@inventarch/compliance 0.0.0-stage → 1.0.0

package/dist/obligations.d.ts

@@ -0,0 +1,157 @@
+import type { EvaluatorCatalog, EvidencePolicy } from './catalog.js';
+import type { Assessment } from './types.js';
+export type ScopeFact = string | number | boolean | null | readonly ScopeFact[] | {
+    readonly [key: string]: ScopeFact;
+};
+/** Captured package/resource scope facts (JSON data). Predicates receive a deeply frozen copy, never the caller's object. */
+export type ScopeFacts = Readonly<Record<string, ScopeFact>>;
+/**
+ * Applicability. not-applicable always carries resolver evidence (D2): either the trusted predicate `name@version`
+ * that returned it, or the package metadata source that disabled a package-adopted obligation.
+ */
+export type Applicability = {
+    readonly status: 'applicable';
+    readonly predicate?: string;
+} | {
+    readonly status: 'not-applicable';
+    readonly reason: string;
+    readonly basis: 'predicate';
+    readonly predicate: string;
+} | {
+    readonly status: 'not-applicable';
+    readonly reason: string;
+    readonly basis: 'package-metadata';
+    readonly source: string;
+} | {
+    readonly status: 'undetermined';
+    readonly reason: string;
+    readonly predicate?: string;
+};
+/** A trusted, versioned host predicate (`name@version`) over captured facts; never native prose or a selector. */
+export type ApplicabilityPredicate = (facts: ScopeFacts) => {
+    readonly status: 'applicable';
+} | {
+    readonly status: 'not-applicable' | 'undetermined';
+    readonly reason: string;
+};
+export interface ObligationAdoption {
+    readonly identity: string;
+    readonly source: 'root' | 'package';
+    readonly mandatory: boolean;
+}
+export interface ObligationOccurrence {
+    /** The selected law, contract or check occurrence identity. */
+    readonly identity: string;
+    readonly word: 'law' | 'contract' | 'check';
+    /** The adoption that selected this occurrence. */
+    readonly adoption: string;
+    /** The requirement fragment, e.g. a contract REQ id, a law obligation label or a profile requirement. */
+    readonly requirement: string;
+    /** The check.runs evaluator id: a built-in CHECK_IDS id or a catalog id. */
+    readonly runs: string;
+    readonly provenance: {
+        readonly path: string;
+        readonly line: number;
+    };
+    readonly applicability?: string;
+    readonly required?: boolean;
+    /** JSON input; validated and normalized by the evaluator's input codec before digesting. */
+    readonly input?: unknown;
+}
+export interface PackageDirective {
+    readonly occurrence: string;
+    readonly requirement: string;
+    readonly action: 'optional' | 'disable';
+    readonly source: string;
+}
+export interface ObligationInput {
+    readonly subject: string;
+    readonly policyRevision: string;
+    readonly catalog: EvaluatorCatalog;
+    /** The catalog digest the policy pins; it must equal catalog.digest. */
+    readonly catalogDigest: string;
+    readonly facts: ScopeFacts;
+    readonly adoptions: readonly ObligationAdoption[];
+    readonly occurrences: readonly ObligationOccurrence[];
+    readonly predicates?: ReadonlyMap<string, ApplicabilityPredicate>;
+    readonly packageMetadata?: readonly PackageDirective[];
+}
+export interface ObligationEvaluator {
+    readonly id: string;
+    readonly contractVersion: string;
+    readonly implementationVersion: string;
+    readonly implementationDigest: string;
+    readonly builtin: boolean;
+    readonly availability: 'supported' | 'unavailable' | 'revoked';
+}
+export interface Obligation {
+    readonly obligationId: string;
+    readonly subject: string;
+    readonly occurrence: string;
+    readonly word: ObligationOccurrence['word'];
+    readonly requirement: string;
+    readonly runs: string;
+    readonly provenance: {
+        readonly path: string;
+        readonly line: number;
+        readonly adoption: string;
+        readonly source: 'root' | 'package';
+    };
+    readonly applicability: Applicability;
+    readonly required: boolean;
+    readonly evaluator: ObligationEvaluator;
+    readonly inputDigest: string;
+    readonly evidencePolicy: EvidencePolicy;
+}
+export interface ObligationResolution {
+    readonly status: 'resolved' | 'refused';
+    readonly subject: string;
+    readonly policyRevision: string;
+    readonly catalogDigest: string;
+    readonly obligations: readonly Obligation[];
+    readonly assessment: Assessment;
+    /** resolutionDigest of this resolution (D2); admission recomputes it. */
+    readonly digest: string;
+}
+export interface ObligationRow {
+    readonly occurrence: string;
+    readonly word: ObligationOccurrence['word'];
+    readonly adoption: string;
+    readonly requirement: string;
+    readonly runs: string;
+    readonly support: 'builtin' | 'supported' | 'unavailable' | 'revoked' | 'unknown';
+    readonly supportReason?: string;
+    readonly contractVersion?: string;
+    readonly implementationVersion?: string;
+    readonly implementationDigest?: string;
+    readonly applicability: Applicability;
+    readonly required: boolean;
+    readonly obligationId: string;
+}
+export interface ObligationExplanation {
+    readonly subject: string;
+    readonly policyRevision: string;
+    readonly catalogFormat: string;
+    readonly catalogDigest: string;
+    readonly rows: readonly ObligationRow[];
+    readonly assessment: Assessment;
+}
+export declare const PREDICATE_ID: RegExp;
+export declare const RESOLUTION_FORMAT = "ia-obligation-resolution/1";
+/** The stable obligation id: `obl:` sha256 of subject, occurrence, requirement and runs. */
+export declare function obligationIdOf(subject: string, occurrence: string, requirement: string, runs: string): string;
+/** The D2 integrity digest over a resolution's canonical content (every field except `digest`). */
+export declare function resolutionDigest(resolution: Omit<ObligationResolution, 'digest'>): string;
+/** True only for a resolution returned by resolveObligations in this module instance (deeply frozen, so unmodified). */
+export declare const isIssuedResolution: (value: unknown) => boolean;
+/**
+ * Pure obligation resolver (C27, OBL-01..03): explicit root adoptions, selected occurrences, a trusted catalog,
+ * the pinned catalog digest, the policy revision and captured facts yield immutable obligations sorted by id.
+ * An unresolved reference or policy conflict refuses with no partial obligations; undetermined required
+ * applicability is a blocking finding; package metadata cannot change a root-adopted obligation (D1).
+ * The result carries its D2 digest and is recorded as issued by this module.
+ */
+export declare function resolveObligations(input: ObligationInput): ObligationResolution;
+/** Inspection (OBL-03): selected definitions, versions, applicability and missing support. Executes no evaluator. */
+export declare function inspectObligations(input: ObligationInput): ObligationExplanation;
+//# sourceMappingURL=obligations.d.ts.map

package/dist/obligations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obligations.d.ts","sourceRoot":"","sources":["../src/obligations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGrE,OAAO,KAAK,EAAE,UAAU,EAAyB,MAAM,YAAY,CAAC;AAEpE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,SAAS,EAAE,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACxH,6HAA6H;AAC7H,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7D;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D;IACE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9F,kHAAkH;AAClH,MAAM,MAAM,sBAAsB,GAAG,CACnC,KAAK,EAAE,UAAU,KAEf;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;IAC5C,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,yGAAyG;IACzG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACxD;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;CAChE;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACzC;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,eAAO,MAAM,YAAY,QAA8C,CAAC;AACxE,eAAO,MAAM,iBAAiB,+BAA+B,CAAC;AAwB9D,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7G;AACD,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,GAAG,MAAM,CAGzF;AACD,wHAAwH;AACxH,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,KAAG,OACmB,CAAC;AAgVxE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,oBAAoB,CAc/E;AACD,qHAAqH;AACrH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,qBAAqB,CAUhF"}

package/dist/obligations.js

@@ -0,0 +1,301 @@
+import { stableSerialize } from '@inventarch/graph';
+import { isBuiltinCheck } from './check-ids.js';
+import { assertCatalog, codecOf, selectEvaluator } from './catalog.js';
+import { compareText, deepFreeze, echo, exactKeys, frozenCopy, jsonData, record, sanitized, sha256 } from './shape.js';
+import { assess } from './types.js';
+export const PREDICATE_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*@[1-9][0-9]*$/;
+export const RESOLUTION_FORMAT = 'ia-obligation-resolution/1';
+const REFUSING = ['IA-COMP-OBLIGATION-UNRESOLVED', 'IA-COMP-OBLIGATION-CONFLICT'];
+const WORDS = ['law', 'contract', 'check'];
+const resolutions = new WeakSet();
+const nonempty = (value) => typeof value === 'string' && value.trim() !== '' && value.length <= 512;
+function note(code, path, line, message, warning = false, identity) {
+    const where = echo(path, 200);
+    return {
+        code,
+        severity: warning ? 'warning' : 'error',
+        path: where,
+        line,
+        ...(identity === undefined ? {} : { identity }),
+        message: `${where}:${line}: ${message}`,
+    };
+}
+/** The stable obligation id: `obl:` sha256 of subject, occurrence, requirement and runs. */
+export function obligationIdOf(subject, occurrence, requirement, runs) {
+    return `obl:${sha256({ subject, occurrence, requirement, runs }).slice('sha256:'.length)}`;
+}
+/** The D2 integrity digest over a resolution's canonical content (every field except `digest`). */
+export function resolutionDigest(resolution) {
+    const { status, subject, policyRevision, catalogDigest, obligations, assessment } = resolution;
+    return sha256({ format: RESOLUTION_FORMAT, status, subject, policyRevision, catalogDigest, obligations, assessment });
+}
+/** True only for a resolution returned by resolveObligations in this module instance (deeply frozen, so unmodified). */
+export const isIssuedResolution = (value) => typeof value === 'object' && value !== null && resolutions.has(value);
+function applicabilityOf(occurrence, input, facts) {
+    const key = occurrence.applicability;
+    if (key === undefined)
+        return { status: 'applicable' };
+    const known = PREDICATE_ID.test(key), predicate = known ? input.predicates?.get(key) : undefined;
+    if (predicate === undefined)
+        return {
+            status: 'undetermined',
+            reason: `Applicability predicate ${known ? key : '<invalid>'} is not installed`,
+            ...(known ? { predicate: key } : {}),
+        };
+    let result;
+    try {
+        result = predicate(facts);
+    }
+    catch {
+        return { status: 'undetermined', reason: `Applicability predicate ${key} failed`, predicate: key };
+    }
+    const shape = record(result) ? result : undefined;
+    if (shape?.['status'] === 'applicable')
+        return { status: 'applicable', predicate: key };
+    if (shape?.['status'] === 'not-applicable' && sanitized(shape['reason']))
+        return { status: 'not-applicable', reason: shape['reason'], basis: 'predicate', predicate: key };
+    if (shape?.['status'] === 'undetermined' && sanitized(shape['reason']))
+        return { status: 'undetermined', reason: shape['reason'], predicate: key };
+    return {
+        status: 'undetermined',
+        reason: `Applicability predicate ${key} returned an invalid result`,
+        predicate: key,
+    };
+}
+function validOccurrence(occurrence) {
+    if (!record(occurrence))
+        return false;
+    const provenance = occurrence['provenance'];
+    return (nonempty(occurrence['identity']) &&
+        nonempty(occurrence['requirement']) &&
+        nonempty(occurrence['runs']) &&
+        nonempty(occurrence['adoption']) &&
+        WORDS.includes(occurrence['word']) &&
+        exactKeys(provenance, ['path', 'line']) &&
+        nonempty(provenance.path) &&
+        Number.isSafeInteger(provenance.line) &&
+        provenance.line >= 1 &&
+        (occurrence['applicability'] === undefined || typeof occurrence['applicability'] === 'string') &&
+        (occurrence['required'] === undefined || typeof occurrence['required'] === 'boolean'));
+}
+const validDirective = (directive) => exactKeys(directive, ['occurrence', 'requirement', 'action', 'source']) &&
+    nonempty(directive.occurrence) &&
+    nonempty(directive.requirement) &&
+    (directive.action === 'optional' || directive.action === 'disable') &&
+    sanitized(directive.source, 160);
+/** Validate and codec-normalize an input, returning its digest or a refusal reason. */
+function inputDigestOf(subject, occurrence, codecId, catalog) {
+    const value = occurrence.input === undefined ? null : occurrence.input;
+    try {
+        if (!jsonData(value))
+            return { reason: 'input is not JSON data' };
+        let normalized = value;
+        if (codecId !== undefined) {
+            const codec = codecOf(catalog, codecId);
+            if (codec === undefined || codec.validate(frozenCopy(value)) !== true)
+                return { reason: `input does not satisfy codec ${codecId}` };
+            if (codec.normalize !== undefined)
+                normalized = codec.normalize(frozenCopy(value));
+            if (!jsonData(normalized))
+                return { reason: `codec ${codecId} normalized the input to non-JSON data` };
+        }
+        return {
+            digest: sha256({ subject, runs: occurrence.runs, requirement: occurrence.requirement, input: normalized }),
+        };
+    }
+    catch {
+        return { reason: `input codec ${codecId ?? ''} failed` };
+    }
+}
+function collect(input) {
+    assertCatalog(input.catalog);
+    if (!nonempty(input.subject) || !nonempty(input.policyRevision))
+        throw new TypeError('Obligation resolution requires an explicit subject and policy revision');
+    if (!jsonData(input.facts) || !record(input.facts))
+        throw new TypeError('Obligation facts must be a JSON object');
+    const { catalog } = input, findings = [], facts = frozenCopy(input.facts);
+    if (input.catalogDigest !== catalog.digest)
+        findings.push(note('IA-COMP-OBLIGATION-CONFLICT', '<policy>', 1, `Policy ${input.policyRevision} pins catalog ${echo(input.catalogDigest, 80)} but ${catalog.digest} was supplied`));
+    const adoptions = new Map();
+    for (const [index, adoption] of input.adoptions.entries()) {
+        if (!exactKeys(adoption, ['identity', 'source', 'mandatory']) ||
+            !nonempty(adoption.identity) ||
+            (adoption.source !== 'root' && adoption.source !== 'package') ||
+            typeof adoption.mandatory !== 'boolean') {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', '<policy>', index + 1, 'Malformed adoption'));
+            continue;
+        }
+        const previous = adoptions.get(adoption.identity);
+        if (previous !== undefined && (previous.source !== adoption.source || previous.mandatory !== adoption.mandatory))
+            findings.push(note('IA-COMP-OBLIGATION-CONFLICT', '<policy>', index + 1, `Adoption ${echo(adoption.identity)} is declared with conflicting source or mandatory status; source precedence cannot weaken a root adoption`));
+        else
+            adoptions.set(adoption.identity, adoption);
+    }
+    const byId = new Map(), rows = new Map();
+    for (const [index, occurrence] of input.occurrences.entries()) {
+        if (!validOccurrence(occurrence)) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', '<occurrences>', index + 1, 'Malformed obligation occurrence: identity, word, adoption, requirement, runs and provenance {path, line} are required'));
+            continue;
+        }
+        const { path, line } = occurrence.provenance, label = `${echo(occurrence.identity)}#${echo(occurrence.requirement)}`;
+        const adoption = adoptions.get(occurrence.adoption);
+        const obligationId = obligationIdOf(input.subject, occurrence.identity, occurrence.requirement, occurrence.runs);
+        // D4: only CHECK_IDS are built in; reserved ids are never entries and so never resolve.
+        const builtin = isBuiltinCheck(occurrence.runs), entry = builtin ? undefined : selectEvaluator(catalog, occurrence.runs);
+        const applicability = applicabilityOf(occurrence, input, facts);
+        const required = (adoption?.source === 'root' && adoption.mandatory) || (occurrence.required ?? adoption?.mandatory ?? true);
+        const support = builtin ? 'builtin' : entry === undefined ? 'unknown' : entry.availability.status;
+        rows.set(`${index}`, {
+            occurrence: occurrence.identity,
+            word: occurrence.word,
+            adoption: occurrence.adoption,
+            requirement: occurrence.requirement,
+            runs: occurrence.runs,
+            support,
+            ...(entry !== undefined && entry.availability.status !== 'supported'
+                ? { supportReason: entry.availability.reason }
+                : {}),
+            ...(entry === undefined
+                ? {}
+                : {
+                    contractVersion: entry.contractVersion,
+                    implementationVersion: entry.implementationVersion,
+                    implementationDigest: entry.implementationDigest,
+                }),
+            applicability,
+            required,
+            obligationId,
+        });
+        if (adoption === undefined) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', path, line, `${label}: adoption ${echo(occurrence.adoption)} is not in the root adoption set`, false, occurrence.identity));
+            continue;
+        }
+        if (!builtin && entry === undefined) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', path, line, `${label}: check.runs '${echo(occurrence.runs)}' is neither built in nor in catalog ${catalog.digest}`, false, occurrence.identity));
+            continue;
+        }
+        const digest = inputDigestOf(input.subject, occurrence, entry?.inputSchemaId, catalog);
+        if ('reason' in digest) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', path, line, `${label}: ${digest.reason}`, false, occurrence.identity));
+            continue;
+        }
+        const obligation = {
+            obligationId,
+            subject: input.subject,
+            occurrence: occurrence.identity,
+            word: occurrence.word,
+            requirement: occurrence.requirement,
+            runs: occurrence.runs,
+            provenance: { path, line, adoption: adoption.identity, source: adoption.source },
+            applicability,
+            required,
+            evaluator: entry === undefined
+                ? {
+                    id: occurrence.runs,
+                    contractVersion: '1.0.0',
+                    implementationVersion: 'builtin',
+                    implementationDigest: `builtin:${occurrence.runs}`,
+                    builtin: true,
+                    availability: 'supported',
+                }
+                : {
+                    id: entry.id,
+                    contractVersion: entry.contractVersion,
+                    implementationVersion: entry.implementationVersion,
+                    implementationDigest: entry.implementationDigest,
+                    builtin: false,
+                    availability: entry.availability.status,
+                },
+            inputDigest: digest.digest,
+            evidencePolicy: entry === undefined ? { kind: 'fresh-run' } : entry.evidencePolicy,
+        };
+        const serial = stableSerialize(obligation), previous = byId.get(obligationId);
+        if (previous !== undefined && previous.serial !== serial)
+            findings.push(note('IA-COMP-OBLIGATION-CONFLICT', path, line, `${label}: selected more than once with different input, applicability or requirement status (occurrence ${index + 1})`, false, occurrence.identity));
+        else
+            byId.set(obligationId, { obligation, serial });
+    }
+    for (const [index, directive] of (input.packageMetadata ?? []).entries()) {
+        if (!validDirective(directive)) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', '<package-metadata>', index + 1, 'Malformed package directive: occurrence, requirement, action optional | disable and a sanitized source are required'));
+            continue;
+        }
+        const matches = [...byId.values()].filter(({ obligation }) => obligation.occurrence === directive.occurrence && obligation.requirement === directive.requirement);
+        const label = `${echo(directive.occurrence)}#${echo(directive.requirement)}`;
+        if (matches.length === 0) {
+            findings.push(note('IA-COMP-OBLIGATION-UNRESOLVED', directive.source, index + 1, `Package metadata names ${label}, which is not a selected obligation`));
+            continue;
+        }
+        for (const match of matches) {
+            const { obligation } = match;
+            // D1: package metadata never changes a root-adopted obligation, whether the root made it mandatory or required.
+            if (obligation.provenance.source === 'root') {
+                findings.push(note('IA-COMP-OBLIGATION-WEAKENED', directive.source, index + 1, `Package metadata cannot ${directive.action === 'disable' ? 'disable' : 'relax'} root-adopted obligation ${label}; it is unchanged`, true, obligation.occurrence));
+                continue;
+            }
+            match.obligation =
+                directive.action === 'optional'
+                    ? { ...obligation, required: false }
+                    : {
+                        ...obligation,
+                        applicability: {
+                            status: 'not-applicable',
+                            reason: `Disabled by package metadata ${directive.source}`,
+                            basis: 'package-metadata',
+                            source: directive.source,
+                        },
+                    };
+        }
+    }
+    const obligations = [...byId.values()]
+        .map(({ obligation }) => obligation)
+        .sort((a, b) => compareText(a.obligationId, b.obligationId));
+    for (const obligation of obligations)
+        if (obligation.required && obligation.applicability.status === 'undetermined')
+            findings.push(note('IA-COMP-OBLIGATION-UNDETERMINED', obligation.provenance.path, obligation.provenance.line, `${echo(obligation.occurrence)}#${echo(obligation.requirement)}: required applicability is undetermined (${obligation.applicability.reason})`, false, obligation.occurrence));
+    const rowList = [...rows.values()]
+        .map((row) => {
+        const final = byId.get(row.obligationId)?.obligation;
+        return final === undefined ? row : { ...row, required: final.required, applicability: final.applicability };
+    })
+        .sort((a, b) => compareText(a.occurrence, b.occurrence) ||
+        compareText(a.requirement, b.requirement) ||
+        compareText(a.runs, b.runs) ||
+        compareText(a.obligationId, b.obligationId));
+    const unique = rowList.filter((row, i) => i === 0 || stableSerialize(row) !== stableSerialize(rowList[i - 1]));
+    return { obligations, rows: unique, findings };
+}
+/**
+ * Pure obligation resolver (C27, OBL-01..03): explicit root adoptions, selected occurrences, a trusted catalog,
+ * the pinned catalog digest, the policy revision and captured facts yield immutable obligations sorted by id.
+ * An unresolved reference or policy conflict refuses with no partial obligations; undetermined required
+ * applicability is a blocking finding; package metadata cannot change a root-adopted obligation (D1).
+ * The result carries its D2 digest and is recorded as issued by this module.
+ */
+export function resolveObligations(input) {
+    const { obligations, findings } = collect(input), refused = findings.some((f) => REFUSING.includes(f.code));
+    const content = {
+        status: refused ? 'refused' : 'resolved',
+        subject: input.subject,
+        policyRevision: input.policyRevision,
+        catalogDigest: input.catalog.digest,
+        obligations: refused ? [] : obligations,
+        assessment: assess('COMP-OBLIGATION', input.subject, findings),
+    };
+    const resolution = deepFreeze({ ...content, digest: resolutionDigest(content) });
+    resolutions.add(resolution);
+    return resolution;
+}
+/** Inspection (OBL-03): selected definitions, versions, applicability and missing support. Executes no evaluator. */
+export function inspectObligations(input) {
+    const { rows, findings } = collect(input);
+    return deepFreeze({
+        subject: input.subject,
+        policyRevision: input.policyRevision,
+        catalogFormat: input.catalog.format,
+        catalogDigest: input.catalog.digest,
+        rows,
+        assessment: assess('COMP-OBLIGATION', input.subject, findings),
+    });
+}
+//# sourceMappingURL=obligations.js.map

package/dist/obligations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obligations.js","sourceRoot":"","sources":["../src/obligations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAmIpC,MAAM,CAAC,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,QAAQ,GAA+B,CAAC,+BAA+B,EAAE,6BAA6B,CAAC,CAAC;AAC9G,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,OAAO,EAAU,CAAC;AAC1C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;AAC1E,SAAS,IAAI,CACX,IAAkB,EAClB,IAAY,EACZ,IAAY,EACZ,OAAe,EACf,OAAO,GAAG,KAAK,EACf,QAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvC,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE;KACxC,CAAC;AACJ,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAkB,EAAE,WAAmB,EAAE,IAAY;IACnG,OAAO,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7F,CAAC;AACD,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,UAAgD;IAC/E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAC/F,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;AACxH,CAAC;AACD,wHAAwH;AACxH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAW,EAAE,CAC5D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACxE,SAAS,eAAe,CAAC,UAAgC,EAAE,KAAsB,EAAE,KAAiB;IAClG,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAClC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,SAAS,KAAK,SAAS;QACzB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,2BAA2B,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,mBAAmB;YAC/E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrC,CAAC;IACJ,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,GAAG,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACxF,IAAI,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACnG,IAAI,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC7E,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,2BAA2B,GAAG,6BAA6B;QACnE,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AACD,SAAS,eAAe,CAAC,UAAmB;IAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACnC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAW,CAAC;QAC5C,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;QACpC,UAAU,CAAC,IAAe,IAAI,CAAC;QAChC,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC;QAC9F,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CACtF,CAAC;AACJ,CAAC;AACD,MAAM,cAAc,GAAG,CAAC,SAAkB,EAAiC,EAAE,CAC3E,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;IAC/B,CAAC,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC;IACnE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACnC,uFAAuF;AACvF,SAAS,aAAa,CACpB,OAAe,EACf,UAAgC,EAChC,OAA2B,EAC3B,OAAyB;IAEzB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;IACvE,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAClE,IAAI,UAAU,GAAY,KAAK,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI;gBACnE,OAAO,EAAE,MAAM,EAAE,gCAAgC,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,OAAO,wCAAwC,EAAE,CAAC;QACzG,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;SAC3G,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,eAAe,OAAO,IAAI,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAMD,SAAS,OAAO,CAAC,KAAsB;IACrC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,wEAAwE,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAClH,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EACvB,QAAQ,GAAc,EAAE,EACxB,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;QACxC,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,6BAA6B,EAC7B,UAAU,EACV,CAAC,EACD,UAAU,KAAK,CAAC,cAAc,iBAAiB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,MAAM,eAAe,CAClH,CACF,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,IACE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzD,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5B,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;YAC7D,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,EACvC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC;YAC9G,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,6BAA6B,EAC7B,UAAU,EACV,KAAK,GAAG,CAAC,EACT,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,2GAA2G,CAC/I,CACF,CAAC;;YACC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsD,EACxE,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,+BAA+B,EAC/B,eAAe,EACf,KAAK,GAAG,CAAC,EACT,uHAAuH,CACxH,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,UAAU,EAC1C,KAAK,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACjH,wFAAwF;QACxF,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAC7C,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,QAAQ,GACZ,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAClG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,EAAE;YACnB,UAAU,EAAE,UAAU,CAAC,QAAQ;YAC/B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,WAAW;gBAClE,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,KAAK,SAAS;gBACrB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;oBAClD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;iBACjD,CAAC;YACN,aAAa;YACb,QAAQ;YACR,YAAY;SACb,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,+BAA+B,EAC/B,IAAI,EACJ,IAAI,EACJ,GAAG,KAAK,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,kCAAkC,EACjF,KAAK,EACL,UAAU,CAAC,QAAQ,CACpB,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,+BAA+B,EAC/B,IAAI,EACJ,IAAI,EACJ,GAAG,KAAK,iBAAiB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,wCAAwC,OAAO,CAAC,MAAM,EAAE,EACtG,KAAK,EACL,UAAU,CAAC,QAAQ,CACpB,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACvF,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,+BAA+B,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAC5G,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAe;YAC7B,YAAY;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,UAAU,CAAC,QAAQ;YAC/B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;YAChF,aAAa;YACb,QAAQ;YACR,SAAS,EACP,KAAK,KAAK,SAAS;gBACjB,CAAC,CAAC;oBACE,EAAE,EAAE,UAAU,CAAC,IAAI;oBACnB,eAAe,EAAE,OAAO;oBACxB,qBAAqB,EAAE,SAAS;oBAChC,oBAAoB,EAAE,WAAW,UAAU,CAAC,IAAI,EAAE;oBAClD,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,WAAW;iBAC1B;gBACH,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;oBAClD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;oBAChD,OAAO,EAAE,KAAK;oBACd,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM;iBACxC;YACP,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,cAAc,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;SACnF,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,EACxC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YACtD,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,6BAA6B,EAC7B,IAAI,EACJ,IAAI,EACJ,GAAG,KAAK,mGAAmG,KAAK,GAAG,CAAC,GAAG,EACvH,KAAK,EACL,UAAU,CAAC,QAAQ,CACpB,CACF,CAAC;;YACC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,+BAA+B,EAC/B,oBAAoB,EACpB,KAAK,GAAG,CAAC,EACT,qHAAqH,CACtH,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACvC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CACjB,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CACrG,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,+BAA+B,EAC/B,SAAS,CAAC,MAAM,EAChB,KAAK,GAAG,CAAC,EACT,0BAA0B,KAAK,sCAAsC,CACtE,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;YAC7B,gHAAgH;YAChH,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,6BAA6B,EAC7B,SAAS,CAAC,MAAM,EAChB,KAAK,GAAG,CAAC,EACT,2BAA2B,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,4BAA4B,KAAK,mBAAmB,EACnI,IAAI,EACJ,UAAU,CAAC,UAAU,CACtB,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,KAAK,CAAC,UAAU;gBACd,SAAS,CAAC,MAAM,KAAK,UAAU;oBAC7B,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;oBACpC,CAAC,CAAC;wBACE,GAAG,UAAU;wBACb,aAAa,EAAE;4BACb,MAAM,EAAE,gBAAgB;4BACxB,MAAM,EAAE,gCAAgC,SAAS,CAAC,MAAM,EAAE;4BAC1D,KAAK,EAAE,kBAAkB;4BACzB,MAAM,EAAE,SAAS,CAAC,MAAM;yBACzB;qBACF,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;SACnC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC;SACnC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,UAAU,IAAI,WAAW;QAClC,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,cAAc;YAC3E,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,iCAAiC,EACjC,UAAU,CAAC,UAAU,CAAC,IAAI,EAC1B,UAAU,CAAC,UAAU,CAAC,IAAI,EAC1B,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,6CAA6C,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,EAC7I,KAAK,EACL,UAAU,CAAC,UAAU,CACtB,CACF,CAAC;IACN,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;SAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;QACrD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IAC9G,CAAC,CAAC;SACD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;QACvC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACzC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAC3B,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAC9C,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,EAC9C,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,UAAoB;QAC9D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QACnC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;QACvC,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC/D,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,qHAAqH;AACrH,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QACnC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QACnC,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC"}

package/dist/profiles.d.ts

@@ -0,0 +1,27 @@
+import type { ObligationOccurrence } from './obligations.js';
+/**
+ * Consumer evaluation profiles (C29, OBL-02). A profile id such as strict-typing-v1 is a consumer contract id, not a
+ * native word: it maps one selected law/contract occurrence to required obligations that host catalog evaluators
+ * discharge. Cases and declarations never satisfy them; only valid receipts do.
+ */
+export declare const EVALUATION_PROFILES: Readonly<{
+    'strict-typing-v1': readonly ["configuration", "included-file-coverage", "compiler-run"];
+}>;
+export type EvaluationProfile = keyof typeof EVALUATION_PROFILES;
+export interface ProfileBinding {
+    readonly occurrence: string;
+    readonly word: ObligationOccurrence['word'];
+    readonly adoption: string;
+    readonly provenance: ObligationOccurrence['provenance'];
+    /** Catalog evaluator id for each profile requirement; built-in CHECK_IDS are refused. */
+    readonly evaluators: Readonly<Record<string, string>>;
+    readonly input?: unknown;
+    readonly applicability?: string;
+}
+/**
+ * Expand a profile into required obligation occurrences with requirement `<profile>/<name>`, for resolveObligations.
+ * Throws TypeError for an unknown profile, a missing or extra requirement mapping, or an evaluator id that is not a
+ * catalog id (built-ins cannot discharge a profile; the real compiler run must come from an installed evaluator).
+ */
+export declare function profileOccurrences(profile: EvaluationProfile, binding: ProfileBinding): readonly ObligationOccurrence[];
+//# sourceMappingURL=profiles.d.ts.map

package/dist/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG7D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;EAE9B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,mBAAmB,CAAC;AACjE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACxD,yFAAyF;IACzF,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AACD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,cAAc,GACtB,SAAS,oBAAoB,EAAE,CAwBjC"}

package/dist/profiles.js

@@ -0,0 +1,40 @@
+import { isBuiltinCheck } from './check-ids.js';
+import { EVALUATOR_ID } from './catalog.js';
+import { exactKeys } from './shape.js';
+/**
+ * Consumer evaluation profiles (C29, OBL-02). A profile id such as strict-typing-v1 is a consumer contract id, not a
+ * native word: it maps one selected law/contract occurrence to required obligations that host catalog evaluators
+ * discharge. Cases and declarations never satisfy them; only valid receipts do.
+ */
+export const EVALUATION_PROFILES = Object.freeze({
+    'strict-typing-v1': Object.freeze(['configuration', 'included-file-coverage', 'compiler-run']),
+});
+/**
+ * Expand a profile into required obligation occurrences with requirement `<profile>/<name>`, for resolveObligations.
+ * Throws TypeError for an unknown profile, a missing or extra requirement mapping, or an evaluator id that is not a
+ * catalog id (built-ins cannot discharge a profile; the real compiler run must come from an installed evaluator).
+ */
+export function profileOccurrences(profile, binding) {
+    const names = EVALUATION_PROFILES[profile];
+    if (!Object.hasOwn(EVALUATION_PROFILES, profile) || names === undefined)
+        throw new TypeError(`Unknown evaluation profile ${String(profile)}`);
+    if (!exactKeys(binding.evaluators, names))
+        throw new TypeError(`${profile} requires exactly the evaluators ${names.join(', ')}`);
+    return Object.freeze(names.map((name) => {
+        const runs = binding.evaluators[name];
+        if (typeof runs !== 'string' || !EVALUATOR_ID.test(runs) || isBuiltinCheck(runs))
+            throw new TypeError(`${profile}/${name} must map to a catalog evaluator id`);
+        return Object.freeze({
+            identity: binding.occurrence,
+            word: binding.word,
+            adoption: binding.adoption,
+            requirement: `${profile}/${name}`,
+            runs,
+            provenance: binding.provenance,
+            required: true,
+            ...(binding.input === undefined ? {} : { input: binding.input }),
+            ...(binding.applicability === undefined ? {} : { applicability: binding.applicability }),
+        });
+    }));
+}
+//# sourceMappingURL=profiles.js.map

package/dist/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,wBAAwB,EAAE,cAAc,CAAU,CAAC;CACxG,CAAC,CAAC;AAYH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,OAAuB;IAEvB,MAAM,KAAK,GAAI,mBAAmE,CAAC,OAAO,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK,SAAS;QACrE,MAAM,IAAI,SAAS,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,GAAG,OAAO,oCAAoC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAClB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,GAAG,OAAO,IAAI,IAAI,qCAAqC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,OAAO,CAAC,UAAU;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,GAAG,OAAO,IAAI,IAAI,EAAE;YACjC,IAAI;YACJ,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;SACzF,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/projections.d.ts

@@ -0,0 +1,51 @@
+import type { CompiledRecord } from '@inventarch/language';
+import type { Assessment } from './types.js';
+export { cite, fieldText, governanceClauses, text } from './record-text.js';
+export { LEGACY_STEWARD_TOOLS, REQUIRE_STEWARD_PROFILES, STEWARD_HOST_TABLE } from './steward-profile.js';
+export declare const PROJECTION_MARKER = "<!-- Generated by tools/projections/generate.ts; edit the cited native records. -->";
+export interface HostArtifact {
+    readonly path: string;
+    readonly text: string;
+}
+export interface HostArtifacts {
+    readonly assessment: Assessment;
+    readonly artifacts: readonly HostArtifact[];
+}
+/** Revision-bound physical membership supplied by an admitted-view composition root. */
+export interface ProjectionMembership {
+    readonly revision: string;
+    readonly members: readonly {
+        readonly path: string;
+        readonly system: string | null;
+        readonly root: string | null;
+    }[];
+}
+type Member = ProjectionMembership['members'][number];
+/** One admitted non-floor system with its uniquely resolved, correctly rooted steward. */
+export interface AdmittedSteward {
+    readonly system: CompiledRecord;
+    readonly member: Member;
+    readonly agent: CompiledRecord;
+}
+export interface Admission {
+    readonly byPath: ReadonlyMap<string, Member>;
+    readonly systems: readonly AdmittedSteward[];
+}
+export declare const invalidAssessment: (message: string) => HostArtifacts;
+/**
+ * Spec §6.1: the refusal conditions every host renderer shares. Checks, in order: a fresh, matching revision;
+ * a portable, non-aliased, correctly rooted membership covering every admitted source; unique record identities;
+ * and, per admitted non-floor system, a single unfragmented steward ref resolving to a uniquely named agent
+ * declared under that system's own membership root. Callers render artifacts from the returned admission.
+ */
+export declare function admittedStewards(records: readonly CompiledRecord[], revision: string, membership: ProjectionMembership): Admission | HostArtifacts;
+export interface RenderOptions {
+    /** Refuse a steward without an `@agent-profile`. Defaults to REQUIRE_STEWARD_PROFILES. */
+    readonly requireStewardProfiles?: boolean;
+}
+/** C22: interpret admitted semantic products; no filesystem or source parser. */
+export declare function renderHostArtifacts(records: readonly CompiledRecord[], revision: string, membership?: ProjectionMembership, _modes?: readonly {
+    readonly invocation: string;
+    readonly meaning: string;
+}[], _options?: RenderOptions): HostArtifacts;
+//# sourceMappingURL=projections.d.ts.map

package/dist/projections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projections.d.ts","sourceRoot":"","sources":["../src/projections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1G,eAAO,MAAM,iBAAiB,wFAAwF,CAAC;AACvH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;CAC7C;AACD,wFAAwF;AACxF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CACtH;AACD,KAAK,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AACtD,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AACD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,KAAG,aAMhD,CAAC;AACL;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,oBAAoB,GAC/B,SAAS,GAAG,aAAa,CA2E3B;AACD,MAAM,WAAW,aAAa;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C;AACD,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,oBAAoB,EACjC,MAAM,CAAC,EAAE,SAAS;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,EAC7E,QAAQ,GAAE,aAAkB,GAC3B,aAAa,CAyCf"}