@lucern/sdk 0.3.0-alpha.8 → 1.0.0

package/dist/client.d.ts

@@ -7,6 +7,8 @@ import { BeliefsClientConfig, ModulateConfidenceInput, OpinionHistoryEntry, Crea
 import { DeviceCodeInput, DeviceCodeResponse, DeviceTokenResponse } from './authDeviceClient.js';
 import { McpBootstrapSessionInput, McpBootstrapSessionResponse, McpCheckWritePolicyInput, McpCheckWritePolicyResponse, McpBeginBuildSessionInput, McpBeginBuildSessionResponse, McpEvaluateEngineeringContractInput, McpContractEvaluationResponse, McpEvaluateResearchContractInput } from './mcpClient.js';
 import { IdentityClientConfig, PolicyEvaluationInput, PolicyDecisionRecord, RecordPolicyDecisionInput, PutTenantSecretReferenceInput, TenantSecretReference, ClerkUserSearchResult, TenantIdentityScope, TenantIdentityConfigRecord, UpdateTenantConfigInput, TenantIntegrationRecord, UpsertTenantIntegrationInput } from './identityClient.js';
+import { normalizeCanonicalPrincipalIdentity, RequireAccessInput, AccessCheckResult } from './accessControl.js';
+import { ControlPlaneIdentityClientConfig, ResolveInteractivePrincipalInput, ResolveInteractivePrincipalResponse, ResolvedInteractivePrincipalContext } from './control-plane.js';
 import { PacksClientConfig, PackInstallInput, PackEnableInput, PackDisableInput, PackEntitlementInput, PackUninstallInput, PackUpgradeInput } from './packsClient.js';
 import { ToolRegistryClientConfig, ToolRegistryQuery, ToolCatalogEntry, EffectiveToolsQuery, UpsertCoreToolsInput, SetPackToolsStatusInput, CreateToolAclInput, ToolAclRecord, DeleteToolAclInput, RegisterCustomToolInput } from './toolRegistryClient.js';
 import { TelemetryClientConfig, LogSystemEventInput, LogToolCallsBatchInput, RecordEpistemicAuditInput, RecordTelemetryPolicyDecisionInput, StartTelemetryRunInput, TelemetryRunRecord, FinishTelemetryRunInput, TelemetryScope } from './telemetryClient.js';
@@ -33,11 +35,12 @@ import { registerCustomTool, unregisterCustomTool, listRegisteredCustomTools, cl
 import { DecisionsClientConfig, RecordJudgmentInput, ListJudgmentsInput, RecordJudgmentOutcomeInput, GetJudgmentCalibrationInput, ListPendingJudgmentOutcomeReviewInput, GetJudgmentTransitionAuditIntegrityInput } from './decisionsClient.js';
 import { EvidenceClientConfig, EvidenceClassificationRequestConfig, ClassifyEvidenceResult, ClassifyEvidenceBatchItem, ClassifyEvidenceBatchResult } from './evidenceClient.js';
 import { EventingClientConfig, RecordEventInput, EventingRecord, EventingScope, EventingWebhookRecord, EnqueueDeliveryInput, EventingDeliveryRecord, RecordDeliveryAttemptInput, UpdateDeliveryStatusInput } from './eventingClient.js';
-import { GraphClientConfig, ListNodesInput, GetNodeInput, CreateNodeInput, UpdateNodeInput, BatchCreateNodesInput, SupersedeNodeInput, VerifyNodeInput, HardDeleteNodeInput, CreateEdgeInput, NeighborhoodInput, ListEdgesInput, DeleteEdgeInput, TraverseInput, AnalyzeInput, BiasInput, GapsInput, SearchInput, PathInput, AnalyticsInput } from './graphClient.js';
+import { GraphClientConfig, ListNodesInput, GetNodeInput, HardDeleteNodeInput, CreateEdgeInput, NeighborhoodInput, CreateNodeInput, UpdateNodeInput, BatchCreateNodesInput, SupersedeNodeInput, VerifyNodeInput, ListEdgesInput, DeleteEdgeInput, TraverseInput, AnalyzeInput, BiasInput, GapsInput, SearchInput, PathInput, AnalyticsInput } from './graphClient.js';
 import { LearningClientConfig } from './learningClient.js';
 import { ReportsClientConfig } from './reportsClient.js';
 import { SourcesClientConfig, UpsertSourceSpec } from './sourcesClient.js';
 import { WorkflowClientConfig, WorkflowLensPerspectiveType, WorkflowLensStatus, AddWorktreeInput, WorkflowWorktreeStatus, UpdateWorktreeTargetsInput, MergeInput, CreateTaskInput, CompleteTaskInput, UpdateTaskInput, WorkflowBranchStatus, CompleteWorktreeInput, AdvanceWorktreePhaseInput, SetWorktreePhaseInput, PatchWorktreeStateInput, BulkCreateWorktreesInput, ListTopicsInput, SwitchTopicContextInput } from './workflowClient.js';
+import { CustomToolInput as CustomToolInput$1 } from './clientHelpers.js';
 import './authContext.js';
 import './contracts/auth-session.contract.js';
 import './contracts/workflow-runtime.contract.js';
@@ -49,11 +52,11 @@ import '@lucern/contracts';
 import 'zod';
 import '@lucern/contracts/tool-contracts';
 
-type ClientConfig = BeliefsClientConfig | SourcesClientConfig | GraphClientConfig | DecisionsClientConfig | AnswersClientConfig | ContextClientConfig | WorkflowClientConfig | AuditClientConfig | AdminClientConfig | EvidenceClientConfig | EmbeddingsClientConfig | EventingClientConfig | GraphAnalysisClientConfig | GraphRecommendationsClientConfig | GraphStateClassifierClientConfig | IdentityClientConfig | JobsClientConfig | ModelRuntimeClientConfig | OntologyLinksClientConfig | OrgGraphSearchClientConfig | PolicyClientConfig | PacksClientConfig | ReportsClientConfig | LearningClientConfig | TelemetryClientConfig | ToolRegistryClientConfig | FunctionSurfaceClientConfig | OntologyClientConfig | HarnessClientConfig | SchemaClientConfig | AudiencesClientConfig | TopicsClientConfig;
-type CustomToolInput = JsonObject;
+type ClientConfig = BeliefsClientConfig | SourcesClientConfig | GraphClientConfig | DecisionsClientConfig | AnswersClientConfig | ContextClientConfig | WorkflowClientConfig | AuditClientConfig | AdminClientConfig | EvidenceClientConfig | EmbeddingsClientConfig | EventingClientConfig | GraphAnalysisClientConfig | GraphRecommendationsClientConfig | GraphStateClassifierClientConfig | IdentityClientConfig | JobsClientConfig | ModelRuntimeClientConfig | OntologyLinksClientConfig | OrgGraphSearchClientConfig | PolicyClientConfig | PacksClientConfig | ReportsClientConfig | LearningClientConfig | TelemetryClientConfig | ToolRegistryClientConfig | FunctionSurfaceClientConfig | ControlPlaneIdentityClientConfig | OntologyClientConfig | HarnessClientConfig | SchemaClientConfig | AudiencesClientConfig | TopicsClientConfig;
+type CustomToolInput = CustomToolInput$1;
 type CustomToolInvoker = (input?: CustomToolInput) => Promise<unknown>;
 type CustomToolNamespace = Record<string, CustomToolInvoker>;
-type GatewayDataEnvelope<T extends Record<string, unknown>> = PlatformGatewaySuccess<T> & T;
+type GatewayDataEnvelope<T = unknown> = PlatformGatewaySuccess<T> & (T extends Record<string, unknown> ? T : Record<string, unknown>);
 type BeliefsCompatCreateInput = {
     topicId?: string;
     text?: string;
@@ -88,12 +91,17 @@ type LucernClientConfig = ClientConfig & {
     /** API key for authenticating with the Lucern platform. */
     apiKey?: string;
     /**
-     * Optional Clerk JWT for per-user identity and RBAC.
-     * When present, the SDK operates in user-scoped mode with
-     * pack-aware tool filtering. When absent, operates in agent mode.
+     * Lucern platform session token for interactive/user-scoped requests.
+     * This is not a Clerk JWT. Tenant apps should generally send `apiKey`
+     * plus `clerkId` and let the control plane resolve the principal.
      */
-    /** Lucern platform session token for interactive/user-scoped requests. */
     userToken?: string;
+    /** Clerk subject for the current end user. */
+    clerkId?: string;
+    /** Optional explicit user subject. Defaults to `clerkId` when omitted. */
+    userId?: string;
+    /** Optional deployment host hint for front-door routing. */
+    deploymentHost?: string;
     /**
      * Optional pack key for auto-install convenience.
      * When set, the SDK will call `packs.install()` on first use
@@ -410,55 +418,27 @@ declare function createLucernClient(config?: LucernClientConfig): {
         }>>;
     };
     edges: {
-        create(args: {
-            sourceId: string;
-            targetId: string;
+        create(args: FunctionSurfaceInput & {
+            from?: unknown;
+            to?: unknown;
+            sourceId?: string;
+            targetId?: string;
             edgeType: string;
             topicId?: string;
             confidence?: number;
             weight?: number;
             context?: string;
             reasoning?: string;
-        }): Promise<GatewayDataEnvelope<{
-            [x: string]: unknown;
-        }>>;
-        update(input: Parameters<(input: {
-            edgeId: string;
-            weight?: number;
-            confidence?: number;
-            context?: string;
-            derivationType?: string;
-        }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<{
-            [x: string]: unknown;
-        }>>>[0], idempotencyKey?: string): Promise<GatewayDataEnvelope<{
-            [x: string]: unknown;
-        }>>;
-        remove(input: Parameters<(input: {
-            edgeId: string;
-        }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<{
-            [x: string]: unknown;
-        }>>>[0], idempotencyKey?: string): Promise<GatewayDataEnvelope<{
-            [x: string]: unknown;
-        }>>;
-        removeBetween(input: Parameters<(input: {
-            fromNodeId: string;
-            toNodeId: string;
-            edgeType?: string;
-        }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<{
-            [x: string]: unknown;
-        }>>>[0], idempotencyKey?: string): Promise<GatewayDataEnvelope<{
-            [x: string]: unknown;
-        }>>;
-        batchCreate(input: Parameters<(input: {
-            edges: {
-                [x: string]: unknown;
-            }[];
-            skipLayerValidation?: boolean;
-        }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<{
-            [x: string]: unknown;
-        }>>>[0], idempotencyKey?: string): Promise<GatewayDataEnvelope<{
-            [x: string]: unknown;
-        }>>;
+        }, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        createEdge(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        update(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        updateEdge(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        remove(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        removeEdge(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        removeBetween(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        removeEdgesBetween(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        batchCreate(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        batchCreateEdges(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
         delete(input: Parameters<(input: {
             edgeIds: string[];
         }, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<{
@@ -760,9 +740,12 @@ declare function createLucernClient(config?: LucernClientConfig): {
         nodes: {
             list: (query: ListNodesInput) => Promise<PlatformGatewaySuccess<ListResult<PlatformGraphNode, "nodes">>>;
             get(input: string | Parameters<(query: GetNodeInput) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>>[0]): Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-            create: (input: CreateNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-            update: (input: UpdateNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-            batchCreate: (input: BatchCreateNodesInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
+            create(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            createEpistemicNode(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            update(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            updateEpistemicNode(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            batchCreate(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            batchCreateEpistemicNodes(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
             listByTopicAndType(input: {
                 topicId?: string;
                 projectId?: string;
@@ -781,8 +764,9 @@ declare function createLucernClient(config?: LucernClientConfig): {
                 query?: string;
                 limit?: number;
             }): Promise<GatewayDataEnvelope<Record<string, unknown>>>;
-            supersede: (input: SupersedeNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
-            verify: (input: VerifyNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
+            supersede(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            verify(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+            archive(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
             hardDelete: (input: HardDeleteNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
         };
         createEdge: (input: CreateEdgeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PlatformGraphEdge>>;
@@ -1186,7 +1170,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
     topics: {
         list(input?: Parameters<(query?: TopicListInput) => Promise<PlatformGatewaySuccess<TopicListResponse>>>[0]): Promise<PlatformGatewaySuccess<TopicListResponse>>;
         get: (topicId: string) => Promise<PlatformGatewaySuccess<TopicRecord>>;
-        create(input: Parameters<(input: TopicCreateInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<TopicRecord>>>[0]): Promise<PlatformGatewaySuccess<TopicRecord>>;
+        create(input: Parameters<(input: TopicCreateInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<TopicRecord>>>[0]): Promise<GatewayDataEnvelope<unknown>>;
         update(topicId: string, input: Parameters<(topicId: string, input: TopicUpdateInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<TopicRecord>>>[1]): Promise<PlatformGatewaySuccess<TopicRecord>>;
         tree(topicId: string, query?: Parameters<(topicId: string, query?: TopicTreeQuery) => Promise<PlatformGatewaySuccess<TopicTreeResponse>>>[1]): Promise<PlatformGatewaySuccess<TopicTreeResponse>>;
         getTree(input: {
@@ -1196,6 +1180,10 @@ declare function createLucernClient(config?: LucernClientConfig): {
         coverage(topicId: string, query?: Parameters<(topicId: string, query?: TopicCoverageQuery) => Promise<PlatformGatewaySuccess<TopicCoverageResponse>>>[1]): Promise<PlatformGatewaySuccess<TopicCoverageResponse>>;
         remove: (topicId: string, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
         bulkCreate: (input: TopicBulkCreateInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
+        materializeGraph(input?: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        materializeTopicGraph(input?: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        graphSpine(input?: FunctionSurfaceInput): Promise<GatewayDataEnvelope<unknown>>;
+        getTopicGraphSpine(input?: FunctionSurfaceInput): Promise<GatewayDataEnvelope<unknown>>;
     };
     answers: {
         create(input: FunctionSurfaceInput): Promise<PlatformGatewaySuccess<{
@@ -1736,9 +1724,12 @@ declare function createLucernClient(config?: LucernClientConfig): {
     nodes: {
         list: (query: ListNodesInput) => Promise<PlatformGatewaySuccess<ListResult<PlatformGraphNode, "nodes">>>;
         get(input: string | Parameters<(query: GetNodeInput) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>>[0]): Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-        create: (input: CreateNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-        update: (input: UpdateNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PlatformGraphNode>>;
-        batchCreate: (input: BatchCreateNodesInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
+        create(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        createEpistemicNode(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        update(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        updateEpistemicNode(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        batchCreate(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        batchCreateEpistemicNodes(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
         listByTopicAndType(input: {
             topicId?: string;
             projectId?: string;
@@ -1757,11 +1748,29 @@ declare function createLucernClient(config?: LucernClientConfig): {
             query?: string;
             limit?: number;
         }): Promise<GatewayDataEnvelope<Record<string, unknown>>>;
-        supersede: (input: SupersedeNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
-        verify: (input: VerifyNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
+        supersede(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        verify(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
+        archive(input: FunctionSurfaceInput, idempotencyKey?: string): Promise<GatewayDataEnvelope<unknown>>;
         hardDelete: (input: HardDeleteNodeInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<Record<string, unknown>>>;
     };
+    controlPlane: {
+        identity: {
+            resolveInteractivePrincipal: (input: ResolveInteractivePrincipalInput) => Promise<ResolveInteractivePrincipalResponse>;
+        };
+        raw: {
+            identity: {
+                resolveInteractivePrincipal(input: ResolveInteractivePrincipalInput): Promise<ResolveInteractivePrincipalResponse>;
+            };
+        };
+    };
     identity: {
+        access: {
+            normalizePrincipal: typeof normalizeCanonicalPrincipalIdentity;
+            checkAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
+            requireAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
+            canAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<boolean>;
+        };
+        resolveInteractivePrincipal: (input: ResolveInteractivePrincipalInput) => Promise<PlatformGatewaySuccess<ResolvedInteractivePrincipalContext>>;
         evaluatePolicy: (input: PolicyEvaluationInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PolicyDecisionRecord>>;
         recordPolicyDecision: (input: RecordPolicyDecisionInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<PolicyDecisionRecord>>;
         putSecretReference: (input: PutTenantSecretReferenceInput, idempotencyKey?: string) => Promise<PlatformGatewaySuccess<TenantSecretReference>>;
@@ -1786,22 +1795,35 @@ declare function createLucernClient(config?: LucernClientConfig): {
         raw: {
             whoami(): Promise<PlatformGatewaySuccess<{
                 principalId: string;
-                principalType: "human" | "service" | "agent" | "user" | "group" | "external_viewer";
+                principalType: "human" | "service" | "agent" | "group" | "external_viewer" | "user";
+                clerkId: string | undefined;
                 tenantId: string | null;
                 workspaceId: string | null;
                 scopes: string[];
                 roles: string[];
+                groupIds: string[];
+                permittedToolNames: string[];
+                permittedPackKeys: string[];
+                principalStatus: string | undefined;
+                tenantStatus: string | undefined;
+                workspaceStatus: string | undefined;
                 isPlatformAdmin: boolean;
                 isTenantAdmin: boolean;
                 isWorkspaceAdmin: boolean;
+                permit: {
+                    subject: string;
+                    tenant: string;
+                    workspace?: string;
+                } | undefined;
                 authMode: string | undefined;
                 sessionId: string | undefined;
                 delegatedBy: string | undefined;
                 expiresAt: number | undefined;
             }>>;
+            resolveInteractivePrincipal(input: ResolveInteractivePrincipalInput): Promise<PlatformGatewaySuccess<ResolvedInteractivePrincipalContext>>;
             listPrincipals(query?: GatewayScope & {
                 status?: string;
-                principalType?: string;
+                principalType? /** Target environment. Defaults to production if not specified. */: string;
                 query?: string;
                 limit?: number;
             }): Promise<PlatformGatewaySuccess<ListResult<any, "principals">>>;
@@ -1871,28 +1893,52 @@ declare function createLucernClient(config?: LucernClientConfig): {
         };
         whoami(): Promise<PlatformGatewaySuccess<{
             principalId: string;
-            principalType: "human" | "service" | "agent" | "user" | "group" | "external_viewer";
+            principalType: "human" | "service" | "agent" | "group" | "external_viewer" | "user";
+            clerkId: string | undefined;
             tenantId: string | null;
             workspaceId: string | null;
             scopes: string[];
             roles: string[];
+            groupIds: string[];
+            permittedToolNames: string[];
+            permittedPackKeys: string[];
+            principalStatus: string | undefined;
+            tenantStatus: string | undefined;
+            workspaceStatus: string | undefined;
             isPlatformAdmin: boolean;
             isTenantAdmin: boolean;
             isWorkspaceAdmin: boolean;
+            permit: {
+                subject: string;
+                tenant: string;
+                workspace?: string;
+            } | undefined;
             authMode: string | undefined;
             sessionId: string | undefined;
             delegatedBy: string | undefined;
             expiresAt: number | undefined;
         }> & {
             principalId: string;
-            principalType: "human" | "service" | "agent" | "user" | "group" | "external_viewer";
+            principalType: "human" | "service" | "agent" | "group" | "external_viewer" | "user";
+            clerkId: string | undefined;
             tenantId: string | null;
             workspaceId: string | null;
             scopes: string[];
             roles: string[];
+            groupIds: string[];
+            permittedToolNames: string[];
+            permittedPackKeys: string[];
+            principalStatus: string | undefined;
+            tenantStatus: string | undefined;
+            workspaceStatus: string | undefined;
             isPlatformAdmin: boolean;
             isTenantAdmin: boolean;
             isWorkspaceAdmin: boolean;
+            permit: {
+                subject: string;
+                tenant: string;
+                workspace?: string;
+            } | undefined;
             authMode: string | undefined;
             sessionId: string | undefined;
             delegatedBy: string | undefined;
@@ -2329,22 +2375,35 @@ declare function createLucernClient(config?: LucernClientConfig): {
         identity: {
             whoami(): Promise<PlatformGatewaySuccess<{
                 principalId: string;
-                principalType: "human" | "service" | "agent" | "user" | "group" | "external_viewer";
+                principalType: "human" | "service" | "agent" | "group" | "external_viewer" | "user";
+                clerkId: string | undefined;
                 tenantId: string | null;
                 workspaceId: string | null;
                 scopes: string[];
                 roles: string[];
+                groupIds: string[];
+                permittedToolNames: string[];
+                permittedPackKeys: string[];
+                principalStatus: string | undefined;
+                tenantStatus: string | undefined;
+                workspaceStatus: string | undefined;
                 isPlatformAdmin: boolean;
                 isTenantAdmin: boolean;
                 isWorkspaceAdmin: boolean;
+                permit: {
+                    subject: string;
+                    tenant: string;
+                    workspace?: string;
+                } | undefined;
                 authMode: string | undefined;
                 sessionId: string | undefined;
                 delegatedBy: string | undefined;
                 expiresAt: number | undefined;
             }>>;
+            resolveInteractivePrincipal(input: ResolveInteractivePrincipalInput): Promise<PlatformGatewaySuccess<ResolvedInteractivePrincipalContext>>;
             listPrincipals(query?: GatewayScope & {
                 status?: string;
-                principalType?: string;
+                principalType? /** Target environment. Defaults to production if not specified. */: string;
                 query?: string;
                 limit?: number;
             }): Promise<PlatformGatewaySuccess<ListResult<any, "principals">>>;
@@ -2630,8 +2689,11 @@ declare function createLucernClient(config?: LucernClientConfig): {
             applyLensToTopic(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             applyOntology(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             archiveBelief(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            archiveEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             archiveOntology(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             archiveQuestion(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            batchCreateEdges(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            batchCreateEpistemicNodes(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             beginBuildSession(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             bisectConfidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             broadcastMessage(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2643,6 +2705,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
             createBelief(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             createEdge(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             createEpistemicContract(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            createEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             createEvidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             createLens(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             createOntology(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2670,6 +2733,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
             getCodeContext(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getConfidenceHistory(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getContractStatus(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            getEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getEvidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getFailureLog(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getFalsificationQuestions(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2683,6 +2747,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
             getQuestion(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getTopic(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getTopicCoverage(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            getTopicGraphSpine(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             getTopicTree(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             heartbeatSession(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             whoami(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2694,6 +2759,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
             listAllWorktrees(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             listBeliefs(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             listCampaigns(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            listEpistemicNodes(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             listEvidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             listGraphIntelligenceQueries(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             listLenses(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2704,6 +2770,7 @@ declare function createLucernClient(config?: LucernClientConfig): {
             listWorktrees(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             manageWritePolicy(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             matchEntityType(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            materializeTopicGraph(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             merge(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             modulateConfidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             openPullRequest(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
@@ -2717,22 +2784,34 @@ declare function createLucernClient(config?: LucernClientConfig): {
             refineBelief(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             refineQuestion(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             registerSession(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            removeEdge(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            removeEdgesBetween(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             removeLensFromTopic(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             resolveEffectiveOntology(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            resolveInteractivePrincipal(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             runGraphIntelligenceQuery(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             searchBeliefs(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             searchEvidence(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             seedBeliefLattice(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             sendAgentMessage(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            supersedeEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             traceEntityImpact(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             traverseGraph(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             triggerBeliefReview(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            updateEdge(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            updateEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateOntology(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateQuestionStatus(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateTask(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateTopic(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateWorktreeMetadata(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
             updateWorktreeTargets(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+            verifyEpistemicNode(input?: FunctionSurfaceInput, idempotencyKey?: string): FunctionSurfaceResult<unknown>;
+        };
+        controlPlane: {
+            identity: {
+                resolveInteractivePrincipal(input: ResolveInteractivePrincipalInput): Promise<ResolveInteractivePrincipalResponse>;
+            };
         };
         toolRegistry: {
             listCatalog(input: ToolRegistryQuery): Promise<PlatformGatewaySuccess<ListResult<ToolCatalogEntry, "tools">>>;