life-as-api 0.2.0

package/dist/consent/consent-guard.d.ts

@@ -0,0 +1,4 @@
+import type { AgentConsentContext } from "../types/access-context.js";
+import type { ConsentGrant, ConsentDecision, Capability } from "../types/consent.js";
+import type { ISOTime } from "../types/ids.js";
+export declare function evaluateGrant(grant: ConsentGrant | undefined, ctx: AgentConsentContext, requiredCapability: Capability, now: ISOTime): ConsentDecision;

package/dist/consent/consent-guard.js

@@ -0,0 +1,37 @@
+// Slice-03: Grant validation — checks purpose, capability, time, revocation.
+// Returns ConsentDecision (allow/deny) without touching the store.
+// Order matters: check revocation first, then expiry, then purpose, then capability.
+export function evaluateGrant(grant, ctx, requiredCapability, now) {
+    // CONSENT_REVOKED_DENY_001
+    if (!grant) {
+        return { allowed: false, reason: "grant_not_found" };
+    }
+    if (grant.revokedAt !== undefined) {
+        return { allowed: false, reason: "grant_revoked" };
+    }
+    // CONSENT_EXPIRED_DENY_001: grant time window — notBefore and notAfter are distinct codes
+    if (now < grant.notBefore) {
+        return { allowed: false, reason: "grant_not_yet_active" };
+    }
+    if (now > grant.notAfter) {
+        return { allowed: false, reason: "grant_expired" };
+    }
+    // CONSENT_EXPIRED_DENY_001: context-level TTL (set by whoever built the ctx)
+    if (now > ctx.notAfter) {
+        return { allowed: false, reason: "grant_expired" };
+    }
+    // CONSENT_PURPOSE_BOUND_001
+    if (ctx.purpose !== grant.purpose) {
+        return { allowed: false, reason: "purpose_mismatch" };
+    }
+    // CONSENT_CAPABILITY_BOUND_001
+    if (!grant.capabilities.includes(requiredCapability)) {
+        return { allowed: false, reason: "capability_not_granted" };
+    }
+    return {
+        allowed: true,
+        scopedPredicates: grant.scope.predicates,
+        maxFieldDepth: grant.maxFieldDepth ?? "full",
+    };
+}
+//# sourceMappingURL=consent-guard.js.map

package/dist/consent/consent-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-guard.js","sourceRoot":"","sources":["../../src/consent/consent-guard.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,mEAAmE;AACnE,qFAAqF;AAMrF,MAAM,UAAU,aAAa,CAC3B,KAA+B,EAC/B,GAAwB,EACxB,kBAA8B,EAC9B,GAAY;IAEZ,2BAA2B;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,0FAA0F;IAC1F,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,6EAA6E;IAC7E,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAE,KAAK,CAAC,YAAsC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC9D,CAAC;IAED,OAAO;QACL,OAAO,EAAS,IAAI;QACpB,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;QACxC,aAAa,EAAG,KAAK,CAAC,aAAa,IAAI,MAAM;KAC9C,CAAC;AACJ,CAAC"}

package/dist/consent/grant-registry.d.ts

@@ -0,0 +1,7 @@
+import type { GrantId } from "../types/ids.js";
+import type { ConsentGrant } from "../types/consent.js";
+export declare class GrantRegistry {
+    private readonly _grants;
+    register(grant: ConsentGrant): this;
+    lookup(id: GrantId): ConsentGrant | undefined;
+}

package/dist/consent/grant-registry.js

@@ -0,0 +1,13 @@
+// Slice-03: GrantRegistry — in-memory lookup of ConsentGrants by GrantId.
+// In production this would be a DB query; for Slice-03 it's a plain Map.
+export class GrantRegistry {
+    _grants = new Map();
+    register(grant) {
+        this._grants.set(grant.id, grant);
+        return this;
+    }
+    lookup(id) {
+        return this._grants.get(id);
+    }
+}
+//# sourceMappingURL=grant-registry.js.map

package/dist/consent/grant-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-registry.js","sourceRoot":"","sources":["../../src/consent/grant-registry.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AAKzE,MAAM,OAAO,aAAa;IACP,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE5D,QAAQ,CAAC,KAAmB;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,EAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/consent/intersect-selector.d.ts

@@ -0,0 +1,3 @@
+import type { ConsentGrant } from "../types/consent.js";
+import type { ClaimSelector } from "../types/fact-store.js";
+export declare function intersectSelector(requested: ClaimSelector, grant: ConsentGrant): ClaimSelector | null;

package/dist/consent/intersect-selector.js

@@ -0,0 +1,66 @@
+// Slice-03: Selector intersection — the heart of Consent Pre-Filter.
+// CONSENT_SELECTOR_INTERSECTION_001:
+//   restrictedSelector = intersect(requestedSelector, grant.scope)
+//   null = empty intersection → zero claims without store read
+//
+// Rule: agent sees ONLY the intersection of what they asked for AND what they're allowed.
+// Empty intersection → null (caller should write deny-audit, return { ok:true, claims:[] }).
+export function intersectSelector(requested, grant) {
+    // ── Predicate intersection ────────────────────────────────────────────────
+    const grantedPredicates = buildGrantedPredicates(grant);
+    if (grantedPredicates.length === 0)
+        return null; // grant itself allows nothing
+    let allowedPredicates;
+    if (requested.predicates !== undefined) {
+        // Intersect requested with granted
+        const grantedSet = new Set(grantedPredicates);
+        allowedPredicates = requested.predicates.filter((p) => grantedSet.has(p));
+    }
+    else {
+        // No restriction requested → use all granted predicates
+        allowedPredicates = grantedPredicates;
+    }
+    if (allowedPredicates.length === 0)
+        return null; // nothing in common
+    // ── Subject intersection ─────────────────────────────────────────────────
+    // grant.scope.subjects: agent may only query these PersonIds
+    // requested.subject: specific subject the agent asked about
+    let allowedSubject = requested.subject;
+    if (grant.scope.subjects !== undefined && grant.scope.subjects.length > 0) {
+        if (requested.subject !== undefined) {
+            // Agent asked for a specific subject — must be in granted set
+            const inGrantedSet = grant.scope.subjects.includes(requested.subject);
+            if (!inGrantedSet)
+                return null; // subject not granted
+            allowedSubject = requested.subject;
+        }
+        else {
+            // Agent didn't specify subject — we cannot widen their query beyond granted subjects
+            // For MVP with single subject per query: if only one granted subject, use it
+            // If multiple: we'd need a multi-subject selector; for now, null (too broad)
+            if (grant.scope.subjects.length === 1) {
+                allowedSubject = grant.scope.subjects[0];
+            }
+            else {
+                // Multiple granted subjects, none specified — caller must specify subject
+                // Return null to force explicit subject (avoid over-broad reads)
+                return null;
+            }
+        }
+    }
+    // ── Build restricted selector ─────────────────────────────────────────────
+    // Pass through other selector constraints (sinceRecordedSeq, includeRetracted)
+    // as-is — they can only NARROW, never widen the result.
+    const restricted = {
+        predicates: allowedPredicates,
+        ...(allowedSubject !== undefined ? { subject: allowedSubject } : {}),
+        ...(requested.sinceRecordedSeq !== undefined ? { sinceRecordedSeq: requested.sinceRecordedSeq } : {}),
+        ...(requested.includeRetracted !== undefined ? { includeRetracted: requested.includeRetracted } : {}),
+    };
+    return restricted;
+}
+function buildGrantedPredicates(grant) {
+    const excluded = new Set(grant.scope.excludePredicates ?? []);
+    return grant.scope.predicates.filter((p) => !excluded.has(p));
+}
+//# sourceMappingURL=intersect-selector.js.map

package/dist/consent/intersect-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intersect-selector.js","sourceRoot":"","sources":["../../src/consent/intersect-selector.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,qCAAqC;AACrC,mEAAmE;AACnE,+DAA+D;AAC/D,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAO7F,MAAM,UAAU,iBAAiB,CAC/B,SAAwB,EACxB,KAAmB;IAEnB,6EAA6E;IAC7E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAE/E,IAAI,iBAAgD,CAAC;IAErD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9C,iBAAiB,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,iBAAiB,GAAG,iBAAiB,CAAC;IACxC,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IAErE,4EAA4E;IAC5E,6DAA6D;IAC7D,4DAA4D;IAC5D,IAAI,cAAc,GAAyB,SAAS,CAAC,OAAO,CAAC;IAE7D,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACpC,8DAA8D;YAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACtE,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;YACtD,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,qFAAqF;YACrF,6EAA6E;YAC7E,6EAA6E;YAC7E,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,0EAA0E;gBAC1E,iEAAiE;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,wDAAwD;IACxD,MAAM,UAAU,GAAkB;QAChC,UAAU,EAAE,iBAAiB;QAC7B,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtG,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAmB;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/contract/diagnostics.d.ts

@@ -0,0 +1,32 @@
+import type { ClaimId, ContractId, EvidenceId, SourceId } from "../types/ids.js";
+import type { ClaimMeta } from "../types/claim.js";
+import type { AccessContext } from "../types/access-context.js";
+import type { EvidenceRef } from "../types/evidence.js";
+import type { ContractProjection } from "./types.js";
+import type { SourceRegistry } from "../source/source-registry.js";
+import type { RawDocumentStore } from "../evidence/raw-document-store.js";
+export type EvidenceStatus = "evidence_present" | "source_missing" | "source_no_evidence" | "evidence_missing" | "not_checked";
+export interface FieldEvidenceDiagnostic {
+    readonly fieldName: string;
+    readonly status: EvidenceStatus;
+    readonly reasonCode: string;
+    readonly claimId?: ClaimId;
+    readonly sourceId?: SourceId;
+    readonly evidenceId?: EvidenceId;
+    readonly evidenceRef?: EvidenceRef;
+}
+export interface ConflictEvidenceDiagnostic {
+    readonly fieldName: string;
+    readonly competingClaimId: ClaimId;
+    readonly status: EvidenceStatus;
+    readonly reasonCode: string;
+    readonly sourceId?: SourceId;
+    readonly evidenceId?: EvidenceId;
+}
+export interface ContractProjectionDiagnostics {
+    readonly contractId: ContractId;
+    readonly fieldDiagnostics: ReadonlyArray<FieldEvidenceDiagnostic>;
+    readonly conflictDiagnostics: ReadonlyArray<ConflictEvidenceDiagnostic>;
+    readonly policyId: string;
+}
+export declare function diagnoseContractProjections(projections: ReadonlyArray<ContractProjection>, claimMap: ReadonlyMap<ClaimId, ClaimMeta>, sourceReg: SourceRegistry, docStore: RawDocumentStore, ctx: AccessContext): ReadonlyArray<ContractProjectionDiagnostics>;

package/dist/contract/diagnostics.js

@@ -0,0 +1,112 @@
+// Slice-11: Evidence-backed Contract Projection Diagnostics.
+// Pure synchronous function — no I/O, no mutations.
+// CONTRACT_DIAGNOSTICS_NO_RAW_BYTES_001: never calls getDocument(); uses getEvidenceRef() only.
+// CONTRACT_DIAGNOSTICS_AGENT_SAFE_METADATA_ONLY_001: output contains no raw bytes.
+// CONTRACT_DIAGNOSTICS_DETERMINISTIC_001: same input → identical output (sort by contractId).
+// Stable iteration order — must match projectContracts field-to-predicate mapping.
+const FIELD_PREDICATE_MAP = [
+    ["counterparty", "contract.counterparty"],
+    ["amount", "contract.amount"],
+    ["cadence", "contract.cadence"],
+    ["nextDue", "contract.next_due"],
+    ["cancellationTerms", "contract.cancellation_terms"],
+    ["contractStatus", "contract.exists"],
+];
+// CONTRACT_DIAGNOSTICS_EXISTS_001: diagnoseContractProjections is the entry point.
+// CONTRACT_DIAGNOSTICS_DETERMINISTIC_001: output sorted by contractId.
+export function diagnoseContractProjections(projections, claimMap, sourceReg, docStore, ctx) {
+    return [...projections]
+        .sort((a, b) => a.contractId.localeCompare(b.contractId))
+        .map((proj) => diagnoseOne(proj, claimMap, sourceReg, docStore, ctx));
+}
+function diagnoseOne(proj, claimMap, sourceReg, docStore, ctx) {
+    // ── Field diagnostics — one entry per ContractFields key ─────────────────
+    const fieldDiagnostics = [];
+    for (const [fieldKey, fieldName] of FIELD_PREDICATE_MAP) {
+        const field = proj.fields[fieldKey];
+        if (field.status === "missing") {
+            fieldDiagnostics.push({ fieldName, status: "not_checked", reasonCode: "FIELD_MISSING" });
+            continue;
+        }
+        if (field.status === "disputed") {
+            fieldDiagnostics.push({ fieldName, status: "not_checked", reasonCode: "FIELD_DISPUTED" });
+            continue;
+        }
+        // resolved — check the winning claim's provenance chain
+        if (field.winningClaimId !== undefined) {
+            fieldDiagnostics.push(checkClaimEvidence(fieldName, field.winningClaimId, claimMap, sourceReg, docStore, ctx));
+        }
+    }
+    // ── Conflict diagnostics — one entry per (conflict × competingClaimId) ───
+    // CONTRACT_CONFLICT_EVIDENCE_VISIBLE_001: each competing claim gets its own entry.
+    const conflictDiagnostics = [];
+    for (const conflict of [...proj.conflicts].sort((a, b) => a.predicate.localeCompare(b.predicate))) {
+        for (const competingClaimId of [...conflict.competingClaimIds].sort()) {
+            conflictDiagnostics.push(checkConflictEvidence(conflict.predicate, competingClaimId, claimMap, sourceReg, docStore, ctx));
+        }
+    }
+    return {
+        contractId: proj.contractId,
+        fieldDiagnostics,
+        conflictDiagnostics,
+        policyId: proj.policyId,
+    };
+}
+// CONTRACT_FIELD_SOURCE_MISSING_001 / CONTRACT_FIELD_SOURCE_NO_EVIDENCE_001 /
+// CONTRACT_FIELD_EVIDENCE_MISSING_001 / CONTRACT_FIELD_EVIDENCE_PRESENT_001
+function checkClaimEvidence(fieldName, claimId, claimMap, sourceReg, docStore, ctx) {
+    const claimMeta = claimMap.get(claimId);
+    if (claimMeta === undefined) {
+        return { fieldName, claimId, status: "source_missing", reasonCode: "CLAIM_NOT_IN_MAP" };
+    }
+    const sourceId = claimMeta.sourceId;
+    const source = sourceReg.getSource(ctx, sourceId);
+    if (source === undefined) {
+        return { fieldName, claimId, sourceId, status: "source_missing", reasonCode: "SOURCE_UNKNOWN_REJECTED_001" };
+    }
+    const evidenceId = source.evidenceRef?.id;
+    if (evidenceId === undefined) {
+        return { fieldName, claimId, sourceId, status: "source_no_evidence", reasonCode: "SOURCE_HAS_NO_EVIDENCE_REF" };
+    }
+    const evRef = docStore.getEvidenceRef(ctx, evidenceId);
+    if (evRef === undefined) {
+        return { fieldName, claimId, sourceId, evidenceId, status: "evidence_missing", reasonCode: "EVIDENCE_REF_NOT_IN_STORE" };
+    }
+    return {
+        fieldName,
+        claimId,
+        sourceId,
+        evidenceId,
+        status: "evidence_present",
+        reasonCode: "EVIDENCE_BACKED_CLAIM_PROVENANCE_CHAIN_001",
+        evidenceRef: evRef,
+    };
+}
+function checkConflictEvidence(fieldName, competingClaimId, claimMap, sourceReg, docStore, ctx) {
+    const claimMeta = claimMap.get(competingClaimId);
+    if (claimMeta === undefined) {
+        return { fieldName, competingClaimId, status: "source_missing", reasonCode: "CLAIM_NOT_IN_MAP" };
+    }
+    const sourceId = claimMeta.sourceId;
+    const source = sourceReg.getSource(ctx, sourceId);
+    if (source === undefined) {
+        return { fieldName, competingClaimId, sourceId, status: "source_missing", reasonCode: "SOURCE_UNKNOWN_REJECTED_001" };
+    }
+    const evidenceId = source.evidenceRef?.id;
+    if (evidenceId === undefined) {
+        return { fieldName, competingClaimId, sourceId, status: "source_no_evidence", reasonCode: "SOURCE_HAS_NO_EVIDENCE_REF" };
+    }
+    const evRef = docStore.getEvidenceRef(ctx, evidenceId);
+    if (evRef === undefined) {
+        return { fieldName, competingClaimId, sourceId, evidenceId, status: "evidence_missing", reasonCode: "EVIDENCE_REF_NOT_IN_STORE" };
+    }
+    return {
+        fieldName,
+        competingClaimId,
+        sourceId,
+        evidenceId,
+        status: "evidence_present",
+        reasonCode: "EVIDENCE_BACKED_CLAIM_PROVENANCE_CHAIN_001",
+    };
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/contract/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/contract/diagnostics.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,oDAAoD;AACpD,gGAAgG;AAChG,mFAAmF;AACnF,8FAA8F;AA4C9F,mFAAmF;AACnF,MAAM,mBAAmB,GAAkD;IACzE,CAAC,cAAc,EAAO,uBAAuB,CAAC;IAC9C,CAAC,QAAQ,EAAa,iBAAiB,CAAC;IACxC,CAAC,SAAS,EAAY,kBAAkB,CAAC;IACzC,CAAC,SAAS,EAAY,mBAAmB,CAAC;IAC1C,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IACpD,CAAC,gBAAgB,EAAK,iBAAiB,CAAC;CACzC,CAAC;AAEF,mFAAmF;AACnF,uEAAuE;AACvE,MAAM,UAAU,2BAA2B,CACzC,WAA8C,EAC9C,QAA4C,EAC5C,SAA2B,EAC3B,QAA6B,EAC7B,GAA0B;IAE1B,OAAO,CAAC,GAAG,WAAW,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAClB,IAA6B,EAC7B,QAA0C,EAC1C,SAAyB,EACzB,QAA2B,EAC3B,GAAwB;IAExB,4EAA4E;IAC5E,MAAM,gBAAgB,GAA8B,EAAE,CAAC;IAEvD,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,wDAAwD;QACxD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,gBAAgB,CAAC,IAAI,CACnB,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,mFAAmF;IACnF,MAAM,mBAAmB,GAAiC,EAAE,CAAC;IAE7D,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvD,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CACvC,EAAE,CAAC;QACF,KAAK,MAAM,gBAAgB,IAAI,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtE,mBAAmB,CAAC,IAAI,CACtB,qBAAqB,CACnB,QAAQ,CAAC,SAAS,EAClB,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,GAAG,CACJ,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAW,IAAI,CAAC,UAAU;QACpC,gBAAgB;QAChB,mBAAmB;QACnB,QAAQ,EAAa,IAAI,CAAC,QAAQ;KACnC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,SAAS,kBAAkB,CACzB,SAAkB,EAClB,OAAmB,EACnB,QAA2C,EAC3C,SAA0B,EAC1B,QAA4B,EAC5B,GAAyB;IAEzB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,6BAA6B,EAAE,CAAC;IAC/G,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAClH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,2BAA2B,EAAE,CAAC;IAC3H,CAAC;IAED,OAAO;QACL,SAAS;QACT,OAAO;QACP,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,kBAAkB;QAC1B,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAwB,EACxB,gBAAyB,EACzB,QAAiD,EACjD,SAAgC,EAChC,QAAkC,EAClC,GAA+B;IAE/B,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACnG,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,6BAA6B,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3H,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,2BAA2B,EAAE,CAAC;IACpI,CAAC;IAED,OAAO;QACL,SAAS;QACT,gBAAgB;QAChB,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,kBAAkB;QAC1B,UAAU,EAAE,4CAA4C;KACzD,CAAC;AACJ,CAAC"}

package/dist/contract/project-contracts.d.ts

@@ -0,0 +1,5 @@
+import type { ClaimMeta } from "../types/claim.js";
+import type { PersonId } from "../types/ids.js";
+import type { TrustProfile } from "../resolution/trust-profile.js";
+import type { ContractProjection } from "./types.js";
+export declare function projectContracts(claims: ReadonlyArray<ClaimMeta>, trust: TrustProfile, erasedSubjects?: ReadonlySet<PersonId>): ReadonlyArray<ContractProjection>;

package/dist/contract/project-contracts.js

@@ -0,0 +1,159 @@
+// Slice-04: Contract Identity + Projection.
+// Pure function — no I/O, no mutation, no external data invented.
+//
+// CONTRACT_PROJECTION_FROM_CLAIMS_001  — derives only from provided Claims
+// CONTRACT_PROJECTION_NO_MUTATION_001  — never mutates input
+// CONTRACT_PROJECTION_DETERMINISTIC_001 — order-independent output
+// CONTRACT_IDENTITY_LINK_CLAIM_001     — identity must be a live contract.identity.link Claim
+// CONTRACT_PROJECTION_IGNORES_UNLINKED_CLAIMS_001 — no contractId → excluded
+import { ERASURE_TOMBSTONE_PREDICATE } from "../erasure/tombstone.js";
+import { resolveClaims } from "../resolution/resolve-claims.js";
+const POLICY_ID = "trust-then-seq-v1";
+const POLICY_VERSION = "1";
+// All-missing fields constant — used for insufficient_identity projections.
+// CONTRACT_PROJECTION_INSUFFICIENT_IDENTITY_DIAGNOSTIC_001
+const _EMPTY_COMPETING = Object.freeze([]);
+const MISSING_FIELD = Object.freeze({
+    status: "missing",
+    competingClaimIds: _EMPTY_COMPETING,
+    reasonCode: "MISSING",
+});
+const MISSING_FIELDS = Object.freeze({
+    counterparty: MISSING_FIELD,
+    amount: MISSING_FIELD,
+    cadence: MISSING_FIELD,
+    nextDue: MISSING_FIELD,
+    cancellationTerms: MISSING_FIELD,
+    contractStatus: MISSING_FIELD,
+});
+export function projectContracts(claims, trust, 
+// ERASURE_QUERY_SUPPRESSION_DEFINED_001: when provided, claims for erased subjects are
+// excluded before projection. Defense-in-depth — callers should also pre-filter.
+erasedSubjects) {
+    // ERASURE_QUERY_SUPPRESSION_DEFINED_001: self-detect tombstone claims within input.
+    // Defense-in-depth — suppression works even when caller omits erasedSubjects.
+    const selfDetectedErased = new Set(claims.filter(c => c.predicate === ERASURE_TOMBSTONE_PREDICATE).map(c => c.subject));
+    const allErased = new Set([
+        ...selfDetectedErased,
+        ...(erasedSubjects ?? []),
+    ]);
+    // CONTRACT_PROJECTION_NO_MUTATION_001: copy before sorting
+    // CONTRACT_PROJECTION_DETERMINISTIC_001: canonical order by recordedSeq
+    const liveClaims = allErased.size > 0
+        ? claims.filter(c => !allErased.has(c.subject))
+        : claims;
+    const sorted = [...liveClaims].sort((a, b) => a.recordedSeq - b.recordedSeq);
+    const { retractedIds, supersededIds } = buildLiveSets(sorted);
+    // Identity links establish which ContractIds exist.
+    // A live identity link is: correct predicate, has contractId, not retracted,
+    // not superseded, and not itself a retraction marker.
+    const liveIdentityLinks = sorted.filter((c) => c.predicate === "contract.identity.link" &&
+        c.contractId !== undefined &&
+        !retractedIds.has(c.id) &&
+        !supersededIds.has(c.id) &&
+        c.retracts === undefined);
+    const anchoredIds = new Set(liveIdentityLinks.map((c) => c.contractId));
+    // Normal projections — contractIds backed by a live identity-link
+    const normalProjections = [...anchoredIds].sort().map((contractId) => buildProjection(contractId, sorted, trust));
+    // CONTRACT_PROJECTION_INSUFFICIENT_IDENTITY_DIAGNOSTIC_001:
+    // Field claims (non-identity-link) that reference a contractId with no valid anchor are
+    // never silently dropped — they surface as status: "insufficient_identity".
+    // CONTRACT_ID_POINTER_NOT_IDENTITY_REGRESSION_001: contractId is only a pointer here.
+    const orphanedIds = new Set();
+    for (const c of sorted) {
+        if (c.contractId !== undefined &&
+            c.predicate !== "contract.identity.link" &&
+            !anchoredIds.has(c.contractId)) {
+            orphanedIds.add(c.contractId);
+        }
+    }
+    const insufficientProjections = [...orphanedIds].sort().map((contractId) => {
+        const orphanClaims = sorted.filter((c) => c.contractId === contractId);
+        return {
+            contractId,
+            status: "insufficient_identity",
+            fields: MISSING_FIELDS,
+            conflicts: [],
+            derivedFrom: orphanClaims.map((c) => c.id),
+            policyId: POLICY_ID,
+            policyVersion: POLICY_VERSION,
+        };
+    });
+    return [...normalProjections, ...insufficientProjections];
+}
+// ─── private helpers ──────────────────────────────────────────────────────────
+function buildProjection(contractId, allSorted, trust) {
+    // All claims tagged to this contract (identity links + content claims).
+    // CONTRACT_PROJECTION_DERIVED_FROM_001: derivedFrom includes retracted/excluded claims too.
+    const contractClaims = allSorted.filter((c) => c.contractId === contractId);
+    const derivedFrom = contractClaims.map((c) => c.id);
+    // Project each field by delegating to resolveClaims()
+    const r = {
+        counterparty: projectField(contractClaims, trust, "contract.counterparty"),
+        amount: projectField(contractClaims, trust, "contract.amount"),
+        cadence: projectField(contractClaims, trust, "contract.cadence"),
+        nextDue: projectField(contractClaims, trust, "contract.next_due"),
+        cancellationTerms: projectField(contractClaims, trust, "contract.cancellation_terms"),
+        contractStatus: projectField(contractClaims, trust, "contract.exists"),
+    };
+    const fields = {
+        counterparty: r.counterparty.field,
+        amount: r.amount.field,
+        cadence: r.cadence.field,
+        nextDue: r.nextDue.field,
+        cancellationTerms: r.cancellationTerms.field,
+        contractStatus: r.contractStatus.field,
+    };
+    // CONTRACT_PROJECTION_CONFLICTS_VISIBLE_001
+    const conflicts = Object.values(r).flatMap((x) => (x.conflict !== undefined ? [x.conflict] : []));
+    const status = fields.contractStatus.status === "resolved" ? "active" : "uncertain";
+    return {
+        contractId,
+        status,
+        fields,
+        conflicts,
+        derivedFrom,
+        policyId: POLICY_ID,
+        policyVersion: POLICY_VERSION,
+    };
+}
+function projectField(contractClaims, trust, predicate) {
+    const resolution = resolveClaims(contractClaims, trust, predicate);
+    if (resolution.reasonCode === "NO_LIVE_CLAIMS") {
+        return {
+            field: { status: "missing", competingClaimIds: [], reasonCode: "MISSING" },
+        };
+    }
+    if (resolution.status === "resolved") {
+        const field = {
+            status: "resolved",
+            competingClaimIds: resolution.competingClaimIds,
+            reasonCode: resolution.reasonCode,
+            // exactOptionalPropertyTypes: only set when present
+            ...(resolution.winningClaimId !== undefined
+                ? { winningClaimId: resolution.winningClaimId }
+                : {}),
+        };
+        return { field };
+    }
+    // disputed — CONTRACT_PROJECTION_DISPUTED_FIELD_001
+    const field = {
+        status: "disputed",
+        competingClaimIds: resolution.competingClaimIds,
+        reasonCode: resolution.reasonCode,
+    };
+    const conflict = {
+        predicate,
+        competingClaimIds: resolution.competingClaimIds,
+        reasonCode: resolution.reasonCode,
+    };
+    return { field, conflict };
+}
+function buildLiveSets(claims) {
+    const retractedIds = new Set(claims.flatMap((c) => (c.retracts !== undefined ? [c.retracts] : [])));
+    const supersededIds = new Set(claims
+        .filter((c) => c.supersedes !== undefined && !retractedIds.has(c.id))
+        .map((c) => c.supersedes));
+    return { retractedIds, supersededIds };
+}
+//# sourceMappingURL=project-contracts.js.map

package/dist/contract/project-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-contracts.js","sourceRoot":"","sources":["../../src/contract/project-contracts.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,6DAA6D;AAC7D,mEAAmE;AACnE,8FAA8F;AAC9F,6EAA6E;AAK7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAShE,MAAM,SAAS,GAAQ,mBAAmB,CAAC;AAC3C,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,4EAA4E;AAC5E,2DAA2D;AAC3D,MAAM,gBAAgB,GAA2B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnE,MAAM,aAAa,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAa,SAAkB;IACrC,iBAAiB,EAAE,gBAAgB;IACnC,UAAU,EAAS,SAAkB;CACtC,CAAC,CAAC;AACH,MAAM,cAAc,GAAmB,MAAM,CAAC,MAAM,CAAC;IACnD,YAAY,EAAO,aAAa;IAChC,MAAM,EAAa,aAAa;IAChC,OAAO,EAAY,aAAa;IAChC,OAAO,EAAY,aAAa;IAChC,iBAAiB,EAAE,aAAa;IAChC,cAAc,EAAK,aAAa;CACjC,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAC9B,MAAgC,EAChC,KAAmB;AACnB,uFAAuF;AACvF,iFAAiF;AACjF,cAAsC;IAEtC,oFAAoF;IACpF,8EAA8E;IAC9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CACpF,CAAC;IACF,MAAM,SAAS,GAA0B,IAAI,GAAG,CAAC;QAC/C,GAAG,kBAAkB;QACrB,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,2DAA2D;IAC3D,wEAAwE;IACxE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,GAAG,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAE7E,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAE9D,oDAAoD;IACpD,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,wBAAwB;QACxC,CAAC,CAAC,UAAU,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,QAAQ,KAAK,SAAS,CAC3B,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAW,CAAC,CAAC,CAAC;IAEzE,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACnE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAC3C,CAAC;IAEF,4DAA4D;IAC5D,wFAAwF;IACxF,4EAA4E;IAC5E,sFAAsF;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IACE,CAAC,CAAC,UAAU,KAAK,SAAS;YAC1B,CAAC,CAAC,SAAS,KAAK,wBAAwB;YACxC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAC9B,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,uBAAuB,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAsB,EAAE;QAC7F,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACvE,OAAO;YACL,UAAU;YACV,MAAM,EAAS,uBAAuB;YACtC,MAAM,EAAS,cAAc;YAC7B,SAAS,EAAM,EAAE;YACjB,WAAW,EAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,QAAQ,EAAO,SAAS;YACxB,aAAa,EAAE,cAAc;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,iBAAiB,EAAE,GAAG,uBAAuB,CAAC,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF,SAAS,eAAe,CACtB,UAAsB,EACtB,SAAmC,EACnC,KAAmB;IAEnB,wEAAwE;IACxE,4FAA4F;IAC5F,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC5E,MAAM,WAAW,GAA2B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5E,sDAAsD;IACtD,MAAM,CAAC,GAAG;QACR,YAAY,EAAO,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,uBAAuB,CAAC;QAC/E,MAAM,EAAa,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,iBAAiB,CAAC;QACzE,OAAO,EAAY,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,kBAAkB,CAAC;QAC1E,OAAO,EAAY,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,mBAAmB,CAAC;QAC3E,iBAAiB,EAAE,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,6BAA6B,CAAC;QACrF,cAAc,EAAK,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,iBAAiB,CAAC;KAC1E,CAAC;IAEF,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAO,CAAC,CAAC,YAAY,CAAC,KAAK;QACvC,MAAM,EAAa,CAAC,CAAC,MAAM,CAAC,KAAK;QACjC,OAAO,EAAY,CAAC,CAAC,OAAO,CAAC,KAAK;QAClC,OAAO,EAAY,CAAC,CAAC,OAAO,CAAC,KAAK;QAClC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK;QAC5C,cAAc,EAAK,CAAC,CAAC,cAAc,CAAC,KAAK;KAC1C,CAAC;IAEF,4CAA4C;IAC5C,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,CAAC,CAAC,CAChB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjE,MAAM,MAAM,GACV,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;IAEvE,OAAO;QACL,UAAU;QACV,MAAM;QACN,MAAM;QACN,SAAS;QACT,WAAW;QACX,QAAQ,EAAO,SAAS;QACxB,aAAa,EAAE,cAAc;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,cAAwC,EACxC,KAAmB,EACnB,SAAyB;IAEzB,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,UAAU,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,KAAK,GAA4B;YACrC,MAAM,EAAa,UAAU;YAC7B,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;YAC/C,UAAU,EAAS,UAAU,CAAC,UAAU;YACxC,oDAAoD;YACpD,GAAG,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,oDAAoD;IACpD,MAAM,KAAK,GAA4B;QACrC,MAAM,EAAa,UAAU;QAC7B,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,UAAU,EAAS,UAAU,CAAC,UAAU;KACzC,CAAC;IACF,MAAM,QAAQ,GAAqB;QACjC,SAAS;QACT,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,UAAU,EAAS,UAAU,CAAC,UAAkC;KACjE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,MAAgC;IAIrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,MAAM;SACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAW,CAAC,CAC7B,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC"}

package/dist/contract/types.d.ts

@@ -0,0 +1,32 @@
+import type { ClaimId, ContractId } from "../types/ids.js";
+import type { ClaimPredicate } from "../types/claim.js";
+import type { ResolutionReasonCode } from "../resolution/types.js";
+export interface ContractFieldProjection {
+    readonly status: "resolved" | "disputed" | "missing";
+    readonly winningClaimId?: ClaimId;
+    readonly competingClaimIds: ReadonlyArray<ClaimId>;
+    readonly reasonCode: ResolutionReasonCode | "MISSING";
+}
+export interface ContractFields {
+    readonly counterparty: ContractFieldProjection;
+    readonly amount: ContractFieldProjection;
+    readonly cadence: ContractFieldProjection;
+    readonly nextDue: ContractFieldProjection;
+    readonly cancellationTerms: ContractFieldProjection;
+    readonly contractStatus: ContractFieldProjection;
+}
+export interface ContractConflict {
+    readonly predicate: ClaimPredicate;
+    readonly competingClaimIds: ReadonlyArray<ClaimId>;
+    readonly reasonCode: ResolutionReasonCode;
+}
+export type ContractProjectionStatus = "active" | "uncertain" | "insufficient_identity";
+export interface ContractProjection {
+    readonly contractId: ContractId;
+    readonly status: ContractProjectionStatus;
+    readonly fields: ContractFields;
+    readonly conflicts: ReadonlyArray<ContractConflict>;
+    readonly derivedFrom: ReadonlyArray<ClaimId>;
+    readonly policyId: string;
+    readonly policyVersion: string;
+}

package/dist/contract/types.js

@@ -0,0 +1,5 @@
+// Slice-04: Contract Identity + Projection types.
+// A ContractProjection is derived exclusively from Claims — no external data.
+// CONTRACT_PROJECTION_FROM_CLAIMS_001
+export {};
+//# sourceMappingURL=types.js.map

package/dist/contract/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/contract/types.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,8EAA8E;AAC9E,sCAAsC"}

package/dist/crypto/aes-gcm.d.ts

@@ -0,0 +1,11 @@
+import type { CryptoBoundary, EncryptedBlob, KeyProvider } from "./types.js";
+export declare class AesGcmCryptoBoundary implements CryptoBoundary {
+    private readonly _keys;
+    constructor(_keys: KeyProvider);
+    encryptJson(value: unknown): Promise<EncryptedBlob>;
+    decryptJson(blob: EncryptedBlob): Promise<unknown>;
+    encryptBytes(bytes: Uint8Array): Promise<EncryptedBlob>;
+    decryptBytes(blob: EncryptedBlob): Promise<Uint8Array>;
+    private _encrypt;
+    private _decrypt;
+}

package/dist/crypto/aes-gcm.js

@@ -0,0 +1,78 @@
+// AesGcmCryptoBoundary — AES-256-GCM encryption via WebCrypto.
+//
+// CRYPTO_BOUNDARY_ONLY_001: only this file uses crypto.subtle.
+// No node:crypto import. Uses globalThis.crypto.subtle (Node 18+, all browsers).
+// CRYPTO_WRONG_KEY_FAIL_CLOSED_001: unknown keyId → throws immediately.
+// CRYPTO_TAMPER_DETECTED_001: GCM auth-tag failure → throws.
+// CRYPTO_KEY_PROVIDER_DI_001: KeyProvider injected via constructor.
+const IV_BYTES = 12; // 96-bit nonce — NIST recommended for AES-GCM
+export class AesGcmCryptoBoundary {
+    _keys;
+    constructor(_keys) {
+        this._keys = _keys;
+    }
+    async encryptJson(value) {
+        return this._encrypt(new TextEncoder().encode(JSON.stringify(value)));
+    }
+    async decryptJson(blob) {
+        const bytes = await this._decrypt(blob);
+        return JSON.parse(new TextDecoder().decode(bytes));
+    }
+    async encryptBytes(bytes) {
+        return this._encrypt(bytes);
+    }
+    async decryptBytes(blob) {
+        return this._decrypt(blob);
+    }
+    async _encrypt(plaintext) {
+        const { key, keyId } = await this._keys.getCurrentKey();
+        // CRYPTO_WEBCRYPTO_TYPES_001: TS 5.7+ made Uint8Array generic; WebCrypto expects
+        // ArrayBuffer-backed views. new Uint8Array(N) returns Uint8Array<ArrayBuffer>.
+        const iv = new Uint8Array(IV_BYTES);
+        globalThis.crypto.getRandomValues(iv);
+        // WebCrypto AES-GCM: ciphertext output includes the 16-byte authTag appended.
+        const cipherBuf = await globalThis.crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, new Uint8Array(plaintext));
+        return {
+            algorithm: "AES-256-GCM",
+            keyId,
+            iv: toBase64Url(iv),
+            ciphertext: toBase64Url(new Uint8Array(cipherBuf)),
+        };
+    }
+    async _decrypt(blob) {
+        const desc = await this._keys.getKey(blob.keyId);
+        if (desc === undefined) {
+            // CRYPTO_WRONG_KEY_FAIL_CLOSED_001: no partial plaintext, just a clear error.
+            throw new Error(`CRYPTO_WRONG_KEY_FAIL_CLOSED_001: key "${blob.keyId}" is unknown — decryption refused`);
+        }
+        try {
+            const plainBuf = await globalThis.crypto.subtle.decrypt({ name: "AES-GCM", iv: new Uint8Array(fromBase64Url(blob.iv)) }, desc.key, new Uint8Array(fromBase64Url(blob.ciphertext)));
+            return new Uint8Array(plainBuf);
+        }
+        catch {
+            // GCM authentication tag verification failed → tamper or wrong key material.
+            // CRYPTO_TAMPER_DETECTED_001
+            throw new Error("CRYPTO_TAMPER_DETECTED_001: AES-GCM authentication failed — ciphertext is tampered or key material is wrong");
+        }
+    }
+}
+// ─── base64url helpers ────────────────────────────────────────────────────────
+function toBase64Url(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.length; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+function fromBase64Url(s) {
+    const padded = s.replace(/-/g, "+").replace(/_/g, "/");
+    const remainder = padded.length % 4;
+    const padStr = remainder === 0 ? "" : "=".repeat(4 - remainder);
+    const binary = atob(padded + padStr);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+//# sourceMappingURL=aes-gcm.js.map

package/dist/crypto/aes-gcm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes-gcm.js","sourceRoot":"","sources":["../../src/crypto/aes-gcm.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,+DAA+D;AAC/D,iFAAiF;AACjF,wEAAwE;AACxE,6DAA6D;AAC7D,oEAAoE;AAIpE,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,8CAA8C;AAEnE,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;IAEnD,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAmB;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAiB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAmB;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,SAAqB;QAC1C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,iFAAiF;QACjF,+EAA+E;QAC/E,MAAM,EAAE,GAA4B,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7D,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAEtC,8EAA8E;QAC9E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,GAAG,EACH,IAAI,UAAU,CAAC,SAAS,CAAC,CAC1B,CAAC;QAEF,OAAO;YACL,SAAS,EAAG,aAAa;YACzB,KAAK;YACL,EAAE,EAAU,WAAW,CAAC,EAAE,CAAC;YAC3B,UAAU,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAmB;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,8EAA8E;YAC9E,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,KAAK,mCAAmC,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACrD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAC/D,IAAI,CAAC,GAAG,EACR,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAC/C,CAAC;YACF,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;YAC7E,6BAA6B;YAC7B,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,iFAAiF;AAEjF,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}