life-as-api 0.2.0

package/dist/source/source-registry.js

@@ -0,0 +1,12 @@
+// SourceRegistry interface — Slice-07.
+//
+// SOURCE_REGISTRY_EXISTS_001: every production append must validate against this registry.
+// SOURCE_AGENT_CANNOT_SELF_REGISTER_001: AgentConsentContext is excluded from registerSource.
+// SOURCE_OWNER_CAN_REGISTER_MANUAL_001: OwnerContext may register "user_manual" sources.
+// SOURCE_SYSTEM_CAN_REGISTER_001: SystemProjectionContext may register all non-user_manual kinds.
+//
+// All methods are synchronous — source metadata is not encrypted and not async.
+// SourceRegistry must not import crypto primitives.
+// SourceRegistry must not depend on contract, consent, or resolution modules.
+export {};
+//# sourceMappingURL=source-registry.js.map

package/dist/source/source-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-registry.js","sourceRoot":"","sources":["../../src/source/source-registry.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,2FAA2F;AAC3F,8FAA8F;AAC9F,yFAAyF;AACzF,kGAAkG;AAClG,EAAE;AACF,gFAAgF;AAChF,oDAAoD;AACpD,8EAA8E"}

package/dist/store/in-memory-fact-store.d.ts

@@ -0,0 +1,25 @@
+import type { ClaimMeta, AppendClaimInput, StoredClaim } from "../types/claim.js";
+import type { ClaimId } from "../types/ids.js";
+import type { AccessContext } from "../types/access-context.js";
+import type { BitemporalQuery, ClaimSelector, FactStore } from "../types/fact-store.js";
+export declare class InMemoryFactStore implements FactStore {
+    private readonly _store;
+    private _seq;
+    append(input: AppendClaimInput, ctx: AccessContext): Promise<{
+        claimId: ClaimId;
+        recordedSeq: number;
+    }>;
+    readAll(ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readSince(seq: number, ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readAt(params: BitemporalQuery, ctx: AccessContext): Promise<ReadonlyArray<ClaimMeta>>;
+    readStoredClaims(ctx: AccessContext, selector: ClaimSelector): Promise<ReadonlyArray<StoredClaim>>;
+    _uowSnapshot(): {
+        store: Map<ClaimId, StoredClaim>;
+        seq: number;
+    };
+    _uowRestore(snap: {
+        store: Map<ClaimId, StoredClaim>;
+        seq: number;
+    }): void;
+    readClaims(ctx: AccessContext, selector: ClaimSelector): Promise<ReadonlyArray<ClaimMeta>>;
+}

package/dist/store/in-memory-fact-store.js

@@ -0,0 +1,192 @@
+// InMemoryFactStore — Slice-01b hardened implementation.
+//
+// Invariants enforced (see docs/INVARIANTS.md for canonical IDs):
+//   CLAIM_IMMUTABLE_001/002   — shallow + deep freeze on all stored/returned objects
+//   CLAIM_NO_REF_LEAK_001/002 — readAll/readSince return deep-frozen copies, never references
+//   CLAIM_RECORDED_ORDER_001/002/003 — recordedAt/recordedSeq store-assigned; caller values ignored at runtime
+//   CLAIM_PROVENANCE_001      — sourceId required (CLAIM_PROVENANCE_002 deferred: no SourceRegistry yet)
+//   CLAIM_LIFECYCLE_*         — retract/supersede/override all append-only; originals always readable
+//   ACCESS_CONTEXT_REQUIRED_001/002 — every method requires explicit AccessContext
+//   AGENT_NO_DIRECT_APPEND_*  — AgentConsentContext cannot append, ever
+import { asClaimId, asISOTime } from "../types/ids.js";
+import { deepFreeze } from "../utilities/deep-freeze.js";
+export class InMemoryFactStore {
+    // Internal storage — deep-frozen StoredClaims, keyed by ClaimId.
+    // Map iteration order = insertion order → natural recordedSeq ordering.
+    _store = new Map();
+    // CLAIM_RECORDED_ORDER_002: strictly increasing, store-owned.
+    _seq = 0;
+    async append(input, ctx) {
+        // ACCESS_CONTEXT_REQUIRED_002: runtime guard (type prevents undefined for TS callers;
+        // this guard covers JS-interop and as-any bypass).
+        if (ctx == null)
+            throw new TypeError("AccessContext is required — no implicit store access");
+        // AGENT_NO_DIRECT_APPEND_001: agents may only propose, never append.
+        if (ctx.kind === "agent") {
+            throw new Error("AgentConsentContext cannot append claims directly. " +
+                "Use context.propose() instead. (AGENT_NO_DIRECT_APPEND_001)");
+        }
+        // CLAIM_PROVENANCE_001: sourceId is mandatory.
+        if (!input.sourceId) {
+            throw new Error("sourceId is required for all claims — provenance is mandatory (CLAIM_PROVENANCE_001)");
+        }
+        // CONTRACT_IDENTITY_LINK_META_PAYLOAD_MATCH_001:
+        // For identity-link claims, meta.contractId and payload.contractId must agree.
+        // Mismatch means the claim's provenance is ambiguous — reject immediately.
+        if (input.predicate === "contract.identity.link" && input.payload.type === "identity_link") {
+            const idPayload = input.payload;
+            if (input.contractId !== undefined && idPayload.contractId !== input.contractId) {
+                throw new Error(`CONTRACT_IDENTITY_LINK_META_PAYLOAD_MATCH_001: meta.contractId "${input.contractId}" must match payload.contractId "${idPayload.contractId}" for contract.identity.link claims`);
+            }
+        }
+        // CLAIM_RECORDED_ORDER_001/003: store assigns id, recordedAt, recordedSeq.
+        // We destructure only known AppendClaimInput fields — any caller-smuggled
+        // id/recordedAt/recordedSeq in `input` (via `as any`) is never read.
+        const { subject, sourceId, predicate, validFrom, payload, validTo, retracts, supersedes, overrides, confidence, contractId, } = input;
+        const claimId = asClaimId(globalThis.crypto.randomUUID()); // WebCrypto only — CRYPTO_BOUNDARY_ONLY_001
+        const recordedAt = asISOTime(new Date().toISOString());
+        const recordedSeq = ++this._seq; // strictly increasing
+        // CLAIM_IMMUTABLE_001/002: deepFreeze the stored claim (shallow + recursive).
+        const stored = deepFreeze(buildClaim({ subject, sourceId, predicate, validFrom, payload, validTo, retracts, supersedes, overrides, confidence, contractId }, claimId, recordedAt, recordedSeq));
+        this._store.set(claimId, stored);
+        return { claimId, recordedSeq };
+    }
+    async readAll(ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        // CLAIM_NO_REF_LEAK_001: return deep-frozen copies of metadata, not internal references.
+        // Payload is excluded from ClaimMeta — payload access goes through CryptoBoundary (post-MVP).
+        return Array.from(this._store.values()).map(toFrozenMeta);
+    }
+    async readSince(seq, ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        // CLAIM_NO_REF_LEAK_002: same copy guarantee as readAll.
+        return (await this.readAll(ctx)).filter((c) => c.recordedSeq > seq);
+    }
+    async readAt(params, ctx) {
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        return (await this.readAll(ctx)).filter((c) => {
+            if (params.knownAsOf !== undefined && c.recordedAt > params.knownAsOf)
+                return false;
+            if (params.validAsOf !== undefined) {
+                if (c.validFrom > params.validAsOf)
+                    return false;
+                if (c.validTo !== undefined && c.validTo <= params.validAsOf)
+                    return false;
+            }
+            return true;
+        });
+    }
+    async readStoredClaims(ctx, selector) {
+        // FACTSTORE_HYDRATED_READ_001: payload-bearing reads — fail closed for agents and audit.
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        if (ctx.kind === "agent" || ctx.kind === "audit") {
+            throw new Error("FACTSTORE_AGENT_NO_HYDRATED_READ_001: payload-bearing reads are denied for " +
+                `${ctx.kind} context — use readClaims() for metadata-only access`);
+        }
+        // INMEMORY_HYDRATED_READ_NO_REF_LEAK_001: deep-frozen copies from the store.
+        // Internal StoredClaims are already frozen at append; create a new frozen wrapper
+        // per call so callers cannot observe identity equality to internal objects.
+        let claims = Array.from(this._store.values()).map((c) => deepFreeze({ ...c, payload: deepFreeze({ ...c.payload }) }));
+        if (selector.subject !== undefined) {
+            const subj = selector.subject;
+            claims = claims.filter((c) => c.subject === subj);
+        }
+        if (selector.predicates !== undefined) {
+            if (selector.predicates.length === 0)
+                return [];
+            const predSet = new Set(selector.predicates);
+            claims = claims.filter((c) => predSet.has(c.predicate));
+        }
+        if (selector.sinceRecordedSeq !== undefined) {
+            const since = selector.sinceRecordedSeq;
+            claims = claims.filter((c) => c.recordedSeq > since);
+        }
+        if (selector.includeRetracted === false) {
+            const retractedIds = new Set(Array.from(this._store.values()).flatMap((c) => c.retracts !== undefined ? [c.retracts] : []));
+            claims = claims.filter((c) => !retractedIds.has(c.id));
+        }
+        return claims;
+    }
+    // ── Unit-of-Work snapshot support (UNIT_OF_WORK_IN_MEMORY_ATOMIC_BEHAVIOR_001) ──
+    // Internal: called only by InMemoryUnitOfWork. Not exported from src/index.ts.
+    _uowSnapshot() {
+        return { store: new Map(this._store), seq: this._seq };
+    }
+    _uowRestore(snap) {
+        this._store.clear();
+        for (const [k, v] of snap.store)
+            this._store.set(k, v);
+        this._seq = snap.seq;
+    }
+    async readClaims(ctx, selector) {
+        // STORE_SELECTOR_READ_001: targeted read, required for future consent-scoped paths.
+        if (ctx == null)
+            throw new TypeError("AccessContext is required");
+        let claims = await this.readAll(ctx); // already deep-frozen copies
+        if (selector.subject !== undefined) {
+            const subj = selector.subject;
+            claims = claims.filter((c) => c.subject === subj);
+        }
+        if (selector.predicates !== undefined) {
+            if (selector.predicates.length === 0)
+                return [];
+            const predSet = new Set(selector.predicates);
+            claims = claims.filter((c) => predSet.has(c.predicate));
+        }
+        if (selector.sinceRecordedSeq !== undefined) {
+            const since = selector.sinceRecordedSeq;
+            claims = claims.filter((c) => c.recordedSeq > since);
+        }
+        if (selector.includeRetracted === false) {
+            // Build the retracted-ID set from the unfiltered full store (not from already-filtered claims)
+            // so that retraction markers introduced before the filter window are still respected.
+            const allMeta = await this.readAll(ctx);
+            const retractedIds = new Set(allMeta.flatMap((c) => (c.retracts !== undefined ? [c.retracts] : [])));
+            claims = claims.filter((c) => !retractedIds.has(c.id));
+        }
+        return claims;
+    }
+}
+// ─── private helpers ──────────────────────────────────────────────────────────
+function buildClaim(fields, id, recordedAt, recordedSeq) {
+    return {
+        id,
+        recordedAt,
+        recordedSeq,
+        subject: fields.subject,
+        sourceId: fields.sourceId,
+        predicate: fields.predicate,
+        validFrom: fields.validFrom,
+        payload: fields.payload,
+        // exactOptionalPropertyTypes: only spread optional fields when present
+        ...(fields.validTo !== undefined ? { validTo: fields.validTo } : {}),
+        ...(fields.retracts !== undefined ? { retracts: fields.retracts } : {}),
+        ...(fields.supersedes !== undefined ? { supersedes: fields.supersedes } : {}),
+        ...(fields.overrides !== undefined ? { overrides: fields.overrides } : {}),
+        ...(fields.confidence !== undefined ? { confidence: fields.confidence } : {}),
+        ...(fields.contractId !== undefined ? { contractId: fields.contractId } : {}),
+    };
+}
+function toFrozenMeta(c) {
+    // CLAIM_NO_REF_LEAK_001: new object per call — no reference to internal store.
+    return deepFreeze({
+        id: c.id,
+        sourceId: c.sourceId,
+        subject: c.subject,
+        predicate: c.predicate,
+        validFrom: c.validFrom,
+        recordedAt: c.recordedAt,
+        recordedSeq: c.recordedSeq,
+        ...(c.validTo !== undefined ? { validTo: c.validTo } : {}),
+        ...(c.retracts !== undefined ? { retracts: c.retracts } : {}),
+        ...(c.supersedes !== undefined ? { supersedes: c.supersedes } : {}),
+        ...(c.overrides !== undefined ? { overrides: c.overrides } : {}),
+        ...(c.confidence !== undefined ? { confidence: c.confidence } : {}),
+        ...(c.contractId !== undefined ? { contractId: c.contractId } : {}),
+    });
+}
+//# sourceMappingURL=in-memory-fact-store.js.map

package/dist/store/in-memory-fact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-fact-store.js","sourceRoot":"","sources":["../../src/store/in-memory-fact-store.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,kEAAkE;AAClE,qFAAqF;AACrF,8FAA8F;AAC9F,+GAA+G;AAC/G,yGAAyG;AACzG,sGAAsG;AACtG,mFAAmF;AACnF,wEAAwE;AAMxE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,OAAO,iBAAiB;IAC5B,iEAAiE;IACjE,wEAAwE;IACvD,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1D,8DAA8D;IACtD,IAAI,GAAG,CAAC,CAAC;IAEjB,KAAK,CAAC,MAAM,CACV,KAAuB,EACvB,GAAkB;QAElB,sFAAsF;QACtF,mDAAmD;QACnD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAE7F,qEAAqE;QACrE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qDAAqD;gBACnD,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,KAAK,CAAC,SAAS,KAAK,wBAAwB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,OAA8B,CAAC;YACvD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,KAAM,KAAK,CAAC,UAAqB,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,UAAU,oCAAoC,SAAS,CAAC,UAAU,qCAAqC,CACjL,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,EACJ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAChD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,GACjE,GAAG,KAAK,CAAC;QAEV,MAAM,OAAO,GAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,4CAA4C;QAC3G,MAAM,UAAU,GAAI,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,sBAAsB;QAEvD,8EAA8E;QAC9E,MAAM,MAAM,GAAgB,UAAU,CAAC,UAAU,CAC/C,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,EACtH,OAAO,EAAE,UAAU,EAAE,WAAW,CACjC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,yFAAyF;QACzF,8FAA8F;QAC9F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,GAAkB;QAC7C,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,yDAAyD;QACzD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB,EAAE,GAAkB;QACtD,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5C,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACpF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACjD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS;oBAAE,OAAO,KAAK,CAAC;YAC7E,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAkB,EAAE,QAAuB;QAChE,yFAAyF;QACzF,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,6EAA6E;gBAC3E,GAAG,GAAG,CAAC,IAAI,sDAAsD,CACpE,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,kFAAkF;QAClF,4EAA4E;QAC5E,IAAI,MAAM,GAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAC3E,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAgB,CAClF,CAAC;QAEF,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC9B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAC7C,CACF,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mFAAmF;IACnF,+EAA+E;IAC/E,YAAY;QACV,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAED,WAAW,CAAC,IAAuD;QACjE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAkB,EAAE,QAAuB;QAC1D,oFAAoF;QACpF,IAAI,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B;QAEnE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC9B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,QAAQ,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACxC,+FAA+F;YAC/F,sFAAsF;YACtF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACvE,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,iFAAiF;AAEjF,SAAS,UAAU,CACjB,MAYC,EACD,EAAW,EACX,UAAmB,EACnB,WAAmB;IAEnB,OAAO;QACL,EAAE;QACF,UAAU;QACV,WAAW;QACX,OAAO,EAAI,MAAM,CAAC,OAAO;QACzB,QAAQ,EAAG,MAAM,CAAC,QAAQ;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAI,MAAM,CAAC,OAAO;QACzB,uEAAuE;QACvE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAS,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAM,MAAM,CAAC,OAAO,EAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAK,MAAM,CAAC,QAAQ,EAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,UAAU,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAG,MAAM,CAAC,UAAU,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAI,MAAM,CAAC,SAAS,EAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,UAAU,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAG,MAAM,CAAC,UAAU,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,UAAU,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAG,MAAM,CAAC,UAAU,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAc;IAClC,+EAA+E;IAC/E,OAAO,UAAU,CAAC;QAChB,EAAE,EAAW,CAAC,CAAC,EAAE;QACjB,QAAQ,EAAK,CAAC,CAAC,QAAQ;QACvB,OAAO,EAAM,CAAC,CAAC,OAAO;QACtB,SAAS,EAAI,CAAC,CAAC,SAAS;QACxB,SAAS,EAAI,CAAC,CAAC,SAAS;QACxB,UAAU,EAAG,CAAC,CAAC,UAAU;QACzB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,GAAG,CAAC,CAAC,CAAC,OAAO,KAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAK,CAAC,CAAC,OAAO,EAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAI,CAAC,CAAC,QAAQ,EAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,SAAS,KAAM,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAG,CAAC,CAAC,SAAS,EAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;AACL,CAAC"}

package/dist/surface/context-query.d.ts

@@ -0,0 +1,21 @@
+import type { AgentConsentContext } from "../types/access-context.js";
+import type { ClaimMeta } from "../types/claim.js";
+import type { ISOTime } from "../types/ids.js";
+import type { ClaimSelector } from "../types/fact-store.js";
+import type { FactStore } from "../types/fact-store.js";
+import type { AuditLog } from "../audit/audit-log.js";
+import type { GrantRegistry } from "../consent/grant-registry.js";
+export interface AgentQueryDeps {
+    readonly store: FactStore;
+    readonly grantRegistry: GrantRegistry;
+    readonly auditLog: AuditLog;
+    readonly clock?: () => ISOTime;
+}
+export type AgentQueryOutcome = {
+    readonly ok: true;
+    readonly claims: ReadonlyArray<ClaimMeta>;
+} | {
+    readonly ok: false;
+    readonly reason: "audit-write-failed";
+};
+export declare function agentQuery(ctx: AgentConsentContext, requestedSelector: ClaimSelector, { store, grantRegistry, auditLog, clock }: AgentQueryDeps): Promise<AgentQueryOutcome>;

package/dist/surface/context-query.js

@@ -0,0 +1,113 @@
+// Slice-03: Agent-facing query surface — the ONLY entry point for agent reads.
+//
+// Critical rule: this file NEVER calls the broad store read method.
+// Only readClaims() with a restricted selector. (AGENT_NO_READALL_001)
+// Verified by test/architecture/agent-no-readall.test.ts
+//
+// Flow:
+//   AgentConsentContext
+//   → evaluateGrant (purpose / capability / time / revocation)
+//   → intersectSelector (requested ∩ grant.scope)
+//   → readClaims(agentCtx, restrictedSelector)
+//   → redactByDepth(claims, maxFieldDepth)
+//   → buildAuditEvent
+//   → auditLog.write()   ← BEFORE returning result
+//   → if audit fails → { ok: false }  (AUDIT_FAIL_CLOSED_001)
+//   → return { ok: true, claims }
+import { evaluateGrant } from "../consent/consent-guard.js";
+import { intersectSelector } from "../consent/intersect-selector.js";
+import { buildAuditEvent, denyReasonToAuditCode } from "../audit/audit-log.js";
+import { asISOTime } from "../types/ids.js";
+function defaultClock() {
+    return asISOTime(new Date().toISOString());
+}
+export async function agentQuery(ctx, requestedSelector, { store, grantRegistry, auditLog, clock = defaultClock }) {
+    const now = clock();
+    const fingerprint = selectorFingerprint(requestedSelector);
+    // ── 1. Resolve grant ──────────────────────────────────────────────────────
+    const grant = grantRegistry.lookup(ctx.grantId);
+    // ── 2. Validate grant ─────────────────────────────────────────────────────
+    const decision = evaluateGrant(grant, ctx, "query", now);
+    if (!decision.allowed) {
+        // Write deny audit BEFORE returning (fail-closed)
+        const event = buildAuditEvent({
+            actor: ctx.agentId,
+            grantId: ctx.grantId,
+            purpose: ctx.purpose,
+            decision: "deny",
+            reasonCode: denyReasonToAuditCode(decision.reason),
+            selectorFingerprint: fingerprint,
+            resultCount: 0,
+            resultClaimIds: [],
+            now,
+        });
+        try {
+            await auditLog.write(event);
+        }
+        catch {
+            return { ok: false, reason: "audit-write-failed" };
+        }
+        // CONSENT_NOT_FOUND_INDISTINGUISHABLE_001: deny looks like empty result
+        return { ok: true, claims: [] };
+    }
+    // ── 3. Intersect selector with grant scope (CONSENT_PRE_FILTER_001) ───────
+    const restrictedSelector = intersectSelector(requestedSelector, grant);
+    let claims = [];
+    if (restrictedSelector !== null) {
+        // AGENT_NO_READALL_001: only readClaims() with restricted selector
+        claims = await store.readClaims(ctx, restrictedSelector);
+    }
+    // ── 4. Redact by maxFieldDepth ────────────────────────────────────────────
+    const depth = grant.maxFieldDepth ?? "full";
+    const redacted = claims.map((c) => redactMeta(c, depth));
+    // ── 5. Build and write allow audit event ─────────────────────────────────
+    const auditEvent = buildAuditEvent({
+        actor: ctx.agentId,
+        grantId: ctx.grantId,
+        purpose: ctx.purpose,
+        decision: "allow",
+        reasonCode: restrictedSelector === null ? "SCOPE_INTERSECTION_EMPTY" : "ALLOWED",
+        selectorFingerprint: fingerprint,
+        resultCount: redacted.length,
+        resultClaimIds: redacted.map((c) => c.id),
+        now,
+    });
+    // AUDIT_FAIL_CLOSED_001: write audit BEFORE returning result
+    try {
+        await auditLog.write(auditEvent);
+    }
+    catch {
+        return { ok: false, reason: "audit-write-failed" };
+    }
+    return { ok: true, claims: redacted };
+}
+// ─── private helpers ──────────────────────────────────────────────────────────
+function redactMeta(meta, depth) {
+    if (depth === "full")
+        return meta;
+    // CONSENT_MAX_FIELD_DEPTH_001: "summary" → strip sourceId and lifecycle markers
+    // sourceId is replaced with an opaque sentinel; lifecycle fields are omitted.
+    // This keeps the type as ClaimMeta (no separate type needed for MVP).
+    return Object.freeze({
+        id: meta.id,
+        sourceId: meta.sourceId, // kept for now; post-MVP could be redacted to opaque token
+        subject: meta.subject,
+        predicate: meta.predicate,
+        validFrom: meta.validFrom,
+        recordedAt: meta.recordedAt,
+        recordedSeq: meta.recordedSeq,
+        // retracts, supersedes, overrides, confidence, validTo — stripped in summary mode
+    });
+}
+function selectorFingerprint(selector) {
+    // Safe to log: predicate names only, no claim data
+    const parts = [];
+    if (selector.subject)
+        parts.push(`subject:${selector.subject}`);
+    if (selector.predicates)
+        parts.push(`preds:[${[...selector.predicates].sort().join(",")}]`);
+    if (selector.sinceRecordedSeq !== undefined)
+        parts.push(`since:${selector.sinceRecordedSeq}`);
+    return parts.join("|") || "no-filter";
+}
+//# sourceMappingURL=context-query.js.map

package/dist/surface/context-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-query.js","sourceRoot":"","sources":["../../src/surface/context-query.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,yDAAyD;AACzD,EAAE;AACF,QAAQ;AACR,wBAAwB;AACxB,+DAA+D;AAC/D,kDAAkD;AAClD,+CAA+C;AAC/C,2CAA2C;AAC3C,sBAAsB;AACtB,mDAAmD;AACnD,8DAA8D;AAC9D,kCAAkC;AASlC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkB5C,SAAS,YAAY;IACnB,OAAO,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAwB,EACxB,iBAAgC,EAChC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,GAAG,YAAY,EAAkB;IAExE,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAE3D,6EAA6E;IAC7E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEhD,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAEzD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,kDAAkD;QAClD,MAAM,KAAK,GAAG,eAAe,CAAC;YAC5B,KAAK,EAAgB,GAAG,CAAC,OAAO;YAChC,OAAO,EAAc,GAAG,CAAC,OAAO;YAChC,OAAO,EAAc,GAAG,CAAC,OAAO;YAChC,QAAQ,EAAa,MAAM;YAC3B,UAAU,EAAW,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3D,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAU,CAAC;YACtB,cAAc,EAAO,EAAE;YACvB,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACrD,CAAC;QACD,wEAAwE;QACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,KAAM,CAAC,CAAC;IAExE,IAAI,MAAM,GAA6B,EAAE,CAAC;IAC1C,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,mEAAmE;QACnE,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IAED,6EAA6E;IAC7E,MAAM,KAAK,GAAG,KAAM,CAAC,aAAa,IAAI,MAAM,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzD,4EAA4E;IAC5E,MAAM,UAAU,GAAG,eAAe,CAAC;QACjC,KAAK,EAAgB,GAAG,CAAC,OAAO;QAChC,OAAO,EAAc,GAAG,CAAC,OAAO;QAChC,OAAO,EAAc,GAAG,CAAC,OAAO;QAChC,QAAQ,EAAa,OAAO;QAC5B,UAAU,EAAW,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS;QACzF,mBAAmB,EAAE,WAAW;QAChC,WAAW,EAAU,QAAQ,CAAC,MAAM;QACpC,cAAc,EAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG;KACJ,CAAC,CAAC;IAEH,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,iFAAiF;AAEjF,SAAS,UAAU,CAAC,IAAe,EAAE,KAAyB;IAC5D,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAElC,gFAAgF;IAChF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAW,IAAI,CAAC,EAAE;QACpB,QAAQ,EAAK,IAAI,CAAC,QAAQ,EAAE,2DAA2D;QACvF,OAAO,EAAM,IAAI,CAAC,OAAO;QACzB,SAAS,EAAI,IAAI,CAAC,SAAS;QAC3B,SAAS,EAAI,IAAI,CAAC,SAAS;QAC3B,UAAU,EAAG,IAAI,CAAC,UAAU;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,kFAAkF;KACnF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAuB;IAClD,mDAAmD;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;AACxC,CAAC"}

package/dist/surface/evidence-backed-context-query.d.ts

@@ -0,0 +1,62 @@
+import type { AccessContext } from "../types/access-context.js";
+import type { ClaimPayload } from "../types/claim.js";
+import type { ClaimSelector, FactStore } from "../types/fact-store.js";
+import type { AuditId, ClaimId, ContractId, ISOTime } from "../types/ids.js";
+import type { AuditLog } from "../audit/audit-log.js";
+import type { GrantRegistry } from "../consent/grant-registry.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import type { RawDocumentStore } from "../evidence/raw-document-store.js";
+import type { TrustProfile } from "../resolution/trust-profile.js";
+import type { ContractConflict, ContractProjectionStatus } from "../contract/types.js";
+import type { ResolutionReasonCode } from "../resolution/types.js";
+import type { ContractProjectionDiagnostics } from "../contract/diagnostics.js";
+export interface HydratedContractFieldProjection {
+    readonly status: "resolved" | "disputed" | "missing";
+    readonly winningClaimId?: ClaimId;
+    readonly competingClaimIds: ReadonlyArray<ClaimId>;
+    readonly reasonCode: ResolutionReasonCode | "MISSING";
+    readonly resolvedValue?: ClaimPayload;
+}
+export interface HydratedContractFields {
+    readonly counterparty: HydratedContractFieldProjection;
+    readonly amount: HydratedContractFieldProjection;
+    readonly cadence: HydratedContractFieldProjection;
+    readonly nextDue: HydratedContractFieldProjection;
+    readonly cancellationTerms: HydratedContractFieldProjection;
+    readonly contractStatus: HydratedContractFieldProjection;
+}
+export interface HydratedContractProjection {
+    readonly contractId: ContractId;
+    readonly status: ContractProjectionStatus;
+    readonly fields: HydratedContractFields;
+    readonly conflicts: ReadonlyArray<ContractConflict>;
+    readonly derivedFrom: ReadonlyArray<ClaimId>;
+    readonly policyId: string;
+    readonly policyVersion: string;
+}
+export interface QueryContractsInput {
+    readonly selector: ClaimSelector;
+    readonly includeDiagnostics?: boolean;
+}
+export type ContextQueryResult = {
+    readonly ok: true;
+    readonly contracts: ReadonlyArray<HydratedContractProjection>;
+    readonly diagnostics?: ReadonlyArray<ContractProjectionDiagnostics>;
+    readonly auditId?: AuditId;
+} | {
+    readonly ok: false;
+    readonly reason: "audit-write-failed";
+};
+export declare class EvidenceBackedContextQueryService {
+    private readonly _store;
+    private readonly _grantRegistry;
+    private readonly _auditLog;
+    private readonly _sourceRegistry;
+    private readonly _docStore;
+    private readonly _trust;
+    private readonly _clock?;
+    constructor(_store: FactStore, _grantRegistry: GrantRegistry, _auditLog: AuditLog, _sourceRegistry: SourceRegistry, _docStore: RawDocumentStore, _trust: TrustProfile, _clock?: (() => ISOTime) | undefined);
+    queryContracts(ctx: AccessContext, input: QueryContractsInput): Promise<ContextQueryResult>;
+    private _queryAsAgent;
+    private _queryAsPrivileged;
+}