life-as-api 0.2.0

package/dist/sdk/create-backend-integrated-life-api-for-test.js

@@ -0,0 +1,240 @@
+// TEST/DEV ONLY — createBackendIntegratedLifeApiForTest.
+// Do NOT export from src/index.ts. Do NOT use in production.
+//
+// AUTH_FACTORY_OUTPUT_CONTEXT_MINTING_BOUNDARY_001: the returned `auth` is a
+//   ContextMintingBoundary (BackendContextMintingBoundary) — callers may not bypass it
+//   to reach AccessContextIssuer directly.
+// AUTH_TEST_FACTORY_BACKEND_INTEGRATED_001: this factory uses BackendContextMintingBoundary
+//   (not TestContextMintingBoundary); TenantBoundary + GrantResolver backend checks fire
+//   for all mints.
+import { InMemoryFactStore } from "../store/in-memory-fact-store.js";
+import { InMemorySourceRegistry } from "../source/in-memory-source-registry.js";
+import { SourceAwareFactStore } from "../source/source-aware-fact-store.js";
+import { InMemoryRawDocumentStore } from "../evidence/in-memory-raw-document-store.js";
+import { GrantRegistry } from "../consent/grant-registry.js";
+import { InMemoryAuditLog } from "../audit/audit-log.js";
+import { StaticTrustTable } from "../resolution/trust-profile.js";
+import { AesGcmCryptoBoundary } from "../crypto/aes-gcm.js";
+import { StaticKeyProvider } from "../crypto/static-key.js";
+import { EvidenceBackedContextQueryService } from "../surface/evidence-backed-context-query.js";
+import { EvidenceBackedClaimCreator } from "../evidence/evidence-backed-claim-creator.js";
+import { InMemoryProposalQueue } from "../proposal/in-memory-proposal-queue.js";
+import { SourceAwareClaimAppender } from "../proposal/source-aware-claim-appender.js";
+import { InMemoryUnitOfWork } from "../persistence/in-memory-unit-of-work.js";
+import { AccessContextIssuer } from "../auth/access-context-issuer.js";
+import { DefaultAuthorizationPolicy } from "../auth/default-authorization-policy.js";
+import { BackendContextMintingBoundary } from "../auth/backend-context-minting-boundary.js";
+import { InMemoryTenantBoundary } from "../auth/in-memory-tenant-boundary.js";
+import { InMemoryGrantResolver } from "../auth/in-memory-grant-resolver.js";
+import { FakeAuthAdapter } from "../auth/fake-auth-adapter.js";
+import { ERASURE_TOMBSTONE_PREDICATE, ERASURE_TOMBSTONE_PAYLOAD, SYSTEM_ERASURE_SOURCE_ID, } from "../erasure/tombstone.js";
+import { asISOTime, asAuditId } from "../types/ids.js";
+import { validateCreateGrantAdminInput, validateCreateSourceAdminInput, validateCreateClaimWithNewEvidenceInput, validateCreateClaimFromExistingEvidenceInput, validateCreateProposalInput, validateAcceptProposalInput, validateRejectProposalInput, validateQueryContractsInput, } from "./validation.js";
+import { buildAuditEvent } from "../audit/audit-log.js";
+// ─── Internal LifeApi implementation ─────────────────────────────────────────
+// Duplicated from create-life-api.ts intentionally — avoids coupling this
+// test/dev module to the production module's internals.
+class BackendIntegratedLifeApiImpl {
+    _querySvc;
+    _claimCreator;
+    _proposalQueue;
+    _docStore;
+    _sourceRegistry;
+    _grantRegistry;
+    _issuer;
+    _factStore;
+    _auditLog;
+    constructor(_querySvc, _claimCreator, _proposalQueue, _docStore, _sourceRegistry, _grantRegistry, _issuer, _factStore, _auditLog) {
+        this._querySvc = _querySvc;
+        this._claimCreator = _claimCreator;
+        this._proposalQueue = _proposalQueue;
+        this._docStore = _docStore;
+        this._sourceRegistry = _sourceRegistry;
+        this._grantRegistry = _grantRegistry;
+        this._issuer = _issuer;
+        this._factStore = _factStore;
+        this._auditLog = _auditLog;
+    }
+    async queryContracts(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateQueryContractsInput(input);
+        return this._querySvc.queryContracts(ctx, input);
+    }
+    async createClaimWithNewEvidence(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateClaimWithNewEvidenceInput(input);
+        return this._claimCreator.createClaimWithNewEvidence(ctx, input);
+    }
+    async createClaimFromExistingEvidence(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateClaimFromExistingEvidenceInput(input);
+        return this._claimCreator.createClaimFromExistingEvidence(ctx, input);
+    }
+    async createProposal(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateProposalInput(input);
+        return this._proposalQueue.createProposal(ctx, input);
+    }
+    async acceptProposal(ctx, proposalId, options) {
+        this._issuer.assertTrusted(ctx);
+        validateAcceptProposalInput(proposalId, options);
+        return this._proposalQueue.acceptProposal(ctx, proposalId, options);
+    }
+    async rejectProposal(ctx, proposalId, reason) {
+        this._issuer.assertTrusted(ctx);
+        validateRejectProposalInput(proposalId, reason);
+        return this._proposalQueue.rejectProposal(ctx, proposalId, reason);
+    }
+    getProposal(ctx, proposalId) {
+        this._issuer.assertTrusted(ctx);
+        return this._proposalQueue.getProposal(ctx, proposalId);
+    }
+    listProposals(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._proposalQueue.listProposals(ctx, filter);
+    }
+    getEvidenceRef(ctx, evidenceId) {
+        this._issuer.assertTrusted(ctx);
+        return this._docStore.getEvidenceRef(ctx, evidenceId);
+    }
+    listEvidenceRefs(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._docStore.listEvidenceRefs(ctx, filter);
+    }
+    createSourceAdmin(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        this._assertPrivileged(ctx);
+        validateCreateSourceAdminInput(input);
+        const evId = input.evidenceRef?.id;
+        if (evId !== undefined) {
+            const existing = this._docStore.getEvidenceRef(ctx, evId);
+            if (existing === undefined) {
+                throw new Error(`SDK_SOURCE_REGISTRATION_EVIDENCE_VALIDATED_001: evidenceRef.id "${evId}" ` +
+                    `does not exist in the document store`);
+            }
+        }
+        return this._sourceRegistry.registerSource(ctx, input);
+    }
+    listSources(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._sourceRegistry.listSources(ctx, filter);
+    }
+    createGrantAdmin(ctx, grant) {
+        this._issuer.assertTrusted(ctx);
+        this._assertPrivileged(ctx);
+        validateCreateGrantAdminInput(grant);
+        this._grantRegistry.register(grant);
+        return grant;
+    }
+    async requestErasure(ctx, subject) {
+        this._issuer.assertTrusted(ctx);
+        if (ctx.kind !== "owner") {
+            throw Object.assign(new Error("ERASURE_REQUEST_DENIED_001: only OwnerContext may call requestErasure"), { code: "ERASURE_REQUEST_DENIED_001" });
+        }
+        const _SYSTEM_CTX = { kind: "system_projection" };
+        if (this._sourceRegistry.getSource(_SYSTEM_CTX, SYSTEM_ERASURE_SOURCE_ID) === undefined) {
+            this._sourceRegistry.registerSource(_SYSTEM_CTX, {
+                id: SYSTEM_ERASURE_SOURCE_ID,
+                kind: "user_manual",
+                label: "System erasure tombstone source",
+            });
+        }
+        const existing = await this._factStore.readClaims(ctx, {
+            subject,
+            predicates: [ERASURE_TOMBSTONE_PREDICATE],
+        });
+        if (existing.length > 0) {
+            throw Object.assign(new Error(`ERASURE_SUBJECT_ALREADY_ERASED_001: subject "${subject}" already has an erasure tombstone`), { code: "ERASURE_SUBJECT_ALREADY_ERASED_001" });
+        }
+        const now = asISOTime(new Date().toISOString());
+        const auditEvent = buildAuditEvent({
+            actor: `owner:${ctx.personId}`,
+            purpose: "erasure_request",
+            decision: "allow",
+            reasonCode: "ALLOWED",
+            selectorFingerprint: `erasure:subject:${subject}`,
+            resultCount: 0,
+            resultClaimIds: [],
+            now,
+        });
+        await this._auditLog.write(auditEvent);
+        await this._factStore.append({
+            subject,
+            predicate: ERASURE_TOMBSTONE_PREDICATE,
+            payload: ERASURE_TOMBSTONE_PAYLOAD,
+            sourceId: SYSTEM_ERASURE_SOURCE_ID,
+            validFrom: now,
+        }, ctx);
+    }
+    async getErasureStatus(ctx, subject) {
+        this._issuer.assertTrusted(ctx);
+        if (ctx.kind !== "owner") {
+            throw Object.assign(new Error("ERASURE_REQUEST_DENIED_001: only OwnerContext may call getErasureStatus"), { code: "ERASURE_REQUEST_DENIED_001" });
+        }
+        const tombstones = await this._factStore.readClaims(ctx, {
+            subject,
+            predicates: [ERASURE_TOMBSTONE_PREDICATE],
+        });
+        if (tombstones.length === 0)
+            return undefined;
+        const tombstone = tombstones[0];
+        const auditEvents = this._auditLog.readAll();
+        const erasureAudit = auditEvents.find(e => e.purpose === "erasure_request" &&
+            e.selectorFingerprint === `erasure:subject:${subject}`);
+        return {
+            subject,
+            recordedAt: tombstone.recordedAt,
+            auditEventId: erasureAudit?.id ?? asAuditId(`${tombstone.id}-audit`),
+        };
+    }
+    _assertPrivileged(ctx) {
+        const kind = ctx.kind;
+        if (kind !== "owner" && kind !== "system_projection" && kind !== "test") {
+            throw new Error(`SDK_PRIVILEGED_MUTATION_GUARDED_001: "${kind}" context cannot perform privileged SDK mutations`);
+        }
+    }
+}
+// ─── Public factory ───────────────────────────────────────────────────────────
+/** @remarks TEST/DEV ONLY — not for production use. NOT exported from src/index.ts. */
+export async function createBackendIntegratedLifeApiForTest(config) {
+    const keyProvider = await StaticKeyProvider.generate("backend-integrated-test-ephemeral");
+    const crypto = new AesGcmCryptoBoundary(keyProvider);
+    const rawStore = new InMemoryFactStore();
+    const sourceReg = new InMemorySourceRegistry();
+    const sourceStore = new SourceAwareFactStore(rawStore, sourceReg);
+    const docStore = new InMemoryRawDocumentStore(crypto);
+    const grantReg = new GrantRegistry();
+    const auditLog = new InMemoryAuditLog();
+    const trust = StaticTrustTable.empty();
+    const querySvc = new EvidenceBackedContextQueryService(sourceStore, grantReg, auditLog, sourceReg, docStore, trust);
+    const uow = new InMemoryUnitOfWork(docStore, sourceReg, rawStore);
+    const claimCreator = new EvidenceBackedClaimCreator(docStore, sourceReg, sourceStore, uow);
+    const appender = new SourceAwareClaimAppender(sourceStore, sourceReg, uow);
+    const proposalQueue = new InMemoryProposalQueue(appender, grantReg, sourceReg);
+    const issuer = new AccessContextIssuer();
+    const clock = config?.clock ?? { now: () => new Date().toISOString() };
+    const tenantBoundary = new InMemoryTenantBoundary(config?.memberships ?? []);
+    const grantResolver = new InMemoryGrantResolver(config?.grants ?? [], clock);
+    const defaultPrincipal = {
+        principalId: "test-principal",
+        principalType: "user",
+        tenantId: "test-tenant",
+        roles: ["owner"],
+        grantIds: [],
+        expiresAt: "2099-01-01T00:00:00Z",
+        issuedAt: "2020-01-01T00:00:00Z",
+    };
+    const adapter = config?.adapter ?? new FakeAuthAdapter(defaultPrincipal);
+    const policy = new DefaultAuthorizationPolicy(clock);
+    const auth = new BackendContextMintingBoundary({
+        adapter,
+        policy,
+        issuer,
+        clock,
+        tenantBoundary,
+        grantResolver,
+    });
+    const api = new BackendIntegratedLifeApiImpl(querySvc, claimCreator, proposalQueue, docStore, sourceReg, grantReg, issuer, sourceStore, auditLog);
+    return { api, auth, tenantBoundary, grantResolver };
+}
+//# sourceMappingURL=create-backend-integrated-life-api-for-test.js.map

package/dist/sdk/create-backend-integrated-life-api-for-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-backend-integrated-life-api-for-test.js","sourceRoot":"","sources":["../../src/sdk/create-backend-integrated-life-api-for-test.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,uFAAuF;AACvF,2CAA2C;AAC3C,4FAA4F;AAC5F,yFAAyF;AACzF,mBAAmB;AAEnB,OAAO,EAAE,iBAAiB,EAAE,MAAoB,kCAAkC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAe,wCAAwC,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAiB,sCAAsC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAa,6CAA6C,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAwB,8BAA8B,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAqB,uBAAuB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAqB,gCAAgC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAiB,sBAAsB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAoB,yBAAyB,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAW,8CAA8C,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAgB,yCAAyC,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAa,4CAA4C,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAmB,0CAA0C,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAkB,kCAAkC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAW,yCAAyC,CAAC;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAQ,6CAA6C,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAe,sCAAsC,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAgB,qCAAqC,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAsB,8BAA8B,CAAC;AAC/E,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAiB,iBAAiB,CAAC;AAClE,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,uCAAuC,EACvC,4CAA4C,EAC5C,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAsB,uBAAuB,CAAC;AA2BxE,gFAAgF;AAChF,0EAA0E;AAC1E,wDAAwD;AAExD,MAAM,4BAA4B;IAEb;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IATnB,YACmB,SAAkD,EAClD,aAA2C,EAC3C,cAA8B,EAC9B,SAAiC,EACjC,eAA+B,EAC/B,cAA8B,EAC9B,OAAoC,EACpC,UAA0B,EAC1B,SAAyB;QARzB,cAAS,GAAT,SAAS,CAAyC;QAClD,kBAAa,GAAb,aAAa,CAA8B;QAC3C,mBAAc,GAAd,cAAc,CAAgB;QAC9B,cAAS,GAAT,SAAS,CAAwB;QACjC,oBAAe,GAAf,eAAe,CAAgB;QAC/B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,YAAO,GAAP,OAAO,CAA6B;QACpC,eAAU,GAAV,UAAU,CAAgB;QAC1B,cAAS,GAAT,SAAS,CAAgB;IACzC,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,GAAkB,EAAE,KAA0B;QACjE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,GAA2B,EAC3B,KAAsC;QAEtC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,uCAAuC,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,+BAA+B,CACnC,GAA2B,EAC3B,KAA2C;QAE3C,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,4CAA4C,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,aAAa,CAAC,+BAA+B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAwB,EAAE,KAAoB;QACjE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,UAAsB,EAAE,OAAsB;QACvF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,UAAsB,EAAE,MAAc;QAC/E,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,WAAW,CAAC,GAAkB,EAAE,UAAsB;QACpD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,aAAa,CAAC,GAAkB,EAAE,MAAuB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,cAAc,CAAC,GAAkB,EAAE,UAAsB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB,CAAC,GAAkB,EAAE,MAAuB;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,iBAAiB,CAAC,GAAoB,EAAE,KAAkB;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAoB,EAAE,IAAI,CAAC,CAAC;YAC3E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,mEAAmE,IAAI,IAAI;oBAC3E,sCAAsC,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAoB,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,WAAW,CAAC,GAAkB,EAAE,MAAqB;QACnD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CAAC,GAAoB,EAAE,KAAmB;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,6BAA6B,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAiB,EAAE,OAAiB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAK,GAAqB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,uEAAuE,CAAC,EAClF,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAW,CAAC;QAC3D,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,WAAW,EAAE,wBAAwB,CAAC,KAAK,SAAS,EAAE,CAAC;YACxF,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,WAAW,EAAE;gBAC/C,EAAE,EAAK,wBAAwB;gBAC/B,IAAI,EAAG,aAAa;gBACpB,KAAK,EAAE,iCAAiC;aACzC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;YACrD,OAAO;YACP,UAAU,EAAE,CAAC,2BAA2B,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,gDAAgD,OAAO,oCAAoC,CAAC,EACtG,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAC/C,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,eAAe,CAAC;YACjC,KAAK,EAAgB,SAAS,GAAG,CAAC,QAAQ,EAAE;YAC5C,OAAO,EAAc,iBAAiB;YACtC,QAAQ,EAAa,OAAO;YAC5B,UAAU,EAAW,SAAS;YAC9B,mBAAmB,EAAE,mBAAmB,OAAO,EAAE;YACjD,WAAW,EAAU,CAAC;YACtB,cAAc,EAAO,EAAE;YACvB,GAAG;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAC1B;YACE,OAAO;YACP,SAAS,EAAE,2BAA2B;YACtC,OAAO,EAAI,yBAAyB;YACpC,QAAQ,EAAG,wBAAwB;YACnC,SAAS,EAAE,GAAG;SACf,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAiB,EAAE,OAAiB;QACzD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAK,GAAqB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,yEAAyE,CAAC,EACpF,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;YACvD,OAAO;YACP,UAAU,EAAE,CAAC,2BAA2B,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB;YAC/B,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,OAAO,EAAE,CAC5D,CAAC;QACF,OAAO;YACL,OAAO;YACP,UAAU,EAAI,SAAS,CAAC,UAAU;YAClC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,SAAS,CAAC,GAAG,SAAS,CAAC,EAAE,QAAQ,CAAC;SACrE,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,GAAoB;QAC5C,MAAM,IAAI,GAAI,GAAqB,CAAC,IAAI,CAAC;QACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,mDAAmD,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAoBD,iFAAiF;AAEjF,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,MAA2C;IAE3C,MAAM,WAAW,GAAI,MAAM,iBAAiB,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAS,IAAI,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAO,IAAI,iBAAiB,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAM,IAAI,sBAAsB,EAAE,CAAC;IAClD,MAAM,WAAW,GAAI,IAAI,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAO,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAO,IAAI,aAAa,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAO,IAAI,gBAAgB,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAU,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAE9C,MAAM,QAAQ,GAAO,IAAI,iCAAiC,CACxD,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAC5D,CAAC;IACF,MAAM,GAAG,GAAY,IAAI,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,0BAA0B,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAO,IAAI,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEzC,MAAM,KAAK,GAAY,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAChF,MAAM,cAAc,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAI,IAAI,qBAAqB,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAE9E,MAAM,gBAAgB,GAAG;QACvB,WAAW,EAAI,gBAAgB;QAC/B,aAAa,EAAE,MAAe;QAC9B,QAAQ,EAAO,aAAa;QAC5B,KAAK,EAAU,CAAC,OAAO,CAAU;QACjC,QAAQ,EAAO,EAAc;QAC7B,SAAS,EAAM,sBAAsB;QACrC,QAAQ,EAAO,sBAAsB;KACtC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,IAAI,6BAA6B,CAAC;QAC7C,OAAO;QACP,MAAM;QACN,MAAM;QACN,KAAK;QACL,cAAc;QACd,aAAa;KACd,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,4BAA4B,CAC1C,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CACpG,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AACtD,CAAC"}

package/dist/sdk/create-life-api.d.ts

@@ -0,0 +1,55 @@
+import { GrantRegistry } from "../consent/grant-registry.js";
+import { EvidenceBackedContextQueryService } from "../surface/evidence-backed-context-query.js";
+import { EvidenceBackedClaimCreator } from "../evidence/evidence-backed-claim-creator.js";
+import { AccessContextIssuer } from "../auth/access-context-issuer.js";
+import type { ProposalQueue } from "../proposal/proposal-queue.js";
+import type { RawDocumentStore } from "../evidence/raw-document-store.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import type { FactStore } from "../types/fact-store.js";
+import type { AuditLog } from "../audit/audit-log.js";
+import type { AccessContext, AgentConsentContext, OwnerContext } from "../types/access-context.js";
+import type { ConsentGrant } from "../types/consent.js";
+import type { SdkAdminContext } from "./life-api.js";
+import type { EvidenceId, PersonId, ProposalId } from "../types/ids.js";
+import type { ErasureStatus } from "../erasure/tombstone.js";
+import type { EvidenceFilter, EvidenceRef } from "../types/evidence.js";
+import type { Source, SourceFilter, SourceInput } from "../types/source.js";
+import type { AcceptOptions, Proposal, ProposalDecider, ProposalFilter, ProposalInput } from "../types/proposal.js";
+import type { QueryContractsInput, ContextQueryResult } from "../surface/evidence-backed-context-query.js";
+import type { EvidenceClaimCreator, CreateClaimWithNewEvidenceInput, CreateClaimFromExistingEvidenceInput, EvidenceBackedClaimResult, EvidenceBackedClaimWithNewEvidenceResult } from "../evidence/evidence-backed-claim-creator.js";
+import type { LifeApi } from "./life-api.js";
+export declare class LifeApiImpl implements LifeApi {
+    private readonly _querySvc;
+    private readonly _claimCreator;
+    private readonly _proposalQueue;
+    private readonly _docStore;
+    private readonly _sourceRegistry;
+    private readonly _grantRegistry;
+    private readonly _issuer;
+    private readonly _factStore;
+    private readonly _auditLog;
+    private readonly _erasureMutationAuditLog?;
+    constructor(_querySvc: EvidenceBackedContextQueryService, _claimCreator: EvidenceBackedClaimCreator, _proposalQueue: ProposalQueue, _docStore: RawDocumentStore, _sourceRegistry: SourceRegistry, _grantRegistry: GrantRegistry, _issuer: AccessContextIssuer, _factStore: FactStore, _auditLog: AuditLog, _erasureMutationAuditLog?: AuditLog | undefined);
+    queryContracts(ctx: AccessContext, input: QueryContractsInput): Promise<ContextQueryResult>;
+    createClaimWithNewEvidence(ctx: EvidenceClaimCreator, input: CreateClaimWithNewEvidenceInput): Promise<EvidenceBackedClaimWithNewEvidenceResult>;
+    createClaimFromExistingEvidence(ctx: EvidenceClaimCreator, input: CreateClaimFromExistingEvidenceInput): Promise<EvidenceBackedClaimResult>;
+    createProposal(ctx: AgentConsentContext, input: ProposalInput): Promise<Proposal>;
+    acceptProposal(ctx: ProposalDecider, proposalId: ProposalId, options: AcceptOptions): Promise<Proposal>;
+    rejectProposal(ctx: ProposalDecider, proposalId: ProposalId, reason: string): Promise<Proposal>;
+    getProposal(ctx: AccessContext, proposalId: ProposalId): Proposal | undefined;
+    listProposals(ctx: AccessContext, filter?: ProposalFilter): Proposal[];
+    getEvidenceRef(ctx: AccessContext, evidenceId: EvidenceId): EvidenceRef | undefined;
+    listEvidenceRefs(ctx: AccessContext, filter?: EvidenceFilter): EvidenceRef[];
+    createSourceAdmin(ctx: SdkAdminContext, input: SourceInput): Source;
+    listSources(ctx: AccessContext, filter?: SourceFilter): Source[];
+    createGrantAdmin(ctx: SdkAdminContext, grant: ConsentGrant): ConsentGrant;
+    requestErasure(ctx: OwnerContext, subject: PersonId): Promise<void>;
+    getErasureStatus(ctx: OwnerContext, subject: PersonId): Promise<ErasureStatus | undefined>;
+    private _assertPrivileged;
+}
+export interface LifeApiTestBundle {
+    readonly api: LifeApi;
+    readonly auth: AccessContextIssuer;
+    readonly auditLog: AuditLog;
+}
+export declare function createInMemoryLifeApiForTest(): Promise<LifeApiTestBundle>;

package/dist/sdk/create-life-api.js

@@ -0,0 +1,251 @@
+// SDK factory — Slice-13 / Slice-15 / Slice-15c.
+//
+// SDK_BOUNDARY_EXISTS_001: createInMemoryLifeApiForTest() is the approved test entry point.
+// SDK_NO_INTERNAL_PATH_IMPORTS_001: LifeApiImpl is not exported from src/index.ts (public surface).
+//   It is accessible to other factory modules within src/sdk/ (e.g. create-sqlite-life-api.ts).
+//   Only factory functions are part of the public SDK API.
+// AUTH_CONTEXT_SDK_ENFORCES_TRUSTED_CONTEXTS_001: every public LifeApi method calls
+//   this._issuer.assertTrusted() — scoped to the authority paired with this API instance.
+// AUTH_CONTEXT_TRUST_IS_AUTHORITY_SCOPED_001: LifeApiImpl holds a reference to its own
+//   AccessContextIssuer; only contexts minted by that exact issuer are accepted.
+// Internal wiring (stores, crypto, services) is hidden entirely behind LifeApi.
+import { InMemoryFactStore } from "../store/in-memory-fact-store.js";
+import { InMemorySourceRegistry } from "../source/in-memory-source-registry.js";
+import { SourceAwareFactStore } from "../source/source-aware-fact-store.js";
+import { InMemoryRawDocumentStore } from "../evidence/in-memory-raw-document-store.js";
+import { GrantRegistry } from "../consent/grant-registry.js";
+import { InMemoryAuditLog } from "../audit/audit-log.js";
+import { StaticTrustTable } from "../resolution/trust-profile.js";
+import { AesGcmCryptoBoundary } from "../crypto/aes-gcm.js";
+import { StaticKeyProvider } from "../crypto/static-key.js";
+import { EvidenceBackedContextQueryService } from "../surface/evidence-backed-context-query.js";
+import { EvidenceBackedClaimCreator } from "../evidence/evidence-backed-claim-creator.js";
+import { InMemoryProposalQueue } from "../proposal/in-memory-proposal-queue.js";
+import { SourceAwareClaimAppender } from "../proposal/source-aware-claim-appender.js";
+import { InMemoryUnitOfWork } from "../persistence/in-memory-unit-of-work.js";
+import { AccessContextIssuer } from "../auth/access-context-issuer.js";
+import { buildAuditEvent } from "../audit/audit-log.js";
+import { ERASURE_TOMBSTONE_PREDICATE, ERASURE_TOMBSTONE_PAYLOAD, SYSTEM_ERASURE_SOURCE_ID, } from "../erasure/tombstone.js";
+import { asISOTime, asAuditId } from "../types/ids.js";
+import { validateCreateGrantAdminInput, validateCreateSourceAdminInput, validateCreateClaimWithNewEvidenceInput, validateCreateClaimFromExistingEvidenceInput, validateCreateProposalInput, validateAcceptProposalInput, validateRejectProposalInput, validateQueryContractsInput, } from "./validation.js";
+// ─── Internal implementation ──────────────────────────────────────────────────
+// Exported for use by production factory (create-sqlite-life-api.ts).
+// NOT exported from src/index.ts — callers receive LifeApi only.
+export class LifeApiImpl {
+    _querySvc;
+    _claimCreator;
+    _proposalQueue;
+    _docStore;
+    _sourceRegistry;
+    _grantRegistry;
+    _issuer;
+    _factStore;
+    _auditLog;
+    _erasureMutationAuditLog;
+    constructor(_querySvc, _claimCreator, _proposalQueue, _docStore, _sourceRegistry, _grantRegistry, _issuer, _factStore, _auditLog, 
+    // PRODUCTION_AUDIT_REQUEST_ERASURE_AUDIT_ATOMIC_001 (C2b): when set, requestErasure
+    // writes the allow-path audit to this log and getErasureStatus reads from it.
+    // Both log and tombstone share config.db — they participate in the facade SAVEPOINT.
+    // Falls back to _auditLog when absent (in-memory tests, non-production paths).
+    _erasureMutationAuditLog) {
+        this._querySvc = _querySvc;
+        this._claimCreator = _claimCreator;
+        this._proposalQueue = _proposalQueue;
+        this._docStore = _docStore;
+        this._sourceRegistry = _sourceRegistry;
+        this._grantRegistry = _grantRegistry;
+        this._issuer = _issuer;
+        this._factStore = _factStore;
+        this._auditLog = _auditLog;
+        this._erasureMutationAuditLog = _erasureMutationAuditLog;
+    }
+    async queryContracts(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateQueryContractsInput(input);
+        return this._querySvc.queryContracts(ctx, input);
+    }
+    async createClaimWithNewEvidence(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateClaimWithNewEvidenceInput(input);
+        return this._claimCreator.createClaimWithNewEvidence(ctx, input);
+    }
+    async createClaimFromExistingEvidence(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateClaimFromExistingEvidenceInput(input);
+        return this._claimCreator.createClaimFromExistingEvidence(ctx, input);
+    }
+    async createProposal(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        validateCreateProposalInput(input);
+        return this._proposalQueue.createProposal(ctx, input);
+    }
+    async acceptProposal(ctx, proposalId, options) {
+        this._issuer.assertTrusted(ctx);
+        validateAcceptProposalInput(proposalId, options);
+        return this._proposalQueue.acceptProposal(ctx, proposalId, options);
+    }
+    async rejectProposal(ctx, proposalId, reason) {
+        this._issuer.assertTrusted(ctx);
+        validateRejectProposalInput(proposalId, reason);
+        return this._proposalQueue.rejectProposal(ctx, proposalId, reason);
+    }
+    getProposal(ctx, proposalId) {
+        this._issuer.assertTrusted(ctx);
+        return this._proposalQueue.getProposal(ctx, proposalId);
+    }
+    listProposals(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._proposalQueue.listProposals(ctx, filter);
+    }
+    getEvidenceRef(ctx, evidenceId) {
+        this._issuer.assertTrusted(ctx);
+        return this._docStore.getEvidenceRef(ctx, evidenceId);
+    }
+    listEvidenceRefs(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._docStore.listEvidenceRefs(ctx, filter);
+    }
+    createSourceAdmin(ctx, input) {
+        this._issuer.assertTrusted(ctx);
+        this._assertPrivileged(ctx);
+        validateCreateSourceAdminInput(input);
+        const evId = input.evidenceRef?.id;
+        if (evId !== undefined) {
+            const existing = this._docStore.getEvidenceRef(ctx, evId);
+            if (existing === undefined) {
+                throw new Error(`SDK_SOURCE_REGISTRATION_EVIDENCE_VALIDATED_001: evidenceRef.id "${evId}" ` +
+                    `does not exist in the document store`);
+            }
+        }
+        return this._sourceRegistry.registerSource(ctx, input);
+    }
+    listSources(ctx, filter) {
+        this._issuer.assertTrusted(ctx);
+        return this._sourceRegistry.listSources(ctx, filter);
+    }
+    createGrantAdmin(ctx, grant) {
+        this._issuer.assertTrusted(ctx);
+        this._assertPrivileged(ctx);
+        validateCreateGrantAdminInput(grant);
+        this._grantRegistry.register(grant);
+        return grant;
+    }
+    // ── Erasure boundary — Slice-21a ──────────────────────────────────────────────
+    async requestErasure(ctx, subject) {
+        this._issuer.assertTrusted(ctx);
+        // ERASURE_TOMBSTONE_SELF_SUPPRESSION_CARVEOUT_001: runtime deny — type guarantees
+        // OwnerContext at compile time; this guard covers as-any bypasses.
+        if (ctx.kind !== "owner") {
+            throw Object.assign(new Error("ERASURE_REQUEST_DENIED_001: only OwnerContext may call requestErasure"), { code: "ERASURE_REQUEST_DENIED_001" });
+        }
+        // ERASURE_TOMBSTONE_PREDICATE_OPEN_UNION_001: lazy-register the system erasure source
+        // on first use. kind "user_manual" allows "system.erasure_request" (any predicate policy).
+        // SystemProjectionContext is the actor — not subject to owner restriction.
+        const _SYSTEM_CTX = { kind: "system_projection" };
+        if (this._sourceRegistry.getSource(_SYSTEM_CTX, SYSTEM_ERASURE_SOURCE_ID) === undefined) {
+            this._sourceRegistry.registerSource(_SYSTEM_CTX, {
+                id: SYSTEM_ERASURE_SOURCE_ID,
+                kind: "user_manual",
+                label: "System erasure tombstone source",
+            });
+        }
+        // Check for existing tombstone — ERASURE_TOMBSTONE_IMMUTABLE_001
+        const existing = await this._factStore.readClaims(ctx, {
+            subject,
+            predicates: [ERASURE_TOMBSTONE_PREDICATE],
+        });
+        if (existing.length > 0) {
+            throw Object.assign(new Error(`ERASURE_SUBJECT_ALREADY_ERASED_001: subject "${subject}" already has an erasure tombstone`), { code: "ERASURE_SUBJECT_ALREADY_ERASED_001" });
+        }
+        const now = asISOTime(new Date().toISOString());
+        // ERASURE_AUDIT_EVENT_FOR_ERASURE_001: audit written BEFORE tombstone.
+        // If this throws, tombstone is never appended.
+        // PRODUCTION_AUDIT_REQUEST_ERASURE_AUDIT_ATOMIC_001 (C2b): written to
+        // _erasureMutationAuditLog when set (config.db — participates in facade SAVEPOINT);
+        // falls back to _auditLog for non-production paths.
+        const auditEvent = buildAuditEvent({
+            actor: `owner:${ctx.personId}`,
+            purpose: "erasure_request",
+            decision: "allow",
+            reasonCode: "ALLOWED",
+            selectorFingerprint: `erasure:subject:${subject}`,
+            resultCount: 0,
+            resultClaimIds: [],
+            now,
+        });
+        await (this._erasureMutationAuditLog ?? this._auditLog).write(auditEvent);
+        // ERASURE_APPEND_ONLY_TOMBSTONE_MODEL_001: append tombstone — no DELETE, no UPDATE.
+        await this._factStore.append({
+            subject,
+            predicate: ERASURE_TOMBSTONE_PREDICATE,
+            payload: ERASURE_TOMBSTONE_PAYLOAD,
+            sourceId: SYSTEM_ERASURE_SOURCE_ID,
+            validFrom: now,
+        }, ctx);
+    }
+    async getErasureStatus(ctx, subject) {
+        this._issuer.assertTrusted(ctx);
+        if (ctx.kind !== "owner") {
+            throw Object.assign(new Error("ERASURE_REQUEST_DENIED_001: only OwnerContext may call getErasureStatus"), { code: "ERASURE_REQUEST_DENIED_001" });
+        }
+        // ERASURE_TOMBSTONE_SELF_SUPPRESSION_CARVEOUT_001: tombstone metadata only,
+        // never decrypted payload. readClaims returns ClaimMeta (no payload). ✓
+        const tombstones = await this._factStore.readClaims(ctx, {
+            subject,
+            predicates: [ERASURE_TOMBSTONE_PREDICATE],
+        });
+        if (tombstones.length === 0)
+            return undefined;
+        const tombstone = tombstones[0];
+        // PRODUCTION_AUDIT_REQUEST_ERASURE_STATUS_AUDIT_LOG_COHERENT_001 (C2b):
+        // Read from the same log that requestErasure writes to (_erasureMutationAuditLog).
+        // Legacy fallback: pre-C2b erasure records whose event lives in _auditLog remain resolvable.
+        const primaryAuditLog = this._erasureMutationAuditLog ?? this._auditLog;
+        const matchFn = (e) => e.purpose === "erasure_request" &&
+            e.selectorFingerprint === `erasure:subject:${subject}`;
+        let erasureAudit = primaryAuditLog.readAll().find(matchFn);
+        if (!erasureAudit && this._erasureMutationAuditLog) {
+            erasureAudit = this._auditLog.readAll().find(matchFn);
+        }
+        return {
+            subject,
+            recordedAt: tombstone.recordedAt,
+            auditEventId: erasureAudit?.id ?? asAuditId(`${tombstone.id}-audit`),
+        };
+    }
+    _assertPrivileged(ctx) {
+        const kind = ctx.kind;
+        if (kind !== "owner" && kind !== "system_projection" && kind !== "test") {
+            throw new Error(`SDK_PRIVILEGED_MUTATION_GUARDED_001: "${kind}" context cannot perform privileged SDK mutations`);
+        }
+    }
+}
+// ─── Public factory ───────────────────────────────────────────────────────────
+export async function createInMemoryLifeApiForTest() {
+    const keyProvider = await StaticKeyProvider.generate("sdk-test-ephemeral");
+    const crypto = new AesGcmCryptoBoundary(keyProvider);
+    const rawStore = new InMemoryFactStore();
+    const sourceReg = new InMemorySourceRegistry();
+    const sourceStore = new SourceAwareFactStore(rawStore, sourceReg);
+    const docStore = new InMemoryRawDocumentStore(crypto);
+    const grantReg = new GrantRegistry();
+    const auditLog = new InMemoryAuditLog();
+    const trust = StaticTrustTable.empty();
+    const querySvc = new EvidenceBackedContextQueryService(sourceStore, grantReg, auditLog, sourceReg, docStore, trust);
+    // UNIT_OF_WORK_SDK_COMPOSITION_WIRED_001: all multi-write flows share one InMemoryUnitOfWork
+    // so createClaimWithNewEvidence and proposal accept are both all-or-none.
+    const uow = new InMemoryUnitOfWork(docStore, sourceReg, rawStore);
+    const claimCreator = new EvidenceBackedClaimCreator(docStore, sourceReg, sourceStore, uow);
+    const appender = new SourceAwareClaimAppender(sourceStore, sourceReg, uow);
+    const proposalQueue = new InMemoryProposalQueue(appender, grantReg, sourceReg);
+    // Each factory call produces a fresh AccessContextIssuer with its own private
+    // WeakSet — the returned `api` is paired exclusively with this `auth`.
+    // AUTH_CONTEXT_TRUST_IS_AUTHORITY_SCOPED_001
+    const auth = new AccessContextIssuer();
+    return {
+        api: new LifeApiImpl(querySvc, claimCreator, proposalQueue, docStore, sourceReg, grantReg, auth, sourceStore, auditLog),
+        auth,
+        auditLog,
+    };
+}
+//# sourceMappingURL=create-life-api.js.map

package/dist/sdk/create-life-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-life-api.js","sourceRoot":"","sources":["../../src/sdk/create-life-api.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,4FAA4F;AAC5F,oGAAoG;AACpG,gGAAgG;AAChG,2DAA2D;AAC3D,oFAAoF;AACpF,0FAA0F;AAC1F,uFAAuF;AACvF,iFAAiF;AACjF,gFAAgF;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAoB,kCAAkC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAe,wCAAwC,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAiB,sCAAsC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAa,6CAA6C,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAwB,8BAA8B,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAqB,uBAAuB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAqB,gCAAgC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAiB,sBAAsB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAoB,yBAAyB,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAW,8CAA8C,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAgB,yCAAyC,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAa,4CAA4C,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAmB,0CAA0C,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAkB,kCAAkC,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAsB,uBAAuB,CAAC;AACxE,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,GACzB,MAA+C,yBAAyB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAkB,iBAAiB,CAAC;AACnE,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,uCAAuC,EACvC,4CAA4C,EAC5C,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAwBzB,iFAAiF;AACjF,sEAAsE;AACtE,iEAAiE;AAEjE,MAAM,OAAO,WAAW;IAEH;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAKA;IAdnB,YACmB,SAA4D,EAC5D,aAAqD,EACrD,cAAwC,EACxC,SAA2C,EAC3C,eAAyC,EACzC,cAAwC,EACxC,OAA8C,EAC9C,UAAoC,EACpC,SAAmC;IACpD,oFAAoF;IACpF,8EAA8E;IAC9E,qFAAqF;IACrF,+EAA+E;IAC9D,wBAAmC;QAbnC,cAAS,GAAT,SAAS,CAAmD;QAC5D,kBAAa,GAAb,aAAa,CAAwC;QACrD,mBAAc,GAAd,cAAc,CAA0B;QACxC,cAAS,GAAT,SAAS,CAAkC;QAC3C,oBAAe,GAAf,eAAe,CAA0B;QACzC,mBAAc,GAAd,cAAc,CAA0B;QACxC,YAAO,GAAP,OAAO,CAAuC;QAC9C,eAAU,GAAV,UAAU,CAA0B;QACpC,cAAS,GAAT,SAAS,CAA0B;QAKnC,6BAAwB,GAAxB,wBAAwB,CAAW;IACnD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,GAAkB,EAAE,KAA0B;QACjE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,GAA2B,EAC3B,KAAsC;QAEtC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,uCAAuC,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,+BAA+B,CACnC,GAA2B,EAC3B,KAA2C;QAE3C,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,4CAA4C,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,aAAa,CAAC,+BAA+B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAwB,EAAE,KAAoB;QACjE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,UAAsB,EAAE,OAAsB;QACvF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,UAAsB,EAAE,MAAc;QAC/E,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,2BAA2B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,WAAW,CAAC,GAAkB,EAAE,UAAsB;QACpD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,aAAa,CAAC,GAAkB,EAAE,MAAuB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,cAAc,CAAC,GAAkB,EAAE,UAAsB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB,CAAC,GAAkB,EAAE,MAAuB;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,iBAAiB,CAAC,GAAoB,EAAE,KAAkB;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAoB,EAAE,IAAI,CAAC,CAAC;YAC3E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,mEAAmE,IAAI,IAAI;oBAC3E,sCAAsC,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAoB,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,WAAW,CAAC,GAAkB,EAAE,MAAqB;QACnD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CAAC,GAAoB,EAAE,KAAmB;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,6BAA6B,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IAEjF,KAAK,CAAC,cAAc,CAAC,GAAiB,EAAE,OAAiB;QACvD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,kFAAkF;QAClF,mEAAmE;QACnE,IAAK,GAAqB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,uEAAuE,CAAC,EAClF,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;QACJ,CAAC;QAED,sFAAsF;QACtF,2FAA2F;QAC3F,2EAA2E;QAC3E,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAW,CAAC;QAC3D,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,WAAW,EAAE,wBAAwB,CAAC,KAAK,SAAS,EAAE,CAAC;YACxF,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,WAAW,EAAE;gBAC/C,EAAE,EAAK,wBAAwB;gBAC/B,IAAI,EAAG,aAAa;gBACpB,KAAK,EAAE,iCAAiC;aACzC,CAAC,CAAC;QACL,CAAC;QAED,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;YACrD,OAAO;YACP,UAAU,EAAE,CAAC,2BAA2B,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,gDAAgD,OAAO,oCAAoC,CAAC,EACtG,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEhD,uEAAuE;QACvE,+CAA+C;QAC/C,sEAAsE;QACtE,oFAAoF;QACpF,oDAAoD;QACpD,MAAM,UAAU,GAAG,eAAe,CAAC;YACjC,KAAK,EAAgB,SAAS,GAAG,CAAC,QAAQ,EAAE;YAC5C,OAAO,EAAc,iBAAiB;YACtC,QAAQ,EAAa,OAAO;YAC5B,UAAU,EAAW,SAAS;YAC9B,mBAAmB,EAAE,mBAAmB,OAAO,EAAE;YACjD,WAAW,EAAU,CAAC;YACtB,cAAc,EAAO,EAAE;YACvB,GAAG;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE1E,oFAAoF;QACpF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAC1B;YACE,OAAO;YACP,SAAS,EAAE,2BAA2B;YACtC,OAAO,EAAI,yBAAyB;YACpC,QAAQ,EAAG,wBAAwB;YACnC,SAAS,EAAE,GAAG;SACf,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAiB,EAAE,OAAiB;QACzD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAK,GAAqB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,yEAAyE,CAAC,EACpF,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;YACvD,OAAO;YACP,UAAU,EAAE,CAAC,2BAA2B,CAAC;SAC1C,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAEjC,wEAAwE;QACxE,mFAAmF;QACnF,6FAA6F;QAC7F,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC,SAAS,CAAC;QACxE,MAAM,OAAO,GAAG,CAAC,CAAqD,EAAE,EAAE,CACxE,CAAC,CAAC,OAAO,KAAK,iBAAiB;YAC/B,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,OAAO,EAAE,CAAC;QACzD,IAAI,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnD,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,OAAO;YACL,OAAO;YACP,UAAU,EAAI,SAAS,CAAC,UAAU;YAClC,YAAY,EAAE,YAAY,EAAE,EAAE,IAAI,SAAS,CAAC,GAAG,SAAS,CAAC,EAAE,QAAQ,CAAC;SACrE,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,GAAoB;QAC5C,MAAM,IAAI,GAAI,GAAqB,CAAC,IAAI,CAAC;QACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,mDAAmD,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAcD,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,4BAA4B;IAChD,MAAM,WAAW,GAAI,MAAM,iBAAiB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAS,IAAI,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAO,IAAI,iBAAiB,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAM,IAAI,sBAAsB,EAAE,CAAC;IAClD,MAAM,WAAW,GAAI,IAAI,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAO,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAO,IAAI,aAAa,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAO,IAAI,gBAAgB,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAU,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAE9C,MAAM,QAAQ,GAAO,IAAI,iCAAiC,CACxD,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAC5D,CAAC;IACF,6FAA6F;IAC7F,0EAA0E;IAC1E,MAAM,GAAG,GAAY,IAAI,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,0BAA0B,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAE3F,MAAM,QAAQ,GAAQ,IAAI,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE/E,8EAA8E;IAC9E,uEAAuE;IACvE,6CAA6C;IAC7C,MAAM,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,OAAO;QACL,GAAG,EAAG,IAAI,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC;QACxH,IAAI;QACJ,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/sdk/create-sqlite-life-api.d.ts

@@ -0,0 +1,33 @@
+import type Database from "better-sqlite3";
+import type { AuthAdapter, Clock, GrantResolver, TenantBoundary } from "../auth/types.js";
+import type { TrustedAgentRegistry } from "../agent/trusted-agent-registry.js";
+import type { GuardianRegistry } from "../guardian/guardian-registry.js";
+import type { TrustedDataSourceRegistry } from "../datasource/trusted-data-source-registry.js";
+import type { ProposalPolicy } from "../proposal/proposal-policy.js";
+import type { FactoryCompatibleRawDocumentStore } from "../evidence/raw-document-store.js";
+import type { FactoryCompatibleAuditLog } from "../audit/audit-log.js";
+import type { ProductionApiBundle } from "../auth/production-scoped-life-api.js";
+import type { Logger } from "../observability/logger.js";
+import type { MetricsRecorder } from "../observability/metrics.js";
+import type { KeyProvider } from "../crypto/types.js";
+export interface ProductionFactoryConfig {
+    readonly db: Database.Database;
+    readonly encryptionKey?: {
+        readonly keyId: string;
+        readonly rawBytes: Uint8Array;
+    };
+    readonly keyProvider?: KeyProvider;
+    readonly authAdapter: AuthAdapter;
+    readonly tenantBoundary: TenantBoundary;
+    readonly grantResolver: GrantResolver;
+    readonly clock?: Clock;
+    readonly trustedAgentRegistry?: TrustedAgentRegistry;
+    readonly rawDocumentStore: FactoryCompatibleRawDocumentStore;
+    readonly auditLog: FactoryCompatibleAuditLog;
+    readonly logger?: Logger;
+    readonly metrics?: MetricsRecorder;
+    readonly trustedDataSourceRegistry?: TrustedDataSourceRegistry;
+    readonly proposalPolicy?: ProposalPolicy;
+    readonly guardianRegistry?: GuardianRegistry;
+}
+export declare function createSQLiteLifeApiForProduction(config: ProductionFactoryConfig): Promise<ProductionApiBundle>;