# @lssm-tech/integration.governed-data-postgres

Subject-bound PostgreSQL persistence for governed ecosystem projections.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.5`
- Package path: `packages/integrations/governed-data-postgres`
- Manifest path: `packages/integrations/governed-data-postgres/package.json`
- Manifest Git blob: `f1ced9e6d8530a4887587e00c89b9cdb17eb9e00`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.governed-data-postgres](https://lssm.co/docs/packages/integration.governed-data-postgres/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.governed-data-postgres.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "forms-and-data",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "integrations",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Forms, data views and data exchange](https://lssm.co/docs/areas/forms-and-data/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/governed-data-postgres/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/README.md",
  "blobSha": "24bc5ae5ed495623bcb8ed9057ffc2eb1f85db31",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# @lssm-tech/integration.governed-data-postgres

Durable PostgreSQL persistence for the LSSM governed projection gateway.

The adapter stores projection catalog metadata, exact field/purpose grants,
payload-free access decisions, revocation events, leased delivery attempts and
acknowledgements, and export/erasure job state. Product records and shared
projection payloads remain in their source systems and are read only through
the governed gateway.

Every subject-bearing table uses forced row-level security. Runtime stores set
`app.governed_subject_ref` inside a short transaction and repeat the subject
predicate in every query. The catalog is global metadata and cannot contain a
domain payload or secret material.

The package accepts the provider-neutral `DatabaseProvider`, so the host may
bind managed PostgreSQL, a vertical-managed database, or a customer-managed
database without changing domain authority.

Catalog entries are immutable by projection id. Exact idempotent replay is
accepted; a changed schema, offer, consent copy, or provenance record must use a
new projection id so an existing grant cannot silently change meaning.

`PostgresGovernedDeliveryWorkerStore` claims due work with expiring leases,
recovers abandoned leases, records only explicit consumer outcomes, schedules
bounded retries, and moves ambiguous effects to a dead letter. Its operator
projection omits pairwise subjects and payloads; only terminal failed items can
be manually returned to `pending`.

The rights-job queue stores indexed processor, next-attempt, lease-expiry, and
update metadata alongside the schema-validated record. Existing rows are
backfilled additively from their payload-free record JSON so scheduled scans do
not deserialize complete subject histories merely to find due work.


## Declared capabilities

### Subject-bound governed data state

Capability ID: `governed.ecosystem-data.postgres`

Store governed projection catalogs, grants, decisions, revocations, acknowledgements, and rights jobs in a subject-scoped PostgreSQL boundary.

Use cases:

- Persist metadata-only governed projection catalogs and grants
- Execute idempotent transactional rights and revocation transitions under forced RLS

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "avoidWhen": [
    "Projection payloads must be stored centrally; this package intentionally stores catalog and authority metadata only.",
    "The deployment cannot force RLS or set pairwise-subject scope transaction-locally."
  ],
  "requires": [
    "PostgreSQL",
    "governed projection contracts",
    "pairwise subject identity"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "governed data",
    "projection grants",
    "subject RLS",
    "rights jobs"
  ],
  "pythonEquivalents": [
    "SQLAlchemy governed metadata repository"
  ],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 75
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.governed-data-postgres",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.governed-data-postgres/store",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "integrations",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "entrypoints": [
    ".",
    "./catalog-store",
    "./migrations",
    "./store"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "governed.ecosystem-data.postgres",
    "from": "@lssm-tech/integration.governed-data-postgres",
    "symbols": []
  },
  {
    "capabilityId": "governed.ecosystem-data.postgres",
    "from": "@lssm-tech/integration.governed-data-postgres/store",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.governed-data-postgres` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/index.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/catalog-store` — subpath `./catalog-store`
  - `unconditional`: `./src/catalog-store.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/catalog-store.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/database` — subpath `./database`
  - `unconditional`: `./src/database.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/database.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/delivery-records` — subpath `./delivery-records`
  - `unconditional`: `./src/delivery-records.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/delivery-records.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/grant-records` — subpath `./grant-records`
  - `unconditional`: `./src/grant-records.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/grant-records.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/migrations` — subpath `./migrations`
  - `unconditional`: `./src/migrations.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/migrations.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/pglite-test-support` — subpath `./pglite-test-support`
  - `unconditional`: `./src/pglite-test-support.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/pglite-test-support.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/revocation-records` — subpath `./revocation-records`
  - `unconditional`: `./src/revocation-records.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/revocation-records.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/rights-records` — subpath `./rights-records`
  - `unconditional`: `./src/rights-records.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/rights-records.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/store` — subpath `./store`
  - `unconditional`: `./src/store.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/store.ts); verified source file.

- `@lssm-tech/integration.governed-data-postgres/worker-store` — subpath `./worker-store`
  - `unconditional`: `./src/worker-store.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/governed-data-postgres/src/worker-store.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./catalog-store": {
      "types": "./dist/catalog-store.d.ts",
      "browser": "./dist/browser/catalog-store.js",
      "bun": "./dist/catalog-store.js",
      "node": "./dist/node/catalog-store.js",
      "default": "./dist/catalog-store.js"
    },
    "./database": {
      "types": "./dist/database.d.ts",
      "browser": "./dist/browser/database.js",
      "bun": "./dist/database.js",
      "node": "./dist/node/database.js",
      "default": "./dist/database.js"
    },
    "./delivery-records": {
      "types": "./dist/delivery-records.d.ts",
      "browser": "./dist/browser/delivery-records.js",
      "bun": "./dist/delivery-records.js",
      "node": "./dist/node/delivery-records.js",
      "default": "./dist/delivery-records.js"
    },
    "./grant-records": {
      "types": "./dist/grant-records.d.ts",
      "browser": "./dist/browser/grant-records.js",
      "bun": "./dist/grant-records.js",
      "node": "./dist/node/grant-records.js",
      "default": "./dist/grant-records.js"
    },
    "./migrations": {
      "types": "./dist/migrations.d.ts",
      "browser": "./dist/browser/migrations.js",
      "bun": "./dist/migrations.js",
      "node": "./dist/node/migrations.js",
      "default": "./dist/migrations.js"
    },
    "./pglite-test-support": {
      "types": "./dist/pglite-test-support.d.ts",
      "browser": "./dist/browser/pglite-test-support.js",
      "bun": "./dist/pglite-test-support.js",
      "node": "./dist/node/pglite-test-support.js",
      "default": "./dist/pglite-test-support.js"
    },
    "./revocation-records": {
      "types": "./dist/revocation-records.d.ts",
      "browser": "./dist/browser/revocation-records.js",
      "bun": "./dist/revocation-records.js",
      "node": "./dist/node/revocation-records.js",
      "default": "./dist/revocation-records.js"
    },
    "./rights-records": {
      "types": "./dist/rights-records.d.ts",
      "browser": "./dist/browser/rights-records.js",
      "bun": "./dist/rights-records.js",
      "node": "./dist/node/rights-records.js",
      "default": "./dist/rights-records.js"
    },
    "./store": {
      "types": "./dist/store.d.ts",
      "browser": "./dist/browser/store.js",
      "bun": "./dist/store.js",
      "node": "./dist/node/store.js",
      "default": "./dist/store.js"
    },
    "./worker-store": {
      "types": "./dist/worker-store.d.ts",
      "browser": "./dist/browser/worker-store.js",
      "bun": "./dist/worker-store.js",
      "node": "./dist/node/worker-store.js",
      "default": "./dist/worker-store.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.data-exchange-core](https://lssm.co/docs/packages/lib.data-exchange-core/): `workspace:^`
- [@lssm-tech/lib.data-exchange-server](https://lssm.co/docs/packages/lib.data-exchange-server/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- `@electric-sql/pglite`: `catalog:data`
- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "lint:fix": "node ../../../scripts/biome.cjs check --write .",
  "prebuild": "contractspec-bun-build prebuild",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Governed data PostgreSQL integration](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.governed-data-postgres) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.governed-data-postgres",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.governed-data-postgres.txt",
  "route": "/llms/integration.governed-data-postgres",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.governed-data-postgres.txt",
  "blobSha": "24bc5ae5ed495623bcb8ed9057ffc2eb1f85db31",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```