@appport/sdk 1.0.1

package/node_modules/@appport/schema/dist/standard.js

@@ -0,0 +1,42 @@
+export function isStandardSchema(value) {
+    return typeof value === "object" && value !== null && "~standard" in value;
+}
+function toIssuePath(path, base) {
+    if (!path)
+        return base;
+    return [
+        ...base,
+        ...path.map((segment) => {
+            const key = typeof segment === "object" && segment !== null ? segment.key : segment;
+            return typeof key === "number" ? key : String(key);
+        })
+    ];
+}
+/**
+ * Adapts a Standard Schema (Zod, Valibot, …) to the AppPort schema contract.
+ *
+ * Validation must be synchronous: AppPort validates inside the dispatch
+ * pipeline, and an async validator would change request ordering semantics.
+ */
+export function fromStandardSchema(schema, options = {}) {
+    const jsonSchema = options.jsonSchema ?? { "x-appport-schema": "opaque", description: "Schema not published" };
+    return {
+        appport: "schema",
+        validate(value, path = []) {
+            const result = schema["~standard"].validate(value);
+            if (result instanceof Promise) {
+                throw new TypeError("AppPort requires synchronous schema validation; this Standard Schema returned a Promise");
+            }
+            if (result.issues && result.issues.length > 0) {
+                const issues = result.issues.map((entry) => ({
+                    path: toIssuePath(entry.path, path),
+                    message: entry.message
+                }));
+                return { ok: false, issues };
+            }
+            return { ok: true, value: result.value };
+        },
+        toJSONSchema: () => jsonSchema
+    };
+}
+//# sourceMappingURL=standard.js.map

package/node_modules/@appport/schema/dist/standard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard.js","sourceRoot":"","sources":["../src/standard.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,IAAK,KAAgB,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAClB,IAAmE,EACnE,IAAe;IAEf,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,GAAG,IAAI;QACP,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YACtB,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyC,EACzC,UAAkC,EAAE;IAEpC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,IAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAiB,CAAC;IAE9G,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,QAAQ,CAAC,KAAc,EAAE,OAAkB,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,SAAS,CACjB,yFAAyF,CAC1F,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAsB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC9D,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,CAAC;QACrD,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC"}

package/node_modules/@appport/schema/dist/types.d.ts

@@ -0,0 +1,40 @@
+import type { JSONSchema } from "@appport/protocol";
+/** Path to the offending value inside a validated payload. */
+export type IssuePath = Array<string | number>;
+export interface ValidationIssue {
+    path: IssuePath;
+    message: string;
+    /** Optional machine-readable reason, e.g. `type`, `required`, `pattern`. */
+    code?: string;
+}
+export type ValidationResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    issues: ValidationIssue[];
+};
+/**
+ * The schema contract used by the AppPort runtime.
+ *
+ * A schema does two things: it validates an unknown value at runtime, and it
+ * renders itself as JSON Schema so the manifest stays language-neutral (§32).
+ */
+export interface Schema<T = unknown> {
+    readonly appport: "schema";
+    /** True when the schema is used as an optional object property. */
+    readonly isOptional?: boolean;
+    validate(value: unknown, path?: IssuePath): ValidationResult<T>;
+    toJSONSchema(): JSONSchema;
+}
+export type Infer<S> = S extends Schema<infer T> ? T : never;
+export declare function isSchema(value: unknown): value is Schema;
+/** Renders issues into a compact, non-sensitive detail payload for errors. */
+export declare function issuesToDetails(issues: ValidationIssue[]): {
+    issues: Array<{
+        path: string;
+        message: string;
+    }>;
+};
+export declare function formatIssues(issues: ValidationIssue[]): string;
+//# sourceMappingURL=types.d.ts.map

package/node_modules/@appport/schema/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,8DAA8D;AAC9D,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,WAAW,MAAM,CAAC,CAAC,GAAG,OAAO;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAChE,YAAY,IAAI,UAAU,CAAC;CAC5B;AAED,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAE7D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAO/G;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAK9D"}

package/node_modules/@appport/schema/dist/types.js

@@ -0,0 +1,19 @@
+export function isSchema(value) {
+    return typeof value === "object" && value !== null && value.appport === "schema";
+}
+/** Renders issues into a compact, non-sensitive detail payload for errors. */
+export function issuesToDetails(issues) {
+    return {
+        issues: issues.slice(0, 25).map((issue) => ({
+            path: issue.path.length === 0 ? "" : issue.path.map(String).join("."),
+            message: issue.message
+        }))
+    };
+}
+export function formatIssues(issues) {
+    return issues
+        .slice(0, 5)
+        .map((issue) => (issue.path.length ? `${issue.path.map(String).join(".")}: ${issue.message}` : issue.message))
+        .join("; ");
+}
+//# sourceMappingURL=types.js.map

package/node_modules/@appport/schema/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA8BA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAgB,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC/F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,MAAyB;IACvD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACrE,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,MAAM;SACV,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAC7G,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/node_modules/@appport/schema/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@appport/schema",
+  "version": "1.0.0",
+  "description": "Schema adapters and JSON Schema generation for AppPort capabilities.",
+  "license": "Apache-2.0",
+  "repository": "github:rkendel1/appport",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@appport/protocol": "1.0.0"
+  },
+  "private": true
+}

package/node_modules/@appport/server/README.md

@@ -0,0 +1,39 @@
+# @appport/server
+
+The server-side protocol runtime and its web bindings.
+
+```ts
+import { createServer } from "@appport/server";
+import { serve } from "@appport/server/node";
+
+const server = createServer({
+  application,
+  authenticate: ({ sessionId }) => sessions.resolve(sessionId)
+});
+
+const running = await serve({ server, port: 4400, cors: { origins: "*" } });
+```
+
+`serve` exposes, against one capability server:
+
+| Route                    | Purpose                                 |
+| ------------------------ | --------------------------------------- |
+| `POST /appport`          | requests, and streams as NDJSON          |
+| `GET /appport/events`    | events as Server-Sent Events             |
+| `GET /appport/manifest`  | the manifest                             |
+| `GET /.well-known/appport` | discovery                              |
+| `WS /appport/ws`         | the WebSocket binding                    |
+
+The WebSocket endpoint is a dependency-free RFC 6455 implementation: framing,
+fragmentation, ping/pong and close, with one AppPort envelope per message.
+
+`AppPortConnection` is the duplex half used by WebSocket, IPC and in-process
+transports. It owns subscription and stream bookkeeping, so unsubscribe releases
+resources and cancellation reaches the handler.
+
+For edge runtimes, `createFetchHandler(binding)` returns a standard
+`(Request) => Promise<Response>`.
+
+`authenticate` resolves an identity from transport-supplied credentials. AppPort
+does not authenticate; it represents the resulting identity, and authorizes every
+capability regardless of which transport delivered it.

package/node_modules/@appport/server/dist/connection.d.ts

@@ -0,0 +1,45 @@
+import { type ClientEnvelope, type ServerEnvelope, type Principal, type Session } from "@appport/protocol";
+import { type AppPortApplication } from "@appport/core/server-internal";
+export type SendEnvelope = (envelope: ServerEnvelope) => void | Promise<void>;
+export interface ConnectionOptions {
+    application: AppPortApplication;
+    /** Transport kind, recorded for telemetry. Never a source of trust (§37). */
+    transport: string;
+    send: SendEnvelope;
+    session?: Session;
+    principal?: Principal;
+    maxEnvelopeBytes?: number;
+    /** Capability/event names this transport surface may reach. */
+    allowedCapabilities?: ReadonlySet<string>;
+}
+/**
+ * One duplex client connection.
+ *
+ * Connections exist for transports that can push (WebSocket, IPC, in-process).
+ * They own the subscription and stream bookkeeping the protocol requires:
+ * unsubscribe releases resources (§18), cancellation terminates the underlying
+ * operation (§21).
+ */
+export declare class AppPortConnection {
+    #private;
+    readonly transport: string;
+    constructor(options: ConnectionOptions);
+    get session(): Session | undefined;
+    get closed(): boolean;
+    get openStreamCount(): number;
+    get subscriptionCount(): number;
+    /** Binds an authenticated identity to this connection. */
+    authenticate(identity: {
+        session?: Session;
+        principal?: Principal;
+    }): void;
+    /** Accepts a raw text frame. */
+    accept(raw: string): Promise<void>;
+    /** Accepts an already-decoded envelope value (IPC and in-process transports). */
+    acceptValue(value: unknown): Promise<void>;
+    /** Routes a validated client envelope. */
+    handle(envelope: ClientEnvelope): Promise<void>;
+    /** Releases every subscription and stream held by this connection. */
+    close(): void;
+}
+//# sourceMappingURL=connection.d.ts.map

package/node_modules/@appport/server/dist/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAaL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,OAAO,EACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAe,KAAK,kBAAkB,EAAwB,MAAM,+BAA+B,CAAC;AAE3G,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9E,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,kBAAkB,CAAC;IAChC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC3C;AAOD;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAWf,OAAO,EAAE,iBAAiB;IAUtC,IAAI,OAAO,IAAI,OAAO,GAAG,SAAS,CAEjC;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,0DAA0D;IAC1D,YAAY,CAAC,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAE,GAAG,IAAI;IAK1E,gCAAgC;IAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxC,iFAAiF;IAC3E,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAahD,0CAA0C;IACpC,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CrD,sEAAsE;IACtE,KAAK,IAAI,IAAI;CAgHd"}

package/node_modules/@appport/server/dist/connection.js

@@ -0,0 +1,217 @@
+import { AppPortError, createErrorResponse, createStreamChunk, createStreamEnd, createStreamStart, createSuccessResponse, decodeEnvelopeText, errors, parseClientEnvelope, peekRequestId, peekTraceId } from "@appport/protocol";
+import { grantsPermission } from "@appport/authorization";
+import { toWireError } from "@appport/core/server-internal";
+/**
+ * One duplex client connection.
+ *
+ * Connections exist for transports that can push (WebSocket, IPC, in-process).
+ * They own the subscription and stream bookkeeping the protocol requires:
+ * unsubscribe releases resources (§18), cancellation terminates the underlying
+ * operation (§21).
+ */
+export class AppPortConnection {
+    transport;
+    #application;
+    #send;
+    #subscriptions = new Map();
+    #streams = new Map();
+    #maxEnvelopeBytes;
+    #allowedCapabilities;
+    #session;
+    #principal;
+    #closed = false;
+    constructor(options) {
+        this.#application = options.application;
+        this.transport = options.transport;
+        this.#send = options.send;
+        this.#session = options.session;
+        this.#principal = options.principal;
+        this.#maxEnvelopeBytes = options.maxEnvelopeBytes;
+        this.#allowedCapabilities = options.allowedCapabilities;
+    }
+    get session() {
+        return this.#session;
+    }
+    get closed() {
+        return this.#closed;
+    }
+    get openStreamCount() {
+        return this.#streams.size;
+    }
+    get subscriptionCount() {
+        return this.#subscriptions.size;
+    }
+    /** Binds an authenticated identity to this connection. */
+    authenticate(identity) {
+        this.#session = identity.session;
+        this.#principal = identity.principal ?? identity.session?.principal;
+    }
+    /** Accepts a raw text frame. */
+    async accept(raw) {
+        let value;
+        try {
+            value = decodeEnvelopeText(raw, this.#maxEnvelopeBytes ? { maxBytes: this.#maxEnvelopeBytes } : {});
+        }
+        catch (error) {
+            await this.#fail(undefined, undefined, error);
+            return;
+        }
+        await this.acceptValue(value);
+    }
+    /** Accepts an already-decoded envelope value (IPC and in-process transports). */
+    async acceptValue(value) {
+        const requestId = peekRequestId(value);
+        const traceId = peekTraceId(value);
+        let envelope;
+        try {
+            envelope = parseClientEnvelope(value);
+        }
+        catch (error) {
+            await this.#fail(requestId, traceId, error);
+            return;
+        }
+        await this.handle(envelope);
+    }
+    /** Routes a validated client envelope. */
+    async handle(envelope) {
+        if (this.#closed)
+            return;
+        const target = envelope.type === "request" || envelope.type === "stream.request"
+            ? envelope.capability.name
+            : envelope.type === "subscribe"
+                ? envelope.event.name
+                : undefined;
+        if (target && this.#allowedCapabilities && target !== "appport.manifest" && target !== "appport.ping" && !this.#allowedCapabilities.has(target)) {
+            await this.#emit(createErrorResponse(peekRequestId(envelope) ?? "req_unknown", errors.forbidden(`${target} is not exposed to this surface`).toErrorObject()));
+            return;
+        }
+        switch (envelope.type) {
+            case "request": {
+                const response = await this.#application.handleRequest(envelope, this.#dispatchOptions());
+                await this.#emit(response);
+                return;
+            }
+            case "stream.request": {
+                await this.#startStream(envelope);
+                return;
+            }
+            case "subscribe": {
+                await this.#subscribe(envelope);
+                return;
+            }
+            case "unsubscribe": {
+                const release = this.#subscriptions.get(envelope.subscriptionId);
+                release?.();
+                this.#subscriptions.delete(envelope.subscriptionId);
+                await this.#emit(createSuccessResponse(envelope.requestId, { subscriptionId: envelope.subscriptionId, active: false }));
+                return;
+            }
+            case "stream.cancel": {
+                const active = this.#streams.get(envelope.streamId);
+                active?.execution.cancel(envelope.reason);
+                active?.abort.abort();
+                return;
+            }
+        }
+    }
+    /** Releases every subscription and stream held by this connection. */
+    close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        for (const release of this.#subscriptions.values())
+            release();
+        this.#subscriptions.clear();
+        for (const active of this.#streams.values()) {
+            active.execution.cancel("Connection closed");
+            active.abort.abort();
+        }
+        this.#streams.clear();
+    }
+    #dispatchOptions() {
+        return {
+            ...(this.#session ? { session: this.#session } : {}),
+            ...(this.#principal ? { principal: this.#principal } : {}),
+            transport: this.transport
+        };
+    }
+    async #subscribe(envelope) {
+        const name = envelope.event.name;
+        const definition = name === "*" ? undefined : this.#application.registry.getEvent(name, envelope.event.version);
+        const required = definition?.authorization ?? [];
+        const granted = this.#session?.permissions ?? [];
+        if (required.length > 0 && !required.every((permission) => grantsPermission(granted, permission))) {
+            const error = this.#principal
+                ? errors.forbidden(`Missing permission to observe ${name}`)
+                : errors.unauthorized();
+            await this.#emit(createErrorResponse(envelope.requestId, error.toErrorObject()));
+            return;
+        }
+        if (this.#subscriptions.has(envelope.subscriptionId)) {
+            await this.#emit(createErrorResponse(envelope.requestId, errors.conflict(`Subscription ${envelope.subscriptionId} already exists`).toErrorObject()));
+            return;
+        }
+        const release = this.#application.subscribe(envelope.event.version === undefined ? { name } : { name, version: envelope.event.version }, (event) => {
+            void this.#emit({ ...event, subscriptionId: envelope.subscriptionId });
+        }, envelope.subscriptionId);
+        this.#subscriptions.set(envelope.subscriptionId, release);
+        await this.#emit(createSuccessResponse(envelope.requestId, { subscriptionId: envelope.subscriptionId, active: true }));
+    }
+    async #startStream(envelope) {
+        const abort = new AbortController();
+        let execution;
+        try {
+            execution = await this.#application.handleStreamRequest(envelope, {
+                ...this.#dispatchOptions(),
+                signal: abort.signal
+            });
+        }
+        catch (error) {
+            await this.#fail(envelope.requestId, envelope.traceId, error);
+            return;
+        }
+        const streamId = execution.streamId;
+        this.#streams.set(streamId, { execution, abort });
+        await this.#emit(createStreamStart(envelope.requestId, streamId, envelope.traceId));
+        void (async () => {
+            let sequence = 0;
+            try {
+                for await (const chunk of execution.chunks) {
+                    if (this.#closed)
+                        break;
+                    await this.#emit(createStreamChunk(streamId, sequence, chunk));
+                    sequence += 1;
+                }
+                await this.#emit(createStreamEnd(streamId));
+            }
+            catch (error) {
+                await this.#emit(createStreamEnd(streamId, toWireError(error, this.#application.mode)));
+            }
+            finally {
+                this.#streams.delete(streamId);
+            }
+        })();
+    }
+    async #fail(requestId, traceId, error) {
+        const wire = toWireError(error, this.#application.mode);
+        await this.#emit(createErrorResponse(requestId ?? "req_unknown", wire, traceId ? { traceId } : {}));
+        if (!AppPortError.is(error)) {
+            this.#application.logger.error("connection failed to handle an envelope", { transport: this.transport });
+        }
+    }
+    async #emit(envelope) {
+        if (this.#closed)
+            return;
+        try {
+            await this.#send(envelope);
+        }
+        catch (error) {
+            this.#application.logger.warn("failed to deliver an envelope", {
+                transport: this.transport,
+                type: envelope.type,
+                reason: error instanceof Error ? error.name : "unknown"
+            });
+        }
+    }
+}
+//# sourceMappingURL=connection.js.map

package/node_modules/@appport/server/dist/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,MAAM,EACN,mBAAmB,EACnB,aAAa,EACb,WAAW,EAMZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAiD,MAAM,+BAA+B,CAAC;AAqB3G;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAClB,YAAY,CAAqB;IACjC,KAAK,CAAe;IACpB,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,iBAAiB,CAAqB;IACtC,oBAAoB,CAAkC;IAC/D,QAAQ,CAAsB;IAC9B,UAAU,CAAwB;IAClC,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAA0B;QACpC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,QAAsD;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IACtE,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,MAAM,CAAC,QAAwB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB;YAC9E,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW;gBAC7B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;gBACrB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,MAAM,IAAI,IAAI,CAAC,oBAAoB,IAAI,MAAM,KAAK,kBAAkB,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChJ,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,iCAAiC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9J,OAAO;QACT,CAAC;QACD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACjE,OAAO,EAAE,EAAE,CAAC;gBACZ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CACd,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACtG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAwD;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChH,MAAM,QAAQ,GAAG,UAAU,EAAE,aAAa,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU;gBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iCAAiC,IAAI,EAAE,CAAC;gBAC3D,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,KAAK,CACd,mBAAmB,CACjB,QAAQ,CAAC,SAAS,EAClB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,QAAQ,CAAC,cAAc,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAC1F,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CACzC,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAC3F,CAAC,KAAuB,EAAE,EAAE;YAC1B,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC,EACD,QAAQ,CAAC,cAAc,CACxB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CACrG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAA6D;QAC9E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,SAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBAChE,GAAG,IAAI,CAAC,gBAAgB,EAAE;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBAC3C,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM;oBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC/D,QAAQ,IAAI,CAAC,CAAC;gBAChB,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1F,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAA6B,EAAE,OAA2B,EAAE,KAAc;QACpF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,KAAK,CACd,mBAAmB,CAAC,SAAS,IAAI,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAwB;QAClC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/node_modules/@appport/server/dist/fetch.d.ts

@@ -0,0 +1,10 @@
+import { HttpBinding } from "./http.js";
+/**
+ * A WHATWG `fetch` handler for the HTTP binding.
+ *
+ * Works anywhere `Request`/`Response` exist — Deno, Bun, Cloudflare Workers,
+ * Node's `node:http` via an adapter — which keeps the HTTP binding portable
+ * without dragging a server framework into the protocol (§73).
+ */
+export declare function createFetchHandler(binding: HttpBinding): (request: Request) => Promise<Response>;
+//# sourceMappingURL=fetch.d.ts.map

package/node_modules/@appport/server/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,WAAW,CAAC;AAE9D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA4ChG"}

package/node_modules/@appport/server/dist/fetch.js

@@ -0,0 +1,50 @@
+import { HttpBinding } from "./http.js";
+/**
+ * A WHATWG `fetch` handler for the HTTP binding.
+ *
+ * Works anywhere `Request`/`Response` exist — Deno, Bun, Cloudflare Workers,
+ * Node's `node:http` via an adapter — which keeps the HTTP binding portable
+ * without dragging a server framework into the protocol (§73).
+ */
+export function createFetchHandler(binding) {
+    return async (request) => {
+        const url = new URL(request.url);
+        const headers = {};
+        request.headers.forEach((value, key) => {
+            headers[key.toLowerCase()] = value;
+        });
+        const httpRequest = {
+            method: request.method,
+            path: url.pathname,
+            query: url.searchParams,
+            headers,
+            body: request.method === "POST" ? await request.text() : "",
+            signal: request.signal
+        };
+        const outcome = await binding.route(httpRequest);
+        if (outcome.kind === "json") {
+            return new Response(JSON.stringify(outcome.body), { status: outcome.status, headers: outcome.headers });
+        }
+        if (outcome.kind === "text") {
+            return new Response(outcome.body, { status: outcome.status, headers: outcome.headers });
+        }
+        const encoder = new TextEncoder();
+        const iterator = outcome.frames[Symbol.asyncIterator]();
+        const body = new ReadableStream({
+            async pull(controller) {
+                const next = await iterator.next();
+                if (next.done) {
+                    controller.close();
+                    return;
+                }
+                controller.enqueue(encoder.encode(next.value));
+            },
+            cancel() {
+                outcome.cancel();
+                void iterator.return?.();
+            }
+        });
+        return new Response(body, { status: outcome.status, headers: outcome.headers });
+    };
+}
+//# sourceMappingURL=fetch.js.map

package/node_modules/@appport/server/dist/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,WAAW,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACrD,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAuC,EAAE,CAAC;QACvD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAoB;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,KAAK,EAAE,GAAG,CAAC,YAAY;YACvB,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,cAAc,CAAa;YAC1C,KAAK,CAAC,IAAI,CAAC,UAAU;gBACnB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,MAAM;gBACJ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@appport/server/dist/http.d.ts

@@ -0,0 +1,80 @@
+import { type ErrorCode } from "@appport/protocol";
+import type { AppPortServer } from "./server.js";
+/**
+ * HTTP binding (specification §25, §26).
+ *
+ * One endpoint, `POST /appport`, carries every capability. Streams are answered
+ * as newline-delimited envelopes and events as Server-Sent Events, so a plain
+ * HTTP deployment still reaches conformance level 3 without WebSocket.
+ */
+export declare const APPPORT_CONTENT_TYPE = "application/json";
+export declare const NDJSON_CONTENT_TYPE = "application/x-ndjson";
+export declare const SSE_CONTENT_TYPE = "text/event-stream";
+/** Header carrying a session identifier. Deployments may use cookies instead. */
+export declare const SESSION_HEADER = "x-appport-session";
+export declare function originMatches(origin: string, allowed: string): boolean;
+/**
+ * Recommended AppPort → HTTP status mapping (§26).
+ *
+ * `mapped` follows the table. `protocol` answers 200 for every well-formed
+ * envelope and reserves non-2xx for transport-level failures, which keeps
+ * application status strictly separate from transport status.
+ */
+export type StatusMode = "mapped" | "protocol";
+export declare function statusForError(code: ErrorCode, mode?: StatusMode): number;
+export interface HttpRequestLike {
+    method: string;
+    /** Path without query string. */
+    path: string;
+    query?: URLSearchParams;
+    headers?: Readonly<Record<string, string | undefined>>;
+    /** Raw request body, already decoded as UTF-8 text. */
+    body?: string;
+    /** Aborted when the client disconnects. */
+    signal?: AbortSignal;
+}
+export type HttpOutcome = {
+    kind: "json";
+    status: number;
+    headers: Record<string, string>;
+    body: unknown;
+} | {
+    kind: "text";
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+} | {
+    kind: "stream";
+    status: number;
+    headers: Record<string, string>;
+    /** Encoded frames, ready to write. */
+    frames: AsyncIterable<string>;
+    cancel(): void;
+};
+export interface HttpBindingOptions {
+    server: AppPortServer;
+    statusMode?: StatusMode;
+    /** Allowed origins for browser clients. Omit to send no CORS headers. */
+    cors?: {
+        origins: readonly string[] | "*";
+        credentials?: boolean;
+    };
+    /** Maximum accepted request body size in bytes. */
+    maxBodyBytes?: number;
+    /** Reject browser origins outside this list. Supports localhost `:*` patterns. */
+    allowedOrigins?: readonly string[];
+    /** Capability and event names exposed through this binding. */
+    allowedCapabilities?: readonly string[];
+}
+export declare class HttpBinding {
+    #private;
+    readonly server: AppPortServer;
+    readonly statusMode: StatusMode;
+    constructor(options: HttpBindingOptions);
+    /** True when this binding serves the given path. */
+    handles(path: string): boolean;
+    corsHeaders(origin: string | undefined): Record<string, string>;
+    route(request: HttpRequestLike): Promise<HttpOutcome>;
+}
+export declare function createHttpBinding(options: HttpBindingOptions): HttpBinding;
+//# sourceMappingURL=http.d.ts.map

package/node_modules/@appport/server/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAYL,KAAK,SAAS,EAEf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,aAAa,CAAC;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AAEpD,iFAAiF;AACjF,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAElD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAUtE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AA8B/C,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,GAAE,UAAqB,GAAG,MAAM,CAGnF;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACvD,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sCAAsC;IACtC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,IAAI,IAAI,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,yEAAyE;IACzE,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACnE,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,qBAAa,WAAW;;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;gBAMpB,OAAO,EAAE,kBAAkB;IASvC,oDAAoD;IACpD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU9B,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAkBzD,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;CAkO5D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}