@lucern/contracts 1.0.11 → 1.0.13

package/dist/index.js

@@ -795,6 +795,7 @@ __export(tool_contracts_values_exports, {
   LIST_TASKS: () => LIST_TASKS,
   LIST_TOPICS: () => LIST_TOPICS,
   LIST_WORKTREES: () => LIST_WORKTREES,
+  LUCERN_ORIENT: () => LUCERN_ORIENT,
   MANAGE_WRITE_POLICY: () => MANAGE_WRITE_POLICY,
   MATCH_ENTITY_TYPE: () => MATCH_ENTITY_TYPE,
   MATERIALIZE_TOPIC_GRAPH: () => MATERIALIZE_TOPIC_GRAPH,
@@ -1526,7 +1527,7 @@ var SEARCH_EVIDENCE = {
 };
 var CREATE_EVIDENCE = {
   name: "create_evidence",
-  description: "Commit evidence to the reasoning graph. Like `git commit` \u2014 creates a traceable evidence record with canonical public IDs. Optionally links the evidence to a belief or question in the same operation.",
+  description: "Commit evidence to the reasoning graph. Like `git commit` \u2014 creates a traceable evidence record with canonical public IDs. Optionally links the evidence to a belief or question in the same operation. When evidence bears on beliefs, state whether it supports or contradicts; SL confidence is derived from these evidence relations.",
   parameters: {
     topicId: { type: "string", description: "Topic scope" },
     text: { type: "string", description: "Canonical evidence text" },
@@ -1537,7 +1538,20 @@ var CREATE_EVIDENCE = {
     },
     weight: {
       type: "number",
-      description: "Support weight: -1.0 (contradicts) to +1.0 (supports)"
+      description: "Optional support weight: -1.0 (contradicts) to +1.0 (supports). If omitted, evidenceRelation + confidence determine the weight."
+    },
+    evidenceRelation: {
+      type: "string",
+      enum: ["supports", "contradicts"],
+      description: "Canonical relation to targetId/linkedBeliefNodeId. Prefer this over relying on signed weight inference."
+    },
+    confidence: {
+      type: "number",
+      description: "Confidence in the evidence relation, 0.0 to 1.0"
+    },
+    beliefRelations: {
+      type: "array",
+      description: "Optional additional belief relations: [{ beliefId|beliefNodeId|targetId, evidenceRelation|relation, confidence?, weight?, rationale? }]. Use one evidence node with multiple relations when the same fact supports or contradicts several beliefs."
     },
     metadata: {
       type: "object",
@@ -1647,7 +1661,7 @@ var LINK_EVIDENCE = {
 };
 var LINK_EVIDENCE_TO_BELIEF = {
   name: "link_evidence_to_belief",
-  description: "Link evidence to a belief with a support weight. Like `git add` \u2014 stages evidence in support of (or against) a belief. The weight ranges from -1.0 (strongly contradicts) to +1.0 (strongly supports).",
+  description: "Link evidence to a belief with a support weight. Like `git add` \u2014 stages evidence in support of (or against) a belief. The weight ranges from -1.0 (strongly contradicts) to +1.0 (strongly supports). This relation appends to the SL confidence ledger; do not hand-write confidence separately.",
   parameters: {
     evidenceId: { type: "string", description: "The evidence node ID" },
     beliefId: { type: "string", description: "The belief node ID" },
@@ -1655,9 +1669,18 @@ var LINK_EVIDENCE_TO_BELIEF = {
       type: "number",
       description: "Support weight: -1.0 (contradicts) to +1.0 (supports)"
     },
+    evidenceRelation: {
+      type: "string",
+      enum: ["supports", "contradicts"],
+      description: "Canonical semantic relation. If omitted, the sign of weight is used."
+    },
+    confidence: {
+      type: "number",
+      description: "Confidence in this evidence-to-belief relation, 0.0 to 1.0"
+    },
     rationale: { type: "string", description: "Why this evidence is relevant" }
   },
-  required: ["evidenceId", "beliefId", "weight"],
+  required: ["evidenceId", "beliefId"],
   response: {
     description: "The created edge linking evidence to belief",
     fields: {
@@ -1675,7 +1698,7 @@ var LINK_EVIDENCE_TO_BELIEF = {
 // src/tool-contracts.lifecycle.ts
 var CREATE_BELIEF = {
   name: "create_belief",
-  description: "Commit a new belief (knowledge unit) to the reasoning graph. Like `git commit` \u2014 creates an atomic, traceable knowledge object with a prior. Creation stores the vacuous opinion `(0, 0, 1, a)`; use modulate_confidence to record the first evidential update.",
+  description: "Commit a new belief (knowledge unit) to the reasoning graph. Like `git commit` \u2014 creates an atomic, traceable knowledge object with a prior. Creation stores the vacuous opinion `(0, 0, 1, a)`; attach supporting or contradicting evidence with create_evidence or link_evidence_to_belief to record evidential updates.",
   parameters: {
     canonicalText: {
       type: "string",
@@ -1761,7 +1784,7 @@ var REFINE_BELIEF = {
 };
 var MODULATE_CONFIDENCE = {
   name: "modulate_confidence",
-  description: "Record a confidence change for a belief. Like `git commit` to the credence log \u2014 an atomic, append-only write. Each modulation is a new entry in the history, not an overwrite. Scoring happens via merge; this tool records the individual data points. Pass the full subjective-logic tuple (`belief`, `disbelief`, `uncertainty`, `baseRate`) directly. If a caller only has a scalar probability, use `@lucern/sdk` helpers `opinionFromBaseRate`, `opinionFromDogmatic`, or `opinionFromProjected` to name the intended interpretation before calling this tool. Every modulation must cite a truth-bearing artifact: triggeringEvidenceId, triggeringQuestionId, triggeringAnswerId, triggeringContradictionId, or triggeringWorktreeId. Triggers: evidence_added, evidence_removed, contradiction_detected, contradiction_resolved, agent_assessment, worktree_outcome, worktree_completed, fusion, discount, deduction.",
+  description: "Internal-only subjective-logic ledger append. Like `git commit` to the credence log for the scoring engine \u2014 never an operator-facing way to assert confidence. Agents, SDK callers, CLI users, and MCP clients must instead create or link evidence with `evidenceRelation: supports|contradicts`; the kernel derives the next opinion from that evidence. This compatibility primitive is reserved for governed system scoring paths that already hold a full subjective-logic tuple and truth-bearing provenance.",
   parameters: {
     nodeId: { type: "string", description: "The belief to score" },
     belief: {
@@ -2410,6 +2433,60 @@ var REMOVE_LENS_FROM_TOPIC = {
   tier: "workhorse"
 };
 
+// src/tool-contracts.context-orientation.ts
+var LUCERN_ORIENT = {
+  name: "lucern_orient",
+  description: "Load the Lucern reasoning grammar before operating. Like `git help` plus a repository CONTRIBUTING guide for reasoning state - teaches the git-shaped model of topics, campaigns, lanes, worktrees, beliefs, questions, evidence, receipts, gates, and merges.",
+  parameters: {
+    audience: {
+      type: "string",
+      description: "Audience for the primer: agent, human, operator, or developer.",
+      enum: ["agent", "human", "operator", "developer"]
+    },
+    depth: {
+      type: "string",
+      description: "Orientation depth: quick, standard, or deep.",
+      enum: ["quick", "standard", "deep"]
+    },
+    situation: {
+      type: "string",
+      description: "Optional task or query context used to tailor suggested next calls."
+    },
+    includeExamples: {
+      type: "boolean",
+      description: "Whether to include concrete tool-call examples."
+    },
+    includeToolMap: {
+      type: "boolean",
+      description: "Whether to include situation-to-tool routing guidance."
+    },
+    includeFuture: {
+      type: "boolean",
+      description: "Whether to include future exemplar, gauntlet, and training-data capabilities."
+    }
+  },
+  required: [],
+  response: {
+    description: "Canonical operator primer for Lucern's git-shaped reasoning substrate.",
+    fields: {
+      schemaVersion: "string - lucern_orientation.v1",
+      canonicalMentalModel: "object - concise model of Lucern as git-shaped reasoning state",
+      workflow: "array - recommended branch -> investigate -> prove gate -> merge workflow",
+      grammarMap: "array - primitive-to-git-analogy map for topics, campaigns, worktrees, beliefs, questions, evidence, edges, contradictions, and gates",
+      firstMoves: "array - recommended first tools for a cold-start agent",
+      receiptRules: "array - how to interpret candidateCounts, broadening, coverageWarning, narrativeCoverage, synthesisLints, and noDefaultGlobalScan",
+      safetyRules: "array - mutation and completion rules that preserve reasoning lineage",
+      toolMap: "array | undefined - situation-to-tool routing map when requested",
+      examples: "array | undefined - concrete tool-call examples when requested",
+      futureCapabilities: "array | undefined - exemplar, gauntlet, trace-corpus, and native-model-training capabilities when requested",
+      suggestedNextCalls: "array - safe next tool calls for the current situation"
+    }
+  },
+  ownerModule: "reasoning-kernel",
+  ontologyPrimitive: "graph",
+  tier: "showcase"
+};
+
 // src/tool-contracts.ontology.ts
 var MANAGE_WRITE_POLICY = {
   name: "manage_write_policy",
@@ -4919,10 +4996,34 @@ var COMPILE_CONTEXT = {
       type: "string",
       description: "Optional source kind used as a resolver signal, such as cli, worktree, commit, or docs."
     },
+    campaign: {
+      type: "number",
+      description: "Optional campaign dimension seed. When supplied without topicId, the compiler fans out across all carrier topics for that campaign instead of resolving a single topic."
+    },
+    lane: {
+      type: "string",
+      description: "Optional lane dimension seed. When supplied without topicId, the compiler reads all matching worktrees and their carrier topics."
+    },
+    status: {
+      type: "string",
+      description: "Optional state/status dimension seed for worktrees and graph rows."
+    },
+    principalId: {
+      type: "string",
+      description: "Optional principal seed for work authored, touched, or owned by a human, agent, group, or service principal."
+    },
+    workspaceId: {
+      type: "string",
+      description: "Optional workspace seed used by hosted MCP and SDK clients when compiling tenant-scoped context."
+    },
     budget: {
       type: "number",
       description: "Token budget for prompt injection planning"
     },
+    tokenBudget: {
+      type: "number",
+      description: "Compatibility alias for budget. External MCP clients may send tokenBudget when requesting prompt injection planning."
+    },
     ranking: {
       type: "string",
       description: "Ranking profile for context ordering",
@@ -4958,7 +5059,9 @@ var COMPILE_CONTEXT = {
       recentEvidence: "array \u2014 recent evidence ranked for this query",
       contradictions: "array \u2014 unresolved contradiction records",
       relatedEntities: "array | undefined \u2014 ranked ontological entities in scope",
-      contextNarrative: "array \u2014 guidance for prompt assembly",
+      contextNarrative: "array \u2014 ordered synthesis blocks with kind/text, starting with executive_summary and canonical narrative blocks before raw objects",
+      retrievalReceipt: "object \u2014 candidateCounts, coverageWarning, narrativeCoverage, synthesisLints, and suggestedNextActions",
+      narrativeCoverage: "object \u2014 recordsSynthesized, recordsNamed, recordsOmitted, and blocksEmitted for the narrative",
       injectionPolicy: "object \u2014 token-budgeted section selections",
       diagnostics: "object \u2014 scoring and utilization telemetry"
     }
@@ -5613,6 +5716,7 @@ var MCP_TOOL_CONTRACTS = {
   update_worktree_metadata: UPDATE_WORKTREE_METADATA,
   identity_whoami: IDENTITY_WHOAMI,
   resolve_interactive_principal: RESOLVE_INTERACTIVE_PRINCIPAL,
+  lucern_orient: LUCERN_ORIENT,
   compile_context: COMPILE_CONTEXT,
   record_scope_learning: RECORD_SCOPE_LEARNING,
   pipeline_snapshot: PIPELINE_SNAPSHOT,
@@ -14271,6 +14375,55 @@ var INFISICAL_RUNTIME_PATHS = [
       }
     ]
   },
+  {
+    id: "platform-permit",
+    secretPath: "/platform/permit",
+    description: "Permit runtime configuration for policy enforcement and embedded Permit Elements.",
+    variables: [
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Optional Clerk JWT template name for Permit Elements frontendOnly login."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for user and group management."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for audit logs."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for access requests."
+      },
+      {
+        name: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+        required: false,
+        secret: false,
+        public: false,
+        description: "Permit Elements dashboard iframe URL for approval management."
+      }
+    ]
+  },
   {
     id: "platform-operator-credentials",
     secretPath: "/platform/runtime",
@@ -14305,7 +14458,7 @@ var INFISICAL_RUNTIME_SURFACES = [
   {
     id: "lucern-web",
     delivery: "vercel_sync",
-    sourcePathIds: ["platform-auth", "platform-runtime"],
+    sourcePathIds: ["platform-auth", "platform-runtime", "platform-permit"],
     consumer: "apps/web on Vercel project lucern",
     description: "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs."
   },
@@ -15035,6 +15188,126 @@ var PLATFORM_SECRET_DEFINITIONS = [
     ],
     description: "Optional Permit API URL override."
   },
+  {
+    id: "platform.permit.elements-env-id",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+  },
+  {
+    id: "platform.permit.elements-jwt-template",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+  },
+  {
+    id: "platform.permit.elements-user-management-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the User Management element."
+  },
+  {
+    id: "platform.permit.elements-audit-logs-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Audit Logs element."
+  },
+  {
+    id: "platform.permit.elements-access-request-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Access Request element."
+  },
+  {
+    id: "platform.permit.elements-approvals-url",
+    canonicalName: "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    owner: "lucern_platform",
+    scope: "environment",
+    sourcePath: "/platform/permit",
+    environmentPolicy: "environment_specific",
+    required: false,
+    secret: false,
+    public: false,
+    consumers: ["lucern-web"],
+    destinations: [
+      {
+        kind: "vercel",
+        target: "lucern",
+        environmentPolicy: "environment_specific"
+      }
+    ],
+    description: "Permit Elements dashboard iframe URL for the Approval Management element."
+  },
   {
     id: "platform.ci.infisical-bootstrap-client-id",
     canonicalName: "INFISICAL_BOOTSTRAP_CLIENT_ID",
@@ -17782,6 +18055,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_PACK_KEY",
     "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET",
     "LUCERN_PROD_DEPLOY_KEY",
@@ -18063,6 +18342,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "LUCERN_PACK_KEY",
     "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET",
     "LUCERN_PROD_DEPLOY_KEY",
@@ -21242,6 +21527,180 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       ],
       "description": "Optional Permit API URL override."
     },
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL": {
+      "secretId": "platform.permit.elements-access-request-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Access Request element. Permit Elements dashboard iframe URL for access requests."
+    },
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL": {
+      "secretId": "platform.permit.elements-approvals-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Approval Management element. Permit Elements dashboard iframe URL for approval management."
+    },
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL": {
+      "secretId": "platform.permit.elements-audit-logs-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the Audit Logs element. Permit Elements dashboard iframe URL for audit logs."
+    },
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID": {
+      "secretId": "platform.permit.elements-env-id",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ]
+        }
+      ],
+      "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+    },
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE": {
+      "secretId": "platform.permit.elements-jwt-template",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ]
+        }
+      ],
+      "description": "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements. Optional Clerk JWT template name for Permit Elements frontendOnly login."
+    },
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL": {
+      "secretId": "platform.permit.elements-user-management-url",
+      "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+      "envNames": [
+        "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+      ],
+      "aliases": [],
+      "writeNames": [
+        "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+      ],
+      "required": false,
+      "secret": false,
+      "public": false,
+      "sourcePath": "/platform/permit",
+      "environmentPolicy": "environment_specific",
+      "consumers": [
+        "lucern-web"
+      ],
+      "destinations": [
+        {
+          "kind": "vercel",
+          "target": "lucern",
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ]
+        }
+      ],
+      "description": "Permit Elements dashboard iframe URL for the User Management element. Permit Elements dashboard iframe URL for user and group management."
+    },
     "LUCERN_PERMIT_PDP_URL": {
       "secretId": "platform.permit.pdp-url",
       "canonicalName": "LUCERN_PERMIT_PDP_URL",
@@ -24238,6 +24697,12 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
     "PERMIT_API_KEY": "LUCERN_PERMIT_API_KEY",
     "LUCERN_PERMIT_API_URL": "LUCERN_PERMIT_API_URL",
     "PERMIT_API_URL": "LUCERN_PERMIT_API_URL",
+    "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+    "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+    "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+    "LUCERN_PERMIT_ELEMENTS_ENV_ID": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+    "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+    "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
     "LUCERN_PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
     "PERMIT_PDP_URL": "LUCERN_PERMIT_PDP_URL",
     "LUCERN_PERMIT_WEBHOOK_SECRET": "LUCERN_PERMIT_WEBHOOK_SECRET",
@@ -24356,7 +24821,8 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
       "description": "Lucern web consumes Clerk and runtime config via Infisical-to-Vercel syncs.",
       "sourcePathIds": [
         "platform-auth",
-        "platform-runtime"
+        "platform-runtime",
+        "platform-permit"
       ],
       "variables": [
         {
@@ -24564,6 +25030,174 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
           "destinations": [],
           "description": "Browser login origin used when it differs from the API."
         },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for access requests. Permit Elements dashboard iframe URL for the Access Request element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for approval management. Permit Elements dashboard iframe URL for the Approval Management element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for audit logs. Permit Elements dashboard iframe URL for the Audit Logs element."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+              ]
+            }
+          ],
+          "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+              ]
+            }
+          ],
+          "description": "Optional Clerk JWT template name for Permit Elements frontendOnly login. Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+        },
+        {
+          "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+          "envNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ],
+          "aliases": [],
+          "writeNames": [
+            "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+          ],
+          "required": false,
+          "secret": false,
+          "public": false,
+          "sourcePath": "/platform/permit",
+          "environmentPolicy": "environment_specific",
+          "consumers": [
+            "lucern-web"
+          ],
+          "destinations": [
+            {
+              "kind": "vercel",
+              "target": "lucern",
+              "writeNames": [
+                "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+              ]
+            }
+          ],
+          "description": "Permit Elements dashboard iframe URL for user and group management. Permit Elements dashboard iframe URL for the User Management element."
+        },
         {
           "canonicalName": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
           "envNames": [
@@ -42808,6 +43442,180 @@ var GENERATED_INFISICAL_RUNTIME_ENV = {
         ],
         "description": "Lucern runtime environment label."
       },
+      {
+        "secretId": "platform.permit.elements-access-request-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_ACCESS_REQUEST_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Access Request element."
+      },
+      {
+        "secretId": "platform.permit.elements-approvals-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_APPROVALS_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Approval Management element."
+      },
+      {
+        "secretId": "platform.permit.elements-audit-logs-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_AUDIT_LOGS_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the Audit Logs element."
+      },
+      {
+        "secretId": "platform.permit.elements-env-id",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_ENV_ID",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_ENV_ID"
+            ]
+          }
+        ],
+        "description": "Permit environment id used by Lucern web to authenticate embedded Permit Elements."
+      },
+      {
+        "secretId": "platform.permit.elements-jwt-template",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_JWT_TEMPLATE"
+            ]
+          }
+        ],
+        "description": "Optional Clerk JWT template name used for Permit Elements frontendOnly login. Defaults to permit-elements."
+      },
+      {
+        "secretId": "platform.permit.elements-user-management-url",
+        "canonicalName": "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL",
+        "envNames": [
+          "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+        ],
+        "aliases": [],
+        "writeNames": [
+          "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+        ],
+        "required": false,
+        "secret": false,
+        "public": false,
+        "sourcePath": "/platform/permit",
+        "environmentPolicy": "environment_specific",
+        "consumers": [
+          "lucern-web"
+        ],
+        "destinations": [
+          {
+            "kind": "vercel",
+            "target": "lucern",
+            "writeNames": [
+              "LUCERN_PERMIT_ELEMENTS_USER_MANAGEMENT_URL"
+            ]
+          }
+        ],
+        "description": "Permit Elements dashboard iframe URL for the User Management element."
+      },
       {
         "secretId": "platform.clerk.publishable",
         "canonicalName": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
@@ -47703,6 +48511,23 @@ function defineProjection(def) {
 
 // src/projections/create-evidence.projection.ts
 var jsonRecordSchema = z.record(z.unknown());
+var evidenceRelationSchema = z.enum(["supports", "contradicts"]);
+var evidenceRelationAliasSchema = z.enum([
+  "supports",
+  "contradicts",
+  "supporting",
+  "contradicting"
+]);
+var beliefRelationSchema = z.object({
+  beliefId: z.string().optional(),
+  beliefNodeId: z.string().optional(),
+  targetId: z.string().optional(),
+  relation: evidenceRelationAliasSchema.optional(),
+  evidenceRelation: evidenceRelationSchema.optional(),
+  confidence: z.number().optional(),
+  weight: z.number().optional(),
+  rationale: z.string().optional()
+});
 var createEvidenceInputSchemaBase = z.object({
   projectId: z.string().optional(),
   topicId: z.string().optional(),
@@ -47724,7 +48549,8 @@ var createEvidenceInputSchemaBase = z.object({
   targetId: z.string().optional(),
   targetNodeId: z.string().optional(),
   linkedBeliefNodeId: z.string().optional(),
-  evidenceRelation: z.enum(["supports", "contradicts"]).optional(),
+  evidenceRelation: evidenceRelationSchema.optional(),
+  beliefRelations: z.array(beliefRelationSchema).optional(),
   confidence: z.number().optional(),
   weight: z.number().optional(),
   reasoning: z.string().optional(),
@@ -47750,15 +48576,103 @@ function isRecord(value) {
 function recordValue(value) {
   return isRecord(value) ? value : {};
 }
+function normalizeTopicIdForKernel(topicId) {
+  const normalized = topicId?.trim();
+  if (!normalized) {
+    return void 0;
+  }
+  try {
+    const decoded = decodePrefixedId(normalized);
+    return decoded.prefix === "top" ? decoded.value : normalized;
+  } catch {
+    return normalized;
+  }
+}
+function normalizeWorktreeId(value) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    return void 0;
+  }
+  if (normalized.startsWith("wt_")) {
+    return normalized.slice("wt_".length);
+  }
+  return normalized;
+}
+function targetKind(targetId) {
+  const normalized = targetId?.trim();
+  if (!normalized) {
+    return "unknown";
+  }
+  if (normalized.startsWith("wt_") || /^tn[a-z0-9]+$/i.test(normalized)) {
+    return "worktree";
+  }
+  if (normalized.startsWith("que_")) {
+    return "question";
+  }
+  if (normalized.startsWith("bel_")) {
+    return "belief";
+  }
+  return "unknown";
+}
+function normalizeRelation(value, weight) {
+  if (value === "supports" || value === "supporting") {
+    return "supports";
+  }
+  if (value === "contradicts" || value === "contradicting") {
+    return "contradicts";
+  }
+  if (weight === void 0) {
+    return void 0;
+  }
+  return weight < 0 ? "contradicts" : "supports";
+}
+function normalizeConfidence(confidence, weight) {
+  if (confidence !== void 0) {
+    return Math.min(1, Math.max(0, confidence));
+  }
+  if (weight === void 0) {
+    return void 0;
+  }
+  return Math.min(1, Math.max(0, Math.abs(weight)));
+}
+function normalizeBeliefRelation(relation) {
+  const beliefNodeId = relation.beliefNodeId ?? relation.beliefId ?? relation.targetId;
+  if (!beliefNodeId) {
+    return void 0;
+  }
+  const weight = typeof relation.weight === "number" ? relation.weight : void 0;
+  const evidenceRelation = normalizeRelation(
+    relation.evidenceRelation ?? relation.relation,
+    weight
+  );
+  if (!evidenceRelation) {
+    return void 0;
+  }
+  return compactRecord({
+    beliefNodeId,
+    relation: evidenceRelation,
+    confidence: normalizeConfidence(relation.confidence, weight),
+    rationale: relation.rationale
+  });
+}
 var createEvidenceProjection = defineProjection({
   contractName: "create_evidence",
   inputSchema: createEvidenceInputSchema,
   project: (input) => {
     const text = input.text ?? input.canonicalText;
     const weight = typeof input.weight === "number" ? input.weight : void 0;
+    const target = input.targetId ?? input.targetNodeId;
+    const kind = targetKind(target);
+    const linkedWorktreeId = kind === "worktree" ? normalizeWorktreeId(target) : void 0;
+    const linkedBeliefNodeId = input.linkedBeliefNodeId ?? (kind === "belief" || kind === "unknown" ? input.targetNodeId ?? input.targetId : void 0);
+    const evidenceRelation = linkedBeliefNodeId ? normalizeRelation(input.evidenceRelation, weight) : void 0;
+    const confidence = evidenceRelation ? normalizeConfidence(input.confidence, weight) : void 0;
+    const beliefRelations = input.beliefRelations?.map(normalizeBeliefRelation).filter(
+      (relation) => relation !== void 0
+    );
     return compactRecord({
       projectId: input.projectId,
-      topicId: input.topicId,
+      topicId: normalizeTopicIdForKernel(input.topicId),
       text,
       title: input.title ?? text,
       content: input.content ?? text,
@@ -47777,13 +48691,16 @@ var createEvidenceProjection = defineProjection({
         source: input.source,
         targetId: input.targetId,
         targetNodeId: input.targetNodeId,
+        targetKind: kind === "unknown" ? void 0 : kind,
+        linkedWorktreeId,
         weight,
         reasoning: input.reasoning,
         rationale: input.rationale
       }),
-      linkedBeliefNodeId: input.linkedBeliefNodeId ?? input.targetNodeId ?? input.targetId,
-      evidenceRelation: input.evidenceRelation ?? (weight === void 0 ? void 0 : weight < 0 ? "contradicts" : "supports"),
-      confidence: input.confidence ?? (weight === void 0 ? void 0 : Math.min(1, Math.max(0, Math.abs(weight)))),
+      linkedBeliefNodeId,
+      evidenceRelation,
+      confidence,
+      beliefRelations: beliefRelations && beliefRelations.length > 0 ? beliefRelations : void 0,
       rationale: input.rationale,
       trustedBypassAccessCheck: input.trustedBypassAccessCheck ?? true
     });
@@ -47812,6 +48729,16 @@ var createEvidenceProjection = defineProjection({
         v.literal("contradicts")
       )
     ),
+    beliefRelations: v.optional(
+      v.array(
+        v.object({
+          beliefNodeId: v.string(),
+          relation: v.union(v.literal("supports"), v.literal("contradicts")),
+          confidence: v.optional(v.number()),
+          rationale: v.optional(v.string())
+        })
+      )
+    ),
     confidence: v.optional(v.number()),
     rationale: v.string(),
     trustedBypassAccessCheck: v.optional(v.boolean())