@lucern/contracts 1.0.1 → 1.0.3

package/dist/infisical-runtime.contract.js

@@ -610,8 +610,11 @@ var INFISICAL_SECRET_ENVIRONMENT_POLICIES = [
 var INFISICAL_SECRET_CONSUMERS = [
   "lucern-web",
   "lucern-gateway",
+  "lucern-sdk",
   "lucern-mcp",
   "lucern-cli",
+  "lucern-agent",
+  "lucern-railway-pdp",
   "lucern-ai-runtime",
   "lucern-graph-sync",
   "lucern-observability",
@@ -1358,214 +1361,7 @@ var PLATFORM_LANGFUSE_SECRET_DEFINITIONS = [
   }
 ];
 
-// src/infisical-runtime.platform-ops-secrets.ts
-var PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS = [
-  {
-    id: "platform.neo4j.uri",
-    canonicalName: "NEO4J_URI",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Neo4j URI for platform graph-sync surfaces."
-  },
-  {
-    id: "platform.neo4j.user",
-    canonicalName: "NEO4J_USER",
-    aliases: ["NEO4J_USERNAME"],
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Neo4j username for platform graph-sync surfaces."
-  },
-  {
-    id: "platform.neo4j.password",
-    canonicalName: "NEO4J_PASSWORD",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: true,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Neo4j password for platform graph-sync surfaces."
-  },
-  {
-    id: "platform.neo4j.sync-secret",
-    canonicalName: "NEO4J_SYNC_SECRET",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: true,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Shared secret protecting Lucern-owned graph-sync HTTP/query proxy calls."
-  },
-  {
-    id: "platform.neo4j.database",
-    canonicalName: "NEO4J_DATABASE",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/graph/neo4j",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-graph-sync",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Optional Neo4j database name for Lucern-owned graph-sync surfaces."
-  }
-];
-var PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS = [
-  {
-    id: "platform.pinecone.api-key",
-    canonicalName: "PINECONE_API_KEY",
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: true,
-    public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Pinecone API key for platform vector search."
-  },
-  {
-    id: "platform.pinecone.index-name",
-    canonicalName: "PINECONE_INDEX_NAME",
-    aliases: ["PINECONE_INDEX"],
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Pinecone index name."
-  },
-  {
-    id: "platform.pinecone.host",
-    canonicalName: "PINECONE_HOST",
-    aliases: ["PINECONE_INDEX_HOST"],
-    owner: "lucern_platform",
-    scope: "environment",
-    sourcePath: "/platform/vector/pinecone",
-    environmentPolicy: "environment_specific",
-    required: false,
-    secret: false,
-    public: false,
-    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
-    destinations: [
-      {
-        kind: "runtime_fetch",
-        target: "lucern-ai-runtime",
-        environmentPolicy: "environment_specific"
-      },
-      {
-        kind: "github_actions",
-        target: "LucernAI/lucern",
-        environmentPolicy: "environment_specific"
-      }
-    ],
-    description: "Lucern-owned Pinecone host/index host."
-  }
-];
+// src/infisical-runtime.platform-observability-secrets.ts
 var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
   {
     id: "platform.sentry.dsn",
@@ -1700,7 +1496,7 @@ var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
   {
     id: "platform.sentry.release",
     canonicalName: "SENTRY_RELEASE",
-    aliases: ["NEXT_PUBLIC_SENTRY_RELEASE"],
+    aliases: ["LUCERN_RELEASE", "NEXT_PUBLIC_SENTRY_RELEASE"],
     owner: "provider",
     scope: "environment",
     sourcePath: "/platform/observability/sentry",
@@ -1714,7 +1510,11 @@ var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
         kind: "vercel",
         target: "lucern",
         environmentPolicy: "environment_specific",
-        writeNames: ["SENTRY_RELEASE", "NEXT_PUBLIC_SENTRY_RELEASE"]
+        writeNames: [
+          "LUCERN_RELEASE",
+          "SENTRY_RELEASE",
+          "NEXT_PUBLIC_SENTRY_RELEASE"
+        ]
       },
       {
         kind: "vercel",
@@ -1725,50 +1525,301 @@ var PLATFORM_SENTRY_SECRET_DEFINITIONS = [
     description: "Lucern-owned Sentry release name."
   }
 ];
-var PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [
+var PLATFORM_AXIOM_SECRET_DEFINITIONS = [
   {
-    id: "platform.deploy.vercel-token",
-    canonicalName: "VERCEL_TOKEN",
+    id: "platform.axiom.token",
+    canonicalName: "AXIOM_TOKEN",
+    aliases: ["LUCERN_AXIOM_TOKEN"],
     owner: "provider",
-    scope: "global",
-    sourcePath: "/platform/deploy/vercel",
-    environmentPolicy: "same_all_environments",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
     required: false,
     secret: true,
     public: false,
-    consumers: ["lucern-repo-ci"],
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-railway-pdp",
+      "lucern-repo-ci",
+      "lucern-observability"
+    ],
     destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
       {
         kind: "github_actions",
         target: "LucernAI/lucern",
-        environmentPolicy: "same_all_environments"
+        environmentPolicy: "environment_specific"
       },
       {
         kind: "operator_local",
-        target: "secret-sync-writer",
-        environmentPolicy: "same_all_environments"
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
       }
     ],
-    description: "Vercel API token for the future reviewed live writer. Never copy into tenant apps."
+    description: "Axiom ingest/query token for Lucern operational telemetry. Runtime code must treat it as write/query telemetry authority, not graph-state authority."
   },
   {
-    id: "platform.deploy.vercel-token.stack",
-    canonicalName: "STACK_VERCEL_TOKEN",
+    id: "platform.axiom.events-dataset",
+    canonicalName: "LUCERN_AXIOM_EVENTS_DATASET",
+    aliases: ["AXIOM_DATASET", "AXIOM_EVENTS_DATASET", "LUCERN_AXIOM_DATASET"],
     owner: "provider",
-    scope: "global",
-    sourcePath: "/platform/deploy/vercel",
-    environmentPolicy: "same_all_environments",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
     required: false,
-    secret: true,
+    secret: false,
     public: false,
-    consumers: ["lucern-repo-ci"],
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-railway-pdp",
+      "lucern-repo-ci",
+      "lucern-observability"
+    ],
     destinations: [
       {
-        kind: "operator_local",
-        target: "secret-sync-writer",
-        environmentPolicy: "same_all_environments"
-      }
-    ],
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Primary Axiom event dataset for non-sensitive CLI, gateway, SDK retry, PDP, deploy, and agent-run telemetry."
+  },
+  {
+    id: "platform.axiom.logs-dataset",
+    canonicalName: "LUCERN_AXIOM_LOGS_DATASET",
+    aliases: ["AXIOM_LOGS_DATASET"],
+    owner: "provider",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Axiom OpenTelemetry log dataset for Lucern services."
+  },
+  {
+    id: "platform.axiom.traces-dataset",
+    canonicalName: "LUCERN_AXIOM_TRACES_DATASET",
+    aliases: ["AXIOM_TRACES_DATASET"],
+    owner: "provider",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Axiom OpenTelemetry trace dataset for Lucern services."
+  },
+  {
+    id: "platform.axiom.metrics-dataset",
+    canonicalName: "LUCERN_AXIOM_METRICS_DATASET",
+    aliases: ["AXIOM_METRICS_DATASET"],
+    owner: "provider",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-observability", "lucern-gateway", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Axiom OpenTelemetry metric dataset for Lucern services."
+  },
+  {
+    id: "platform.axiom.api-url",
+    canonicalName: "LUCERN_AXIOM_API_URL",
+    aliases: ["AXIOM_URL"],
+    owner: "provider",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: [
+      "lucern-cli",
+      "lucern-gateway",
+      "lucern-sdk",
+      "lucern-mcp",
+      "lucern-agent",
+      "lucern-repo-ci"
+    ],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-cli-mcp-sdk",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Axiom API URL. Defaults to https://api.axiom.co when unset."
+  },
+  {
+    id: "platform.axiom.otlp-endpoint",
+    canonicalName: "OTEL_EXPORTER_OTLP_ENDPOINT",
+    aliases: ["LUCERN_AXIOM_OTLP_ENDPOINT"],
+    owner: "provider",
+    scope: "environment",
+    sourcePath: "/platform/observability",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-gateway", "lucern-railway-pdp", "lucern-observability"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern-gateway",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "operator_local",
+        target: "lucern-repo",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "OTLP endpoint used by services that emit OpenTelemetry logs, metrics, and traces to Axiom."
+  }
+];
+
+// src/infisical-runtime.platform-automation-secrets.ts
+var PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS = [
+  {
+    id: "platform.deploy.vercel-token",
+    canonicalName: "VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "same_all_environments"
+      },
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
+    description: "Vercel API token for the future reviewed live writer. Never copy into tenant apps."
+  },
+  {
+    id: "platform.deploy.vercel-token.stack",
+    canonicalName: "STACK_VERCEL_TOKEN",
+    owner: "provider",
+    scope: "global",
+    sourcePath: "/platform/deploy/vercel",
+    environmentPolicy: "same_all_environments",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "operator_local",
+        target: "secret-sync-writer",
+        environmentPolicy: "same_all_environments"
+      }
+    ],
     description: "Stack Vercel API token for manifest-scoped Stack tenant Vercel secret sync. Never copy into tenant apps."
   },
   {
@@ -2317,6 +2368,215 @@ var PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS = [
   }
 ];
 
+// src/infisical-runtime.platform-ops-secrets.ts
+var PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS = [
+  {
+    id: "platform.neo4j.uri",
+    canonicalName: "NEO4J_URI",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j URI for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.user",
+    canonicalName: "NEO4J_USER",
+    aliases: ["NEO4J_USERNAME"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j username for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.password",
+    canonicalName: "NEO4J_PASSWORD",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Neo4j password for platform graph-sync surfaces."
+  },
+  {
+    id: "platform.neo4j.sync-secret",
+    canonicalName: "NEO4J_SYNC_SECRET",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Shared secret protecting Lucern-owned graph-sync HTTP/query proxy calls."
+  },
+  {
+    id: "platform.neo4j.database",
+    canonicalName: "NEO4J_DATABASE",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/graph/neo4j",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-graph-sync", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-graph-sync",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional Neo4j database name for Lucern-owned graph-sync surfaces."
+  }
+];
+var PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS = [
+  {
+    id: "platform.pinecone.api-key",
+    canonicalName: "PINECONE_API_KEY",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: true,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone API key for platform vector search."
+  },
+  {
+    id: "platform.pinecone.index-name",
+    canonicalName: "PINECONE_INDEX_NAME",
+    aliases: ["PINECONE_INDEX"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone index name."
+  },
+  {
+    id: "platform.pinecone.host",
+    canonicalName: "PINECONE_HOST",
+    aliases: ["PINECONE_INDEX_HOST"],
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/vector/pinecone",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-ai-runtime", "lucern-repo-ci"],
+    destinations: [
+      {
+        kind: "runtime_fetch",
+        target: "lucern-ai-runtime",
+        environmentPolicy: "environment_specific"
+      },
+      {
+        kind: "github_actions",
+        target: "LucernAI/lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Lucern-owned Pinecone host/index host."
+  }
+];
+
 // src/infisical-runtime.tenant-secrets.ts
 var TENANT_SHARED_SECRET_DEFINITION_TEMPLATES = [
   {
@@ -3233,6 +3493,7 @@ var INFISICAL_SECRET_DEFINITIONS = [
   ...PLATFORM_GRAPH_STORE_SECRET_DEFINITIONS,
   ...PLATFORM_VECTOR_STORE_SECRET_DEFINITIONS,
   ...PLATFORM_SENTRY_SECRET_DEFINITIONS,
+  ...PLATFORM_AXIOM_SECRET_DEFINITIONS,
   ...PLATFORM_DEPLOY_AUTOMATION_SECRET_DEFINITIONS,
   ...PLATFORM_LOCAL_OPERATOR_CONFIG_SECRET_DEFINITIONS,
   ...TENANT_SHARED_SECRET_DEFINITIONS,