@lucern/contracts 0.3.0-alpha.2 → 0.3.0-alpha.3

package/dist/generated/schema-manifest.json

@@ -1,15 +1,15 @@
 {
   "generatedFrom": "packages/contracts/src/schemas/manifest.ts",
   "counts": {
-    "total": 111,
+    "total": 112,
     "byComponent": {
       "kernel": 55,
       "identity": 24,
-      "mc": 32,
+      "mc": 33,
       "developer-pack": 0
     },
     "byLayer": {
-      "L": 32,
+      "L": 33,
       "I": 24,
       "K": 55,
       "D": 0,
@@ -2585,6 +2585,45 @@
       "deprecated": null,
       "invariants": []
     },
+    {
+      "name": "oauthDeviceCodes",
+      "component": "mc",
+      "layer": "L",
+      "category": "identity",
+      "indices": [
+        {
+          "kind": "index",
+          "name": "by_deviceCodeHash",
+          "columns": [
+            "deviceCodeHash"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_userCode",
+          "columns": [
+            "userCode"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_status_expiresAt",
+          "columns": [
+            "status",
+            "expiresAt"
+          ]
+        },
+        {
+          "kind": "index",
+          "name": "by_sessionId",
+          "columns": [
+            "sessionId"
+          ]
+        }
+      ],
+      "deprecated": null,
+      "invariants": []
+    },
     {
       "name": "ontologyDefinitions",
       "component": "kernel",

package/dist/generated/tableOwnership.d.ts

@@ -1,6 +1,6 @@
 type TableOwnershipLayer = "L" | "I" | "K" | "D" | "A";
 declare const TABLES_BY_LAYER: {
-    readonly L: readonly ["agentRegistryEntries", "apiKeys", "auditLog", "compatibilityShims", "controlPlaneTenantModelSlotBindings", "controlPlaneTenantProviderSecrets", "controlPlaneTenantProxyGatewayUsage", "controlPlaneToolAcls", "cutoverFlags", "groupMemberships", "groups", "memberships", "methodologyPacks", "packAssignments", "packDefinitions", "packEntitlements", "packGroupAssignments", "packInstallations", "packVersions", "policyBundles", "policyDecisionLogs", "policySimulations", "principals", "rateLimitWindows", "servicePrincipalKeys", "tenantDeploymentCredentials", "tenantMethodologyAssignments", "tenants", "toolCatalog", "toolRegistryEntries", "userSessions", "workspaces"];
+    readonly L: readonly ["agentRegistryEntries", "apiKeys", "auditLog", "compatibilityShims", "controlPlaneTenantModelSlotBindings", "controlPlaneTenantProviderSecrets", "controlPlaneTenantProxyGatewayUsage", "controlPlaneToolAcls", "cutoverFlags", "groupMemberships", "groups", "memberships", "methodologyPacks", "oauthDeviceCodes", "packAssignments", "packDefinitions", "packEntitlements", "packGroupAssignments", "packInstallations", "packVersions", "policyBundles", "policyDecisionLogs", "policySimulations", "principals", "rateLimitWindows", "servicePrincipalKeys", "tenantDeploymentCredentials", "tenantMethodologyAssignments", "tenants", "toolCatalog", "toolRegistryEntries", "userSessions", "workspaces"];
     readonly I: readonly ["agents", "mcpWritePolicy", "modelCallLogs", "modelFunctionSlots", "modelRegistry", "modelSlotConfigs", "platformAudienceGrants", "platformAudiences", "platformPolicyDecisionLogs", "projectGrants", "reasoningPermissions", "tenantApiKeys", "tenantConfig", "tenantIntegrations", "tenantModelSlotBindings", "tenantPolicies", "tenantProviderSecrets", "tenantProxyGatewayUsage", "tenantProxyTokenMints", "tenantSandboxAuditEvents", "tenantSecrets", "toolAcls", "toolRegistry", "users"];
     readonly K: readonly ["agentMessages", "agentSessions", "autofixJobs", "backgroundJobRuns", "backgroundJobSettings", "beliefConfidence", "beliefEvidenceLinks", "beliefHistory", "beliefScenarios", "beliefVotes", "calibrationScores", "contractEvaluations", "contradictions", "crossProjectConnections", "decisionComputedSummaries", "decisionEvents", "decisionParticipants", "decisionRiskLedger", "decisionSnapshots", "deliberationContributions", "deliberationSessions", "epistemicAudit", "epistemicContracts", "epistemicEdges", "epistemicNodeEmbeddings", "epistemicNodes", "graphAnalysisCache", "graphAnalysisResults", "graphSuggestions", "harnessReplays", "harnessRuns", "idempotencyTokens", "lenses", "lensTopicBindings", "neo4jSyncQueue", "ontologyDefinitions", "ontologyVersions", "platformAgentRunPolicyDecisions", "platformAgentRunPromptResolutions", "platformAgentRuns", "platformAgentRunToolCalls", "platformHarnessShadowAudit", "publicationRules", "questionEvidenceLinks", "researchJobs", "schemaEnumConfig", "stakeholderGroups", "systemLogs", "tasks", "topics", "workflowDefinitions", "workflowPullRequests", "workflowStages", "worktreeBeliefCluster", "worktrees"];
     readonly D: readonly [];
@@ -61,6 +61,7 @@ declare const TABLE_OWNERSHIP: {
     readonly modelRegistry: "I";
     readonly modelSlotConfigs: "I";
     readonly neo4jSyncQueue: "K";
+    readonly oauthDeviceCodes: "L";
     readonly ontologyDefinitions: "K";
     readonly ontologyVersions: "K";
     readonly packAssignments: "L";

package/dist/generated/tableOwnership.js

@@ -14,6 +14,7 @@ var TABLES_BY_LAYER = {
     "groups",
     "memberships",
     "methodologyPacks",
+    "oauthDeviceCodes",
     "packAssignments",
     "packDefinitions",
     "packEntitlements",
@@ -175,6 +176,7 @@ var TABLE_OWNERSHIP = {
   "modelRegistry": "I",
   "modelSlotConfigs": "I",
   "neo4jSyncQueue": "K",
+  "oauthDeviceCodes": "L",
   "ontologyDefinitions": "K",
   "ontologyVersions": "K",
   "packAssignments": "L",

package/dist/generated/tableOwnership.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/generated/tableOwnership.ts"],"names":[],"mappings":";AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,GAAA,EAAK;AAAA,IACH,sBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,oBAAA;AAAA,IACA,qCAAA;AAAA,IACA,mCAAA;AAAA,IACA,qCAAA;AAAA,IACA,sBAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA,kBAAA;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,kBAAA;AAAA,IACA,sBAAA;AAAA,IACA,mBAAA;AAAA,IACA,cAAA;AAAA,IACA,eAAA;AAAA,IACA,oBAAA;AAAA,IACA,mBAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA,sBAAA;AAAA,IACA,6BAAA;AAAA,IACA,8BAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA,qBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,QAAA;AAAA,IACA,gBAAA;AAAA,IACA,eAAA;AAAA,IACA,oBAAA;AAAA,IACA,eAAA;AAAA,IACA,kBAAA;AAAA,IACA,wBAAA;AAAA,IACA,mBAAA;AAAA,IACA,4BAAA;AAAA,IACA,eAAA;AAAA,IACA,sBAAA;AAAA,IACA,eAAA;AAAA,IACA,cAAA;AAAA,IACA,oBAAA;AAAA,IACA,yBAAA;AAAA,IACA,gBAAA;AAAA,IACA,uBAAA;AAAA,IACA,yBAAA;AAAA,IACA,uBAAA;AAAA,IACA,0BAAA;AAAA,IACA,eAAA;AAAA,IACA,UAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,eAAA;AAAA,IACA,eAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,uBAAA;AAAA,IACA,kBAAA;AAAA,IACA,qBAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,qBAAA;AAAA,IACA,gBAAA;AAAA,IACA,yBAAA;AAAA,IACA,2BAAA;AAAA,IACA,gBAAA;AAAA,IACA,sBAAA;AAAA,IACA,oBAAA;AAAA,IACA,mBAAA;AAAA,IACA,2BAAA;AAAA,IACA,sBAAA;AAAA,IACA,gBAAA;AAAA,IACA,oBAAA;AAAA,IACA,gBAAA;AAAA,IACA,yBAAA;AAAA,IACA,gBAAA;AAAA,IACA,oBAAA;AAAA,IACA,sBAAA;AAAA,IACA,kBAAA;AAAA,IACA,gBAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,QAAA;AAAA,IACA,mBAAA;AAAA,IACA,gBAAA;AAAA,IACA,qBAAA;AAAA,IACA,kBAAA;AAAA,IACA,iCAAA;AAAA,IACA,mCAAA;AAAA,IACA,mBAAA;AAAA,IACA,2BAAA;AAAA,IACA,4BAAA;AAAA,IACA,kBAAA;AAAA,IACA,uBAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,mBAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA;AAAA,IACA,qBAAA;AAAA,IACA,sBAAA;AAAA,IACA,gBAAA;AAAA,IACA,uBAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,KAAK,EAAC;AAAA,EACN,KAAK;AACP;AAEO,IAAM,eAAA,GAAkB;AAAA,EAC7B,eAAA,EAAiB,GAAA;AAAA,EACjB,sBAAA,EAAwB,GAAA;AAAA,EACxB,QAAA,EAAU,GAAA;AAAA,EACV,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,eAAA,EAAiB,GAAA;AAAA,EACjB,iBAAA,EAAmB,GAAA;AAAA,EACnB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,oBAAA,EAAsB,GAAA;AAAA,EACtB,qBAAA,EAAuB,GAAA;AAAA,EACvB,gBAAA,EAAkB,GAAA;AAAA,EAClB,qCAAA,EAAuC,GAAA;AAAA,EACvC,mCAAA,EAAqC,GAAA;AAAA,EACrC,qCAAA,EAAuC,GAAA;AAAA,EACvC,sBAAA,EAAwB,GAAA;AAAA,EACxB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,cAAA,EAAgB,GAAA;AAAA,EAChB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,gBAAA,EAAkB,GAAA;AAAA,EAClB,sBAAA,EAAwB,GAAA;AAAA,EACxB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,gBAAA,EAAkB,GAAA;AAAA,EAClB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,sBAAA,EAAwB,GAAA;AAAA,EACxB,kBAAA,EAAoB,GAAA;AAAA,EACpB,kBAAA,EAAoB,GAAA;AAAA,EACpB,QAAA,EAAU,GAAA;AAAA,EACV,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,QAAA,EAAU,GAAA;AAAA,EACV,mBAAA,EAAqB,GAAA;AAAA,EACrB,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,kBAAA,EAAoB,GAAA;AAAA,EACpB,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,gBAAA,EAAkB,GAAA;AAAA,EAClB,qBAAA,EAAuB,GAAA;AAAA,EACvB,kBAAA,EAAoB,GAAA;AAAA,EACpB,iBAAA,EAAmB,GAAA;AAAA,EACnB,iBAAA,EAAmB,GAAA;AAAA,EACnB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,cAAA,EAAgB,GAAA;AAAA,EAChB,iCAAA,EAAmC,GAAA;AAAA,EACnC,mCAAA,EAAqC,GAAA;AAAA,EACrC,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,mBAAA,EAAqB,GAAA;AAAA,EACrB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,4BAAA,EAA8B,GAAA;AAAA,EAC9B,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,GAAA;AAAA,EACT,eAAA,EAAiB,GAAA;AAAA,EACjB,cAAA,EAAgB,GAAA;AAAA,EAChB,6BAAA,EAA+B,GAAA;AAAA,EAC/B,oBAAA,EAAsB,GAAA;AAAA,EACtB,8BAAA,EAAgC,GAAA;AAAA,EAChC,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,uBAAA,EAAyB,GAAA;AAAA,EACzB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,uBAAA,EAAyB,GAAA;AAAA,EACzB,SAAA,EAAW,GAAA;AAAA,EACX,0BAAA,EAA4B,GAAA;AAAA,EAC5B,eAAA,EAAiB,GAAA;AAAA,EACjB,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,QAAA,EAAU,GAAA;AAAA,EACV,OAAA,EAAS,GAAA;AAAA,EACT,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,YAAA,EAAc,GAAA;AAAA,EACd,uBAAA,EAAyB,GAAA;AAAA,EACzB,WAAA,EAAa;AACf;AAIO,SAAS,uBACd,SAAA,EAC4B;AAC5B,EAAA,OAAO,eAAA,CAAgB,SAA+B,CAAA,IAAK,IAAA;AAC7D;AAEO,SAAS,sBACd,KAAA,EACmB;AACnB,EAAA,OAAO,gBAAgB,KAAK,CAAA;AAC9B;AAEO,SAAS,wBACd,UAAA,EACqC;AACrC,EAAA,MAAM,OAAA,GAA+C;AAAA,IACnD,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG;AAAA,GACL;AACA,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,MAAM,KAAA,GAAQ,uBAAuB,IAAI,CAAA;AACzC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,CAAA,IAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,6BAA6B,UAAA,EAAqC;AAChF,EAAA,MAAM,OAAA,GAAU,WAAW,MAAA,CAAO,CAAC,SAAS,CAAC,sBAAA,CAAuB,IAAI,CAAC,CAAA;AACzE,EAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,UAAU,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,CAAE,MAAA;AAAA,IAC1C,CAAC,IAAA,KAAS,CAAC,YAAA,CAAa,IAAI,IAAI;AAAA,GAClC;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,SAAS,CAAA,EAAG;AAC3C,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,KAAA,CAAM,KAAK,CAAA,kCAAA,EAAqC,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IACtE;AACA,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,CAAM,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,EAClC;AACF","file":"tableOwnership.js","sourcesContent":["/* GENERATED by scripts/generate-contract-schema.ts. DO NOT EDIT. */\n\nexport type TableOwnershipLayer = \"L\" | \"I\" | \"K\" | \"D\" | \"A\";\n\nexport const TABLES_BY_LAYER = {\n  \"L\": [\n    \"agentRegistryEntries\",\n    \"apiKeys\",\n    \"auditLog\",\n    \"compatibilityShims\",\n    \"controlPlaneTenantModelSlotBindings\",\n    \"controlPlaneTenantProviderSecrets\",\n    \"controlPlaneTenantProxyGatewayUsage\",\n    \"controlPlaneToolAcls\",\n    \"cutoverFlags\",\n    \"groupMemberships\",\n    \"groups\",\n    \"memberships\",\n    \"methodologyPacks\",\n    \"packAssignments\",\n    \"packDefinitions\",\n    \"packEntitlements\",\n    \"packGroupAssignments\",\n    \"packInstallations\",\n    \"packVersions\",\n    \"policyBundles\",\n    \"policyDecisionLogs\",\n    \"policySimulations\",\n    \"principals\",\n    \"rateLimitWindows\",\n    \"servicePrincipalKeys\",\n    \"tenantDeploymentCredentials\",\n    \"tenantMethodologyAssignments\",\n    \"tenants\",\n    \"toolCatalog\",\n    \"toolRegistryEntries\",\n    \"userSessions\",\n    \"workspaces\"\n  ],\n  \"I\": [\n    \"agents\",\n    \"mcpWritePolicy\",\n    \"modelCallLogs\",\n    \"modelFunctionSlots\",\n    \"modelRegistry\",\n    \"modelSlotConfigs\",\n    \"platformAudienceGrants\",\n    \"platformAudiences\",\n    \"platformPolicyDecisionLogs\",\n    \"projectGrants\",\n    \"reasoningPermissions\",\n    \"tenantApiKeys\",\n    \"tenantConfig\",\n    \"tenantIntegrations\",\n    \"tenantModelSlotBindings\",\n    \"tenantPolicies\",\n    \"tenantProviderSecrets\",\n    \"tenantProxyGatewayUsage\",\n    \"tenantProxyTokenMints\",\n    \"tenantSandboxAuditEvents\",\n    \"tenantSecrets\",\n    \"toolAcls\",\n    \"toolRegistry\",\n    \"users\"\n  ],\n  \"K\": [\n    \"agentMessages\",\n    \"agentSessions\",\n    \"autofixJobs\",\n    \"backgroundJobRuns\",\n    \"backgroundJobSettings\",\n    \"beliefConfidence\",\n    \"beliefEvidenceLinks\",\n    \"beliefHistory\",\n    \"beliefScenarios\",\n    \"beliefVotes\",\n    \"calibrationScores\",\n    \"contractEvaluations\",\n    \"contradictions\",\n    \"crossProjectConnections\",\n    \"decisionComputedSummaries\",\n    \"decisionEvents\",\n    \"decisionParticipants\",\n    \"decisionRiskLedger\",\n    \"decisionSnapshots\",\n    \"deliberationContributions\",\n    \"deliberationSessions\",\n    \"epistemicAudit\",\n    \"epistemicContracts\",\n    \"epistemicEdges\",\n    \"epistemicNodeEmbeddings\",\n    \"epistemicNodes\",\n    \"graphAnalysisCache\",\n    \"graphAnalysisResults\",\n    \"graphSuggestions\",\n    \"harnessReplays\",\n    \"harnessRuns\",\n    \"idempotencyTokens\",\n    \"lenses\",\n    \"lensTopicBindings\",\n    \"neo4jSyncQueue\",\n    \"ontologyDefinitions\",\n    \"ontologyVersions\",\n    \"platformAgentRunPolicyDecisions\",\n    \"platformAgentRunPromptResolutions\",\n    \"platformAgentRuns\",\n    \"platformAgentRunToolCalls\",\n    \"platformHarnessShadowAudit\",\n    \"publicationRules\",\n    \"questionEvidenceLinks\",\n    \"researchJobs\",\n    \"schemaEnumConfig\",\n    \"stakeholderGroups\",\n    \"systemLogs\",\n    \"tasks\",\n    \"topics\",\n    \"workflowDefinitions\",\n    \"workflowPullRequests\",\n    \"workflowStages\",\n    \"worktreeBeliefCluster\",\n    \"worktrees\"\n  ],\n  \"D\": [],\n  \"A\": []\n} as const;\n\nexport const TABLE_OWNERSHIP = {\n  \"agentMessages\": \"K\",\n  \"agentRegistryEntries\": \"L\",\n  \"agents\": \"I\",\n  \"agentSessions\": \"K\",\n  \"apiKeys\": \"L\",\n  \"auditLog\": \"L\",\n  \"autofixJobs\": \"K\",\n  \"backgroundJobRuns\": \"K\",\n  \"backgroundJobSettings\": \"K\",\n  \"beliefConfidence\": \"K\",\n  \"beliefEvidenceLinks\": \"K\",\n  \"beliefHistory\": \"K\",\n  \"beliefScenarios\": \"K\",\n  \"beliefVotes\": \"K\",\n  \"calibrationScores\": \"K\",\n  \"compatibilityShims\": \"L\",\n  \"contractEvaluations\": \"K\",\n  \"contradictions\": \"K\",\n  \"controlPlaneTenantModelSlotBindings\": \"L\",\n  \"controlPlaneTenantProviderSecrets\": \"L\",\n  \"controlPlaneTenantProxyGatewayUsage\": \"L\",\n  \"controlPlaneToolAcls\": \"L\",\n  \"crossProjectConnections\": \"K\",\n  \"cutoverFlags\": \"L\",\n  \"decisionComputedSummaries\": \"K\",\n  \"decisionEvents\": \"K\",\n  \"decisionParticipants\": \"K\",\n  \"decisionRiskLedger\": \"K\",\n  \"decisionSnapshots\": \"K\",\n  \"deliberationContributions\": \"K\",\n  \"deliberationSessions\": \"K\",\n  \"epistemicAudit\": \"K\",\n  \"epistemicContracts\": \"K\",\n  \"epistemicEdges\": \"K\",\n  \"epistemicNodeEmbeddings\": \"K\",\n  \"epistemicNodes\": \"K\",\n  \"graphAnalysisCache\": \"K\",\n  \"graphAnalysisResults\": \"K\",\n  \"graphSuggestions\": \"K\",\n  \"groupMemberships\": \"L\",\n  \"groups\": \"L\",\n  \"harnessReplays\": \"K\",\n  \"harnessRuns\": \"K\",\n  \"idempotencyTokens\": \"K\",\n  \"lenses\": \"K\",\n  \"lensTopicBindings\": \"K\",\n  \"mcpWritePolicy\": \"I\",\n  \"memberships\": \"L\",\n  \"methodologyPacks\": \"L\",\n  \"modelCallLogs\": \"I\",\n  \"modelFunctionSlots\": \"I\",\n  \"modelRegistry\": \"I\",\n  \"modelSlotConfigs\": \"I\",\n  \"neo4jSyncQueue\": \"K\",\n  \"ontologyDefinitions\": \"K\",\n  \"ontologyVersions\": \"K\",\n  \"packAssignments\": \"L\",\n  \"packDefinitions\": \"L\",\n  \"packEntitlements\": \"L\",\n  \"packGroupAssignments\": \"L\",\n  \"packInstallations\": \"L\",\n  \"packVersions\": \"L\",\n  \"platformAgentRunPolicyDecisions\": \"K\",\n  \"platformAgentRunPromptResolutions\": \"K\",\n  \"platformAgentRuns\": \"K\",\n  \"platformAgentRunToolCalls\": \"K\",\n  \"platformAudienceGrants\": \"I\",\n  \"platformAudiences\": \"I\",\n  \"platformHarnessShadowAudit\": \"K\",\n  \"platformPolicyDecisionLogs\": \"I\",\n  \"policyBundles\": \"L\",\n  \"policyDecisionLogs\": \"L\",\n  \"policySimulations\": \"L\",\n  \"principals\": \"L\",\n  \"projectGrants\": \"I\",\n  \"publicationRules\": \"K\",\n  \"questionEvidenceLinks\": \"K\",\n  \"rateLimitWindows\": \"L\",\n  \"reasoningPermissions\": \"I\",\n  \"researchJobs\": \"K\",\n  \"schemaEnumConfig\": \"K\",\n  \"servicePrincipalKeys\": \"L\",\n  \"stakeholderGroups\": \"K\",\n  \"systemLogs\": \"K\",\n  \"tasks\": \"K\",\n  \"tenantApiKeys\": \"I\",\n  \"tenantConfig\": \"I\",\n  \"tenantDeploymentCredentials\": \"L\",\n  \"tenantIntegrations\": \"I\",\n  \"tenantMethodologyAssignments\": \"L\",\n  \"tenantModelSlotBindings\": \"I\",\n  \"tenantPolicies\": \"I\",\n  \"tenantProviderSecrets\": \"I\",\n  \"tenantProxyGatewayUsage\": \"I\",\n  \"tenantProxyTokenMints\": \"I\",\n  \"tenants\": \"L\",\n  \"tenantSandboxAuditEvents\": \"I\",\n  \"tenantSecrets\": \"I\",\n  \"toolAcls\": \"I\",\n  \"toolCatalog\": \"L\",\n  \"toolRegistry\": \"I\",\n  \"toolRegistryEntries\": \"L\",\n  \"topics\": \"K\",\n  \"users\": \"I\",\n  \"userSessions\": \"L\",\n  \"workflowDefinitions\": \"K\",\n  \"workflowPullRequests\": \"K\",\n  \"workflowStages\": \"K\",\n  \"workspaces\": \"L\",\n  \"worktreeBeliefCluster\": \"K\",\n  \"worktrees\": \"K\",\n} as const satisfies Readonly<Record<string, TableOwnershipLayer>>;\n\nexport type GeneratedTableName = keyof typeof TABLE_OWNERSHIP;\n\nexport function classifyTableOwnership(\n  tableName: string\n): TableOwnershipLayer | null {\n  return TABLE_OWNERSHIP[tableName as GeneratedTableName] ?? null;\n}\n\nexport function listTablesByOwnership(\n  layer: TableOwnershipLayer\n): readonly string[] {\n  return TABLES_BY_LAYER[layer];\n}\n\nexport function summarizeTableOwnership(\n  tableNames: readonly string[]\n): Record<TableOwnershipLayer, number> {\n  const summary: Record<TableOwnershipLayer, number> = {\n    L: 0,\n    I: 0,\n    K: 0,\n    D: 0,\n    A: 0,\n  };\n  for (const name of tableNames) {\n    const layer = classifyTableOwnership(name);\n    if (layer) {\n      summary[layer] += 1;\n    }\n  }\n  return summary;\n}\n\nexport function assertTableOwnershipCoverage(tableNames: readonly string[]): void {\n  const missing = tableNames.filter((name) => !classifyTableOwnership(name));\n  const tableNameSet = new Set(tableNames);\n  const extras = Object.keys(TABLE_OWNERSHIP).filter(\n    (name) => !tableNameSet.has(name)\n  );\n  if (missing.length > 0 || extras.length > 0) {\n    const lines: string[] = [];\n    if (missing.length > 0) {\n      lines.push(`Missing ownership classification: ${missing.join(\", \")}`);\n    }\n    if (extras.length > 0) {\n      lines.push(`Ownership map contains unknown tables: ${extras.join(\", \")}`);\n    }\n    throw new Error(lines.join(\"\\n\"));\n  }\n}\n"]}
+{"version":3,"sources":["../../src/generated/tableOwnership.ts"],"names":[],"mappings":";AAIO,IAAM,eAAA,GAAkB;AAAA,EAC7B,GAAA,EAAK;AAAA,IACH,sBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,oBAAA;AAAA,IACA,qCAAA;AAAA,IACA,mCAAA;AAAA,IACA,qCAAA;AAAA,IACA,sBAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA,kBAAA;AAAA,IACA,kBAAA;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,kBAAA;AAAA,IACA,sBAAA;AAAA,IACA,mBAAA;AAAA,IACA,cAAA;AAAA,IACA,eAAA;AAAA,IACA,oBAAA;AAAA,IACA,mBAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA,sBAAA;AAAA,IACA,6BAAA;AAAA,IACA,8BAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA,qBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,QAAA;AAAA,IACA,gBAAA;AAAA,IACA,eAAA;AAAA,IACA,oBAAA;AAAA,IACA,eAAA;AAAA,IACA,kBAAA;AAAA,IACA,wBAAA;AAAA,IACA,mBAAA;AAAA,IACA,4BAAA;AAAA,IACA,eAAA;AAAA,IACA,sBAAA;AAAA,IACA,eAAA;AAAA,IACA,cAAA;AAAA,IACA,oBAAA;AAAA,IACA,yBAAA;AAAA,IACA,gBAAA;AAAA,IACA,uBAAA;AAAA,IACA,yBAAA;AAAA,IACA,uBAAA;AAAA,IACA,0BAAA;AAAA,IACA,eAAA;AAAA,IACA,UAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,eAAA;AAAA,IACA,eAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,uBAAA;AAAA,IACA,kBAAA;AAAA,IACA,qBAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,qBAAA;AAAA,IACA,gBAAA;AAAA,IACA,yBAAA;AAAA,IACA,2BAAA;AAAA,IACA,gBAAA;AAAA,IACA,sBAAA;AAAA,IACA,oBAAA;AAAA,IACA,mBAAA;AAAA,IACA,2BAAA;AAAA,IACA,sBAAA;AAAA,IACA,gBAAA;AAAA,IACA,oBAAA;AAAA,IACA,gBAAA;AAAA,IACA,yBAAA;AAAA,IACA,gBAAA;AAAA,IACA,oBAAA;AAAA,IACA,sBAAA;AAAA,IACA,kBAAA;AAAA,IACA,gBAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,QAAA;AAAA,IACA,mBAAA;AAAA,IACA,gBAAA;AAAA,IACA,qBAAA;AAAA,IACA,kBAAA;AAAA,IACA,iCAAA;AAAA,IACA,mCAAA;AAAA,IACA,mBAAA;AAAA,IACA,2BAAA;AAAA,IACA,4BAAA;AAAA,IACA,kBAAA;AAAA,IACA,uBAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,mBAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA;AAAA,IACA,qBAAA;AAAA,IACA,sBAAA;AAAA,IACA,gBAAA;AAAA,IACA,uBAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,KAAK,EAAC;AAAA,EACN,KAAK;AACP;AAEO,IAAM,eAAA,GAAkB;AAAA,EAC7B,eAAA,EAAiB,GAAA;AAAA,EACjB,sBAAA,EAAwB,GAAA;AAAA,EACxB,QAAA,EAAU,GAAA;AAAA,EACV,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,eAAA,EAAiB,GAAA;AAAA,EACjB,iBAAA,EAAmB,GAAA;AAAA,EACnB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,oBAAA,EAAsB,GAAA;AAAA,EACtB,qBAAA,EAAuB,GAAA;AAAA,EACvB,gBAAA,EAAkB,GAAA;AAAA,EAClB,qCAAA,EAAuC,GAAA;AAAA,EACvC,mCAAA,EAAqC,GAAA;AAAA,EACrC,qCAAA,EAAuC,GAAA;AAAA,EACvC,sBAAA,EAAwB,GAAA;AAAA,EACxB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,cAAA,EAAgB,GAAA;AAAA,EAChB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,gBAAA,EAAkB,GAAA;AAAA,EAClB,sBAAA,EAAwB,GAAA;AAAA,EACxB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,gBAAA,EAAkB,GAAA;AAAA,EAClB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,oBAAA,EAAsB,GAAA;AAAA,EACtB,sBAAA,EAAwB,GAAA;AAAA,EACxB,kBAAA,EAAoB,GAAA;AAAA,EACpB,kBAAA,EAAoB,GAAA;AAAA,EACpB,QAAA,EAAU,GAAA;AAAA,EACV,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,mBAAA,EAAqB,GAAA;AAAA,EACrB,QAAA,EAAU,GAAA;AAAA,EACV,mBAAA,EAAqB,GAAA;AAAA,EACrB,gBAAA,EAAkB,GAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,kBAAA,EAAoB,GAAA;AAAA,EACpB,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,gBAAA,EAAkB,GAAA;AAAA,EAClB,kBAAA,EAAoB,GAAA;AAAA,EACpB,qBAAA,EAAuB,GAAA;AAAA,EACvB,kBAAA,EAAoB,GAAA;AAAA,EACpB,iBAAA,EAAmB,GAAA;AAAA,EACnB,iBAAA,EAAmB,GAAA;AAAA,EACnB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,cAAA,EAAgB,GAAA;AAAA,EAChB,iCAAA,EAAmC,GAAA;AAAA,EACnC,mCAAA,EAAqC,GAAA;AAAA,EACrC,mBAAA,EAAqB,GAAA;AAAA,EACrB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,wBAAA,EAA0B,GAAA;AAAA,EAC1B,mBAAA,EAAqB,GAAA;AAAA,EACrB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,4BAAA,EAA8B,GAAA;AAAA,EAC9B,eAAA,EAAiB,GAAA;AAAA,EACjB,oBAAA,EAAsB,GAAA;AAAA,EACtB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,eAAA,EAAiB,GAAA;AAAA,EACjB,kBAAA,EAAoB,GAAA;AAAA,EACpB,uBAAA,EAAyB,GAAA;AAAA,EACzB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,sBAAA,EAAwB,GAAA;AAAA,EACxB,mBAAA,EAAqB,GAAA;AAAA,EACrB,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,GAAA;AAAA,EACT,eAAA,EAAiB,GAAA;AAAA,EACjB,cAAA,EAAgB,GAAA;AAAA,EAChB,6BAAA,EAA+B,GAAA;AAAA,EAC/B,oBAAA,EAAsB,GAAA;AAAA,EACtB,8BAAA,EAAgC,GAAA;AAAA,EAChC,yBAAA,EAA2B,GAAA;AAAA,EAC3B,gBAAA,EAAkB,GAAA;AAAA,EAClB,uBAAA,EAAyB,GAAA;AAAA,EACzB,yBAAA,EAA2B,GAAA;AAAA,EAC3B,uBAAA,EAAyB,GAAA;AAAA,EACzB,SAAA,EAAW,GAAA;AAAA,EACX,0BAAA,EAA4B,GAAA;AAAA,EAC5B,eAAA,EAAiB,GAAA;AAAA,EACjB,UAAA,EAAY,GAAA;AAAA,EACZ,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,QAAA,EAAU,GAAA;AAAA,EACV,OAAA,EAAS,GAAA;AAAA,EACT,cAAA,EAAgB,GAAA;AAAA,EAChB,qBAAA,EAAuB,GAAA;AAAA,EACvB,sBAAA,EAAwB,GAAA;AAAA,EACxB,gBAAA,EAAkB,GAAA;AAAA,EAClB,YAAA,EAAc,GAAA;AAAA,EACd,uBAAA,EAAyB,GAAA;AAAA,EACzB,WAAA,EAAa;AACf;AAIO,SAAS,uBACd,SAAA,EAC4B;AAC5B,EAAA,OAAO,eAAA,CAAgB,SAA+B,CAAA,IAAK,IAAA;AAC7D;AAEO,SAAS,sBACd,KAAA,EACmB;AACnB,EAAA,OAAO,gBAAgB,KAAK,CAAA;AAC9B;AAEO,SAAS,wBACd,UAAA,EACqC;AACrC,EAAA,MAAM,OAAA,GAA+C;AAAA,IACnD,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG,CAAA;AAAA,IACH,CAAA,EAAG;AAAA,GACL;AACA,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,MAAM,KAAA,GAAQ,uBAAuB,IAAI,CAAA;AACzC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,CAAA,IAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,6BAA6B,UAAA,EAAqC;AAChF,EAAA,MAAM,OAAA,GAAU,WAAW,MAAA,CAAO,CAAC,SAAS,CAAC,sBAAA,CAAuB,IAAI,CAAC,CAAA;AACzE,EAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,UAAU,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,CAAE,MAAA;AAAA,IAC1C,CAAC,IAAA,KAAS,CAAC,YAAA,CAAa,IAAI,IAAI;AAAA,GAClC;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,SAAS,CAAA,EAAG;AAC3C,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,KAAA,CAAM,KAAK,CAAA,kCAAA,EAAqC,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IACtE;AACA,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,CAAM,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,EAClC;AACF","file":"tableOwnership.js","sourcesContent":["/* GENERATED by scripts/generate-contract-schema.ts. DO NOT EDIT. */\n\nexport type TableOwnershipLayer = \"L\" | \"I\" | \"K\" | \"D\" | \"A\";\n\nexport const TABLES_BY_LAYER = {\n  \"L\": [\n    \"agentRegistryEntries\",\n    \"apiKeys\",\n    \"auditLog\",\n    \"compatibilityShims\",\n    \"controlPlaneTenantModelSlotBindings\",\n    \"controlPlaneTenantProviderSecrets\",\n    \"controlPlaneTenantProxyGatewayUsage\",\n    \"controlPlaneToolAcls\",\n    \"cutoverFlags\",\n    \"groupMemberships\",\n    \"groups\",\n    \"memberships\",\n    \"methodologyPacks\",\n    \"oauthDeviceCodes\",\n    \"packAssignments\",\n    \"packDefinitions\",\n    \"packEntitlements\",\n    \"packGroupAssignments\",\n    \"packInstallations\",\n    \"packVersions\",\n    \"policyBundles\",\n    \"policyDecisionLogs\",\n    \"policySimulations\",\n    \"principals\",\n    \"rateLimitWindows\",\n    \"servicePrincipalKeys\",\n    \"tenantDeploymentCredentials\",\n    \"tenantMethodologyAssignments\",\n    \"tenants\",\n    \"toolCatalog\",\n    \"toolRegistryEntries\",\n    \"userSessions\",\n    \"workspaces\"\n  ],\n  \"I\": [\n    \"agents\",\n    \"mcpWritePolicy\",\n    \"modelCallLogs\",\n    \"modelFunctionSlots\",\n    \"modelRegistry\",\n    \"modelSlotConfigs\",\n    \"platformAudienceGrants\",\n    \"platformAudiences\",\n    \"platformPolicyDecisionLogs\",\n    \"projectGrants\",\n    \"reasoningPermissions\",\n    \"tenantApiKeys\",\n    \"tenantConfig\",\n    \"tenantIntegrations\",\n    \"tenantModelSlotBindings\",\n    \"tenantPolicies\",\n    \"tenantProviderSecrets\",\n    \"tenantProxyGatewayUsage\",\n    \"tenantProxyTokenMints\",\n    \"tenantSandboxAuditEvents\",\n    \"tenantSecrets\",\n    \"toolAcls\",\n    \"toolRegistry\",\n    \"users\"\n  ],\n  \"K\": [\n    \"agentMessages\",\n    \"agentSessions\",\n    \"autofixJobs\",\n    \"backgroundJobRuns\",\n    \"backgroundJobSettings\",\n    \"beliefConfidence\",\n    \"beliefEvidenceLinks\",\n    \"beliefHistory\",\n    \"beliefScenarios\",\n    \"beliefVotes\",\n    \"calibrationScores\",\n    \"contractEvaluations\",\n    \"contradictions\",\n    \"crossProjectConnections\",\n    \"decisionComputedSummaries\",\n    \"decisionEvents\",\n    \"decisionParticipants\",\n    \"decisionRiskLedger\",\n    \"decisionSnapshots\",\n    \"deliberationContributions\",\n    \"deliberationSessions\",\n    \"epistemicAudit\",\n    \"epistemicContracts\",\n    \"epistemicEdges\",\n    \"epistemicNodeEmbeddings\",\n    \"epistemicNodes\",\n    \"graphAnalysisCache\",\n    \"graphAnalysisResults\",\n    \"graphSuggestions\",\n    \"harnessReplays\",\n    \"harnessRuns\",\n    \"idempotencyTokens\",\n    \"lenses\",\n    \"lensTopicBindings\",\n    \"neo4jSyncQueue\",\n    \"ontologyDefinitions\",\n    \"ontologyVersions\",\n    \"platformAgentRunPolicyDecisions\",\n    \"platformAgentRunPromptResolutions\",\n    \"platformAgentRuns\",\n    \"platformAgentRunToolCalls\",\n    \"platformHarnessShadowAudit\",\n    \"publicationRules\",\n    \"questionEvidenceLinks\",\n    \"researchJobs\",\n    \"schemaEnumConfig\",\n    \"stakeholderGroups\",\n    \"systemLogs\",\n    \"tasks\",\n    \"topics\",\n    \"workflowDefinitions\",\n    \"workflowPullRequests\",\n    \"workflowStages\",\n    \"worktreeBeliefCluster\",\n    \"worktrees\"\n  ],\n  \"D\": [],\n  \"A\": []\n} as const;\n\nexport const TABLE_OWNERSHIP = {\n  \"agentMessages\": \"K\",\n  \"agentRegistryEntries\": \"L\",\n  \"agents\": \"I\",\n  \"agentSessions\": \"K\",\n  \"apiKeys\": \"L\",\n  \"auditLog\": \"L\",\n  \"autofixJobs\": \"K\",\n  \"backgroundJobRuns\": \"K\",\n  \"backgroundJobSettings\": \"K\",\n  \"beliefConfidence\": \"K\",\n  \"beliefEvidenceLinks\": \"K\",\n  \"beliefHistory\": \"K\",\n  \"beliefScenarios\": \"K\",\n  \"beliefVotes\": \"K\",\n  \"calibrationScores\": \"K\",\n  \"compatibilityShims\": \"L\",\n  \"contractEvaluations\": \"K\",\n  \"contradictions\": \"K\",\n  \"controlPlaneTenantModelSlotBindings\": \"L\",\n  \"controlPlaneTenantProviderSecrets\": \"L\",\n  \"controlPlaneTenantProxyGatewayUsage\": \"L\",\n  \"controlPlaneToolAcls\": \"L\",\n  \"crossProjectConnections\": \"K\",\n  \"cutoverFlags\": \"L\",\n  \"decisionComputedSummaries\": \"K\",\n  \"decisionEvents\": \"K\",\n  \"decisionParticipants\": \"K\",\n  \"decisionRiskLedger\": \"K\",\n  \"decisionSnapshots\": \"K\",\n  \"deliberationContributions\": \"K\",\n  \"deliberationSessions\": \"K\",\n  \"epistemicAudit\": \"K\",\n  \"epistemicContracts\": \"K\",\n  \"epistemicEdges\": \"K\",\n  \"epistemicNodeEmbeddings\": \"K\",\n  \"epistemicNodes\": \"K\",\n  \"graphAnalysisCache\": \"K\",\n  \"graphAnalysisResults\": \"K\",\n  \"graphSuggestions\": \"K\",\n  \"groupMemberships\": \"L\",\n  \"groups\": \"L\",\n  \"harnessReplays\": \"K\",\n  \"harnessRuns\": \"K\",\n  \"idempotencyTokens\": \"K\",\n  \"lenses\": \"K\",\n  \"lensTopicBindings\": \"K\",\n  \"mcpWritePolicy\": \"I\",\n  \"memberships\": \"L\",\n  \"methodologyPacks\": \"L\",\n  \"modelCallLogs\": \"I\",\n  \"modelFunctionSlots\": \"I\",\n  \"modelRegistry\": \"I\",\n  \"modelSlotConfigs\": \"I\",\n  \"neo4jSyncQueue\": \"K\",\n  \"oauthDeviceCodes\": \"L\",\n  \"ontologyDefinitions\": \"K\",\n  \"ontologyVersions\": \"K\",\n  \"packAssignments\": \"L\",\n  \"packDefinitions\": \"L\",\n  \"packEntitlements\": \"L\",\n  \"packGroupAssignments\": \"L\",\n  \"packInstallations\": \"L\",\n  \"packVersions\": \"L\",\n  \"platformAgentRunPolicyDecisions\": \"K\",\n  \"platformAgentRunPromptResolutions\": \"K\",\n  \"platformAgentRuns\": \"K\",\n  \"platformAgentRunToolCalls\": \"K\",\n  \"platformAudienceGrants\": \"I\",\n  \"platformAudiences\": \"I\",\n  \"platformHarnessShadowAudit\": \"K\",\n  \"platformPolicyDecisionLogs\": \"I\",\n  \"policyBundles\": \"L\",\n  \"policyDecisionLogs\": \"L\",\n  \"policySimulations\": \"L\",\n  \"principals\": \"L\",\n  \"projectGrants\": \"I\",\n  \"publicationRules\": \"K\",\n  \"questionEvidenceLinks\": \"K\",\n  \"rateLimitWindows\": \"L\",\n  \"reasoningPermissions\": \"I\",\n  \"researchJobs\": \"K\",\n  \"schemaEnumConfig\": \"K\",\n  \"servicePrincipalKeys\": \"L\",\n  \"stakeholderGroups\": \"K\",\n  \"systemLogs\": \"K\",\n  \"tasks\": \"K\",\n  \"tenantApiKeys\": \"I\",\n  \"tenantConfig\": \"I\",\n  \"tenantDeploymentCredentials\": \"L\",\n  \"tenantIntegrations\": \"I\",\n  \"tenantMethodologyAssignments\": \"L\",\n  \"tenantModelSlotBindings\": \"I\",\n  \"tenantPolicies\": \"I\",\n  \"tenantProviderSecrets\": \"I\",\n  \"tenantProxyGatewayUsage\": \"I\",\n  \"tenantProxyTokenMints\": \"I\",\n  \"tenants\": \"L\",\n  \"tenantSandboxAuditEvents\": \"I\",\n  \"tenantSecrets\": \"I\",\n  \"toolAcls\": \"I\",\n  \"toolCatalog\": \"L\",\n  \"toolRegistry\": \"I\",\n  \"toolRegistryEntries\": \"L\",\n  \"topics\": \"K\",\n  \"users\": \"I\",\n  \"userSessions\": \"L\",\n  \"workflowDefinitions\": \"K\",\n  \"workflowPullRequests\": \"K\",\n  \"workflowStages\": \"K\",\n  \"workspaces\": \"L\",\n  \"worktreeBeliefCluster\": \"K\",\n  \"worktrees\": \"K\",\n} as const satisfies Readonly<Record<string, TableOwnershipLayer>>;\n\nexport type GeneratedTableName = keyof typeof TABLE_OWNERSHIP;\n\nexport function classifyTableOwnership(\n  tableName: string\n): TableOwnershipLayer | null {\n  return TABLE_OWNERSHIP[tableName as GeneratedTableName] ?? null;\n}\n\nexport function listTablesByOwnership(\n  layer: TableOwnershipLayer\n): readonly string[] {\n  return TABLES_BY_LAYER[layer];\n}\n\nexport function summarizeTableOwnership(\n  tableNames: readonly string[]\n): Record<TableOwnershipLayer, number> {\n  const summary: Record<TableOwnershipLayer, number> = {\n    L: 0,\n    I: 0,\n    K: 0,\n    D: 0,\n    A: 0,\n  };\n  for (const name of tableNames) {\n    const layer = classifyTableOwnership(name);\n    if (layer) {\n      summary[layer] += 1;\n    }\n  }\n  return summary;\n}\n\nexport function assertTableOwnershipCoverage(tableNames: readonly string[]): void {\n  const missing = tableNames.filter((name) => !classifyTableOwnership(name));\n  const tableNameSet = new Set(tableNames);\n  const extras = Object.keys(TABLE_OWNERSHIP).filter(\n    (name) => !tableNameSet.has(name)\n  );\n  if (missing.length > 0 || extras.length > 0) {\n    const lines: string[] = [];\n    if (missing.length > 0) {\n      lines.push(`Missing ownership classification: ${missing.join(\", \")}`);\n    }\n    if (extras.length > 0) {\n      lines.push(`Ownership map contains unknown tables: ${extras.join(\", \")}`);\n    }\n    throw new Error(lines.join(\"\\n\"));\n  }\n}\n"]}

package/dist/generated/tier-expectations.json

@@ -201,7 +201,7 @@
       "components": [
         "mc"
       ],
-      "tableCount": 32,
+      "tableCount": 33,
       "tables": [
         "agentRegistryEntries",
         "apiKeys",
@@ -216,6 +216,7 @@
         "groups",
         "memberships",
         "methodologyPacks",
+        "oauthDeviceCodes",
         "packAssignments",
         "packDefinitions",
         "packEntitlements",
@@ -244,7 +245,7 @@
         "kernel",
         "developer-pack"
       ],
-      "tableCount": 111,
+      "tableCount": 112,
       "tables": [
         "agentMessages",
         "agentRegistryEntries",
@@ -300,6 +301,7 @@
         "modelRegistry",
         "modelSlotConfigs",
         "neo4jSyncQueue",
+        "oauthDeviceCodes",
         "ontologyDefinitions",
         "ontologyVersions",
         "packAssignments",

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { BELIEF_STATUSES, BRANCH_STATUSES, BeliefStatus, BranchStatus, CONFIDENCE_TRIGGERS, CONTRADICTION_SEVERITIES, CONTRADICTION_STATUSES, ConfidenceTrigger, ContradictionSeverity, ContradictionStatus, DEFEAT_TYPES, DefeatType, EPISTEMIC_LAYERS, EpistemicLayer, FORK_REASONS, ForkReason, INTEGRATION_EDGE_TYPES, IntegrationEdgeType, JUDGMENT_TYPES, JudgmentType, MERGE_OUTCOMES, MergeOutcome, PULL_REQUEST_STATUSES, PullRequestStatus, REASONING_METHODS, ReasoningMethod, WORKTREE_PHASES, WorktreePhase } from './api-enums.contract.js';
 export { AuthContext, LucernSdkClient, McpTransportKind, SESSION_AUTH_MODES, SESSION_LIFECYCLE_STATUSES, SESSION_PRINCIPAL_TYPES, SessionAuditEnvelope, SessionAuditOutcome, SessionAuthMode, SessionDelegationHop, SessionLifecycleStatus, SessionPrincipalType, inferSessionPrincipalType, lastDelegator, normalizeDelegationChain } from './auth.contract.js';
+export { COMPONENT_BOUNDARY_COMPONENT_LAYERS, COMPONENT_BOUNDARY_CONTRACT_VERSION, COMPONENT_BOUNDARY_DIRECT_DB_METHODS, COMPONENT_BOUNDARY_HIGH_RISK_TABLES, COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS, ComponentBoundaryComponentLayer, ComponentBoundaryDirectDbMethod, ComponentBoundaryHighRiskTable, getComponentBoundaryTableLayer, isComponentBoundaryComponentOwnedTable } from './component-boundary.contract.js';
 export { ConvexAdminClient } from './convex-admin.contract.js';
 export { CutoverDomain, CutoverFlagState, GatewayAuthContext, GatewayAuthMode, GatewayEnvironment, GatewayErrorArgs, GatewayScope, GatewaySuccessArgs, KeyLifecycleStatus, PlatformApiErrorCode, requireActorPrincipalId } from './gateway.contract.js';
 export { BELIEF_TYPE_BONUS, BeliefLatticeSeed, CONTEXT_PACK_SCHEMA_VERSION, CONTEXT_PACK_SECTION_KEYS, CONTEXT_RANKING_PROFILES, ContextCompilationMode, ContextPackBelief, ContextPackContradiction, ContextPackDeltaReport, ContextPackDiagnostics, ContextPackEntity, ContextPackEvidence, ContextPackFailure, ContextPackFailureContext, ContextPackInjectionPolicy, ContextPackQuestion, ContextPackRequestV1, ContextPackSectionKey, ContextPackSummary, ContextPackV1, ContextRankingProfile, DEFAULT_BELIEF_TYPE_BONUS, DEFAULT_COMPILATION_MODE, DEFAULT_ENTITY_LIMIT, DEFAULT_PRIORITY_SCORE, DEFAULT_RANKING_PROFILE, DEFAULT_SECTION_LIMIT, DEFAULT_SEVERITY_SCORE, DEFAULT_TOKEN_BUDGET, ENTITY_RANKING_WEIGHTS, MAX_ENTITY_LIMIT, MAX_SECTION_LIMIT, MAX_TOKEN_BUDGET, MIN_CONTRADICTION_BUDGET, MIN_TOKEN_BUDGET, MIN_TOKEN_ESTIMATE, PRIORITY_SCORES, PackWeightOverride, PublicCompiledContext, PublicContextBelief, PublicContextContradiction, PublicContextEntity, PublicContextEvidence, PublicContextInjectionPolicy, PublicContextQuestion, RANKING_WEIGHTS, RECENCY_HALF_LIFE_DAYS, RESOLVED_QUESTION_STATUSES, RankingWeightVector, SECTION_BUDGET_RATIOS, SEVERITY_SCORES, TOKENS_PER_WORD, VerificationObligation } from './context-pack.contract.js';
@@ -11,6 +12,8 @@ export { ComponentTableManifest, ComponentTableManifestSchema } from './schemas/
 export { SLOpinionInput, SLOpinionInputSchema } from './schemas/sl-opinion.js';
 import * as zod from 'zod';
 import { z } from 'zod';
+import { TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS } from './tenant-client.contract.js';
+export { TenantClientAllowedImport, TenantClientAuthMode, TenantClientCapability, TenantClientCapabilityId, TenantClientComponentConfigImport, TenantClientForbiddenImportPattern, TenantClientForbiddenImportPatternId, TenantClientForbiddenInstallTokenInfisicalPath, TenantClientForbiddenSecretEnv, TenantClientImportClassification, TenantClientImportDecision, TenantClientInstallablePackage, TenantClientInstallablePackageName, TenantClientIsolationRule, TenantClientOptionalContextField, TenantClientPackageRole, TenantClientPrincipalType, TenantClientPublicImport, TenantClientPublicPackage, TenantClientPublicSurface, TenantClientRequiredContextField, TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport } from './tenant-client.contract.js';
 export * from './function-registry/index.js';
 export { t as mcpToolsContract } from './tool-contracts-C92-9ueT.js';
 export { EntityConnectionMatch, EntityMatchCandidate, EntityTypeMatch, OntologyEntityType, rankEntityConnections, rankEntityTypeMatches, scoreEntityConnection, scoreEntityTypeMatch } from './v1/ontologies/v1.js';
@@ -20,6 +23,7 @@ export { s as sdkToolsContract } from './sdk-tools.contract-S4ia0TTo.js';
 export { LexicalRerankOptions, LexicalSignal, LexicalStrategy, PreparedLexicalQuery, bigramTokenize, jaccardSimilarity, prepareLexicalQuery, rankWindowScore, rerankLexicalWindow, scoreLexicalSignal, scoreLexicalSignals, stemToken, tokenOverlapScore, tokenizeSearchText, wordOverlapScore, wordTokenize } from './text-matching.contract.js';
 export { ROOT_TOPIC_ID, TopicDoc, collectTopicNeighborhood } from './v1/topics/v1.js';
 export { CANONICAL_WORKFLOW_DEFINITIONS, DEFAULT_TIER_APPROVAL_MODE, DEFAULT_WORKFLOW_AUTO_FIX_POLICY, EngineeringBriefOutput, InboxSummaryOutput, MORNING_BRIEF_WORKFLOW_ID, NIGHTLY_RECONCILIATION_WORKFLOW_ID, PipelineBriefOutput, ResearchMemoOutput, StrategyArtifactOutput, StructuredPayloadOutput, WORKFLOW_ACTION_KINDS, WORKFLOW_APPROVAL_MODES, WORKFLOW_AUTO_FIX_MODES, WORKFLOW_HOOK_EVENTS, WORKFLOW_INTEGRITY_CHECKS, WORKFLOW_MUTATION_TIERS, WORKFLOW_OUTPUT_KINDS, WORKFLOW_PROOF_ARTIFACT_KINDS, WORKFLOW_RUNTIME_SCHEMA_VERSION, WORKFLOW_RUN_STATUSES, WORKFLOW_STAFFING_HINTS, WORKFLOW_TRIGGER_KINDS, WorkflowActionContract, WorkflowActionKind, WorkflowApprovalMode, WorkflowApprovalPolicy, WorkflowAutoFixMode, WorkflowAutoFixPolicy, WorkflowDefinitionV1, WorkflowHookContract, WorkflowHookEvent, WorkflowIntegrityCheckId, WorkflowMutationTier, WorkflowOutputBase, WorkflowOutputContract, WorkflowOutputKind, WorkflowProofArtifact, WorkflowProofArtifactKind, WorkflowRunReceiptV1, WorkflowRunStatus, WorkflowStaffingHint, WorkflowTriggerContract, WorkflowTriggerKind } from './workflow-runtime.contract.js';
+import './generated/tableOwnership.js';
 import './defineFunction-DO97DKs4.js';
 import './defineTable-CBQ03FXl.js';
 import './idOf-DR8tkhQS.js';
@@ -431,4 +435,257 @@ declare const InvariantManifestSchema: z.ZodObject<{
 }>;
 type InvariantManifest = z.infer<typeof InvariantManifestSchema>;
 
-export { type CheckContext, type CheckerKind, type EdgePolicyEntry, EdgePolicyEntrySchema, type EdgePolicyManifest, EdgePolicyManifestSchema, type EdgePolicyViolation, type EpistemicNodeType, EpistemicNodeTypeSchema, type GraphRef, GraphRefSchema, type InvariantId, type InvariantManifest, InvariantManifestSchema, type InvariantResult, type InvariantRule, type InvariantSeverity, type ProjectionDef, type ProjectionRegistry, assertEdgePolicyAllowed, createEvidenceProjection, defineProjection, edgePolicyManifest, findEdgePolicy, listBeliefsProjection, listTasksProjection, modulateConfidenceProjection, projections };
+type TenantClientManifest = {
+    readonly manifestVersion: "1.0.0";
+    readonly contractVersion: typeof TENANT_CLIENT_CONTRACT_VERSION;
+    readonly auth: {
+        readonly modes: typeof TENANT_CLIENT_AUTH_MODES;
+        readonly principalTypes: typeof TENANT_CLIENT_PRINCIPAL_TYPES;
+        readonly requiredContextFields: typeof TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS;
+        readonly optionalContextFields: typeof TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS;
+    };
+    readonly installToken: {
+        readonly env: typeof TENANT_CLIENT_INSTALL_TOKEN_ENV;
+        readonly infisicalPath: typeof TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH;
+        readonly forbiddenInfisicalPaths: typeof TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS;
+        readonly forbiddenSecretEnv: typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV;
+    };
+    readonly packages: {
+        readonly installable: typeof TENANT_CLIENT_INSTALLABLE_PACKAGES;
+        readonly directImports: typeof TENANT_CLIENT_PUBLIC_IMPORTS;
+        readonly componentConfigImports: typeof TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS;
+    };
+    readonly sdk: {
+        readonly requiredNamespaces: typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES;
+    };
+    readonly capabilities: typeof TENANT_CLIENT_CAPABILITIES;
+    readonly isolationRules: typeof TENANT_CLIENT_ISOLATION_RULES;
+    readonly forbiddenImportPatterns: typeof TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS;
+};
+declare const TENANT_CLIENT_MANIFEST: {
+    readonly manifestVersion: "1.0.0";
+    readonly contractVersion: "2026-04-27";
+    readonly auth: {
+        readonly modes: readonly ["interactive_user", "service_principal", "tenant_api_key", "session_token"];
+        readonly principalTypes: readonly ["human", "service", "agent"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+        readonly optionalContextFields: readonly ["principalType", "roles", "sessionId", "delegationChain"];
+    };
+    readonly installToken: {
+        readonly env: "INSTALL_LUCERN_NPM";
+        readonly infisicalPath: "tenants/shared";
+        readonly forbiddenInfisicalPaths: readonly ["/platform/publish"];
+        readonly forbiddenSecretEnv: readonly ["NPM_TOKEN"];
+    };
+    readonly packages: {
+        readonly installable: readonly [{
+            readonly packageName: "@lucern/access-control";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/agent";
+            readonly role: "platform_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/auth";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/cli";
+            readonly role: "developer_tool";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/client-core";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/confidence";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/config";
+            readonly role: "configuration";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/contracts";
+            readonly role: "contract_entrypoint";
+            readonly directTenantImport: true;
+        }, {
+            readonly packageName: "@lucern/control-plane";
+            readonly role: "platform_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/developer-kit";
+            readonly role: "developer_tool";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/events";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/graph-primitives";
+            readonly role: "sdk_dependency";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/identity";
+            readonly role: "component_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/mcp";
+            readonly role: "runtime_entrypoint";
+            readonly directTenantImport: true;
+        }, {
+            readonly packageName: "@lucern/pack-host";
+            readonly role: "platform_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/pack-installer";
+            readonly role: "developer_tool";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/proof-compiler";
+            readonly role: "developer_tool";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/react";
+            readonly role: "runtime_entrypoint";
+            readonly directTenantImport: true;
+        }, {
+            readonly packageName: "@lucern/reasoning-kernel";
+            readonly role: "component_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/sdk";
+            readonly role: "runtime_entrypoint";
+            readonly directTenantImport: true;
+        }, {
+            readonly packageName: "@lucern/server-core";
+            readonly role: "platform_runtime";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/testing";
+            readonly role: "test_support";
+            readonly directTenantImport: false;
+        }, {
+            readonly packageName: "@lucern/types";
+            readonly role: "contract_entrypoint";
+            readonly directTenantImport: true;
+        }];
+        readonly directImports: readonly [{
+            readonly packageName: "@lucern/sdk";
+            readonly surface: "runtime";
+            readonly subpaths: "published_exports";
+            readonly description: "TypeScript SDK runtime and generated operation namespaces.";
+        }, {
+            readonly packageName: "@lucern/react";
+            readonly surface: "runtime";
+            readonly subpaths: "published_exports";
+            readonly description: "React bindings for tenant-owned UI applications.";
+        }, {
+            readonly packageName: "@lucern/mcp";
+            readonly surface: "runtime";
+            readonly subpaths: "published_exports";
+            readonly description: "MCP client/server entry points and hosted route helpers.";
+        }, {
+            readonly packageName: "@lucern/contracts";
+            readonly surface: "contract";
+            readonly subpaths: "published_exports";
+            readonly description: "Published type and manifest contracts.";
+        }, {
+            readonly packageName: "@lucern/types";
+            readonly surface: "contract";
+            readonly subpaths: "published_exports";
+            readonly description: "Published type-only helpers for tenant integration code.";
+        }];
+        readonly componentConfigImports: readonly [{
+            readonly packageName: "@lucern/identity";
+            readonly importPath: "@lucern/identity/convex.config";
+            readonly surface: "component_config";
+            readonly description: "Convex component binding config for tenant deployments that install Lucern identity.";
+        }, {
+            readonly packageName: "@lucern/reasoning-kernel";
+            readonly importPath: "@lucern/reasoning-kernel/convex.config";
+            readonly surface: "component_config";
+            readonly description: "Convex component binding config for tenant deployments that install the Lucern reasoning kernel.";
+        }, {
+            readonly packageName: "@lucern/reasoning-kernel";
+            readonly importPath: "@lucern/reasoning-kernel/runtime.config";
+            readonly surface: "component_config";
+            readonly description: "Runtime config alias for tenant deployments that install the Lucern reasoning kernel.";
+        }];
+    };
+    readonly sdk: {
+        readonly requiredNamespaces: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
+    };
+    readonly capabilities: readonly [{
+        readonly id: "identity.bootstrap_session";
+        readonly description: "Start a scoped Lucern session for a tenant principal.";
+        readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+    }, {
+        readonly id: "reasoning.context.compile";
+        readonly description: "Compile tenant and workspace scoped reasoning context.";
+        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+    }, {
+        readonly id: "reasoning.graph.read";
+        readonly description: "Read beliefs, evidence, questions, topics, and lineage.";
+        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+    }, {
+        readonly id: "reasoning.graph.write";
+        readonly description: "Create and update graph objects through authorized APIs.";
+        readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+    }, {
+        readonly id: "workflow.worktree_lifecycle";
+        readonly description: "Create, review, merge, and close scoped worktrees.";
+        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
+        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+    }];
+    readonly isolationRules: readonly [{
+        readonly id: "tenant_workspace_scope_required";
+        readonly description: "Runtime operations must resolve both tenantId and workspaceId before reaching Lucern reasoning state.";
+    }, {
+        readonly id: "principal_audit_required";
+        readonly description: "Runtime operations must carry principalId, authMode, and scopes for audit attribution.";
+    }, {
+        readonly id: "no_private_lucern_imports";
+        readonly description: "Tenant code must not import Lucern source, Convex internals, generated adapters, or unpublished package internals.";
+    }];
+    readonly forbiddenImportPatterns: readonly [{
+        readonly id: "deep_src_import";
+        readonly pattern: "^@lucern/[^/]+/src(?:/|$)";
+        readonly description: "Published packages must not be bypassed through src paths.";
+    }, {
+        readonly id: "deep_dist_import";
+        readonly pattern: "^@lucern/[^/]+/dist(?:/|$)";
+        readonly description: "Published package exports must be used instead of dist file paths.";
+    }, {
+        readonly id: "generated_adapter_import";
+        readonly pattern: "^@lucern/[^/]+/(?:adapters/)?_generated(?:/|$)";
+        readonly description: "Generated Lucern adapters are internal deployment artifacts.";
+    }, {
+        readonly id: "private_runtime_import";
+        readonly pattern: "^@lucern/[^/]+/(?:internal|private)(?:/|$)";
+        readonly description: "Internal and private package subpaths are not public SDK API.";
+    }, {
+        readonly id: "workspace_source_import";
+        readonly pattern: "^(?:packages|modules|services|lucern|apps)/(?:.+/)?src(?:/|$)";
+        readonly description: "Tenant clients must not import source files from the Lucern monorepo.";
+    }, {
+        readonly id: "root_alias_lucern_import";
+        readonly pattern: "^@/(?:lucern|packages|modules|services|apps)(?:/|$)";
+        readonly description: "Tenant clients must not depend on Lucern repo-local path aliases.";
+    }, {
+        readonly id: "relative_lucern_source_import";
+        readonly pattern: "^\\.\\.?/(?:.+/)?(?:packages|modules|services|lucern|apps)(?:/|$)";
+        readonly description: "Tenant clients must not reach back into Lucern source through relative paths.";
+    }, {
+        readonly id: "monorepo_path_import";
+        readonly pattern: "lucern-repo";
+        readonly description: "Absolute imports that name the Lucern repository are not portable tenant code.";
+    }];
+};
+
+export { type CheckContext, type CheckerKind, type EdgePolicyEntry, EdgePolicyEntrySchema, type EdgePolicyManifest, EdgePolicyManifestSchema, type EdgePolicyViolation, type EpistemicNodeType, EpistemicNodeTypeSchema, type GraphRef, GraphRefSchema, type InvariantId, type InvariantManifest, InvariantManifestSchema, type InvariantResult, type InvariantRule, type InvariantSeverity, type ProjectionDef, type ProjectionRegistry, TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_MANIFEST, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientManifest, assertEdgePolicyAllowed, createEvidenceProjection, defineProjection, edgePolicyManifest, findEdgePolicy, listBeliefsProjection, listTasksProjection, modulateConfidenceProjection, projections };