@lucern/contracts 1.0.1 → 1.0.2

package/dist/infisical-runtime.platform-automation-secrets.js

@@ -0,0 +1,596 @@
+// src/infisical-runtime.platform-automation-secrets.ts
+var PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [
+  {
+    id: "platform.deploy.vercel-token",
+    canonicalName: "VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Vercel API token for the future reviewed live writer. Never copy into tenant apps."
+  },
+  {
+    id: "platform.deploy.vercel-token.stack",
+    canonicalName: "STACK_VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps."
+  },
+  {
+    id: "platform.deploy.vercel-token.lucern",
+    canonicalName: "LUCERN_VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Lucern Vercel API token for manifest-scoped Lucern tenant Vercel secret sync. Never copy into tenant apps."
+  },
+  {
+    id: "platform.deploy.vercel-org-id",
+    canonicalName: "VERCEL_ORG_ID",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Vercel team/org id used by deployment and sync automation."
+  },
+  {
+    id: "platform.deploy.socket-api-key",
+    canonicalName: "SOCKET_API_KEY",
+    aliases: [
+      "socket_token",
+      "SOCKET_SECURITY_API_KEY",
+      "SOCKET_SECURITY_API_TOKEN"
+    ],
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments",
+        writeNames: [
+          "SOCKET_API_KEY",
+          "SOCKET_SECURITY_API_KEY",
+          "SOCKET_SECURITY_API_TOKEN"
+        ]
+      },
+      {
+        kind: "operator_local",
+        target: "socket-firewall-wrapper",
+        environmentPolicy: "same_all_environments",
+        writeNames: [
+          "SOCKET_API_KEY",
+          "SOCKET_SECURITY_API_KEY",
+          "SOCKET_SECURITY_API_TOKEN"
+        ]
+      }
+    ],
+    description: "Socket API token for authenticated Socket Firewall wrapper, CLI, and CI policy checks."
+  },
+  {
+    id: "platform.deploy.socket-token-hash",
+    canonicalName: "SOCKET_TOKEN_HASH",
+    aliases: ["socket_token_hash", "SOCKET_API_KEY_HASH"],
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "socket-token-audit",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Socket token fingerprint retained for rotation evidence; not consumed by Socket tooling."
+  }
+];
+var PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS = [
+  {
+    id: "platform.docs.gap-audit-api-key",
+    canonicalName: "DOC_GAP_AUDIT_API_KEY",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/docs",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional model key for docs gap audits."
+  },
+  {
+    id: "platform.docs.gap-audit-provider",
+    canonicalName: "DOC_GAP_AUDIT_PROVIDER",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/docs",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional docs gap audit provider selector."
+  },
+  {
+    id: "platform.docs.gap-audit-model",
+    canonicalName: "DOC_GAP_AUDIT_MODEL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/docs",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional docs gap audit model selector."
+  },
+  {
+    id: "platform.infisical.local-cli",
+    canonicalName: "INFISICAL_BIN",
+    aliases: ["INFISICAL_API_URL", "INFISICAL_URL"],
+    owner: "lucern_platform",
+    scope: "global",
+    sourcePath: "/platform/infisical",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["mc-operator-tooling", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Operator-only Infisical CLI/API location knobs. Machine credentials are handled by the bootstrap contract."
+  },
+  {
+    id: "platform.gateway.device-verification-base-url",
+    canonicalName: "LUCERN_DEVICE_VERIFICATION_BASE_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-gateway"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Base URL shown during Lucern CLI/device authentication."
+  },
+  {
+    id: "platform.gateway.mode",
+    canonicalName: "LUCERN_GATEWAY_MODE",
+    aliases: ["LUCERN_GATEWAY_ENV"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-gateway", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Gateway runtime mode/environment label."
+  },
+  {
+    id: "platform.mcp.runtime",
+    canonicalName: "LUCERN_MCP_URL",
+    aliases: [
+      "LUCERN_AGENT_IDENTITY",
+      "LUCERN_HTTP_HOST",
+      "LUCERN_HTTP_PORT",
+      "LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH",
+      "LUCERN_MCP_DEBUG",
+      "LUCERN_MCP_DIAGNOSTICS_FILE",
+      "LUCERN_MCP_HEALTH_PATH",
+      "LUCERN_MCP_HEALTH_URL",
+      "LUCERN_MCP_HOST",
+      "LUCERN_MCP_PATH",
+      "LUCERN_MCP_PORT",
+      "LUCERN_MCP_QUIET",
+      "LUCERN_MCP_TRANSPORT",
+      "LUCERN_PROFILE",
+      "LUCERN_PUBLIC_URL",
+      "MCP_SERVER_URL"
+    ],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-mcp", "lucern-cli", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern MCP/CLI runtime knobs. Aliases are compatibility names and not Vercel write names."
+  },
+  {
+    id: "platform.mcp.auth-token",
+    canonicalName: "LUCERN_MCP_SERVER_AUTH_TOKEN",
+    aliases: ["LUCERN_USER_TOKEN", "MCP_SERVER_TOKEN"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-mcp", "lucern-cli", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Local/hosted MCP auth token material. Tenant apps must use MC/API-key sessions instead."
+  },
+  {
+    id: "platform.operator.api-key",
+    canonicalName: "LUCERN_API_KEY",
+    aliases: ["LUCERN_KEY"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-cli", "lucern-mcp", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files."
+  },
+  {
+    id: "platform.graph-sync.proxy",
+    canonicalName: "LUCERN_GRAPH_SYNC_QUERY_BASE_URL",
+    aliases: [
+      "LUCERN_DEFAULT_TENANT_ID",
+      "LUCERN_GRAPH_SYNC_ALLOWED_PROXY_HOSTS"
+    ],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Graph-sync proxy URL, tenant filter, and allowed host list."
+  },
+  {
+    id: "platform.package-smoke.local",
+    canonicalName: "LUCERN_SDK_NPM_TOKEN",
+    aliases: [
+      "LUCERN_KERNEL_INSTALL_SPEC",
+      "LUCERN_KERNEL_KEEP_CLEANROOM",
+      "LUCERN_KERNEL_LOCAL_TARBALL",
+      "LUCERN_KERNEL_NPM_TOKEN",
+      "LUCERN_KERNEL_SCOPE_REGISTRY",
+      "LUCERN_KERNEL_SKIP_CONVEX",
+      "LUCERN_SDK_INSTALL_SPEC",
+      "LUCERN_SDK_KEEP_CLEANROOM",
+      "LUCERN_SDK_LOCAL_TARBALL",
+      "LUCERN_SDK_SCOPE_REGISTRY",
+      "LUCERN_SDK_SKIP_LIVE"
+    ],
+    owner: "lucern_platform",
+    scope: "global",
+    sourcePath: "/platform/package-publish",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Private package install smoke-test knobs. Values are not tenant runtime variables."
+  },
+  {
+    id: "platform.convex-deploy.local-names",
+    canonicalName: "LUCERN_CONVEX_DEPLOYMENT_NAME",
+    aliases: [
+      "CONVEX_DEPLOYMENT",
+      "CONVEX_DEV_DEPLOYMENT_NAME",
+      "CONVEX_PROD_DEPLOYMENT_NAME"
+    ],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/deploy/convex",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["mc-operator-tooling", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Operator-only Convex deployment name hints. Deploy keys and URLs remain separately scoped."
+  },
+  {
+    id: "platform.sdk.local-context",
+    canonicalName: "LUCERN_TENANT_ID",
+    aliases: [
+      "LUCERN_AGENT_DISPLAY_NAME",
+      "LUCERN_AGENT_ID",
+      "LUCERN_API_ENVIRONMENT",
+      "LUCERN_PACK_KEY",
+      "LUCERN_PROJECT_ID",
+      "LUCERN_TOPIC_ID",
+      "LUCERN_WORKSPACE_ID",
+      "LUCERN_WORKTREE_ID"
+    ],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-cli", "lucern-mcp", "tenant-agent-runtime"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "SDK, CLI, and agent context selectors. These identify scope and must not grant access by themselves."
+  },
+  {
+    id: "platform.debug.local-flags",
+    canonicalName: "LUCERN_FUNCTIONAL_DEBUG",
+    aliases: [
+      "LUCERN_CONTRACTS_SKIP_DTS",
+      "LUCERN_DEPLOY_RECONCILIATION_DEBUG",
+      "LUCERN_ENABLE_ADAPTIVE_LEARNING",
+      "LUCERN_ENV_FILE",
+      "LUCERN_EXAMPLE_DEBUG",
+      "LUCERN_HTTP_SMOKE_DEBUG",
+      "LUCERN_MULTI_TENANT",
+      "LUCERN_PACK_ACTION_DEBUG",
+      "LUCERN_RUN_LIVE_MCP"
+    ],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/runtime/debug",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-repo-ci", "mc-operator-tooling"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Local or CI debug toggles. They are manifest-known but not tenant runtime secrets."
+  },
+  {
+    id: "tenant.stackos.deploy-guard.local",
+    canonicalName: "STACKOS_DEPLOY_TARGET",
+    aliases: [
+      "STACKOS_DEPLOY_ENTRYPOINT",
+      "STACKOS_EXPECTED_STAGING_COMMIT",
+      "STACKOS_PROD_CUTOVER_APPROVED",
+      "STACKOS_REPO_PATH",
+      "STACKOS_REQUIRE_CHAT_RUNTIME",
+      "STACKOS_SLOP_SCAN_BASELINE",
+      "STACKOS_STAGING_API_KEY",
+      "STACKOS_STAGING_BASE_URL",
+      "STACK_DEPLOY_RECONCILIATION_SCHEMA_JSON"
+    ],
+    owner: "tenant",
+    scope: "software_system",
+    sourcePath: "/tenants/stack",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["tenant-deploy-tooling", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "stackos-deploy-guard",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "stack-vc/stackos",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "StackOS deploy/test guard variables. These are not written into the StackOS Vercel runtime."
+  }
+];
+
+export { PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS, PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS };
+//# sourceMappingURL=infisical-runtime.platform-automation-secrets.js.map
+//# sourceMappingURL=infisical-runtime.platform-automation-secrets.js.map

package/dist/infisical-runtime.platform-automation-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infisical-runtime.platform-automation-secrets.ts"],"names":[],"mappings":";AAEO,IAAM,6CAAA,GAAgD;AAAA,EAC3D;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,cAAA;AAAA,IACf,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,oCAAA;AAAA,IACJ,aAAA,EAAe,oBAAA;AAAA,IACf,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,qCAAA;AAAA,IACJ,aAAA,EAAe,qBAAA;AAAA,IACf,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,eAAA;AAAA,IACf,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,gCAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,cAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB,uBAAA;AAAA,QACnB,UAAA,EAAY;AAAA,UACV,gBAAA;AAAA,UACA,yBAAA;AAAA,UACA;AAAA;AACF,OACF;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,yBAAA;AAAA,QACR,iBAAA,EAAmB,uBAAA;AAAA,QACnB,UAAA,EAAY;AAAA,UACV,gBAAA;AAAA,UACA,yBAAA;AAAA,UACA;AAAA;AACF;AACF,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,mCAAA;AAAA,IACJ,aAAA,EAAe,mBAAA;AAAA,IACf,OAAA,EAAS,CAAC,mBAAA,EAAqB,qBAAqB,CAAA;AAAA,IACpD,KAAA,EAAO,UAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,kBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA;AAEN;AAEO,IAAM,iDAAA,GAAoD;AAAA,EAC/D;AAAA,IACE,EAAA,EAAI,iCAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,kCAAA;AAAA,IACJ,aAAA,EAAe,wBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+BAAA;AAAA,IACJ,aAAA,EAAe,qBAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,eAAA;AAAA,IACf,OAAA,EAAS,CAAC,mBAAA,EAAqB,eAAe,CAAA;AAAA,IAC9C,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,qBAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,IACnD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,+CAAA;AAAA,IACJ,aAAA,EAAe,qCAAA;AAAA,IACf,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,uBAAA;AAAA,IACJ,aAAA,EAAe,qBAAA;AAAA,IACf,OAAA,EAAS,CAAC,oBAAoB,CAAA;AAAA,IAC9B,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,gBAAgB,CAAA;AAAA,IAC9C,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,sBAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,uBAAA;AAAA,MACA,kBAAA;AAAA,MACA,kBAAA;AAAA,MACA,sCAAA;AAAA,MACA,kBAAA;AAAA,MACA,6BAAA;AAAA,MACA,wBAAA;AAAA,MACA,uBAAA;AAAA,MACA,iBAAA;AAAA,MACA,iBAAA;AAAA,MACA,iBAAA;AAAA,MACA,kBAAA;AAAA,MACA,sBAAA;AAAA,MACA,gBAAA;AAAA,MACA,mBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,yBAAA;AAAA,IACJ,aAAA,EAAe,8BAAA;AAAA,IACf,OAAA,EAAS,CAAC,mBAAA,EAAqB,kBAAkB,CAAA;AAAA,IACjD,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,aAAA,EAAe,gBAAA;AAAA,IACf,OAAA,EAAS,CAAC,YAAY,CAAA;AAAA,IACtB,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,YAAA,EAAc,gBAAgB,CAAA;AAAA,IACxD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,2BAAA;AAAA,IACJ,aAAA,EAAe,kCAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,uBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,IACjD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,mBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,8BAAA;AAAA,IACJ,aAAA,EAAe,sBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,4BAAA;AAAA,MACA,8BAAA;AAAA,MACA,6BAAA;AAAA,MACA,yBAAA;AAAA,MACA,8BAAA;AAAA,MACA,2BAAA;AAAA,MACA,yBAAA;AAAA,MACA,2BAAA;AAAA,MACA,0BAAA;AAAA,MACA,2BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,QAAA;AAAA,IACP,UAAA,EAAY,2BAAA;AAAA,IACZ,iBAAA,EAAmB,uBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,IAC5B,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,iBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,oCAAA;AAAA,IACJ,aAAA,EAAe,+BAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,mBAAA;AAAA,MACA,4BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,IACnD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,kBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,2BAAA;AAAA,MACA,iBAAA;AAAA,MACA,wBAAA;AAAA,MACA,iBAAA;AAAA,MACA,mBAAA;AAAA,MACA,iBAAA;AAAA,MACA,qBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,mBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,YAAA,EAAc,YAAA,EAAc,sBAAsB,CAAA;AAAA,IAC9D,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,oBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,4BAAA;AAAA,IACJ,aAAA,EAAe,yBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,2BAAA;AAAA,MACA,oCAAA;AAAA,MACA,iCAAA;AAAA,MACA,iBAAA;AAAA,MACA,sBAAA;AAAA,MACA,yBAAA;AAAA,MACA,qBAAA;AAAA,MACA,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,iBAAA;AAAA,IACP,KAAA,EAAO,aAAA;AAAA,IACP,UAAA,EAAY,yBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,gBAAA,EAAkB,qBAAqB,CAAA;AAAA,IACnD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,aAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,EAAA,EAAI,mCAAA;AAAA,IACJ,aAAA,EAAe,uBAAA;AAAA,IACf,OAAA,EAAS;AAAA,MACP,2BAAA;AAAA,MACA,iCAAA;AAAA,MACA,+BAAA;AAAA,MACA,mBAAA;AAAA,MACA,8BAAA;AAAA,MACA,4BAAA;AAAA,MACA,yBAAA;AAAA,MACA,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,KAAA,EAAO,QAAA;AAAA,IACP,KAAA,EAAO,iBAAA;AAAA,IACP,UAAA,EAAY,gBAAA;AAAA,IACZ,iBAAA,EAAmB,sBAAA;AAAA,IACnB,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ,IAAA;AAAA,IACR,MAAA,EAAQ,KAAA;AAAA,IACR,SAAA,EAAW,CAAC,uBAAA,EAAyB,gBAAgB,CAAA;AAAA,IACrD,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,sBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA,OACrB;AAAA,MACA;AAAA,QACE,IAAA,EAAM,gBAAA;AAAA,QACN,MAAA,EAAQ,kBAAA;AAAA,QACR,iBAAA,EAAmB;AAAA;AACrB,KACF;AAAA,IACA,WAAA,EACE;AAAA;AAEN","file":"infisical-runtime.platform-automation-secrets.js","sourcesContent":["import type { InfisicalSecretDefinition } from \"./infisical-runtime.base\";\n\nexport const PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [\n  {\n    id: \"platform.deploy.vercel-token\",\n    canonicalName: \"VERCEL_TOKEN\",\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy/vercel\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"secret-sync-writer\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Vercel API token for the future reviewed live writer. Never copy into tenant apps.\",\n  },\n  {\n    id: \"platform.deploy.vercel-token.stack\",\n    canonicalName: \"STACK_VERCEL_TOKEN\",\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy/vercel\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"secret-sync-writer\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps.\",\n  },\n  {\n    id: \"platform.deploy.vercel-token.lucern\",\n    canonicalName: \"LUCERN_VERCEL_TOKEN\",\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy/vercel\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"secret-sync-writer\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Lucern Vercel API token for manifest-scoped Lucern tenant Vercel secret sync. Never copy into tenant apps.\",\n  },\n  {\n    id: \"platform.deploy.vercel-org-id\",\n    canonicalName: \"VERCEL_ORG_ID\",\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy/vercel\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"secret-sync-writer\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description: \"Vercel team/org id used by deployment and sync automation.\",\n  },\n  {\n    id: \"platform.deploy.socket-api-key\",\n    canonicalName: \"SOCKET_API_KEY\",\n    aliases: [\n      \"socket_token\",\n      \"SOCKET_SECURITY_API_KEY\",\n      \"SOCKET_SECURITY_API_TOKEN\",\n    ],\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n        writeNames: [\n          \"SOCKET_API_KEY\",\n          \"SOCKET_SECURITY_API_KEY\",\n          \"SOCKET_SECURITY_API_TOKEN\",\n        ],\n      },\n      {\n        kind: \"operator_local\",\n        target: \"socket-firewall-wrapper\",\n        environmentPolicy: \"same_all_environments\",\n        writeNames: [\n          \"SOCKET_API_KEY\",\n          \"SOCKET_SECURITY_API_KEY\",\n          \"SOCKET_SECURITY_API_TOKEN\",\n        ],\n      },\n    ],\n    description:\n      \"Socket API token for authenticated Socket Firewall wrapper, CLI, and CI policy checks.\",\n  },\n  {\n    id: \"platform.deploy.socket-token-hash\",\n    canonicalName: \"SOCKET_TOKEN_HASH\",\n    aliases: [\"socket_token_hash\", \"SOCKET_API_KEY_HASH\"],\n    owner: \"provider\",\n    scope: \"global\",\n    sourcePath: \"/platform/deploy\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"socket-token-audit\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Socket token fingerprint retained for rotation evidence; not consumed by Socket tooling.\",\n  },\n] as const satisfies readonly InfisicalSecretDefinition[];\n\nexport const PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS = [\n  {\n    id: \"platform.docs.gap-audit-api-key\",\n    canonicalName: \"DOC_GAP_AUDIT_API_KEY\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/docs\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Optional model key for docs gap audits.\",\n  },\n  {\n    id: \"platform.docs.gap-audit-provider\",\n    canonicalName: \"DOC_GAP_AUDIT_PROVIDER\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/docs\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Optional docs gap audit provider selector.\",\n  },\n  {\n    id: \"platform.docs.gap-audit-model\",\n    canonicalName: \"DOC_GAP_AUDIT_MODEL\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/docs\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Optional docs gap audit model selector.\",\n  },\n  {\n    id: \"platform.infisical.local-cli\",\n    canonicalName: \"INFISICAL_BIN\",\n    aliases: [\"INFISICAL_API_URL\", \"INFISICAL_URL\"],\n    owner: \"lucern_platform\",\n    scope: \"global\",\n    sourcePath: \"/platform/infisical\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"mc-operator-tooling\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Operator-only Infisical CLI/API location knobs. Machine credentials are handled by the bootstrap contract.\",\n  },\n  {\n    id: \"platform.gateway.device-verification-base-url\",\n    canonicalName: \"LUCERN_DEVICE_VERIFICATION_BASE_URL\",\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Base URL shown during Lucern CLI/device authentication.\",\n  },\n  {\n    id: \"platform.gateway.mode\",\n    canonicalName: \"LUCERN_GATEWAY_MODE\",\n    aliases: [\"LUCERN_GATEWAY_ENV\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-gateway\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"vercel\",\n        target: \"lucern-gateway\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Gateway runtime mode/environment label.\",\n  },\n  {\n    id: \"platform.mcp.runtime\",\n    canonicalName: \"LUCERN_MCP_URL\",\n    aliases: [\n      \"LUCERN_AGENT_IDENTITY\",\n      \"LUCERN_HTTP_HOST\",\n      \"LUCERN_HTTP_PORT\",\n      \"LUCERN_MCP_ALLOW_API_KEY_PASSTHROUGH\",\n      \"LUCERN_MCP_DEBUG\",\n      \"LUCERN_MCP_DIAGNOSTICS_FILE\",\n      \"LUCERN_MCP_HEALTH_PATH\",\n      \"LUCERN_MCP_HEALTH_URL\",\n      \"LUCERN_MCP_HOST\",\n      \"LUCERN_MCP_PATH\",\n      \"LUCERN_MCP_PORT\",\n      \"LUCERN_MCP_QUIET\",\n      \"LUCERN_MCP_TRANSPORT\",\n      \"LUCERN_PROFILE\",\n      \"LUCERN_PUBLIC_URL\",\n      \"MCP_SERVER_URL\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-mcp\", \"lucern-cli\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern MCP/CLI runtime knobs. Aliases are compatibility names and not Vercel write names.\",\n  },\n  {\n    id: \"platform.mcp.auth-token\",\n    canonicalName: \"LUCERN_MCP_SERVER_AUTH_TOKEN\",\n    aliases: [\"LUCERN_USER_TOKEN\", \"MCP_SERVER_TOKEN\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-mcp\", \"lucern-cli\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Local/hosted MCP auth token material. Tenant apps must use MC/API-key sessions instead.\",\n  },\n  {\n    id: \"platform.operator.api-key\",\n    canonicalName: \"LUCERN_API_KEY\",\n    aliases: [\"LUCERN_KEY\"],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-cli\", \"lucern-mcp\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Lucern-owned operator API key for trusted CLI/MCP/CI calls. Source it from /platform/runtime; do not persist it into local user credential files.\",\n  },\n  {\n    id: \"platform.graph-sync.proxy\",\n    canonicalName: \"LUCERN_GRAPH_SYNC_QUERY_BASE_URL\",\n    aliases: [\n      \"LUCERN_DEFAULT_TENANT_ID\",\n      \"LUCERN_GRAPH_SYNC_ALLOWED_PROXY_HOSTS\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/graph/neo4j\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-graph-sync\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-graph-sync\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description: \"Graph-sync proxy URL, tenant filter, and allowed host list.\",\n  },\n  {\n    id: \"platform.package-smoke.local\",\n    canonicalName: \"LUCERN_SDK_NPM_TOKEN\",\n    aliases: [\n      \"LUCERN_KERNEL_INSTALL_SPEC\",\n      \"LUCERN_KERNEL_KEEP_CLEANROOM\",\n      \"LUCERN_KERNEL_LOCAL_TARBALL\",\n      \"LUCERN_KERNEL_NPM_TOKEN\",\n      \"LUCERN_KERNEL_SCOPE_REGISTRY\",\n      \"LUCERN_KERNEL_SKIP_CONVEX\",\n      \"LUCERN_SDK_INSTALL_SPEC\",\n      \"LUCERN_SDK_KEEP_CLEANROOM\",\n      \"LUCERN_SDK_LOCAL_TARBALL\",\n      \"LUCERN_SDK_SCOPE_REGISTRY\",\n      \"LUCERN_SDK_SKIP_LIVE\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"global\",\n    sourcePath: \"/platform/package-publish\",\n    environmentPolicy: \"same_all_environments\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"github_actions\",\n        target: \"LucernAI/lucern\",\n        environmentPolicy: \"same_all_environments\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"same_all_environments\",\n      },\n    ],\n    description:\n      \"Private package install smoke-test knobs. Values are not tenant runtime variables.\",\n  },\n  {\n    id: \"platform.convex-deploy.local-names\",\n    canonicalName: \"LUCERN_CONVEX_DEPLOYMENT_NAME\",\n    aliases: [\n      \"CONVEX_DEPLOYMENT\",\n      \"CONVEX_DEV_DEPLOYMENT_NAME\",\n      \"CONVEX_PROD_DEPLOYMENT_NAME\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/deploy/convex\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"mc-operator-tooling\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Operator-only Convex deployment name hints. Deploy keys and URLs remain separately scoped.\",\n  },\n  {\n    id: \"platform.sdk.local-context\",\n    canonicalName: \"LUCERN_TENANT_ID\",\n    aliases: [\n      \"LUCERN_AGENT_DISPLAY_NAME\",\n      \"LUCERN_AGENT_ID\",\n      \"LUCERN_API_ENVIRONMENT\",\n      \"LUCERN_PACK_KEY\",\n      \"LUCERN_PROJECT_ID\",\n      \"LUCERN_TOPIC_ID\",\n      \"LUCERN_WORKSPACE_ID\",\n      \"LUCERN_WORKTREE_ID\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-cli\", \"lucern-mcp\", \"tenant-agent-runtime\"],\n    destinations: [\n      {\n        kind: \"runtime_fetch\",\n        target: \"lucern-cli-mcp-sdk\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"SDK, CLI, and agent context selectors. These identify scope and must not grant access by themselves.\",\n  },\n  {\n    id: \"platform.debug.local-flags\",\n    canonicalName: \"LUCERN_FUNCTIONAL_DEBUG\",\n    aliases: [\n      \"LUCERN_CONTRACTS_SKIP_DTS\",\n      \"LUCERN_DEPLOY_RECONCILIATION_DEBUG\",\n      \"LUCERN_ENABLE_ADAPTIVE_LEARNING\",\n      \"LUCERN_ENV_FILE\",\n      \"LUCERN_EXAMPLE_DEBUG\",\n      \"LUCERN_HTTP_SMOKE_DEBUG\",\n      \"LUCERN_MULTI_TENANT\",\n      \"LUCERN_PACK_ACTION_DEBUG\",\n      \"LUCERN_RUN_LIVE_MCP\",\n    ],\n    owner: \"lucern_platform\",\n    scope: \"environment\",\n    sourcePath: \"/platform/runtime/debug\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: false,\n    public: false,\n    consumers: [\"lucern-repo-ci\", \"mc-operator-tooling\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"lucern-repo\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"Local or CI debug toggles. They are manifest-known but not tenant runtime secrets.\",\n  },\n  {\n    id: \"tenant.stackos.deploy-guard.local\",\n    canonicalName: \"STACKOS_DEPLOY_TARGET\",\n    aliases: [\n      \"STACKOS_DEPLOY_ENTRYPOINT\",\n      \"STACKOS_EXPECTED_STAGING_COMMIT\",\n      \"STACKOS_PROD_CUTOVER_APPROVED\",\n      \"STACKOS_REPO_PATH\",\n      \"STACKOS_REQUIRE_CHAT_RUNTIME\",\n      \"STACKOS_SLOP_SCAN_BASELINE\",\n      \"STACKOS_STAGING_API_KEY\",\n      \"STACKOS_STAGING_BASE_URL\",\n      \"STACK_DEPLOY_RECONCILIATION_SCHEMA_JSON\",\n    ],\n    owner: \"tenant\",\n    scope: \"software_system\",\n    sourcePath: \"/tenants/stack\",\n    environmentPolicy: \"environment_specific\",\n    required: false,\n    secret: true,\n    public: false,\n    consumers: [\"tenant-deploy-tooling\", \"lucern-repo-ci\"],\n    destinations: [\n      {\n        kind: \"operator_local\",\n        target: \"stackos-deploy-guard\",\n        environmentPolicy: \"environment_specific\",\n      },\n      {\n        kind: \"github_actions\",\n        target: \"stack-vc/stackos\",\n        environmentPolicy: \"environment_specific\",\n      },\n    ],\n    description:\n      \"StackOS deploy/test guard variables. These are not written into the StackOS Vercel runtime.\",\n  },\n] as const satisfies readonly InfisicalSecretDefinition[];\n"]}