@lucern/contracts 0.3.0-alpha.2 → 0.3.0-alpha.4

package/dist/schemas/tables/kernel/worktree.d.ts

@@ -62,16 +62,16 @@ declare const worktrees: TableContract<{
         answerConfidence: z.ZodOptional<z.ZodEnum<["high", "medium", "low"]>>;
         linkedQuestionId: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        status: "answered" | "forked" | "open";
+        status: "answered" | "open" | "forked";
         question: string;
-        answer?: string | undefined;
         linkedQuestionId?: string | undefined;
+        answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }, {
-        status: "answered" | "forked" | "open";
+        status: "answered" | "open" | "forked";
         question: string;
-        answer?: string | undefined;
         linkedQuestionId?: string | undefined;
+        answer?: string | undefined;
         answerConfidence?: "high" | "medium" | "low" | undefined;
     }>, "many">>;
     evidenceSignals: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -82,13 +82,13 @@ declare const worktrees: TableContract<{
     }, "strip", z.ZodTypeAny, {
         signal: string;
         collected: boolean;
-        notes?: string | undefined;
         progress?: string | undefined;
+        notes?: string | undefined;
     }, {
         signal: string;
         collected: boolean;
-        notes?: string | undefined;
         progress?: string | undefined;
+        notes?: string | undefined;
     }>, "many">>;
     decisionGate: z.ZodOptional<z.ZodObject<{
         goCriteria: z.ZodArray<z.ZodString, "many">;
@@ -101,15 +101,15 @@ declare const worktrees: TableContract<{
         goCriteria: string[];
         noGoSignals: string[];
         verdict?: "pending" | "go" | "no_go" | "pivot" | undefined;
-        decidedAt?: number | undefined;
         verdictRationale?: string | undefined;
+        decidedAt?: number | undefined;
         decidedBy?: string | undefined;
     }, {
         goCriteria: string[];
         noGoSignals: string[];
         verdict?: "pending" | "go" | "no_go" | "pivot" | undefined;
-        decidedAt?: number | undefined;
         verdictRationale?: string | undefined;
+        decidedAt?: number | undefined;
         decidedBy?: string | undefined;
     }>>;
     beliefRefinement: z.ZodOptional<z.ZodObject<{
@@ -226,12 +226,12 @@ declare const worktrees: TableContract<{
         confidenceChange: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
         summary: string;
-        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
+        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }, {
         summary: string;
-        verdict: "validated" | "invalidated" | "forked" | "inconclusive";
+        verdict: "forked" | "validated" | "invalidated" | "inconclusive";
         whatChanged: string;
         confidenceChange: number;
     }>>;
@@ -279,19 +279,19 @@ declare const worktrees: TableContract<{
             weight: z.ZodOptional<z.ZodNumber>;
             createdAt: z.ZodOptional<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
-            edgeType: string;
-            targetId: string;
             sourceId: string;
-            createdAt?: number | undefined;
+            targetId: string;
+            edgeType: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
+            createdAt?: number | undefined;
         }, {
-            edgeType: string;
-            targetId: string;
             sourceId: string;
-            createdAt?: number | undefined;
+            targetId: string;
+            edgeType: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
+            createdAt?: number | undefined;
         }>, "many">;
         relatedBeliefs: z.ZodOptional<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -300,13 +300,13 @@ declare const worktrees: TableContract<{
             confidenceScore: z.ZodOptional<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             id: string;
-            confidence?: string | undefined;
             text?: string | undefined;
+            confidence?: string | undefined;
             confidenceScore?: number | undefined;
         }, {
             id: string;
-            confidence?: string | undefined;
             text?: string | undefined;
+            confidence?: string | undefined;
             confidenceScore?: number | undefined;
         }>, "many">>;
         questions: z.ZodArray<z.ZodObject<{
@@ -324,8 +324,8 @@ declare const worktrees: TableContract<{
             id: string;
             text: string;
             evidenceCount: number;
-            answer?: string | undefined;
             priority?: string | undefined;
+            answer?: string | undefined;
             answerStatus?: string | undefined;
             answeredBy?: string | undefined;
             answeredAt?: number | undefined;
@@ -334,8 +334,8 @@ declare const worktrees: TableContract<{
             id: string;
             text: string;
             evidenceCount: number;
-            answer?: string | undefined;
             priority?: string | undefined;
+            answer?: string | undefined;
             answerStatus?: string | undefined;
             answeredBy?: string | undefined;
             answeredAt?: number | undefined;
@@ -349,15 +349,15 @@ declare const worktrees: TableContract<{
             createdAt: z.ZodOptional<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             id: string;
-            verified: boolean;
             text: string;
+            verified: boolean;
             createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
         }, {
             id: string;
-            verified: boolean;
             text: string;
+            verified: boolean;
             createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
@@ -391,65 +391,65 @@ declare const worktrees: TableContract<{
                 timestamp: z.ZodOptional<z.ZodNumber>;
             }, "strip", z.ZodTypeAny, {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }, {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }>, "many">;
         }, "strip", z.ZodTypeAny, {
             beliefId: string;
             recentChanges: {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }[];
         }, {
             beliefId: string;
             recentChanges: {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }[];
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         evidence: {
             id: string;
-            verified: boolean;
             text: string;
+            verified: boolean;
             createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
         }[];
         worktreeId: string & z.BRAND<"Id<worktrees>">;
-        outcome: {
-            summary: string;
-            verdict: string;
-            startingConfidence: number;
-            endingConfidence: number;
-            confidenceChange: number;
-        };
         questions: {
             status: string;
             id: string;
             text: string;
             evidenceCount: number;
-            answer?: string | undefined;
             priority?: string | undefined;
+            answer?: string | undefined;
             answerStatus?: string | undefined;
             answeredBy?: string | undefined;
             answeredAt?: number | undefined;
         }[];
+        outcome: {
+            summary: string;
+            verdict: string;
+            startingConfidence: number;
+            endingConfidence: number;
+            confidenceChange: number;
+        };
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            edgeType: string;
-            targetId: string;
             sourceId: string;
-            createdAt?: number | undefined;
+            targetId: string;
+            edgeType: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         topicId?: string | undefined;
         primaryBelief?: {
@@ -465,8 +465,8 @@ declare const worktrees: TableContract<{
         } | undefined;
         relatedBeliefs?: {
             id: string;
-            confidence?: string | undefined;
             text?: string | undefined;
+            confidence?: string | undefined;
             confidenceScore?: number | undefined;
         }[] | undefined;
         tasksCompleted?: number | undefined;
@@ -475,47 +475,47 @@ declare const worktrees: TableContract<{
             beliefId: string;
             recentChanges: {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }[];
         }[] | undefined;
     }, {
         evidence: {
             id: string;
-            verified: boolean;
             text: string;
+            verified: boolean;
             createdAt?: number | undefined;
             sourceType?: string | undefined;
             verificationStatus?: string | undefined;
         }[];
         worktreeId: string;
-        outcome: {
-            summary: string;
-            verdict: string;
-            startingConfidence: number;
-            endingConfidence: number;
-            confidenceChange: number;
-        };
         questions: {
             status: string;
             id: string;
             text: string;
             evidenceCount: number;
-            answer?: string | undefined;
             priority?: string | undefined;
+            answer?: string | undefined;
             answerStatus?: string | undefined;
             answeredBy?: string | undefined;
             answeredAt?: number | undefined;
         }[];
+        outcome: {
+            summary: string;
+            verdict: string;
+            startingConfidence: number;
+            endingConfidence: number;
+            confidenceChange: number;
+        };
         capturedAt: number;
         capturedBy: string;
         clusterEdges: {
-            edgeType: string;
-            targetId: string;
             sourceId: string;
-            createdAt?: number | undefined;
+            targetId: string;
+            edgeType: string;
             weight?: number | undefined;
             edgeId?: string | undefined;
+            createdAt?: number | undefined;
         }[];
         topicId?: string | undefined;
         primaryBelief?: {
@@ -531,8 +531,8 @@ declare const worktrees: TableContract<{
         } | undefined;
         relatedBeliefs?: {
             id: string;
-            confidence?: string | undefined;
             text?: string | undefined;
+            confidence?: string | undefined;
             confidenceScore?: number | undefined;
         }[] | undefined;
         tasksCompleted?: number | undefined;
@@ -541,8 +541,8 @@ declare const worktrees: TableContract<{
             beliefId: string;
             recentChanges: {
                 timestamp?: number | undefined;
-                confidence?: string | undefined;
                 trigger?: string | undefined;
+                confidence?: string | undefined;
             }[];
         }[] | undefined;
     }>>;
@@ -589,9 +589,9 @@ declare const worktrees: TableContract<{
     }, "strip", z.ZodTypeAny, {
         status: "ai_draft" | "user_draft" | "final";
         content: string;
-        memoContent?: string | undefined;
         generatedAt?: number | undefined;
         approvedAt?: number | undefined;
+        memoContent?: string | undefined;
         approvedBy?: string | undefined;
         generationMetadata?: {
             promptName: string;
@@ -601,9 +601,9 @@ declare const worktrees: TableContract<{
     }, {
         status: "ai_draft" | "user_draft" | "final";
         content: string;
-        memoContent?: string | undefined;
         generatedAt?: number | undefined;
         approvedAt?: number | undefined;
+        memoContent?: string | undefined;
         approvedBy?: string | undefined;
         generationMetadata?: {
             promptName: string;
@@ -629,18 +629,18 @@ declare const worktrees: TableContract<{
         linkedQuestionId: z.ZodOptional<z.ZodString>;
         linkedBeliefId: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         content: string;
         createdAt: number;
         createdBy: string;
-        id: string;
         linkedBeliefId?: string | undefined;
         linkedQuestionId?: string | undefined;
         linkedTaskId?: string | undefined;
     }, {
+        id: string;
         content: string;
         createdAt: number;
         createdBy: string;
-        id: string;
         linkedBeliefId?: string | undefined;
         linkedQuestionId?: string | undefined;
         linkedTaskId?: string | undefined;
@@ -723,14 +723,14 @@ declare const worktrees: TableContract<{
             cascades: z.ZodNumber;
             other: z.ZodNumber;
         }, "strip", z.ZodTypeAny, {
+            dependencies: number;
             other: number;
             counterfactuals: number;
-            dependencies: number;
             cascades: number;
         }, {
+            dependencies: number;
             other: number;
             counterfactuals: number;
-            dependencies: number;
             cascades: number;
         }>>;
         mappingCompletedAt: z.ZodOptional<z.ZodNumber>;
@@ -741,9 +741,9 @@ declare const worktrees: TableContract<{
         hasDependencies: boolean;
         hasCascades: boolean;
         conditionalsByType?: {
+            dependencies: number;
             other: number;
             counterfactuals: number;
-            dependencies: number;
             cascades: number;
         } | undefined;
         mappingCompletedAt?: number | undefined;
@@ -754,9 +754,9 @@ declare const worktrees: TableContract<{
         hasDependencies: boolean;
         hasCascades: boolean;
         conditionalsByType?: {
+            dependencies: number;
             other: number;
             counterfactuals: number;
-            dependencies: number;
             cascades: number;
         } | undefined;
         mappingCompletedAt?: number | undefined;

package/dist/schemas/tables/mc/identity.d.ts

@@ -62,6 +62,29 @@ declare const rateLimitWindows: TableContract<{
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
 }>;
+declare const oauthDeviceCodes: TableContract<{
+    deviceCodeHash: z.ZodString;
+    userCode: z.ZodString;
+    clientId: z.ZodString;
+    scope: z.ZodString;
+    status: z.ZodEnum<["pending", "approved", "denied", "expired", "consumed"]>;
+    expiresAt: z.ZodNumber;
+    intervalSeconds: z.ZodNumber;
+    lastPolledAt: z.ZodOptional<z.ZodNumber>;
+    slowDownCount: z.ZodOptional<z.ZodNumber>;
+    clerkUserId: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodOptional<ConvexIdSchema<"tenants">>;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    principalId: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    approvedAt: z.ZodOptional<z.ZodNumber>;
+    deniedAt: z.ZodOptional<z.ZodNumber>;
+    consumedAt: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
 declare const servicePrincipalKeys: TableContract<{
     keyId: z.ZodString;
     tokenHash: z.ZodString;
@@ -105,15 +128,15 @@ declare const userSessions: TableContract<{
     }, "strip", z.ZodTypeAny, {
         principalId: string;
         principalType: "human" | "service" | "agent";
-        sessionId?: string | undefined;
         reason?: string | undefined;
+        sessionId?: string | undefined;
         authMode?: "interactive_user" | "service_principal" | "tenant_api_key" | "session_token" | undefined;
         delegatedAt?: number | undefined;
     }, {
         principalId: string;
         principalType: "human" | "service" | "agent";
-        sessionId?: string | undefined;
         reason?: string | undefined;
+        sessionId?: string | undefined;
         authMode?: "interactive_user" | "service_principal" | "tenant_api_key" | "session_token" | undefined;
         delegatedAt?: number | undefined;
     }>, "many">>;
@@ -131,4 +154,4 @@ declare const userSessions: TableContract<{
     updatedAt: z.ZodNumber;
 }>;
 
-export { groupMemberships, groups, memberships, principals, rateLimitWindows, servicePrincipalKeys, userSessions };
+export { groupMemberships, groups, memberships, oauthDeviceCodes, principals, rateLimitWindows, servicePrincipalKeys, userSessions };

package/dist/schemas/tables/mc/identity.js

@@ -135,6 +135,40 @@ var rateLimitWindows = defineTable({
     { kind: "index", name: "by_tier_window_end", columns: ["tier", "windowEndMs"] }
   ]
 });
+var oauthDeviceCodes = defineTable({
+  name: "oauthDeviceCodes",
+  component: "mc",
+  category: "identity",
+  shape: z.object({
+    "deviceCodeHash": z.string(),
+    "userCode": z.string(),
+    "clientId": z.string(),
+    "scope": z.string(),
+    "status": z.enum(["pending", "approved", "denied", "expired", "consumed"]),
+    "expiresAt": z.number(),
+    "intervalSeconds": z.number(),
+    "lastPolledAt": z.number().optional(),
+    "slowDownCount": z.number().optional(),
+    "clerkUserId": z.string().optional(),
+    "tenantId": idOf("tenants").optional(),
+    "workspaceId": z.string().optional(),
+    "principalId": z.string().optional(),
+    "role": z.string().optional(),
+    "scopes": z.array(z.string()).optional(),
+    "sessionId": z.string().optional(),
+    "approvedAt": z.number().optional(),
+    "deniedAt": z.number().optional(),
+    "consumedAt": z.number().optional(),
+    "createdAt": z.number(),
+    "updatedAt": z.number()
+  }),
+  indices: [
+    { kind: "index", name: "by_deviceCodeHash", columns: ["deviceCodeHash"] },
+    { kind: "index", name: "by_userCode", columns: ["userCode"] },
+    { kind: "index", name: "by_status_expiresAt", columns: ["status", "expiresAt"] },
+    { kind: "index", name: "by_sessionId", columns: ["sessionId"] }
+  ]
+});
 var servicePrincipalKeys = defineTable({
   name: "servicePrincipalKeys",
   component: "mc",
@@ -216,6 +250,6 @@ var userSessions = defineTable({
   ]
 });
 
-export { groupMemberships, groups, memberships, principals, rateLimitWindows, servicePrincipalKeys, userSessions };
+export { groupMemberships, groups, memberships, oauthDeviceCodes, principals, rateLimitWindows, servicePrincipalKeys, userSessions };
 //# sourceMappingURL=identity.js.map
 //# sourceMappingURL=identity.js.map

package/dist/schemas/tables/mc/identity.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/dsl/defineTable.ts","../../../../src/dsl/idOf.ts","../../../../src/schemas/tables/mc/identity.ts"],"names":["z"],"mappings":";;;;;AAwCO,SAAS,YACd,IAAA,EACkB;AAClB,EAAA,OAAO,IAAA;AACT;AC1CO,IAAM,eAAA,mBAAkB,MAAA,CAAO,GAAA,CAAI,gCAAgC,CAAA;AASnE,SAAS,KAAuB,KAAA,EAA6B;AAClE,EAAA,MAAM,MAAA,GAAS,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAkB;AAC5C,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,eAAA,EAAiB;AAAA,IAC7C,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,EAAO,KAAA;AAAA,IACP,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,MAAA;AACT;;;ACVO,IAAM,mBAAmB,WAAA,CAAY;AAAA,EAC1C,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,SAAA,EAAW,KAAK,QAAQ,CAAA;AAAA,IACxB,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC/B,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,aAAA,EAAe,SAAS,CAAA,EAAE;AAAA,IACjF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,SAAS,WAAA,CAAY;AAAA,EAChC,IAAA,EAAM,QAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,IACrB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,aAAaA,CAAAA,CAAE,IAAA,CAAK,CAAC,UAAA,EAAY,UAAA,EAAY,QAAQ,CAAC,CAAA;AAAA,IACtD,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,wBAAwB,OAAA,EAAS,CAAC,UAAA,EAAY,UAAU,CAAA;AAAE;AAEvF,CAAC;AAEM,IAAM,cAAc,WAAA,CAAY;AAAA,EACrC,IAAA,EAAM,aAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,gBAAA,EAAkB,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC9C,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,MAAA,EAAQA,CAAAA,CAAE,IAAA,CAAK,CAAC,gBAAA,EAAkB,cAAA,EAAgB,iBAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,SAAA,EAAW,eAAe,CAAC,CAAA;AAAA,IACpH,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,KAAA,EAAO,WAAA,EAAa,KAAA,EAAO,MAAM,CAAC,CAAA;AAAA,IAC9D,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,uBAAuB,OAAA,EAAS,CAAC,aAAA,EAAe,UAAU,CAAA,EAAE;AAAA,IACnF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,0BAA0B,OAAA,EAAS,CAAC,aAAA,EAAe,aAAa,CAAA,EAAE;AAAA,IACzF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,UAAA,EAAY,MAAM,CAAA,EAAE;AAAA,IACvE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,aAAa,WAAA,CAAY;AAAA,EACpC,IAAA,EAAM,YAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,OAAA,EAAS,SAAA,EAAW,iBAAiB,CAAC,CAAA;AAAA,IACvE,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC/B,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,YAAYA,CAAAA,CAAE,KAAA,CAAM,KAAK,QAAQ,CAAC,EAAE,QAAA,EAAS;AAAA,IAC7C,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,SAAA,EAAW,WAAA,EAAa,UAAU,CAAC,CAAA;AAAA,IAC/D,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,mBAAmB,WAAA,CAAY;AAAA,EAC1C,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,cAAcA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,MAAM,CAAC,CAAA;AAAA,IACvC,eAAA,EAAiBA,EAAE,MAAA,EAAO;AAAA,IAC1B,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,IAClB,QAAQA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,WAAA,EAAa,SAAS,CAAC,CAAA;AAAA,IAC/C,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,qBAAA,EAAuB,SAAS,CAAC,aAAA,EAAe,YAAA,EAAc,eAAe,CAAA,EAAE;AAAA,IACtG,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,wBAAwB,OAAA,EAAS,CAAC,YAAA,EAAc,eAAe,CAAA,EAAE;AAAA,IACxF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,iBAAiB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IACjE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,MAAA,EAAQ,aAAa,CAAA;AAAE;AAEpF,CAAC;AAEM,IAAM,uBAAuB,WAAA,CAAY;AAAA,EAC9C,IAAA,EAAM,sBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,IAClB,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,QAAA,EAAUA,CAAAA,CAAE,KAAA,CAAMA,CAAAA,CAAE,QAAQ,CAAA;AAAA,IAC5B,eAAeA,CAAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,YAAY,CAAC,CAAA;AAAA,IAC/C,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,UAAA,EAAY,SAAA,EAAW,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACxE,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,qBAAA,EAAuBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC3C,gBAAA,EAAkBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACtC,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,WAAA,EAAa,SAAS,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IACnE,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,OAAA,EAAS,CAAC,OAAO,CAAA,EAAE;AAAA,IACtD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,gBAAgB,OAAA,EAAS,CAAC,WAAW,CAAA,EAAE;AAAA,IAC9D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA,EAAE;AAAA,IACxD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,uBAAuB,OAAA,EAAS,CAAC,aAAA,EAAe,QAAQ,CAAA;AAAE;AAEvF,CAAC;AAEM,IAAM,eAAe,WAAA,CAAY;AAAA,EACtC,IAAA,EAAM,cAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,SAAS,SAAA,EAAW,OAAO,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAChE,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,eAAeA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA;AAAA,IACvC,UAAA,EAAYA,CAAAA,CAAE,IAAA,CAAK,CAAC,kBAAA,EAAoB,qBAAqB,gBAAA,EAAkB,eAAe,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAC1G,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,UAAUA,CAAAA,CAAE,KAAA,CAAMA,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACvC,iBAAA,EAAmBA,CAAAA,CAAE,KAAA,CAAMA,CAAAA,CAAE,MAAA,CAAO;AAAA,MACpC,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,MACxB,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,MACrD,UAAA,EAAYA,CAAAA,CAAE,IAAA,CAAK,CAAC,kBAAA,EAAoB,qBAAqB,gBAAA,EAAkB,eAAe,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,MAC1G,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACnC,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IACX,iBAAA,EAAmBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACvC,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,kBAAA,EAAoBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACxC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,cAAA,EAAgBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,gBAAA,EAAkBA,EAAE,MAAA,EAAO;AAAA,IAC3B,iBAAA,EAAmBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,cAAA,EAAgBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,gBAAgB,OAAA,EAAS,CAAC,WAAW,CAAA,EAAE;AAAA,IAC9D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,iBAAiB,CAAA,EAAE;AAAA,IAC1E,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC","file":"identity.js","sourcesContent":["import type { ZodObject, ZodRawShape } from \"zod\";\n\nexport type TableComponent = \"mc\" | \"kernel\" | \"identity\" | \"developer-pack\";\n\nexport type TableIndex =\n  | {\n      kind: \"index\";\n      name: string;\n      columns: readonly string[];\n    }\n  | {\n      kind: \"search\";\n      name: string;\n      searchField: string;\n      filterFields?: readonly string[];\n    }\n  | {\n      kind: \"vector\";\n      name: string;\n      vectorField: string;\n      dimensions: number;\n      filterFields?: readonly string[];\n    };\n\nexport type TableDeprecation = {\n  since: string;\n  reason: string;\n  replacement?: string;\n};\n\nexport type TableContract<S extends ZodRawShape = ZodRawShape> = {\n  name: string;\n  component: TableComponent;\n  category: string;\n  shape: ZodObject<S>;\n  indices: readonly TableIndex[];\n  deprecated?: TableDeprecation;\n  invariants?: readonly string[];\n};\n\nexport function defineTable<S extends ZodRawShape>(\n  spec: TableContract<S>\n): TableContract<S> {\n  return spec;\n}\n","import { z } from \"zod\";\n\nexport const CONVEX_ID_TABLE = Symbol.for(\"lucern.contracts.convexIdTable\");\n\nexport type ConvexIdSchema<T extends string> = z.ZodBranded<\n  z.ZodString,\n  `Id<${T}>`\n> & {\n  readonly [CONVEX_ID_TABLE]: T;\n};\n\nexport function idOf<T extends string>(table: T): ConvexIdSchema<T> {\n  const schema = z.string().brand<`Id<${T}>`>();\n  Object.defineProperty(schema, CONVEX_ID_TABLE, {\n    configurable: false,\n    enumerable: false,\n    value: table,\n    writable: false,\n  });\n  return schema as ConvexIdSchema<T>;\n}\n\nexport function getConvexIdTable(schema: z.ZodTypeAny): string | undefined {\n  return (schema as Partial<Record<typeof CONVEX_ID_TABLE, string>>)[\n    CONVEX_ID_TABLE\n  ];\n}\n","/**\n * Schema contracts for mc/identity.\n *\n * Mirrored from:\n *   - services/master-control/convex/schema.ts\n */\n\nimport { z } from 'zod';\nimport { defineTable, idOf } from '../../../dsl.js';\n\nexport const groupMemberships = defineTable({\n  name: \"groupMemberships\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"groupId\": idOf(\"groups\"),\n    \"principalId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"status\": z.enum([\"active\", \"invited\", \"revoked\"]),\n    \"addedBy\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_groupId\", columns: [\"groupId\"] },\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_principal_group\", columns: [\"principalId\", \"groupId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const groups = defineTable({\n  name: \"groups\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"groupKey\": z.string(),\n    \"name\": z.string(),\n    \"groupType\": z.enum([\"internal\", \"external\", \"system\"]),\n    \"description\": z.string().optional(),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_tenantId_groupKey\", columns: [\"tenantId\", \"groupKey\"] }\n    ],\n});\n\nexport const memberships = defineTable({\n  name: \"memberships\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"principalRefId\": idOf(\"principals\").optional(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"role\": z.enum([\"platform_admin\", \"tenant_admin\", \"workspace_admin\", \"editor\", \"viewer\", \"auditor\", \"service_agent\"]),\n    \"status\": z.enum([\"active\", \"invited\", \"revoked\"]),\n    \"source\": z.enum([\"manual\", \"sso\", \"bootstrap\", \"api\", \"scim\"]),\n    \"grantedBy\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_principal_tenant\", columns: [\"principalId\", \"tenantId\"] },\n      { kind: 'index', name: \"by_workspace_principal\", columns: [\"workspaceId\", \"principalId\"] },\n      { kind: 'index', name: \"by_tenant_role\", columns: [\"tenantId\", \"role\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const principals = defineTable({\n  name: \"principals\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"principalType\": z.enum([\"user\", \"group\", \"service\", \"external_viewer\"]),\n    \"clerkId\": z.string().optional(),\n    \"email\": z.string().optional(),\n    \"displayName\": z.string().optional(),\n    \"groupIds\": z.array(idOf(\"groups\")).optional(),\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"status\": z.enum([\"active\", \"invited\", \"suspended\", \"disabled\"]),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_clerkId\", columns: [\"clerkId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const rateLimitWindows = defineTable({\n  name: \"rateLimitWindows\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"keyId\": z.string().optional(),\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"windowType\": z.enum([\"minute\", \"hour\"]),\n    \"windowStartMs\": z.number(),\n    \"windowEndMs\": z.number(),\n    \"requestCount\": z.number(),\n    \"limit\": z.number(),\n    \"tier\": z.enum([\"free\", \"developer\", \"partner\"]),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principal_window\", columns: [\"principalId\", \"windowType\", \"windowStartMs\"] },\n      { kind: 'index', name: \"by_window_type_start\", columns: [\"windowType\", \"windowStartMs\"] },\n      { kind: 'index', name: \"by_window_end\", columns: [\"windowEndMs\"] },\n      { kind: 'index', name: \"by_tier_window_end\", columns: [\"tier\", \"windowEndMs\"] }\n    ],\n});\n\nexport const servicePrincipalKeys = defineTable({\n  name: \"servicePrincipalKeys\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"keyId\": z.string(),\n    \"tokenHash\": z.string(),\n    \"principalId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"scopes\": z.array(z.string()),\n    \"environment\": z.enum([\"sandbox\", \"production\"]),\n    \"status\": z.enum([\"active\", \"rotating\", \"rotated\", \"expired\", \"revoked\"]),\n    \"expiresAt\": z.number(),\n    \"rotationGracePeriod\": z.number().optional(),\n    \"rotatedToKeyId\": z.string().optional(),\n    \"rateLimitTier\": z.enum([\"free\", \"developer\", \"partner\"]).optional(),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdBy\": z.string(),\n    \"revokedBy\": z.string().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"lastUsedAt\": z.number().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_keyId\", columns: [\"keyId\"] },\n      { kind: 'index', name: \"by_tokenHash\", columns: [\"tokenHash\"] },\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] },\n      { kind: 'index', name: \"by_principal_status\", columns: [\"principalId\", \"status\"] }\n    ],\n});\n\nexport const userSessions = defineTable({\n  name: \"userSessions\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"sessionId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"clerkUserId\": z.string(),\n    \"principalId\": z.string().optional(),\n    \"principalType\": z.enum([\"human\", \"service\", \"agent\"]).optional(),\n    \"workspaceId\": z.string().optional(),\n    \"apiKeyId\": idOf(\"apiKeys\"),\n    \"sessionType\": z.enum([\"user\", \"agent\"]),\n    \"authMode\": z.enum([\"interactive_user\", \"service_principal\", \"tenant_api_key\", \"session_token\"]).optional(),\n    \"role\": z.string().optional(),\n    \"scopes\": z.array(z.string()).optional(),\n    \"delegationChain\": z.array(z.object({\n    \"principalId\": z.string(),\n    \"principalType\": z.enum([\"human\", \"service\", \"agent\"]),\n    \"authMode\": z.enum([\"interactive_user\", \"service_principal\", \"tenant_api_key\", \"session_token\"]).optional(),\n    \"sessionId\": z.string().optional(),\n    \"delegatedAt\": z.number().optional(),\n    \"reason\": z.string().optional()\n  })).optional(),\n    \"sourceSessionId\": z.string().optional(),\n    \"status\": z.enum([\"active\", \"expired\", \"revoked\"]),\n    \"sessionExpiresAt\": z.number().optional(),\n    \"jwtIssuedAt\": z.number().optional(),\n    \"jwtExpiresAt\": z.number().optional(),\n    \"lastActivityAt\": z.number(),\n    \"lastValidatedAt\": z.number().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"revokedBy\": z.string().optional(),\n    \"revokeReason\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_sessionId\", columns: [\"sessionId\"] },\n      { kind: 'index', name: \"by_sourceSessionId\", columns: [\"sourceSessionId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_clerkUserId\", columns: [\"clerkUserId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n"]}
+{"version":3,"sources":["../../../../src/dsl/defineTable.ts","../../../../src/dsl/idOf.ts","../../../../src/schemas/tables/mc/identity.ts"],"names":["z"],"mappings":";;;;;AAwCO,SAAS,YACd,IAAA,EACkB;AAClB,EAAA,OAAO,IAAA;AACT;AC1CO,IAAM,eAAA,mBAAkB,MAAA,CAAO,GAAA,CAAI,gCAAgC,CAAA;AASnE,SAAS,KAAuB,KAAA,EAA6B;AAClE,EAAA,MAAM,MAAA,GAAS,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAkB;AAC5C,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,eAAA,EAAiB;AAAA,IAC7C,YAAA,EAAc,KAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,EAAO,KAAA;AAAA,IACP,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,MAAA;AACT;;;ACVO,IAAM,mBAAmB,WAAA,CAAY;AAAA,EAC1C,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,SAAA,EAAW,KAAK,QAAQ,CAAA;AAAA,IACxB,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC/B,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,aAAA,EAAe,SAAS,CAAA,EAAE;AAAA,IACjF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,SAAS,WAAA,CAAY;AAAA,EAChC,IAAA,EAAM,QAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,IACrB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,aAAaA,CAAAA,CAAE,IAAA,CAAK,CAAC,UAAA,EAAY,UAAA,EAAY,QAAQ,CAAC,CAAA;AAAA,IACtD,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,wBAAwB,OAAA,EAAS,CAAC,UAAA,EAAY,UAAU,CAAA;AAAE;AAEvF,CAAC;AAEM,IAAM,cAAc,WAAA,CAAY;AAAA,EACrC,IAAA,EAAM,aAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,gBAAA,EAAkB,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC9C,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,MAAA,EAAQA,CAAAA,CAAE,IAAA,CAAK,CAAC,gBAAA,EAAkB,cAAA,EAAgB,iBAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,SAAA,EAAW,eAAe,CAAC,CAAA;AAAA,IACpH,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,KAAA,EAAO,WAAA,EAAa,KAAA,EAAO,MAAM,CAAC,CAAA;AAAA,IAC9D,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,uBAAuB,OAAA,EAAS,CAAC,aAAA,EAAe,UAAU,CAAA,EAAE;AAAA,IACnF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,0BAA0B,OAAA,EAAS,CAAC,aAAA,EAAe,aAAa,CAAA,EAAE;AAAA,IACzF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,UAAA,EAAY,MAAM,CAAA,EAAE;AAAA,IACvE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,aAAa,WAAA,CAAY;AAAA,EACpC,IAAA,EAAM,YAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,OAAA,EAAS,SAAA,EAAW,iBAAiB,CAAC,CAAA;AAAA,IACvE,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC/B,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,YAAYA,CAAAA,CAAE,KAAA,CAAM,KAAK,QAAQ,CAAC,EAAE,QAAA,EAAS;AAAA,IAC7C,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,SAAA,EAAW,WAAA,EAAa,UAAU,CAAC,CAAA;AAAA,IAC/D,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,cAAc,OAAA,EAAS,CAAC,SAAS,CAAA,EAAE;AAAA,IAC1D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC;AAEM,IAAM,mBAAmB,WAAA,CAAY;AAAA,EAC1C,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,cAAcA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,MAAM,CAAC,CAAA;AAAA,IACvC,eAAA,EAAiBA,EAAE,MAAA,EAAO;AAAA,IAC1B,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,cAAA,EAAgBA,EAAE,MAAA,EAAO;AAAA,IACzB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,IAClB,QAAQA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,WAAA,EAAa,SAAS,CAAC,CAAA;AAAA,IAC/C,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,qBAAA,EAAuB,SAAS,CAAC,aAAA,EAAe,YAAA,EAAc,eAAe,CAAA,EAAE;AAAA,IACtG,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,wBAAwB,OAAA,EAAS,CAAC,YAAA,EAAc,eAAe,CAAA,EAAE;AAAA,IACxF,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,iBAAiB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IACjE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,MAAA,EAAQ,aAAa,CAAA;AAAE;AAEpF,CAAC;AAEM,IAAM,mBAAmB,WAAA,CAAY;AAAA,EAC1C,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,gBAAA,EAAkBA,EAAE,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,IACrB,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,IACrB,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,IAClB,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,WAAW,UAAA,EAAY,QAAA,EAAU,SAAA,EAAW,UAAU,CAAC,CAAA;AAAA,IACzE,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,iBAAA,EAAmBA,EAAE,MAAA,EAAO;AAAA,IAC5B,cAAA,EAAgBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,eAAA,EAAiBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACrC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,UAAA,EAAY,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,IACrC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,UAAUA,CAAAA,CAAE,KAAA,CAAMA,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,UAAA,EAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAChC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,qBAAqB,OAAA,EAAS,CAAC,gBAAgB,CAAA,EAAE;AAAA,IACxE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,uBAAuB,OAAA,EAAS,CAAC,QAAA,EAAU,WAAW,CAAA,EAAE;AAAA,IAC/E,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,gBAAgB,OAAA,EAAS,CAAC,WAAW,CAAA;AAAE;AAEpE,CAAC;AAEM,IAAM,uBAAuB,WAAA,CAAY;AAAA,EAC9C,IAAA,EAAM,sBAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,IAClB,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAe,IAAA,CAAK,YAAY,CAAA,CAAE,QAAA,EAAS;AAAA,IAC3C,QAAA,EAAUA,CAAAA,CAAE,KAAA,CAAMA,CAAAA,CAAE,QAAQ,CAAA;AAAA,IAC5B,eAAeA,CAAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,YAAY,CAAC,CAAA;AAAA,IAC/C,QAAA,EAAUA,EAAE,IAAA,CAAK,CAAC,UAAU,UAAA,EAAY,SAAA,EAAW,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACxE,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,qBAAA,EAAuBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC3C,gBAAA,EAAkBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACtC,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,WAAA,EAAa,SAAS,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IACnE,YAAYA,CAAAA,CAAE,MAAA,CAAOA,EAAE,GAAA,EAAK,EAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAClC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,OAAA,EAAS,CAAC,OAAO,CAAA,EAAE;AAAA,IACtD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,gBAAgB,OAAA,EAAS,CAAC,WAAW,CAAA,EAAE;AAAA,IAC9D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA,EAAE;AAAA,IACxD,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,uBAAuB,OAAA,EAAS,CAAC,aAAA,EAAe,QAAQ,CAAA;AAAE;AAEvF,CAAC;AAEM,IAAM,eAAe,WAAA,CAAY;AAAA,EACtC,IAAA,EAAM,cAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAOA,EAAE,MAAA,CAAO;AAAA,IACd,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,IACxB,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,SAAS,SAAA,EAAW,OAAO,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAChE,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,UAAA,EAAY,KAAK,SAAS,CAAA;AAAA,IAC1B,eAAeA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA;AAAA,IACvC,UAAA,EAAYA,CAAAA,CAAE,IAAA,CAAK,CAAC,kBAAA,EAAoB,qBAAqB,gBAAA,EAAkB,eAAe,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAC1G,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,UAAUA,CAAAA,CAAE,KAAA,CAAMA,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACvC,iBAAA,EAAmBA,CAAAA,CAAE,KAAA,CAAMA,CAAAA,CAAE,MAAA,CAAO;AAAA,MACpC,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA,MACxB,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,MACrD,UAAA,EAAYA,CAAAA,CAAE,IAAA,CAAK,CAAC,kBAAA,EAAoB,qBAAqB,gBAAA,EAAkB,eAAe,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,MAC1G,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACnC,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IACX,iBAAA,EAAmBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACvC,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,IACjD,kBAAA,EAAoBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACxC,aAAA,EAAeA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,cAAA,EAAgBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,gBAAA,EAAkBA,EAAE,MAAA,EAAO;AAAA,IAC3B,iBAAA,EAAmBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACvC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACjC,cAAA,EAAgBA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,IACtB,WAAA,EAAaA,EAAE,MAAA;AAAO,GACvB,CAAA;AAAA,EACD,OAAA,EAAS;AAAA,IACL,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,gBAAgB,OAAA,EAAS,CAAC,WAAW,CAAA,EAAE;AAAA,IAC9D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,sBAAsB,OAAA,EAAS,CAAC,iBAAiB,CAAA,EAAE;AAAA,IAC1E,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,eAAe,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC5D,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,kBAAkB,OAAA,EAAS,CAAC,aAAa,CAAA,EAAE;AAAA,IAClE,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,aAAa,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAE;AAE9D,CAAC","file":"identity.js","sourcesContent":["import type { ZodObject, ZodRawShape } from \"zod\";\n\nexport type TableComponent = \"mc\" | \"kernel\" | \"identity\" | \"developer-pack\";\n\nexport type TableIndex =\n  | {\n      kind: \"index\";\n      name: string;\n      columns: readonly string[];\n    }\n  | {\n      kind: \"search\";\n      name: string;\n      searchField: string;\n      filterFields?: readonly string[];\n    }\n  | {\n      kind: \"vector\";\n      name: string;\n      vectorField: string;\n      dimensions: number;\n      filterFields?: readonly string[];\n    };\n\nexport type TableDeprecation = {\n  since: string;\n  reason: string;\n  replacement?: string;\n};\n\nexport type TableContract<S extends ZodRawShape = ZodRawShape> = {\n  name: string;\n  component: TableComponent;\n  category: string;\n  shape: ZodObject<S>;\n  indices: readonly TableIndex[];\n  deprecated?: TableDeprecation;\n  invariants?: readonly string[];\n};\n\nexport function defineTable<S extends ZodRawShape>(\n  spec: TableContract<S>\n): TableContract<S> {\n  return spec;\n}\n","import { z } from \"zod\";\n\nexport const CONVEX_ID_TABLE = Symbol.for(\"lucern.contracts.convexIdTable\");\n\nexport type ConvexIdSchema<T extends string> = z.ZodBranded<\n  z.ZodString,\n  `Id<${T}>`\n> & {\n  readonly [CONVEX_ID_TABLE]: T;\n};\n\nexport function idOf<T extends string>(table: T): ConvexIdSchema<T> {\n  const schema = z.string().brand<`Id<${T}>`>();\n  Object.defineProperty(schema, CONVEX_ID_TABLE, {\n    configurable: false,\n    enumerable: false,\n    value: table,\n    writable: false,\n  });\n  return schema as ConvexIdSchema<T>;\n}\n\nexport function getConvexIdTable(schema: z.ZodTypeAny): string | undefined {\n  return (schema as Partial<Record<typeof CONVEX_ID_TABLE, string>>)[\n    CONVEX_ID_TABLE\n  ];\n}\n","/**\n * Schema contracts for mc/identity.\n *\n * Mirrored from:\n *   - services/master-control/convex/schema.ts\n */\n\nimport { z } from 'zod';\nimport { defineTable, idOf } from '../../../dsl.js';\n\nexport const groupMemberships = defineTable({\n  name: \"groupMemberships\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"groupId\": idOf(\"groups\"),\n    \"principalId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"status\": z.enum([\"active\", \"invited\", \"revoked\"]),\n    \"addedBy\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_groupId\", columns: [\"groupId\"] },\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_principal_group\", columns: [\"principalId\", \"groupId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const groups = defineTable({\n  name: \"groups\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"groupKey\": z.string(),\n    \"name\": z.string(),\n    \"groupType\": z.enum([\"internal\", \"external\", \"system\"]),\n    \"description\": z.string().optional(),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_tenantId_groupKey\", columns: [\"tenantId\", \"groupKey\"] }\n    ],\n});\n\nexport const memberships = defineTable({\n  name: \"memberships\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"principalRefId\": idOf(\"principals\").optional(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"role\": z.enum([\"platform_admin\", \"tenant_admin\", \"workspace_admin\", \"editor\", \"viewer\", \"auditor\", \"service_agent\"]),\n    \"status\": z.enum([\"active\", \"invited\", \"revoked\"]),\n    \"source\": z.enum([\"manual\", \"sso\", \"bootstrap\", \"api\", \"scim\"]),\n    \"grantedBy\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_principal_tenant\", columns: [\"principalId\", \"tenantId\"] },\n      { kind: 'index', name: \"by_workspace_principal\", columns: [\"workspaceId\", \"principalId\"] },\n      { kind: 'index', name: \"by_tenant_role\", columns: [\"tenantId\", \"role\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const principals = defineTable({\n  name: \"principals\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"principalType\": z.enum([\"user\", \"group\", \"service\", \"external_viewer\"]),\n    \"clerkId\": z.string().optional(),\n    \"email\": z.string().optional(),\n    \"displayName\": z.string().optional(),\n    \"groupIds\": z.array(idOf(\"groups\")).optional(),\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"status\": z.enum([\"active\", \"invited\", \"suspended\", \"disabled\"]),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_clerkId\", columns: [\"clerkId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n\nexport const rateLimitWindows = defineTable({\n  name: \"rateLimitWindows\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"principalId\": z.string(),\n    \"keyId\": z.string().optional(),\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"windowType\": z.enum([\"minute\", \"hour\"]),\n    \"windowStartMs\": z.number(),\n    \"windowEndMs\": z.number(),\n    \"requestCount\": z.number(),\n    \"limit\": z.number(),\n    \"tier\": z.enum([\"free\", \"developer\", \"partner\"]),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_principal_window\", columns: [\"principalId\", \"windowType\", \"windowStartMs\"] },\n      { kind: 'index', name: \"by_window_type_start\", columns: [\"windowType\", \"windowStartMs\"] },\n      { kind: 'index', name: \"by_window_end\", columns: [\"windowEndMs\"] },\n      { kind: 'index', name: \"by_tier_window_end\", columns: [\"tier\", \"windowEndMs\"] }\n    ],\n});\n\nexport const oauthDeviceCodes = defineTable({\n  name: \"oauthDeviceCodes\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"deviceCodeHash\": z.string(),\n    \"userCode\": z.string(),\n    \"clientId\": z.string(),\n    \"scope\": z.string(),\n    \"status\": z.enum([\"pending\", \"approved\", \"denied\", \"expired\", \"consumed\"]),\n    \"expiresAt\": z.number(),\n    \"intervalSeconds\": z.number(),\n    \"lastPolledAt\": z.number().optional(),\n    \"slowDownCount\": z.number().optional(),\n    \"clerkUserId\": z.string().optional(),\n    \"tenantId\": idOf(\"tenants\").optional(),\n    \"workspaceId\": z.string().optional(),\n    \"principalId\": z.string().optional(),\n    \"role\": z.string().optional(),\n    \"scopes\": z.array(z.string()).optional(),\n    \"sessionId\": z.string().optional(),\n    \"approvedAt\": z.number().optional(),\n    \"deniedAt\": z.number().optional(),\n    \"consumedAt\": z.number().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_deviceCodeHash\", columns: [\"deviceCodeHash\"] },\n      { kind: 'index', name: \"by_userCode\", columns: [\"userCode\"] },\n      { kind: 'index', name: \"by_status_expiresAt\", columns: [\"status\", \"expiresAt\"] },\n      { kind: 'index', name: \"by_sessionId\", columns: [\"sessionId\"] }\n    ],\n});\n\nexport const servicePrincipalKeys = defineTable({\n  name: \"servicePrincipalKeys\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"keyId\": z.string(),\n    \"tokenHash\": z.string(),\n    \"principalId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"workspaceId\": idOf(\"workspaces\").optional(),\n    \"scopes\": z.array(z.string()),\n    \"environment\": z.enum([\"sandbox\", \"production\"]),\n    \"status\": z.enum([\"active\", \"rotating\", \"rotated\", \"expired\", \"revoked\"]),\n    \"expiresAt\": z.number(),\n    \"rotationGracePeriod\": z.number().optional(),\n    \"rotatedToKeyId\": z.string().optional(),\n    \"rateLimitTier\": z.enum([\"free\", \"developer\", \"partner\"]).optional(),\n    \"metadata\": z.record(z.any()).optional(),\n    \"createdBy\": z.string(),\n    \"revokedBy\": z.string().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"lastUsedAt\": z.number().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_keyId\", columns: [\"keyId\"] },\n      { kind: 'index', name: \"by_tokenHash\", columns: [\"tokenHash\"] },\n      { kind: 'index', name: \"by_principalId\", columns: [\"principalId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_workspaceId\", columns: [\"workspaceId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] },\n      { kind: 'index', name: \"by_principal_status\", columns: [\"principalId\", \"status\"] }\n    ],\n});\n\nexport const userSessions = defineTable({\n  name: \"userSessions\",\n  component: \"mc\",\n  category: \"identity\",\n  shape: z.object({\n    \"sessionId\": z.string(),\n    \"tenantId\": idOf(\"tenants\"),\n    \"clerkUserId\": z.string(),\n    \"principalId\": z.string().optional(),\n    \"principalType\": z.enum([\"human\", \"service\", \"agent\"]).optional(),\n    \"workspaceId\": z.string().optional(),\n    \"apiKeyId\": idOf(\"apiKeys\"),\n    \"sessionType\": z.enum([\"user\", \"agent\"]),\n    \"authMode\": z.enum([\"interactive_user\", \"service_principal\", \"tenant_api_key\", \"session_token\"]).optional(),\n    \"role\": z.string().optional(),\n    \"scopes\": z.array(z.string()).optional(),\n    \"delegationChain\": z.array(z.object({\n    \"principalId\": z.string(),\n    \"principalType\": z.enum([\"human\", \"service\", \"agent\"]),\n    \"authMode\": z.enum([\"interactive_user\", \"service_principal\", \"tenant_api_key\", \"session_token\"]).optional(),\n    \"sessionId\": z.string().optional(),\n    \"delegatedAt\": z.number().optional(),\n    \"reason\": z.string().optional()\n  })).optional(),\n    \"sourceSessionId\": z.string().optional(),\n    \"status\": z.enum([\"active\", \"expired\", \"revoked\"]),\n    \"sessionExpiresAt\": z.number().optional(),\n    \"jwtIssuedAt\": z.number().optional(),\n    \"jwtExpiresAt\": z.number().optional(),\n    \"lastActivityAt\": z.number(),\n    \"lastValidatedAt\": z.number().optional(),\n    \"revokedAt\": z.number().optional(),\n    \"revokedBy\": z.string().optional(),\n    \"revokeReason\": z.string().optional(),\n    \"createdAt\": z.number(),\n    \"updatedAt\": z.number()\n  }),\n  indices: [\n      { kind: 'index', name: \"by_sessionId\", columns: [\"sessionId\"] },\n      { kind: 'index', name: \"by_sourceSessionId\", columns: [\"sourceSessionId\"] },\n      { kind: 'index', name: \"by_tenantId\", columns: [\"tenantId\"] },\n      { kind: 'index', name: \"by_clerkUserId\", columns: [\"clerkUserId\"] },\n      { kind: 'index', name: \"by_status\", columns: [\"status\"] }\n    ],\n});\n"]}