limen-ai 1.0.0

package/dist/execution/wiring/terminal_release.js

@@ -0,0 +1,85 @@
+/**
+ * Wire-EGP-03: Terminal Release — reservation released atomically with terminal state.
+ * Spec ref: I-83 (reservation release), EGP-I3 (atomic reclaim), EGP-I13 (conservation)
+ *
+ * Phase: 2B — EGP ↔ Execution Wiring
+ *
+ * When a task reaches terminal state (COMPLETED/FAILED/CANCELLED), its reservation
+ * is released and unconsumed budget is returned to the mission's unreserved pool.
+ * Conservation law is verified after the release.
+ *
+ * Architecture note: The reservation is looked up BEFORE terminal processing
+ * because terminalOp.execute() clears the task→reservation index on release.
+ * The consumed amounts from the pre-release lookup are used for conservation-
+ * correct finalization via finalizeReservation().
+ *
+ * Invariants enforced:
+ *   EGP-I3   Atomic reclaim on final terminal per dimension
+ *   EGP-I8   Retry consumes same reservation (retain on FAILED with retries)
+ *   EGP-I13  Conservation law per dimension
+ *   I-83     Reservation released atomically with terminal transition
+ *
+ * Defect classes covered:
+ *   DC-EGP-004  Reservation not released on terminal (enforced)
+ *   DC-EGP-009  Reservation events not emitted (emitted by underlying store)
+ */
+// ── Result helpers ──
+function ok(value) {
+    return { ok: true, value };
+}
+// ── Factory ──
+/**
+ * Create a TerminalRelease that composes terminal handler + ledger finalization + conservation.
+ * Pattern: C-07 (Object.freeze on public API)
+ */
+export function createTerminalRelease(governor) {
+    return Object.freeze({
+        executeRelease(conn, ctx, taskId, missionId, terminalState, hasRetriesRemaining) {
+            // Step 1: Look up reservation BEFORE terminal processing.
+            // terminalOp.execute() clears the task→reservation index on release,
+            // so we must capture consumed amounts here.
+            const preResult = governor.reservations.getByTaskId(conn, taskId);
+            let preReservation = null;
+            if (preResult.ok) {
+                preReservation = preReservation = preResult.value;
+            }
+            // Step 2: Execute terminal operation (release or retain)
+            const termResult = governor.terminalOp.execute(conn, ctx, taskId, terminalState, hasRetriesRemaining);
+            if (!termResult.ok) {
+                return termResult;
+            }
+            const terminal = termResult.value;
+            // Step 3: If released, finalize reservation budget accounting
+            if (terminal.action === 'released' && preReservation) {
+                // Conservation-correct finalization (EGP-I13):
+                // Within-budget consumed = min(consumed, reserved)
+                // Overage consumed = max(0, consumed - reserved) [handled separately via debt]
+                // Reclaimed = max(0, reserved - consumed) = terminal.reclaimedTokens
+                const withinBudgetConsumedTokens = Math.min(preReservation.consumedTokens, preReservation.reservedTokens);
+                const withinBudgetConsumedDelib = Math.min(preReservation.consumedDeliberation, preReservation.reservedDeliberation);
+                const finalizeResult = governor.ledger.finalizeReservation(conn, missionId, withinBudgetConsumedTokens, withinBudgetConsumedDelib, terminal.reclaimedTokens, terminal.reclaimedDeliberation);
+                if (!finalizeResult.ok) {
+                    return finalizeResult;
+                }
+                // Handle overage: charge to mission debt (EGP-I12)
+                if (terminal.overageTokens > 0 || terminal.overageDeliberation > 0) {
+                    governor.ledger.recordOverage(conn, ctx, missionId, terminal.overageTokens, terminal.overageDeliberation);
+                }
+            }
+            // Step 4: Verify conservation law (only for budget-moving operations)
+            let conservationCheck = null;
+            if (terminal.action === 'released') {
+                const conservationResult = governor.ledger.checkConservation(conn, missionId);
+                if (conservationResult.ok) {
+                    conservationCheck = conservationResult.value;
+                }
+            }
+            return ok(Object.freeze({
+                terminalResult: terminal,
+                conservationHolds: conservationCheck ? conservationCheck.holds : false,
+                conservationCheck,
+            }));
+        },
+    });
+}
+//# sourceMappingURL=terminal_release.js.map

package/dist/execution/wiring/terminal_release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal_release.js","sourceRoot":"","sources":["../../../src/execution/wiring/terminal_release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,uBAAuB;AAEvB,SAAS,EAAE,CAAI,KAAQ;IACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAmCD,gBAAgB;AAEhB;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA2B;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,CACZ,IAAwB,EACxB,GAAqB,EACrB,MAAc,EACd,SAAoB,EACpB,aAAmD,EACnD,mBAA4B;YAE5B,0DAA0D;YAC1D,qEAAqE;YACrE,4CAA4C;YAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClE,IAAI,cAAc,GAAiC,IAAI,CAAC;YACxD,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;gBACjB,cAAc,GAAG,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC;YACpD,CAAC;YAED,yDAAyD;YACzD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAC5C,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CACtD,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,OAAO,UAAsD,CAAC;YAChE,CAAC;YAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC;YAElC,8DAA8D;YAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,cAAc,EAAE,CAAC;gBACrD,+CAA+C;gBAC/C,mDAAmD;gBACnD,+EAA+E;gBAC/E,qEAAqE;gBACrE,MAAM,0BAA0B,GAAG,IAAI,CAAC,GAAG,CACzC,cAAc,CAAC,cAAc,EAAE,cAAc,CAAC,cAAc,CAC7D,CAAC;gBACF,MAAM,yBAAyB,GAAG,IAAI,CAAC,GAAG,CACxC,cAAc,CAAC,oBAAoB,EAAE,cAAc,CAAC,oBAAoB,CACzE,CAAC;gBAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CACxD,IAAI,EAAE,SAAS,EACf,0BAA0B,EAC1B,yBAAyB,EACzB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,qBAAqB,CAC/B,CAAC;gBACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;oBACvB,OAAO,cAA0D,CAAC;gBACpE,CAAC;gBAED,mDAAmD;gBACnD,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,IAAI,QAAQ,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;oBACnE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAC3B,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,mBAAmB,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,IAAI,iBAAiB,GAAmC,IAAI,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9E,IAAI,kBAAkB,CAAC,EAAE,EAAE,CAAC;oBAC1B,iBAAiB,GAAG,kBAAkB,CAAC,KAAK,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtB,cAAc,EAAE,QAAQ;gBACxB,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;gBACtE,iBAAiB;aAClB,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/governance/harness/governance_harness.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Phase 0A Governance Harness — Factory for the complete governance system.
+ * Truth Model: Deliverables 1-12 (286 assertions)
+ *
+ * Phase: 0A (Foundation)
+ * Status: IMPLEMENTED — all methods backed by SQLite stores.
+ *
+ * Pattern: Follows src/working-memory/harness/wmp_harness.ts.
+ */
+import type { RunStore, AttemptStore } from '../../kernel/interfaces/run_identity.js';
+import type { TraceEmitter, TraceEventStore } from '../../kernel/interfaces/trace.js';
+import type { MissionContractStore, ConstitutionalModeStore } from '../../kernel/interfaces/mission_contract.js';
+import type { SupervisorDecisionStore, SuspensionStore, HandoffStore } from '../../kernel/interfaces/supervisor.js';
+import type { TransitionEnforcer } from '../../kernel/interfaces/lifecycle.js';
+import type { EvalCaseStore } from '../../kernel/interfaces/eval.js';
+import type { CapabilityManifestStore } from '../../kernel/interfaces/capability_manifest.js';
+import type { PayloadCanonicalizer, IdempotencyStore, ResumeTokenStore } from '../../kernel/interfaces/idempotency.js';
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+/**
+ * Thrown by all harness methods before implementation exists.
+ * Contract tests catch this to verify they FAIL correctly.
+ */
+export declare class NotImplementedError extends Error {
+    readonly code = "NOT_IMPLEMENTED";
+    constructor(method: string);
+}
+/**
+ * Complete Phase 0A governance system facade.
+ * All methods throw NotImplementedError until implementation exists.
+ */
+export interface GovernanceSystem {
+    readonly runStore: RunStore;
+    readonly attemptStore: AttemptStore;
+    readonly traceEmitter: TraceEmitter;
+    readonly traceEventStore: TraceEventStore;
+    readonly contractStore: MissionContractStore;
+    readonly constitutionalModeStore: ConstitutionalModeStore;
+    readonly supervisorDecisionStore: SupervisorDecisionStore;
+    readonly suspensionStore: SuspensionStore;
+    readonly handoffStore: HandoffStore;
+    readonly transitionEnforcer: TransitionEnforcer;
+    readonly evalCaseStore: EvalCaseStore;
+    readonly capabilityManifestStore: CapabilityManifestStore;
+    readonly idempotencyStore: IdempotencyStore;
+    readonly resumeTokenStore: ResumeTokenStore;
+    readonly payloadCanonicalizer: PayloadCanonicalizer;
+}
+/**
+ * Create a GovernanceSystem with all real SQLite-backed implementations.
+ *
+ * @returns Frozen GovernanceSystem — all stores backed by SQLite
+ */
+export declare function createGovernanceSystem(time?: TimeProvider): GovernanceSystem;
+//# sourceMappingURL=governance_harness.d.ts.map

package/dist/governance/harness/governance_harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance_harness.d.ts","sourceRoot":"","sources":["../../../src/governance/harness/governance_harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACjH,OAAO,KAAK,EAAE,uBAAuB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACpH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAsBvH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAMpE;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAgB,IAAI,qBAAqB;gBAE7B,MAAM,EAAE,MAAM;CAI3B;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;CACrD;AAMD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAyB5E"}

package/dist/governance/harness/governance_harness.js

@@ -0,0 +1,60 @@
+/**
+ * Phase 0A Governance Harness — Factory for the complete governance system.
+ * Truth Model: Deliverables 1-12 (286 assertions)
+ *
+ * Phase: 0A (Foundation)
+ * Status: IMPLEMENTED — all methods backed by SQLite stores.
+ *
+ * Pattern: Follows src/working-memory/harness/wmp_harness.ts.
+ */
+// Real store implementations
+import { createRunStoreImpl, createAttemptStoreImpl, createRunSequencerImpl, createTraceEmitterImpl, createTraceEventStoreImpl, createMissionContractStoreImpl, createConstitutionalModeStoreImpl, createSupervisorDecisionStoreImpl, createSuspensionStoreImpl, createHandoffStoreImpl, createTransitionEnforcerImpl, createEvalCaseStoreImpl, createCapabilityManifestStoreImpl, createIdempotencyStoreImpl, createResumeTokenStoreImpl, createPayloadCanonicalizerImpl, setGovernanceTimeProvider, } from '../stores/governance_stores.js';
+// ============================================================================
+// NotImplementedError — sentinel for pre-implementation contract tests
+// ============================================================================
+/**
+ * Thrown by all harness methods before implementation exists.
+ * Contract tests catch this to verify they FAIL correctly.
+ */
+export class NotImplementedError extends Error {
+    code = 'NOT_IMPLEMENTED';
+    constructor(method) {
+        super(`${method} is not yet implemented`);
+        this.name = 'NotImplementedError';
+    }
+}
+// ============================================================================
+// Factory — creates the complete governance system with real implementations
+// ============================================================================
+/**
+ * Create a GovernanceSystem with all real SQLite-backed implementations.
+ *
+ * @returns Frozen GovernanceSystem — all stores backed by SQLite
+ */
+export function createGovernanceSystem(time) {
+    // Hard Stop #7: Inject time provider into governance module stores
+    if (time)
+        setGovernanceTimeProvider(time);
+    // Wire dependency graph: TransitionEnforcer depends on SuspensionStore,
+    // TraceEmitter depends on RunSequencer
+    const suspensionStore = createSuspensionStoreImpl();
+    const sequencer = createRunSequencerImpl();
+    return Object.freeze({
+        runStore: createRunStoreImpl(),
+        attemptStore: createAttemptStoreImpl(),
+        traceEmitter: createTraceEmitterImpl(sequencer),
+        traceEventStore: createTraceEventStoreImpl(),
+        contractStore: createMissionContractStoreImpl(),
+        constitutionalModeStore: createConstitutionalModeStoreImpl(),
+        supervisorDecisionStore: createSupervisorDecisionStoreImpl(),
+        suspensionStore,
+        handoffStore: createHandoffStoreImpl(),
+        transitionEnforcer: createTransitionEnforcerImpl(suspensionStore),
+        evalCaseStore: createEvalCaseStoreImpl(),
+        capabilityManifestStore: createCapabilityManifestStoreImpl(),
+        idempotencyStore: createIdempotencyStoreImpl(),
+        resumeTokenStore: createResumeTokenStoreImpl(),
+        payloadCanonicalizer: createPayloadCanonicalizerImpl(),
+    });
+}
+//# sourceMappingURL=governance_harness.js.map

package/dist/governance/harness/governance_harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance_harness.js","sourceRoot":"","sources":["../../../src/governance/harness/governance_harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,6BAA6B;AAC7B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,EACjC,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,iCAAiC,EACjC,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AAGxC,+EAA+E;AAC/E,uEAAuE;AACvE,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5B,IAAI,GAAG,iBAAiB,CAAC;IAEzC,YAAY,MAAc;QACxB,KAAK,CAAC,GAAG,MAAM,yBAAyB,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AA4BD,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAmB;IACxD,mEAAmE;IACnE,IAAI,IAAI;QAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC1C,wEAAwE;IACxE,uCAAuC;IACvC,MAAM,eAAe,GAAG,yBAAyB,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAE3C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,kBAAkB,EAAE;QAC9B,YAAY,EAAE,sBAAsB,EAAE;QACtC,YAAY,EAAE,sBAAsB,CAAC,SAAS,CAAC;QAC/C,eAAe,EAAE,yBAAyB,EAAE;QAC5C,aAAa,EAAE,8BAA8B,EAAE;QAC/C,uBAAuB,EAAE,iCAAiC,EAAE;QAC5D,uBAAuB,EAAE,iCAAiC,EAAE;QAC5D,eAAe;QACf,YAAY,EAAE,sBAAsB,EAAE;QACtC,kBAAkB,EAAE,4BAA4B,CAAC,eAAe,CAAC;QACjE,aAAa,EAAE,uBAAuB,EAAE;QACxC,uBAAuB,EAAE,iCAAiC,EAAE;QAC5D,gBAAgB,EAAE,0BAA0B,EAAE;QAC9C,gBAAgB,EAAE,0BAA0B,EAAE;QAC9C,oBAAoB,EAAE,8BAA8B,EAAE;KACvD,CAAC,CAAC;AACL,CAAC"}

package/dist/governance/migration/012_governance_runs_traces.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Migration v21: Governance runs, attempts, and trace events.
+ * Truth Model: Deliverable 2 (Run Identity), Deliverable 3 (Trace Events)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_runs, gov_attempts, obs_trace_events
+ * Namespace: gov_ (governance), obs_ (observability)
+ *
+ * BC-010: Run entity with fork lineage.
+ * BC-011: Attempt entity with typed failure/strategy.
+ * BC-013: runSeq strictly monotonically increasing — UNIQUE(run_id, run_seq).
+ * BC-022: TraceEvent typed shape, immutable once created.
+ * INV-020: Trace events immutable — no update or delete triggers.
+ * INV-021: (runId, runSeq) is unique.
+ * INV-X04: Every entity carries schemaVersion.
+ * INV-X12: Every entity carries origin.
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getGovernanceRunsTracesMigrations(): MigrationEntry[];
+//# sourceMappingURL=012_governance_runs_traces.d.ts.map

package/dist/governance/migration/012_governance_runs_traces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"012_governance_runs_traces.d.ts","sourceRoot":"","sources":["../../../src/governance/migration/012_governance_runs_traces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAgGvE,wBAAgB,iCAAiC,IAAI,cAAc,EAAE,CAEpE"}

package/dist/governance/migration/012_governance_runs_traces.js

@@ -0,0 +1,115 @@
+/**
+ * Migration v21: Governance runs, attempts, and trace events.
+ * Truth Model: Deliverable 2 (Run Identity), Deliverable 3 (Trace Events)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_runs, gov_attempts, obs_trace_events
+ * Namespace: gov_ (governance), obs_ (observability)
+ *
+ * BC-010: Run entity with fork lineage.
+ * BC-011: Attempt entity with typed failure/strategy.
+ * BC-013: runSeq strictly monotonically increasing — UNIQUE(run_id, run_seq).
+ * BC-022: TraceEvent typed shape, immutable once created.
+ * INV-020: Trace events immutable — no update or delete triggers.
+ * INV-021: (runId, runSeq) is unique.
+ * INV-X04: Every entity carries schemaVersion.
+ * INV-X12: Every entity carries origin.
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_021_SQL = `
+-- Migration 021: Governance runs, attempts, and trace events
+-- Truth Model: Deliverables 2, 3
+
+-- gov_runs: Constitutional execution envelope (BC-010)
+CREATE TABLE gov_runs (
+  run_id              TEXT    PRIMARY KEY,
+  tenant_id           TEXT    NOT NULL,
+  mission_id          TEXT    NOT NULL,
+  fork_of_run_id      TEXT,
+  fork_from_event_ref TEXT,
+  state               TEXT    NOT NULL CHECK (state IN ('active', 'completed', 'failed', 'abandoned')),
+  started_at          TEXT    NOT NULL,
+  completed_at        TEXT,
+  schema_version      TEXT    NOT NULL,
+  origin              TEXT    NOT NULL CHECK (origin IN ('runtime', 'migration-backfill'))
+);
+
+CREATE INDEX idx_gov_runs_tenant ON gov_runs (tenant_id);
+CREATE INDEX idx_gov_runs_mission ON gov_runs (mission_id);
+CREATE INDEX idx_gov_runs_fork ON gov_runs (fork_of_run_id) WHERE fork_of_run_id IS NOT NULL;
+
+-- gov_attempts: Single execution try within a task (BC-011)
+-- BC-019: Only one non-terminal attempt per task enforced at application layer.
+CREATE TABLE gov_attempts (
+  attempt_id          TEXT    PRIMARY KEY,
+  task_id             TEXT    NOT NULL,
+  mission_id          TEXT    NOT NULL,
+  run_id              TEXT    NOT NULL REFERENCES gov_runs(run_id),
+  prior_attempt_ref   TEXT,
+  triggering_failure  TEXT,
+  strategy_delta      TEXT,
+  state               TEXT    NOT NULL CHECK (state IN ('started', 'executing', 'succeeded', 'failed', 'abandoned')),
+  pinned_versions     TEXT    NOT NULL,
+  schema_version      TEXT    NOT NULL,
+  origin              TEXT    NOT NULL CHECK (origin IN ('runtime', 'migration-backfill')),
+  created_at          TEXT    NOT NULL
+);
+
+CREATE INDEX idx_gov_attempts_task ON gov_attempts (task_id);
+CREATE INDEX idx_gov_attempts_mission ON gov_attempts (mission_id);
+CREATE INDEX idx_gov_attempts_run ON gov_attempts (run_id);
+CREATE INDEX idx_gov_attempts_active ON gov_attempts (task_id, state)
+  WHERE state IN ('started', 'executing');
+
+-- obs_trace_events: Constitutional trace event log (BC-022)
+-- INV-020: Immutable — triggers prevent UPDATE and DELETE.
+-- INV-021: (run_id, run_seq) is unique.
+CREATE TABLE obs_trace_events (
+  trace_event_id      TEXT    PRIMARY KEY,
+  run_id              TEXT    NOT NULL,
+  run_seq             INTEGER NOT NULL,
+  span_seq            INTEGER NOT NULL,
+  parent_event_ref    TEXT,
+  fork_of_run_id      TEXT,
+  fork_from_event_ref TEXT,
+  correlation_id      TEXT    NOT NULL,
+  version             TEXT    NOT NULL,
+  type                TEXT    NOT NULL,
+  tenant_id           TEXT    NOT NULL,
+  timestamp           TEXT    NOT NULL,
+  payload             TEXT    NOT NULL,
+  UNIQUE(run_id, run_seq)
+);
+
+CREATE INDEX idx_obs_trace_events_run ON obs_trace_events (run_id, run_seq);
+CREATE INDEX idx_obs_trace_events_correlation ON obs_trace_events (correlation_id);
+CREATE INDEX idx_obs_trace_events_type ON obs_trace_events (type, timestamp);
+CREATE INDEX idx_obs_trace_events_tenant ON obs_trace_events (tenant_id, timestamp);
+
+-- INV-020: Trace events are immutable — no UPDATE.
+CREATE TRIGGER obs_trace_events_no_update
+  BEFORE UPDATE ON obs_trace_events
+  BEGIN
+    SELECT RAISE(ABORT, 'INV-020: Trace events are immutable. UPDATE is prohibited.');
+  END;
+
+-- INV-020: Trace events are immutable — no DELETE.
+CREATE TRIGGER obs_trace_events_no_delete
+  BEFORE DELETE ON obs_trace_events
+  BEGIN
+    SELECT RAISE(ABORT, 'INV-020: Trace events are immutable. DELETE is prohibited.');
+  END;
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getGovernanceRunsTracesMigrations() {
+    return [buildEntry(21, 'governance_runs_traces', MIGRATION_021_SQL)];
+}
+//# sourceMappingURL=012_governance_runs_traces.js.map

package/dist/governance/migration/012_governance_runs_traces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"012_governance_runs_traces.js","sourceRoot":"","sources":["../../../src/governance/migration/012_governance_runs_traces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/governance/migration/013_governance_contracts.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Migration v22: Governance mission contracts and constitutional mode.
+ * Truth Model: Deliverable 4 (Mission Contract Schema)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_mission_contracts
+ * Config: core_config entry for constitutional_mode per tenant
+ *
+ * BC-030: MissionContract entity with criteria array.
+ * BC-031: Contract created before or atomically with mission.
+ * BC-033: Contract immutable once created — no UPDATE.
+ * BC-038: constitutionalMode stored in core_config, not gov_ tables.
+ * INV-X04: schemaVersion on every entity.
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getGovernanceContractsMigrations(): MigrationEntry[];
+//# sourceMappingURL=013_governance_contracts.d.ts.map

package/dist/governance/migration/013_governance_contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"013_governance_contracts.d.ts","sourceRoot":"","sources":["../../../src/governance/migration/013_governance_contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA2CvE,wBAAgB,gCAAgC,IAAI,cAAc,EAAE,CAEnE"}

package/dist/governance/migration/013_governance_contracts.js

@@ -0,0 +1,59 @@
+/**
+ * Migration v22: Governance mission contracts and constitutional mode.
+ * Truth Model: Deliverable 4 (Mission Contract Schema)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_mission_contracts
+ * Config: core_config entry for constitutional_mode per tenant
+ *
+ * BC-030: MissionContract entity with criteria array.
+ * BC-031: Contract created before or atomically with mission.
+ * BC-033: Contract immutable once created — no UPDATE.
+ * BC-038: constitutionalMode stored in core_config, not gov_ tables.
+ * INV-X04: schemaVersion on every entity.
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_022_SQL = `
+-- Migration 022: Governance mission contracts
+-- Truth Model: Deliverable 4
+
+-- gov_mission_contracts: Immutable mission contract (BC-030, BC-033)
+CREATE TABLE gov_mission_contracts (
+  contract_id     TEXT    PRIMARY KEY,
+  tenant_id       TEXT    NOT NULL,
+  mission_id      TEXT    NOT NULL,
+  criteria        TEXT    NOT NULL,
+  schema_version  TEXT    NOT NULL,
+  created_at      TEXT    NOT NULL
+);
+
+CREATE INDEX idx_gov_mission_contracts_tenant ON gov_mission_contracts (tenant_id);
+CREATE INDEX idx_gov_mission_contracts_mission ON gov_mission_contracts (mission_id);
+
+-- BC-033: Contracts are immutable — no UPDATE.
+CREATE TRIGGER gov_mission_contracts_no_update
+  BEFORE UPDATE ON gov_mission_contracts
+  BEGIN
+    SELECT RAISE(ABORT, 'BC-033: Mission contracts are immutable. UPDATE is prohibited.');
+  END;
+
+-- BC-033: Contracts are immutable — no DELETE.
+CREATE TRIGGER gov_mission_contracts_no_delete
+  BEFORE DELETE ON gov_mission_contracts
+  BEGIN
+    SELECT RAISE(ABORT, 'BC-033: Mission contracts are immutable. DELETE is prohibited.');
+  END;
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getGovernanceContractsMigrations() {
+    return [buildEntry(22, 'governance_contracts', MIGRATION_022_SQL)];
+}
+//# sourceMappingURL=013_governance_contracts.js.map

package/dist/governance/migration/013_governance_contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"013_governance_contracts.js","sourceRoot":"","sources":["../../../src/governance/migration/013_governance_contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/governance/migration/014_governance_supervisor.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Migration v23: Governance supervisor decisions and suspension records.
+ * Truth Model: Deliverable 5 (Supervisor Decision Model)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_supervisor_decisions, gov_suspension_records
+ *
+ * BC-060: SupervisorDecision entity — immutable once created.
+ * BC-062: SuspensionRecord with state machine (active → resolved/expired/revoked).
+ * BC-065: At most one active suspension per target (enforced at application layer).
+ * INV-X05: Suspension is never a lifecycle state — orthogonal to entity states.
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getGovernanceSupervisorMigrations(): MigrationEntry[];
+//# sourceMappingURL=014_governance_supervisor.d.ts.map

package/dist/governance/migration/014_governance_supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"014_governance_supervisor.d.ts","sourceRoot":"","sources":["../../../src/governance/migration/014_governance_supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA6DvE,wBAAgB,iCAAiC,IAAI,cAAc,EAAE,CAEpE"}

package/dist/governance/migration/014_governance_supervisor.js

@@ -0,0 +1,75 @@
+/**
+ * Migration v23: Governance supervisor decisions and suspension records.
+ * Truth Model: Deliverable 5 (Supervisor Decision Model)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_supervisor_decisions, gov_suspension_records
+ *
+ * BC-060: SupervisorDecision entity — immutable once created.
+ * BC-062: SuspensionRecord with state machine (active → resolved/expired/revoked).
+ * BC-065: At most one active suspension per target (enforced at application layer).
+ * INV-X05: Suspension is never a lifecycle state — orthogonal to entity states.
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_023_SQL = `
+-- Migration 023: Governance supervisor decisions and suspension records
+-- Truth Model: Deliverable 5
+
+-- gov_supervisor_decisions: Immutable decision records (BC-060)
+CREATE TABLE gov_supervisor_decisions (
+  decision_id         TEXT    PRIMARY KEY,
+  tenant_id           TEXT    NOT NULL,
+  correlation_id      TEXT    NOT NULL,
+  supervisor_type     TEXT    NOT NULL,
+  outcome             TEXT    NOT NULL,
+  rationale           TEXT,
+  conditions          TEXT,
+  suspension_record_id TEXT,
+  schema_version      TEXT    NOT NULL,
+  created_at          TEXT    NOT NULL
+);
+
+CREATE INDEX idx_gov_decisions_tenant ON gov_supervisor_decisions (tenant_id);
+CREATE INDEX idx_gov_decisions_correlation ON gov_supervisor_decisions (correlation_id);
+CREATE INDEX idx_gov_decisions_suspension ON gov_supervisor_decisions (suspension_record_id)
+  WHERE suspension_record_id IS NOT NULL;
+
+-- Decisions are immutable — no UPDATE.
+CREATE TRIGGER gov_supervisor_decisions_no_update
+  BEFORE UPDATE ON gov_supervisor_decisions
+  BEGIN
+    SELECT RAISE(ABORT, 'BC-060: Supervisor decisions are immutable. UPDATE is prohibited.');
+  END;
+
+-- gov_suspension_records: Suspension lifecycle (BC-062)
+CREATE TABLE gov_suspension_records (
+  suspension_record_id    TEXT    PRIMARY KEY,
+  tenant_id               TEXT    NOT NULL,
+  target_type             TEXT    NOT NULL,
+  target_id               TEXT    NOT NULL,
+  state                   TEXT    NOT NULL CHECK (state IN ('active', 'resolved', 'expired', 'revoked')),
+  reason                  TEXT    NOT NULL,
+  schema_version          TEXT    NOT NULL,
+  created_at              TEXT    NOT NULL,
+  resolved_at             TEXT,
+  resolution_decision_id  TEXT    REFERENCES gov_supervisor_decisions(decision_id)
+);
+
+CREATE INDEX idx_gov_suspensions_tenant ON gov_suspension_records (tenant_id);
+CREATE INDEX idx_gov_suspensions_target ON gov_suspension_records (target_type, target_id);
+CREATE INDEX idx_gov_suspensions_active ON gov_suspension_records (target_type, target_id, state)
+  WHERE state = 'active';
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getGovernanceSupervisorMigrations() {
+    return [buildEntry(23, 'governance_supervisor', MIGRATION_023_SQL)];
+}
+//# sourceMappingURL=014_governance_supervisor.js.map

package/dist/governance/migration/014_governance_supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"014_governance_supervisor.js","sourceRoot":"","sources":["../../../src/governance/migration/014_governance_supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,uBAAuB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/governance/migration/015_governance_eval.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Migration v24: Governance eval cases.
+ * Truth Model: Deliverable 8 (Eval Schema)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_eval_cases
+ *
+ * BC-090: EvalCase is immutable once created.
+ * BC-091: Created atomically with result finalization.
+ * BC-092: References MissionContractId (not a copy).
+ * BC-093: Carries pinnedVersions for replay stability.
+ * BC-094: EvalProvenance includes agent/capability/prompt metadata.
+ * INV-X04: schemaVersion on every entity.
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+export declare function getGovernanceEvalMigrations(): MigrationEntry[];
+//# sourceMappingURL=015_governance_eval.d.ts.map

package/dist/governance/migration/015_governance_eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"015_governance_eval.d.ts","sourceRoot":"","sources":["../../../src/governance/migration/015_governance_eval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAiDvE,wBAAgB,2BAA2B,IAAI,cAAc,EAAE,CAE9D"}

package/dist/governance/migration/015_governance_eval.js

@@ -0,0 +1,65 @@
+/**
+ * Migration v24: Governance eval cases.
+ * Truth Model: Deliverable 8 (Eval Schema)
+ *
+ * Phase: 0A (Foundation)
+ *
+ * Tables: gov_eval_cases
+ *
+ * BC-090: EvalCase is immutable once created.
+ * BC-091: Created atomically with result finalization.
+ * BC-092: References MissionContractId (not a copy).
+ * BC-093: Carries pinnedVersions for replay stability.
+ * BC-094: EvalProvenance includes agent/capability/prompt metadata.
+ * INV-X04: schemaVersion on every entity.
+ */
+import { createHash } from 'node:crypto';
+const MIGRATION_024_SQL = `
+-- Migration 024: Governance eval cases
+-- Truth Model: Deliverable 8
+
+-- gov_eval_cases: Immutable evaluation records (BC-090)
+CREATE TABLE gov_eval_cases (
+  eval_case_id            TEXT    PRIMARY KEY,
+  tenant_id               TEXT    NOT NULL,
+  attempt_id              TEXT    NOT NULL,
+  contract_id             TEXT,
+  dimensions              TEXT    NOT NULL,
+  provenance              TEXT    NOT NULL,
+  pinned_versions         TEXT    NOT NULL,
+  contract_satisfaction   INTEGER,
+  schema_version          TEXT    NOT NULL,
+  created_at              TEXT    NOT NULL
+);
+
+CREATE INDEX idx_gov_eval_cases_tenant ON gov_eval_cases (tenant_id);
+CREATE INDEX idx_gov_eval_cases_attempt ON gov_eval_cases (attempt_id);
+CREATE INDEX idx_gov_eval_cases_contract ON gov_eval_cases (contract_id)
+  WHERE contract_id IS NOT NULL;
+
+-- BC-090: Eval cases are immutable — no UPDATE.
+CREATE TRIGGER gov_eval_cases_no_update
+  BEFORE UPDATE ON gov_eval_cases
+  BEGIN
+    SELECT RAISE(ABORT, 'BC-090: Eval cases are immutable. UPDATE is prohibited.');
+  END;
+
+-- BC-090: Eval cases are immutable — no DELETE.
+CREATE TRIGGER gov_eval_cases_no_delete
+  BEFORE DELETE ON gov_eval_cases
+  BEGIN
+    SELECT RAISE(ABORT, 'BC-090: Eval cases are immutable. DELETE is prohibited.');
+  END;
+`;
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+export function getGovernanceEvalMigrations() {
+    return [buildEntry(24, 'governance_eval', MIGRATION_024_SQL)];
+}
+//# sourceMappingURL=015_governance_eval.js.map

package/dist/governance/migration/015_governance_eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"015_governance_eval.js","sourceRoot":"","sources":["../../../src/governance/migration/015_governance_eval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCzB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAChE,CAAC"}