@appport/sdk 1.0.1 → 1.1.0

package/dist/resolution-policy.d.ts

@@ -0,0 +1,81 @@
+import { type ProviderLifecycleRegistry, type ProviderLifecycleState, type ProviderResolutionRecord } from "./provider-lifecycle.js";
+export declare const NO_ELIGIBLE_PROVIDER: "appboundry.NO_ELIGIBLE_PROVIDER";
+export interface ResolutionPolicyProvider {
+    readonly provider: string;
+    readonly priority: number;
+    readonly environments?: readonly string[];
+    readonly attributes?: Readonly<Record<string, string>>;
+}
+export interface ResolutionPolicyDefinition {
+    readonly policyId: string;
+    readonly policyVersion: string | number;
+    readonly capability: string;
+    readonly contract: string;
+    readonly providers: readonly ResolutionPolicyProvider[];
+}
+export interface ResolutionPolicy extends ResolutionPolicyDefinition {
+    readonly policyVersion: string;
+}
+export declare class PolicyEvaluationError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+export declare function defineResolutionPolicy(definition: ResolutionPolicyDefinition): ResolutionPolicy;
+export interface PolicyCandidate {
+    readonly providerId: string;
+    readonly capability: string;
+    readonly contract: string;
+    readonly attributes?: Readonly<Record<string, string>>;
+}
+export interface PolicyAuthorizationDecision {
+    readonly outcome: "allow" | "deny";
+    readonly reason?: string;
+}
+export interface PolicyResolutionRequest {
+    readonly requestId: string;
+    readonly capability: string;
+    readonly contract: string;
+    readonly environment?: string;
+    readonly candidates: readonly PolicyCandidate[];
+    readonly lifecycle: ProviderLifecycleRegistry;
+    readonly authorize: (candidate: PolicyCandidate) => PolicyAuthorizationDecision | Promise<PolicyAuthorizationDecision>;
+    readonly now?: () => Date;
+}
+export type PolicyExclusionReason = "NOT_IN_POLICY" | "CAPABILITY_MISMATCH" | "CONTRACT_MISMATCH" | "REGISTERED" | "ELIGIBLE" | "DRAINING" | "REVOKED" | "RETIRED" | "UNREGISTERED" | "ENVIRONMENT_MISMATCH" | "ATTRIBUTE_MISMATCH" | "UNAUTHORIZED";
+export interface PolicyCandidateEvidence {
+    readonly provider: string;
+    readonly priority?: number;
+    readonly state: ProviderLifecycleState | "unregistered";
+}
+export interface PolicyExcludedProvider extends PolicyCandidateEvidence {
+    readonly reasons: readonly PolicyExclusionReason[];
+}
+export interface PolicyResolutionEvidence extends ProviderResolutionRecord {
+    readonly policyId: string;
+    readonly policyVersion: string;
+    readonly candidateProviders: readonly PolicyCandidateEvidence[];
+    readonly eligibleProviders: readonly PolicyCandidateEvidence[];
+    readonly excludedProviders: readonly PolicyExcludedProvider[];
+    readonly excludedReasons: Readonly<Record<string, readonly PolicyExclusionReason[]>>;
+    readonly selectedProvider?: string;
+    readonly authorization: "allowed" | "denied" | "not_observed";
+    readonly eligibility: "eligible" | "ineligible";
+    readonly resolution: "resolved" | typeof NO_ELIGIBLE_PROVIDER;
+    readonly materialization: string;
+    readonly execution: "success" | "failure" | "not_observed";
+    readonly timestamp: string;
+}
+export type PolicyDecision = {
+    readonly kind: "resolved";
+    readonly selected: PolicyCandidate;
+    readonly evidence: PolicyResolutionEvidence;
+} | {
+    readonly kind: "unresolved";
+    readonly code: typeof NO_ELIGIBLE_PROVIDER;
+    readonly evidence: PolicyResolutionEvidence;
+};
+/** Authorization and lifecycle are evaluated before policy priority is applied. */
+export declare function resolveWithPolicy(policy: ResolutionPolicy, request: PolicyResolutionRequest): Promise<PolicyDecision>;
+/** Produces a new immutable evidence record; the resolution snapshot is never rewritten. */
+export declare function recordPolicyExecution(evidence: PolicyResolutionEvidence, result: "success" | "failure", materialization?: string): PolicyResolutionEvidence;
+//# sourceMappingURL=resolution-policy.d.ts.map

package/dist/resolution-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-policy.d.ts","sourceRoot":"","sources":["../src/resolution-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,oBAAoB,EAAG,iCAA0C,CAAC;AAE/E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,gBAAiB,SAAQ,0BAA0B;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAInD;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,0BAA0B,GAAG,gBAAgB,CAkB/F;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,KAAK,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,qBAAqB,GACrB,mBAAmB,GACnB,YAAY,GACZ,UAAU,GACV,UAAU,GACV,SAAS,GACT,SAAS,GACT,cAAc,GACd,sBAAsB,GACtB,oBAAoB,GACpB,cAAc,CAAC;AAEnB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,cAAc,CAAC;CACzD;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAChE,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC9D,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,YAAY,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,oBAAoB,CAAC;IAC9D,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAA;CAAE,GAC9G;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE7H,mFAAmF;AACnF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkF3H;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,wBAAwB,EAClC,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,eAAe,SAAa,GAC3B,wBAAwB,CAE1B"}

package/dist/resolution-policy.js

@@ -0,0 +1,131 @@
+import { NOT_OBSERVED, RESOLVABLE_PROVIDER_STATE } from "./provider-lifecycle.js";
+export const NO_ELIGIBLE_PROVIDER = "appboundry.NO_ELIGIBLE_PROVIDER";
+export class PolicyEvaluationError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "PolicyEvaluationError";
+    }
+}
+export function defineResolutionPolicy(definition) {
+    if (!definition.policyId.trim())
+        throw new PolicyEvaluationError("policyId is required", "INVALID_POLICY_ID");
+    const policyVersion = String(definition.policyVersion).trim();
+    if (!policyVersion)
+        throw new PolicyEvaluationError("policyVersion is required", "INVALID_POLICY_VERSION");
+    if (!definition.capability.trim() || !definition.contract.trim()) {
+        throw new PolicyEvaluationError("capability and contract are required", "INVALID_POLICY_CONTRACT");
+    }
+    const seen = new Set();
+    for (const entry of definition.providers) {
+        if (!entry.provider.trim() || !Number.isFinite(entry.priority)) {
+            throw new PolicyEvaluationError("provider identity and finite priority are required", "INVALID_PROVIDER_PREFERENCE");
+        }
+        if (seen.has(entry.provider)) {
+            throw new PolicyEvaluationError(`provider ${entry.provider} appears more than once`, "DUPLICATE_PROVIDER");
+        }
+        seen.add(entry.provider);
+    }
+    return Object.freeze({ ...definition, policyVersion, providers: Object.freeze([...definition.providers]) });
+}
+/** Authorization and lifecycle are evaluated before policy priority is applied. */
+export async function resolveWithPolicy(policy, request) {
+    if (request.capability !== policy.capability || request.contract !== policy.contract) {
+        throw new PolicyEvaluationError("policy cannot alter the requested capability contract", "POLICY_REQUEST_MISMATCH");
+    }
+    const preferences = new Map(policy.providers.map((entry) => [entry.provider, entry]));
+    const candidates = [];
+    const eligible = [];
+    const excluded = [];
+    for (const candidate of request.candidates) {
+        const preference = preferences.get(candidate.providerId);
+        const state = request.lifecycle.state(candidate.providerId) ?? "unregistered";
+        const evidence = {
+            provider: candidate.providerId,
+            ...(preference ? { priority: preference.priority } : {}),
+            state
+        };
+        candidates.push(evidence);
+        const reasons = [];
+        if (!preference)
+            reasons.push("NOT_IN_POLICY");
+        if (candidate.capability !== request.capability)
+            reasons.push("CAPABILITY_MISMATCH");
+        if (candidate.contract !== request.contract)
+            reasons.push("CONTRACT_MISMATCH");
+        if (state !== RESOLVABLE_PROVIDER_STATE)
+            reasons.push(state === "unregistered" ? "UNREGISTERED" : state.toUpperCase());
+        if (preference?.environments && (!request.environment || !preference.environments.includes(request.environment)))
+            reasons.push("ENVIRONMENT_MISMATCH");
+        if (preference?.attributes && !matchesAttributes(preference.attributes, candidate.attributes))
+            reasons.push("ATTRIBUTE_MISMATCH");
+        if (reasons.length === 0) {
+            const authorization = await request.authorize(candidate);
+            if (authorization.outcome === "deny")
+                reasons.push("UNAUTHORIZED");
+        }
+        if (reasons.length)
+            excluded.push({ ...evidence, reasons });
+        else
+            eligible.push({ candidate, evidence });
+    }
+    eligible.sort((left, right) => (right.evidence.priority ?? 0) - (left.evidence.priority ?? 0) || left.candidate.providerId.localeCompare(right.candidate.providerId));
+    const selected = eligible[0];
+    const timestamp = (request.now ?? (() => new Date()))().toISOString();
+    const base = {
+        requestId: request.requestId,
+        capability: request.capability,
+        contract: request.contract,
+        policyId: policy.policyId,
+        policyVersion: policy.policyVersion,
+        candidateProviders: candidates,
+        eligibleProviders: eligible.map((entry) => entry.evidence),
+        excludedProviders: excluded,
+        excludedReasons: Object.fromEntries(excluded.map((entry) => [entry.provider, entry.reasons])),
+        materialization: NOT_OBSERVED,
+        execution: NOT_OBSERVED,
+        executionResult: "not_observed",
+        timestamp
+    };
+    if (!selected) {
+        return {
+            kind: "unresolved",
+            code: NO_ELIGIBLE_PROVIDER,
+            evidence: {
+                ...base,
+                resolvedProvider: NO_ELIGIBLE_PROVIDER,
+                providerStateAtResolution: "registered",
+                authorization: candidates.length ? "denied" : "not_observed",
+                eligibility: "ineligible",
+                resolution: NO_ELIGIBLE_PROVIDER,
+                evidenceId: evidenceId(request.requestId, policy, NO_ELIGIBLE_PROVIDER)
+            }
+        };
+    }
+    return {
+        kind: "resolved",
+        selected: selected.candidate,
+        evidence: {
+            ...base,
+            selectedProvider: selected.candidate.providerId,
+            resolvedProvider: selected.candidate.providerId,
+            providerStateAtResolution: RESOLVABLE_PROVIDER_STATE,
+            authorization: "allowed",
+            eligibility: "eligible",
+            resolution: "resolved",
+            evidenceId: evidenceId(request.requestId, policy, selected.candidate.providerId)
+        }
+    };
+}
+/** Produces a new immutable evidence record; the resolution snapshot is never rewritten. */
+export function recordPolicyExecution(evidence, result, materialization = "observed") {
+    return { ...evidence, materialization, execution: result, executionResult: result };
+}
+function matchesAttributes(expected, actual) {
+    return Object.entries(expected).every(([key, value]) => actual?.[key] === value);
+}
+function evidenceId(requestId, policy, provider) {
+    return `evd_policy_${requestId}_${policy.policyId}_${policy.policyVersion}_${provider}`.replace(/[^a-zA-Z0-9_.-]/g, "_");
+}
+//# sourceMappingURL=resolution-policy.js.map

package/dist/resolution-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-policy.js","sourceRoot":"","sources":["../src/resolution-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,yBAAyB,EAI1B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,iCAA0C,CAAC;AAqB/E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACR;IAAtC,YAAY,OAAe,EAAW,IAAY;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,SAAI,GAAJ,IAAI,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAsC;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;IAC9G,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;IAC3G,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,qBAAqB,CAAC,sCAAsC,EAAE,yBAAyB,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,qBAAqB,CAAC,oDAAoD,EAAE,6BAA6B,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,qBAAqB,CAAC,YAAY,KAAK,CAAC,QAAQ,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,CAAC;AAqED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAwB,EAAE,OAAgC;IAChG,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrF,MAAM,IAAI,qBAAqB,CAAC,uDAAuD,EAAE,yBAAyB,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,MAAM,QAAQ,GAA6E,EAAE,CAAC;IAC9F,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAE9C,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,KAAK,GAA4C,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC;QACvH,MAAM,QAAQ,GAA4B;YACxC,QAAQ,EAAE,SAAS,CAAC,UAAU;YAC9B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK;SACN,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrF,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,yBAAyB;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAA2B,CAAC,CAAC;QAChJ,IAAI,UAAU,EAAE,YAAY,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvJ,IAAI,UAAU,EAAE,UAAU,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,aAAa,CAAC,OAAO,KAAK,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;;YACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CACtI,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,kBAAkB,EAAE,UAAU;QAC9B,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1D,iBAAiB,EAAE,QAAQ;QAC3B,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7F,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,YAAY;QACvB,eAAe,EAAE,cAAuB;QACxC,SAAS;KACV,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE;gBACR,GAAG,IAAI;gBACP,gBAAgB,EAAE,oBAAoB;gBACtC,yBAAyB,EAAE,YAAY;gBACvC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;gBAC5D,WAAW,EAAE,YAAY;gBACzB,UAAU,EAAE,oBAAoB;gBAChC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC;aACxE;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,QAAQ,CAAC,SAAS;QAC5B,QAAQ,EAAE;YACR,GAAG,IAAI;YACP,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;YAC/C,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;YAC/C,yBAAyB,EAAE,yBAAyB;YACpD,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;SACjF;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CACnC,QAAkC,EAClC,MAA6B,EAC7B,eAAe,GAAG,UAAU;IAE5B,OAAO,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0C,EAAE,MAAyC;IAC9G,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAwB,EAAE,QAAgB;IAC/E,OAAO,cAAc,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC3H,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appport/sdk",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "AppPort developer SDK: implement a universal application boundary across runtimes and transports.",
   "keywords": [
     "appport",
@@ -26,40 +26,13 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "vendor"
   ],
   "scripts": {
     "build": "tsc -b",
     "clean": "tsc -b --clean"
   },
-  "dependencies": {
-    "@appport/core": "1.0.0",
-    "@appport/protocol": "1.0.0",
-    "@appport/schema": "1.0.0",
-    "@appport/authorization": "1.0.0",
-    "@appport/client": "1.0.0",
-    "@appport/server": "1.0.0",
-    "@appport/mobile": "1.0.0",
-    "@appport/transport-inprocess": "1.0.0",
-    "@appport/transport-http": "1.0.0",
-    "@appport/transport-websocket": "1.0.0",
-    "@appport/transport-electron": "1.0.0",
-    "@appport/transport-tauri": "1.0.0"
-  },
-  "bundleDependencies": [
-    "@appport/core",
-    "@appport/protocol",
-    "@appport/schema",
-    "@appport/authorization",
-    "@appport/client",
-    "@appport/server",
-    "@appport/mobile",
-    "@appport/transport-inprocess",
-    "@appport/transport-http",
-    "@appport/transport-websocket",
-    "@appport/transport-electron",
-    "@appport/transport-tauri"
-  ],
   "engines": {
     "node": ">=20"
   },

package/{node_modules → vendor}/@appport/authorization/dist/index.d.ts

@@ -6,7 +6,7 @@
  * decides whether the current principal holds them. Nothing here infers trust
  * from the transport: desktop IPC is not privileged, and HTTPS is not identity.
  */
-import { AppPortError, type CapabilityRef, type Principal, type Session } from "@appport/protocol";
+import { AppPortError, type CapabilityRef, type Principal, type Session } from "../../protocol/dist/index.d.ts";
 export type Permission = string;
 /**
  * Matches a permission against a granted permission, supporting `*` wildcards

package/{node_modules → vendor}/@appport/authorization/dist/index.js

@@ -6,7 +6,7 @@
  * decides whether the current principal holds them. Nothing here infers trust
  * from the transport: desktop IPC is not privileged, and HTTPS is not identity.
  */
-import { AppPortError, errors } from "@appport/protocol";
+import { AppPortError, errors } from "../../protocol/dist/index.js";
 /**
  * Matches a permission against a granted permission, supporting `*` wildcards
  * at segment granularity: `documents.*` grants `documents.write`, and the bare

package/{node_modules → vendor}/@appport/client/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { type AppEventEnvelope, type AppPortManifest, type AppRequest, type AppResponse, type RequestMetadata } from "@appport/protocol";
+import { type AppEventEnvelope, type AppPortManifest, type AppRequest, type AppResponse, type RequestMetadata } from "../../protocol/dist/index.d.ts";
 import type { AnyContract, AppContract, CallOptions, CapabilityProxy, TypedStream } from "./contract.js";
 import type { AppTransport, TransportEventFilter, Unsubscribe } from "./transport.js";
 export interface ClientOptions {

package/{node_modules → vendor}/@appport/client/dist/client.js

@@ -1,4 +1,4 @@
-import { AppPortError, createRequest, createStreamRequest, isValidName, newRequestId, newTraceId } from "@appport/protocol";
+import { AppPortError, createRequest, createStreamRequest, isValidName, newRequestId, newTraceId } from "../../protocol/dist/index.js";
 import { contractFromManifest } from "./contract.js";
 /**
  * The transport-independent application client.

package/{node_modules → vendor}/@appport/client/dist/contract.d.ts

@@ -1,4 +1,4 @@
-import type { AppPortManifest } from "@appport/protocol";
+import type { AppPortManifest } from "../../protocol/dist/index.d.ts";
 /**
  * The type-level description of an application, produced by
  * `@appport/generators` from a manifest and consumed by the typed client.

package/{node_modules → vendor}/@appport/client/dist/discovery.js

@@ -1,4 +1,4 @@
-import { AppPortError } from "@appport/protocol";
+import { AppPortError } from "../../protocol/dist/index.js";
 import { createClient } from "./client.js";
 function endpoint(origin, value) {
     return new URL(value, `${origin.replace(/\/$/, "")}/`).toString();

package/{node_modules → vendor}/@appport/client/dist/duplex.d.ts

@@ -1,4 +1,4 @@
-import { type ClientEnvelope } from "@appport/protocol";
+import { type ClientEnvelope } from "../../protocol/dist/index.d.ts";
 import { type AppTransport, type TransportFeatures } from "./transport.js";
 /**
  * The carrier half of a duplex transport.

package/{node_modules → vendor}/@appport/client/dist/duplex.js

@@ -1,4 +1,4 @@
-import { AppPortError, createStreamCancel, createSubscribe, createUnsubscribe, errors, newRequestId, newSubscriptionId, parseServerEnvelope } from "@appport/protocol";
+import { AppPortError, createStreamCancel, createSubscribe, createUnsubscribe, errors, newRequestId, newSubscriptionId, parseServerEnvelope } from "../../protocol/dist/index.js";
 import { ClientChannel } from "./channel.js";
 import { DEFAULT_FEATURES } from "./transport.js";
 /** Builds an {@link AppTransport} from a {@link DuplexChannel}. */

package/{node_modules → vendor}/@appport/client/dist/transport.d.ts

@@ -1,4 +1,4 @@
-import type { AppEventEnvelope, AppRequest, AppResponse, AppStreamRequest } from "@appport/protocol";
+import type { AppEventEnvelope, AppRequest, AppResponse, AppStreamRequest } from "../../protocol/dist/index.d.ts";
 export type Unsubscribe = () => void;
 export type EventHandler = (event: AppEventEnvelope) => void;
 export interface TransportEventFilter {