@lucern/contracts 0.3.0-alpha.4 → 0.3.0-alpha.6

package/dist/index.d.ts

@@ -4,841 +4,42 @@ export { COMPONENT_BOUNDARY_COMPONENT_LAYERS, COMPONENT_BOUNDARY_CONTRACT_VERSIO
 export { COMPONENT_HOST_BOUNDARY_CONTRACT_VERSION, COMPONENT_HOST_DB_READ_OPERATIONS, COMPONENT_HOST_DB_WRITE_OPERATIONS, COMPONENT_HOST_PROTECTED_TABLES, COMPONENT_HOST_PROTECTED_TABLE_OWNERS, COMPONENT_HOST_WRITE_ALLOWED_EXCEPTIONS, COMPONENT_HOST_WRITE_AUDIT_ROOTS, ComponentHostDbOperation, ComponentHostDbReadOperation, ComponentHostDbWriteOperation, ComponentHostProtectedTable, ComponentHostWriteAuditRoot } from './component-host-boundary.contract.js';
 export { ConvexAdminClient } from './convex-admin.contract.js';
 export { CutoverDomain, CutoverFlagState, GatewayAuthContext, GatewayAuthMode, GatewayEnvironment, GatewayErrorArgs, GatewayScope, GatewaySuccessArgs, KeyLifecycleStatus, PlatformApiErrorCode, requireActorPrincipalId } from './gateway.contract.js';
+export { GRAPH_INTELLIGENCE_MODE_TOOL_NAMES, GRAPH_INTELLIGENCE_PUBLIC_TOOL_NAMES, GRAPH_INTELLIGENCE_QUERIES, GRAPH_INTELLIGENCE_QUERIES_WITH_TOOLS, GRAPH_INTELLIGENCE_QUERY_CATALOG_VERSION, GRAPH_INTELLIGENCE_QUERY_CATEGORIES, GRAPH_INTELLIGENCE_QUERY_MODES, GRAPH_INTELLIGENCE_QUICK_QUERIES, GraphIntelligenceCatalogFilter, GraphIntelligencePublicToolName, GraphIntelligenceQueryCategory, GraphIntelligenceQueryDefinition, GraphIntelligenceQueryId, GraphIntelligenceQueryInputType, GraphIntelligenceQueryMode, GraphIntelligenceQueryWithTools, GraphIntelligenceQuickQuery, fillGraphIntelligencePromptTemplate, getGraphIntelligenceQuery, isGraphIntelligenceQueryMode, listGraphIntelligenceQueries } from './graph-intelligence.contract.js';
 export { BELIEF_TYPE_BONUS, BeliefLatticeSeed, CONTEXT_PACK_SCHEMA_VERSION, CONTEXT_PACK_SECTION_KEYS, CONTEXT_RANKING_PROFILES, ContextCompilationMode, ContextPackBelief, ContextPackContradiction, ContextPackDeltaReport, ContextPackDiagnostics, ContextPackEntity, ContextPackEvidence, ContextPackFailure, ContextPackFailureContext, ContextPackInjectionPolicy, ContextPackQuestion, ContextPackRequestV1, ContextPackSectionKey, ContextPackSummary, ContextPackV1, ContextRankingProfile, DEFAULT_BELIEF_TYPE_BONUS, DEFAULT_COMPILATION_MODE, DEFAULT_ENTITY_LIMIT, DEFAULT_PRIORITY_SCORE, DEFAULT_RANKING_PROFILE, DEFAULT_SECTION_LIMIT, DEFAULT_SEVERITY_SCORE, DEFAULT_TOKEN_BUDGET, ENTITY_RANKING_WEIGHTS, MAX_ENTITY_LIMIT, MAX_SECTION_LIMIT, MAX_TOKEN_BUDGET, MIN_CONTRADICTION_BUDGET, MIN_TOKEN_BUDGET, MIN_TOKEN_ESTIMATE, PRIORITY_SCORES, PackWeightOverride, PublicCompiledContext, PublicContextBelief, PublicContextContradiction, PublicContextEntity, PublicContextEvidence, PublicContextInjectionPolicy, PublicContextQuestion, RANKING_WEIGHTS, RECENCY_HALF_LIFE_DAYS, RESOLVED_QUESTION_STATUSES, RankingWeightVector, SECTION_BUDGET_RATIOS, SEVERITY_SCORES, TOKENS_PER_WORD, VerificationObligation } from './context-pack.contract.js';
 export { CreateDomainEventInput, DOMAIN_EVENT_TYPES, DOMAIN_EVENT_VERSION, DomainActorType, DomainEvent, DomainEventData, DomainEventType, DomainResourceType, EVENT_RETENTION_DEFAULT_DAYS, EventCursor, EventListQuery, EventListResult, ReplayEventsInput, ReplayEventsResult, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_MS, WebhookCreateInput, WebhookDeliveriesResult, WebhookDeliveryAttemptRecord, WebhookDeliveryRecord, WebhookDeliveryStatus, WebhookHealthResult, WebhookRecord, WebhookSecretMode, WebhookTestResult, WebhookUpdateInput, buildDomainEvent, compareEventCursor, createEventId, decodeEventCursor, emitDomainEvent, encodeEventCursor, inferActorType, isAfterCursor, normalizeRetentionDays, sortEventsByCursor } from './events.contract.js';
 export { DecodedPrefixedId, decodePrefixedId, encodePrefixedId, hasPrefixedIdPrefix } from './ids.contract.js';
 export { d as contractDsl } from './dsl-BgpoVOVQ.js';
-export { i as schemaContracts } from './index-CV-0_VWJ.js';
+export { i as schemaContracts } from './index-O09U2xHk.js';
 export { ComponentTableManifest, ComponentTableManifestSchema } from './schemas/component-table-manifest.js';
 export { SLOpinionInput, SLOpinionInputSchema } from './schemas/sl-opinion.js';
-import * as zod from 'zod';
-import { z } from 'zod';
-import { INFISICAL_RUNTIME_CONTRACT_VERSION, INFISICAL_RUNTIME_DEFAULT_PROJECT_ID, INFISICAL_RUNTIME_DEFAULT_API_URL, InfisicalRuntimeEnvironment, InfisicalRuntimeDeliveryMode, InfisicalRuntimeBootstrapEnv, InfisicalRuntimePath, InfisicalRuntimeSurface } from './infisical-runtime.contract.js';
-export { INFISICAL_RUNTIME_BOOTSTRAP_ENV, INFISICAL_RUNTIME_DELIVERY_MODES, INFISICAL_RUNTIME_ENVIRONMENTS, INFISICAL_RUNTIME_PATHS, INFISICAL_RUNTIME_SURFACES, INFISICAL_RUNTIME_SURFACE_IDS, InfisicalRuntimePathDefinition, InfisicalRuntimePathId, InfisicalRuntimeSurfaceDefinition, InfisicalRuntimeSurfaceId, InfisicalRuntimeVariable, findInfisicalRuntimePath, findInfisicalRuntimeSurface } from './infisical-runtime.contract.js';
-import { TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS } from './tenant-client.contract.js';
-export { TenantClientAllowedImport, TenantClientAuthMode, TenantClientCapability, TenantClientCapabilityId, TenantClientComponentConfigImport, TenantClientForbiddenImportPattern, TenantClientForbiddenImportPatternId, TenantClientForbiddenInstallTokenInfisicalPath, TenantClientForbiddenSecretEnv, TenantClientImportClassification, TenantClientImportDecision, TenantClientInstallablePackage, TenantClientInstallablePackageName, TenantClientIsolationRule, TenantClientOptionalContextField, TenantClientPackageRole, TenantClientPrincipalType, TenantClientPublicImport, TenantClientPublicPackage, TenantClientPublicSurface, TenantClientRequiredContextField, TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport } from './tenant-client.contract.js';
+export { e as EdgePolicyEntry, c as EdgePolicyEntrySchema, f as EdgePolicyManifest, d as EdgePolicyManifestSchema, g as EdgePolicyViolation, a as EpistemicNodeType, E as EpistemicNodeTypeSchema, G as GraphRef, b as GraphRefSchema, i as assertEdgePolicyAllowed, h as findEdgePolicy } from './edge-policy-manifest-DpmTtjmm.js';
+export { edgePolicyManifest } from './manifests/edge-policy-manifest.data.js';
+export { INFISICAL_RUNTIME_MANIFEST, InfisicalRuntimeManifest } from './manifests/infisical-runtime-manifest.js';
+export { CheckContext, CheckerKind, InvariantId, InvariantManifest, InvariantManifestSchema, InvariantResult, InvariantRule, InvariantSeverity } from './manifests/invariant-manifest.js';
+export { TENANT_CLIENT_MANIFEST, TenantClientManifest } from './manifests/tenant-client-manifest.js';
+export { ProjectionRegistry, projections } from './projections/index.js';
 export * from './function-registry/index.js';
-export { t as mcpToolsContract } from './tool-contracts-BcKz-VGj.js';
+export { t as mcpToolsContract } from './tool-contracts-CYXVPN4K.js';
 export { EntityConnectionMatch, EntityMatchCandidate, EntityTypeMatch, OntologyEntityType, rankEntityConnections, rankEntityTypeMatches, scoreEntityConnection, scoreEntityTypeMatch } from './v1/ontologies/v1.js';
 export { LucernPrompt, LucernPromptModelHint, isLucernPrompt } from './prompt.contract.js';
 export { AddEvidenceInput, AddWorktreeInput, BeliefResult, BisectConfidenceInput, BisectResult, BranchResult, CompileContextInput, CompiledContextResult, ConfidenceResult, ContradictionResult, CreateBeliefInput, CreateBranchInput, CreateEdgeInput, EdgeResult, EvidenceResult, FlagContradictionInput, ForkBeliefInput, ForkResult, JudgmentResult, LineageResult, LucernClient, LucernClientConfig, LucernGraphMethods, LucernWorkflowMethods, MergeInput, MergeResult, ModulateConfidenceInput, OpenPullRequestInput, PullRequestResult, PushInput, PushResult, QueryLineageInput, RecordJudgmentInput, RefineBeliefInput, SearchBeliefsInput, WorktreeResult } from './sdk-methods.contract.js';
-export { s as sdkToolsContract } from './sdk-tools.contract-CD-N1Jf7.js';
+export { s as sdkToolsContract } from './sdk-tools.contract-Ng8ULxjr.js';
+export { INFISICAL_RUNTIME_BOOTSTRAP_ENV, INFISICAL_RUNTIME_CONTRACT_VERSION, INFISICAL_RUNTIME_DEFAULT_API_URL, INFISICAL_RUNTIME_DEFAULT_PROJECT_ID, INFISICAL_RUNTIME_DELIVERY_MODES, INFISICAL_RUNTIME_ENVIRONMENTS, INFISICAL_RUNTIME_PATHS, INFISICAL_RUNTIME_SURFACES, INFISICAL_RUNTIME_SURFACE_IDS, InfisicalRuntimeBootstrapEnv, InfisicalRuntimeDeliveryMode, InfisicalRuntimeEnvironment, InfisicalRuntimePath, InfisicalRuntimePathDefinition, InfisicalRuntimePathId, InfisicalRuntimeSurface, InfisicalRuntimeSurfaceDefinition, InfisicalRuntimeSurfaceId, InfisicalRuntimeVariable, findInfisicalRuntimePath, findInfisicalRuntimeSurface } from './infisical-runtime.contract.js';
+export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_PROFILES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, TenantClientAllowedImport, TenantClientAuthMode, TenantClientCapability, TenantClientCapabilityId, TenantClientComponentConfigImport, TenantClientForbiddenImportPattern, TenantClientForbiddenImportPatternId, TenantClientForbiddenInstallTokenInfisicalPath, TenantClientForbiddenSecretEnv, TenantClientImportClassification, TenantClientImportDecision, TenantClientInstallProfile, TenantClientInstallProfileId, TenantClientInstallablePackage, TenantClientInstallablePackageName, TenantClientIsolationRule, TenantClientOptionalContextField, TenantClientPackageRole, TenantClientPrincipalType, TenantClientPublicImport, TenantClientPublicPackage, TenantClientPublicSurface, TenantClientRequiredContextField, TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport } from './tenant-client.contract.js';
 export { TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES, TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS, TENANT_BOOTSTRAP_SEED_COMPONENTS, TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION, TENANT_BOOTSTRAP_SEED_MANIFEST, TENANT_BOOTSTRAP_SEED_TABLES, TENANT_BOOTSTRAP_TABLE_REQUIREMENTS, TenantBootstrapCopyMode, TenantBootstrapForbiddenSeedTable, TenantBootstrapPrepopulation, TenantBootstrapSeedAuthMetadataField, TenantBootstrapSeedComponent, TenantBootstrapSeedScope, TenantBootstrapSeedTable, TenantBootstrapSeedTableName, TenantBootstrapTableRequirement, findTenantBootstrapSeedTable, findTenantBootstrapTableRequirement, isTenantBootstrapForbiddenSeedTable, isTenantBootstrapSeedTable } from './tenant-bootstrap-seed.contract.js';
 export { TENANT_BOOTSTRAP_TEMPLATE_ACTOR, TENANT_BOOTSTRAP_TEMPLATE_SEED_VERSION, TENANT_BOOTSTRAP_TEMPLATE_TENANT_ID, TenantBootstrapTemplateSeedOptions, TenantBootstrapTemplateSeedRows, buildTenantBootstrapTemplateSeedRows } from './tenant-bootstrap-seed.defaults.js';
 export { LexicalRerankOptions, LexicalSignal, LexicalStrategy, PreparedLexicalQuery, bigramTokenize, jaccardSimilarity, prepareLexicalQuery, rankWindowScore, rerankLexicalWindow, scoreLexicalSignal, scoreLexicalSignals, stemToken, tokenOverlapScore, tokenizeSearchText, wordOverlapScore, wordTokenize } from './text-matching.contract.js';
 export { ROOT_TOPIC_ID, TopicDoc, collectTopicNeighborhood } from './v1/topics/v1.js';
 export { CANONICAL_WORKFLOW_DEFINITIONS, DEFAULT_TIER_APPROVAL_MODE, DEFAULT_WORKFLOW_AUTO_FIX_POLICY, EngineeringBriefOutput, InboxSummaryOutput, MORNING_BRIEF_WORKFLOW_ID, NIGHTLY_RECONCILIATION_WORKFLOW_ID, PipelineBriefOutput, ResearchMemoOutput, StrategyArtifactOutput, StructuredPayloadOutput, WORKFLOW_ACTION_KINDS, WORKFLOW_APPROVAL_MODES, WORKFLOW_AUTO_FIX_MODES, WORKFLOW_HOOK_EVENTS, WORKFLOW_INTEGRITY_CHECKS, WORKFLOW_MUTATION_TIERS, WORKFLOW_OUTPUT_KINDS, WORKFLOW_PROOF_ARTIFACT_KINDS, WORKFLOW_RUNTIME_SCHEMA_VERSION, WORKFLOW_RUN_STATUSES, WORKFLOW_STAFFING_HINTS, WORKFLOW_TRIGGER_KINDS, WorkflowActionContract, WorkflowActionKind, WorkflowApprovalMode, WorkflowApprovalPolicy, WorkflowAutoFixMode, WorkflowAutoFixPolicy, WorkflowDefinitionV1, WorkflowHookContract, WorkflowHookEvent, WorkflowIntegrityCheckId, WorkflowMutationTier, WorkflowOutputBase, WorkflowOutputContract, WorkflowOutputKind, WorkflowProofArtifact, WorkflowProofArtifactKind, WorkflowRunReceiptV1, WorkflowRunStatus, WorkflowStaffingHint, WorkflowTriggerContract, WorkflowTriggerKind } from './workflow-runtime.contract.js';
+export { createEvidenceProjection } from './projections/create-evidence.projection.js';
+export { listBeliefsProjection } from './projections/list-beliefs.projection.js';
+export { listTasksProjection } from './projections/list-tasks.projection.js';
+export { modulateConfidenceProjection } from './projections/modulate-confidence.projection.js';
+export { ProjectionDef, defineProjection } from './projections/projection-dsl.js';
 import './generated/tableOwnership.js';
 import './defineFunction-DO97DKs4.js';
+import 'zod';
 import './defineTable-CBQ03FXl.js';
 import './idOf-DR8tkhQS.js';
 import './schemas/enums.js';
 import './schemas/manifest.js';
-
-declare const EpistemicNodeTypeSchema: z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>;
-type EpistemicNodeType = z.infer<typeof EpistemicNodeTypeSchema>;
-type GraphRef = {
-    kind: "epistemic_node";
-    nodeId: string;
-    nodeType: EpistemicNodeType;
-} | {
-    kind: "external_belief";
-    ref: {
-        tenantId: string;
-        beliefId: string;
-    };
-};
-declare const GraphRefSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
-    kind: z.ZodLiteral<"epistemic_node">;
-    nodeId: z.ZodString;
-    nodeType: z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>;
-}, "strip", z.ZodTypeAny, {
-    kind: "epistemic_node";
-    nodeId: string;
-    nodeType: "belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer";
-}, {
-    kind: "epistemic_node";
-    nodeId: string;
-    nodeType: "belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer";
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"external_belief">;
-    ref: z.ZodObject<{
-        tenantId: z.ZodString;
-        beliefId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        tenantId: string;
-        beliefId: string;
-    }, {
-        tenantId: string;
-        beliefId: string;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    kind: "external_belief";
-    ref: {
-        tenantId: string;
-        beliefId: string;
-    };
-}, {
-    kind: "external_belief";
-    ref: {
-        tenantId: string;
-        beliefId: string;
-    };
-}>]>;
-
-declare const EdgePolicyEntrySchema: z.ZodObject<{
-    edgeType: z.ZodString;
-    fromKinds: z.ZodArray<z.ZodEnum<["epistemic_node", "external_belief"]>, "many">;
-    fromNodeTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>, "many">>;
-    toKinds: z.ZodArray<z.ZodEnum<["epistemic_node", "external_belief"]>, "many">;
-    toNodeTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>, "many">>;
-    description: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    description: string;
-    edgeType: string;
-    fromKinds: ("epistemic_node" | "external_belief")[];
-    toKinds: ("epistemic_node" | "external_belief")[];
-    fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-}, {
-    description: string;
-    edgeType: string;
-    fromKinds: ("epistemic_node" | "external_belief")[];
-    toKinds: ("epistemic_node" | "external_belief")[];
-    fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-}>;
-declare const EdgePolicyManifestSchema: z.ZodObject<{
-    manifestVersion: z.ZodLiteral<"1.0.0">;
-    policies: z.ZodArray<z.ZodObject<{
-        edgeType: z.ZodString;
-        fromKinds: z.ZodArray<z.ZodEnum<["epistemic_node", "external_belief"]>, "many">;
-        fromNodeTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>, "many">>;
-        toKinds: z.ZodArray<z.ZodEnum<["epistemic_node", "external_belief"]>, "many">;
-        toNodeTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<["belief", "evidence", "question", "answer", "topic", "edge", "ontology", "lens", "contradiction"]>, "many">>;
-        description: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        description: string;
-        edgeType: string;
-        fromKinds: ("epistemic_node" | "external_belief")[];
-        toKinds: ("epistemic_node" | "external_belief")[];
-        fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-        toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    }, {
-        description: string;
-        edgeType: string;
-        fromKinds: ("epistemic_node" | "external_belief")[];
-        toKinds: ("epistemic_node" | "external_belief")[];
-        fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-        toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    policies: {
-        description: string;
-        edgeType: string;
-        fromKinds: ("epistemic_node" | "external_belief")[];
-        toKinds: ("epistemic_node" | "external_belief")[];
-        fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-        toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    }[];
-    manifestVersion: "1.0.0";
-}, {
-    policies: {
-        description: string;
-        edgeType: string;
-        fromKinds: ("epistemic_node" | "external_belief")[];
-        toKinds: ("epistemic_node" | "external_belief")[];
-        fromNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-        toNodeTypes?: ("belief" | "evidence" | "question" | "edge" | "contradiction" | "topic" | "ontology" | "lens" | "answer")[] | undefined;
-    }[];
-    manifestVersion: "1.0.0";
-}>;
-type EdgePolicyEntry = z.infer<typeof EdgePolicyEntrySchema>;
-type EdgePolicyManifest = z.infer<typeof EdgePolicyManifestSchema>;
-type EdgePolicyViolation = {
-    code: "POLICY_VIOLATION";
-    edgeType: string;
-    from: GraphRef;
-    to: GraphRef;
-};
-declare function findEdgePolicy(manifest: EdgePolicyManifest, edgeType: string): EdgePolicyEntry | undefined;
-declare function assertEdgePolicyAllowed(manifest: EdgePolicyManifest, edgeType: string, from: GraphRef, to: GraphRef): void;
-
-declare const edgePolicyManifest: {
-    manifestVersion: "1.0.0";
-    policies: ({
-        edgeType: string;
-        fromKinds: "epistemic_node"[];
-        fromNodeTypes: "evidence"[];
-        toKinds: "epistemic_node"[];
-        toNodeTypes: "evidence"[];
-        description: string;
-    } | {
-        edgeType: string;
-        fromKinds: "epistemic_node"[];
-        fromNodeTypes: "evidence"[];
-        toKinds: "epistemic_node"[];
-        toNodeTypes: "belief"[];
-        description: string;
-    } | {
-        edgeType: string;
-        fromKinds: "epistemic_node"[];
-        fromNodeTypes: "evidence"[];
-        toKinds: "epistemic_node"[];
-        toNodeTypes: "question"[];
-        description: string;
-    })[];
-};
-
-type InfisicalRuntimeManifest = {
-    readonly manifestVersion: "1.0.0";
-    readonly contractVersion: typeof INFISICAL_RUNTIME_CONTRACT_VERSION;
-    readonly project: {
-        readonly id: typeof INFISICAL_RUNTIME_DEFAULT_PROJECT_ID;
-        readonly apiUrl: typeof INFISICAL_RUNTIME_DEFAULT_API_URL;
-    };
-    readonly environments: readonly InfisicalRuntimeEnvironment[];
-    readonly deliveryModes: readonly InfisicalRuntimeDeliveryMode[];
-    readonly bootstrapEnv: InfisicalRuntimeBootstrapEnv;
-    readonly paths: readonly InfisicalRuntimePath[];
-    readonly surfaces: readonly InfisicalRuntimeSurface[];
-};
-declare const INFISICAL_RUNTIME_MANIFEST: {
-    readonly manifestVersion: "1.0.0";
-    readonly contractVersion: "2026-04-28";
-    readonly project: {
-        readonly id: "344b0526-90df-4606-ba50-22c647a36c65";
-        readonly apiUrl: "https://app.infisical.com";
-    };
-    readonly environments: readonly ["dev", "staging", "prod"];
-    readonly deliveryModes: readonly ["vercel_sync", "runtime_fetch", "device_auth"];
-    readonly bootstrapEnv: {
-        readonly apiUrl: readonly ["INFISICAL_API_URL", "INFISICAL_URL"];
-        readonly projectId: readonly ["INFISICAL_PROJECT_ID", "INFISICAL_WORKSPACE_ID"];
-        readonly clientId: readonly ["INFISICAL_CLIENT_ID", "INFISICAL_MACHINE_CLIENT_ID", "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID"];
-        readonly clientSecret: readonly ["INFISICAL_CLIENT_SECRET", "INFISICAL_MACHINE_CLIENT_SECRET", "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET"];
-        readonly environment: readonly ["INFISICAL_ENV", "LUCERN_INFISICAL_ENV"];
-        readonly organizationSlug: readonly ["INFISICAL_ORG_SLUG", "INFISICAL_ORGANIZATION_SLUG"];
-        readonly disabled: readonly ["LUCERN_INFISICAL_DISABLE", "INFISICAL_DISABLE"];
-    };
-    readonly paths: readonly [{
-        readonly id: "platform-auth";
-        readonly secretPath: "/platform/auth";
-        readonly description: "Lucern platform authentication secrets. Synced into Vercel web/gateway projects; never distributed to tenant tools.";
-        readonly variables: readonly [{
-            readonly name: "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY";
-            readonly required: true;
-            readonly secret: false;
-            readonly public: true;
-            readonly description: "Clerk publishable key for the Lucern web origin.";
-        }, {
-            readonly name: "CLERK_SECRET_KEY";
-            readonly required: true;
-            readonly secret: true;
-            readonly public: false;
-            readonly description: "Clerk backend secret key for Lucern server runtimes.";
-        }, {
-            readonly name: "CLERK_JWT_ISSUER_DOMAIN";
-            readonly required: false;
-            readonly secret: false;
-            readonly public: false;
-            readonly description: "Expected Clerk issuer/JWKS domain for JWT verification.";
-        }, {
-            readonly name: "NEXT_PUBLIC_CLERK_SIGN_IN_URL";
-            readonly required: false;
-            readonly secret: false;
-            readonly public: true;
-            readonly description: "Public sign-in URL for Lucern-owned web flows.";
-        }, {
-            readonly name: "NEXT_PUBLIC_CLERK_SIGN_UP_URL";
-            readonly required: false;
-            readonly secret: false;
-            readonly public: true;
-            readonly description: "Public sign-up URL for Lucern-owned web flows.";
-        }];
-    }, {
-        readonly id: "platform-runtime";
-        readonly secretPath: "/platform/runtime";
-        readonly description: "Runtime defaults shared by server-side Lucern clients and operator tooling.";
-        readonly variables: readonly [{
-            readonly name: "LUCERN_API_URL";
-            readonly required: true;
-            readonly secret: false;
-            readonly public: false;
-            readonly aliases: readonly ["LUCERN_API_BASE_URL", "LUCERN_BASE_URL"];
-            readonly description: "Canonical Lucern API gateway URL.";
-        }, {
-            readonly name: "LUCERN_LOGIN_BASE_URL";
-            readonly required: false;
-            readonly secret: false;
-            readonly public: false;
-            readonly aliases: readonly ["LUCERN_AUTH_BASE_URL"];
-            readonly description: "Browser login origin used when it differs from the API.";
-        }, {
-            readonly name: "LUCERN_ENVIRONMENT";
-            readonly required: false;
-            readonly secret: false;
-            readonly public: false;
-            readonly aliases: readonly ["LUCERN_ENV"];
-            readonly description: "Lucern environment label consumed by CLI profiles.";
-        }];
-    }, {
-        readonly id: "tenant-shared-install";
-        readonly secretPath: "tenants/shared";
-        readonly description: "Tenant package-install secrets. This is install-only and distinct from platform publish credentials.";
-        readonly variables: readonly [{
-            readonly name: "INSTALL_LUCERN_NPM";
-            readonly required: true;
-            readonly secret: true;
-            readonly public: false;
-            readonly description: "Read-only install token for the published @lucern/* suite.";
-        }];
-    }];
-    readonly surfaces: readonly [{
-        readonly id: "lucern-web";
-        readonly delivery: "vercel_sync";
-        readonly sourcePathIds: readonly ["platform-auth", "platform-runtime"];
-        readonly consumer: "apps/web on Vercel project lucern";
-        readonly description: "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs.";
-    }, {
-        readonly id: "lucern-gateway";
-        readonly delivery: "vercel_sync";
-        readonly sourcePathIds: readonly ["platform-auth", "platform-runtime"];
-        readonly consumer: "apps/gateway on Vercel project lucern-gateway";
-        readonly description: "Lucern gateway consumes platform config via Infisical-to-Vercel syncs.";
-    }, {
-        readonly id: "lucern-sdk";
-        readonly packageName: "@lucern/sdk";
-        readonly delivery: "runtime_fetch";
-        readonly sourcePathIds: readonly ["platform-runtime"];
-        readonly consumer: "server-side SDK operator contexts with a scoped Infisical identity";
-        readonly description: "SDK exposes the runtime Infisical resolver used by clients that have machine identity credentials.";
-    }, {
-        readonly id: "lucern-cli";
-        readonly packageName: "@lucern/cli";
-        readonly delivery: "runtime_fetch";
-        readonly fallback: "device_auth";
-        readonly sourcePathIds: readonly ["platform-runtime"];
-        readonly consumer: "developer/operator CLI processes";
-        readonly description: "CLI hydrates runtime defaults from Infisical when configured, then authenticates users through Lucern device login.";
-    }, {
-        readonly id: "lucern-mcp";
-        readonly packageName: "@lucern/mcp";
-        readonly delivery: "runtime_fetch";
-        readonly fallback: "device_auth";
-        readonly sourcePathIds: readonly ["platform-runtime"];
-        readonly consumer: "MCP server/client processes";
-        readonly description: "MCP hydrates runtime defaults through the SDK resolver and remains a Lucern client, not a platform secret owner.";
-    }, {
-        readonly id: "tenant-client";
-        readonly delivery: "device_auth";
-        readonly sourcePathIds: readonly ["tenant-shared-install"];
-        readonly consumer: "tenant-owned apps and coding agents";
-        readonly description: "Tenant clients install the published packages and receive user/service credentials through Lucern auth surfaces.";
-    }];
-};
-
-interface ProjectionDef<TInput, TConvexArgs> {
-    contractName: string;
-    inputSchema: z.ZodSchema<TInput>;
-    project: (input: TInput) => TConvexArgs;
-    convexArgsValidator: unknown;
-}
-declare function defineProjection<I, C>(def: ProjectionDef<I, C>): ProjectionDef<I, C>;
-
-declare const createEvidenceProjection: ProjectionDef<z.objectInputType<{
-    projectId: z.ZodOptional<z.ZodString>;
-    topicId: z.ZodOptional<z.ZodString>;
-    text: z.ZodOptional<z.ZodString>;
-    canonicalText: z.ZodOptional<z.ZodString>;
-    title: z.ZodOptional<z.ZodString>;
-    content: z.ZodOptional<z.ZodString>;
-    contentType: z.ZodOptional<z.ZodString>;
-    kind: z.ZodOptional<z.ZodString>;
-    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    source: z.ZodOptional<z.ZodString>;
-    sourceUrl: z.ZodOptional<z.ZodString>;
-    sourceType: z.ZodOptional<z.ZodString>;
-    externalSourceType: z.ZodOptional<z.ZodString>;
-    sourceQuestionId: z.ZodOptional<z.ZodString>;
-    methodology: z.ZodOptional<z.ZodString>;
-    informationAsymmetry: z.ZodOptional<z.ZodString>;
-    sourceDescription: z.ZodOptional<z.ZodString>;
-    targetId: z.ZodOptional<z.ZodString>;
-    targetNodeId: z.ZodOptional<z.ZodString>;
-    linkedBeliefNodeId: z.ZodOptional<z.ZodString>;
-    evidenceRelation: z.ZodOptional<z.ZodEnum<["supports", "contradicts", "neutral"]>>;
-    confidence: z.ZodOptional<z.ZodNumber>;
-    weight: z.ZodOptional<z.ZodNumber>;
-    reasoning: z.ZodOptional<z.ZodString>;
-    rationale: z.ZodString;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    trustedBypassAccessCheck: z.ZodOptional<z.ZodBoolean>;
-}, z.ZodTypeAny, "passthrough">, Record<string, unknown>>;
-
-declare const listBeliefsProjection: ProjectionDef<{
-    topicId: string;
-    status?: "active" | "archived" | "unscored" | "scored" | "superseded" | undefined;
-    worktreeId?: string | undefined;
-    limit?: number | undefined;
-    minConfidence?: number | undefined;
-    includeEdgeAssociated?: boolean | undefined;
-}, Record<string, unknown>>;
-
-declare const listTasksProjection: ProjectionDef<{
-    topicId: string;
-    status?: "todo" | "in_progress" | "blocked" | "done" | undefined;
-    worktreeId?: string | undefined;
-    limit?: number | undefined;
-    linkedWorktreeId?: string | undefined;
-}, Record<string, unknown>>;
-
-declare const modulateConfidenceProjection: ProjectionDef<{
-    rationale: string;
-    trigger: "evidence_added" | "evidence_removed" | "contradiction_detected" | "contradiction_resolved" | "agent_assessment" | "worktree_outcome" | "worktree_completed" | "fusion" | "discount" | "deduction" | "answer_recorded" | "backfill_synthetic";
-    belief?: number | undefined;
-    baseRate?: number | undefined;
-    nodeId?: string | undefined;
-    disbelief?: number | undefined;
-    uncertainty?: number | undefined;
-    worktreeId?: string | undefined;
-    triggeringEvidenceId?: string | undefined;
-    triggeringQuestionId?: string | undefined;
-    triggeringAnswerId?: string | undefined;
-    triggeringContradictionId?: string | undefined;
-    triggeringWorktreeId?: string | undefined;
-    beliefNodeId?: string | undefined;
-    trustedBypassAccessCheck?: boolean | undefined;
-    opinion?: {
-        belief: number;
-        baseRate: number;
-        disbelief: number;
-        uncertainty: number;
-    } | undefined;
-    provenance?: {
-        evidence?: string | undefined;
-        question?: string | undefined;
-        contradiction?: string | undefined;
-        worktree?: string | undefined;
-        answer?: string | undefined;
-    } | undefined;
-}, {
-    nodeId: string;
-    worktreeId: string | undefined;
-    belief: number;
-    disbelief: number;
-    uncertainty: number;
-    baseRate: number;
-    trigger: "evidence_added" | "evidence_removed" | "contradiction_detected" | "contradiction_resolved" | "agent_assessment" | "worktree_outcome" | "worktree_completed" | "fusion" | "discount" | "deduction" | "backfill_synthetic";
-    triggeringEvidenceId: string | undefined;
-    triggeringQuestionId: string | undefined;
-    triggeringAnswerId: string | undefined;
-    triggeringContradictionId: string | undefined;
-    triggeringWorktreeId: string | undefined;
-    rationale: string;
-    trustedBypassAccessCheck: boolean;
-}>;
-
-declare const projections: {
-    readonly create_evidence: ProjectionDef<zod.objectInputType<{
-        projectId: zod.ZodOptional<zod.ZodString>;
-        topicId: zod.ZodOptional<zod.ZodString>;
-        text: zod.ZodOptional<zod.ZodString>;
-        canonicalText: zod.ZodOptional<zod.ZodString>;
-        title: zod.ZodOptional<zod.ZodString>;
-        content: zod.ZodOptional<zod.ZodString>;
-        contentType: zod.ZodOptional<zod.ZodString>;
-        kind: zod.ZodOptional<zod.ZodString>;
-        tags: zod.ZodOptional<zod.ZodArray<zod.ZodString, "many">>;
-        source: zod.ZodOptional<zod.ZodString>;
-        sourceUrl: zod.ZodOptional<zod.ZodString>;
-        sourceType: zod.ZodOptional<zod.ZodString>;
-        externalSourceType: zod.ZodOptional<zod.ZodString>;
-        sourceQuestionId: zod.ZodOptional<zod.ZodString>;
-        methodology: zod.ZodOptional<zod.ZodString>;
-        informationAsymmetry: zod.ZodOptional<zod.ZodString>;
-        sourceDescription: zod.ZodOptional<zod.ZodString>;
-        targetId: zod.ZodOptional<zod.ZodString>;
-        targetNodeId: zod.ZodOptional<zod.ZodString>;
-        linkedBeliefNodeId: zod.ZodOptional<zod.ZodString>;
-        evidenceRelation: zod.ZodOptional<zod.ZodEnum<["supports", "contradicts", "neutral"]>>;
-        confidence: zod.ZodOptional<zod.ZodNumber>;
-        weight: zod.ZodOptional<zod.ZodNumber>;
-        reasoning: zod.ZodOptional<zod.ZodString>;
-        rationale: zod.ZodString;
-        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
-        trustedBypassAccessCheck: zod.ZodOptional<zod.ZodBoolean>;
-    }, zod.ZodTypeAny, "passthrough">, Record<string, unknown>>;
-    readonly list_beliefs: ProjectionDef<{
-        topicId: string;
-        status?: "active" | "archived" | "unscored" | "scored" | "superseded" | undefined;
-        worktreeId?: string | undefined;
-        limit?: number | undefined;
-        minConfidence?: number | undefined;
-        includeEdgeAssociated?: boolean | undefined;
-    }, Record<string, unknown>>;
-    readonly list_tasks: ProjectionDef<{
-        topicId: string;
-        status?: "todo" | "in_progress" | "blocked" | "done" | undefined;
-        worktreeId?: string | undefined;
-        limit?: number | undefined;
-        linkedWorktreeId?: string | undefined;
-    }, Record<string, unknown>>;
-    readonly modulate_confidence: ProjectionDef<{
-        rationale: string;
-        trigger: "evidence_added" | "evidence_removed" | "contradiction_detected" | "contradiction_resolved" | "agent_assessment" | "worktree_outcome" | "worktree_completed" | "fusion" | "discount" | "deduction" | "answer_recorded" | "backfill_synthetic";
-        belief?: number | undefined;
-        baseRate?: number | undefined;
-        nodeId?: string | undefined;
-        disbelief?: number | undefined;
-        uncertainty?: number | undefined;
-        worktreeId?: string | undefined;
-        triggeringEvidenceId?: string | undefined;
-        triggeringQuestionId?: string | undefined;
-        triggeringAnswerId?: string | undefined;
-        triggeringContradictionId?: string | undefined;
-        triggeringWorktreeId?: string | undefined;
-        beliefNodeId?: string | undefined;
-        trustedBypassAccessCheck?: boolean | undefined;
-        opinion?: {
-            belief: number;
-            baseRate: number;
-            disbelief: number;
-            uncertainty: number;
-        } | undefined;
-        provenance?: {
-            evidence?: string | undefined;
-            question?: string | undefined;
-            contradiction?: string | undefined;
-            worktree?: string | undefined;
-            answer?: string | undefined;
-        } | undefined;
-    }, {
-        nodeId: string;
-        worktreeId: string | undefined;
-        belief: number;
-        disbelief: number;
-        uncertainty: number;
-        baseRate: number;
-        trigger: "evidence_added" | "evidence_removed" | "contradiction_detected" | "contradiction_resolved" | "agent_assessment" | "worktree_outcome" | "worktree_completed" | "fusion" | "discount" | "deduction" | "backfill_synthetic";
-        triggeringEvidenceId: string | undefined;
-        triggeringQuestionId: string | undefined;
-        triggeringAnswerId: string | undefined;
-        triggeringContradictionId: string | undefined;
-        triggeringWorktreeId: string | undefined;
-        rationale: string;
-        trustedBypassAccessCheck: boolean;
-    }>;
-};
-type ProjectionRegistry = typeof projections;
-
-type InvariantId = string;
-type CheckerKind = "ast" | "manifest" | "runtime";
-type InvariantSeverity = "block_publish" | "block_pr" | "warn";
-interface CheckContext {
-    repoRoot: string;
-    projections: ProjectionRegistry;
-}
-interface InvariantResult {
-    status: "passed" | "failed" | "skipped";
-    evidenceRefs: string[];
-    reason?: string;
-}
-interface InvariantRule {
-    invariant: InvariantId;
-    description: string;
-    checker: CheckerKind;
-    severity: InvariantSeverity;
-    evaluate: (ctx: CheckContext) => Promise<InvariantResult>;
-}
-declare const InvariantManifestSchema: z.ZodObject<{
-    manifestVersion: z.ZodLiteral<"1.0.0">;
-    rules: z.ZodArray<z.ZodObject<{
-        invariant: z.ZodString;
-        description: z.ZodString;
-        checker: z.ZodEnum<["ast", "manifest", "runtime"]>;
-        severity: z.ZodEnum<["block_publish", "block_pr", "warn"]>;
-    }, "strip", z.ZodTypeAny, {
-        invariant: string;
-        description: string;
-        severity: "warn" | "block_publish" | "block_pr";
-        checker: "runtime" | "ast" | "manifest";
-    }, {
-        invariant: string;
-        description: string;
-        severity: "warn" | "block_publish" | "block_pr";
-        checker: "runtime" | "ast" | "manifest";
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    manifestVersion: "1.0.0";
-    rules: {
-        invariant: string;
-        description: string;
-        severity: "warn" | "block_publish" | "block_pr";
-        checker: "runtime" | "ast" | "manifest";
-    }[];
-}, {
-    manifestVersion: "1.0.0";
-    rules: {
-        invariant: string;
-        description: string;
-        severity: "warn" | "block_publish" | "block_pr";
-        checker: "runtime" | "ast" | "manifest";
-    }[];
-}>;
-type InvariantManifest = z.infer<typeof InvariantManifestSchema>;
-
-type TenantClientManifest = {
-    readonly manifestVersion: "1.0.0";
-    readonly contractVersion: typeof TENANT_CLIENT_CONTRACT_VERSION;
-    readonly auth: {
-        readonly modes: typeof TENANT_CLIENT_AUTH_MODES;
-        readonly principalTypes: typeof TENANT_CLIENT_PRINCIPAL_TYPES;
-        readonly requiredContextFields: typeof TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS;
-        readonly optionalContextFields: typeof TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS;
-    };
-    readonly installToken: {
-        readonly env: typeof TENANT_CLIENT_INSTALL_TOKEN_ENV;
-        readonly infisicalPath: typeof TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH;
-        readonly forbiddenInfisicalPaths: typeof TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS;
-        readonly forbiddenSecretEnv: typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV;
-    };
-    readonly packages: {
-        readonly installable: typeof TENANT_CLIENT_INSTALLABLE_PACKAGES;
-        readonly directImports: typeof TENANT_CLIENT_PUBLIC_IMPORTS;
-        readonly componentConfigImports: typeof TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS;
-    };
-    readonly sdk: {
-        readonly requiredNamespaces: typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES;
-    };
-    readonly capabilities: typeof TENANT_CLIENT_CAPABILITIES;
-    readonly isolationRules: typeof TENANT_CLIENT_ISOLATION_RULES;
-    readonly forbiddenImportPatterns: typeof TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS;
-};
-declare const TENANT_CLIENT_MANIFEST: {
-    readonly manifestVersion: "1.0.0";
-    readonly contractVersion: "2026-04-27";
-    readonly auth: {
-        readonly modes: readonly ["interactive_user", "service_principal", "tenant_api_key", "session_token"];
-        readonly principalTypes: readonly ["human", "service", "agent"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-        readonly optionalContextFields: readonly ["principalType", "roles", "sessionId", "delegationChain"];
-    };
-    readonly installToken: {
-        readonly env: "INSTALL_LUCERN_NPM";
-        readonly infisicalPath: "tenants/shared";
-        readonly forbiddenInfisicalPaths: readonly ["/platform/publish"];
-        readonly forbiddenSecretEnv: readonly ["NPM_TOKEN"];
-    };
-    readonly packages: {
-        readonly installable: readonly [{
-            readonly packageName: "@lucern/access-control";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/agent";
-            readonly role: "platform_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/auth";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/cli";
-            readonly role: "developer_tool";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/client-core";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/confidence";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/config";
-            readonly role: "configuration";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/contracts";
-            readonly role: "contract_entrypoint";
-            readonly directTenantImport: true;
-        }, {
-            readonly packageName: "@lucern/control-plane";
-            readonly role: "platform_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/developer-kit";
-            readonly role: "developer_tool";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/events";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/graph-primitives";
-            readonly role: "sdk_dependency";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/identity";
-            readonly role: "component_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/mcp";
-            readonly role: "runtime_entrypoint";
-            readonly directTenantImport: true;
-        }, {
-            readonly packageName: "@lucern/pack-host";
-            readonly role: "platform_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/pack-installer";
-            readonly role: "developer_tool";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/proof-compiler";
-            readonly role: "developer_tool";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/react";
-            readonly role: "runtime_entrypoint";
-            readonly directTenantImport: true;
-        }, {
-            readonly packageName: "@lucern/reasoning-kernel";
-            readonly role: "component_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/sdk";
-            readonly role: "runtime_entrypoint";
-            readonly directTenantImport: true;
-        }, {
-            readonly packageName: "@lucern/server-core";
-            readonly role: "platform_runtime";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/testing";
-            readonly role: "test_support";
-            readonly directTenantImport: false;
-        }, {
-            readonly packageName: "@lucern/types";
-            readonly role: "contract_entrypoint";
-            readonly directTenantImport: true;
-        }];
-        readonly directImports: readonly [{
-            readonly packageName: "@lucern/sdk";
-            readonly surface: "runtime";
-            readonly subpaths: "published_exports";
-            readonly description: "TypeScript SDK runtime and generated operation namespaces.";
-        }, {
-            readonly packageName: "@lucern/react";
-            readonly surface: "runtime";
-            readonly subpaths: "published_exports";
-            readonly description: "React bindings for tenant-owned UI applications.";
-        }, {
-            readonly packageName: "@lucern/mcp";
-            readonly surface: "runtime";
-            readonly subpaths: "published_exports";
-            readonly description: "MCP client/server entry points and hosted route helpers.";
-        }, {
-            readonly packageName: "@lucern/contracts";
-            readonly surface: "contract";
-            readonly subpaths: "published_exports";
-            readonly description: "Published type and manifest contracts.";
-        }, {
-            readonly packageName: "@lucern/types";
-            readonly surface: "contract";
-            readonly subpaths: "published_exports";
-            readonly description: "Published type-only helpers for tenant integration code.";
-        }];
-        readonly componentConfigImports: readonly [{
-            readonly packageName: "@lucern/identity";
-            readonly importPath: "@lucern/identity/convex.config";
-            readonly surface: "component_config";
-            readonly description: "Convex component binding config for tenant deployments that install Lucern identity.";
-        }, {
-            readonly packageName: "@lucern/reasoning-kernel";
-            readonly importPath: "@lucern/reasoning-kernel/convex.config";
-            readonly surface: "component_config";
-            readonly description: "Convex component binding config for tenant deployments that install the Lucern reasoning kernel.";
-        }, {
-            readonly packageName: "@lucern/reasoning-kernel";
-            readonly importPath: "@lucern/reasoning-kernel/runtime.config";
-            readonly surface: "component_config";
-            readonly description: "Runtime config alias for tenant deployments that install the Lucern reasoning kernel.";
-        }];
-    };
-    readonly sdk: {
-        readonly requiredNamespaces: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
-    };
-    readonly capabilities: readonly [{
-        readonly id: "identity.bootstrap_session";
-        readonly description: "Start a scoped Lucern session for a tenant principal.";
-        readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-    }, {
-        readonly id: "reasoning.context.compile";
-        readonly description: "Compile tenant and workspace scoped reasoning context.";
-        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-    }, {
-        readonly id: "reasoning.graph.read";
-        readonly description: "Read beliefs, evidence, questions, topics, and lineage.";
-        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-    }, {
-        readonly id: "reasoning.graph.write";
-        readonly description: "Create and update graph objects through authorized APIs.";
-        readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-    }, {
-        readonly id: "workflow.worktree_lifecycle";
-        readonly description: "Create, review, merge, and close scoped worktrees.";
-        readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
-        readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
-    }];
-    readonly isolationRules: readonly [{
-        readonly id: "tenant_workspace_scope_required";
-        readonly description: "Runtime operations must resolve both tenantId and workspaceId before reaching Lucern reasoning state.";
-    }, {
-        readonly id: "principal_audit_required";
-        readonly description: "Runtime operations must carry principalId, authMode, and scopes for audit attribution.";
-    }, {
-        readonly id: "no_private_lucern_imports";
-        readonly description: "Tenant code must not import Lucern source, Convex internals, generated adapters, or unpublished package internals.";
-    }];
-    readonly forbiddenImportPatterns: readonly [{
-        readonly id: "deep_src_import";
-        readonly pattern: "^@lucern/[^/]+/src(?:/|$)";
-        readonly description: "Published packages must not be bypassed through src paths.";
-    }, {
-        readonly id: "deep_dist_import";
-        readonly pattern: "^@lucern/[^/]+/dist(?:/|$)";
-        readonly description: "Published package exports must be used instead of dist file paths.";
-    }, {
-        readonly id: "generated_adapter_import";
-        readonly pattern: "^@lucern/[^/]+/(?:adapters/)?_generated(?:/|$)";
-        readonly description: "Generated Lucern adapters are internal deployment artifacts.";
-    }, {
-        readonly id: "private_runtime_import";
-        readonly pattern: "^@lucern/[^/]+/(?:internal|private)(?:/|$)";
-        readonly description: "Internal and private package subpaths are not public SDK API.";
-    }, {
-        readonly id: "workspace_source_import";
-        readonly pattern: "^(?:packages|modules|services|lucern|apps)/(?:.+/)?src(?:/|$)";
-        readonly description: "Tenant clients must not import source files from the Lucern monorepo.";
-    }, {
-        readonly id: "root_alias_lucern_import";
-        readonly pattern: "^@/(?:lucern|packages|modules|services|apps)(?:/|$)";
-        readonly description: "Tenant clients must not depend on Lucern repo-local path aliases.";
-    }, {
-        readonly id: "relative_lucern_source_import";
-        readonly pattern: "^\\.\\.?/(?:.+/)?(?:packages|modules|services|lucern|apps)(?:/|$)";
-        readonly description: "Tenant clients must not reach back into Lucern source through relative paths.";
-    }, {
-        readonly id: "monorepo_path_import";
-        readonly pattern: "lucern-repo";
-        readonly description: "Absolute imports that name the Lucern repository are not portable tenant code.";
-    }];
-};
-
-export { type CheckContext, type CheckerKind, type EdgePolicyEntry, EdgePolicyEntrySchema, type EdgePolicyManifest, EdgePolicyManifestSchema, type EdgePolicyViolation, type EpistemicNodeType, EpistemicNodeTypeSchema, type GraphRef, GraphRefSchema, INFISICAL_RUNTIME_CONTRACT_VERSION, INFISICAL_RUNTIME_DEFAULT_API_URL, INFISICAL_RUNTIME_DEFAULT_PROJECT_ID, INFISICAL_RUNTIME_MANIFEST, InfisicalRuntimeBootstrapEnv, InfisicalRuntimeDeliveryMode, InfisicalRuntimeEnvironment, type InfisicalRuntimeManifest, InfisicalRuntimePath, InfisicalRuntimeSurface, type InvariantId, type InvariantManifest, InvariantManifestSchema, type InvariantResult, type InvariantRule, type InvariantSeverity, type ProjectionDef, type ProjectionRegistry, TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_MANIFEST, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientManifest, assertEdgePolicyAllowed, createEvidenceProjection, defineProjection, edgePolicyManifest, findEdgePolicy, listBeliefsProjection, listTasksProjection, modulateConfidenceProjection, projections };