"tenantPermitSyncStates\": \"C\",\n  \"tenantPolicies\": \"C\",\n  \"tenantProviderSecrets\": \"C\",\n  \"tenantProxyGatewayUsage\": \"C\",\n  \"tenantProxyTokenMints\": \"C\",\n  \"tenants\": \"L\",\n  \"tenantSandboxAuditEvents\": \"C\",\n  \"tenantSecrets\": \"C\",\n  \"toolAcls\": \"C\",\n  \"toolCatalog\": \"L\",\n  \"toolRegistry\": \"C\",\n  \"toolRegistryEntries\": \"L\",\n  \"topics\": \"K\",\n  \"users\": \"C\",\n  \"userSessions\": \"L\",\n  \"workflowDefinitions\": \"K\",\n  \"workflowPullRequests\": \"K\",\n  \"workflowStages\": \"K\",\n  \"workspaces\": \"L\",\n  \"worktreeBeliefCluster\": \"K\",\n  \"worktrees\": \"K\",\n} as const satisfies Readonly<Record<string, TableOwnershipLayer>>;\n\nexport type GeneratedTableName = keyof typeof TABLE_OWNERSHIP;\n\nexport function classifyTableOwnership(\n  tableName: string\n): TableOwnershipLayer | null {\n  return TABLE_OWNERSHIP[tableName as GeneratedTableName] ?? null;\n}\n\nexport function listTablesByOwnership(\n  layer: TableOwnershipLayer\n): readonly string[] {\n  return TABLES_BY_LAYER[layer];\n}\n\nexport function summarizeTableOwnership(\n  tableNames: readonly string[]\n): Record<TableOwnershipLayer, number> {\n  const summary: Record<TableOwnershipLayer, number> = {\n    L: 0,\n    C: 0,\n    K: 0,\n    D: 0,\n    A: 0,\n  };\n  for (const name of tableNames) {\n    const layer = classifyTableOwnership(name);\n    if (layer) {\n      summary[layer] += 1;\n    }\n  }\n  return summary;\n}\n\nexport function assertTableOwnershipCoverage(tableNames: readonly string[]): void {\n  const missing = tableNames.filter((name) => !classifyTableOwnership(name));\n  const tableNameSet = new Set(tableNames);\n  const extras = Object.keys(TABLE_OWNERSHIP).filter(\n    (name) => !tableNameSet.has(name)\n  );\n  if (missing.length > 0 || extras.length > 0) {\n    const lines: string[] = [];\n    if (missing.length > 0) {\n      lines.push(`Missing ownership classification: ${missing.join(\", \")}`);\n    }\n    if (extras.length > 0) {\n      lines.push(`Ownership map contains unknown tables: ${extras.join(\", \")}`);\n    }\n    throw new Error(lines.join(\"\\n\"));\n  }\n}\n","import {\n  TABLE_OWNERSHIP,\n  type TableOwnershipLayer,\n} from \"./generated/tableOwnership.js\";\n\nexport const COMPONENT_BOUNDARY_CONTRACT_VERSION = \"2026-04-27\" as const;\n\nexport const COMPONENT_BOUNDARY_COMPONENT_LAYERS = [\n  \"C\",\n  \"K\",\n] as const satisfies readonly TableOwnershipLayer[];\nexport type ComponentBoundaryComponentLayer =\n  (typeof COMPONENT_BOUNDARY_COMPONENT_LAYERS)[number];\n\nexport const COMPONENT_BOUNDARY_DIRECT_DB_METHODS = [\n  \"insert\",\n  \"patch\",\n  \"replace\",\n  \"delete\",\n  \"query\",\n] as const;\nexport type ComponentBoundaryDirectDbMethod =\n  (typeof COMPONENT_BOUNDARY_DIRECT_DB_METHODS)[number];\n\nexport const COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS = [\n  \"services\",\n  \"apps\",\n  \"convex\",\n] as const;\n\nexport const COMPONENT_BOUNDARY_HIGH_RISK_TABLES = [\n  \"backgroundJobRuns\",\n  \"backgroundJobSettings\",\n  \"systemLogs\",\n  \"epistemicAudit\",\n  \"platformPolicyDecisionLogs\",\n  \"tenantApiKeys\",\n  \"projectGrants\",\n  \"userSessions\",\n] as const;\nexport type ComponentBoundaryHighRiskTable =\n  (typeof COMPONENT_BOUNDARY_HIGH_RISK_TABLES)[number];\n\nexport function getComponentBoundaryTableLayer(\n  tableName: string\n): TableOwnershipLayer | undefined {\n  return TABLE_OWNERSHIP[tableName as keyof typeof TABLE_OWNERSHIP];\n}\n\nexport function isComponentBoundaryComponentOwnedTable(\n  tableName: string\n): tableName is keyof typeof TABLE_OWNERSHIP {\n  const layer = getComponentBoundaryTableLayer(tableName);\n  return (\n    layer === \"C\" ||\n    layer === \"K\"\n  );\n}\n"]}
+{"version":3,"sources":["../src/generated/tableOwnership.ts","../src/component-boundary.contract.ts"],"names":[],"mappings":";AA+HO,IAAM,eAAA,GAAkB;AAAA,EAC7B,eAAA,EAAiB,GAAA;AAAA,EACjB,sBAAA,EAAwB,GAAA;AAAA,EACxB,QAAA,EAAU,GAAA;AAAA,EACV,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,eAAA,EAAiB,GAAA;AAAA,EACjB,iBAAA,EAAmB,GAAA;AAAA,EACnB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,oBAAA,EAAsB,GAAA;AAAA,EACtB,qBAAA,EAAuB,GAAA;AAAA,EACvB,gBAAA,EAAkB,GAAA;AAAA,EAClB,qCAAA,EAAuC,GAAA;AAAA,EACvC,mCAAA,EAAqC,GAAA;AAAA,EACrC,qCAAA,EAAuC,GAAA;AAAA,EACvC,sBAAA,EAAwB,GAAA;AAAA,EACxB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,cAAA,EAAgB,GAAA;AAAA,EAChB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,gBAAA,EAAkB,GAAA;AAAA,EAClB,sBAAA,EAAwB,GAAA;AAAA,EACxB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,gBAAA,EAAkB,GAAA;AAAA,EAClB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,sBAAA,EAAwB,GAAA;AAAA,EACxB,kBAAA,EAAoB,GAAA;AAAA,EACpB,kBAAA,EAAoB,GAAA;AAAA,EACpB,QAAA,EAAU,GAAA;AAAA,EACV,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,QAAA,EAAU,GAAA;AAAA,EACV,mBAAA,EAAqB,GAAA;AAAA,EACrB,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,kBAAA,EAAoB,GAAA;AAAA,EACpB,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,gBAAA,EAAkB,GAAA;AAAA,EAClB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,kBAAA,EAAoB,GAAA;AAAA,EACpB,iBAAA,EAAmB,GAAA;AAAA,EACnB,iBAAA,EAAmB,GAAA;AAAA,EACnB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,cAAA,EAAgB,GAAA;AAAA,EAChB,iCAAA,EAAmC,GAAA;AAAA,EACnC,mCAAA,EAAqC,GAAA;AAAA,EACrC,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,mBAAA,EAAqB,GAAA;AAAA,EACrB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,4BAAA,EAA8B,GAAA;AAAA,EAC9B,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,GAAA;AAAA,EACT,eAAA,EAAiB,GAAA;AAAA,EACjB,cAAA,EAAgB,GAAA;AAAA,EAChB,6BAAA,EAA+B,GAAA;AAAA,EAC/B,oBAAA,EAAsB,GAAA;AAAA,EACtB,8BAAA,EAAgC,GAAA;AAAA,EAChC,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,uBAAA,EAAyB,GAAA;AAAA,EACzB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,uBAAA,EAAyB,GAAA;AAAA,EACzB,SAAA,EAAW,GAAA;AAAA,EACX,0BAAA,EAA4B,GAAA;AAAA,EAC5B,eAAA,EAAiB,GAAA;AAAA,EACjB,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,QAAA,EAAU,GAAA;AAAA,EACV,OAAA,EAAS,GAAA;AAAA,EACT,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,YAAA,EAAc,GAAA;AAAA,EACd,uBAAA,EAAyB,GAAA;AAAA,EACzB,WAAA,EAAa;AACf,CAAA;;;AC3OO,IAAM,mCAAA,GAAsC;AAE5C,IAAM,mCAAA,GAAsC;AAAA,EACjD,GAAA;AAAA,EACA;AACF;AAIO,IAAM,oCAAA,GAAuC;AAAA,EAClD,QAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAIO,IAAM,oCAAA,GAAuC;AAAA,EAClD,UAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,4BAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,SAAS,+BACd,SAAA,EACiC;AACjC,EAAA,OAAO,gBAAgB,SAAyC,CAAA;AAClE;AAEO,SAAS,uCACd,SAAA,EAC2C;AAC3C,EAAA,MAAM,KAAA,GAAQ,+BAA+B,SAAS,CAAA;AACtD,EAAA,OACE,KAAA,KAAU,OACV,KAAA,KAAU,GAAA;AAEd","file":"component-boundary.contract.js","sourcesContent":["/* GENERATED by scripts/generate-contract-schema.ts. DO NOT EDIT. */\n\nexport type TableOwnershipLayer = \"L\" | \"I\" | \"K\" | \"D\" | \"A\";\n\nexport const TABLES_BY_LAYER = {\n  \"L\": [\n    \"agentRegistryEntries\",\n    \"apiKeys\",\n    \"auditLog\",\n    \"compatibilityShims\",\n    \"controlPlaneTenantModelSlotBindings\",\n    \"controlPlaneTenantProviderSecrets\",\n    \"controlPlaneTenantProxyGatewayUsage\",\n    \"controlPlaneToolAcls\",\n    \"cutoverFlags\",\n    \"groupMemberships\",\n    \"groups\",\n    \"memberships\",\n    \"methodologyPacks\",\n    \"oauthDeviceCodes\",\n    \"packAssignments\",\n    \"packDefinitions\",\n    \"packEntitlements\",\n    \"packGroupAssignments\",\n    \"packInstallations\",\n    \"packVersions\",\n    \"policyBundles\",\n    \"policyDecisionLogs\",\n    \"policySimulations\",\n    \"principals\",\n    \"rateLimitWindows\",\n    \"servicePrincipalKeys\",\n    \"tenantDeploymentCredentials\",\n    \"tenantMethodologyAssignments\",\n    \"tenants\",\n    \"toolCatalog\",\n    \"toolRegistryEntries\",\n    \"userSessions\",\n    \"workspaces\"\n  ],\n  \"I\": [\n    \"agents\",\n    \"mcpWritePolicy\",\n    \"modelCallLogs\",\n    \"modelFunctionSlots\",\n    \"modelRegistry\",\n    \"modelSlotConfigs\",\n    \"platformAudienceGrants\",\n    \"platformAudiences\",\n    \"platformPolicyDecisionLogs\",\n    \"projectGrants\",\n    \"reasoningPermissions\",\n    \"tenantApiKeys\",\n    \"tenantConfig\",\n    \"tenantIntegrations\",\n    \"tenantModelSlotBindings\",\n    \"tenantPolicies\",\n    \"tenantProviderSecrets\",\n    \"tenantProxyGatewayUsage\",\n    \"tenantProxyTokenMints\",\n    \"tenantSandboxAuditEvents\",\n    \"tenantSecrets\",\n    \"toolAcls\",\n    \"toolRegistry\",\n    \"users\"\n  ],\n  \"K\": [\n    \"agentMessages\",\n    \"agentSessions\",\n    \"autofixJobs\",\n    \"backgroundJobRuns\",\n    \"backgroundJobSettings\",\n    \"beliefConfidence\",\n    \"beliefEvidenceLinks\",\n    \"beliefHistory\",\n    \"beliefScenarios\",\n    \"beliefVotes\",\n    \"calibrationScores\",\n    \"contractEvaluations\",\n    \"contradictions\",\n    \"crossProjectConnections\",\n    \"decisionComputedSummaries\",\n    \"decisionEvents\",\n    \"decisionParticipants\",\n    \"decisionRiskLedger\",\n    \"decisionSnapshots\",\n    \"deliberationContributions\",\n    \"deliberationSessions\",\n    \"epistemicAudit\",\n    \"epistemicContracts\",\n    \"epistemicEdges\",\n    \"epistemicNodeEmbeddings\",\n    \"epistemicNodes\",\n    \"graphAnalysisCache\",\n    \"graphAnalysisResults\",\n    \"graphSuggestions\",\n    \"harnessReplays\",\n    \"harnessRuns\",\n    \"idempotencyTokens\",\n    \"lenses\",\n    \"lensTopicBindings\",\n    \"neo4jSyncQueue\",\n    \"ontologyDefinitions\",\n    \"ontologyVersions\",\n    \"platformAgentRunPolicyDecisions\",\n    \"platformAgentRunPromptResolutions\",\n    \"platformAgentRuns\",\n    \"platformAgentRunToolCalls\",\n    \"platformHarnessShadowAudit\",\n    \"publicationRules\",\n    \"questionEvidenceLinks\",\n    \"researchJobs\",\n    \"schemaEnumConfig\",\n    \"stakeholderGroups\",\n    \"systemLogs\",\n    \"tasks\",\n    \"topics\",\n    \"workflowDefinitions\",\n    \"workflowPullRequests\",\n    \"workflowStages\",\n    \"worktreeBeliefCluster\",\n    \"worktrees\"\n  ],\n  \"D\": [],\n  \"A\": []\n} as const;\n\nexport const TABLE_OWNERSHIP = {\n  \"agentMessages\": \"K\",\n  \"agentRegistryEntries\": \"L\",\n  \"agents\": \"I\",\n  \"agentSessions\": \"K\",\n  \"apiKeys\": \"L\",\n  \"auditLog\": \"L\",\n  \"autofixJobs\": \"K\",\n  \"backgroundJobRuns\": \"K\",\n  \"backgroundJobSettings\": \"K\",\n  \"beliefConfidence\": \"K\",\n  \"beliefEvidenceLinks\": \"K\",\n  \"beliefHistory\": \"K\",\n  \"beliefScenarios\": \"K\",\n  \"beliefVotes\": \"K\",\n  \"calibrationScores\": \"K\",\n  \"compatibilityShims\": \"L\",\n  \"contractEvaluations\": \"K\",\n  \"contradictions\": \"K\",\n  \"controlPlaneTenantModelSlotBindings\": \"L\",\n  \"controlPlaneTenantProviderSecrets\": \"L\",\n  \"controlPlaneTenantProxyGatewayUsage\": \"L\",\n  \"controlPlaneToolAcls\": \"L\",\n  \"crossProjectConnections\": \"K\",\n  \"cutoverFlags\": \"L\",\n  \"decisionComputedSummaries\": \"K\",\n  \"decisionEvents\": \"K\",\n  \"decisionParticipants\": \"K\",\n  \"decisionRiskLedger\": \"K\",\n  \"decisionSnapshots\": \"K\",\n  \"deliberationContributions\": \"K\",\n  \"deliberationSessions\": \"K\",\n  \"epistemicAudit\": \"K\",\n  \"epistemicContracts\": \"K\",\n  \"epistemicEdges\": \"K\",\n  \"epistemicNodeEmbeddings\": \"K\",\n  \"epistemicNodes\": \"K\",\n  \"graphAnalysisCache\": \"K\",\n  \"graphAnalysisResults\": \"K\",\n  \"graphSuggestions\": \"K\",\n  \"groupMemberships\": \"L\",\n  \"groups\": \"L\",\n  \"harnessReplays\": \"K\",\n  \"harnessRuns\": \"K\",\n  \"idempotencyTokens\": \"K\",\n  \"lenses\": \"K\",\n  \"lensTopicBindings\": \"K\",\n  \"mcpWritePolicy\": \"I\",\n  \"memberships\": \"L\",\n  \"methodologyPacks\": \"L\",\n  \"modelCallLogs\": \"I\",\n  \"modelFunctionSlots\": \"I\",\n  \"modelRegistry\": \"I\",\n  \"modelSlotConfigs\": \"I\",\n  \"neo4jSyncQueue\": \"K\",\n  \"oauthDeviceCodes\": \"L\",\n  \"ontologyDefinitions\": \"K\",\n  \"ontologyVersions\": \"K\",\n  \"packAssignments\": \"L\",\n  \"packDefinitions\": \"L\",\n  \"packEntitlements\": \"L\",\n  \"packGroupAssignments\": \"L\",\n  \"packInstallations\": \"L\",\n  \"packVersions\": \"L\",\n  \"platformAgentRunPolicyDecisions\": \"K\",\n  \"platformAgentRunPromptResolutions\": \"K\",\n  \"platformAgentRuns\": \"K\",\n  \"platformAgentRunToolCalls\": \"K\",\n  \"platformAudienceGrants\": \"I\",\n  \"platformAudiences\": \"I\",\n  \"platformHarnessShadowAudit\": \"K\",\n  \"platformPolicyDecisionLogs\": \"I\",\n  \"policyBundles\": \"L\",\n  \"policyDecisionLogs\": \"L\",\n  \"policySimulations\": \"L\",\n  \"principals\": \"L\",\n  \"projectGrants\": \"I\",\n  \"publicationRules\": \"K\",\n  \"questionEvidenceLinks\": \"K\",\n  \"rateLimitWindows\": \"L\",\n  \"reasoningPermissions\": \"I\",\n  \"researchJobs\": \"K\",\n  \"schemaEnumConfig\": \"K\",\n  \"servicePrincipalKeys\": \"L\",\n  \"stakeholderGroups\": \"K\",\n  \"systemLogs\": \"K\",\n  \"tasks\": \"K\",\n  \"tenantApiKeys\": \"I\",\n  \"tenantConfig\": \"I\",\n  \"tenantDeploymentCredentials\": \"L\",\n  \"tenantIntegrations\": \"I\",\n  \"tenantMethodologyAssignments\": \"L\",\n  \"tenantModelSlotBindings\": \"I\",\n  \"tenantPolicies\": \"I\",\n  \"tenantProviderSecrets\": \"I\",\n  \"tenantProxyGatewayUsage\": \"I\",\n  \"tenantProxyTokenMints\": \"I\",\n  \"tenants\": \"L\",\n  \"tenantSandboxAuditEvents\": \"I\",\n  \"tenantSecrets\": \"I\",\n  \"toolAcls\": \"I\",\n  \"toolCatalog\": \"L\",\n  \"toolRegistry\": \"I\",\n  \"toolRegistryEntries\": \"L\",\n  \"topics\": \"K\",\n  \"users\": \"I\",\n  \"userSessions\": \"L\",\n  \"workflowDefinitions\": \"K\",\n  \"workflowPullRequests\": \"K\",\n  \"workflowStages\": \"K\",\n  \"workspaces\": \"L\",\n  \"worktreeBeliefCluster\": \"K\",\n  \"worktrees\": \"K\",\n} as const satisfies Readonly<Record<string, TableOwnershipLayer>>;\n\nexport type GeneratedTableName = keyof typeof TABLE_OWNERSHIP;\n\nexport function classifyTableOwnership(\n  tableName: string\n): TableOwnershipLayer | null {\n  return TABLE_OWNERSHIP[tableName as GeneratedTableName] ?? null;\n}\n\nexport function listTablesByOwnership(\n  layer: TableOwnershipLayer\n): readonly string[] {\n  return TABLES_BY_LAYER[layer];\n}\n\nexport function summarizeTableOwnership(\n  tableNames: readonly string[]\n): Record<TableOwnershipLayer, number> {\n  const summary: Record<TableOwnershipLayer, number> = {\n    L: 0,\n    I: 0,\n    K: 0,\n    D: 0,\n    A: 0,\n  };\n  for (const name of tableNames) {\n    const layer = classifyTableOwnership(name);\n    if (layer) {\n      summary[layer] += 1;\n    }\n  }\n  return summary;\n}\n\nexport function assertTableOwnershipCoverage(tableNames: readonly string[]): void {\n  const missing = tableNames.filter((name) => !classifyTableOwnership(name));\n  const tableNameSet = new Set(tableNames);\n  const extras = Object.keys(TABLE_OWNERSHIP).filter(\n    (name) => !tableNameSet.has(name)\n  );\n  if (missing.length > 0 || extras.length > 0) {\n    const lines: string[] = [];\n    if (missing.length > 0) {\n      lines.push(`Missing ownership classification: ${missing.join(\", \")}`);\n    }\n    if (extras.length > 0) {\n      lines.push(`Ownership map contains unknown tables: ${extras.join(\", \")}`);\n    }\n    throw new Error(lines.join(\"\\n\"));\n  }\n}\n","import {\n  TABLE_OWNERSHIP,\n  type TableOwnershipLayer,\n} from \"./generated/tableOwnership.js\";\n\nexport const COMPONENT_BOUNDARY_CONTRACT_VERSION = \"2026-04-27\" as const;\n\nexport const COMPONENT_BOUNDARY_COMPONENT_LAYERS = [\n  \"I\",\n  \"K\",\n] as const satisfies readonly TableOwnershipLayer[];\nexport type ComponentBoundaryComponentLayer =\n  (typeof COMPONENT_BOUNDARY_COMPONENT_LAYERS)[number];\n\nexport const COMPONENT_BOUNDARY_DIRECT_DB_METHODS = [\n  \"insert\",\n  \"patch\",\n  \"replace\",\n  \"delete\",\n  \"query\",\n] as const;\nexport type ComponentBoundaryDirectDbMethod =\n  (typeof COMPONENT_BOUNDARY_DIRECT_DB_METHODS)[number];\n\nexport const COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS = [\n  \"services\",\n  \"apps\",\n  \"convex\",\n] as const;\n\nexport const COMPONENT_BOUNDARY_HIGH_RISK_TABLES = [\n  \"backgroundJobRuns\",\n  \"backgroundJobSettings\",\n  \"systemLogs\",\n  \"epistemicAudit\",\n  \"platformPolicyDecisionLogs\",\n  \"tenantApiKeys\",\n  \"projectGrants\",\n  \"userSessions\",\n] as const;\nexport type ComponentBoundaryHighRiskTable =\n  (typeof COMPONENT_BOUNDARY_HIGH_RISK_TABLES)[number];\n\nexport function getComponentBoundaryTableLayer(\n  tableName: string\n): TableOwnershipLayer | undefined {\n  return TABLE_OWNERSHIP[tableName as keyof typeof TABLE_OWNERSHIP];\n}\n\nexport function isComponentBoundaryComponentOwnedTable(\n  tableName: string\n): tableName is keyof typeof TABLE_OWNERSHIP {\n  const layer = getComponentBoundaryTableLayer(tableName);\n  return (\n    layer === \"I\" ||\n    layer === \"K\"\n  );\n}\n\n"]}

package/dist/context-pack.contract.d.ts

@@ -450,13 +450,11 @@ type ContextPackV1 = {
 };
 /**
  * The canonical input schema for `compile_context`.
- * `topicId` is optional for query-first callers. When omitted, the platform
- * resolves the best topic from the query and other available signals.
- * `projectId` remains an optional compatibility alias.
+ * `topicId` is canonical. `projectId` remains an optional compatibility alias.
  */
 type ContextPackRequestV1 = {
-    /** Topic scope ID. Omit to resolve by query. */
-    topicId?: string;
+    /** Topic scope ID (required). */
+    topicId: string;
     /** Deprecated compatibility alias for older callers. */
     projectId?: string;
     /** Focus query for relevance ranking. */