@lucern/contracts 0.3.0-alpha.3 → 0.3.0-alpha.5

package/dist/tenant-client.contract.d.ts

@@ -23,8 +23,8 @@ type TenantClientForbiddenInstallTokenInfisicalPath = (typeof TENANT_CLIENT_FORB
 type TenantClientForbiddenSecretEnv = (typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV)[number];
 declare const TENANT_CLIENT_INSTALLABLE_PACKAGES: readonly [{
     readonly packageName: "@lucern/access-control";
-    readonly role: "sdk_dependency";
-    readonly directTenantImport: false;
+    readonly role: "runtime_entrypoint";
+    readonly directTenantImport: true;
 }, {
     readonly packageName: "@lucern/agent";
     readonly role: "platform_runtime";
@@ -117,6 +117,60 @@ declare const TENANT_CLIENT_INSTALLABLE_PACKAGES: readonly [{
 type TenantClientInstallablePackage = (typeof TENANT_CLIENT_INSTALLABLE_PACKAGES)[number];
 type TenantClientPackageRole = TenantClientInstallablePackage["role"];
 type TenantClientInstallablePackageName = TenantClientInstallablePackage["packageName"];
+/**
+ * Direct package installs are package.json entries owned by the tenant repo.
+ * Direct imports are source-code imports that tenant application code may use.
+ *
+ * These concepts intentionally differ: `@lucern/cli` is a direct install when a
+ * tenant repo needs the `lucern` binary, but it is not a direct application
+ * import. `@lucern/reasoning-kernel` and `@lucern/identity` are direct installs
+ * for Convex component binding, while tenant app code should only import their
+ * explicit component config subpaths.
+ */
+type TenantClientInstallProfile = {
+    id: string;
+    description: string;
+    packageNames: readonly TenantClientInstallablePackageName[];
+    dependencyField: "dependencies" | "devDependencies" | "mixed";
+};
+declare const TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES: readonly TenantClientInstallablePackageName[];
+declare const TENANT_CLIENT_INSTALL_PROFILES: readonly [{
+    readonly id: "core_app_runtime";
+    readonly description: "Smallest tenant app/runtime install for typed Lucern API calls plus tool-access policy helpers.";
+    readonly packageNames: readonly ["@lucern/sdk", "@lucern/access-control"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "react_app_runtime";
+    readonly description: "React tenant app install for hooks, provider, curated graph components, and direct SDK calls.";
+    readonly packageNames: readonly ["@lucern/react", "@lucern/sdk", "@lucern/access-control"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "convex_components";
+    readonly description: "Tenant Convex host install for binding the Lucern identity and reasoning-kernel components.";
+    readonly packageNames: readonly ["@lucern/identity", "@lucern/reasoning-kernel"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "operator_cli";
+    readonly description: "Developer/operator install for the `lucern` binary, including tenant bootstrap seed commands.";
+    readonly packageNames: readonly ["@lucern/cli"];
+    readonly dependencyField: "devDependencies";
+}, {
+    readonly id: "mcp_runtime";
+    readonly description: "Agent runtime install for the standalone Lucern MCP server and hosted route helpers.";
+    readonly packageNames: readonly ["@lucern/mcp"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "contracts_and_types";
+    readonly description: "Compile-time contract/type install for codegen, audits, and tenant integration validation.";
+    readonly packageNames: readonly ["@lucern/contracts", "@lucern/types"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "full_suite";
+    readonly description: "Full coherent Lucern package suite for design-partner repos that want every published runtime, tool, component, test, and config package pinned together.";
+    readonly packageNames: readonly ("@lucern/access-control" | "@lucern/agent" | "@lucern/auth" | "@lucern/cli" | "@lucern/client-core" | "@lucern/confidence" | "@lucern/config" | "@lucern/contracts" | "@lucern/control-plane" | "@lucern/developer-kit" | "@lucern/events" | "@lucern/graph-primitives" | "@lucern/identity" | "@lucern/mcp" | "@lucern/pack-host" | "@lucern/pack-installer" | "@lucern/proof-compiler" | "@lucern/react" | "@lucern/reasoning-kernel" | "@lucern/sdk" | "@lucern/server-core" | "@lucern/testing" | "@lucern/types")[];
+    readonly dependencyField: "mixed";
+}];
+type TenantClientInstallProfileId = (typeof TENANT_CLIENT_INSTALL_PROFILES)[number]["id"];
 /**
  * Direct imports tenant-owned product code may use. This is intentionally
  * smaller than TENANT_CLIENT_INSTALLABLE_PACKAGES: several publishable packages
@@ -143,6 +197,11 @@ declare const TENANT_CLIENT_PUBLIC_IMPORTS: readonly [{
     readonly surface: "contract";
     readonly subpaths: "published_exports";
     readonly description: "Published type and manifest contracts.";
+}, {
+    readonly packageName: "@lucern/access-control";
+    readonly surface: "runtime";
+    readonly subpaths: "published_exports";
+    readonly description: "Tenant runtime access-control helpers, including effective tool access.";
 }, {
     readonly packageName: "@lucern/types";
     readonly surface: "contract";
@@ -172,7 +231,7 @@ type TenantClientComponentConfigImport = (typeof TENANT_CLIENT_COMPONENT_CONFIG_
 type TenantClientAllowedImport = TenantClientPublicImport | TenantClientComponentConfigImport;
 declare function findTenantClientInstallablePackage(packageName: string): TenantClientInstallablePackage | undefined;
 declare function isTenantClientInstallablePackage(packageName: string): boolean;
-declare const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
+declare const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphIntel", "graphIntelligence", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
 type TenantClientRequiredSdkNamespace = (typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES)[number];
 declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly id: "identity.bootstrap_session";
@@ -186,7 +245,7 @@ declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
     readonly id: "reasoning.graph.read";
-    readonly description: "Read beliefs, evidence, questions, topics, and lineage.";
+    readonly description: "Read beliefs, evidence, questions, topics, graph edges, and lineage.";
     readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
@@ -194,6 +253,11 @@ declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly description: "Create and update graph objects through authorized APIs.";
     readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+}, {
+    readonly id: "reasoning.graph_intelligence.run";
+    readonly description: "Discover and run Graph Intelligence query recipes for structural graph analysis.";
+    readonly surfaces: readonly ["@lucern/sdk", "@lucern/cli", "@lucern/mcp"];
+    readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
     readonly id: "workflow.worktree_lifecycle";
     readonly description: "Create, review, merge, and close scoped worktrees.";
@@ -263,4 +327,4 @@ declare function isTenantClientAllowedImport(importPath: string): boolean;
 declare function assertTenantClientImportAllowed(importPath: string): void;
 declare function formatTenantClientImportViolation(classification: TenantClientImportClassification): string;
 
-export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientAllowedImport, type TenantClientAuthMode, type TenantClientCapability, type TenantClientCapabilityId, type TenantClientComponentConfigImport, type TenantClientForbiddenImportPattern, type TenantClientForbiddenImportPatternId, type TenantClientForbiddenInstallTokenInfisicalPath, type TenantClientForbiddenSecretEnv, type TenantClientImportClassification, type TenantClientImportDecision, type TenantClientInstallablePackage, type TenantClientInstallablePackageName, type TenantClientIsolationRule, type TenantClientOptionalContextField, type TenantClientPackageRole, type TenantClientPrincipalType, type TenantClientPublicImport, type TenantClientPublicPackage, type TenantClientPublicSurface, type TenantClientRequiredContextField, type TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
+export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_PROFILES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientAllowedImport, type TenantClientAuthMode, type TenantClientCapability, type TenantClientCapabilityId, type TenantClientComponentConfigImport, type TenantClientForbiddenImportPattern, type TenantClientForbiddenImportPatternId, type TenantClientForbiddenInstallTokenInfisicalPath, type TenantClientForbiddenSecretEnv, type TenantClientImportClassification, type TenantClientImportDecision, type TenantClientInstallProfile, type TenantClientInstallProfileId, type TenantClientInstallablePackage, type TenantClientInstallablePackageName, type TenantClientIsolationRule, type TenantClientOptionalContextField, type TenantClientPackageRole, type TenantClientPrincipalType, type TenantClientPublicImport, type TenantClientPublicPackage, type TenantClientPublicSurface, type TenantClientRequiredContextField, type TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };

package/dist/tenant-client.contract.js

@@ -33,8 +33,8 @@ var TENANT_CLIENT_FORBIDDEN_SECRET_ENV = ["NPM_TOKEN"];
 var TENANT_CLIENT_INSTALLABLE_PACKAGES = [
   {
     packageName: "@lucern/access-control",
-    role: "sdk_dependency",
-    directTenantImport: false
+    role: "runtime_entrypoint",
+    directTenantImport: true
   },
   {
     packageName: "@lucern/agent",
@@ -147,6 +147,53 @@ var TENANT_CLIENT_INSTALLABLE_PACKAGES = [
     directTenantImport: true
   }
 ];
+var TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES = TENANT_CLIENT_INSTALLABLE_PACKAGES.map(
+  (entry) => entry.packageName
+);
+var TENANT_CLIENT_INSTALL_PROFILES = [
+  {
+    id: "core_app_runtime",
+    description: "Smallest tenant app/runtime install for typed Lucern API calls plus tool-access policy helpers.",
+    packageNames: ["@lucern/sdk", "@lucern/access-control"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "react_app_runtime",
+    description: "React tenant app install for hooks, provider, curated graph components, and direct SDK calls.",
+    packageNames: ["@lucern/react", "@lucern/sdk", "@lucern/access-control"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "convex_components",
+    description: "Tenant Convex host install for binding the Lucern identity and reasoning-kernel components.",
+    packageNames: ["@lucern/identity", "@lucern/reasoning-kernel"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "operator_cli",
+    description: "Developer/operator install for the `lucern` binary, including tenant bootstrap seed commands.",
+    packageNames: ["@lucern/cli"],
+    dependencyField: "devDependencies"
+  },
+  {
+    id: "mcp_runtime",
+    description: "Agent runtime install for the standalone Lucern MCP server and hosted route helpers.",
+    packageNames: ["@lucern/mcp"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "contracts_and_types",
+    description: "Compile-time contract/type install for codegen, audits, and tenant integration validation.",
+    packageNames: ["@lucern/contracts", "@lucern/types"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "full_suite",
+    description: "Full coherent Lucern package suite for design-partner repos that want every published runtime, tool, component, test, and config package pinned together.",
+    packageNames: TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES,
+    dependencyField: "mixed"
+  }
+];
 var TENANT_CLIENT_PUBLIC_IMPORTS = [
   {
     packageName: "@lucern/sdk",
@@ -172,6 +219,12 @@ var TENANT_CLIENT_PUBLIC_IMPORTS = [
     subpaths: "published_exports",
     description: "Published type and manifest contracts."
   },
+  {
+    packageName: "@lucern/access-control",
+    surface: "runtime",
+    subpaths: "published_exports",
+    description: "Tenant runtime access-control helpers, including effective tool access."
+  },
   {
     packageName: "@lucern/types",
     surface: "contract",
@@ -219,6 +272,8 @@ var TENANT_CLIENT_REQUIRED_SDK_NAMESPACES = [
   "edges",
   "contradictions",
   "contracts",
+  "graphIntel",
+  "graphIntelligence",
   "graphAnalysis",
   "graphRecommendations",
   "orgGraphSearch",
@@ -247,7 +302,7 @@ var TENANT_CLIENT_CAPABILITIES = [
   },
   {
     id: "reasoning.graph.read",
-    description: "Read beliefs, evidence, questions, topics, and lineage.",
+    description: "Read beliefs, evidence, questions, topics, graph edges, and lineage.",
     surfaces: ["@lucern/sdk", "@lucern/react", "@lucern/mcp"],
     requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
   },
@@ -257,6 +312,12 @@ var TENANT_CLIENT_CAPABILITIES = [
     surfaces: ["@lucern/sdk", "@lucern/mcp"],
     requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
   },
+  {
+    id: "reasoning.graph_intelligence.run",
+    description: "Discover and run Graph Intelligence query recipes for structural graph analysis.",
+    surfaces: ["@lucern/sdk", "@lucern/cli", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
   {
     id: "workflow.worktree_lifecycle",
     description: "Create, review, merge, and close scoped worktrees.",
@@ -399,6 +460,6 @@ function formatTenantClientImportViolation(classification) {
   return `Tenant client import is not allowed${patternId}: ${classification.importPath}. ${classification.reason}`;
 }
 
-export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
+export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_PROFILES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
 //# sourceMappingURL=tenant-client.contract.js.map
 //# sourceMappingURL=tenant-client.contract.js.map

package/dist/tenant-client.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tenant-client.contract.ts"],"names":[],"mappings":";AAcO,IAAM,8BAAA,GAAiC;AAEvC,IAAM,wBAAA,GAA2B;AAAA,EACtC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,6BAAA,GAAgC;AAAA,EAC3C,OAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AAIO,IAAM,qCAAA,GAAwC;AAAA,EACnD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;AAIO,IAAM,qCAAA,GAAwC;AAAA,EACnD,eAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAIO,IAAM,+BAAA,GAAkC;AACxC,IAAM,0CAAA,GACX;AACK,IAAM,qDAAA,GAAwD;AAAA,EACnE;AACF;AACO,IAAM,kCAAA,GAAqC,CAAC,WAAW;AAMvD,IAAM,kCAAA,GAAqC;AAAA,EAChD;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,qBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,oBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,gBAAA;AAAA,IACb,IAAA,EAAM,eAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,IAAA,EAAM,qBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,uBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,uBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,gBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,kBAAA;AAAA,IACb,IAAA,EAAM,mBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,IAAA,EAAM,mBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,qBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,iBAAA;AAAA,IACb,IAAA,EAAM,cAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,qBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA;AAExB;AAaO,IAAM,4BAAA,GAA+B;AAAA,EAC1C;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAOO,IAAM,sCAAA,GAAyC;AAAA,EACpD;AAAA,IACE,WAAA,EAAa,kBAAA;AAAA,IACb,UAAA,EAAY,gCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,UAAA,EAAY,wCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,UAAA,EAAY,yCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA;AAEN;AAOO,SAAS,mCACd,WAAA,EAC4C;AAC5C,EAAA,OAAO,kCAAA,CAAmC,IAAA;AAAA,IACxC,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,KAAgB;AAAA,GACnC;AACF;AAEO,SAAS,iCAAiC,WAAA,EAA8B;AAC7E,EAAA,OAAO,OAAA,CAAQ,kCAAA,CAAmC,WAAW,CAAC,CAAA;AAChE;AAEO,IAAM,qCAAA,GAAwC;AAAA,EACnD,WAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,gBAAA;AAAA,EACA,YAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAA6B;AAAA,EACxC;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,WAAA,EAAa,uDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IACvC,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,WAAA,EAAa,wDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,sBAAA;AAAA,IACJ,WAAA,EAAa,yDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,uBAAA;AAAA,IACJ,WAAA,EAAa,0DAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IACvC,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,6BAAA;AAAA,IACJ,WAAA,EAAa,oDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA;AAE3B;AAKO,IAAM,6BAAA,GAAgC;AAAA,EAC3C;AAAA,IACE,EAAA,EAAI,iCAAA;AAAA,IACJ,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,WAAA,EACE;AAAA;AAEN;AAIO,IAAM,uCAAA,GAA0C;AAAA,EACrD;AAAA,IACE,EAAA,EAAI,iBAAA;AAAA,IACJ,OAAA,EAAS,2BAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,kBAAA;AAAA,IACJ,OAAA,EAAS,4BAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,OAAA,EAAS,gDAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,wBAAA;AAAA,IACJ,OAAA,EAAS,4CAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,OAAA,EAAS,+DAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,OAAA,EAAS,qDAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,OAAA,EAAS,mEAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,sBAAA;AAAA,IACJ,OAAA,EAAS,aAAA;AAAA,IACT,WAAA,EACE;AAAA;AAEN;AAoBA,SAAS,oBACP,UAAA,EACuC;AACvC,EAAA,MAAM,kBAAkB,sCAAA,CAAuC,IAAA;AAAA,IAC7D,CAAC,KAAA,KAAU,UAAA,KAAe,KAAA,CAAM;AAAA,GAClC;AACA,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO,4BAAA,CAA6B,IAAA;AAAA,IAClC,CAAC,KAAA,KACC,UAAA,KAAe,KAAA,CAAM,WAAA,IACrB,WAAW,UAAA,CAAW,CAAA,EAAG,KAAA,CAAM,WAAW,CAAA,CAAA,CAAG;AAAA,GACjD;AACF;AAEA,SAAS,wBACP,UAAA,EACgD;AAChD,EAAA,OAAO,uCAAA,CAAwC,IAAA;AAAA,IAAK,CAAC,UACnD,IAAI,MAAA,CAAO,MAAM,OAAA,EAAS,GAAG,CAAA,CAAE,IAAA,CAAK,UAAU;AAAA,GAChD;AACF;AAEO,SAAS,2BACd,UAAA,EACkC;AAClC,EAAA,MAAM,oBAAA,GAAuB,WAAW,IAAA,EAAK;AAC7C,EAAA,MAAM,OAAA,GAAU,wBAAwB,oBAAoB,CAAA;AAE5D,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,WAAA;AAAA,MACV,OAAA;AAAA,MACA,QAAQ,OAAA,CAAQ;AAAA,KAClB;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,oBAAoB,oBAAoB,CAAA;AAC7D,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,QAAA;AAAA,MACV,YAAA;AAAA,MACA,QAAQ,YAAA,CAAa;AAAA,KACvB;AAAA,EACF;AAEA,EAAA,IAAI,oBAAA,CAAqB,UAAA,CAAW,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,WAAA;AAAA,MACV,MAAA,EACE;AAAA,KACJ;AAAA,EACF;AAEA,EAAA,IACE,qBAAqB,UAAA,CAAW,IAAI,KACpC,oBAAA,CAAqB,UAAA,CAAW,KAAK,CAAA,EACrC;AACA,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,OAAA;AAAA,MACV,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,oBAAA;AAAA,IACZ,QAAA,EAAU,UAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AACF;AAEO,SAAS,2BAA2B,UAAA,EAA6B;AACtE,EAAA,OAAO,0BAAA,CAA2B,UAAU,CAAA,CAAE,QAAA,KAAa,QAAA;AAC7D;AAEO,SAAS,oCACd,UAAA,EACS;AACT,EAAA,OAAO,sCAAA,CAAuC,IAAA;AAAA,IAC5C,CAAC,KAAA,KAAU,UAAA,KAAe,KAAA,CAAM;AAAA,GAClC;AACF;AAEO,SAAS,4BAA4B,UAAA,EAA6B;AACvE,EAAA,OAAO,0BAAA,CAA2B,UAAU,CAAA,CAAE,QAAA,KAAa,QAAA;AAC7D;AAEO,SAAS,gCAAgC,UAAA,EAA0B;AACxE,EAAA,MAAM,cAAA,GAAiB,2BAA2B,UAAU,CAAA;AAC5D,EAAA,IAAI,cAAA,CAAe,aAAa,WAAA,EAAa;AAC3C,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,CAAkC,cAAc,CAAC,CAAA;AACnE;AAEO,SAAS,kCACd,cAAA,EACQ;AACR,EAAA,MAAM,YAAY,cAAA,CAAe,OAAA,GAC7B,KAAK,cAAA,CAAe,OAAA,CAAQ,EAAE,CAAA,CAAA,CAAA,GAC9B,EAAA;AACJ,EAAA,OAAO,sCAAsC,SAAS,CAAA,EAAA,EAAK,eAAe,UAAU,CAAA,EAAA,EAAK,eAAe,MAAM,CAAA,CAAA;AAChH","file":"tenant-client.contract.js","sourcesContent":["/**\n * Tenant client contract\n *\n * Defines the generic boundary for any customer-owned product that consumes\n * Lucern through the SDK, hosted API, or MCP server. Tenant clients may run\n * their own UI, auth provider, deployment, and data plane, but reasoning\n * operations must enter through the published packages below.\n */\n\nimport type {\n  SessionAuthMode,\n  SessionPrincipalType,\n} from \"./auth.contract\";\n\nexport const TENANT_CLIENT_CONTRACT_VERSION = \"2026-04-27\" as const;\n\nexport const TENANT_CLIENT_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const satisfies readonly SessionAuthMode[];\nexport type TenantClientAuthMode = (typeof TENANT_CLIENT_AUTH_MODES)[number];\n\nexport const TENANT_CLIENT_PRINCIPAL_TYPES = [\n  \"human\",\n  \"service\",\n  \"agent\",\n] as const satisfies readonly SessionPrincipalType[];\nexport type TenantClientPrincipalType =\n  (typeof TENANT_CLIENT_PRINCIPAL_TYPES)[number];\n\nexport const TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"authMode\",\n  \"scopes\",\n] as const;\nexport type TenantClientRequiredContextField =\n  (typeof TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS)[number];\n\nexport const TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS = [\n  \"principalType\",\n  \"roles\",\n  \"sessionId\",\n  \"delegationChain\",\n] as const;\nexport type TenantClientOptionalContextField =\n  (typeof TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS)[number];\n\nexport const TENANT_CLIENT_INSTALL_TOKEN_ENV = \"INSTALL_LUCERN_NPM\" as const;\nexport const TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH =\n  \"tenants/shared\" as const;\nexport const TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS = [\n  \"/platform/publish\",\n] as const;\nexport const TENANT_CLIENT_FORBIDDEN_SECRET_ENV = [\"NPM_TOKEN\"] as const;\nexport type TenantClientForbiddenInstallTokenInfisicalPath =\n  (typeof TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS)[number];\nexport type TenantClientForbiddenSecretEnv =\n  (typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV)[number];\n\nexport const TENANT_CLIENT_INSTALLABLE_PACKAGES = [\n  {\n    packageName: \"@lucern/access-control\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/agent\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/auth\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/cli\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/client-core\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/confidence\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/config\",\n    role: \"configuration\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/contracts\",\n    role: \"contract_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/control-plane\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/developer-kit\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/events\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/graph-primitives\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/identity\",\n    role: \"component_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/mcp\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/pack-host\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/pack-installer\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/proof-compiler\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/react\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    role: \"component_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/sdk\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/server-core\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/testing\",\n    role: \"test_support\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/types\",\n    role: \"contract_entrypoint\",\n    directTenantImport: true,\n  },\n] as const;\nexport type TenantClientInstallablePackage =\n  (typeof TENANT_CLIENT_INSTALLABLE_PACKAGES)[number];\nexport type TenantClientPackageRole = TenantClientInstallablePackage[\"role\"];\nexport type TenantClientInstallablePackageName =\n  TenantClientInstallablePackage[\"packageName\"];\n\n/**\n * Direct imports tenant-owned product code may use. This is intentionally\n * smaller than TENANT_CLIENT_INSTALLABLE_PACKAGES: several publishable packages\n * are installed as SDK dependencies, tooling, or platform runtimes but should\n * not become the application integration surface.\n */\nexport const TENANT_CLIENT_PUBLIC_IMPORTS = [\n  {\n    packageName: \"@lucern/sdk\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"TypeScript SDK runtime and generated operation namespaces.\",\n  },\n  {\n    packageName: \"@lucern/react\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"React bindings for tenant-owned UI applications.\",\n  },\n  {\n    packageName: \"@lucern/mcp\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"MCP client/server entry points and hosted route helpers.\",\n  },\n  {\n    packageName: \"@lucern/contracts\",\n    surface: \"contract\",\n    subpaths: \"published_exports\",\n    description: \"Published type and manifest contracts.\",\n  },\n  {\n    packageName: \"@lucern/types\",\n    surface: \"contract\",\n    subpaths: \"published_exports\",\n    description: \"Published type-only helpers for tenant integration code.\",\n  },\n] as const;\nexport type TenantClientPublicImport =\n  (typeof TENANT_CLIENT_PUBLIC_IMPORTS)[number];\nexport type TenantClientPublicPackage =\n  TenantClientPublicImport[\"packageName\"];\nexport type TenantClientPublicSurface = TenantClientPublicImport[\"surface\"];\n\nexport const TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS = [\n  {\n    packageName: \"@lucern/identity\",\n    importPath: \"@lucern/identity/convex.config\",\n    surface: \"component_config\",\n    description:\n      \"Convex component binding config for tenant deployments that install Lucern identity.\",\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    importPath: \"@lucern/reasoning-kernel/convex.config\",\n    surface: \"component_config\",\n    description:\n      \"Convex component binding config for tenant deployments that install the Lucern reasoning kernel.\",\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    importPath: \"@lucern/reasoning-kernel/runtime.config\",\n    surface: \"component_config\",\n    description:\n      \"Runtime config alias for tenant deployments that install the Lucern reasoning kernel.\",\n  },\n] as const;\nexport type TenantClientComponentConfigImport =\n  (typeof TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS)[number];\nexport type TenantClientAllowedImport =\n  | TenantClientPublicImport\n  | TenantClientComponentConfigImport;\n\nexport function findTenantClientInstallablePackage(\n  packageName: string\n): TenantClientInstallablePackage | undefined {\n  return TENANT_CLIENT_INSTALLABLE_PACKAGES.find(\n    (entry) => entry.packageName === packageName\n  );\n}\n\nexport function isTenantClientInstallablePackage(packageName: string): boolean {\n  return Boolean(findTenantClientInstallablePackage(packageName));\n}\n\nexport const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES = [\n  \"bootstrap\",\n  \"context\",\n  \"beliefs\",\n  \"evidence\",\n  \"questions\",\n  \"graph\",\n  \"worktrees\",\n  \"topics\",\n  \"edges\",\n  \"contradictions\",\n  \"contracts\",\n  \"graphAnalysis\",\n  \"graphRecommendations\",\n  \"orgGraphSearch\",\n  \"embeddings\",\n  \"ontologyLinks\",\n  \"graphStateClassifier\",\n  \"tools\",\n  \"identity\",\n  \"modelRuntime\",\n  \"events\",\n  \"jobs\",\n  \"telemetry\",\n] as const;\nexport type TenantClientRequiredSdkNamespace =\n  (typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES)[number];\n\nexport const TENANT_CLIENT_CAPABILITIES = [\n  {\n    id: \"identity.bootstrap_session\",\n    description: \"Start a scoped Lucern session for a tenant principal.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.context.compile\",\n    description: \"Compile tenant and workspace scoped reasoning context.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.graph.read\",\n    description: \"Read beliefs, evidence, questions, topics, and lineage.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.graph.write\",\n    description: \"Create and update graph objects through authorized APIs.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"workflow.worktree_lifecycle\",\n    description: \"Create, review, merge, and close scoped worktrees.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n] as const;\nexport type TenantClientCapability =\n  (typeof TENANT_CLIENT_CAPABILITIES)[number];\nexport type TenantClientCapabilityId = TenantClientCapability[\"id\"];\n\nexport const TENANT_CLIENT_ISOLATION_RULES = [\n  {\n    id: \"tenant_workspace_scope_required\",\n    description:\n      \"Runtime operations must resolve both tenantId and workspaceId before reaching Lucern reasoning state.\",\n  },\n  {\n    id: \"principal_audit_required\",\n    description:\n      \"Runtime operations must carry principalId, authMode, and scopes for audit attribution.\",\n  },\n  {\n    id: \"no_private_lucern_imports\",\n    description:\n      \"Tenant code must not import Lucern source, Convex internals, generated adapters, or unpublished package internals.\",\n  },\n] as const;\nexport type TenantClientIsolationRule =\n  (typeof TENANT_CLIENT_ISOLATION_RULES)[number];\n\nexport const TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS = [\n  {\n    id: \"deep_src_import\",\n    pattern: \"^@lucern/[^/]+/src(?:/|$)\",\n    description: \"Published packages must not be bypassed through src paths.\",\n  },\n  {\n    id: \"deep_dist_import\",\n    pattern: \"^@lucern/[^/]+/dist(?:/|$)\",\n    description:\n      \"Published package exports must be used instead of dist file paths.\",\n  },\n  {\n    id: \"generated_adapter_import\",\n    pattern: \"^@lucern/[^/]+/(?:adapters/)?_generated(?:/|$)\",\n    description:\n      \"Generated Lucern adapters are internal deployment artifacts.\",\n  },\n  {\n    id: \"private_runtime_import\",\n    pattern: \"^@lucern/[^/]+/(?:internal|private)(?:/|$)\",\n    description: \"Internal and private package subpaths are not public SDK API.\",\n  },\n  {\n    id: \"workspace_source_import\",\n    pattern: \"^(?:packages|modules|services|lucern|apps)/(?:.+/)?src(?:/|$)\",\n    description:\n      \"Tenant clients must not import source files from the Lucern monorepo.\",\n  },\n  {\n    id: \"root_alias_lucern_import\",\n    pattern: \"^@/(?:lucern|packages|modules|services|apps)(?:/|$)\",\n    description:\n      \"Tenant clients must not depend on Lucern repo-local path aliases.\",\n  },\n  {\n    id: \"relative_lucern_source_import\",\n    pattern: \"^\\\\.\\\\.?/(?:.+/)?(?:packages|modules|services|lucern|apps)(?:/|$)\",\n    description:\n      \"Tenant clients must not reach back into Lucern source through relative paths.\",\n  },\n  {\n    id: \"monorepo_path_import\",\n    pattern: \"lucern-repo\",\n    description:\n      \"Absolute imports that name the Lucern repository are not portable tenant code.\",\n  },\n] as const;\nexport type TenantClientForbiddenImportPattern =\n  (typeof TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS)[number];\nexport type TenantClientForbiddenImportPatternId =\n  TenantClientForbiddenImportPattern[\"id\"];\n\nexport type TenantClientImportDecision =\n  | \"public\"\n  | \"forbidden\"\n  | \"local\"\n  | \"external\";\n\nexport type TenantClientImportClassification = {\n  importPath: string;\n  decision: TenantClientImportDecision;\n  publicImport?: TenantClientAllowedImport;\n  pattern?: TenantClientForbiddenImportPattern;\n  reason: string;\n};\n\nfunction matchesPublicImport(\n  importPath: string\n): TenantClientAllowedImport | undefined {\n  const componentConfig = TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.find(\n    (entry) => importPath === entry.importPath\n  );\n  if (componentConfig) {\n    return componentConfig;\n  }\n\n  return TENANT_CLIENT_PUBLIC_IMPORTS.find(\n    (entry) =>\n      importPath === entry.packageName ||\n      importPath.startsWith(`${entry.packageName}/`)\n  );\n}\n\nfunction matchesForbiddenPattern(\n  importPath: string\n): TenantClientForbiddenImportPattern | undefined {\n  return TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS.find((entry) =>\n    new RegExp(entry.pattern, \"u\").test(importPath)\n  );\n}\n\nexport function classifyTenantClientImport(\n  importPath: string\n): TenantClientImportClassification {\n  const normalizedImportPath = importPath.trim();\n  const pattern = matchesForbiddenPattern(normalizedImportPath);\n\n  if (pattern) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"forbidden\",\n      pattern,\n      reason: pattern.description,\n    };\n  }\n\n  const publicImport = matchesPublicImport(normalizedImportPath);\n  if (publicImport) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"public\",\n      publicImport,\n      reason: publicImport.description,\n    };\n  }\n\n  if (normalizedImportPath.startsWith(\"@lucern/\")) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"forbidden\",\n      reason:\n        \"This @lucern package is not part of the tenant client public surface.\",\n    };\n  }\n\n  if (\n    normalizedImportPath.startsWith(\"./\") ||\n    normalizedImportPath.startsWith(\"../\")\n  ) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"local\",\n      reason: \"Local tenant-owned import.\",\n    };\n  }\n\n  return {\n    importPath: normalizedImportPath,\n    decision: \"external\",\n    reason: \"External dependency outside the Lucern package namespace.\",\n  };\n}\n\nexport function isTenantClientPublicImport(importPath: string): boolean {\n  return classifyTenantClientImport(importPath).decision === \"public\";\n}\n\nexport function isTenantClientComponentConfigImport(\n  importPath: string\n): boolean {\n  return TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.some(\n    (entry) => importPath === entry.importPath\n  );\n}\n\nexport function isTenantClientAllowedImport(importPath: string): boolean {\n  return classifyTenantClientImport(importPath).decision === \"public\";\n}\n\nexport function assertTenantClientImportAllowed(importPath: string): void {\n  const classification = classifyTenantClientImport(importPath);\n  if (classification.decision !== \"forbidden\") {\n    return;\n  }\n\n  throw new Error(formatTenantClientImportViolation(classification));\n}\n\nexport function formatTenantClientImportViolation(\n  classification: TenantClientImportClassification\n): string {\n  const patternId = classification.pattern\n    ? ` [${classification.pattern.id}]`\n    : \"\";\n  return `Tenant client import is not allowed${patternId}: ${classification.importPath}. ${classification.reason}`;\n}\n"]}
+{"version":3,"sources":["../src/tenant-client.contract.ts"],"names":[],"mappings":";AAcO,IAAM,8BAAA,GAAiC;AAEvC,IAAM,wBAAA,GAA2B;AAAA,EACtC,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,6BAAA,GAAgC;AAAA,EAC3C,OAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AAIO,IAAM,qCAAA,GAAwC;AAAA,EACnD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;AAIO,IAAM,qCAAA,GAAwC;AAAA,EACnD,eAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAIO,IAAM,+BAAA,GAAkC;AACxC,IAAM,0CAAA,GACX;AACK,IAAM,qDAAA,GAAwD;AAAA,EACnE;AACF;AACO,IAAM,kCAAA,GAAqC,CAAC,WAAW;AAMvD,IAAM,kCAAA,GAAqC;AAAA,EAChD;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,qBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,oBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,gBAAA;AAAA,IACb,IAAA,EAAM,eAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,IAAA,EAAM,qBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,uBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,uBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,gBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,kBAAA;AAAA,IACb,IAAA,EAAM,mBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,IAAA,EAAM,gBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,IAAA,EAAM,mBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,oBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,qBAAA;AAAA,IACb,IAAA,EAAM,kBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,iBAAA;AAAA,IACb,IAAA,EAAM,cAAA;AAAA,IACN,kBAAA,EAAoB;AAAA,GACtB;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,qBAAA;AAAA,IACN,kBAAA,EAAoB;AAAA;AAExB;AAwBO,IAAM,yCACX,kCAAA,CAAmC,GAAA;AAAA,EACjC,CAAC,UAAU,KAAA,CAAM;AACnB;AAEK,IAAM,8BAAA,GAAiC;AAAA,EAC5C;AAAA,IACE,EAAA,EAAI,kBAAA;AAAA,IACJ,WAAA,EACE,iGAAA;AAAA,IACF,YAAA,EAAc,CAAC,aAAA,EAAe,wBAAwB,CAAA;AAAA,IACtD,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,mBAAA;AAAA,IACJ,WAAA,EACE,+FAAA;AAAA,IACF,YAAA,EAAc,CAAC,eAAA,EAAiB,aAAA,EAAe,wBAAwB,CAAA;AAAA,IACvE,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,mBAAA;AAAA,IACJ,WAAA,EACE,6FAAA;AAAA,IACF,YAAA,EAAc,CAAC,kBAAA,EAAoB,0BAA0B,CAAA;AAAA,IAC7D,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,cAAA;AAAA,IACJ,WAAA,EACE,+FAAA;AAAA,IACF,YAAA,EAAc,CAAC,aAAa,CAAA;AAAA,IAC5B,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,aAAA;AAAA,IACJ,WAAA,EACE,sFAAA;AAAA,IACF,YAAA,EAAc,CAAC,aAAa,CAAA;AAAA,IAC5B,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,qBAAA;AAAA,IACJ,WAAA,EACE,4FAAA;AAAA,IACF,YAAA,EAAc,CAAC,mBAAA,EAAqB,eAAe,CAAA;AAAA,IACnD,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,YAAA;AAAA,IACJ,WAAA,EACE,2JAAA;AAAA,IACF,YAAA,EAAc,sCAAA;AAAA,IACd,eAAA,EAAiB;AAAA;AAErB;AAUO,IAAM,4BAAA,GAA+B;AAAA,EAC1C;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,aAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,mBAAA;AAAA,IACb,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,WAAA,EAAa,wBAAA;AAAA,IACb,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,WAAA,EAAa,eAAA;AAAA,IACb,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,mBAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAOO,IAAM,sCAAA,GAAyC;AAAA,EACpD;AAAA,IACE,WAAA,EAAa,kBAAA;AAAA,IACb,UAAA,EAAY,gCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,UAAA,EAAY,wCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,WAAA,EAAa,0BAAA;AAAA,IACb,UAAA,EAAY,yCAAA;AAAA,IACZ,OAAA,EAAS,kBAAA;AAAA,IACT,WAAA,EACE;AAAA;AAEN;AAOO,SAAS,mCACd,WAAA,EAC4C;AAC5C,EAAA,OAAO,kCAAA,CAAmC,IAAA;AAAA,IACxC,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,KAAgB;AAAA,GACnC;AACF;AAEO,SAAS,iCAAiC,WAAA,EAA8B;AAC7E,EAAA,OAAO,OAAA,CAAQ,kCAAA,CAAmC,WAAW,CAAC,CAAA;AAChE;AAEO,IAAM,qCAAA,GAAwC;AAAA,EACnD,WAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,mBAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,gBAAA;AAAA,EACA,YAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAA6B;AAAA,EACxC;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,WAAA,EAAa,uDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IACvC,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,WAAA,EAAa,wDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,sBAAA;AAAA,IACJ,WAAA,EAAa,sEAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,uBAAA;AAAA,IACJ,WAAA,EAAa,0DAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IACvC,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,kCAAA;AAAA,IACJ,WAAA,EACE,kFAAA;AAAA,IACF,QAAA,EAAU,CAAC,aAAA,EAAe,aAAA,EAAe,aAAa,CAAA;AAAA,IACtD,qBAAA,EAAuB;AAAA,GACzB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,6BAAA;AAAA,IACJ,WAAA,EAAa,oDAAA;AAAA,IACb,QAAA,EAAU,CAAC,aAAA,EAAe,eAAA,EAAiB,aAAa,CAAA;AAAA,IACxD,qBAAA,EAAuB;AAAA;AAE3B;AAKO,IAAM,6BAAA,GAAgC;AAAA,EAC3C;AAAA,IACE,EAAA,EAAI,iCAAA;AAAA,IACJ,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,WAAA,EACE;AAAA;AAEN;AAIO,IAAM,uCAAA,GAA0C;AAAA,EACrD;AAAA,IACE,EAAA,EAAI,iBAAA;AAAA,IACJ,OAAA,EAAS,2BAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,kBAAA;AAAA,IACJ,OAAA,EAAS,4BAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,OAAA,EAAS,gDAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,wBAAA;AAAA,IACJ,OAAA,EAAS,4CAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,OAAA,EAAS,+DAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0BAAA;AAAA,IACJ,OAAA,EAAS,qDAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,OAAA,EAAS,mEAAA;AAAA,IACT,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,sBAAA;AAAA,IACJ,OAAA,EAAS,aAAA;AAAA,IACT,WAAA,EACE;AAAA;AAEN;AAoBA,SAAS,oBACP,UAAA,EACuC;AACvC,EAAA,MAAM,kBAAkB,sCAAA,CAAuC,IAAA;AAAA,IAC7D,CAAC,KAAA,KAAU,UAAA,KAAe,KAAA,CAAM;AAAA,GAClC;AACA,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO,4BAAA,CAA6B,IAAA;AAAA,IAClC,CAAC,KAAA,KACC,UAAA,KAAe,KAAA,CAAM,WAAA,IACrB,WAAW,UAAA,CAAW,CAAA,EAAG,KAAA,CAAM,WAAW,CAAA,CAAA,CAAG;AAAA,GACjD;AACF;AAEA,SAAS,wBACP,UAAA,EACgD;AAChD,EAAA,OAAO,uCAAA,CAAwC,IAAA;AAAA,IAAK,CAAC,UACnD,IAAI,MAAA,CAAO,MAAM,OAAA,EAAS,GAAG,CAAA,CAAE,IAAA,CAAK,UAAU;AAAA,GAChD;AACF;AAEO,SAAS,2BACd,UAAA,EACkC;AAClC,EAAA,MAAM,oBAAA,GAAuB,WAAW,IAAA,EAAK;AAC7C,EAAA,MAAM,OAAA,GAAU,wBAAwB,oBAAoB,CAAA;AAE5D,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,WAAA;AAAA,MACV,OAAA;AAAA,MACA,QAAQ,OAAA,CAAQ;AAAA,KAClB;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,oBAAoB,oBAAoB,CAAA;AAC7D,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,QAAA;AAAA,MACV,YAAA;AAAA,MACA,QAAQ,YAAA,CAAa;AAAA,KACvB;AAAA,EACF;AAEA,EAAA,IAAI,oBAAA,CAAqB,UAAA,CAAW,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,WAAA;AAAA,MACV,MAAA,EACE;AAAA,KACJ;AAAA,EACF;AAEA,EAAA,IACE,qBAAqB,UAAA,CAAW,IAAI,KACpC,oBAAA,CAAqB,UAAA,CAAW,KAAK,CAAA,EACrC;AACA,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,oBAAA;AAAA,MACZ,QAAA,EAAU,OAAA;AAAA,MACV,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,oBAAA;AAAA,IACZ,QAAA,EAAU,UAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AACF;AAEO,SAAS,2BAA2B,UAAA,EAA6B;AACtE,EAAA,OAAO,0BAAA,CAA2B,UAAU,CAAA,CAAE,QAAA,KAAa,QAAA;AAC7D;AAEO,SAAS,oCACd,UAAA,EACS;AACT,EAAA,OAAO,sCAAA,CAAuC,IAAA;AAAA,IAC5C,CAAC,KAAA,KAAU,UAAA,KAAe,KAAA,CAAM;AAAA,GAClC;AACF;AAEO,SAAS,4BAA4B,UAAA,EAA6B;AACvE,EAAA,OAAO,0BAAA,CAA2B,UAAU,CAAA,CAAE,QAAA,KAAa,QAAA;AAC7D;AAEO,SAAS,gCAAgC,UAAA,EAA0B;AACxE,EAAA,MAAM,cAAA,GAAiB,2BAA2B,UAAU,CAAA;AAC5D,EAAA,IAAI,cAAA,CAAe,aAAa,WAAA,EAAa;AAC3C,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,CAAkC,cAAc,CAAC,CAAA;AACnE;AAEO,SAAS,kCACd,cAAA,EACQ;AACR,EAAA,MAAM,YAAY,cAAA,CAAe,OAAA,GAC7B,KAAK,cAAA,CAAe,OAAA,CAAQ,EAAE,CAAA,CAAA,CAAA,GAC9B,EAAA;AACJ,EAAA,OAAO,sCAAsC,SAAS,CAAA,EAAA,EAAK,eAAe,UAAU,CAAA,EAAA,EAAK,eAAe,MAAM,CAAA,CAAA;AAChH","file":"tenant-client.contract.js","sourcesContent":["/**\n * Tenant client contract\n *\n * Defines the generic boundary for any customer-owned product that consumes\n * Lucern through the SDK, hosted API, or MCP server. Tenant clients may run\n * their own UI, auth provider, deployment, and data plane, but reasoning\n * operations must enter through the published packages below.\n */\n\nimport type {\n  SessionAuthMode,\n  SessionPrincipalType,\n} from \"./auth.contract\";\n\nexport const TENANT_CLIENT_CONTRACT_VERSION = \"2026-04-27\" as const;\n\nexport const TENANT_CLIENT_AUTH_MODES = [\n  \"interactive_user\",\n  \"service_principal\",\n  \"tenant_api_key\",\n  \"session_token\",\n] as const satisfies readonly SessionAuthMode[];\nexport type TenantClientAuthMode = (typeof TENANT_CLIENT_AUTH_MODES)[number];\n\nexport const TENANT_CLIENT_PRINCIPAL_TYPES = [\n  \"human\",\n  \"service\",\n  \"agent\",\n] as const satisfies readonly SessionPrincipalType[];\nexport type TenantClientPrincipalType =\n  (typeof TENANT_CLIENT_PRINCIPAL_TYPES)[number];\n\nexport const TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"authMode\",\n  \"scopes\",\n] as const;\nexport type TenantClientRequiredContextField =\n  (typeof TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS)[number];\n\nexport const TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS = [\n  \"principalType\",\n  \"roles\",\n  \"sessionId\",\n  \"delegationChain\",\n] as const;\nexport type TenantClientOptionalContextField =\n  (typeof TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS)[number];\n\nexport const TENANT_CLIENT_INSTALL_TOKEN_ENV = \"INSTALL_LUCERN_NPM\" as const;\nexport const TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH =\n  \"tenants/shared\" as const;\nexport const TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS = [\n  \"/platform/publish\",\n] as const;\nexport const TENANT_CLIENT_FORBIDDEN_SECRET_ENV = [\"NPM_TOKEN\"] as const;\nexport type TenantClientForbiddenInstallTokenInfisicalPath =\n  (typeof TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS)[number];\nexport type TenantClientForbiddenSecretEnv =\n  (typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV)[number];\n\nexport const TENANT_CLIENT_INSTALLABLE_PACKAGES = [\n  {\n    packageName: \"@lucern/access-control\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/agent\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/auth\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/cli\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/client-core\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/confidence\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/config\",\n    role: \"configuration\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/contracts\",\n    role: \"contract_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/control-plane\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/developer-kit\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/events\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/graph-primitives\",\n    role: \"sdk_dependency\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/identity\",\n    role: \"component_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/mcp\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/pack-host\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/pack-installer\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/proof-compiler\",\n    role: \"developer_tool\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/react\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    role: \"component_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/sdk\",\n    role: \"runtime_entrypoint\",\n    directTenantImport: true,\n  },\n  {\n    packageName: \"@lucern/server-core\",\n    role: \"platform_runtime\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/testing\",\n    role: \"test_support\",\n    directTenantImport: false,\n  },\n  {\n    packageName: \"@lucern/types\",\n    role: \"contract_entrypoint\",\n    directTenantImport: true,\n  },\n] as const;\nexport type TenantClientInstallablePackage =\n  (typeof TENANT_CLIENT_INSTALLABLE_PACKAGES)[number];\nexport type TenantClientPackageRole = TenantClientInstallablePackage[\"role\"];\nexport type TenantClientInstallablePackageName =\n  TenantClientInstallablePackage[\"packageName\"];\n\n/**\n * Direct package installs are package.json entries owned by the tenant repo.\n * Direct imports are source-code imports that tenant application code may use.\n *\n * These concepts intentionally differ: `@lucern/cli` is a direct install when a\n * tenant repo needs the `lucern` binary, but it is not a direct application\n * import. `@lucern/reasoning-kernel` and `@lucern/identity` are direct installs\n * for Convex component binding, while tenant app code should only import their\n * explicit component config subpaths.\n */\nexport type TenantClientInstallProfile = {\n  id: string;\n  description: string;\n  packageNames: readonly TenantClientInstallablePackageName[];\n  dependencyField: \"dependencies\" | \"devDependencies\" | \"mixed\";\n};\n\nexport const TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES =\n  TENANT_CLIENT_INSTALLABLE_PACKAGES.map(\n    (entry) => entry.packageName\n  ) as readonly TenantClientInstallablePackageName[];\n\nexport const TENANT_CLIENT_INSTALL_PROFILES = [\n  {\n    id: \"core_app_runtime\",\n    description:\n      \"Smallest tenant app/runtime install for typed Lucern API calls plus tool-access policy helpers.\",\n    packageNames: [\"@lucern/sdk\", \"@lucern/access-control\"],\n    dependencyField: \"dependencies\",\n  },\n  {\n    id: \"react_app_runtime\",\n    description:\n      \"React tenant app install for hooks, provider, curated graph components, and direct SDK calls.\",\n    packageNames: [\"@lucern/react\", \"@lucern/sdk\", \"@lucern/access-control\"],\n    dependencyField: \"dependencies\",\n  },\n  {\n    id: \"convex_components\",\n    description:\n      \"Tenant Convex host install for binding the Lucern identity and reasoning-kernel components.\",\n    packageNames: [\"@lucern/identity\", \"@lucern/reasoning-kernel\"],\n    dependencyField: \"dependencies\",\n  },\n  {\n    id: \"operator_cli\",\n    description:\n      \"Developer/operator install for the `lucern` binary, including tenant bootstrap seed commands.\",\n    packageNames: [\"@lucern/cli\"],\n    dependencyField: \"devDependencies\",\n  },\n  {\n    id: \"mcp_runtime\",\n    description:\n      \"Agent runtime install for the standalone Lucern MCP server and hosted route helpers.\",\n    packageNames: [\"@lucern/mcp\"],\n    dependencyField: \"dependencies\",\n  },\n  {\n    id: \"contracts_and_types\",\n    description:\n      \"Compile-time contract/type install for codegen, audits, and tenant integration validation.\",\n    packageNames: [\"@lucern/contracts\", \"@lucern/types\"],\n    dependencyField: \"dependencies\",\n  },\n  {\n    id: \"full_suite\",\n    description:\n      \"Full coherent Lucern package suite for design-partner repos that want every published runtime, tool, component, test, and config package pinned together.\",\n    packageNames: TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES,\n    dependencyField: \"mixed\",\n  },\n] as const satisfies readonly TenantClientInstallProfile[];\nexport type TenantClientInstallProfileId =\n  (typeof TENANT_CLIENT_INSTALL_PROFILES)[number][\"id\"];\n\n/**\n * Direct imports tenant-owned product code may use. This is intentionally\n * smaller than TENANT_CLIENT_INSTALLABLE_PACKAGES: several publishable packages\n * are installed as SDK dependencies, tooling, or platform runtimes but should\n * not become the application integration surface.\n */\nexport const TENANT_CLIENT_PUBLIC_IMPORTS = [\n  {\n    packageName: \"@lucern/sdk\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"TypeScript SDK runtime and generated operation namespaces.\",\n  },\n  {\n    packageName: \"@lucern/react\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"React bindings for tenant-owned UI applications.\",\n  },\n  {\n    packageName: \"@lucern/mcp\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description: \"MCP client/server entry points and hosted route helpers.\",\n  },\n  {\n    packageName: \"@lucern/contracts\",\n    surface: \"contract\",\n    subpaths: \"published_exports\",\n    description: \"Published type and manifest contracts.\",\n  },\n  {\n    packageName: \"@lucern/access-control\",\n    surface: \"runtime\",\n    subpaths: \"published_exports\",\n    description:\n      \"Tenant runtime access-control helpers, including effective tool access.\",\n  },\n  {\n    packageName: \"@lucern/types\",\n    surface: \"contract\",\n    subpaths: \"published_exports\",\n    description: \"Published type-only helpers for tenant integration code.\",\n  },\n] as const;\nexport type TenantClientPublicImport =\n  (typeof TENANT_CLIENT_PUBLIC_IMPORTS)[number];\nexport type TenantClientPublicPackage =\n  TenantClientPublicImport[\"packageName\"];\nexport type TenantClientPublicSurface = TenantClientPublicImport[\"surface\"];\n\nexport const TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS = [\n  {\n    packageName: \"@lucern/identity\",\n    importPath: \"@lucern/identity/convex.config\",\n    surface: \"component_config\",\n    description:\n      \"Convex component binding config for tenant deployments that install Lucern identity.\",\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    importPath: \"@lucern/reasoning-kernel/convex.config\",\n    surface: \"component_config\",\n    description:\n      \"Convex component binding config for tenant deployments that install the Lucern reasoning kernel.\",\n  },\n  {\n    packageName: \"@lucern/reasoning-kernel\",\n    importPath: \"@lucern/reasoning-kernel/runtime.config\",\n    surface: \"component_config\",\n    description:\n      \"Runtime config alias for tenant deployments that install the Lucern reasoning kernel.\",\n  },\n] as const;\nexport type TenantClientComponentConfigImport =\n  (typeof TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS)[number];\nexport type TenantClientAllowedImport =\n  | TenantClientPublicImport\n  | TenantClientComponentConfigImport;\n\nexport function findTenantClientInstallablePackage(\n  packageName: string\n): TenantClientInstallablePackage | undefined {\n  return TENANT_CLIENT_INSTALLABLE_PACKAGES.find(\n    (entry) => entry.packageName === packageName\n  );\n}\n\nexport function isTenantClientInstallablePackage(packageName: string): boolean {\n  return Boolean(findTenantClientInstallablePackage(packageName));\n}\n\nexport const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES = [\n  \"bootstrap\",\n  \"context\",\n  \"beliefs\",\n  \"evidence\",\n  \"questions\",\n  \"graph\",\n  \"worktrees\",\n  \"topics\",\n  \"edges\",\n  \"contradictions\",\n  \"contracts\",\n  \"graphIntel\",\n  \"graphIntelligence\",\n  \"graphAnalysis\",\n  \"graphRecommendations\",\n  \"orgGraphSearch\",\n  \"embeddings\",\n  \"ontologyLinks\",\n  \"graphStateClassifier\",\n  \"tools\",\n  \"identity\",\n  \"modelRuntime\",\n  \"events\",\n  \"jobs\",\n  \"telemetry\",\n] as const;\nexport type TenantClientRequiredSdkNamespace =\n  (typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES)[number];\n\nexport const TENANT_CLIENT_CAPABILITIES = [\n  {\n    id: \"identity.bootstrap_session\",\n    description: \"Start a scoped Lucern session for a tenant principal.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.context.compile\",\n    description: \"Compile tenant and workspace scoped reasoning context.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.graph.read\",\n    description: \"Read beliefs, evidence, questions, topics, graph edges, and lineage.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.graph.write\",\n    description: \"Create and update graph objects through authorized APIs.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"reasoning.graph_intelligence.run\",\n    description:\n      \"Discover and run Graph Intelligence query recipes for structural graph analysis.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/cli\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n  {\n    id: \"workflow.worktree_lifecycle\",\n    description: \"Create, review, merge, and close scoped worktrees.\",\n    surfaces: [\"@lucern/sdk\", \"@lucern/react\", \"@lucern/mcp\"],\n    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS,\n  },\n] as const;\nexport type TenantClientCapability =\n  (typeof TENANT_CLIENT_CAPABILITIES)[number];\nexport type TenantClientCapabilityId = TenantClientCapability[\"id\"];\n\nexport const TENANT_CLIENT_ISOLATION_RULES = [\n  {\n    id: \"tenant_workspace_scope_required\",\n    description:\n      \"Runtime operations must resolve both tenantId and workspaceId before reaching Lucern reasoning state.\",\n  },\n  {\n    id: \"principal_audit_required\",\n    description:\n      \"Runtime operations must carry principalId, authMode, and scopes for audit attribution.\",\n  },\n  {\n    id: \"no_private_lucern_imports\",\n    description:\n      \"Tenant code must not import Lucern source, Convex internals, generated adapters, or unpublished package internals.\",\n  },\n] as const;\nexport type TenantClientIsolationRule =\n  (typeof TENANT_CLIENT_ISOLATION_RULES)[number];\n\nexport const TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS = [\n  {\n    id: \"deep_src_import\",\n    pattern: \"^@lucern/[^/]+/src(?:/|$)\",\n    description: \"Published packages must not be bypassed through src paths.\",\n  },\n  {\n    id: \"deep_dist_import\",\n    pattern: \"^@lucern/[^/]+/dist(?:/|$)\",\n    description:\n      \"Published package exports must be used instead of dist file paths.\",\n  },\n  {\n    id: \"generated_adapter_import\",\n    pattern: \"^@lucern/[^/]+/(?:adapters/)?_generated(?:/|$)\",\n    description:\n      \"Generated Lucern adapters are internal deployment artifacts.\",\n  },\n  {\n    id: \"private_runtime_import\",\n    pattern: \"^@lucern/[^/]+/(?:internal|private)(?:/|$)\",\n    description: \"Internal and private package subpaths are not public SDK API.\",\n  },\n  {\n    id: \"workspace_source_import\",\n    pattern: \"^(?:packages|modules|services|lucern|apps)/(?:.+/)?src(?:/|$)\",\n    description:\n      \"Tenant clients must not import source files from the Lucern monorepo.\",\n  },\n  {\n    id: \"root_alias_lucern_import\",\n    pattern: \"^@/(?:lucern|packages|modules|services|apps)(?:/|$)\",\n    description:\n      \"Tenant clients must not depend on Lucern repo-local path aliases.\",\n  },\n  {\n    id: \"relative_lucern_source_import\",\n    pattern: \"^\\\\.\\\\.?/(?:.+/)?(?:packages|modules|services|lucern|apps)(?:/|$)\",\n    description:\n      \"Tenant clients must not reach back into Lucern source through relative paths.\",\n  },\n  {\n    id: \"monorepo_path_import\",\n    pattern: \"lucern-repo\",\n    description:\n      \"Absolute imports that name the Lucern repository are not portable tenant code.\",\n  },\n] as const;\nexport type TenantClientForbiddenImportPattern =\n  (typeof TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS)[number];\nexport type TenantClientForbiddenImportPatternId =\n  TenantClientForbiddenImportPattern[\"id\"];\n\nexport type TenantClientImportDecision =\n  | \"public\"\n  | \"forbidden\"\n  | \"local\"\n  | \"external\";\n\nexport type TenantClientImportClassification = {\n  importPath: string;\n  decision: TenantClientImportDecision;\n  publicImport?: TenantClientAllowedImport;\n  pattern?: TenantClientForbiddenImportPattern;\n  reason: string;\n};\n\nfunction matchesPublicImport(\n  importPath: string\n): TenantClientAllowedImport | undefined {\n  const componentConfig = TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.find(\n    (entry) => importPath === entry.importPath\n  );\n  if (componentConfig) {\n    return componentConfig;\n  }\n\n  return TENANT_CLIENT_PUBLIC_IMPORTS.find(\n    (entry) =>\n      importPath === entry.packageName ||\n      importPath.startsWith(`${entry.packageName}/`)\n  );\n}\n\nfunction matchesForbiddenPattern(\n  importPath: string\n): TenantClientForbiddenImportPattern | undefined {\n  return TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS.find((entry) =>\n    new RegExp(entry.pattern, \"u\").test(importPath)\n  );\n}\n\nexport function classifyTenantClientImport(\n  importPath: string\n): TenantClientImportClassification {\n  const normalizedImportPath = importPath.trim();\n  const pattern = matchesForbiddenPattern(normalizedImportPath);\n\n  if (pattern) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"forbidden\",\n      pattern,\n      reason: pattern.description,\n    };\n  }\n\n  const publicImport = matchesPublicImport(normalizedImportPath);\n  if (publicImport) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"public\",\n      publicImport,\n      reason: publicImport.description,\n    };\n  }\n\n  if (normalizedImportPath.startsWith(\"@lucern/\")) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"forbidden\",\n      reason:\n        \"This @lucern package is not part of the tenant client public surface.\",\n    };\n  }\n\n  if (\n    normalizedImportPath.startsWith(\"./\") ||\n    normalizedImportPath.startsWith(\"../\")\n  ) {\n    return {\n      importPath: normalizedImportPath,\n      decision: \"local\",\n      reason: \"Local tenant-owned import.\",\n    };\n  }\n\n  return {\n    importPath: normalizedImportPath,\n    decision: \"external\",\n    reason: \"External dependency outside the Lucern package namespace.\",\n  };\n}\n\nexport function isTenantClientPublicImport(importPath: string): boolean {\n  return classifyTenantClientImport(importPath).decision === \"public\";\n}\n\nexport function isTenantClientComponentConfigImport(\n  importPath: string\n): boolean {\n  return TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS.some(\n    (entry) => importPath === entry.importPath\n  );\n}\n\nexport function isTenantClientAllowedImport(importPath: string): boolean {\n  return classifyTenantClientImport(importPath).decision === \"public\";\n}\n\nexport function assertTenantClientImportAllowed(importPath: string): void {\n  const classification = classifyTenantClientImport(importPath);\n  if (classification.decision !== \"forbidden\") {\n    return;\n  }\n\n  throw new Error(formatTenantClientImportViolation(classification));\n}\n\nexport function formatTenantClientImportViolation(\n  classification: TenantClientImportClassification\n): string {\n  const patternId = classification.pattern\n    ? ` [${classification.pattern.id}]`\n    : \"\";\n  return `Tenant client import is not allowed${patternId}: ${classification.importPath}. ${classification.reason}`;\n}\n"]}

package/dist/{tool-contracts-C92-9ueT.d.ts → tool-contracts-CYXVPN4K.d.ts}

@@ -76,6 +76,8 @@ declare const OPEN_PULL_REQUEST: McpToolContract;
 declare const BISECT_CONFIDENCE: McpToolContract;
 declare const DETECT_CONFIRMATION_BIAS: McpToolContract;
 declare const GET_GRAPH_STRUCTURE_ANALYSIS: McpToolContract;
+declare const LIST_GRAPH_INTELLIGENCE_QUERIES: McpToolContract;
+declare const RUN_GRAPH_INTELLIGENCE_QUERY: McpToolContract;
 declare const GET_FALSIFICATION_QUESTIONS: McpToolContract;
 declare const SEARCH_EVIDENCE: McpToolContract;
 declare const CREATE_EVIDENCE: McpToolContract;
@@ -155,6 +157,7 @@ declare const BROADCAST_MESSAGE: McpToolContract;
 declare const GET_AGENT_INBOX: McpToolContract;
 declare const CLAIM_FILES: McpToolContract;
 declare const GENERATE_SESSION_HANDOFF: McpToolContract;
+declare const BEGIN_BUILD_SESSION: McpToolContract;
 /** All MCP tool contracts, indexed by name */
 declare const MCP_TOOL_CONTRACTS: Record<string, McpToolContract>;
 /** Tool names that MUST include git-semantic language in descriptions */
@@ -179,6 +182,7 @@ declare const toolContracts_APPLY_ONTOLOGY: typeof APPLY_ONTOLOGY;
 declare const toolContracts_ARCHIVE_BELIEF: typeof ARCHIVE_BELIEF;
 declare const toolContracts_ARCHIVE_ONTOLOGY: typeof ARCHIVE_ONTOLOGY;
 declare const toolContracts_ARCHIVE_QUESTION: typeof ARCHIVE_QUESTION;
+declare const toolContracts_BEGIN_BUILD_SESSION: typeof BEGIN_BUILD_SESSION;
 declare const toolContracts_BISECT_CONFIDENCE: typeof BISECT_CONFIDENCE;
 declare const toolContracts_BROADCAST_MESSAGE: typeof BROADCAST_MESSAGE;
 declare const toolContracts_CHECK_PERMISSION: typeof CHECK_PERMISSION;
@@ -242,6 +246,7 @@ declare const toolContracts_LIST_ALL_WORKTREES: typeof LIST_ALL_WORKTREES;
 declare const toolContracts_LIST_BELIEFS: typeof LIST_BELIEFS;
 declare const toolContracts_LIST_CAMPAIGNS: typeof LIST_CAMPAIGNS;
 declare const toolContracts_LIST_EVIDENCE: typeof LIST_EVIDENCE;
+declare const toolContracts_LIST_GRAPH_INTELLIGENCE_QUERIES: typeof LIST_GRAPH_INTELLIGENCE_QUERIES;
 declare const toolContracts_LIST_LENSES: typeof LIST_LENSES;
 declare const toolContracts_LIST_ONTOLOGIES: typeof LIST_ONTOLOGIES;
 declare const toolContracts_LIST_QUESTIONS: typeof LIST_QUESTIONS;
@@ -269,6 +274,7 @@ declare const toolContracts_REFINE_QUESTION: typeof REFINE_QUESTION;
 declare const toolContracts_REGISTER_SESSION: typeof REGISTER_SESSION;
 declare const toolContracts_REMOVE_LENS_FROM_TOPIC: typeof REMOVE_LENS_FROM_TOPIC;
 declare const toolContracts_RESOLVE_EFFECTIVE_ONTOLOGY: typeof RESOLVE_EFFECTIVE_ONTOLOGY;
+declare const toolContracts_RUN_GRAPH_INTELLIGENCE_QUERY: typeof RUN_GRAPH_INTELLIGENCE_QUERY;
 declare const toolContracts_SEARCH_BELIEFS: typeof SEARCH_BELIEFS;
 declare const toolContracts_SEARCH_EVIDENCE: typeof SEARCH_EVIDENCE;
 declare const toolContracts_SEED_BELIEF_LATTICE: typeof SEED_BELIEF_LATTICE;
@@ -284,7 +290,7 @@ declare const toolContracts_UPDATE_WORKTREE_METADATA: typeof UPDATE_WORKTREE_MET
 declare const toolContracts_UPDATE_WORKTREE_TARGETS: typeof UPDATE_WORKTREE_TARGETS;
 declare const toolContracts_validateGitSemantics: typeof validateGitSemantics;
 declare namespace toolContracts {
-  export { toolContracts_ACTIVATE_WORKTREE as ACTIVATE_WORKTREE, toolContracts_ADD_EVIDENCE as ADD_EVIDENCE, toolContracts_ADD_WORKTREE as ADD_WORKTREE, toolContracts_ANALYZE_TOPIC_DENSITY as ANALYZE_TOPIC_DENSITY, toolContracts_ANSWER_QUESTION as ANSWER_QUESTION, toolContracts_APPLY_AUTO_BRANCHING as APPLY_AUTO_BRANCHING, toolContracts_APPLY_LENS_TO_TOPIC as APPLY_LENS_TO_TOPIC, toolContracts_APPLY_ONTOLOGY as APPLY_ONTOLOGY, toolContracts_ARCHIVE_BELIEF as ARCHIVE_BELIEF, toolContracts_ARCHIVE_ONTOLOGY as ARCHIVE_ONTOLOGY, toolContracts_ARCHIVE_QUESTION as ARCHIVE_QUESTION, toolContracts_BISECT_CONFIDENCE as BISECT_CONFIDENCE, toolContracts_BROADCAST_MESSAGE as BROADCAST_MESSAGE, toolContracts_CHECK_PERMISSION as CHECK_PERMISSION, toolContracts_CLAIM_FILES as CLAIM_FILES, toolContracts_COMPILE_CONTEXT as COMPILE_CONTEXT, toolContracts_COMPLETE_TASK as COMPLETE_TASK, toolContracts_CREATE_ANSWER as CREATE_ANSWER, toolContracts_CREATE_BELIEF as CREATE_BELIEF, toolContracts_CREATE_EDGE as CREATE_EDGE, toolContracts_CREATE_EPISTEMIC_CONTRACT as CREATE_EPISTEMIC_CONTRACT, toolContracts_CREATE_EVIDENCE as CREATE_EVIDENCE, toolContracts_CREATE_LENS as CREATE_LENS, toolContracts_CREATE_ONTOLOGY as CREATE_ONTOLOGY, toolContracts_CREATE_ONTOLOGY_VERSION as CREATE_ONTOLOGY_VERSION, toolContracts_CREATE_QUESTION as CREATE_QUESTION, toolContracts_CREATE_TASK as CREATE_TASK, toolContracts_CREATE_TOPIC as CREATE_TOPIC, toolContracts_DEPRECATE_ONTOLOGY_VERSION as DEPRECATE_ONTOLOGY_VERSION, toolContracts_DETECT_CONFIRMATION_BIAS as DETECT_CONFIRMATION_BIAS, toolContracts_DISCOVER as DISCOVER, toolContracts_DISCOVER_ENTITY_CONNECTIONS as DISCOVER_ENTITY_CONNECTIONS, toolContracts_END_SESSION as END_SESSION, toolContracts_EVALUATE_CONTRACT as EVALUATE_CONTRACT, toolContracts_FILTER_BY_PERMISSION as FILTER_BY_PERMISSION, toolContracts_FIND_CONTRADICTIONS as FIND_CONTRADICTIONS, toolContracts_FIND_MISSING_QUESTIONS as FIND_MISSING_QUESTIONS, toolContracts_FLAG_CONTRADICTION as FLAG_CONTRADICTION, toolContracts_FORK_BELIEF as FORK_BELIEF, toolContracts_GENERATE_SESSION_HANDOFF as GENERATE_SESSION_HANDOFF, toolContracts_GET_AGENT_INBOX as GET_AGENT_INBOX, toolContracts_GET_ANSWER as GET_ANSWER, toolContracts_GET_AUDIT_TRAIL as GET_AUDIT_TRAIL, toolContracts_GET_BELIEF as GET_BELIEF, toolContracts_GET_CHANGE_HISTORY as GET_CHANGE_HISTORY, toolContracts_GET_CODE_CONTEXT as GET_CODE_CONTEXT, toolContracts_GET_CONFIDENCE_HISTORY as GET_CONFIDENCE_HISTORY, toolContracts_GET_CONTRACT_STATUS as GET_CONTRACT_STATUS, toolContracts_GET_EVIDENCE as GET_EVIDENCE, toolContracts_GET_FAILURE_LOG as GET_FAILURE_LOG, toolContracts_GET_FALSIFICATION_QUESTIONS as GET_FALSIFICATION_QUESTIONS, toolContracts_GET_GRAPH_GAPS as GET_GRAPH_GAPS, toolContracts_GET_GRAPH_NEIGHBORHOOD as GET_GRAPH_NEIGHBORHOOD, toolContracts_GET_GRAPH_STRUCTURE_ANALYSIS as GET_GRAPH_STRUCTURE_ANALYSIS, toolContracts_GET_HIGH_PRIORITY_QUESTIONS as GET_HIGH_PRIORITY_QUESTIONS, toolContracts_GET_LATTICE_COVERAGE as GET_LATTICE_COVERAGE, toolContracts_GET_OBSERVATION_CONTEXT as GET_OBSERVATION_CONTEXT, toolContracts_GET_ONTOLOGY as GET_ONTOLOGY, toolContracts_GET_QUESTION as GET_QUESTION, toolContracts_GET_TOPIC as GET_TOPIC, toolContracts_GET_TOPIC_COVERAGE as GET_TOPIC_COVERAGE, toolContracts_GET_TOPIC_TREE as GET_TOPIC_TREE, toolContracts_GIT_SEMANTIC_REQUIRED_TOOLS as GIT_SEMANTIC_REQUIRED_TOOLS, toolContracts_HEARTBEAT_SESSION as HEARTBEAT_SESSION, toolContracts_IDENTITY_WHOAMI as IDENTITY_WHOAMI, toolContracts_INGEST_OBSERVATION as INGEST_OBSERVATION, toolContracts_LINK_EVIDENCE as LINK_EVIDENCE, toolContracts_LINK_EVIDENCE_TO_BELIEF as LINK_EVIDENCE_TO_BELIEF, toolContracts_LINK_EVIDENCE_TO_QUESTION as LINK_EVIDENCE_TO_QUESTION, toolContracts_LIST_ACTIVE_SESSIONS as LIST_ACTIVE_SESSIONS, toolContracts_LIST_ALL_WORKTREES as LIST_ALL_WORKTREES, toolContracts_LIST_BELIEFS as LIST_BELIEFS, toolContracts_LIST_CAMPAIGNS as LIST_CAMPAIGNS, toolContracts_LIST_EVIDENCE as LIST_EVIDENCE, toolContracts_LIST_LENSES as LIST_LENSES, toolContracts_LIST_ONTOLOGIES as LIST_ONTOLOGIES, toolContracts_LIST_QUESTIONS as LIST_QUESTIONS, toolContracts_LIST_TASKS as LIST_TASKS, toolContracts_LIST_TOPICS as LIST_TOPICS, toolContracts_LIST_WORKTREES as LIST_WORKTREES, toolContracts_MANAGE_WRITE_POLICY as MANAGE_WRITE_POLICY, toolContracts_MATCH_ENTITY_TYPE as MATCH_ENTITY_TYPE, toolContracts_MCP_TOOL_CONTRACTS as MCP_TOOL_CONTRACTS, toolContracts_MERGE as MERGE, toolContracts_MODULATE_CONFIDENCE as MODULATE_CONFIDENCE, type toolContracts_McpParameterDef as McpParameterDef, type toolContracts_McpResponseDef as McpResponseDef, type toolContracts_McpToolContract as McpToolContract, toolContracts_OPEN_PULL_REQUEST as OPEN_PULL_REQUEST, toolContracts_PIPELINE_SNAPSHOT as PIPELINE_SNAPSHOT, toolContracts_PUBLISH_ONTOLOGY_VERSION as PUBLISH_ONTOLOGY_VERSION, toolContracts_PUSH as PUSH, toolContracts_QUERY_LINEAGE as QUERY_LINEAGE, toolContracts_RECORD_ATTEMPT as RECORD_ATTEMPT, toolContracts_RECORD_JUDGMENT as RECORD_JUDGMENT, toolContracts_RECORD_SCOPE_LEARNING as RECORD_SCOPE_LEARNING, toolContracts_REFINE_BELIEF as REFINE_BELIEF, toolContracts_REFINE_QUESTION as REFINE_QUESTION, toolContracts_REGISTER_SESSION as REGISTER_SESSION, toolContracts_REMOVE_LENS_FROM_TOPIC as REMOVE_LENS_FROM_TOPIC, toolContracts_RESOLVE_EFFECTIVE_ONTOLOGY as RESOLVE_EFFECTIVE_ONTOLOGY, toolContracts_SEARCH_BELIEFS as SEARCH_BELIEFS, toolContracts_SEARCH_EVIDENCE as SEARCH_EVIDENCE, toolContracts_SEED_BELIEF_LATTICE as SEED_BELIEF_LATTICE, toolContracts_SEND_AGENT_MESSAGE as SEND_AGENT_MESSAGE, toolContracts_TRACE_ENTITY_IMPACT as TRACE_ENTITY_IMPACT, toolContracts_TRAVERSE_GRAPH as TRAVERSE_GRAPH, toolContracts_TRIGGER_BELIEF_REVIEW as TRIGGER_BELIEF_REVIEW, toolContracts_UPDATE_ONTOLOGY as UPDATE_ONTOLOGY, toolContracts_UPDATE_QUESTION_STATUS as UPDATE_QUESTION_STATUS, toolContracts_UPDATE_TASK as UPDATE_TASK, toolContracts_UPDATE_TOPIC as UPDATE_TOPIC, toolContracts_UPDATE_WORKTREE_METADATA as UPDATE_WORKTREE_METADATA, toolContracts_UPDATE_WORKTREE_TARGETS as UPDATE_WORKTREE_TARGETS, toolContracts_validateGitSemantics as validateGitSemantics };
+  export { toolContracts_ACTIVATE_WORKTREE as ACTIVATE_WORKTREE, toolContracts_ADD_EVIDENCE as ADD_EVIDENCE, toolContracts_ADD_WORKTREE as ADD_WORKTREE, toolContracts_ANALYZE_TOPIC_DENSITY as ANALYZE_TOPIC_DENSITY, toolContracts_ANSWER_QUESTION as ANSWER_QUESTION, toolContracts_APPLY_AUTO_BRANCHING as APPLY_AUTO_BRANCHING, toolContracts_APPLY_LENS_TO_TOPIC as APPLY_LENS_TO_TOPIC, toolContracts_APPLY_ONTOLOGY as APPLY_ONTOLOGY, toolContracts_ARCHIVE_BELIEF as ARCHIVE_BELIEF, toolContracts_ARCHIVE_ONTOLOGY as ARCHIVE_ONTOLOGY, toolContracts_ARCHIVE_QUESTION as ARCHIVE_QUESTION, toolContracts_BEGIN_BUILD_SESSION as BEGIN_BUILD_SESSION, toolContracts_BISECT_CONFIDENCE as BISECT_CONFIDENCE, toolContracts_BROADCAST_MESSAGE as BROADCAST_MESSAGE, toolContracts_CHECK_PERMISSION as CHECK_PERMISSION, toolContracts_CLAIM_FILES as CLAIM_FILES, toolContracts_COMPILE_CONTEXT as COMPILE_CONTEXT, toolContracts_COMPLETE_TASK as COMPLETE_TASK, toolContracts_CREATE_ANSWER as CREATE_ANSWER, toolContracts_CREATE_BELIEF as CREATE_BELIEF, toolContracts_CREATE_EDGE as CREATE_EDGE, toolContracts_CREATE_EPISTEMIC_CONTRACT as CREATE_EPISTEMIC_CONTRACT, toolContracts_CREATE_EVIDENCE as CREATE_EVIDENCE, toolContracts_CREATE_LENS as CREATE_LENS, toolContracts_CREATE_ONTOLOGY as CREATE_ONTOLOGY, toolContracts_CREATE_ONTOLOGY_VERSION as CREATE_ONTOLOGY_VERSION, toolContracts_CREATE_QUESTION as CREATE_QUESTION, toolContracts_CREATE_TASK as CREATE_TASK, toolContracts_CREATE_TOPIC as CREATE_TOPIC, toolContracts_DEPRECATE_ONTOLOGY_VERSION as DEPRECATE_ONTOLOGY_VERSION, toolContracts_DETECT_CONFIRMATION_BIAS as DETECT_CONFIRMATION_BIAS, toolContracts_DISCOVER as DISCOVER, toolContracts_DISCOVER_ENTITY_CONNECTIONS as DISCOVER_ENTITY_CONNECTIONS, toolContracts_END_SESSION as END_SESSION, toolContracts_EVALUATE_CONTRACT as EVALUATE_CONTRACT, toolContracts_FILTER_BY_PERMISSION as FILTER_BY_PERMISSION, toolContracts_FIND_CONTRADICTIONS as FIND_CONTRADICTIONS, toolContracts_FIND_MISSING_QUESTIONS as FIND_MISSING_QUESTIONS, toolContracts_FLAG_CONTRADICTION as FLAG_CONTRADICTION, toolContracts_FORK_BELIEF as FORK_BELIEF, toolContracts_GENERATE_SESSION_HANDOFF as GENERATE_SESSION_HANDOFF, toolContracts_GET_AGENT_INBOX as GET_AGENT_INBOX, toolContracts_GET_ANSWER as GET_ANSWER, toolContracts_GET_AUDIT_TRAIL as GET_AUDIT_TRAIL, toolContracts_GET_BELIEF as GET_BELIEF, toolContracts_GET_CHANGE_HISTORY as GET_CHANGE_HISTORY, toolContracts_GET_CODE_CONTEXT as GET_CODE_CONTEXT, toolContracts_GET_CONFIDENCE_HISTORY as GET_CONFIDENCE_HISTORY, toolContracts_GET_CONTRACT_STATUS as GET_CONTRACT_STATUS, toolContracts_GET_EVIDENCE as GET_EVIDENCE, toolContracts_GET_FAILURE_LOG as GET_FAILURE_LOG, toolContracts_GET_FALSIFICATION_QUESTIONS as GET_FALSIFICATION_QUESTIONS, toolContracts_GET_GRAPH_GAPS as GET_GRAPH_GAPS, toolContracts_GET_GRAPH_NEIGHBORHOOD as GET_GRAPH_NEIGHBORHOOD, toolContracts_GET_GRAPH_STRUCTURE_ANALYSIS as GET_GRAPH_STRUCTURE_ANALYSIS, toolContracts_GET_HIGH_PRIORITY_QUESTIONS as GET_HIGH_PRIORITY_QUESTIONS, toolContracts_GET_LATTICE_COVERAGE as GET_LATTICE_COVERAGE, toolContracts_GET_OBSERVATION_CONTEXT as GET_OBSERVATION_CONTEXT, toolContracts_GET_ONTOLOGY as GET_ONTOLOGY, toolContracts_GET_QUESTION as GET_QUESTION, toolContracts_GET_TOPIC as GET_TOPIC, toolContracts_GET_TOPIC_COVERAGE as GET_TOPIC_COVERAGE, toolContracts_GET_TOPIC_TREE as GET_TOPIC_TREE, toolContracts_GIT_SEMANTIC_REQUIRED_TOOLS as GIT_SEMANTIC_REQUIRED_TOOLS, toolContracts_HEARTBEAT_SESSION as HEARTBEAT_SESSION, toolContracts_IDENTITY_WHOAMI as IDENTITY_WHOAMI, toolContracts_INGEST_OBSERVATION as INGEST_OBSERVATION, toolContracts_LINK_EVIDENCE as LINK_EVIDENCE, toolContracts_LINK_EVIDENCE_TO_BELIEF as LINK_EVIDENCE_TO_BELIEF, toolContracts_LINK_EVIDENCE_TO_QUESTION as LINK_EVIDENCE_TO_QUESTION, toolContracts_LIST_ACTIVE_SESSIONS as LIST_ACTIVE_SESSIONS, toolContracts_LIST_ALL_WORKTREES as LIST_ALL_WORKTREES, toolContracts_LIST_BELIEFS as LIST_BELIEFS, toolContracts_LIST_CAMPAIGNS as LIST_CAMPAIGNS, toolContracts_LIST_EVIDENCE as LIST_EVIDENCE, toolContracts_LIST_GRAPH_INTELLIGENCE_QUERIES as LIST_GRAPH_INTELLIGENCE_QUERIES, toolContracts_LIST_LENSES as LIST_LENSES, toolContracts_LIST_ONTOLOGIES as LIST_ONTOLOGIES, toolContracts_LIST_QUESTIONS as LIST_QUESTIONS, toolContracts_LIST_TASKS as LIST_TASKS, toolContracts_LIST_TOPICS as LIST_TOPICS, toolContracts_LIST_WORKTREES as LIST_WORKTREES, toolContracts_MANAGE_WRITE_POLICY as MANAGE_WRITE_POLICY, toolContracts_MATCH_ENTITY_TYPE as MATCH_ENTITY_TYPE, toolContracts_MCP_TOOL_CONTRACTS as MCP_TOOL_CONTRACTS, toolContracts_MERGE as MERGE, toolContracts_MODULATE_CONFIDENCE as MODULATE_CONFIDENCE, type toolContracts_McpParameterDef as McpParameterDef, type toolContracts_McpResponseDef as McpResponseDef, type toolContracts_McpToolContract as McpToolContract, toolContracts_OPEN_PULL_REQUEST as OPEN_PULL_REQUEST, toolContracts_PIPELINE_SNAPSHOT as PIPELINE_SNAPSHOT, toolContracts_PUBLISH_ONTOLOGY_VERSION as PUBLISH_ONTOLOGY_VERSION, toolContracts_PUSH as PUSH, toolContracts_QUERY_LINEAGE as QUERY_LINEAGE, toolContracts_RECORD_ATTEMPT as RECORD_ATTEMPT, toolContracts_RECORD_JUDGMENT as RECORD_JUDGMENT, toolContracts_RECORD_SCOPE_LEARNING as RECORD_SCOPE_LEARNING, toolContracts_REFINE_BELIEF as REFINE_BELIEF, toolContracts_REFINE_QUESTION as REFINE_QUESTION, toolContracts_REGISTER_SESSION as REGISTER_SESSION, toolContracts_REMOVE_LENS_FROM_TOPIC as REMOVE_LENS_FROM_TOPIC, toolContracts_RESOLVE_EFFECTIVE_ONTOLOGY as RESOLVE_EFFECTIVE_ONTOLOGY, toolContracts_RUN_GRAPH_INTELLIGENCE_QUERY as RUN_GRAPH_INTELLIGENCE_QUERY, toolContracts_SEARCH_BELIEFS as SEARCH_BELIEFS, toolContracts_SEARCH_EVIDENCE as SEARCH_EVIDENCE, toolContracts_SEED_BELIEF_LATTICE as SEED_BELIEF_LATTICE, toolContracts_SEND_AGENT_MESSAGE as SEND_AGENT_MESSAGE, toolContracts_TRACE_ENTITY_IMPACT as TRACE_ENTITY_IMPACT, toolContracts_TRAVERSE_GRAPH as TRAVERSE_GRAPH, toolContracts_TRIGGER_BELIEF_REVIEW as TRIGGER_BELIEF_REVIEW, toolContracts_UPDATE_ONTOLOGY as UPDATE_ONTOLOGY, toolContracts_UPDATE_QUESTION_STATUS as UPDATE_QUESTION_STATUS, toolContracts_UPDATE_TASK as UPDATE_TASK, toolContracts_UPDATE_TOPIC as UPDATE_TOPIC, toolContracts_UPDATE_WORKTREE_METADATA as UPDATE_WORKTREE_METADATA, toolContracts_UPDATE_WORKTREE_TARGETS as UPDATE_WORKTREE_TARGETS, toolContracts_validateGitSemantics as validateGitSemantics };
 }
 
-export { LIST_BELIEFS as $, ARCHIVE_BELIEF as A, BISECT_CONFIDENCE as B, CREATE_BELIEF as C, DETECT_CONFIRMATION_BIAS as D, LINK_EVIDENCE_TO_BELIEF as E, FORK_BELIEF as F, GET_BELIEF as G, CREATE_QUESTION as H, GET_QUESTION as I, REFINE_QUESTION as J, LIST_QUESTIONS as K, LIST_LENSES as L, type McpToolContract as M, ANSWER_QUESTION as N, OPEN_PULL_REQUEST as O, PUSH as P, QUERY_LINEAGE as Q, REFINE_BELIEF as R, SEARCH_BELIEFS as S, TRAVERSE_GRAPH as T, UPDATE_QUESTION_STATUS as U, ARCHIVE_QUESTION as V, LINK_EVIDENCE_TO_QUESTION as W, CREATE_ANSWER as X, GET_ANSWER as Y, GET_HIGH_PRIORITY_QUESTIONS as Z, FIND_MISSING_QUESTIONS as _, type McpParameterDef as a, LIST_WORKTREES as a0, LIST_ALL_WORKTREES as a1, LIST_CAMPAIGNS as a2, ACTIVATE_WORKTREE as a3, UPDATE_WORKTREE_TARGETS as a4, UPDATE_WORKTREE_METADATA as a5, IDENTITY_WHOAMI as a6, COMPILE_CONTEXT as a7, CHECK_PERMISSION as a8, FILTER_BY_PERMISSION as a9, PUBLISH_ONTOLOGY_VERSION as aA, DEPRECATE_ONTOLOGY_VERSION as aB, RESOLVE_EFFECTIVE_ONTOLOGY as aC, RECORD_SCOPE_LEARNING as aD, PIPELINE_SNAPSHOT as aE, DISCOVER as aF, ANALYZE_TOPIC_DENSITY as aG, APPLY_AUTO_BRANCHING as aH, SEED_BELIEF_LATTICE as aI, GET_LATTICE_COVERAGE as aJ, DISCOVER_ENTITY_CONNECTIONS as aK, TRIGGER_BELIEF_REVIEW as aL, EVALUATE_CONTRACT as aM, GET_CONTRACT_STATUS as aN, REGISTER_SESSION as aO, HEARTBEAT_SESSION as aP, END_SESSION as aQ, LIST_ACTIVE_SESSIONS as aR, SEND_AGENT_MESSAGE as aS, BROADCAST_MESSAGE as aT, GET_AGENT_INBOX as aU, CLAIM_FILES as aV, GENERATE_SESSION_HANDOFF as aW, MCP_TOOL_CONTRACTS as aX, GIT_SEMANTIC_REQUIRED_TOOLS as aY, validateGitSemantics as aZ, INGEST_OBSERVATION as aa, GET_OBSERVATION_CONTEXT as ab, CREATE_TASK as ac, COMPLETE_TASK as ad, UPDATE_TASK as ae, LIST_TASKS as af, CREATE_TOPIC as ag, LIST_TOPICS as ah, GET_TOPIC as ai, UPDATE_TOPIC as aj, GET_TOPIC_TREE as ak, GET_CODE_CONTEXT as al, GET_CHANGE_HISTORY as am, RECORD_ATTEMPT as an, GET_FAILURE_LOG as ao, GET_TOPIC_COVERAGE as ap, GET_GRAPH_GAPS as aq, MANAGE_WRITE_POLICY as ar, LIST_ONTOLOGIES as as, GET_ONTOLOGY as at, APPLY_ONTOLOGY as au, MATCH_ENTITY_TYPE as av, CREATE_ONTOLOGY as aw, UPDATE_ONTOLOGY as ax, ARCHIVE_ONTOLOGY as ay, CREATE_ONTOLOGY_VERSION as az, type McpResponseDef as b, MODULATE_CONFIDENCE as c, CREATE_EPISTEMIC_CONTRACT as d, ADD_EVIDENCE as e, FLAG_CONTRADICTION as f, ADD_WORKTREE as g, MERGE as h, GET_CONFIDENCE_HISTORY as i, GET_AUDIT_TRAIL as j, GET_GRAPH_NEIGHBORHOOD as k, TRACE_ENTITY_IMPACT as l, FIND_CONTRADICTIONS as m, CREATE_EDGE as n, RECORD_JUDGMENT as o, CREATE_LENS as p, APPLY_LENS_TO_TOPIC as q, REMOVE_LENS_FROM_TOPIC as r, GET_GRAPH_STRUCTURE_ANALYSIS as s, toolContracts as t, GET_FALSIFICATION_QUESTIONS as u, SEARCH_EVIDENCE as v, CREATE_EVIDENCE as w, GET_EVIDENCE as x, LIST_EVIDENCE as y, LINK_EVIDENCE as z };
+export { GET_HIGH_PRIORITY_QUESTIONS as $, ARCHIVE_BELIEF as A, BISECT_CONFIDENCE as B, CREATE_BELIEF as C, DETECT_CONFIRMATION_BIAS as D, LIST_EVIDENCE as E, FORK_BELIEF as F, GET_BELIEF as G, LINK_EVIDENCE as H, LINK_EVIDENCE_TO_BELIEF as I, CREATE_QUESTION as J, GET_QUESTION as K, LIST_LENSES as L, type McpToolContract as M, REFINE_QUESTION as N, OPEN_PULL_REQUEST as O, PUSH as P, QUERY_LINEAGE as Q, REFINE_BELIEF as R, SEARCH_BELIEFS as S, TRAVERSE_GRAPH as T, LIST_QUESTIONS as U, ANSWER_QUESTION as V, UPDATE_QUESTION_STATUS as W, ARCHIVE_QUESTION as X, LINK_EVIDENCE_TO_QUESTION as Y, CREATE_ANSWER as Z, GET_ANSWER as _, type McpParameterDef as a, GIT_SEMANTIC_REQUIRED_TOOLS as a$, FIND_MISSING_QUESTIONS as a0, LIST_BELIEFS as a1, LIST_WORKTREES as a2, LIST_ALL_WORKTREES as a3, LIST_CAMPAIGNS as a4, ACTIVATE_WORKTREE as a5, UPDATE_WORKTREE_TARGETS as a6, UPDATE_WORKTREE_METADATA as a7, IDENTITY_WHOAMI as a8, COMPILE_CONTEXT as a9, ARCHIVE_ONTOLOGY as aA, CREATE_ONTOLOGY_VERSION as aB, PUBLISH_ONTOLOGY_VERSION as aC, DEPRECATE_ONTOLOGY_VERSION as aD, RESOLVE_EFFECTIVE_ONTOLOGY as aE, RECORD_SCOPE_LEARNING as aF, PIPELINE_SNAPSHOT as aG, DISCOVER as aH, ANALYZE_TOPIC_DENSITY as aI, APPLY_AUTO_BRANCHING as aJ, SEED_BELIEF_LATTICE as aK, GET_LATTICE_COVERAGE as aL, DISCOVER_ENTITY_CONNECTIONS as aM, TRIGGER_BELIEF_REVIEW as aN, EVALUATE_CONTRACT as aO, GET_CONTRACT_STATUS as aP, REGISTER_SESSION as aQ, HEARTBEAT_SESSION as aR, END_SESSION as aS, LIST_ACTIVE_SESSIONS as aT, SEND_AGENT_MESSAGE as aU, BROADCAST_MESSAGE as aV, GET_AGENT_INBOX as aW, CLAIM_FILES as aX, GENERATE_SESSION_HANDOFF as aY, BEGIN_BUILD_SESSION as aZ, MCP_TOOL_CONTRACTS as a_, CHECK_PERMISSION as aa, FILTER_BY_PERMISSION as ab, INGEST_OBSERVATION as ac, GET_OBSERVATION_CONTEXT as ad, CREATE_TASK as ae, COMPLETE_TASK as af, UPDATE_TASK as ag, LIST_TASKS as ah, CREATE_TOPIC as ai, LIST_TOPICS as aj, GET_TOPIC as ak, UPDATE_TOPIC as al, GET_TOPIC_TREE as am, GET_CODE_CONTEXT as an, GET_CHANGE_HISTORY as ao, RECORD_ATTEMPT as ap, GET_FAILURE_LOG as aq, GET_TOPIC_COVERAGE as ar, GET_GRAPH_GAPS as as, MANAGE_WRITE_POLICY as at, LIST_ONTOLOGIES as au, GET_ONTOLOGY as av, APPLY_ONTOLOGY as aw, MATCH_ENTITY_TYPE as ax, CREATE_ONTOLOGY as ay, UPDATE_ONTOLOGY as az, type McpResponseDef as b, validateGitSemantics as b0, MODULATE_CONFIDENCE as c, CREATE_EPISTEMIC_CONTRACT as d, ADD_EVIDENCE as e, FLAG_CONTRADICTION as f, ADD_WORKTREE as g, MERGE as h, GET_CONFIDENCE_HISTORY as i, GET_AUDIT_TRAIL as j, GET_GRAPH_NEIGHBORHOOD as k, TRACE_ENTITY_IMPACT as l, FIND_CONTRADICTIONS as m, CREATE_EDGE as n, RECORD_JUDGMENT as o, CREATE_LENS as p, APPLY_LENS_TO_TOPIC as q, REMOVE_LENS_FROM_TOPIC as r, GET_GRAPH_STRUCTURE_ANALYSIS as s, toolContracts as t, LIST_GRAPH_INTELLIGENCE_QUERIES as u, RUN_GRAPH_INTELLIGENCE_QUERY as v, GET_FALSIFICATION_QUESTIONS as w, SEARCH_EVIDENCE as x, CREATE_EVIDENCE as y, GET_EVIDENCE as z };

package/dist/tool-contracts.d.ts

@@ -1 +1 @@
-export { a3 as ACTIVATE_WORKTREE, e as ADD_EVIDENCE, g as ADD_WORKTREE, aG as ANALYZE_TOPIC_DENSITY, N as ANSWER_QUESTION, aH as APPLY_AUTO_BRANCHING, q as APPLY_LENS_TO_TOPIC, au as APPLY_ONTOLOGY, A as ARCHIVE_BELIEF, ay as ARCHIVE_ONTOLOGY, V as ARCHIVE_QUESTION, B as BISECT_CONFIDENCE, aT as BROADCAST_MESSAGE, a8 as CHECK_PERMISSION, aV as CLAIM_FILES, a7 as COMPILE_CONTEXT, ad as COMPLETE_TASK, X as CREATE_ANSWER, C as CREATE_BELIEF, n as CREATE_EDGE, d as CREATE_EPISTEMIC_CONTRACT, w as CREATE_EVIDENCE, p as CREATE_LENS, aw as CREATE_ONTOLOGY, az as CREATE_ONTOLOGY_VERSION, H as CREATE_QUESTION, ac as CREATE_TASK, ag as CREATE_TOPIC, aB as DEPRECATE_ONTOLOGY_VERSION, D as DETECT_CONFIRMATION_BIAS, aF as DISCOVER, aK as DISCOVER_ENTITY_CONNECTIONS, aQ as END_SESSION, aM as EVALUATE_CONTRACT, a9 as FILTER_BY_PERMISSION, m as FIND_CONTRADICTIONS, _ as FIND_MISSING_QUESTIONS, f as FLAG_CONTRADICTION, F as FORK_BELIEF, aW as GENERATE_SESSION_HANDOFF, aU as GET_AGENT_INBOX, Y as GET_ANSWER, j as GET_AUDIT_TRAIL, G as GET_BELIEF, am as GET_CHANGE_HISTORY, al as GET_CODE_CONTEXT, i as GET_CONFIDENCE_HISTORY, aN as GET_CONTRACT_STATUS, x as GET_EVIDENCE, ao as GET_FAILURE_LOG, u as GET_FALSIFICATION_QUESTIONS, aq as GET_GRAPH_GAPS, k as GET_GRAPH_NEIGHBORHOOD, s as GET_GRAPH_STRUCTURE_ANALYSIS, Z as GET_HIGH_PRIORITY_QUESTIONS, aJ as GET_LATTICE_COVERAGE, ab as GET_OBSERVATION_CONTEXT, at as GET_ONTOLOGY, I as GET_QUESTION, ai as GET_TOPIC, ap as GET_TOPIC_COVERAGE, ak as GET_TOPIC_TREE, aY as GIT_SEMANTIC_REQUIRED_TOOLS, aP as HEARTBEAT_SESSION, a6 as IDENTITY_WHOAMI, aa as INGEST_OBSERVATION, z as LINK_EVIDENCE, E as LINK_EVIDENCE_TO_BELIEF, W as LINK_EVIDENCE_TO_QUESTION, aR as LIST_ACTIVE_SESSIONS, a1 as LIST_ALL_WORKTREES, $ as LIST_BELIEFS, a2 as LIST_CAMPAIGNS, y as LIST_EVIDENCE, L as LIST_LENSES, as as LIST_ONTOLOGIES, K as LIST_QUESTIONS, af as LIST_TASKS, ah as LIST_TOPICS, a0 as LIST_WORKTREES, ar as MANAGE_WRITE_POLICY, av as MATCH_ENTITY_TYPE, aX as MCP_TOOL_CONTRACTS, h as MERGE, c as MODULATE_CONFIDENCE, a as McpParameterDef, b as McpResponseDef, M as McpToolContract, O as OPEN_PULL_REQUEST, aE as PIPELINE_SNAPSHOT, aA as PUBLISH_ONTOLOGY_VERSION, P as PUSH, Q as QUERY_LINEAGE, an as RECORD_ATTEMPT, o as RECORD_JUDGMENT, aD as RECORD_SCOPE_LEARNING, R as REFINE_BELIEF, J as REFINE_QUESTION, aO as REGISTER_SESSION, r as REMOVE_LENS_FROM_TOPIC, aC as RESOLVE_EFFECTIVE_ONTOLOGY, S as SEARCH_BELIEFS, v as SEARCH_EVIDENCE, aI as SEED_BELIEF_LATTICE, aS as SEND_AGENT_MESSAGE, l as TRACE_ENTITY_IMPACT, T as TRAVERSE_GRAPH, aL as TRIGGER_BELIEF_REVIEW, ax as UPDATE_ONTOLOGY, U as UPDATE_QUESTION_STATUS, ae as UPDATE_TASK, aj as UPDATE_TOPIC, a5 as UPDATE_WORKTREE_METADATA, a4 as UPDATE_WORKTREE_TARGETS, aZ as validateGitSemantics } from './tool-contracts-C92-9ueT.js';
+export { a5 as ACTIVATE_WORKTREE, e as ADD_EVIDENCE, g as ADD_WORKTREE, aI as ANALYZE_TOPIC_DENSITY, V as ANSWER_QUESTION, aJ as APPLY_AUTO_BRANCHING, q as APPLY_LENS_TO_TOPIC, aw as APPLY_ONTOLOGY, A as ARCHIVE_BELIEF, aA as ARCHIVE_ONTOLOGY, X as ARCHIVE_QUESTION, aZ as BEGIN_BUILD_SESSION, B as BISECT_CONFIDENCE, aV as BROADCAST_MESSAGE, aa as CHECK_PERMISSION, aX as CLAIM_FILES, a9 as COMPILE_CONTEXT, af as COMPLETE_TASK, Z as CREATE_ANSWER, C as CREATE_BELIEF, n as CREATE_EDGE, d as CREATE_EPISTEMIC_CONTRACT, y as CREATE_EVIDENCE, p as CREATE_LENS, ay as CREATE_ONTOLOGY, aB as CREATE_ONTOLOGY_VERSION, J as CREATE_QUESTION, ae as CREATE_TASK, ai as CREATE_TOPIC, aD as DEPRECATE_ONTOLOGY_VERSION, D as DETECT_CONFIRMATION_BIAS, aH as DISCOVER, aM as DISCOVER_ENTITY_CONNECTIONS, aS as END_SESSION, aO as EVALUATE_CONTRACT, ab as FILTER_BY_PERMISSION, m as FIND_CONTRADICTIONS, a0 as FIND_MISSING_QUESTIONS, f as FLAG_CONTRADICTION, F as FORK_BELIEF, aY as GENERATE_SESSION_HANDOFF, aW as GET_AGENT_INBOX, _ as GET_ANSWER, j as GET_AUDIT_TRAIL, G as GET_BELIEF, ao as GET_CHANGE_HISTORY, an as GET_CODE_CONTEXT, i as GET_CONFIDENCE_HISTORY, aP as GET_CONTRACT_STATUS, z as GET_EVIDENCE, aq as GET_FAILURE_LOG, w as GET_FALSIFICATION_QUESTIONS, as as GET_GRAPH_GAPS, k as GET_GRAPH_NEIGHBORHOOD, s as GET_GRAPH_STRUCTURE_ANALYSIS, $ as GET_HIGH_PRIORITY_QUESTIONS, aL as GET_LATTICE_COVERAGE, ad as GET_OBSERVATION_CONTEXT, av as GET_ONTOLOGY, K as GET_QUESTION, ak as GET_TOPIC, ar as GET_TOPIC_COVERAGE, am as GET_TOPIC_TREE, a$ as GIT_SEMANTIC_REQUIRED_TOOLS, aR as HEARTBEAT_SESSION, a8 as IDENTITY_WHOAMI, ac as INGEST_OBSERVATION, H as LINK_EVIDENCE, I as LINK_EVIDENCE_TO_BELIEF, Y as LINK_EVIDENCE_TO_QUESTION, aT as LIST_ACTIVE_SESSIONS, a3 as LIST_ALL_WORKTREES, a1 as LIST_BELIEFS, a4 as LIST_CAMPAIGNS, E as LIST_EVIDENCE, u as LIST_GRAPH_INTELLIGENCE_QUERIES, L as LIST_LENSES, au as LIST_ONTOLOGIES, U as LIST_QUESTIONS, ah as LIST_TASKS, aj as LIST_TOPICS, a2 as LIST_WORKTREES, at as MANAGE_WRITE_POLICY, ax as MATCH_ENTITY_TYPE, a_ as MCP_TOOL_CONTRACTS, h as MERGE, c as MODULATE_CONFIDENCE, a as McpParameterDef, b as McpResponseDef, M as McpToolContract, O as OPEN_PULL_REQUEST, aG as PIPELINE_SNAPSHOT, aC as PUBLISH_ONTOLOGY_VERSION, P as PUSH, Q as QUERY_LINEAGE, ap as RECORD_ATTEMPT, o as RECORD_JUDGMENT, aF as RECORD_SCOPE_LEARNING, R as REFINE_BELIEF, N as REFINE_QUESTION, aQ as REGISTER_SESSION, r as REMOVE_LENS_FROM_TOPIC, aE as RESOLVE_EFFECTIVE_ONTOLOGY, v as RUN_GRAPH_INTELLIGENCE_QUERY, S as SEARCH_BELIEFS, x as SEARCH_EVIDENCE, aK as SEED_BELIEF_LATTICE, aU as SEND_AGENT_MESSAGE, l as TRACE_ENTITY_IMPACT, T as TRAVERSE_GRAPH, aN as TRIGGER_BELIEF_REVIEW, az as UPDATE_ONTOLOGY, W as UPDATE_QUESTION_STATUS, ag as UPDATE_TASK, al as UPDATE_TOPIC, a7 as UPDATE_WORKTREE_METADATA, a6 as UPDATE_WORKTREE_TARGETS, b0 as validateGitSemantics } from './tool-contracts-CYXVPN4K.js';