@lucern/sdk 1.0.10 → 1.0.12

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to `@lucern/sdk` will be documented in this file.
 ## [Unreleased]
 - No unreleased changes yet.
 
+## [1.0.12] - 2026-05-31
+- Release notes pending.
+
+## [1.0.11] - 2026-05-29
+- Release notes pending.
+
 ## [1.0.10] - 2026-05-29
 - Release notes pending.
 

package/README.md

@@ -46,6 +46,41 @@ code should stay on `@lucern/sdk`, `@lucern/react`, `@lucern/mcp`,
   control-plane operations must be added to the manifest first, then exposed
   through the generated surfaces.
 
+### Headless hybrid discovery
+
+The SDK exposes the same advanced discovery tools as CLI, MCP, and REST. Use
+the first-class namespaces from product code; use `raw.functionSurface` when
+you are building a generic manifest-driven runner.
+
+```typescript
+const discovered = await lucern.hybrid.discover({
+  query: "what have we built around graph-native discovery?",
+  include: ["topics", "nodes", "worktrees", "evidence"],
+  via: ["bm25", "embeddings", "topic-tree", "edges"],
+  depth: 2,
+  limit: 10,
+});
+
+const topic = await lucern.hybrid.resolveTopicSemantic({
+  query: "headless substrate surfaces",
+  via: ["bm25", "embeddings", "topic-tree"],
+  limit: 8,
+});
+
+const vectorMatches = await lucern.embeddings.vectorSearchByTopic({
+  workspaceId: "wks_...",
+  topicId: "top_...",
+  queryText: "semantic search for stale reasoning claims",
+  limit: 10,
+});
+```
+
+Surface parity is intentional: `lucern.hybrid.discover()` maps to the
+`hybrid_discover` manifest operation, `lucern discover`, the `hybrid_discover`
+MCP tool, and `POST /hybrid/discover`. The same pattern holds for
+`resolve_topic_semantic`, `expand_graph_neighborhood`, `find_related_nodes`,
+`analyze_graph_impact`, `detect_graph_drift`, and the embedding operations.
+
 IA-7 closes the remaining SDK surface gaps needed for SDK-first clients:
 
 - Kernel mutations that previously only existed behind route or MCP adapters now have SDK wrappers across beliefs, evidence, questions, edges, topics, worktrees, and nodes.

package/dist/.generated

@@ -0,0 +1,2 @@
+generated-by:scripts/build-sdk-package.ts
+package:@lucern/sdk

package/dist/accessControl.d.ts

@@ -1,21 +1,15 @@
-import { LucernSdkAuthContextError, LucernSdkAuthFailureReason, LucernSdkAuthContextInput } from './authContext.js';
-import { GatewayClientConfig } from './coreClient.js';
-import { PolicyEvaluationInput, PolicyDecisionRecord } from './identityClient.js';
-import { SessionPrincipalType } from './contracts/auth-session.contract.js';
-import { JsonObject } from './types.js';
-import '@lucern/transport-core';
-import './control-plane.js';
-import './contracts/workflow-runtime.contract.js';
-import './contracts/lens-workflow.contract.js';
-import './contracts/lens-filter.contract.js';
-
-type ClerkIdentityAliasInput = {
+import { LucernSdkAuthContextError, type LucernSdkAuthContextInput, type LucernSdkAuthFailureReason } from "./authContext";
+import { type GatewayClientConfig } from "./coreClient";
+import { type PolicyDecisionRecord, type PolicyEvaluationInput } from "./identityClient";
+import type { SessionPrincipalType } from "./contracts/auth-session.contract";
+import type { JsonObject } from "./types";
+export type ClerkIdentityAliasInput = {
     provider?: "clerk" | string;
     providerProjectId?: string | null;
     externalSubjectId: string;
     status?: "active" | "pending" | "revoked" | string;
 };
-type CanonicalPrincipalIdentityInput = {
+export type CanonicalPrincipalIdentityInput = {
     principalId?: string | null;
     principalType?: SessionPrincipalType | "user" | "external_viewer" | null;
     canonicalClerkUserId?: string | null;
@@ -26,13 +20,13 @@ type CanonicalPrincipalIdentityInput = {
     roles?: readonly string[];
     scopes?: readonly string[];
 };
-type CanonicalPrincipalIdentityAlias = {
+export type CanonicalPrincipalIdentityAlias = {
     provider: string;
     providerProjectId?: string;
     externalSubjectId: string;
     status?: string;
 };
-type CanonicalPrincipalIdentity = {
+export type CanonicalPrincipalIdentity = {
     principalId: string;
     principalType: SessionPrincipalType;
     canonicalClerkUserId?: string;
@@ -42,12 +36,12 @@ type CanonicalPrincipalIdentity = {
     roles: string[];
     scopes: string[];
 };
-type AccessResourceType = "tenant" | "workspace" | "deployment" | "convex_table" | "secret_scope" | "agent_session" | (string & {});
-type AccessResourceDescriptor = {
+export type AccessResourceType = "tenant" | "workspace" | "deployment" | "convex_table" | "secret_scope" | "agent_session" | (string & {});
+export type AccessResourceDescriptor = {
     type: AccessResourceType;
     key: string;
 };
-type RequireAccessInput = {
+export type RequireAccessInput = {
     identity?: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput;
     observedClerkId?: string;
     tenantId?: string;
@@ -56,25 +50,24 @@ type RequireAccessInput = {
     resource: AccessResourceDescriptor | string;
     context?: JsonObject;
 };
-type AccessCheckResult = {
+export type AccessCheckResult = {
     identity: CanonicalPrincipalIdentity;
     policyInput: PolicyEvaluationInput;
     decision: PolicyDecisionRecord;
 };
-declare class LucernAccessControlError extends LucernSdkAuthContextError {
+export declare class LucernAccessControlError extends LucernSdkAuthContextError {
     readonly policyDecision?: PolicyDecisionRecord;
     constructor(reason: LucernSdkAuthFailureReason, message: string, policyDecision?: PolicyDecisionRecord);
 }
-declare function normalizeCanonicalPrincipalIdentity(input: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput, options?: {
+export declare function normalizeCanonicalPrincipalIdentity(input: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput, options?: {
     observedClerkId?: string;
 }): CanonicalPrincipalIdentity;
-declare function formatPermitResource(resource: AccessResourceDescriptor | string): string;
-declare function assertPermitAllowed(decision: PolicyDecisionRecord): void;
-declare function createAccessControlClient(config?: GatewayClientConfig): {
+export declare function formatPermitResource(resource: AccessResourceDescriptor | string): string;
+export declare function assertPermitAllowed(decision: PolicyDecisionRecord): void;
+export declare function createAccessControlClient(config?: GatewayClientConfig): {
     normalizePrincipal: typeof normalizeCanonicalPrincipalIdentity;
     checkAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
     requireAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
     canAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<boolean>;
 };
-
-export { type AccessCheckResult, type AccessResourceDescriptor, type AccessResourceType, type CanonicalPrincipalIdentity, type CanonicalPrincipalIdentityAlias, type CanonicalPrincipalIdentityInput, type ClerkIdentityAliasInput, LucernAccessControlError, type RequireAccessInput, assertPermitAllowed, createAccessControlClient, formatPermitResource, normalizeCanonicalPrincipalIdentity };
+//# sourceMappingURL=accessControl.d.ts.map