@lucern/sdk 1.0.11 → 1.0.12

package/CHANGELOG.md

@@ -5,6 +5,9 @@ All notable changes to `@lucern/sdk` will be documented in this file.
 ## [Unreleased]
 - No unreleased changes yet.
 
+## [1.0.12] - 2026-05-31
+- Release notes pending.
+
 ## [1.0.11] - 2026-05-29
 - Release notes pending.
 

package/dist/.generated

@@ -0,0 +1,2 @@
+generated-by:scripts/build-sdk-package.ts
+package:@lucern/sdk

package/dist/accessControl.d.ts

@@ -1,21 +1,15 @@
-import { LucernSdkAuthContextError, LucernSdkAuthFailureReason, LucernSdkAuthContextInput } from './authContext.js';
-import { GatewayClientConfig } from './coreClient.js';
-import { PolicyEvaluationInput, PolicyDecisionRecord } from './identityClient.js';
-import { SessionPrincipalType } from './contracts/auth-session.contract.js';
-import { JsonObject } from './types.js';
-import '@lucern/transport-core';
-import './control-plane.js';
-import './contracts/workflow-runtime.contract.js';
-import './contracts/lens-workflow.contract.js';
-import './contracts/lens-filter.contract.js';
-
-type ClerkIdentityAliasInput = {
+import { LucernSdkAuthContextError, type LucernSdkAuthContextInput, type LucernSdkAuthFailureReason } from "./authContext";
+import { type GatewayClientConfig } from "./coreClient";
+import { type PolicyDecisionRecord, type PolicyEvaluationInput } from "./identityClient";
+import type { SessionPrincipalType } from "./contracts/auth-session.contract";
+import type { JsonObject } from "./types";
+export type ClerkIdentityAliasInput = {
     provider?: "clerk" | string;
     providerProjectId?: string | null;
     externalSubjectId: string;
     status?: "active" | "pending" | "revoked" | string;
 };
-type CanonicalPrincipalIdentityInput = {
+export type CanonicalPrincipalIdentityInput = {
     principalId?: string | null;
     principalType?: SessionPrincipalType | "user" | "external_viewer" | null;
     canonicalClerkUserId?: string | null;
@@ -26,13 +20,13 @@ type CanonicalPrincipalIdentityInput = {
     roles?: readonly string[];
     scopes?: readonly string[];
 };
-type CanonicalPrincipalIdentityAlias = {
+export type CanonicalPrincipalIdentityAlias = {
     provider: string;
     providerProjectId?: string;
     externalSubjectId: string;
     status?: string;
 };
-type CanonicalPrincipalIdentity = {
+export type CanonicalPrincipalIdentity = {
     principalId: string;
     principalType: SessionPrincipalType;
     canonicalClerkUserId?: string;
@@ -42,12 +36,12 @@ type CanonicalPrincipalIdentity = {
     roles: string[];
     scopes: string[];
 };
-type AccessResourceType = "tenant" | "workspace" | "deployment" | "convex_table" | "secret_scope" | "agent_session" | (string & {});
-type AccessResourceDescriptor = {
+export type AccessResourceType = "tenant" | "workspace" | "deployment" | "convex_table" | "secret_scope" | "agent_session" | (string & {});
+export type AccessResourceDescriptor = {
     type: AccessResourceType;
     key: string;
 };
-type RequireAccessInput = {
+export type RequireAccessInput = {
     identity?: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput;
     observedClerkId?: string;
     tenantId?: string;
@@ -56,25 +50,24 @@ type RequireAccessInput = {
     resource: AccessResourceDescriptor | string;
     context?: JsonObject;
 };
-type AccessCheckResult = {
+export type AccessCheckResult = {
     identity: CanonicalPrincipalIdentity;
     policyInput: PolicyEvaluationInput;
     decision: PolicyDecisionRecord;
 };
-declare class LucernAccessControlError extends LucernSdkAuthContextError {
+export declare class LucernAccessControlError extends LucernSdkAuthContextError {
     readonly policyDecision?: PolicyDecisionRecord;
     constructor(reason: LucernSdkAuthFailureReason, message: string, policyDecision?: PolicyDecisionRecord);
 }
-declare function normalizeCanonicalPrincipalIdentity(input: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput, options?: {
+export declare function normalizeCanonicalPrincipalIdentity(input: CanonicalPrincipalIdentityInput | LucernSdkAuthContextInput, options?: {
     observedClerkId?: string;
 }): CanonicalPrincipalIdentity;
-declare function formatPermitResource(resource: AccessResourceDescriptor | string): string;
-declare function assertPermitAllowed(decision: PolicyDecisionRecord): void;
-declare function createAccessControlClient(config?: GatewayClientConfig): {
+export declare function formatPermitResource(resource: AccessResourceDescriptor | string): string;
+export declare function assertPermitAllowed(decision: PolicyDecisionRecord): void;
+export declare function createAccessControlClient(config?: GatewayClientConfig): {
     normalizePrincipal: typeof normalizeCanonicalPrincipalIdentity;
     checkAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
     requireAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<AccessCheckResult>;
     canAccess: (input: RequireAccessInput, idempotencyKey?: string) => Promise<boolean>;
 };
-
-export { type AccessCheckResult, type AccessResourceDescriptor, type AccessResourceType, type CanonicalPrincipalIdentity, type CanonicalPrincipalIdentityAlias, type CanonicalPrincipalIdentityInput, type ClerkIdentityAliasInput, LucernAccessControlError, type RequireAccessInput, assertPermitAllowed, createAccessControlClient, formatPermitResource, normalizeCanonicalPrincipalIdentity };
+//# sourceMappingURL=accessControl.d.ts.map