npm - life-as-api - Versions diffs - 0.2.0 - Mend

@@ -0,0 +1,33 @@
+import type { EvidenceId, SourceId, ISOTime } from "./ids.js";
+import type { OwnerContext, SystemProjectionContext, TestContext } from "./access-context.js";
+export type SourceCreator = OwnerContext | SystemProjectionContext | TestContext;
+export type SourceKind = "user_manual" | "system_derived" | "document_upload" | "imported_connector" | "agent_proposal";
+export type SourceStatus = "active" | "inactive";
+export interface EvidenceRef {
+    readonly id?: EvidenceId;
+    readonly uri: string;
+    readonly contentHash?: string;
+    readonly mimeType?: string;
+    readonly encrypted?: boolean;
+}
+export interface Source {
+    readonly id: SourceId;
+    readonly kind: SourceKind;
+    readonly label: string;
+    readonly status: SourceStatus;
+    readonly createdAt: ISOTime;
+    readonly createdBy: SourceCreator;
+    readonly evidenceRef?: EvidenceRef;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface SourceInput {
+    readonly id: SourceId;
+    readonly kind: SourceKind;
+    readonly label: string;
+    readonly evidenceRef?: EvidenceRef;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface SourceFilter {
+    readonly kind?: SourceKind;
+    readonly status?: SourceStatus;
+}

@@ -0,0 +1,6 @@
+// Source types — Slice-07 SourceRegistry + Provenance Validation
+//
+// SOURCE_REGISTRY_EXISTS_001: every claim's sourceId must resolve to a registered Source.
+// SOURCE_REGISTRY_IMMUTABLE_001: source fields are immutable except status transitions.
+export {};
+//# sourceMappingURL=source.js.map

@@ -0,0 +1,24 @@
+import type { SourceId, ClaimId } from "./ids.js";
+import type { ClaimPredicate } from "./claim.js";
+export type TrustScore = "HIGH" | "MEDIUM" | "LOW" | "DISPUTED";
+export type ResolutionResult = {
+    outcome: "resolved";
+    winner: ClaimId;
+    loser: ClaimId;
+    score: TrustScore;
+} | {
+    outcome: "disputed";
+    competing: ClaimId[];
+};
+export interface TrustProfile {
+    scoreFor(sourceId: SourceId, predicate: ClaimPredicate): TrustScore;
+}
+export interface StaticTrustTable {
+    readonly rules: ReadonlyArray<TrustRule>;
+    readonly fallback: "LOW";
+}
+export interface TrustRule {
+    readonly sourceId: SourceId;
+    readonly predicate: ClaimPredicate | "*";
+    readonly score: TrustScore;
+}

@@ -0,0 +1,5 @@
+// ADR-003 + GPT-5.5 correction:
+// TrustProfile(source, predicate) replaces Source.trustTier (scalar, too coarse).
+// Unknown rule = LOW or DISPUTED — never MEDIUM (GPT-5.5 explicit requirement).
+export {};
+//# sourceMappingURL=trust.js.map

@@ -0,0 +1,17 @@
+// deepFreeze — recursively freeze an object and all nested objects.
+// Used by the store to guarantee CLAIM_IMMUTABLE_002 (nested payload immutability).
+// Not a crypto primitive — safe to import from any module.
+export function deepFreeze(value) {
+    if (value === null || typeof value !== "object" || Object.isFrozen(value)) {
+        return value;
+    }
+    // Freeze nested objects first (depth-first)
+    for (const key of Object.getOwnPropertyNames(value)) {
+        const child = value[key];
+        if (child !== null && typeof child === "object") {
+            deepFreeze(child);
+        }
+    }
+    return Object.freeze(value);
+}
+//# sourceMappingURL=deep-freeze.js.map

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"source.js","sourceRoot":"","sources":["../../src/types/source.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,0FAA0F;AAC1F,wFAAwF"}

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"trust.js","sourceRoot":"","sources":["../../src/types/trust.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,kFAAkF;AAClF,gFAAgF"}

	@@ -0,0 +1 @@
1	+ export declare function deepFreeze<T>(value: T): Readonly<T>;

@@ -0,0 +1,55 @@
+{
+  "name": "life-as-api",
+  "version": "0.2.0",
+  "description": "A personal context layer: typed, encrypted, consent-gated claim log letting authorised agents query structured facts about a person's life without exposing raw documents, crypto primitives, or the storage engine.",
+  "keywords": [
+    "personal-data",
+    "consent",
+    "gdpr",
+    "encryption",
+    "audit",
+    "agents",
+    "sqlite",
+    "api",
+    "claims",
+    "provenance"
+  ],
+  "type": "module",
+  "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run typecheck && npm test && npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:security": "vitest run test/security",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration",
+    "test:architecture": "vitest run test/architecture",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  },
+  "dependencies": {
+    "better-sqlite3": "^12.10.1"
+  }
+}

life-as-api 0.2.0