@lucern/contracts 0.3.0-alpha.4 → 0.3.0-alpha.6

package/dist/tenant-bootstrap-seed.contract.d.ts

@@ -13,18 +13,20 @@ type TenantBootstrapSeedAuthMetadataField = (typeof TENANT_BOOTSTRAP_SEED_AUTH_M
 declare const TENANT_BOOTSTRAP_SEED_COMPONENTS: {
     readonly kernel: {
         readonly componentName: "lucern";
+        readonly migrationModule: "dist/adapters/migration";
         readonly templateService: "services/kernel-template";
         readonly templateDeployments: {
-            readonly staging: "charming-okapi-787";
-            readonly prod: "brilliant-narwhal-889";
+            readonly staging: "kindly-goldfish-162";
+            readonly prod: "cool-badger-368";
         };
     };
     readonly identity: {
         readonly componentName: "identity";
+        readonly migrationModule: "dist/migration";
         readonly templateService: "services/identity-template";
         readonly templateDeployments: {
-            readonly staging: "charming-goldfinch-895";
-            readonly prod: "helpful-mule-694";
+            readonly staging: "industrious-cheetah-864";
+            readonly prod: "combative-beagle-879";
         };
     };
 };
@@ -564,18 +566,20 @@ declare const TENANT_BOOTSTRAP_SEED_MANIFEST: {
     readonly components: {
         readonly kernel: {
             readonly componentName: "lucern";
+            readonly migrationModule: "dist/adapters/migration";
             readonly templateService: "services/kernel-template";
             readonly templateDeployments: {
-                readonly staging: "charming-okapi-787";
-                readonly prod: "brilliant-narwhal-889";
+                readonly staging: "kindly-goldfish-162";
+                readonly prod: "cool-badger-368";
             };
         };
         readonly identity: {
             readonly componentName: "identity";
+            readonly migrationModule: "dist/migration";
             readonly templateService: "services/identity-template";
             readonly templateDeployments: {
-                readonly staging: "charming-goldfinch-895";
-                readonly prod: "helpful-mule-694";
+                readonly staging: "industrious-cheetah-864";
+                readonly prod: "combative-beagle-879";
             };
         };
     };

package/dist/tenant-bootstrap-seed.contract.js

@@ -12,18 +12,20 @@ var TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [
 var TENANT_BOOTSTRAP_SEED_COMPONENTS = {
   kernel: {
     componentName: "lucern",
+    migrationModule: "dist/adapters/migration",
     templateService: "services/kernel-template",
     templateDeployments: {
-      staging: "charming-okapi-787",
-      prod: "brilliant-narwhal-889"
+      staging: "kindly-goldfish-162",
+      prod: "cool-badger-368"
     }
   },
   identity: {
     componentName: "identity",
+    migrationModule: "dist/migration",
     templateService: "services/identity-template",
     templateDeployments: {
-      staging: "charming-goldfinch-895",
-      prod: "helpful-mule-694"
+      staging: "industrious-cheetah-864",
+      prod: "combative-beagle-879"
     }
   }
 };

package/dist/tenant-bootstrap-seed.contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tenant-bootstrap-seed.contract.ts"],"names":[],"mappings":";AAUO,IAAM,sCAAA,GAAyC;AAE/C,IAAM,0CAAA,GAA6C;AAAA,EACxD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA,EAAQ;AAAA,IACN,aAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAiB,0BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,oBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,UAAA;AAAA,IACf,eAAA,EAAiB,4BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,wBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ;AA0CA,SAAS,0BACP,KAAA,EACmC;AACnC,EAAA,OAAA,CACG,KAAA,CAAM,aAAa,iBAAA,IAClB,KAAA,CAAM,aAAa,yBAAA,IACnB,KAAA,CAAM,aAAa,0BAAA,KACrB,OAAA,CAAQ,MAAM,KAAK,CAAA,IACnB,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,IAC7B,KAAA,CAAM,UAAU,MAAA,GAAS,CAAA;AAE7B;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,QAAQ,CAAA;AAAA,IACpB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAa,CAAA;AAAA,IACzB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,0BAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAA,EAAe,SAAS,CAAA;AAAA,IACpC,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,MAAM,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,OAAO,CAAA;AAAA,IAC/B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,YAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,WAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,SAAA,EAAW,MAAA,EAAQ,cAAc,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,KAAK,CAAA;AAAA,IACjB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,aAAa,CAAA;AAAA,IACpD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,gBAAgB,CAAA;AAAA,IACxC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,UAAU,CAAA;AAAA,IACjD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,0BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,UAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,IAC9B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAEO,IAAM,+BACX,mCAAA,CAAoC,MAAA;AAAA,EAClC;AACF;AAKK,IAAM,yCACX,mCAAA,CAAoC,MAAA;AAAA,EAClC,CAAC,KAAA,KAAU,CAAC,yBAAA,CAA0B,KAAK;AAC7C,CAAA,CAAE,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,KAAK;AAIvB,IAAM,8BAAA,GAAiC;AAAA,EAC5C,eAAA,EAAiB,sCAAA;AAAA,EACjB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,UAAA,EAAY,gCAAA;AAAA,EACZ,iBAAA,EAAmB,mCAAA;AAAA,EACnB,MAAA,EAAQ,4BAAA;AAAA,EACR,eAAA,EAAiB;AACnB;AAEO,SAAS,oCACd,KAAA,EAC6C;AAC7C,EAAA,OAAO,mCAAA,CAAoC,IAAA;AAAA,IACzC,CAAC,KAAA,KAAU,KAAA,CAAM,KAAA,KAAU;AAAA,GAC7B;AACF;AAEO,SAAS,6BACd,KAAA,EACsC;AACtC,EAAA,OAAO,6BAA6B,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,UAAU,KAAK,CAAA;AAC3E;AAEO,SAAS,2BAA2B,KAAA,EAAwB;AACjE,EAAA,OAAO,OAAA,CAAQ,4BAAA,CAA6B,KAAK,CAAC,CAAA;AACpD;AAEO,SAAS,oCAAoC,KAAA,EAAwB;AAC1E,EAAA,OAAO,sCAAA,CAAuC,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AAC/E","file":"tenant-bootstrap-seed.contract.js","sourcesContent":["/**\n * Tenant bootstrap seed contract.\n *\n * Fresh tenant deployments install the Lucern kernel and identity components\n * from npm, then copy canonical template rows for non-secret runtime defaults.\n * This contract is intentionally exhaustive for the K/I tables: it separates\n * rows that must be carried by the template deployments from rows that are\n * runtime data, runtime credentials, logs, queues, or derived caches.\n */\n\nexport const TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION = \"2026-04-30\" as const;\n\nexport const TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"role\",\n  \"authMode\",\n  \"correlationId\",\n  \"auditMetadata\",\n] as const;\nexport type TenantBootstrapSeedAuthMetadataField =\n  (typeof TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_COMPONENTS = {\n  kernel: {\n    componentName: \"lucern\",\n    templateService: \"services/kernel-template\",\n    templateDeployments: {\n      staging: \"charming-okapi-787\",\n      prod: \"brilliant-narwhal-889\",\n    },\n  },\n  identity: {\n    componentName: \"identity\",\n    templateService: \"services/identity-template\",\n    templateDeployments: {\n      staging: \"charming-goldfinch-895\",\n      prod: \"helpful-mule-694\",\n    },\n  },\n} as const;\nexport type TenantBootstrapSeedComponent =\n  keyof typeof TENANT_BOOTSTRAP_SEED_COMPONENTS;\n\nexport type TenantBootstrapSeedScope = \"global\" | \"tenant\";\n\nexport type TenantBootstrapPrepopulation =\n  | \"required_template\"\n  | \"optional_template\"\n  | \"runtime_bootstrap\"\n  | \"runtime_data\"\n  | \"runtime_log\"\n  | \"runtime_secret\"\n  | \"runtime_derived\"\n  | \"runtime_queue\";\n\nexport type TenantBootstrapCopyMode =\n  | \"template_global\"\n  | \"template_tenant_rewrite\"\n  | \"template_reference_remap\"\n  | \"none\";\n\nexport type TenantBootstrapTableRequirement = {\n  component: TenantBootstrapSeedComponent;\n  table: string;\n  prepopulation: TenantBootstrapPrepopulation;\n  copyMode: TenantBootstrapCopyMode;\n  scope?: TenantBootstrapSeedScope;\n  uniqueKey?: readonly string[];\n  dependsOn?: readonly string[];\n  description: string;\n};\n\nexport type TenantBootstrapSeedTable = TenantBootstrapTableRequirement & {\n  copyMode:\n    | \"template_global\"\n    | \"template_tenant_rewrite\"\n    | \"template_reference_remap\";\n  scope: TenantBootstrapSeedScope;\n  uniqueKey: readonly string[];\n};\n\nfunction isCopyableSeedRequirement(\n  entry: TenantBootstrapTableRequirement\n): entry is TenantBootstrapSeedTable {\n  return (\n    (entry.copyMode === \"template_global\" ||\n      entry.copyMode === \"template_tenant_rewrite\" ||\n      entry.copyMode === \"template_reference_remap\") &&\n    Boolean(entry.scope) &&\n    Array.isArray(entry.uniqueKey) &&\n    entry.uniqueKey.length > 0\n  );\n}\n\nexport const TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [\n  {\n    component: \"kernel\",\n    table: \"agentMessages\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination messages are session data, not template data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"agentSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination sessions are created by active clients.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"autofixJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Autofix work items are runtime queue rows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Background job executions are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobSettings\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"jobKey\"],\n    description: \"Default job enablement settings must come from the K template.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefConfidence\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief confidence rows are created with tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefHistory\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief history is append-only tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefScenarios\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Scenario rows are tenant-authored reasoning data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefVotes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision belief votes are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"calibrationScores\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Calibration scores are computed from tenant outcomes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contractEvaluations\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Contract evaluation rows are runtime computation logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contradictions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Contradictions are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"crossProjectConnections\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Cross-topic connections are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionComputedSummaries\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision summaries are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionEvents\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision events are lifecycle data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionParticipants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision participants are tenant-selected actors.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionRiskLedger\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision risk rows are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionSnapshots\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision snapshots are derived from tenant state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationContributions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation contributions are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation sessions are created by tenant workflows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Epistemic audit rows are append-only runtime audit data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicContracts\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Epistemic contracts are tenant-authored governance data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicEdges\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Edges are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodeEmbeddings\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Embeddings are derived from tenant graph nodes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Nodes are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisCache\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis cache rows are derived from tenant graph state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisResults\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis result rows are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphSuggestions\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph suggestions are derived recommendations.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessReplays\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness replay rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness run rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"idempotencyTokens\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Idempotency tokens are request-scoped runtime guards.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lenses\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Reusable lens templates may live in K templates, but workspace-specific copies are not required for core SDK boot.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lensTopicBindings\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Lens bindings attach runtime topics to runtime/workspace lenses.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"neo4jSyncQueue\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Neo4j sync queue rows are runtime work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyDefinitions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\"],\n    description: \"Platform ontology definitions power taxonomy reads and effective ontology resolution.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyVersions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_reference_remap\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\", \"version\"],\n    dependsOn: [\"ontologyDefinitions\"],\n    description: \"Ontology versions must be copied with ontologyDefinition ID remapping.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPolicyDecisions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run policy decisions are audit logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPromptResolutions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run prompt resolution rows are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent runs are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunToolCalls\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run tool calls are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformHarnessShadowAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness shadow audit rows are runtime audit records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"publicationRules\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"name\"],\n    description: \"Default publication policy rules are rewritten into each tenant.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"questionEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Question-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"researchJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Research job rows are runtime queue items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"schemaEnumConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"category\", \"value\"],\n    description: \"Runtime-extensible enum defaults required by SDK graph APIs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"stakeholderGroups\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Stakeholder groups are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"systemLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"System logs are runtime telemetry.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"tasks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Tasks are tenant-authored work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"topics\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Default topics are created by tenant provisioning, not copied from templates.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowDefinitions\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Table-driven workflow definitions can be template data after the workflow engine leaves legacy mode.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowPullRequests\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Workflow pull requests are tenant workflow data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowStages\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    dependsOn: [\"workflowDefinitions\"],\n    description:\n      \"Workflow stages can be template data after workflowDefinitions are enabled for bootstrap copying.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktreeBeliefCluster\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktree cluster rows link runtime worktrees to runtime beliefs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktrees\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktrees are tenant/runtime planning data.\",\n  },\n  {\n    component: \"identity\",\n    table: \"agents\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Service agents are provisioned per tenant or service, not copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"mcpWritePolicy\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"topicId\", \"role\", \"toolCategory\"],\n    description: \"Global write policy defaults govern service and interactive MCP writes.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelCallLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Model call logs are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelFunctionSlots\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Function-to-model slots are required by model runtime resolution.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"key\"],\n    description: \"Model catalog defaults are required by model runtime clients.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelSlotConfigs\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Slot-level defaults are required before tenant overrides exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudienceGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Audience grants are principal/group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudiences\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"audienceKey\"],\n    description: \"Default tenant audience taxonomy rows are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformPolicyDecisionLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Policy decisions are runtime audit logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"projectGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Project/topic grants are principal or group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"reasoningPermissions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Reasoning permissions are principal-specific policy rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantApiKeys\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"API keys are tenant credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\"],\n    description: \"Tenant-local config defaults are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantIntegrations\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"integrationKey\"],\n    description: \"Non-secret integration descriptors are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantModelSlotBindings\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant model slot bindings reference provider secrets and are runtime-only.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantPolicies\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"roleName\"],\n    description: \"Default tenant policy roles are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProviderSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Provider secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyGatewayUsage\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Proxy gateway usage rows are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyTokenMints\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Proxy token mints are ephemeral secret-bearing runtime rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSandboxAuditEvents\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Sandbox audit rows are runtime security logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolAcls\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"role\", \"toolName\"],\n    description: \"Default role-to-tool grants are required for SDK/MCP tool access.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"toolName\"],\n    description: \"Core tool catalog rows are required before pack or tenant tools exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"users\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Users are created from Clerk/MC principal resolution, not copied.\",\n  },\n] as const satisfies readonly TenantBootstrapTableRequirement[];\n\nexport const TENANT_BOOTSTRAP_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    isCopyableSeedRequirement\n  ) as readonly TenantBootstrapSeedTable[];\n\nexport type TenantBootstrapSeedTableName =\n  (typeof TENANT_BOOTSTRAP_SEED_TABLES)[number][\"table\"];\n\nexport const TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    (entry) => !isCopyableSeedRequirement(entry)\n  ).map((entry) => entry.table) as readonly string[];\nexport type TenantBootstrapForbiddenSeedTable =\n  (typeof TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_MANIFEST = {\n  contractVersion: TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION,\n  authMetadataFields: TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS,\n  components: TENANT_BOOTSTRAP_SEED_COMPONENTS,\n  tableRequirements: TENANT_BOOTSTRAP_TABLE_REQUIREMENTS,\n  tables: TENANT_BOOTSTRAP_SEED_TABLES,\n  forbiddenTables: TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES,\n} as const;\n\nexport function findTenantBootstrapTableRequirement(\n  table: string\n): TenantBootstrapTableRequirement | undefined {\n  return TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.find(\n    (entry) => entry.table === table\n  );\n}\n\nexport function findTenantBootstrapSeedTable(\n  table: string\n): TenantBootstrapSeedTable | undefined {\n  return TENANT_BOOTSTRAP_SEED_TABLES.find((entry) => entry.table === table);\n}\n\nexport function isTenantBootstrapSeedTable(table: string): boolean {\n  return Boolean(findTenantBootstrapSeedTable(table));\n}\n\nexport function isTenantBootstrapForbiddenSeedTable(table: string): boolean {\n  return TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES.some((entry) => entry === table);\n}\n"]}
+{"version":3,"sources":["../src/tenant-bootstrap-seed.contract.ts"],"names":[],"mappings":";AAUO,IAAM,sCAAA,GAAyC;AAE/C,IAAM,0CAAA,GAA6C;AAAA,EACxD,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAIO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA,EAAQ;AAAA,IACN,aAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAiB,yBAAA;AAAA,IACjB,eAAA,EAAiB,0BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,qBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,UAAA;AAAA,IACf,eAAA,EAAiB,gBAAA;AAAA,IACjB,eAAA,EAAiB,4BAAA;AAAA,IACjB,mBAAA,EAAqB;AAAA,MACnB,OAAA,EAAS,yBAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ;AA0CA,SAAS,0BACP,KAAA,EACmC;AACnC,EAAA,OAAA,CACG,KAAA,CAAM,aAAa,iBAAA,IAClB,KAAA,CAAM,aAAa,yBAAA,IACnB,KAAA,CAAM,aAAa,0BAAA,KACrB,OAAA,CAAQ,MAAM,KAAK,CAAA,IACnB,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,IAC7B,KAAA,CAAM,UAAU,MAAA,GAAS,CAAA;AAE7B;AAEO,IAAM,mCAAA,GAAsC;AAAA,EACjD;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,QAAQ,CAAA;AAAA,IACpB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,iBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,aAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAa,CAAA;AAAA,IACzB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,0BAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,aAAA,EAAe,SAAS,CAAA;AAAA,IACpC,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,iCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mCAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,2BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,MAAM,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,eAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,OAAO,CAAA;AAAA,IAC/B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,YAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,qBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,SAAA,EAAW,CAAC,qBAAqB,CAAA;AAAA,IACjC,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,QAAA;AAAA,IACX,KAAA,EAAO,WAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,QAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,SAAA,EAAW,MAAA,EAAQ,cAAc,CAAA;AAAA,IAC7C,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,KAAK,CAAA;AAAA,IACjB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,kBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,wBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,mBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,aAAa,CAAA;AAAA,IACpD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,4BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,sBAAA;AAAA,IACP,aAAA,EAAe,cAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,oBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,gBAAgB,CAAA;AAAA,IACxC,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,gBAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,yBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAA,EAAY,aAAA,EAAe,UAAU,CAAA;AAAA,IACjD,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,yBAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,uBAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,0BAAA;AAAA,IACP,aAAA,EAAe,aAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,eAAA;AAAA,IACP,aAAA,EAAe,gBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,UAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,IAC9B,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,cAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,iBAAA;AAAA,IACV,KAAA,EAAO,QAAA;AAAA,IACP,SAAA,EAAW,CAAC,UAAU,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,SAAA,EAAW,UAAA;AAAA,IACX,KAAA,EAAO,OAAA;AAAA,IACP,aAAA,EAAe,mBAAA;AAAA,IACf,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa;AAAA;AAEjB;AAEO,IAAM,+BACX,mCAAA,CAAoC,MAAA;AAAA,EAClC;AACF;AAKK,IAAM,yCACX,mCAAA,CAAoC,MAAA;AAAA,EAClC,CAAC,KAAA,KAAU,CAAC,yBAAA,CAA0B,KAAK;AAC7C,CAAA,CAAE,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,KAAK;AAIvB,IAAM,8BAAA,GAAiC;AAAA,EAC5C,eAAA,EAAiB,sCAAA;AAAA,EACjB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,UAAA,EAAY,gCAAA;AAAA,EACZ,iBAAA,EAAmB,mCAAA;AAAA,EACnB,MAAA,EAAQ,4BAAA;AAAA,EACR,eAAA,EAAiB;AACnB;AAEO,SAAS,oCACd,KAAA,EAC6C;AAC7C,EAAA,OAAO,mCAAA,CAAoC,IAAA;AAAA,IACzC,CAAC,KAAA,KAAU,KAAA,CAAM,KAAA,KAAU;AAAA,GAC7B;AACF;AAEO,SAAS,6BACd,KAAA,EACsC;AACtC,EAAA,OAAO,6BAA6B,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,UAAU,KAAK,CAAA;AAC3E;AAEO,SAAS,2BAA2B,KAAA,EAAwB;AACjE,EAAA,OAAO,OAAA,CAAQ,4BAAA,CAA6B,KAAK,CAAC,CAAA;AACpD;AAEO,SAAS,oCAAoC,KAAA,EAAwB;AAC1E,EAAA,OAAO,sCAAA,CAAuC,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AAC/E","file":"tenant-bootstrap-seed.contract.js","sourcesContent":["/**\n * Tenant bootstrap seed contract.\n *\n * Fresh tenant deployments install the Lucern kernel and identity components\n * from npm, then copy canonical template rows for non-secret runtime defaults.\n * This contract is intentionally exhaustive for the K/I tables: it separates\n * rows that must be carried by the template deployments from rows that are\n * runtime data, runtime credentials, logs, queues, or derived caches.\n */\n\nexport const TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION = \"2026-04-30\" as const;\n\nexport const TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS = [\n  \"tenantId\",\n  \"workspaceId\",\n  \"principalId\",\n  \"role\",\n  \"authMode\",\n  \"correlationId\",\n  \"auditMetadata\",\n] as const;\nexport type TenantBootstrapSeedAuthMetadataField =\n  (typeof TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_COMPONENTS = {\n  kernel: {\n    componentName: \"lucern\",\n    migrationModule: \"dist/adapters/migration\",\n    templateService: \"services/kernel-template\",\n    templateDeployments: {\n      staging: \"kindly-goldfish-162\",\n      prod: \"cool-badger-368\",\n    },\n  },\n  identity: {\n    componentName: \"identity\",\n    migrationModule: \"dist/migration\",\n    templateService: \"services/identity-template\",\n    templateDeployments: {\n      staging: \"industrious-cheetah-864\",\n      prod: \"combative-beagle-879\",\n    },\n  },\n} as const;\nexport type TenantBootstrapSeedComponent =\n  keyof typeof TENANT_BOOTSTRAP_SEED_COMPONENTS;\n\nexport type TenantBootstrapSeedScope = \"global\" | \"tenant\";\n\nexport type TenantBootstrapPrepopulation =\n  | \"required_template\"\n  | \"optional_template\"\n  | \"runtime_bootstrap\"\n  | \"runtime_data\"\n  | \"runtime_log\"\n  | \"runtime_secret\"\n  | \"runtime_derived\"\n  | \"runtime_queue\";\n\nexport type TenantBootstrapCopyMode =\n  | \"template_global\"\n  | \"template_tenant_rewrite\"\n  | \"template_reference_remap\"\n  | \"none\";\n\nexport type TenantBootstrapTableRequirement = {\n  component: TenantBootstrapSeedComponent;\n  table: string;\n  prepopulation: TenantBootstrapPrepopulation;\n  copyMode: TenantBootstrapCopyMode;\n  scope?: TenantBootstrapSeedScope;\n  uniqueKey?: readonly string[];\n  dependsOn?: readonly string[];\n  description: string;\n};\n\nexport type TenantBootstrapSeedTable = TenantBootstrapTableRequirement & {\n  copyMode:\n    | \"template_global\"\n    | \"template_tenant_rewrite\"\n    | \"template_reference_remap\";\n  scope: TenantBootstrapSeedScope;\n  uniqueKey: readonly string[];\n};\n\nfunction isCopyableSeedRequirement(\n  entry: TenantBootstrapTableRequirement\n): entry is TenantBootstrapSeedTable {\n  return (\n    (entry.copyMode === \"template_global\" ||\n      entry.copyMode === \"template_tenant_rewrite\" ||\n      entry.copyMode === \"template_reference_remap\") &&\n    Boolean(entry.scope) &&\n    Array.isArray(entry.uniqueKey) &&\n    entry.uniqueKey.length > 0\n  );\n}\n\nexport const TENANT_BOOTSTRAP_TABLE_REQUIREMENTS = [\n  {\n    component: \"kernel\",\n    table: \"agentMessages\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination messages are session data, not template data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"agentSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Agent coordination sessions are created by active clients.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"autofixJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Autofix work items are runtime queue rows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Background job executions are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"backgroundJobSettings\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"jobKey\"],\n    description: \"Default job enablement settings must come from the K template.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefConfidence\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief confidence rows are created with tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefHistory\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Belief history is append-only tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefScenarios\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Scenario rows are tenant-authored reasoning data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"beliefVotes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision belief votes are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"calibrationScores\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Calibration scores are computed from tenant outcomes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contractEvaluations\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Contract evaluation rows are runtime computation logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"contradictions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Contradictions are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"crossProjectConnections\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Cross-topic connections are tenant graph facts.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionComputedSummaries\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision summaries are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionEvents\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision events are lifecycle data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionParticipants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision participants are tenant-selected actors.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionRiskLedger\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Decision risk rows are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"decisionSnapshots\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Decision snapshots are derived from tenant state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationContributions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation contributions are tenant-authored data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"deliberationSessions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Deliberation sessions are created by tenant workflows.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Epistemic audit rows are append-only runtime audit data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicContracts\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Epistemic contracts are tenant-authored governance data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicEdges\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Edges are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodeEmbeddings\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Embeddings are derived from tenant graph nodes.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"epistemicNodes\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Nodes are tenant reasoning graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisCache\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis cache rows are derived from tenant graph state.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphAnalysisResults\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph analysis result rows are derived tenant outputs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"graphSuggestions\",\n    prepopulation: \"runtime_derived\",\n    copyMode: \"none\",\n    description: \"Graph suggestions are derived recommendations.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessReplays\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness replay rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"harnessRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness run rows are runtime verification logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"idempotencyTokens\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Idempotency tokens are request-scoped runtime guards.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lenses\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Reusable lens templates may live in K templates, but workspace-specific copies are not required for core SDK boot.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"lensTopicBindings\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Lens bindings attach runtime topics to runtime/workspace lenses.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"neo4jSyncQueue\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Neo4j sync queue rows are runtime work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyDefinitions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\"],\n    description: \"Platform ontology definitions power taxonomy reads and effective ontology resolution.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"ontologyVersions\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_reference_remap\",\n    scope: \"global\",\n    uniqueKey: [\"ontologyKey\", \"version\"],\n    dependsOn: [\"ontologyDefinitions\"],\n    description: \"Ontology versions must be copied with ontologyDefinition ID remapping.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPolicyDecisions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run policy decisions are audit logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunPromptResolutions\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run prompt resolution rows are runtime logs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRuns\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent runs are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformAgentRunToolCalls\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Agent-run tool calls are runtime execution records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"platformHarnessShadowAudit\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Harness shadow audit rows are runtime audit records.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"publicationRules\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"name\"],\n    description: \"Default publication policy rules are rewritten into each tenant.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"questionEvidenceLinks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Question-to-evidence links are tenant graph data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"researchJobs\",\n    prepopulation: \"runtime_queue\",\n    copyMode: \"none\",\n    description: \"Research job rows are runtime queue items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"schemaEnumConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"category\", \"value\"],\n    description: \"Runtime-extensible enum defaults required by SDK graph APIs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"stakeholderGroups\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Stakeholder groups are tenant decision data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"systemLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"System logs are runtime telemetry.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"tasks\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Tasks are tenant-authored work items.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"topics\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Default topics are created by tenant provisioning, not copied from templates.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowDefinitions\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    description:\n      \"Table-driven workflow definitions can be template data after the workflow engine leaves legacy mode.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowPullRequests\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Workflow pull requests are tenant workflow data.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"workflowStages\",\n    prepopulation: \"optional_template\",\n    copyMode: \"none\",\n    dependsOn: [\"workflowDefinitions\"],\n    description:\n      \"Workflow stages can be template data after workflowDefinitions are enabled for bootstrap copying.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktreeBeliefCluster\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktree cluster rows link runtime worktrees to runtime beliefs.\",\n  },\n  {\n    component: \"kernel\",\n    table: \"worktrees\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Worktrees are tenant/runtime planning data.\",\n  },\n  {\n    component: \"identity\",\n    table: \"agents\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Service agents are provisioned per tenant or service, not copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"mcpWritePolicy\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"topicId\", \"role\", \"toolCategory\"],\n    description: \"Global write policy defaults govern service and interactive MCP writes.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelCallLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Model call logs are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelFunctionSlots\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Function-to-model slots are required by model runtime resolution.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"key\"],\n    description: \"Model catalog defaults are required by model runtime clients.\",\n  },\n  {\n    component: \"identity\",\n    table: \"modelSlotConfigs\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"slot\"],\n    description: \"Slot-level defaults are required before tenant overrides exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudienceGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Audience grants are principal/group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformAudiences\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"audienceKey\"],\n    description: \"Default tenant audience taxonomy rows are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"platformPolicyDecisionLogs\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Policy decisions are runtime audit logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"projectGrants\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Project/topic grants are principal or group-specific access rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"reasoningPermissions\",\n    prepopulation: \"runtime_data\",\n    copyMode: \"none\",\n    description: \"Reasoning permissions are principal-specific policy rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantApiKeys\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"API keys are tenant credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantConfig\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\"],\n    description: \"Tenant-local config defaults are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantIntegrations\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"integrationKey\"],\n    description: \"Non-secret integration descriptors are rewritten into each tenant.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantModelSlotBindings\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant model slot bindings reference provider secrets and are runtime-only.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantPolicies\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_tenant_rewrite\",\n    scope: \"tenant\",\n    uniqueKey: [\"tenantId\", \"workspaceId\", \"roleName\"],\n    description: \"Default tenant policy roles are rewritten during bootstrap.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProviderSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Provider secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyGatewayUsage\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Proxy gateway usage rows are runtime telemetry.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantProxyTokenMints\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Proxy token mints are ephemeral secret-bearing runtime rows.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSandboxAuditEvents\",\n    prepopulation: \"runtime_log\",\n    copyMode: \"none\",\n    description: \"Sandbox audit rows are runtime security logs.\",\n  },\n  {\n    component: \"identity\",\n    table: \"tenantSecrets\",\n    prepopulation: \"runtime_secret\",\n    copyMode: \"none\",\n    description: \"Tenant secrets are credentials and must never be copied.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolAcls\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"role\", \"toolName\"],\n    description: \"Default role-to-tool grants are required for SDK/MCP tool access.\",\n  },\n  {\n    component: \"identity\",\n    table: \"toolRegistry\",\n    prepopulation: \"required_template\",\n    copyMode: \"template_global\",\n    scope: \"global\",\n    uniqueKey: [\"toolName\"],\n    description: \"Core tool catalog rows are required before pack or tenant tools exist.\",\n  },\n  {\n    component: \"identity\",\n    table: \"users\",\n    prepopulation: \"runtime_bootstrap\",\n    copyMode: \"none\",\n    description: \"Users are created from Clerk/MC principal resolution, not copied.\",\n  },\n] as const satisfies readonly TenantBootstrapTableRequirement[];\n\nexport const TENANT_BOOTSTRAP_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    isCopyableSeedRequirement\n  ) as readonly TenantBootstrapSeedTable[];\n\nexport type TenantBootstrapSeedTableName =\n  (typeof TENANT_BOOTSTRAP_SEED_TABLES)[number][\"table\"];\n\nexport const TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES =\n  TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.filter(\n    (entry) => !isCopyableSeedRequirement(entry)\n  ).map((entry) => entry.table) as readonly string[];\nexport type TenantBootstrapForbiddenSeedTable =\n  (typeof TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES)[number];\n\nexport const TENANT_BOOTSTRAP_SEED_MANIFEST = {\n  contractVersion: TENANT_BOOTSTRAP_SEED_CONTRACT_VERSION,\n  authMetadataFields: TENANT_BOOTSTRAP_SEED_AUTH_METADATA_FIELDS,\n  components: TENANT_BOOTSTRAP_SEED_COMPONENTS,\n  tableRequirements: TENANT_BOOTSTRAP_TABLE_REQUIREMENTS,\n  tables: TENANT_BOOTSTRAP_SEED_TABLES,\n  forbiddenTables: TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES,\n} as const;\n\nexport function findTenantBootstrapTableRequirement(\n  table: string\n): TenantBootstrapTableRequirement | undefined {\n  return TENANT_BOOTSTRAP_TABLE_REQUIREMENTS.find(\n    (entry) => entry.table === table\n  );\n}\n\nexport function findTenantBootstrapSeedTable(\n  table: string\n): TenantBootstrapSeedTable | undefined {\n  return TENANT_BOOTSTRAP_SEED_TABLES.find((entry) => entry.table === table);\n}\n\nexport function isTenantBootstrapSeedTable(table: string): boolean {\n  return Boolean(findTenantBootstrapSeedTable(table));\n}\n\nexport function isTenantBootstrapForbiddenSeedTable(table: string): boolean {\n  return TENANT_BOOTSTRAP_FORBIDDEN_SEED_TABLES.some((entry) => entry === table);\n}\n"]}

package/dist/tenant-client.contract.d.ts

@@ -23,8 +23,8 @@ type TenantClientForbiddenInstallTokenInfisicalPath = (typeof TENANT_CLIENT_FORB
 type TenantClientForbiddenSecretEnv = (typeof TENANT_CLIENT_FORBIDDEN_SECRET_ENV)[number];
 declare const TENANT_CLIENT_INSTALLABLE_PACKAGES: readonly [{
     readonly packageName: "@lucern/access-control";
-    readonly role: "sdk_dependency";
-    readonly directTenantImport: false;
+    readonly role: "runtime_entrypoint";
+    readonly directTenantImport: true;
 }, {
     readonly packageName: "@lucern/agent";
     readonly role: "platform_runtime";
@@ -117,6 +117,60 @@ declare const TENANT_CLIENT_INSTALLABLE_PACKAGES: readonly [{
 type TenantClientInstallablePackage = (typeof TENANT_CLIENT_INSTALLABLE_PACKAGES)[number];
 type TenantClientPackageRole = TenantClientInstallablePackage["role"];
 type TenantClientInstallablePackageName = TenantClientInstallablePackage["packageName"];
+/**
+ * Direct package installs are package.json entries owned by the tenant repo.
+ * Direct imports are source-code imports that tenant application code may use.
+ *
+ * These concepts intentionally differ: `@lucern/cli` is a direct install when a
+ * tenant repo needs the `lucern` binary, but it is not a direct application
+ * import. `@lucern/reasoning-kernel` and `@lucern/identity` are direct installs
+ * for Convex component binding, while tenant app code should only import their
+ * explicit component config subpaths.
+ */
+type TenantClientInstallProfile = {
+    id: string;
+    description: string;
+    packageNames: readonly TenantClientInstallablePackageName[];
+    dependencyField: "dependencies" | "devDependencies" | "mixed";
+};
+declare const TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES: readonly TenantClientInstallablePackageName[];
+declare const TENANT_CLIENT_INSTALL_PROFILES: readonly [{
+    readonly id: "core_app_runtime";
+    readonly description: "Smallest tenant app/runtime install for typed Lucern API calls plus tool-access policy helpers.";
+    readonly packageNames: readonly ["@lucern/sdk", "@lucern/access-control"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "react_app_runtime";
+    readonly description: "React tenant app install for hooks, provider, curated graph components, and direct SDK calls.";
+    readonly packageNames: readonly ["@lucern/react", "@lucern/sdk", "@lucern/access-control"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "convex_components";
+    readonly description: "Tenant Convex host install for binding the Lucern identity and reasoning-kernel components.";
+    readonly packageNames: readonly ["@lucern/identity", "@lucern/reasoning-kernel"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "operator_cli";
+    readonly description: "Developer/operator install for the `lucern` binary, including tenant bootstrap seed commands.";
+    readonly packageNames: readonly ["@lucern/cli"];
+    readonly dependencyField: "devDependencies";
+}, {
+    readonly id: "mcp_runtime";
+    readonly description: "Agent runtime install for the standalone Lucern MCP server and hosted route helpers.";
+    readonly packageNames: readonly ["@lucern/mcp"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "contracts_and_types";
+    readonly description: "Compile-time contract/type install for codegen, audits, and tenant integration validation.";
+    readonly packageNames: readonly ["@lucern/contracts", "@lucern/types"];
+    readonly dependencyField: "dependencies";
+}, {
+    readonly id: "full_suite";
+    readonly description: "Full coherent Lucern package suite for design-partner repos that want every published runtime, tool, component, test, and config package pinned together.";
+    readonly packageNames: readonly ("@lucern/access-control" | "@lucern/agent" | "@lucern/auth" | "@lucern/cli" | "@lucern/client-core" | "@lucern/confidence" | "@lucern/config" | "@lucern/contracts" | "@lucern/control-plane" | "@lucern/developer-kit" | "@lucern/events" | "@lucern/graph-primitives" | "@lucern/identity" | "@lucern/mcp" | "@lucern/pack-host" | "@lucern/pack-installer" | "@lucern/proof-compiler" | "@lucern/react" | "@lucern/reasoning-kernel" | "@lucern/sdk" | "@lucern/server-core" | "@lucern/testing" | "@lucern/types")[];
+    readonly dependencyField: "mixed";
+}];
+type TenantClientInstallProfileId = (typeof TENANT_CLIENT_INSTALL_PROFILES)[number]["id"];
 /**
  * Direct imports tenant-owned product code may use. This is intentionally
  * smaller than TENANT_CLIENT_INSTALLABLE_PACKAGES: several publishable packages
@@ -143,6 +197,11 @@ declare const TENANT_CLIENT_PUBLIC_IMPORTS: readonly [{
     readonly surface: "contract";
     readonly subpaths: "published_exports";
     readonly description: "Published type and manifest contracts.";
+}, {
+    readonly packageName: "@lucern/access-control";
+    readonly surface: "runtime";
+    readonly subpaths: "published_exports";
+    readonly description: "Tenant runtime access-control helpers, including effective tool access.";
 }, {
     readonly packageName: "@lucern/types";
     readonly surface: "contract";
@@ -172,7 +231,7 @@ type TenantClientComponentConfigImport = (typeof TENANT_CLIENT_COMPONENT_CONFIG_
 type TenantClientAllowedImport = TenantClientPublicImport | TenantClientComponentConfigImport;
 declare function findTenantClientInstallablePackage(packageName: string): TenantClientInstallablePackage | undefined;
 declare function isTenantClientInstallablePackage(packageName: string): boolean;
-declare const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
+declare const TENANT_CLIENT_REQUIRED_SDK_NAMESPACES: readonly ["bootstrap", "context", "beliefs", "evidence", "questions", "graph", "worktrees", "topics", "edges", "contradictions", "contracts", "graphIntel", "graphIntelligence", "graphAnalysis", "graphRecommendations", "orgGraphSearch", "embeddings", "ontologyLinks", "graphStateClassifier", "tools", "identity", "modelRuntime", "events", "jobs", "telemetry"];
 type TenantClientRequiredSdkNamespace = (typeof TENANT_CLIENT_REQUIRED_SDK_NAMESPACES)[number];
 declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly id: "identity.bootstrap_session";
@@ -186,7 +245,7 @@ declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
     readonly id: "reasoning.graph.read";
-    readonly description: "Read beliefs, evidence, questions, topics, and lineage.";
+    readonly description: "Read beliefs, evidence, questions, topics, graph edges, and lineage.";
     readonly surfaces: readonly ["@lucern/sdk", "@lucern/react", "@lucern/mcp"];
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
@@ -194,6 +253,11 @@ declare const TENANT_CLIENT_CAPABILITIES: readonly [{
     readonly description: "Create and update graph objects through authorized APIs.";
     readonly surfaces: readonly ["@lucern/sdk", "@lucern/mcp"];
     readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
+}, {
+    readonly id: "reasoning.graph_intelligence.run";
+    readonly description: "Discover and run Graph Intelligence query recipes for structural graph analysis.";
+    readonly surfaces: readonly ["@lucern/sdk", "@lucern/cli", "@lucern/mcp"];
+    readonly requiredContextFields: readonly ["tenantId", "workspaceId", "principalId", "authMode", "scopes"];
 }, {
     readonly id: "workflow.worktree_lifecycle";
     readonly description: "Create, review, merge, and close scoped worktrees.";
@@ -263,4 +327,4 @@ declare function isTenantClientAllowedImport(importPath: string): boolean;
 declare function assertTenantClientImportAllowed(importPath: string): void;
 declare function formatTenantClientImportViolation(classification: TenantClientImportClassification): string;
 
-export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientAllowedImport, type TenantClientAuthMode, type TenantClientCapability, type TenantClientCapabilityId, type TenantClientComponentConfigImport, type TenantClientForbiddenImportPattern, type TenantClientForbiddenImportPatternId, type TenantClientForbiddenInstallTokenInfisicalPath, type TenantClientForbiddenSecretEnv, type TenantClientImportClassification, type TenantClientImportDecision, type TenantClientInstallablePackage, type TenantClientInstallablePackageName, type TenantClientIsolationRule, type TenantClientOptionalContextField, type TenantClientPackageRole, type TenantClientPrincipalType, type TenantClientPublicImport, type TenantClientPublicPackage, type TenantClientPublicSurface, type TenantClientRequiredContextField, type TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
+export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_PROFILES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, type TenantClientAllowedImport, type TenantClientAuthMode, type TenantClientCapability, type TenantClientCapabilityId, type TenantClientComponentConfigImport, type TenantClientForbiddenImportPattern, type TenantClientForbiddenImportPatternId, type TenantClientForbiddenInstallTokenInfisicalPath, type TenantClientForbiddenSecretEnv, type TenantClientImportClassification, type TenantClientImportDecision, type TenantClientInstallProfile, type TenantClientInstallProfileId, type TenantClientInstallablePackage, type TenantClientInstallablePackageName, type TenantClientIsolationRule, type TenantClientOptionalContextField, type TenantClientPackageRole, type TenantClientPrincipalType, type TenantClientPublicImport, type TenantClientPublicPackage, type TenantClientPublicSurface, type TenantClientRequiredContextField, type TenantClientRequiredSdkNamespace, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };

package/dist/tenant-client.contract.js

@@ -33,8 +33,8 @@ var TENANT_CLIENT_FORBIDDEN_SECRET_ENV = ["NPM_TOKEN"];
 var TENANT_CLIENT_INSTALLABLE_PACKAGES = [
   {
     packageName: "@lucern/access-control",
-    role: "sdk_dependency",
-    directTenantImport: false
+    role: "runtime_entrypoint",
+    directTenantImport: true
   },
   {
     packageName: "@lucern/agent",
@@ -147,6 +147,53 @@ var TENANT_CLIENT_INSTALLABLE_PACKAGES = [
     directTenantImport: true
   }
 ];
+var TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES = TENANT_CLIENT_INSTALLABLE_PACKAGES.map(
+  (entry) => entry.packageName
+);
+var TENANT_CLIENT_INSTALL_PROFILES = [
+  {
+    id: "core_app_runtime",
+    description: "Smallest tenant app/runtime install for typed Lucern API calls plus tool-access policy helpers.",
+    packageNames: ["@lucern/sdk", "@lucern/access-control"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "react_app_runtime",
+    description: "React tenant app install for hooks, provider, curated graph components, and direct SDK calls.",
+    packageNames: ["@lucern/react", "@lucern/sdk", "@lucern/access-control"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "convex_components",
+    description: "Tenant Convex host install for binding the Lucern identity and reasoning-kernel components.",
+    packageNames: ["@lucern/identity", "@lucern/reasoning-kernel"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "operator_cli",
+    description: "Developer/operator install for the `lucern` binary, including tenant bootstrap seed commands.",
+    packageNames: ["@lucern/cli"],
+    dependencyField: "devDependencies"
+  },
+  {
+    id: "mcp_runtime",
+    description: "Agent runtime install for the standalone Lucern MCP server and hosted route helpers.",
+    packageNames: ["@lucern/mcp"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "contracts_and_types",
+    description: "Compile-time contract/type install for codegen, audits, and tenant integration validation.",
+    packageNames: ["@lucern/contracts", "@lucern/types"],
+    dependencyField: "dependencies"
+  },
+  {
+    id: "full_suite",
+    description: "Full coherent Lucern package suite for design-partner repos that want every published runtime, tool, component, test, and config package pinned together.",
+    packageNames: TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES,
+    dependencyField: "mixed"
+  }
+];
 var TENANT_CLIENT_PUBLIC_IMPORTS = [
   {
     packageName: "@lucern/sdk",
@@ -172,6 +219,12 @@ var TENANT_CLIENT_PUBLIC_IMPORTS = [
     subpaths: "published_exports",
     description: "Published type and manifest contracts."
   },
+  {
+    packageName: "@lucern/access-control",
+    surface: "runtime",
+    subpaths: "published_exports",
+    description: "Tenant runtime access-control helpers, including effective tool access."
+  },
   {
     packageName: "@lucern/types",
     surface: "contract",
@@ -219,6 +272,8 @@ var TENANT_CLIENT_REQUIRED_SDK_NAMESPACES = [
   "edges",
   "contradictions",
   "contracts",
+  "graphIntel",
+  "graphIntelligence",
   "graphAnalysis",
   "graphRecommendations",
   "orgGraphSearch",
@@ -247,7 +302,7 @@ var TENANT_CLIENT_CAPABILITIES = [
   },
   {
     id: "reasoning.graph.read",
-    description: "Read beliefs, evidence, questions, topics, and lineage.",
+    description: "Read beliefs, evidence, questions, topics, graph edges, and lineage.",
     surfaces: ["@lucern/sdk", "@lucern/react", "@lucern/mcp"],
     requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
   },
@@ -257,6 +312,12 @@ var TENANT_CLIENT_CAPABILITIES = [
     surfaces: ["@lucern/sdk", "@lucern/mcp"],
     requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
   },
+  {
+    id: "reasoning.graph_intelligence.run",
+    description: "Discover and run Graph Intelligence query recipes for structural graph analysis.",
+    surfaces: ["@lucern/sdk", "@lucern/cli", "@lucern/mcp"],
+    requiredContextFields: TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS
+  },
   {
     id: "workflow.worktree_lifecycle",
     description: "Create, review, merge, and close scoped worktrees.",
@@ -399,6 +460,6 @@ function formatTenantClientImportViolation(classification) {
   return `Tenant client import is not allowed${patternId}: ${classification.importPath}. ${classification.reason}`;
 }
 
-export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
+export { TENANT_CLIENT_AUTH_MODES, TENANT_CLIENT_CAPABILITIES, TENANT_CLIENT_COMPONENT_CONFIG_IMPORTS, TENANT_CLIENT_CONTRACT_VERSION, TENANT_CLIENT_FORBIDDEN_IMPORT_PATTERNS, TENANT_CLIENT_FORBIDDEN_INSTALL_TOKEN_INFISICAL_PATHS, TENANT_CLIENT_FORBIDDEN_SECRET_ENV, TENANT_CLIENT_FULL_SUITE_PACKAGE_NAMES, TENANT_CLIENT_INSTALLABLE_PACKAGES, TENANT_CLIENT_INSTALL_PROFILES, TENANT_CLIENT_INSTALL_TOKEN_ENV, TENANT_CLIENT_INSTALL_TOKEN_INFISICAL_PATH, TENANT_CLIENT_ISOLATION_RULES, TENANT_CLIENT_OPTIONAL_CONTEXT_FIELDS, TENANT_CLIENT_PRINCIPAL_TYPES, TENANT_CLIENT_PUBLIC_IMPORTS, TENANT_CLIENT_REQUIRED_CONTEXT_FIELDS, TENANT_CLIENT_REQUIRED_SDK_NAMESPACES, assertTenantClientImportAllowed, classifyTenantClientImport, findTenantClientInstallablePackage, formatTenantClientImportViolation, isTenantClientAllowedImport, isTenantClientComponentConfigImport, isTenantClientInstallablePackage, isTenantClientPublicImport };
 //# sourceMappingURL=tenant-client.contract.js.map
 //# sourceMappingURL=tenant-client.contract.js.map