@allocator-one/rcl 4.4.19

package/dist/evidence/claim-recovery/validation/materials.d.ts

@@ -0,0 +1,19 @@
+export interface RecoveryMaterial {
+    sha256: string;
+    text: string;
+}
+export interface RecoveryMaterialReference {
+    version: 1;
+    rootSha256: string;
+}
+/** Lossless tagged encoding; original object keys cannot masquerade as references.
+ * Large strings (including original JSON) are retained once by their raw digest. */
+export declare function packRecoveryMaterial(value: unknown): {
+    rootSha256: string;
+    materials: RecoveryMaterial[];
+};
+/** Decode only supplied, hash-verified material. Missing/cyclic/unknown encodings
+ * and bounded expansion failures refuse; no filesystem or authority is implied. */
+/** Validate every supplied row before it can be retained or decoded. */
+export declare function validateRecoveryMaterials(materials: readonly RecoveryMaterial[]): Map<string, string>;
+export declare function unpackRecoveryMaterial(rootSha256: string, materials: readonly RecoveryMaterial[]): unknown;

package/dist/evidence/claim-recovery/validation/materials.js

@@ -0,0 +1,160 @@
+import { createHash } from 'node:crypto';
+import { decodeRecoveryDocument, MAX_JSON_DEPTH } from '../../original-run/decode.js';
+const MAX_BYTES = 64 * 1024 * 1024;
+const MAX_MATERIALS = 20_000;
+const MAX_NODES = 500_000;
+const MAX_DECODE_DEPTH = 256;
+const digest = (text) => createHash('sha256').update(text).digest('hex');
+const requireMaterial = (condition) => {
+    if (!condition)
+        throw new Error('recovery_material_conflict');
+};
+/** Lossless tagged encoding; original object keys cannot masquerade as references.
+ * Large strings (including original JSON) are retained once by their raw digest. */
+export function packRecoveryMaterial(value) {
+    const active = new Set();
+    let nodes = 0;
+    const rows = new Map();
+    let bytes = 0;
+    let expanded = 0;
+    const seenStrings = new Set();
+    const expand = (amount) => {
+        expanded += amount;
+        requireMaterial(expanded <= MAX_BYTES);
+    };
+    const retain = (text) => {
+        const sha = digest(text);
+        if (!rows.has(sha)) {
+            bytes += Buffer.byteLength(text);
+            requireMaterial(bytes <= MAX_BYTES && rows.size < MAX_MATERIALS);
+            rows.set(sha, text);
+        }
+        return sha;
+    };
+    const encode = (v, depth) => {
+        requireMaterial(depth <= 128 && ++nodes <= MAX_NODES);
+        if (typeof v === 'string' && Buffer.byteLength(v) > 1024 && !/[\uD800-\uDFFF]/u.test(v)) {
+            const sha = retain(v);
+            if (!seenStrings.has(sha)) {
+                expand(Buffer.byteLength(v));
+                seenStrings.add(sha);
+            }
+            return { node: [3, sha], decodeDepth: 0, documentDepth: 1 };
+        }
+        const reference = (encoded, text = JSON.stringify(encoded.node)) => {
+            // A reference adds one reader level before the retained subtree root.
+            requireMaterial(++nodes <= MAX_NODES);
+            return { node: [4, retain(text)], decodeDepth: encoded.decodeDepth + 1, documentDepth: 1 };
+        };
+        let node;
+        let decodeDepth = 0;
+        let documentDepth = 1;
+        const child = (value, containerDepth) => {
+            let encoded = encode(value, depth + 1);
+            if (encoded.documentDepth + containerDepth > MAX_JSON_DEPTH)
+                encoded = reference(encoded);
+            decodeDepth = Math.max(decodeDepth, encoded.decodeDepth + 1);
+            documentDepth = Math.max(documentDepth, encoded.documentDepth + containerDepth);
+            return encoded.node;
+        };
+        if (v === null || typeof v === 'boolean' || typeof v === 'number' || typeof v === 'string') {
+            requireMaterial(typeof v !== 'number' || (Number.isFinite(v) && Math.abs(v) <= Number.MAX_SAFE_INTEGER && !Object.is(v, -0)));
+            node = [0, v];
+            expand(Buffer.byteLength(JSON.stringify(v)));
+        }
+        else {
+            requireMaterial(typeof v === 'object' && v !== null && !active.has(v));
+            active.add(v);
+            if (Array.isArray(v)) {
+                requireMaterial(v.length <= MAX_NODES - nodes);
+                node = [1, Array.from(v, x => child(x === undefined ? null : x, 2))];
+            }
+            else {
+                requireMaterial(Object.getPrototypeOf(v) === Object.prototype || Object.getPrototypeOf(v) === null);
+                node = [2, Object.entries(v).filter(([, x]) => x !== undefined).map(([k, x]) => {
+                        expand(Buffer.byteLength(k));
+                        return [k, child(x, 3)];
+                    })];
+            }
+            active.delete(v);
+        }
+        const text = JSON.stringify(node);
+        if (Buffer.byteLength(text) > 16384) {
+            const referenced = reference({ node, decodeDepth, documentDepth }, text);
+            node = referenced.node;
+            decodeDepth = referenced.decodeDepth;
+            documentDepth = referenced.documentDepth;
+        }
+        requireMaterial(decodeDepth <= MAX_DECODE_DEPTH);
+        return { node, decodeDepth, documentDepth };
+    };
+    const rootSha256 = retain(JSON.stringify(encode(value, 0).node));
+    return { rootSha256, materials: [...rows].map(([sha256, text]) => ({ sha256, text })) };
+}
+/** Decode only supplied, hash-verified material. Missing/cyclic/unknown encodings
+ * and bounded expansion failures refuse; no filesystem or authority is implied. */
+/** Validate every supplied row before it can be retained or decoded. */
+export function validateRecoveryMaterials(materials) {
+    requireMaterial(Array.isArray(materials) && materials.length <= MAX_MATERIALS);
+    const rows = new Map();
+    let retained = 0;
+    for (const row of materials) {
+        requireMaterial(row && typeof row.text === 'string' && Buffer.from(row.text, 'utf8').toString('utf8') === row.text &&
+            /^[a-f0-9]{64}$/.test(row.sha256) && !rows.has(row.sha256) && digest(row.text) === row.sha256);
+        retained += Buffer.byteLength(row.text);
+        requireMaterial(retained <= MAX_BYTES);
+        rows.set(row.sha256, row.text);
+    }
+    return rows;
+}
+export function unpackRecoveryMaterial(rootSha256, materials) {
+    const rows = validateRecoveryMaterials(materials);
+    let expanded = 0, nodes = 0;
+    const active = new Set();
+    const seenStrings = new Set();
+    const take = (sha) => { requireMaterial(typeof sha === 'string' && /^[a-f0-9]{64}$/.test(sha) && rows.has(sha)); return rows.get(sha); };
+    const parse = (text) => decodeRecoveryDocument(text);
+    const read = (sha, depth) => {
+        requireMaterial(typeof sha === 'string' && !active.has(sha));
+        active.add(sha);
+        const value = decode(parse(take(sha)), depth);
+        active.delete(sha);
+        return value;
+    };
+    const decode = (node, depth) => {
+        requireMaterial(depth <= MAX_DECODE_DEPTH && ++nodes <= MAX_NODES && Array.isArray(node) && node.length === 2);
+        const [tag, value] = node;
+        if (tag === 4)
+            return read(value, depth + 1);
+        if (tag === 3) {
+            const text = take(value);
+            if (!seenStrings.has(value)) {
+                expanded += Buffer.byteLength(text);
+                seenStrings.add(value);
+            }
+            requireMaterial(expanded <= MAX_BYTES);
+            return text;
+        }
+        if (tag === 0) {
+            requireMaterial(value === null || ['string', 'number', 'boolean'].includes(typeof value));
+            expanded += Buffer.byteLength(JSON.stringify(value));
+            requireMaterial(expanded <= MAX_BYTES);
+            return value;
+        }
+        requireMaterial(Array.isArray(value));
+        if (tag === 1)
+            return value.map(x => decode(x, depth + 1));
+        requireMaterial(tag === 2);
+        const object = {};
+        for (const entry of value) {
+            requireMaterial(Array.isArray(entry) && entry.length === 2 && typeof entry[0] === 'string' && !Object.hasOwn(object, entry[0]));
+            const [key, child] = entry;
+            expanded += Buffer.byteLength(key);
+            requireMaterial(expanded <= MAX_BYTES);
+            Object.defineProperty(object, key, { value: decode(child, depth + 1), enumerable: true, writable: true, configurable: true });
+        }
+        return object;
+    };
+    return read(rootSha256, 0);
+}
+//# sourceMappingURL=materials.js.map

package/dist/evidence/claim-recovery/validation/materials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materials.js","sourceRoot":"","sources":["../../../../src/evidence/claim-recovery/validation/materials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAC,cAAc,EAAE,MAAM,8BAA8B,CAAC;AASrF,MAAM,SAAS,GAAC,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC;AAC7B,MAAM,aAAa,GAAC,MAAM,CAAC;AAC3B,MAAM,SAAS,GAAC,OAAO,CAAC;AACxB,MAAM,gBAAgB,GAAC,GAAG,CAAC;AAC3B,MAAM,MAAM,GAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,MAAM,eAAe,GAAC,CAAC,SAAkB,EAAQ,EAAE;IACjD,IAAG,CAAC,SAAS;QACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAClD,CAAC,CAAC;AAyBF;oFACoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAIjD,MAAM,MAAM,GAAC,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,MAAM,IAAI,GAAC,IAAI,GAAG,EAAiB,CAAC;IACpC,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,IAAI,QAAQ,GAAC,CAAC,CAAC;IACf,MAAM,WAAW,GAAC,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAC,CAAC,MAAc,EAAQ,EAAE;QACpC,QAAQ,IAAE,MAAM,CAAC;QACjB,eAAe,CAAC,QAAQ,IAAE,SAAS,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,GAAG,GAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,IAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,IAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/B,eAAe,CAAC,KAAK,IAAE,SAAS,IAAE,IAAI,CAAC,IAAI,GAAC,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,CAAU,EAAC,KAAa,EAAe,EAAE;QACrD,eAAe,CAAC,KAAK,IAAE,GAAG,IAAE,EAAE,KAAK,IAAE,SAAS,CAAC,CAAC;QAChD,IAAG,OAAO,CAAC,KAAG,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAC,IAAI,IAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,GAAG,GAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO,EAAC,IAAI,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,EAAC,WAAW,EAAE,CAAC,EAAC,aAAa,EAAE,CAAC,EAAC,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAC,CAAC,OAAoB,EAAC,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAe,EAAE;YACtF,sEAAsE;YACtE,eAAe,CAAC,EAAE,KAAK,IAAE,SAAS,CAAC,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAC,WAAW,EAAE,OAAO,CAAC,WAAW,GAAC,CAAC,EAAC,aAAa,EAAE,CAAC,EAAE,CAAC;QACxF,CAAC,CAAC;QACF,IAAI,IAAU,CAAC;QACf,IAAI,WAAW,GAAC,CAAC,CAAC;QAClB,IAAI,aAAa,GAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAC,CAAC,KAAc,EAAC,cAAsB,EAAQ,EAAE;YAC1D,IAAI,OAAO,GAAC,MAAM,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAClC,IAAG,OAAO,CAAC,aAAa,GAAC,cAAc,GAAC,cAAc;gBACpD,OAAO,GAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,WAAW,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAC,OAAO,CAAC,WAAW,GAAC,CAAC,CAAC,CAAC;YACxD,aAAa,GAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAC,OAAO,CAAC,aAAa,GAAC,cAAc,CAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC;QACF,IAAG,CAAC,KAAG,IAAI,IAAE,OAAO,CAAC,KAAG,SAAS,IAAE,OAAO,CAAC,KAAG,QAAQ,IAAE,OAAO,CAAC,KAAG,QAAQ,EAAE,CAAC;YAC5E,eAAe,CAAC,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAE,MAAM,CAAC,gBAAgB,IAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnH,IAAI,GAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aACI,CAAC;YACJ,eAAe,CAAC,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,KAAG,IAAI,IAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC;YACzE,MAAM,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC;YACxB,IAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,eAAe,CAAC,CAAC,CAAC,MAAM,IAAE,SAAS,GAAC,KAAK,CAAC,CAAC;gBAC3C,IAAI,GAAC,CAAC,CAAC,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAG,SAAS,CAAA,CAAC,CAAC,IAAI,CAAA,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;iBACI,CAAC;gBACJ,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAG,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAG,IAAI,CAAC,CAAC;gBAC9F,IAAI,GAAC,CAAC,CAAC,EAAC,MAAM,CAAC,OAAO,CAAC,CAA2B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAE,EAAE;wBAChG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC7B,OAAO,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;oBACxB,CAAC,CAAC,CAAC,CAAC;YACN,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,CAAW,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAC,KAAK,EAAE,CAAC;YACjC,MAAM,UAAU,GAAC,SAAS,CAAC,EAAE,IAAI,EAAC,WAAW,EAAC,aAAa,EAAE,EAAC,IAAI,CAAC,CAAC;YACpE,IAAI,GAAC,UAAU,CAAC,IAAI,CAAC;YACrB,WAAW,GAAC,UAAU,CAAC,WAAW,CAAC;YACnC,aAAa,GAAC,UAAU,CAAC,aAAa,CAAC;QACzC,CAAC;QACD,eAAe,CAAC,WAAW,IAAE,gBAAgB,CAAC,CAAC;QAC/C,OAAO,EAAC,IAAI,EAAC,WAAW,EAAC,aAAa,EAAC,CAAC;IAC1C,CAAC,CAAC;IACF,MAAM,UAAU,GAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,UAAU,EAAC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACvF,CAAC;AACD;mFACmF;AACnF,wEAAwE;AACxE,MAAM,UAAU,yBAAyB,CAAC,SAAsC;IAC9E,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAE,SAAS,CAAC,MAAM,IAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAC,IAAI,GAAG,EAAiB,CAAC;IAAC,IAAI,QAAQ,GAAC,CAAC,CAAC;IACpD,KAAI,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC3B,eAAe,CAAC,GAAG,IAAE,OAAO,GAAG,CAAC,IAAI,KAAG,QAAQ,IAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,GAAG,CAAC,IAAI;YACvG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3F,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,eAAe,CAAC,QAAQ,IAAE,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAC,SAAsC;IAC9F,MAAM,IAAI,GAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,QAAQ,GAAC,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC;IACvB,MAAM,MAAM,GAAC,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAC,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,IAAI,GAAC,CAAC,GAAY,EAAU,EAAE,GAAG,eAAe,CAAC,OAAO,GAAG,KAAG,QAAQ,IAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAa,CAAE,CAAC,CAAC,CAAC,CAAC;IAC7J,MAAM,KAAK,GAAC,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAC,CAAC,GAAY,EAAC,KAAa,EAAW,EAAE;QACjD,eAAe,CAAC,OAAO,GAAG,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,GAAa,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,GAAa,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,IAAa,EAAC,KAAa,EAAW,EAAE;QACpD,eAAe,CAAC,KAAK,IAAE,gBAAgB,IAAE,EAAE,KAAK,IAAE,SAAS,IAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,MAAM,KAAG,CAAC,CAAC,CAAC;QACnG,MAAM,CAAC,GAAG,EAAC,KAAK,CAAC,GAAC,IAAiB,CAAC;QACpC,IAAG,GAAG,KAAG,CAAC;YACR,OAAO,IAAI,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;QAC7B,IAAG,GAAG,KAAG,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,IAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAe,CAAC,EAAE,CAAC;gBACrC,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAClC,WAAW,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;YACnC,CAAC;YACD,eAAe,CAAC,QAAQ,IAAE,SAAS,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAG,GAAG,KAAG,CAAC,EAAE,CAAC;YACX,eAAe,CAAC,KAAK,KAAG,IAAI,IAAE,CAAC,QAAQ,EAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YACpF,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,eAAe,CAAC,QAAQ,IAAE,SAAS,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,IAAG,GAAG,KAAG,CAAC;YACR,OAAQ,KAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,eAAe,CAAC,GAAG,KAAG,CAAC,CAAC,CAAC;QACzB,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAI,MAAM,KAAK,IAAI,KAAkB,EAAE,CAAC;YACtC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,MAAM,KAAG,CAAC,IAAE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrH,MAAM,CAAC,GAAG,EAAC,KAAK,CAAC,GAAC,KAGjB,CAAC;YACF,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,eAAe,CAAC,QAAQ,IAAE,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAC,GAAG,EAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,EAAC,UAAU,EAAE,IAAI,EAAC,QAAQ,EAAE,IAAI,EAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/evidence/claim-recovery/validation/native-material.d.ts

@@ -0,0 +1,27 @@
+import type { CurrentClaimProjection } from './current-projection.js';
+import { type RecoveryMaterial } from './materials.js';
+import { type NativeOccurrenceEvidence } from './native-occurrences.js';
+export interface NativeMaterialReference {
+    version: 1;
+    rootSha256: string;
+    sha256s: string[];
+    pendingIdentities: string[];
+    current?: {
+        nativeFingerprint: string;
+        actionableIdentities: string[];
+        readWindow: CurrentClaimProjection['history']['readWindow'];
+    };
+}
+export interface NativeMaterialContent {
+    occurrences?: NativeOccurrenceEvidence;
+    currentProjection?: CurrentClaimProjection;
+}
+export declare function packNativeMaterial(content: NativeMaterialContent): {
+    reference: NativeMaterialReference;
+    materials: RecoveryMaterial[];
+};
+export declare function nativeMaterial(reference: NativeMaterialReference, materials: readonly RecoveryMaterial[]): NativeMaterialContent;
+export declare function operationOccurrences(operation: {
+    occurrences?: NativeOccurrenceEvidence;
+    material?: NativeMaterialReference;
+}, materials: readonly RecoveryMaterial[]): NativeOccurrenceEvidence | undefined;

package/dist/evidence/claim-recovery/validation/native-material.js

@@ -0,0 +1,35 @@
+import { isDeepStrictEqual } from 'node:util';
+import { packRecoveryMaterial, unpackRecoveryMaterial } from './materials.js';
+import { occurrencePendingIdentities } from './native-occurrences.js';
+export function packNativeMaterial(content) {
+    const packed = packRecoveryMaterial(content);
+    return {
+        reference: {
+            version: 1, rootSha256: packed.rootSha256, sha256s: packed.materials.map(m => m.sha256).sort(),
+            pendingIdentities: [...new Set(occurrencePendingIdentities(content.occurrences))].sort(),
+            ...(content.currentProjection ? { current: { nativeFingerprint: content.currentProjection.nativeFingerprint, actionableIdentities: content.currentProjection.actionableIdentities, readWindow: content.currentProjection.history.readWindow } } : {})
+        }, materials: packed.materials
+    };
+}
+export function nativeMaterial(reference, materials) {
+    if (reference?.version !== 1 || !Array.isArray(reference.sha256s) || new Set(reference.sha256s).size !== reference.sha256s.length ||
+        !reference.sha256s.includes(reference.rootSha256))
+        throw new Error('native_recovery_material_conflict');
+    const rows = reference.sha256s.map(sha => {
+        const found = materials.filter(m => m.sha256 === sha);
+        if (found.length !== 1)
+            throw new Error('native_recovery_material_unavailable');
+        return found[0];
+    });
+    const content = unpackRecoveryMaterial(reference.rootSha256, rows);
+    if (content.currentProjection && ![1, 2].includes(content.currentProjection.version) ||
+        !isDeepStrictEqual(packNativeMaterial(content).reference, reference))
+        throw new Error('native_recovery_material_conflict');
+    return content;
+}
+export function operationOccurrences(operation, materials) {
+    if (operation.material && operation.occurrences)
+        throw new Error('native_recovery_material_conflict');
+    return operation.material ? nativeMaterial(operation.material, materials).occurrences : operation.occurrences;
+}
+//# sourceMappingURL=native-material.js.map

package/dist/evidence/claim-recovery/validation/native-material.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-material.js","sourceRoot":"","sources":["../../../../src/evidence/claim-recovery/validation/native-material.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAC,sBAAsB,EAAwB,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,2BAA2B,EAAgC,MAAM,yBAAyB,CAAC;AAgBpG,MAAM,UAAU,kBAAkB,CAAC,OAA8B;IAI/D,MAAM,MAAM,GAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,SAAS,EAAE;YACT,OAAO,EAAE,CAAC,EAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YAC5F,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YACxF,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAA,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAC,oBAAoB,EAAE,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,EAAC,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAA,CAAC,CAAA,EAAE,CAAC;SACjP,EAAC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,SAAkC,EAAC,SAAsC;IACtG,IAAG,SAAS,EAAE,OAAO,KAAG,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAE,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,KAAG,SAAS,CAAC,OAAO,CAAC,MAAM;QACtH,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACrC,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;QAAC,IAAG,KAAK,CAAC,MAAM,KAAG,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAC,sBAAsB,CAAC,SAAS,CAAC,UAAU,EAAC,IAAI,CAA0B,CAAC;IACzF,IAAG,OAAO,CAAC,iBAAiB,IAAE,CAAE,CAAC,CAAC,EAAC,CAAC,CAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC7F,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,SAAS,EAAC,SAAS,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,SAGpC,EAAC,SAAsC;IACtC,IAAG,SAAS,CAAC,QAAQ,IAAE,SAAS,CAAC,WAAW;QAC1C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,QAAQ,CAAA,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,WAAW,CAAA,CAAC,CAAA,SAAS,CAAC,WAAW,CAAC;AAC5G,CAAC"}

package/dist/evidence/claim-recovery/validation/native-occurrences.d.ts

@@ -0,0 +1,79 @@
+import { type NativeCorrectionAnchor } from './anchors.js';
+import type { AcceptedOccurrenceTransfer, CarrierProjectionInput, OccurrenceCarrierProjection, OccurrenceCarrierSelector } from './carrier-types.js';
+import type { ClaimDispositionInput, ReceiptAttribution } from './occurrence-types.js';
+import { type EventReceiptScope, type StoredEventReceipt } from './receipts.js';
+export interface AcceptedClaimDisposition {
+    preparation: ClaimDispositionInput;
+    receipt: StoredEventReceipt;
+    actorUserId: string;
+}
+export type NativeCarrierInventory = Omit<CarrierProjectionInput, 'transfers' | 'nativePredecessors'>;
+export interface NativeOccurrenceInput {
+    transfers?: readonly AcceptedOccurrenceTransfer[];
+    dispositions?: readonly AcceptedClaimDisposition[];
+    carriers?: readonly NativeCarrierInventory[];
+}
+/** Selectors for a future authenticated reader, never caller-supplied proof flags. */
+export type NativeOccurrenceReadRequirement = {
+    kind: 'selected-event-receipts';
+    scope: EventReceiptScope;
+    eventIds: string[];
+} | {
+    kind: 'carrier-inventory';
+    carrier: OccurrenceCarrierSelector;
+    firstRound: number;
+    lastRound: number;
+} | {
+    kind: 'eligible-confirmation';
+    scope: EventReceiptScope;
+    target: string;
+    claimIdentity: string;
+    afterRound: number;
+    afterReceivedAt: string;
+    assertionEventId: string;
+};
+export interface NativeOccurrenceProjection {
+    qualification: 'supplied-content-only';
+    /** No selected API or complete inventory read provenance is available in this slice. */
+    readProvenance: 'unavailable';
+    carriers: Array<{
+        content: OccurrenceCarrierProjection;
+        unresolved: ['authenticated-inventory-unavailable'];
+    }>;
+    dispositions: Array<{
+        claimIdentity: string;
+        splitEventId: string;
+        verdict: 'fixed' | 'dismissed';
+        mode: 'fresh' | 'preserved';
+        asserting: ReceiptAttribution;
+        assertion: ReceiptAttribution;
+        original?: ReceiptAttribution;
+        supersedes: string | null;
+        standing: 'unresolved';
+        unresolved: Array<'authenticated-selected-receipt-unavailable' | 'eligible-confirmation-unavailable'>;
+    }>;
+    readRequirements: NativeOccurrenceReadRequirement[];
+}
+export interface NativeOccurrenceEvidence {
+    version: 1;
+    transfers: AcceptedOccurrenceTransfer[];
+    dispositions: AcceptedClaimDisposition[];
+    carriers: NativeCarrierInventory[];
+    projection: NativeOccurrenceProjection;
+}
+/** @internal Canonical JSON-like evidence dedupe with linear row comparisons. */
+export declare function cloneUniqueEvidenceRows<T>(rows: readonly T[]): T[];
+/**
+ * Replay exact supplied acceptance content. Neither retained bytes nor a
+ * positive content projection authenticate a remote read. No old key is
+ * subtracted and no disposition receives gate standing here.
+ */
+export declare function deriveNativeOccurrenceEvidence(input: NativeOccurrenceInput, context: {
+    target: string;
+    sourceJson: string;
+    nativeSourceJsons?: string[];
+    anchors: NativeCorrectionAnchor[];
+    previous: NativeOccurrenceEvidence[];
+}): NativeOccurrenceEvidence | undefined;
+/** Retain adverse/unknown carriers. Recovery cannot manufacture a gating source. */
+export declare function occurrencePendingIdentities(evidence: NativeOccurrenceEvidence | undefined): string[];

package/dist/evidence/claim-recovery/validation/native-occurrences.js

@@ -0,0 +1,187 @@
+import { isDeepStrictEqual } from 'node:util';
+import { correctionAnchor } from './anchors.js';
+import { projectOccurrenceCarrier } from './carrier-projection.js';
+import { prepareClaimDisposition, prepareObligationTransfer } from './occurrence.js';
+import { instant } from './primitives.js';
+import { isStoredEventReceipt, matchesPreparedEventReceipt } from './receipts.js';
+import { stableStringify } from '../../../report/run-header.js';
+const requireEvidence = (condition) => { if (!condition)
+    throw new Error('native_recovery_occurrence_conflict'); };
+const time = (value) => BigInt(instant(value));
+const attribution = (r) => ({ eventId: r.id, actorUserId: r.actor_user_id,
+    occurredAt: r.occurred_at, receivedAt: r.received_at, sequence: r.sequence });
+/** @internal Canonical JSON-like evidence dedupe with linear row comparisons. */
+export function cloneUniqueEvidenceRows(rows) {
+    const buckets = new Map();
+    const unique = [];
+    for (const row of rows) {
+        const canonical = stableStringify(row);
+        const bucket = buckets.get(canonical) ?? [];
+        if (bucket.some(existing => isDeepStrictEqual(existing, row)))
+            continue;
+        const retained = structuredClone(row);
+        bucket.push(retained);
+        buckets.set(canonical, bucket);
+        unique.push(retained);
+    }
+    return unique;
+}
+function carrierKey(c) {
+    return JSON.stringify([c.scope.base_url, c.scope.org_id, c.scope.repo.toLowerCase(), c.scope.pr_number, c.target,
+        c.scope.run_id, c.classificationId, c.identity, c.kind]);
+}
+function transferCarrier(proof) {
+    const p = proof.preparation;
+    const { actorUserId: _actor, eventSequence: _sequence, ...selector } = p.carrierContext;
+    return { ...selector, kind: p.carrierKind, classificationId: p.carrier.classification.id, identity: p.carrierIdentity };
+}
+function bindSplit(split, anchors) {
+    const matches = anchors.filter(a => a.identity === split.selection.identity);
+    requireEvidence(matches.length === 1);
+    const anchor = matches[0];
+    // A historical anchor may predate stored chronology. Rebuild its original
+    // content, then independently match the stronger supplied stored receipt.
+    const expected = correctionAnchor(split.selection, anchor.receipt, split.actorUserId, anchor.operationId);
+    requireEvidence(isDeepStrictEqual(expected, anchor) && matchesPreparedEventReceipt(split.receipt, anchor.eventJson, split.selection.scope, split.actorUserId));
+    if ('sequence' in anchor.receipt || 'received_at' in anchor.receipt)
+        requireEvidence(isDeepStrictEqual(anchor.receipt, split.receipt));
+}
+function consistentReceipts(receipts) {
+    for (const select of [(r) => r.id, (r) => `${r.run_id}:${r.sequence}`]) {
+        const seen = new Map();
+        for (const receipt of receipts) {
+            const key = select(receipt);
+            const old = seen.get(key);
+            requireEvidence(!old || isDeepStrictEqual(old, receipt));
+            seen.set(key, receipt);
+        }
+    }
+}
+function sourceReceipts(split) {
+    return [split.receipt, split.source.classification, ...split.source.corrections];
+}
+/**
+ * Replay exact supplied acceptance content. Neither retained bytes nor a
+ * positive content projection authenticate a remote read. No old key is
+ * subtracted and no disposition receives gate standing here.
+ */
+export function deriveNativeOccurrenceEvidence(input, context) {
+    for (const rows of [input.transfers, input.dispositions, input.carriers])
+        requireEvidence(rows === undefined || Array.isArray(rows));
+    if (![input.transfers, input.dispositions, input.carriers].some(rows => rows?.length))
+        return undefined;
+    const transferRows = [...context.previous.flatMap(p => p.transfers), ...input.transfers ?? []];
+    const dispositionRows = [...context.previous.flatMap(p => p.dispositions), ...input.dispositions ?? []];
+    const inventories = [...context.previous.flatMap(p => p.carriers), ...input.carriers ?? []];
+    requireEvidence(transferRows.length + dispositionRows.length + inventories.length <= 2000);
+    const transfers = cloneUniqueEvidenceRows(transferRows);
+    const dispositions = cloneUniqueEvidenceRows(dispositionRows);
+    const receipts = [];
+    const requirements = [];
+    const selected = (scope, rows) => {
+        receipts.push(...rows);
+        requirements.push({ kind: 'selected-event-receipts', scope, eventIds: [...new Set(rows.map(r => r.id))].sort() });
+    };
+    const ensureTarget = (split) => {
+        requireEvidence(split.selection.target === context.target);
+        bindSplit(split, context.anchors);
+    };
+    const selectors = new Map();
+    for (const proof of transfers) {
+        const p = proof.preparation;
+        ensureTarget(p.split);
+        const prepared = prepareObligationTransfer(p);
+        const scope = p.carrierContext.scope;
+        requireEvidence(proof.actorUserId === p.actorUserId && isStoredEventReceipt(proof.receipt, scope) &&
+            matchesPreparedEventReceipt(proof.receipt, JSON.stringify(prepared.event), scope, proof.actorUserId) &&
+            proof.receipt.sequence > p.carrierContext.eventSequence &&
+            [p.split.receipt, p.carrier.classification, ...p.carrier.corrections].every(r => time(proof.receipt.received_at) >= time(r.received_at)));
+        const selector = JSON.stringify([carrierKey(transferCarrier(proof)), p.split.selection.scope.run_id,
+            p.sourceContext.reportSha256, p.split.selection.findingRef]);
+        requireEvidence(!selectors.has(selector) || selectors.get(selector) === proof.receipt.id);
+        selectors.set(selector, proof.receipt.id);
+        selected(scope, [proof.receipt, p.carrier.classification, ...p.carrier.corrections]);
+        selected(p.split.selection.scope, sourceReceipts(p.split));
+    }
+    const projected = [];
+    const latest = new Map();
+    for (const proof of dispositions.sort((a, b) => time(a.receipt.received_at) < time(b.receipt.received_at) ? -1 :
+        time(a.receipt.received_at) > time(b.receipt.received_at) ? 1 : a.receipt.run_id.localeCompare(b.receipt.run_id) ||
+            a.receipt.sequence - b.receipt.sequence)) {
+        const p = proof.preparation;
+        ensureTarget(p.split);
+        const prepared = prepareClaimDisposition(p);
+        const scope = p.sourceContext.scope;
+        requireEvidence(proof.actorUserId === p.actorUserId && isStoredEventReceipt(proof.receipt, scope) &&
+            matchesPreparedEventReceipt(proof.receipt, JSON.stringify(prepared.event), scope, proof.actorUserId) &&
+            proof.receipt.sequence > p.sourceContext.eventSequence && time(proof.receipt.received_at) >= time(p.split.receipt.received_at) &&
+            (p.laterSources ?? []).flatMap(source => [source.classification, ...source.corrections])
+                .every(receipt => time(proof.receipt.received_at) >= time(receipt.received_at)));
+        const previous = latest.get(p.split.selection.identity);
+        // A predecessor must be fully replayable too, not just a plausible payload.
+        requireEvidence(p.previousDispositionEventId === (previous?.receipt.id ?? null) &&
+            (!previous || isDeepStrictEqual(p.previousDisposition, previous.receipt) && time(proof.receipt.received_at) >= time(previous.receipt.received_at)));
+        latest.set(p.split.selection.identity, proof);
+        const asserting = attribution(proof.receipt);
+        const assertion = prepared.assertionReceipt.kind === 'preserved' ? prepared.assertionReceipt.receipt : asserting;
+        projected.push({ claimIdentity: p.split.selection.identity, splitEventId: p.split.receipt.id, verdict: p.verdict,
+            mode: p.mode, asserting, assertion, ...(prepared.originalVerdictAttribution ? { original: prepared.originalVerdictAttribution } : {}),
+            supersedes: p.previousDispositionEventId, standing: 'unresolved', unresolved: ['authenticated-selected-receipt-unavailable',
+                ...(p.verdict === 'fixed' ? ['eligible-confirmation-unavailable'] : [])] });
+        selected(scope, [proof.receipt, ...sourceReceipts(p.split), ...(p.originalVerdict ? [p.originalVerdict] : [])]);
+        for (const later of p.laterSources ?? [])
+            selected(later.scope, [later.classification, ...later.corrections]);
+        if (p.verdict === 'fixed')
+            requirements.push({ kind: 'eligible-confirmation', scope, target: context.target,
+                claimIdentity: p.split.selection.identity, afterRound: p.sourceContext.round,
+                afterReceivedAt: assertion.receivedAt, assertionEventId: assertion.eventId });
+    }
+    consistentReceipts(receipts);
+    const currentInventories = new Map();
+    for (const inventory of inventories) {
+        requireEvidence(inventory.carrier.target === context.target && context.anchors.some(a => a.destination.base_url === inventory.carrier.scope.base_url && a.destination.org_id === inventory.carrier.scope.org_id &&
+            a.destination.repo.toLowerCase() === inventory.carrier.scope.repo.toLowerCase() && a.destination.pr_number === inventory.carrier.scope.pr_number));
+        currentInventories.set(carrierKey(inventory.carrier), inventory);
+    }
+    // A transfer without a supplied inventory is still retained, with explicit
+    // missing source residuals; it cannot silently disappear from the projection.
+    for (const proof of transfers) {
+        const carrier = transferCarrier(proof);
+        const key = carrierKey(carrier);
+        if (!currentInventories.has(key))
+            currentInventories.set(key, { carrier, inventoryStatus: 'incomplete', sources: [] });
+    }
+    const carriers = [];
+    for (const inventory of currentInventories.values()) {
+        const content = projectOccurrenceCarrier({ ...inventory, transfers, nativePredecessors: [{ sourceJson: context.sourceJson,
+                    ...(context.nativeSourceJsons ? { nativeSourceJsons: context.nativeSourceJsons } : {}) }] });
+        // Inventory contradictions are residual evidence, not deletion of previously
+        // accepted transfers. Include disposition source receipts in this comparison.
+        for (const source of inventory.sources)
+            for (const r of [...source.classifications ?? [], ...source.corrections ?? []]) {
+                if (receipts.some(p => (p.id === r.id || p.run_id === r.run_id && p.sequence === r.sequence) && !isDeepStrictEqual(p, r))) {
+                    content.residuals.push({ reason: r.kind === 'round_processed' ? 'classification-conflict' : 'correction-conflict',
+                        source: source.selector, eventIds: [r.id] });
+                    content.coverage = 'residuals-present';
+                }
+            }
+        content.residuals = cloneUniqueEvidenceRows(content.residuals);
+        carriers.push({ content, unresolved: ['authenticated-inventory-unavailable'] });
+        requirements.push({ kind: 'carrier-inventory', carrier: inventory.carrier,
+            firstRound: inventory.carrier.kind === 'legacy_pending' ? 1 : inventory.carrier.round, lastRound: inventory.carrier.round });
+    }
+    return structuredClone({ version: 1, transfers: [...input.transfers ?? []], dispositions: [...input.dispositions ?? []],
+        carriers: [...input.carriers ?? []], projection: { qualification: 'supplied-content-only', readProvenance: 'unavailable',
+            carriers, dispositions: projected, readRequirements: cloneUniqueEvidenceRows(requirements) } });
+}
+/** Retain adverse/unknown carriers. Recovery cannot manufacture a gating source. */
+export function occurrencePendingIdentities(evidence) {
+    return evidence?.projection.carriers.filter(({ content }) => {
+        const knownNonGating = content.carrier.kind === 'classified_group' && content.occurrences.length > 0 &&
+            content.occurrences.every(member => member.gating === 'none') && content.residuals.every(residual => residual.reason === 'untransferred-occurrence' && content.occurrences.some(member => member.gating === 'none' && isDeepStrictEqual(member.selector, residual.occurrence)));
+        // Existing native pending entries are independently preserved by the caller;
+        // this only avoids adding a new obligation from proven nongating content.
+        return !knownNonGating;
+    }).map(c => c.content.carrier.identity) ?? [];
+}
+//# sourceMappingURL=native-occurrences.js.map

package/dist/evidence/claim-recovery/validation/native-occurrences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-occurrences.js","sourceRoot":"","sources":["../../../../src/evidence/claim-recovery/validation/native-occurrences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAA+B,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAErF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAmD,MAAM,eAAe,CAAC;AACnI,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAqChE,MAAM,eAAe,GAAG,CAAC,SAAkB,EAAQ,EAAE,GAAG,IAAI,CAAC,SAAS;IAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClI,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,MAAM,WAAW,GAAG,CAAC,CAAqB,EAAsB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa;IAC/G,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChF,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAI,IAAkB;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,UAAU,CAAC,CAA4B;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM;QAC9G,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,eAAe,CAAC,KAAiC;IACxD,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IAC5B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC;IACxF,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC;AAC1H,CAAC;AACD,SAAS,SAAS,CAAC,KAA4B,EAAE,OAAiC;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7E,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1G,eAAe,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,2BAA2B,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAChH,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,aAAa,IAAI,MAAM,CAAC,OAAO;QAAE,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AACzI,CAAC;AACD,SAAS,kBAAkB,CAAC,QAA8B;IACxD,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAqB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvD,eAAe,CAAC,CAAC,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAA4B;IAClD,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAA4B,EAAE,OAG5E;IACC,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrI,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxG,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,eAAe,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACxG,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC5F,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAsC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAAE,IAA0B,EAAE,EAAE;QACxE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5I,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,KAA4B,EAAE,EAAE;QACpD,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChG,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC;QACpF,eAAe,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;YAC/F,2BAA2B,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;YACpG,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,cAAc,CAAC,aAAa;YACvD,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5I,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;YACjG,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,eAAe,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrI,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACrF,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAA+C,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9G,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9G,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;QACjF,eAAe,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;YAC/F,2BAA2B,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;YACpG,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9H,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;iBACrF,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxD,4EAA4E;QAC5E,eAAe,CAAC,CAAC,CAAC,0BAA0B,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;YAC7E,CAAC,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,SAAS,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;YAC9G,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,UAAU,EAAE,CAAC,CAAC,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,4CAA4C;gBACzH,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,mCAA4C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACzF,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChH,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,EAAE;YAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9G,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACzG,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK;gBAC5E,eAAe,EAAE,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkC,CAAC;IACrE,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACtF,CAAC,CAAC,WAAW,CAAC,QAAQ,KAAK,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;YACtH,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACrJ,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,2EAA2E;IAC3E,8EAA8E;IAC9E,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,QAAQ,GAA2C,EAAE,CAAC;IAC5D,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;oBACvH,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,6EAA6E;QAC7E,8EAA8E;QAC9E,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1H,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,qBAAqB;wBAC/G,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAAC,OAAO,CAAC,QAAQ,GAAG,mBAAmB,CAAC;gBACzF,CAAC;YACH,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;QAChF,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO;YACvE,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACrH,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa;YACtH,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,QAA8C;IACxF,OAAO,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAClG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAClG,QAAQ,CAAC,MAAM,KAAK,0BAA0B,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAClF,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5F,6EAA6E;QAC7E,0EAA0E;QAC1E,OAAO,CAAC,cAAc,CAAC;IACzB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC"}

package/dist/evidence/claim-recovery/validation/native-state.d.ts

@@ -0,0 +1,45 @@
+import type { RecoveryMaterial } from './materials.js';
+import { type NativeCorrectionAnchor } from './anchors.js';
+import type { ConvergeRunState } from './types.js';
+import type { SourcePathRequirement } from './sources.js';
+export declare const MAX_NATIVE_RECOVERY_SNAPSHOT_BYTES: number;
+export declare function verifyNativeRecoveryLineage(sourceJson: string, target: string, nativeSourceJsons?: string[]): {
+    state: ConvergeRunState;
+    original: ConvergeRunState;
+    legacy?: ConvergeRunState;
+    reservedIdentities: string[];
+};
+/** @internal Validate one new identity batch against retained anchors in linear time. */
+export declare function validateAnchorIdentityBatch(prior: readonly Pick<NativeCorrectionAnchor, 'identity'>[], anchors: readonly Pick<NativeCorrectionAnchor, 'identity'>[], findings: Readonly<Record<string, unknown>>): boolean;
+/** @internal Pure retained-material projection used by validation regressions. */
+export declare function recoveredDismissalsByRound(state: ConvergeRunState, materials: RecoveryMaterial[], snapshots: ReadonlyMap<string, string>): Map<number, Map<string, string>>;
+export declare function recoveryAnchors(state: ConvergeRunState): NativeCorrectionAnchor[];
+/** All native resolution consumers must count independent recovered occurrences. */
+export declare function effectivePendingIdentities(state: ConvergeRunState): string[];
+/** Exact bytes supplied by an outer reader; no filesystem or authenticated-read qualification is implied. */
+export interface RetainedNativeEvidence {
+    sourceJson: string;
+    target: string;
+    reports: string[];
+    nativeSourceJsons?: string[];
+    recoveryMaterials?: RecoveryMaterial[];
+}
+export interface LegacyClaimEvidence {
+    kind: 'legacy-identity';
+    identity: string;
+    /** Present only when recorded in the original native entry. */
+    recordedPendingRound?: number;
+    /** Existing migration rule, reported separately; no migration or descriptor is created. */
+    migrationPendingRound?: number;
+}
+export interface ContentValidatedNative {
+    qualification: 'content-only';
+    state: ConvergeRunState;
+    sourceSha256: string;
+    reservedIdentities: string[];
+    actionableIdentities: string[];
+    legacyClaims: LegacyClaimEvidence[];
+    /** Unperformed physical path/private-directory checks required before any effect. */
+    filesystemRequirements: SourcePathRequirement[];
+}
+export declare function validateRetainedNativeEvidence(input: RetainedNativeEvidence): ContentValidatedNative;