Patch Changes
- 25d839d: Type-safety / legacy cleanup (#1196, KPI-9 Phase A).
SecurityChecker's parallel legacy branch is retired:rolePermissions/roleHierarchyconstructor options are normalized once into aStaticRoleProvider(a passedRoleHierarchyinstance now contributes its config to the provider instead of living in a shadow field) — the config surface is unchanged and back-compat is test-locked. New publichasSecurityChecker()onEntityAuthAdapter;EntityManagerno longer reaches into the private_securityCheckerfield through a cast. Phase B complete: all 13 kernel split files converted fromtype Self = anyto their real prototype shapes (Kernel/KernelContext) — with the 4 entity files already onEntityManagerInternal, all 17 prototype-patched files are now this-typed. The typing immediately caught real drift: the #1201 optionsparentParamMode/routeParamResolverwere missing from the KernelContext-sideKernelOptionsview — now declared.