@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/repository-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-connection.js","sourceRoot":"","sources":["../src/repository-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAA4B,MAAM,eAAe,CAAC;AAa9E,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAAG,YAAY,EAAU,IAAI,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC,CAAC,CAAC;CAAE;AAEpN,MAAM,OAAO,+BAA+B;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IAClE,KAAK,CAAC,GAAG,CAAC,aAAqB,EAAE,YAAoB,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvK,KAAK,CAAC,GAAG,CAAC,MAAkC,EAAE,QAAiB,IAAI,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,YAAY,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,iCAAiC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3T,KAAK,CAAC,IAAI,CAAC,aAAsB,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;CACrL;AAED,6FAA6F;AAC7F,MAAM,OAAO,8BAA8B;IACZ;IAAmD;IAA8D;IAA9I,YAA6B,KAAgC,EAAmB,SAA2C,EAAmB,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAArJ,UAAK,GAAL,KAAK,CAA2B;QAAmB,cAAS,GAAT,SAAS,CAAkC;QAAmB,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IACtL,KAAK,CAAC,OAAO,CAAC,aAAqB,EAAE,MAAkC,EAAE,WAAkC;QACzG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,uBAAuB,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,GAAG,QAAQ,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAqB,CAAC,CAAC,CAAC,WAAoB,CAAC;QACpS,MAAM,eAAe,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,GAA+B,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACrsB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,YAAoB,EAAE,WAAkC;QAC1F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAChM,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACrJ,MAAM,uBAAuB,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAqB,CAAC,CAAC,CAAC,WAAoB,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9R,MAAM,eAAe,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,iBAAiB,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,GAA+B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACjwB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,aAAqB,EAAE,YAAoB,IAAI,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,GAA+B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACxf,GAAG,GAAG,CAAC,aAAqB,EAAE,YAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACnG,IAAI,GAAG,CAAC,aAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1D,KAAK,CAAC,KAAK,CAAC,aAAqB,EAAE,QAA6B,EAAE,eAAiD,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,aAAa,EAAE,eAAe,GAAG,mBAAmB,KAAK,aAAa,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,+DAA+D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,wBAAwB,EAAE,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5lC,YAAY,CAAC,OAAqE,EAAE,EAAU,IAA4B,OAAO,EAAE,cAAc,EAAE,UAAU,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5M,KAAK,CAAC,QAAgB,EAAE,IAAuC,EAAE,MAAkC,EAAE,mBAA2B,EAAE,UAAkB,IAA+B,OAAO,EAAE,OAAO,EAAE,QAAQ,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACzR,KAAK,CAAC,QAAQ,CAAC,aAAqB,EAAE,YAAoB,IAAI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;IAC9N,kBAAkB,CAAC,MAAkC,EAAE,UAA8B,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC,CAAC,CAAC;IACtX,eAAe,CAAC,WAAkC,IAA6B,MAAM,MAAM,GAAG,WAAW,CAAC,uBAAuB,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5a,cAAc,CAAC,YAAoB,EAAE,UAAiC,IAAyC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,UAAU,EAAE,EAAE,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CACxR"}

package/node_modules/@appport/core/dist/resolver.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Application Dependency Resolver (PR22)
+ *
+ * Deterministic resolution of application capability requirements against
+ * the Application Registry.
+ *
+ * Key principles:
+ * - Discovery via ApplicationRegistry (who provides this capability?)
+ * - Compatibility evaluation (can this provider satisfy this requirement?)
+ * - Deterministic selection (same registry state always produces same result)
+ * - No authorization checks (authorization is a separate layer)
+ * - No execution (resolution produces metadata only)
+ */
+import type { ApplicationState } from "./state.js";
+import type { ApplicationRegistry } from "./registration.js";
+import type { CapabilityManifestEntry, RequirementManifestEntry } from "./manifest.js";
+/**
+ * Extended requirement with version constraint and provider constraint support.
+ *
+ * Extends RequirementManifestEntry to support semantic version constraints
+ * and provider constraints for deterministic resolution.
+ */
+export interface RequirementWithConstraints extends RequirementManifestEntry {
+    readonly versionConstraint?: string;
+    readonly provider?: {
+        readonly applicationId?: string;
+    };
+}
+/**
+ * Compatibility result: detailed assessment of whether a provider can satisfy a requirement.
+ */
+export interface CompatibilityResult {
+    readonly compatible: boolean;
+    readonly reasons: readonly string[];
+}
+/**
+ * A resolved requirement: provider has been selected.
+ */
+export interface ResolvedRequirement {
+    readonly kind: "resolved";
+    readonly requirement: RequirementWithConstraints;
+    readonly provider: ApplicationState;
+    readonly capability: CapabilityManifestEntry;
+    readonly compatibility: CompatibilityResult;
+}
+/**
+ * An unresolved requirement: no compatible provider found.
+ */
+export interface UnresolvedRequirement {
+    readonly kind: "unresolved";
+    readonly requirement: RequirementWithConstraints;
+    readonly candidates: readonly ApplicationState[];
+    readonly reason: string;
+}
+/**
+ * An ambiguous requirement: multiple equally valid providers exist.
+ */
+export interface AmbiguousRequirement {
+    readonly kind: "ambiguous";
+    readonly requirement: RequirementWithConstraints;
+    readonly candidates: readonly ApplicationState[];
+}
+/**
+ * A resolution result: resolved, unresolved, or ambiguous.
+ */
+export type ResolutionResult = ResolvedRequirement | UnresolvedRequirement | AmbiguousRequirement;
+/**
+ * Full application resolution: all requirements resolved/unresolved/ambiguous.
+ */
+export interface ApplicationResolution {
+    readonly application: ApplicationState;
+    readonly results: readonly ResolutionResult[];
+    readonly resolved: readonly ResolvedRequirement[];
+    readonly unresolved: readonly UnresolvedRequirement[];
+    readonly ambiguous: readonly AmbiguousRequirement[];
+}
+/**
+ * Parse a semantic version constraint string and check if a provided version satisfies it.
+ *
+ * Supports:
+ * - Exact: "1" (matches 1 only)
+ * - Caret: "^1" (matches 1.x.x, i.e., >= 1 and < 2)
+ * - Tilde: "~1.2" (matches 1.2.x, i.e., >= 1.2 and < 1.3, but for major version numbers)
+ * - Comparison: ">=1", ">1", "<=1", "<1"
+ *
+ * Returns true if the provided version satisfies the constraint.
+ */
+export declare function satisfiesVersionConstraint(providedVersion: number, constraint: string): boolean;
+/**
+ * Evaluate capability compatibility between a provider and a requirement.
+ *
+ * Checks:
+ * - Capability name matches exactly
+ * - Provider version satisfies version constraint
+ * - Provider passes provider constraint (if specified)
+ *
+ * Returns a CompatibilityResult with detailed reasons.
+ */
+export declare function evaluateCompatibility(requirement: RequirementWithConstraints, provider: ApplicationState): CompatibilityResult;
+/**
+ * Application Dependency Resolver
+ *
+ * Resolves application requirements against the Application Registry using
+ * deterministic compatibility evaluation and provider selection.
+ */
+export declare class ApplicationDependencyResolver {
+    #private;
+    constructor(registry: ApplicationRegistry);
+    /**
+     * Resolve a single requirement against the registry.
+     *
+     * Flow:
+     * 1. Discover candidate providers (findByCapability)
+     * 2. Evaluate compatibility for each candidate
+     * 3. Apply provider constraints
+     * 4. Select deterministically or report ambiguity
+     * 5. Return ResolvedRequirement, UnresolvedRequirement, or AmbiguousRequirement
+     */
+    resolveRequirement(requirement: RequirementWithConstraints): Promise<ResolutionResult>;
+    /**
+     * Resolve all requirements of an application.
+     *
+     * Returns a comprehensive ApplicationResolution containing:
+     * - All resolution results
+     * - Separated resolved/unresolved/ambiguous for easy access
+     * - The application state (unchanged)
+     */
+    resolveApplication(application: ApplicationState): Promise<ApplicationResolution>;
+}
+//# sourceMappingURL=resolver.d.ts.map

package/node_modules/@appport/core/dist/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,wBAAwB,EAAuB,MAAM,eAAe,CAAC;AAG5G;;;;;GAKG;AACH,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;AAElG;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAqD/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,0BAA0B,EACvC,QAAQ,EAAE,gBAAgB,GACzB,mBAAmB,CAgCrB;AAED;;;;;GAKG;AACH,qBAAa,6BAA6B;;gBAG5B,QAAQ,EAAE,mBAAmB;IAIzC;;;;;;;;;OASG;IACG,kBAAkB,CAAC,WAAW,EAAE,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwG5F;;;;;;;OAOG;IACG,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAyBxF"}

package/node_modules/@appport/core/dist/resolver.js

@@ -0,0 +1,252 @@
+/**
+ * Application Dependency Resolver (PR22)
+ *
+ * Deterministic resolution of application capability requirements against
+ * the Application Registry.
+ *
+ * Key principles:
+ * - Discovery via ApplicationRegistry (who provides this capability?)
+ * - Compatibility evaluation (can this provider satisfy this requirement?)
+ * - Deterministic selection (same registry state always produces same result)
+ * - No authorization checks (authorization is a separate layer)
+ * - No execution (resolution produces metadata only)
+ */
+import { attestResolution } from "./authority-attestation.js";
+/**
+ * Parse a semantic version constraint string and check if a provided version satisfies it.
+ *
+ * Supports:
+ * - Exact: "1" (matches 1 only)
+ * - Caret: "^1" (matches 1.x.x, i.e., >= 1 and < 2)
+ * - Tilde: "~1.2" (matches 1.2.x, i.e., >= 1.2 and < 1.3, but for major version numbers)
+ * - Comparison: ">=1", ">1", "<=1", "<1"
+ *
+ * Returns true if the provided version satisfies the constraint.
+ */
+export function satisfiesVersionConstraint(providedVersion, constraint) {
+    const trimmed = constraint.trim();
+    // Caret range: ^1 matches >= 1 and < 2
+    if (trimmed.startsWith("^")) {
+        const versionStr = trimmed.substring(1);
+        const [major] = versionStr.split(".").map(Number);
+        return providedVersion >= major && providedVersion < major + 1;
+    }
+    // Tilde range: ~1.2 matches >= 1.2 and < 1.3 (but for major version numbers)
+    if (trimmed.startsWith("~")) {
+        const versionStr = trimmed.substring(1);
+        const [major, minor] = versionStr.split(".").map(Number);
+        if (minor === undefined) {
+            // ~1 is equivalent to ^1
+            return providedVersion >= major && providedVersion < major + 1;
+        }
+        // For ~1.2, since we're dealing with major version numbers, only match the major
+        return providedVersion === major;
+    }
+    // Greater than or equal: >=1
+    if (trimmed.startsWith(">=")) {
+        const version = parseInt(trimmed.substring(2), 10);
+        return providedVersion >= version;
+    }
+    // Greater than: >1
+    if (trimmed.startsWith(">")) {
+        const version = parseInt(trimmed.substring(1), 10);
+        return providedVersion > version;
+    }
+    // Less than or equal: <=1
+    if (trimmed.startsWith("<=")) {
+        const version = parseInt(trimmed.substring(2), 10);
+        return providedVersion <= version;
+    }
+    // Less than: <1
+    if (trimmed.startsWith("<")) {
+        const version = parseInt(trimmed.substring(1), 10);
+        return providedVersion < version;
+    }
+    // Exact version: 1
+    const version = parseInt(trimmed, 10);
+    if (!Number.isNaN(version)) {
+        return providedVersion === version;
+    }
+    return false;
+}
+/**
+ * Evaluate capability compatibility between a provider and a requirement.
+ *
+ * Checks:
+ * - Capability name matches exactly
+ * - Provider version satisfies version constraint
+ * - Provider passes provider constraint (if specified)
+ *
+ * Returns a CompatibilityResult with detailed reasons.
+ */
+export function evaluateCompatibility(requirement, provider) {
+    const reasons = [];
+    // Find the capability in the provider's manifest
+    const capability = provider.manifest.provides.find((cap) => cap.name === requirement.name);
+    if (!capability) {
+        reasons.push(`Provider ${provider.id} does not provide capability "${requirement.name}"`);
+        return { compatible: false, reasons };
+    }
+    // Check version constraint
+    const versionConstraint = requirement.versionConstraint || String(requirement.version);
+    if (!satisfiesVersionConstraint(capability.version, versionConstraint)) {
+        reasons.push(`Provider version ${capability.version} does not satisfy constraint "${versionConstraint}" for "${requirement.name}"`);
+        return { compatible: false, reasons };
+    }
+    // Check provider constraint
+    if (requirement.provider?.applicationId) {
+        if (provider.id !== requirement.provider.applicationId) {
+            reasons.push(`Requirement specifies provider "${requirement.provider.applicationId}" but got provider "${provider.id}"`);
+            return { compatible: false, reasons };
+        }
+    }
+    // All checks passed
+    return { compatible: true, reasons: [] };
+}
+/**
+ * Application Dependency Resolver
+ *
+ * Resolves application requirements against the Application Registry using
+ * deterministic compatibility evaluation and provider selection.
+ */
+export class ApplicationDependencyResolver {
+    #registry;
+    constructor(registry) {
+        this.#registry = registry;
+    }
+    /**
+     * Resolve a single requirement against the registry.
+     *
+     * Flow:
+     * 1. Discover candidate providers (findByCapability)
+     * 2. Evaluate compatibility for each candidate
+     * 3. Apply provider constraints
+     * 4. Select deterministically or report ambiguity
+     * 5. Return ResolvedRequirement, UnresolvedRequirement, or AmbiguousRequirement
+     */
+    async resolveRequirement(requirement) {
+        // If requirement has a provider constraint, look for that specific provider
+        if (requirement.provider?.applicationId) {
+            const provider = await this.#registry.get(requirement.provider.applicationId);
+            if (!provider) {
+                return {
+                    kind: "unresolved",
+                    requirement,
+                    candidates: [],
+                    reason: `Provider "${requirement.provider.applicationId}" not found in registry`
+                };
+            }
+            const compat = evaluateCompatibility(requirement, provider);
+            if (compat.compatible) {
+                const capability = provider.manifest.provides.find((cap) => cap.name === requirement.name);
+                const resolution = {
+                    kind: "resolved",
+                    requirement,
+                    provider,
+                    capability,
+                    compatibility: compat
+                };
+                attestResolution(resolution, this.#registry);
+                return resolution;
+            }
+            else {
+                return {
+                    kind: "unresolved",
+                    requirement,
+                    candidates: [provider],
+                    reason: compat.reasons.join("; ")
+                };
+            }
+        }
+        // Discover candidates: applications providing this capability
+        const candidates = await this.#registry.findByCapability(requirement.name);
+        if (candidates.length === 0) {
+            return {
+                kind: "unresolved",
+                requirement,
+                candidates: [],
+                reason: `No providers found for capability "${requirement.name}"`
+            };
+        }
+        // Evaluate compatibility for each candidate
+        const compatible = [];
+        for (const candidate of candidates) {
+            const compat = evaluateCompatibility(requirement, candidate);
+            if (compat.compatible) {
+                const capability = candidate.manifest.provides.find((cap) => cap.name === requirement.name);
+                compatible.push({ provider: candidate, capability });
+            }
+        }
+        if (compatible.length === 0) {
+            return {
+                kind: "unresolved",
+                requirement,
+                candidates,
+                reason: `No compatible providers found for "${requirement.name}"`
+            };
+        }
+        if (compatible.length > 1) {
+            // Apply deterministic selection: highest version, then by application ID
+            compatible.sort((a, b) => {
+                const versionDiff = b.capability.version - a.capability.version;
+                if (versionDiff !== 0)
+                    return versionDiff;
+                return a.provider.id.localeCompare(b.provider.id);
+            });
+            // Check if the top candidate is unique
+            const top = compatible[0];
+            const second = compatible[1];
+            if (top.capability.version === second.capability.version &&
+                top.provider.id !== second.provider.id) {
+                // Ambiguous: multiple providers with same version
+                return {
+                    kind: "ambiguous",
+                    requirement,
+                    candidates: compatible.map((c) => c.provider)
+                };
+            }
+        }
+        // Return the selected provider
+        const selected = compatible[0];
+        const resolution = {
+            kind: "resolved",
+            requirement,
+            provider: selected.provider,
+            capability: selected.capability,
+            compatibility: { compatible: true, reasons: [] }
+        };
+        attestResolution(resolution, this.#registry);
+        return resolution;
+    }
+    /**
+     * Resolve all requirements of an application.
+     *
+     * Returns a comprehensive ApplicationResolution containing:
+     * - All resolution results
+     * - Separated resolved/unresolved/ambiguous for easy access
+     * - The application state (unchanged)
+     */
+    async resolveApplication(application) {
+        const results = [];
+        for (const requirement of application.manifest.requires) {
+            const requirementWithConstraints = {
+                ...requirement,
+                versionConstraint: requirement.versionConstraint || String(requirement.version)
+            };
+            const result = await this.resolveRequirement(requirementWithConstraints);
+            results.push(result);
+        }
+        // Separate into categories
+        const resolved = results.filter((r) => r.kind === "resolved");
+        const unresolved = results.filter((r) => r.kind === "unresolved");
+        const ambiguous = results.filter((r) => r.kind === "ambiguous");
+        return {
+            application,
+            results,
+            resolved,
+            unresolved,
+            ambiguous
+        };
+    }
+}
+//# sourceMappingURL=resolver.js.map

package/node_modules/@appport/core/dist/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAqE9D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CAAC,eAAuB,EAAE,UAAkB;IACpF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAElC,uCAAuC;IACvC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,eAAe,IAAI,KAAK,IAAI,eAAe,GAAG,KAAK,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,6EAA6E;IAC7E,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,yBAAyB;YACzB,OAAO,eAAe,IAAI,KAAK,IAAI,eAAe,GAAG,KAAK,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,iFAAiF;QACjF,OAAO,eAAe,KAAK,KAAK,CAAC;IACnC,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,eAAe,IAAI,OAAO,CAAC;IACpC,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,eAAe,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,eAAe,IAAI,OAAO,CAAC;IACpC,CAAC;IAED,gBAAgB;IAChB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,eAAe,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,eAAe,KAAK,OAAO,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAuC,EACvC,QAA0B;IAE1B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,iDAAiD;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;IAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,EAAE,iCAAiC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1F,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAED,2BAA2B;IAC3B,MAAM,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACvF,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,IAAI,CACV,oBAAoB,UAAU,CAAC,OAAO,iCAAiC,iBAAiB,UAAU,WAAW,CAAC,IAAI,GAAG,CACtH,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAED,4BAA4B;IAC5B,IAAI,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,EAAE,KAAK,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CACV,mCAAmC,WAAW,CAAC,QAAQ,CAAC,aAAa,uBAAuB,QAAQ,CAAC,EAAE,GAAG,CAC3G,CAAC;YACF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IAC/B,SAAS,CAAsB;IAExC,YAAY,QAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAAuC;QAC9D,4EAA4E;QAC5E,IAAI,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,WAAW;oBACX,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,aAAa,WAAW,CAAC,QAAQ,CAAC,aAAa,yBAAyB;iBACjF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAE,CAAC;gBAC5F,MAAM,UAAU,GAAwB;oBACtC,IAAI,EAAE,UAAU;oBAChB,WAAW;oBACX,QAAQ;oBACR,UAAU;oBACV,aAAa,EAAE,MAAM;iBACtB,CAAC;gBACF,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7C,OAAO,UAAU,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,WAAW;oBACX,UAAU,EAAE,CAAC,QAAQ,CAAC;oBACtB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,WAAW;gBACX,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,sCAAsC,WAAW,CAAC,IAAI,GAAG;aAClE,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,UAAU,GAA+E,EAAE,CAAC;QAElG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAE,CAAC;gBAC7F,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,WAAW;gBACX,UAAU;gBACV,MAAM,EAAE,sCAAsC,WAAW,CAAC,IAAI,GAAG;aAClE,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,yEAAyE;YACzE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACvB,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;gBAChE,IAAI,WAAW,KAAK,CAAC;oBAAE,OAAO,WAAW,CAAC;gBAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YAEH,uCAAuC;YACvC,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,IACE,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,UAAU,CAAC,OAAO;gBACpD,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,EACtC,CAAC;gBACD,kDAAkD;gBAClD,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,WAAW;oBACX,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;iBAC9C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAwB;YACtC,IAAI,EAAE,UAAU;YAChB,WAAW;YACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;SACjD,CAAC;QACF,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAA6B;QACpD,MAAM,OAAO,GAAuB,EAAE,CAAC;QAEvC,KAAK,MAAM,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxD,MAAM,0BAA0B,GAA+B;gBAC7D,GAAG,WAAW;gBACd,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;aAChF,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAC9F,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAE3F,OAAO;YACL,WAAW;YACX,OAAO;YACP,QAAQ;YACR,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@appport/core/dist/runtime-manifest.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Runtime Implementation Manifest (F6)
+ *
+ * The local, per-source description of what a repository/runtime actually
+ * implements. It is implementation metadata and nothing else.
+ *
+ * It establishes:
+ *   - implementation capability coverage
+ *
+ * It does NOT establish:
+ *   - application identity
+ *   - contract authority
+ *   - the application fingerprint
+ *   - authorization
+ *   - provider identity
+ *
+ * This schema is deliberately distinct from `AppBoundryContractDocument`. The
+ * two documents are never aliased, and parsing one rejects the other so a
+ * contract mismatch can never be converted into a runtime-manifest match.
+ */
+/** Protocol identifier of the runtime implementation manifest. */
+export declare const RUNTIME_IMPLEMENTATION_MANIFEST_PROTOCOL = "AppPort/runtime-implementation/1";
+/** Canonical file name of the runtime implementation manifest. */
+export declare const RUNTIME_IMPLEMENTATION_MANIFEST_FILE = "appport.implementation.json";
+/** A capability this source claims to implement. */
+export interface RuntimeImplementedCapability {
+    readonly name: string;
+    readonly version: number;
+    /** Optional implementation entry point, meaningful only to the source. */
+    readonly entry?: string;
+}
+/** What a particular source implements of an application it does not own. */
+export interface RuntimeImplementationManifest {
+    readonly protocol: typeof RUNTIME_IMPLEMENTATION_MANIFEST_PROTOCOL;
+    /** Reference to the AppBoundry application. The source never owns this id. */
+    readonly applicationId: string;
+    /** Stable identity of this implementation, distinct from the application. */
+    readonly implementationId?: string;
+    /** Provider-neutral source connection identity established by AppBoundry. */
+    readonly sourceId?: string;
+    readonly implements: readonly RuntimeImplementedCapability[];
+    readonly build?: {
+        readonly command?: string;
+        readonly artifactPath?: string;
+    };
+    readonly runtime?: {
+        readonly engine?: "wasm";
+        readonly artifactHash?: string;
+    };
+}
+export type RuntimeManifestErrorCode = "RUNTIME_MANIFEST_INVALID" | "RUNTIME_MANIFEST_IS_A_CONTRACT";
+/** Explicit runtime-manifest failure; never silently promoted to a contract. */
+export declare class RuntimeManifestError extends Error {
+    readonly code: RuntimeManifestErrorCode;
+    constructor(code: RuntimeManifestErrorCode, message: string);
+}
+/** Parse a runtime implementation manifest, rejecting contract documents. */
+export declare function parseRuntimeImplementationManifest(value: unknown): RuntimeImplementationManifest;
+/**
+ * Derive implementation coverage from a runtime manifest.
+ *
+ * Coverage is a claim, not an authority. It becomes meaningful only once
+ * validated against the authoritative contract (see `contract-attestation.ts`).
+ */
+export declare function deriveImplementationCoverage(manifest: RuntimeImplementationManifest): readonly string[];
+/** Render a runtime implementation manifest for a repository to commit. */
+export declare function serializeRuntimeImplementationManifest(manifest: RuntimeImplementationManifest): string;
+//# sourceMappingURL=runtime-manifest.d.ts.map

package/node_modules/@appport/core/dist/runtime-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-manifest.d.ts","sourceRoot":"","sources":["../src/runtime-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,kEAAkE;AAClE,eAAO,MAAM,wCAAwC,qCAAqC,CAAC;AAE3F,kEAAkE;AAClE,eAAO,MAAM,oCAAoC,gCAAgC,CAAC;AAElF,oDAAoD;AACpD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,wCAAwC,CAAC;IACnE,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;CACH;AAED,MAAM,MAAM,wBAAwB,GAChC,0BAA0B,GAC1B,gCAAgC,CAAC;AAErC,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,wBAAwB;gBAA9B,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM;CAIrE;AAED,6EAA6E;AAC7E,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAuChG;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,6BAA6B,GAAG,SAAS,MAAM,EAAE,CAEvG;AAED,2EAA2E;AAC3E,wBAAgB,sCAAsC,CAAC,QAAQ,EAAE,6BAA6B,GAAG,MAAM,CAEtG"}

package/node_modules/@appport/core/dist/runtime-manifest.js

@@ -0,0 +1,84 @@
+/**
+ * Runtime Implementation Manifest (F6)
+ *
+ * The local, per-source description of what a repository/runtime actually
+ * implements. It is implementation metadata and nothing else.
+ *
+ * It establishes:
+ *   - implementation capability coverage
+ *
+ * It does NOT establish:
+ *   - application identity
+ *   - contract authority
+ *   - the application fingerprint
+ *   - authorization
+ *   - provider identity
+ *
+ * This schema is deliberately distinct from `AppBoundryContractDocument`. The
+ * two documents are never aliased, and parsing one rejects the other so a
+ * contract mismatch can never be converted into a runtime-manifest match.
+ */
+import { APPBOUNDRY_CONTRACT_PROTOCOL, capabilityCoverageKey } from "./appboundry-contract.js";
+/** Protocol identifier of the runtime implementation manifest. */
+export const RUNTIME_IMPLEMENTATION_MANIFEST_PROTOCOL = "AppPort/runtime-implementation/1";
+/** Canonical file name of the runtime implementation manifest. */
+export const RUNTIME_IMPLEMENTATION_MANIFEST_FILE = "appport.implementation.json";
+/** Explicit runtime-manifest failure; never silently promoted to a contract. */
+export class RuntimeManifestError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "RuntimeManifestError";
+    }
+}
+/** Parse a runtime implementation manifest, rejecting contract documents. */
+export function parseRuntimeImplementationManifest(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "The runtime implementation manifest must be a JSON object");
+    }
+    const candidate = value;
+    if (candidate.protocol === APPBOUNDRY_CONTRACT_PROTOCOL) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_IS_A_CONTRACT", "An AppBoundry contract is not a runtime implementation manifest");
+    }
+    if (candidate.protocol !== RUNTIME_IMPLEMENTATION_MANIFEST_PROTOCOL) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", `Expected protocol "${RUNTIME_IMPLEMENTATION_MANIFEST_PROTOCOL}" but found "${String(candidate.protocol)}"`);
+    }
+    if (typeof candidate.applicationId !== "string" || !candidate.applicationId.length) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "applicationId must be a non-empty string");
+    }
+    if (!Array.isArray(candidate.implements) || candidate.implements.length === 0) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "implements must declare at least one capability");
+    }
+    if (candidate.implementationId !== undefined && (typeof candidate.implementationId !== "string" || !candidate.implementationId.length)) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "implementationId must be a non-empty string");
+    }
+    if (candidate.implementationId === candidate.applicationId) {
+        throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "implementation identity must be distinct from application identity");
+    }
+    const seen = new Set();
+    for (const entry of candidate.implements) {
+        if (typeof entry?.name !== "string" || !Number.isInteger(entry?.version)) {
+            throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", "every implemented capability needs a name and integer version");
+        }
+        const key = `${entry.name}@${entry.version}`;
+        if (seen.has(key))
+            throw new RuntimeManifestError("RUNTIME_MANIFEST_INVALID", `duplicate implemented capability ${key}`);
+        seen.add(key);
+    }
+    return candidate;
+}
+/**
+ * Derive implementation coverage from a runtime manifest.
+ *
+ * Coverage is a claim, not an authority. It becomes meaningful only once
+ * validated against the authoritative contract (see `contract-attestation.ts`).
+ */
+export function deriveImplementationCoverage(manifest) {
+    return [...new Set(manifest.implements.map(capabilityCoverageKey))].sort();
+}
+/** Render a runtime implementation manifest for a repository to commit. */
+export function serializeRuntimeImplementationManifest(manifest) {
+    return `${JSON.stringify(manifest, null, 2)}\n`;
+}
+//# sourceMappingURL=runtime-manifest.js.map

package/node_modules/@appport/core/dist/runtime-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-manifest.js","sourceRoot":"","sources":["../src/runtime-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,kEAAkE;AAClE,MAAM,CAAC,MAAM,wCAAwC,GAAG,kCAAkC,CAAC;AAE3F,kEAAkE;AAClE,MAAM,CAAC,MAAM,oCAAoC,GAAG,6BAA6B,CAAC;AAkClF,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB;IAArB,YAAqB,IAA8B,EAAE,OAAe;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAA0B;QAEjD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,2DAA2D,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,SAAS,CAAC,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAC5B,gCAAgC,EAChC,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,KAAK,wCAAwC,EAAE,CAAC;QACpE,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,EAC1B,sBAAsB,wCAAwC,gBAAgB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QACnF,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,0CAA0C,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,iDAAiD,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvI,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,6CAA6C,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,oEAAoE,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,UAAuC,EAAE,CAAC;QACtE,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,+DAA+D,CAAC,CAAC;QAC9H,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,SAAqD,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAuC;IAClF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,sCAAsC,CAAC,QAAuC;IAC5F,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC"}

package/node_modules/@appport/core/dist/sanitize.d.ts

@@ -0,0 +1,14 @@
+import { type AppErrorObject, type JsonValue } from "@appport/protocol";
+/**
+ * Error sanitization (specification §16).
+ *
+ * Production responses never carry stack traces, filesystem paths, credentials
+ * or raw driver errors. Development mode may attach diagnostics, and does so
+ * under an explicitly namespaced `diagnostic` detail so it is obvious when a
+ * deployment is leaking.
+ */
+export type RuntimeMode = "development" | "production";
+/** Redacts values whose key suggests a credential. */
+export declare function redact(value: JsonValue, depth?: number): JsonValue;
+export declare function toWireError(error: unknown, mode?: RuntimeMode): AppErrorObject;
+//# sourceMappingURL=sanitize.d.ts.map

package/node_modules/@appport/core/dist/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,YAAY,CAAC;AAIvD,sDAAsD;AACtD,wBAAgB,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,SAAI,GAAG,SAAS,CAQ7D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,WAA0B,GAAG,cAAc,CAoB5F"}

package/node_modules/@appport/core/dist/sanitize.js

@@ -0,0 +1,49 @@
+import { AppPortError, errors } from "@appport/protocol";
+const SENSITIVE_KEY = /(password|secret|token|credential|authorization|api[-_]?key|cookie|session[-_]?id)/i;
+/** Redacts values whose key suggests a credential. */
+export function redact(value, depth = 0) {
+    if (depth > 6 || value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map((entry) => redact(entry, depth + 1));
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        out[key] = SENSITIVE_KEY.test(key) ? "[redacted]" : redact(entry, depth + 1);
+    }
+    return out;
+}
+export function toWireError(error, mode = "production") {
+    if (AppPortError.is(error)) {
+        const wire = error.toErrorObject();
+        if (wire.details !== undefined)
+            wire.details = redact(wire.details);
+        if (mode === "development" && error.internal !== undefined) {
+            wire.details = {
+                ...(typeof wire.details === "object" && wire.details !== null && !Array.isArray(wire.details)
+                    ? wire.details
+                    : {}),
+                diagnostic: describe(error.internal)
+            };
+        }
+        return wire;
+    }
+    const wire = errors.internal().toErrorObject();
+    if (mode === "development") {
+        wire.details = { diagnostic: describe(error) };
+    }
+    return wire;
+}
+function describe(value) {
+    if (value instanceof Error) {
+        return {
+            name: value.name,
+            message: value.message,
+            ...(value.stack ? { stack: value.stack.split("\n").slice(0, 8).join("\n") } : {})
+        };
+    }
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean" || value === null) {
+        return value;
+    }
+    return String(value);
+}
+//# sourceMappingURL=sanitize.js.map