limen-ai 1.0.0

package/dist/substrate/replay/replay_engine.js

@@ -0,0 +1,316 @@
+/**
+ * Replay Engine — Deterministic replay verification via state snapshots.
+ * Spec ref: I-25 (Deterministic Replay), I-03 (Atomic Audit)
+ *
+ * Phase: Sprint 4 (Replay & Pipeline)
+ * Implements: State snapshot capture and replay verification.
+ *
+ * This is a VERIFICATION engine, not a re-execution engine. It:
+ *   1. Takes snapshots of mission state at key lifecycle points (takeSnapshot)
+ *   2. Compares snapshots to verify replay would produce identical state (verifyReplay)
+ *   3. Retrieves snapshots for inspection (getSnapshots)
+ *
+ * State hash computation:
+ *   Queries 5 tables deterministically, serializes with sorted keys,
+ *   produces SHA-256 hash. Excludes audit trail and events (contain UUIDs
+ *   and timestamps that differ between runs).
+ *
+ * Security constraints:
+ *   - Every query includes COALESCE tenant_id pattern for tenant isolation
+ *   - Mission ownership verified before operating
+ *   - Snapshots are append-only (enforced by DDL triggers)
+ *
+ * Invariants enforced: I-25, I-03
+ * Failure modes defended: FM-10 (cross-tenant leakage via COALESCE pattern)
+ */
+import { createHash } from 'node:crypto';
+// ============================================================================
+// Implementation
+// ============================================================================
+/**
+ * Verify mission belongs to the specified tenant.
+ * Returns the mission row if found, or an error Result if not.
+ */
+function verifyMissionTenant(conn, missionId, tenantId) {
+    const row = conn.get(`SELECT id FROM core_missions
+     WHERE id = ?
+     AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')`, [missionId, tenantId]);
+    if (!row) {
+        return {
+            ok: false,
+            error: {
+                code: 'MISSION_NOT_FOUND',
+                message: `Mission ${missionId} not found for tenant`,
+                spec: 'I-25',
+            },
+        };
+    }
+    return { ok: true, value: row };
+}
+/**
+ * Compute a deterministic state hash for a mission.
+ *
+ * Queries 5 tables:
+ *   1. core_missions (state, plan_version, compacted, completed_at)
+ *   2. core_tasks (state, retry_count per task, sorted by id)
+ *   3. core_artifacts (lifecycle_state, staleness_flag per artifact, sorted by id)
+ *   4. core_resources (token_allocated, token_consumed, token_remaining)
+ *   5. core_mission_goals (objective, success_criteria, scope_boundaries)
+ *
+ * Serializes deterministically: JSON.stringify with sorted keys.
+ * SHA-256 hash of the concatenated serialization.
+ *
+ * EXCLUDES audit trail and events (contain UUIDs and timestamps that differ between runs).
+ */
+function computeStateHash(conn, missionId, tenantId) {
+    // 1. Mission state
+    const mission = conn.get(`SELECT state, plan_version, compacted, completed_at
+     FROM core_missions
+     WHERE id = ?
+     AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')`, [missionId, tenantId]);
+    // 2. Tasks (sorted by id for determinism)
+    const tasks = conn.query(`SELECT id, state, retry_count
+     FROM core_tasks
+     WHERE mission_id = ?
+     AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')
+     ORDER BY id ASC`, [missionId, tenantId]);
+    // 3. Artifacts (sorted by id for determinism)
+    const artifacts = conn.query(`SELECT id, lifecycle_state, staleness_flag
+     FROM core_artifacts
+     WHERE mission_id = ?
+     AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')
+     ORDER BY id ASC`, [missionId, tenantId]);
+    // 4. Resources
+    const resources = conn.get(`SELECT token_allocated, token_consumed, token_remaining
+     FROM core_resources
+     WHERE mission_id = ?
+     AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')`, [missionId, tenantId]);
+    // 5. Mission goals
+    // F-S4-001 FIX: Added tenant isolation via mission_id FK (core_mission_goals has no tenant_id column,
+    // but is scoped through the mission_id FK which is already tenant-verified above).
+    // The mission ownership check in verifyMissionTenant() ensures tenant isolation.
+    const goals = conn.get(`SELECT objective, success_criteria, scope_boundaries
+     FROM core_mission_goals
+     WHERE mission_id = ?`, [missionId]);
+    // Build deterministic state object with sorted keys
+    const stateObj = {
+        artifacts: artifacts.map(a => ({
+            id: a.id,
+            lifecycle_state: a.lifecycle_state,
+            staleness_flag: a.staleness_flag,
+        })),
+        goals: goals ? {
+            objective: goals.objective,
+            scope_boundaries: goals.scope_boundaries,
+            success_criteria: goals.success_criteria,
+        } : null,
+        mission: mission ? {
+            compacted: mission.compacted,
+            completed_at: mission.completed_at,
+            plan_version: mission.plan_version,
+            state: mission.state,
+        } : null,
+        resources: resources ? {
+            token_allocated: resources.token_allocated,
+            token_consumed: resources.token_consumed,
+            token_remaining: resources.token_remaining,
+        } : null,
+        tasks: tasks.map(t => ({
+            id: t.id,
+            retry_count: t.retry_count,
+            state: t.state,
+        })),
+    };
+    // Deterministic serialization: keys already sorted in object literal above
+    const detail = JSON.stringify(stateObj);
+    const hash = createHash('sha256').update(detail).digest('hex');
+    return { hash, detail };
+}
+/**
+ * Create a replay engine instance.
+ *
+ * @param audit - Optional audit dependency for recording snapshot operations
+ * @returns Frozen ReplayEngine
+ */
+export function createReplayEngine(audit) {
+    const engine = {
+        takeSnapshot(conn, missionId, tenantId, snapshotType, time) {
+            // Verify mission belongs to tenant
+            const verifyResult = verifyMissionTenant(conn, missionId, tenantId);
+            if (!verifyResult.ok) {
+                return verifyResult;
+            }
+            const { hash, detail } = computeStateHash(conn, missionId, tenantId);
+            const id = globalThis.crypto.randomUUID();
+            const createdAt = time.nowISO();
+            // Insert snapshot (append-only — triggers prevent UPDATE/DELETE)
+            conn.run(`INSERT INTO core_replay_snapshots (id, mission_id, tenant_id, snapshot_type, state_hash, state_detail, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`, [id, missionId, tenantId, snapshotType, hash, detail, createdAt]);
+            // Audit the snapshot if audit dependency provided
+            if (audit) {
+                audit.append(conn, {
+                    tenantId: tenantId,
+                    actorType: 'system',
+                    actorId: 'replay_engine',
+                    operation: 'snapshot_created',
+                    resourceType: 'replay_snapshot',
+                    resourceId: id,
+                    detail: { missionId, snapshotType, stateHash: hash },
+                });
+            }
+            const snapshot = {
+                id,
+                missionId,
+                tenantId,
+                snapshotType,
+                stateHash: hash,
+                stateDetail: detail,
+                createdAt,
+            };
+            return { ok: true, value: snapshot };
+        },
+        verifyReplay(conn, missionId, tenantId) {
+            // Verify mission belongs to tenant
+            const verifyResult = verifyMissionTenant(conn, missionId, tenantId);
+            if (!verifyResult.ok) {
+                return verifyResult;
+            }
+            // Get start and end snapshots for this mission
+            const startSnapshot = conn.get(`SELECT state_hash, state_detail
+         FROM core_replay_snapshots
+         WHERE mission_id = ?
+         AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')
+         AND snapshot_type = 'mission_start'
+         ORDER BY created_at ASC
+         LIMIT 1`, [missionId, tenantId]);
+            const endSnapshot = conn.get(`SELECT state_hash, state_detail
+         FROM core_replay_snapshots
+         WHERE mission_id = ?
+         AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')
+         AND snapshot_type = 'mission_end'
+         ORDER BY created_at DESC
+         LIMIT 1`, [missionId, tenantId]);
+            if (!startSnapshot) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'SNAPSHOT_NOT_FOUND',
+                        message: `No mission_start snapshot found for mission ${missionId}`,
+                        spec: 'I-25',
+                    },
+                };
+            }
+            if (!endSnapshot) {
+                // No end snapshot yet — compute current state hash for comparison
+                const { hash: currentHash, detail: currentDetail } = computeStateHash(conn, missionId, tenantId);
+                // Compare start and current — find divergences
+                const divergences = findDivergences(startSnapshot.state_detail, currentDetail);
+                return {
+                    ok: true,
+                    value: {
+                        success: startSnapshot.state_hash === currentHash,
+                        missionId,
+                        startHash: startSnapshot.state_hash,
+                        endHash: currentHash,
+                        divergences,
+                    },
+                };
+            }
+            // Compare start and end hashes
+            const divergences = findDivergences(startSnapshot.state_detail, endSnapshot.state_detail);
+            return {
+                ok: true,
+                value: {
+                    success: startSnapshot.state_hash === endSnapshot.state_hash,
+                    missionId,
+                    startHash: startSnapshot.state_hash,
+                    endHash: endSnapshot.state_hash,
+                    divergences,
+                },
+            };
+        },
+        getSnapshots(conn, missionId, tenantId) {
+            // Verify mission belongs to tenant
+            const verifyResult = verifyMissionTenant(conn, missionId, tenantId);
+            if (!verifyResult.ok) {
+                return verifyResult;
+            }
+            const rows = conn.query(`SELECT id, mission_id, tenant_id, snapshot_type, state_hash, state_detail, created_at
+         FROM core_replay_snapshots
+         WHERE mission_id = ?
+         AND COALESCE(tenant_id, '__NULL__') = COALESCE(?, '__NULL__')
+         ORDER BY created_at ASC`, [missionId, tenantId]);
+            const snapshots = rows.map(row => ({
+                id: row.id,
+                missionId: row.mission_id,
+                tenantId: row.tenant_id,
+                snapshotType: row.snapshot_type,
+                stateHash: row.state_hash,
+                stateDetail: row.state_detail,
+                createdAt: row.created_at,
+            }));
+            return { ok: true, value: snapshots };
+        },
+    };
+    return Object.freeze(engine);
+}
+// ============================================================================
+// Internal Helpers
+// ============================================================================
+/**
+ * Find divergences between two state detail JSON strings.
+ * Compares top-level sections and reports field-level differences.
+ */
+function findDivergences(startDetail, endDetail) {
+    const divergences = [];
+    try {
+        const startState = JSON.parse(startDetail);
+        const endState = JSON.parse(endDetail);
+        // Compare each top-level section
+        for (const table of Object.keys(startState)) {
+            const startValue = JSON.stringify(startState[table]);
+            const endValue = JSON.stringify(endState[table]);
+            if (startValue !== endValue) {
+                // Drill into object fields for more granular divergence reporting
+                if (typeof startState[table] === 'object' && startState[table] !== null
+                    && typeof endState[table] === 'object' && endState[table] !== null
+                    && !Array.isArray(startState[table])) {
+                    const startObj = startState[table];
+                    const endObj = endState[table];
+                    const allKeys = new Set([...Object.keys(startObj), ...Object.keys(endObj)]);
+                    for (const field of allKeys) {
+                        const sv = JSON.stringify(startObj[field]);
+                        const ev = JSON.stringify(endObj[field]);
+                        if (sv !== ev) {
+                            divergences.push({
+                                table,
+                                field,
+                                expected: sv ?? 'undefined',
+                                actual: ev ?? 'undefined',
+                            });
+                        }
+                    }
+                }
+                else {
+                    divergences.push({
+                        table,
+                        field: '*',
+                        expected: startValue,
+                        actual: endValue,
+                    });
+                }
+            }
+        }
+    }
+    catch {
+        // If parsing fails, report a single divergence
+        divergences.push({
+            table: 'parse_error',
+            field: '*',
+            expected: startDetail,
+            actual: endDetail,
+        });
+    }
+    return divergences;
+}
+//# sourceMappingURL=replay_engine.js.map

package/dist/substrate/replay/replay_engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay_engine.js","sourceRoot":"","sources":["../../../src/substrate/replay/replay_engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0DzC,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,IAAwB,EACxB,SAAiB,EACjB,QAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB;;mEAE+D,EAC/D,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,WAAW,SAAS,uBAAuB;gBACpD,IAAI,EAAE,MAAM;aACb;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,gBAAgB,CACvB,IAAwB,EACxB,SAAiB,EACjB,QAAuB;IAEvB,mBAAmB;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAMtB;;;mEAG+D,EAC/D,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;IAEF,0CAA0C;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAKtB;;;;qBAIiB,EACjB,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;IAEF,8CAA8C;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAK1B;;;;qBAIiB,EACjB,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;IAEF,eAAe;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAKxB;;;mEAG+D,EAC/D,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;IAEF,mBAAmB;IACnB,sGAAsG;IACtG,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAKpB;;0BAEsB,EACtB,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,oDAAoD;IACpD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;QACH,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACb,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC,CAAC,IAAI;QACR,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC,CAAC,IAAI;QACR,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACrB,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CAAC,CAAC,IAAI;QACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC;KACJ,CAAC;IAEF,2EAA2E;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAgB;IACjD,MAAM,MAAM,GAAiB;QAC3B,YAAY,CACV,IAAwB,EACxB,SAAiB,EACjB,QAAuB,EACvB,YAA4D,EAC5D,IAAkB;YAElB,mCAAmC;YACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,YAAsC,CAAC;YAChD,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrE,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAEhC,iEAAiE;YACjE,IAAI,CAAC,GAAG,CACN;sCAC8B,EAC9B,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CACjE,CAAC;YAEF,kDAAkD;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;oBACjB,QAAQ,EAAE,QAAsE;oBAChF,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,eAAe;oBACxB,SAAS,EAAE,kBAAkB;oBAC7B,YAAY,EAAE,iBAAiB;oBAC/B,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAmB;gBAC/B,EAAE;gBACF,SAAS;gBACT,QAAQ;gBACR,YAAY;gBACZ,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,MAAM;gBACnB,SAAS;aACV,CAAC;YAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,YAAY,CACV,IAAwB,EACxB,SAAiB,EACjB,QAAuB;YAEvB,mCAAmC;YACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,YAA0C,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B;;;;;;iBAMS,EACT,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B;;;;;;iBAMS,EACT,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;YAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,+CAA+C,SAAS,EAAE;wBACnE,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,kEAAkE;gBAClE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAEjG,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;gBAE/E,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,OAAO,EAAE,aAAa,CAAC,UAAU,KAAK,WAAW;wBACjD,SAAS;wBACT,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,WAAW;wBACpB,WAAW;qBACZ;iBACF,CAAC;YACJ,CAAC;YAED,+BAA+B;YAC/B,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;YAE1F,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,OAAO,EAAE,aAAa,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU;oBAC5D,SAAS;oBACT,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,WAAW,CAAC,UAAU;oBAC/B,WAAW;iBACZ;aACF,CAAC;QACJ,CAAC;QAED,YAAY,CACV,IAAwB,EACxB,SAAiB,EACjB,QAAuB;YAEvB,mCAAmC;YACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,YAAiD,CAAC;YAC3D,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CASrB;;;;iCAIyB,EACzB,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;YAEF,MAAM,SAAS,GAAqB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnD,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,YAAY,EAAE,GAAG,CAAC,aAA+C;gBACjE,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,eAAe,CACtB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,WAAW,GAA8E,EAAE,CAAC;IAElG,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;QAElE,iCAAiC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAEjD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC5B,kEAAkE;gBAClE,IAAI,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI;uBAClE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;uBAC/D,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAA4B,CAAC;oBAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAA4B,CAAC;oBAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC5E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;wBACzC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;4BACd,WAAW,CAAC,IAAI,CAAC;gCACf,KAAK;gCACL,KAAK;gCACL,QAAQ,EAAE,EAAE,IAAI,WAAW;gCAC3B,MAAM,EAAE,EAAE,IAAI,WAAW;6BAC1B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,IAAI,CAAC;wBACf,KAAK;wBACL,KAAK,EAAE,GAAG;wBACV,QAAQ,EAAE,UAAU;wBACpB,MAAM,EAAE,QAAQ;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;QAC/C,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/substrate/scheduler/task_scheduler.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Task Scheduler implementation.
+ * S ref: §25.1 (Task Scheduler), §25.7 (Queue Cleanup, Worker Exhaustion)
+ *
+ * Phase: 2 (Execution Substrate)
+ * Implements: SQLite-backed priority queue with three configurable policies,
+ *             100ms polling interval, enqueue/dequeue semantics, task lifecycle
+ *             management, cleanup, and backpressure.
+ *
+ * Three scheduling policies per §25.1:
+ *   - 'fifo': First-in-first-out by created_at
+ *   - 'priority': Lower priority integer = higher execution priority
+ *   - 'deadline': Tasks from missions closest to deadline get priority
+ *     (Approximated by priority since deadline info comes from orchestration layer)
+ *
+ * Invariants enforced: I-03 (audit in same transaction), I-05 (transactional), I-14 (latency)
+ * Failure modes defended: FM-20 (heartbeat columns), backpressure (§25.7)
+ *
+ * SYNC interface. All methods return Result<T>.
+ */
+import type { DatabaseConnection } from '../../kernel/interfaces/index.js';
+import type { Result, AuditCreateInput } from '../../kernel/interfaces/index.js';
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+import type { TaskScheduler } from '../interfaces/substrate.js';
+/**
+ * Minimal audit dependency. Uses only the append method to keep coupling lightweight.
+ * S ref: I-03 (every state mutation and its audit entry in same transaction)
+ */
+interface AuditDep {
+    append(conn: DatabaseConnection, input: AuditCreateInput): Result<unknown>;
+}
+/**
+ * Create a TaskScheduler implementation.
+ * S ref: §25.1, C-07 (Object.freeze), I-03 (audit in same transaction)
+ */
+export declare function createTaskScheduler(audit?: AuditDep, time?: TimeProvider): TaskScheduler;
+export {};
+//# sourceMappingURL=task_scheduler.d.ts.map

package/dist/substrate/scheduler/task_scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task_scheduler.d.ts","sourceRoot":"","sources":["../../../src/substrate/scheduler/task_scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EACV,MAAM,EAKN,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EACV,aAAa,EAMd,MAAM,4BAA4B,CAAC;AAEpC;;;GAGG;AACH,UAAU,QAAQ;IAChB,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;CAC5E;AAmBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,aAAa,CAsoBxF"}