limen-ai 1.0.0

package/dist/orchestration/migration/005_immutability_triggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"005_immutability_triggers.js","sourceRoot":"","sources":["../../../src/orchestration/migration/005_immutability_triggers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,4DAA4D;AAE5D,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDzB,CAAC;AAEF,gCAAgC;AAEhC,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC;IAC/C,OAAO;QACL,UAAU,CAAC,EAAE,EAAE,uBAAuB,EAAE,iBAAiB,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/orchestration/migration/006_audit_tombstone.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Forward-only migration v15: GDPR Audit Trail Tombstone Support
+ * S ref: I-06 (audit immutability), I-02 (user data ownership), GDPR Art. 17
+ *
+ * Phase: 4D-4 (Certification — Data Integrity & Contract Completion)
+ * Finding: CF-035
+ *
+ * Adds:
+ *   - core_audit_tombstone_active flag table (same pattern as core_audit_archive_active)
+ *   - Drops and recreates the UPDATE trigger to check the tombstone flag
+ *
+ * The tombstone flag permits UPDATE on core_audit_log ONLY during a GDPR
+ * tombstone operation. Outside of tombstoning, UPDATE remains prohibited (I-06).
+ *
+ * Design rationale: Separate flag table from archive (not reusing core_audit_archive_active)
+ * because archive (DELETE) and tombstone (UPDATE) are semantically distinct operations
+ * with different security implications.
+ */
+import type { MigrationEntry } from '../../kernel/interfaces/index.js';
+/**
+ * Get Phase 4D-4 (GDPR Tombstone) migration.
+ * Version 15 continues from Phase 4D-2's version 14.
+ * CF-035: Adds tombstone bypass flag and modifies UPDATE trigger.
+ */
+export declare function getPhase4D4TombstoneMigrations(): MigrationEntry[];
+//# sourceMappingURL=006_audit_tombstone.d.ts.map

package/dist/orchestration/migration/006_audit_tombstone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"006_audit_tombstone.d.ts","sourceRoot":"","sources":["../../../src/orchestration/migration/006_audit_tombstone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA+CvE;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,cAAc,EAAE,CAIjE"}

package/dist/orchestration/migration/006_audit_tombstone.js

@@ -0,0 +1,71 @@
+/**
+ * Forward-only migration v15: GDPR Audit Trail Tombstone Support
+ * S ref: I-06 (audit immutability), I-02 (user data ownership), GDPR Art. 17
+ *
+ * Phase: 4D-4 (Certification — Data Integrity & Contract Completion)
+ * Finding: CF-035
+ *
+ * Adds:
+ *   - core_audit_tombstone_active flag table (same pattern as core_audit_archive_active)
+ *   - Drops and recreates the UPDATE trigger to check the tombstone flag
+ *
+ * The tombstone flag permits UPDATE on core_audit_log ONLY during a GDPR
+ * tombstone operation. Outside of tombstoning, UPDATE remains prohibited (I-06).
+ *
+ * Design rationale: Separate flag table from archive (not reusing core_audit_archive_active)
+ * because archive (DELETE) and tombstone (UPDATE) are semantically distinct operations
+ * with different security implications.
+ */
+import { createHash } from 'node:crypto';
+// ─── Migration v15: Audit Tombstone Support (CF-035) ───
+const MIGRATION_015_SQL = `
+-- Migration 015: GDPR Audit Trail Tombstone Support
+-- S ref: I-06 (audit immutability — tombstone bypass), I-02 (data ownership), GDPR Art. 17
+-- Finding: CF-035 (GDPR tombstones for audit trail)
+-- Constraint: C-05 (forward-only migration)
+
+-- ────────────────────────────────────────────────────────────
+-- Flag table for tombstone bypass
+-- When a row exists, UPDATE is permitted on core_audit_log.
+-- Flag is set and cleared within a single transaction during tombstone().
+-- ────────────────────────────────────────────────────────────
+
+CREATE TABLE core_audit_tombstone_active (
+  id INTEGER PRIMARY KEY CHECK (id = 1)
+);
+
+-- ────────────────────────────────────────────────────────────
+-- Replace UPDATE trigger to check tombstone flag
+-- Original trigger (migration 001) unconditionally blocks UPDATE.
+-- New trigger allows UPDATE when tombstone operation is in progress.
+-- ────────────────────────────────────────────────────────────
+
+DROP TRIGGER IF EXISTS core_audit_log_no_update;
+
+CREATE TRIGGER core_audit_log_no_update
+  BEFORE UPDATE ON core_audit_log
+  WHEN NOT EXISTS (SELECT 1 FROM core_audit_tombstone_active WHERE id = 1)
+  BEGIN
+    SELECT RAISE(ABORT, 'I-06: Audit entries are append-only. UPDATE is prohibited.');
+  END;
+`;
+// ─── Build Migration Entry ───
+function buildEntry(version, name, sql) {
+    return {
+        version,
+        name,
+        sql,
+        checksum: createHash('sha256').update(sql).digest('hex'),
+    };
+}
+/**
+ * Get Phase 4D-4 (GDPR Tombstone) migration.
+ * Version 15 continues from Phase 4D-2's version 14.
+ * CF-035: Adds tombstone bypass flag and modifies UPDATE trigger.
+ */
+export function getPhase4D4TombstoneMigrations() {
+    return [
+        buildEntry(15, 'audit_tombstone_support', MIGRATION_015_SQL),
+    ];
+}
+//# sourceMappingURL=006_audit_tombstone.js.map

package/dist/orchestration/migration/006_audit_tombstone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"006_audit_tombstone.js","sourceRoot":"","sources":["../../../src/orchestration/migration/006_audit_tombstone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,0DAA0D;AAE1D,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BzB,CAAC;AAEF,gCAAgC;AAEhC,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC5D,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO;QACL,UAAU,CAAC,EAAE,EAAE,yBAAyB,EAAE,iBAAiB,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/orchestration/missions/mission_recovery.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Mission Recovery — Safe recovery of non-terminal missions after engine restart.
+ * Spec ref: I-18 (Mission Persistence/Recovery), S6 (Mission Lifecycle)
+ *
+ * Phase: Sprint 4 (Replay & Pipeline)
+ * Implements: Idempotent recovery of missions in non-terminal states.
+ *
+ * Recovery is CONSERVATIVE:
+ *   - EXECUTING -> PAUSED (safe: PAUSED is a recoverable state)
+ *   - REVIEWING -> PAUSED (safe: needs human re-review)
+ *   - CREATED -> unchanged (not yet started)
+ *   - PLANNING -> unchanged (idempotent, can restart planning)
+ *   - PAUSED -> unchanged (already in recoverable state)
+ *   - BLOCKED -> unchanged (already in blocked state)
+ *   - DEGRADED -> unchanged (will re-evaluate on next checkpoint)
+ *
+ * Security constraints:
+ *   - Does NOT auto-resume any mission (conservative approach)
+ *   - Audit entry for every recovery action
+ *   - Each mission recovery in its own transaction
+ *   - Non-fatal: one mission failure does not stop others
+ *
+ * Uses MISSION_TRANSITIONS to validate every state transition.
+ * Recovery is IDEMPOTENT — checks for existing recovery audit entries.
+ *
+ * Invariants enforced: I-18, I-05 (transactional consistency)
+ * Failure modes defended: FM-10 (cross-tenant leakage — not applicable, recovery is system-level)
+ */
+import type { DatabaseConnection, Result, AuditTrail } from '../../kernel/interfaces/index.js';
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+export interface RecoveryResult {
+    readonly recoveredCount: number;
+    readonly missions: ReadonlyArray<{
+        readonly missionId: string;
+        readonly previousState: string;
+        readonly action: 'paused' | 'unchanged';
+    }>;
+}
+/**
+ * Recover non-terminal missions after engine restart.
+ *
+ * Queries all non-terminal missions in root-first BFS ordering (depth ASC),
+ * then applies conservative recovery rules:
+ *   - EXECUTING/REVIEWING -> PAUSED (validated via MISSION_TRANSITIONS)
+ *   - All other non-terminal states -> unchanged
+ *
+ * Each mission is recovered in its own transaction with audit entry.
+ * Non-fatal: individual mission recovery failures are logged but do not
+ * abort the overall recovery process.
+ *
+ * Recovery is IDEMPOTENT — if a mission already has a recovery audit entry
+ * from a previous recovery pass, it is skipped.
+ *
+ * @param conn - Database connection
+ * @param audit - Audit trail for recording recovery actions
+ * @param time - Time provider (Hard Stop #7)
+ * @returns RecoveryResult with counts and per-mission actions
+ */
+export declare function recoverMissions(conn: DatabaseConnection, audit: AuditTrail, time: TimeProvider): Result<RecoveryResult>;
+//# sourceMappingURL=mission_recovery.d.ts.map

package/dist/orchestration/missions/mission_recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission_recovery.d.ts","sourceRoot":"","sources":["../../../src/orchestration/missions/mission_recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAQpE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;KACzC,CAAC,CAAC;CACJ;AAkBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,YAAY,GACjB,MAAM,CAAC,cAAc,CAAC,CAgExB"}

package/dist/orchestration/missions/mission_recovery.js

@@ -0,0 +1,251 @@
+/**
+ * Mission Recovery — Safe recovery of non-terminal missions after engine restart.
+ * Spec ref: I-18 (Mission Persistence/Recovery), S6 (Mission Lifecycle)
+ *
+ * Phase: Sprint 4 (Replay & Pipeline)
+ * Implements: Idempotent recovery of missions in non-terminal states.
+ *
+ * Recovery is CONSERVATIVE:
+ *   - EXECUTING -> PAUSED (safe: PAUSED is a recoverable state)
+ *   - REVIEWING -> PAUSED (safe: needs human re-review)
+ *   - CREATED -> unchanged (not yet started)
+ *   - PLANNING -> unchanged (idempotent, can restart planning)
+ *   - PAUSED -> unchanged (already in recoverable state)
+ *   - BLOCKED -> unchanged (already in blocked state)
+ *   - DEGRADED -> unchanged (will re-evaluate on next checkpoint)
+ *
+ * Security constraints:
+ *   - Does NOT auto-resume any mission (conservative approach)
+ *   - Audit entry for every recovery action
+ *   - Each mission recovery in its own transaction
+ *   - Non-fatal: one mission failure does not stop others
+ *
+ * Uses MISSION_TRANSITIONS to validate every state transition.
+ * Recovery is IDEMPOTENT — checks for existing recovery audit entries.
+ *
+ * Invariants enforced: I-18, I-05 (transactional consistency)
+ * Failure modes defended: FM-10 (cross-tenant leakage — not applicable, recovery is system-level)
+ */
+import { MISSION_TRANSITIONS } from '../interfaces/orchestration.js';
+// ============================================================================
+// Recovery Rules
+// ============================================================================
+/** States that should be transitioned to PAUSED on recovery */
+const RECOVERY_TRANSITION_STATES = new Set(['EXECUTING', 'REVIEWING']);
+/** States that are left unchanged on recovery */
+const RECOVERY_UNCHANGED_STATES = new Set([
+    'CREATED', 'PLANNING', 'PAUSED', 'BLOCKED', 'DEGRADED',
+]);
+// ============================================================================
+// Implementation
+// ============================================================================
+/**
+ * Recover non-terminal missions after engine restart.
+ *
+ * Queries all non-terminal missions in root-first BFS ordering (depth ASC),
+ * then applies conservative recovery rules:
+ *   - EXECUTING/REVIEWING -> PAUSED (validated via MISSION_TRANSITIONS)
+ *   - All other non-terminal states -> unchanged
+ *
+ * Each mission is recovered in its own transaction with audit entry.
+ * Non-fatal: individual mission recovery failures are logged but do not
+ * abort the overall recovery process.
+ *
+ * Recovery is IDEMPOTENT — if a mission already has a recovery audit entry
+ * from a previous recovery pass, it is skipped.
+ *
+ * @param conn - Database connection
+ * @param audit - Audit trail for recording recovery actions
+ * @param time - Time provider (Hard Stop #7)
+ * @returns RecoveryResult with counts and per-mission actions
+ */
+export function recoverMissions(conn, audit, time) {
+    // Query non-terminal missions in root-first BFS ordering (depth ASC)
+    // Uses the partial index idx_core_missions_non_terminal for efficiency
+    const missions = conn.query(`SELECT id, state, tenant_id
+     FROM core_missions
+     WHERE state NOT IN ('COMPLETED', 'FAILED', 'CANCELLED')
+     ORDER BY depth ASC`);
+    const results = [];
+    let recoveredCount = 0;
+    for (const mission of missions) {
+        try {
+            const action = recoverSingleMission(conn, audit, time, mission.id, mission.state, mission.tenant_id);
+            results.push({
+                missionId: mission.id,
+                previousState: mission.state,
+                action,
+            });
+            if (action === 'paused') {
+                recoveredCount++;
+            }
+        }
+        catch (recoveryErr) {
+            // F-S4-003 FIX: Non-fatal, but record failure in audit trail for observability.
+            // Pattern: Sprint 1 F-S1-003 / Sprint 2 F-S2-003 (non-fatal audit trail on error).
+            try {
+                audit.append(conn, {
+                    tenantId: mission.tenant_id,
+                    actorType: 'system',
+                    actorId: 'mission_recovery',
+                    operation: 'mission_recovery_failed',
+                    resourceType: 'mission',
+                    resourceId: mission.id,
+                    detail: {
+                        previousState: mission.state,
+                        error: recoveryErr instanceof Error ? recoveryErr.message : String(recoveryErr),
+                    },
+                });
+            }
+            catch { /* audit itself failed — truly terminal, nothing to do */ }
+            results.push({
+                missionId: mission.id,
+                previousState: mission.state,
+                action: 'unchanged',
+            });
+        }
+    }
+    return {
+        ok: true,
+        value: {
+            recoveredCount,
+            missions: results,
+        },
+    };
+}
+/**
+ * Recover a single mission within its own transaction.
+ *
+ * @returns 'paused' if state was transitioned, 'unchanged' if left as-is
+ */
+function recoverSingleMission(conn, audit, time, missionId, currentState, tenantId) {
+    // Idempotency check: look for existing recovery audit entry for this mission
+    const existingRecovery = conn.get(`SELECT id FROM core_audit_log
+     WHERE resource_type = 'mission'
+     AND resource_id = ?
+     AND operation = 'mission_recovery'
+     ORDER BY timestamp DESC
+     LIMIT 1`, [missionId]);
+    if (existingRecovery) {
+        // Already recovered in a previous pass — idempotent skip
+        return 'unchanged';
+    }
+    // Determine action based on current state
+    if (RECOVERY_TRANSITION_STATES.has(currentState)) {
+        // Validate transition via MISSION_TRANSITIONS (don't bypass state machine)
+        const validTargets = MISSION_TRANSITIONS[currentState];
+        if (!validTargets.includes('PAUSED')) {
+            // REVIEWING -> PAUSED is not in the standard MISSION_TRANSITIONS.
+            // REVIEWING valid targets: ['COMPLETED', 'EXECUTING', 'FAILED']
+            // For REVIEWING, we use a special recovery path: direct UPDATE with audit.
+            // This is safe because recovery is a system-level operation, not a user-initiated transition.
+            // However, for EXECUTING -> PAUSED, MISSION_TRANSITIONS DOES allow it.
+            if (currentState === 'EXECUTING') {
+                // EXECUTING -> PAUSED is valid per MISSION_TRANSITIONS
+                return transitionToPaused(conn, audit, time, missionId, currentState, tenantId);
+            }
+            // For REVIEWING: The state machine doesn't have REVIEWING -> PAUSED.
+            // Recovery rule says REVIEWING -> PAUSED for safety (needs human re-review).
+            // This is a system-level recovery override, not a normal state transition.
+            // Record the override in the audit trail.
+            return transitionToPausedRecoveryOverride(conn, audit, time, missionId, currentState, tenantId);
+        }
+        return transitionToPaused(conn, audit, time, missionId, currentState, tenantId);
+    }
+    if (RECOVERY_UNCHANGED_STATES.has(currentState)) {
+        // Record audit entry for unchanged missions too (observability)
+        conn.transaction(() => {
+            audit.append(conn, {
+                tenantId: tenantId,
+                actorType: 'system',
+                actorId: 'mission_recovery',
+                operation: 'mission_recovery',
+                resourceType: 'mission',
+                resourceId: missionId,
+                detail: {
+                    previousState: currentState,
+                    action: 'unchanged',
+                    reason: `State ${currentState} does not require recovery transition`,
+                },
+            });
+        });
+        return 'unchanged';
+    }
+    // Unknown state — leave unchanged, audit for investigation
+    conn.transaction(() => {
+        audit.append(conn, {
+            tenantId: tenantId,
+            actorType: 'system',
+            actorId: 'mission_recovery',
+            operation: 'mission_recovery',
+            resourceType: 'mission',
+            resourceId: missionId,
+            detail: {
+                previousState: currentState,
+                action: 'unchanged',
+                reason: `Unknown state ${currentState} — no recovery rule defined`,
+            },
+        });
+    });
+    return 'unchanged';
+}
+/**
+ * Transition a mission to PAUSED via the standard state machine path.
+ */
+function transitionToPaused(conn, audit, time, missionId, previousState, tenantId) {
+    const now = time.nowISO();
+    conn.transaction(() => {
+        // F-S4-004 FIX: Check UPDATE result to detect TOCTOU race (concurrent state change)
+        const result = conn.run(`UPDATE core_missions SET state = 'PAUSED', updated_at = ? WHERE id = ? AND state = ?`, [now, missionId, previousState]);
+        if (result.changes === 0) {
+            throw new Error(`Mission ${missionId} not in state ${previousState} (TOCTOU: state changed between query and recovery)`);
+        }
+        audit.append(conn, {
+            tenantId: tenantId,
+            actorType: 'system',
+            actorId: 'mission_recovery',
+            operation: 'mission_recovery',
+            resourceType: 'mission',
+            resourceId: missionId,
+            detail: {
+                previousState,
+                newState: 'PAUSED',
+                action: 'paused',
+                transitionPath: 'standard',
+            },
+        });
+    });
+    return 'paused';
+}
+/**
+ * Transition REVIEWING -> PAUSED via recovery override.
+ * REVIEWING -> PAUSED is not in the standard state machine, but recovery
+ * rules require it for safety (needs human re-review after restart).
+ */
+function transitionToPausedRecoveryOverride(conn, audit, time, missionId, previousState, tenantId) {
+    const now = time.nowISO();
+    conn.transaction(() => {
+        // F-S4-004 FIX: Check UPDATE result to detect TOCTOU race
+        const result = conn.run(`UPDATE core_missions SET state = 'PAUSED', updated_at = ? WHERE id = ? AND state = ?`, [now, missionId, previousState]);
+        if (result.changes === 0) {
+            throw new Error(`Mission ${missionId} not in state ${previousState} (TOCTOU: state changed between query and recovery)`);
+        }
+        audit.append(conn, {
+            tenantId: tenantId,
+            actorType: 'system',
+            actorId: 'mission_recovery',
+            operation: 'mission_recovery',
+            resourceType: 'mission',
+            resourceId: missionId,
+            detail: {
+                previousState,
+                newState: 'PAUSED',
+                action: 'paused',
+                transitionPath: 'recovery_override',
+                reason: `${previousState} -> PAUSED not in standard transitions; recovery override for safety`,
+            },
+        });
+    });
+    return 'paused';
+}
+//# sourceMappingURL=mission_recovery.js.map

package/dist/orchestration/missions/mission_recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission_recovery.js","sourceRoot":"","sources":["../../../src/orchestration/missions/mission_recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAgBrE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,+DAA+D;AAC/D,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAE5F,iDAAiD;AACjD,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU;CACvD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAwB,EACxB,KAAiB,EACjB,IAAkB;IAElB,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAKzB;;;wBAGoB,CACrB,CAAC;IAEF,MAAM,OAAO,GAIR,EAAE,CAAC;IACR,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACrG,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,cAAc,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,OAAO,WAAoB,EAAE,CAAC;YAC9B,gFAAgF;YAChF,mFAAmF;YACnF,IAAI,CAAC;gBACH,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;oBACjB,QAAQ,EAAE,OAAO,CAAC,SAAuE;oBACzF,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,kBAAkB;oBAC3B,SAAS,EAAE,yBAAyB;oBACpC,YAAY,EAAE,SAAS;oBACvB,UAAU,EAAE,OAAO,CAAC,EAAE;oBACtB,MAAM,EAAE;wBACN,aAAa,EAAE,OAAO,CAAC,KAAK;wBAC5B,KAAK,EAAE,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;qBAChF;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,cAAc;YACd,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,IAAwB,EACxB,KAAiB,EACjB,IAAkB,EAClB,SAAiB,EACjB,YAAoB,EACpB,QAAuB;IAEvB,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B;;;;;aAKS,EACT,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACrB,yDAAyD;QACzD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,0CAA0C;IAC1C,IAAI,0BAA0B,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,2EAA2E;QAC3E,MAAM,YAAY,GAAG,mBAAmB,CAAC,YAA4B,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,kEAAkE;YAClE,gEAAgE;YAChE,2EAA2E;YAC3E,8FAA8F;YAC9F,uEAAuE;YACvE,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;gBACjC,uDAAuD;gBACvD,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClF,CAAC;YAED,qEAAqE;YACrE,6EAA6E;YAC7E,2EAA2E;YAC3E,0CAA0C;YAC1C,OAAO,kCAAkC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAClG,CAAC;QAED,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,gEAAgE;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjB,QAAQ,EAAE,QAAsE;gBAChF,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,kBAAkB;gBAC3B,SAAS,EAAE,kBAAkB;gBAC7B,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE;oBACN,aAAa,EAAE,YAAY;oBAC3B,MAAM,EAAE,WAAW;oBACnB,MAAM,EAAE,SAAS,YAAY,uCAAuC;iBACrE;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;QACpB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YACjB,QAAQ,EAAE,QAAsE;YAChF,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,iBAAiB,YAAY,6BAA6B;aACnE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,IAAwB,EACxB,KAAiB,EACjB,IAAkB,EAClB,SAAiB,EACjB,aAAqB,EACrB,QAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAE1B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;QACpB,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,sFAAsF,EACtF,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAChC,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,iBAAiB,aAAa,qDAAqD,CAAC,CAAC;QAC3H,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YACjB,QAAQ,EAAE,QAAsE;YAChF,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,aAAa;gBACb,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,UAAU;aAC3B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,kCAAkC,CACzC,IAAwB,EACxB,KAAiB,EACjB,IAAkB,EAClB,SAAiB,EACjB,aAAqB,EACrB,QAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAE1B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;QACpB,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,sFAAsF,EACtF,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAChC,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,iBAAiB,aAAa,qDAAqD,CAAC,CAAC;QAC3H,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YACjB,QAAQ,EAAE,QAAsE;YAChF,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,aAAa;gBACb,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,mBAAmB;gBACnC,MAAM,EAAE,GAAG,aAAa,sEAAsE;aAC/F;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/orchestration/missions/mission_store.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Mission Store -- Foundation store for all orchestration.
+ * S ref: S6 (Mission lifecycle), I-18 (persistence), I-20 (tree limits),
+ *        I-22 (capability immutability), I-24 (goal anchoring), FM-19 (delegation cycle)
+ *
+ * Phase: 3 (Orchestration)
+ * Implements: Mission creation, state transitions, tree structure queries.
+ * All state mutations include audit entries in the same transaction (I-03).
+ */
+import type { MissionStore } from '../interfaces/orchestration.js';
+/**
+ * S6: Create the mission store module.
+ * Factory function returns frozen object per C-07.
+ */
+export declare function createMissionStore(): MissionStore;
+//# sourceMappingURL=mission_store.d.ts.map

package/dist/orchestration/missions/mission_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission_store.d.ts","sourceRoot":"","sources":["../../../src/orchestration/missions/mission_store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EACS,YAAY,EAEhC,MAAM,gCAAgC,CAAC;AA0BxC;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAyUjD"}