limen-ai 1.0.0

package/dist/api/facades/claim_facade.d.ts

@@ -0,0 +1,47 @@
+/**
+ * ClaimFacade — RBAC + rate limit + delegation for SC-11, SC-12, SC-13.
+ *
+ * Phase: 4 (Governance Wiring)
+ * Implements: Design Source §Output 4 (Facade Mapping)
+ * Spec sections: §14.1 (assertClaim), §14.5 (relateClaims), §14.7 (queryClaims)
+ *
+ * Security constraints enforced:
+ *   DC-P4-404: RBAC check first in every method — unauthorized → UNAUTHORIZED
+ *   DC-P4-406: Raw ClaimSystem is closure-local; only facade exposed on Limen
+ *   C-SEC-05: Facade-only exposure — raw system never on Limen object
+ *
+ * Pattern: Follows MissionApiImpl (src/api/missions/mission_api.ts):
+ *   1. requirePermission (RBAC)
+ *   2. requireRateLimit
+ *   3. Delegate to underlying system
+ *
+ * Invariants enforced: I-13 (authorization completeness), I-17 (governance boundary)
+ */
+import type { DatabaseConnection } from '../../kernel/interfaces/database.js';
+import type { OperationContext, Result } from '../../kernel/interfaces/index.js';
+import type { RbacEngine } from '../../kernel/interfaces/rbac.js';
+import type { RateLimiter } from '../../kernel/interfaces/rate_limiter.js';
+import type { ClaimSystem, ClaimCreateInput, AssertClaimOutput, RelationshipCreateInput, RelateClaimsOutput, ClaimQueryInput, ClaimQueryResult } from '../../claims/interfaces/claim_types.js';
+/**
+ * Public claim API exposed on the Limen object.
+ * SC-11 (assertClaim), SC-12 (relateClaims), SC-13 (queryClaims).
+ * RBAC-gated, rate-limited, delegates to closure-local ClaimSystem.
+ */
+export interface ClaimApi {
+    assertClaim(conn: DatabaseConnection, ctx: OperationContext, input: ClaimCreateInput): Result<AssertClaimOutput>;
+    relateClaims(conn: DatabaseConnection, ctx: OperationContext, input: RelationshipCreateInput): Result<RelateClaimsOutput>;
+    queryClaims(conn: DatabaseConnection, ctx: OperationContext, input: ClaimQueryInput): Result<ClaimQueryResult>;
+}
+/**
+ * Create a ClaimFacade that wraps ClaimSystem with RBAC + rate limiting.
+ *
+ * The raw ClaimSystem is closure-local — never leaked (DC-P4-406, C-SEC-05).
+ * The returned facade is frozen and satisfies ClaimApi.
+ *
+ * @param claimSystem - The raw ClaimSystem (closure-local, never exposed)
+ * @param rbac - Kernel RBAC engine
+ * @param rateLimiter - Kernel rate limiter
+ * @returns Frozen ClaimApi facade
+ */
+export declare function createClaimFacade(claimSystem: ClaimSystem, rbac: RbacEngine, rateLimiter: RateLimiter): ClaimApi;
+//# sourceMappingURL=claim_facade.d.ts.map

package/dist/api/facades/claim_facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim_facade.d.ts","sourceRoot":"","sources":["../../../src/api/facades/claim_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAAE,iBAAiB,EACnC,uBAAuB,EAAE,kBAAkB,EAC3C,eAAe,EAAE,gBAAgB,EAClC,MAAM,wCAAwC,CAAC;AAShD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjH,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1H,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;CAChH;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,WAAW,GACvB,QAAQ,CA+CV"}

package/dist/api/facades/claim_facade.js

@@ -0,0 +1,67 @@
+/**
+ * ClaimFacade — RBAC + rate limit + delegation for SC-11, SC-12, SC-13.
+ *
+ * Phase: 4 (Governance Wiring)
+ * Implements: Design Source §Output 4 (Facade Mapping)
+ * Spec sections: §14.1 (assertClaim), §14.5 (relateClaims), §14.7 (queryClaims)
+ *
+ * Security constraints enforced:
+ *   DC-P4-404: RBAC check first in every method — unauthorized → UNAUTHORIZED
+ *   DC-P4-406: Raw ClaimSystem is closure-local; only facade exposed on Limen
+ *   C-SEC-05: Facade-only exposure — raw system never on Limen object
+ *
+ * Pattern: Follows MissionApiImpl (src/api/missions/mission_api.ts):
+ *   1. requirePermission (RBAC)
+ *   2. requireRateLimit
+ *   3. Delegate to underlying system
+ *
+ * Invariants enforced: I-13 (authorization completeness), I-17 (governance boundary)
+ */
+import { requirePermission } from '../enforcement/rbac_guard.js';
+import { requireRateLimit } from '../enforcement/rate_guard.js';
+// ============================================================================
+// createClaimFacade — factory
+// ============================================================================
+/**
+ * Create a ClaimFacade that wraps ClaimSystem with RBAC + rate limiting.
+ *
+ * The raw ClaimSystem is closure-local — never leaked (DC-P4-406, C-SEC-05).
+ * The returned facade is frozen and satisfies ClaimApi.
+ *
+ * @param claimSystem - The raw ClaimSystem (closure-local, never exposed)
+ * @param rbac - Kernel RBAC engine
+ * @param rateLimiter - Kernel rate limiter
+ * @returns Frozen ClaimApi facade
+ */
+export function createClaimFacade(claimSystem, rbac, rateLimiter) {
+    return Object.freeze({
+        /**
+         * SC-11: Assert a claim.
+         * DC-P4-404: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        assertClaim(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission'); // mission-scope permission
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            return claimSystem.assertClaim.execute(conn, ctx, input);
+        },
+        /**
+         * SC-12: Relate claims.
+         * DC-P4-404: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        relateClaims(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission');
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            return claimSystem.relateClaims.execute(conn, ctx, input);
+        },
+        /**
+         * SC-13: Query claims.
+         * DC-P4-404: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        queryClaims(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission');
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            return claimSystem.queryClaims.execute(conn, ctx, input);
+        },
+    });
+}
+//# sourceMappingURL=claim_facade.js.map

package/dist/api/facades/claim_facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim_facade.js","sourceRoot":"","sources":["../../../src/api/facades/claim_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAiBhE,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAwB,EACxB,IAAgB,EAChB,WAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAuB;YAEvB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAE,2BAA2B;YAC5E,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED;;;WAGG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAA8B;YAE9B,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC/C,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAsB;YAEtB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC/C,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/api/facades/working_memory_facade.d.ts

@@ -0,0 +1,47 @@
+/**
+ * WorkingMemoryFacade — RBAC + rate limit + delegation for SC-14, SC-15, SC-16.
+ *
+ * Phase: 4 (Governance Wiring)
+ * Implements: Design Source §Output 4 (Facade Mapping)
+ * Spec sections: §WMP 5.2 (write), §WMP 5.3 (read), §WMP 5.4 (discard)
+ *
+ * Security constraints enforced:
+ *   DC-P4-405: RBAC check first in every method — unauthorized → UNAUTHORIZED
+ *   DC-P4-406: Raw WorkingMemorySystem is closure-local; only facade exposed on Limen
+ *   C-SEC-05: Facade-only exposure — raw system never on Limen object
+ *
+ * Pattern: Follows MissionApiImpl (src/api/missions/mission_api.ts):
+ *   1. requirePermission (RBAC)
+ *   2. requireRateLimit
+ *   3. Delegate to underlying system
+ *
+ * Invariants enforced: I-13 (authorization completeness), I-17 (governance boundary)
+ */
+import type { DatabaseConnection } from '../../kernel/interfaces/database.js';
+import type { OperationContext, Result } from '../../kernel/interfaces/index.js';
+import type { RbacEngine } from '../../kernel/interfaces/rbac.js';
+import type { RateLimiter } from '../../kernel/interfaces/rate_limiter.js';
+import type { WorkingMemorySystem, WriteWorkingMemoryInput, WriteWorkingMemoryOutput, ReadWorkingMemoryInput, ReadWorkingMemoryOutput, DiscardWorkingMemoryInput, DiscardWorkingMemoryOutput } from '../../working-memory/interfaces/wmp_types.js';
+/**
+ * Public working memory API exposed on the Limen object.
+ * SC-14 (write), SC-15 (read), SC-16 (discard).
+ * RBAC-gated, rate-limited, delegates to closure-local WorkingMemorySystem.
+ */
+export interface WorkingMemoryApi {
+    write(conn: DatabaseConnection, ctx: OperationContext, input: WriteWorkingMemoryInput): Result<WriteWorkingMemoryOutput>;
+    read(conn: DatabaseConnection, ctx: OperationContext, input: ReadWorkingMemoryInput): Result<ReadWorkingMemoryOutput>;
+    discard(conn: DatabaseConnection, ctx: OperationContext, input: DiscardWorkingMemoryInput): Result<DiscardWorkingMemoryOutput>;
+}
+/**
+ * Create a WorkingMemoryFacade that wraps WorkingMemorySystem with RBAC + rate limiting.
+ *
+ * The raw WorkingMemorySystem is closure-local — never leaked (DC-P4-406, C-SEC-05).
+ * The returned facade is frozen and satisfies WorkingMemoryApi.
+ *
+ * @param wmpSystem - The raw WorkingMemorySystem (closure-local, never exposed)
+ * @param rbac - Kernel RBAC engine
+ * @param rateLimiter - Kernel rate limiter
+ * @returns Frozen WorkingMemoryApi facade
+ */
+export declare function createWorkingMemoryFacade(wmpSystem: WorkingMemorySystem, rbac: RbacEngine, rateLimiter: RateLimiter): WorkingMemoryApi;
+//# sourceMappingURL=working_memory_facade.d.ts.map

package/dist/api/facades/working_memory_facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working_memory_facade.d.ts","sourceRoot":"","sources":["../../../src/api/facades/working_memory_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAW,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EAAE,wBAAwB,EACjD,sBAAsB,EAAE,uBAAuB,EAC/C,yBAAyB,EAAE,0BAA0B,EACtD,MAAM,8CAA8C,CAAC;AAStD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACzH,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACtH,OAAO,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,yBAAyB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;CAChI;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,WAAW,GACvB,gBAAgB,CAsDlB"}

package/dist/api/facades/working_memory_facade.js

@@ -0,0 +1,74 @@
+/**
+ * WorkingMemoryFacade — RBAC + rate limit + delegation for SC-14, SC-15, SC-16.
+ *
+ * Phase: 4 (Governance Wiring)
+ * Implements: Design Source §Output 4 (Facade Mapping)
+ * Spec sections: §WMP 5.2 (write), §WMP 5.3 (read), §WMP 5.4 (discard)
+ *
+ * Security constraints enforced:
+ *   DC-P4-405: RBAC check first in every method — unauthorized → UNAUTHORIZED
+ *   DC-P4-406: Raw WorkingMemorySystem is closure-local; only facade exposed on Limen
+ *   C-SEC-05: Facade-only exposure — raw system never on Limen object
+ *
+ * Pattern: Follows MissionApiImpl (src/api/missions/mission_api.ts):
+ *   1. requirePermission (RBAC)
+ *   2. requireRateLimit
+ *   3. Delegate to underlying system
+ *
+ * Invariants enforced: I-13 (authorization completeness), I-17 (governance boundary)
+ */
+import { requirePermission } from '../enforcement/rbac_guard.js';
+import { requireRateLimit } from '../enforcement/rate_guard.js';
+// ============================================================================
+// createWorkingMemoryFacade — factory
+// ============================================================================
+/**
+ * Create a WorkingMemoryFacade that wraps WorkingMemorySystem with RBAC + rate limiting.
+ *
+ * The raw WorkingMemorySystem is closure-local — never leaked (DC-P4-406, C-SEC-05).
+ * The returned facade is frozen and satisfies WorkingMemoryApi.
+ *
+ * @param wmpSystem - The raw WorkingMemorySystem (closure-local, never exposed)
+ * @param rbac - Kernel RBAC engine
+ * @param rateLimiter - Kernel rate limiter
+ * @returns Frozen WorkingMemoryApi facade
+ */
+export function createWorkingMemoryFacade(wmpSystem, rbac, rateLimiter) {
+    return Object.freeze({
+        /**
+         * SC-14: Write to working memory.
+         * DC-P4-405: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        write(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission'); // mission-scope permission
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            // WMP handlers take (conn, callerTaskId, callerAgentId, input)
+            const callerTaskId = input.taskId;
+            const callerAgentId = (ctx.agentId ?? 'system');
+            return wmpSystem.write.execute(conn, callerTaskId, callerAgentId, input);
+        },
+        /**
+         * SC-15: Read from working memory.
+         * DC-P4-405: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        read(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission');
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            const callerTaskId = input.taskId;
+            const callerAgentId = (ctx.agentId ?? 'system');
+            return wmpSystem.read.execute(conn, callerTaskId, callerAgentId, input);
+        },
+        /**
+         * SC-16: Discard from working memory.
+         * DC-P4-405: RBAC check FIRST — unauthorized → throws UNAUTHORIZED.
+         */
+        discard(conn, ctx, input) {
+            requirePermission(rbac, ctx, 'create_mission');
+            requireRateLimit(rateLimiter, conn, ctx, 'api_calls');
+            const callerTaskId = input.taskId;
+            const callerAgentId = (ctx.agentId ?? 'system');
+            return wmpSystem.discard.execute(conn, callerTaskId, callerAgentId, input);
+        },
+    });
+}
+//# sourceMappingURL=working_memory_facade.js.map

package/dist/api/facades/working_memory_facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"working_memory_facade.js","sourceRoot":"","sources":["../../../src/api/facades/working_memory_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAiBhE,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA8B,EAC9B,IAAgB,EAChB,WAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB;;;WAGG;QACH,KAAK,CACH,IAAwB,EACxB,GAAqB,EACrB,KAA8B;YAE9B,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAE,2BAA2B;YAC5E,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,+DAA+D;YAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;YAClC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAY,CAAC;YAC3D,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED;;;WAGG;QACH,IAAI,CACF,IAAwB,EACxB,GAAqB,EACrB,KAA6B;YAE7B,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC/C,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;YAClC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAY,CAAC;YAC3D,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;QAED;;;WAGG;QACH,OAAO,CACL,IAAwB,EACxB,GAAqB,EACrB,KAAgC;YAEhC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC/C,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAEtD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;YAClC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAY,CAAC;YAC3D,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7E,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/api/governance/governed_orchestration.d.ts

@@ -0,0 +1,76 @@
+/**
+ * GovernedOrchestration — Wraps OrchestrationEngine with governance pre/post hooks.
+ *
+ * Phase: 4 (Governance Wiring)
+ * Implements: Design Source §Output 2, Architecture §2 (Wrapper Pattern)
+ * Spec sections: §14-§24 (SC-1 through SC-10 governance hooks)
+ *
+ * Decision D-P4-001: Wrapper pattern selected over extension/middleware/monkey-patching.
+ * Rationale: Frozen zone compliance (OrchestrationDeps cannot be modified), same interface
+ * shape via structural typing, single governance context per SC call.
+ *
+ * Security constraints enforced:
+ *   C-SEC-01: Fail-closed. Pre-hook errors → GOVERNANCE_UNAVAILABLE, SC NOT executed.
+ *   C-SEC-02: Subsystem accessor pass-through documented with security contract.
+ *   C-SEC-03: SC-5 suspension-scope check (same-mission allow, cross-mission deny).
+ *   C-SEC-04: This wrapper replaces raw orchestration for ALL consumers.
+ *   C-SEC-06: Terminal release failure tracking per mission (N=3 → escalation).
+ *   C-SEC-07: Consumption recording failure → warn log + health counter.
+ *
+ * Invariants enforced: I-17 (governance boundary), S-01 (constitutional before visible)
+ *
+ * Architectural note on EGP hooks:
+ *   The hook matrix specifies EGP hooks on SC-3 (floor), SC-7 (invocation), SC-9 (terminal).
+ *   These EGP protocol hooks require information not available at the system call input level
+ *   (e.g., missionId from taskId for floor enforcer, taskVersion for execution gate).
+ *   The correct wiring site for EGP enforcement is the substrate layer (Phase 2B), where:
+ *     - FloorEnforcer is called during wave composition (scheduler has missionId context)
+ *     - ExecutionGate is called before SCHEDULED→RUNNING transition (worker has task context)
+ *     - InvocationGate is called before model invocation (pipeline has reservation context)
+ *     - TerminalRelease is called during task terminal transitions (scheduler has full context)
+ *   The governance wrapper handles suspension checks and governance policy (Phase 0A layer).
+ *   EGP integration into the pipeline is done separately in ChatPipeline (invocation gate).
+ */
+import type { DatabaseConnection } from '../../kernel/interfaces/database.js';
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+import type { OrchestrationEngine } from '../../orchestration/interfaces/orchestration.js';
+import type { GovernanceSystem } from '../../governance/harness/governance_harness.js';
+import type { ExecutionGovernor } from '../../execution/interfaces/egp_types.js';
+import type { InvocationGate } from '../../execution/wiring/invocation_gate.js';
+export interface GovernanceRefs {
+    readonly governance: GovernanceSystem;
+    readonly egp: ExecutionGovernor;
+    readonly invocationGate: InvocationGate;
+    readonly getConnection: () => DatabaseConnection;
+    readonly time: TimeProvider;
+}
+/**
+ * C-06: GovernedOrchestration returns both the engine and a per-instance
+ * health counter accessor. The counter is closure-local to the
+ * createGovernedOrchestration call, ensuring two createLimen() instances
+ * have independent failure tracking.
+ *
+ * The OrchestrationEngine interface is frozen and cannot be extended,
+ * so the health counter is returned alongside via this type.
+ */
+export interface GovernedOrchestrationResult {
+    readonly engine: OrchestrationEngine;
+    /** Per-instance consumption recording failure count (C-SEC-07) */
+    readonly getConsumptionRecordingFailureCount: () => number;
+}
+/**
+ * Create a GovernedOrchestration wrapper that threads governance hooks
+ * into SC-1 through SC-10 without modifying the frozen OrchestrationEngine.
+ *
+ * The returned object satisfies OrchestrationEngine via structural typing.
+ * The `inner` reference is closure-local and never exposed (DC-P4-103).
+ *
+ * C-06: consumptionRecordingFailures is closure-local (per-instance),
+ * not module-level, ensuring two createLimen() calls have independent counters.
+ *
+ * @param inner - The raw OrchestrationEngine (closure-local, never leaked)
+ * @param refs - Governance protocol references
+ * @returns Frozen GovernedOrchestrationResult with engine + health counter
+ */
+export declare function createGovernedOrchestration(inner: OrchestrationEngine, refs: GovernanceRefs): GovernedOrchestrationResult;
+//# sourceMappingURL=governed_orchestration.d.ts.map

package/dist/api/governance/governed_orchestration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed_orchestration.d.ts","sourceRoot":"","sources":["../../../src/api/governance/governed_orchestration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAI9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAa3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAoBhF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,kBAAkB,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAgBD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,mCAAmC,EAAE,MAAM,MAAM,CAAC;CAC5D;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,cAAc,GACnB,2BAA2B,CAgZ7B"}