@lucern/contracts 1.0.11 → 1.0.12

package/dist/index.js

@@ -795,6 +795,7 @@ __export(tool_contracts_values_exports, {
   LIST_TASKS: () => LIST_TASKS,
   LIST_TOPICS: () => LIST_TOPICS,
   LIST_WORKTREES: () => LIST_WORKTREES,
+  LUCERN_ORIENT: () => LUCERN_ORIENT,
   MANAGE_WRITE_POLICY: () => MANAGE_WRITE_POLICY,
   MATCH_ENTITY_TYPE: () => MATCH_ENTITY_TYPE,
   MATERIALIZE_TOPIC_GRAPH: () => MATERIALIZE_TOPIC_GRAPH,
@@ -2410,6 +2411,59 @@ var REMOVE_LENS_FROM_TOPIC = {
   tier: "workhorse"
 };
 
+// src/tool-contracts.context-orientation.ts
+var LUCERN_ORIENT = {
+  name: "lucern_orient",
+  description: "Load the Lucern reasoning grammar before operating. Like `git help` plus a repository CONTRIBUTING guide for reasoning state - teaches the git-shaped model of topics, campaigns, lanes, worktrees, beliefs, questions, evidence, receipts, gates, and merges.",
+  parameters: {
+    audience: {
+      type: "string",
+      description: "Audience for the primer: agent, human, operator, or developer.",
+      enum: ["agent", "human", "operator", "developer"]
+    },
+    depth: {
+      type: "string",
+      description: "Orientation depth: quick, standard, or deep.",
+      enum: ["quick", "standard", "deep"]
+    },
+    situation: {
+      type: "string",
+      description: "Optional task or query context used to tailor suggested next calls."
+    },
+    includeExamples: {
+      type: "boolean",
+      description: "Whether to include concrete tool-call examples."
+    },
+    includeToolMap: {
+      type: "boolean",
+      description: "Whether to include situation-to-tool routing guidance."
+    },
+    includeFuture: {
+      type: "boolean",
+      description: "Whether to include future exemplar, gauntlet, and training-data capabilities."
+    }
+  },
+  required: [],
+  response: {
+    description: "Canonical operator primer for Lucern's git-shaped reasoning substrate.",
+    fields: {
+      schemaVersion: "string - lucern_orientation.v1",
+      canonicalMentalModel: "object - concise model of Lucern as git-shaped reasoning state",
+      workflow: "array - recommended branch -> investigate -> prove gate -> merge workflow",
+      grammarMap: "array - primitive-to-git-analogy map for topics, campaigns, worktrees, beliefs, questions, evidence, edges, contradictions, and gates",
+      firstMoves: "array - recommended first tools for a cold-start agent",
+      receiptRules: "array - how to interpret candidateCounts, broadening, coverageWarning, and noDefaultGlobalScan",
+      safetyRules: "array - mutation and completion rules that preserve reasoning lineage",
+      toolMap: "array | undefined - situation-to-tool routing map when requested",
+      examples: "array | undefined - concrete tool-call examples when requested",
+      suggestedNextCalls: "array - safe next tool calls for the current situation"
+    }
+  },
+  ownerModule: "reasoning-kernel",
+  ontologyPrimitive: "graph",
+  tier: "showcase"
+};
+
 // src/tool-contracts.ontology.ts
 var MANAGE_WRITE_POLICY = {
   name: "manage_write_policy",
@@ -4919,10 +4973,34 @@ var COMPILE_CONTEXT = {
       type: "string",
       description: "Optional source kind used as a resolver signal, such as cli, worktree, commit, or docs."
     },
+    campaign: {
+      type: "number",
+      description: "Optional campaign dimension seed. When supplied without topicId, the compiler fans out across all carrier topics for that campaign instead of resolving a single topic."
+    },
+    lane: {
+      type: "string",
+      description: "Optional lane dimension seed. When supplied without topicId, the compiler reads all matching worktrees and their carrier topics."
+    },
+    status: {
+      type: "string",
+      description: "Optional state/status dimension seed for worktrees and graph rows."
+    },
+    principalId: {
+      type: "string",
+      description: "Optional principal seed for work authored, touched, or owned by a human, agent, group, or service principal."
+    },
+    workspaceId: {
+      type: "string",
+      description: "Optional workspace seed used by hosted MCP and SDK clients when compiling tenant-scoped context."
+    },
     budget: {
       type: "number",
       description: "Token budget for prompt injection planning"
     },
+    tokenBudget: {
+      type: "number",
+      description: "Compatibility alias for budget. External MCP clients may send tokenBudget when requesting prompt injection planning."
+    },
     ranking: {
       type: "string",
       description: "Ranking profile for context ordering",
@@ -5613,6 +5691,7 @@ var MCP_TOOL_CONTRACTS = {
   update_worktree_metadata: UPDATE_WORKTREE_METADATA,
   identity_whoami: IDENTITY_WHOAMI,
   resolve_interactive_principal: RESOLVE_INTERACTIVE_PRINCIPAL,
+  lucern_orient: LUCERN_ORIENT,
   compile_context: COMPILE_CONTEXT,
   record_scope_learning: RECORD_SCOPE_LEARNING,
   pipeline_snapshot: PIPELINE_SNAPSHOT,
@@ -14271,6 +14350,55 @@ var INFISICAL_RUNTIME_PATHS = [
       }
     ]
   },
+  {
+    id: "platform-permit",
+    secretPath: "/platform/permit",
+    description: "Permit runtime configuration for policy enforcement and embedded Permit Elements.",
+    variables: [
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Optional Clerk JWT template name for Permit Elements frontendOnly login."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for user and group management."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for audit logs."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for access requests."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for approval management."
+      }
+    ]
+  },
   {
     id: "platform-operator-credentials",
     secretPath: "/platform/runtime",
@@ -14305,7 +14433,7 @@ var INFISICAL_RUNTIME_SURFACES = [
   {
     id: "lucern-web",
     delivery: "vercel_sync",
-    sourcePathIds: ["platform-auth", "platform-runtime"],
+    sourcePathIds: ["platform-auth", "platform-runtime", "platform-permit"],
     consumer: "apps/web on Vercel project lucern",
     description: "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs."
   },
@@ -15035,6 +15163,126 @@ var PLATFORM_SECRET_DEFINITIONS = [
     ],
     description: "Optional Permit API URL override."
   },
+  {
+    id: "platform.permit.elements-env-id",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+  },
+  {
+    id: "platform.permit.elements-jwt-template",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+  },
+  {
+    id: "platform.permit.elements-user-management-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the User Management element."
+  },
+  {
+    id: "platform.permit.elements-audit-logs-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Audit Logs element."
+  },
+  {
+    id: "platform.permit.elements-access-request-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Access Request element."
+  },
+  {
+    id: "platform.permit.elements-approvals-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Approval Management element."
+  },
   {
     id: "platform.ci.infisical-bootstrap-client-id",
     canonicalName: "INFISICAL_BOOTSTRAP_CLIENT_ID",
@@ -17782,6 +18030,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_PACK_KEY",
     "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET",
     "LUCERN_PROD_DEPLOY_KEY",
@@ -18063,6 +18317,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_PACK_KEY",
     "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET",
     "LUCERN_PROD_DEPLOY_KEY",
@@ -21242,6 +21502,180 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       ],
       "description": "Optional Permit API URL override."
     },
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL": {
+      "secretId": "platform.permit.elements-access-request-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Access Request element. Permit Elements dashboard iframe URL for access requests."
+    },
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL": {
+      "secretId": "platform.permit.elements-approvals-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Approval Management element. Permit Elements dashboard iframe URL for approval management."
+    },
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL": {
+      "secretId": "platform.permit.elements-audit-logs-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Audit Logs element. Permit Elements dashboard iframe URL for audit logs."
+    },
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID": {
+      "secretId": "platform.permit.elements-env-id",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ]
+        }
+      ],
+      "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+    },
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE": {
+      "secretId": "platform.permit.elements-jwt-template",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ]
+        }
+      ],
+      "description": "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements. Optional Clerk JWT template name for Permit Elements frontendOnly login."
+    },
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL": {
+      "secretId": "platform.permit.elements-user-management-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the User Management element. Permit Elements dashboard iframe URL for user and group management."
+    },
     "LUCERN_PERMIT_PDP_URL": {
       "secretId": "platform.permit.pdp-url",
       "canonicalName": "LUCERN_PERMIT_PDP_URL",
@@ -24238,6 +24672,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "PERMIT_API_KEY": "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL": "LUCERN_PERMIT_API_URL",
     "PERMIT_API_URL": "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
     "PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET": "LUCERN_PERMIT_WEBHOOK_SECRET",
@@ -24356,7 +24796,8 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "description": "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs.",
       "sourcePathIds": [
         "platform-auth",
-        "platform-runtime"
+        "platform-runtime",
+        "platform-permit"
       ],
       "variables": [
         {
@@ -24564,6 +25005,174 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           "destinations": [],
           "description": "Browser login origin used when it differs from the API."
         },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for access requests. Permit Elements dashboard iframe URL for the Access Request element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for approval management. Permit Elements dashboard iframe URL for the Approval Management element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for audit logs. Permit Elements dashboard iframe URL for the Audit Logs element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+              ]
+            }
+          ],
+          "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+              ]
+            }
+          ],
+          "description": "Optional Clerk JWT template name for Permit Elements frontendOnly login. Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for user and group management. Permit Elements dashboard iframe URL for the User Management element."
+        },
         {
           "canonicalName": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
           "envNames": [
@@ -42808,6 +43417,180 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Lucern runtime environment label."
       },
+      {
+        "secretId": "platform.permit.elements-access-request-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Access Request element."
+      },
+      {
+        "secretId": "platform.permit.elements-approvals-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Approval Management element."
+      },
+      {
+        "secretId": "platform.permit.elements-audit-logs-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Audit Logs element."
+      },
+      {
+        "secretId": "platform.permit.elements-env-id",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+            ]
+          }
+        ],
+        "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+      },
+      {
+        "secretId": "platform.permit.elements-jwt-template",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+            ]
+          }
+        ],
+        "description": "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+      },
+      {
+        "secretId": "platform.permit.elements-user-management-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the User Management element."
+      },
       {
         "secretId": "platform.clerk.publishable",
         "canonicalName": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
@@ -47750,15 +48533,57 @@ function isRecord(value) {
 function recordValue(value) {
   return isRecord(value) ? value : {};
 }
+function normalizeTopicIdForKernel(topicId) {
+  const normalized = topicId?.trim();
+  if (!normalized) {
+    return void 0;
+  }
+  try {
+    const decoded = decodePrefixedId(normalized);
+    return decoded.prefix === "top" ? decoded.value : normalized;
+  } catch {
+    return normalized;
+  }
+}
+function normalizeWorktreeId(value) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    return void 0;
+  }
+  if (normalized.startsWith("wt_")) {
+    return normalized.slice("wt_".length);
+  }
+  return normalized;
+}
+function targetKind(targetId) {
+  const normalized = targetId?.trim();
+  if (!normalized) {
+    return "unknown";
+  }
+  if (normalized.startsWith("wt_") || /^tn[a-z0-9]+$/i.test(normalized)) {
+    return "worktree";
+  }
+  if (normalized.startsWith("que_")) {
+    return "question";
+  }
+  if (normalized.startsWith("bel_")) {
+    return "belief";
+  }
+  return "unknown";
+}
 var createEvidenceProjection = defineProjection({
   contractName: "create_evidence",
   inputSchema: createEvidenceInputSchema,
   project: (input) => {
     const text = input.text ?? input.canonicalText;
     const weight = typeof input.weight === "number" ? input.weight : void 0;
+    const target = input.targetId ?? input.targetNodeId;
+    const kind = targetKind(target);
+    const linkedWorktreeId = kind === "worktree" ? normalizeWorktreeId(target) : void 0;
+    const linkedBeliefNodeId = input.linkedBeliefNodeId ?? (kind === "belief" || kind === "unknown" ? input.targetNodeId ?? input.targetId : void 0);
     return compactRecord({
       projectId: input.projectId,
-      topicId: input.topicId,
+      topicId: normalizeTopicIdForKernel(input.topicId),
       text,
       title: input.title ?? text,
       content: input.content ?? text,
@@ -47777,11 +48602,13 @@ var createEvidenceProjection = defineProjection({
         source: input.source,
         targetId: input.targetId,
         targetNodeId: input.targetNodeId,
+        targetKind: kind === "unknown" ? void 0 : kind,
+        linkedWorktreeId,
         weight,
         reasoning: input.reasoning,
         rationale: input.rationale
       }),
-      linkedBeliefNodeId: input.linkedBeliefNodeId ?? input.targetNodeId ?? input.targetId,
+      linkedBeliefNodeId,
       evidenceRelation: input.evidenceRelation ?? (weight === void 0 ? void 0 : weight < 0 ? "contradicts" : "supports"),
       confidence: input.confidence ?? (weight === void 0 ? void 0 : Math.min(1, Math.max(0, Math.abs(weight)))),
       rationale: input.rationale,