@lucern/contracts 1.0.0 → 1.0.1

package/dist/infisical-runtime.platform-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infisical-runtime.platform-secrets.ts"],"names":[],"mappings":";AAEO,IAAM,2BAAA,GAA8B;AAAA,EACzC;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,mCAAA;AAAA,IACf,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,IACjC,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,gBAAA,EAAkB,YAAY,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,uBAAA;AAAA,IACJ,aAAA,EAAe,kBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,gBAAA,EAAkB,YAAY,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,wBAAA;AAAA,IACJ,aAAA,EAAe,kBAAA;AAAA,IACf,OAAA,EAAS,CAAC,yBAAyB,CAAA;AAAA,IACnC,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,WAAW,CAAA;AAAA,IACzC,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,6BAAA;AAAA,IACf,OAAA,EAAS,CAAC,sBAAA,EAAwB,8BAA8B,CAAA;AAAA,IAChE,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,qBAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS,CAAC,yBAAyB,CAAA;AAAA,IACnC,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,gBAAgB,CAAA;AAAA,IAC1C,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,YAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS,CAAC,qBAAA,EAAuB,iBAAiB,CAAA;AAAA,IAClD,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,gBAAA,EAAkB,cAAc,YAAY,CAAA;AAAA,IACtE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,iCAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,OAAA,EAAS,CAAC,sBAAA,EAAwB,qBAAqB,CAAA;AAAA,IACvD,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,YAAA,EAAc,YAAY,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,oBAAA;AAAA,IACf,OAAA,EAAS,CAAC,YAAY,CAAA;AAAA,IACtB,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,gBAAA,EAAkB,cAAc,YAAY,CAAA;AAAA,IACtE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,mDAAA;AAAA,IACJ,aAAA,EAAe,yCAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,wBAAA;AAAA,IACJ,aAAA,EAAe,eAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,oBAAA;AAAA,MACA,yBAAA;AAAA,MACA,mBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,IACrE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,sBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,2BAAA;AAAA,MACA,yBAAA;AAAA,MACA,mBAAA;AAAA,MACA,eAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,IACrE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,kCAAA;AAAA,IACJ,aAAA,EAAe,6BAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,WAAA,EAAa,gBAAgB,CAAA;AAAA,IACvD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,0CAAA;AAAA,IACJ,aAAA,EAAe,qCAAA;AAAA,IACf,OAAA,EAAS,CAAC,6BAA6B,CAAA;AAAA,IACvC,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,WAAA,EAAa,qBAAqB,CAAA;AAAA,IAC9C,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,2BAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,OAAA,EAAS,CAAC,gBAAgB,CAAA;AAAA,IAC1B,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,WAAA,EAAa,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACvD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,gCAAA;AAAA,IACJ,aAAA,EAAe,8BAAA;AAAA,IACf,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,IACjC,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,WAAA,EAAa,gBAAA,EAAkB,qBAAqB,CAAA;AAAA,IAChE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,2BAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,OAAA,EAAS,CAAC,gBAAgB,CAAA;AAAA,IAC1B,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,WAAA,EAAa,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACvD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,OAAA,EAAS,CAAC,gBAAgB,CAAA;AAAA,IAC1B,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,WAAA,EAAa,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACvD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2CAAA;AAAA,IACJ,aAAA,EAAe,+BAAA;AAAA,IACf,OAAA,EAAS,CAAC,wBAAwB,CAAA;AAAA,IAClC,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+CAAA;AAAA,IACJ,aAAA,EAAe,mCAAA;AAAA,IACf,OAAA,EAAS,CAAC,4BAA4B,CAAA;AAAA,IACtC,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,WAAA;AAAA,IACf,OAAA,EAAS,CAAC,iBAAiB,CAAA;AAAA,IAC3B,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA;AAEN;AAEO,IAAM,8BAAA,GAAiC;AAAA,EAC5C;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,IACjD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,mBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,IACjD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS,CAAC,mBAAA,EAAqB,8BAA8B,CAAA;AAAA,IAC7D,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,cAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,IACjD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA;AAEN;AAEO,IAAM,oCAAA,GAAuC;AAAA,EAClD;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,qBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kCAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,sBAAA,EAAwB,gBAAgB,CAAA;AAAA,IACzE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,qBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kCAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,sBAAA,EAAwB,gBAAgB,CAAA;AAAA,IACzE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,mBAAA;AAAA,IACf,OAAA,EAAS,CAAC,kBAAA,EAAoB,eAAe,CAAA;AAAA,IAC7C,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,kCAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,sBAAA,EAAwB,gBAAgB,CAAA;AAAA,IACzE,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA;AAEN","file":"infisical-runtime.platform-secrets.js","sourcesContent":["import type { InfisicalSecretDefinition } from \"./infisical-runtime.base\";\n\nexport const PLATFORM_SECRET_DEFINITIONS = [\n  {\n    id: \"platform.clerk.publishable\",\n    canonicalName: \"NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY\",\n    aliases: [\"CLERK_PUBLISHABLE_KEY\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/auth\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: false,\n    public: true,\n    consumers: [\"lucern-web\", \"lucern-gateway\", \"lucern-mcp\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Clerk browser key for platform web, gateway, and hosted MCP OAuth flows.\",\n  },\n  {\n    id: \"platform.clerk.secret\",\n    canonicalName: \"CLERK_SECRET_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/auth\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-web\", \"lucern-gateway\", \"lucern-mcp\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Clerk backend secret. Never route to tenant-owned apps unless that tenant is Lucern itself.\",\n  },\n  {\n    id: \"platform.clerk.project\",\n    canonicalName: \"CLERK_PROJECT_ID\",\n    aliases: [\"LUCERN_CLERK_PROJECT_ID\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/auth\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\", \"mc-convex\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Canonical Lucern Clerk project identifier used when MC resolves Clerk identities.\",\n  },\n  {\n    id: \"platform.clerk.webhook-secret\",\n    canonicalName: \"LUCERN_CLERK_WEBHOOK_SECRET\",\n    aliases: [\"CLERK_WEBHOOK_SECRET\", \"CLERK_WEBHOOK_SIGNING_SECRET\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/auth\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Clerk/Svix webhook signing secret used by the gateway to verify Clerk identity and organization events before projecting them into Permit.\",\n  },\n  {\n    id: \"platform.clerk.jwks\",\n    canonicalName: \"CLERK_JWKS_URL\",\n    aliases: [\"CLERK_JWT_ISSUER_DOMAIN\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/auth\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-mcp\", \"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-mcp\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Optional Clerk JWKS/issuer override for server-side token verification.\",\n  },\n  {\n    id: \"platform.runtime.api-base-url\",\n    canonicalName: \"LUCERN_API_URL\",\n    aliases: [\"LUCERN_API_BASE_URL\", \"LUCERN_BASE_URL\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-web\", \"lucern-gateway\", \"lucern-mcp\", \"lucern-cli\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Canonical Lucern API gateway base URL. Older names remain aliases only.\",\n  },\n  {\n    id: \"platform.runtime.login-base-url\",\n    canonicalName: \"LUCERN_LOGIN_BASE_URL\",\n    aliases: [\"LUCERN_AUTH_BASE_URL\", \"LUCERN_WEB_BASE_URL\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\", \"lucern-mcp\", \"lucern-cli\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Browser login origin used when device/OAuth login is not served by the API base URL.\",\n  },\n  {\n    id: \"platform.runtime.environment\",\n    canonicalName: \"LUCERN_ENVIRONMENT\",\n    aliases: [\"LUCERN_ENV\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-web\", \"lucern-gateway\", \"lucern-mcp\", \"lucern-cli\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Lucern runtime environment label.\",\n  },\n  {\n    id: \"platform.runtime.require-deployment-host-registry\",\n    canonicalName: \"LUCERN_REQUIRE_DEPLOYMENT_HOST_REGISTRY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Fail-closed gateway toggle that requires MC deployment host registry resolution before routing.\",\n  },\n  {\n    id: \"platform.mc.convex-url\",\n    canonicalName: \"CONVEX_MC_URL\",\n    aliases: [\n      \"CONVEX_MC_PROD_URL\",\n      \"LUCERN_ADMIN_CONVEX_URL\",\n      \"LUCERN_CONVEX_URL\",\n      \"MC_CONVEX_URL\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/mc\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\", \"mc-operator-tooling\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Master Control Convex URL. Prod must point to successful-clam-833; dev/staging to utmost-ox-403.\",\n  },\n  {\n    id: \"platform.mc.convex-deploy-key\",\n    canonicalName: \"CONVEX_MC_DEPLOY_KEY\",\n    aliases: [\n      \"CONVEX_MC_PROD_DEPLOY_KEY\",\n      \"LUCERN_ADMIN_DEPLOY_KEY\",\n      \"LUCERN_DEPLOY_KEY\",\n      \"MC_DEPLOY_KEY\",\n      \"MC_PROD_DEPLOY_KEY\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/mc\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-gateway\", \"mc-operator-tooling\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Master Control deploy/admin key. Never route to tenant Vercel projects or tenant Convex deployments.\",\n  },\n  {\n    id: \"platform.mc.session-token-secret\",\n    canonicalName: \"LUCERN_SESSION_TOKEN_SECRET\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/mc\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-mcp\", \"mc-convex\", \"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Signs Lucern platform session/delegation tokens. This is platform-owned, not tenant-owned.\",\n  },\n  {\n    id: \"platform.mc.tenant-secret-encryption-key\",\n    canonicalName: \"LUCERN_TENANT_SECRET_ENCRYPTION_KEY\",\n    aliases: [\"LUCERN_SESSION_TOKEN_SECRET\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/mc\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"mc-convex\", \"mc-operator-tooling\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"mc-credential-maintenance\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Encrypts tenant deployment credentials stored in MC. Session-token fallback is legacy only.\",\n  },\n  {\n    id: \"platform.permit.api-key\",\n    canonicalName: \"LUCERN_PERMIT_API_KEY\",\n    aliases: [\"PERMIT_API_KEY\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/permit\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"mc-convex\", \"lucern-mcp\", \"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Permit.io API key used for MC sync and policy checks. Must fail closed if missing.\",\n  },\n  {\n    id: \"platform.permit.webhook-secret\",\n    canonicalName: \"LUCERN_PERMIT_WEBHOOK_SECRET\",\n    aliases: [\"PERMIT_WEBHOOK_SECRET\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/permit\",\n    environmentPolicy: \"environment_specific\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"mc-convex\", \"lucern-gateway\", \"mc-operator-tooling\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"mc-credential-maintenance\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Permit.io webhook secret used by gateway and MC webhook handlers. Must fail closed if missing.\",\n  },\n  {\n    id: \"platform.permit.pdp-url\",\n    canonicalName: \"LUCERN_PERMIT_PDP_URL\",\n    aliases: [\"PERMIT_PDP_URL\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/permit\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"mc-convex\", \"lucern-mcp\", \"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Optional Permit PDP URL override.\",\n  },\n  {\n    id: \"platform.permit.api-url\",\n    canonicalName: \"LUCERN_PERMIT_API_URL\",\n    aliases: [\"PERMIT_API_URL\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/permit\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"mc-convex\", \"lucern-mcp\", \"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"convex\",\n        target: \"master-control\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"runtime_fetch\",\n        target: \"hosted-mcp-oauth\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Optional Permit API URL override.\",\n  },\n  {\n    id: \"platform.ci.infisical-bootstrap-client-id\",\n    canonicalName: \"INFISICAL_BOOTSTRAP_CLIENT_ID\",\n    aliases: [\"INFISICAL_CI_CLIENT_ID\"],\n    owner: \"provider\",\n    scope: \"environment\",\n    sourcePath: \"/platform/ci\",\n    environmentPolicy: \"same_all_environments\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Machine identity client id used by CI to reconcile Infisical desired state.\",\n  },\n  {\n    id: \"platform.ci.infisical-bootstrap-client-secret\",\n    canonicalName: \"INFISICAL_BOOTSTRAP_CLIENT_SECRET\",\n    aliases: [\"INFISICAL_CI_CLIENT_SECRET\"],\n    owner: \"provider\",\n    scope: \"environment\",\n    sourcePath: \"/platform/ci\",\n    environmentPolicy: \"same_all_environments\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Machine identity client secret used by CI to reconcile Infisical desired state.\",\n  },\n  {\n    id: \"platform.publish.npm-token\",\n    canonicalName: \"NPM_TOKEN\",\n    aliases: [\"NODE_AUTH_TOKEN\"],\n    owner: \"provider\",\n    scope: \"environment\",\n    sourcePath: \"/platform/publish\",\n    environmentPolicy: \"same_all_environments\",\n    required: true,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Package publish/install token for @lucern/* release automation.\",\n  },\n] as const satisfies readonly InfisicalSecretDefinition[];\n\nexport const PLATFORM_AI_SECRET_DEFINITIONS = [\n  {\n    id: \"platform.ai.openai-api-key\",\n    canonicalName: \"OPENAI_API_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/ai\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned OpenAI key for platform AI jobs, benchmarks, and controlled operator automation.\",\n  },\n  {\n    id: \"platform.ai.anthropic-api-key\",\n    canonicalName: \"ANTHROPIC_API_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/ai\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Anthropic key for platform AI jobs, benchmarks, and controlled operator automation.\",\n  },\n  {\n    id: \"platform.ai.gemini-api-key\",\n    canonicalName: \"GEMINI_API_KEY\",\n    aliases: [\"GOOGLE_AI_API_KEY\", \"GOOGLE_GENERATIVE_AI_API_KEY\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/ai\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Google/Gemini key. Google alias names are read compatibility only.\",\n  },\n] as const satisfies readonly InfisicalSecretDefinition[];\n\nexport const PLATFORM_LANGFUSE_SECRET_DEFINITIONS = [\n  {\n    id: \"platform.langfuse.secret-key\",\n    canonicalName: \"LANGFUSE_SECRET_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/observability/langfuse\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-observability\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Langfuse secret key for prompt sync, prompt reads, and AI tracing.\",\n  },\n  {\n    id: \"platform.langfuse.public-key\",\n    canonicalName: \"LANGFUSE_PUBLIC_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/observability/langfuse\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-observability\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned Langfuse public key paired with LANGFUSE_SECRET_KEY.\",\n  },\n  {\n    id: \"platform.langfuse.base-url\",\n    canonicalName: \"LANGFUSE_BASE_URL\",\n    aliases: [\"LANGFUSE_BASEURL\", \"LANGFUSE_HOST\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/observability/langfuse\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-ai-runtime\", \"lucern-observability\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-ai-runtime\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Canonical Langfuse API origin. BASEURL/HOST are compatibility aliases.\",\n  },\n] as const satisfies readonly InfisicalSecretDefinition[];\n"]}

package/dist/infisical-runtime.tenant-secrets.d.ts

@@ -0,0 +1,486 @@
+import { InfisicalSecretDefinition } from './infisical-runtime.base.js';
+
+declare const TENANT_SHARED_SECRET_DEFINITION_TEMPLATES: readonly [{
+    readonly idSuffix: "clerk.publishable";
+    readonly canonicalName: "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY";
+    readonly aliases: readonly ["CLERK_PUBLISHABLE_KEY"];
+    readonly required: true;
+    readonly secret: false;
+    readonly public: true;
+    readonly description: "Tenant-owned Clerk browser key. For Stack this is the master clerk.stack.vc project shared by front-end, StackOS, and the engineering workspace.";
+}, {
+    readonly idSuffix: "clerk.secret";
+    readonly canonicalName: "CLERK_SECRET_KEY";
+    readonly required: true;
+    readonly secret: true;
+    readonly public: false;
+    readonly description: "Tenant-owned Clerk backend secret used only by that tenant's server runtimes.";
+}, {
+    readonly idSuffix: "clerk.project";
+    readonly canonicalName: "CLERK_PROJECT_ID";
+    readonly required: true;
+    readonly secret: false;
+    readonly public: false;
+    readonly description: "Tenant-owned Clerk project id used to resolve canonical Clerk aliases.";
+}, {
+    readonly idSuffix: "clerk.jwks";
+    readonly canonicalName: "CLERK_JWT_ISSUER_DOMAIN";
+    readonly aliases: readonly ["CLERK_ISSUER_URL", "CLERK_JWKS_URL"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly description: "Tenant Clerk issuer/JWKS URL consumed by Convex auth.config.ts.";
+}, {
+    readonly idSuffix: "clerk.jwt-key";
+    readonly canonicalName: "CLERK_JWT_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly description: "Tenant Clerk JWT public verification key used by bearer-token API routes.";
+}, {
+    readonly idSuffix: "clerk.authorized-parties";
+    readonly canonicalName: "CLERK_AUTHORIZED_PARTIES";
+    readonly aliases: readonly ["CLERK_MOBILE_AUTHORIZED_PARTIES"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly description: "Comma-separated Clerk authorized parties for browser and mobile bearer-token validation.";
+}, {
+    readonly idSuffix: "clerk.sign-in-url";
+    readonly canonicalName: "NEXT_PUBLIC_CLERK_SIGN_IN_URL";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly description: "Tenant Clerk sign-in route for custom app login surfaces.";
+}, {
+    readonly idSuffix: "clerk.sign-up-url";
+    readonly canonicalName: "NEXT_PUBLIC_CLERK_SIGN_UP_URL";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly description: "Tenant Clerk sign-up route for custom app login surfaces.";
+}];
+declare const TENANT_SHARED_SECRET_DEFINITIONS: InfisicalSecretDefinition[];
+declare const TENANT_INSTALL_SECRET_DEFINITIONS: InfisicalSecretDefinition[];
+declare const TENANT_PRODUCT_SOFTWARE_SYSTEM_IDS: string[];
+declare const TENANT_PRODUCT_RUNTIME_SECRET_DEFINITION_TEMPLATES: readonly [{
+    readonly idSuffix: "ai.openai-api-key";
+    readonly canonicalName: "OPENAI_API_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-ai-runtime"];
+    readonly description: "Tenant-owned OpenAI key for product runtime LLM calls.";
+}, {
+    readonly idSuffix: "ai.anthropic-api-key";
+    readonly canonicalName: "ANTHROPIC_API_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-ai-runtime"];
+    readonly description: "Tenant-owned Anthropic key for product runtime LLM calls.";
+}, {
+    readonly idSuffix: "ai.gemini-api-key";
+    readonly canonicalName: "GEMINI_API_KEY";
+    readonly aliases: readonly ["GOOGLE_AI_API_KEY", "GOOGLE_GENERATIVE_AI_API_KEY"];
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-ai-runtime"];
+    readonly description: "Tenant-owned Google/Gemini key for product runtime LLM calls.";
+}, {
+    readonly idSuffix: "langfuse.secret-key";
+    readonly canonicalName: "LANGFUSE_SECRET_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-observability"];
+    readonly description: "Tenant-owned Langfuse secret key for product AI tracing.";
+}, {
+    readonly idSuffix: "langfuse.public-key";
+    readonly canonicalName: "LANGFUSE_PUBLIC_KEY";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-observability"];
+    readonly description: "Tenant-owned Langfuse public key for product AI tracing.";
+}, {
+    readonly idSuffix: "langfuse.base-url";
+    readonly canonicalName: "LANGFUSE_BASE_URL";
+    readonly aliases: readonly ["LANGFUSE_BASEURL", "LANGFUSE_HOST"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-observability"];
+    readonly description: "Tenant-owned Langfuse API origin.";
+}, {
+    readonly idSuffix: "graph.neo4j-uri";
+    readonly canonicalName: "NEO4J_URI";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-graph-sync"];
+    readonly description: "Tenant-owned Neo4j URI for product graph-sync.";
+}, {
+    readonly idSuffix: "graph.neo4j-user";
+    readonly canonicalName: "NEO4J_USER";
+    readonly aliases: readonly ["NEO4J_USERNAME"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-graph-sync"];
+    readonly description: "Tenant-owned Neo4j user for product graph-sync.";
+}, {
+    readonly idSuffix: "graph.neo4j-password";
+    readonly canonicalName: "NEO4J_PASSWORD";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-graph-sync"];
+    readonly description: "Tenant-owned Neo4j password for product graph-sync.";
+}, {
+    readonly idSuffix: "graph.neo4j-sync-secret";
+    readonly canonicalName: "NEO4J_SYNC_SECRET";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-graph-sync"];
+    readonly description: "Tenant-owned shared secret for product Convex-to-HTTP graph-sync calls.";
+}, {
+    readonly idSuffix: "graph.neo4j-database";
+    readonly canonicalName: "NEO4J_DATABASE";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-graph-sync"];
+    readonly description: "Tenant-owned Neo4j database name for product graph-sync.";
+}, {
+    readonly idSuffix: "vector.pinecone-api-key";
+    readonly canonicalName: "PINECONE_API_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-vector-store"];
+    readonly description: "Tenant-owned Pinecone API key for product vector search.";
+}, {
+    readonly idSuffix: "vector.pinecone-index-name";
+    readonly canonicalName: "PINECONE_INDEX_NAME";
+    readonly aliases: readonly ["PINECONE_INDEX"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-vector-store"];
+    readonly description: "Tenant-owned Pinecone index name for product vector search.";
+}, {
+    readonly idSuffix: "vector.pinecone-host";
+    readonly canonicalName: "PINECONE_HOST";
+    readonly aliases: readonly ["PINECONE_INDEX_HOST"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-vector-store"];
+    readonly description: "Tenant-owned Pinecone host for product vector search.";
+}, {
+    readonly idSuffix: "vector.pinecone-namespace";
+    readonly canonicalName: "PINECONE_NAMESPACE";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment", "tenant-vector-store"];
+    readonly description: "Tenant-owned Pinecone namespace for product vector search isolation.";
+}, {
+    readonly idSuffix: "storage.aws-access-key-id";
+    readonly canonicalName: "AWS_ACCESS_KEY_ID";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment"];
+    readonly description: "Tenant-owned AWS access key id for document/file ingestion.";
+}, {
+    readonly idSuffix: "storage.aws-secret-access-key";
+    readonly canonicalName: "AWS_SECRET_ACCESS_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment"];
+    readonly description: "Tenant-owned AWS secret access key for document/file ingestion.";
+}, {
+    readonly idSuffix: "storage.aws-region";
+    readonly canonicalName: "AWS_REGION";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-convex-deployment"];
+    readonly description: "Tenant-owned AWS region for document/file ingestion.";
+}, {
+    readonly idSuffix: "observability.sentry-dsn";
+    readonly canonicalName: "NEXT_PUBLIC_SENTRY_DSN";
+    readonly aliases: readonly ["NEXT_PUBLIC_SENTRY_DSN_NEXTJS", "SENTRY_DSN"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry DSN for app telemetry.";
+}, {
+    readonly idSuffix: "observability.sentry-auth-token";
+    readonly canonicalName: "SENTRY_AUTH_TOKEN";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-deploy-tooling", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry release token for app deployments.";
+}, {
+    readonly idSuffix: "observability.sentry-org";
+    readonly canonicalName: "SENTRY_ORG";
+    readonly aliases: readonly ["SENTRY_ORG_SLUG"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-deploy-tooling", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry org slug for release uploads.";
+}, {
+    readonly idSuffix: "observability.sentry-project";
+    readonly canonicalName: "SENTRY_PROJECT";
+    readonly aliases: readonly ["SENTRY_PROJECT_NEXTJS"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-deploy-tooling", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry project slug for release uploads.";
+}, {
+    readonly idSuffix: "observability.sentry-environment";
+    readonly canonicalName: "NEXT_PUBLIC_SENTRY_ENVIRONMENT";
+    readonly aliases: readonly ["SENTRY_ENVIRONMENT"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry environment label.";
+}, {
+    readonly idSuffix: "observability.sentry-release";
+    readonly canonicalName: "NEXT_PUBLIC_SENTRY_RELEASE";
+    readonly aliases: readonly ["SENTRY_RELEASE"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry release label.";
+}, {
+    readonly idSuffix: "observability.sentry-client-options";
+    readonly canonicalName: "NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE";
+    readonly aliases: readonly ["NEXT_PUBLIC_SENTRY_CAPTURE_CONSOLE_LEVELS", "NEXT_PUBLIC_SENTRY_CAPTURE_CONSOLE_LEVELS_NEXTJS", "NEXT_PUBLIC_SENTRY_CONSOLE_BREADCRUMB_LEVELS", "NEXT_PUBLIC_SENTRY_CONSOLE_BREADCRUMB_LEVELS_NEXTJS", "NEXT_PUBLIC_SENTRY_CONSOLE_LOG_LEVELS", "NEXT_PUBLIC_SENTRY_CONSOLE_LOG_LEVELS_NEXTJS", "NEXT_PUBLIC_SENTRY_ENABLE_LOGS", "NEXT_PUBLIC_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE", "NEXT_PUBLIC_SENTRY_REPLAYS_SESSION_SAMPLE_RATE", "NEXT_PUBLIC_SENTRY_SEND_DEFAULT_PII", "NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE_NEXTJS"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: true;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-observability"];
+    readonly description: "Tenant-owned public Sentry tuning values for Next.js client instrumentation.";
+}, {
+    readonly idSuffix: "observability.sentry-webhook-secret";
+    readonly canonicalName: "SENTRY_WEBHOOK_SECRET";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-convex-deployment", "tenant-observability"];
+    readonly description: "Tenant-owned Sentry webhook verification secret.";
+}, {
+    readonly idSuffix: "lucern.gateway-api-key";
+    readonly canonicalName: "LUCERN_API_KEY";
+    readonly aliases: readonly ["STACK_API_KEY"];
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime"];
+    readonly description: "Tenant-scoped Lucern/MC gateway API key for product front-door calls.";
+}, {
+    readonly idSuffix: "lucern.gateway-base-url";
+    readonly canonicalName: "LUCERN_BASE_URL";
+    readonly aliases: readonly ["LUCERN_API_BASE_URL", "LUCERN_GATEWAY_BASE_URL"];
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime"];
+    readonly description: "Lucern/MC gateway base URL used by tenant product apps.";
+}, {
+    readonly idSuffix: "lucern.proxy-token-secret";
+    readonly canonicalName: "LUCERN_PROXY_TOKEN_SECRET";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime"];
+    readonly description: "Tenant-owned secret for signing internal proxy/session tokens in product apps.";
+}, {
+    readonly idSuffix: "tenant.integrations.linear-api-key";
+    readonly canonicalName: "LINEAR_API_KEY";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime"];
+    readonly description: "Tenant-owned Linear API key for support/slash-command flows.";
+}, {
+    readonly idSuffix: "tenant.vercel.bypass-token";
+    readonly canonicalName: "VERCEL_AUTOMATION_BYPASS_SECRET";
+    readonly aliases: readonly ["NEXT_PUBLIC_VERCEL_BYPASS_TOKEN"];
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-deploy-tooling"];
+    readonly description: "Tenant-owned Vercel automation bypass token. Public alias is legacy and should be removed from app code.";
+}];
+declare const TENANT_PRODUCT_RUNTIME_SECRET_DEFINITIONS: InfisicalSecretDefinition[];
+declare const TENANT_GRAPH_PUBLIC_CONFIG_SECRET_DEFINITIONS: InfisicalSecretDefinition[];
+declare const STACK_ENG_GRAPH_STORE_SECRET_DEFINITIONS: readonly [{
+    readonly id: "tenant.stack-eng.neo4j.uri";
+    readonly canonicalName: "NEO4J_URI";
+    readonly aliases: readonly ["NEO4J_ENG_URI"];
+    readonly owner: "tenant";
+    readonly scope: "workspace";
+    readonly sourcePath: "/tenants/stack/engineering";
+    readonly environmentPolicy: "environment_specific";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-graph-sync", "tenant-convex-deployment"];
+    readonly destinations: readonly [{
+        readonly kind: "convex";
+        readonly target: "small-oyster-270|bold-cuttlefish-804";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "vercel";
+        readonly target: "stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }];
+    readonly description: "Stack engineering graph Neo4j runtime URI. NEO4J_ENG_URI is the source alias used to avoid StackOS front-office collisions.";
+}, {
+    readonly id: "tenant.stack-eng.neo4j.user";
+    readonly canonicalName: "NEO4J_USER";
+    readonly aliases: readonly ["NEO4J_ENG_USER"];
+    readonly owner: "tenant";
+    readonly scope: "workspace";
+    readonly sourcePath: "/tenants/stack/engineering";
+    readonly environmentPolicy: "environment_specific";
+    readonly required: false;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-graph-sync", "tenant-convex-deployment"];
+    readonly destinations: readonly [{
+        readonly kind: "convex";
+        readonly target: "small-oyster-270|bold-cuttlefish-804";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "vercel";
+        readonly target: "stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }];
+    readonly description: "Stack engineering graph Neo4j runtime user.";
+}, {
+    readonly id: "tenant.stack-eng.neo4j.password";
+    readonly canonicalName: "NEO4J_PASSWORD";
+    readonly aliases: readonly ["NEO4J_ENG_PASSWORD"];
+    readonly owner: "tenant";
+    readonly scope: "workspace";
+    readonly sourcePath: "/tenants/stack/engineering";
+    readonly environmentPolicy: "environment_specific";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-graph-sync", "tenant-convex-deployment"];
+    readonly destinations: readonly [{
+        readonly kind: "convex";
+        readonly target: "small-oyster-270|bold-cuttlefish-804";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "vercel";
+        readonly target: "stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }];
+    readonly description: "Stack engineering graph Neo4j runtime password.";
+}, {
+    readonly id: "tenant.stack-eng.neo4j.sync-secret";
+    readonly canonicalName: "NEO4J_SYNC_SECRET";
+    readonly owner: "tenant";
+    readonly scope: "workspace";
+    readonly sourcePath: "/tenants/stack/engineering";
+    readonly environmentPolicy: "environment_specific";
+    readonly required: false;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-graph-sync", "tenant-convex-deployment"];
+    readonly destinations: readonly [{
+        readonly kind: "convex";
+        readonly target: "small-oyster-270|bold-cuttlefish-804";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "vercel";
+        readonly target: "stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos-engineering-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }];
+    readonly description: "Stack engineering graph sync secret for Convex-to-HTTP graph query/sync calls.";
+}];
+declare const TENANT_CONVEX_SECRET_DEFINITIONS: ({
+    readonly id: "tenant.stackos.convex.url" | "tenant.stack-frontend.convex.url" | "tenant.stack-eng.convex.url" | "tenant.lucern-graph.convex.url";
+    readonly canonicalName: "CONVEX_FRONTEND_URL" | "CONVEX_STACKOS_URL" | "CONVEX_STACK_ENG_URL" | "CONVEX_LUCERN_URL";
+    readonly aliases: readonly string[] | undefined;
+    readonly owner: "tenant";
+    readonly scope: "software_system";
+    readonly sourcePath: "/tenants/stack" | "/tenants/stack/engineering" | "/tenants/lucern/shared";
+    readonly environmentPolicy: "preprod_staging_prod_prod";
+    readonly required: true;
+    readonly secret: false;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime", "mc-operator-tooling"];
+    readonly destinations: readonly [{
+        readonly kind: "vercel";
+        readonly target: "stackos" | "ai-chatbot-diao" | "stackos-engineering-graph" | "lucern-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+        readonly writeNames: readonly string[];
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos" | "stack-vc/stackos-engineering-graph" | "stack-vc/front-end" | "stack-vc/lucern-graph" | "LucernAI/stackos" | "LucernAI/front-end" | "LucernAI/stackos-engineering-graph" | "LucernAI/lucern-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+        readonly writeNames: readonly string[];
+        readonly notes: "Only if that repository deploy/test workflow owns this software system.";
+    }];
+    readonly description: "stack/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "stack/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "stack/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "stack/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "stack/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "stack/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "stack/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "stack/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "stack/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "stack/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "stack/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "stack/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "stack/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "stack/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "stack/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "stack/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "stack/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "stack/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "stack/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "stack/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "stack/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "stack/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "stack/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "stack/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "stack/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "stack/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "stack/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "stack/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "stack/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "stack/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "stack/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "stack/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "stack/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "stack/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "stack/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "stack/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "stack/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "stack/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "stack/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "stack/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "stack/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "stack/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "stack/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "stack/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "stack/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "stack/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "stack/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "stack/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "stack/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "stack/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "stack/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "stack/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "stack/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "stack/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "stack/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "stack/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "stack/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "stack/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "stack/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "stack/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "stack/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "stack/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "stack/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "stack/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "lucern/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "lucern/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "lucern/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "lucern/stackos Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "lucern/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "lucern/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "lucern/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "lucern/stackos Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "lucern/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "lucern/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "lucern/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "lucern/stackos Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "lucern/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "lucern/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "lucern/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "lucern/stackos Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "lucern/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "lucern/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "lucern/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "lucern/frontend Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "lucern/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "lucern/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "lucern/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "lucern/frontend Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "lucern/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "lucern/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "lucern/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "lucern/frontend Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "lucern/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "lucern/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "lucern/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "lucern/frontend Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "lucern/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "lucern/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "lucern/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "lucern/engineering Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "lucern/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "lucern/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "lucern/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "lucern/engineering Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "lucern/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "lucern/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "lucern/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "lucern/engineering Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "lucern/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "lucern/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "lucern/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "lucern/engineering Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365." | "lucern/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to wonderful-toucan-0." | "lucern/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to good-snake-515." | "lucern/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to bold-cuttlefish-804." | "lucern/lucern Convex URL. Pre-prod resolves to rugged-lobster-664; prod resolves to precious-dog-365." | "lucern/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to wonderful-toucan-0." | "lucern/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to good-snake-515." | "lucern/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to bold-cuttlefish-804." | "lucern/lucern Convex URL. Pre-prod resolves to giant-mandrill-761; prod resolves to precious-dog-365." | "lucern/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to wonderful-toucan-0." | "lucern/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to good-snake-515." | "lucern/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to bold-cuttlefish-804." | "lucern/lucern Convex URL. Pre-prod resolves to small-oyster-270; prod resolves to precious-dog-365." | "lucern/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to wonderful-toucan-0." | "lucern/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to good-snake-515." | "lucern/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to bold-cuttlefish-804." | "lucern/lucern Convex URL. Pre-prod resolves to good-blackbird-774; prod resolves to precious-dog-365.";
+} | {
+    readonly id: "tenant.stackos.convex.deploy-key" | "tenant.stack-frontend.convex.deploy-key" | "tenant.stack-eng.convex.deploy-key" | "tenant.lucern-graph.convex.deploy-key";
+    readonly canonicalName: "CONVEX_FRONTEND_DEPLOY_KEY" | "CONVEX_STACKOS_DEPLOY_KEY" | "CONVEX_STACK_ENG_DEPLOY_KEY" | "CONVEX_LUCERN_DEPLOY_KEY";
+    readonly aliases: readonly string[] | undefined;
+    readonly owner: "tenant";
+    readonly scope: "software_system";
+    readonly sourcePath: "/tenants/stack" | "/tenants/stack/engineering" | "/tenants/lucern/shared";
+    readonly environmentPolicy: "preprod_staging_prod_prod";
+    readonly required: true;
+    readonly secret: true;
+    readonly public: false;
+    readonly consumers: readonly ["tenant-vercel-app", "tenant-agent-runtime", "mc-operator-tooling"];
+    readonly destinations: readonly [{
+        readonly kind: "vercel";
+        readonly target: "stackos" | "ai-chatbot-diao" | "stackos-engineering-graph" | "lucern-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+    }, {
+        readonly kind: "github_actions";
+        readonly target: "stack-vc/stackos" | "stack-vc/stackos-engineering-graph" | "stack-vc/front-end" | "stack-vc/lucern-graph" | "LucernAI/stackos" | "LucernAI/front-end" | "LucernAI/stackos-engineering-graph" | "LucernAI/lucern-graph";
+        readonly environmentPolicy: "preprod_staging_prod_prod";
+        readonly writeNames: readonly string[];
+        readonly notes: "Only if that repository deploy/test workflow owns this software system.";
+    }];
+    readonly description: "stack/stackos Convex deploy/admin key. Never route to sibling workspaces." | "stack/frontend Convex deploy/admin key. Never route to sibling workspaces." | "stack/engineering Convex deploy/admin key. Never route to sibling workspaces." | "stack/lucern Convex deploy/admin key. Never route to sibling workspaces." | "lucern/stackos Convex deploy/admin key. Never route to sibling workspaces." | "lucern/frontend Convex deploy/admin key. Never route to sibling workspaces." | "lucern/engineering Convex deploy/admin key. Never route to sibling workspaces." | "lucern/lucern Convex deploy/admin key. Never route to sibling workspaces.";
+})[];
+
+export { STACK_ENG_GRAPH_STORE_SECRET_DEFINITIONS, TENANT_CONVEX_SECRET_DEFINITIONS, TENANT_GRAPH_PUBLIC_CONFIG_SECRET_DEFINITIONS, TENANT_INSTALL_SECRET_DEFINITIONS, TENANT_PRODUCT_RUNTIME_SECRET_DEFINITIONS, TENANT_PRODUCT_RUNTIME_SECRET_DEFINITION_TEMPLATES, TENANT_PRODUCT_SOFTWARE_SYSTEM_IDS, TENANT_SHARED_SECRET_DEFINITIONS, TENANT_SHARED_SECRET_DEFINITION_TEMPLATES };