@lucern/sdk 0.2.0-alpha.12 → 0.2.0-alpha.2

package/dist/controlObjectOwnership.js

@@ -1,215 +0,0 @@
-// src/controlObjectOwnership.ts
-var CONTROL_OBJECT_KINDS = [
-  "tenant",
-  "workspace",
-  "principal",
-  "tool",
-  "pack",
-  "ontology",
-  "belief",
-  "policy_rule"
-];
-var CONTROL_OBJECT_OWNER_SCOPES = [
-  "platform",
-  "tenant",
-  "workspace",
-  "resource"
-];
-var CONTROL_OBJECT_EDIT_SURFACES = [
-  "platform_admin",
-  "tenant_admin",
-  "workspace_admin",
-  "graph_worktree"
-];
-var CONTROL_OBJECT_INHERITANCE_RULES = [
-  "none",
-  "platform_seed_to_tenant",
-  "tenant_default_to_workspace",
-  "workspace_narrowing_only",
-  "pack_overlay_to_tenant",
-  "topic_lineage_to_resource"
-];
-var CONTROL_OBJECT_BLAST_RADII = [
-  "platform",
-  "tenant",
-  "workspace",
-  "resource"
-];
-function defineCases(cases) {
-  return cases;
-}
-var CONTROL_OBJECT_OWNERSHIP_MATRIX = {
-  tenant: defineCases([
-    {
-      caseKey: "platform-record",
-      caseLabel: "Platform Record",
-      kind: "tenant",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "none",
-      blastRadius: "tenant"
-    }
-  ]),
-  workspace: defineCases([
-    {
-      caseKey: "tenant-workspace",
-      caseLabel: "Tenant Workspace",
-      kind: "workspace",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "workspace"
-    }
-  ]),
-  principal: defineCases([
-    {
-      caseKey: "tenant-principal",
-      caseLabel: "Tenant Principal",
-      kind: "principal",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "workspace_narrowing_only",
-      blastRadius: "resource"
-    }
-  ]),
-  tool: defineCases([
-    {
-      caseKey: "platform-core",
-      caseLabel: "Platform Core",
-      kind: "tool",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform"
-    },
-    {
-      caseKey: "tenant-custom",
-      caseLabel: "Tenant Custom",
-      kind: "tool",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "tenant"
-    }
-  ]),
-  pack: defineCases([
-    {
-      caseKey: "platform-definition",
-      caseLabel: "Platform Definition",
-      kind: "pack",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform"
-    },
-    {
-      caseKey: "tenant-installation",
-      caseLabel: "Tenant Installation",
-      kind: "pack",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "tenant"
-    }
-  ]),
-  ontology: defineCases([
-    {
-      caseKey: "platform-base",
-      caseLabel: "Platform Base",
-      kind: "ontology",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform"
-    },
-    {
-      caseKey: "pack-overlay",
-      caseLabel: "Pack Overlay",
-      kind: "ontology",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "pack_overlay_to_tenant",
-      blastRadius: "platform"
-    },
-    {
-      caseKey: "tenant-extension",
-      caseLabel: "Tenant Extension",
-      kind: "ontology",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "topic_lineage_to_resource",
-      blastRadius: "tenant"
-    }
-  ]),
-  belief: defineCases([
-    {
-      caseKey: "topic-resource",
-      caseLabel: "Topic Resource",
-      kind: "belief",
-      canonicalOwnerScope: "resource",
-      editSurface: "graph_worktree",
-      inheritanceRule: "topic_lineage_to_resource",
-      blastRadius: "resource"
-    }
-  ]),
-  policy_rule: defineCases([
-    {
-      caseKey: "platform-baseline",
-      caseLabel: "Platform Baseline",
-      kind: "policy_rule",
-      canonicalOwnerScope: "platform",
-      editSurface: "platform_admin",
-      inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform"
-    },
-    {
-      caseKey: "tenant-bundle",
-      caseLabel: "Tenant Bundle",
-      kind: "policy_rule",
-      canonicalOwnerScope: "tenant",
-      editSurface: "tenant_admin",
-      inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "tenant"
-    },
-    {
-      caseKey: "workspace-override",
-      caseLabel: "Workspace Override",
-      kind: "policy_rule",
-      canonicalOwnerScope: "workspace",
-      editSurface: "workspace_admin",
-      inheritanceRule: "none",
-      blastRadius: "workspace"
-    }
-  ])
-};
-function flattenOwnershipMatrix(matrix) {
-  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);
-}
-var CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(
-  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)
-);
-var CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
-  version: "1.0.0",
-  kinds: CONTROL_OBJECT_KINDS,
-  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,
-  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,
-  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,
-  blastRadii: CONTROL_OBJECT_BLAST_RADII,
-  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,
-  rows: CONTROL_OBJECT_OWNERSHIP_ROWS
-};
-function listControlObjectOwnershipCases(kind) {
-  if (!kind) {
-    return CONTROL_OBJECT_OWNERSHIP_ROWS;
-  }
-  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];
-}
-function getControlObjectOwnershipCase(kind, caseKey) {
-  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(
-    (ownershipCase) => ownershipCase.caseKey === caseKey
-  );
-}
-
-export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, getControlObjectOwnershipCase, listControlObjectOwnershipCases };
-//# sourceMappingURL=controlObjectOwnership.js.map
-//# sourceMappingURL=controlObjectOwnership.js.map

package/dist/controlObjectOwnership.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controlObjectOwnership.ts"],"names":[],"mappings":";AACO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAKO,IAAM,2BAAA,GAA8B;AAAA,EACzC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAMO,IAAM,4BAAA,GAA+B;AAAA,EAC1C,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAMO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA;AAAA,EACA,yBAAA;AAAA,EACA,6BAAA;AAAA,EACA,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAMO,IAAM,0BAAA,GAA6B;AAAA,EACxC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAiCA,SAAS,YACP,KAAA,EACG;AACH,EAAA,OAAO,KAAA;AACT;AAGO,IAAM,+BAAA,GAAkC;AAAA,EAC7C,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,iBAAA;AAAA,MACT,SAAA,EAAW,iBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,0BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,UAAU,WAAA,CAAY;AAAA,IACpB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,cAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,wBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,gBAAA;AAAA,MACT,SAAA,EAAW,gBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,aAAa,WAAA,CAAY;AAAA,IACvB;AAAA,MACE,OAAA,EAAS,mBAAA;AAAA,MACT,SAAA,EAAW,mBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,oBAAA;AAAA,MACT,SAAA,EAAW,oBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,WAAA;AAAA,MACrB,WAAA,EAAa,iBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD;AACH;AAEA,SAAS,uBACP,MAAA,EAC8B;AAC9B,EAAA,OAAO,oBAAA,CAAqB,QAAQ,CAAC,IAAA,KAAS,CAAC,GAAG,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AACjE;AAGO,IAAM,gCAAgC,MAAA,CAAO,MAAA;AAAA,EAClD,uBAAuB,+BAA+B;AACxD;AAGO,IAAM,iCAAA,GAAoC;AAAA,EAC/C,OAAA,EAAS,OAAA;AAAA,EACT,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EAAa,2BAAA;AAAA,EACb,YAAA,EAAc,4BAAA;AAAA,EACd,gBAAA,EAAkB,gCAAA;AAAA,EAClB,UAAA,EAAY,0BAAA;AAAA,EACZ,MAAA,EAAQ,+BAAA;AAAA,EACR,IAAA,EAAM;AACR;AAKO,SAAS,gCACd,IAAA,EACuC;AACvC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,6BAAA;AAAA,EACT;AACA,EAAA,OAAO,gCAAgC,IAAI,CAAA;AAC7C;AAKO,SAAS,6BAAA,CACd,MACA,OAAA,EACwC;AACxC,EAAA,OAAO,+BAAA,CAAgC,IAAI,CAAA,CAAE,IAAA;AAAA,IAC3C,CAAC,aAAA,KAAkB,aAAA,CAAc,OAAA,KAAY;AAAA,GAC/C;AACF","file":"controlObjectOwnership.js","sourcesContent":["/** All recognized control object kinds in the ownership model. */\nexport const CONTROL_OBJECT_KINDS = [\n  \"tenant\",\n  \"workspace\",\n  \"principal\",\n  \"tool\",\n  \"pack\",\n  \"ontology\",\n  \"belief\",\n  \"policy_rule\",\n] as const;\n/** A kind of control object (tenant, workspace, principal, tool, etc.). */\nexport type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];\n\n/** Canonical ownership scopes: platform, tenant, workspace, or resource. */\nexport const CONTROL_OBJECT_OWNER_SCOPES = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The scope level that canonically owns a control object. */\nexport type ControlObjectOwnerScope =\n  (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];\n\n/** UI surfaces authorized to edit control objects. */\nexport const CONTROL_OBJECT_EDIT_SURFACES = [\n  \"platform_admin\",\n  \"tenant_admin\",\n  \"workspace_admin\",\n  \"graph_worktree\",\n] as const;\n/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */\nexport type ControlObjectEditSurface =\n  (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];\n\n/** Rules governing how control object configuration flows through the scope hierarchy. */\nexport const CONTROL_OBJECT_INHERITANCE_RULES = [\n  \"none\",\n  \"platform_seed_to_tenant\",\n  \"tenant_default_to_workspace\",\n  \"workspace_narrowing_only\",\n  \"pack_overlay_to_tenant\",\n  \"topic_lineage_to_resource\",\n] as const;\n/** How a control object's configuration propagates through scope hierarchy. */\nexport type ControlObjectInheritanceRule =\n  (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];\n\n/** Scope of impact when a control object is modified. */\nexport const CONTROL_OBJECT_BLAST_RADII = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The furthest scope impacted by a mutation to a control object. */\nexport type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];\n\n/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */\nexport type ControlObjectOwnershipCase = {\n  caseKey: string;\n  caseLabel: string;\n  kind: ControlObjectKind;\n  canonicalOwnerScope: ControlObjectOwnerScope;\n  editSurface: ControlObjectEditSurface;\n  inheritanceRule: ControlObjectInheritanceRule;\n  blastRadius: ControlObjectBlastRadius;\n};\n\n/** Full ownership matrix keyed by control object kind. */\nexport type ControlObjectOwnershipMatrix = Record<\n  ControlObjectKind,\n  readonly ControlObjectOwnershipCase[]\n>;\n\n/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */\nexport type ControlObjectOwnershipContract = {\n  version: \"1.0.0\";\n  kinds: readonly ControlObjectKind[];\n  ownerScopes: readonly ControlObjectOwnerScope[];\n  editSurfaces: readonly ControlObjectEditSurface[];\n  inheritanceRules: readonly ControlObjectInheritanceRule[];\n  blastRadii: readonly ControlObjectBlastRadius[];\n  matrix: ControlObjectOwnershipMatrix;\n  rows: readonly ControlObjectOwnershipCase[];\n};\n\nfunction defineCases<const T extends readonly ControlObjectOwnershipCase[]>(\n  cases: T\n): T {\n  return cases;\n}\n\n/** Static ownership matrix mapping each control object kind to its ownership cases. */\nexport const CONTROL_OBJECT_OWNERSHIP_MATRIX = {\n  tenant: defineCases([\n    {\n      caseKey: \"platform-record\",\n      caseLabel: \"Platform Record\",\n      kind: \"tenant\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  workspace: defineCases([\n    {\n      caseKey: \"tenant-workspace\",\n      caseLabel: \"Tenant Workspace\",\n      kind: \"workspace\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n  principal: defineCases([\n    {\n      caseKey: \"tenant-principal\",\n      caseLabel: \"Tenant Principal\",\n      kind: \"principal\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"workspace_narrowing_only\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  tool: defineCases([\n    {\n      caseKey: \"platform-core\",\n      caseLabel: \"Platform Core\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-custom\",\n      caseLabel: \"Tenant Custom\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  pack: defineCases([\n    {\n      caseKey: \"platform-definition\",\n      caseLabel: \"Platform Definition\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-installation\",\n      caseLabel: \"Tenant Installation\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  ontology: defineCases([\n    {\n      caseKey: \"platform-base\",\n      caseLabel: \"Platform Base\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"pack-overlay\",\n      caseLabel: \"Pack Overlay\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"pack_overlay_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-extension\",\n      caseLabel: \"Tenant Extension\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  belief: defineCases([\n    {\n      caseKey: \"topic-resource\",\n      caseLabel: \"Topic Resource\",\n      kind: \"belief\",\n      canonicalOwnerScope: \"resource\",\n      editSurface: \"graph_worktree\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  policy_rule: defineCases([\n    {\n      caseKey: \"platform-baseline\",\n      caseLabel: \"Platform Baseline\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-bundle\",\n      caseLabel: \"Tenant Bundle\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n    {\n      caseKey: \"workspace-override\",\n      caseLabel: \"Workspace Override\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"workspace\",\n      editSurface: \"workspace_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n} as const satisfies ControlObjectOwnershipMatrix;\n\nfunction flattenOwnershipMatrix(\n  matrix: ControlObjectOwnershipMatrix\n): ControlObjectOwnershipCase[] {\n  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);\n}\n\n/** Flattened array of all ownership cases across all control object kinds. */\nexport const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(\n  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)\n);\n\n/** The canonical ownership contract exposed by the SDK. */\nexport const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {\n  version: \"1.0.0\",\n  kinds: CONTROL_OBJECT_KINDS,\n  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,\n  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,\n  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,\n  blastRadii: CONTROL_OBJECT_BLAST_RADII,\n  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,\n  rows: CONTROL_OBJECT_OWNERSHIP_ROWS,\n} as const satisfies ControlObjectOwnershipContract;\n\n/**\n * List ownership cases for one control-object kind or the full matrix.\n */\nexport function listControlObjectOwnershipCases(\n  kind?: ControlObjectKind\n): readonly ControlObjectOwnershipCase[] {\n  if (!kind) {\n    return CONTROL_OBJECT_OWNERSHIP_ROWS;\n  }\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];\n}\n\n/**\n * Get a specific ownership case by kind and case key.\n */\nexport function getControlObjectOwnershipCase(\n  kind: ControlObjectKind,\n  caseKey: string\n): ControlObjectOwnershipCase | undefined {\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(\n    (ownershipCase) => ownershipCase.caseKey === caseKey\n  );\n}\n"]}

package/dist/coreClient.js

@@ -1,339 +0,0 @@
-// src/coreClient.ts
-var LucernApiError = class extends Error {
-  code;
-  status;
-  invariant;
-  suggestion;
-  details;
-  requestId;
-  correlationId;
-  policyTraceId;
-  constructor(args) {
-    super(args.message);
-    this.name = "LucernApiError";
-    this.code = args.code;
-    this.status = args.status;
-    this.invariant = args.invariant;
-    this.suggestion = args.suggestion;
-    this.details = args.details;
-    this.requestId = args.requestId;
-    this.correlationId = args.correlationId;
-    this.policyTraceId = args.policyTraceId;
-  }
-};
-function toQueryString(scope) {
-  const params = new URLSearchParams();
-  if (scope.tenantId) {
-    params.set("tenantId", scope.tenantId);
-  }
-  if (scope.workspaceId) {
-    params.set("workspaceId", scope.workspaceId);
-  }
-  for (const [key, value] of Object.entries(scope)) {
-    if (key === "tenantId" || key === "workspaceId") {
-      continue;
-    }
-    if (value === void 0) {
-      continue;
-    }
-    params.set(key, String(value));
-  }
-  const serialized = params.toString();
-  return serialized.length > 0 ? `?${serialized}` : "";
-}
-function fillRandomBytes(length) {
-  const bytes = new Uint8Array(length);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(bytes);
-    return bytes;
-  }
-  for (let index = 0; index < length; index += 1) {
-    bytes[index] = Math.floor(Math.random() * 256);
-  }
-  return bytes;
-}
-function generatePortableRequestId() {
-  if (typeof globalThis.crypto?.randomUUID === "function") {
-    return globalThis.crypto.randomUUID();
-  }
-  const bytes = fillRandomBytes(16);
-  bytes[6] = bytes[6] & 15 | 64;
-  bytes[8] = bytes[8] & 63 | 128;
-  const hex = Array.from(bytes, (value) => value.toString(16).padStart(2, "0"));
-  return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(
-    6,
-    8
-  ).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
-}
-function randomIdempotencyKey() {
-  return generatePortableRequestId();
-}
-function isRetryableStatus(status) {
-  return status >= 500 || status === 408 || status === 429;
-}
-function fallbackErrorCode(status) {
-  if (status === 401) {
-    return "AUTHENTICATION_REQUIRED";
-  }
-  if (status === 403) {
-    return "FORBIDDEN";
-  }
-  if (status === 404) {
-    return "NOT_FOUND";
-  }
-  if (status === 408) {
-    return "UPSTREAM_ERROR";
-  }
-  if (status === 409) {
-    return "CONFLICT";
-  }
-  if (status === 429) {
-    return "RATE_LIMIT_EXCEEDED";
-  }
-  if (status >= 500) {
-    return "UPSTREAM_ERROR";
-  }
-  return "INTERNAL_ERROR";
-}
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function parseRetryAfterMs(value) {
-  if (!value) {
-    return null;
-  }
-  const trimmed = value.trim();
-  if (!trimmed) {
-    return null;
-  }
-  const numeric = Number(trimmed);
-  if (Number.isFinite(numeric)) {
-    return Math.max(0, Math.round(numeric * 1e3));
-  }
-  const parsedDate = Date.parse(trimmed);
-  if (Number.isFinite(parsedDate)) {
-    return Math.max(0, parsedDate - Date.now());
-  }
-  return null;
-}
-function computeRetryDelayMs(args) {
-  const baseDelay = args.status === 429 ? Math.max(
-    args.retryAfterMs ?? 0,
-    Math.min(1e3 * 2 ** args.attempt, 1e4)
-  ) : Math.min(1e3 * 2 ** args.attempt, 4e3);
-  if (args.status !== 429) {
-    return baseDelay;
-  }
-  const jitterWindow = Math.max(250, Math.round(baseDelay * 0.25));
-  return baseDelay + Math.round(Math.random() * jitterWindow);
-}
-function timeoutError(timeoutMs) {
-  const error = new Error(`Request timed out after ${timeoutMs}ms`);
-  error.name = "AbortError";
-  return error;
-}
-function readPolicySummaryFromDetails(details) {
-  if (!details || typeof details !== "object" || Array.isArray(details)) {
-    return null;
-  }
-  const directSummary = details.summary;
-  if (typeof directSummary === "string" && directSummary.trim().length > 0) {
-    return directSummary.trim();
-  }
-  const policy = details.policy;
-  if (!policy || typeof policy !== "object" || Array.isArray(policy)) {
-    return null;
-  }
-  const explanation = policy.explanation;
-  if (!explanation || typeof explanation !== "object" || Array.isArray(explanation)) {
-    return null;
-  }
-  const nestedSummary = explanation.summary;
-  if (typeof nestedSummary === "string" && nestedSummary.trim().length > 0) {
-    return nestedSummary.trim();
-  }
-  return null;
-}
-function createGatewayRequestClient(config = {}) {
-  const fetchImpl = config.fetchImpl ?? fetch;
-  const baseUrl = config.baseUrl?.replace(/\/+$/, "") ?? "";
-  const maxRetries = config.maxRetries ?? 2;
-  const requestIdFactory = config.requestIdFactory ?? (() => generatePortableRequestId());
-  async function resolveAuthHeaders() {
-    if (!config.getAuthHeaders) {
-      return {};
-    }
-    return await config.getAuthHeaders();
-  }
-  async function fetchWithTimeout(url, init, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-      return await fetchImpl(url, { ...init, signal: controller.signal });
-    } catch (error) {
-      if (controller.signal.aborted) {
-        throw timeoutError(timeoutMs);
-      }
-      throw error;
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-  async function parsePayload(response) {
-    const text = await response.text();
-    if (!text) {
-      return null;
-    }
-    try {
-      return JSON.parse(text);
-    } catch {
-      return null;
-    }
-  }
-  function resolveTimeoutMs(method, requestTimeoutMs) {
-    if (typeof requestTimeoutMs === "number") {
-      return requestTimeoutMs;
-    }
-    const methodTimeoutMs = config.timeoutMsByMethod?.[method];
-    if (typeof methodTimeoutMs === "number") {
-      return methodTimeoutMs;
-    }
-    return config.timeoutMs ?? 15e3;
-  }
-  function buildApiError(args) {
-    const failure = args.failure;
-    const legacyError = failure && typeof failure.error === "object" && failure.error !== null ? failure.error : failure?.legacyError;
-    const correlationId = failure?.correlationId ?? args.response.headers.get("x-lucern-correlation-id")?.trim() ?? args.requestId;
-    const policyTraceId = failure?.policyTraceId ?? args.response.headers.get("x-lucern-policy-trace-id")?.trim() ?? null;
-    const details = failure?.details ?? legacyError?.details;
-    const policySummary = readPolicySummaryFromDetails(details);
-    return new LucernApiError({
-      code: failure?.code ?? legacyError?.code ?? fallbackErrorCode(args.response.status),
-      message: policySummary ?? (typeof failure?.error === "string" ? failure.error : legacyError?.message ?? (args.response.ok ? "Platform API returned an invalid success payload." : "Platform API request failed.")),
-      status: args.response.status,
-      invariant: failure?.invariant,
-      suggestion: failure?.suggestion,
-      details,
-      requestId: args.requestId,
-      correlationId,
-      policyTraceId
-    });
-  }
-  async function request(args) {
-    const authHeaders = await resolveAuthHeaders();
-    const method = args.method ?? "GET";
-    const timeoutMs = resolveTimeoutMs(method, args.timeoutMs);
-    const headers = new Headers({
-      "content-type": "application/json",
-      ...authHeaders
-    });
-    if (args.idempotencyKey) {
-      headers.set("idempotency-key", args.idempotencyKey);
-    }
-    const requestId = headers.get("x-correlation-id")?.trim() || headers.get("x-request-id")?.trim() || args.requestId || requestIdFactory();
-    if (!headers.has("x-correlation-id") && !headers.has("x-request-id")) {
-      headers.set("x-correlation-id", requestId);
-    }
-    const url = `${baseUrl}${args.path}`;
-    const serializedBody = args.body ? JSON.stringify(args.body) : void 0;
-    const init = {
-      method,
-      headers,
-      body: serializedBody
-    };
-    let lastError;
-    for (let attempt = 0; attempt <= maxRetries; attempt++) {
-      const hookRequestContext = {
-        requestId,
-        attempt,
-        maxRetries,
-        method,
-        path: args.path,
-        url,
-        headers: new Headers(headers),
-        body: serializedBody,
-        timeoutMs
-      };
-      await config.onRequest?.(hookRequestContext);
-      const startedAt = Date.now();
-      try {
-        const response = await fetchWithTimeout(url, init, timeoutMs);
-        const responseClone = response.clone();
-        const payload = await parsePayload(response);
-        const retryAfterMs = parseRetryAfterMs(
-          response.headers.get("Retry-After")
-        );
-        if (!response.ok || !payload?.success) {
-          const failure = payload && !payload.success ? payload : null;
-          const apiError = buildApiError({
-            requestId,
-            response,
-            failure
-          });
-          const willRetry = attempt < maxRetries && isRetryableStatus(response.status);
-          await config.onResponse?.({
-            ...hookRequestContext,
-            durationMs: Date.now() - startedAt,
-            status: response.status,
-            response: responseClone,
-            error: apiError,
-            correlationId: apiError.correlationId ?? requestId,
-            policyTraceId: apiError.policyTraceId ?? null,
-            retryAfterMs,
-            willRetry
-          });
-          if (willRetry) {
-            lastError = apiError;
-            await delay(
-              computeRetryDelayMs({
-                attempt,
-                status: response.status,
-                retryAfterMs
-              })
-            );
-            continue;
-          }
-          throw apiError;
-        }
-        const successPayload = payload;
-        await config.onResponse?.({
-          ...hookRequestContext,
-          durationMs: Date.now() - startedAt,
-          status: response.status,
-          response: responseClone,
-          correlationId: successPayload.correlationId ?? response.headers.get("x-lucern-correlation-id")?.trim() ?? requestId,
-          policyTraceId: successPayload.policyTraceId ?? response.headers.get("x-lucern-policy-trace-id")?.trim() ?? null,
-          idempotentReplay: successPayload.idempotentReplay,
-          retryAfterMs,
-          willRetry: false
-        });
-        return successPayload;
-      } catch (fetchError) {
-        if (fetchError instanceof LucernApiError) {
-          throw fetchError;
-        }
-        const willRetry = attempt < maxRetries;
-        await config.onResponse?.({
-          ...hookRequestContext,
-          durationMs: Date.now() - startedAt,
-          error: fetchError,
-          correlationId: requestId,
-          policyTraceId: null,
-          willRetry
-        });
-        lastError = fetchError;
-        if (willRetry) {
-          await delay(computeRetryDelayMs({ attempt }));
-        }
-      }
-    }
-    throw lastError instanceof Error ? lastError : new Error("Platform API request failed after retries.");
-  }
-  return {
-    request
-  };
-}
-
-export { LucernApiError, createGatewayRequestClient, randomIdempotencyKey, toQueryString };
-//# sourceMappingURL=coreClient.js.map
-//# sourceMappingURL=coreClient.js.map

package/dist/coreClient.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/coreClient.ts"],"names":[],"mappings":";AAuDO,IAAM,cAAA,GAAN,cAA6B,KAAA,CAAM;AAAA,EACxB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EAEhB,YAAY,IAAA,EAUT;AACD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,aAAa,IAAA,CAAK,UAAA;AACvB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AACpB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,gBAAgB,IAAA,CAAK,aAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,IAAA,CAAK,aAAA;AAAA,EAC5B;AACF;AAqEO,SAAS,cACd,KAAA,EACQ;AACR,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAA,CAAO,GAAA,CAAI,UAAA,EAAY,KAAA,CAAM,QAAQ,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,MAAM,WAAA,EAAa;AACrB,IAAA,MAAA,CAAO,GAAA,CAAI,aAAA,EAAe,KAAA,CAAM,WAAW,CAAA;AAAA,EAC7C;AACA,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,GAAA,KAAQ,UAAA,IAAc,GAAA,KAAQ,aAAA,EAAe;AAC/C,MAAA;AAAA,IACF;AACA,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,UAAA,GAAa,OAAO,QAAA,EAAS;AACnC,EAAA,OAAO,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA,GAAK,EAAA;AACpD;AAEA,SAAS,gBAAgB,MAAA,EAA4B;AACnD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACnC,EAAA,IAAI,OAAO,UAAA,CAAW,MAAA,EAAQ,eAAA,KAAoB,UAAA,EAAY;AAC5D,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC9C,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,yBAAA,GAAoC;AAC3C,EAAA,IAAI,OAAO,UAAA,CAAW,MAAA,EAAQ,UAAA,KAAe,UAAA,EAAY;AACvD,IAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AAAA,EACtC;AAEA,EAAA,MAAM,KAAA,GAAQ,gBAAgB,EAAE,CAAA;AAChC,EAAA,KAAA,CAAM,CAAC,CAAA,GAAK,KAAA,CAAM,CAAC,IAAI,EAAA,GAAQ,EAAA;AAC/B,EAAA,KAAA,CAAM,CAAC,CAAA,GAAK,KAAA,CAAM,CAAC,IAAI,EAAA,GAAQ,GAAA;AAC/B,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO,CAAC,KAAA,KAAU,KAAA,CAAM,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA;AAC5E,EAAA,OAAO,GAAG,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAC,IAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAC,IAAI,GAAA,CAAI,KAAA;AAAA,IACpE,CAAA;AAAA,IACA;AAAA,GACF,CAAE,KAAK,EAAE,CAAC,IAAI,GAAA,CAAI,KAAA,CAAM,GAAG,EAAE,CAAA,CAAE,KAAK,EAAE,CAAC,IAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA,CAAA;AACnE;AAKO,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,yBAAA,EAA0B;AACnC;AAEA,SAAS,kBAAkB,MAAA,EAAyB;AAClD,EAAA,OAAO,MAAA,IAAU,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACvD;AAEA,SAAS,kBAAkB,MAAA,EAAwB;AACjD,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,yBAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,WAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,WAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,gBAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,UAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,qBAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAU,GAAA,EAAK;AACjB,IAAA,OAAO,gBAAA;AAAA,EACT;AACA,EAAA,OAAO,gBAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAEA,SAAS,kBAAkB,KAAA,EAAqC;AAC9D,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,OAAO,CAAA;AAC9B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,EAAG;AAC5B,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAM,OAAA,GAAU,GAAI,CAAC,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,UAAU,CAAA,EAAG;AAC/B,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,UAAA,GAAa,IAAA,CAAK,KAAK,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,oBAAoB,IAAA,EAIlB;AACT,EAAA,MAAM,SAAA,GACJ,IAAA,CAAK,MAAA,KAAW,GAAA,GACZ,IAAA,CAAK,GAAA;AAAA,IACH,KAAK,YAAA,IAAgB,CAAA;AAAA,IACrB,KAAK,GAAA,CAAI,GAAA,GAAO,CAAA,IAAK,IAAA,CAAK,SAAS,GAAM;AAAA,MAE3C,IAAA,CAAK,GAAA,CAAI,MAAO,CAAA,IAAK,IAAA,CAAK,SAAS,GAAI,CAAA;AAE7C,EAAA,IAAI,IAAA,CAAK,WAAW,GAAA,EAAK;AACvB,IAAA,OAAO,SAAA;AAAA,EACT;AAEA,EAAA,MAAM,YAAA,GAAe,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,KAAA,CAAM,SAAA,GAAY,IAAI,CAAC,CAAA;AAC/D,EAAA,OAAO,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,YAAY,CAAA;AAC5D;AAEA,SAAS,aAAa,SAAA,EAA0B;AAC9C,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,SAAS,CAAA,EAAA,CAAI,CAAA;AAChE,EAAA,KAAA,CAAM,IAAA,GAAO,YAAA;AACb,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,6BAA6B,OAAA,EAAoC;AACxE,EAAA,IAAI,CAAC,WAAW,OAAO,OAAA,KAAY,YAAY,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,gBAAiB,OAAA,CAAoC,OAAA;AAC3D,EAAA,IAAI,OAAO,aAAA,KAAkB,QAAA,IAAY,cAAc,IAAA,EAAK,CAAE,SAAS,CAAA,EAAG;AACxE,IAAA,OAAO,cAAc,IAAA,EAAK;AAAA,EAC5B;AAEA,EAAA,MAAM,SAAU,OAAA,CAAmC,MAAA;AACnD,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAe,MAAA,CAAuC,WAAA;AAC5D,EAAA,IAAI,CAAC,eAAe,OAAO,WAAA,KAAgB,YAAY,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjF,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,gBAAiB,WAAA,CAAwC,OAAA;AAC/D,EAAA,IAAI,OAAO,aAAA,KAAkB,QAAA,IAAY,cAAc,IAAA,EAAK,CAAE,SAAS,CAAA,EAAG;AACxE,IAAA,OAAO,cAAc,IAAA,EAAK;AAAA,EAC5B;AAEA,EAAA,OAAO,IAAA;AACT;AAKO,SAAS,0BAAA,CAA2B,MAAA,GAA8B,EAAC,EAAG;AAC3E,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACtC,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,EAAA;AACvD,EAAA,MAAM,UAAA,GAAa,OAAO,UAAA,IAAc,CAAA;AACxC,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,gBAAA,KAAqB,MAAM,yBAAA,EAA0B,CAAA;AAErF,EAAA,eAAe,kBAAA,GAAsD;AACnE,IAAA,IAAI,CAAC,OAAO,cAAA,EAAgB;AAC1B,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,OAAO,MAAM,OAAO,cAAA,EAAe;AAAA,EACrC;AAEA,EAAA,eAAe,gBAAA,CACb,GAAA,EACA,IAAA,EACA,SAAA,EACmB;AACnB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAC5D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,UAAU,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IACpE,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,UAAA,CAAW,OAAO,OAAA,EAAS;AAC7B,QAAA,MAAM,aAAa,SAAS,CAAA;AAAA,MAC9B;AACA,MAAA,MAAM,KAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAEA,EAAA,eAAe,aACb,QAAA,EAC4C;AAC5C,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,gBAAA,CACP,QACA,gBAAA,EACQ;AACR,IAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACxC,MAAA,OAAO,gBAAA;AAAA,IACT;AACA,IAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,iBAAA,GAAoB,MAAM,CAAA;AACzD,IAAA,IAAI,OAAO,oBAAoB,QAAA,EAAU;AACvC,MAAA,OAAO,eAAA;AAAA,IACT;AACA,IAAA,OAAO,OAAO,SAAA,IAAa,IAAA;AAAA,EAC7B;AAEA,EAAA,SAAS,cAAc,IAAA,EAIJ;AACjB,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA;AACrB,IAAA,MAAM,WAAA,GACJ,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,KAAA,KAAU,IAAA,GAC9D,OAAA,CAAQ,KAAA,GACR,OAAA,EAAS,WAAA;AACf,IAAA,MAAM,aAAA,GACJ,OAAA,EAAS,aAAA,IACT,IAAA,CAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,yBAAyB,CAAA,EAAG,IAAA,EAAK,IAC3D,IAAA,CAAK,SAAA;AACP,IAAA,MAAM,aAAA,GACJ,OAAA,EAAS,aAAA,IACT,IAAA,CAAK,QAAA,CAAS,QAAQ,GAAA,CAAI,0BAA0B,CAAA,EAAG,IAAA,EAAK,IAC5D,IAAA;AACF,IAAA,MAAM,OAAA,GAAU,OAAA,EAAS,OAAA,IAAW,WAAA,EAAa,OAAA;AACjD,IAAA,MAAM,aAAA,GAAgB,6BAA6B,OAAO,CAAA;AAE1D,IAAA,OAAO,IAAI,cAAA,CAAe;AAAA,MACxB,IAAA,EAAM,SAAS,IAAA,IAAQ,WAAA,EAAa,QAAQ,iBAAA,CAAkB,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,MAClF,OAAA,EACE,aAAA,KACC,OAAO,OAAA,EAAS,KAAA,KAAU,QAAA,GACvB,OAAA,CAAQ,KAAA,GACR,WAAA,EAAa,OAAA,KACZ,IAAA,CAAK,QAAA,CAAS,KACX,mDAAA,GACA,8BAAA,CAAA,CAAA;AAAA,MACV,MAAA,EAAQ,KAAK,QAAA,CAAS,MAAA;AAAA,MACtB,WAAW,OAAA,EAAS,SAAA;AAAA,MACpB,YAAY,OAAA,EAAS,UAAA;AAAA,MACrB,OAAA;AAAA,MACA,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,aAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,eAAe,QAAW,IAAA,EAOa;AACrC,IAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,EAAmB;AAC7C,IAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,IAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA;AACzD,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ;AAAA,MAC1B,cAAA,EAAgB,kBAAA;AAAA,MAChB,GAAG;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,IAAA,CAAK,cAAc,CAAA;AAAA,IACpD;AACA,IAAA,MAAM,SAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,GAAG,IAAA,EAAK,IACtC,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,EAAG,IAAA,EAAK,IAClC,IAAA,CAAK,aACL,gBAAA,EAAiB;AACnB,IAAA,IAAI,CAAC,QAAQ,GAAA,CAAI,kBAAkB,KAAK,CAAC,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,EAAG;AACpE,MAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,SAAS,CAAA;AAAA,IAC3C;AAEA,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,OAAO,CAAA,EAAG,KAAK,IAAI,CAAA,CAAA;AAClC,IAAA,MAAM,iBAAiB,IAAA,CAAK,IAAA,GAAO,KAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AAC/D,IAAA,MAAM,IAAA,GAAoB;AAAA,MACxB,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACR;AAEA,IAAA,IAAI,SAAA;AAEJ,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,MAAA,MAAM,kBAAA,GAAgD;AAAA,QACpD,SAAA;AAAA,QACA,OAAA;AAAA,QACA,UAAA;AAAA,QACA,MAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,GAAA;AAAA,QACA,OAAA,EAAS,IAAI,OAAA,CAAQ,OAAO,CAAA;AAAA,QAC5B,IAAA,EAAM,cAAA;AAAA,QACN;AAAA,OACF;AACA,MAAA,MAAM,MAAA,CAAO,YAAY,kBAAkB,CAAA;AAC3C,MAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,gBAAA,CAAiB,GAAA,EAAK,MAAM,SAAS,CAAA;AAC5D,QAAA,MAAM,aAAA,GAAgB,SAAS,KAAA,EAAM;AACrC,QAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAgB,QAAQ,CAAA;AAC9C,QAAA,MAAM,YAAA,GAAe,iBAAA;AAAA,UACnB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa;AAAA,SACpC;AAEA,QAAA,IAAI,CAAC,QAAA,CAAS,EAAA,IAAM,CAAC,SAAS,OAAA,EAAS;AACrC,UAAA,MAAM,OAAA,GACJ,OAAA,IAAW,CAAC,OAAA,CAAQ,UAAW,OAAA,GAAqC,IAAA;AACtE,UAAA,MAAM,WAAW,aAAA,CAAc;AAAA,YAC7B,SAAA;AAAA,YACA,QAAA;AAAA,YACA;AAAA,WACD,CAAA;AACD,UAAA,MAAM,SAAA,GAAY,OAAA,GAAU,UAAA,IAAc,iBAAA,CAAkB,SAAS,MAAM,CAAA;AAE3E,UAAA,MAAM,OAAO,UAAA,GAAa;AAAA,YACxB,GAAG,kBAAA;AAAA,YACH,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAAA,YACzB,QAAQ,QAAA,CAAS,MAAA;AAAA,YACjB,QAAA,EAAU,aAAA;AAAA,YACV,KAAA,EAAO,QAAA;AAAA,YACP,aAAA,EAAe,SAAS,aAAA,IAAiB,SAAA;AAAA,YACzC,aAAA,EAAe,SAAS,aAAA,IAAiB,IAAA;AAAA,YACzC,YAAA;AAAA,YACA;AAAA,WACD,CAAA;AAED,UAAA,IAAI,SAAA,EAAW;AACb,YAAA,SAAA,GAAY,QAAA;AACZ,YAAA,MAAM,KAAA;AAAA,cACJ,mBAAA,CAAoB;AAAA,gBAClB,OAAA;AAAA,gBACA,QAAQ,QAAA,CAAS,MAAA;AAAA,gBACjB;AAAA,eACD;AAAA,aACH;AACA,YAAA;AAAA,UACF;AAEA,UAAA,MAAM,QAAA;AAAA,QACR;AAEA,QAAA,MAAM,cAAA,GAAiB,OAAA;AACvB,QAAA,MAAM,OAAO,UAAA,GAAa;AAAA,UACxB,GAAG,kBAAA;AAAA,UACH,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAAA,UACzB,QAAQ,QAAA,CAAS,MAAA;AAAA,UACjB,QAAA,EAAU,aAAA;AAAA,UACV,aAAA,EACE,eAAe,aAAA,IACf,QAAA,CAAS,QAAQ,GAAA,CAAI,yBAAyB,CAAA,EAAG,IAAA,EAAK,IACtD,SAAA;AAAA,UACF,aAAA,EACE,eAAe,aAAA,IACf,QAAA,CAAS,QAAQ,GAAA,CAAI,0BAA0B,CAAA,EAAG,IAAA,EAAK,IACvD,IAAA;AAAA,UACF,kBAAkB,cAAA,CAAe,gBAAA;AAAA,UACjC,YAAA;AAAA,UACA,SAAA,EAAW;AAAA,SACZ,CAAA;AAED,QAAA,OAAO,cAAA;AAAA,MACT,SAAS,UAAA,EAAY;AACnB,QAAA,IAAI,sBAAsB,cAAA,EAAgB;AACxC,UAAA,MAAM,UAAA;AAAA,QACR;AACA,QAAA,MAAM,YAAY,OAAA,GAAU,UAAA;AAC5B,QAAA,MAAM,OAAO,UAAA,GAAa;AAAA,UACxB,GAAG,kBAAA;AAAA,UACH,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAAA,UACzB,KAAA,EAAO,UAAA;AAAA,UACP,aAAA,EAAe,SAAA;AAAA,UACf,aAAA,EAAe,IAAA;AAAA,UACf;AAAA,SACD,CAAA;AACD,QAAA,SAAA,GAAY,UAAA;AACZ,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,MAAM,KAAA,CAAM,mBAAA,CAAoB,EAAE,OAAA,EAAS,CAAC,CAAA;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,YAAqB,KAAA,GACvB,SAAA,GACA,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC5D;AAEA,EAAA,OAAO;AAAA,IACL;AAAA,GACF;AACF","file":"coreClient.js","sourcesContent":["import type { JsonObject, JsonValue } from \"./types\";\n\n/** Tenant and workspace identifiers used to scope gateway requests. */\nexport type GatewayScope = {\n  tenantId?: string;\n  workspaceId?: string;\n};\n\n/** Successful response envelope from the platform gateway with correlation metadata. */\nexport type PlatformGatewaySuccess<T> = {\n  success: true;\n  data: T;\n  correlationId: string;\n  policyTraceId: string | null;\n  idempotentReplay: boolean;\n};\n\n/** Failed response envelope with structured error codes and optional invariant references. */\nexport type PlatformGatewayFailure = {\n  success: false;\n  /**\n   * Error string is the canonical envelope field.\n   * Object form is legacy-only compatibility for older gateway responses.\n   */\n  error:\n    | string\n    | {\n        code: string;\n        message: string;\n        details?: JsonValue;\n      };\n  code?: string;\n  invariant?: string | null;\n  suggestion?: string | null;\n  details?: JsonValue;\n  legacyError?: {\n    code: string;\n    message: string;\n    details?: JsonValue;\n  };\n  correlationId: string;\n  policyTraceId: string | null;\n};\n\n/** Discriminated union of success and failure gateway responses. */\nexport type PlatformGatewayEnvelope<T> =\n  | PlatformGatewaySuccess<T>\n  | PlatformGatewayFailure;\n\n/**\n * Structured error thrown when a platform API request fails.\n *\n * Includes HTTP status, machine-readable error code, optional invariant\n * reference, and actionable suggestions for common failure modes.\n */\nexport class LucernApiError extends Error {\n  public readonly code: string;\n  public readonly status: number;\n  public readonly invariant?: string | null;\n  public readonly suggestion?: string | null;\n  public readonly details?: JsonValue;\n  public readonly requestId?: string;\n  public readonly correlationId?: string;\n  public readonly policyTraceId?: string | null;\n\n  constructor(args: {\n    code: string;\n    message: string;\n    status: number;\n    invariant?: string | null;\n    suggestion?: string | null;\n    details?: JsonValue;\n    requestId?: string;\n    correlationId?: string;\n    policyTraceId?: string | null;\n  }) {\n    super(args.message);\n    this.name = \"LucernApiError\";\n    this.code = args.code;\n    this.status = args.status;\n    this.invariant = args.invariant;\n    this.suggestion = args.suggestion;\n    this.details = args.details;\n    this.requestId = args.requestId;\n    this.correlationId = args.correlationId;\n    this.policyTraceId = args.policyTraceId;\n  }\n}\n\n/** Supported HTTP methods for gateway requests. */\nexport type GatewayHttpMethod = \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\n\ntype FetchLike = (\n  input: RequestInfo | URL,\n  init?: RequestInit\n) => Promise<Response>;\n\n/** Context passed to the `onRequest` hook before each gateway request attempt. */\nexport type GatewayRequestHookContext = {\n  requestId: string;\n  attempt: number;\n  maxRetries: number;\n  method: GatewayHttpMethod;\n  path: string;\n  url: string;\n  headers: Headers;\n  body?: string;\n  timeoutMs: number;\n};\n\n/** Context passed to the `onResponse` hook after each gateway request attempt (including retries and failures). */\nexport type GatewayResponseHookContext = GatewayRequestHookContext & {\n  durationMs: number;\n  status?: number;\n  response?: Response;\n  error?: unknown;\n  correlationId?: string;\n  policyTraceId?: string | null;\n  idempotentReplay?: boolean;\n  retryAfterMs?: number | null;\n  willRetry: boolean;\n};\n\n/**\n * Low-level transport configuration for the platform gateway client.\n *\n * Most developers should use {@link createLucernClient} instead, which wraps\n * this config with higher-level conveniences like `apiKey` and `environment`.\n */\nexport type GatewayClientConfig = {\n  baseUrl?: string;\n  fetchImpl?: FetchLike;\n  getAuthHeaders?:\n    | (() => Promise<Record<string, string>>)\n    | (() => Record<string, string>);\n  /** Max retries for transient errors (5xx, network). Defaults to 2. */\n  maxRetries?: number;\n  /** Request timeout in ms. Defaults to 15000. */\n  timeoutMs?: number;\n  /** Optional timeout overrides by HTTP method. */\n  timeoutMsByMethod?: Partial<Record<GatewayHttpMethod, number>>;\n  /** Optional request ID factory used for correlation headers. */\n  requestIdFactory?: () => string;\n  /** Invoked before each request attempt, including retries. */\n  onRequest?:\n    | ((context: GatewayRequestHookContext) => void)\n    | ((context: GatewayRequestHookContext) => Promise<void>);\n  /** Invoked after each request attempt, including retries and failures. */\n  onResponse?:\n    | ((context: GatewayResponseHookContext) => void)\n    | ((context: GatewayResponseHookContext) => Promise<void>);\n};\n\n/**\n * Serialize a gateway query object into a URL query string.\n */\nexport function toQueryString(\n  scope: GatewayScope & Record<string, string | number | boolean | undefined>\n): string {\n  const params = new URLSearchParams();\n  if (scope.tenantId) {\n    params.set(\"tenantId\", scope.tenantId);\n  }\n  if (scope.workspaceId) {\n    params.set(\"workspaceId\", scope.workspaceId);\n  }\n  for (const [key, value] of Object.entries(scope)) {\n    if (key === \"tenantId\" || key === \"workspaceId\") {\n      continue;\n    }\n    if (value === undefined) {\n      continue;\n    }\n    params.set(key, String(value));\n  }\n  const serialized = params.toString();\n  return serialized.length > 0 ? `?${serialized}` : \"\";\n}\n\nfunction fillRandomBytes(length: number): Uint8Array {\n  const bytes = new Uint8Array(length);\n  if (typeof globalThis.crypto?.getRandomValues === \"function\") {\n    globalThis.crypto.getRandomValues(bytes);\n    return bytes;\n  }\n\n  for (let index = 0; index < length; index += 1) {\n    bytes[index] = Math.floor(Math.random() * 256);\n  }\n  return bytes;\n}\n\nfunction generatePortableRequestId(): string {\n  if (typeof globalThis.crypto?.randomUUID === \"function\") {\n    return globalThis.crypto.randomUUID();\n  }\n\n  const bytes = fillRandomBytes(16);\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = Array.from(bytes, (value) => value.toString(16).padStart(2, \"0\"));\n  return `${hex.slice(0, 4).join(\"\")}-${hex.slice(4, 6).join(\"\")}-${hex.slice(\n    6,\n    8\n  ).join(\"\")}-${hex.slice(8, 10).join(\"\")}-${hex.slice(10).join(\"\")}`;\n}\n\n/**\n * Generate a random idempotency key for retry-safe writes.\n */\nexport function randomIdempotencyKey(): string {\n  return generatePortableRequestId();\n}\n\nfunction isRetryableStatus(status: number): boolean {\n  return status >= 500 || status === 408 || status === 429;\n}\n\nfunction fallbackErrorCode(status: number): string {\n  if (status === 401) {\n    return \"AUTHENTICATION_REQUIRED\";\n  }\n  if (status === 403) {\n    return \"FORBIDDEN\";\n  }\n  if (status === 404) {\n    return \"NOT_FOUND\";\n  }\n  if (status === 408) {\n    return \"UPSTREAM_ERROR\";\n  }\n  if (status === 409) {\n    return \"CONFLICT\";\n  }\n  if (status === 429) {\n    return \"RATE_LIMIT_EXCEEDED\";\n  }\n  if (status >= 500) {\n    return \"UPSTREAM_ERROR\";\n  }\n  return \"INTERNAL_ERROR\";\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nfunction parseRetryAfterMs(value: string | null): number | null {\n  if (!value) {\n    return null;\n  }\n  const trimmed = value.trim();\n  if (!trimmed) {\n    return null;\n  }\n  const numeric = Number(trimmed);\n  if (Number.isFinite(numeric)) {\n    return Math.max(0, Math.round(numeric * 1000));\n  }\n  const parsedDate = Date.parse(trimmed);\n  if (Number.isFinite(parsedDate)) {\n    return Math.max(0, parsedDate - Date.now());\n  }\n  return null;\n}\n\nfunction computeRetryDelayMs(args: {\n  attempt: number;\n  status?: number;\n  retryAfterMs?: number | null;\n}): number {\n  const baseDelay =\n    args.status === 429\n      ? Math.max(\n          args.retryAfterMs ?? 0,\n          Math.min(1000 * 2 ** args.attempt, 10_000)\n        )\n      : Math.min(1000 * 2 ** args.attempt, 4000);\n\n  if (args.status !== 429) {\n    return baseDelay;\n  }\n\n  const jitterWindow = Math.max(250, Math.round(baseDelay * 0.25));\n  return baseDelay + Math.round(Math.random() * jitterWindow);\n}\n\nfunction timeoutError(timeoutMs: number): Error {\n  const error = new Error(`Request timed out after ${timeoutMs}ms`);\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction readPolicySummaryFromDetails(details?: JsonValue): string | null {\n  if (!details || typeof details !== \"object\" || Array.isArray(details)) {\n    return null;\n  }\n\n  const directSummary = (details as { summary?: JsonValue }).summary;\n  if (typeof directSummary === \"string\" && directSummary.trim().length > 0) {\n    return directSummary.trim();\n  }\n\n  const policy = (details as { policy?: JsonValue }).policy;\n  if (!policy || typeof policy !== \"object\" || Array.isArray(policy)) {\n    return null;\n  }\n\n  const explanation = (policy as { explanation?: JsonValue }).explanation;\n  if (!explanation || typeof explanation !== \"object\" || Array.isArray(explanation)) {\n    return null;\n  }\n\n  const nestedSummary = (explanation as { summary?: JsonValue }).summary;\n  if (typeof nestedSummary === \"string\" && nestedSummary.trim().length > 0) {\n    return nestedSummary.trim();\n  }\n\n  return null;\n}\n\n/**\n * Create the transport client used by all SDK modules.\n */\nexport function createGatewayRequestClient(config: GatewayClientConfig = {}) {\n  const fetchImpl = config.fetchImpl ?? fetch;\n  const baseUrl = config.baseUrl?.replace(/\\/+$/, \"\") ?? \"\";\n  const maxRetries = config.maxRetries ?? 2;\n  const requestIdFactory = config.requestIdFactory ?? (() => generatePortableRequestId());\n\n  async function resolveAuthHeaders(): Promise<Record<string, string>> {\n    if (!config.getAuthHeaders) {\n      return {};\n    }\n    return await config.getAuthHeaders();\n  }\n\n  async function fetchWithTimeout(\n    url: string,\n    init: RequestInit,\n    timeoutMs: number\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), timeoutMs);\n    try {\n      return await fetchImpl(url, { ...init, signal: controller.signal });\n    } catch (error) {\n      if (controller.signal.aborted) {\n        throw timeoutError(timeoutMs);\n      }\n      throw error;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  async function parsePayload<T>(\n    response: Response\n  ): Promise<PlatformGatewayEnvelope<T> | null> {\n    const text = await response.text();\n    if (!text) {\n      return null;\n    }\n    try {\n      return JSON.parse(text) as PlatformGatewayEnvelope<T>;\n    } catch {\n      return null;\n    }\n  }\n\n  function resolveTimeoutMs(\n    method: GatewayHttpMethod,\n    requestTimeoutMs?: number\n  ): number {\n    if (typeof requestTimeoutMs === \"number\") {\n      return requestTimeoutMs;\n    }\n    const methodTimeoutMs = config.timeoutMsByMethod?.[method];\n    if (typeof methodTimeoutMs === \"number\") {\n      return methodTimeoutMs;\n    }\n    return config.timeoutMs ?? 15_000;\n  }\n\n  function buildApiError(args: {\n    requestId: string;\n    response: Response;\n    failure?: PlatformGatewayFailure | null;\n  }): LucernApiError {\n    const failure = args.failure;\n    const legacyError =\n      failure && typeof failure.error === \"object\" && failure.error !== null\n        ? failure.error\n        : failure?.legacyError;\n    const correlationId =\n      failure?.correlationId ??\n      args.response.headers.get(\"x-lucern-correlation-id\")?.trim() ??\n      args.requestId;\n    const policyTraceId =\n      failure?.policyTraceId ??\n      args.response.headers.get(\"x-lucern-policy-trace-id\")?.trim() ??\n      null;\n    const details = failure?.details ?? legacyError?.details;\n    const policySummary = readPolicySummaryFromDetails(details);\n\n    return new LucernApiError({\n      code: failure?.code ?? legacyError?.code ?? fallbackErrorCode(args.response.status),\n      message:\n        policySummary ??\n        (typeof failure?.error === \"string\"\n          ? failure.error\n          : legacyError?.message ??\n            (args.response.ok\n              ? \"Platform API returned an invalid success payload.\"\n              : \"Platform API request failed.\")),\n      status: args.response.status,\n      invariant: failure?.invariant,\n      suggestion: failure?.suggestion,\n      details,\n      requestId: args.requestId,\n      correlationId,\n      policyTraceId,\n    });\n  }\n\n  async function request<T>(args: {\n    path: string;\n    method?: GatewayHttpMethod;\n    body?: JsonObject;\n    idempotencyKey?: string;\n    requestId?: string;\n    timeoutMs?: number;\n  }): Promise<PlatformGatewaySuccess<T>> {\n    const authHeaders = await resolveAuthHeaders();\n    const method = args.method ?? \"GET\";\n    const timeoutMs = resolveTimeoutMs(method, args.timeoutMs);\n    const headers = new Headers({\n      \"content-type\": \"application/json\",\n      ...authHeaders,\n    });\n    if (args.idempotencyKey) {\n      headers.set(\"idempotency-key\", args.idempotencyKey);\n    }\n    const requestId =\n      headers.get(\"x-correlation-id\")?.trim() ||\n      headers.get(\"x-request-id\")?.trim() ||\n      args.requestId ||\n      requestIdFactory();\n    if (!headers.has(\"x-correlation-id\") && !headers.has(\"x-request-id\")) {\n      headers.set(\"x-correlation-id\", requestId);\n    }\n\n    const url = `${baseUrl}${args.path}`;\n    const serializedBody = args.body ? JSON.stringify(args.body) : undefined;\n    const init: RequestInit = {\n      method,\n      headers,\n      body: serializedBody,\n    };\n\n    let lastError: unknown;\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      const hookRequestContext: GatewayRequestHookContext = {\n        requestId,\n        attempt,\n        maxRetries,\n        method,\n        path: args.path,\n        url,\n        headers: new Headers(headers),\n        body: serializedBody,\n        timeoutMs,\n      };\n      await config.onRequest?.(hookRequestContext);\n      const startedAt = Date.now();\n      try {\n        const response = await fetchWithTimeout(url, init, timeoutMs);\n        const responseClone = response.clone();\n        const payload = await parsePayload<T>(response);\n        const retryAfterMs = parseRetryAfterMs(\n          response.headers.get(\"Retry-After\")\n        );\n\n        if (!response.ok || !payload?.success) {\n          const failure =\n            payload && !payload.success ? (payload as PlatformGatewayFailure) : null;\n          const apiError = buildApiError({\n            requestId,\n            response,\n            failure,\n          });\n          const willRetry = attempt < maxRetries && isRetryableStatus(response.status);\n\n          await config.onResponse?.({\n            ...hookRequestContext,\n            durationMs: Date.now() - startedAt,\n            status: response.status,\n            response: responseClone,\n            error: apiError,\n            correlationId: apiError.correlationId ?? requestId,\n            policyTraceId: apiError.policyTraceId ?? null,\n            retryAfterMs,\n            willRetry,\n          });\n\n          if (willRetry) {\n            lastError = apiError;\n            await delay(\n              computeRetryDelayMs({\n                attempt,\n                status: response.status,\n                retryAfterMs,\n              })\n            );\n            continue;\n          }\n\n          throw apiError;\n        }\n\n        const successPayload = payload as PlatformGatewaySuccess<T>;\n        await config.onResponse?.({\n          ...hookRequestContext,\n          durationMs: Date.now() - startedAt,\n          status: response.status,\n          response: responseClone,\n          correlationId:\n            successPayload.correlationId ??\n            response.headers.get(\"x-lucern-correlation-id\")?.trim() ??\n            requestId,\n          policyTraceId:\n            successPayload.policyTraceId ??\n            response.headers.get(\"x-lucern-policy-trace-id\")?.trim() ??\n            null,\n          idempotentReplay: successPayload.idempotentReplay,\n          retryAfterMs,\n          willRetry: false,\n        });\n\n        return successPayload;\n      } catch (fetchError) {\n        if (fetchError instanceof LucernApiError) {\n          throw fetchError;\n        }\n        const willRetry = attempt < maxRetries;\n        await config.onResponse?.({\n          ...hookRequestContext,\n          durationMs: Date.now() - startedAt,\n          error: fetchError,\n          correlationId: requestId,\n          policyTraceId: null,\n          willRetry,\n        });\n        lastError = fetchError;\n        if (willRetry) {\n          await delay(computeRetryDelayMs({ attempt }));\n        }\n      }\n    }\n\n    throw lastError instanceof Error\n      ? lastError\n      : new Error(\"Platform API request failed after retries.\");\n  }\n\n  return {\n    request,\n  };\n}\n"]}