@lucern/sdk 0.2.0-alpha.5 → 0.2.0-alpha.6

package/dist/lib/platform/sdk/contextFacade.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Context facade factory exposed for testing / audit tooling.
+ *
+ * Lives canonically in `lucern/packages/sdk/src/facade/context` and is
+ * re-exported here so downstream tests can import from the public
+ * `@lucern/sdk` entry point.
+ *
+ * Added: EK-16 T7.3.4 (2026-04-18).
+ */
+export { createContextFacade, type ContextFacadeConfig, type ContextFacadeTransport, } from "./facade/context";

package/dist/lib/platform/sdk/contextFacade.js

@@ -0,0 +1,10 @@
+/**
+ * Context facade factory exposed for testing / audit tooling.
+ *
+ * Lives canonically in `lucern/packages/sdk/src/facade/context` and is
+ * re-exported here so downstream tests can import from the public
+ * `@lucern/sdk` entry point.
+ *
+ * Added: EK-16 T7.3.4 (2026-04-18).
+ */
+export { createContextFacade, } from "./facade/context.js";

package/dist/lib/platform/sdk/contextPackCompiler.d.ts

@@ -1,5 +1,5 @@
 import { type ContextCompilationMode, type ContextPackV1, type PackWeightOverride, type ContextRankingProfile } from "./contracts/context-pack.contract";
-import { resolveEffectiveWeights } from "../../convex-kernel/src/compat/contextPackPolicy";
+import { resolveEffectiveWeights } from "@lucern/reasoning-kernel/compat/contextPackPolicy";
 export type ContextPackTopicRow = {
     _id: string;
     name?: string;

package/dist/lib/platform/sdk/contextPackCompiler.js

@@ -1,6 +1,6 @@
 import { CONTEXT_PACK_SCHEMA_VERSION, DEFAULT_COMPILATION_MODE, DEFAULT_ENTITY_LIMIT, MAX_ENTITY_LIMIT, } from "./contracts/context-pack.contract.js";
-import { buildInjectionPlan, parseTokenBudget, rankContextSection, rankEntities, resolveEffectiveWeights, } from "../../convex-kernel/src/compat/contextPackPolicy.js";
-import { validateContextPackSchema } from "../../mcp/src/contextPackSchema.js";
+import { buildInjectionPlan, parseTokenBudget, rankContextSection, rankEntities, resolveEffectiveWeights, } from "@lucern/reasoning-kernel/compat/contextPackPolicy";
+import { validateContextPackSchema } from "@/packages/mcp/src/contextPackSchema";
 function assertContextPackSchema(payload) {
     const result = validateContextPackSchema(payload);
     if (!result.valid) {

package/dist/lib/platform/sdk/eventsCore.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Internal events/webhooks client factories exposed for testing / audit.
+ *
+ * These core factories live in `@lucern/client-core` and are bundled
+ * into `@lucern/sdk` at build time via the tsup alias map. Re-exported
+ * here so downstream test/audit tooling can import them from the
+ * public `@lucern/sdk` entry point instead of reaching into the
+ * package internals directly.
+ *
+ * Added: EK-16 T7.3.4 (2026-04-18).
+ */
+export { createEventsClientCore, type EventsClientCoreConfig, } from "@/lucern/packages/client-core/src/events";
+export { createWebhooksClientCore, type WebhooksClientCoreConfig, } from "@/lucern/packages/client-core/src/webhooks";

package/dist/lib/platform/sdk/eventsCore.js

@@ -0,0 +1,13 @@
+/**
+ * Internal events/webhooks client factories exposed for testing / audit.
+ *
+ * These core factories live in `@lucern/client-core` and are bundled
+ * into `@lucern/sdk` at build time via the tsup alias map. Re-exported
+ * here so downstream test/audit tooling can import them from the
+ * public `@lucern/sdk` entry point instead of reaching into the
+ * package internals directly.
+ *
+ * Added: EK-16 T7.3.4 (2026-04-18).
+ */
+export { createEventsClientCore, } from "@/lucern/packages/client-core/src/events";
+export { createWebhooksClientCore, } from "@/lucern/packages/client-core/src/webhooks";

package/dist/lib/platform/sdk/index.d.ts

@@ -12,6 +12,7 @@ export * from "./audiencesClient";
 export * from "./auditClient";
 export * from "./beliefsClient";
 export * from "./client";
+export * from "./contextFacade";
 export * from "./contextPackCompiler";
 export * from "./controlObjectOwnership";
 export * from "./coreClient";
@@ -28,11 +29,13 @@ export * from "./domainContext";
 export * from "./customTools";
 export * from "./decisionsClient";
 export * from "./events";
+export * from "./eventsCore";
 export * from "./graphClient";
 export * from "./harnessClient";
 export * from "./identityClient";
 export * from "./learningClient";
 export * from "./mcpParityClient";
+export * from "./mcpParitySurface";
 export * from "./ontologyClient";
 export * from "./packRuntime";
 export * from "./packsClient";

package/dist/lib/platform/sdk/index.js

@@ -12,6 +12,7 @@ export * from "./audiencesClient.js";
 export * from "./auditClient.js";
 export * from "./beliefsClient.js";
 export * from "./client.js";
+export * from "./contextFacade.js";
 export * from "./contextPackCompiler.js";
 export * from "./controlObjectOwnership.js";
 export * from "./coreClient.js";
@@ -28,11 +29,13 @@ export * from "./domainContext.js";
 export * from "./customTools.js";
 export * from "./decisionsClient.js";
 export * from "./events.js";
+export * from "./eventsCore.js";
 export * from "./graphClient.js";
 export * from "./harnessClient.js";
 export * from "./identityClient.js";
 export * from "./learningClient.js";
 export * from "./mcpParityClient.js";
+export * from "./mcpParitySurface.js";
 export * from "./ontologyClient.js";
 export * from "./packRuntime.js";
 export * from "./packsClient.js";

package/dist/lib/platform/sdk/promptCatalog.d.ts

@@ -1 +1 @@
-export { getPromptCatalogSnapshot } from "../../../lib/langfuse/prompt-catalog";
+export { getPromptCatalogSnapshot } from "@/lib/langfuse/prompt-catalog";

package/dist/lib/platform/sdk/promptCatalog.js

@@ -1 +1 @@
-export { getPromptCatalogSnapshot } from "../../../lib/langfuse/prompt-catalog.js";
+export { getPromptCatalogSnapshot } from "@/lib/langfuse/prompt-catalog";

package/dist/lucern/contracts/src/auth-context.contract.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @lucern/contracts — auth-context compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";

package/dist/lucern/contracts/src/auth-context.contract.js

@@ -0,0 +1,8 @@
+/**
+ * @lucern/contracts — auth-context compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract.js";

package/dist/lucern/contracts/src/auth-session.contract.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @lucern/contracts — auth-session compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract";

package/dist/lucern/contracts/src/auth-session.contract.js

@@ -0,0 +1,8 @@
+/**
+ * @lucern/contracts — auth-session compat shim
+ *
+ * This file consolidated into ./auth.contract.ts during EK-16 T1 PR 3a.
+ * Retained here until the Lucern 1.0.0 barrel-sunset cut (D12).
+ * New code should import from "@lucern/contracts" (barrel) or "./auth.contract".
+ */
+export * from "./auth.contract.js";

package/dist/lucern/contracts/src/auth.contract.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @lucern/contracts — auth (canonical support contract)
+ *
+ * Consolidated flat support surface for Lucern authentication:
+ *   - Session primitives (auth modes, principal types, lifecycle)
+ *   - AuthContext shape + McpTransportKind + LucernSdkClient alias
+ *
+ * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts
+ * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).
+ */
+export declare const SESSION_AUTH_MODES: readonly ["interactive_user", "service_principal", "tenant_api_key", "session_token"];
+export type SessionAuthMode = (typeof SESSION_AUTH_MODES)[number];
+export declare const SESSION_PRINCIPAL_TYPES: readonly ["human", "service", "agent"];
+export type SessionPrincipalType = (typeof SESSION_PRINCIPAL_TYPES)[number];
+export declare const SESSION_LIFECYCLE_STATUSES: readonly ["active", "expired", "revoked"];
+export type SessionLifecycleStatus = (typeof SESSION_LIFECYCLE_STATUSES)[number];
+export type SessionDelegationHop = {
+    principalId: string;
+    principalType: SessionPrincipalType;
+    authMode?: SessionAuthMode;
+    sessionId?: string;
+    delegatedAt?: number;
+    reason?: string;
+};
+export type SessionAuditOutcome = "accepted" | "rejected" | "revoked" | "expired";
+export type SessionAuditEnvelope = {
+    sessionId: string;
+    authMode: SessionAuthMode;
+    principalId: string;
+    principalType: SessionPrincipalType;
+    tenantId: string;
+    workspaceId?: string;
+    apiKeyId?: string;
+    scopes: readonly string[];
+    roles?: readonly string[];
+    delegationChain?: readonly SessionDelegationHop[];
+    sourceSessionId?: string;
+    expiresAt?: number;
+    request?: {
+        endpoint?: string;
+        method?: string;
+        correlationId?: string;
+    };
+    result?: {
+        outcome: SessionAuditOutcome;
+        reason?: string;
+    };
+};
+export declare function inferSessionPrincipalType(principalId: string): SessionPrincipalType;
+export declare function normalizeDelegationChain(args: {
+    delegationChain?: readonly SessionDelegationHop[];
+    delegatedBy?: string;
+    delegatedByType?: SessionPrincipalType;
+    delegatedAt?: number;
+    reason?: string;
+}): SessionDelegationHop[] | undefined;
+export declare function lastDelegator(delegationChain?: readonly SessionDelegationHop[]): string | undefined;
+import type { ConvexAdminClient } from "./convex-admin.contract";
+export type McpTransportKind = "stdio" | "hosted";
+export type LucernSdkClient = unknown;
+/**
+ * Session authentication context — injected by withAuth() middleware.
+ *
+ * Built from TenantConfig at dispatch time. Agent sessions get
+ * AGENT_IDENTITY + "agent:internal" role + unrestricted access.
+ * User sessions get Clerk userId + resolved role + tool ACLs.
+ */
+export type AuthContext = {
+    sessionType: "agent" | "user";
+    userId: string;
+    tenantId: string;
+    role: string;
+    allowedTopics: string[] | null;
+    groupIds: string[];
+    permittedPackKeys: string[];
+    sessionId: string;
+    principalId?: string;
+    principalType?: SessionPrincipalType;
+    workspaceId?: string;
+    scopes?: string[];
+    authMode?: SessionAuthMode;
+    roles?: string[];
+    transportKind?: McpTransportKind;
+    lucernClient?: LucernSdkClient;
+    convex?: ConvexAdminClient;
+    setDefaultScopeContext?: (scopeId: string) => Promise<unknown>;
+    matchesWorkspaceReasoningScope?: (node: unknown, scope: unknown) => boolean;
+};

package/dist/lucern/contracts/src/auth.contract.js

@@ -0,0 +1,57 @@
+/**
+ * @lucern/contracts — auth (canonical support contract)
+ *
+ * Consolidated flat support surface for Lucern authentication:
+ *   - Session primitives (auth modes, principal types, lifecycle)
+ *   - AuthContext shape + McpTransportKind + LucernSdkClient alias
+ *
+ * Consolidated from src/auth-session.contract.ts and src/auth-context.contract.ts
+ * in EK-16 T1 PR 3a. Compat shims remain at both old paths until Lucern 1.0.0 (D12).
+ */
+// =============================================================================
+// SESSION PRIMITIVES
+// (Formerly src/auth-session.contract.ts)
+// =============================================================================
+export const SESSION_AUTH_MODES = [
+    "interactive_user",
+    "service_principal",
+    "tenant_api_key",
+    "session_token",
+];
+export const SESSION_PRINCIPAL_TYPES = ["human", "service", "agent"];
+export const SESSION_LIFECYCLE_STATUSES = [
+    "active",
+    "expired",
+    "revoked",
+];
+export function inferSessionPrincipalType(principalId) {
+    if (principalId.startsWith("user:")) {
+        return "human";
+    }
+    if (principalId.startsWith("agent:")) {
+        return "agent";
+    }
+    return "service";
+}
+export function normalizeDelegationChain(args) {
+    if (args.delegationChain && args.delegationChain.length > 0) {
+        return [...args.delegationChain];
+    }
+    if (!args.delegatedBy) {
+        return;
+    }
+    return [
+        {
+            principalId: args.delegatedBy,
+            principalType: args.delegatedByType ?? inferSessionPrincipalType(args.delegatedBy),
+            delegatedAt: args.delegatedAt,
+            reason: args.reason,
+        },
+    ];
+}
+export function lastDelegator(delegationChain) {
+    if (!delegationChain || delegationChain.length === 0) {
+        return;
+    }
+    return delegationChain[delegationChain.length - 1]?.principalId;
+}