@lucern/contracts 0.3.0-alpha.2 → 0.3.0-alpha.3

package/dist/index.js

@@ -224,6 +224,158 @@ function lastDelegator(delegationChain) {
   return delegationChain[delegationChain.length - 1]?.principalId;
 }
 
+// src/generated/tableOwnership.ts
+var TABLE_OWNERSHIP = {
+  "agentMessages": "K",
+  "agentRegistryEntries": "L",
+  "agents": "I",
+  "agentSessions": "K",
+  "apiKeys": "L",
+  "auditLog": "L",
+  "autofixJobs": "K",
+  "backgroundJobRuns": "K",
+  "backgroundJobSettings": "K",
+  "beliefConfidence": "K",
+  "beliefEvidenceLinks": "K",
+  "beliefHistory": "K",
+  "beliefScenarios": "K",
+  "beliefVotes": "K",
+  "calibrationScores": "K",
+  "compatibilityShims": "L",
+  "contractEvaluations": "K",
+  "contradictions": "K",
+  "controlPlaneTenantModelSlotBindings": "L",
+  "controlPlaneTenantProviderSecrets": "L",
+  "controlPlaneTenantProxyGatewayUsage": "L",
+  "controlPlaneToolAcls": "L",
+  "crossProjectConnections": "K",
+  "cutoverFlags": "L",
+  "decisionComputedSummaries": "K",
+  "decisionEvents": "K",
+  "decisionParticipants": "K",
+  "decisionRiskLedger": "K",
+  "decisionSnapshots": "K",
+  "deliberationContributions": "K",
+  "deliberationSessions": "K",
+  "epistemicAudit": "K",
+  "epistemicContracts": "K",
+  "epistemicEdges": "K",
+  "epistemicNodeEmbeddings": "K",
+  "epistemicNodes": "K",
+  "graphAnalysisCache": "K",
+  "graphAnalysisResults": "K",
+  "graphSuggestions": "K",
+  "groupMemberships": "L",
+  "groups": "L",
+  "harnessReplays": "K",
+  "harnessRuns": "K",
+  "idempotencyTokens": "K",
+  "lenses": "K",
+  "lensTopicBindings": "K",
+  "mcpWritePolicy": "I",
+  "memberships": "L",
+  "methodologyPacks": "L",
+  "modelCallLogs": "I",
+  "modelFunctionSlots": "I",
+  "modelRegistry": "I",
+  "modelSlotConfigs": "I",
+  "neo4jSyncQueue": "K",
+  "oauthDeviceCodes": "L",
+  "ontologyDefinitions": "K",
+  "ontologyVersions": "K",
+  "packAssignments": "L",
+  "packDefinitions": "L",
+  "packEntitlements": "L",
+  "packGroupAssignments": "L",
+  "packInstallations": "L",
+  "packVersions": "L",
+  "platformAgentRunPolicyDecisions": "K",
+  "platformAgentRunPromptResolutions": "K",
+  "platformAgentRuns": "K",
+  "platformAgentRunToolCalls": "K",
+  "platformAudienceGrants": "I",
+  "platformAudiences": "I",
+  "platformHarnessShadowAudit": "K",
+  "platformPolicyDecisionLogs": "I",
+  "policyBundles": "L",
+  "policyDecisionLogs": "L",
+  "policySimulations": "L",
+  "principals": "L",
+  "projectGrants": "I",
+  "publicationRules": "K",
+  "questionEvidenceLinks": "K",
+  "rateLimitWindows": "L",
+  "reasoningPermissions": "I",
+  "researchJobs": "K",
+  "schemaEnumConfig": "K",
+  "servicePrincipalKeys": "L",
+  "stakeholderGroups": "K",
+  "systemLogs": "K",
+  "tasks": "K",
+  "tenantApiKeys": "I",
+  "tenantConfig": "I",
+  "tenantDeploymentCredentials": "L",
+  "tenantIntegrations": "I",
+  "tenantMethodologyAssignments": "L",
+  "tenantModelSlotBindings": "I",
+  "tenantPolicies": "I",
+  "tenantProviderSecrets": "I",
+  "tenantProxyGatewayUsage": "I",
+  "tenantProxyTokenMints": "I",
+  "tenants": "L",
+  "tenantSandboxAuditEvents": "I",
+  "tenantSecrets": "I",
+  "toolAcls": "I",
+  "toolCatalog": "L",
+  "toolRegistry": "I",
+  "toolRegistryEntries": "L",
+  "topics": "K",
+  "users": "I",
+  "userSessions": "L",
+  "workflowDefinitions": "K",
+  "workflowPullRequests": "K",
+  "workflowStages": "K",
+  "workspaces": "L",
+  "worktreeBeliefCluster": "K",
+  "worktrees": "K"
+};
+
+// src/component-boundary.contract.ts
+var COMPONENT_BOUNDARY_CONTRACT_VERSION = "2026-04-27";
+var COMPONENT_BOUNDARY_COMPONENT_LAYERS = [
+  "I",
+  "K"
+];
+var COMPONENT_BOUNDARY_DIRECT_DB_METHODS = [
+  "insert",
+  "patch",
+  "replace",
+  "delete",
+  "query"
+];
+var COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS = [
+  "services",
+  "apps",
+  "convex"
+];
+var COMPONENT_BOUNDARY_HIGH_RISK_TABLES = [
+  "backgroundJobRuns",
+  "backgroundJobSettings",
+  "systemLogs",
+  "epistemicAudit",
+  "platformPolicyDecisionLogs",
+  "tenantApiKeys",
+  "projectGrants",
+  "userSessions"
+];
+function getComponentBoundaryTableLayer(tableName) {
+  return TABLE_OWNERSHIP[tableName];
+}
+function isComponentBoundaryComponentOwnedTable(tableName) {
+  const layer = getComponentBoundaryTableLayer(tableName);
+  return layer === "I" || layer === "K";
+}
+
 // src/gateway.contract.ts
 function requireActorPrincipalId(authContext) {
   const principalId = typeof authContext.principalId === "string" ? authContext.principalId.trim() : "";
@@ -3023,6 +3175,40 @@ var rateLimitWindows = defineTable({
     { kind: "index", name: "by_tier_window_end", columns: ["tier", "windowEndMs"] }
   ]
 });
+var oauthDeviceCodes = defineTable({
+  name: "oauthDeviceCodes",
+  component: "mc",
+  category: "identity",
+  shape: z.object({
+    "deviceCodeHash": z.string(),
+    "userCode": z.string(),
+    "clientId": z.string(),
+    "scope": z.string(),
+    "status": z.enum(["pending", "approved", "denied", "expired", "consumed"]),
+    "expiresAt": z.number(),
+    "intervalSeconds": z.number(),
+    "lastPolledAt": z.number().optional(),
+    "slowDownCount": z.number().optional(),
+    "clerkUserId": z.string().optional(),
+    "tenantId": idOf("tenants").optional(),
+    "workspaceId": z.string().optional(),
+    "principalId": z.string().optional(),
+    "role": z.string().optional(),
+    "scopes": z.array(z.string()).optional(),
+    "sessionId": z.string().optional(),
+    "approvedAt": z.number().optional(),
+    "deniedAt": z.number().optional(),
+    "consumedAt": z.number().optional(),
+    "createdAt": z.number(),
+    "updatedAt": z.number()
+  }),
+  indices: [
+    { kind: "index", name: "by_deviceCodeHash", columns: ["deviceCodeHash"] },
+    { kind: "index", name: "by_userCode", columns: ["userCode"] },
+    { kind: "index", name: "by_status_expiresAt", columns: ["status", "expiresAt"] },
+    { kind: "index", name: "by_sessionId", columns: ["sessionId"] }
+  ]
+});
 var servicePrincipalKeys = defineTable({
   name: "servicePrincipalKeys",
   component: "mc",
@@ -5387,6 +5573,7 @@ var MC_TABLE_CONTRACTS = [
   groupMemberships,
   groups,
   memberships,
+  oauthDeviceCodes,
   principals,
   rateLimitWindows,
   servicePrincipalKeys,
@@ -5566,6 +5753,436 @@ var InvariantManifestSchema = z.object({
   )
 });
 
+// src/tenant-client.contract.ts
+var TENANT_CLIENT_CONTRACT_VERSION = "2026-04-27";
+var TENANT_CLIENT_AUTH_MODES = [
+  "interactive_user",
+  "service_principal",
+  "tenant_api_key",
+  "session_token"
+];
+var TENANT_CLIENT_PRINCIPAL_TYPES = [
+  "human",
+  "service",
+  "agent"
+];
+var TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS = [
+  "tenantId",
+  "workspaceId",
+  "principalId",
+  "authMode",
+  "scopes"
+];
+var TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS = [
+  "principalType",
+  "roles",
+  "sessionId",
+  "delegationChain"
+];
+var TENANT_CLIENT_INSTALL_TOKEN_ENV = "INSTALL_LUCERN_NPM";
+var TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH = "tenants/shared";
+var TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS = [
+  "/platform/publish"
+];
+var TENANT_CLIENT_FORBIDDEN_SECRET_ENV = ["NPM_TOKEN"];
+var TENANT_CLIENT_INSTALLABLE_PACKAGES = [
+  {
+    packageName: "@lucern/access-control",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/agent",
+    role: "platform_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/auth",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/cli",
+    role: "developer_tool",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/client-core",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/confidence",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/config",
+    role: "configuration",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/contracts",
+    role: "contract_entrypoint",
+    directTenantImport: true
+  },
+  {
+    packageName: "@lucern/control-plane",
+    role: "platform_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/developer-kit",
+    role: "developer_tool",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/events",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/graph-primitives",
+    role: "sdk_dependency",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/identity",
+    role: "component_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/mcp",
+    role: "runtime_entrypoint",
+    directTenantImport: true
+  },
+  {
+    packageName: "@lucern/pack-host",
+    role: "platform_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/pack-installer",
+    role: "developer_tool",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/proof-compiler",
+    role: "developer_tool",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/react",
+    role: "runtime_entrypoint",
+    directTenantImport: true
+  },
+  {
+    packageName: "@lucern/reasoning-kernel",
+    role: "component_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/sdk",
+    role: "runtime_entrypoint",
+    directTenantImport: true
+  },
+  {
+    packageName: "@lucern/server-core",
+    role: "platform_runtime",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/testing",
+    role: "test_support",
+    directTenantImport: false
+  },
+  {
+    packageName: "@lucern/types",
+    role: "contract_entrypoint",
+    directTenantImport: true
+  }
+];
+var TENANT_CLIENT_PUBLIC_IMPORTS = [
+  {
+    packageName: "@lucern/sdk",
+    surface: "runtime",
+    subpaths: "published_exports",
+    description: "TypeScript SDK runtime and generated operation namespaces."
+  },
+  {
+    packageName: "@lucern/react",
+    surface: "runtime",
+    subpaths: "published_exports",
+    description: "React bindings for tenant-owned UI applications."
+  },
+  {
+    packageName: "@lucern/mcp",
+    surface: "runtime",
+    subpaths: "published_exports",
+    description: "MCP client/server entry points and hosted route helpers."
+  },
+  {
+    packageName: "@lucern/contracts",
+    surface: "contract",
+    subpaths: "published_exports",
+    description: "Published type and manifest contracts."
+  },
+  {
+    packageName: "@lucern/types",
+    surface: "contract",
+    subpaths: "published_exports",
+    description: "Published type-only helpers for tenant integration code."
+  }
+];
+var TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS = [
+  {
+    packageName: "@lucern/identity",
+    importPath: "@lucern/identity/convex.config",
+    surface: "component_config",
+    description: "Convex component binding config for tenant deployments that install Lucern identity."
+  },
+  {
+    packageName: "@lucern/reasoning-kernel",
+    importPath: "@lucern/reasoning-kernel/convex.config",
+    surface: "component_config",
+    description: "Convex component binding config for tenant deployments that install the Lucern reasoning kernel."
+  },
+  {
+    packageName: "@lucern/reasoning-kernel",
+    importPath: "@lucern/reasoning-kernel/runtime.config",
+    surface: "component_config",
+    description: "Runtime config alias for tenant deployments that install the Lucern reasoning kernel."
+  }
+];
+function findTenantClientInstallablePackage(packageName) {
+  return TENANT_CLIENT_INSTALLABLE_PACKAGES.find(
+    (entry) => entry.packageName === packageName
+  );
+}
+function isTenantClientInstallablePackage(packageName) {
+  return Boolean(findTenantClientInstallablePackage(packageName));
+}
+var TENANT_CLIENT_REQUIRED_SDK_NAMESPACES = [
+  "bootstrap",
+  "context",
+  "beliefs",
+  "evidence",
+  "questions",
+  "graph",
+  "worktrees",
+  "topics",
+  "edges",
+  "contradictions",
+  "contracts",
+  "graphAnalysis",
+  "graphRecommendations",
+  "orgGraphSearch",
+  "embeddings",
+  "ontologyLinks",
+  "graphStateClassifier",
+  "tools",
+  "identity",
+  "modelRuntime",
+  "events",
+  "jobs",
+  "telemetry"
+];
+var TENANT_CLIENT_CAPABILITIES = [
+  {
+    id: "identity.bootstrap_session",
+    description: "Start a scoped Lucern session for a tenant principal.",
+    surfaces: ["@lucern/sdk", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
+  {
+    id: "reasoning.context.compile",
+    description: "Compile tenant and workspace scoped reasoning context.",
+    surfaces: ["@lucern/sdk", "@lucern/react", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
+  {
+    id: "reasoning.graph.read",
+    description: "Read beliefs, evidence, questions, topics, and lineage.",
+    surfaces: ["@lucern/sdk", "@lucern/react", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
+  {
+    id: "reasoning.graph.write",
+    description: "Create and update graph objects through authorized APIs.",
+    surfaces: ["@lucern/sdk", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
+  {
+    id: "workflow.worktree_lifecycle",
+    description: "Create, review, merge, and close scoped worktrees.",
+    surfaces: ["@lucern/sdk", "@lucern/react", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  }
+];
+var TENANT_CLIENT_ISOLATION_RULES = [
+  {
+    id: "tenant_workspace_scope_required",
+    description: "Runtime operations must resolve both tenantId and workspaceId before reaching Lucern reasoning state."
+  },
+  {
+    id: "principal_audit_required",
+    description: "Runtime operations must carry principalId, authMode, and scopes for audit attribution."
+  },
+  {
+    id: "no_private_lucern_imports",
+    description: "Tenant code must not import Lucern source, Convex internals, generated adapters, or unpublished package internals."
+  }
+];
+var TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS = [
+  {
+    id: "deep_src_import",
+    pattern: "^@lucern/[^/]+/src(?:/|$)",
+    description: "Published packages must not be bypassed through src paths."
+  },
+  {
+    id: "deep_dist_import",
+    pattern: "^@lucern/[^/]+/dist(?:/|$)",
+    description: "Published package exports must be used instead of dist file paths."
+  },
+  {
+    id: "generated_adapter_import",
+    pattern: "^@lucern/[^/]+/(?:adapters/)?_generated(?:/|$)",
+    description: "Generated Lucern adapters are internal deployment artifacts."
+  },
+  {
+    id: "private_runtime_import",
+    pattern: "^@lucern/[^/]+/(?:internal|private)(?:/|$)",
+    description: "Internal and private package subpaths are not public SDK API."
+  },
+  {
+    id: "workspace_source_import",
+    pattern: "^(?:packages|modules|services|lucern|apps)/(?:.+/)?src(?:/|$)",
+    description: "Tenant clients must not import source files from the Lucern monorepo."
+  },
+  {
+    id: "root_alias_lucern_import",
+    pattern: "^@/(?:lucern|packages|modules|services|apps)(?:/|$)",
+    description: "Tenant clients must not depend on Lucern repo-local path aliases."
+  },
+  {
+    id: "relative_lucern_source_import",
+    pattern: "^\\.\\.?/(?:.+/)?(?:packages|modules|services|lucern|apps)(?:/|$)",
+    description: "Tenant clients must not reach back into Lucern source through relative paths."
+  },
+  {
+    id: "monorepo_path_import",
+    pattern: "lucern-repo",
+    description: "Absolute imports that name the Lucern repository are not portable tenant code."
+  }
+];
+function matchesPublicImport(importPath) {
+  const componentConfig = TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.find(
+    (entry) => importPath === entry.importPath
+  );
+  if (componentConfig) {
+    return componentConfig;
+  }
+  return TENANT_CLIENT_PUBLIC_IMPORTS.find(
+    (entry) => importPath === entry.packageName || importPath.startsWith(`${entry.packageName}/`)
+  );
+}
+function matchesForbiddenPattern(importPath) {
+  return TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS.find(
+    (entry) => new RegExp(entry.pattern, "u").test(importPath)
+  );
+}
+function classifyTenantClientImport(importPath) {
+  const normalizedImportPath = importPath.trim();
+  const pattern = matchesForbiddenPattern(normalizedImportPath);
+  if (pattern) {
+    return {
+      importPath: normalizedImportPath,
+      decision: "forbidden",
+      pattern,
+      reason: pattern.description
+    };
+  }
+  const publicImport = matchesPublicImport(normalizedImportPath);
+  if (publicImport) {
+    return {
+      importPath: normalizedImportPath,
+      decision: "public",
+      publicImport,
+      reason: publicImport.description
+    };
+  }
+  if (normalizedImportPath.startsWith("@lucern/")) {
+    return {
+      importPath: normalizedImportPath,
+      decision: "forbidden",
+      reason: "This @lucern package is not part of the tenant client public surface."
+    };
+  }
+  if (normalizedImportPath.startsWith("./") || normalizedImportPath.startsWith("../")) {
+    return {
+      importPath: normalizedImportPath,
+      decision: "local",
+      reason: "Local tenant-owned import."
+    };
+  }
+  return {
+    importPath: normalizedImportPath,
+    decision: "external",
+    reason: "External dependency outside the Lucern package namespace."
+  };
+}
+function isTenantClientPublicImport(importPath) {
+  return classifyTenantClientImport(importPath).decision === "public";
+}
+function isTenantClientComponentConfigImport(importPath) {
+  return TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.some(
+    (entry) => importPath === entry.importPath
+  );
+}
+function isTenantClientAllowedImport(importPath) {
+  return classifyTenantClientImport(importPath).decision === "public";
+}
+function assertTenantClientImportAllowed(importPath) {
+  const classification = classifyTenantClientImport(importPath);
+  if (classification.decision !== "forbidden") {
+    return;
+  }
+  throw new Error(formatTenantClientImportViolation(classification));
+}
+function formatTenantClientImportViolation(classification) {
+  const patternId = classification.pattern ? ` [${classification.pattern.id}]` : "";
+  return `Tenant client import is not allowed${patternId}: ${classification.importPath}. ${classification.reason}`;
+}
+
+// src/manifests/tenant-client-manifest.ts
+var TENANT_CLIENT_MANIFEST = {
+  manifestVersion: "1.0.0",
+  contractVersion: TENANT_CLIENT_CONTRACT_VERSION,
+  auth: {
+    modes: TENANT_CLIENT_AUTH_MODES,
+    principalTypes: TENANT_CLIENT_PRINCIPAL_TYPES,
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,
+    optionalContextFields: TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS
+  },
+  installToken: {
+    env: TENANT_CLIENT_INSTALL_TOKEN_ENV,
+    infisicalPath: TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH,
+    forbiddenInfisicalPaths: TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS,
+    forbiddenSecretEnv: TENANT_CLIENT_FORBIDDEN_SECRET_ENV
+  },
+  packages: {
+    installable: TENANT_CLIENT_INSTALLABLE_PACKAGES,
+    directImports: TENANT_CLIENT_PUBLIC_IMPORTS,
+    componentConfigImports: TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS
+  },
+  sdk: {
+    requiredNamespaces: TENANT_CLIENT_REQUIRED_SDK_NAMESPACES
+  },
+  capabilities: TENANT_CLIENT_CAPABILITIES,
+  isolationRules: TENANT_CLIENT_ISOLATION_RULES,
+  forbiddenImportPatterns: TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS
+};
+
 // src/projections/projection-dsl.ts
 function defineProjection(def) {
   return def;
@@ -11593,6 +12210,6 @@ var CANONICAL_WORKFLOW_DEFINITIONS = [
   }
 ];
 
-export { BELIEF_STATUSES, BELIEF_TYPE_BONUS, BRANCH_STATUSES, CANONICAL_WORKFLOW_DEFINITIONS, CONFIDENCE_TRIGGERS, CONTEXT_PACK_SCHEMA_VERSION, CONTEXT_PACK_SECTION_KEYS, CONTEXT_RANKING_PROFILES, CONTRADICTION_SEVERITIES, CONTRADICTION_STATUSES, ComponentTableManifestSchema, DEFAULT_BELIEF_TYPE_BONUS, DEFAULT_COMPILATION_MODE, DEFAULT_ENTITY_LIMIT, DEFAULT_PRIORITY_SCORE, DEFAULT_RANKING_PROFILE, DEFAULT_SECTION_LIMIT, DEFAULT_SEVERITY_SCORE, DEFAULT_TIER_APPROVAL_MODE, DEFAULT_TOKEN_BUDGET, DEFAULT_WORKFLOW_AUTO_FIX_POLICY, DEFEAT_TYPES, DOMAIN_EVENT_TYPES, DOMAIN_EVENT_VERSION, ENTITY_RANKING_WEIGHTS, EPISTEMIC_LAYERS, EVENT_RETENTION_DEFAULT_DAYS, EdgePolicyEntrySchema, EdgePolicyManifestSchema, EpistemicNodeTypeSchema, FORK_REASONS, GraphRefSchema, INTEGRATION_EDGE_TYPES, InvariantManifestSchema, JUDGMENT_TYPES, MAX_ENTITY_LIMIT, MAX_SECTION_LIMIT, MAX_TOKEN_BUDGET, MERGE_OUTCOMES, MIN_CONTRADICTION_BUDGET, MIN_TOKEN_BUDGET, MIN_TOKEN_ESTIMATE, MORNING_BRIEF_WORKFLOW_ID, NIGHTLY_RECONCILIATION_WORKFLOW_ID, PRIORITY_SCORES, PULL_REQUEST_STATUSES, RANKING_WEIGHTS, REASONING_METHODS, RECENCY_HALF_LIFE_DAYS, RESOLVED_QUESTION_STATUSES, ROOT_TOPIC_ID, SECTION_BUDGET_RATIOS, SESSION_AUTH_MODES, SESSION_LIFECYCLE_STATUSES, SESSION_PRINCIPAL_TYPES, SEVERITY_SCORES, SLOpinionInputSchema, TOKENS_PER_WORD, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_MS, WORKFLOW_ACTION_KINDS, WORKFLOW_APPROVAL_MODES, WORKFLOW_AUTO_FIX_MODES, WORKFLOW_HOOK_EVENTS, WORKFLOW_INTEGRITY_CHECKS, WORKFLOW_MUTATION_TIERS, WORKFLOW_OUTPUT_KINDS, WORKFLOW_PROOF_ARTIFACT_KINDS, WORKFLOW_RUNTIME_SCHEMA_VERSION, WORKFLOW_RUN_STATUSES, WORKFLOW_STAFFING_HINTS, WORKFLOW_TRIGGER_KINDS, WORKTREE_PHASES, assertEdgePolicyAllowed, bigramTokenize, buildDomainEvent, collectTopicNeighborhood, compareEventCursor, dsl_exports as contractDsl, createEventId, createEvidenceProjection, decodeEventCursor, decodePrefixedId, defineProjection, edgePolicyManifest, emitDomainEvent, encodeEventCursor, encodePrefixedId, findEdgePolicy, hasPrefixedIdPrefix, inferActorType, inferSessionPrincipalType, isAfterCursor, isLucernPrompt, jaccardSimilarity, lastDelegator, listBeliefsProjection, listTasksProjection, tool_contracts_exports as mcpToolsContract, modulateConfidenceProjection, normalizeDelegationChain, normalizeRetentionDays, prepareLexicalQuery, projections, rankEntityConnections, rankEntityTypeMatches, rankWindowScore, requireActorPrincipalId, rerankLexicalWindow, schemas_exports as schemaContracts, scoreEntityConnection, scoreEntityTypeMatch, scoreLexicalSignal, scoreLexicalSignals, sdk_tools_contract_exports as sdkToolsContract, sortEventsByCursor, stemToken, tokenOverlapScore, tokenizeSearchText, wordOverlapScore, wordTokenize };
+export { BELIEF_STATUSES, BELIEF_TYPE_BONUS, BRANCH_STATUSES, CANONICAL_WORKFLOW_DEFINITIONS, COMPONENT_BOUNDARY_COMPONENT_LAYERS, COMPONENT_BOUNDARY_CONTRACT_VERSION, COMPONENT_BOUNDARY_DIRECT_DB_METHODS, COMPONENT_BOUNDARY_HIGH_RISK_TABLES, COMPONENT_BOUNDARY_HOST_SOURCE_ROOTS, CONFIDENCE_TRIGGERS, CONTEXT_PACK_SCHEMA_VERSION, CONTEXT_PACK_SECTION_KEYS, CONTEXT_RANKING_PROFILES, CONTRADICTION_SEVERITIES, CONTRADICTION_STATUSES, ComponentTableManifestSchema, DEFAULT_BELIEF_TYPE_BONUS, DEFAULT_COMPILATION_MODE, DEFAULT_ENTITY_LIMIT, DEFAULT_PRIORITY_SCORE, DEFAULT_RANKING_PROFILE, DEFAULT_SECTION_LIMIT, DEFAULT_SEVERITY_SCORE, DEFAULT_TIER_APPROVAL_MODE, DEFAULT_TOKEN_BUDGET, DEFAULT_WORKFLOW_AUTO_FIX_POLICY, DEFEAT_TYPES, DOMAIN_EVENT_TYPES, DOMAIN_EVENT_VERSION, ENTITY_RANKING_WEIGHTS, EPISTEMIC_LAYERS, EVENT_RETENTION_DEFAULT_DAYS, EdgePolicyEntrySchema, EdgePolicyManifestSchema, EpistemicNodeTypeSchema, FORK_REASONS, GraphRefSchema, INTEGRATION_EDGE_TYPES, InvariantManifestSchema, JUDGMENT_TYPES, MAX_ENTITY_LIMIT, MAX_SECTION_LIMIT, MAX_TOKEN_BUDGET, MERGE_OUTCOMES, MIN_CONTRADICTION_BUDGET, MIN_TOKEN_BUDGET, MIN_TOKEN_ESTIMATE, MORNING_BRIEF_WORKFLOW_ID, NIGHTLY_RECONCILIATION_WORKFLOW_ID, PRIORITY_SCORES, PULL_REQUEST_STATUSES, RANKING_WEIGHTS, REASONING_METHODS, RECENCY_HALF_LIFE_DAYS, RESOLVED_QUESTION_STATUSES, ROOT_TOPIC_ID, SECTION_BUDGET_RATIOS, SESSION_AUTH_MODES, SESSION_LIFECYCLE_STATUSES, SESSION_PRINCIPAL_TYPES, SEVERITY_SCORES, SLOpinionInputSchema, TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_MANIFEST, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, TOKENS_PER_WORD, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_MS, WORKFLOW_ACTION_KINDS, WORKFLOW_APPROVAL_MODES, WORKFLOW_AUTO_FIX_MODES, WORKFLOW_HOOK_EVENTS, WORKFLOW_INTEGRITY_CHECKS, WORKFLOW_MUTATION_TIERS, WORKFLOW_OUTPUT_KINDS, WORKFLOW_PROOF_ARTIFACT_KINDS, WORKFLOW_RUNTIME_SCHEMA_VERSION, WORKFLOW_RUN_STATUSES, WORKFLOW_STAFFING_HINTS, WORKFLOW_TRIGGER_KINDS, WORKTREE_PHASES, assertEdgePolicyAllowed, assertTenantClientImportAllowed, bigramTokenize, buildDomainEvent, classifyTenantClientImport, collectTopicNeighborhood, compareEventCursor, dsl_exports as contractDsl, createEventId, createEvidenceProjection, decodeEventCursor, decodePrefixedId, defineProjection, edgePolicyManifest, emitDomainEvent, encodeEventCursor, encodePrefixedId, findEdgePolicy, findTenantClientInstallablePackage, formatTenantClientImportViolation, getComponentBoundaryTableLayer, hasPrefixedIdPrefix, inferActorType, inferSessionPrincipalType, isAfterCursor, isComponentBoundaryComponentOwnedTable, isLucernPrompt, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport, jaccardSimilarity, lastDelegator, listBeliefsProjection, listTasksProjection, tool_contracts_exports as mcpToolsContract, modulateConfidenceProjection, normalizeDelegationChain, normalizeRetentionDays, prepareLexicalQuery, projections, rankEntityConnections, rankEntityTypeMatches, rankWindowScore, requireActorPrincipalId, rerankLexicalWindow, schemas_exports as schemaContracts, scoreEntityConnection, scoreEntityTypeMatch, scoreLexicalSignal, scoreLexicalSignals, sdk_tools_contract_exports as sdkToolsContract, sortEventsByCursor, stemToken, tokenOverlapScore, tokenizeSearchText, wordOverlapScore, wordTokenize };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map