@lucern/contracts 1.0.11 → 1.0.12

package/dist/manifests/infisical-runtime-manifest.d.ts

@@ -162,6 +162,47 @@ declare const INFISICAL_RUNTIME_MANIFEST: {
             readonly public: false;
             readonly description: "Optional web-issued CLI login session lifetime override in milliseconds.";
         }];
+    }, {
+        readonly id: "platform-permit";
+        readonly secretPath: "/platform/permit";
+        readonly description: "Permit runtime configuration for policy enforcement and embedded Permit Elements.";
+        readonly variables: readonly [{
+            readonly name: "LUCERN_PERMIT_ELEMENTS_ENV_ID";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements.";
+        }, {
+            readonly name: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Optional Clerk JWT template name for Permit Elements frontendOnly login.";
+        }, {
+            readonly name: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Permit Elements dashboard iframe URL for user and group management.";
+        }, {
+            readonly name: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Permit Elements dashboard iframe URL for audit logs.";
+        }, {
+            readonly name: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Permit Elements dashboard iframe URL for access requests.";
+        }, {
+            readonly name: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL";
+            readonly required: false;
+            readonly secret: false;
+            readonly public: false;
+            readonly description: "Permit Elements dashboard iframe URL for approval management.";
+        }];
     }, {
         readonly id: "platform-operator-credentials";
         readonly secretPath: "/platform/runtime";
@@ -189,7 +230,7 @@ declare const INFISICAL_RUNTIME_MANIFEST: {
     readonly surfaces: readonly [{
         readonly id: "lucern-web";
         readonly delivery: "vercel_sync";
-        readonly sourcePathIds: readonly ["platform-auth", "platform-runtime"];
+        readonly sourcePathIds: readonly ["platform-auth", "platform-runtime", "platform-permit"];
         readonly consumer: "apps/web on Vercel project lucern";
         readonly description: "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs.";
     }, {
@@ -640,6 +681,108 @@ declare const INFISICAL_RUNTIME_MANIFEST: {
             readonly environmentPolicy: "environment_specific";
         }];
         readonly description: "Optional Permit API URL override.";
+    }, {
+        readonly id: "platform.permit.elements-env-id";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_ENV_ID";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements.";
+    }, {
+        readonly id: "platform.permit.elements-jwt-template";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements.";
+    }, {
+        readonly id: "platform.permit.elements-user-management-url";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Permit Elements dashboard iframe URL for the User Management element.";
+    }, {
+        readonly id: "platform.permit.elements-audit-logs-url";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Permit Elements dashboard iframe URL for the Audit Logs element.";
+    }, {
+        readonly id: "platform.permit.elements-access-request-url";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Permit Elements dashboard iframe URL for the Access Request element.";
+    }, {
+        readonly id: "platform.permit.elements-approvals-url";
+        readonly canonicalName: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL";
+        readonly owner: "lucern_platform";
+        readonly scope: "environment";
+        readonly sourcePath: "/platform/permit";
+        readonly environmentPolicy: "environment_specific";
+        readonly required: false;
+        readonly secret: false;
+        readonly public: false;
+        readonly consumers: readonly ["lucern-web"];
+        readonly destinations: readonly [{
+            readonly kind: "vercel";
+            readonly target: "lucern";
+            readonly environmentPolicy: "environment_specific";
+        }];
+        readonly description: "Permit Elements dashboard iframe URL for the Approval Management element.";
     }, {
         readonly id: "platform.ci.infisical-bootstrap-client-id";
         readonly canonicalName: "INFISICAL_BOOTSTRAP_CLIENT_ID";

package/dist/manifests/infisical-runtime-manifest.js

@@ -362,6 +362,55 @@ var INFISICAL_RUNTIME_PATHS = [
       }
     ]
   },
+  {
+    id: "platform-permit",
+    secretPath: "/platform/permit",
+    description: "Permit runtime configuration for policy enforcement and embedded Permit Elements.",
+    variables: [
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Optional Clerk JWT template name for Permit Elements frontendOnly login."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for user and group management."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for audit logs."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for access requests."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for approval management."
+      }
+    ]
+  },
   {
     id: "platform-operator-credentials",
     secretPath: "/platform/runtime",
@@ -396,7 +445,7 @@ var INFISICAL_RUNTIME_SURFACES = [
   {
     id: "lucern-web",
     delivery: "vercel_sync",
-    sourcePathIds: ["platform-auth", "platform-runtime"],
+    sourcePathIds: ["platform-auth", "platform-runtime", "platform-permit"],
     consumer: "apps/web on Vercel project lucern",
     description: "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs."
   },
@@ -1031,6 +1080,126 @@ var PLATFORM_SECRET_DEFINITIONS = [
     ],
     description: "Optional Permit API URL override."
   },
+  {
+    id: "platform.permit.elements-env-id",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+  },
+  {
+    id: "platform.permit.elements-jwt-template",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+  },
+  {
+    id: "platform.permit.elements-user-management-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the User Management element."
+  },
+  {
+    id: "platform.permit.elements-audit-logs-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Audit Logs element."
+  },
+  {
+    id: "platform.permit.elements-access-request-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Access Request element."
+  },
+  {
+    id: "platform.permit.elements-approvals-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Approval Management element."
+  },
   {
     id: "platform.ci.infisical-bootstrap-client-id",
     canonicalName: "INFISICAL_BOOTSTRAP_CLIENT_ID",