life-as-api 0.2.0

package/dist/persistence/sqlite/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/persistence/sqlite/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,kFAAkF;AAClF,yFAAyF;AACzF,EAAE;AACF,iBAAiB;AACjB,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;CAkBzB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;CAK9B,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;CAe1B,CAAC;AAEF,0FAA0F;AAC1F,wGAAwG;AACxG,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;CAWhC,CAAC;AAEF,oEAAoE;AACpE,+FAA+F;AAC/F,mGAAmG;AACnG,kHAAkH;AAClH,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;CAc/B,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,EAAY;IAC3C,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,qCAAqC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY;IAC3C,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,4DAA4D,CAAC;SACrE,GAAG,EAAmC,CAAC;IAC1C,OAAO,GAAG,EAAE,KAAK,CAAC;AACpB,CAAC"}

package/dist/persistence/sqlite/sqlite-fact-store.d.ts

@@ -0,0 +1,24 @@
+import Database from "better-sqlite3";
+import type { ClaimId } from "../../types/ids.js";
+import type { AppendClaimInput, ClaimMeta, StoredClaim } from "../../types/claim.js";
+import type { AccessContext } from "../../types/access-context.js";
+import type { BitemporalQuery, ClaimSelector, FactStore } from "../../types/fact-store.js";
+import type { ClaimSerializer } from "../../crypto/claim-serializer.js";
+export declare class SQLiteFactStore implements FactStore {
+    private readonly _serializer;
+    private readonly _db;
+    private readonly _ownsConnection;
+    private _seq;
+    constructor(dbPathOrDb: string | Database.Database, _serializer: ClaimSerializer);
+    close(): void;
+    append(input: AppendClaimInput, ctx: AccessContext): Promise<{
+        claimId: ClaimId;
+        recordedSeq: number;
+    }>;
+    readAll(ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readSince(seq: number, ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readAt(params: BitemporalQuery, ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readClaims(ctx: AccessContext, selector: ClaimSelector): Promise<ReadonlyArray<ClaimMeta>>;
+    readStoredClaims(ctx: AccessContext, selector: ClaimSelector): Promise<ReadonlyArray<StoredClaim>>;
+    getRawEncryptedPayload(claimId: ClaimId): string | undefined;
+}

package/dist/persistence/sqlite/sqlite-fact-store.js

@@ -0,0 +1,207 @@
+// SQLiteFactStore — durable FactStore backed by SQLite.
+//
+// Invariants (see docs/INVARIANTS.md):
+//   SQLITE_FACTSTORE_PARITY_001      — same behavioral guarantees as InMemoryFactStore
+//   SQLITE_APPEND_ONLY_001           — no UPDATE or DELETE on the claims table, ever
+//   SQLITE_RECORDED_SEQ_MONOTONIC_001 — recorded_seq UNIQUE constraint + autoincrement via store
+//   SQLITE_PAYLOAD_ENCRYPTED_AT_REST_001 — encrypted_payload stored; no plaintext column
+//   SQLITE_USES_CLAIM_SERIALIZER_001  — payload encrypt/decrypt delegated to ClaimSerializer
+//   SQLITE_ACCESS_CONTEXT_REQUIRED_001 — every method requires AccessContext
+//   SQLITE_AGENT_NO_DIRECT_APPEND_001  — AgentConsentContext cannot append
+//   SQLITE_SELECTOR_READ_001           — readClaims() supports ClaimSelector filtering
+//   SQLITE_NO_UPDATE_DELETE_001        — no UPDATE/DELETE SQL anywhere in this file
+//   SQLITE_REOPEN_ROUND_TRIP_001       — closing + reopening the DB restores all claims
+//   SQLITE_WRONG_KEY_FAIL_CLOSED_001   — wrong key during readStoredClaims → throws, no partial data
+//   SQLITE_SCHEMA_VERSIONED_001        — schema_meta table tracks schema version
+//
+// CRYPTO_BOUNDARY_ONLY_001: all encryption delegated to ClaimSerializer — no WebCrypto usage here.
+import Database from "better-sqlite3";
+import { asClaimId, asISOTime } from "../../types/ids.js";
+import { deepFreeze } from "../../utilities/deep-freeze.js";
+import { initializeSchema } from "./schema.js";
+import { rowToClaimMeta, rowToEncryptedBlob } from "./types.js";
+const SERIALIZER_VERSION = "claim-serializer-v1";
+export class SQLiteFactStore {
+    _serializer;
+    _db;
+    _ownsConnection;
+    _seq;
+    // Accepts a file path (opens own connection) or a shared Database instance
+    // (e.g., for SQLiteUnitOfWork transactions — UNIT_OF_WORK_SQLITE_TRANSACTION_001).
+    constructor(dbPathOrDb, _serializer) {
+        this._serializer = _serializer;
+        if (typeof dbPathOrDb === "string") {
+            this._db = new Database(dbPathOrDb);
+            this._ownsConnection = true;
+            initializeSchema(this._db);
+        }
+        else {
+            this._db = dbPathOrDb;
+            this._ownsConnection = false;
+        }
+        // Resume seq from what's already in the database (supports reopen).
+        const maxRow = this._db
+            .prepare("SELECT MAX(recorded_seq) AS max_seq FROM claims")
+            .get();
+        this._seq = maxRow.max_seq ?? 0;
+    }
+    close() {
+        if (this._ownsConnection)
+            this._db.close();
+    }
+    // ── FactStore interface ───────────────────────────────────────────────────
+    async append(input, ctx) {
+        // SQLITE_ACCESS_CONTEXT_REQUIRED_001
+        if (ctx == null)
+            throw new TypeError("AccessContext is required — no implicit store access");
+        // SQLITE_AGENT_NO_DIRECT_APPEND_001
+        if (ctx.kind === "agent") {
+            throw new Error("AgentConsentContext cannot append claims directly. " +
+                "Use context.propose() instead. (SQLITE_AGENT_NO_DIRECT_APPEND_001)");
+        }
+        if (!input.sourceId) {
+            throw new Error("sourceId is required for all claims — provenance is mandatory (CLAIM_PROVENANCE_001)");
+        }
+        // CONTRACT_IDENTITY_LINK_META_PAYLOAD_MATCH_001
+        if (input.predicate === "contract.identity.link" && input.payload.type === "identity_link") {
+            const idPayload = input.payload;
+            if (input.contractId !== undefined && idPayload.contractId !== input.contractId) {
+                throw new Error(`CONTRACT_IDENTITY_LINK_META_PAYLOAD_MATCH_001: meta.contractId "${input.contractId}" ` +
+                    `must match payload.contractId "${idPayload.contractId}"`);
+            }
+        }
+        const claimId = asClaimId(globalThis.crypto.randomUUID()); // WebCrypto only — CRYPTO_BOUNDARY_ONLY_001
+        const recordedAt = asISOTime(new Date().toISOString());
+        const recordedSeq = ++this._seq;
+        // Reconstruct a StoredClaim for serialization.
+        const stored = deepFreeze({
+            id: claimId, recordedAt, recordedSeq,
+            subject: input.subject,
+            sourceId: input.sourceId,
+            predicate: input.predicate,
+            validFrom: input.validFrom,
+            payload: input.payload,
+            ...(input.validTo !== undefined ? { validTo: input.validTo } : {}),
+            ...(input.retracts !== undefined ? { retracts: input.retracts } : {}),
+            ...(input.supersedes !== undefined ? { supersedes: input.supersedes } : {}),
+            ...(input.overrides !== undefined ? { overrides: input.overrides } : {}),
+            ...(input.confidence !== undefined ? { confidence: input.confidence } : {}),
+            ...(input.contractId !== undefined ? { contractId: input.contractId } : {}),
+        });
+        // SQLITE_USES_CLAIM_SERIALIZER_001: encrypt payload before writing.
+        const serialized = await this._serializer.serializeClaimForPersistence(stored);
+        // SQLITE_APPEND_ONLY_001: INSERT only, no UPDATE/DELETE.
+        this._db.prepare(`
+      INSERT INTO claims (
+        id, source_id, subject, predicate, valid_from, valid_to,
+        recorded_at, recorded_seq, retracts, supersedes, overrides,
+        contract_id, confidence, serializer_version, encrypted_payload
+      ) VALUES (
+        ?, ?, ?, ?, ?, ?,
+        ?, ?, ?, ?, ?,
+        ?, ?, ?, ?
+      )
+    `).run(serialized.id, serialized.sourceId, serialized.subject, serialized.predicate, serialized.validFrom, serialized.validTo ?? null, serialized.recordedAt, serialized.recordedSeq, serialized.retracts ?? null, serialized.supersedes ?? null, serialized.overrides ?? null, serialized.contractId ?? null, serialized.confidence ?? null, SERIALIZER_VERSION, JSON.stringify(serialized.encryptedPayload));
+        return { claimId, recordedSeq };
+    }
+    async readAll(ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        const rows = this._db
+            .prepare("SELECT * FROM claims ORDER BY recorded_seq")
+            .all();
+        return rows.map(rowToClaimMeta);
+    }
+    async readSince(seq, ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        const rows = this._db
+            .prepare("SELECT * FROM claims WHERE recorded_seq > ? ORDER BY recorded_seq")
+            .all(seq);
+        return rows.map(rowToClaimMeta);
+    }
+    async readAt(params, ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        let claims = await this.readAll(ctx);
+        if (params.knownAsOf !== undefined) {
+            const knownAsOf = params.knownAsOf;
+            claims = claims.filter((c) => c.recordedAt <= knownAsOf);
+        }
+        if (params.validAsOf !== undefined) {
+            const validAsOf = params.validAsOf;
+            claims = claims.filter((c) => {
+                if (c.validFrom > validAsOf)
+                    return false;
+                if (c.validTo !== undefined && c.validTo <= validAsOf)
+                    return false;
+                return true;
+            });
+        }
+        return claims;
+    }
+    async readClaims(ctx, selector) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        let claims = await this.readAll(ctx);
+        if (selector.subject !== undefined) {
+            const subj = selector.subject;
+            claims = claims.filter((c) => c.subject === subj);
+        }
+        if (selector.predicates !== undefined) {
+            if (selector.predicates.length === 0)
+                return [];
+            const predSet = new Set(selector.predicates);
+            claims = claims.filter((c) => predSet.has(c.predicate));
+        }
+        if (selector.sinceRecordedSeq !== undefined) {
+            const since = selector.sinceRecordedSeq;
+            claims = claims.filter((c) => c.recordedSeq > since);
+        }
+        if (selector.includeRetracted === false) {
+            const allRows = this._db
+                .prepare("SELECT retracts FROM claims WHERE retracts IS NOT NULL")
+                .all();
+            const retractedIds = new Set(allRows.map((r) => r.retracts));
+            claims = claims.filter((c) => !retractedIds.has(c.id));
+        }
+        return claims;
+    }
+    // ── FACTSTORE_HYDRATED_READ_001: interface-defined payload-bearing read ──────
+    // FACTSTORE_HYDRATED_READ_ACCESS_BOUND_001: denied for AgentConsentContext + AuditContext.
+    // SQLITE_HYDRATED_WRONG_KEY_FAIL_CLOSED_001: propagates ClaimSerializer decryption errors.
+    async readStoredClaims(ctx, selector) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        if (ctx.kind === "agent" || ctx.kind === "audit") {
+            throw new Error("FACTSTORE_AGENT_NO_HYDRATED_READ_001: payload-bearing reads are denied for " +
+                `${ctx.kind} context — use readClaims() for metadata-only access`);
+        }
+        // Read metadata rows, apply selector filters (same logic as readClaims).
+        let meta = await this.readClaims(ctx, selector);
+        const ids = new Set(meta.map((c) => c.id));
+        // Fetch only the rows we need (matching selector) and decrypt.
+        const allRows = this._db
+            .prepare("SELECT * FROM claims ORDER BY recorded_seq")
+            .all();
+        const matchingRows = allRows.filter((r) => ids.has(r.id));
+        return Promise.all(matchingRows.map(async (row) => {
+            const claimMeta = rowToClaimMeta(row);
+            const blob = rowToEncryptedBlob(row);
+            const serialized = {
+                ...claimMeta,
+                serializerVersion: row.serializer_version,
+                encryptedPayload: blob,
+            };
+            return this._serializer.deserializeClaimFromPersistence(serialized);
+        }));
+    }
+    // Return the raw encrypted_payload column for a given claim (for at-rest verification).
+    getRawEncryptedPayload(claimId) {
+        const row = this._db
+            .prepare("SELECT encrypted_payload FROM claims WHERE id = ?")
+            .get(claimId);
+        return row?.encrypted_payload;
+    }
+}
+//# sourceMappingURL=sqlite-fact-store.js.map

package/dist/persistence/sqlite/sqlite-fact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-fact-store.js","sourceRoot":"","sources":["../../../src/persistence/sqlite/sqlite-fact-store.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,uCAAuC;AACvC,uFAAuF;AACvF,qFAAqF;AACrF,iGAAiG;AACjG,yFAAyF;AACzF,6FAA6F;AAC7F,6EAA6E;AAC7E,2EAA2E;AAC3E,uFAAuF;AACvF,oFAAoF;AACpF,wFAAwF;AACxF,qGAAqG;AACrG,iFAAiF;AACjF,EAAE;AACF,mGAAmG;AAEnG,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAMtC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGhE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,MAAM,OAAO,eAAe;IASP;IARF,GAAG,CAAoB;IACvB,eAAe,CAAU;IAClC,IAAI,CAAS;IAErB,2EAA2E;IAC3E,mFAAmF;IACnF,YACE,UAAsC,EACrB,WAA4B;QAA5B,gBAAW,GAAX,WAAW,CAAiB;QAE7C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC;YACtB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,CAAC;QACD,oEAAoE;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;aACpB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,EAAgC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,MAAM,CACV,KAAuB,EACvB,GAAkB;QAElB,qCAAqC;QACrC,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAE7F,oCAAoC;QACpC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qDAAqD;gBACnD,oEAAoE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,IAAI,KAAK,CAAC,SAAS,KAAK,wBAAwB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,OAA8B,CAAC;YACvD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,KAAM,KAAK,CAAC,UAAqB,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,UAAU,IAAI;oBACrF,kCAAkC,SAAS,CAAC,UAAU,GAAG,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,4CAA4C;QAC3G,MAAM,UAAU,GAAI,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;QAEhC,+CAA+C;QAC/C,MAAM,MAAM,GAAgB,UAAU,CAAC;YACrC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW;YACpC,OAAO,EAAI,KAAK,CAAC,OAAO;YACxB,QAAQ,EAAG,KAAK,CAAC,QAAQ;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAI,KAAK,CAAC,OAAO;YACxB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAK,KAAK,CAAC,OAAO,EAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAI,KAAK,CAAC,QAAQ,EAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,KAAK,CAAC,SAAS,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QAElB,oEAAoE;QACpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAE/E,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;;;;;;;;KAUhB,CAAC,CAAC,GAAG,CACJ,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,IAAI,IAAI,EAC1B,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,QAAQ,IAAM,IAAI,EAC7B,UAAU,CAAC,UAAU,IAAI,IAAI,EAC7B,UAAU,CAAC,SAAS,IAAK,IAAI,EAC7B,UAAU,CAAC,UAAU,IAAI,IAAI,EAC7B,UAAU,CAAC,UAAU,IAAI,IAAI,EAC7B,kBAAkB,EAClB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAC5C,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,4CAA4C,CAAC;aACrD,GAAG,EAAiB,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,GAAkB;QAC7C,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,CAAC,GAAG,CAAgB,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB,EAAE,GAAkB;QACtD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3B,IAAI,CAAC,CAAC,SAAS,GAAG,SAAS;oBAAE,OAAO,KAAK,CAAC;gBAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAkB,EAAE,QAAuB;QAC1D,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC9B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,QAAQ,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;iBACrB,OAAO,CAAC,wDAAwD,CAAC;iBACjE,GAAG,EAAiC,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gFAAgF;IAChF,2FAA2F;IAC3F,2FAA2F;IAC3F,KAAK,CAAC,gBAAgB,CAAC,GAAkB,EAAE,QAAuB;QAChE,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,6EAA6E;gBAC3E,GAAG,GAAG,CAAC,IAAI,sDAAsD,CACpE,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3C,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;aACrB,OAAO,CAAC,4CAA4C,CAAC;aACrD,GAAG,EAAiB,CAAC;QACxB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAa,CAAC,CAAC,CAAC;QAErE,OAAO,OAAO,CAAC,GAAG,CAChB,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAQ,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG;gBACjB,GAAG,SAAS;gBACZ,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;gBACzC,gBAAgB,EAAG,IAAI;aACxB,CAAC;YACF,OAAO,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,wFAAwF;IACxF,sBAAsB,CAAC,OAAgB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,mDAAmD,CAAC;aAC5D,GAAG,CAAC,OAAO,CAA8C,CAAC;QAC7D,OAAO,GAAG,EAAE,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/dist/persistence/sqlite/sqlite-source-registry.d.ts

@@ -0,0 +1,17 @@
+import Database from "better-sqlite3";
+import type { SourceId } from "../../types/ids.js";
+import type { AccessContext } from "../../types/access-context.js";
+import type { AppendClaimInput } from "../../types/claim.js";
+import type { Source, SourceFilter, SourceInput } from "../../types/source.js";
+import type { SourceRegistry } from "../../source/source-registry.js";
+export declare class SQLiteSourceRegistry implements SourceRegistry {
+    private readonly _db;
+    private readonly _ownsConnection;
+    constructor(dbPathOrDb: string | Database.Database);
+    close(): void;
+    registerSource(ctx: AccessContext, input: SourceInput): Source;
+    getSource(ctx: AccessContext, sourceId: SourceId): Source | undefined;
+    listSources(ctx: AccessContext, filter?: SourceFilter): Source[];
+    deactivateSource(ctx: AccessContext, sourceId: SourceId, reason: string): Source;
+    assertCanAppend(input: AppendClaimInput): void;
+}

package/dist/persistence/sqlite/sqlite-source-registry.js

@@ -0,0 +1,132 @@
+// SQLiteSourceRegistry — Slice-07.
+//
+// Persists Source records to SQLite. Source metadata is plaintext (MVP accepted risk —
+// source identifiers and labels contain no claim payload data).
+//
+// SOURCE_SQLITE_REOPEN_ROUND_TRIP_001: sources survive a close + reopen cycle.
+// SOURCE_REGISTRY_IMMUTABLE_001: only status column is ever updated; all other columns are INSERT-only.
+// All methods synchronous (better-sqlite3 + no crypto = no async needed).
+import Database from "better-sqlite3";
+import { asISOTime, asSourceId, asEvidenceId } from "../../types/ids.js";
+import { initializeSchema } from "./schema.js";
+import { isPredicateAllowed, allowedPredicateDescription } from "../../source/source-kind-predicate-policy.js";
+function rowToSource(row) {
+    const creator = JSON.parse(row.created_by);
+    return Object.freeze({
+        id: asSourceId(row.id),
+        kind: row.kind,
+        label: row.label,
+        status: row.status,
+        createdAt: row.created_at,
+        createdBy: Object.freeze(creator),
+        ...(row.evidence_uri != null ? {
+            evidenceRef: Object.freeze({
+                ...(row.evidence_id != null ? { id: asEvidenceId(row.evidence_id) } : {}),
+                uri: row.evidence_uri,
+                ...(row.evidence_hash != null ? { contentHash: row.evidence_hash } : {}),
+                ...(row.evidence_mime != null ? { mimeType: row.evidence_mime } : {}),
+                ...(row.evidence_enc != null ? { encrypted: row.evidence_enc === 1 } : {}),
+            }),
+        } : {}),
+        ...(row.metadata != null ? { metadata: Object.freeze(JSON.parse(row.metadata)) } : {}),
+    });
+}
+export class SQLiteSourceRegistry {
+    _db;
+    _ownsConnection;
+    // Accepts a file path (opens own connection) or a shared Database instance
+    // (e.g., for SQLiteUnitOfWork transactions — UNIT_OF_WORK_SQLITE_TRANSACTION_001).
+    constructor(dbPathOrDb) {
+        if (typeof dbPathOrDb === "string") {
+            this._db = new Database(dbPathOrDb);
+            this._ownsConnection = true;
+            initializeSchema(this._db);
+        }
+        else {
+            this._db = dbPathOrDb;
+            this._ownsConnection = false;
+        }
+    }
+    close() {
+        if (this._ownsConnection)
+            this._db.close();
+    }
+    registerSource(ctx, input) {
+        if (ctx.kind === "agent" || ctx.kind === "audit") {
+            throw new Error("SOURCE_AGENT_CANNOT_SELF_REGISTER_001: AgentConsentContext and AuditContext cannot register sources");
+        }
+        if (ctx.kind === "owner" && input.kind !== "user_manual") {
+            throw new Error(`SOURCE_OWNER_CAN_REGISTER_MANUAL_001: OwnerContext may only register "user_manual" sources, not "${input.kind}"`);
+        }
+        const existing = this._db.prepare("SELECT id FROM sources WHERE id = ?").get(input.id);
+        if (existing !== undefined) {
+            throw new Error(`SOURCE_REGISTRY_EXISTS_001: source "${input.id}" is already registered`);
+        }
+        const creator = ctx.kind === "owner" ? { kind: "owner", personId: ctx.personId } :
+            ctx.kind === "system_projection" ? { kind: "system_projection" } :
+                { kind: "test", label: ctx.label ?? "unknown" };
+        const createdAt = asISOTime(new Date().toISOString());
+        this._db.prepare(`
+      INSERT INTO sources (id, kind, label, status, created_at, created_by,
+        evidence_id, evidence_uri, evidence_hash, evidence_mime, evidence_enc, metadata)
+      VALUES (?, ?, ?, 'active', ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(input.id, input.kind, input.label, createdAt, JSON.stringify(creator), input.evidenceRef?.id ?? null, input.evidenceRef?.uri ?? null, input.evidenceRef?.contentHash ?? null, input.evidenceRef?.mimeType ?? null, input.evidenceRef?.encrypted != null ? (input.evidenceRef.encrypted ? 1 : 0) : null, input.metadata != null ? JSON.stringify(input.metadata) : null);
+        return rowToSource(this._db.prepare("SELECT * FROM sources WHERE id = ?").get(input.id));
+    }
+    getSource(ctx, sourceId) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        const row = this._db.prepare("SELECT * FROM sources WHERE id = ?").get(sourceId);
+        return row !== undefined ? rowToSource(row) : undefined;
+    }
+    listSources(ctx, filter) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        let sql = "SELECT * FROM sources";
+        const params = [];
+        const clauses = [];
+        if (filter?.kind !== undefined) {
+            clauses.push("kind = ?");
+            params.push(filter.kind);
+        }
+        if (filter?.status !== undefined) {
+            clauses.push("status = ?");
+            params.push(filter.status);
+        }
+        if (clauses.length > 0)
+            sql += " WHERE " + clauses.join(" AND ");
+        const rows = this._db.prepare(sql).all(...params);
+        return rows.map(rowToSource);
+    }
+    deactivateSource(ctx, sourceId, reason) {
+        if (ctx.kind === "agent" || ctx.kind === "audit") {
+            throw new Error("SOURCE_AGENT_CANNOT_SELF_REGISTER_001: agents and audit cannot deactivate sources");
+        }
+        const existing = this._db.prepare("SELECT * FROM sources WHERE id = ?").get(sourceId);
+        if (existing === undefined) {
+            throw new Error(`SOURCE_UNKNOWN_REJECTED_001: source "${sourceId}" not found for deactivation`);
+        }
+        if (existing.status === "inactive") {
+            return rowToSource(existing); // idempotent
+        }
+        // SOURCE_REGISTRY_IMMUTABLE_001: only status column updated.
+        this._db.prepare("UPDATE sources SET status = 'inactive' WHERE id = ?").run(sourceId);
+        return rowToSource(this._db.prepare("SELECT * FROM sources WHERE id = ?").get(sourceId));
+    }
+    assertCanAppend(input) {
+        const row = this._db
+            .prepare("SELECT kind, status FROM sources WHERE id = ?")
+            .get(input.sourceId);
+        if (row === undefined) {
+            throw new Error(`SOURCE_UNKNOWN_REJECTED_001: sourceId "${input.sourceId}" is not registered`);
+        }
+        if (row.status === "inactive") {
+            throw new Error(`SOURCE_INACTIVE_REJECTED_001: sourceId "${input.sourceId}" is inactive`);
+        }
+        if (!isPredicateAllowed(row.kind, input.predicate)) {
+            throw new Error(`SOURCE_KIND_ALLOWED_PREDICATE_001: source kind "${row.kind}" may not produce ` +
+                `predicate "${input.predicate}". Allowed: ${allowedPredicateDescription(row.kind)}`);
+        }
+    }
+}
+//# sourceMappingURL=sqlite-source-registry.js.map

package/dist/persistence/sqlite/sqlite-source-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-source-registry.js","sourceRoot":"","sources":["../../../src/persistence/sqlite/sqlite-source-registry.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,uFAAuF;AACvF,gEAAgE;AAChE,EAAE;AACF,+EAA+E;AAC/E,wGAAwG;AACxG,0EAA0E;AAE1E,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAMtC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAiB/G,SAAS,WAAW,CAAC,GAAc;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAkB,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAS,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAO,GAAG,CAAC,IAAuB;QACtC,KAAK,EAAM,GAAG,CAAC,KAAK;QACpB,MAAM,EAAK,GAAG,CAAC,MAAyB;QACxC,SAAS,EAAE,GAAG,CAAC,UAAqB;QACpC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC;YAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;gBACzB,GAAG,CAAC,GAAG,CAAC,WAAW,IAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAW,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,GAAG,EAAU,GAAG,CAAC,YAAY;gBAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAK,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAI,GAAG,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9E,CAAC;SACH,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,GAAG,CAAoB;IACvB,eAAe,CAAU;IAE1C,2EAA2E;IAC3E,mFAAmF;IACnF,YAAY,UAAsC;QAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC;YACtB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,cAAc,CAAC,GAAkB,EAAE,KAAkB;QACnD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,oGAAoG,KAAK,CAAC,IAAI,GAAG,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,OAAO,GACX,GAAG,CAAC,IAAI,KAAK,OAAO,CAAa,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAc,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1F,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/B,EAAE,IAAI,EAAE,MAAM,EAAgB,KAAK,EAAM,GAA0B,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QAE9H,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;;KAIhB,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,KAAK,EACX,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,KAAK,CAAC,WAAW,EAAE,EAAE,IAAO,IAAI,EAChC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAM,IAAI,EAChC,KAAK,CAAC,WAAW,EAAE,WAAW,IAAI,IAAI,EACtC,KAAK,CAAC,WAAW,EAAE,QAAQ,IAAO,IAAI,EACtC,KAAK,CAAC,WAAW,EAAE,SAAS,IAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EACrF,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/D,CAAC;QAEF,OAAO,WAAW,CAChB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAc,CAClF,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,GAAkB,EAAE,QAAkB;QAC9C,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAC;QAC1G,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,WAAW,CAAC,GAAkB,EAAE,MAAqB;QACnD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,GAAG,GAAG,uBAAuB,CAAC;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,EAAE,IAAI,KAAO,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAG,CAAC;QAC7F,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,IAAI,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAgB,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,gBAAgB,CAAC,GAAkB,EAAE,QAAkB,EAAE,MAAc;QACrE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAC;QAC/G,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,8BAA8B,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnC,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa;QAC7C,CAAC;QACD,6DAA6D;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtF,OAAO,WAAW,CAChB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAc,CAClF,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,KAAuB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,+CAA+C,CAAC;aACxD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAA2D,CAAC;QAEjF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,0CAA0C,KAAK,CAAC,QAAQ,qBAAqB,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,CAAC,QAAQ,eAAe,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,mDAAmD,GAAG,CAAC,IAAI,oBAAoB;gBAC7E,cAAc,KAAK,CAAC,SAAS,eAAe,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/persistence/sqlite/sqlite-unit-of-work.d.ts

@@ -0,0 +1,8 @@
+import Database from "better-sqlite3";
+import type { UnitOfWork } from "../unit-of-work.js";
+export declare class SQLiteUnitOfWork implements UnitOfWork {
+    private readonly _db;
+    private _spCount;
+    constructor(_db: Database.Database);
+    run<T>(fn: () => Promise<T>): Promise<T>;
+}

package/dist/persistence/sqlite/sqlite-unit-of-work.js

@@ -0,0 +1,41 @@
+// SQLiteUnitOfWork — Slice-18 / Audit Hardening C2a.
+//
+// UNIT_OF_WORK_SQLITE_TRANSACTION_001: wraps fn in SAVEPOINT / RELEASE SAVEPOINT / ROLLBACK TO
+// SAVEPOINT on a shared better-sqlite3 Database instance. All stores passed the same Database
+// object participate in one ACID transaction — either all writes commit or none do.
+//
+// UNIT_OF_WORK_SAVEPOINT_REENTRANT_001: SAVEPOINT-based transactions are re-entrant. At top
+// level a SAVEPOINT behaves like BEGIN; a nested run() opens a nested SAVEPOINT that participates
+// in the outer transaction scope instead of failing ("cannot start a transaction within a
+// transaction"). When the outermost scope rolls back, all nested writes roll back with it.
+// Per-instance _spCount yields unique savepoint names (sp_0, sp_1, …).
+//
+// UNIT_OF_WORK_NO_RAW_PAYLOAD_LOGGING_001: errors are re-thrown as-is; no payload logging.
+export class SQLiteUnitOfWork {
+    _db;
+    _spCount = 0;
+    constructor(_db) {
+        this._db = _db;
+    }
+    async run(fn) {
+        const sp = `sp_${this._spCount++}`;
+        this._db.prepare(`SAVEPOINT ${sp}`).run();
+        try {
+            const result = await fn();
+            this._db.prepare(`RELEASE SAVEPOINT ${sp}`).run();
+            return result;
+        }
+        catch (err) {
+            try {
+                this._db.prepare(`ROLLBACK TO SAVEPOINT ${sp}`).run();
+            }
+            catch { /* already rolled back or closed */ }
+            try {
+                this._db.prepare(`RELEASE SAVEPOINT ${sp}`).run();
+            }
+            catch { /* already released or closed */ }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=sqlite-unit-of-work.js.map

package/dist/persistence/sqlite/sqlite-unit-of-work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-unit-of-work.js","sourceRoot":"","sources":["../../../src/persistence/sqlite/sqlite-unit-of-work.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,+FAA+F;AAC/F,8FAA8F;AAC9F,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,kGAAkG;AAClG,0FAA0F;AAC1F,2FAA2F;AAC3F,uEAAuE;AACvE,EAAE;AACF,2FAA2F;AAK3F,MAAM,OAAO,gBAAgB;IAEE;IADrB,QAAQ,GAAG,CAAC,CAAC;IACrB,YAA6B,GAAsB;QAAtB,QAAG,GAAH,GAAG,CAAmB;IAAG,CAAC;IAEvD,KAAK,CAAC,GAAG,CAAI,EAAoB;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;YAC5G,IAAI,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;YACrG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/persistence/sqlite/types.d.ts

@@ -0,0 +1,24 @@
+import type { ClaimMeta } from "../../types/claim.js";
+import type { EncryptedBlob } from "../../crypto/types.js";
+export interface SQLiteFactStoreOptions {
+    readonly dbPath: string;
+}
+export interface SQLiteRow {
+    readonly id: string;
+    readonly source_id: string;
+    readonly subject: string;
+    readonly predicate: string;
+    readonly valid_from: string;
+    readonly valid_to: string | null;
+    readonly recorded_at: string;
+    readonly recorded_seq: number;
+    readonly retracts: string | null;
+    readonly supersedes: string | null;
+    readonly overrides: string | null;
+    readonly contract_id: string | null;
+    readonly confidence: number | null;
+    readonly serializer_version: string;
+    readonly encrypted_payload: string;
+}
+export declare function rowToClaimMeta(row: SQLiteRow): ClaimMeta;
+export declare function rowToEncryptedBlob(row: SQLiteRow): EncryptedBlob;

package/dist/persistence/sqlite/types.js

@@ -0,0 +1,28 @@
+// Internal types for SQLiteFactStore.
+//
+// SQLiteRow is the raw DB row shape (snake_case column names).
+// It is NEVER exposed outside src/persistence/sqlite/.
+// Convert a raw SQLite row to a ClaimMeta (metadata only, no payload).
+// CRYPTO_METADATA_PLAINTEXT_ACCEPTED_001: metadata is read directly from columns.
+export function rowToClaimMeta(row) {
+    return Object.freeze({
+        id: row.id,
+        sourceId: row.source_id,
+        subject: row.subject,
+        predicate: row.predicate,
+        validFrom: row.valid_from,
+        recordedAt: row.recorded_at,
+        recordedSeq: row.recorded_seq,
+        ...(row.valid_to != null ? { validTo: row.valid_to } : {}),
+        ...(row.retracts != null ? { retracts: row.retracts } : {}),
+        ...(row.supersedes != null ? { supersedes: row.supersedes } : {}),
+        ...(row.overrides != null ? { overrides: row.overrides } : {}),
+        ...(row.contract_id != null ? { contractId: row.contract_id } : {}),
+        ...(row.confidence != null ? { confidence: row.confidence } : {}),
+    });
+}
+// Parse the encrypted_payload column back to EncryptedBlob.
+export function rowToEncryptedBlob(row) {
+    return JSON.parse(row.encrypted_payload);
+}
+//# sourceMappingURL=types.js.map

package/dist/persistence/sqlite/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/persistence/sqlite/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,+DAA+D;AAC/D,uDAAuD;AAgCvD,uEAAuE;AACvE,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,GAAc;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAW,GAAG,CAAC,EAAsB;QACvC,QAAQ,EAAK,GAAG,CAAC,SAAuB;QACxC,OAAO,EAAM,GAAG,CAAC,OAAuB;QACxC,SAAS,EAAI,GAAG,CAAC,SAA6B;QAC9C,SAAS,EAAI,GAAG,CAAC,UAAsB;QACvC,UAAU,EAAG,GAAG,CAAC,WAAsB;QACvC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAO,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAK,GAAG,CAAC,QAAsB,EAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAO,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAI,GAAG,CAAC,QAAsB,EAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,IAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAsB,EAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,SAAS,IAAM,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,GAAG,CAAC,SAAsB,EAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAyB,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,IAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC;AACL,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,GAAc;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAkB,CAAC;AAC5D,CAAC"}

package/dist/persistence/unit-of-work.d.ts

@@ -0,0 +1,6 @@
+export interface UnitOfWork {
+    run<T>(fn: () => Promise<T>): Promise<T>;
+}
+export declare class NoopUnitOfWork implements UnitOfWork {
+    run<T>(fn: () => Promise<T>): Promise<T>;
+}

package/dist/persistence/unit-of-work.js

@@ -0,0 +1,15 @@
+// UnitOfWork — Slice-18.
+//
+// UNIT_OF_WORK_EXISTS_001: this interface is the sole coordination point for multi-write atomicity.
+// UNIT_OF_WORK_COMMIT_ALL_OR_NONE_001: fn completes → all writes committed; fn throws → all writes rolled back.
+// UNIT_OF_WORK_ROLLBACK_ON_FAILURE_001: error propagated to caller after rollback; no silent swallow.
+// UNIT_OF_WORK_NO_RAW_PAYLOAD_LOGGING_001: UoW implementations must not log payload values on failure.
+//
+// NoopUnitOfWork: default (backward-compatible); used when no atomicity is required
+// (e.g., single-store writes, tests that don't probe failure paths).
+export class NoopUnitOfWork {
+    async run(fn) {
+        return fn();
+    }
+}
+//# sourceMappingURL=unit-of-work.js.map

package/dist/persistence/unit-of-work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unit-of-work.js","sourceRoot":"","sources":["../../src/persistence/unit-of-work.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,oGAAoG;AACpG,gHAAgH;AAChH,sGAAsG;AACtG,uGAAuG;AACvG,EAAE;AACF,oFAAoF;AACpF,qEAAqE;AAMrE,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,GAAG,CAAI,EAAoB;QAC/B,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;CACF"}

package/dist/proposal/accepted-claim-appender.d.ts

@@ -0,0 +1,7 @@
+import type { ClaimId } from "../types/ids.js";
+import type { AppendClaimInput } from "../types/claim.js";
+import type { OwnerContext, SystemProjectionContext, TestContext } from "../types/access-context.js";
+export type AppendDecider = OwnerContext | SystemProjectionContext | TestContext;
+export interface AcceptedClaimAppender {
+    appendAll(ctx: AppendDecider, claims: ReadonlyArray<AppendClaimInput>): Promise<ReadonlyArray<ClaimId>>;
+}

package/dist/proposal/accepted-claim-appender.js

@@ -0,0 +1,16 @@
+// AcceptedClaimAppender — Slice-08b.
+//
+// PROPOSAL_ACCEPT_NO_RAW_FACTSTORE_001: InMemoryProposalQueue must never hold a reference
+// to a raw FactStore (InMemoryFactStore / SQLiteFactStore). All acceptance writes go through
+// this typed interface, which is only implemented by source-validated adapters.
+//
+// PROPOSAL_ACCEPT_ATOMIC_ROLLBACK_001: appendAll() is an "all or nothing" contract.
+//   - If any claim fails SourceRegistry validation (pre-validation phase), no claims are written.
+//   - If any claim fails during the write phase, implementations must document their atomicity
+//     guarantee (transaction for SQLite; best-effort pre-validation for InMemory).
+//   - Callers (InMemoryProposalQueue) must NOT update proposal status until appendAll succeeds.
+//
+// appendAll() must not be called with a raw FactStore — it requires SourceAwareFactStore
+// or equivalent to enforce PROPOSAL_ACCEPT_USES_SOURCE_AWARE_FACTSTORE_001.
+export {};
+//# sourceMappingURL=accepted-claim-appender.js.map

package/dist/proposal/accepted-claim-appender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accepted-claim-appender.js","sourceRoot":"","sources":["../../src/proposal/accepted-claim-appender.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,kGAAkG;AAClG,+FAA+F;AAC/F,mFAAmF;AACnF,gGAAgG;AAChG,EAAE;AACF,yFAAyF;AACzF,4EAA4E"}

package/dist/proposal/in-memory-proposal-queue.d.ts

@@ -0,0 +1,21 @@
+import type { ProposalId } from "../types/ids.js";
+import type { AgentConsentContext, AccessContext } from "../types/access-context.js";
+import type { AcceptOptions, Proposal, ProposalDecider, ProposalFilter, ProposalInput } from "../types/proposal.js";
+import type { ProposalQueue } from "./proposal-queue.js";
+import type { AcceptedClaimAppender } from "./accepted-claim-appender.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import { GrantRegistry } from "../consent/grant-registry.js";
+export declare class InMemoryProposalQueue implements ProposalQueue {
+    private readonly _appender;
+    private readonly _grantRegistry;
+    private readonly _sourceRegistry;
+    private readonly _proposals;
+    constructor(_appender: AcceptedClaimAppender, _grantRegistry: GrantRegistry, _sourceRegistry: SourceRegistry);
+    createProposal(ctx: AgentConsentContext, input: ProposalInput): Promise<Proposal>;
+    getProposal(ctx: AccessContext, proposalId: ProposalId): Proposal | undefined;
+    listProposals(ctx: AccessContext, filter?: ProposalFilter): Proposal[];
+    acceptProposal(ctx: ProposalDecider, proposalId: ProposalId, options: AcceptOptions): Promise<Proposal>;
+    rejectProposal(ctx: ProposalDecider, proposalId: ProposalId, reason: string): Promise<Proposal>;
+    private _getExistingPending;
+    private _spreadProposal;
+}