@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/state-context.js

@@ -0,0 +1,100 @@
+/**
+ * Application State Context & Transaction (PR27)
+ *
+ * Establishes the invariant:
+ * WASM execution is ephemeral; application state is durable.
+ *
+ * The ApplicationStateContext is the contract available to one invocation.
+ * It provides typed state access with isolation, authorization, and transaction semantics.
+ *
+ * State is scoped to:
+ * - Application identity (owns the state)
+ * - Invocation identity (unique per execution)
+ * - Transaction identity (unique per invocation)
+ *
+ * State operations:
+ * - get(key): Read value, observing transaction writes
+ * - set(key, value): Write value, isolated until commit
+ * - delete(key): Remove value, isolated until commit
+ * - query(pattern): Search state by key pattern
+ *
+ * Transaction lifecycle:
+ * - OPEN: Accepts reads and writes
+ * - COMMITTED: Durable, no mutations allowed
+ * - ABORTED: Discarded, no mutations allowed
+ */
+/**
+ * Application state transaction lifecycle.
+ *
+ * Explicit state machine:
+ * OPEN → COMMITTED
+ *     → ABORTED
+ *
+ * Invariants:
+ * - Transition to COMMITTED or ABORTED is explicit
+ * - No implicit auto-commit
+ * - Committed transactions cannot be mutated
+ * - Aborted transactions cannot be mutated
+ * - Both commit and abort are idempotent
+ * - Transaction identity is unique per invocation
+ */
+export var ApplicationStateTransactionState;
+(function (ApplicationStateTransactionState) {
+    /**
+     * Transaction is open and accepting operations.
+     * Reads and writes are allowed.
+     */
+    ApplicationStateTransactionState["OPEN"] = "OPEN";
+    /**
+     * Transaction has been committed durably.
+     * All writes are now visible to subsequent transactions.
+     * No further mutations are allowed.
+     */
+    ApplicationStateTransactionState["COMMITTED"] = "COMMITTED";
+    /**
+     * Transaction has been aborted.
+     * All writes have been discarded.
+     * No further mutations are allowed.
+     */
+    ApplicationStateTransactionState["ABORTED"] = "ABORTED";
+})(ApplicationStateTransactionState || (ApplicationStateTransactionState = {}));
+/**
+ * State operation error: operation rejected by authorization or state.
+ */
+export class StateOperationError extends Error {
+    message;
+    code;
+    constructor(message, code = "other") {
+        super(`State operation failed: ${message}`);
+        this.message = message;
+        this.code = code;
+        this.name = "StateOperationError";
+    }
+}
+/**
+ * Transaction state error: operation attempted in wrong transaction state.
+ */
+export class TransactionStateError extends Error {
+    currentState;
+    attemptedOperation;
+    constructor(currentState, attemptedOperation) {
+        super(`Transaction state error: Cannot ${attemptedOperation} in ${currentState} state`);
+        this.currentState = currentState;
+        this.attemptedOperation = attemptedOperation;
+        this.name = "TransactionStateError";
+    }
+}
+/**
+ * Commit failure error: transaction commit failed.
+ */
+export class CommitFailureError extends Error {
+    transactionId;
+    message;
+    constructor(transactionId, message) {
+        super(`Commit failed for transaction ${transactionId}: ${message}`);
+        this.transactionId = transactionId;
+        this.message = message;
+        this.name = "CommitFailureError";
+    }
+}
+//# sourceMappingURL=state-context.js.map

package/node_modules/@appport/core/dist/state-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-context.js","sourceRoot":"","sources":["../src/state-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAuFH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,gCAoBX;AApBD,WAAY,gCAAgC;IAC1C;;;OAGG;IACH,iDAAa,CAAA;IAEb;;;;OAIG;IACH,2DAAuB,CAAA;IAEvB;;;;OAIG;IACH,uDAAmB,CAAA;AACrB,CAAC,EApBW,gCAAgC,KAAhC,gCAAgC,QAoB3C;AAyED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjB;IACT;IAFlB,YAC2B,OAAe,EACxB,OAAkF,OAAO;QAEzG,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QAHnB,YAAO,GAAP,OAAO,CAAQ;QACxB,SAAI,GAAJ,IAAI,CAAqF;QAGzG,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE5B;IACA;IAFlB,YACkB,YAA8C,EAC9C,kBAA0B;QAE1C,KAAK,CAAC,mCAAmC,kBAAkB,OAAO,YAAY,QAAQ,CAAC,CAAC;QAHxE,iBAAY,GAAZ,YAAY,CAAkC;QAC9C,uBAAkB,GAAlB,kBAAkB,CAAQ;QAG1C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACS;IAF3B,YACkB,aAAqB,EACZ,OAAe;QAExC,KAAK,CAAC,iCAAiC,aAAa,KAAK,OAAO,EAAE,CAAC,CAAC;QAHpD,kBAAa,GAAb,aAAa,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QAGxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/node_modules/@appport/core/dist/state.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Application State & Registration (PR20)
+ *
+ * Durable application state representation and registration lifecycle.
+ *
+ * An ApplicationState represents a registered, tracked application:
+ * - Identity (id, name, version)
+ * - Manifest (canonical contract)
+ * - Fingerprint (contract hash)
+ * - Verification state
+ * - Lifecycle state
+ * - Revision tracking
+ * - History/timestamps
+ *
+ * CRITICAL INVARIANT: ApplicationState contains NO implementation details.
+ * No functions, handlers, closures, runtime objects, or credentials.
+ */
+import type { ApplicationManifest, ApplicationIdentity } from "./manifest.js";
+import type { VerificationResult } from "./assembly.js";
+/**
+ * Application lifecycle states.
+ *
+ * - "registered": Application has been successfully registered
+ * - "active": Application is operational and available
+ * - "retired": Application has been deprecated/removed
+ */
+export type ApplicationLifecycleState = "registered" | "active" | "retired";
+/**
+ * Durable application state: captures everything AppBoundry knows about
+ * an application without requiring its implementation to be present.
+ *
+ * This is suitable for storage, discovery, and transmission without
+ * exposing implementation details.
+ */
+export interface ApplicationState {
+    /** Unique identity for this continuous registration incarnation. */
+    readonly registrationId: string;
+    /** Unique application identifier. */
+    readonly id: string;
+    /** Human-readable application name. */
+    readonly name: string;
+    /** Semantic version. */
+    readonly version: string;
+    /** Canonical application manifest (the application's contract). */
+    readonly manifest: ApplicationManifest;
+    /** SHA256 fingerprint of canonical manifest. */
+    readonly fingerprint: string;
+    /** Verification result at time of registration. */
+    readonly verification: {
+        readonly ready: boolean;
+        readonly errorCount: number;
+        readonly warningCount: number;
+    };
+    /** Application lifecycle state. */
+    readonly status: ApplicationLifecycleState;
+    /** Revision number (incremented on each update). */
+    readonly revision: number;
+    /** ISO 8601 timestamp when first registered. */
+    readonly createdAt: string;
+    /** ISO 8601 timestamp of last update. */
+    readonly updatedAt: string;
+}
+/**
+ * Options for registering a verified application.
+ */
+export interface RegisterApplicationOptions {
+    /** The verified application identity. */
+    identity: ApplicationIdentity;
+    /** The canonical manifest (PR19). */
+    manifest: ApplicationManifest;
+    /** The fingerprint hash (PR19). */
+    fingerprint: string;
+    /** Verification result (PR18). */
+    verification: VerificationResult;
+    /** Optional initial lifecycle state. Defaults to "registered". */
+    status?: ApplicationLifecycleState;
+}
+/**
+ * Create an ApplicationState from registration options.
+ * Used internally during registration process.
+ */
+export declare function createApplicationState(options: RegisterApplicationOptions, revision?: number): ApplicationState;
+/**
+ * Update application state with new manifest and verification.
+ * Used for revision updates.
+ */
+export declare function updateApplicationState(existing: ApplicationState, options: Omit<RegisterApplicationOptions, "identity">): ApplicationState;
+/**
+ * Lifecycle state transition: mark application as active.
+ */
+export declare function markApplicationActive(state: ApplicationState): ApplicationState;
+/**
+ * Lifecycle state transition: retire application.
+ */
+export declare function retireApplication(state: ApplicationState): ApplicationState;
+//# sourceMappingURL=state.d.ts.map

package/node_modules/@appport/core/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IAEvC,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IAEF,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAE3C,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,yCAAyC;IACzC,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,qCAAqC;IACrC,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IAEpB,kCAAkC;IAClC,YAAY,EAAE,kBAAkB,CAAC;IAEjC,kEAAkE;IAClE,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,0BAA0B,EACnC,QAAQ,GAAE,MAAU,GACnB,gBAAgB,CAoBlB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,UAAU,CAAC,GACpD,gBAAgB,CAgBlB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAQ/E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAQ3E"}

package/node_modules/@appport/core/dist/state.js

@@ -0,0 +1,89 @@
+/**
+ * Application State & Registration (PR20)
+ *
+ * Durable application state representation and registration lifecycle.
+ *
+ * An ApplicationState represents a registered, tracked application:
+ * - Identity (id, name, version)
+ * - Manifest (canonical contract)
+ * - Fingerprint (contract hash)
+ * - Verification state
+ * - Lifecycle state
+ * - Revision tracking
+ * - History/timestamps
+ *
+ * CRITICAL INVARIANT: ApplicationState contains NO implementation details.
+ * No functions, handlers, closures, runtime objects, or credentials.
+ */
+import { randomUUID } from "node:crypto";
+/**
+ * Create an ApplicationState from registration options.
+ * Used internally during registration process.
+ */
+export function createApplicationState(options, revision = 1) {
+    const now = new Date().toISOString();
+    return {
+        registrationId: `reg_${randomUUID()}`,
+        id: options.identity.id,
+        name: options.identity.name,
+        version: options.identity.version,
+        manifest: options.manifest,
+        fingerprint: options.fingerprint,
+        verification: {
+            ready: options.verification.ready,
+            errorCount: options.verification.errors.length,
+            warningCount: options.verification.warnings.length
+        },
+        status: options.status ?? "registered",
+        revision,
+        createdAt: now,
+        updatedAt: now
+    };
+}
+/**
+ * Update application state with new manifest and verification.
+ * Used for revision updates.
+ */
+export function updateApplicationState(existing, options) {
+    const now = new Date().toISOString();
+    return {
+        ...existing,
+        manifest: options.manifest,
+        fingerprint: options.fingerprint,
+        verification: {
+            ready: options.verification.ready,
+            errorCount: options.verification.errors.length,
+            warningCount: options.verification.warnings.length
+        },
+        status: options.status ?? existing.status,
+        revision: existing.revision + 1,
+        updatedAt: now
+    };
+}
+/**
+ * Lifecycle state transition: mark application as active.
+ */
+export function markApplicationActive(state) {
+    if (state.status === "active")
+        return state;
+    return {
+        ...state,
+        status: "active",
+        revision: state.revision + 1,
+        updatedAt: new Date().toISOString()
+    };
+}
+/**
+ * Lifecycle state transition: retire application.
+ */
+export function retireApplication(state) {
+    if (state.status === "retired")
+        return state;
+    return {
+        ...state,
+        status: "retired",
+        revision: state.revision + 1,
+        updatedAt: new Date().toISOString()
+    };
+}
+//# sourceMappingURL=state.js.map

package/node_modules/@appport/core/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA+EzC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAmC,EACnC,WAAmB,CAAC;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,OAAO;QACL,cAAc,EAAE,OAAO,UAAU,EAAE,EAAE;QACrC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;QACvB,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE;YACZ,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK;YACjC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM;YAC9C,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM;SACnD;QACD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY;QACtC,QAAQ;QACR,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA0B,EAC1B,OAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE;YACZ,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK;YACjC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM;YAC9C,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM;SACnD;QACD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;QACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;QAC/B,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC"}

package/node_modules/@appport/core/dist/streams.d.ts

@@ -0,0 +1,38 @@
+import { AppPortError } from "@appport/protocol";
+/**
+ * A bounded async channel: the plumbing behind capability streams (§20).
+ *
+ * `push` resolves once the value is buffered below the high-water mark, which
+ * gives handlers natural backpressure without exposing transport details.
+ */
+export declare class AsyncChannel<T> implements AsyncIterable<T> {
+    #private;
+    constructor(highWaterMark?: number);
+    get closed(): boolean;
+    get size(): number;
+    push(value: T): Promise<void>;
+    end(): void;
+    fail(reason: unknown): void;
+    [Symbol.asyncIterator](): AsyncIterator<T>;
+}
+/**
+ * The stream handle exposed to capability handlers through
+ * `context.createStream()` (§10). It is itself an async iterable, so a handler
+ * can create it, hand the writer half to some producer and return it.
+ */
+export interface StreamContext<Chunk = unknown> extends AsyncIterable<Chunk> {
+    /** Emits one chunk. Resolves when the consumer has room for more. */
+    write(chunk: Chunk): Promise<void>;
+    /** Completes the stream normally. */
+    end(): void;
+    /** Terminates the stream with an error. */
+    fail(error: unknown): void;
+    /** Aborted when the client cancels or the connection drops (§21). */
+    readonly signal: AbortSignal;
+    readonly closed: boolean;
+}
+export declare function createStreamContext<Chunk>(signal: AbortSignal, highWaterMark?: number): StreamContext<Chunk>;
+export declare function abortReason(signal: AbortSignal): AppPortError;
+/** Turns any iterable, sync or async, into an async iterable. */
+export declare function toAsyncIterable<T>(source: AsyncIterable<T> | Iterable<T>): AsyncIterable<T>;
+//# sourceMappingURL=streams.d.ts.map

package/node_modules/@appport/core/dist/streams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.d.ts","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAU,MAAM,mBAAmB,CAAC;AAEzD;;;;;GAKG;AACH,qBAAa,YAAY,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;;gBAS1C,aAAa,SAAK;IAI9B,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAEK,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnC,GAAG,IAAI,IAAI;IAUX,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAgBpB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CAqBlD;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,GAAG,OAAO,CAAE,SAAQ,aAAa,CAAC,KAAK,CAAC;IAC1E,qEAAqE;IACrE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,qCAAqC;IACrC,GAAG,IAAI,IAAI,CAAC;IACZ,2CAA2C;IAC3C,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,SAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAgBxG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAI7D;AAED,iEAAiE;AACjE,wBAAuB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAMlG"}

package/node_modules/@appport/core/dist/streams.js

@@ -0,0 +1,123 @@
+import { AppPortError, errors } from "@appport/protocol";
+/**
+ * A bounded async channel: the plumbing behind capability streams (§20).
+ *
+ * `push` resolves once the value is buffered below the high-water mark, which
+ * gives handlers natural backpressure without exposing transport details.
+ */
+export class AsyncChannel {
+    #queue = [];
+    #pending = [];
+    #rejects = [];
+    #drain = [];
+    #highWaterMark;
+    #closed = false;
+    #failure;
+    constructor(highWaterMark = 64) {
+        this.#highWaterMark = Math.max(1, highWaterMark);
+    }
+    get closed() {
+        return this.#closed;
+    }
+    get size() {
+        return this.#queue.length;
+    }
+    async push(value) {
+        if (this.#closed)
+            throw errors.streamError("Stream is already closed");
+        const waiter = this.#pending.shift();
+        if (waiter) {
+            this.#rejects.shift();
+            waiter({ value, done: false });
+            return;
+        }
+        this.#queue.push(value);
+        if (this.#queue.length >= this.#highWaterMark) {
+            await new Promise((resolve) => this.#drain.push(resolve));
+        }
+    }
+    end() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        while (this.#pending.length) {
+            this.#rejects.shift();
+            this.#pending.shift()({ value: undefined, done: true });
+        }
+        this.#releaseDrain();
+    }
+    fail(reason) {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        this.#failure = reason;
+        while (this.#pending.length) {
+            this.#pending.shift();
+            const reject = this.#rejects.shift();
+            reject?.(reason);
+        }
+        this.#releaseDrain();
+    }
+    #releaseDrain() {
+        while (this.#drain.length)
+            this.#drain.shift()();
+    }
+    async *[Symbol.asyncIterator]() {
+        for (;;) {
+            if (this.#queue.length > 0) {
+                const value = this.#queue.shift();
+                this.#releaseDrain();
+                yield value;
+                continue;
+            }
+            if (this.#failure !== undefined)
+                throw this.#failure;
+            if (this.#closed)
+                return;
+            const next = await new Promise((resolve, reject) => {
+                this.#pending.push(resolve);
+                this.#rejects.push(reject);
+            });
+            if (next.done) {
+                if (this.#failure !== undefined)
+                    throw this.#failure;
+                return;
+            }
+            yield next.value;
+        }
+    }
+}
+export function createStreamContext(signal, highWaterMark = 64) {
+    const channel = new AsyncChannel(highWaterMark);
+    const onAbort = () => channel.fail(abortReason(signal));
+    if (signal.aborted)
+        queueMicrotask(onAbort);
+    else
+        signal.addEventListener("abort", onAbort, { once: true });
+    return {
+        write: (chunk) => channel.push(chunk),
+        end: () => channel.end(),
+        fail: (error) => channel.fail(error),
+        signal,
+        get closed() {
+            return channel.closed;
+        },
+        [Symbol.asyncIterator]: () => channel[Symbol.asyncIterator]()
+    };
+}
+export function abortReason(signal) {
+    const reason = signal.reason;
+    if (AppPortError.is(reason))
+        return reason;
+    return errors.cancelled();
+}
+/** Turns any iterable, sync or async, into an async iterable. */
+export async function* toAsyncIterable(source) {
+    if (Symbol.asyncIterator in source) {
+        yield* source;
+        return;
+    }
+    for (const value of source)
+        yield value;
+}
+//# sourceMappingURL=streams.js.map

package/node_modules/@appport/core/dist/streams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACd,MAAM,GAAQ,EAAE,CAAC;IACjB,QAAQ,GAA+C,EAAE,CAAC;IAC1D,QAAQ,GAAqC,EAAE,CAAC;IAChD,MAAM,GAAsB,EAAE,CAAC;IAC/B,cAAc,CAAS;IAChC,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,CAAU;IAElB,YAAY,aAAa,GAAG,EAAE;QAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAQ;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAG,CAAC,EAAE,KAAK,EAAE,SAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,MAAe;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3B,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC;gBACnC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC;YACrD,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAmBD,MAAM,UAAU,mBAAmB,CAAQ,MAAmB,EAAE,aAAa,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG,IAAI,YAAY,CAAQ,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO;QAAE,cAAc,CAAC,OAAO,CAAC,CAAC;;QACvC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACrC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACxB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACpC,MAAM;QACN,IAAI,MAAM;YACR,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,eAAe,CAAI,MAAsC;IAC9E,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC;QACnC,KAAK,CAAC,CAAC,MAA0B,CAAC;QAClC,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAqB;QAAE,MAAM,KAAK,CAAC;AACzD,CAAC"}

package/node_modules/@appport/core/dist/telemetry.d.ts

@@ -0,0 +1,42 @@
+import type { ErrorCode } from "@appport/protocol";
+/**
+ * Structured telemetry for one dispatched request (specification §53).
+ *
+ * The record carries identifiers and outcomes — never credentials, tokens or
+ * payload bodies. Implementations that want payload capture must opt in
+ * explicitly and are responsible for redaction.
+ */
+export interface TelemetryRecord {
+    requestId: string;
+    traceId: string;
+    applicationId: string;
+    capability: string;
+    version: number;
+    kind: "request" | "stream";
+    transport: string;
+    /** Principal identifier, when a principal is present. Never a credential. */
+    principal?: string;
+    sessionId?: string;
+    startTime: number;
+    durationMs: number;
+    success: boolean;
+    errorCode?: ErrorCode;
+    /** Chunks emitted, for stream capabilities. */
+    chunks?: number;
+    /** True when the response was served from the idempotency store (§44). */
+    idempotentReplay?: boolean;
+}
+export interface TelemetrySink {
+    record(entry: TelemetryRecord): void;
+}
+export declare const noopTelemetry: TelemetrySink;
+/** Collects records in memory. Useful in tests and in `appport dev`. */
+export declare class MemoryTelemetry implements TelemetrySink {
+    #private;
+    readonly entries: TelemetryRecord[];
+    constructor(limit?: number);
+    record(entry: TelemetryRecord): void;
+    clear(): void;
+}
+export declare function combineTelemetry(sinks: readonly TelemetrySink[]): TelemetrySink;
+//# sourceMappingURL=telemetry.d.ts.map

package/node_modules/@appport/core/dist/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CACtC;AAED,eAAO,MAAM,aAAa,EAAE,aAAoC,CAAC;AAEjE,wEAAwE;AACxE,qBAAa,eAAgB,YAAW,aAAa;;IACnD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,CAAM;gBAG7B,KAAK,SAAM;IAIvB,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAKpC,KAAK,IAAI,IAAI;CAGd;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,CAY/E"}

package/node_modules/@appport/core/dist/telemetry.js

@@ -0,0 +1,32 @@
+export const noopTelemetry = { record: () => { } };
+/** Collects records in memory. Useful in tests and in `appport dev`. */
+export class MemoryTelemetry {
+    entries = [];
+    #limit;
+    constructor(limit = 500) {
+        this.#limit = limit;
+    }
+    record(entry) {
+        this.entries.push(entry);
+        if (this.entries.length > this.#limit)
+            this.entries.shift();
+    }
+    clear() {
+        this.entries.length = 0;
+    }
+}
+export function combineTelemetry(sinks) {
+    return {
+        record(entry) {
+            for (const sink of sinks) {
+                try {
+                    sink.record(entry);
+                }
+                catch {
+                    // Telemetry must never break a request.
+                }
+            }
+        }
+    };
+}
+//# sourceMappingURL=telemetry.js.map

package/node_modules/@appport/core/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAkCA,MAAM,CAAC,MAAM,aAAa,GAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AAEjE,wEAAwE;AACxE,MAAM,OAAO,eAAe;IACjB,OAAO,GAAsB,EAAE,CAAC;IACzC,MAAM,CAAS;IAEf,YAAY,KAAK,GAAG,GAAG;QACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,KAAsB;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA+B;IAC9D,OAAO;QACL,MAAM,CAAC,KAAK;YACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@appport/core/dist/wasm-engine.d.ts

@@ -0,0 +1,22 @@
+/**
+ * WASM Execution Engine Implementation (PR26)
+ *
+ * Materializes ExecutableArtifacts into ephemeral WASM instances.
+ * Uses Node.js native WebAssembly API with managed resource limits.
+ */
+import type { ExecutableArtifact } from "./artifact.js";
+import { type AuthorizedCapabilityBinding } from "./binding.js";
+import type { CapabilityContext } from "./context.js";
+import { type ExecutionInstance, type ExecutionInstanceResult, type ExecutionEngine, type ExecutionRequest, type ExecutionObservationRecord } from "./execution.js";
+/**
+ * WASM Execution Engine: materializes artifacts into ephemeral instances.
+ */
+export declare class WasmExecutionEngine implements ExecutionEngine {
+    #private;
+    execute<TOutput = unknown>(request: ExecutionRequest, context: CapabilityContext): Promise<{
+        result: ExecutionInstanceResult<TOutput>;
+        observation: ExecutionObservationRecord;
+    }>;
+    acquireInstance(artifact: ExecutableArtifact, binding: AuthorizedCapabilityBinding, context: CapabilityContext): Promise<ExecutionInstance>;
+}
+//# sourceMappingURL=wasm-engine.d.ts.map

package/node_modules/@appport/core/dist/wasm-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm-engine.d.ts","sourceRoot":"","sources":["../src/wasm-engine.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAiC,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAI/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAKhC,MAAM,gBAAgB,CAAC;AAkSxB;;GAEG;AACH,qBAAa,mBAAoB,YAAW,eAAe;;IAOnD,OAAO,CAAC,OAAO,GAAG,OAAO,EAC7B,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;QACT,MAAM,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACzC,WAAW,EAAE,0BAA0B,CAAC;KACzC,CAAC;IA0DI,eAAe,CACnB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,2BAA2B,EACpC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC;CA6E9B"}