Add identity merge portability ledger

Author: evilfps

README.md

@@ -1,2 +1,4 @@
 # deepevents.ai
 deepevents.ai main codebase
+
+- `identity-merge-portability-ledger/` adds identity merge conflict checks and profile export portability for user/project management workflows.

identity-merge-portability-ledger/README.md

@@ -0,0 +1,40 @@
+# Identity Merge Portability Ledger
+
+This module adds a focused user and project management slice for account merge and profile export workflows.
+
+It covers:
+
+- linked account conflict checks across ORCID, SAML, GitHub, Google, and email identities
+- merge decisions for duplicate researcher accounts
+- project owner, role, and object grant transfer actions after a merge
+- profile export packages with public/private profile handling
+- privacy redactions for risky third-party private exports
+- signed audit events and deterministic manifest digests
+
+The implementation is dependency-free and uses synthetic sample data only.
+
+## Run
+
+```bash
+npm run check
+npm test
+npm run demo
+```
+
+## Demo Assets
+
+- `docs/demo.svg`
+- `docs/demo.gif`
+- `docs/demo.webm`
+
+## API
+
+```js
+import {
+  evaluateIdentityPortability,
+  renderIdentityPortabilityReport
+} from "./src/identity-merge-portability-ledger.js";
+
+const result = evaluateIdentityPortability(input);
+console.log(renderIdentityPortabilityReport(result));
+```

identity-merge-portability-ledger/data/sample-identity-input.json

@@ -0,0 +1,252 @@
+{
+  "generatedAt": "2026-05-16T10:55:00.000Z",
+  "policy": {
+    "signingKey": "demo-signing-key",
+    "verifiedEvidenceMinimum": 1
+  },
+  "accounts": [
+    {
+      "id": "acct-ada-main",
+      "name": "Ada Rao",
+      "email": "ada.rao@northbridge.edu",
+      "orcid": "0000-0002-1825-0097",
+      "institution": "Northbridge University",
+      "samlSubject": "northbridge.edu:ada.rao",
+      "github": "adarao-lab",
+      "mfaEnabled": true,
+      "privacyMode": "public",
+      "linkedAccounts": [
+        {
+          "provider": "google",
+          "subject": "ada.rao@northbridge.edu",
+          "verified": true
+        }
+      ],
+      "profile": {
+        "field": "Computational Biology",
+        "bio": "Works on reproducible cell atlas pipelines.",
+        "keywords": ["single-cell", "reproducibility", "atlas"],
+        "affiliations": ["Northbridge Bioinformatics Lab"],
+        "grants": ["NB-2025-CELL-42"],
+        "publications": ["10.5555/cell-atlas-2025"],
+        "activity": ["project-created:proj-cell-atlas", "review-completed:rev-884"]
+      },
+      "reputation": {
+        "downloads": 1280,
+        "forks": 34,
+        "endorsements": 11,
+        "reproducibilityScore": 96
+      }
+    },
+    {
+      "id": "acct-ada-old",
+      "name": "Ada R.",
+      "email": "ada.old@northbridge.edu",
+      "institution": "Northbridge University",
+      "mfaEnabled": true,
+      "privacyMode": "private",
+      "linkedAccounts": [
+        {
+          "provider": "orcid",
+          "subject": "0000-0002-1825-0097",
+          "verified": true
+        },
+        {
+          "provider": "github",
+          "subject": "adarao-archive",
+          "verified": true
+        }
+      ],
+      "profile": {
+        "field": "Computational Biology",
+        "bio": "Legacy account imported from an old workspace.",
+        "keywords": ["atlas"],
+        "affiliations": ["Northbridge Bioinformatics Lab"],
+        "grants": ["NB-2024-MIGRATE-7"],
+        "publications": ["10.5555/legacy-atlas"],
+        "activity": ["dataset-uploaded:ds-443"]
+      },
+      "reputation": {
+        "downloads": 410,
+        "forks": 8,
+        "endorsements": 3,
+        "reproducibilityScore": 89
+      }
+    },
+    {
+      "id": "acct-mira",
+      "name": "Mira Chen",
+      "email": "mira.chen@westlake.edu",
+      "orcid": "0000-0003-1111-2222",
+      "institution": "Westlake Institute",
+      "samlSubject": "westlake.edu:mira.chen",
+      "github": "mirachen",
+      "mfaEnabled": false,
+      "privacyMode": "private",
+      "linkedAccounts": [
+        {
+          "provider": "github",
+          "subject": "shared-lab-service",
+          "verified": true
+        }
+      ],
+      "profile": {
+        "field": "Neuroscience",
+        "bio": "Reviews imaging datasets.",
+        "keywords": ["imaging", "reviews"],
+        "affiliations": ["Westlake Imaging Core"],
+        "grants": ["WL-IRB-9"],
+        "publications": ["10.5555/westlake-review"],
+        "activity": ["review-requested:proj-cell-atlas"]
+      },
+      "reputation": {
+        "downloads": 140,
+        "forks": 2,
+        "endorsements": 5,
+        "reproducibilityScore": 72
+      }
+    },
+    {
+      "id": "acct-service",
+      "name": "Shared Lab Service",
+      "email": "service@northbridge.edu",
+      "institution": "Northbridge University",
+      "mfaEnabled": true,
+      "privacyMode": "private",
+      "linkedAccounts": [
+        {
+          "provider": "github",
+          "subject": "shared-lab-service",
+          "verified": true
+        }
+      ],
+      "profile": {
+        "field": "Automation",
+        "bio": "Machine account for legacy imports.",
+        "keywords": ["automation"],
+        "affiliations": ["Northbridge Platform Team"],
+        "grants": [],
+        "publications": [],
+        "activity": []
+      },
+      "reputation": {
+        "downloads": 0,
+        "forks": 0,
+        "endorsements": 0,
+        "reproducibilityScore": 0
+      }
+    }
+  ],
+  "projects": [
+    {
+      "id": "proj-cell-atlas",
+      "title": "Cell Atlas Reproducibility Pack",
+      "visibility": "institutional-only",
+      "ownerId": "acct-ada-old",
+      "roles": {
+        "acct-ada-main": "admin",
+        "acct-mira": "reviewer"
+      },
+      "objectGrants": [
+        {
+          "objectId": "dataset-raw-443",
+          "type": "dataset",
+          "accountId": "acct-ada-old",
+          "permissions": ["read", "download"]
+        },
+        {
+          "objectId": "notebook-qc-91",
+          "type": "notebook",
+          "accountId": "acct-ada-main",
+          "permissions": ["read", "edit"]
+        }
+      ]
+    },
+    {
+      "id": "proj-imaging-review",
+      "title": "Imaging Review Board",
+      "visibility": "invitation-only",
+      "ownerId": "acct-mira",
+      "roles": {
+        "acct-ada-main": "viewer"
+      },
+      "objectGrants": [
+        {
+          "objectId": "review-note-17",
+          "type": "document",
+          "accountId": "acct-mira",
+          "permissions": ["read", "comment"]
+        }
+      ]
+    }
+  ],
+  "mergeRequests": [
+    {
+      "id": "merge-ada-001",
+      "primaryAccountId": "acct-ada-main",
+      "duplicateAccountIds": ["acct-ada-old"],
+      "requestedBy": "acct-ada-main",
+      "reason": "same_researcher_legacy_import",
+      "evidence": [
+        {
+          "provider": "orcid",
+          "subject": "0000-0002-1825-0097",
+          "verified": true,
+          "confidence": 0.99
+        },
+        {
+          "provider": "email",
+          "subject": "ada.rao@northbridge.edu",
+          "verified": true,
+          "confidence": 0.95
+        }
+      ]
+    },
+    {
+      "id": "merge-mira-service-002",
+      "primaryAccountId": "acct-mira",
+      "duplicateAccountIds": ["acct-service"],
+      "requestedBy": "acct-mira",
+      "reason": "shared_github_cleanup",
+      "evidence": [
+        {
+          "provider": "github",
+          "subject": "shared-lab-service",
+          "verified": true,
+          "confidence": 0.71
+        }
+      ]
+    },
+    {
+      "id": "merge-missing-003",
+      "primaryAccountId": "acct-ada-main",
+      "duplicateAccountIds": ["acct-ghost"],
+      "requestedBy": "acct-ada-main",
+      "reason": "manual_cleanup",
+      "evidence": []
+    }
+  ],
+  "profileExports": [
+    {
+      "id": "export-ada-full",
+      "accountId": "acct-ada-main",
+      "requestedBy": "acct-ada-main",
+      "includePrivate": true,
+      "format": "json"
+    },
+    {
+      "id": "export-mira-third-party",
+      "accountId": "acct-mira",
+      "requestedBy": "acct-ada-main",
+      "includePrivate": true,
+      "format": "json"
+    },
+    {
+      "id": "export-service-public",
+      "accountId": "acct-service",
+      "requestedBy": "acct-service",
+      "includePrivate": false,
+      "format": "json"
+    }
+  ]
+}

identity-merge-portability-ledger/docs/demo.gif

@@ -0,0 +1,30 @@
+# Requirement Map
+
+## Authentication & Identity
+
+- Account linking is modeled through verified ORCID, SAML, GitHub, Google, and email subjects.
+- Merge decisions detect verified identity conflicts before accounts are collapsed.
+- MFA state is enforced when a researcher requests private profile export data.
+
+## Researcher Profiles
+
+- Export packages include public profile fields, keywords, reputation metrics, linked identities, and project memberships.
+- Private fields such as email, grants, affiliations, publications, and activity are included only when policy allows it.
+- Redactions make public vs private profile behavior reviewable.
+
+## Project Spaces
+
+- Merge decisions inspect project ownership, roles, and object grants.
+- Duplicate-account ownership and object grants are converted into explicit transfer actions.
+- Export packages include project visibility, role, and object grant counts.
+
+## Permissions & Access Control
+
+- Third-party private export requests are held for review.
+- Missing accounts and identity-provider collisions block unsafe merges.
+- Project and object-level access changes are recorded as actions instead of hidden side effects.
+
+## Audit Log
+
+- Merge and export decisions emit signed audit events.
+- The manifest digest is deterministic so reviewers can compare reruns.

identity-merge-portability-ledger/docs/demo.svg

@@ -0,0 +1,17 @@
+{
+  "name": "identity-merge-portability-ledger",
+  "version": "1.0.0",
+  "description": "Identity merge and profile portability guard for research workspaces.",
+  "type": "module",
+  "scripts": {
+    "check": "node --check src/identity-merge-portability-ledger.js && node --check scripts/demo.js && node --check test/identity-merge-portability-ledger.test.js",
+    "test": "node --test test/*.test.js",
+    "demo": "node scripts/demo.js"
+  },
+  "keywords": [
+    "identity",
+    "profile-portability",
+    "workspace-governance"
+  ],
+  "license": "MIT"
+}