@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/execution-barrier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-barrier.js","sourceRoot":"","sources":["../src/execution-barrier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,8DAA8D;AAC9D,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,WAAW,GAAI,UAAkB,CAAC,OAAO,EAAE,GAAG,CAAC;IACrD,MAAM,SAAS,GAAuB,WAAW,EAAE,4BAA4B,CAAC;IAChF,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,8BAA8B,KAAK,KAAK;QAAE,OAAO;IAEhF,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAE1D,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;IACjD,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,sBAAsB,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/node_modules/@appport/core/dist/execution-ledger.d.ts

@@ -0,0 +1,81 @@
+import type { CapabilityContext } from "./context.js";
+import { type ExecutionEngine, type ExecutionInstance, type ExecutionRequest } from "./execution.js";
+import { type AuthorizedCapabilityBinding } from "./binding.js";
+import type { ExecutableArtifact } from "./artifact.js";
+export type ExecutionId = string;
+export type ExecutionStatus = "running" | "succeeded" | "failed" | "cancelled" | "timed_out";
+export interface ExecutionErrorMetadata {
+    kind: "InvalidBinding" | "AuthorizationRevoked" | "InvalidContext" | "InvalidInput" | "ImplementationFailure" | "InvalidOutput" | "ExecutionFailure" | "Cancelled" | "TimedOut";
+    message: string;
+}
+export interface ExecutionResourceUsage {
+    cpuTimeMs?: number;
+    wallTimeMs?: number;
+    memoryBytes?: number;
+    fuelConsumed?: number;
+}
+export interface ExecutionRecord {
+    executionId: ExecutionId;
+    materializationId: string;
+    invocationId: string;
+    applicationId: string;
+    providerApplicationId: string;
+    capabilityName: string;
+    capabilityVersion: number;
+    contractFingerprint: string;
+    artifactHash: string;
+    /** Source connection the executed artifact was materialized from (F6). */
+    repositoryConnectionId?: string;
+    /** Implementation record that selected the artifact (F6). */
+    implementationId?: string;
+    consumerApplicationId?: string;
+    stateTransactionId?: string;
+    startedAt: string;
+    completedAt?: string;
+    status: ExecutionStatus;
+    error?: ExecutionErrorMetadata;
+    resourceUsage?: ExecutionResourceUsage;
+}
+export type ExecutionCompletion = {
+    status: "succeeded";
+    completedAt: string;
+    resourceUsage?: ExecutionResourceUsage;
+} | {
+    status: "failed";
+    completedAt: string;
+    error: ExecutionErrorMetadata;
+    resourceUsage?: ExecutionResourceUsage;
+} | {
+    status: "cancelled" | "timed_out";
+    completedAt: string;
+    error?: ExecutionErrorMetadata;
+    resourceUsage?: ExecutionResourceUsage;
+};
+export interface ExecutionLedger {
+    begin(record: ExecutionRecord): Promise<void>;
+    complete(executionId: ExecutionId, result: ExecutionCompletion): Promise<void>;
+    completeWithState?(executionId: ExecutionId, result: Extract<ExecutionCompletion, {
+        status: "succeeded";
+    }>, stateTransaction: import("./state-context.js").ApplicationStateTransaction): Promise<void>;
+    get(executionId: ExecutionId): Promise<ExecutionRecord | undefined>;
+    listByApplication(applicationId: string): Promise<readonly ExecutionRecord[]>;
+    listByInvocation(invocationId: string): Promise<readonly ExecutionRecord[]>;
+    listByCapability(applicationId: string, capabilityName: string): Promise<readonly ExecutionRecord[]>;
+}
+export declare function newExecutionId(): ExecutionId;
+export declare function newMaterializationId(): string;
+export declare function validateExecutionRecord(record: ExecutionRecord): void;
+export declare function assertExecutionLedgerData(value: unknown, path?: string): void;
+export declare function sortExecutionRecords(records: readonly ExecutionRecord[]): ExecutionRecord[];
+/** Adds durable lifecycle history to the canonical ExecutionEngine path. */ export declare class LedgeredExecutionEngine implements ExecutionEngine {
+    private readonly delegate;
+    private readonly ledger;
+    private readonly materializationId;
+    constructor(delegate: ExecutionEngine, ledger: ExecutionLedger, materializationId?: string);
+    acquireInstance(artifact: ExecutableArtifact, binding: AuthorizedCapabilityBinding, context: CapabilityContext): Promise<ExecutionInstance>;
+    execute<TOutput = unknown>(request: ExecutionRequest, context: CapabilityContext): Promise<{
+        result: import("./execution.js").ExecutionInstanceResult<TOutput>;
+        observation: import("./execution.js").ExecutionObservationRecord;
+    }>;
+}
+//# sourceMappingURL=execution-ledger.d.ts.map

package/node_modules/@appport/core/dist/execution-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-ledger.d.ts","sourceRoot":"","sources":["../src/execution-ledger.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAmC,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtI,OAAO,EAAiC,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAG/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGxD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAE7F,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,gBAAgB,GAAG,sBAAsB,GAAG,gBAAgB,GAAG,cAAc,GAAG,uBAAuB,GAAG,eAAe,GAAG,kBAAkB,GAAG,WAAW,GAAG,UAAU,CAAC;IAChL,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,aAAa,CAAC,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,sBAAsB,CAAA;CAAE,GACpF;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,sBAAsB,CAAC;IAAC,aAAa,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAChH;IAAE,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAAC,aAAa,CAAC,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAEvI,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,iBAAiB,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC,EAAE,gBAAgB,EAAE,OAAO,oBAAoB,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvM,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;IACpE,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC9E,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC5E,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;CACtG;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAOrE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAW,GAAG,IAAI,CAK/E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,eAAe,EAAE,CAE3F;AA+BD,4EAA4E,CAAA,qBAAa,uBAAwB,YAAW,eAAe;IAC7H,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAmB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAmB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAAvG,QAAQ,EAAE,eAAe,EAAmB,MAAM,EAAE,eAAe,EAAmB,iBAAiB,SAAyB;IAE7J,eAAe,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIrI,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB;;;;CAwFvF"}

package/node_modules/@appport/core/dist/execution-ledger.js

@@ -0,0 +1,173 @@
+import { randomUUID } from "node:crypto";
+import { assertExecutionRequestAuthority } from "./execution.js";
+import { assertIssuedAuthorizedBinding } from "./binding.js";
+import { assertBindingAuthoritative } from "./authority-attestation.js";
+import { assertArtifactMatchesSelection, assertImplementationSelectionEligible } from "./application-implementation.js";
+import { crashAt } from "./crash-injection.js";
+export function newExecutionId() {
+    return `exec_${randomUUID()}`;
+}
+export function newMaterializationId() {
+    return `mat_${randomUUID()}`;
+}
+export function validateExecutionRecord(record) {
+    for (const [field, value] of Object.entries({ executionId: record.executionId, materializationId: record.materializationId, invocationId: record.invocationId, applicationId: record.applicationId, providerApplicationId: record.providerApplicationId, capabilityName: record.capabilityName, contractFingerprint: record.contractFingerprint, artifactHash: record.artifactHash, startedAt: record.startedAt })) {
+        if (typeof value !== "string" || value.length === 0)
+            throw new Error(`${field} must be a non-empty string`);
+    }
+    if (record.status !== "running" || record.completedAt || record.error)
+        throw new Error("begin requires an uncompleted running record");
+    if (!Number.isInteger(record.capabilityVersion) || record.capabilityVersion < 1)
+        throw new Error("capabilityVersion must be a positive integer");
+    assertExecutionLedgerData(record);
+}
+export function assertExecutionLedgerData(value, path = "record") {
+    if (value === null || ["string", "number", "boolean"].includes(typeof value))
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => assertExecutionLedgerData(entry, `${path}[${index}]`));
+        return;
+    }
+    if (typeof value !== "object" || Object.getPrototypeOf(value) !== Object.prototype)
+        throw new Error(`${path} must contain data only`);
+    for (const [key, entry] of Object.entries(value))
+        assertExecutionLedgerData(entry, `${path}.${key}`);
+}
+export function sortExecutionRecords(records) {
+    return [...records].sort((a, b) => a.startedAt.localeCompare(b.startedAt) || a.executionId.localeCompare(b.executionId));
+}
+/**
+ * Report the authority failure that makes a durable effect unauthorized.
+ *
+ * Returns the failure message when the binding's authority is no longer
+ * authoritative (for example after a durable revocation), or undefined when the
+ * binding still holds the authority the execution depends on.
+ */
+async function revocationDenial(binding) {
+    try {
+        await assertBindingAuthoritative(binding);
+        return undefined;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
+/**
+ * Report the authority failure that makes the selected implementation
+ * ineligible, or undefined when the source and artifact are still executable.
+ */
+async function implementationDenial(implementation) {
+    try {
+        await assertImplementationSelectionEligible(implementation);
+        return undefined;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
+/** Adds durable lifecycle history to the canonical ExecutionEngine path. */ export class LedgeredExecutionEngine {
+    delegate;
+    ledger;
+    materializationId;
+    constructor(delegate, ledger, materializationId = newMaterializationId()) {
+        this.delegate = delegate;
+        this.ledger = ledger;
+        this.materializationId = materializationId;
+    }
+    acquireInstance(artifact, binding, context) {
+        return this.delegate.acquireInstance(artifact, binding, context);
+    }
+    async execute(request, context) {
+        // Reject forged structural bindings before creating even a running ledger
+        // record. A denial must leave no executable or historical side effect.
+        crashAt("before_binding_validation");
+        assertIssuedAuthorizedBinding(request.binding);
+        await assertBindingAuthoritative(request.binding);
+        assertExecutionRequestAuthority(request);
+        // Source eligibility is durable authority, never an in-memory assumption a
+        // serialized binding can carry across processes: it is revalidated here,
+        // before the artifact is materialized.
+        if (request.implementation) {
+            await assertImplementationSelectionEligible(request.implementation);
+            assertArtifactMatchesSelection(request.implementation, request.artifact);
+        }
+        crashAt("after_binding_validation");
+        const executionId = newExecutionId();
+        const startedAt = new Date().toISOString();
+        crashAt("before_ledger_begin");
+        await this.ledger.begin({
+            executionId, materializationId: this.materializationId, invocationId: context.requestId,
+            applicationId: request.binding.provider.id,
+            providerApplicationId: request.binding.provider.id,
+            capabilityName: request.capability.name,
+            capabilityVersion: request.capability.version,
+            contractFingerprint: request.artifact.metadata.contractFingerprint,
+            artifactHash: request.artifact.contentHash,
+            startedAt, status: "running",
+            ...(request.implementation ? { repositoryConnectionId: request.implementation.sourceConnectionId, implementationId: request.implementation.implementationId } : {}),
+            ...(request.binding.consumer?.id ? { consumerApplicationId: request.binding.consumer.id } : {}),
+            ...(request.stateTransaction ? { stateTransactionId: request.stateTransaction.transactionId } : {})
+        });
+        crashAt("after_ledger_begin");
+        try {
+            const executed = await this.delegate.execute(request, context);
+            const completedAt = new Date().toISOString();
+            const resourceUsage = { wallTimeMs: executed.observation.durationMs };
+            if (executed.result.kind === "success") {
+                // A durable success is authority-dependent, so authority is revalidated
+                // at the commit linearization point and not only at invocation. An
+                // execution that began while authorized but whose authority was revoked
+                // durably before commit must not produce a durable authorized effect.
+                const revoked = await revocationDenial(request.binding);
+                if (revoked) {
+                    await request.stateTransaction?.abort().catch(() => undefined);
+                    await this.ledger.complete(executionId, { status: "failed", completedAt, error: { kind: "AuthorizationRevoked", message: revoked }, resourceUsage });
+                    return { ...executed, result: { kind: "failure", error: { code: "AUTHORIZATION_REVOKED", message: revoked } } };
+                }
+                // Source eligibility is revalidated at the same durable commit boundary:
+                // a source disconnected mid-execution must not produce a durable effect
+                // attributed to it.
+                const ineligible = request.implementation ? await implementationDenial(request.implementation) : undefined;
+                if (ineligible) {
+                    await request.stateTransaction?.abort().catch(() => undefined);
+                    await this.ledger.complete(executionId, { status: "failed", completedAt, error: { kind: "InvalidBinding", message: ineligible }, resourceUsage });
+                    return { ...executed, result: { kind: "failure", error: { code: "IMPLEMENTATION_INELIGIBLE", message: ineligible } } };
+                }
+                try {
+                    const completion = { status: "succeeded", completedAt, resourceUsage };
+                    crashAt("before_success_commit");
+                    if (request.stateTransaction && this.ledger.completeWithState) {
+                        await this.ledger.completeWithState(executionId, completion, request.stateTransaction);
+                    }
+                    else {
+                        await request.stateTransaction?.commit();
+                        await this.ledger.complete(executionId, completion);
+                    }
+                    crashAt("after_success_commit");
+                }
+                catch {
+                    await request.stateTransaction?.abort().catch(() => undefined);
+                    await this.ledger.complete(executionId, { status: "failed", completedAt, error: { kind: "ExecutionFailure", message: "State commit failed" }, resourceUsage });
+                    return { ...executed, result: { kind: "failure", error: { code: "STATE_COMMIT_FAILED", message: "State commit failed" } } };
+                }
+            }
+            else {
+                await request.stateTransaction?.abort();
+                if (executed.result.kind === "failure")
+                    await this.ledger.complete(executionId, { status: "failed", completedAt, error: { kind: "ExecutionFailure", message: "Execution failed" }, resourceUsage });
+                if (executed.result.kind === "cancelled")
+                    await this.ledger.complete(executionId, { status: "cancelled", completedAt, error: { kind: "Cancelled", message: "Execution cancelled" }, resourceUsage });
+                if (executed.result.kind === "timed_out")
+                    await this.ledger.complete(executionId, { status: "timed_out", completedAt, error: { kind: "TimedOut", message: "Execution timed out" }, resourceUsage });
+            }
+            crashAt("before_success_return");
+            return executed;
+        }
+        catch {
+            await request.stateTransaction?.abort();
+            await this.ledger.complete(executionId, { status: "failed", completedAt: new Date().toISOString(), error: { kind: "ExecutionFailure", message: "Execution failed" } });
+            throw new Error("Execution failed");
+        }
+    }
+}
+//# sourceMappingURL=execution-ledger.js.map

package/node_modules/@appport/core/dist/execution-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-ledger.js","sourceRoot":"","sources":["../src/execution-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,+BAA+B,EAAuE,MAAM,gBAAgB,CAAC;AACtI,OAAO,EAAE,6BAA6B,EAAoC,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,qCAAqC,EAA+B,MAAM,iCAAiC,CAAC;AAErJ,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAuD/C,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,UAAU,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QACnZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjJ,yBAAyB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,IAAI,GAAG,QAAQ;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO;IACrF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC7H,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACtI,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;QAAE,yBAAyB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;AAClI,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAmC;IACtE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAoC;IAClE,IAAI,CAAC;QACH,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,cAAsC;IACxE,IAAI,CAAC;QACH,MAAM,qCAAqC,CAAC,cAAc,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E,CAAA,MAAM,OAAO,uBAAuB;IACjF;IAA4C;IAA0C;IAAnH,YAA6B,QAAyB,EAAmB,MAAuB,EAAmB,oBAAoB,oBAAoB,EAAE;QAAhI,aAAQ,GAAR,QAAQ,CAAiB;QAAmB,WAAM,GAAN,MAAM,CAAiB;QAAmB,sBAAiB,GAAjB,iBAAiB,CAAyB;IAAG,CAAC;IAEjK,eAAe,CAAC,QAA4B,EAAE,OAAoC,EAAE,OAA0B;QAC5G,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CAAoB,OAAyB,EAAE,OAA0B;QACpF,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACrC,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzC,2EAA2E;QAC3E,yEAAyE;QACzE,uCAAuC;QACvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,qCAAqC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACpE,8BAA8B,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACtB,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS;YACvF,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC1C,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAClD,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;YACvC,iBAAiB,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO;YAC7C,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;YAClE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;YAC1C,SAAS,EAAE,MAAM,EAAE,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,cAAc,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnK,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpG,CAAC,CAAC;QACH,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAU,OAAO,EAAE,OAAO,CAAC,CAAC;YACxE,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YACtE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvC,wEAAwE;gBACxE,mEAAmE;gBACnE,wEAAwE;gBACxE,sEAAsE;gBACtE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;oBACrJ,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;gBAC3H,CAAC;gBAED,yEAAyE;gBACzE,wEAAwE;gBACxE,oBAAoB;gBACpB,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3G,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;oBAClJ,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;gBAClI,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,WAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;oBAChF,OAAO,CAAC,uBAAuB,CAAC,CAAC;oBACjC,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;wBAC9D,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;oBACzF,CAAC;yBAAM,CAAC;wBACN,MAAM,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;wBACzC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oBACtD,CAAC;oBACD,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;oBAC/J,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;gBACvI,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;gBACpM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;gBACrM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;YACtM,CAAC;YACD,OAAO,CAAC,uBAAuB,CAAC,CAAC;YACjC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACvK,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF"}

package/node_modules/@appport/core/dist/execution.d.ts

@@ -0,0 +1,387 @@
+/**
+ * Ephemeral WASM Execution Runtime (PR26)
+ *
+ * The execution engine layer that materializes ExecutableArtifacts into
+ * ephemeral WASM instances, executes capabilities, and destroys instances
+ * after completion.
+ *
+ * CRITICAL INVARIANT:
+ * - Every execution produces exactly one instance
+ * - Every instance has an explicit lifecycle (CREATED → READY → RUNNING → COMPLETED/FAILED/CANCELLED → DESTROYED)
+ * - After any outcome (success, failure, cancellation, timeout), running instances = 0
+ * - Instances are never reused or pooled
+ * - Memory is isolated per instance
+ * - Guest code cannot access host resources (filesystem, network, etc.)
+ *
+ * The execution engine bridges:
+ *   AuthorizedCapabilityBinding
+ *       ↓
+ *   ExecutionEngine.execute()
+ *       ↓
+ *   ExecutionInstance (ephemeral WASM)
+ *       ↓
+ *   ExecutionResult + ExecutionObservationRecord
+ *       ↓
+ *   instance.destroy()
+ *       ↓
+ *   running instances = 0
+ */
+import type { ExecutableArtifact } from "./artifact.js";
+import type { CapabilityContext } from "./context.js";
+import type { AuthorizedCapabilityBinding } from "./binding.js";
+/**
+ * Explicit lifecycle state for an execution instance.
+ *
+ * Valid state transitions:
+ * CREATED → READY → RUNNING → COMPLETED
+ * CREATED → READY → RUNNING → FAILED
+ * CREATED → READY → RUNNING → CANCELLED
+ * CREATED → READY → RUNNING → TIMED_OUT
+ * (any state) → DESTROYED (idempotent)
+ *
+ * Invalid transitions must throw InvalidStateTransitionError.
+ * For example: DESTROYED → RUNNING must be rejected.
+ */
+export declare enum ExecutionInstanceState {
+    /**
+     * Instance created but not yet instantiated.
+     * WASM module is not yet loaded.
+     */
+    CREATED = "CREATED",
+    /**
+     * WASM module instantiated and ready for execution.
+     * Instance has acquired resources (linear memory allocated).
+     */
+    READY = "READY",
+    /**
+     * Capability execution in progress.
+     * Guest code is running or suspended on host callback.
+     */
+    RUNNING = "RUNNING",
+    /**
+     * Execution completed successfully.
+     * Output has been validated and is available.
+     */
+    COMPLETED = "COMPLETED",
+    /**
+     * Execution failed (implementation error or validation failure).
+     * Error information is available; output is not.
+     */
+    FAILED = "FAILED",
+    /**
+     * Execution cancelled by host (AbortSignal fired).
+     * Cancellation reason is available.
+     */
+    CANCELLED = "CANCELLED",
+    /**
+     * Execution timed out (deadline exceeded).
+     * No result is available.
+     */
+    TIMED_OUT = "TIMED_OUT",
+    /**
+     * Instance destroyed and all resources released.
+     * Instance is no longer usable.
+     * This is the terminal state.
+     */
+    DESTROYED = "DESTROYED"
+}
+/**
+ * Execution instance: a temporary materialization of an executable artifact.
+ *
+ * The instance is:
+ * - Ephemeral: created for one execution, destroyed after
+ * - Isolated: separate memory from other instances
+ * - Bounded: subject to resource limits
+ * - Safe: guest cannot access host resources
+ *
+ * NOT:
+ * - Persistent
+ * - Reusable
+ * - Pooled
+ * - Shared between invocations
+ */
+export interface ExecutionInstance {
+    /**
+     * Unique identifier for this instance.
+     * Used for observability and debugging.
+     */
+    readonly instanceId: string;
+    /**
+     * Current lifecycle state of this instance.
+     */
+    readonly state: ExecutionInstanceState;
+    /**
+     * The artifact this instance materializes.
+     */
+    readonly artifact: ExecutableArtifact;
+    /**
+     * Timestamp when the instance was created (ISO 8601).
+     */
+    readonly createdAt: string;
+    /**
+     * Execute a capability on this instance.
+     *
+     * The instance must be in READY state.
+     * After execution, the instance transitions to COMPLETED, FAILED, CANCELLED, or TIMED_OUT.
+     *
+     * @param capabilityName The fully qualified capability name (e.g., "invoice.create")
+     * @param input The capability input (already validated by caller)
+     * @param context Execution context with signal, deadline, logger
+     * @returns The execution result (output or error)
+     * @throws InvalidStateTransitionError if instance is not in READY state
+     */
+    execute<TOutput = unknown>(capabilityName: string, input: unknown, context: CapabilityContext): Promise<ExecutionInstanceResult<TOutput>>;
+    /**
+     * Destroy the instance and release all resources.
+     *
+     * This is idempotent: calling destroy() multiple times is safe.
+     * After destruction:
+     * - Guest memory is inaccessible
+     * - Execution cannot resume
+     * - All host resources are released
+     * - Instance state transitions to DESTROYED
+     *
+     * @throws InvalidStateTransitionError only if called on a non-destroyable state
+     * (though in practice, destroy should be callable from any state for cleanup)
+     */
+    destroy(): Promise<void>;
+}
+/**
+ * Result of executing a capability on an instance.
+ *
+ * CRITICAL: This result is produced INSIDE the execution engine
+ * and is not directly returned to the caller. The invocation layer
+ * wraps this in a CapabilityInvocationResult which adds binding/context
+ * information and normalizes errors.
+ */
+export type ExecutionInstanceResult<TOutput = unknown> = ExecutionInstanceSuccess<TOutput> | ExecutionInstanceFailure | ExecutionInstanceCancelled | ExecutionInstanceTimedOut;
+/**
+ * Successful execution: the capability executed and produced output.
+ */
+export interface ExecutionInstanceSuccess<TOutput = unknown> {
+    readonly kind: "success";
+    readonly output: TOutput;
+}
+/**
+ * Failed execution: the implementation threw or produced invalid output.
+ *
+ * The error message should be normalized and safe to return to caller
+ * (no internal stack traces or credentials).
+ */
+export interface ExecutionInstanceFailure {
+    readonly kind: "failure";
+    readonly error: {
+        readonly message: string;
+        readonly code?: string;
+    };
+}
+/**
+ * Cancelled execution: the host cancelled the execution via AbortSignal.
+ */
+export interface ExecutionInstanceCancelled {
+    readonly kind: "cancelled";
+    readonly reason: string;
+}
+/**
+ * Timed out execution: the deadline was exceeded during execution.
+ */
+export interface ExecutionInstanceTimedOut {
+    readonly kind: "timed_out";
+    readonly reason: string;
+}
+/**
+ * Execution request: parameters for executing a capability on an artifact.
+ *
+ * This captures the semantic identity of the execution without runtime handles.
+ */
+export interface ExecutionRequest<TInput = unknown> {
+    /**
+     * The executable artifact to instantiate and execute.
+     */
+    readonly artifact: ExecutableArtifact;
+    /**
+     * The authorized binding permitting this execution.
+     */
+    readonly binding: AuthorizedCapabilityBinding;
+    /**
+     * The capability being invoked (must be in artifact.exports).
+     */
+    readonly capability: {
+        readonly name: string;
+        readonly version: number;
+    };
+    /**
+     * The input to pass to the capability (already validated by caller).
+     */
+    readonly input: TInput;
+    /** Optional host-owned durable state transaction correlated with this execution. */
+    readonly stateTransaction?: import("./state-context.js").ApplicationStateTransaction;
+    /**
+     * Optional implementation selected for this execution (F6).
+     *
+     * Present when the artifact was materialized from a verified application
+     * source. The selection is revalidated against durable authority before the
+     * artifact is materialized, and its provenance reaches the execution ledger.
+     */
+    readonly implementation?: import("./application-implementation.js").SelectedImplementation;
+}
+/**
+ * Execution observation record: immutable record of execution for observability.
+ *
+ * This record is sufficient for:
+ * - Audit trails
+ * - Debugging
+ * - Future analytics/metering
+ * - Compliance logging
+ *
+ * It MUST NOT contain:
+ * - Secrets or credentials
+ * - Raw input/output (only hashes or summaries)
+ * - Guest memory dumps
+ * - Personal data
+ */
+export interface ExecutionObservationRecord {
+    /** Unique execution identifier. */
+    readonly invocationId: string;
+    /** Application providing the capability. */
+    readonly providerId: string;
+    /** Application consuming the capability. */
+    readonly consumerId?: string;
+    /** Capability name. */
+    readonly capabilityName: string;
+    /** Capability version. */
+    readonly capabilityVersion: number;
+    /** SHA256 hash of artifact bytes. */
+    readonly artifactHash: string;
+    /** Contract fingerprint. */
+    readonly contractFingerprint: string;
+    /** Execution instance ID. */
+    readonly instanceId: string;
+    /** Timestamp when execution started (ISO 8601). */
+    readonly startedAt: string;
+    /** Timestamp when execution completed (ISO 8601). */
+    readonly completedAt: string;
+    /** Duration in milliseconds. */
+    readonly durationMs: number;
+    /** Execution outcome. */
+    readonly outcome: "success" | "failure" | "cancelled" | "timed_out";
+    /** Resource usage metrics. */
+    readonly resourceUsage?: {
+        /** Peak memory used by instance linear memory (bytes). */
+        readonly peakMemoryBytes?: number;
+        /** Approximate instruction count or fuel used. */
+        readonly instructionCount?: number;
+    };
+    /** State transaction metadata (PR27). */
+    readonly stateTransaction?: {
+        /** Unique transaction identifier. */
+        readonly transactionId: string;
+        /** Number of state read operations. */
+        readonly readCount: number;
+        /** Number of state write operations. */
+        readonly writeCount: number;
+        /** Number of state delete operations. */
+        readonly deleteCount: number;
+        /** Transaction commit status. */
+        readonly commitStatus: "committed" | "aborted" | "pending";
+        /** If commit failed, the error reason. */
+        readonly commitError?: string;
+    };
+}
+/**
+ * Execution Engine: materializes artifacts into ephemeral WASM instances.
+ *
+ * The engine:
+ * - Validates artifacts before instantiation
+ * - Enforces resource limits
+ * - Handles cancellation and timeout
+ * - Produces execution observation records
+ * - Ensures instances are destroyed after execution
+ *
+ * The engine does NOT:
+ * - Persist or pool instances
+ * - Cache or reuse compiled modules (for now; design for future optimization)
+ * - Make authorization decisions (caller provides AuthorizedCapabilityBinding)
+ * - Validate input or output (caller handles validation)
+ */
+export interface ExecutionEngine {
+    /**
+     * Execute a capability through an execution request.
+     *
+     * Flow:
+     * 1. Acquire instance from artifact
+     * 2. Resolve capability export from artifact metadata
+     * 3. Execute capability on instance
+     * 4. Observe execution
+     * 5. Destroy instance
+     * 6. Return result + observation record
+     *
+     * @param request Execution request with artifact, binding, capability, input
+     * @param context Execution context with signal, deadline, logger
+     * @returns Execution result and observation record
+     */
+    execute<TOutput = unknown>(request: ExecutionRequest, context: CapabilityContext): Promise<{
+        result: ExecutionInstanceResult<TOutput>;
+        observation: ExecutionObservationRecord;
+    }>;
+    /**
+     * Acquire an execution instance from an artifact.
+     *
+     * Creates a new instance by:
+     * 1. Validating artifact (contract/content consistency)
+     * 2. Loading WASM bytes
+     * 3. Instantiating WASM module
+     * 4. Setting up host imports
+     * 5. Verifying all declared exports are present
+     *
+     * The instance is in READY state and can be executed.
+     *
+     * @param artifact The executable artifact
+     * @param binding The authorized binding (for identity context)
+     * @param context The execution context
+     * @returns A new ephemeral execution instance
+     * @throws ArtifactValidationError if artifact is invalid
+     * @throws MissingExportError if declared exports are missing
+     */
+    acquireInstance(artifact: ExecutableArtifact, binding: AuthorizedCapabilityBinding, context: CapabilityContext): Promise<ExecutionInstance>;
+}
+/**
+ * Validate that execution uses exactly the authority granted by the issued
+ * binding. Execution requests are caller-supplied data, so the runtime must not
+ * trust request capability or artifact identity fields when they disagree with
+ * the authoritative binding and registered provider state.
+ */
+export declare function assertExecutionRequestAuthority(request: ExecutionRequest): void;
+/**
+ * Artifact instantiation error: artifact failed validation or instantiation.
+ *
+ * This includes:
+ * - WASM structural errors
+ * - Contract fingerprint mismatch
+ * - Export/capability mismatch
+ * - Forbidden imports
+ */
+export declare class ArtifactInstantiationError extends Error {
+    readonly message: string;
+    readonly artifactHash: string;
+    readonly details?: unknown | undefined;
+    constructor(message: string, artifactHash: string, details?: unknown | undefined);
+}
+/**
+ * Missing export error: artifact doesn't export declared capability.
+ */
+export declare class MissingExportError extends Error {
+    readonly capabilityName: string;
+    readonly artifactHash: string;
+    readonly availableExports: readonly string[];
+    constructor(capabilityName: string, artifactHash: string, availableExports: readonly string[]);
+}
+/**
+ * Invalid state transition: instance lifecycle state change is not allowed.
+ */
+export declare class InvalidStateTransitionError extends Error {
+    readonly fromState: ExecutionInstanceState;
+    readonly toState: ExecutionInstanceState;
+    constructor(fromState: ExecutionInstanceState, toState: ExecutionInstanceState);
+}
+//# sourceMappingURL=execution.d.ts.map