@lucern/sdk 0.2.0-alpha.1 → 0.2.0-alpha.11

package/dist/{packages/sdk/src/controlObjectOwnership.d.ts → controlObjectOwnership.d.ts}

@@ -1,14 +1,25 @@
-export declare const CONTROL_OBJECT_KINDS: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
-export type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];
-export declare const CONTROL_OBJECT_OWNER_SCOPES: readonly ["platform", "tenant", "workspace", "resource"];
-export type ControlObjectOwnerScope = (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];
-export declare const CONTROL_OBJECT_EDIT_SURFACES: readonly ["platform_admin", "tenant_admin", "workspace_admin", "graph_worktree"];
-export type ControlObjectEditSurface = (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];
-export declare const CONTROL_OBJECT_INHERITANCE_RULES: readonly ["none", "platform_seed_to_tenant", "tenant_default_to_workspace", "workspace_narrowing_only", "pack_overlay_to_tenant", "topic_lineage_to_resource"];
-export type ControlObjectInheritanceRule = (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];
-export declare const CONTROL_OBJECT_BLAST_RADII: readonly ["platform", "tenant", "workspace", "resource"];
-export type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];
-export type ControlObjectOwnershipCase = {
+/** All recognized control object kinds in the ownership model. */
+declare const CONTROL_OBJECT_KINDS: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
+/** A kind of control object (tenant, workspace, principal, tool, etc.). */
+type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];
+/** Canonical ownership scopes: platform, tenant, workspace, or resource. */
+declare const CONTROL_OBJECT_OWNER_SCOPES: readonly ["platform", "tenant", "workspace", "resource"];
+/** The scope level that canonically owns a control object. */
+type ControlObjectOwnerScope = (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];
+/** UI surfaces authorized to edit control objects. */
+declare const CONTROL_OBJECT_EDIT_SURFACES: readonly ["platform_admin", "tenant_admin", "workspace_admin", "graph_worktree"];
+/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */
+type ControlObjectEditSurface = (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];
+/** Rules governing how control object configuration flows through the scope hierarchy. */
+declare const CONTROL_OBJECT_INHERITANCE_RULES: readonly ["none", "platform_seed_to_tenant", "tenant_default_to_workspace", "workspace_narrowing_only", "pack_overlay_to_tenant", "topic_lineage_to_resource"];
+/** How a control object's configuration propagates through scope hierarchy. */
+type ControlObjectInheritanceRule = (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];
+/** Scope of impact when a control object is modified. */
+declare const CONTROL_OBJECT_BLAST_RADII: readonly ["platform", "tenant", "workspace", "resource"];
+/** The furthest scope impacted by a mutation to a control object. */
+type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];
+/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */
+type ControlObjectOwnershipCase = {
     caseKey: string;
     caseLabel: string;
     kind: ControlObjectKind;
@@ -17,8 +28,10 @@ export type ControlObjectOwnershipCase = {
     inheritanceRule: ControlObjectInheritanceRule;
     blastRadius: ControlObjectBlastRadius;
 };
-export type ControlObjectOwnershipMatrix = Record<ControlObjectKind, readonly ControlObjectOwnershipCase[]>;
-export type ControlObjectOwnershipContract = {
+/** Full ownership matrix keyed by control object kind. */
+type ControlObjectOwnershipMatrix = Record<ControlObjectKind, readonly ControlObjectOwnershipCase[]>;
+/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */
+type ControlObjectOwnershipContract = {
     version: "1.0.0";
     kinds: readonly ControlObjectKind[];
     ownerScopes: readonly ControlObjectOwnerScope[];
@@ -28,7 +41,8 @@ export type ControlObjectOwnershipContract = {
     matrix: ControlObjectOwnershipMatrix;
     rows: readonly ControlObjectOwnershipCase[];
 };
-export declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
+/** Static ownership matrix mapping each control object kind to its ownership cases. */
+declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
     readonly tenant: readonly [{
         readonly caseKey: "platform-record";
         readonly caseLabel: "Platform Record";
@@ -150,9 +164,10 @@ export declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
         readonly blastRadius: "workspace";
     }];
 };
-export declare const CONTROL_OBJECT_OWNERSHIP_ROWS: readonly ControlObjectOwnershipCase[];
+/** Flattened array of all ownership cases across all control object kinds. */
+declare const CONTROL_OBJECT_OWNERSHIP_ROWS: readonly ControlObjectOwnershipCase[];
 /** The canonical ownership contract exposed by the SDK. */
-export declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
+declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
     readonly version: "1.0.0";
     readonly kinds: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
     readonly ownerScopes: readonly ["platform", "tenant", "workspace", "resource"];
@@ -286,8 +301,10 @@ export declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
 /**
  * List ownership cases for one control-object kind or the full matrix.
  */
-export declare function listControlObjectOwnershipCases(kind?: ControlObjectKind): readonly ControlObjectOwnershipCase[];
+declare function listControlObjectOwnershipCases(kind?: ControlObjectKind): readonly ControlObjectOwnershipCase[];
 /**
  * Get a specific ownership case by kind and case key.
  */
-export declare function getControlObjectOwnershipCase(kind: ControlObjectKind, caseKey: string): ControlObjectOwnershipCase | undefined;
+declare function getControlObjectOwnershipCase(kind: ControlObjectKind, caseKey: string): ControlObjectOwnershipCase | undefined;
+
+export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, type ControlObjectBlastRadius, type ControlObjectEditSurface, type ControlObjectInheritanceRule, type ControlObjectKind, type ControlObjectOwnerScope, type ControlObjectOwnershipCase, type ControlObjectOwnershipContract, type ControlObjectOwnershipMatrix, getControlObjectOwnershipCase, listControlObjectOwnershipCases };

package/dist/controlObjectOwnership.js

@@ -0,0 +1,215 @@
+// src/controlObjectOwnership.ts
+var CONTROL_OBJECT_KINDS = [
+  "tenant",
+  "workspace",
+  "principal",
+  "tool",
+  "pack",
+  "ontology",
+  "belief",
+  "policy_rule"
+];
+var CONTROL_OBJECT_OWNER_SCOPES = [
+  "platform",
+  "tenant",
+  "workspace",
+  "resource"
+];
+var CONTROL_OBJECT_EDIT_SURFACES = [
+  "platform_admin",
+  "tenant_admin",
+  "workspace_admin",
+  "graph_worktree"
+];
+var CONTROL_OBJECT_INHERITANCE_RULES = [
+  "none",
+  "platform_seed_to_tenant",
+  "tenant_default_to_workspace",
+  "workspace_narrowing_only",
+  "pack_overlay_to_tenant",
+  "topic_lineage_to_resource"
+];
+var CONTROL_OBJECT_BLAST_RADII = [
+  "platform",
+  "tenant",
+  "workspace",
+  "resource"
+];
+function defineCases(cases) {
+  return cases;
+}
+var CONTROL_OBJECT_OWNERSHIP_MATRIX = {
+  tenant: defineCases([
+    {
+      caseKey: "platform-record",
+      caseLabel: "Platform Record",
+      kind: "tenant",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "none",
+      blastRadius: "tenant"
+    }
+  ]),
+  workspace: defineCases([
+    {
+      caseKey: "tenant-workspace",
+      caseLabel: "Tenant Workspace",
+      kind: "workspace",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "workspace"
+    }
+  ]),
+  principal: defineCases([
+    {
+      caseKey: "tenant-principal",
+      caseLabel: "Tenant Principal",
+      kind: "principal",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "workspace_narrowing_only",
+      blastRadius: "resource"
+    }
+  ]),
+  tool: defineCases([
+    {
+      caseKey: "platform-core",
+      caseLabel: "Platform Core",
+      kind: "tool",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-custom",
+      caseLabel: "Tenant Custom",
+      kind: "tool",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "tenant"
+    }
+  ]),
+  pack: defineCases([
+    {
+      caseKey: "platform-definition",
+      caseLabel: "Platform Definition",
+      kind: "pack",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-installation",
+      caseLabel: "Tenant Installation",
+      kind: "pack",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "tenant"
+    }
+  ]),
+  ontology: defineCases([
+    {
+      caseKey: "platform-base",
+      caseLabel: "Platform Base",
+      kind: "ontology",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "pack-overlay",
+      caseLabel: "Pack Overlay",
+      kind: "ontology",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "pack_overlay_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-extension",
+      caseLabel: "Tenant Extension",
+      kind: "ontology",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "topic_lineage_to_resource",
+      blastRadius: "tenant"
+    }
+  ]),
+  belief: defineCases([
+    {
+      caseKey: "topic-resource",
+      caseLabel: "Topic Resource",
+      kind: "belief",
+      canonicalOwnerScope: "resource",
+      editSurface: "graph_worktree",
+      inheritanceRule: "topic_lineage_to_resource",
+      blastRadius: "resource"
+    }
+  ]),
+  policy_rule: defineCases([
+    {
+      caseKey: "platform-baseline",
+      caseLabel: "Platform Baseline",
+      kind: "policy_rule",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-bundle",
+      caseLabel: "Tenant Bundle",
+      kind: "policy_rule",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "tenant"
+    },
+    {
+      caseKey: "workspace-override",
+      caseLabel: "Workspace Override",
+      kind: "policy_rule",
+      canonicalOwnerScope: "workspace",
+      editSurface: "workspace_admin",
+      inheritanceRule: "none",
+      blastRadius: "workspace"
+    }
+  ])
+};
+function flattenOwnershipMatrix(matrix) {
+  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);
+}
+var CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(
+  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)
+);
+var CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
+  version: "1.0.0",
+  kinds: CONTROL_OBJECT_KINDS,
+  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,
+  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,
+  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,
+  blastRadii: CONTROL_OBJECT_BLAST_RADII,
+  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,
+  rows: CONTROL_OBJECT_OWNERSHIP_ROWS
+};
+function listControlObjectOwnershipCases(kind) {
+  if (!kind) {
+    return CONTROL_OBJECT_OWNERSHIP_ROWS;
+  }
+  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];
+}
+function getControlObjectOwnershipCase(kind, caseKey) {
+  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(
+    (ownershipCase) => ownershipCase.caseKey === caseKey
+  );
+}
+
+export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, getControlObjectOwnershipCase, listControlObjectOwnershipCases };
+//# sourceMappingURL=controlObjectOwnership.js.map
+//# sourceMappingURL=controlObjectOwnership.js.map

package/dist/controlObjectOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controlObjectOwnership.ts"],"names":[],"mappings":";AACO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAKO,IAAM,2BAAA,GAA8B;AAAA,EACzC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAMO,IAAM,4BAAA,GAA+B;AAAA,EAC1C,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAMO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA;AAAA,EACA,yBAAA;AAAA,EACA,6BAAA;AAAA,EACA,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAMO,IAAM,0BAAA,GAA6B;AAAA,EACxC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAiCA,SAAS,YACP,KAAA,EACG;AACH,EAAA,OAAO,KAAA;AACT;AAGO,IAAM,+BAAA,GAAkC;AAAA,EAC7C,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,iBAAA;AAAA,MACT,SAAA,EAAW,iBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,0BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,UAAU,WAAA,CAAY;AAAA,IACpB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,cAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,wBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,gBAAA;AAAA,MACT,SAAA,EAAW,gBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,aAAa,WAAA,CAAY;AAAA,IACvB;AAAA,MACE,OAAA,EAAS,mBAAA;AAAA,MACT,SAAA,EAAW,mBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,oBAAA;AAAA,MACT,SAAA,EAAW,oBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,WAAA;AAAA,MACrB,WAAA,EAAa,iBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD;AACH;AAEA,SAAS,uBACP,MAAA,EAC8B;AAC9B,EAAA,OAAO,oBAAA,CAAqB,QAAQ,CAAC,IAAA,KAAS,CAAC,GAAG,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AACjE;AAGO,IAAM,gCAAgC,MAAA,CAAO,MAAA;AAAA,EAClD,uBAAuB,+BAA+B;AACxD;AAGO,IAAM,iCAAA,GAAoC;AAAA,EAC/C,OAAA,EAAS,OAAA;AAAA,EACT,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EAAa,2BAAA;AAAA,EACb,YAAA,EAAc,4BAAA;AAAA,EACd,gBAAA,EAAkB,gCAAA;AAAA,EAClB,UAAA,EAAY,0BAAA;AAAA,EACZ,MAAA,EAAQ,+BAAA;AAAA,EACR,IAAA,EAAM;AACR;AAKO,SAAS,gCACd,IAAA,EACuC;AACvC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,6BAAA;AAAA,EACT;AACA,EAAA,OAAO,gCAAgC,IAAI,CAAA;AAC7C;AAKO,SAAS,6BAAA,CACd,MACA,OAAA,EACwC;AACxC,EAAA,OAAO,+BAAA,CAAgC,IAAI,CAAA,CAAE,IAAA;AAAA,IAC3C,CAAC,aAAA,KAAkB,aAAA,CAAc,OAAA,KAAY;AAAA,GAC/C;AACF","file":"controlObjectOwnership.js","sourcesContent":["/** All recognized control object kinds in the ownership model. */\nexport const CONTROL_OBJECT_KINDS = [\n  \"tenant\",\n  \"workspace\",\n  \"principal\",\n  \"tool\",\n  \"pack\",\n  \"ontology\",\n  \"belief\",\n  \"policy_rule\",\n] as const;\n/** A kind of control object (tenant, workspace, principal, tool, etc.). */\nexport type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];\n\n/** Canonical ownership scopes: platform, tenant, workspace, or resource. */\nexport const CONTROL_OBJECT_OWNER_SCOPES = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The scope level that canonically owns a control object. */\nexport type ControlObjectOwnerScope =\n  (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];\n\n/** UI surfaces authorized to edit control objects. */\nexport const CONTROL_OBJECT_EDIT_SURFACES = [\n  \"platform_admin\",\n  \"tenant_admin\",\n  \"workspace_admin\",\n  \"graph_worktree\",\n] as const;\n/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */\nexport type ControlObjectEditSurface =\n  (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];\n\n/** Rules governing how control object configuration flows through the scope hierarchy. */\nexport const CONTROL_OBJECT_INHERITANCE_RULES = [\n  \"none\",\n  \"platform_seed_to_tenant\",\n  \"tenant_default_to_workspace\",\n  \"workspace_narrowing_only\",\n  \"pack_overlay_to_tenant\",\n  \"topic_lineage_to_resource\",\n] as const;\n/** How a control object's configuration propagates through scope hierarchy. */\nexport type ControlObjectInheritanceRule =\n  (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];\n\n/** Scope of impact when a control object is modified. */\nexport const CONTROL_OBJECT_BLAST_RADII = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The furthest scope impacted by a mutation to a control object. */\nexport type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];\n\n/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */\nexport type ControlObjectOwnershipCase = {\n  caseKey: string;\n  caseLabel: string;\n  kind: ControlObjectKind;\n  canonicalOwnerScope: ControlObjectOwnerScope;\n  editSurface: ControlObjectEditSurface;\n  inheritanceRule: ControlObjectInheritanceRule;\n  blastRadius: ControlObjectBlastRadius;\n};\n\n/** Full ownership matrix keyed by control object kind. */\nexport type ControlObjectOwnershipMatrix = Record<\n  ControlObjectKind,\n  readonly ControlObjectOwnershipCase[]\n>;\n\n/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */\nexport type ControlObjectOwnershipContract = {\n  version: \"1.0.0\";\n  kinds: readonly ControlObjectKind[];\n  ownerScopes: readonly ControlObjectOwnerScope[];\n  editSurfaces: readonly ControlObjectEditSurface[];\n  inheritanceRules: readonly ControlObjectInheritanceRule[];\n  blastRadii: readonly ControlObjectBlastRadius[];\n  matrix: ControlObjectOwnershipMatrix;\n  rows: readonly ControlObjectOwnershipCase[];\n};\n\nfunction defineCases<const T extends readonly ControlObjectOwnershipCase[]>(\n  cases: T\n): T {\n  return cases;\n}\n\n/** Static ownership matrix mapping each control object kind to its ownership cases. */\nexport const CONTROL_OBJECT_OWNERSHIP_MATRIX = {\n  tenant: defineCases([\n    {\n      caseKey: \"platform-record\",\n      caseLabel: \"Platform Record\",\n      kind: \"tenant\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  workspace: defineCases([\n    {\n      caseKey: \"tenant-workspace\",\n      caseLabel: \"Tenant Workspace\",\n      kind: \"workspace\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n  principal: defineCases([\n    {\n      caseKey: \"tenant-principal\",\n      caseLabel: \"Tenant Principal\",\n      kind: \"principal\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"workspace_narrowing_only\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  tool: defineCases([\n    {\n      caseKey: \"platform-core\",\n      caseLabel: \"Platform Core\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-custom\",\n      caseLabel: \"Tenant Custom\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  pack: defineCases([\n    {\n      caseKey: \"platform-definition\",\n      caseLabel: \"Platform Definition\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-installation\",\n      caseLabel: \"Tenant Installation\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  ontology: defineCases([\n    {\n      caseKey: \"platform-base\",\n      caseLabel: \"Platform Base\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"pack-overlay\",\n      caseLabel: \"Pack Overlay\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"pack_overlay_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-extension\",\n      caseLabel: \"Tenant Extension\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  belief: defineCases([\n    {\n      caseKey: \"topic-resource\",\n      caseLabel: \"Topic Resource\",\n      kind: \"belief\",\n      canonicalOwnerScope: \"resource\",\n      editSurface: \"graph_worktree\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  policy_rule: defineCases([\n    {\n      caseKey: \"platform-baseline\",\n      caseLabel: \"Platform Baseline\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-bundle\",\n      caseLabel: \"Tenant Bundle\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n    {\n      caseKey: \"workspace-override\",\n      caseLabel: \"Workspace Override\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"workspace\",\n      editSurface: \"workspace_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n} as const satisfies ControlObjectOwnershipMatrix;\n\nfunction flattenOwnershipMatrix(\n  matrix: ControlObjectOwnershipMatrix\n): ControlObjectOwnershipCase[] {\n  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);\n}\n\n/** Flattened array of all ownership cases across all control object kinds. */\nexport const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(\n  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)\n);\n\n/** The canonical ownership contract exposed by the SDK. */\nexport const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {\n  version: \"1.0.0\",\n  kinds: CONTROL_OBJECT_KINDS,\n  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,\n  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,\n  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,\n  blastRadii: CONTROL_OBJECT_BLAST_RADII,\n  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,\n  rows: CONTROL_OBJECT_OWNERSHIP_ROWS,\n} as const satisfies ControlObjectOwnershipContract;\n\n/**\n * List ownership cases for one control-object kind or the full matrix.\n */\nexport function listControlObjectOwnershipCases(\n  kind?: ControlObjectKind\n): readonly ControlObjectOwnershipCase[] {\n  if (!kind) {\n    return CONTROL_OBJECT_OWNERSHIP_ROWS;\n  }\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];\n}\n\n/**\n * Get a specific ownership case by kind and case key.\n */\nexport function getControlObjectOwnershipCase(\n  kind: ControlObjectKind,\n  caseKey: string\n): ControlObjectOwnershipCase | undefined {\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(\n    (ownershipCase) => ownershipCase.caseKey === caseKey\n  );\n}\n"]}

package/dist/{packages/sdk/src/coreClient.d.ts → coreClient.d.ts}

@@ -1,16 +1,23 @@
-import type { JsonObject, JsonValue } from "./types";
-export type GatewayScope = {
+import { JsonValue, JsonObject } from './types.js';
+import './contracts/workflow-runtime.contract.js';
+import './contracts/lens-workflow.contract.js';
+import './contracts/lens-filter.contract.js';
+
+/** Tenant and workspace identifiers used to scope gateway requests. */
+type GatewayScope = {
     tenantId?: string;
     workspaceId?: string;
 };
-export type PlatformGatewaySuccess<T> = {
+/** Successful response envelope from the platform gateway with correlation metadata. */
+type PlatformGatewaySuccess<T> = {
     success: true;
     data: T;
     correlationId: string;
     policyTraceId: string | null;
     idempotentReplay: boolean;
 };
-export type PlatformGatewayFailure = {
+/** Failed response envelope with structured error codes and optional invariant references. */
+type PlatformGatewayFailure = {
     success: false;
     /**
      * Error string is the canonical envelope field.
@@ -33,8 +40,15 @@ export type PlatformGatewayFailure = {
     correlationId: string;
     policyTraceId: string | null;
 };
-export type PlatformGatewayEnvelope<T> = PlatformGatewaySuccess<T> | PlatformGatewayFailure;
-export declare class LucernApiError extends Error {
+/** Discriminated union of success and failure gateway responses. */
+type PlatformGatewayEnvelope<T> = PlatformGatewaySuccess<T> | PlatformGatewayFailure;
+/**
+ * Structured error thrown when a platform API request fails.
+ *
+ * Includes HTTP status, machine-readable error code, optional invariant
+ * reference, and actionable suggestions for common failure modes.
+ */
+declare class LucernApiError extends Error {
     readonly code: string;
     readonly status: number;
     readonly invariant?: string | null;
@@ -55,9 +69,11 @@ export declare class LucernApiError extends Error {
         policyTraceId?: string | null;
     });
 }
-export type GatewayHttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+/** Supported HTTP methods for gateway requests. */
+type GatewayHttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
 type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-export type GatewayRequestHookContext = {
+/** Context passed to the `onRequest` hook before each gateway request attempt. */
+type GatewayRequestHookContext = {
     requestId: string;
     attempt: number;
     maxRetries: number;
@@ -68,7 +84,8 @@ export type GatewayRequestHookContext = {
     body?: string;
     timeoutMs: number;
 };
-export type GatewayResponseHookContext = GatewayRequestHookContext & {
+/** Context passed to the `onResponse` hook after each gateway request attempt (including retries and failures). */
+type GatewayResponseHookContext = GatewayRequestHookContext & {
     durationMs: number;
     status?: number;
     response?: Response;
@@ -79,7 +96,13 @@ export type GatewayResponseHookContext = GatewayRequestHookContext & {
     retryAfterMs?: number | null;
     willRetry: boolean;
 };
-export type GatewayClientConfig = {
+/**
+ * Low-level transport configuration for the platform gateway client.
+ *
+ * Most developers should use {@link createLucernClient} instead, which wraps
+ * this config with higher-level conveniences like `apiKey` and `environment`.
+ */
+type GatewayClientConfig = {
     baseUrl?: string;
     fetchImpl?: FetchLike;
     getAuthHeaders?: (() => Promise<Record<string, string>>) | (() => Record<string, string>);
@@ -99,15 +122,15 @@ export type GatewayClientConfig = {
 /**
  * Serialize a gateway query object into a URL query string.
  */
-export declare function toQueryString(scope: GatewayScope & Record<string, string | number | boolean | undefined>): string;
+declare function toQueryString(scope: GatewayScope & Record<string, string | number | boolean | undefined>): string;
 /**
  * Generate a random idempotency key for retry-safe writes.
  */
-export declare function randomIdempotencyKey(): string;
+declare function randomIdempotencyKey(): string;
 /**
  * Create the transport client used by all SDK modules.
  */
-export declare function createGatewayRequestClient(config?: GatewayClientConfig): {
+declare function createGatewayRequestClient(config?: GatewayClientConfig): {
     request: <T>(args: {
         path: string;
         method?: GatewayHttpMethod;
@@ -117,4 +140,5 @@ export declare function createGatewayRequestClient(config?: GatewayClientConfig)
         timeoutMs?: number;
     }) => Promise<PlatformGatewaySuccess<T>>;
 };
-export {};
+
+export { type GatewayClientConfig, type GatewayHttpMethod, type GatewayRequestHookContext, type GatewayResponseHookContext, type GatewayScope, LucernApiError, type PlatformGatewayEnvelope, type PlatformGatewayFailure, type PlatformGatewaySuccess, createGatewayRequestClient, randomIdempotencyKey, toQueryString };