@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/registration.js

@@ -0,0 +1,253 @@
+/**
+ * Application Registry: FeltDB-backed application state management
+ *
+ * Handles registration, lookup, listing, and state persistence of
+ * tracked applications. Integrates with FeltDB via the adapter pattern.
+ *
+ * The registry is the authoritative source for:
+ * - Application identity and manifests
+ * - Fingerprints and verification state
+ * - Application lifecycle and revisions
+ * - Application discovery
+ */
+import { createApplicationState, markApplicationActive, retireApplication, updateApplicationState } from "./state.js";
+import { fingerprintManifest } from "./manifest.js";
+/**
+ * In-memory application state store.
+ *
+ * Useful for testing and development without a persistent backend.
+ */
+export class MemoryApplicationStateStore {
+    #states = new Map();
+    async get(id) {
+        return this.#states.get(id);
+    }
+    async put(state) {
+        this.#states.set(state.id, state);
+    }
+    async delete(id) {
+        this.#states.delete(id);
+    }
+    async list(options) {
+        let results = [...this.#states.values()];
+        if (options?.prefix) {
+            results = results.filter((s) => s.id.startsWith(options.prefix));
+        }
+        // Deterministic ordering by application ID
+        results.sort((a, b) => a.id.localeCompare(b.id));
+        if (options?.limit) {
+            results = results.slice(0, options.limit);
+        }
+        return results;
+    }
+}
+/**
+ * Application registry: manages registration, lookup, and tracking of
+ * applications via a persistent store.
+ *
+ * The registry enforces:
+ * - Only verified applications can be registered
+ * - Fingerprint verification for idempotency
+ * - No implementation persistence
+ * - Manifest as canonical contract
+ */
+export class ApplicationRegistry {
+    #store;
+    constructor(store) {
+        this.#store = store;
+    }
+    /**
+     * Register a verified application.
+     *
+     * @param options - Identity, manifest, fingerprint, and verification state
+     * @returns The registered application state
+     *
+     * Throws if application is not verified or if registration is invalid.
+     */
+    async register(options) {
+        // Only verified applications can be registered
+        if (!options.verification.ready) {
+            throw new Error(`Cannot register application "${options.identity.id}": application is not verified. ` +
+                `Fix verification errors and try again.`);
+        }
+        const id = options.identity.id;
+        const existing = await this.#store.get(id);
+        // Idempotency: if application already registered with same fingerprint, return existing
+        if (existing) {
+            if (existing.fingerprint === options.fingerprint) {
+                // Idempotent: same contract, return existing state
+                return existing;
+            }
+            // Different contract: update to new revision
+            const updated = updateApplicationState(existing, {
+                manifest: options.manifest,
+                fingerprint: options.fingerprint,
+                verification: options.verification,
+                status: options.status
+            });
+            await this.#store.put(updated);
+            return updated;
+        }
+        // New registration: create initial state
+        const state = createApplicationState(options, 1);
+        await this.#store.put(state);
+        return state;
+    }
+    /**
+     * Register an application, validating manifest and fingerprint match.
+     *
+     * This is the same as {@link register} but additionally validates that
+     * the provided fingerprint matches the manifest hash.
+     *
+     * @throws If fingerprint does not match manifest
+     */
+    async registerWithValidation(options) {
+        const expectedFingerprint = fingerprintManifest(options.manifest);
+        if (options.fingerprint !== expectedFingerprint) {
+            throw new Error(`Registration validation failed: fingerprint mismatch for "${options.identity.id}". ` +
+                `Expected: ${expectedFingerprint}, got: ${options.fingerprint}`);
+        }
+        return this.register(options);
+    }
+    /**
+     * Retrieve a registered application by ID.
+     *
+     * @returns The application state, or undefined if not registered
+     */
+    async get(id) {
+        return this.#store.get(id);
+    }
+    /**
+     * Check if an application is registered.
+     */
+    async has(id) {
+        const state = await this.#store.get(id);
+        return state !== undefined;
+    }
+    /**
+     * List all registered applications.
+     *
+     * @param options - Query options (prefix, limit)
+     * @returns Array of registered application states
+     */
+    async list(options) {
+        return this.#store.list(options);
+    }
+    /**
+     * Find applications by name.
+     *
+     * Returns all versions of an application with the given name (deterministically sorted by ID).
+     */
+    async findByName(name) {
+        const all = await this.#store.list();
+        const results = all.filter((s) => s.name === name);
+        // Deterministic ordering by application ID
+        results.sort((a, b) => a.id.localeCompare(b.id));
+        return results;
+    }
+    /**
+     * Find the latest version of an application by name.
+     *
+     * Returns undefined if no application with this name is registered.
+     */
+    async getLatestByName(name) {
+        const all = await this.findByName(name);
+        if (all.length === 0)
+            return undefined;
+        // Sort by semantic version (simple comparison - assumes valid semver)
+        all.sort((a, b) => {
+            const aParts = a.version.split(".").map((p) => parseInt(p, 10));
+            const bParts = b.version.split(".").map((p) => parseInt(p, 10));
+            for (let i = 0; i < Math.max(aParts.length, bParts.length); i++) {
+                const aVal = aParts[i] ?? 0;
+                const bVal = bParts[i] ?? 0;
+                if (aVal !== bVal)
+                    return bVal - aVal;
+            }
+            return 0;
+        });
+        return all[0];
+    }
+    /**
+     * Delete a registered application.
+     *
+     * This marks an application as no longer tracked. The state is
+     * permanently removed from storage.
+     */
+    async delete(id) {
+        await this.#store.delete(id);
+    }
+    /** Persist an authoritative activation transition. */
+    async activate(id) {
+        const state = await this.#store.get(id);
+        if (!state)
+            throw new Error(`Cannot activate unknown application "${id}"`);
+        if (state.status === "retired")
+            throw new Error(`Cannot activate retired application "${id}"`);
+        const active = markApplicationActive(state);
+        await this.#store.put(active);
+        return active;
+    }
+    /** Retire without deleting identity, contract, state, or history. */
+    async retire(id) {
+        const state = await this.#store.get(id);
+        if (!state)
+            throw new Error(`Cannot retire unknown application "${id}"`);
+        const retired = retireApplication(state);
+        await this.#store.put(retired);
+        return retired;
+    }
+    /**
+     * Find an application by its manifest fingerprint.
+     *
+     * @param fingerprint - SHA256 fingerprint of the manifest
+     * @returns Array of applications with matching fingerprint (deterministically sorted by ID)
+     *
+     * Note: Applications should have unique fingerprints in practice, but this method
+     * returns an array for consistency with other discovery methods.
+     */
+    async findByFingerprint(fingerprint) {
+        const all = await this.#store.list();
+        const results = all.filter((state) => state.fingerprint === fingerprint);
+        // Deterministic ordering by application ID
+        results.sort((a, b) => a.id.localeCompare(b.id));
+        return results;
+    }
+    /**
+     * Find applications that provide a given capability.
+     *
+     * @param name - Capability name (e.g., "invoices.read")
+     * @param version - Optional specific capability version. If omitted, matches any version of the capability.
+     * @returns Array of applications providing this capability (deterministically sorted by ID)
+     */
+    async findByCapability(name, version) {
+        const all = await this.#store.list();
+        const results = all.filter((state) => state.status !== "retired" && (() => {
+            return state.manifest.provides.some((cap) => {
+                return cap.name === name && (version === undefined || cap.version === version);
+            });
+        })());
+        // Deterministic ordering by application ID
+        results.sort((a, b) => a.id.localeCompare(b.id));
+        return results;
+    }
+    /**
+     * Find applications that require a given capability.
+     *
+     * @param name - Capability name (e.g., "invoices.read")
+     * @param version - Optional specific capability version. If omitted, matches any version of the requirement.
+     * @returns Array of applications requiring this capability (deterministically sorted by ID)
+     */
+    async findByRequirement(name, version) {
+        const all = await this.#store.list();
+        const results = all.filter((state) => {
+            return state.manifest.requires.some((req) => {
+                return req.name === name && (version === undefined || req.version === version);
+            });
+        });
+        // Deterministic ordering by application ID
+        results.sort((a, b) => a.id.localeCompare(b.id));
+        return results;
+    }
+}
+//# sourceMappingURL=registration.js.map

package/node_modules/@appport/core/dist/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../src/registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEtH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAuCpD;;;;GAIG;AACH,MAAM,OAAO,2BAA2B;IAC7B,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEvD,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAuB;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA6C;QACtD,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IACrB,MAAM,CAAwB;IAEvC,YAAY,KAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAmC;QAChD,+CAA+C;QAC/C,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,CAAC,QAAQ,CAAC,EAAE,kCAAkC;gBACnF,wCAAwC,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE3C,wFAAwF;QACxF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBACjD,mDAAmD;gBACnD,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,6CAA6C;YAC7C,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE;gBAC/C,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,yCAAyC;QACzC,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,sBAAsB,CAAC,OAAmC;QAC9D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,6DAA6D,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK;gBACnF,aAAa,mBAAmB,UAAU,OAAO,CAAC,WAAW,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,OAA6C;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACnD,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEvC,sEAAsE;QACtE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,IAAI,GAAG,IAAI,CAAC;YACxC,CAAC;YAED,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAC5F,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC;IAC3F,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACzE,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,OAAgB;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,EAAE;YACxE,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1C,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC,CAAC;QACN,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,OAAgB;QACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACnC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1C,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/node_modules/@appport/core/dist/registry.d.ts

@@ -0,0 +1,29 @@
+import { type AppPortManifest, type ApplicationDescriptor, type CapabilityManifestEntry, type EventManifestEntry, type TransportDescriptor } from "@appport/protocol";
+import type { AnyCapability, AnyEvent, CapabilityDefinition, EventDefinition } from "./capability.js";
+/**
+ * The capability registry: the authoritative set of capabilities and events an
+ * application exposes, and the source of its manifest (§30).
+ */
+export declare class CapabilityRegistry {
+    #private;
+    register<Input, Output>(input: CapabilityDefinition<Input, Output>): this;
+    registerEvent<Payload>(input: EventDefinition<Payload>): this;
+    has(name: string, version?: number): boolean;
+    /** Resolves a capability, or throws the correct protocol error (§15). */
+    resolve(name: string, version: number): AnyCapability;
+    getEvent(name: string, version?: number): AnyEvent | undefined;
+    capabilities(): AnyCapability[];
+    events(): AnyEvent[];
+    capabilityNames(): string[];
+    /** Renders the manifest entries for every registered capability. */
+    capabilityEntries(): CapabilityManifestEntry[];
+    eventEntries(): EventManifestEntry[];
+    /** Builds the full application manifest (§30). */
+    manifest(options: {
+        application: ApplicationDescriptor;
+        transports?: TransportDescriptor[];
+        extensions?: string[];
+        conformance?: AppPortManifest["conformance"];
+    }): AppPortManifest;
+}
+//# sourceMappingURL=registry.d.ts.map

package/node_modules/@appport/core/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAE5B,KAAK,kBAAkB,EAEvB,KAAK,mBAAmB,EAGzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEtG;;;GAGG;AACH,qBAAa,kBAAkB;;IAI7B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI;IAiBzE,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI;IAW7D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;IAM5C,yEAAyE;IACzE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa;IAUrD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAU9D,YAAY,IAAI,aAAa,EAAE;IAI/B,MAAM,IAAI,QAAQ,EAAE;IAIpB,eAAe,IAAI,MAAM,EAAE;IAI3B,oEAAoE;IACpE,iBAAiB,IAAI,uBAAuB,EAAE;IAoC9C,YAAY,IAAI,kBAAkB,EAAE;IA0BpC,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE;QAChB,WAAW,EAAE,qBAAqB,CAAC;QACnC,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;KAC9C,GAAG,eAAe;CAiBpB"}

package/node_modules/@appport/core/dist/registry.js

@@ -0,0 +1,148 @@
+import { errors, CONFORMANCE_LEVELS, PROTOCOL_ID } from "@appport/protocol";
+/**
+ * The capability registry: the authoritative set of capabilities and events an
+ * application exposes, and the source of its manifest (§30).
+ */
+export class CapabilityRegistry {
+    #capabilities = new Map();
+    #events = new Map();
+    register(input) {
+        const definition = input;
+        const versions = this.#capabilities.get(definition.name) ?? new Map();
+        if (versions.has(definition.version)) {
+            throw errors.conflict(`Capability ${definition.name}@${definition.version} is already registered`);
+        }
+        const existing = [...versions.values()][0];
+        if (existing && existing.kind !== definition.kind) {
+            throw errors.conflict(`Capability ${definition.name} cannot mix "${existing.kind}" and "${definition.kind}" versions`);
+        }
+        versions.set(definition.version, definition);
+        this.#capabilities.set(definition.name, versions);
+        return this;
+    }
+    registerEvent(input) {
+        const definition = input;
+        const versions = this.#events.get(definition.name) ?? new Map();
+        if (versions.has(definition.version)) {
+            throw errors.conflict(`Event ${definition.name}@${definition.version} is already registered`);
+        }
+        versions.set(definition.version, definition);
+        this.#events.set(definition.name, versions);
+        return this;
+    }
+    has(name, version) {
+        const versions = this.#capabilities.get(name);
+        if (!versions)
+            return false;
+        return version === undefined ? versions.size > 0 : versions.has(version);
+    }
+    /** Resolves a capability, or throws the correct protocol error (§15). */
+    resolve(name, version) {
+        const versions = this.#capabilities.get(name);
+        if (!versions || versions.size === 0)
+            throw errors.unknownCapability(name);
+        const definition = versions.get(version);
+        if (!definition) {
+            throw errors.unsupportedCapabilityVersion(name, version, [...versions.keys()].sort((a, b) => a - b));
+        }
+        return definition;
+    }
+    getEvent(name, version) {
+        const versions = this.#events.get(name);
+        if (!versions || versions.size === 0)
+            return undefined;
+        if (version === undefined) {
+            const latest = Math.max(...versions.keys());
+            return versions.get(latest);
+        }
+        return versions.get(version);
+    }
+    capabilities() {
+        return [...this.#capabilities.values()].flatMap((versions) => [...versions.values()]);
+    }
+    events() {
+        return [...this.#events.values()].flatMap((versions) => [...versions.values()]);
+    }
+    capabilityNames() {
+        return [...this.#capabilities.keys()].sort();
+    }
+    /** Renders the manifest entries for every registered capability. */
+    capabilityEntries() {
+        const entries = [];
+        for (const [name, versions] of [...this.#capabilities.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+            const definitions = [...versions.values()]
+                .sort((a, b) => a.version - b.version)
+                .map((definition) => ({
+                version: definition.version,
+                ...(definition.description ? { description: definition.description } : {}),
+                kind: definition.kind,
+                inputSchema: definition.input.toJSONSchema(),
+                outputSchema: definition.output.toJSONSchema(),
+                authorization: [...definition.authorization],
+                idempotency: definition.idempotency,
+                concurrency: definition.concurrency,
+                ...(definition.timeoutMs !== undefined ? { timeoutMs: definition.timeoutMs } : {}),
+                ...(definition.deprecated ? { deprecated: true } : {}),
+                ...(definition.emits.length ? { emits: [...definition.emits] } : {})
+            }));
+            const preferred = [...definitions].reverse().find((entry) => !entry.deprecated) ?? definitions[definitions.length - 1];
+            entries.push({
+                name,
+                versions: definitions.map((entry) => entry.version),
+                latestVersion: preferred.version,
+                ...(preferred.description ? { description: preferred.description } : {}),
+                kind: preferred.kind,
+                inputSchema: preferred.inputSchema,
+                outputSchema: preferred.outputSchema,
+                authorization: preferred.authorization,
+                ...(preferred.idempotency ? { idempotency: preferred.idempotency } : {}),
+                ...(preferred.concurrency ? { concurrency: preferred.concurrency } : {}),
+                definitions
+            });
+        }
+        return entries;
+    }
+    eventEntries() {
+        const entries = [];
+        for (const [name, versions] of [...this.#events.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+            const definitions = [...versions.values()]
+                .sort((a, b) => a.version - b.version)
+                .map((definition) => ({
+                version: definition.version,
+                ...(definition.description ? { description: definition.description } : {}),
+                payloadSchema: definition.payload.toJSONSchema(),
+                authorization: [...definition.authorization],
+                ...(definition.deprecated ? { deprecated: true } : {})
+            }));
+            const preferred = [...definitions].reverse().find((entry) => !entry.deprecated) ?? definitions[definitions.length - 1];
+            entries.push({
+                name,
+                versions: definitions.map((entry) => entry.version),
+                latestVersion: preferred.version,
+                ...(preferred.description ? { description: preferred.description } : {}),
+                payloadSchema: preferred.payloadSchema,
+                authorization: preferred.authorization,
+                definitions
+            });
+        }
+        return entries;
+    }
+    /** Builds the full application manifest (§30). */
+    manifest(options) {
+        const capabilities = this.capabilityEntries();
+        const events = this.eventEntries();
+        const hasStreams = capabilities.some((entry) => entry.kind === "stream");
+        const conformance = options.conformance ??
+            (hasStreams ? CONFORMANCE_LEVELS.streams : events.length > 0 ? CONFORMANCE_LEVELS.events : CONFORMANCE_LEVELS.core);
+        return {
+            protocol: PROTOCOL_ID,
+            application: options.application,
+            capabilities,
+            events,
+            transports: options.transports ?? [],
+            conformance,
+            ...(options.extensions?.length ? { extensions: options.extensions } : {})
+        };
+    }
+}
+//# sourceMappingURL=registry.js.map

package/node_modules/@appport/core/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EAQN,kBAAkB,EAClB,WAAW,EACZ,MAAM,mBAAmB,CAAC;AAG3B;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACpB,aAAa,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC9D,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE5D,QAAQ,CAAgB,KAA0C;QAChE,MAAM,UAAU,GAAkB,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QACtE,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,QAAQ,CACnB,cAAc,UAAU,CAAC,IAAI,gBAAgB,QAAQ,CAAC,IAAI,UAAU,UAAU,CAAC,IAAI,YAAY,CAChG,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAU,KAA+B;QACpD,MAAM,UAAU,GAAa,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAChE,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;QAChG,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,OAAgB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,IAAY,EAAE,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,OAAgB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,oEAAoE;IACpE,iBAAiB;QACf,MAAM,OAAO,GAA8B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,MAAM,WAAW,GAA6B,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;iBACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;iBACrC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACpB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE;gBAC5C,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;gBAC9C,aAAa,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;gBAC5C,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,CAAC,CAAC;YACN,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACxH,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnD,aAAa,EAAE,SAAS,CAAC,OAAO;gBAChC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,WAAW,GAAwB,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;iBACrC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACpB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE;gBAChD,aAAa,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;gBAC5C,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC,CAAC;YACN,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACxH,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnD,aAAa,EAAE,SAAS,CAAC,OAAO;gBAChC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kDAAkD;IAClD,QAAQ,CAAC,OAKR;QACC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACzE,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;YACnB,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtH,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY;YACZ,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACpC,WAAW;YACX,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@appport/core/dist/repository-connection.d.ts

@@ -0,0 +1,100 @@
+import { type ApplicationManifest } from "./manifest.js";
+export type RepositoryConnectionMethod = "github" | "git-ci" | "local";
+export type RepositoryConnectionStatus = "CONNECTED" | "MISMATCHED" | "DISCONNECTED";
+export interface RepositoryIdentity {
+    readonly provider: "github" | "git" | "local";
+    readonly repositoryId?: string;
+    readonly owner?: string;
+    readonly name?: string;
+    readonly remoteUrl: string;
+}
+export interface ImplementedCapability {
+    readonly name: string;
+    readonly version: number;
+}
+export interface CapabilityImplementationAttestation {
+    readonly implementationId: string;
+    readonly sourceConnectionId: string;
+    readonly capabilityName: string;
+    readonly capabilityVersion: number;
+}
+export interface RepositoryObservation {
+    readonly repository: RepositoryIdentity;
+    readonly ref: string;
+    readonly commitSha?: string;
+    readonly manifest: ApplicationManifest;
+    readonly implementedCapabilities?: readonly ImplementedCapability[];
+}
+export interface RepositoryVerification {
+    readonly verificationId: string;
+    readonly verifiedAt: string;
+    readonly observedFingerprint: string;
+    readonly authoritativeFingerprint: string;
+    readonly identityMatches: boolean;
+    readonly contractMatches: boolean;
+    readonly reasons: readonly string[];
+}
+export interface RepositoryConnectionEvent {
+    readonly eventId: string;
+    readonly sequence: number;
+    readonly type: "CONNECTED" | "VERIFICATION_FAILED" | "REVERIFIED" | "DISCONNECTED";
+    readonly occurredAt: string;
+    readonly status: RepositoryConnectionStatus;
+    readonly observedFingerprint: string;
+}
+export interface RepositoryConnectionRecord {
+    readonly connectionId: string;
+    readonly applicationId: string;
+    readonly method: RepositoryConnectionMethod;
+    readonly status: RepositoryConnectionStatus;
+    readonly sequence: number;
+    readonly repository: RepositoryIdentity;
+    readonly ref: string;
+    readonly commitSha?: string;
+    readonly implementations: readonly CapabilityImplementationAttestation[];
+    readonly contractFingerprint: string;
+    readonly observedFingerprint: string;
+    readonly lastVerifiedAt: string;
+    readonly verification: RepositoryVerification;
+    readonly history: readonly RepositoryConnectionEvent[];
+}
+export interface RepositoryConnectionStore {
+    get(applicationId: string, connectionId: string): Promise<RepositoryConnectionRecord | undefined>;
+    put(record: RepositoryConnectionRecord, expectedSequence?: number): Promise<void>;
+    list(applicationId?: string): Promise<RepositoryConnectionRecord[]>;
+}
+export interface AuthoritativeApplicationContract {
+    get(applicationId: string): Promise<{
+        fingerprint: string;
+        manifest: ApplicationManifest;
+    } | undefined>;
+}
+export declare class RepositoryConnectionConflictError extends Error {
+    constructor(id: string);
+}
+export declare class MemoryRepositoryConnectionStore implements RepositoryConnectionStore {
+    #private;
+    get(applicationId: string, connectionId: string): Promise<RepositoryConnectionRecord | undefined>;
+    put(record: RepositoryConnectionRecord, expected?: number): Promise<void>;
+    list(applicationId?: string): Promise<RepositoryConnectionRecord[]>;
+}
+/** Manufactures connection facts only after comparing repository evidence with authority. */
+export declare class RepositoryConnectionOperations {
+    private readonly store;
+    private readonly authority;
+    private readonly now;
+    constructor(store: RepositoryConnectionStore, authority: AuthoritativeApplicationContract, now?: () => string);
+    connect(applicationId: string, method: RepositoryConnectionMethod, observation: RepositoryObservation): Promise<RepositoryConnectionRecord>;
+    verify(applicationId: string, connectionId: string, observation: RepositoryObservation): Promise<RepositoryConnectionRecord>;
+    disconnect(applicationId: string, connectionId: string): Promise<RepositoryConnectionRecord>;
+    get: (applicationId: string, connectionId: string) => Promise<RepositoryConnectionRecord | undefined>;
+    list: (applicationId?: string) => Promise<RepositoryConnectionRecord[]>;
+    private check;
+    private verification;
+    private event;
+    private required;
+    private validateRepository;
+    private implementations;
+    private implementation;
+}
+//# sourceMappingURL=repository-connection.d.ts.map

package/node_modules/@appport/core/dist/repository-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-connection.d.ts","sourceRoot":"","sources":["../src/repository-connection.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE9E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,YAAY,GAAG,cAAc,CAAC;AACrF,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAAE;AACnM,MAAM,WAAW,qBAAqB;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAC3F,MAAM,WAAW,mCAAmC;IAAG,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CAAE;AACrM,MAAM,WAAW,qBAAqB;IAAG,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAAE;AACnP,MAAM,WAAW,sBAAsB;IAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAAE;AACrS,MAAM,WAAW,yBAAyB;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,qBAAqB,GAAG,YAAY,GAAG,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CAAE;AACvS,MAAM,WAAW,0BAA0B;IAAG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,mCAAmC,EAAE,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAAE;AAC7lB,MAAM,WAAW,yBAAyB;IAAG,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;CAAE;AACzS,MAAM,WAAW,gCAAgC;IAAG,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,mBAAmB,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAAE;AAC9J,qBAAa,iCAAkC,SAAQ,KAAK;gBAAe,EAAE,EAAE,MAAM;CAA+H;AAEpN,qBAAa,+BAAgC,YAAW,yBAAyB;;IAEzE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAC/C,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,QAAQ,CAAC,EAAE,MAAM;IACzD,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM;CAClC;AAED,6FAA6F;AAC7F,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAA6B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAoC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAApH,KAAK,EAAE,yBAAyB,EAAmB,SAAS,EAAE,gCAAgC,EAAmB,GAAG,eAAiC;IAC5K,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,WAAW,EAAE,qBAAqB;IAMrG,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB;IAOtF,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAC5D,GAAG,GAAI,eAAe,MAAM,EAAE,cAAc,MAAM,qDAAiD;IACnG,IAAI,GAAI,gBAAgB,MAAM,2CAAoC;YACpD,KAAK;IACnB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,KAAK;YACC,QAAQ;IACtB,OAAO,CAAC,kBAAkB;IAC1B,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,cAAc;CACvB"}

package/node_modules/@appport/core/dist/repository-connection.js

@@ -0,0 +1,57 @@
+import { randomUUID } from "node:crypto";
+import { fingerprintManifest } from "./manifest.js";
+export class RepositoryConnectionConflictError extends Error {
+    constructor(id) { super(`Concurrent repository connection update rejected for "${id}"`); this.name = "RepositoryConnectionConflictError"; }
+}
+export class MemoryRepositoryConnectionStore {
+    #records = new Map();
+    async get(applicationId, connectionId) { const value = this.#records.get(`${applicationId}:${connectionId}`); return value && structuredClone(value); }
+    async put(record, expected) { const key = `${record.applicationId}:${record.connectionId}`, current = this.#records.get(key); if (current?.sequence !== expected)
+        throw new RepositoryConnectionConflictError(record.connectionId); this.#records.set(key, structuredClone(record)); }
+    async list(applicationId) { return [...this.#records.values()].filter(item => !applicationId || item.applicationId === applicationId).map(item => structuredClone(item)); }
+}
+/** Manufactures connection facts only after comparing repository evidence with authority. */
+export class RepositoryConnectionOperations {
+    store;
+    authority;
+    now;
+    constructor(store, authority, now = () => new Date().toISOString()) {
+        this.store = store;
+        this.authority = authority;
+        this.now = now;
+    }
+    async connect(applicationId, method, observation) {
+        this.validateRepository(method, observation.repository);
+        const implementedCapabilities = this.implementations(observation), checked = await this.check(applicationId, observation.manifest, implementedCapabilities), at = this.now(), connectionId = `conn_${randomUUID()}`, status = checked.reasons.length ? "MISMATCHED" : "CONNECTED";
+        const implementations = status === "CONNECTED" ? implementedCapabilities.map(item => this.implementation(connectionId, item)) : [], verification = this.verification(checked, at), record = { connectionId, applicationId, method, status, sequence: 1, repository: structuredClone(observation.repository), ref: observation.ref, ...(observation.commitSha ? { commitSha: observation.commitSha } : {}), implementations, contractFingerprint: checked.authoritativeFingerprint, observedFingerprint: checked.observedFingerprint, lastVerifiedAt: at, verification, history: [this.event(1, status === "CONNECTED" ? "CONNECTED" : "VERIFICATION_FAILED", status, checked.observedFingerprint, at)] };
+        await this.store.put(record);
+        return record;
+    }
+    async verify(applicationId, connectionId, observation) {
+        const current = await this.required(applicationId, connectionId);
+        if (current.status === "DISCONNECTED")
+            throw new Error("A disconnected repository must be reconnected with a new connection");
+        if (JSON.stringify(current.repository) !== JSON.stringify(observation.repository))
+            throw new Error("Verification cannot change repository identity");
+        const implementedCapabilities = this.implementations(observation), checked = await this.check(applicationId, observation.manifest, implementedCapabilities), at = this.now(), status = checked.reasons.length ? "MISMATCHED" : "CONNECTED", sequence = current.sequence + 1;
+        const implementations = status === "CONNECTED" ? implementedCapabilities.map(item => current.implementations.find(existing => existing.capabilityName === item.name && existing.capabilityVersion === item.version) ?? this.implementation(connectionId, item)) : [], next = { ...current, status, sequence, ref: observation.ref, ...(observation.commitSha ? { commitSha: observation.commitSha } : {}), implementations, contractFingerprint: checked.authoritativeFingerprint, observedFingerprint: checked.observedFingerprint, lastVerifiedAt: at, verification: this.verification(checked, at), history: [...current.history, this.event(sequence, status === "CONNECTED" ? "REVERIFIED" : "VERIFICATION_FAILED", status, checked.observedFingerprint, at)] };
+        await this.store.put(next, current.sequence);
+        return next;
+    }
+    async disconnect(applicationId, connectionId) { const current = await this.required(applicationId, connectionId); if (current.status === "DISCONNECTED")
+        return current; const at = this.now(), sequence = current.sequence + 1, next = { ...current, status: "DISCONNECTED", sequence, history: [...current.history, this.event(sequence, "DISCONNECTED", "DISCONNECTED", current.observedFingerprint, at)] }; await this.store.put(next, current.sequence); return next; }
+    get = (applicationId, connectionId) => this.store.get(applicationId, connectionId);
+    list = (applicationId) => this.store.list(applicationId);
+    async check(applicationId, manifest, implementations) { const authoritative = await this.authority.get(applicationId); if (!authoritative)
+        throw new Error(`Unknown application "${applicationId}"`); const observedFingerprint = fingerprintManifest(manifest), identityMatches = manifest.application.id === applicationId, contractMatches = observedFingerprint === authoritative.fingerprint, declared = new Set(authoritative.manifest.provides.map(item => `${item.name}@${item.version}`)), invalid = implementations.filter(item => !declared.has(`${item.name}@${item.version}`)), reasons = [...(!identityMatches ? ["Application identity does not match"] : []), ...(!contractMatches ? ["Contract fingerprint does not match"] : []), ...(invalid.length ? [`Implementation claims are outside the application contract: ${invalid.map(item => `${item.name}@${item.version}`).join(", ")}`] : [])]; return { authoritativeFingerprint: authoritative.fingerprint, observedFingerprint, identityMatches, contractMatches: contractMatches && invalid.length === 0, reasons }; }
+    verification(checked, at) { return { verificationId: `verify_${randomUUID()}`, verifiedAt: at, ...checked }; }
+    event(sequence, type, status, observedFingerprint, occurredAt) { return { eventId: `repo_${randomUUID()}`, sequence, type, occurredAt, status, observedFingerprint }; }
+    async required(applicationId, connectionId) { const value = await this.store.get(applicationId, connectionId); if (!value)
+        throw new Error(`Unknown repository connection "${connectionId}"`); return value; }
+    validateRepository(method, repository) { if (!repository.remoteUrl || !repository.remoteUrl.trim())
+        throw new Error("Repository remoteUrl is required"); if (method === "github" && (repository.provider !== "github" || !repository.repositoryId))
+        throw new Error("GitHub connections require authenticated repository identity"); }
+    implementations(observation) { const values = observation.implementedCapabilities ?? observation.manifest.provides.map(({ name, version }) => ({ name, version })), unique = new Map(values.map(item => [`${item.name}@${item.version}`, { name: item.name, version: item.version }])); return [...unique.values()].sort((a, b) => a.name.localeCompare(b.name) || a.version - b.version); }
+    implementation(connectionId, capability) { return { implementationId: `impl_${randomUUID()}`, sourceConnectionId: connectionId, capabilityName: capability.name, capabilityVersion: capability.version }; }
+}
+//# sourceMappingURL=repository-connection.js.map