limen-ai 1.0.0

package/dist/api/migration/024_trust_learning.js

@@ -0,0 +1,194 @@
+/**
+ * Migration v33: Trust Progression + Safety Violations + Interactions.
+ * Spec ref: I-09 (Trust is Earned), LEARNING-01 (Cross-Agent Learning),
+ *           LEARNING-02 (Interaction Table)
+ *
+ * Phase: Sprint 2 (Trust & Learning)
+ * Tables: core_trust_transitions, core_safety_violations, core_interactions
+ *
+ * Invariants enforced:
+ *   I-09: Trust progression untrusted → probationary → trusted → admin (human only)
+ *   I-09: Trust revocable on safety violation
+ *   LEARNING-02: Interaction recording for learning pipeline
+ *
+ * Triggers:
+ *   trg_trust_transitions_no_update: Append-only on trust transitions
+ *   trg_trust_transitions_no_delete: No delete on trust transitions
+ *   trg_safety_violations_no_update: Append-only on safety violations
+ *   trg_safety_violations_no_delete: No delete on safety violations
+ *   trg_interactions_content_immutable: User input/assistant output immutable
+ *   trg_core_agents_trust_admin_guard_v2: Admin trust requires human actor record (5s window, F-S2-004)
+ *
+ * Replaces:
+ *   trg_core_agents_trust_admin_guard (v32 blanket guard → v2 with transition record check)
+ *
+ * Indexes:
+ *   idx_trust_transitions_agent: Agent + created_at for transition history
+ *   idx_trust_transitions_tenant: Tenant + agent for scoped lookups
+ *   idx_safety_violations_agent: Agent + created_at for violation history
+ *   idx_safety_violations_tenant: Tenant + agent for scoped lookups
+ *   idx_interactions_agent: Agent + created_at for interaction history
+ *   idx_interactions_tenant: Tenant + agent for scoped lookups
+ *   idx_interactions_learning: Partial index for learning pipeline (quality > 0.7 + positive)
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_033_SQL = `
+-- Migration 033: Trust Progression + Safety Violations + Interactions
+-- Sprint 2: Trust & Learning
+-- Spec ref: I-09, LEARNING-01, LEARNING-02
+
+-- ============================================================================
+-- Table: core_trust_transitions — I-09 (Trust is Earned) — append-only audit log
+-- Records every trust level change with actor, reason, and criteria snapshot.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS core_trust_transitions (
+  id TEXT PRIMARY KEY NOT NULL,
+  tenant_id TEXT,
+  agent_id TEXT NOT NULL,
+  from_level TEXT NOT NULL CHECK(from_level IN ('untrusted','probationary','trusted','admin')),
+  to_level TEXT NOT NULL CHECK(to_level IN ('untrusted','probationary','trusted','admin')),
+  actor_type TEXT NOT NULL CHECK(actor_type IN ('system','human','policy')),
+  actor_id TEXT,
+  reason TEXT NOT NULL,
+  criteria_snapshot TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  FOREIGN KEY (agent_id) REFERENCES core_agents(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_trust_transitions_agent
+  ON core_trust_transitions(agent_id, created_at);
+
+CREATE INDEX IF NOT EXISTS idx_trust_transitions_tenant
+  ON core_trust_transitions(tenant_id, agent_id);
+
+-- Append-only: no updates allowed
+CREATE TRIGGER IF NOT EXISTS trg_trust_transitions_no_update
+BEFORE UPDATE ON core_trust_transitions
+BEGIN
+  SELECT RAISE(ABORT, 'TRUST_TRANSITION_IMMUTABLE: trust transition records are append-only');
+END;
+
+-- Append-only: no deletes allowed
+CREATE TRIGGER IF NOT EXISTS trg_trust_transitions_no_delete
+BEFORE DELETE ON core_trust_transitions
+BEGIN
+  SELECT RAISE(ABORT, 'TRUST_TRANSITION_NO_DELETE: trust transition records cannot be deleted');
+END;
+
+-- ============================================================================
+-- Table: core_safety_violations — I-09 (Trust Revocation) — append-only
+-- Records safety violations that may trigger automatic trust demotion.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS core_safety_violations (
+  id TEXT PRIMARY KEY NOT NULL,
+  tenant_id TEXT,
+  agent_id TEXT NOT NULL,
+  violation_type TEXT NOT NULL CHECK(violation_type IN ('content_policy','prompt_injection','data_exfiltration','unauthorized_access','rate_abuse','safety_bypass','other')),
+  severity TEXT NOT NULL CHECK(severity IN ('low','medium','high','critical')),
+  description TEXT NOT NULL,
+  evidence_json TEXT NOT NULL DEFAULT '{}',
+  demotion_applied INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL,
+  FOREIGN KEY (agent_id) REFERENCES core_agents(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_safety_violations_agent
+  ON core_safety_violations(agent_id, created_at);
+
+CREATE INDEX IF NOT EXISTS idx_safety_violations_tenant
+  ON core_safety_violations(tenant_id, agent_id);
+
+-- Append-only: no updates allowed
+CREATE TRIGGER IF NOT EXISTS trg_safety_violations_no_update
+BEFORE UPDATE ON core_safety_violations
+BEGIN
+  SELECT RAISE(ABORT, 'SAFETY_VIOLATION_IMMUTABLE: safety violation records are append-only');
+END;
+
+-- Append-only: no deletes allowed
+CREATE TRIGGER IF NOT EXISTS trg_safety_violations_no_delete
+BEFORE DELETE ON core_safety_violations
+BEGIN
+  SELECT RAISE(ABORT, 'SAFETY_VIOLATION_NO_DELETE: safety violation records cannot be deleted');
+END;
+
+-- ============================================================================
+-- Table: core_interactions — LEARNING-02 (Interaction Table)
+-- Learning pipeline input: records chat interactions for technique extraction.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS core_interactions (
+  id TEXT PRIMARY KEY NOT NULL,
+  tenant_id TEXT,
+  agent_id TEXT,
+  session_id TEXT,
+  conversation_id TEXT,
+  user_input TEXT NOT NULL,
+  assistant_output TEXT NOT NULL,
+  model_used TEXT,
+  input_tokens INTEGER NOT NULL DEFAULT 0,
+  output_tokens INTEGER NOT NULL DEFAULT 0,
+  quality_score REAL,
+  user_feedback TEXT CHECK(user_feedback IS NULL OR user_feedback IN ('positive','negative','correction')),
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_interactions_agent
+  ON core_interactions(agent_id, created_at);
+
+CREATE INDEX IF NOT EXISTS idx_interactions_tenant
+  ON core_interactions(tenant_id, agent_id);
+
+-- Partial index for learning pipeline: only quality interactions with positive feedback
+CREATE INDEX IF NOT EXISTS idx_interactions_learning
+  ON core_interactions(agent_id, quality_score, created_at)
+  WHERE quality_score > 0.7 AND user_feedback = 'positive';
+
+-- User input and assistant output are immutable (content integrity)
+CREATE TRIGGER IF NOT EXISTS trg_interactions_content_immutable
+BEFORE UPDATE OF user_input, assistant_output ON core_interactions
+WHEN NEW.user_input != OLD.user_input OR NEW.assistant_output != OLD.assistant_output
+BEGIN
+  SELECT RAISE(ABORT, 'INTERACTION_CONTENT_IMMUTABLE: interaction content cannot be modified');
+END;
+
+-- ============================================================================
+-- Admin Guard v2: Replace Sprint 1's blanket guard with transition-record-verified guard
+-- Requires a human-actor transition record in core_trust_transitions within 5 seconds.
+-- F-S2-004 FIX: Widened from 2s to 5s to account for clock skew between
+-- SQLite's datetime('now') and the application's TimeProvider.nowISO().
+-- This trigger is defense-in-depth — the application-level check is the primary guard.
+-- ============================================================================
+
+DROP TRIGGER IF EXISTS trg_core_agents_trust_admin_guard;
+
+CREATE TRIGGER IF NOT EXISTS trg_core_agents_trust_admin_guard_v2
+BEFORE UPDATE OF trust_level ON core_agents
+WHEN NEW.trust_level = 'admin' AND OLD.trust_level != 'admin'
+BEGIN
+  SELECT CASE
+    WHEN NOT EXISTS (
+      SELECT 1 FROM core_trust_transitions
+      WHERE agent_id = OLD.id
+        AND to_level = 'admin'
+        AND actor_type = 'human'
+        AND created_at > datetime('now', '-5 seconds')
+    )
+    THEN RAISE(ABORT, 'AGENT_TRUST_ESCALATION: admin trust requires human actor record in core_trust_transitions')
+  END;
+END;
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getTrustLearningMigrations() {
+    return [buildEntry(33, 'trust_learning', MIGRATION_033_SQL)];
+}
+//# sourceMappingURL=024_trust_learning.js.map

package/dist/api/migration/024_trust_learning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"024_trust_learning.js","sourceRoot":"","sources":["../../../src/api/migration/024_trust_learning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmJzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/api/migration/025_knowledge_graph.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Migration v34: Knowledge Graph — Artifact Cascading + Goal Drift Detection.
+ * Spec ref: I-23 (Artifact Dependency Cascade), I-24 (Goal Anchoring / Drift Detection)
+ *
+ * Phase: Sprint 3 (Knowledge Graph)
+ *
+ * Schema changes:
+ *   - ALTER core_artifacts: Add staleness_flag column (FRESH/STALE)
+ *   - Partial index for stale artifact queries
+ *   - New table: core_drift_assessments (append-only)
+ *
+ * Invariants enforced:
+ *   I-23: STALE flag propagates via BFS through dependency graph on archive
+ *   I-24: Drift assessments recorded at checkpoints, immutable once stored
+ *   I-19: staleness_flag is column-specific UPDATE — does not touch content or type
+ *
+ * Triggers:
+ *   trg_drift_assessments_no_update: Append-only on drift assessments
+ *   trg_drift_assessments_no_delete: No delete on drift assessments
+ *
+ * Indexes:
+ *   idx_artifacts_stale: Partial index for stale artifact queries (WHERE staleness_flag = 'STALE')
+ *   idx_drift_assessments_mission: Mission lookup
+ *   idx_drift_assessments_checkpoint: Checkpoint lookup
+ *   idx_drift_assessments_tenant: Tenant isolation
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getKnowledgeGraphMigrations(): MigrationEntry[];
+//# sourceMappingURL=025_knowledge_graph.d.ts.map

package/dist/api/migration/025_knowledge_graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"025_knowledge_graph.d.ts","sourceRoot":"","sources":["../../../src/api/migration/025_knowledge_graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAsEvE,wBAAgB,2BAA2B,IAAI,cAAc,EAAE,CAE9D"}

package/dist/api/migration/025_knowledge_graph.js

@@ -0,0 +1,97 @@
+/**
+ * Migration v34: Knowledge Graph — Artifact Cascading + Goal Drift Detection.
+ * Spec ref: I-23 (Artifact Dependency Cascade), I-24 (Goal Anchoring / Drift Detection)
+ *
+ * Phase: Sprint 3 (Knowledge Graph)
+ *
+ * Schema changes:
+ *   - ALTER core_artifacts: Add staleness_flag column (FRESH/STALE)
+ *   - Partial index for stale artifact queries
+ *   - New table: core_drift_assessments (append-only)
+ *
+ * Invariants enforced:
+ *   I-23: STALE flag propagates via BFS through dependency graph on archive
+ *   I-24: Drift assessments recorded at checkpoints, immutable once stored
+ *   I-19: staleness_flag is column-specific UPDATE — does not touch content or type
+ *
+ * Triggers:
+ *   trg_drift_assessments_no_update: Append-only on drift assessments
+ *   trg_drift_assessments_no_delete: No delete on drift assessments
+ *
+ * Indexes:
+ *   idx_artifacts_stale: Partial index for stale artifact queries (WHERE staleness_flag = 'STALE')
+ *   idx_drift_assessments_mission: Mission lookup
+ *   idx_drift_assessments_checkpoint: Checkpoint lookup
+ *   idx_drift_assessments_tenant: Tenant isolation
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_034_SQL = `
+-- Migration 034: Knowledge Graph — Artifact Cascading + Goal Drift Detection
+-- Sprint 3: Knowledge Graph
+-- Spec ref: I-23, I-24, I-19
+
+-- ============================================================================
+-- ALTER core_artifacts: Add staleness_flag column
+-- Default 'FRESH'. I-19 safe — existing triggers only protect content/type columns.
+-- Column-specific UPDATE (SET staleness_flag = 'STALE') does not fire content/type triggers.
+-- ============================================================================
+
+ALTER TABLE core_artifacts ADD COLUMN staleness_flag TEXT NOT NULL DEFAULT 'FRESH'
+  CHECK(staleness_flag IN ('FRESH', 'STALE'));
+
+-- Partial index for stale artifact queries (most artifacts are FRESH)
+CREATE INDEX IF NOT EXISTS idx_artifacts_stale
+  ON core_artifacts(mission_id, staleness_flag)
+  WHERE staleness_flag = 'STALE';
+
+-- ============================================================================
+-- Table: core_drift_assessments — I-24 (Goal Drift Detection) — append-only
+-- Records semantic drift assessments at checkpoints.
+-- Each assessment compares checkpoint text against mission's goal anchor.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS core_drift_assessments (
+  id TEXT PRIMARY KEY NOT NULL,
+  checkpoint_id TEXT NOT NULL,
+  mission_id TEXT NOT NULL,
+  tenant_id TEXT,
+  drift_score REAL NOT NULL,
+  similarity_score REAL NOT NULL,
+  original_objective TEXT NOT NULL,
+  current_assessment TEXT NOT NULL,
+  action_taken TEXT NOT NULL CHECK(action_taken IN ('none','flagged','escalated')),
+  escalation_reason TEXT,
+  created_at TEXT NOT NULL,
+  FOREIGN KEY (checkpoint_id) REFERENCES core_checkpoints(id),
+  FOREIGN KEY (mission_id) REFERENCES core_missions(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_drift_assessments_mission ON core_drift_assessments(mission_id);
+CREATE INDEX IF NOT EXISTS idx_drift_assessments_checkpoint ON core_drift_assessments(checkpoint_id);
+CREATE INDEX IF NOT EXISTS idx_drift_assessments_tenant ON core_drift_assessments(tenant_id);
+
+-- Append-only triggers for drift assessments
+CREATE TRIGGER IF NOT EXISTS trg_drift_assessments_no_update
+BEFORE UPDATE ON core_drift_assessments
+BEGIN
+  SELECT RAISE(ABORT, 'DRIFT_ASSESSMENT_IMMUTABLE: drift assessment records are append-only');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_drift_assessments_no_delete
+BEFORE DELETE ON core_drift_assessments
+BEGIN
+  SELECT RAISE(ABORT, 'DRIFT_ASSESSMENT_NO_DELETE: drift assessment records cannot be deleted');
+END;
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getKnowledgeGraphMigrations() {
+    return [buildEntry(34, 'knowledge_graph', MIGRATION_034_SQL)];
+}
+//# sourceMappingURL=025_knowledge_graph.js.map

package/dist/api/migration/025_knowledge_graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"025_knowledge_graph.js","sourceRoot":"","sources":["../../../src/api/migration/025_knowledge_graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/api/migration/026_replay_pipeline.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Migration v35: Replay & Pipeline — Replay Snapshots + LLM Log Immutability + Recovery Index.
+ * Spec ref: I-25 (Deterministic Replay), I-18 (Mission Persistence/Recovery), I-28 (Pipeline Determinism)
+ *
+ * Phase: Sprint 4 (Replay & Pipeline)
+ *
+ * Schema changes:
+ *   - New table: core_replay_snapshots (append-only, mission state snapshots for replay verification)
+ *   - Append-only triggers on core_replay_snapshots (no UPDATE, no DELETE)
+ *   - Immutability trigger on core_llm_request_log (completed/failed entries immutable)
+ *   - Partial index on core_missions for non-terminal recovery queries
+ *
+ * Invariants enforced:
+ *   I-25: State snapshots enable deterministic replay verification via hash comparison
+ *   I-18: Partial index accelerates recovery of non-terminal missions after restart
+ *   I-28: Pipeline structure unchanged — this migration supports pipeline determinism verification
+ *
+ * Triggers:
+ *   trg_replay_snapshots_no_update: Append-only on replay snapshots
+ *   trg_replay_snapshots_no_delete: No delete on replay snapshots
+ *   trg_llm_log_immutable: Completed/failed LLM log entries cannot be modified
+ *
+ * Indexes:
+ *   idx_replay_snapshots_mission: Mission lookup for snapshot queries
+ *   idx_replay_snapshots_tenant: Tenant isolation for replay queries
+ *   idx_core_missions_non_terminal: Partial index for recovery (non-terminal states only)
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getReplayPipelineMigrations(): MigrationEntry[];
+//# sourceMappingURL=026_replay_pipeline.d.ts.map

package/dist/api/migration/026_replay_pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"026_replay_pipeline.d.ts","sourceRoot":"","sources":["../../../src/api/migration/026_replay_pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA0FvE,wBAAgB,2BAA2B,IAAI,cAAc,EAAE,CAE9D"}

package/dist/api/migration/026_replay_pipeline.js

@@ -0,0 +1,118 @@
+/**
+ * Migration v35: Replay & Pipeline — Replay Snapshots + LLM Log Immutability + Recovery Index.
+ * Spec ref: I-25 (Deterministic Replay), I-18 (Mission Persistence/Recovery), I-28 (Pipeline Determinism)
+ *
+ * Phase: Sprint 4 (Replay & Pipeline)
+ *
+ * Schema changes:
+ *   - New table: core_replay_snapshots (append-only, mission state snapshots for replay verification)
+ *   - Append-only triggers on core_replay_snapshots (no UPDATE, no DELETE)
+ *   - Immutability trigger on core_llm_request_log (completed/failed entries immutable)
+ *   - Partial index on core_missions for non-terminal recovery queries
+ *
+ * Invariants enforced:
+ *   I-25: State snapshots enable deterministic replay verification via hash comparison
+ *   I-18: Partial index accelerates recovery of non-terminal missions after restart
+ *   I-28: Pipeline structure unchanged — this migration supports pipeline determinism verification
+ *
+ * Triggers:
+ *   trg_replay_snapshots_no_update: Append-only on replay snapshots
+ *   trg_replay_snapshots_no_delete: No delete on replay snapshots
+ *   trg_llm_log_immutable: Completed/failed LLM log entries cannot be modified
+ *
+ * Indexes:
+ *   idx_replay_snapshots_mission: Mission lookup for snapshot queries
+ *   idx_replay_snapshots_tenant: Tenant isolation for replay queries
+ *   idx_core_missions_non_terminal: Partial index for recovery (non-terminal states only)
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_035_SQL = `
+-- Migration 035: Replay & Pipeline — Replay Snapshots + LLM Log Immutability + Recovery Index
+-- Sprint 4: Replay & Pipeline
+-- Spec ref: I-25, I-18, I-28
+
+-- ============================================================================
+-- I-25: Replay snapshot table for state comparison
+-- Append-only: snapshots capture mission state at lifecycle points.
+-- Hash comparison enables deterministic replay verification.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS core_replay_snapshots (
+  id TEXT PRIMARY KEY NOT NULL,
+  mission_id TEXT NOT NULL REFERENCES core_missions(id),
+  tenant_id TEXT,
+  snapshot_type TEXT NOT NULL CHECK(snapshot_type IN ('mission_start', 'checkpoint', 'mission_end')),
+  state_hash TEXT NOT NULL,
+  state_detail TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX idx_replay_snapshots_mission ON core_replay_snapshots(mission_id);
+CREATE INDEX idx_replay_snapshots_tenant ON core_replay_snapshots(tenant_id);
+
+-- Append-only trigger (no UPDATE)
+CREATE TRIGGER trg_replay_snapshots_no_update
+BEFORE UPDATE ON core_replay_snapshots
+BEGIN
+  SELECT RAISE(ABORT, 'core_replay_snapshots is append-only: UPDATE prohibited');
+END;
+
+-- Append-only trigger (no DELETE)
+CREATE TRIGGER trg_replay_snapshots_no_delete
+BEFORE DELETE ON core_replay_snapshots
+BEGIN
+  SELECT RAISE(ABORT, 'core_replay_snapshots is append-only: DELETE prohibited');
+END;
+
+-- ============================================================================
+-- I-25: Append-only protection on completed LLM log entries
+-- CRITICAL security finding: core_llm_request_log had no immutability triggers.
+-- Once an LLM request reaches completed or failed status, its recorded data
+-- (prompt, response, tokens) must be immutable for replay integrity.
+-- ============================================================================
+
+CREATE TRIGGER trg_llm_log_immutable
+BEFORE UPDATE ON core_llm_request_log
+WHEN OLD.status IN ('completed', 'failed')
+  AND (
+    NEW.status != OLD.status
+    OR NEW.response_body IS NOT OLD.response_body
+    OR NEW.request_body IS NOT OLD.request_body
+    OR NEW.prompt_hash IS NOT OLD.prompt_hash
+    OR NEW.input_tokens IS NOT OLD.input_tokens
+    OR NEW.output_tokens IS NOT OLD.output_tokens
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'core_llm_request_log: completed/failed entries are immutable');
+END;
+
+-- F-S4-002 FIX: DELETE trigger on core_llm_request_log.
+-- Without this, an attacker can destroy replay evidence via DELETE.
+CREATE TRIGGER trg_llm_log_no_delete
+BEFORE DELETE ON core_llm_request_log
+BEGIN
+  SELECT RAISE(ABORT, 'core_llm_request_log is append-only: DELETE prohibited');
+END;
+
+-- ============================================================================
+-- I-18: Partial index for non-terminal mission recovery queries.
+-- On engine restart, only non-terminal missions need recovery evaluation.
+-- This partial index avoids scanning the (potentially large) set of completed/failed missions.
+-- ============================================================================
+
+CREATE INDEX IF NOT EXISTS idx_core_missions_non_terminal
+ON core_missions(state)
+WHERE state NOT IN ('COMPLETED', 'FAILED', 'CANCELLED');
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getReplayPipelineMigrations() {
+    return [buildEntry(35, 'replay_pipeline', MIGRATION_035_SQL)];
+}
+//# sourceMappingURL=026_replay_pipeline.js.map

package/dist/api/migration/026_replay_pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"026_replay_pipeline.js","sourceRoot":"","sources":["../../../src/api/migration/026_replay_pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6EzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/api/missions/mission_api.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Mission API wrapper for the API surface.
+ * S ref: S14-S24 (10 system calls), SD-10 (MissionHandle), I-13 (RBAC),
+ *        I-17 (governance boundary), I-20 (structural limits)
+ *
+ * Phase: 4 (API Surface)
+ * Implements: SDD §7 build order item 8
+ *
+ * The mission API wraps the 10 system calls behind a consumer-friendly interface:
+ *   - limen.missions.create() -> SC-1 (proposeMission)
+ *   - MissionHandle.proposeTaskGraph() -> SC-2
+ *   - MissionHandle.proposeTaskExecution() -> SC-3
+ *   - MissionHandle.createArtifact() -> SC-4
+ *   - MissionHandle.readArtifact() -> SC-5
+ *   - MissionHandle.emitEvent() -> SC-6
+ *   - MissionHandle.requestCapability() -> SC-7
+ *   - MissionHandle.requestBudget() -> SC-8
+ *   - MissionHandle.submitResult() -> SC-9
+ *   - MissionHandle.respondCheckpoint() -> SC-10
+ *
+ * RBAC enforced on every call (SD-14: before rate limit).
+ * Rate limiting enforced on every call (§36).
+ * All mutations delegate to L2 Orchestration (I-17).
+ *
+ * Invariants enforced: I-13, I-17, I-20 (via L2 enforcement)
+ * Failure modes defended: FM-02 (via budget governance), FM-13 (via structural limits)
+ */
+import type { OperationContext, DatabaseConnection, RateLimiter, RbacEngine, MissionId, EventBus } from '../../kernel/interfaces/index.js';
+import type { OrchestrationEngine } from '../../orchestration/interfaces/orchestration.js';
+import type { AuditTrail } from '../../kernel/interfaces/index.js';
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+import type { Substrate } from '../../substrate/interfaces/substrate.js';
+import type { MissionApi, MissionCreateOptions, MissionHandle, MissionView, MissionFilter } from '../interfaces/api.js';
+/**
+ * S14-S24: Mission API implementation.
+ * Wraps L2 orchestration system calls with RBAC and rate limiting.
+ */
+export declare class MissionApiImpl implements MissionApi {
+    private readonly rbac;
+    private readonly rateLimiter;
+    private readonly orchestration;
+    private readonly events;
+    private readonly getConnection;
+    private readonly getContext;
+    private readonly getAudit;
+    private readonly getSubstrate;
+    private readonly time?;
+    constructor(rbac: RbacEngine, rateLimiter: RateLimiter, orchestration: OrchestrationEngine, events: EventBus, getConnection: () => DatabaseConnection, getContext: () => OperationContext, getAudit: () => AuditTrail, getSubstrate: () => Substrate, time?: TimeProvider | undefined);
+    /**
+     * SC-1 (S15): Create a mission.
+     * Permission: 'create_mission'
+     * Delegates to orchestration.proposeMission().
+     */
+    create(options: MissionCreateOptions): Promise<MissionHandle>;
+    /**
+     * S6: Get an existing mission by ID.
+     * I-13: RBAC enforced. SD-14: RBAC before rate limit.
+     * Uses the missions subsystem accessor.
+     */
+    get(id: MissionId): Promise<MissionHandle | null>;
+    /**
+     * S6: List missions with optional filters.
+     * I-13: RBAC enforced. SD-14: RBAC before rate limit.
+     * Uses the missions subsystem to query. Returns MissionView[].
+     */
+    list(_filter?: MissionFilter): Promise<readonly MissionView[]>;
+    private buildOrchDeps;
+    /**
+     * SD-10: Build a MissionHandle with system call wrapper methods.
+     * Every method on the handle delegates to L2 orchestration with RBAC.
+     */
+    private buildMissionHandle;
+}
+//# sourceMappingURL=mission_api.d.ts.map

package/dist/api/missions/mission_api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission_api.d.ts","sourceRoot":"","sources":["../../../src/api/missions/mission_api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAC7D,SAAS,EAAmB,QAAQ,EACrC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EACV,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAW5E,MAAM,sBAAsB,CAAC;AAS9B;;;GAGG;AACH,qBAAa,cAAe,YAAW,UAAU;IAE7C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBARL,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,mBAAmB,EAClC,MAAM,EAAE,QAAQ,EAChB,aAAa,EAAE,MAAM,kBAAkB,EACvC,UAAU,EAAE,MAAM,gBAAgB,EAClC,QAAQ,EAAE,MAAM,UAAU,EAC1B,YAAY,EAAE,MAAM,SAAS,EAC7B,IAAI,CAAC,EAAE,YAAY,YAAA;IAGtC;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;IAsCnE;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA2BvD;;;;OAIG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAkBpE,OAAO,CAAC,aAAa;IAYrB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;CAuS3B"}