@lssm-tech/lib.personal-health-runtime
Provider-neutral PersonalOS health runtime for consent authorization, strict normalization, deterministic reconciliation, and lossless paginated sync state. Hosts supply credentials, providers, durable storage, and effects through ports.
The additive strict runtime surface provides operation-level consent decisions, provider sync/ledger/checkpoint ports, and structured quarantine. Checkpoints carry durable cursor references and processed page references for replay-safe recovery. No runtime path substitutes missing values, units, timestamps, time zones, provenance, cursors, or provider health.
Reconciliation treats an exact provider digest as replay, a changed canonical ID as an append-only correction, and an exact cross-provider metric/value/unit/ time interval as an explicit overlap. Both overlapping records and their source evidence remain durable; disagreements stay separate rather than being merged.
./wellbeing-goal derives the complete draft/active/paused/completed/stopped/ revoked lifecycle from strict commands. It revalidates exact subject and connection versions, provider-field evidence, consent-bound accepted records, time windows, revisions, idempotency, command and state digests, receipt binding, and verified guardrail pauses. Only the subject records an uncertain outcome; the runtime never invents a causal or clinical interpretation.
proposeSustainableRoutineV1 (workflow health-routine-v1) builds a workload-aware routine proposal from goal-support-consented measurements and self-reports, keeping assistant interpretations as a distinct, source-linked type. It caps actions by workload, requires subject acceptance, and turns symptom questions into proposed clinician follow-ups without diagnosis or treatment change. disclosePersonalHealthRoutineV1 returns detail only to the subject; company briefs, employee views, commercial telemetry, coding-worker prompts and support agents are withheld unless an exact scoped authority exists, and then receive routine status only.
