@lucern/contracts 1.0.1 → 1.0.3

package/dist/manifests/infisical-runtime-manifest.js

@@ -1252,203 +1252,282 @@ var PLATFORM_LANGFUSE_SECRET_DEFINITIONS = [
   }
 ];
 
-// src/infisical-runtime.platform-ops-secrets.ts
-var PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS = [
+// src/infisical-runtime.platform-observability-secrets.ts
+var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
   {
-    id: "platform.neo4j.uri",
-    canonicalName: "NEO4J_URI",
-    owner: "lucern_platform",
+    id: "platform.sentry.dsn",
+    canonicalName: "NEXT_PUBLIC_SENTRY_DSN",
+    aliases: ["SENTRY_DSN", "NEXT_PUBLIC_SENTRY_DSN_NEXTJS"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
+    sourcePath: "/platform/observability/sentry",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    public: true,
+    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
     destinations: [
       {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
+        kind: "vercel",
+        target: "lucern",
         environmentPolicy: "environment_specific"
       },
       {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Neo4j URI for platform graph-sync surfaces."
+    description: "Lucern-owned Sentry DSN for browser/server error telemetry."
   },
   {
-    id: "platform.neo4j.user",
-    canonicalName: "NEO4J_USER",
-    aliases: ["NEO4J_USERNAME"],
-    owner: "lucern_platform",
+    id: "platform.sentry.auth-token",
+    canonicalName: "SENTRY_AUTH_TOKEN",
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
+    sourcePath: "/platform/observability/sentry",
+    environmentPolicy: "same_all_environments",
     required: false,
-    secret: false,
+    secret: true,
     public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    consumers: ["lucern-repo-ci", "lucern-observability"],
     destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "same_all_environments"
       }
     ],
-    description: "Lucern-owned Neo4j username for platform graph-sync surfaces."
+    description: "Sentry release-upload token. Runtime services must not use it for authorization."
   },
   {
-    id: "platform.neo4j.password",
-    canonicalName: "NEO4J_PASSWORD",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
+    id: "platform.sentry.org",
+    canonicalName: "SENTRY_ORG",
+    aliases: ["SENTRY_ORG_SLUG"],
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/observability/sentry",
+    environmentPolicy: "same_all_environments",
     required: false,
-    secret: true,
+    secret: false,
     public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    consumers: ["lucern-repo-ci", "lucern-observability"],
     destinations: [
       {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments"
       },
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Sentry organization slug for Lucern release uploads."
+  },
+  {
+    id: "platform.sentry.project",
+    canonicalName: "SENTRY_PROJECT",
+    aliases: ["SENTRY_PROJECT_NEXTJS"],
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/observability/sentry",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-repo-ci", "lucern-observability"],
+    destinations: [
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "same_all_environments"
       }
     ],
-    description: "Lucern-owned Neo4j password for platform graph-sync surfaces."
+    description: "Sentry project slug for Lucern release uploads."
   },
   {
-    id: "platform.neo4j.sync-secret",
-    canonicalName: "NEO4J_SYNC_SECRET",
-    owner: "lucern_platform",
+    id: "platform.sentry.environment",
+    canonicalName: "SENTRY_ENVIRONMENT",
+    aliases: ["NEXT_PUBLIC_SENTRY_ENVIRONMENT"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
+    sourcePath: "/platform/observability/sentry",
     environmentPolicy: "environment_specific",
     required: false,
-    secret: true,
+    secret: false,
     public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
     destinations: [
       {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific",
+        writeNames: ["SENTRY_ENVIRONMENT", "NEXT_PUBLIC_SENTRY_ENVIRONMENT"]
       },
       {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       }
     ],
-    description: "Shared secret protecting Lucern-owned graph-sync HTTP/query proxy calls."
+    description: "Lucern-owned Sentry environment label."
   },
   {
-    id: "platform.neo4j.database",
-    canonicalName: "NEO4J_DATABASE",
-    owner: "lucern_platform",
+    id: "platform.sentry.release",
+    canonicalName: "SENTRY_RELEASE",
+    aliases: ["LUCERN_RELEASE", "NEXT_PUBLIC_SENTRY_RELEASE"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
+    sourcePath: "/platform/observability/sentry",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
     destinations: [
       {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific",
+        writeNames: [
+          "LUCERN_RELEASE",
+          "SENTRY_RELEASE",
+          "NEXT_PUBLIC_SENTRY_RELEASE"
+        ]
       },
       {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       }
     ],
-    description: "Optional Neo4j database name for Lucern-owned graph-sync surfaces."
+    description: "Lucern-owned Sentry release name."
   }
 ];
-var PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS = [
+var PLATFORM_AXIOM_SECRET_DEFINITIONS = [
   {
-    id: "platform.pinecone.api-key",
-    canonicalName: "PINECONE_API_KEY",
-    owner: "lucern_platform",
+    id: "platform.axiom.token",
+    canonicalName: "AXIOM_TOKEN",
+    aliases: ["LUCERN_AXIOM_TOKEN"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: true,
     public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-railway-pdp",
+      "lucern-repo-ci",
+      "lucern-observability"
+    ],
     destinations: [
       {
         kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       },
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
         environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Pinecone API key for platform vector search."
+    description: "Axiom ingest/query token for Lucern operational telemetry. Runtime code must treat it as write/query telemetry authority, not graph-state authority."
   },
   {
-    id: "platform.pinecone.index-name",
-    canonicalName: "PINECONE_INDEX_NAME",
-    aliases: ["PINECONE_INDEX"],
-    owner: "lucern_platform",
+    id: "platform.axiom.events-dataset",
+    canonicalName: "LUCERN_AXIOM_EVENTS_DATASET",
+    aliases: ["AXIOM_DATASET", "AXIOM_EVENTS_DATASET", "LUCERN_AXIOM_DATASET"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-railway-pdp",
+      "lucern-repo-ci",
+      "lucern-observability"
+    ],
     destinations: [
       {
         kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       },
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
         environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Pinecone index name."
+    description: "Primary Axiom event dataset for non-sensitive CLI, gateway, SDK retry, PDP, deploy, and agent-run telemetry."
   },
   {
-    id: "platform.pinecone.host",
-    canonicalName: "PINECONE_HOST",
-    aliases: ["PINECONE_INDEX_HOST"],
-    owner: "lucern_platform",
+    id: "platform.axiom.logs-dataset",
+    canonicalName: "LUCERN_AXIOM_LOGS_DATASET",
+    aliases: ["AXIOM_LOGS_DATASET"],
+    owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
     destinations: [
       {
         kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
         environmentPolicy: "environment_specific"
       },
       {
@@ -1457,168 +1536,137 @@ var PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS = [
         environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Pinecone host/index host."
-  }
-];
-var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
+    description: "Axiom OpenTelemetry log dataset for Lucern services."
+  },
   {
-    id: "platform.sentry.dsn",
-    canonicalName: "NEXT_PUBLIC_SENTRY_DSN",
-    aliases: ["SENTRY_DSN", "NEXT_PUBLIC_SENTRY_DSN_NEXTJS"],
+    id: "platform.axiom.traces-dataset",
+    canonicalName: "LUCERN_AXIOM_TRACES_DATASET",
+    aliases: ["AXIOM_TRACES_DATASET"],
     owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/observability/sentry",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
-    public: true,
-    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
+    public: false,
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
     destinations: [
       {
-        kind: "vercel",
-        target: "lucern",
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
         environmentPolicy: "environment_specific"
       },
       {
         kind: "vercel",
         target: "lucern-gateway",
         environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Sentry DSN for browser/server error telemetry."
-  },
-  {
-    id: "platform.sentry.auth-token",
-    canonicalName: "SENTRY_AUTH_TOKEN",
-    owner: "provider",
-    scope: "environment",
-    sourcePath: "/platform/observability/sentry",
-    environmentPolicy: "same_all_environments",
-    required: false,
-    secret: true,
-    public: false,
-    consumers: ["lucern-repo-ci", "lucern-observability"],
-    destinations: [
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "same_all_environments"
       },
-      {
-        kind: "vercel",
-        target: "lucern",
-        environmentPolicy: "same_all_environments"
-      }
-    ],
-    description: "Sentry release-upload token. Runtime services must not use it for authorization."
-  },
-  {
-    id: "platform.sentry.org",
-    canonicalName: "SENTRY_ORG",
-    aliases: ["SENTRY_ORG_SLUG"],
-    owner: "provider",
-    scope: "global",
-    sourcePath: "/platform/observability/sentry",
-    environmentPolicy: "same_all_environments",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-repo-ci", "lucern-observability"],
-    destinations: [
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
-        environmentPolicy: "same_all_environments"
-      },
-      {
-        kind: "vercel",
-        target: "lucern",
-        environmentPolicy: "same_all_environments"
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Sentry organization slug for Lucern release uploads."
+    description: "Axiom OpenTelemetry trace dataset for Lucern services."
   },
   {
-    id: "platform.sentry.project",
-    canonicalName: "SENTRY_PROJECT",
-    aliases: ["SENTRY_PROJECT_NEXTJS"],
+    id: "platform.axiom.metrics-dataset",
+    canonicalName: "LUCERN_AXIOM_METRICS_DATASET",
+    aliases: ["AXIOM_METRICS_DATASET"],
     owner: "provider",
-    scope: "global",
-    sourcePath: "/platform/observability/sentry",
-    environmentPolicy: "same_all_environments",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-repo-ci", "lucern-observability"],
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
     destinations: [
       {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "same_all_environments"
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
       },
       {
         kind: "vercel",
-        target: "lucern",
-        environmentPolicy: "same_all_environments"
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Sentry project slug for Lucern release uploads."
+    description: "Axiom OpenTelemetry metric dataset for Lucern services."
   },
   {
-    id: "platform.sentry.environment",
-    canonicalName: "SENTRY_ENVIRONMENT",
-    aliases: ["NEXT_PUBLIC_SENTRY_ENVIRONMENT"],
+    id: "platform.axiom.api-url",
+    canonicalName: "LUCERN_AXIOM_API_URL",
+    aliases: ["AXIOM_URL"],
     owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/observability/sentry",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-repo-ci"
+    ],
     destinations: [
       {
-        kind: "vercel",
-        target: "lucern",
-        environmentPolicy: "environment_specific",
-        writeNames: ["SENTRY_ENVIRONMENT", "NEXT_PUBLIC_SENTRY_ENVIRONMENT"]
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
       },
       {
         kind: "vercel",
         target: "lucern-gateway",
         environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Sentry environment label."
+    description: "Axiom API URL. Defaults to https://api.axiom.co when unset."
   },
   {
-    id: "platform.sentry.release",
-    canonicalName: "SENTRY_RELEASE",
-    aliases: ["NEXT_PUBLIC_SENTRY_RELEASE"],
+    id: "platform.axiom.otlp-endpoint",
+    canonicalName: "OTEL_EXPORTER_OTLP_ENDPOINT",
+    aliases: ["LUCERN_AXIOM_OTLP_ENDPOINT"],
     owner: "provider",
     scope: "environment",
-    sourcePath: "/platform/observability/sentry",
+    sourcePath: "/platform/observability",
     environmentPolicy: "environment_specific",
     required: false,
     secret: false,
     public: false,
-    consumers: ["lucern-web", "lucern-gateway", "lucern-observability"],
+    consumers: ["lucern-gateway", "lucern-railway-pdp", "lucern-observability"],
     destinations: [
       {
         kind: "vercel",
-        target: "lucern",
-        environmentPolicy: "environment_specific",
-        writeNames: ["SENTRY_RELEASE", "NEXT_PUBLIC_SENTRY_RELEASE"]
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
       },
       {
-        kind: "vercel",
-        target: "lucern-gateway",
+        kind: "operator_local",
+        target: "lucern-repo",
         environmentPolicy: "environment_specific"
       }
     ],
-    description: "Lucern-owned Sentry release name."
+    description: "OTLP endpoint used by services that emit OpenTelemetry logs, metrics, and traces to Axiom."
   }
 ];
+
+// src/infisical-runtime.platform-automation-secrets.ts
 var PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [
   {
     id: "platform.deploy.vercel-token",
@@ -2211,6 +2259,215 @@ var PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS = [
   }
 ];
 
+// src/infisical-runtime.platform-ops-secrets.ts
+var PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS = [
+  {
+    id: "platform.neo4j.uri",
+    canonicalName: "NEO4J_URI",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j URI for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.user",
+    canonicalName: "NEO4J_USER",
+    aliases: ["NEO4J_USERNAME"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j username for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.password",
+    canonicalName: "NEO4J_PASSWORD",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j password for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.sync-secret",
+    canonicalName: "NEO4J_SYNC_SECRET",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Shared secret protecting Lucern-owned graph-sync HTTP/query proxy calls."
+  },
+  {
+    id: "platform.neo4j.database",
+    canonicalName: "NEO4J_DATABASE",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional Neo4j database name for Lucern-owned graph-sync surfaces."
+  }
+];
+var PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS = [
+  {
+    id: "platform.pinecone.api-key",
+    canonicalName: "PINECONE_API_KEY",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone API key for platform vector search."
+  },
+  {
+    id: "platform.pinecone.index-name",
+    canonicalName: "PINECONE_INDEX_NAME",
+    aliases: ["PINECONE_INDEX"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone index name."
+  },
+  {
+    id: "platform.pinecone.host",
+    canonicalName: "PINECONE_HOST",
+    aliases: ["PINECONE_INDEX_HOST"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone host/index host."
+  }
+];
+
 // src/infisical-runtime.tenant-secrets.ts
 var TENANT_SHARED_SECRET_DEFINITION_TEMPLATES = [
   {
@@ -3127,6 +3384,7 @@ var INFISICAL_SECRET_DEFINITIONS = [
   ...PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS,
   ...PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS,
   ...PLATFORM_SENTRY_SECRET_DEFINITIONS,
+  ...PLATFORM_AXIOM_SECRET_DEFINITIONS,
   ...PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS,
   ...PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS,
   ...TENANT_SHARED_SECRET_DEFINITIONS,