life-as-api 0.2.0

package/dist/proposal/source-aware-claim-appender.js

@@ -0,0 +1,47 @@
+// SourceAwareClaimAppender — Slice-08b.
+//
+// Implements AcceptedClaimAppender using SourceAwareFactStore + SourceRegistry.
+// PROPOSAL_ACCEPT_USES_SOURCE_AWARE_FACTSTORE_001: all acceptance writes go through
+// SourceAwareFactStore, which calls assertCanAppend() on every append.
+//
+// Atomicity (InMemory):
+//   Phase 1 — Pre-validate all claims synchronously via registry.assertCanAppend().
+//             If any fails, throw immediately with no writes.
+//   Phase 2 — Write all claims sequentially via SourceAwareFactStore.append().
+//             For InMemory, writes are infallible after Phase 1 validation.
+//             For SQLite, a transaction would be required — defer to SQLiteProposalQueue.
+//
+// PROPOSAL_CONTEXT_CAPABILITIES_NOT_AUTHORITATIVE_001: this class does not inspect
+// AgentConsentContext.capabilities. Source validation comes from SourceRegistry.
+export class SourceAwareClaimAppender {
+    _store;
+    _registry;
+    _uow;
+    constructor(_store, _registry, _uow) {
+        this._store = _store;
+        this._registry = _registry;
+        this._uow = _uow;
+    }
+    async appendAll(ctx, claims) {
+        if (claims.length === 0)
+            return [];
+        // Phase 1: pre-validate ALL claims (synchronous, throws before any write)
+        // PROPOSAL_ACCEPT_ATOMIC_ROLLBACK_001: if any claim fails here, none are written.
+        for (const claim of claims) {
+            this._registry.assertCanAppend(claim);
+        }
+        // Phase 2: write all atomically — UNIT_OF_WORK_PROPOSAL_ACCEPT_ATOMIC_001 /
+        // UNIT_OF_WORK_NO_PARTIAL_ACCEPTED_CLAIMS_001.
+        // For InMemory, Phase 2 is infallible after Phase 1 (NoopUnitOfWork is sufficient).
+        // For SQLite, inject SQLiteUnitOfWork to guarantee BEGIN/COMMIT/ROLLBACK.
+        return this._uow.run(async () => {
+            const ids = [];
+            for (const claim of claims) {
+                const { claimId } = await this._store.append(claim, ctx);
+                ids.push(claimId);
+            }
+            return ids;
+        });
+    }
+}
+//# sourceMappingURL=source-aware-claim-appender.js.map

package/dist/proposal/source-aware-claim-appender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-aware-claim-appender.js","sourceRoot":"","sources":["../../src/proposal/source-aware-claim-appender.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,gFAAgF;AAChF,oFAAoF;AACpF,uEAAuE;AACvE,EAAE;AACF,wBAAwB;AACxB,oFAAoF;AACpF,8DAA8D;AAC9D,+EAA+E;AAC/E,4EAA4E;AAC5E,0FAA0F;AAC1F,EAAE;AACF,mFAAmF;AACnF,iFAAiF;AASjF,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IAHnB,YACmB,MAA+B,EAC/B,SAAyB,EACzB,IAAqB;QAFrB,WAAM,GAAN,MAAM,CAAyB;QAC/B,cAAS,GAAT,SAAS,CAAgB;QACzB,SAAI,GAAJ,IAAI,CAAiB;IACrC,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,GAAkB,EAAE,MAAuC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEnC,0EAA0E;QAC1E,kFAAkF;QAClF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,4EAA4E;QAC5E,+CAA+C;QAC/C,oFAAoF;QACpF,0EAA0E;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/proposal/sqlite-proposal-queue.d.ts

@@ -0,0 +1,26 @@
+import type { Database } from "better-sqlite3";
+import type { ProposalId } from "../types/ids.js";
+import type { AgentConsentContext, AccessContext } from "../types/access-context.js";
+import type { AcceptOptions, Proposal, ProposalDecider, ProposalFilter, ProposalInput } from "../types/proposal.js";
+import type { AcceptedClaimAppender } from "./accepted-claim-appender.js";
+import type { FactoryCompatibleProposalQueue } from "./proposal-queue.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import type { CryptoBoundary } from "../crypto/types.js";
+import { GrantRegistry } from "../consent/grant-registry.js";
+export declare class SQLiteProposalQueue implements FactoryCompatibleProposalQueue {
+    private readonly _db;
+    private readonly _crypto;
+    private readonly _appender;
+    private readonly _grantRegistry;
+    private readonly _sourceRegistry;
+    private readonly _cache;
+    readonly factoryCompatible: "durable-proposal-queue";
+    private constructor();
+    static open(db: Database, crypto: CryptoBoundary, appender: AcceptedClaimAppender, grantRegistry: GrantRegistry, sourceRegistry: SourceRegistry): Promise<SQLiteProposalQueue>;
+    createProposal(ctx: AgentConsentContext, input: ProposalInput): Promise<Proposal>;
+    getProposal(ctx: AccessContext, proposalId: ProposalId): Proposal | undefined;
+    listProposals(ctx: AccessContext, filter?: ProposalFilter): Proposal[];
+    acceptProposal(ctx: ProposalDecider, proposalId: ProposalId, options: AcceptOptions): Promise<Proposal>;
+    rejectProposal(ctx: ProposalDecider, proposalId: ProposalId, reason: string): Promise<Proposal>;
+    private _getExistingPending;
+}

package/dist/proposal/sqlite-proposal-queue.js

@@ -0,0 +1,282 @@
+// SQLiteProposalQueue — Production-06b.
+//
+// PROPOSAL_QUEUE_DURABLE_REQUIRED_001: proposals survive process restart (proposals table, schema v7).
+// PROPOSAL_QUEUE_REOPEN_PRESERVES_STATUS_001: status + decision fields restored across reopen via
+//   eager cache load in SQLiteProposalQueue.open().
+// PROPOSAL_QUEUE_CANDIDATES_NOT_CLAIMS_UNTIL_ACCEPT_001: candidateClaims remain outside FactStore
+//   until acceptProposal succeeds; all sensitive payload is encrypted before SQLite write.
+// PROPOSAL_QUEUE_ACCEPTANCE_PROVENANCE_PRESERVED_001: resultingClaimIds + decidedBy preserved in
+//   encrypted_payload, restoring full acceptance provenance after reopen.
+//
+// createProposal / rejectProposal / acceptProposal are async — encryption must complete before the
+// SQLite write. getProposal and listProposals are sync (served from in-memory cache loaded at open).
+//
+// Production-06d-b-a: ProposalQueue interface was migrated to async (A1 decision). SQLiteProposalQueue
+// now satisfies ProposalQueue directly via FactoryCompatibleProposalQueue (which extends ProposalQueue).
+// The structural incompatibility that previously prevented implements ProposalQueue is resolved.
+//
+// Usage:
+//   const queue = await SQLiteProposalQueue.open(db, crypto, appender, grantRegistry, sourceRegistry);
+//   const proposal = await queue.createProposal(agentCtx, input);
+import { asISOTime, asProposalId } from "../types/ids.js";
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function isDecider(ctx) {
+    return ctx.kind === "owner" || ctx.kind === "system_projection" || ctx.kind === "test";
+}
+function rowToProposal(row, payload) {
+    const result = {
+        id: row.proposal_id,
+        proposedBy: Object.freeze({
+            agentId: row.proposed_by_agent,
+            grantId: row.under_grant,
+            purpose: payload.proposedByPurpose,
+        }),
+        underGrant: row.under_grant,
+        candidateClaims: Object.freeze([...payload.candidateClaims]),
+        status: row.status,
+        createdAt: row.created_at,
+    };
+    if (payload.rationale !== undefined)
+        result["rationale"] = payload.rationale;
+    if (row.decided_at !== null)
+        result["decidedAt"] = row.decided_at;
+    if (payload.decidedBy !== undefined)
+        result["decidedBy"] = Object.freeze({ ...payload.decidedBy });
+    if (payload.rejectionReason !== undefined)
+        result["rejectionReason"] = payload.rejectionReason;
+    if (payload.resultingClaimIds !== undefined)
+        result["resultingClaimIds"] = Object.freeze([...payload.resultingClaimIds]);
+    return Object.freeze(result);
+}
+// ─── SQLiteProposalQueue ──────────────────────────────────────────────────────
+export class SQLiteProposalQueue {
+    _db;
+    _crypto;
+    _appender;
+    _grantRegistry;
+    _sourceRegistry;
+    _cache;
+    // PROPOSAL_QUEUE_FACTORY_COMPATIBLE_001: durable capability marker.
+    // Proves encrypted SQLite-backed proposal storage; does not prove LifeApiImpl assembly compat.
+    factoryCompatible = "durable-proposal-queue";
+    constructor(_db, _crypto, _appender, _grantRegistry, _sourceRegistry, _cache) {
+        this._db = _db;
+        this._crypto = _crypto;
+        this._appender = _appender;
+        this._grantRegistry = _grantRegistry;
+        this._sourceRegistry = _sourceRegistry;
+        this._cache = _cache;
+    }
+    // Load all existing proposals from proposals table, decrypt each, populate cache.
+    static async open(db, crypto, appender, grantRegistry, sourceRegistry) {
+        const cache = new Map();
+        const rows = db.prepare("SELECT * FROM proposals").all();
+        for (const row of rows) {
+            const blob = JSON.parse(row.encrypted_payload);
+            const payload = await crypto.decryptJson(blob);
+            const p = rowToProposal(row, payload);
+            cache.set(p.id, p);
+        }
+        return new SQLiteProposalQueue(db, crypto, appender, grantRegistry, sourceRegistry, cache);
+    }
+    // ── createProposal ──────────────────────────────────────────────────────────
+    async createProposal(ctx, input) {
+        const grant = this._grantRegistry.lookup(ctx.grantId);
+        if (grant === undefined) {
+            throw new Error("PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant not found in registry — " +
+                `grantId "${ctx.grantId}" has not been registered`);
+        }
+        if (grant.grantedTo.agentId !== ctx.agentId) {
+            throw new Error("PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant belongs to a different agent — " +
+                `grant.grantedTo.agentId="${grant.grantedTo.agentId}", ctx.agentId="${ctx.agentId}"`);
+        }
+        if (grant.purpose !== ctx.purpose) {
+            throw new Error(`PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: purpose mismatch — ` +
+                `grant.purpose="${grant.purpose}", ctx.purpose="${ctx.purpose}"`);
+        }
+        if (!grant.capabilities.includes("propose")) {
+            throw new Error("PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant lacks 'propose' capability — " +
+                `capabilities=${JSON.stringify(grant.capabilities)}`);
+        }
+        const now = Date.now();
+        if (new Date(grant.notAfter).getTime() <= now) {
+            throw new Error(`PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant is expired (notAfter="${grant.notAfter}")`);
+        }
+        if (new Date(grant.notBefore).getTime() > now) {
+            throw new Error(`PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant is not yet active (notBefore="${grant.notBefore}")`);
+        }
+        if (grant.revokedAt !== undefined) {
+            throw new Error(`PROPOSAL_ACCEPT_REQUIRES_VALID_GRANT_001: grant has been revoked (revokedAt="${grant.revokedAt}")`);
+        }
+        if (input.candidateClaims.length === 0) {
+            throw new Error("PROPOSAL_QUEUE_EXISTS_001: candidateClaims must not be empty");
+        }
+        const id = asProposalId(`prop_${globalThis.crypto.randomUUID()}`);
+        const nowIso = asISOTime(new Date().toISOString());
+        const encPayload = {
+            version: 1,
+            candidateClaims: [...input.candidateClaims],
+            proposedByPurpose: ctx.purpose,
+        };
+        if (input.rationale !== undefined)
+            encPayload["rationale"] = input.rationale;
+        const blob = await this._crypto.encryptJson(encPayload);
+        const blobJson = JSON.stringify(blob);
+        this._db.prepare(`INSERT INTO proposals
+         (proposal_id, status, proposed_by_agent, under_grant,
+          encrypted_payload, payload_key_id, created_at, updated_at, decided_at)
+       VALUES (?, 'pending', ?, ?, ?, ?, ?, ?, NULL)`).run(id, ctx.agentId, ctx.grantId, blobJson, blob.keyId, nowIso, nowIso);
+        const result = {
+            id,
+            proposedBy: Object.freeze({ agentId: ctx.agentId, grantId: ctx.grantId, purpose: ctx.purpose }),
+            underGrant: ctx.grantId,
+            candidateClaims: Object.freeze([...input.candidateClaims]),
+            status: "pending",
+            createdAt: nowIso,
+        };
+        if (input.rationale !== undefined)
+            result["rationale"] = input.rationale;
+        const proposal = Object.freeze(result);
+        this._cache.set(id, proposal);
+        return proposal;
+    }
+    // ── getProposal ─────────────────────────────────────────────────────────────
+    getProposal(ctx, proposalId) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        return this._cache.get(proposalId);
+    }
+    // ── listProposals ───────────────────────────────────────────────────────────
+    listProposals(ctx, filter) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        let proposals = Array.from(this._cache.values());
+        if (filter?.status !== undefined)
+            proposals = proposals.filter((p) => p.status === filter.status);
+        if (filter?.proposedByAgent !== undefined)
+            proposals = proposals.filter((p) => p.proposedBy.agentId === filter.proposedByAgent);
+        if (filter?.underGrant !== undefined)
+            proposals = proposals.filter((p) => p.underGrant === filter.underGrant);
+        return proposals;
+    }
+    // ── acceptProposal ──────────────────────────────────────────────────────────
+    async acceptProposal(ctx, proposalId, options) {
+        if (!isDecider(ctx)) {
+            throw new Error("PROPOSAL_AGENT_CANNOT_ACCEPT_001: AgentConsentContext and AuditContext cannot accept proposals");
+        }
+        const proposal = this._getExistingPending(proposalId, "accept");
+        const source = this._sourceRegistry.getSource(ctx, options.sourceId);
+        if (source === undefined) {
+            throw new Error(`SOURCE_UNKNOWN_REJECTED_001: sourceId "${options.sourceId}" is not registered`);
+        }
+        if (source.status !== "active") {
+            throw new Error(`SOURCE_INACTIVE_REJECTED_001: sourceId "${options.sourceId}" is inactive`);
+        }
+        const meta = source.metadata;
+        if (meta === undefined || !("acceptedFromProposalId" in meta)) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_REQUIRED_001: acceptance source "${options.sourceId}" must have metadata.acceptedFromProposalId`);
+        }
+        if (meta["acceptedFromProposalId"] !== proposal.id) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_MATCHES_PROPOSAL_001: metadata.acceptedFromProposalId "${String(meta["acceptedFromProposalId"])}" does not match proposal.id "${proposal.id}"`);
+        }
+        if (!("proposedBy" in meta)) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_REQUIRED_001: acceptance source "${options.sourceId}" must have metadata.proposedBy`);
+        }
+        if (meta["proposedBy"] !== proposal.proposedBy.agentId) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_MATCHES_AGENT_001: metadata.proposedBy "${String(meta["proposedBy"])}" does not match proposal.proposedBy.agentId "${proposal.proposedBy.agentId}"`);
+        }
+        if (!("underGrant" in meta)) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_REQUIRED_001: acceptance source "${options.sourceId}" must have metadata.underGrant`);
+        }
+        if (meta["underGrant"] !== proposal.underGrant) {
+            throw new Error(`PROPOSAL_ACCEPT_SOURCE_METADATA_MATCHES_GRANT_001: metadata.underGrant "${String(meta["underGrant"])}" does not match proposal.underGrant "${proposal.underGrant}"`);
+        }
+        const finalClaims = proposal.candidateClaims.map((c) => ({ ...c, sourceId: options.sourceId }));
+        // PROPOSAL_ACCEPT_ATOMIC_ROLLBACK_001: status update only after appendAll succeeds.
+        const claimIds = await this._appender.appendAll(ctx, finalClaims);
+        const nowIso = asISOTime(new Date().toISOString());
+        const encPayload = {
+            version: 1,
+            candidateClaims: [...proposal.candidateClaims],
+            proposedByPurpose: proposal.proposedBy.purpose,
+            resultingClaimIds: [...claimIds],
+            decidedBy: { ...ctx },
+        };
+        if (proposal.rationale !== undefined)
+            encPayload["rationale"] = proposal.rationale;
+        const blob = await this._crypto.encryptJson(encPayload);
+        const blobJson = JSON.stringify(blob);
+        this._db.prepare(`UPDATE proposals
+       SET status = 'accepted', encrypted_payload = ?, payload_key_id = ?,
+           updated_at = ?, decided_at = ?
+       WHERE proposal_id = ?`).run(blobJson, blob.keyId, nowIso, nowIso, proposalId);
+        const result = {
+            id: proposal.id,
+            proposedBy: proposal.proposedBy,
+            underGrant: proposal.underGrant,
+            candidateClaims: proposal.candidateClaims,
+            status: "accepted",
+            createdAt: proposal.createdAt,
+            decidedAt: nowIso,
+            decidedBy: Object.freeze({ ...ctx }),
+            resultingClaimIds: Object.freeze([...claimIds]),
+        };
+        if (proposal.rationale !== undefined)
+            result["rationale"] = proposal.rationale;
+        const accepted = Object.freeze(result);
+        this._cache.set(proposalId, accepted);
+        return accepted;
+    }
+    // ── rejectProposal ──────────────────────────────────────────────────────────
+    async rejectProposal(ctx, proposalId, reason) {
+        if (!isDecider(ctx)) {
+            throw new Error("PROPOSAL_AGENT_CANNOT_REJECT_001: AgentConsentContext and AuditContext cannot reject proposals");
+        }
+        const proposal = this._getExistingPending(proposalId, "reject");
+        const nowIso = asISOTime(new Date().toISOString());
+        const encPayload = {
+            version: 1,
+            candidateClaims: [...proposal.candidateClaims],
+            proposedByPurpose: proposal.proposedBy.purpose,
+            rejectionReason: reason,
+            decidedBy: { ...ctx },
+        };
+        if (proposal.rationale !== undefined)
+            encPayload["rationale"] = proposal.rationale;
+        const blob = await this._crypto.encryptJson(encPayload);
+        const blobJson = JSON.stringify(blob);
+        this._db.prepare(`UPDATE proposals
+       SET status = 'rejected', encrypted_payload = ?, payload_key_id = ?,
+           updated_at = ?, decided_at = ?
+       WHERE proposal_id = ?`).run(blobJson, blob.keyId, nowIso, nowIso, proposalId);
+        const result = {
+            id: proposal.id,
+            proposedBy: proposal.proposedBy,
+            underGrant: proposal.underGrant,
+            candidateClaims: proposal.candidateClaims,
+            status: "rejected",
+            createdAt: proposal.createdAt,
+            decidedAt: nowIso,
+            decidedBy: Object.freeze({ ...ctx }),
+            rejectionReason: reason,
+        };
+        if (proposal.rationale !== undefined)
+            result["rationale"] = proposal.rationale;
+        const rejected = Object.freeze(result);
+        this._cache.set(proposalId, rejected);
+        return rejected;
+    }
+    // ── Private helpers ─────────────────────────────────────────────────────────
+    _getExistingPending(proposalId, action) {
+        const proposal = this._cache.get(proposalId);
+        if (proposal === undefined) {
+            throw new Error(`PROPOSAL_QUEUE_EXISTS_001: proposal "${proposalId}" not found`);
+        }
+        if (proposal.status !== "pending") {
+            throw new Error(`PROPOSAL_STATUS_IMMUTABLE_AFTER_DECISION_001: proposal "${proposalId}" is ` +
+                `"${proposal.status}" and cannot be ${action}ed again`);
+        }
+        return proposal;
+    }
+}
+//# sourceMappingURL=sqlite-proposal-queue.js.map

package/dist/proposal/sqlite-proposal-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-proposal-queue.js","sourceRoot":"","sources":["../../src/proposal/sqlite-proposal-queue.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,uGAAuG;AACvG,kGAAkG;AAClG,oDAAoD;AACpD,kGAAkG;AAClG,2FAA2F;AAC3F,iGAAiG;AACjG,0EAA0E;AAC1E,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,EAAE;AACF,uGAAuG;AACvG,yGAAyG;AACzG,iGAAiG;AACjG,EAAE;AACF,SAAS;AACT,uGAAuG;AACvG,kEAAkE;AAmBlE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AA6B1D,gFAAgF;AAEhF,SAAS,SAAS,CAAC,GAAkB;IACnC,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,GAAgB,EAAE,OAAiC;IACxE,MAAM,MAAM,GAA4B;QACtC,EAAE,EAAe,GAAG,CAAC,WAAyB;QAC9C,UAAU,EAAO,MAAM,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,iBAAiB;YAC9B,OAAO,EAAE,GAAG,CAAC,WAAsB;YACnC,OAAO,EAAE,OAAO,CAAC,iBAAiB;SACnC,CAAC;QACF,UAAU,EAAO,GAAG,CAAC,WAAsB;QAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5D,MAAM,EAAW,GAAG,CAAC,MAAwB;QAC7C,SAAS,EAAQ,GAAG,CAAC,UAAqB;KAC3C,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,KAAa,SAAS;QAAE,MAAM,CAAC,WAAW,CAAC,GAAW,OAAO,CAAC,SAAS,CAAC;IAC7F,IAAI,GAAG,CAAC,UAAU,KAAgB,IAAI;QAAO,MAAM,CAAC,WAAW,CAAC,GAAW,GAAG,CAAC,UAAqB,CAAC;IACrG,IAAI,OAAO,CAAC,SAAS,KAAa,SAAS;QAAE,MAAM,CAAC,WAAW,CAAC,GAAW,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnH,IAAI,OAAO,CAAC,eAAe,KAAO,SAAS;QAAE,MAAM,CAAC,iBAAiB,CAAC,GAAK,OAAO,CAAC,eAAe,CAAC;IACnG,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAc,CAAC,CAAC;IACtI,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAwB,CAAC;AACtD,CAAC;AAED,iFAAiF;AAEjF,MAAM,OAAO,mBAAmB;IAOX;IACA;IACA;IACA;IACA;IACA;IAVnB,oEAAoE;IACpE,+FAA+F;IACtF,iBAAiB,GAAG,wBAAiC,CAAC;IAE/D,YACmB,GAAyB,EACzB,OAA+B,EAC/B,SAAsC,EACtC,cAA8B,EAC9B,eAA+B,EAC/B,MAA0C;QAL1C,QAAG,GAAH,GAAG,CAAsB;QACzB,YAAO,GAAP,OAAO,CAAwB;QAC/B,cAAS,GAAT,SAAS,CAA6B;QACtC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAAgB;QAC/B,WAAM,GAAN,MAAM,CAAoC;IAC1D,CAAC;IAEJ,kFAAkF;IAClF,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,EAAwB,EACxB,MAA8B,EAC9B,QAAqC,EACrC,aAA6B,EAC7B,cAA8B;QAE9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC9C,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,GAAG,EAAmB,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAkB,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAA6B,CAAC;YAC3E,MAAM,CAAC,GAAS,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,cAAc,CAAC,GAAwB,EAAE,KAAoB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,0EAA0E;gBACxE,YAAY,GAAG,CAAC,OAAO,2BAA2B,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,4BAA4B,KAAK,CAAC,SAAS,CAAC,OAAO,mBAAmB,GAAG,CAAC,OAAO,GAAG,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,+DAA+D;gBAC7D,kBAAkB,KAAK,CAAC,OAAO,mBAAmB,GAAG,CAAC,OAAO,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,+EAA+E;gBAC7E,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,yEAAyE,KAAK,CAAC,QAAQ,IAAI,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,iFAAiF,KAAK,CAAC,SAAS,IAAI,CACrG,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,gFAAgF,KAAK,CAAC,SAAS,IAAI,CACpG,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,EAAE,GAAO,YAAY,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnD,MAAM,UAAU,GAA6B;YAC3C,OAAO,EAAY,CAAC;YACpB,eAAe,EAAI,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;YAC7C,iBAAiB,EAAE,GAAG,CAAC,OAAO;SAC/B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAG,UAAsC,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAE1G,MAAM,IAAI,GAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,OAAO,CACd;;;qDAG+C,CAChD,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,MAAM,GAA4B;YACtC,EAAE;YACF,UAAU,EAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACpG,UAAU,EAAO,GAAG,CAAC,OAAO;YAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,EAAW,SAA2B;YAC5C,SAAS,EAAQ,MAAM;SACxB,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAwB,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,+EAA+E;IAE/E,WAAW,CAAC,GAAkB,EAAE,UAAsB;QACpD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,+EAA+E;IAE/E,aAAa,CAAC,GAAkB,EAAE,MAAuB;QACvD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,MAAM,KAAc,SAAS;YAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAiB,MAAM,CAAC,MAAM,CAAC,CAAC;QACvH,IAAI,MAAM,EAAE,eAAe,KAAK,SAAS;YAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC;QAChI,IAAI,MAAM,EAAE,UAAU,KAAU,SAAS;YAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAa,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3H,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,cAAc,CAClB,GAA2B,EAC3B,UAAsB,EACtB,OAAyB;QAEzB,IAAI,CAAC,SAAS,CAAC,GAAoB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,QAAQ,eAAe,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,OAAO,CAAC,QAAQ,6CAA6C,CAClI,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,wBAAwB,CAAC,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,0FAA0F,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,iCAAiC,QAAQ,CAAC,EAAE,GAAG,CAChL,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oEAAoE,OAAO,CAAC,QAAQ,iCAAiC,CACtH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,iDAAiD,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,CACrL,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oEAAoE,OAAO,CAAC,QAAQ,iCAAiC,CACtH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,yCAAyC,QAAQ,CAAC,UAAU,GAAG,CACrK,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAuB,QAAQ,CAAC,eAAe,CAAC,GAAG,CAClE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC9C,CAAC;QAEF,oFAAoF;QACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,MAAM,GAAK,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAErD,MAAM,UAAU,GAA6B;YAC3C,OAAO,EAAY,CAAC;YACpB,eAAe,EAAI,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC;YAChD,iBAAiB,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO;YAC9C,iBAAiB,EAAE,CAAC,GAAG,QAAQ,CAAC;YAChC,SAAS,EAAU,EAAE,GAAG,GAAG,EAA0D;SACtF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAG,UAAsC,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAEhH,MAAM,IAAI,GAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,OAAO,CACd;;;6BAGuB,CACxB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,MAAM,GAA4B;YACtC,EAAE,EAAiB,QAAQ,CAAC,EAAE;YAC9B,UAAU,EAAS,QAAQ,CAAC,UAAU;YACtC,UAAU,EAAS,QAAQ,CAAC,UAAU;YACtC,eAAe,EAAI,QAAQ,CAAC,eAAe;YAC3C,MAAM,EAAa,UAA4B;YAC/C,SAAS,EAAU,QAAQ,CAAC,SAAS;YACrC,SAAS,EAAU,MAAM;YACzB,SAAS,EAAU,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;YAC5C,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAc,CAAC;SAC7D,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAwB,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,UAAsB,EAAE,MAAc;QAC/E,IAAI,CAAC,SAAS,CAAC,GAAoB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAK,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAErD,MAAM,UAAU,GAA6B;YAC3C,OAAO,EAAY,CAAC;YACpB,eAAe,EAAI,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC;YAChD,iBAAiB,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO;YAC9C,eAAe,EAAI,MAAM;YACzB,SAAS,EAAU,EAAE,GAAG,GAAG,EAA0D;SACtF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAG,UAAsC,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAEhH,MAAM,IAAI,GAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,OAAO,CACd;;;6BAGuB,CACxB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,MAAM,GAA4B;YACtC,EAAE,EAAe,QAAQ,CAAC,EAAE;YAC5B,UAAU,EAAO,QAAQ,CAAC,UAAU;YACpC,UAAU,EAAO,QAAQ,CAAC,UAAU;YACpC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,MAAM,EAAW,UAA4B;YAC7C,SAAS,EAAQ,QAAQ,CAAC,SAAS;YACnC,SAAS,EAAQ,MAAM;YACvB,SAAS,EAAQ,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;YAC1C,eAAe,EAAE,MAAM;SACxB,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAwB,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,+EAA+E;IAEvE,mBAAmB,CAAC,UAAsB,EAAE,MAA2B;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,UAAU,aAAa,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,2DAA2D,UAAU,OAAO;gBAC1E,IAAI,QAAQ,CAAC,MAAM,mBAAmB,MAAM,UAAU,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/resolution/resolve-claims.d.ts

@@ -0,0 +1,4 @@
+import type { ClaimMeta, ClaimPredicate } from "../types/claim.js";
+import type { TrustProfile } from "./trust-profile.js";
+import type { ResolutionResult } from "./types.js";
+export declare function resolveClaims(claims: ReadonlyArray<ClaimMeta>, trust: TrustProfile, predicate: ClaimPredicate): ResolutionResult;

package/dist/resolution/resolve-claims.js

@@ -0,0 +1,101 @@
+// Slice-02/02b: Claim-level resolution — pure function, no I/O, no mutation.
+//
+// Invariants (see docs/INVARIANTS.md):
+//   TRUST_PREDICATE_SPECIFIC_001            — trust scored per (source, predicate) pair
+//   TRUST_UNKNOWN_LOW_001                   — unregistered pair → LOW
+//   RESOLUTION_TIE_DISPUTED_001             — equal-priority tie → "disputed", never silent winner
+//   RESOLUTION_USER_OVERRIDE_EXPLICIT_001   — overrides field wins by policy (not just HIGH trust)
+//   RESOLUTION_USER_OVERRIDE_RETRACTABLE_001— retracted override → fallback to trust-based
+//   RESOLUTION_DETERMINISTIC_001            — output invariant to input array order
+//   RESOLUTION_RETRACTED_CANNOT_WIN_001     — retracted claims excluded from live set
+//   RESOLUTION_SUPERSEDED_CANNOT_WIN_001    — live superseder removes original from live set
+//   RESOLUTION_SUPERSEDE_RETRACTION_POLICY_001 — retracted superseder → original resurrects (Policy A)
+//   RESOLUTION_CONFLICTS_VISIBLE_001        — all live non-winners in competingClaimIds
+//   RESOLUTION_NO_MUTATION_001              — never mutates input array or claims
+//   RESOLUTION_REASON_CODES_001             — typed reasonCode on every result
+//
+// See docs/RESOLUTION_POLICY.md for policy decisions.
+import { TRUST_ORDER } from "./types.js";
+const POLICY_ID = "trust-then-seq-v1";
+const POLICY_VERSION = "1";
+export function resolveClaims(claims, trust, predicate) {
+    // Deterministic base: sort by recordedSeq ascending so every downstream
+    // operation is order-independent. (RESOLUTION_DETERMINISTIC_001)
+    // recordedSeq is ONLY used for ordering — never as a tiebreaker that picks a winner.
+    const sorted = [...claims].sort((a, b) => a.recordedSeq - b.recordedSeq);
+    const allIds = sorted.map((c) => c.id);
+    // ── Step 1: Find retracted claim IDs ────────────────────────────────────────
+    // A claim C is retracted if any claim has `retracts === C.id`.
+    // (RESOLUTION_RETRACTED_CANNOT_WIN_001)
+    const retractedIds = new Set(sorted.flatMap((c) => (c.retracts !== undefined ? [c.retracts] : [])));
+    // ── Step 2: Retraction markers ────────────────────────────────────────────
+    // Claims that carry `retracts` are lifecycle operations, not value assertions.
+    // They cannot win. (Note: claims with `supersedes` or `overrides` CAN win.)
+    const retractionMarkerIds = new Set(sorted.flatMap((c) => (c.retracts !== undefined ? [c.id] : [])));
+    // ── Step 3: Find superseded claim IDs ───────────────────────────────────────
+    // A claim X is superseded if any NON-retracted claim S has `S.supersedes === X.id`.
+    // Retracted supersede chains are broken — the original resurrects. (Policy A —
+    // RESOLUTION_SUPERSEDE_RETRACTION_POLICY_001, docs/RESOLUTION_POLICY.md)
+    const supersededIds = new Set(sorted.flatMap((c) => c.supersedes !== undefined && !retractedIds.has(c.id) ? [c.supersedes] : []));
+    // ── Step 4: Determine live claims for this predicate ────────────────────────
+    // A claim is "live" if:
+    //   - its predicate matches the resolution target
+    //   - it has not been retracted
+    //   - it has not been superseded by a live (non-retracted) claim
+    //   - it is not itself a retraction marker
+    // Note: claims with `overrides` set ARE live assertions (they win by policy, not by removal).
+    const liveClaims = sorted.filter((c) => c.predicate === predicate &&
+        !retractedIds.has(c.id) &&
+        !supersededIds.has(c.id) &&
+        !retractionMarkerIds.has(c.id));
+    // ── Step 5: Edge case — no live claims ──────────────────────────────────────
+    if (liveClaims.length === 0) {
+        return result("disputed", "NO_LIVE_CLAIMS", undefined, [], allIds, "no-live-claims");
+    }
+    // ── Step 6: Trivial case — single live claim ─────────────────────────────────
+    if (liveClaims.length === 1) {
+        return result("resolved", "ONLY_LIVE_CLAIM", liveClaims[0].id, [], allIds, "single-live-claim");
+    }
+    // ── Step 7: UserOverride policy — BEFORE trust comparison ───────────────────
+    // A live claim with `overrides` set wins by policy, regardless of trust level.
+    // The override TARGET stays in the live set (visible in competingClaimIds).
+    // (RESOLUTION_USER_OVERRIDE_EXPLICIT_001, Policy B — docs/RESOLUTION_POLICY.md)
+    const liveOverrides = liveClaims.filter((c) => c.overrides !== undefined);
+    if (liveOverrides.length === 1) {
+        const winner = liveOverrides[0];
+        const competing = liveClaims.filter((c) => c.id !== winner.id).map((c) => c.id);
+        return result("resolved", "USER_OVERRIDE_WIN", winner.id, competing, allIds, "user-override-policy");
+    }
+    if (liveOverrides.length > 1) {
+        // Multiple live overrides conflict with each other → disputed
+        return result("disputed", "DISPUTED_EQUAL_PRIORITY", undefined, liveClaims.map((c) => c.id), allIds, "multiple-live-overrides");
+    }
+    // ── Step 8: Trust-based resolution ──────────────────────────────────────────
+    // (TRUST_PREDICATE_SPECIFIC_001 — score is per-pair, not per-source)
+    const scored = liveClaims.map((c) => ({
+        claim: c,
+        trustScore: TRUST_ORDER[trust.trustFor(c.sourceId, predicate)],
+    }));
+    const maxScore = Math.max(...scored.map((s) => s.trustScore));
+    const topClaims = scored.filter((s) => s.trustScore === maxScore);
+    if (topClaims.length === 1) {
+        const winner = topClaims[0].claim;
+        const competing = liveClaims.filter((c) => c.id !== winner.id).map((c) => c.id);
+        const levelName = trustLevelName(maxScore);
+        return result("resolved", "TRUST_WIN", winner.id, competing, allIds, `highest-trust:${levelName}`);
+    }
+    // ── Step 9: Genuine tie — disputed ──────────────────────────────────────────
+    // (RESOLUTION_TIE_DISPUTED_001 — equal priority → no silent winner)
+    return result("disputed", "DISPUTED_EQUAL_PRIORITY", undefined, liveClaims.map((c) => c.id), allIds, `trust-tie:${trustLevelName(maxScore)}`);
+}
+// ─── private helpers ──────────────────────────────────────────────────────────
+function result(status, reasonCode, winningClaimId, competingClaimIds, allConsideredClaimIds, reason) {
+    return winningClaimId !== undefined
+        ? { status, reasonCode, winningClaimId, competingClaimIds, allConsideredClaimIds, reason, policyId: POLICY_ID, policyVersion: POLICY_VERSION }
+        : { status, reasonCode, competingClaimIds, allConsideredClaimIds, reason, policyId: POLICY_ID, policyVersion: POLICY_VERSION };
+}
+function trustLevelName(score) {
+    return Object.keys(TRUST_ORDER)
+        .find((k) => TRUST_ORDER[k] === score) ?? "UNKNOWN";
+}
+//# sourceMappingURL=resolve-claims.js.map

package/dist/resolution/resolve-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-claims.js","sourceRoot":"","sources":["../../src/resolution/resolve-claims.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,uCAAuC;AACvC,wFAAwF;AACxF,sEAAsE;AACtE,mGAAmG;AACnG,mGAAmG;AACnG,2FAA2F;AAC3F,oFAAoF;AACpF,sFAAsF;AACtF,6FAA6F;AAC7F,uGAAuG;AACvG,wFAAwF;AACxF,kFAAkF;AAClF,+EAA+E;AAC/E,EAAE;AACF,sDAAsD;AAMtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,SAAS,GAAQ,mBAAmB,CAAC;AAC3C,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,UAAU,aAAa,CAC3B,MAAgC,EAChC,KAAmB,EACnB,SAAyB;IAEzB,wEAAwE;IACxE,iEAAiE;IACjE,qFAAqF;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,MAAM,GAA2B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE/D,+EAA+E;IAC/E,+DAA+D;IAC/D,wCAAwC;IACxC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACtE,CAAC;IAEF,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAChE,CAAC;IAEF,+EAA+E;IAC/E,oFAAoF;IACpF,+EAA+E;IAC/E,yEAAyE;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5E,CACF,CAAC;IAEF,+EAA+E;IAC/E,wBAAwB;IACxB,kDAAkD;IAClD,gCAAgC;IAChC,iEAAiE;IACjE,2CAA2C;IAC3C,8FAA8F;IAC9F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,SAAS;QACzB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACjC,CAAC;IAEF,+EAA+E;IAC/E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAC/D,gBAAgB,CAAC,CAAC;IACtB,CAAC;IAED,gFAAgF;IAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,UAAU,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EACxE,mBAAmB,CAAC,CAAC;IACzB,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAE1E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAM,aAAa,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC,UAAU,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EACzE,sBAAsB,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,8DAA8D;QAC9D,OAAO,MAAM,CAAC,UAAU,EAAE,yBAAyB,EAAE,SAAS,EAC5D,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;IAED,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,EAAO,CAAC;QACb,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;KAC/D,CAAC,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAI,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;IAElE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAM,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QACtC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EACjE,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,+EAA+E;IAC/E,oEAAoE;IACpE,OAAO,MAAM,CAAC,UAAU,EAAE,yBAAyB,EAAE,SAAS,EAC5D,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EACnC,aAAa,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,iFAAiF;AAEjF,SAAS,MAAM,CACb,MAA+B,EAC/B,UAAgC,EAChC,cAAmC,EACnC,iBAAyC,EACzC,qBAA6C,EAC7C,MAAc;IAEd,OAAO,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE;QAC9I,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AACnI,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAQ,MAAM,CAAC,IAAI,CAAC,WAAW,CAAqC;SACjE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC;AACxD,CAAC"}

package/dist/resolution/trust-profile.d.ts

@@ -0,0 +1,12 @@
+import type { SourceId } from "../types/ids.js";
+import type { ClaimPredicate } from "../types/claim.js";
+import type { TrustLevel } from "./types.js";
+export interface TrustProfile {
+    trustFor(sourceId: SourceId, predicate: ClaimPredicate): TrustLevel;
+}
+export declare class StaticTrustTable implements TrustProfile {
+    private readonly _table;
+    set(sourceId: SourceId, predicate: ClaimPredicate, level: TrustLevel): this;
+    trustFor(sourceId: SourceId, predicate: ClaimPredicate): TrustLevel;
+    static empty(): StaticTrustTable;
+}

package/dist/resolution/trust-profile.js

@@ -0,0 +1,23 @@
+// Slice-02: TrustProfile — predicate-specific trust lookup.
+// TRUST_PREDICATE_SPECIFIC_001: trust is (sourceId × predicate), never source alone.
+// TRUST_UNKNOWN_LOW_001: unknown pair → LOW, never MEDIUM or HIGH.
+// StaticTrustTable — explicit (source, predicate) → TrustLevel table.
+// All entries are explicit; no glob or wildcard matching.
+// Entries not in the table → LOW. (TRUST_UNKNOWN_LOW_001)
+export class StaticTrustTable {
+    _table = new Map();
+    set(sourceId, predicate, level) {
+        this._table.set(compositeKey(sourceId, predicate), level);
+        return this;
+    }
+    trustFor(sourceId, predicate) {
+        return this._table.get(compositeKey(sourceId, predicate)) ?? "LOW";
+    }
+    static empty() {
+        return new StaticTrustTable();
+    }
+}
+function compositeKey(sourceId, predicate) {
+    return `${sourceId}::${predicate}`;
+}
+//# sourceMappingURL=trust-profile.js.map

package/dist/resolution/trust-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-profile.js","sourceRoot":"","sources":["../../src/resolution/trust-profile.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,qFAAqF;AACrF,mEAAmE;AAUnE,sEAAsE;AACtE,0DAA0D;AAC1D,0DAA0D;AAC1D,MAAM,OAAO,gBAAgB;IACV,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAExD,GAAG,CAAC,QAAkB,EAAE,SAAyB,EAAE,KAAiB;QAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,QAAkB,EAAE,SAAyB;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,QAAkB,EAAE,SAAyB;IACjE,OAAO,GAAG,QAAQ,KAAK,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/resolution/types.d.ts

@@ -0,0 +1,15 @@
+import type { ClaimId } from "../types/ids.js";
+export type TrustLevel = "HIGH" | "MEDIUM" | "LOW";
+export declare const TRUST_ORDER: Readonly<Record<TrustLevel, number>>;
+export type ResolutionStatus = "resolved" | "disputed";
+export type ResolutionReasonCode = "ONLY_LIVE_CLAIM" | "TRUST_WIN" | "USER_OVERRIDE_WIN" | "DISPUTED_EQUAL_PRIORITY" | "NO_LIVE_CLAIMS";
+export interface ResolutionResult {
+    readonly status: ResolutionStatus;
+    readonly reasonCode: ResolutionReasonCode;
+    readonly winningClaimId?: ClaimId;
+    readonly competingClaimIds: ReadonlyArray<ClaimId>;
+    readonly allConsideredClaimIds: ReadonlyArray<ClaimId>;
+    readonly reason: string;
+    readonly policyId: string;
+    readonly policyVersion: string;
+}

package/dist/resolution/types.js

@@ -0,0 +1,8 @@
+// Slice-02: Resolution types.
+// See docs/INVARIANTS.md for invariant IDs.
+export const TRUST_ORDER = Object.freeze({
+    HIGH: 2,
+    MEDIUM: 1,
+    LOW: 0,
+});
+//# sourceMappingURL=types.js.map

package/dist/resolution/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/resolution/types.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,4CAA4C;AAQ5C,MAAM,CAAC,MAAM,WAAW,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAI,CAAC;IACT,MAAM,EAAE,CAAC;IACT,GAAG,EAAK,CAAC;CACV,CAAC,CAAC"}

package/dist/sdk/create-backend-integrated-life-api-for-test.d.ts

@@ -0,0 +1,23 @@
+import { BackendContextMintingBoundary } from "../auth/backend-context-minting-boundary.js";
+import { InMemoryTenantBoundary } from "../auth/in-memory-tenant-boundary.js";
+import { InMemoryGrantResolver } from "../auth/in-memory-grant-resolver.js";
+import type { LifeApi } from "./life-api.js";
+import type { TenantMembership } from "../auth/in-memory-tenant-boundary.js";
+import type { GrantRecord } from "../auth/in-memory-grant-resolver.js";
+import type { AuthAdapter, Clock } from "../auth/types.js";
+/** @remarks TEST/DEV ONLY — not for production use. */
+export interface BackendIntegratedTestFactoryConfig {
+    readonly memberships?: ReadonlyArray<TenantMembership>;
+    readonly grants?: ReadonlyArray<GrantRecord>;
+    readonly clock?: Clock;
+    readonly adapter?: AuthAdapter;
+}
+/** @remarks TEST/DEV ONLY — not for production use. */
+export interface BackendIntegratedTestFactoryOutput {
+    readonly api: LifeApi;
+    readonly auth: BackendContextMintingBoundary;
+    readonly tenantBoundary: InMemoryTenantBoundary;
+    readonly grantResolver: InMemoryGrantResolver;
+}
+/** @remarks TEST/DEV ONLY — not for production use. NOT exported from src/index.ts. */
+export declare function createBackendIntegratedLifeApiForTest(config?: BackendIntegratedTestFactoryConfig): Promise<BackendIntegratedTestFactoryOutput>;