limen-ai 1.0.0

package/dist/kernel/interfaces/rbac.d.ts

@@ -0,0 +1,58 @@
+/**
+ * RBAC engine interface types.
+ * S ref: §34, I-13, §3.7
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Role-based access control with permission checking.
+ *
+ * §34: RBAC with five default roles (admin, developer, operator, viewer, auditor).
+ * I-13: Authorization completeness -- every operation enforces RBAC.
+ * §3.7: Single-user default mode where RBAC is dormant.
+ */
+import type { Result, Permission, RoleId, TenantId, OperationContext } from './common.js';
+import type { DatabaseConnection } from './database.js';
+/**
+ * Role-based access control engine.
+ * S ref: §34 (RBAC definition), I-13 (authorization completeness),
+ *        §3.7 (dormant in single-user mode)
+ */
+export interface RbacEngine {
+    /**
+     * Check if context has required permission. Returns true/false, never throws.
+     * In single-user default mode (RBAC dormant), always returns true.
+     * S ref: §34 (permission check), I-13 (every operation enforces RBAC)
+     */
+    checkPermission(ctx: OperationContext, required: Permission): Result<boolean>;
+    /**
+     * Check if RBAC is currently active (false in single-user default).
+     * S ref: §3.7 (single-user mode), §34 (multi-user activation)
+     */
+    isActive(): boolean;
+    /**
+     * Create a role with the specified permissions.
+     * S ref: §34 (role management)
+     */
+    createRole(conn: DatabaseConnection, ctx: OperationContext, name: string, permissions: Permission[]): Result<RoleId>;
+    /**
+     * Assign role to principal (user or agent).
+     * S ref: §34 (role assignment), DL-3 (trust progression)
+     */
+    assignRole(conn: DatabaseConnection, ctx: OperationContext, principalType: 'user' | 'agent', principalId: string, roleId: RoleId): Result<void>;
+    /**
+     * Revoke role from principal.
+     * S ref: §34 (role revocation)
+     */
+    revokeRole(conn: DatabaseConnection, ctx: OperationContext, principalType: 'user' | 'agent', principalId: string, roleId: RoleId): Result<void>;
+    /**
+     * Get permissions for a principal.
+     * Returns the union of all permissions from all assigned roles.
+     * S ref: §34 (permission resolution)
+     */
+    getPermissions(conn: DatabaseConnection, principalType: 'user' | 'agent', principalId: string, tenantId: TenantId | null): Result<ReadonlySet<Permission>>;
+    /**
+     * Seed default roles (admin, developer, operator, viewer, auditor).
+     * S ref: §34 (five default roles with predefined permission sets)
+     */
+    seedDefaultRoles(conn: DatabaseConnection): Result<void>;
+}
+//# sourceMappingURL=rbac.d.ts.map

package/dist/kernel/interfaces/rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/rbac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9E;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC;IAEpB;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAErH;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAEhJ;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAEhJ;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAE3J;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;CAC1D"}

package/dist/kernel/interfaces/rbac.js

@@ -0,0 +1,13 @@
+/**
+ * RBAC engine interface types.
+ * S ref: §34, I-13, §3.7
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Role-based access control with permission checking.
+ *
+ * §34: RBAC with five default roles (admin, developer, operator, viewer, auditor).
+ * I-13: Authorization completeness -- every operation enforces RBAC.
+ * §3.7: Single-user default mode where RBAC is dormant.
+ */
+export {};
+//# sourceMappingURL=rbac.js.map

package/dist/kernel/interfaces/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/rbac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/kernel/interfaces/retention.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Retention scheduler interface types.
+ * S ref: §35, I-06, I-02
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Data retention policies with archive/delete/soft-delete actions.
+ *
+ * §35: Configurable per-type retention with automated archival.
+ * I-06: Audit retention = archival to sealed file, never deletion.
+ * I-02: User data ownership -- retention supports purge operations.
+ */
+import type { Result, OperationContext } from './common.js';
+import type { DatabaseConnection } from './database.js';
+/**
+ * A retention policy defining how long data is kept and what happens when it expires.
+ * S ref: §35 (configurable per-type retention)
+ */
+export interface RetentionPolicy {
+    readonly id: string;
+    readonly dataType: string;
+    readonly retentionDays: number;
+    readonly action: 'archive' | 'delete' | 'soft_delete';
+    readonly enabled: boolean;
+}
+/**
+ * Result of executing a retention pass.
+ * S ref: §35 (automated archival execution)
+ */
+export interface RetentionRunResult {
+    readonly runId: string;
+    readonly recordsArchived: number;
+    readonly recordsDeleted: number;
+    readonly policiesApplied: string[];
+}
+/**
+ * Data retention scheduler.
+ * S ref: §35 (retention policies), I-06 (audit archival, not deletion),
+ *        I-02 (user data ownership)
+ */
+export interface RetentionScheduler {
+    /**
+     * Execute retention pass: archive/delete records past retention period.
+     * Audit entries are ALWAYS archived, never deleted (I-06).
+     * S ref: §35 (automated retention execution)
+     */
+    executeRetention(conn: DatabaseConnection, ctx: OperationContext): Result<RetentionRunResult>;
+    /**
+     * Get current retention policies.
+     * S ref: §35 (policy inspection)
+     */
+    getPolicies(conn: DatabaseConnection, ctx: OperationContext): Result<RetentionPolicy[]>;
+    /**
+     * Update retention policy for a data type.
+     * S ref: §35 (configurable retention periods)
+     */
+    updatePolicy(conn: DatabaseConnection, ctx: OperationContext, dataType: string, retentionDays: number, action: 'archive' | 'delete' | 'soft_delete'): Result<void>;
+}
+//# sourceMappingURL=retention.d.ts.map

package/dist/kernel/interfaces/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAID;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAE9F;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IAExF;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;CACpK"}

package/dist/kernel/interfaces/retention.js

@@ -0,0 +1,13 @@
+/**
+ * Retention scheduler interface types.
+ * S ref: §35, I-06, I-02
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Data retention policies with archive/delete/soft-delete actions.
+ *
+ * §35: Configurable per-type retention with automated archival.
+ * I-06: Audit retention = archival to sealed file, never deletion.
+ * I-02: User data ownership -- retention supports purge operations.
+ */
+export {};
+//# sourceMappingURL=retention.js.map

package/dist/kernel/interfaces/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/kernel/interfaces/run_identity.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Run Identity Model + Attempt Entity + Causal Ordering.
+ * Truth Model ref: Deliverable 2 — BC-010 through BC-019, ST-010, ST-020
+ * Truth Model v1.1 ref: Revised BC-011 (typed AttemptFailureRef/AttemptStrategyDelta),
+ *                        New ST-020 (Run lifecycle transitions), New EDGE-013 (fork from active run)
+ *
+ * Phase: 0A (Foundation)
+ * Build Order: 2 (depends on Deliverable 1)
+ *
+ * Constitutional Sources: Table 6 (causal model), Principle 15, Amendment A10 (fork storage),
+ *                         Amendment A12 (self-version pinning)
+ * Binding Doctrine: Binding 9 (migration backfill), Binding 15 (suspension cascade),
+ *                   Binding 16 (typed substates)
+ */
+import type { TenantId, MissionId, TaskId, Result } from './common.js';
+import type { RunId, AttemptId, TraceEventId, SupervisorDecisionId, LimenViolation } from './governance_ids.js';
+import type { DatabaseConnection } from './database.js';
+/**
+ * BC-010: Run entity — constitutional execution envelope.
+ * Immutable once terminal. Fork lineage via forkOfRunId + forkFromEventRef.
+ *
+ * ST-020 (v1.1): Run lifecycle transitions:
+ *   active → completed  (mission completed)
+ *   active → failed     (mission failed)
+ *   active → abandoned  (mission revoked)
+ *   No reverse transitions. No suspended state (Principle 14).
+ *   Run state DERIVED from mission outcome.
+ *
+ * EDGE-013 (v1.1): Fork from active (non-completed) run is valid.
+ * Forked run sees ancestor events up to forkFromEventRef's runSeq, then its own from 1.
+ */
+export interface Run {
+    readonly runId: RunId;
+    readonly tenantId: TenantId;
+    readonly missionId: MissionId;
+    readonly forkOfRunId?: RunId;
+    readonly forkFromEventRef?: TraceEventId;
+    readonly state: RunState;
+    readonly startedAt: string;
+    readonly completedAt?: string;
+    readonly schemaVersion: string;
+    readonly origin: 'runtime' | 'migration-backfill';
+}
+/**
+ * BC-010: Run state union — 4 states exactly.
+ * No 'suspended' (Principle 14 — suspension is orthogonal).
+ * Terminal states: completed, failed, abandoned (irreversible per BC-070).
+ */
+export type RunState = 'active' | 'completed' | 'failed' | 'abandoned';
+/**
+ * BC-011 (revised v1.1): Attempt entity — single execution try within a task.
+ * triggeringFailure and strategyDelta are TYPED interfaces (not strings).
+ * BC-019: Only one non-terminal Attempt per task at any time.
+ */
+export interface Attempt {
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+    readonly missionId: MissionId;
+    readonly runId: RunId;
+    readonly priorAttemptRef?: AttemptId;
+    readonly triggeringFailure?: AttemptFailureRef;
+    readonly strategyDelta?: AttemptStrategyDelta;
+    readonly state: AttemptState;
+    readonly pinnedVersions: AttemptPinnedVersions;
+    readonly schemaVersion: string;
+    readonly origin: 'runtime' | 'migration-backfill';
+    readonly createdAt: string;
+}
+/**
+ * ST-010: Attempt lifecycle states.
+ *   started → executing       (attempt begins work)
+ *   executing → succeeded     (work completed)
+ *   executing → failed        (work failed)
+ *   executing → abandoned     (suspension resolved with revoke — Amendment A8)
+ * No 'suspended' state. Entity freezes at current state during suspension.
+ */
+export type AttemptState = 'started' | 'executing' | 'succeeded' | 'failed' | 'abandoned';
+/**
+ * BC-012: Typed version pinning — not Record<string, unknown>.
+ * Amendment A5 (minimum version capture), Amendment A12 (own + external versions).
+ */
+export interface AttemptPinnedVersions {
+    readonly missionContractVersion: string;
+    readonly traceGrammarVersion: string;
+    readonly evalSchemaVersion: string;
+    readonly capabilityManifestSchemaVersion: string;
+}
+/**
+ * BC-011 (revised v1.1): Typed failure reference.
+ * Enables programmatic analysis of retry strategies in evals.
+ *
+ * Note: errorCode is string (kernel-layer compatible with KernelError.code pattern).
+ * API-layer mapping to LimenErrorCode occurs at the boundary.
+ */
+export interface AttemptFailureRef {
+    readonly priorAttemptId: AttemptId;
+    readonly errorCode: string;
+    readonly violations?: readonly LimenViolation[];
+    readonly summary: string;
+}
+/**
+ * BC-011 (revised v1.1): Typed strategy delta.
+ * Enables supervisor intervention tracking and strategy revision comparison.
+ */
+export interface AttemptStrategyDelta {
+    readonly description: string;
+    readonly changedParameters?: Readonly<Record<string, unknown>>;
+    readonly supervisorInterventionIds?: readonly SupervisorDecisionId[];
+}
+/**
+ * Run persistence operations.
+ * All methods accept DatabaseConnection as first param and return Result<T>.
+ */
+export interface RunStore {
+    create(conn: DatabaseConnection, run: Run): Result<Run>;
+    get(conn: DatabaseConnection, runId: RunId): Result<Run | null>;
+    getByMission(conn: DatabaseConnection, missionId: MissionId): Result<readonly Run[]>;
+    updateState(conn: DatabaseConnection, runId: RunId, state: RunState): Result<Run>;
+}
+/**
+ * Attempt persistence operations.
+ * BC-019: getActiveForTask returns at most one non-terminal attempt.
+ */
+export interface AttemptStore {
+    create(conn: DatabaseConnection, attempt: Attempt): Result<Attempt>;
+    get(conn: DatabaseConnection, attemptId: AttemptId): Result<Attempt | null>;
+    /** BC-019: Returns the single non-terminal attempt for this task, or null */
+    getActiveForTask(conn: DatabaseConnection, taskId: TaskId): Result<Attempt | null>;
+    getByTask(conn: DatabaseConnection, taskId: TaskId): Result<readonly Attempt[]>;
+    updateState(conn: DatabaseConnection, attemptId: AttemptId, state: AttemptState): Result<Attempt>;
+}
+//# sourceMappingURL=run_identity.d.ts.map

package/dist/kernel/interfaces/run_identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run_identity.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/run_identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EACpC,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EACV,KAAK,EAAE,SAAS,EAAE,YAAY,EAC9B,oBAAoB,EAAE,cAAc,EACrC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,GAAG;IAClB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAIvE;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAI1F;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,+BAA+B,EAAE,MAAM,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACtE;AAID;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAChE,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IACrF,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;CACnF;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5E,6EAA6E;IAC7E,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACnF,SAAS,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAChF,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;CACnG"}

package/dist/kernel/interfaces/run_identity.js

@@ -0,0 +1,16 @@
+/**
+ * Run Identity Model + Attempt Entity + Causal Ordering.
+ * Truth Model ref: Deliverable 2 — BC-010 through BC-019, ST-010, ST-020
+ * Truth Model v1.1 ref: Revised BC-011 (typed AttemptFailureRef/AttemptStrategyDelta),
+ *                        New ST-020 (Run lifecycle transitions), New EDGE-013 (fork from active run)
+ *
+ * Phase: 0A (Foundation)
+ * Build Order: 2 (depends on Deliverable 1)
+ *
+ * Constitutional Sources: Table 6 (causal model), Principle 15, Amendment A10 (fork storage),
+ *                         Amendment A12 (self-version pinning)
+ * Binding Doctrine: Binding 9 (migration backfill), Binding 15 (suspension cascade),
+ *                   Binding 16 (typed substates)
+ */
+export {};
+//# sourceMappingURL=run_identity.js.map

package/dist/kernel/interfaces/run_identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run_identity.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/run_identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/kernel/interfaces/supervisor.d.ts

@@ -0,0 +1,175 @@
+/**
+ * Supervisor Decision Model interfaces for Phase 0A governance layer.
+ * Truth Model: Deliverable 5 (Supervisor Decision Model)
+ *
+ * Phase: 0A (Governance Primitives)
+ *
+ * BC-040: 9 supervisor types with defined authority scopes.
+ * BC-041: 9 decision outcomes.
+ * BC-042: Hard-policy decisions are immutable and non-overridable by humans.
+ * BC-043: Evaluators can assess only (no revoke authority).
+ * BC-044: Scope-bound authority enforcement.
+ * BC-045: Orthogonal decisions compose; contradictions resolved by precedence.
+ * BC-046: Timeout creates synthetic decision (not silent skip).
+ * BC-047: SuspensionRecord with 'active' | 'resolved' state.
+ * BC-048: Resume tokens: plaintext returned once, stored as SHA-256 hash.
+ * BC-049: Mission suspended → all tasks implicitly suspended (cascade).
+ * BC-050: Task suspended → all attempts implicitly suspended.
+ * BC-051: Parent handoff suspended ≠ auto-suspend child task (autonomy preserved).
+ * BC-052 (v1.1): handoff.parent-suspended notification for delegate agents.
+ * INV-X04: Every entity carries schemaVersion.
+ * INV-X05: Suspension is never a lifecycle state — it's orthogonal.
+ * INV-X12: origin distinguishes runtime from migration-backfill.
+ */
+import type { TaskId, AgentId, Result } from './common.js';
+import type { SupervisorDecisionId, SuspensionRecordId, HandoffId } from './governance_ids.js';
+import type { HandoffLifecycleState } from './lifecycle.js';
+import type { DatabaseConnection } from './database.js';
+/**
+ * BC-040: 9 supervisor types with defined authority scopes.
+ * Each type has specific capabilities and limitations:
+ *   - hard-policy: immutable, non-overridable (BC-042)
+ *   - evaluator: assess only, no revoke authority (BC-043)
+ *   - system-timeout: creates synthetic decision (BC-046)
+ */
+export type SupervisorType = 'human' | 'hard-policy' | 'soft-policy' | 'deployment-gate' | 'budget-authority' | 'evaluator' | 'parent-agent' | 'system-timeout' | 'system-migration';
+/**
+ * BC-041: 9 decision outcomes.
+ * BC-042: hard-policy decisions that produce 'reject' or 'revoke' are immutable.
+ */
+export type DecisionOutcome = 'approve' | 'reject' | 'request-revision' | 'request-clarification' | 'extend-budget' | 'reduce-scope' | 'delegate-review' | 'defer' | 'revoke';
+/**
+ * BC-047: Suspension record state.
+ * 'active' = entity is currently suspended.
+ * 'resolved' = suspension has been lifted by a supervisor decision.
+ * INV-X05: Suspension is orthogonal to lifecycle state.
+ */
+export type SuspensionState = 'active' | 'resolved';
+/**
+ * BC-047: Target types for suspension records.
+ * Suspension applies to missions or tasks (not runs directly).
+ */
+export type SuspensionTargetType = 'mission' | 'task';
+/**
+ * BC-029 (v1.1): Typed handoff acceptance outcomes.
+ * Recorded in trace event payloads for programmatic analysis.
+ */
+export type HandoffAcceptanceOutcome = 'accepted-as-is' | 'accepted-with-scope-reduction';
+/**
+ * BC-029 (v1.1): Typed handoff rejection reasons.
+ * Recorded in trace event payloads for programmatic analysis.
+ */
+export type HandoffRejectionReason = 'rejected-insufficient-evidence' | 'rejected-missing-capability' | 'rejected-contract-ambiguity';
+/**
+ * BC-048: Hash type for stored resume tokens.
+ * Plaintext returned once to caller, only SHA-256 hash persisted.
+ */
+export type ResumeTokenHash = string & {
+    readonly __brand: 'ResumeTokenHash';
+};
+/**
+ * BC-040, BC-041: Supervisor decision record.
+ * Immutable once created. BC-042: hard-policy decisions are non-overridable.
+ * BC-044: Authority is scope-bound (target_type + target_id).
+ */
+export interface SupervisorDecision {
+    readonly decisionId: SupervisorDecisionId;
+    readonly tenantId: string;
+    readonly supervisorType: SupervisorType;
+    /** Entity type being governed */
+    readonly targetType: 'mission' | 'task' | 'handoff' | 'attempt';
+    /** Entity ID being governed */
+    readonly targetId: string;
+    /** BC-041: Decision outcome */
+    readonly outcome: DecisionOutcome;
+    /** Rationale for the decision (redacted at API boundary) */
+    readonly rationale: string;
+    /** BC-045: Precedence for conflict resolution */
+    readonly precedence: number;
+    /** INV-X04: Governance schema version */
+    readonly schemaVersion: string;
+    /** INV-X12: Record origin */
+    readonly origin: 'runtime' | 'migration-backfill';
+    readonly createdAt: string;
+}
+/**
+ * BC-047: Suspension record — orthogonal to lifecycle state (INV-X05).
+ * Entities freeze at current state when suspended, resume to same state.
+ * BC-049: Mission suspension cascades implicitly to tasks.
+ * BC-050: Task suspension cascades implicitly to attempts.
+ * BC-051: Parent handoff suspension ≠ auto-suspend child task.
+ */
+export interface SuspensionRecord {
+    readonly suspensionId: SuspensionRecordId;
+    readonly tenantId: string;
+    /** BC-047: Target entity type */
+    readonly targetType: SuspensionTargetType;
+    /** BC-047: Target entity ID */
+    readonly targetId: string;
+    /** BC-047: Current suspension state */
+    readonly state: SuspensionState;
+    /** Decision that created this suspension */
+    readonly creatingDecisionId: SupervisorDecisionId;
+    /** Decision that resolved this suspension (null while active) */
+    readonly resolutionDecisionId: SupervisorDecisionId | null;
+    /** INV-X04: Governance schema version */
+    readonly schemaVersion: string;
+    /** INV-X12: Record origin */
+    readonly origin: 'runtime' | 'migration-backfill';
+    readonly createdAt: string;
+    readonly resolvedAt: string | null;
+}
+/**
+ * Handoff — delegation of task execution to another agent.
+ * BC-069: Handoff lifecycle with typed acceptance/rejection outcomes.
+ * BC-052 (v1.1): Delegate notification on parent suspension cascade.
+ */
+export interface Handoff {
+    readonly handoffId: HandoffId;
+    readonly tenantId: string;
+    /** Task being delegated */
+    readonly fromTaskId: TaskId;
+    /** Agent receiving the delegation */
+    readonly toAgentId: AgentId;
+    /** Current handoff lifecycle state */
+    readonly state: HandoffLifecycleState;
+    /** Acceptance outcome (set when state transitions to 'accepted') */
+    readonly acceptanceOutcome: HandoffAcceptanceOutcome | null;
+    /** Rejection reason (set when state transitions to 'rejected') */
+    readonly rejectionReason: HandoffRejectionReason | null;
+    /** INV-X04: Governance schema version */
+    readonly schemaVersion: string;
+    /** INV-X12: Record origin */
+    readonly origin: 'runtime' | 'migration-backfill';
+    readonly createdAt: string;
+}
+/**
+ * SupervisorDecision persistence operations.
+ * BC-042: hard-policy decisions are immutable once created.
+ */
+export interface SupervisorDecisionStore {
+    create(conn: DatabaseConnection, decision: SupervisorDecision): Result<SupervisorDecision>;
+    get(conn: DatabaseConnection, decisionId: SupervisorDecisionId): Result<SupervisorDecision | null>;
+    getByTarget(conn: DatabaseConnection, targetType: string, targetId: string): Result<readonly SupervisorDecision[]>;
+}
+/**
+ * SuspensionRecord persistence operations.
+ * BC-047: Active suspensions are checked on lifecycle transitions.
+ */
+export interface SuspensionStore {
+    create(conn: DatabaseConnection, suspension: SuspensionRecord): Result<SuspensionRecord>;
+    get(conn: DatabaseConnection, suspensionId: SuspensionRecordId): Result<SuspensionRecord | null>;
+    /** Returns active suspension for a target, or null if not suspended */
+    getActiveForTarget(conn: DatabaseConnection, targetType: SuspensionTargetType, targetId: string): Result<SuspensionRecord | null>;
+    /** BC-047: Resolve suspension with a supervisor decision */
+    resolve(conn: DatabaseConnection, suspensionId: SuspensionRecordId, resolutionDecisionId: SupervisorDecisionId): Result<SuspensionRecord>;
+}
+/**
+ * Handoff persistence operations.
+ */
+export interface HandoffStore {
+    create(conn: DatabaseConnection, handoff: Handoff): Result<Handoff>;
+    get(conn: DatabaseConnection, handoffId: HandoffId): Result<Handoff | null>;
+    updateState(conn: DatabaseConnection, handoffId: HandoffId, state: HandoffLifecycleState): Result<Handoff>;
+}
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/kernel/interfaces/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EACV,oBAAoB,EAAE,kBAAkB,EAAE,SAAS,EACpD,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB,OAAO,GACP,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,QAAQ,GACR,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,OAAO,GACP,QAAQ,CAAC;AAIb;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpD;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,CAAC;AAItD;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAChC,gBAAgB,GAChB,+BAA+B,CAAC;AAEpC;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAC9B,gCAAgC,GAChC,6BAA6B,GAC7B,6BAA6B,CAAC;AAElC;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAI/E;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAChE,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6BAA6B;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;IAClD,iEAAiE;IACjE,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3D,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6BAA6B;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC5D,kEAAkE;IAClE,QAAQ,CAAC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACxD,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6BAA6B;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAID;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC3F,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,oBAAoB,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACnG,WAAW,CACT,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzF,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACjG,uEAAuE;IACvE,kBAAkB,CAChB,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnC,4DAA4D;IAC5D,OAAO,CACL,IAAI,EAAE,kBAAkB,EACxB,YAAY,EAAE,kBAAkB,EAChC,oBAAoB,EAAE,oBAAoB,GACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5E,WAAW,CACT,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,qBAAqB,GAC3B,MAAM,CAAC,OAAO,CAAC,CAAC;CACpB"}

package/dist/kernel/interfaces/supervisor.js

@@ -0,0 +1,25 @@
+/**
+ * Supervisor Decision Model interfaces for Phase 0A governance layer.
+ * Truth Model: Deliverable 5 (Supervisor Decision Model)
+ *
+ * Phase: 0A (Governance Primitives)
+ *
+ * BC-040: 9 supervisor types with defined authority scopes.
+ * BC-041: 9 decision outcomes.
+ * BC-042: Hard-policy decisions are immutable and non-overridable by humans.
+ * BC-043: Evaluators can assess only (no revoke authority).
+ * BC-044: Scope-bound authority enforcement.
+ * BC-045: Orthogonal decisions compose; contradictions resolved by precedence.
+ * BC-046: Timeout creates synthetic decision (not silent skip).
+ * BC-047: SuspensionRecord with 'active' | 'resolved' state.
+ * BC-048: Resume tokens: plaintext returned once, stored as SHA-256 hash.
+ * BC-049: Mission suspended → all tasks implicitly suspended (cascade).
+ * BC-050: Task suspended → all attempts implicitly suspended.
+ * BC-051: Parent handoff suspended ≠ auto-suspend child task (autonomy preserved).
+ * BC-052 (v1.1): handoff.parent-suspended notification for delegate agents.
+ * INV-X04: Every entity carries schemaVersion.
+ * INV-X05: Suspension is never a lifecycle state — it's orthogonal.
+ * INV-X12: origin distinguishes runtime from migration-backfill.
+ */
+export {};
+//# sourceMappingURL=supervisor.js.map

package/dist/kernel/interfaces/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}

package/dist/kernel/interfaces/tenant.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Tenant context interface types.
+ * S ref: RDD-3, FM-10
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Transparent tenant isolation via row-level or DB-per-tenant routing.
+ *
+ * RDD-3: Consumer never knows which tenancy mode is active.
+ * FM-10: Tenant data leakage prevention via automatic tenant_id injection.
+ */
+import type { Result, OperationContext } from './common.js';
+import type { DatabaseConnection } from './database.js';
+/**
+ * Tenant-scoped database operations.
+ * Abstracts the tenancy mode so consumers never need to know whether
+ * row-level or DB-per-tenant isolation is active.
+ * S ref: RDD-3 (transparent tenancy), FM-10 (tenant isolation)
+ */
+export interface TenantContext {
+    /**
+     * Execute SQL with automatic tenant_id injection (row-level mode)
+     * or routing to correct database file (DB-per-tenant mode).
+     * Consumer never knows which mode is active per RDD-3.
+     * S ref: RDD-3 (transparent tenancy), FM-10 (isolation enforcement)
+     */
+    execute<T>(conn: DatabaseConnection, ctx: OperationContext, sql: string, params?: unknown[]): Result<T[]>;
+    /**
+     * Get tenant-scoped connection (routes to correct DB in database mode).
+     * In row-level mode, returns the same connection with tenant context attached.
+     * S ref: RDD-3 (transparent routing), FM-10 (isolation)
+     */
+    getConnection(ctx: OperationContext): Result<DatabaseConnection>;
+}
+//# sourceMappingURL=tenant.d.ts.map

package/dist/kernel/interfaces/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/tenant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAE1G;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;CAClE"}

package/dist/kernel/interfaces/tenant.js

@@ -0,0 +1,12 @@
+/**
+ * Tenant context interface types.
+ * S ref: RDD-3, FM-10
+ *
+ * Phase: 1 (Kernel)
+ * Implements: Transparent tenant isolation via row-level or DB-per-tenant routing.
+ *
+ * RDD-3: Consumer never knows which tenancy mode is active.
+ * FM-10: Tenant data leakage prevention via automatic tenant_id injection.
+ */
+export {};
+//# sourceMappingURL=tenant.js.map

package/dist/kernel/interfaces/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/tenant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/kernel/interfaces/time.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Time provider interface for deterministic clock injection.
+ * S ref: Hard Stop #7 (clock injection), C-06 (no shared mutable state)
+ *
+ * Phase: 1 (Kernel)
+ * Implements: TimeProvider abstraction — all temporal logic uses this interface,
+ *             never direct Date.now() or new Date().
+ *
+ * Frozen Zone Amendment: Added to resolve Hard Stop #7 violations across 33+ files.
+ * Approved: Phase 2 Cleanup sprint (Constitutional Debt Remediation).
+ */
+/**
+ * Injectable time provider. Production uses system clock; tests use deterministic clock.
+ *
+ * Every function that needs the current time receives a TimeProvider via dependency
+ * injection. This enables:
+ * - Deterministic test execution (no flaky time-dependent tests)
+ * - Time-travel testing (advance clock to test TTL, retention, timeouts)
+ * - Replay-safe audit trails (timestamps reproducible from provider state)
+ *
+ * S ref: Hard Stop #7, C-06
+ */
+export interface TimeProvider {
+    /** Returns current time as ISO 8601 string (e.g., "2026-03-20T10:30:00.000Z") */
+    nowISO(): string;
+    /** Returns current time as milliseconds since epoch (equivalent to Date.now()) */
+    nowMs(): number;
+}
+//# sourceMappingURL=time.d.ts.map

package/dist/kernel/interfaces/time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/time.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,MAAM,IAAI,MAAM,CAAC;IAEjB,kFAAkF;IAClF,KAAK,IAAI,MAAM,CAAC;CACjB"}

package/dist/kernel/interfaces/time.js

@@ -0,0 +1,13 @@
+/**
+ * Time provider interface for deterministic clock injection.
+ * S ref: Hard Stop #7 (clock injection), C-06 (no shared mutable state)
+ *
+ * Phase: 1 (Kernel)
+ * Implements: TimeProvider abstraction — all temporal logic uses this interface,
+ *             never direct Date.now() or new Date().
+ *
+ * Frozen Zone Amendment: Added to resolve Hard Stop #7 violations across 33+ files.
+ * Approved: Phase 2 Cleanup sprint (Constitutional Debt Remediation).
+ */
+export {};
+//# sourceMappingURL=time.js.map

package/dist/kernel/interfaces/time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/time.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}