limen-ai 2.0.1 → 3.0.0

package/dist/api/facades/claim_facade.js

@@ -75,7 +75,28 @@ export function createRawClaimFacade(claimSystem, rbac, _rateLimiter) {
          */
         searchClaims(conn, ctx, input) {
             requirePermission(rbac, ctx, 'query_claims');
-            return claimSystem.store.search(conn, ctx.tenantId, input);
+            // v3.0.0 EG-04: Pass clearanceLevel for classification-filtered search
+            return claimSystem.store.search(conn, ctx.tenantId, input, ctx.clearanceLevel);
+        },
+        /**
+         * F-BR4-004: Projection-layer status lookup.
+         * Returns the claim's current status ('active' | 'retracted') or
+         * 'not_found' when no claim with the given id exists within the
+         * caller's tenant scope. Uses the same 'query_claims' permission as
+         * queryClaims — strictly narrower scope (no content, no relationships,
+         * no evidence). Delegates to ClaimStore.get which already enforces
+         * tenant scoping.
+         */
+        getClaimStatus(conn, ctx, claimId) {
+            requirePermission(rbac, ctx, 'query_claims');
+            const result = claimSystem.store.get(conn, claimId, ctx.tenantId);
+            if (!result.ok) {
+                if (result.error.code === 'CLAIM_NOT_FOUND') {
+                    return { ok: true, value: 'not_found' };
+                }
+                return { ok: false, error: result.error };
+            }
+            return { ok: true, value: result.value.status };
         },
     });
 }

package/dist/api/facades/claim_facade.js.map

@@ -1 +1 @@
-{"version":3,"file":"claim_facade.js","sourceRoot":"","sources":["../../../src/api/facades/claim_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH,iFAAiF;AACjF,qFAAqF;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAsBjE,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAwB,EACxB,IAAgB,EAChB,YAAyB;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAuB;YAEvB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED;;;WAGG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAA8B;YAE9B,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAsB;YAEtB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED;;;;WAIG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAAwB;YAExB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED;;;WAGG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAAuB;YAEvB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"claim_facade.js","sourceRoot":"","sources":["../../../src/api/facades/claim_facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAgBH,iFAAiF;AACjF,qFAAqF;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAiCjE,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAwB,EACxB,IAAgB,EAChB,YAAyB;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAuB;YAEvB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED;;;WAGG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAA8B;YAE9B,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED;;;WAGG;QACH,WAAW,CACT,IAAwB,EACxB,GAAqB,EACrB,KAAsB;YAEtB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED;;;;WAIG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAAwB;YAExB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED;;;WAGG;QACH,YAAY,CACV,IAAwB,EACxB,GAAqB,EACrB,KAAuB;YAEvB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,uEAAuE;YACvE,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QACjF,CAAC;QAED;;;;;;;;WAQG;QACH,cAAc,CACZ,IAAwB,EACxB,GAAqB,EACrB,OAAe;YAEf,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;gBAC1C,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClD,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/api/facades/working_memory_api_impl.d.ts

@@ -1,7 +1,7 @@
 /**
  * WorkingMemoryApiImpl — Consumer-facing convenience wrapper for WMP system calls.
  *
- * Sprint 7: Bridge to Claude Code
+ * Sprint 7: Public API Bridge
  * Follows AgentApiImpl pattern (src/api/agents/agent_api.ts):
  *   Constructor receives getConnection/getContext closures.
  *   Each method calls them internally before delegating to RawWorkingMemoryFacade.

package/dist/api/facades/working_memory_api_impl.js

@@ -1,7 +1,7 @@
 /**
  * WorkingMemoryApiImpl — Consumer-facing convenience wrapper for WMP system calls.
  *
- * Sprint 7: Bridge to Claude Code
+ * Sprint 7: Public API Bridge
  * Follows AgentApiImpl pattern (src/api/agents/agent_api.ts):
  *   Constructor receives getConnection/getContext closures.
  *   Each method calls them internally before delegating to RawWorkingMemoryFacade.

package/dist/api/gateway/permission_gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission_gateway.d.ts","sourceRoot":"","sources":["../../../src/api/gateway/permission_gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQ9E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,CA+F5E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAM7C,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CA4BvD,CAAC;AAsCH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,gBAAgB,EAC9B,OAAO,EAAE,MAAM,kBAAkB,GAChC,IAAI,CA+HN;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,WAAW,CAAC,UAAU,CAAC,CAQlE"}
+{"version":3,"file":"permission_gateway.d.ts","sourceRoot":"","sources":["../../../src/api/gateway/permission_gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQ9E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,CA6G5E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAM7C,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CA4BvD,CAAC;AAsCH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,gBAAgB,EAC9B,OAAO,EAAE,MAAM,kBAAkB,GAChC,IAAI,CA+HN;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,WAAW,CAAC,UAAU,CAAC,CAQlE"}

package/dist/api/gateway/permission_gateway.js

@@ -51,6 +51,8 @@ export const PERMISSION_MAP = {
     'claims.queryClaims': { permission: 'query_claims', rateLimit: 'api_calls' },
     'claims.relateClaims': { permission: 'relate_claims', rateLimit: 'api_calls' },
     'claims.searchClaims': { permission: 'query_claims', rateLimit: 'api_calls' },
+    // F-BR4-004: Single-claim status lookup — strictly narrower scope than queryClaims
+    'claims.getClaimStatus': { permission: 'query_claims', rateLimit: 'api_calls' },
     // ── Working Memory namespace ──
     'workingMemory.write': { permission: 'write_wm', rateLimit: 'api_calls' },
     'workingMemory.read': { permission: 'read_wm', rateLimit: 'api_calls' },
@@ -95,6 +97,15 @@ export const PERMISSION_MAP = {
     'roles.create': { permission: 'manage_roles' },
     'roles.assign': { permission: 'manage_roles' },
     'roles.revoke': { permission: 'manage_roles' },
+    // ── Replay namespace (v3.0.0 WG-02) ──
+    'replay.verify': { permission: 'view_telemetry' },
+    'replay.getSnapshots': { permission: 'view_telemetry' },
+    // ── Maintenance namespace (v3.0.0 WG-01) ──
+    'maintenance.runRetention': { permission: 'purge_data' },
+    'maintenance.getRetentionPolicies': { permission: 'view_telemetry' },
+    'maintenance.updateRetentionPolicy': { permission: 'purge_data' },
+    // ── Security namespace (v3.0.0 EG-02) ──
+    'security.rotateKey': { permission: 'purge_data' }, // admin-level operation
     // ── Data namespace ──
     'data.export': { permission: 'export_compliance' },
     'data.purge': { permission: 'purge_data' },
@@ -129,7 +140,7 @@ export const EXEMPT_METHODS = new Set([
     // These are listed here so that if a namespace object is also iterable as a key,
     // it is explicitly acknowledged rather than silently ignored.
     'claims', 'workingMemory', 'governance', 'consent', 'cognitive',
-    'agents', 'missions', 'roles', 'data', 'metrics',
+    'agents', 'missions', 'roles', 'data', 'metrics', 'security',
 ]);
 /**
  * Internal infrastructure methods that exist on namespace implementation classes

package/dist/api/gateway/permission_gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission_gateway.js","sourceRoot":"","sources":["../../../src/api/gateway/permission_gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAehE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsD;IAC/E,wBAAwB;IACxB,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAClE,QAAQ,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAChE,QAAQ,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IACjE,SAAS,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAClE,QAAQ,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAChE,SAAS,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IACjE,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAExE,mBAAmB;IACnB,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE;IACtD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE;IACxD,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAEjC,yBAAyB;IACzB,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAC5E,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAC9E,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAC5E,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAC9E,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAE7E,iCAAiC;IACjC,qBAAqB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE;IACzE,oBAAoB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;IACvE,uBAAuB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE;IAE3E,wEAAwE;IACxE,oBAAoB,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE;IAC/E,wBAAwB,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IAC7D,oBAAoB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACnE,uBAAuB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACtE,sBAAsB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACrE,6BAA6B,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC5E,oCAAoC,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAEnF,0BAA0B;IAC1B,kBAAkB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACpD,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAClD,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAE9C,4BAA4B;IAC5B,uBAAuB,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAC3D,kBAAkB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAClD,kBAAkB,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IACtD,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACrD,sBAAsB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACtD,8BAA8B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAClE,4BAA4B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAChE,4BAA4B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAEhE,yBAAyB;IACzB,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACjD,YAAY,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC9C,aAAa,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC/C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAChD,iBAAiB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACnD,wBAAwB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAExD,2BAA2B;IAC3B,iBAAiB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACnD,cAAc,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAChD,eAAe,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAEjD,wBAAwB;IACxB,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAE9C,uBAAuB;IACvB,aAAa,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IAClD,YAAY,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAC1C,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAE7C,gBAAgB;IAChB,kBAAkB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAEpD,kBAAkB;IAClB,YAAY,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IACjD,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC5C,iBAAiB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;IAClD,QAAQ,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC1C,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAClD,cAAc,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAClD,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAEhD,8CAA8C;IAC9C,oBAAoB,EAAE,IAAI;IAC1B,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,yFAAyF;IACzF,iFAAiF;IACjF,8DAA8D;IAC9D,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW;IAC/D,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;CACjD,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,oEAAoE;IACpE,gFAAgF;IAChF,EAAE;IACF,oDAAoD;IACpD,eAAe;IACf,YAAY;IACZ,UAAU;IACV,cAAc;IACd,MAAM,EAAS,yCAAyC;IACxD,KAAK,EAAU,8DAA8D;IAC7E,eAAe,EAAE,0CAA0C;IAC3D,mCAAmC;IACnC,eAAe,EAAQ,iBAAiB;IACxC,oBAAoB,EAAG,iBAAiB;IACxC,gBAAgB,EAAO,cAAc;IACrC,gBAAgB,EAAO,cAAc;IACrC,wBAAwB,EAAE,cAAc;IACxC,YAAY,EAAW,cAAc;IACrC,kCAAkC;IAClC,MAAM,EAAU,wBAAwB;IACxC,aAAa,EAAG,yBAAyB;IACzC,eAAe,EAAE,iCAAiC;IAClD,QAAQ,EAAQ,sBAAsB;IACtC,QAAQ,EAAQ,kCAAkC;CACnD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CACjB,MAAS,EACT,IAAsB,EACtB,MAA8B,EAC9B,IAAgB,EAChB,WAAwB,EACxB,OAAiC;IAEjC,MAAM,OAAO,GAAG,SAAS,aAAa,CAAgB,GAAG,IAAe;QACtE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,oDAAoD;IACpD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA+B,EAC/B,IAAgB,EAChB,WAAwB,EACxB,MAA8B,EAC9B,OAAiC;IAEjC,kCAAkC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,SAAS;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,uCAAuC;QAExE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,MAAM,KAAK,UAAU;YAAE,SAAS;QAE3C,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CACtB,MAAkD,EAClD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,CACR,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;IAE/D,qBAAqB;IACrB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6C,CAAC;IACzE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAwB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QAExE,MAAM,KAAK,GAAG,EAA6B,CAAC;QAE5C,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,SAAS;YAE3C,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,CAC5B,MAAkD,EAClD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,iFAAiF;IACjF,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU;YAAE,SAAS;QAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,MAAM,uCAAuC;YAC1F,iDAAiD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,oEAAoE;YACpE,uDAAuD;YACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAA4B,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,SAAS,SAAS,CAAC,MAAM,aAAa;oBAC3F,4CAA4C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9F,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACxE,MAAM,KAAK,GAAG,EAA6B,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAChD,CAAC;QACF,sDAAsD;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClD,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,UAAU;gBAAE,SAAS;YAC/C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,CAAC,MAAM,iCAAiC;gBACtF,+BAA+B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAc,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"permission_gateway.js","sourceRoot":"","sources":["../../../src/api/gateway/permission_gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAehE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsD;IAC/E,wBAAwB;IACxB,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAClE,QAAQ,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAChE,QAAQ,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IACjE,SAAS,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAClE,QAAQ,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAChE,SAAS,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IACjE,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAExE,mBAAmB;IACnB,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE;IACtD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE;IACxD,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAEjC,yBAAyB;IACzB,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAC5E,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAC9E,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAC5E,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAC9E,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAC7E,mFAAmF;IACnF,uBAAuB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE;IAE/E,iCAAiC;IACjC,qBAAqB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE;IACzE,oBAAoB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE;IACvE,uBAAuB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE;IAE3E,wEAAwE;IACxE,oBAAoB,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE;IAC/E,wBAAwB,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IAC7D,oBAAoB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACnE,uBAAuB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACtE,sBAAsB,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IACrE,6BAA6B,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC5E,oCAAoC,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAEnF,0BAA0B;IAC1B,kBAAkB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACpD,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAClD,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAE9C,4BAA4B;IAC5B,uBAAuB,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAC3D,kBAAkB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAClD,kBAAkB,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IACtD,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACrD,sBAAsB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACtD,8BAA8B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAClE,4BAA4B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAChE,4BAA4B,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAEhE,yBAAyB;IACzB,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IACjD,YAAY,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC9C,aAAa,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC/C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,eAAe,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC/C,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAChD,iBAAiB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACnD,wBAAwB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAExD,2BAA2B;IAC3B,iBAAiB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACnD,cAAc,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAChD,eAAe,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAEjD,wBAAwB;IACxB,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC9C,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAE9C,wCAAwC;IACxC,eAAe,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACjD,qBAAqB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAEvD,6CAA6C;IAC7C,0BAA0B,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IACxD,kCAAkC,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IACpE,mCAAmC,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAEjE,0CAA0C;IAC1C,oBAAoB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,wBAAwB;IAE5E,uBAAuB;IACvB,aAAa,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IAClD,YAAY,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAC1C,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAE7C,gBAAgB;IAChB,kBAAkB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAEpD,kBAAkB;IAClB,YAAY,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;IACjD,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC5C,iBAAiB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;IAClD,QAAQ,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAC1C,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;IAClD,cAAc,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAClD,gBAAgB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAEhD,8CAA8C;IAC9C,oBAAoB,EAAE,IAAI;IAC1B,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,yFAAyF;IACzF,iFAAiF;IACjF,8DAA8D;IAC9D,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW;IAC/D,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU;CAC7D,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,oEAAoE;IACpE,gFAAgF;IAChF,EAAE;IACF,oDAAoD;IACpD,eAAe;IACf,YAAY;IACZ,UAAU;IACV,cAAc;IACd,MAAM,EAAS,yCAAyC;IACxD,KAAK,EAAU,8DAA8D;IAC7E,eAAe,EAAE,0CAA0C;IAC3D,mCAAmC;IACnC,eAAe,EAAQ,iBAAiB;IACxC,oBAAoB,EAAG,iBAAiB;IACxC,gBAAgB,EAAO,cAAc;IACrC,gBAAgB,EAAO,cAAc;IACrC,wBAAwB,EAAE,cAAc;IACxC,YAAY,EAAW,cAAc;IACrC,kCAAkC;IAClC,MAAM,EAAU,wBAAwB;IACxC,aAAa,EAAG,yBAAyB;IACzC,eAAe,EAAE,iCAAiC;IAClD,QAAQ,EAAQ,sBAAsB;IACtC,QAAQ,EAAQ,kCAAkC;CACnD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CACjB,MAAS,EACT,IAAsB,EACtB,MAA8B,EAC9B,IAAgB,EAChB,WAAwB,EACxB,OAAiC;IAEjC,MAAM,OAAO,GAAG,SAAS,aAAa,CAAgB,GAAG,IAAe;QACtE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,oDAAoD;IACpD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA+B,EAC/B,IAAgB,EAChB,WAAwB,EACxB,MAA8B,EAC9B,OAAiC;IAEjC,kCAAkC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,SAAS;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,uCAAuC;QAExE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,MAAM,KAAK,UAAU;YAAE,SAAS;QAE3C,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CACtB,MAAkD,EAClD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,CACR,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;IAE/D,qBAAqB;IACrB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6C,CAAC;IACzE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAwB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QAExE,MAAM,KAAK,GAAG,EAA6B,CAAC;QAE5C,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,SAAS;YAE3C,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,CAC5B,MAAkD,EAClD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,iFAAiF;IACjF,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU;YAAE,SAAS;QAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,MAAM,uCAAuC;YAC1F,iDAAiD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,oEAAoE;YACpE,uDAAuD;YACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAA4B,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,SAAS,SAAS,CAAC,MAAM,aAAa;oBAC3F,4CAA4C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9F,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACxE,MAAM,KAAK,GAAG,EAA6B,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAChD,CAAC;QACF,sDAAsD;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClD,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,UAAU;gBAAE,SAAS;YAC/C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,CAAC,MAAM,iCAAiC;gBACtF,+BAA+B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAc,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/api/index.d.ts

@@ -32,7 +32,7 @@ export type { Limen, LimenConfig, LimenLogEvent, LimenLogger } from './interface
 export { LimenError } from './errors/limen_error.js';
 export type { LimenErrorCode } from './interfaces/api.js';
 export { resolveDefaults, detectProviders, resolveMasterKey, resolveDataDir } from './defaults.js';
-export type { ProviderConfig, HitlConfig, HitlMode, ChatMessage, ChatOptions, ChatResult, StreamChunk, PipelinePhase, FinishReason, ResponseMetadata, InferOptions, InferResult, JsonSchema, ZodSchema, SchemaValidationError, SessionOptions, Session, ConversationTurnView, MissionApi, MissionCreateOptions, MissionHandle, MissionState, MissionResult, MissionView, MissionFilter, TaskGraphInput, TaskGraphOutput, TaskSpec, TaskExecutionInput, TaskExecutionOutput, ArtifactCreateInput, ArtifactCreateOutput, ArtifactReadInput, ArtifactReadOutput, EventEmitInput, EventEmitOutput, CapabilityRequestInput, CapabilityRequestOutput, BudgetRequestInput, BudgetRequestOutput, ResultSubmitInput, ResultSubmitOutput, CheckpointResponseInput, CheckpointResponseOutput, AgentApi, AgentRegistration, AgentView, PipelineStage, AgentPipeline, TrustPromotionOptions, SafetyViolationInput, PurgeFilter, RolesApi, Permission, HealthStatus, SubsystemHealth, MetricsApi, MetricsSnapshot, HistogramData, DataApi, BackpressureConfig, ClaimApi, ClaimCreateInput, AssertClaimOutput, RelationshipCreateInput, RelateClaimsOutput, ClaimQueryInput, ClaimQueryResult, RetractClaimInput, CognitiveConfig, RememberOptions, RememberResult, RecallOptions, BeliefView, ReflectEntry, ReflectResult, ConvenienceErrorCode, EvidenceRef, ForgetOptions, FreshnessLabel, FreshnessThresholds, StabilityConfig, AccessTrackerConfig, WorkingMemoryApi, WriteWorkingMemoryInput, WriteWorkingMemoryOutput, ReadWorkingMemoryInput, ReadWorkingMemoryOutput, DiscardWorkingMemoryInput, DiscardWorkingMemoryOutput, CognitiveNamespace, CognitiveHealthReport, CognitiveHealthConfig, LimenPlugin, LimenEventName, LimenEventHandler, LimenEvent, PluginMeta, PluginContext, PluginApi, PluginLogger, PluginErrorCode, ExportOptions, ExportFormat, LimenExportDocument, ExportedClaim, ExportedRelationship, ExportedEvidenceRef, ExportMetadata, ImportOptions, ImportResult, ImportError, ImportDedup, ExchangeErrorCode, ConsentApi, ConsentRecord, ConsentCreateInput, ConsentBasis, ConsentStatus, SecurityPolicy, PiiCategory, PiiAction, SecurityErrorCode, ContentScanResult, PiiScanResult, InjectionScanResult, GovernanceApi, ClassificationLevel, ClassificationRule, ClassificationResult, ProtectedPredicateRule, ErasureRequest, ErasureCertificate, Soc2AuditPackage, Soc2ControlEvidence, Soc2Statistics, ComplianceExportOptions, GovernanceConfig, GovernanceErrorCode, EmbeddingProvider, VectorConfig, StoredEmbedding, DuplicateCandidate, DuplicateCheckResult, SearchMode, HybridScore, HybridWeights, VectorErrorCode, EmbeddingStats, SelfHealingConfig, SelfHealingEvent, ConsolidationOptions, ConsolidationResult, ConsolidationLogEntry, ConflictResolution, ImportanceScore, ImportanceWeights, ConnectionSuggestion, NarrativeSnapshot, NarrativeThread, VerificationResult, VerificationProvider, CognitiveErrorCode, } from './interfaces/api.js';
+export type { ProviderConfig, HitlConfig, HitlMode, ChatMessage, ChatOptions, ChatResult, StreamChunk, PipelinePhase, FinishReason, ResponseMetadata, InferOptions, InferResult, JsonSchema, ZodSchema, SchemaValidationError, SessionOptions, Session, ConversationTurnView, MissionApi, MissionCreateOptions, MissionHandle, MissionState, MissionResult, MissionView, MissionFilter, TaskGraphInput, TaskGraphOutput, TaskSpec, TaskExecutionInput, TaskExecutionOutput, ArtifactCreateInput, ArtifactCreateOutput, ArtifactReadInput, ArtifactReadOutput, EventEmitInput, EventEmitOutput, CapabilityRequestInput, CapabilityRequestOutput, BudgetRequestInput, BudgetRequestOutput, ResultSubmitInput, ResultSubmitOutput, CheckpointResponseInput, CheckpointResponseOutput, AgentApi, AgentRegistration, AgentView, PipelineStage, AgentPipeline, TrustPromotionOptions, SafetyViolationInput, PurgeFilter, RolesApi, Permission, HealthStatus, SubsystemHealth, MetricsApi, MetricsSnapshot, HistogramData, DataApi, BackpressureConfig, ClaimApi, ClaimCreateInput, AssertClaimOutput, RelationshipCreateInput, RelateClaimsOutput, ClaimRelationship, RelationshipType, ClaimQueryInput, ClaimQueryResult, RetractClaimInput, CognitiveConfig, RememberOptions, RememberResult, RecallOptions, BeliefView, ReflectEntry, ReflectResult, ConvenienceErrorCode, EvidenceRef, ForgetOptions, FreshnessLabel, FreshnessThresholds, StabilityConfig, AccessTrackerConfig, WorkingMemoryApi, WriteWorkingMemoryInput, WriteWorkingMemoryOutput, ReadWorkingMemoryInput, ReadWorkingMemoryOutput, DiscardWorkingMemoryInput, DiscardWorkingMemoryOutput, CognitiveNamespace, CognitiveHealthReport, CognitiveHealthConfig, LimenPlugin, LimenEventName, LimenEventHandler, LimenEvent, PluginMeta, PluginContext, PluginApi, PluginLogger, PluginErrorCode, ExportOptions, ExportFormat, LimenExportDocument, ExportedClaim, ExportedRelationship, ExportedEvidenceRef, ExportMetadata, ImportOptions, ImportResult, ImportError, ImportDedup, ExchangeErrorCode, ConsentApi, SecurityApi, ConsentRecord, ConsentCreateInput, ConsentBasis, ConsentStatus, SecurityPolicy, PiiCategory, PiiAction, SecurityErrorCode, ContentScanResult, PiiScanResult, InjectionScanResult, GovernanceApi, ClassificationLevel, ClassificationRule, ClassificationResult, ProtectedPredicateRule, ErasureRequest, ErasureCertificate, Soc2AuditPackage, Soc2ControlEvidence, Soc2Statistics, ComplianceExportOptions, GovernanceConfig, GovernanceErrorCode, EmbeddingProvider, VectorConfig, StoredEmbedding, DuplicateCandidate, DuplicateCheckResult, SearchMode, HybridScore, HybridWeights, VectorErrorCode, EmbeddingStats, SelfHealingConfig, SelfHealingEvent, ConsolidationOptions, ConsolidationResult, ConsolidationLogEntry, ConflictResolution, ImportanceScore, ImportanceWeights, ConnectionSuggestion, NarrativeSnapshot, NarrativeThread, VerificationResult, VerificationProvider, CognitiveErrorCode, } from './interfaces/api.js';
 export type { TenantId, UserId, AgentId, MissionId, TaskId, EventId, ArtifactId, SessionId, } from '../kernel/interfaces/index.js';
 /**
  * Internal dependencies for createLimen().

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EACV,MAAM,EAAE,cAAc,EAAE,eAAe,EAExC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAaxF,OAAO,KAAK,EACV,KAAK,EAAE,WAAW,EAGnB,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AA8K3F,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGnG,YAAY,EACV,cAAc,EAAE,UAAU,EAAE,QAAQ,EACpC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EACjD,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAC7C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EACvE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAC7C,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAC5E,WAAW,EAAE,aAAa,EAC1B,cAAc,EAAE,eAAe,EAAE,QAAQ,EACzC,kBAAkB,EAAE,mBAAmB,EACvC,mBAAmB,EAAE,oBAAoB,EACzC,iBAAiB,EAAE,kBAAkB,EACrC,cAAc,EAAE,eAAe,EAC/B,sBAAsB,EAAE,uBAAuB,EAC/C,kBAAkB,EAAE,mBAAmB,EACvC,iBAAiB,EAAE,kBAAkB,EACrC,uBAAuB,EAAE,wBAAwB,EACjD,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EACpE,qBAAqB,EAAE,oBAAoB,EAC3C,WAAW,EACX,QAAQ,EAAE,UAAU,EACpB,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EACzE,OAAO,EACP,kBAAkB,EAClB,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAC7C,uBAAuB,EAAE,kBAAkB,EAC3C,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EACpD,eAAe,EAAE,eAAe,EAAE,cAAc,EAChD,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EACtD,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAChD,cAAc,EAAE,mBAAmB,EACnC,eAAe,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EACnE,sBAAsB,EAAE,uBAAuB,EAC/C,yBAAyB,EAAE,0BAA0B,EAErD,kBAAkB,EAAE,qBAAqB,EAAE,qBAAqB,EAEhE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAC1D,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAClD,eAAe,EACf,aAAa,EAAE,YAAY,EAC3B,mBAAmB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAC7E,cAAc,EACd,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACrD,iBAAiB,EAEjB,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAC1E,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EACzD,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAErD,aAAa,EACb,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAC7D,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,EAC1D,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EACrD,uBAAuB,EAAE,gBAAgB,EAAE,mBAAmB,EAE9D,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAChD,kBAAkB,EAAE,oBAAoB,EACxC,UAAU,EAAE,WAAW,EAAE,aAAa,EACtC,eAAe,EAAE,cAAc,EAE/B,iBAAiB,EAAE,gBAAgB,EACnC,oBAAoB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EACpF,eAAe,EAAE,iBAAiB,EAClC,oBAAoB,EACpB,iBAAiB,EAAE,eAAe,EAClC,kBAAkB,EAAE,oBAAoB,EACxC,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAC5C,OAAO,EAAE,UAAU,EAAE,SAAS,GAC/B,MAAM,+BAA+B,CAAC;AAqCvC;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC;IAC7E,QAAQ,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,mBAAmB,CAAC;CAClH;AAsKD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,SAAS,CAO7C;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,WAAW,CAC/B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,SAAS,GACf,OAAO,CAAC,KAAK,CAAC,CAmgDhB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EACV,MAAM,EAAE,cAAc,EAAE,eAAe,EAExC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAcxF,OAAO,KAAK,EACV,KAAK,EAAE,WAAW,EAGnB,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AA2L3F,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGnG,YAAY,EACV,cAAc,EAAE,UAAU,EAAE,QAAQ,EACpC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EACjD,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAC7C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EACvE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAC7C,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAC5E,WAAW,EAAE,aAAa,EAC1B,cAAc,EAAE,eAAe,EAAE,QAAQ,EACzC,kBAAkB,EAAE,mBAAmB,EACvC,mBAAmB,EAAE,oBAAoB,EACzC,iBAAiB,EAAE,kBAAkB,EACrC,cAAc,EAAE,eAAe,EAC/B,sBAAsB,EAAE,uBAAuB,EAC/C,kBAAkB,EAAE,mBAAmB,EACvC,iBAAiB,EAAE,kBAAkB,EACrC,uBAAuB,EAAE,wBAAwB,EACjD,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EACpE,qBAAqB,EAAE,oBAAoB,EAC3C,WAAW,EACX,QAAQ,EAAE,UAAU,EACpB,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EACzE,OAAO,EACP,kBAAkB,EAClB,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAC7C,uBAAuB,EAAE,kBAAkB,EAC3C,iBAAiB,EAAE,gBAAgB,EACnC,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EACpD,eAAe,EAAE,eAAe,EAAE,cAAc,EAChD,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EACtD,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAChD,cAAc,EAAE,mBAAmB,EACnC,eAAe,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EACnE,sBAAsB,EAAE,uBAAuB,EAC/C,yBAAyB,EAAE,0BAA0B,EAErD,kBAAkB,EAAE,qBAAqB,EAAE,qBAAqB,EAEhE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAC1D,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAClD,eAAe,EACf,aAAa,EAAE,YAAY,EAC3B,mBAAmB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAC7E,cAAc,EACd,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACrD,iBAAiB,EAEjB,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EACvF,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EACzD,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAErD,aAAa,EACb,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAC7D,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,EAC1D,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EACrD,uBAAuB,EAAE,gBAAgB,EAAE,mBAAmB,EAE9D,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAChD,kBAAkB,EAAE,oBAAoB,EACxC,UAAU,EAAE,WAAW,EAAE,aAAa,EACtC,eAAe,EAAE,cAAc,EAE/B,iBAAiB,EAAE,gBAAgB,EACnC,oBAAoB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EACpF,eAAe,EAAE,iBAAiB,EAClC,oBAAoB,EACpB,iBAAiB,EAAE,eAAe,EAClC,kBAAkB,EAAE,oBAAoB,EACxC,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAC5C,OAAO,EAAE,UAAU,EAAE,SAAS,GAC/B,MAAM,+BAA+B,CAAC;AAqCvC;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC;IAC7E,QAAQ,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,mBAAmB,CAAC;CAClH;AAsKD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,SAAS,CAO7C;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,WAAW,CAC/B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,SAAS,GACf,OAAO,CAAC,KAAK,CAAC,CAurDhB"}

package/dist/api/index.js

@@ -26,6 +26,7 @@ import { createRequire } from 'node:module';
 // CF-004: Real factory functions for default wiring
 import { createKernel as realCreateKernel, destroyKernel as realDestroyKernel } from '../kernel/index.js';
 import { createStringEncryption } from '../kernel/crypto/crypto_engine.js';
+import { rotateKey } from '../kernel/crypto/key_rotation.js';
 import { createSubstrate as realCreateSubstrate, getPhase2Migrations } from '../substrate/index.js';
 import { createOrchestration as realCreateOrchestration, getPhase3Migrations } from '../orchestration/index.js';
 import { getPhase4BMigrations } from '../orchestration/migration/004_tenant_isolation.js';
@@ -88,6 +89,10 @@ import { getConflictIndexMigrations } from './migration/031_conflict_index.js';
 // Phase 5: Reasoning migration (v41) + Cognitive API
 import { getReasoningMigrations } from './migration/032_reasoning.js';
 import { createCognitiveNamespace } from './cognitive/cognitive_api.js';
+// v3.0.0 WG-02: Replay Engine
+import { createReplayEngine } from '../substrate/replay/replay_engine.js';
+// v3.0.0 EG-03/04: Trust-to-clearance mapping for classification filtering
+import { getClearanceForTrust } from './agents/trust_progression.js';
 // Phase 9: Security Hardening migration (v42) + Consent Registry
 import { getSecurityHardeningMigrations } from './migration/033_security_hardening.js';
 import { createConsentRegistry } from '../security/consent_registry.js';
@@ -152,9 +157,15 @@ function vectorHydrateSuperseded(conn, claimId) {
     const row = conn.get(`SELECT COUNT(*) as cnt FROM claim_relationships WHERE to_claim_id = ? AND type = 'supersedes'`, [claimId]);
     return (row?.cnt ?? 0) > 0;
 }
-/** Check if a claim is disputed (bidirectional 'contradicts' check, per I-P4-09). */
+/** Check if a claim is disputed (bidirectional 'contradicts' check, per I-P4-09).
+ *  v3.0.0 fix (F-V3P1-001): Only count contradictions where the OTHER claim is still active.
+ *  Previously counted retracted contradictors, leaving disputed=true after retraction.
+ *  Matches the query pattern applied to claim_stores.ts (2 of 3 sites were fixed; this is site 3).
+ */
 function vectorHydrateDisputed(conn, claimId) {
-    const row = conn.get(`SELECT COUNT(*) as cnt FROM claim_relationships WHERE (to_claim_id = ? OR from_claim_id = ?) AND type = 'contradicts'`, [claimId, claimId]);
+    const row = conn.get(`SELECT COUNT(*) as cnt FROM claim_relationships cr
+     JOIN claim_assertions ca ON ca.id = CASE WHEN cr.from_claim_id = ? THEN cr.to_claim_id ELSE cr.from_claim_id END
+     WHERE (cr.to_claim_id = ? OR cr.from_claim_id = ?) AND cr.type = 'contradicts' AND ca.status = 'active'`, [claimId, claimId, claimId]);
     return (row?.cnt ?? 0) > 0;
 }
 export { LimenError } from './errors/limen_error.js';
@@ -326,7 +337,7 @@ function buildOrchestrationAdapter(trackConn, transitionEnforcer) {
         // P0-A: Pass transitionEnforcer for the OrchestrationTransitionService.
         // createOrchestration() uses a passthrough enforcer when undefined (test backward compat).
         try {
-            return realCreateOrchestration(conn, substrate, kernel.audit, kernel.rateLimiter, kernel.time, transitionEnforcer);
+            return realCreateOrchestration(conn, substrate, kernel.audit, kernel.rateLimiter, kernel.time, transitionEnforcer, kernel.events);
         }
         catch (err) {
             conn.close();
@@ -639,6 +650,10 @@ export async function createLimen(config, deps) {
         time: kernel.time,
     });
     const governedOrchestration = governedOrchResult.engine;
+    // v3.0.0 EG-01: Lazy consent registry binding.
+    // consentRegistry is created later (~line 1324) but referenced by claimSystem's
+    // getConsentRegistry getter. This mutable binding captures the eventual reference.
+    let lazyConsentRegistry = null;
     // CCP claim system (closure-local — DC-P4-406, C-SEC-05)
     // Sprint 1: Real evidence validator replaces accept-all stub (CCP-01, CCP-02)
     const evidenceValidator = createEvidenceValidator();
@@ -692,11 +707,17 @@ export async function createLimen(config, deps) {
         // Phase 11+: Lazy getter for vector store — initialized after createClaimSystem.
         // I-P11-30: Retraction deletes stale embedding.
         getVectorStore: () => vectorStore,
+        // v3.0.0 EG-01: Lazy getter for consent registry (initialized after claimSystem).
+        // Returns null until consentRegistry is created (line ~1324).
+        // Safe because assertClaim is only called after createLimen() completes.
+        getConsentRegistry: () => lazyConsentRegistry,
     });
     // WMP working memory system (closure-local — DC-P4-406, C-SEC-05)
     const wmpSystem = createWorkingMemorySystem({
         time: kernel.time,
     });
+    // ── Step 4.6: Replay Engine (v3.0.0 WG-02) ──
+    const replayEngine = createReplayEngine(kernel.audit);
     // ── Step 5: Compose the Limen public API ──
     log({ level: 'info', category: 'init', message: 'Limen initialization complete' });
     const startTime = kernel.time.nowMs();
@@ -750,9 +771,29 @@ export async function createLimen(config, deps) {
     let defaultAgentId = null;
     const getContext = () => {
         if (tenancyMode === 'single') {
-            return buildOperationContext(null, null, defaultAgentId, allPermissions);
+            // v3.0.0 EG-03/04: In single-tenant mode, RBAC is dormant (§3.7).
+            // The default convenience agent has trust_level='untrusted' (I-09: earned trust).
+            // But in single-user mode, we grant full clearance for backward compat — the
+            // classification filter only restricts in multi-tenant mode with explicit RBAC.
+            // When requireRbac is true, resolve actual trust level for classification filtering.
+            let clearance = 4; // full clearance by default in single-tenant
+            if (resolvedConfig.requireRbac && defaultAgentId) {
+                try {
+                    const conn = activeConn;
+                    if (conn) {
+                        const row = conn.get('SELECT trust_level FROM core_agents WHERE id = ?', [defaultAgentId]);
+                        clearance = getClearanceForTrust(row?.trust_level);
+                    }
+                }
+                catch {
+                    // Non-fatal: default to full clearance if lookup fails
+                }
+            }
+            return buildOperationContext(null, null, defaultAgentId, allPermissions, undefined, clearance);
         }
-        // Multi-tenant: context must be provided per-call via session
+        // Multi-tenant: context must be provided per-call via session.
+        // v3.0.0 EG-03/04: No clearance set — classification filter inactive for
+        // multi-tenant until session-based clearance is implemented.
         return buildOperationContext(null, null, null, new Set());
     };
     const getAudit = () => kernel.audit;
@@ -850,6 +891,10 @@ export async function createLimen(config, deps) {
             missionId: convInit.missionId,
             taskId: convInit.taskId,
             maxAutoConfidence,
+            // v3.0.0 WG-04: Pass stability/freshness config for query-time decay computation.
+            // Ensures recall() returns decay-adjusted effectiveConfidence matching search().
+            ...(config?.cognitive?.stability ? { stabilityConfig: config.cognitive.stability } : {}),
+            ...(config?.cognitive?.freshness ? { freshnessThresholds: config.cognitive.freshness } : {}),
         });
         log({ level: 'info', category: 'init', message: 'Convenience API initialized', context: { missionId: convInit.missionId, agentId: String(convInit.agentId) } });
     }
@@ -912,6 +957,26 @@ export async function createLimen(config, deps) {
         // M6-FIX: unref() so this timer does not keep the Node.js process alive
         embeddingTimer.unref();
     }
+    // ── v3.0.0 WG-01: Retention Scheduler Automation ──
+    // Background timer for automatic retention passes.
+    // M6-FIX: unref() so timer does not keep Node.js process alive.
+    let retentionTimer;
+    const retentionIntervalMs = resolvedConfig.maintenance?.retentionIntervalMs ?? 86_400_000;
+    const retentionEnabled = resolvedConfig.maintenance?.retentionEnabled !== false;
+    if (retentionEnabled && retentionIntervalMs > 0) {
+        retentionTimer = setInterval(() => {
+            try {
+                const conn = getConnection();
+                const ctx = getContext();
+                kernel.retention.executeRetention(conn, ctx);
+            }
+            catch (retentionErr) {
+                log({ level: 'warn', category: 'maintenance', message: 'Retention pass failed', context: { error: String(retentionErr) } });
+            }
+        }, retentionIntervalMs);
+        retentionTimer.unref();
+        log({ level: 'info', category: 'init', message: 'Retention scheduler started', context: { intervalMs: retentionIntervalMs } });
+    }
     // Phase 5 + Phase 12: Create CognitiveNamespace for limen.cognitive
     // Phase 12: Extended with consolidation, importance, narrative, verify, auto-connection
     const selfHealingConfig = resolvedConfig.selfHealing ?? DEFAULT_SELF_HEALING_CONFIG;
@@ -957,11 +1022,63 @@ export async function createLimen(config, deps) {
             }
         });
     }
+    // v3.0.0 WG-02: Subscribe to mission.transitioned for replay snapshots
+    // F-V3P1-004: Use orchestrationConn (same DB connection as the transition emitter)
+    // instead of getConnection() (separate DB connection). The handler runs synchronously
+    // INSIDE the proposeTaskGraph transaction, so using a different connection would cause
+    // SQLITE_BUSY errors. orchestrationConn shares the same transaction context.
+    kernel.events.subscribe('mission.transitioned', (event) => {
+        try {
+            const { missionId, newState } = event.payload;
+            if (!missionId)
+                return;
+            // Use orchestrationConn when available (production wiring), fall back to getConnection() (test DI)
+            const conn = orchestrationConn ?? getConnection();
+            const tenantId = conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [missionId])?.tenant_id ?? null;
+            if (newState === 'CREATED' || newState === 'PLANNING') {
+                replayEngine.takeSnapshot(conn, missionId, tenantId, 'mission_start', kernel.time);
+            }
+            else if (newState === 'COMPLETED' || newState === 'FAILED' || newState === 'CANCELLED') {
+                replayEngine.takeSnapshot(conn, missionId, tenantId, 'mission_end', kernel.time);
+            }
+        }
+        catch {
+            // Non-fatal: replay snapshot failure must not break mission transitions
+        }
+    });
+    // v3.0.0 WG-03: Auto-connection suggestions on claim assertion
+    // F-V3P1-010: Hoisted timer to outer scope so shutdown can clear it.
+    const autoSuggestEnabled = resolvedConfig.cognitive?.autoSuggestConnections !== false;
+    let suggestionDebounceTimer;
+    if (autoSuggestEnabled && cognitiveNamespace) {
+        const pendingClaimIds = [];
+        kernel.events.subscribe('claim.asserted', (event) => {
+            const { claimId } = event.payload;
+            if (claimId) {
+                pendingClaimIds.push(claimId);
+                if (suggestionDebounceTimer)
+                    clearTimeout(suggestionDebounceTimer);
+                suggestionDebounceTimer = setTimeout(async () => {
+                    const batch = pendingClaimIds.splice(0);
+                    for (const id of batch) {
+                        try {
+                            await cognitiveNamespace.suggestConnections(id);
+                        }
+                        catch { /* non-fatal */ }
+                    }
+                }, 5000);
+                if (suggestionDebounceTimer.unref)
+                    suggestionDebounceTimer.unref();
+            }
+        });
+    }
     // Phase 9: Create ConsentRegistry for limen.consent (I-P9-23: audit trail)
     const consentRegistry = createConsentRegistry({
         audit: kernel.audit,
         time: kernel.time,
     });
+    // v3.0.0 EG-01: Bind lazy consent registry for ClaimSystem's getConsentRegistry getter.
+    lazyConsentRegistry = consentRegistry;
     // Phase 8: Create Plugin Registry (I-P8-01: before freeze)
     // PluginApi provider returns null until enableApi() is called (I-P8-03).
     let pluginApiRef = null;
@@ -1133,6 +1250,15 @@ export async function createLimen(config, deps) {
                 return consentRegistry.list(conn, ctx, dataSubjectId);
             },
         },
+        // v3.0.0 EG-02: Security operations (key rotation)
+        security: {
+            rotateKey(newMasterKey) {
+                const conn = getConnection();
+                const ctx = getContext();
+                // rotateKey internally wraps in conn.transaction() — no outer transaction needed.
+                return rotateKey({ crypto: kernel.crypto, audit: kernel.audit }, conn, ctx, resolvedConfig.masterKey, newMasterKey);
+            },
+        },
         // Phase 10: Governance Suite (classification, protected predicates, erasure, SOC 2)
         governance: {
             erasure(request) {
@@ -1590,6 +1716,37 @@ export async function createLimen(config, deps) {
                 },
             }, document, options);
         },
+        // v3.0.0 WG-01: Maintenance operations
+        maintenance: {
+            runRetention() {
+                const conn = getConnection();
+                const ctx = getContext();
+                return kernel.retention.executeRetention(conn, ctx);
+            },
+            getRetentionPolicies() {
+                const conn = getConnection();
+                const ctx = getContext();
+                return kernel.retention.getPolicies(conn, ctx);
+            },
+            updateRetentionPolicy(dataType, retentionDays, action) {
+                const conn = getConnection();
+                const ctx = getContext();
+                return kernel.retention.updatePolicy(conn, ctx, dataType, retentionDays, action);
+            },
+        },
+        // v3.0.0 WG-02: Replay verification
+        replay: {
+            verify(missionId) {
+                const conn = getConnection();
+                const tenantId = conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [missionId])?.tenant_id ?? null;
+                return replayEngine.verifyReplay(conn, missionId, tenantId);
+            },
+            getSnapshots(missionId) {
+                const conn = getConnection();
+                const tenantId = conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [missionId])?.tenant_id ?? null;
+                return replayEngine.getSnapshots(conn, missionId, tenantId);
+            },
+        },
         // S3.4, I-05, SD-06: Graceful shutdown
         // CF-011: Each step wrapped in try/catch so that one failure
         // does not prevent subsequent cleanup. Errors are collected.
@@ -1631,6 +1788,24 @@ export async function createLimen(config, deps) {
                     shutdownErrors.push(err instanceof Error ? err : new Error(String(err)));
                 }
             }
+            // v3.0.0 WG-01: Stop retention timer
+            if (retentionTimer) {
+                try {
+                    clearInterval(retentionTimer);
+                }
+                catch (err) {
+                    shutdownErrors.push(err instanceof Error ? err : new Error(String(err)));
+                }
+            }
+            // v3.0.0 WG-03 F-V3P1-010: Stop auto-suggest debounce timer
+            if (suggestionDebounceTimer) {
+                try {
+                    clearTimeout(suggestionDebounceTimer);
+                }
+                catch (err) {
+                    shutdownErrors.push(err instanceof Error ? err : new Error(String(err)));
+                }
+            }
             // 1. Close all active sessions (terminates streams with error chunks)
             try {
                 await sessionManager.closeAll();