life-as-api 0.2.0

package/dist/crypto/claim-serializer.d.ts

@@ -0,0 +1,26 @@
+import type { ClaimId, ContractId, ISOTime, PersonId, SourceId } from "../types/ids.js";
+import type { ClaimPredicate, StoredClaim } from "../types/claim.js";
+import type { CryptoBoundary, EncryptedBlob } from "./types.js";
+export interface SerializedClaim {
+    readonly id: ClaimId;
+    readonly sourceId: SourceId;
+    readonly subject: PersonId;
+    readonly predicate: ClaimPredicate;
+    readonly validFrom: ISOTime;
+    readonly validTo?: ISOTime;
+    readonly recordedAt: ISOTime;
+    readonly recordedSeq: number;
+    readonly retracts?: ClaimId;
+    readonly supersedes?: ClaimId;
+    readonly overrides?: ClaimId;
+    readonly contractId?: ContractId;
+    readonly confidence?: number;
+    readonly serializerVersion: string;
+    readonly encryptedPayload: EncryptedBlob;
+}
+export declare class ClaimSerializer {
+    private readonly _crypto;
+    constructor(_crypto: CryptoBoundary);
+    serializeClaimForPersistence(claim: StoredClaim): Promise<SerializedClaim>;
+    deserializeClaimFromPersistence(serialized: SerializedClaim): Promise<StoredClaim>;
+}

package/dist/crypto/claim-serializer.js

@@ -0,0 +1,59 @@
+// Slice-05: ClaimSerializer — persistence boundary adapter.
+//
+// Converts StoredClaim ↔ SerializedClaim.
+// payload is encrypted via CryptoBoundary; all ClaimMeta fields remain plaintext.
+//
+// CRYPTO_PAYLOAD_AT_REST_001: encryptedPayload replaces plaintext payload in SerializedClaim.
+// CRYPTO_METADATA_PLAINTEXT_ACCEPTED_001: metadata fields not encrypted (documented risk).
+// CRYPTO_ROUND_TRIP_001: serialize → deserialize restores byte-identical payload.
+//
+// This file DOES NOT import crypto primitives. It depends on CryptoBoundary interface.
+// Domain/store modules must NOT import this file — it belongs to the persistence boundary.
+import { deepFreeze } from "../utilities/deep-freeze.js";
+export class ClaimSerializer {
+    _crypto;
+    constructor(_crypto) {
+        this._crypto = _crypto;
+    }
+    async serializeClaimForPersistence(claim) {
+        const encryptedPayload = await this._crypto.encryptJson(claim.payload);
+        return {
+            id: claim.id,
+            sourceId: claim.sourceId,
+            subject: claim.subject,
+            predicate: claim.predicate,
+            validFrom: claim.validFrom,
+            recordedAt: claim.recordedAt,
+            recordedSeq: claim.recordedSeq,
+            serializerVersion: "claim-serializer-v1",
+            encryptedPayload,
+            // exactOptionalPropertyTypes: only spread optional fields when present
+            ...(claim.validTo !== undefined ? { validTo: claim.validTo } : {}),
+            ...(claim.retracts !== undefined ? { retracts: claim.retracts } : {}),
+            ...(claim.supersedes !== undefined ? { supersedes: claim.supersedes } : {}),
+            ...(claim.overrides !== undefined ? { overrides: claim.overrides } : {}),
+            ...(claim.contractId !== undefined ? { contractId: claim.contractId } : {}),
+            ...(claim.confidence !== undefined ? { confidence: claim.confidence } : {}),
+        };
+    }
+    async deserializeClaimFromPersistence(serialized) {
+        const payload = (await this._crypto.decryptJson(serialized.encryptedPayload));
+        return deepFreeze({
+            id: serialized.id,
+            sourceId: serialized.sourceId,
+            subject: serialized.subject,
+            predicate: serialized.predicate,
+            validFrom: serialized.validFrom,
+            recordedAt: serialized.recordedAt,
+            recordedSeq: serialized.recordedSeq,
+            payload,
+            ...(serialized.validTo !== undefined ? { validTo: serialized.validTo } : {}),
+            ...(serialized.retracts !== undefined ? { retracts: serialized.retracts } : {}),
+            ...(serialized.supersedes !== undefined ? { supersedes: serialized.supersedes } : {}),
+            ...(serialized.overrides !== undefined ? { overrides: serialized.overrides } : {}),
+            ...(serialized.contractId !== undefined ? { contractId: serialized.contractId } : {}),
+            ...(serialized.confidence !== undefined ? { confidence: serialized.confidence } : {}),
+        });
+    }
+}
+//# sourceMappingURL=claim-serializer.js.map

package/dist/crypto/claim-serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-serializer.js","sourceRoot":"","sources":["../../src/crypto/claim-serializer.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,0CAA0C;AAC1C,kFAAkF;AAClF,EAAE;AACF,8FAA8F;AAC9F,2FAA2F;AAC3F,kFAAkF;AAClF,EAAE;AACF,uFAAuF;AACvF,2FAA2F;AAK3F,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AA4BzD,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,4BAA4B,CAAC,KAAkB;QACnD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,OAAO;YACL,EAAE,EAAiB,KAAK,CAAC,EAAE;YAC3B,QAAQ,EAAW,KAAK,CAAC,QAAQ;YACjC,OAAO,EAAY,KAAK,CAAC,OAAO;YAChC,SAAS,EAAU,KAAK,CAAC,SAAS;YAClC,SAAS,EAAU,KAAK,CAAC,SAAS;YAClC,UAAU,EAAS,KAAK,CAAC,UAAU;YACnC,WAAW,EAAQ,KAAK,CAAC,WAAW;YACpC,iBAAiB,EAAE,qBAAqB;YACxC,gBAAgB;YAChB,uEAAuE;YACvE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAK,KAAK,CAAC,OAAO,EAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAI,KAAK,CAAC,QAAQ,EAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,KAAK,CAAC,SAAS,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,+BAA+B,CAAC,UAA2B;QAC/D,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAiB,CAAC;QAC9F,OAAO,UAAU,CAAC;YAChB,EAAE,EAAW,UAAU,CAAC,EAAE;YAC1B,QAAQ,EAAK,UAAU,CAAC,QAAQ;YAChC,OAAO,EAAM,UAAU,CAAC,OAAO;YAC/B,SAAS,EAAI,UAAU,CAAC,SAAS;YACjC,SAAS,EAAI,UAAU,CAAC,SAAS;YACjC,UAAU,EAAG,UAAU,CAAC,UAAU;YAClC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,OAAO;YACP,GAAG,CAAC,UAAU,CAAC,OAAO,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAK,UAAU,CAAC,OAAO,EAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAI,UAAU,CAAC,QAAQ,EAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,SAAS,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,UAAU,CAAC,SAAS,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,CAAgB,CAAC;IACpB,CAAC;CACF"}

package/dist/crypto/sha256.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Synchronous SHA-256 hex digest. Uses node:crypto createHash — for use in
+ * synchronous SQLite transaction callbacks (better-sqlite3 pattern).
+ * Output: lowercase 64-character hex string.
+ */
+export declare function sha256hexSync(input: string | Uint8Array): string;
+/**
+ * Async SHA-256 hex digest. Uses globalThis.crypto.subtle.digest — for use in
+ * async contexts outside of synchronous transaction callbacks.
+ * Output: lowercase 64-character hex string.
+ */
+export declare function sha256hex(input: string | Uint8Array): Promise<string>;

package/dist/crypto/sha256.js

@@ -0,0 +1,40 @@
+// SHA-256 helpers — Audit Hardening C4 (Local Hash Chain).
+//
+// CRYPTO_BOUNDARY_ONLY_001: this file lives inside the sanctioned src/crypto/** boundary,
+//   so it may import node:crypto / use crypto.subtle. No file outside src/crypto/** does.
+// CRYPTO_NO_DOMAIN_IMPORTS_001: this helper imports NO audit / persistence / domain modules.
+//
+// Two variants:
+//   - sha256hexSync: synchronous (node:crypto createHash) — for better-sqlite3 synchronous
+//     transaction callbacks (SQLiteAuditLog.write) and the synchronous migration backfill loop.
+//   - sha256hex: async (globalThis.crypto.subtle.digest) — for async contexts outside of
+//     synchronous transaction callbacks.
+import { createHash } from "node:crypto";
+/**
+ * Synchronous SHA-256 hex digest. Uses node:crypto createHash — for use in
+ * synchronous SQLite transaction callbacks (better-sqlite3 pattern).
+ * Output: lowercase 64-character hex string.
+ */
+export function sha256hexSync(input) {
+    const h = createHash("sha256");
+    if (typeof input === "string") {
+        h.update(input, "utf-8");
+    }
+    else {
+        h.update(input);
+    }
+    return h.digest("hex");
+}
+/**
+ * Async SHA-256 hex digest. Uses globalThis.crypto.subtle.digest — for use in
+ * async contexts outside of synchronous transaction callbacks.
+ * Output: lowercase 64-character hex string.
+ */
+export async function sha256hex(input) {
+    const bytes = typeof input === "string" ? new TextEncoder().encode(input) : input;
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", new Uint8Array(bytes));
+    return [...new Uint8Array(digest)]
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+//# sourceMappingURL=sha256.js.map

package/dist/crypto/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../src/crypto/sha256.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,0FAA0F;AAC1F,0FAA0F;AAC1F,6FAA6F;AAC7F,EAAE;AACF,gBAAgB;AAChB,2FAA2F;AAC3F,gGAAgG;AAChG,yFAAyF;AACzF,yCAAyC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAA0B;IACtD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAA0B;IACxD,MAAM,KAAK,GACT,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClD,SAAS,EACT,IAAI,UAAU,CAAC,KAAK,CAAC,CACtB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/crypto/static-key.d.ts

@@ -0,0 +1,11 @@
+import type { KeyDescriptor, KeyProvider } from "./types.js";
+export declare class StaticKeyProvider implements KeyProvider {
+    private readonly _current;
+    private readonly _allKeys;
+    constructor(current: KeyDescriptor, historical?: readonly KeyDescriptor[]);
+    getCurrentKey(): Promise<KeyDescriptor>;
+    getKey(keyId: string): Promise<KeyDescriptor | undefined>;
+    withCurrentKey(newCurrent: KeyDescriptor): StaticKeyProvider;
+    static generate(keyId: string): Promise<StaticKeyProvider>;
+    static fromRawBytes(keyId: string, rawBytes: Uint8Array): Promise<StaticKeyProvider>;
+}

package/dist/crypto/static-key.js

@@ -0,0 +1,60 @@
+// StaticKeyProvider — for tests and development only.
+//
+// WARNING: This provider holds static key(s) in memory.
+// Do NOT use as a production default. Construct explicitly via StaticKeyProvider.generate().
+// CRYPTO_KEY_PROVIDER_DI_001: no global default instance.
+//
+// KEY_VERSIONING_EXISTS_001: supports multiple keys for rotation boundary testing.
+// withCurrentKey() returns a new provider where a different key is current but all
+// previously-known keys remain resolvable — decryption uses blob.keyId, not the
+// current key. Unknown keyId → CRYPTO_WRONG_KEY_FAIL_CLOSED_001.
+export class StaticKeyProvider {
+    _current;
+    _allKeys;
+    // Explicit constructor — callers must supply a current descriptor.
+    // historical: additional descriptors that remain resolvable via getKey().
+    // KEY_VERSION_DUPLICATE_KEY_ID_DENIED_001: throws if any keyId appears more than once.
+    constructor(current, historical = []) {
+        this._current = current;
+        const map = new Map([[current.keyId, current]]);
+        for (const desc of historical) {
+            if (map.has(desc.keyId)) {
+                throw Object.assign(new Error(`KEY_VERSION_DUPLICATE_KEY_ID_001: keyId "${desc.keyId}" appears more than once — each keyId must map to exactly one key descriptor`), { code: "KEY_VERSION_DUPLICATE_KEY_ID_001" });
+            }
+            map.set(desc.keyId, desc);
+        }
+        this._allKeys = map;
+    }
+    async getCurrentKey() {
+        return this._current;
+    }
+    async getKey(keyId) {
+        return this._allKeys.get(keyId);
+    }
+    // Returns a new provider where newCurrent is the active encryption key and all
+    // previously-known keys (including the old current) are still resolvable for
+    // decryption. This is the rotation boundary: old blobs keep working.
+    // KEY_VERSION_DUPLICATE_KEY_ID_DENIED_001: throws if newCurrent.keyId is already
+    // registered — rotating to a known keyId would create key-material ambiguity.
+    withCurrentKey(newCurrent) {
+        if (this._allKeys.has(newCurrent.keyId)) {
+            throw Object.assign(new Error(`KEY_VERSION_DUPLICATE_KEY_ID_001: cannot rotate to keyId "${newCurrent.keyId}" — it is already registered in this provider; key id reuse is forbidden`), { code: "KEY_VERSION_DUPLICATE_KEY_ID_001" });
+        }
+        return new StaticKeyProvider(newCurrent, [...this._allKeys.values()]);
+    }
+    // Factory: generate a fresh random AES-256 key.
+    // Uses WebCrypto — no node:crypto import (CRYPTO_BOUNDARY_ONLY_001).
+    static async generate(keyId) {
+        const key = await globalThis.crypto.subtle.generateKey({ name: "AES-GCM", length: 256 }, true, // extractable for testing/export
+        ["encrypt", "decrypt"]);
+        return new StaticKeyProvider({ keyId, key });
+    }
+    // Factory: import a raw 32-byte key (useful for deterministic test fixtures).
+    static async fromRawBytes(keyId, rawBytes) {
+        const key = await globalThis.crypto.subtle.importKey("raw", new Uint8Array(rawBytes), // CRYPTO_WEBCRYPTO_TYPES_001: ensure ArrayBuffer backing
+        { name: "AES-GCM" }, false, // non-extractable (tighter for imported keys)
+        ["encrypt", "decrypt"]);
+        return new StaticKeyProvider({ keyId, key });
+    }
+}
+//# sourceMappingURL=static-key.js.map

package/dist/crypto/static-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-key.js","sourceRoot":"","sources":["../../src/crypto/static-key.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,wDAAwD;AACxD,6FAA6F;AAC7F,0DAA0D;AAC1D,EAAE;AACF,mFAAmF;AACnF,mFAAmF;AACnF,gFAAgF;AAChF,iEAAiE;AAIjE,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAgB;IACxB,QAAQ,CAAqC;IAE9D,mEAAmE;IACnE,0EAA0E;IAC1E,uFAAuF;IACvF,YAAY,OAAsB,EAAE,aAAuC,EAAE;QAC3E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,4CAA4C,IAAI,CAAC,KAAK,8EAA8E,CACrI,EACD,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAC7C,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,qEAAqE;IACrE,iFAAiF;IACjF,8EAA8E;IAC9E,cAAc,CAAC,UAAyB;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,6DAA6D,UAAU,CAAC,KAAK,0EAA0E,CACxJ,EACD,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAC7C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,gDAAgD;IAChD,qEAAqE;IACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CACpD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,IAAI,EAAS,iCAAiC;QAC9C,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;QACF,OAAO,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAoB;QAC3D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,yDAAyD;QACnF,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EAAQ,8CAA8C;QAC3D,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;QACF,OAAO,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/crypto/types.d.ts

@@ -0,0 +1,20 @@
+export interface EncryptedBlob {
+    readonly algorithm: "AES-256-GCM";
+    readonly keyId: string;
+    readonly iv: string;
+    readonly ciphertext: string;
+}
+export interface CryptoBoundary {
+    encryptJson(value: unknown): Promise<EncryptedBlob>;
+    decryptJson(blob: EncryptedBlob): Promise<unknown>;
+    encryptBytes(bytes: Uint8Array): Promise<EncryptedBlob>;
+    decryptBytes(blob: EncryptedBlob): Promise<Uint8Array>;
+}
+export interface KeyDescriptor {
+    readonly keyId: string;
+    readonly key: CryptoKey;
+}
+export interface KeyProvider {
+    getCurrentKey(): Promise<KeyDescriptor>;
+    getKey(keyId: string): Promise<KeyDescriptor | undefined>;
+}

package/dist/crypto/types.js

@@ -0,0 +1,8 @@
+// Slice-05: CryptoBoundary types.
+// These types define the interface between domain and persistence layers.
+// Domain objects remain plaintext. Only ClaimSerializer (at the boundary) uses these.
+//
+// CRYPTO_BOUNDARY_ONLY_001: only src/crypto/** may import crypto primitives.
+// CRYPTO_KEY_PROVIDER_DI_001: AesGcmCryptoBoundary receives KeyProvider via constructor.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/crypto/types.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,0EAA0E;AAC1E,sFAAsF;AACtF,EAAE;AACF,6EAA6E;AAC7E,yFAAyF"}

package/dist/datasource/trusted-data-source-registry.d.ts

@@ -0,0 +1,51 @@
+/** A registry record for a certified trusted data-source institution. */
+export interface TrustedDataSourceEntry {
+    /** Stable source identifier, e.g. "cardiologie-klinik-bern". */
+    readonly sourceId: string;
+    /** Human-readable name for operator reference. */
+    readonly name: string;
+    /** Write scopes this source is certified for, e.g. ["write:contract.amount"]. */
+    readonly allowedScopes: ReadonlyArray<string>;
+    /** ID of the certifying authority: "life-as-api-foundation" | "self" | host-defined. */
+    readonly certifiedBy: string;
+    /** Epoch ms — when this certification was issued. */
+    readonly certifiedAt: number;
+    /** Epoch ms — instant after which this certification is no longer valid. */
+    readonly validUntil: number;
+    /**
+     * Declared now; cryptographic enforcement (signed proposal verification) is deferred.
+     * TRUSTED_DATA_SOURCE_SIGNED_PROPOSALS_DEFERRED_001
+     */
+    readonly requiresSignedProposals: boolean;
+}
+/**
+ * Trust gate for write-proposal disposition. Configured registries determine which
+ * proposing institutions may have their proposals auto-accepted (see ProposalPolicy).
+ * Implementations must be fail-closed: any exception → treated as untrusted.
+ */
+export interface TrustedDataSourceRegistry {
+    /** Returns true iff sourceId is registered, not expired, and certified for scope. */
+    isSourceTrusted(sourceId: string, scope: string): Promise<boolean>;
+    /** Returns a frozen copy of the entry, or undefined if not registered. */
+    getEntry(sourceId: string): Promise<TrustedDataSourceEntry | undefined>;
+}
+/** Development / test implementation of TrustedDataSourceRegistry. */
+export declare class InMemoryTrustedDataSourceRegistry implements TrustedDataSourceRegistry {
+    private readonly _entries;
+    private readonly _now;
+    constructor(opts?: {
+        readonly now?: () => number;
+    });
+    /** Register or replace an entry. Re-registering the same sourceId overwrites. */
+    register(entry: TrustedDataSourceEntry): this;
+    /**
+     * TRUSTED_DATA_SOURCE_REGISTRY_FAIL_CLOSED_001:
+     * - Unknown sourceId → false
+     * - validUntil not a finite number → false
+     * - validUntil <= now (epoch-ms comparison) → false (expired)
+     * - scope not exactly in allowedScopes → false
+     * - Never throws; caller may treat any exception as untrusted anyway.
+     */
+    isSourceTrusted(sourceId: string, scope: string): Promise<boolean>;
+    getEntry(sourceId: string): Promise<TrustedDataSourceEntry | undefined>;
+}

package/dist/datasource/trusted-data-source-registry.js

@@ -0,0 +1,57 @@
+// Platform-02 — Trusted Data Source Registry.
+//
+// TRUSTED_DATA_SOURCE_REGISTRY_FAIL_CLOSED_001: unknown source, expired certification,
+//   unrecognised scope, or any exception → untrusted. Never fail-open.
+// TRUSTED_DATA_SOURCE_REGISTRY_EXPIRY_ENFORCED_001: validUntil epoch-ms comparison;
+//   validUntil <= now is expired.
+// TRUSTED_DATA_SOURCE_SIGNED_PROPOSALS_DEFERRED_001: requiresSignedProposals is declared
+//   but cryptographic enforcement is deferred (mirrors
+//   TRUSTED_AGENT_REGISTRY_PUBKEY_ENFORCEMENT_DEFERRED_001).
+// TRUSTED_DATA_SOURCE_REGISTRY_INTERFACE_DATASOURCE_MODULE_ONLY_001: this interface is
+//   defined exclusively in src/datasource/; production src code imports it type-only
+//   except the re-export in src/index.ts and the factory wiring in
+//   src/sdk/create-sqlite-life-api.ts.
+// ─── InMemory implementation ─────────────────────────────────────────────────────
+/** Development / test implementation of TrustedDataSourceRegistry. */
+export class InMemoryTrustedDataSourceRegistry {
+    _entries = new Map();
+    _now;
+    constructor(opts) {
+        this._now = opts?.now ?? (() => Date.now());
+    }
+    /** Register or replace an entry. Re-registering the same sourceId overwrites. */
+    register(entry) {
+        this._entries.set(entry.sourceId, entry);
+        return this;
+    }
+    /**
+     * TRUSTED_DATA_SOURCE_REGISTRY_FAIL_CLOSED_001:
+     * - Unknown sourceId → false
+     * - validUntil not a finite number → false
+     * - validUntil <= now (epoch-ms comparison) → false (expired)
+     * - scope not exactly in allowedScopes → false
+     * - Never throws; caller may treat any exception as untrusted anyway.
+     */
+    async isSourceTrusted(sourceId, scope) {
+        const entry = this._entries.get(sourceId);
+        if (entry === undefined)
+            return false;
+        // TRUSTED_DATA_SOURCE_REGISTRY_EXPIRY_ENFORCED_001
+        if (!Number.isFinite(entry.validUntil))
+            return false;
+        const nowMs = this._now();
+        if (entry.validUntil <= nowMs)
+            return false;
+        // Scope check: exact match in allowedScopes — no prefix matching.
+        if (!entry.allowedScopes.includes(scope))
+            return false;
+        return true;
+    }
+    async getEntry(sourceId) {
+        const entry = this._entries.get(sourceId);
+        if (entry === undefined)
+            return undefined;
+        return Object.freeze({ ...entry, allowedScopes: Object.freeze([...entry.allowedScopes]) });
+    }
+}
+//# sourceMappingURL=trusted-data-source-registry.js.map

package/dist/datasource/trusted-data-source-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-data-source-registry.js","sourceRoot":"","sources":["../../src/datasource/trusted-data-source-registry.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,uFAAuF;AACvF,uEAAuE;AACvE,oFAAoF;AACpF,kCAAkC;AAClC,yFAAyF;AACzF,uDAAuD;AACvD,6DAA6D;AAC7D,uFAAuF;AACvF,qFAAqF;AACrF,mEAAmE;AACnE,uCAAuC;AAuCvC,oFAAoF;AAEpF,sEAAsE;AACtE,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IACrD,IAAI,CAAe;IAEpC,YAAY,IAAsC;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,iFAAiF;IACjF,QAAQ,CAAC,KAA6B;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,KAAa;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEtC,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAErD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAE5C,kEAAkE;QAClE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;CACF"}

package/dist/erasure/tombstone.d.ts

@@ -0,0 +1,13 @@
+import type { PersonId, SourceId, ISOTime, AuditId } from "../types/ids.js";
+import type { ClaimPredicate } from "../types/claim.js";
+export declare const ERASURE_TOMBSTONE_PREDICATE: ClaimPredicate;
+export declare const ERASURE_TOMBSTONE_PAYLOAD: {
+    type: "string";
+    value: "erasure-marker";
+};
+export declare const SYSTEM_ERASURE_SOURCE_ID: SourceId;
+export interface ErasureStatus {
+    readonly subject: PersonId;
+    readonly recordedAt: ISOTime;
+    readonly auditEventId: AuditId;
+}

package/dist/erasure/tombstone.js

@@ -0,0 +1,20 @@
+// Slice-21a: Erasure Tombstone boundary constants and types.
+//
+// ERASURE_TOMBSTONE_PREDICATE_OPEN_UNION_001: "system.erasure_request" is valid as
+//   ClaimPredicate via the open extension union (string & Record<never, never>).
+//   No TypeScript type change required. No schema migration required.
+// ERASURE_TOMBSTONE_PAYLOAD_NON_SENSITIVE_001: payload is a non-sensitive marker;
+//   safe erasure-status APIs derive their response from metadata only.
+// ERASURE_PROOF_IS_TECHNICAL_ONLY_001: ErasureStatus is a technical record within
+//   the SDK persistence boundary — not legal proof of deletion from external systems.
+import { asSourceId } from "../types/ids.js";
+export const ERASURE_TOMBSTONE_PREDICATE = "system.erasure_request";
+// Non-sensitive marker payload — encrypted at rest like any other claim.
+// ERASURE_TOMBSTONE_PAYLOAD_NON_SENSITIVE_001
+export const ERASURE_TOMBSTONE_PAYLOAD = {
+    type: "string",
+    value: "erasure-marker",
+};
+// Stable source ID for tombstone claims — pre-registered in factory initialization.
+export const SYSTEM_ERASURE_SOURCE_ID = asSourceId("src:system:erasure");
+//# sourceMappingURL=tombstone.js.map

package/dist/erasure/tombstone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tombstone.js","sourceRoot":"","sources":["../../src/erasure/tombstone.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,mFAAmF;AACnF,iFAAiF;AACjF,sEAAsE;AACtE,kFAAkF;AAClF,uEAAuE;AACvE,kFAAkF;AAClF,sFAAsF;AAItF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,2BAA2B,GAAmB,wBAAwB,CAAC;AAEpF,yEAAyE;AACzE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAG,QAAiB;IACxB,KAAK,EAAE,gBAAyB;CACjC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAa,UAAU,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/evidence/evidence-backed-claim-creator.d.ts

@@ -0,0 +1,48 @@
+import type { EvidenceId, SourceId, ClaimId } from "../types/ids.js";
+import type { OwnerContext, SystemProjectionContext, TestContext } from "../types/access-context.js";
+import type { AppendClaimInput } from "../types/claim.js";
+import type { FactStore } from "../types/fact-store.js";
+import type { EvidenceRef } from "../types/evidence.js";
+import type { Source, SourceKind } from "../types/source.js";
+import type { RawDocumentStore } from "./raw-document-store.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import type { UnitOfWork } from "../persistence/unit-of-work.js";
+export type EvidenceClaimCreator = OwnerContext | SystemProjectionContext | TestContext;
+export interface CreateClaimFromExistingEvidenceInput {
+    readonly evidenceId: EvidenceId;
+    readonly sourceId: SourceId;
+    readonly claim: Omit<AppendClaimInput, "sourceId">;
+}
+export interface CreateClaimWithNewEvidenceInput {
+    readonly document: {
+        readonly bytes: Uint8Array;
+        readonly mimeType: string;
+        readonly label?: string;
+        readonly metadata?: Record<string, unknown>;
+    };
+    readonly source: {
+        readonly id: SourceId;
+        readonly kind: SourceKind;
+        readonly label: string;
+        readonly metadata?: Record<string, unknown>;
+    };
+    readonly claim: Omit<AppendClaimInput, "sourceId">;
+}
+export interface EvidenceBackedClaimResult {
+    readonly claimId: ClaimId;
+}
+export interface EvidenceBackedClaimWithNewEvidenceResult {
+    readonly evidenceRef: EvidenceRef;
+    readonly source: Source;
+    readonly claimId: ClaimId;
+}
+export declare class EvidenceBackedClaimCreator {
+    private readonly _rawDocumentStore;
+    private readonly _sourceRegistry;
+    private readonly _factStore;
+    private readonly _uow;
+    constructor(_rawDocumentStore: RawDocumentStore, _sourceRegistry: SourceRegistry, _factStore: FactStore, _uow: UnitOfWork);
+    createClaimFromExistingEvidence(ctx: EvidenceClaimCreator, input: CreateClaimFromExistingEvidenceInput): Promise<EvidenceBackedClaimResult>;
+    createClaimWithNewEvidence(ctx: EvidenceClaimCreator, input: CreateClaimWithNewEvidenceInput): Promise<EvidenceBackedClaimWithNewEvidenceResult>;
+    private _assertEvidenceClaimCreator;
+}

package/dist/evidence/evidence-backed-claim-creator.js

@@ -0,0 +1,107 @@
+// EvidenceBackedClaimCreator — Slice-10.
+//
+// Creates claims whose provenance chain is machine-verifiable:
+//   Claim → Source → EvidenceRef → encrypted RawDocument
+//
+// EVIDENCE_BACKED_CLAIM_CREATOR_EXISTS_001: single service owns the provenance chain.
+// EVIDENCE_BACKED_CLAIM_AGENT_DENIED_001: agent + audit contexts are rejected.
+// EVIDENCE_BACKED_CLAIM_APPENDS_THROUGH_SOURCE_AWARE_STORE_001:
+//   append goes through FactStore interface (wired as SourceAwareFactStore in production).
+// UNIT_OF_WORK_EVIDENCE_CLAIM_ATOMIC_001:
+//   createClaimWithNewEvidence is wrapped in UnitOfWork.run() — document + source + claim
+//   are all committed or all rolled back (UNIT_OF_WORK_NO_PARTIAL_DOCUMENT_SOURCE_CLAIM_001).
+//
+// Forbidden imports: no crypto primitives, no concrete FactStore, no contract/consent/proposal.
+// ─── Service ──────────────────────────────────────────────────────────────────
+export class EvidenceBackedClaimCreator {
+    _rawDocumentStore;
+    _sourceRegistry;
+    _factStore;
+    _uow;
+    constructor(_rawDocumentStore, _sourceRegistry, _factStore, _uow) {
+        this._rawDocumentStore = _rawDocumentStore;
+        this._sourceRegistry = _sourceRegistry;
+        this._factStore = _factStore;
+        this._uow = _uow;
+    }
+    // Append a claim against an already-stored document and already-registered source.
+    // Validates the full provenance chain before any write:
+    //   1. evidenceId exists in RawDocumentStore
+    //   2. sourceId exists in SourceRegistry
+    //   3. source.evidenceRef.id === evidenceId
+    //   4. factStore.append (wired as SourceAwareFactStore) validates source is active + predicate allowed
+    async createClaimFromExistingEvidence(ctx, input) {
+        this._assertEvidenceClaimCreator(ctx);
+        // EVIDENCE_BACKED_CLAIM_REQUIRES_DOCUMENT_001
+        const evidenceRef = this._rawDocumentStore.getEvidenceRef(ctx, input.evidenceId);
+        if (evidenceRef === undefined) {
+            throw new Error(`EVIDENCE_BACKED_CLAIM_REQUIRES_DOCUMENT_001: evidenceId "${input.evidenceId}" not found in RawDocumentStore`);
+        }
+        const source = this._sourceRegistry.getSource(ctx, input.sourceId);
+        if (source === undefined) {
+            throw new Error(`EVIDENCE_BACKED_CLAIM_SOURCE_MATCHES_EVIDENCE_001: sourceId "${input.sourceId}" not found in SourceRegistry`);
+        }
+        // EVIDENCE_BACKED_CLAIM_REQUIRES_SOURCE_EVIDENCE_REF_001
+        if (source.evidenceRef?.id === undefined) {
+            throw new Error(`EVIDENCE_BACKED_CLAIM_REQUIRES_SOURCE_EVIDENCE_REF_001: source "${input.sourceId}" ` +
+                `has no evidenceRef.id — provenance chain cannot be verified`);
+        }
+        // EVIDENCE_BACKED_CLAIM_SOURCE_MATCHES_EVIDENCE_001
+        if (source.evidenceRef.id !== input.evidenceId) {
+            throw new Error(`EVIDENCE_BACKED_CLAIM_SOURCE_MATCHES_EVIDENCE_001: source "${input.sourceId}" ` +
+                `evidenceRef.id "${source.evidenceRef.id}" does not match evidenceId "${input.evidenceId}"`);
+        }
+        // EVIDENCE_BACKED_CLAIM_APPENDS_THROUGH_SOURCE_AWARE_STORE_001:
+        // The injected factStore (SourceAwareFactStore in production) enforces:
+        //   - source is active (SOURCE_INACTIVE_REJECTED_001)
+        //   - predicate is allowed for source kind (SOURCE_KIND_ALLOWED_PREDICATE_001)
+        const claim = { ...input.claim, sourceId: input.sourceId };
+        const { claimId } = await this._factStore.append(claim, ctx);
+        return { claimId };
+    }
+    // Store a new raw document, register a new source linked to it, then append a claim.
+    // All three steps are wrapped in this._uow.run() — all commit or all roll back.
+    // UNIT_OF_WORK_EVIDENCE_CLAIM_ATOMIC_001 / UNIT_OF_WORK_NO_PARTIAL_DOCUMENT_SOURCE_CLAIM_001
+    async createClaimWithNewEvidence(ctx, input) {
+        this._assertEvidenceClaimCreator(ctx);
+        return this._uow.run(async () => {
+            // Step 1: persist encrypted raw document.
+            const docInput = {
+                bytes: input.document.bytes,
+                mimeType: input.document.mimeType,
+                ...(input.document.label !== undefined ? { label: input.document.label } : {}),
+                ...(input.document.metadata !== undefined ? { metadata: input.document.metadata } : {}),
+            };
+            const evidenceRef = await this._rawDocumentStore.putDocument(ctx, docInput);
+            // Step 2: register source with evidenceRef.id so the chain is machine-verifiable.
+            const srcInput = {
+                id: input.source.id,
+                kind: input.source.kind,
+                label: input.source.label,
+                evidenceRef: {
+                    id: evidenceRef.id,
+                    uri: evidenceRef.uri,
+                    mimeType: evidenceRef.mimeType,
+                    encrypted: true,
+                },
+                ...(input.source.metadata !== undefined ? { metadata: input.source.metadata } : {}),
+            };
+            const source = this._sourceRegistry.registerSource(ctx, srcInput);
+            // Step 3: append claim — claim.sourceId is authoritative from source.id, never caller-supplied.
+            // EVIDENCE_BACKED_CLAIM_NO_DOCUMENT_EXTRACTION_001: payload comes from caller input only.
+            const claim = { ...input.claim, sourceId: source.id };
+            const { claimId } = await this._factStore.append(claim, ctx);
+            return { evidenceRef, source, claimId };
+        });
+    }
+    // Runtime guard: mirrors the EvidenceClaimCreator type constraint.
+    // Defense-in-depth for callers that cast their way around the type system.
+    _assertEvidenceClaimCreator(ctx) {
+        const kind = ctx.kind;
+        if (kind === "agent" || kind === "audit") {
+            throw new Error(`EVIDENCE_BACKED_CLAIM_AGENT_DENIED_001: "${kind}" context cannot create evidence-backed claims ` +
+                `— use ProposalQueue for agent-submitted claims`);
+        }
+    }
+}
+//# sourceMappingURL=evidence-backed-claim-creator.js.map

package/dist/evidence/evidence-backed-claim-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-backed-claim-creator.js","sourceRoot":"","sources":["../../src/evidence/evidence-backed-claim-creator.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,+DAA+D;AAC/D,yDAAyD;AACzD,EAAE;AACF,sFAAsF;AACtF,+EAA+E;AAC/E,gEAAgE;AAChE,2FAA2F;AAC3F,0CAA0C;AAC1C,0FAA0F;AAC1F,8FAA8F;AAC9F,EAAE;AACF,gGAAgG;AA2DhG,iFAAiF;AAEjF,MAAM,OAAO,0BAA0B;IAElB;IACA;IACA;IACA;IAJnB,YACmB,iBAAmC,EACnC,eAAiC,EACjC,UAA4B,EAC5B,IAA6B;QAH7B,sBAAiB,GAAjB,iBAAiB,CAAkB;QACnC,oBAAe,GAAf,eAAe,CAAkB;QACjC,eAAU,GAAV,UAAU,CAAkB;QAC5B,SAAI,GAAJ,IAAI,CAAyB;IAC7C,CAAC;IAEJ,mFAAmF;IACnF,wDAAwD;IACxD,6CAA6C;IAC7C,yCAAyC;IACzC,4CAA4C;IAC5C,uGAAuG;IACvG,KAAK,CAAC,+BAA+B,CACnC,GAA2B,EAC3B,KAA2C;QAE3C,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAEtC,8CAA8C;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACjF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,4DAA4D,KAAK,CAAC,UAAU,iCAAiC,CAC9G,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,gEAAgE,KAAK,CAAC,QAAQ,+BAA+B,CAC9G,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,QAAQ,IAAI;gBACrF,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,8DAA8D,KAAK,CAAC,QAAQ,IAAI;gBAChF,mBAAmB,MAAM,CAAC,WAAW,CAAC,EAAE,gCAAgC,KAAK,CAAC,UAAU,GAAG,CAC5F,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,wEAAwE;QACxE,sDAAsD;QACtD,+EAA+E;QAC/E,MAAM,KAAK,GAAqB,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,qFAAqF;IACrF,gFAAgF;IAChF,6FAA6F;IAC7F,KAAK,CAAC,0BAA0B,CAC9B,GAA2B,EAC3B,KAAsC;QAEtC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAEtC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,0CAA0C;YAC1C,MAAM,QAAQ,GAAG;gBACf,KAAK,EAAK,KAAK,CAAC,QAAQ,CAAC,KAAK;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACjC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAI,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxF,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAE5E,kFAAkF;YAClF,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAK,KAAK,CAAC,MAAM,CAAC,EAAE;gBACtB,IAAI,EAAG,KAAK,CAAC,MAAM,CAAC,IAAI;gBACxB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;gBACzB,WAAW,EAAE;oBACX,EAAE,EAAS,WAAW,CAAC,EAAE;oBACzB,GAAG,EAAQ,WAAW,CAAC,GAAG;oBAC1B,QAAQ,EAAG,WAAW,CAAC,QAAQ;oBAC/B,SAAS,EAAE,IAAa;iBACzB;gBACD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAElE,gGAAgG;YAChG,0FAA0F;YAC1F,MAAM,KAAK,GAAqB,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACxE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IACnE,2BAA2B,CAAC,GAAyB;QAC3D,MAAM,IAAI,GAAI,GAAqB,CAAC,IAAI,CAAC;QACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,iDAAiD;gBACjG,gDAAgD,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/evidence/in-memory-raw-document-store.d.ts

@@ -0,0 +1,26 @@
+import type { EvidenceId } from "../types/ids.js";
+import type { AccessContext } from "../types/access-context.js";
+import type { CryptoBoundary, EncryptedBlob } from "../crypto/types.js";
+import type { EvidenceFilter, EvidenceRef, EvidenceWriter, RawDocument, RawDocumentInput } from "../types/evidence.js";
+import type { RawDocumentStore } from "./raw-document-store.js";
+export declare class InMemoryRawDocumentStore implements RawDocumentStore {
+    private readonly _crypto;
+    private readonly _entries;
+    constructor(_crypto: CryptoBoundary);
+    putDocument(ctx: EvidenceWriter, input: RawDocumentInput): Promise<EvidenceRef>;
+    _uowSnapshot(): Map<EvidenceId, {
+        ref: EvidenceRef;
+        encryptedBlob: EncryptedBlob;
+        createdBy: EvidenceWriter;
+        metadata?: Readonly<Record<string, unknown>>;
+    }>;
+    _uowRestore(snap: Map<EvidenceId, {
+        ref: EvidenceRef;
+        encryptedBlob: EncryptedBlob;
+        createdBy: EvidenceWriter;
+        metadata?: Readonly<Record<string, unknown>>;
+    }>): void;
+    getDocument(ctx: EvidenceWriter, evidenceId: EvidenceId): Promise<RawDocument | undefined>;
+    getEvidenceRef(ctx: AccessContext, evidenceId: EvidenceId): EvidenceRef | undefined;
+    listEvidenceRefs(ctx: AccessContext, filter?: EvidenceFilter): EvidenceRef[];
+}