limen-ai 1.0.0

package/dist/kernel/interfaces/trace.d.ts

@@ -0,0 +1,264 @@
+/**
+ * Trace Event Grammar + TraceEmitter + RunSequencer.
+ * Truth Model ref: Deliverable 3 — BC-020 through BC-028
+ * Truth Model v1.1 ref: Revised BC-023 (32 events), New BC-029 (handoff outcomes in trace),
+ *                        New BC-029.1 (RunSequencer dual-mode), New INV-X13 (GovernanceQueryContext)
+ *
+ * Phase: 0A (Foundation)
+ * Build Order: 3 (depends on Deliverable 2)
+ *
+ * Constitutional Sources: Table 6, Principle 7, Principle 15, Amendment A4
+ * Binding Doctrine: Binding 8 (32 events), Binding 12 (CorrelationId), Binding 14 (trace failure)
+ *
+ * BC-020: TraceEmitter is SEPARATE from EventBus. Does NOT extend EventBus.
+ * INV-023: 32 constitutional trace events and 39 domain events are distinct systems.
+ */
+import type { DatabaseConnection } from './database.js';
+import type { TenantId, MissionId, TaskId, AgentId, OperationContext, Result } from './common.js';
+import type { RunId, AttemptId, TraceEventId, CorrelationId, MissionContractId, SupervisorDecisionId, SuspensionRecordId, HandoffId, EvalCaseId, CapabilityManifestId } from './governance_ids.js';
+import type { MissionLifecycleState, TaskLifecycleState } from './lifecycle.js';
+import type { HandoffAcceptanceOutcome, HandoffRejectionReason, SupervisorType, DecisionOutcome } from './supervisor.js';
+/**
+ * BC-023 (revised v1.1): Typed string union of exactly 32 event types.
+ * Source: Design Source §3C (28) + Binding 8 (+3 memory) + Binding 15 (+1 handoff.parent-suspended)
+ *
+ * Untyped string allows misspelled event types that compile but are never matched.
+ */
+export type TraceEventType = 'mission.created' | 'mission.transition' | 'mission.completed' | 'mission.failed' | 'mission.revoked' | 'task.created' | 'task.transition' | 'task.completed' | 'task.skipped' | 'attempt.started' | 'attempt.succeeded' | 'attempt.failed' | 'attempt.abandoned' | 'handoff.issued' | 'handoff.accepted' | 'handoff.returned' | 'handoff.rejected' | 'handoff.parent-suspended' | 'suspension.entered' | 'suspension.resolved' | 'supervision.decision' | 'claim.asserted' | 'claim.grounded' | 'claim.challenged' | 'claim.retracted' | 'eval.scored' | 'capability.executed' | 'artifact.created' | 'budget.consumed' | 'memory.published' | 'memory.tombstoned' | 'memory.promoted';
+/**
+ * BC-022: Every TraceEvent has this typed shape (not Record<string, unknown>).
+ * All Table 6 fields present. Immutable once created (INV-020).
+ */
+export interface TraceEvent {
+    readonly traceEventId: TraceEventId;
+    readonly runId: RunId;
+    readonly runSeq: number;
+    readonly spanSeq: number;
+    readonly parentEventRef?: TraceEventId;
+    readonly forkOfRunId?: RunId;
+    readonly forkFromEventRef?: TraceEventId;
+    readonly correlationId: CorrelationId;
+    readonly version: string;
+    readonly type: TraceEventType;
+    readonly tenantId: TenantId;
+    readonly timestamp: string;
+    readonly payload: TraceEventPayload;
+    /** INV-X04: Governance schema version */
+    readonly schemaVersion: string;
+}
+/**
+ * Input shape for TraceEmitter.emit() — fields generated by the system
+ * (traceEventId, runSeq, spanSeq, timestamp) are NOT provided by caller.
+ */
+export interface TraceEventInput {
+    readonly runId: RunId;
+    readonly parentEventRef?: TraceEventId;
+    readonly forkOfRunId?: RunId;
+    readonly forkFromEventRef?: TraceEventId;
+    readonly correlationId: CorrelationId;
+    readonly type: TraceEventType;
+    readonly payload: TraceEventPayload;
+}
+/**
+ * BC-024: Discriminated union pattern. Each TraceEventType has a typed payload.
+ * BC-029 (v1.1): handoff.accepted includes typed acceptanceOutcome,
+ *                handoff.rejected includes typed rejectionReason.
+ * BC-052 (v1.1): handoff.parent-suspended includes suspension cascade payload.
+ */
+export type TraceEventPayload = {
+    readonly type: 'mission.created';
+    readonly missionId: MissionId;
+    readonly contractId?: MissionContractId;
+    readonly agentId: AgentId;
+} | {
+    readonly type: 'mission.transition';
+    readonly missionId: MissionId;
+    readonly fromState: MissionLifecycleState;
+    readonly toState: MissionLifecycleState;
+} | {
+    readonly type: 'mission.completed';
+    readonly missionId: MissionId;
+    readonly contractSatisfied: boolean;
+} | {
+    readonly type: 'mission.failed';
+    readonly missionId: MissionId;
+    readonly reason: string;
+} | {
+    readonly type: 'mission.revoked';
+    readonly missionId: MissionId;
+    readonly revokedBy: string;
+} | {
+    readonly type: 'task.created';
+    readonly taskId: TaskId;
+    readonly missionId: MissionId;
+} | {
+    readonly type: 'task.transition';
+    readonly taskId: TaskId;
+    readonly fromState: TaskLifecycleState;
+    readonly toState: TaskLifecycleState;
+} | {
+    readonly type: 'task.completed';
+    readonly taskId: TaskId;
+    readonly missionId: MissionId;
+} | {
+    readonly type: 'task.skipped';
+    readonly taskId: TaskId;
+    readonly missionId: MissionId;
+    readonly reason: string;
+} | {
+    readonly type: 'attempt.started';
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+    readonly runId: RunId;
+} | {
+    readonly type: 'attempt.succeeded';
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+} | {
+    readonly type: 'attempt.failed';
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+    readonly errorCode: string;
+} | {
+    readonly type: 'attempt.abandoned';
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+    readonly suspensionRecordId: SuspensionRecordId;
+} | {
+    readonly type: 'handoff.issued';
+    readonly handoffId: HandoffId;
+    readonly delegatorAgentId: AgentId;
+    readonly delegateAgentId: AgentId;
+} | {
+    readonly type: 'handoff.accepted';
+    readonly handoffId: HandoffId;
+    readonly acceptanceOutcome: HandoffAcceptanceOutcome;
+} | {
+    readonly type: 'handoff.returned';
+    readonly handoffId: HandoffId;
+    readonly returnReason: string;
+} | {
+    readonly type: 'handoff.rejected';
+    readonly handoffId: HandoffId;
+    readonly rejectionReason: HandoffRejectionReason;
+} | {
+    readonly type: 'handoff.parent-suspended';
+    readonly handoffId: HandoffId;
+    readonly parentMissionId: MissionId;
+    readonly childTaskId: TaskId;
+    readonly suspensionRecordId: SuspensionRecordId;
+    readonly delegateAgentId: AgentId;
+} | {
+    readonly type: 'suspension.entered';
+    readonly suspensionRecordId: SuspensionRecordId;
+    readonly targetType: string;
+    readonly targetId: string;
+} | {
+    readonly type: 'suspension.resolved';
+    readonly suspensionRecordId: SuspensionRecordId;
+    readonly decisionId: SupervisorDecisionId;
+} | {
+    readonly type: 'supervision.decision';
+    readonly decisionId: SupervisorDecisionId;
+    readonly supervisorType: SupervisorType;
+    readonly outcome: DecisionOutcome;
+} | {
+    readonly type: 'claim.asserted';
+    readonly claimId: string;
+    readonly agentId: AgentId;
+} | {
+    readonly type: 'claim.grounded';
+    readonly claimId: string;
+    readonly evidenceCount: number;
+} | {
+    readonly type: 'claim.challenged';
+    readonly claimId: string;
+    readonly challengerId: AgentId;
+} | {
+    readonly type: 'claim.retracted';
+    readonly claimId: string;
+    readonly reason: string;
+} | {
+    readonly type: 'eval.scored';
+    readonly evalCaseId: EvalCaseId;
+    readonly score: number;
+} | {
+    readonly type: 'capability.executed';
+    readonly capabilityType: string;
+    readonly manifestId: CapabilityManifestId;
+    readonly trustTier: string;
+} | {
+    readonly type: 'artifact.created';
+    readonly artifactId: string;
+    readonly missionId: MissionId;
+    readonly taskId: TaskId;
+} | {
+    readonly type: 'budget.consumed';
+    readonly missionId: MissionId;
+    readonly tokensConsumed: number;
+    readonly remaining: number;
+} | {
+    readonly type: 'memory.published';
+    readonly entryId: string;
+    readonly taskId: TaskId;
+} | {
+    readonly type: 'memory.tombstoned';
+    readonly entryId: string;
+    readonly taskId: TaskId;
+} | {
+    readonly type: 'memory.promoted';
+    readonly entryId: string;
+    readonly claimId: string;
+};
+/**
+ * BC-021: TraceEmitter — SEPARATE from EventBus (BC-020).
+ * BC-025: correlationId generated ONCE at operation level, passed to both EventBus and TraceEmitter.
+ * BC-027: Emission within SQLite transactions is transaction-coupled.
+ * BC-028: Emission outside transactions is async best-effort with retry.
+ */
+export interface TraceEmitter {
+    emit(conn: DatabaseConnection, ctx: OperationContext, event: TraceEventInput): Result<TraceEventId>;
+    readonly sequencer: RunSequencer;
+}
+/**
+ * BC-021, BC-029.1 (v1.1): Dual-mode sequencer.
+ *
+ * Transaction-coupled mode (default): reads MAX(runSeq) within SQLite transaction.
+ * Async mode: uses in-memory atomic counter per RunId.
+ *
+ * BC-013: runSeq is strictly monotonically increasing — no gaps, no duplicates.
+ * BC-014: In a forked run, runSeq starts at 1 (not ancestor's last).
+ */
+export interface RunSequencer {
+    nextRunSeq(runId: RunId): number;
+    nextSpanSeq(runId: RunId, spanIndex: number): number;
+}
+/**
+ * Trace event persistence operations.
+ * INV-020: Trace events are immutable — no update or delete.
+ * INV-021: (runId, runSeq) is unique.
+ */
+export interface TraceEventStore {
+    insert(conn: DatabaseConnection, event: TraceEvent): Result<TraceEvent>;
+    getByRun(conn: DatabaseConnection, runId: RunId): Result<readonly TraceEvent[]>;
+    getByCorrelation(conn: DatabaseConnection, correlationId: CorrelationId): Result<readonly TraceEvent[]>;
+}
+/**
+ * INV-X13 (v1.1): Every SC-G governance query response includes this context.
+ * Enables agents to assess freshness, completeness, and policy version.
+ * Source: Binding 11 (SC-G Response Context).
+ */
+export interface GovernanceQueryContext {
+    readonly asOfRunSeq: number;
+    readonly policyVersionHard: string;
+    readonly policyVersionSoft: string;
+    readonly queryTimestamp: string;
+    readonly queryScope: string;
+    readonly sourceSystems: readonly string[];
+    readonly completeness: 'complete' | 'partial';
+    readonly missingSources?: ReadonlyArray<{
+        readonly system: string;
+        readonly reason: string;
+    }>;
+}
+//# sourceMappingURL=trace.d.ts.map

package/dist/kernel/interfaces/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../../src/kernel/interfaces/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,KAAK,EACV,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAC7C,iBAAiB,EAAE,oBAAoB,EAAE,kBAAkB,EAC3D,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAC5C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAIzH;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAEtB,iBAAiB,GACjB,oBAAoB,GACpB,mBAAmB,GACnB,gBAAgB,GAChB,iBAAiB,GAEjB,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GAEd,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GAEnB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,0BAA0B,GAE1B,oBAAoB,GACpB,qBAAqB,GAErB,sBAAsB,GAEtB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GAEjB,aAAa,GAEb,qBAAqB,GAErB,kBAAkB,GAElB,iBAAiB,GAEjB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB,CAAC;AAItB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAID;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAEzB;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACvI;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAC1J;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAE/F;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAC3I;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAElH;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACnH;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9F;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvH;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;CAAE,GAE/I;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GACzI;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;CAAE,GAC1H;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACnG;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAA;CAAE,GACtH;IAAE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAEnO;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChJ;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAEpI;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAEhK;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAC/F;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAEvF;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAEzF;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAEhJ;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAE1H;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAEhI;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAI7F;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACpG,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;IACjC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CACtD;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACxE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IAChF,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,GAAG,MAAM,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;CACzG;AAID;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACJ"}

package/dist/kernel/interfaces/trace.js

@@ -0,0 +1,17 @@
+/**
+ * Trace Event Grammar + TraceEmitter + RunSequencer.
+ * Truth Model ref: Deliverable 3 — BC-020 through BC-028
+ * Truth Model v1.1 ref: Revised BC-023 (32 events), New BC-029 (handoff outcomes in trace),
+ *                        New BC-029.1 (RunSequencer dual-mode), New INV-X13 (GovernanceQueryContext)
+ *
+ * Phase: 0A (Foundation)
+ * Build Order: 3 (depends on Deliverable 2)
+ *
+ * Constitutional Sources: Table 6, Principle 7, Principle 15, Amendment A4
+ * Binding Doctrine: Binding 8 (32 events), Binding 12 (CorrelationId), Binding 14 (trace failure)
+ *
+ * BC-020: TraceEmitter is SEPARATE from EventBus. Does NOT extend EventBus.
+ * INV-023: 32 constitutional trace events and 39 domain events are distinct systems.
+ */
+export {};
+//# sourceMappingURL=trace.js.map

package/dist/kernel/interfaces/trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.js","sourceRoot":"","sources":["../../../src/kernel/interfaces/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/kernel/namespace/namespace_enforcer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Table namespace enforcement implementation.
+ * S ref: C-09
+ *
+ * Phase: 1 (Kernel) -- Build Order 2
+ * Must exist before any table is created.
+ *
+ * C-09: Every table must have a namespace prefix:
+ *       core_, memory_, agent_, obs_, hitl_, meter_
+ *
+ * Validates migration SQL to ensure all CREATE TABLE and ALTER TABLE
+ * statements use valid namespace prefixes.
+ */
+import type { NamespaceEnforcer } from '../interfaces/namespace.js';
+/**
+ * Create a NamespaceEnforcer implementation.
+ * S ref: C-09 (namespace enforcement)
+ */
+export declare function createNamespaceEnforcer(): NamespaceEnforcer;
+//# sourceMappingURL=namespace_enforcer.d.ts.map

package/dist/kernel/namespace/namespace_enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace_enforcer.d.ts","sourceRoot":"","sources":["../../../src/kernel/namespace/namespace_enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAkDpE;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,CAiC3D"}

package/dist/kernel/namespace/namespace_enforcer.js

@@ -0,0 +1,91 @@
+/**
+ * Table namespace enforcement implementation.
+ * S ref: C-09
+ *
+ * Phase: 1 (Kernel) -- Build Order 2
+ * Must exist before any table is created.
+ *
+ * C-09: Every table must have a namespace prefix:
+ *       core_, memory_, agent_, obs_, hitl_, meter_
+ *
+ * Validates migration SQL to ensure all CREATE TABLE and ALTER TABLE
+ * statements use valid namespace prefixes.
+ */
+/** Valid namespace prefixes per C-09 */
+const VALID_PREFIXES = [
+    'core_', 'memory_', 'agent_', 'obs_', 'hitl_', 'meter_',
+];
+/**
+ * Regex to extract table names from CREATE TABLE and ALTER TABLE statements.
+ * Handles: CREATE TABLE name, CREATE TABLE IF NOT EXISTS name,
+ *          ALTER TABLE name, CREATE INDEX ... ON name
+ * S ref: C-09 (namespace enforcement on all table operations)
+ */
+const TABLE_NAME_PATTERNS = [
+    /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"|(\w+))/gi,
+    /ALTER\s+TABLE\s+(?:"([^"]+)"|(\w+))/gi,
+    /CREATE\s+(?:UNIQUE\s+)?INDEX\s+\S+\s+ON\s+(?:"([^"]+)"|(\w+))/gi,
+];
+/**
+ * Extract all table names referenced in SQL statements.
+ * S ref: C-09 (identify tables for validation)
+ */
+function extractTableNames(sql) {
+    const names = [];
+    for (const pattern of TABLE_NAME_PATTERNS) {
+        // Reset regex state
+        pattern.lastIndex = 0;
+        let match;
+        while ((match = pattern.exec(sql)) !== null) {
+            // Capture group 1 = quoted name, capture group 2 = unquoted name
+            const name = match[1] ?? match[2];
+            if (name) {
+                names.push(name);
+            }
+        }
+    }
+    return names;
+}
+/**
+ * Check if a table name starts with a valid namespace prefix.
+ * S ref: C-09 (valid prefixes)
+ */
+function hasValidPrefix(tableName) {
+    return VALID_PREFIXES.some(prefix => tableName.startsWith(prefix));
+}
+/**
+ * Create a NamespaceEnforcer implementation.
+ * S ref: C-09 (namespace enforcement)
+ */
+export function createNamespaceEnforcer() {
+    return {
+        /**
+         * Validate that migration SQL only creates/alters tables with valid prefixes.
+         * S ref: C-09 (namespace validation on migration)
+         */
+        validateMigration(sql) {
+            const tableNames = extractTableNames(sql);
+            for (const name of tableNames) {
+                if (!hasValidPrefix(name)) {
+                    return {
+                        ok: false,
+                        error: {
+                            code: 'NAMESPACE_VIOLATION',
+                            message: `Table "${name}" does not have a valid namespace prefix. Valid prefixes: ${VALID_PREFIXES.join(', ')}`,
+                            spec: 'C-09',
+                        },
+                    };
+                }
+            }
+            return { ok: true, value: undefined };
+        },
+        /**
+         * Check if a table name has a valid namespace prefix.
+         * S ref: C-09 (valid prefixes: core_, memory_, agent_, obs_, hitl_, meter_)
+         */
+        isValidTableName(tableName) {
+            return hasValidPrefix(tableName);
+        },
+    };
+}
+//# sourceMappingURL=namespace_enforcer.js.map

package/dist/kernel/namespace/namespace_enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace_enforcer.js","sourceRoot":"","sources":["../../../src/kernel/namespace/namespace_enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,wCAAwC;AACxC,MAAM,cAAc,GAA+B;IACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;CAC/C,CAAC;AAEX;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,iEAAiE;IACjE,uCAAuC;IACvC,iEAAiE;CAClE,CAAC;AAEF;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,oBAAoB;QACpB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,iEAAiE;YACjE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL;;;WAGG;QACH,iBAAiB,CAAC,GAAW;YAC3B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAE1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,qBAAqB;4BAC3B,OAAO,EAAE,UAAU,IAAI,6DAA6D,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC/G,IAAI,EAAE,MAAM;yBACb;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QAED;;;WAGG;QACH,gBAAgB,CAAC,SAAiB;YAChC,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/rate_limiter/rate_limiter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Rate limiter implementation.
+ * S ref: §36
+ *
+ * Phase: 1 (Kernel) -- Build Order 6
+ * Token-bucket rate limiting per tenant/agent.
+ *
+ * §36: Rate limiting for API calls, event emission, and propose rejections.
+ *      Per-agent rate limits with configurable buckets.
+ *
+ * Defaults (§36):
+ * - api_calls: 100/minute per agent
+ * - emit_event: 10/minute per agent
+ * - propose_rejections: max 10 per checkpoint period
+ */
+import type { RateLimiter } from '../interfaces/index.js';
+import type { TimeProvider } from '../interfaces/time.js';
+/**
+ * Create a RateLimiter implementation.
+ * S ref: §36 (token-bucket rate limiting)
+ */
+export declare function createRateLimiter(time?: TimeProvider): RateLimiter;
+//# sourceMappingURL=rate_limiter.d.ts.map

package/dist/kernel/rate_limiter/rate_limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate_limiter.d.ts","sourceRoot":"","sources":["../../../src/kernel/rate_limiter/rate_limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAEV,WAAW,EAEZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAY1D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,WAAW,CAiJlE"}

package/dist/kernel/rate_limiter/rate_limiter.js

@@ -0,0 +1,146 @@
+/**
+ * Rate limiter implementation.
+ * S ref: §36
+ *
+ * Phase: 1 (Kernel) -- Build Order 6
+ * Token-bucket rate limiting per tenant/agent.
+ *
+ * §36: Rate limiting for API calls, event emission, and propose rejections.
+ *      Per-agent rate limits with configurable buckets.
+ *
+ * Defaults (§36):
+ * - api_calls: 100/minute per agent
+ * - emit_event: 10/minute per agent
+ * - propose_rejections: max 10 per checkpoint period
+ */
+import { randomUUID } from 'node:crypto';
+/**
+ * Default rate limit configurations per §36.
+ * S ref: §36 (rate limit defaults)
+ */
+const DEFAULT_LIMITS = {
+    api_calls: { maxTokens: 100, refillRate: 100 / 60 }, // 100/min
+    emit_event: { maxTokens: 10, refillRate: 10 / 60 }, // 10/min
+    propose_rejections: { maxTokens: 10, refillRate: 10 / 60 }, // 10/period
+};
+/**
+ * Create a RateLimiter implementation.
+ * S ref: §36 (token-bucket rate limiting)
+ */
+export function createRateLimiter(time) {
+    const clock = time ?? { nowISO: () => new Date().toISOString(), nowMs: () => Date.now() };
+    return {
+        /**
+         * Check if operation is allowed under rate limit. Consumes a token if allowed.
+         * Uses token-bucket algorithm: tokens refill continuously at refillRate tokens/second.
+         * S ref: §36 (token-bucket rate limiting)
+         */
+        checkAndConsume(conn, ctx, bucketType) {
+            try {
+                const tenantId = ctx.tenantId;
+                const agentId = ctx.agentId;
+                // Get or create bucket
+                let bucket = conn.get(`SELECT id, current_tokens, max_tokens, refill_rate, last_refill_at
+           FROM meter_rate_limits
+           WHERE bucket_type = ?
+           AND (tenant_id = ? OR (tenant_id IS NULL AND ? IS NULL))
+           AND (agent_id = ? OR (agent_id IS NULL AND ? IS NULL))`, [bucketType, tenantId, tenantId, agentId, agentId]);
+                if (!bucket) {
+                    // Create bucket with defaults
+                    const defaults = DEFAULT_LIMITS[bucketType];
+                    const id = randomUUID();
+                    conn.run(`INSERT INTO meter_rate_limits (id, tenant_id, agent_id, bucket_type, max_tokens, refill_rate, current_tokens, last_refill_at)
+             VALUES (?, ?, ?, ?, ?, ?, ?, strftime('%Y-%m-%dT%H:%M:%fZ','now'))`, [id, tenantId, agentId, bucketType, defaults.maxTokens, defaults.refillRate, defaults.maxTokens]);
+                    bucket = {
+                        id,
+                        current_tokens: defaults.maxTokens,
+                        max_tokens: defaults.maxTokens,
+                        refill_rate: defaults.refillRate,
+                        last_refill_at: clock.nowISO(),
+                    };
+                }
+                // Calculate token refill since last check
+                const now = clock.nowMs();
+                const lastRefill = new Date(bucket.last_refill_at).getTime();
+                const elapsedSeconds = (now - lastRefill) / 1000;
+                const refilled = elapsedSeconds * bucket.refill_rate;
+                const newTokens = Math.min(bucket.max_tokens, bucket.current_tokens + refilled);
+                if (newTokens < 1) {
+                    // Rate limited -- not enough tokens
+                    // Update refill time even when denied to avoid stale timestamp
+                    conn.run(`UPDATE meter_rate_limits SET current_tokens = ?, last_refill_at = strftime('%Y-%m-%dT%H:%M:%fZ','now')
+             WHERE id = ?`, [newTokens, bucket.id]);
+                    return { ok: true, value: false };
+                }
+                // Consume one token
+                conn.run(`UPDATE meter_rate_limits SET current_tokens = ?, last_refill_at = strftime('%Y-%m-%dT%H:%M:%fZ','now')
+           WHERE id = ?`, [newTokens - 1, bucket.id]);
+                return { ok: true, value: true };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'RATE_LIMIT_CHECK_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: '§36',
+                    },
+                };
+            }
+        },
+        /**
+         * Get current rate limit status for an agent.
+         * S ref: §36 (rate limit status inspection)
+         */
+        getStatus(conn, ctx, bucketType) {
+            try {
+                const tenantId = ctx.tenantId;
+                const agentId = ctx.agentId;
+                const bucket = conn.get(`SELECT current_tokens, max_tokens, refill_rate, last_refill_at
+           FROM meter_rate_limits
+           WHERE bucket_type = ?
+           AND (tenant_id = ? OR (tenant_id IS NULL AND ? IS NULL))
+           AND (agent_id = ? OR (agent_id IS NULL AND ? IS NULL))`, [bucketType, tenantId, tenantId, agentId, agentId]);
+                if (!bucket) {
+                    // No bucket exists -- return defaults (fully available)
+                    const defaults = DEFAULT_LIMITS[bucketType];
+                    return {
+                        ok: true,
+                        value: {
+                            currentTokens: defaults.maxTokens,
+                            maxTokens: defaults.maxTokens,
+                            refillRate: defaults.refillRate,
+                            lastRefillAt: clock.nowISO(),
+                        },
+                    };
+                }
+                // Calculate current tokens with refill
+                const now = clock.nowMs();
+                const lastRefill = new Date(bucket.last_refill_at).getTime();
+                const elapsedSeconds = (now - lastRefill) / 1000;
+                const refilled = elapsedSeconds * bucket.refill_rate;
+                const currentTokens = Math.min(bucket.max_tokens, bucket.current_tokens + refilled);
+                return {
+                    ok: true,
+                    value: {
+                        currentTokens,
+                        maxTokens: bucket.max_tokens,
+                        refillRate: bucket.refill_rate,
+                        lastRefillAt: bucket.last_refill_at,
+                    },
+                };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'RATE_LIMIT_STATUS_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: '§36',
+                    },
+                };
+            }
+        },
+    };
+}
+//# sourceMappingURL=rate_limiter.js.map

package/dist/kernel/rate_limiter/rate_limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate_limiter.js","sourceRoot":"","sources":["../../../src/kernel/rate_limiter/rate_limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC;;;GAGG;AACH,MAAM,cAAc,GAAkE;IACpF,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,EAAE,EAAQ,UAAU;IACrE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAAU,SAAS;IACrE,kBAAkB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAAG,YAAY;CAC1E,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1F,OAAO;QACL;;;;WAIG;QACH,eAAe,CAAC,IAAwB,EAAE,GAAqB,EAAE,UAAsB;YACrF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAE5B,uBAAuB;gBACvB,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAInB;;;;kEAIwD,EACxD,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CACnD,CAAC;gBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,8BAA8B;oBAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;oBAC5C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;oBACxB,IAAI,CAAC,GAAG,CACN;gFACoE,EACpE,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CACjG,CAAC;oBACF,MAAM,GAAG;wBACP,EAAE;wBACF,cAAc,EAAE,QAAQ,CAAC,SAAS;wBAClC,UAAU,EAAE,QAAQ,CAAC,SAAS;wBAC9B,WAAW,EAAE,QAAQ,CAAC,UAAU;wBAChC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;qBAC/B,CAAC;gBACJ,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC7D,MAAM,cAAc,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;gBACjD,MAAM,QAAQ,GAAG,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC;gBACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAC;gBAEhF,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;oBAClB,oCAAoC;oBACpC,+DAA+D;oBAC/D,IAAI,CAAC,GAAG,CACN;0BACc,EACd,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CACvB,CAAC;oBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBACpC,CAAC;gBAED,oBAAoB;gBACpB,IAAI,CAAC,GAAG,CACN;wBACc,EACd,CAAC,SAAS,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAC3B,CAAC;gBAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,yBAAyB;wBAC/B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,KAAK;qBACZ;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,SAAS,CAAC,IAAwB,EAAE,GAAqB,EAAE,UAAsB;YAC/E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAIrB;;;;kEAIwD,EACxD,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CACnD,CAAC;gBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,wDAAwD;oBACxD,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;oBAC5C,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,KAAK,EAAE;4BACL,aAAa,EAAE,QAAQ,CAAC,SAAS;4BACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;yBAC7B;qBACF,CAAC;gBACJ,CAAC;gBAED,uCAAuC;gBACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC7D,MAAM,cAAc,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;gBACjD,MAAM,QAAQ,GAAG,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC;gBACrD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAC;gBAEpF,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,aAAa;wBACb,SAAS,EAAE,MAAM,CAAC,UAAU;wBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;wBAC9B,YAAY,EAAE,MAAM,CAAC,cAAc;qBACpC;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,KAAK;qBACZ;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/rbac/rbac_engine.d.ts

@@ -0,0 +1,20 @@
+/**
+ * RBAC engine implementation.
+ * S ref: §34, I-13, §3.7
+ *
+ * Phase: 1 (Kernel) -- Build Order 6
+ * Required by all API-facing modules.
+ *
+ * §34: RBAC with five default roles (admin, developer, operator, viewer, auditor).
+ * I-13: Authorization completeness -- every operation enforces RBAC.
+ * §3.7: Single-user default mode where RBAC is dormant.
+ */
+import type { RbacEngine, DatabaseConnection } from '../interfaces/index.js';
+/**
+ * Create an RbacEngine implementation.
+ * CF-006: Accepts optional conn to restore RBAC active state from DB on restart.
+ * If custom roles exist (is_default=0), RBAC activates immediately.
+ * S ref: §34 (RBAC), I-13 (authorization completeness), §3.7 (dormant mode)
+ */
+export declare function createRbacEngine(conn?: DatabaseConnection): RbacEngine;
+//# sourceMappingURL=rbac_engine.d.ts.map

package/dist/kernel/rbac/rbac_engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac_engine.d.ts","sourceRoot":"","sources":["../../../src/kernel/rbac/rbac_engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAEV,UAAU,EAAE,kBAAkB,EAC/B,MAAM,wBAAwB,CAAC;AAqDhC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,UAAU,CAiOtE"}