@lucern/sdk 0.2.0-alpha.7 → 0.2.0-alpha.9

package/{src/controlObjectOwnership.ts → dist/controlObjectOwnership.js}

@@ -1,5 +1,5 @@
-/** All recognized control object kinds in the ownership model. */
-export const CONTROL_OBJECT_KINDS = [
+// src/controlObjectOwnership.ts
+var CONTROL_OBJECT_KINDS = [
   "tenant",
   "workspace",
   "principal",
@@ -7,93 +7,38 @@ export const CONTROL_OBJECT_KINDS = [
   "pack",
   "ontology",
   "belief",
-  "policy_rule",
-] as const;
-/** A kind of control object (tenant, workspace, principal, tool, etc.). */
-export type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];
-
-/** Canonical ownership scopes: platform, tenant, workspace, or resource. */
-export const CONTROL_OBJECT_OWNER_SCOPES = [
+  "policy_rule"
+];
+var CONTROL_OBJECT_OWNER_SCOPES = [
   "platform",
   "tenant",
   "workspace",
-  "resource",
-] as const;
-/** The scope level that canonically owns a control object. */
-export type ControlObjectOwnerScope =
-  (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];
-
-/** UI surfaces authorized to edit control objects. */
-export const CONTROL_OBJECT_EDIT_SURFACES = [
+  "resource"
+];
+var CONTROL_OBJECT_EDIT_SURFACES = [
   "platform_admin",
   "tenant_admin",
   "workspace_admin",
-  "graph_worktree",
-] as const;
-/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */
-export type ControlObjectEditSurface =
-  (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];
-
-/** Rules governing how control object configuration flows through the scope hierarchy. */
-export const CONTROL_OBJECT_INHERITANCE_RULES = [
+  "graph_worktree"
+];
+var CONTROL_OBJECT_INHERITANCE_RULES = [
   "none",
   "platform_seed_to_tenant",
   "tenant_default_to_workspace",
   "workspace_narrowing_only",
   "pack_overlay_to_tenant",
-  "topic_lineage_to_resource",
-] as const;
-/** How a control object's configuration propagates through scope hierarchy. */
-export type ControlObjectInheritanceRule =
-  (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];
-
-/** Scope of impact when a control object is modified. */
-export const CONTROL_OBJECT_BLAST_RADII = [
+  "topic_lineage_to_resource"
+];
+var CONTROL_OBJECT_BLAST_RADII = [
   "platform",
   "tenant",
   "workspace",
-  "resource",
-] as const;
-/** The furthest scope impacted by a mutation to a control object. */
-export type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];
-
-/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */
-export type ControlObjectOwnershipCase = {
-  caseKey: string;
-  caseLabel: string;
-  kind: ControlObjectKind;
-  canonicalOwnerScope: ControlObjectOwnerScope;
-  editSurface: ControlObjectEditSurface;
-  inheritanceRule: ControlObjectInheritanceRule;
-  blastRadius: ControlObjectBlastRadius;
-};
-
-/** Full ownership matrix keyed by control object kind. */
-export type ControlObjectOwnershipMatrix = Record<
-  ControlObjectKind,
-  readonly ControlObjectOwnershipCase[]
->;
-
-/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */
-export type ControlObjectOwnershipContract = {
-  version: "1.0.0";
-  kinds: readonly ControlObjectKind[];
-  ownerScopes: readonly ControlObjectOwnerScope[];
-  editSurfaces: readonly ControlObjectEditSurface[];
-  inheritanceRules: readonly ControlObjectInheritanceRule[];
-  blastRadii: readonly ControlObjectBlastRadius[];
-  matrix: ControlObjectOwnershipMatrix;
-  rows: readonly ControlObjectOwnershipCase[];
-};
-
-function defineCases<const T extends readonly ControlObjectOwnershipCase[]>(
-  cases: T
-): T {
+  "resource"
+];
+function defineCases(cases) {
   return cases;
 }
-
-/** Static ownership matrix mapping each control object kind to its ownership cases. */
-export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
+var CONTROL_OBJECT_OWNERSHIP_MATRIX = {
   tenant: defineCases([
     {
       caseKey: "platform-record",
@@ -102,8 +47,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "none",
-      blastRadius: "tenant",
-    },
+      blastRadius: "tenant"
+    }
   ]),
   workspace: defineCases([
     {
@@ -113,8 +58,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "workspace",
-    },
+      blastRadius: "workspace"
+    }
   ]),
   principal: defineCases([
     {
@@ -124,8 +69,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "workspace_narrowing_only",
-      blastRadius: "resource",
-    },
+      blastRadius: "resource"
+    }
   ]),
   tool: defineCases([
     {
@@ -135,7 +80,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform",
+      blastRadius: "platform"
     },
     {
       caseKey: "tenant-custom",
@@ -144,8 +89,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "tenant",
-    },
+      blastRadius: "tenant"
+    }
   ]),
   pack: defineCases([
     {
@@ -155,7 +100,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform",
+      blastRadius: "platform"
     },
     {
       caseKey: "tenant-installation",
@@ -164,8 +109,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "tenant",
-    },
+      blastRadius: "tenant"
+    }
   ]),
   ontology: defineCases([
     {
@@ -175,7 +120,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform",
+      blastRadius: "platform"
     },
     {
       caseKey: "pack-overlay",
@@ -184,7 +129,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "pack_overlay_to_tenant",
-      blastRadius: "platform",
+      blastRadius: "platform"
     },
     {
       caseKey: "tenant-extension",
@@ -193,8 +138,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "topic_lineage_to_resource",
-      blastRadius: "tenant",
-    },
+      blastRadius: "tenant"
+    }
   ]),
   belief: defineCases([
     {
@@ -204,8 +149,8 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "resource",
       editSurface: "graph_worktree",
       inheritanceRule: "topic_lineage_to_resource",
-      blastRadius: "resource",
-    },
+      blastRadius: "resource"
+    }
   ]),
   policy_rule: defineCases([
     {
@@ -215,7 +160,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "platform",
       editSurface: "platform_admin",
       inheritanceRule: "platform_seed_to_tenant",
-      blastRadius: "platform",
+      blastRadius: "platform"
     },
     {
       caseKey: "tenant-bundle",
@@ -224,7 +169,7 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "tenant",
       editSurface: "tenant_admin",
       inheritanceRule: "tenant_default_to_workspace",
-      blastRadius: "tenant",
+      blastRadius: "tenant"
     },
     {
       caseKey: "workspace-override",
@@ -233,24 +178,17 @@ export const CONTROL_OBJECT_OWNERSHIP_MATRIX = {
       canonicalOwnerScope: "workspace",
       editSurface: "workspace_admin",
       inheritanceRule: "none",
-      blastRadius: "workspace",
-    },
-  ]),
-} as const satisfies ControlObjectOwnershipMatrix;
-
-function flattenOwnershipMatrix(
-  matrix: ControlObjectOwnershipMatrix
-): ControlObjectOwnershipCase[] {
+      blastRadius: "workspace"
+    }
+  ])
+};
+function flattenOwnershipMatrix(matrix) {
   return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);
 }
-
-/** Flattened array of all ownership cases across all control object kinds. */
-export const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(
+var CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(
   flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)
 );
-
-/** The canonical ownership contract exposed by the SDK. */
-export const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
+var CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
   version: "1.0.0",
   kinds: CONTROL_OBJECT_KINDS,
   ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,
@@ -258,29 +196,20 @@ export const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
   inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,
   blastRadii: CONTROL_OBJECT_BLAST_RADII,
   matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,
-  rows: CONTROL_OBJECT_OWNERSHIP_ROWS,
-} as const satisfies ControlObjectOwnershipContract;
-
-/**
- * List ownership cases for one control-object kind or the full matrix.
- */
-export function listControlObjectOwnershipCases(
-  kind?: ControlObjectKind
-): readonly ControlObjectOwnershipCase[] {
+  rows: CONTROL_OBJECT_OWNERSHIP_ROWS
+};
+function listControlObjectOwnershipCases(kind) {
   if (!kind) {
     return CONTROL_OBJECT_OWNERSHIP_ROWS;
   }
   return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];
 }
-
-/**
- * Get a specific ownership case by kind and case key.
- */
-export function getControlObjectOwnershipCase(
-  kind: ControlObjectKind,
-  caseKey: string
-): ControlObjectOwnershipCase | undefined {
+function getControlObjectOwnershipCase(kind, caseKey) {
   return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(
     (ownershipCase) => ownershipCase.caseKey === caseKey
   );
 }
+
+export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, getControlObjectOwnershipCase, listControlObjectOwnershipCases };
+//# sourceMappingURL=controlObjectOwnership.js.map
+//# sourceMappingURL=controlObjectOwnership.js.map

package/dist/controlObjectOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controlObjectOwnership.ts"],"names":[],"mappings":";AACO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAKO,IAAM,2BAAA,GAA8B;AAAA,EACzC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAMO,IAAM,4BAAA,GAA+B;AAAA,EAC1C,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAMO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA;AAAA,EACA,yBAAA;AAAA,EACA,6BAAA;AAAA,EACA,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAMO,IAAM,0BAAA,GAA6B;AAAA,EACxC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAiCA,SAAS,YACP,KAAA,EACG;AACH,EAAA,OAAO,KAAA;AACT;AAGO,IAAM,+BAAA,GAAkC;AAAA,EAC7C,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,iBAAA;AAAA,MACT,SAAA,EAAW,iBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,0BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,UAAU,WAAA,CAAY;AAAA,IACpB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,cAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,wBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,gBAAA;AAAA,MACT,SAAA,EAAW,gBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,aAAa,WAAA,CAAY;AAAA,IACvB;AAAA,MACE,OAAA,EAAS,mBAAA;AAAA,MACT,SAAA,EAAW,mBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,oBAAA;AAAA,MACT,SAAA,EAAW,oBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,WAAA;AAAA,MACrB,WAAA,EAAa,iBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD;AACH;AAEA,SAAS,uBACP,MAAA,EAC8B;AAC9B,EAAA,OAAO,oBAAA,CAAqB,QAAQ,CAAC,IAAA,KAAS,CAAC,GAAG,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AACjE;AAGO,IAAM,gCAAgC,MAAA,CAAO,MAAA;AAAA,EAClD,uBAAuB,+BAA+B;AACxD;AAGO,IAAM,iCAAA,GAAoC;AAAA,EAC/C,OAAA,EAAS,OAAA;AAAA,EACT,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EAAa,2BAAA;AAAA,EACb,YAAA,EAAc,4BAAA;AAAA,EACd,gBAAA,EAAkB,gCAAA;AAAA,EAClB,UAAA,EAAY,0BAAA;AAAA,EACZ,MAAA,EAAQ,+BAAA;AAAA,EACR,IAAA,EAAM;AACR;AAKO,SAAS,gCACd,IAAA,EACuC;AACvC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,6BAAA;AAAA,EACT;AACA,EAAA,OAAO,gCAAgC,IAAI,CAAA;AAC7C;AAKO,SAAS,6BAAA,CACd,MACA,OAAA,EACwC;AACxC,EAAA,OAAO,+BAAA,CAAgC,IAAI,CAAA,CAAE,IAAA;AAAA,IAC3C,CAAC,aAAA,KAAkB,aAAA,CAAc,OAAA,KAAY;AAAA,GAC/C;AACF","file":"controlObjectOwnership.js","sourcesContent":["/** All recognized control object kinds in the ownership model. */\nexport const CONTROL_OBJECT_KINDS = [\n  \"tenant\",\n  \"workspace\",\n  \"principal\",\n  \"tool\",\n  \"pack\",\n  \"ontology\",\n  \"belief\",\n  \"policy_rule\",\n] as const;\n/** A kind of control object (tenant, workspace, principal, tool, etc.). */\nexport type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];\n\n/** Canonical ownership scopes: platform, tenant, workspace, or resource. */\nexport const CONTROL_OBJECT_OWNER_SCOPES = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The scope level that canonically owns a control object. */\nexport type ControlObjectOwnerScope =\n  (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];\n\n/** UI surfaces authorized to edit control objects. */\nexport const CONTROL_OBJECT_EDIT_SURFACES = [\n  \"platform_admin\",\n  \"tenant_admin\",\n  \"workspace_admin\",\n  \"graph_worktree\",\n] as const;\n/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */\nexport type ControlObjectEditSurface =\n  (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];\n\n/** Rules governing how control object configuration flows through the scope hierarchy. */\nexport const CONTROL_OBJECT_INHERITANCE_RULES = [\n  \"none\",\n  \"platform_seed_to_tenant\",\n  \"tenant_default_to_workspace\",\n  \"workspace_narrowing_only\",\n  \"pack_overlay_to_tenant\",\n  \"topic_lineage_to_resource\",\n] as const;\n/** How a control object's configuration propagates through scope hierarchy. */\nexport type ControlObjectInheritanceRule =\n  (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];\n\n/** Scope of impact when a control object is modified. */\nexport const CONTROL_OBJECT_BLAST_RADII = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The furthest scope impacted by a mutation to a control object. */\nexport type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];\n\n/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */\nexport type ControlObjectOwnershipCase = {\n  caseKey: string;\n  caseLabel: string;\n  kind: ControlObjectKind;\n  canonicalOwnerScope: ControlObjectOwnerScope;\n  editSurface: ControlObjectEditSurface;\n  inheritanceRule: ControlObjectInheritanceRule;\n  blastRadius: ControlObjectBlastRadius;\n};\n\n/** Full ownership matrix keyed by control object kind. */\nexport type ControlObjectOwnershipMatrix = Record<\n  ControlObjectKind,\n  readonly ControlObjectOwnershipCase[]\n>;\n\n/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */\nexport type ControlObjectOwnershipContract = {\n  version: \"1.0.0\";\n  kinds: readonly ControlObjectKind[];\n  ownerScopes: readonly ControlObjectOwnerScope[];\n  editSurfaces: readonly ControlObjectEditSurface[];\n  inheritanceRules: readonly ControlObjectInheritanceRule[];\n  blastRadii: readonly ControlObjectBlastRadius[];\n  matrix: ControlObjectOwnershipMatrix;\n  rows: readonly ControlObjectOwnershipCase[];\n};\n\nfunction defineCases<const T extends readonly ControlObjectOwnershipCase[]>(\n  cases: T\n): T {\n  return cases;\n}\n\n/** Static ownership matrix mapping each control object kind to its ownership cases. */\nexport const CONTROL_OBJECT_OWNERSHIP_MATRIX = {\n  tenant: defineCases([\n    {\n      caseKey: \"platform-record\",\n      caseLabel: \"Platform Record\",\n      kind: \"tenant\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  workspace: defineCases([\n    {\n      caseKey: \"tenant-workspace\",\n      caseLabel: \"Tenant Workspace\",\n      kind: \"workspace\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n  principal: defineCases([\n    {\n      caseKey: \"tenant-principal\",\n      caseLabel: \"Tenant Principal\",\n      kind: \"principal\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"workspace_narrowing_only\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  tool: defineCases([\n    {\n      caseKey: \"platform-core\",\n      caseLabel: \"Platform Core\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-custom\",\n      caseLabel: \"Tenant Custom\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  pack: defineCases([\n    {\n      caseKey: \"platform-definition\",\n      caseLabel: \"Platform Definition\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-installation\",\n      caseLabel: \"Tenant Installation\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  ontology: defineCases([\n    {\n      caseKey: \"platform-base\",\n      caseLabel: \"Platform Base\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"pack-overlay\",\n      caseLabel: \"Pack Overlay\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"pack_overlay_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-extension\",\n      caseLabel: \"Tenant Extension\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  belief: defineCases([\n    {\n      caseKey: \"topic-resource\",\n      caseLabel: \"Topic Resource\",\n      kind: \"belief\",\n      canonicalOwnerScope: \"resource\",\n      editSurface: \"graph_worktree\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  policy_rule: defineCases([\n    {\n      caseKey: \"platform-baseline\",\n      caseLabel: \"Platform Baseline\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-bundle\",\n      caseLabel: \"Tenant Bundle\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n    {\n      caseKey: \"workspace-override\",\n      caseLabel: \"Workspace Override\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"workspace\",\n      editSurface: \"workspace_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n} as const satisfies ControlObjectOwnershipMatrix;\n\nfunction flattenOwnershipMatrix(\n  matrix: ControlObjectOwnershipMatrix\n): ControlObjectOwnershipCase[] {\n  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);\n}\n\n/** Flattened array of all ownership cases across all control object kinds. */\nexport const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(\n  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)\n);\n\n/** The canonical ownership contract exposed by the SDK. */\nexport const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {\n  version: \"1.0.0\",\n  kinds: CONTROL_OBJECT_KINDS,\n  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,\n  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,\n  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,\n  blastRadii: CONTROL_OBJECT_BLAST_RADII,\n  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,\n  rows: CONTROL_OBJECT_OWNERSHIP_ROWS,\n} as const satisfies ControlObjectOwnershipContract;\n\n/**\n * List ownership cases for one control-object kind or the full matrix.\n */\nexport function listControlObjectOwnershipCases(\n  kind?: ControlObjectKind\n): readonly ControlObjectOwnershipCase[] {\n  if (!kind) {\n    return CONTROL_OBJECT_OWNERSHIP_ROWS;\n  }\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];\n}\n\n/**\n * Get a specific ownership case by kind and case key.\n */\nexport function getControlObjectOwnershipCase(\n  kind: ControlObjectKind,\n  caseKey: string\n): ControlObjectOwnershipCase | undefined {\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(\n    (ownershipCase) => ownershipCase.caseKey === caseKey\n  );\n}\n"]}

package/dist/coreClient.d.ts

@@ -0,0 +1,144 @@
+import { JsonValue, JsonObject } from './types.js';
+import './contracts/workflow-runtime.contract.js';
+import './contracts/lens-workflow.contract.js';
+import './contracts/lens-filter.contract.js';
+
+/** Tenant and workspace identifiers used to scope gateway requests. */
+type GatewayScope = {
+    tenantId?: string;
+    workspaceId?: string;
+};
+/** Successful response envelope from the platform gateway with correlation metadata. */
+type PlatformGatewaySuccess<T> = {
+    success: true;
+    data: T;
+    correlationId: string;
+    policyTraceId: string | null;
+    idempotentReplay: boolean;
+};
+/** Failed response envelope with structured error codes and optional invariant references. */
+type PlatformGatewayFailure = {
+    success: false;
+    /**
+     * Error string is the canonical envelope field.
+     * Object form is legacy-only compatibility for older gateway responses.
+     */
+    error: string | {
+        code: string;
+        message: string;
+        details?: JsonValue;
+    };
+    code?: string;
+    invariant?: string | null;
+    suggestion?: string | null;
+    details?: JsonValue;
+    legacyError?: {
+        code: string;
+        message: string;
+        details?: JsonValue;
+    };
+    correlationId: string;
+    policyTraceId: string | null;
+};
+/** Discriminated union of success and failure gateway responses. */
+type PlatformGatewayEnvelope<T> = PlatformGatewaySuccess<T> | PlatformGatewayFailure;
+/**
+ * Structured error thrown when a platform API request fails.
+ *
+ * Includes HTTP status, machine-readable error code, optional invariant
+ * reference, and actionable suggestions for common failure modes.
+ */
+declare class LucernApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly invariant?: string | null;
+    readonly suggestion?: string | null;
+    readonly details?: JsonValue;
+    readonly requestId?: string;
+    readonly correlationId?: string;
+    readonly policyTraceId?: string | null;
+    constructor(args: {
+        code: string;
+        message: string;
+        status: number;
+        invariant?: string | null;
+        suggestion?: string | null;
+        details?: JsonValue;
+        requestId?: string;
+        correlationId?: string;
+        policyTraceId?: string | null;
+    });
+}
+/** Supported HTTP methods for gateway requests. */
+type GatewayHttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Context passed to the `onRequest` hook before each gateway request attempt. */
+type GatewayRequestHookContext = {
+    requestId: string;
+    attempt: number;
+    maxRetries: number;
+    method: GatewayHttpMethod;
+    path: string;
+    url: string;
+    headers: Headers;
+    body?: string;
+    timeoutMs: number;
+};
+/** Context passed to the `onResponse` hook after each gateway request attempt (including retries and failures). */
+type GatewayResponseHookContext = GatewayRequestHookContext & {
+    durationMs: number;
+    status?: number;
+    response?: Response;
+    error?: unknown;
+    correlationId?: string;
+    policyTraceId?: string | null;
+    idempotentReplay?: boolean;
+    retryAfterMs?: number | null;
+    willRetry: boolean;
+};
+/**
+ * Low-level transport configuration for the platform gateway client.
+ *
+ * Most developers should use {@link createLucernClient} instead, which wraps
+ * this config with higher-level conveniences like `apiKey` and `environment`.
+ */
+type GatewayClientConfig = {
+    baseUrl?: string;
+    fetchImpl?: FetchLike;
+    getAuthHeaders?: (() => Promise<Record<string, string>>) | (() => Record<string, string>);
+    /** Max retries for transient errors (5xx, network). Defaults to 2. */
+    maxRetries?: number;
+    /** Request timeout in ms. Defaults to 15000. */
+    timeoutMs?: number;
+    /** Optional timeout overrides by HTTP method. */
+    timeoutMsByMethod?: Partial<Record<GatewayHttpMethod, number>>;
+    /** Optional request ID factory used for correlation headers. */
+    requestIdFactory?: () => string;
+    /** Invoked before each request attempt, including retries. */
+    onRequest?: ((context: GatewayRequestHookContext) => void) | ((context: GatewayRequestHookContext) => Promise<void>);
+    /** Invoked after each request attempt, including retries and failures. */
+    onResponse?: ((context: GatewayResponseHookContext) => void) | ((context: GatewayResponseHookContext) => Promise<void>);
+};
+/**
+ * Serialize a gateway query object into a URL query string.
+ */
+declare function toQueryString(scope: GatewayScope & Record<string, string | number | boolean | undefined>): string;
+/**
+ * Generate a random idempotency key for retry-safe writes.
+ */
+declare function randomIdempotencyKey(): string;
+/**
+ * Create the transport client used by all SDK modules.
+ */
+declare function createGatewayRequestClient(config?: GatewayClientConfig): {
+    request: <T>(args: {
+        path: string;
+        method?: GatewayHttpMethod;
+        body?: JsonObject;
+        idempotencyKey?: string;
+        requestId?: string;
+        timeoutMs?: number;
+    }) => Promise<PlatformGatewaySuccess<T>>;
+};
+
+export { type GatewayClientConfig, type GatewayHttpMethod, type GatewayRequestHookContext, type GatewayResponseHookContext, type GatewayScope, LucernApiError, type PlatformGatewayEnvelope, type PlatformGatewayFailure, type PlatformGatewaySuccess, createGatewayRequestClient, randomIdempotencyKey, toQueryString };