@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAGhE;;;;;;;;;;;;GAYG;AACH,oBAAY,sBAAsB;IAChC;;;OAGG;IACH,OAAO,YAAY;IAEnB;;;OAGG;IACH,KAAK,UAAU;IAEf;;;OAGG;IACH,OAAO,YAAY;IAEnB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;OAGG;IACH,MAAM,WAAW;IAEjB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;;OAIG;IACH,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IAEvC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO,GAAG,OAAO,EACvB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE7C;;;;;;;;;;;;OAYG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,CAAC,OAAO,GAAG,OAAO,IACjD,wBAAwB,CAAC,OAAO,CAAC,GACjC,wBAAwB,GACxB,0BAA0B,GAC1B,yBAAyB,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,wBAAwB,CAAC,OAAO,GAAG,OAAO;IACzD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB,CAAC,MAAM,GAAG,OAAO;IAChD;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAE9C;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,oFAAoF;IACpF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,oBAAoB,EAAE,2BAA2B,CAAC;IAErF;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,iCAAiC,EAAE,sBAAsB,CAAC;CAC5F;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,0BAA0B;IACzC,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,uBAAuB;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,0BAA0B;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,qCAAqC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,4BAA4B;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAErC,6BAA6B;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,gCAAgC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IAEpE,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,0DAA0D;QAC1D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,kDAAkD;QAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;IAEF,yCAAyC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,qCAAqC;QACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,uCAAuC;QACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,wCAAwC;QACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,yCAAyC;QACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,iCAAiC;QACjC,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;QAC3D,0CAA0C;QAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,OAAO,GAAG,OAAO,EACvB,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;QACT,MAAM,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACzC,WAAW,EAAE,0BAA0B,CAAC;KACzC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,CACb,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,2BAA2B,EACpC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAsC/E;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;aAExB,OAAO,EAAE,MAAM;aACxB,YAAY,EAAE,MAAM;aACpB,OAAO,CAAC,EAAE,OAAO;gBAFR,OAAO,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,cAAc,EAAE,MAAM;aACtB,YAAY,EAAE,MAAM;aACpB,gBAAgB,EAAE,SAAS,MAAM,EAAE;gBAFnC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,SAAS,MAAM,EAAE;CAKtD;AAED;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,SAAS,EAAE,sBAAsB;aACjC,OAAO,EAAE,sBAAsB;gBAD/B,SAAS,EAAE,sBAAsB,EACjC,OAAO,EAAE,sBAAsB;CAKlD"}

package/node_modules/@appport/core/dist/execution.js

@@ -0,0 +1,165 @@
+/**
+ * Ephemeral WASM Execution Runtime (PR26)
+ *
+ * The execution engine layer that materializes ExecutableArtifacts into
+ * ephemeral WASM instances, executes capabilities, and destroys instances
+ * after completion.
+ *
+ * CRITICAL INVARIANT:
+ * - Every execution produces exactly one instance
+ * - Every instance has an explicit lifecycle (CREATED → READY → RUNNING → COMPLETED/FAILED/CANCELLED → DESTROYED)
+ * - After any outcome (success, failure, cancellation, timeout), running instances = 0
+ * - Instances are never reused or pooled
+ * - Memory is isolated per instance
+ * - Guest code cannot access host resources (filesystem, network, etc.)
+ *
+ * The execution engine bridges:
+ *   AuthorizedCapabilityBinding
+ *       ↓
+ *   ExecutionEngine.execute()
+ *       ↓
+ *   ExecutionInstance (ephemeral WASM)
+ *       ↓
+ *   ExecutionResult + ExecutionObservationRecord
+ *       ↓
+ *   instance.destroy()
+ *       ↓
+ *   running instances = 0
+ */
+/**
+ * Explicit lifecycle state for an execution instance.
+ *
+ * Valid state transitions:
+ * CREATED → READY → RUNNING → COMPLETED
+ * CREATED → READY → RUNNING → FAILED
+ * CREATED → READY → RUNNING → CANCELLED
+ * CREATED → READY → RUNNING → TIMED_OUT
+ * (any state) → DESTROYED (idempotent)
+ *
+ * Invalid transitions must throw InvalidStateTransitionError.
+ * For example: DESTROYED → RUNNING must be rejected.
+ */
+export var ExecutionInstanceState;
+(function (ExecutionInstanceState) {
+    /**
+     * Instance created but not yet instantiated.
+     * WASM module is not yet loaded.
+     */
+    ExecutionInstanceState["CREATED"] = "CREATED";
+    /**
+     * WASM module instantiated and ready for execution.
+     * Instance has acquired resources (linear memory allocated).
+     */
+    ExecutionInstanceState["READY"] = "READY";
+    /**
+     * Capability execution in progress.
+     * Guest code is running or suspended on host callback.
+     */
+    ExecutionInstanceState["RUNNING"] = "RUNNING";
+    /**
+     * Execution completed successfully.
+     * Output has been validated and is available.
+     */
+    ExecutionInstanceState["COMPLETED"] = "COMPLETED";
+    /**
+     * Execution failed (implementation error or validation failure).
+     * Error information is available; output is not.
+     */
+    ExecutionInstanceState["FAILED"] = "FAILED";
+    /**
+     * Execution cancelled by host (AbortSignal fired).
+     * Cancellation reason is available.
+     */
+    ExecutionInstanceState["CANCELLED"] = "CANCELLED";
+    /**
+     * Execution timed out (deadline exceeded).
+     * No result is available.
+     */
+    ExecutionInstanceState["TIMED_OUT"] = "TIMED_OUT";
+    /**
+     * Instance destroyed and all resources released.
+     * Instance is no longer usable.
+     * This is the terminal state.
+     */
+    ExecutionInstanceState["DESTROYED"] = "DESTROYED";
+})(ExecutionInstanceState || (ExecutionInstanceState = {}));
+/**
+ * Validate that execution uses exactly the authority granted by the issued
+ * binding. Execution requests are caller-supplied data, so the runtime must not
+ * trust request capability or artifact identity fields when they disagree with
+ * the authoritative binding and registered provider state.
+ */
+export function assertExecutionRequestAuthority(request) {
+    if (request.capability.name !== request.binding.capability.name ||
+        request.capability.version !== request.binding.capability.version) {
+        throw new Error(`Execution capability "${request.capability.name}@${request.capability.version}" does not match authorized binding "${request.binding.capability.name}@${request.binding.capability.version}"`);
+    }
+    const artifactApplicationId = request.artifact.metadata.application?.id;
+    if (artifactApplicationId && artifactApplicationId !== request.binding.provider.id) {
+        throw new Error(`Artifact application "${artifactApplicationId}" does not match authorized provider "${request.binding.provider.id}"`);
+    }
+    const providerFingerprint = request.binding.provider.fingerprint;
+    if (providerFingerprint && request.artifact.metadata.contractFingerprint !== providerFingerprint) {
+        throw new Error(`Artifact contract "${request.artifact.metadata.contractFingerprint}" does not match authorized provider contract "${providerFingerprint}"`);
+    }
+    // Durable state is owned by an application, so an execution may only carry a
+    // state transaction belonging to a participant of the binding it executes
+    // under. Without this the provider becomes a confused deputy: any caller
+    // could pair a legitimate binding with a third application's transaction.
+    const stateApplicationId = request.stateTransaction?.applicationId;
+    if (stateApplicationId &&
+        stateApplicationId !== request.binding.provider.id &&
+        stateApplicationId !== request.binding.consumer?.id) {
+        throw new Error(`State transaction application "${stateApplicationId}" does not match authorized binding participants "${request.binding.consumer?.id}" and "${request.binding.provider.id}"`);
+    }
+}
+/**
+ * Artifact instantiation error: artifact failed validation or instantiation.
+ *
+ * This includes:
+ * - WASM structural errors
+ * - Contract fingerprint mismatch
+ * - Export/capability mismatch
+ * - Forbidden imports
+ */
+export class ArtifactInstantiationError extends Error {
+    message;
+    artifactHash;
+    details;
+    constructor(message, artifactHash, details) {
+        super(`Artifact instantiation failed: ${message}`);
+        this.message = message;
+        this.artifactHash = artifactHash;
+        this.details = details;
+        this.name = "ArtifactInstantiationError";
+    }
+}
+/**
+ * Missing export error: artifact doesn't export declared capability.
+ */
+export class MissingExportError extends Error {
+    capabilityName;
+    artifactHash;
+    availableExports;
+    constructor(capabilityName, artifactHash, availableExports) {
+        super(`Capability '${capabilityName}' not found in artifact exports`);
+        this.capabilityName = capabilityName;
+        this.artifactHash = artifactHash;
+        this.availableExports = availableExports;
+        this.name = "MissingExportError";
+    }
+}
+/**
+ * Invalid state transition: instance lifecycle state change is not allowed.
+ */
+export class InvalidStateTransitionError extends Error {
+    fromState;
+    toState;
+    constructor(fromState, toState) {
+        super(`Invalid state transition: ${fromState} → ${toState}`);
+        this.fromState = fromState;
+        this.toState = toState;
+        this.name = "InvalidStateTransitionError";
+    }
+}
+//# sourceMappingURL=execution.js.map

package/node_modules/@appport/core/dist/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;;OAGG;IACH,6CAAmB,CAAA;IAEnB;;;OAGG;IACH,yCAAe,CAAA;IAEf;;;OAGG;IACH,6CAAmB,CAAA;IAEnB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;OAGG;IACH,2CAAiB,CAAA;IAEjB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;;OAIG;IACH,iDAAuB,CAAA;AACzB,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAsTD;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAyB;IACvE,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;QAC3D,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,wCAAwC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,CAC/L,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IACxE,IAAI,qBAAqB,IAAI,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,yBAAyB,qBAAqB,yCAAyC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjE,IAAI,mBAAmB,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,kDAAkD,mBAAmB,GAAG,CAC5I,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC;IACnE,IACE,kBAAkB;QAClB,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QAClD,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kCAAkC,kBAAkB,qDAAqD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAC9K,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExB;IACT;IACA;IAHlB,YAC2B,OAAe,EACxB,YAAoB,EACpB,OAAiB;QAEjC,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QAJ1B,YAAO,GAAP,OAAO,CAAQ;QACxB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACA;IACA;IAHlB,YACkB,cAAsB,EACtB,YAAoB,EACpB,gBAAmC;QAEnD,KAAK,CAAC,eAAe,cAAc,iCAAiC,CAAC,CAAC;QAJtD,mBAAc,GAAd,cAAc,CAAQ;QACtB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,qBAAgB,GAAhB,gBAAgB,CAAmB;QAGnD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IAFlB,YACkB,SAAiC,EACjC,OAA+B;QAE/C,KAAK,CAAC,6BAA6B,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAH7C,cAAS,GAAT,SAAS,CAAwB;QACjC,YAAO,GAAP,OAAO,CAAwB;QAG/C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF"}

package/node_modules/@appport/core/dist/idempotency.d.ts

@@ -0,0 +1,36 @@
+import type { AppResponse } from "@appport/protocol";
+/**
+ * Idempotency support (specification §44).
+ *
+ * A capability that declares `idempotency: "supported"` may be retried with the
+ * same `idempotencyKey`; the stored response is replayed rather than the
+ * handler being executed twice.
+ */
+export interface IdempotencyRecord {
+    key: string;
+    capability: string;
+    version: number;
+    requestId: string;
+    response: AppResponse;
+    storedAt: number;
+    expiresAt: number;
+}
+export interface IdempotencyStore {
+    get(key: string): Promise<IdempotencyRecord | undefined>;
+    set(record: IdempotencyRecord): Promise<void>;
+}
+export declare const DEFAULT_IDEMPOTENCY_TTL_MS: number;
+/** Builds the storage key. Keys are scoped per session and capability version. */
+export declare function idempotencyStorageKey(options: {
+    key: string;
+    capability: string;
+    version: number;
+    sessionId?: string;
+}): string;
+export declare class MemoryIdempotencyStore implements IdempotencyStore {
+    #private;
+    get(key: string): Promise<IdempotencyRecord | undefined>;
+    set(record: IdempotencyRecord): Promise<void>;
+    get size(): number;
+}
+//# sourceMappingURL=idempotency.d.ts.map

package/node_modules/@appport/core/dist/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACzD,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAE9D,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAET;AAED,qBAAa,sBAAuB,YAAW,gBAAgB;;IAGvD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAUxD,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/node_modules/@appport/core/dist/idempotency.js

@@ -0,0 +1,36 @@
+export const DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1000;
+/** Builds the storage key. Keys are scoped per session and capability version. */
+export function idempotencyStorageKey(options) {
+    return `${options.sessionId ?? "anonymous"}|${options.capability}@${options.version}|${options.key}`;
+}
+export class MemoryIdempotencyStore {
+    #records = new Map();
+    async get(key) {
+        const record = this.#records.get(key);
+        if (!record)
+            return undefined;
+        if (record.expiresAt <= Date.now()) {
+            this.#records.delete(key);
+            return undefined;
+        }
+        return record;
+    }
+    async set(record) {
+        this.#records.set(record.key, record);
+        this.#prune();
+    }
+    /** Drops expired records so a long-lived process does not grow unbounded. */
+    #prune() {
+        if (this.#records.size % 128 !== 0)
+            return;
+        const now = Date.now();
+        for (const [key, existing] of this.#records) {
+            if (existing.expiresAt <= now)
+                this.#records.delete(key);
+        }
+    }
+    get size() {
+        return this.#records.size;
+    }
+}
+//# sourceMappingURL=idempotency.js.map

package/node_modules/@appport/core/dist/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9D,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,OAKrC;IACC,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACvG,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAyB;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC;YAAE,OAAO;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/node_modules/@appport/core/dist/implementation.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Capability implementation model: the separation between contract and business logic.
+ *
+ * The contract (CapabilityDefinition) defines WHAT a capability is and WHAT it must do.
+ * The implementation defines HOW it does it. AppPort binds them and enforces the boundary.
+ *
+ * ## Security Boundary
+ *
+ * AppPort GUARANTEES the following execution order and security properties:
+ *
+ * 1. Capability resolution (throws if unknown)
+ * 2. Input validation (BEFORE implementation executes)
+ * 3. Authorization enforcement (BEFORE implementation executes)
+ * 4. Execution context creation
+ * 5. Implementation resolution and execution
+ * 6. Output validation (AFTER implementation returns)
+ * 7. Declared effects and event emission
+ * 8. Response returned to caller
+ *
+ * This means:
+ * - Invalid requests are rejected before any developer code executes
+ * - Unauthorized requests are rejected before any developer code executes
+ * - The implementation can safely assume validated input and authorized access
+ * - Output is always validated before being returned to the caller
+ *
+ * The implementation cannot:
+ * - Bypass input validation
+ * - Bypass authorization checks
+ * - Bypass output validation
+ * - Know the capability's identity, version, required scopes, or schemas
+ *
+ * ## Supported for Both Regular and Stream Capabilities
+ *
+ * Implementation binding works for:
+ * - Regular (request/response) capabilities via defineCapability + handleRequest
+ * - Stream capabilities via defineStreamCapability + handleStreamRequest
+ *
+ * In both cases, if an implementation is bound, it is used; otherwise the handler is
+ * called as a fallback. This enables gradual adoption and backward compatibility.
+ */
+import type { CapabilityContext } from "./context.js";
+/**
+ * Execution context extended for implementations.
+ *
+ * A convenience alias that clarifies the context is available to implementations.
+ * Implements receive the standard CapabilityContext with no additional properties
+ * needed beyond what AppPort already provides.
+ */
+export type CapabilityExecutionContext = CapabilityContext;
+/**
+ * A capability implementation: the developer's business logic.
+ *
+ * Implementations are ordinary application code that know nothing about:
+ * - Capability identity or versioning (owned by contract)
+ * - Authorization requirements (owned by contract)
+ * - Input/output schemas (owned by contract)
+ * - Declared effects or events (owned by contract)
+ *
+ * The implementation receives validated input and a context, and returns output.
+ * AppPort validates output against the contract's schema before responding.
+ *
+ * Implementations can:
+ * - Call domain-specific services and databases
+ * - Implement arbitrary business logic
+ * - Emit declared events via context.emit()
+ * - Access caller identity, session, and authorization context
+ *
+ * Implementations cannot fail due to authorization or input validation because
+ * AppPort enforces these BEFORE the implementation is called.
+ */
+export interface CapabilityImplementation<TInput = unknown, TOutput = unknown> {
+    /**
+     * Execute the capability.
+     *
+     * GUARANTEE: This method is only called if all of the following are true:
+     * - The capability name and version were resolved successfully
+     * - The input passed validation against the capability's input schema
+     * - The caller was authorized for this capability
+     * - The execution context was established
+     *
+     * @param input - Validated input matching the capability's input schema
+     * @param context - Execution context (correlation, session, authorization, services, etc.)
+     * @returns The capability result, which AppPort will validate against the output schema
+     * @throws May throw any error; AppPort will convert it to an appropriate error response
+     */
+    execute(input: TInput, context: CapabilityExecutionContext): Promise<TOutput> | TOutput;
+}
+/**
+ * Handler type for implementations: a function that can be passed to `implementation()`.
+ */
+export type ImplementationHandler<TInput = unknown, TOutput = unknown> = (input: TInput, context: CapabilityExecutionContext) => Promise<TOutput> | TOutput;
+/**
+ * Create a capability implementation from a handler function.
+ *
+ * Provides a fluent way to author implementations:
+ *
+ * ```typescript
+ * export const createInvoiceImpl = implementation(async (input, context) => {
+ *   const id = await db.createInvoice(input);
+ *   await context.emit({ name: "invoice.created", payload: { id } });
+ *   return { id };
+ * });
+ * ```
+ *
+ * The implementation knows only its own logic. The contract (defineCapability)
+ * owns schema, authorization, events, and identity. AppPort binds and enforces
+ * the boundary.
+ */
+export declare function implementation<TInput = unknown, TOutput = unknown>(handler: ImplementationHandler<TInput, TOutput>): CapabilityImplementation<TInput, TOutput>;
+//# sourceMappingURL=implementation.d.ts.map

package/node_modules/@appport/core/dist/implementation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation.d.ts","sourceRoot":"","sources":["../src/implementation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,MAAM,0BAA0B,GAAG,iBAAiB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,wBAAwB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAC3E;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACzF;AAED;;GAEG;AACH,MAAM,MAAM,qBAAqB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACvE,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,0BAA0B,KAChC,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEhC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAChE,OAAO,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9C,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAM3C"}

package/node_modules/@appport/core/dist/implementation.js

@@ -0,0 +1,65 @@
+/**
+ * Capability implementation model: the separation between contract and business logic.
+ *
+ * The contract (CapabilityDefinition) defines WHAT a capability is and WHAT it must do.
+ * The implementation defines HOW it does it. AppPort binds them and enforces the boundary.
+ *
+ * ## Security Boundary
+ *
+ * AppPort GUARANTEES the following execution order and security properties:
+ *
+ * 1. Capability resolution (throws if unknown)
+ * 2. Input validation (BEFORE implementation executes)
+ * 3. Authorization enforcement (BEFORE implementation executes)
+ * 4. Execution context creation
+ * 5. Implementation resolution and execution
+ * 6. Output validation (AFTER implementation returns)
+ * 7. Declared effects and event emission
+ * 8. Response returned to caller
+ *
+ * This means:
+ * - Invalid requests are rejected before any developer code executes
+ * - Unauthorized requests are rejected before any developer code executes
+ * - The implementation can safely assume validated input and authorized access
+ * - Output is always validated before being returned to the caller
+ *
+ * The implementation cannot:
+ * - Bypass input validation
+ * - Bypass authorization checks
+ * - Bypass output validation
+ * - Know the capability's identity, version, required scopes, or schemas
+ *
+ * ## Supported for Both Regular and Stream Capabilities
+ *
+ * Implementation binding works for:
+ * - Regular (request/response) capabilities via defineCapability + handleRequest
+ * - Stream capabilities via defineStreamCapability + handleStreamRequest
+ *
+ * In both cases, if an implementation is bound, it is used; otherwise the handler is
+ * called as a fallback. This enables gradual adoption and backward compatibility.
+ */
+/**
+ * Create a capability implementation from a handler function.
+ *
+ * Provides a fluent way to author implementations:
+ *
+ * ```typescript
+ * export const createInvoiceImpl = implementation(async (input, context) => {
+ *   const id = await db.createInvoice(input);
+ *   await context.emit({ name: "invoice.created", payload: { id } });
+ *   return { id };
+ * });
+ * ```
+ *
+ * The implementation knows only its own logic. The contract (defineCapability)
+ * owns schema, authorization, events, and identity. AppPort binds and enforces
+ * the boundary.
+ */
+export function implementation(handler) {
+    return {
+        async execute(input, context) {
+            return await handler(input, context);
+        }
+    };
+}
+//# sourceMappingURL=implementation.js.map

package/node_modules/@appport/core/dist/implementation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation.js","sourceRoot":"","sources":["../src/implementation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AA4DH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA+C;IAE/C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAAmC;YAC9D,OAAO,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@appport/core/dist/index.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `@appport/core` — the capability runtime.
+ *
+ * Registry, dispatch pipeline, validation, sessions, authorization wiring,
+ * events, streams, operations and telemetry. Core knows nothing about HTTP,
+ * WebSocket, IPC or any storage engine (§66, §73).
+ */
+export * from "./capability.js";
+export * from "./context.js";
+export * from "./implementation.js";
+export * from "./registry.js";
+export * from "./events.js";
+export * from "./streams.js";
+export * from "./sessions.js";
+export * from "./idempotency.js";
+export * from "./concurrency.js";
+export * from "./telemetry.js";
+export * from "./sanitize.js";
+export * from "./operations.js";
+export * from "./builtins.js";
+export * from "./assembly.js";
+export * from "./manifest.js";
+export * from "./contract-artifact.js";
+export * from "./application.js";
+export * from "./state.js";
+export * from "./application-lifecycle.js";
+export * from "./appboundry-contract.js";
+export * from "./runtime-manifest.js";
+export * from "./contract-attestation.js";
+export * from "./source-verification.js";
+export * from "./application-source.js";
+export * from "./application-implementation.js";
+export * from "./state-context.js";
+export * from "./memory-application-data-store.js";
+export * from "./registration.js";
+export * from "./resolver.js";
+export * from "./binding.js";
+export * from "./authorization-grant.js";
+export * from "./invocation.js";
+export * from "./artifact.js";
+export * from "./execution.js";
+export * from "./execution-ledger.js";
+export * from "./wasm-engine.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@appport/core/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC"}

package/node_modules/@appport/core/dist/index.js

@@ -0,0 +1,44 @@
+/**
+ * `@appport/core` — the capability runtime.
+ *
+ * Registry, dispatch pipeline, validation, sessions, authorization wiring,
+ * events, streams, operations and telemetry. Core knows nothing about HTTP,
+ * WebSocket, IPC or any storage engine (§66, §73).
+ */
+export * from "./capability.js";
+export * from "./context.js";
+export * from "./implementation.js";
+export * from "./registry.js";
+export * from "./events.js";
+export * from "./streams.js";
+export * from "./sessions.js";
+export * from "./idempotency.js";
+export * from "./concurrency.js";
+export * from "./telemetry.js";
+export * from "./sanitize.js";
+export * from "./operations.js";
+export * from "./builtins.js";
+export * from "./assembly.js";
+export * from "./manifest.js";
+export * from "./contract-artifact.js";
+export * from "./application.js";
+export * from "./state.js";
+export * from "./application-lifecycle.js";
+export * from "./appboundry-contract.js";
+export * from "./runtime-manifest.js";
+export * from "./contract-attestation.js";
+export * from "./source-verification.js";
+export * from "./application-source.js";
+export * from "./application-implementation.js";
+export * from "./state-context.js";
+export * from "./memory-application-data-store.js";
+export * from "./registration.js";
+export * from "./resolver.js";
+export * from "./binding.js";
+export * from "./authorization-grant.js";
+export * from "./invocation.js";
+export * from "./artifact.js";
+export * from "./execution.js";
+export * from "./execution-ledger.js";
+export * from "./wasm-engine.js";
+//# sourceMappingURL=index.js.map

package/node_modules/@appport/core/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC"}