@appport/sdk 1.1.17 → 1.1.19

package/vendor/@appport/core/dist/execution.d.ts

@@ -1,387 +0,0 @@
-/**
- * Ephemeral WASM Execution Runtime (PR26)
- *
- * The execution engine layer that materializes ExecutableArtifacts into
- * ephemeral WASM instances, executes capabilities, and destroys instances
- * after completion.
- *
- * CRITICAL INVARIANT:
- * - Every execution produces exactly one instance
- * - Every instance has an explicit lifecycle (CREATED → READY → RUNNING → COMPLETED/FAILED/CANCELLED → DESTROYED)
- * - After any outcome (success, failure, cancellation, timeout), running instances = 0
- * - Instances are never reused or pooled
- * - Memory is isolated per instance
- * - Guest code cannot access host resources (filesystem, network, etc.)
- *
- * The execution engine bridges:
- *   AuthorizedCapabilityBinding
- *       ↓
- *   ExecutionEngine.execute()
- *       ↓
- *   ExecutionInstance (ephemeral WASM)
- *       ↓
- *   ExecutionResult + ExecutionObservationRecord
- *       ↓
- *   instance.destroy()
- *       ↓
- *   running instances = 0
- */
-import type { ExecutableArtifact } from "./artifact.js";
-import type { CapabilityContext } from "./context.js";
-import type { AuthorizedCapabilityBinding } from "./binding.js";
-/**
- * Explicit lifecycle state for an execution instance.
- *
- * Valid state transitions:
- * CREATED → READY → RUNNING → COMPLETED
- * CREATED → READY → RUNNING → FAILED
- * CREATED → READY → RUNNING → CANCELLED
- * CREATED → READY → RUNNING → TIMED_OUT
- * (any state) → DESTROYED (idempotent)
- *
- * Invalid transitions must throw InvalidStateTransitionError.
- * For example: DESTROYED → RUNNING must be rejected.
- */
-export declare enum ExecutionInstanceState {
-    /**
-     * Instance created but not yet instantiated.
-     * WASM module is not yet loaded.
-     */
-    CREATED = "CREATED",
-    /**
-     * WASM module instantiated and ready for execution.
-     * Instance has acquired resources (linear memory allocated).
-     */
-    READY = "READY",
-    /**
-     * Capability execution in progress.
-     * Guest code is running or suspended on host callback.
-     */
-    RUNNING = "RUNNING",
-    /**
-     * Execution completed successfully.
-     * Output has been validated and is available.
-     */
-    COMPLETED = "COMPLETED",
-    /**
-     * Execution failed (implementation error or validation failure).
-     * Error information is available; output is not.
-     */
-    FAILED = "FAILED",
-    /**
-     * Execution cancelled by host (AbortSignal fired).
-     * Cancellation reason is available.
-     */
-    CANCELLED = "CANCELLED",
-    /**
-     * Execution timed out (deadline exceeded).
-     * No result is available.
-     */
-    TIMED_OUT = "TIMED_OUT",
-    /**
-     * Instance destroyed and all resources released.
-     * Instance is no longer usable.
-     * This is the terminal state.
-     */
-    DESTROYED = "DESTROYED"
-}
-/**
- * Execution instance: a temporary materialization of an executable artifact.
- *
- * The instance is:
- * - Ephemeral: created for one execution, destroyed after
- * - Isolated: separate memory from other instances
- * - Bounded: subject to resource limits
- * - Safe: guest cannot access host resources
- *
- * NOT:
- * - Persistent
- * - Reusable
- * - Pooled
- * - Shared between invocations
- */
-export interface ExecutionInstance {
-    /**
-     * Unique identifier for this instance.
-     * Used for observability and debugging.
-     */
-    readonly instanceId: string;
-    /**
-     * Current lifecycle state of this instance.
-     */
-    readonly state: ExecutionInstanceState;
-    /**
-     * The artifact this instance materializes.
-     */
-    readonly artifact: ExecutableArtifact;
-    /**
-     * Timestamp when the instance was created (ISO 8601).
-     */
-    readonly createdAt: string;
-    /**
-     * Execute a capability on this instance.
-     *
-     * The instance must be in READY state.
-     * After execution, the instance transitions to COMPLETED, FAILED, CANCELLED, or TIMED_OUT.
-     *
-     * @param capabilityName The fully qualified capability name (e.g., "invoice.create")
-     * @param input The capability input (already validated by caller)
-     * @param context Execution context with signal, deadline, logger
-     * @returns The execution result (output or error)
-     * @throws InvalidStateTransitionError if instance is not in READY state
-     */
-    execute<TOutput = unknown>(capabilityName: string, input: unknown, context: CapabilityContext): Promise<ExecutionInstanceResult<TOutput>>;
-    /**
-     * Destroy the instance and release all resources.
-     *
-     * This is idempotent: calling destroy() multiple times is safe.
-     * After destruction:
-     * - Guest memory is inaccessible
-     * - Execution cannot resume
-     * - All host resources are released
-     * - Instance state transitions to DESTROYED
-     *
-     * @throws InvalidStateTransitionError only if called on a non-destroyable state
-     * (though in practice, destroy should be callable from any state for cleanup)
-     */
-    destroy(): Promise<void>;
-}
-/**
- * Result of executing a capability on an instance.
- *
- * CRITICAL: This result is produced INSIDE the execution engine
- * and is not directly returned to the caller. The invocation layer
- * wraps this in a CapabilityInvocationResult which adds binding/context
- * information and normalizes errors.
- */
-export type ExecutionInstanceResult<TOutput = unknown> = ExecutionInstanceSuccess<TOutput> | ExecutionInstanceFailure | ExecutionInstanceCancelled | ExecutionInstanceTimedOut;
-/**
- * Successful execution: the capability executed and produced output.
- */
-export interface ExecutionInstanceSuccess<TOutput = unknown> {
-    readonly kind: "success";
-    readonly output: TOutput;
-}
-/**
- * Failed execution: the implementation threw or produced invalid output.
- *
- * The error message should be normalized and safe to return to caller
- * (no internal stack traces or credentials).
- */
-export interface ExecutionInstanceFailure {
-    readonly kind: "failure";
-    readonly error: {
-        readonly message: string;
-        readonly code?: string;
-    };
-}
-/**
- * Cancelled execution: the host cancelled the execution via AbortSignal.
- */
-export interface ExecutionInstanceCancelled {
-    readonly kind: "cancelled";
-    readonly reason: string;
-}
-/**
- * Timed out execution: the deadline was exceeded during execution.
- */
-export interface ExecutionInstanceTimedOut {
-    readonly kind: "timed_out";
-    readonly reason: string;
-}
-/**
- * Execution request: parameters for executing a capability on an artifact.
- *
- * This captures the semantic identity of the execution without runtime handles.
- */
-export interface ExecutionRequest<TInput = unknown> {
-    /**
-     * The executable artifact to instantiate and execute.
-     */
-    readonly artifact: ExecutableArtifact;
-    /**
-     * The authorized binding permitting this execution.
-     */
-    readonly binding: AuthorizedCapabilityBinding;
-    /**
-     * The capability being invoked (must be in artifact.exports).
-     */
-    readonly capability: {
-        readonly name: string;
-        readonly version: number;
-    };
-    /**
-     * The input to pass to the capability (already validated by caller).
-     */
-    readonly input: TInput;
-    /** Optional host-owned durable state transaction correlated with this execution. */
-    readonly stateTransaction?: import("./state-context.js").ApplicationStateTransaction;
-    /**
-     * Optional implementation selected for this execution (F6).
-     *
-     * Present when the artifact was materialized from a verified application
-     * source. The selection is revalidated against durable authority before the
-     * artifact is materialized, and its provenance reaches the execution ledger.
-     */
-    readonly implementation?: import("./application-implementation.js").SelectedImplementation;
-}
-/**
- * Execution observation record: immutable record of execution for observability.
- *
- * This record is sufficient for:
- * - Audit trails
- * - Debugging
- * - Future analytics/metering
- * - Compliance logging
- *
- * It MUST NOT contain:
- * - Secrets or credentials
- * - Raw input/output (only hashes or summaries)
- * - Guest memory dumps
- * - Personal data
- */
-export interface ExecutionObservationRecord {
-    /** Unique execution identifier. */
-    readonly invocationId: string;
-    /** Application providing the capability. */
-    readonly providerId: string;
-    /** Application consuming the capability. */
-    readonly consumerId?: string;
-    /** Capability name. */
-    readonly capabilityName: string;
-    /** Capability version. */
-    readonly capabilityVersion: number;
-    /** SHA256 hash of artifact bytes. */
-    readonly artifactHash: string;
-    /** Contract fingerprint. */
-    readonly contractFingerprint: string;
-    /** Execution instance ID. */
-    readonly instanceId: string;
-    /** Timestamp when execution started (ISO 8601). */
-    readonly startedAt: string;
-    /** Timestamp when execution completed (ISO 8601). */
-    readonly completedAt: string;
-    /** Duration in milliseconds. */
-    readonly durationMs: number;
-    /** Execution outcome. */
-    readonly outcome: "success" | "failure" | "cancelled" | "timed_out";
-    /** Resource usage metrics. */
-    readonly resourceUsage?: {
-        /** Peak memory used by instance linear memory (bytes). */
-        readonly peakMemoryBytes?: number;
-        /** Approximate instruction count or fuel used. */
-        readonly instructionCount?: number;
-    };
-    /** State transaction metadata (PR27). */
-    readonly stateTransaction?: {
-        /** Unique transaction identifier. */
-        readonly transactionId: string;
-        /** Number of state read operations. */
-        readonly readCount: number;
-        /** Number of state write operations. */
-        readonly writeCount: number;
-        /** Number of state delete operations. */
-        readonly deleteCount: number;
-        /** Transaction commit status. */
-        readonly commitStatus: "committed" | "aborted" | "pending";
-        /** If commit failed, the error reason. */
-        readonly commitError?: string;
-    };
-}
-/**
- * Execution Engine: materializes artifacts into ephemeral WASM instances.
- *
- * The engine:
- * - Validates artifacts before instantiation
- * - Enforces resource limits
- * - Handles cancellation and timeout
- * - Produces execution observation records
- * - Ensures instances are destroyed after execution
- *
- * The engine does NOT:
- * - Persist or pool instances
- * - Cache or reuse compiled modules (for now; design for future optimization)
- * - Make authorization decisions (caller provides AuthorizedCapabilityBinding)
- * - Validate input or output (caller handles validation)
- */
-export interface ExecutionEngine {
-    /**
-     * Execute a capability through an execution request.
-     *
-     * Flow:
-     * 1. Acquire instance from artifact
-     * 2. Resolve capability export from artifact metadata
-     * 3. Execute capability on instance
-     * 4. Observe execution
-     * 5. Destroy instance
-     * 6. Return result + observation record
-     *
-     * @param request Execution request with artifact, binding, capability, input
-     * @param context Execution context with signal, deadline, logger
-     * @returns Execution result and observation record
-     */
-    execute<TOutput = unknown>(request: ExecutionRequest, context: CapabilityContext): Promise<{
-        result: ExecutionInstanceResult<TOutput>;
-        observation: ExecutionObservationRecord;
-    }>;
-    /**
-     * Acquire an execution instance from an artifact.
-     *
-     * Creates a new instance by:
-     * 1. Validating artifact (contract/content consistency)
-     * 2. Loading WASM bytes
-     * 3. Instantiating WASM module
-     * 4. Setting up host imports
-     * 5. Verifying all declared exports are present
-     *
-     * The instance is in READY state and can be executed.
-     *
-     * @param artifact The executable artifact
-     * @param binding The authorized binding (for identity context)
-     * @param context The execution context
-     * @returns A new ephemeral execution instance
-     * @throws ArtifactValidationError if artifact is invalid
-     * @throws MissingExportError if declared exports are missing
-     */
-    acquireInstance(artifact: ExecutableArtifact, binding: AuthorizedCapabilityBinding, context: CapabilityContext): Promise<ExecutionInstance>;
-}
-/**
- * Validate that execution uses exactly the authority granted by the issued
- * binding. Execution requests are caller-supplied data, so the runtime must not
- * trust request capability or artifact identity fields when they disagree with
- * the authoritative binding and registered provider state.
- */
-export declare function assertExecutionRequestAuthority(request: ExecutionRequest): void;
-/**
- * Artifact instantiation error: artifact failed validation or instantiation.
- *
- * This includes:
- * - WASM structural errors
- * - Contract fingerprint mismatch
- * - Export/capability mismatch
- * - Forbidden imports
- */
-export declare class ArtifactInstantiationError extends Error {
-    readonly message: string;
-    readonly artifactHash: string;
-    readonly details?: unknown | undefined;
-    constructor(message: string, artifactHash: string, details?: unknown | undefined);
-}
-/**
- * Missing export error: artifact doesn't export declared capability.
- */
-export declare class MissingExportError extends Error {
-    readonly capabilityName: string;
-    readonly artifactHash: string;
-    readonly availableExports: readonly string[];
-    constructor(capabilityName: string, artifactHash: string, availableExports: readonly string[]);
-}
-/**
- * Invalid state transition: instance lifecycle state change is not allowed.
- */
-export declare class InvalidStateTransitionError extends Error {
-    readonly fromState: ExecutionInstanceState;
-    readonly toState: ExecutionInstanceState;
-    constructor(fromState: ExecutionInstanceState, toState: ExecutionInstanceState);
-}
-//# sourceMappingURL=execution.d.ts.map

package/vendor/@appport/core/dist/execution.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAGhE;;;;;;;;;;;;GAYG;AACH,oBAAY,sBAAsB;IAChC;;;OAGG;IACH,OAAO,YAAY;IAEnB;;;OAGG;IACH,KAAK,UAAU;IAEf;;;OAGG;IACH,OAAO,YAAY;IAEnB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;OAGG;IACH,MAAM,WAAW;IAEjB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;OAGG;IACH,SAAS,cAAc;IAEvB;;;;OAIG;IACH,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IAEvC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO,GAAG,OAAO,EACvB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE7C;;;;;;;;;;;;OAYG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,CAAC,OAAO,GAAG,OAAO,IACjD,wBAAwB,CAAC,OAAO,CAAC,GACjC,wBAAwB,GACxB,0BAA0B,GAC1B,yBAAyB,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,wBAAwB,CAAC,OAAO,GAAG,OAAO;IACzD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB,CAAC,MAAM,GAAG,OAAO;IAChD;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAE9C;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,oFAAoF;IACpF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,oBAAoB,EAAE,2BAA2B,CAAC;IAErF;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,iCAAiC,EAAE,sBAAsB,CAAC;CAC5F;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,0BAA0B;IACzC,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,uBAAuB;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,0BAA0B;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,qCAAqC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,4BAA4B;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAErC,6BAA6B;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,gCAAgC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IAEpE,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,0DAA0D;QAC1D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,kDAAkD;QAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;IAEF,yCAAyC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,qCAAqC;QACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,uCAAuC;QACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,wCAAwC;QACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,yCAAyC;QACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,iCAAiC;QACjC,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;QAC3D,0CAA0C;QAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,OAAO,GAAG,OAAO,EACvB,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;QACT,MAAM,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACzC,WAAW,EAAE,0BAA0B,CAAC;KACzC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,CACb,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,2BAA2B,EACpC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAsC/E;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;aAExB,OAAO,EAAE,MAAM;aACxB,YAAY,EAAE,MAAM;aACpB,OAAO,CAAC,EAAE,OAAO;gBAFR,OAAO,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,cAAc,EAAE,MAAM;aACtB,YAAY,EAAE,MAAM;aACpB,gBAAgB,EAAE,SAAS,MAAM,EAAE;gBAFnC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,SAAS,MAAM,EAAE;CAKtD;AAED;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,SAAS,EAAE,sBAAsB;aACjC,OAAO,EAAE,sBAAsB;gBAD/B,SAAS,EAAE,sBAAsB,EACjC,OAAO,EAAE,sBAAsB;CAKlD"}

package/vendor/@appport/core/dist/execution.js

@@ -1,165 +0,0 @@
-/**
- * Ephemeral WASM Execution Runtime (PR26)
- *
- * The execution engine layer that materializes ExecutableArtifacts into
- * ephemeral WASM instances, executes capabilities, and destroys instances
- * after completion.
- *
- * CRITICAL INVARIANT:
- * - Every execution produces exactly one instance
- * - Every instance has an explicit lifecycle (CREATED → READY → RUNNING → COMPLETED/FAILED/CANCELLED → DESTROYED)
- * - After any outcome (success, failure, cancellation, timeout), running instances = 0
- * - Instances are never reused or pooled
- * - Memory is isolated per instance
- * - Guest code cannot access host resources (filesystem, network, etc.)
- *
- * The execution engine bridges:
- *   AuthorizedCapabilityBinding
- *       ↓
- *   ExecutionEngine.execute()
- *       ↓
- *   ExecutionInstance (ephemeral WASM)
- *       ↓
- *   ExecutionResult + ExecutionObservationRecord
- *       ↓
- *   instance.destroy()
- *       ↓
- *   running instances = 0
- */
-/**
- * Explicit lifecycle state for an execution instance.
- *
- * Valid state transitions:
- * CREATED → READY → RUNNING → COMPLETED
- * CREATED → READY → RUNNING → FAILED
- * CREATED → READY → RUNNING → CANCELLED
- * CREATED → READY → RUNNING → TIMED_OUT
- * (any state) → DESTROYED (idempotent)
- *
- * Invalid transitions must throw InvalidStateTransitionError.
- * For example: DESTROYED → RUNNING must be rejected.
- */
-export var ExecutionInstanceState;
-(function (ExecutionInstanceState) {
-    /**
-     * Instance created but not yet instantiated.
-     * WASM module is not yet loaded.
-     */
-    ExecutionInstanceState["CREATED"] = "CREATED";
-    /**
-     * WASM module instantiated and ready for execution.
-     * Instance has acquired resources (linear memory allocated).
-     */
-    ExecutionInstanceState["READY"] = "READY";
-    /**
-     * Capability execution in progress.
-     * Guest code is running or suspended on host callback.
-     */
-    ExecutionInstanceState["RUNNING"] = "RUNNING";
-    /**
-     * Execution completed successfully.
-     * Output has been validated and is available.
-     */
-    ExecutionInstanceState["COMPLETED"] = "COMPLETED";
-    /**
-     * Execution failed (implementation error or validation failure).
-     * Error information is available; output is not.
-     */
-    ExecutionInstanceState["FAILED"] = "FAILED";
-    /**
-     * Execution cancelled by host (AbortSignal fired).
-     * Cancellation reason is available.
-     */
-    ExecutionInstanceState["CANCELLED"] = "CANCELLED";
-    /**
-     * Execution timed out (deadline exceeded).
-     * No result is available.
-     */
-    ExecutionInstanceState["TIMED_OUT"] = "TIMED_OUT";
-    /**
-     * Instance destroyed and all resources released.
-     * Instance is no longer usable.
-     * This is the terminal state.
-     */
-    ExecutionInstanceState["DESTROYED"] = "DESTROYED";
-})(ExecutionInstanceState || (ExecutionInstanceState = {}));
-/**
- * Validate that execution uses exactly the authority granted by the issued
- * binding. Execution requests are caller-supplied data, so the runtime must not
- * trust request capability or artifact identity fields when they disagree with
- * the authoritative binding and registered provider state.
- */
-export function assertExecutionRequestAuthority(request) {
-    if (request.capability.name !== request.binding.capability.name ||
-        request.capability.version !== request.binding.capability.version) {
-        throw new Error(`Execution capability "${request.capability.name}@${request.capability.version}" does not match authorized binding "${request.binding.capability.name}@${request.binding.capability.version}"`);
-    }
-    const artifactApplicationId = request.artifact.metadata.application?.id;
-    if (artifactApplicationId && artifactApplicationId !== request.binding.provider.id) {
-        throw new Error(`Artifact application "${artifactApplicationId}" does not match authorized provider "${request.binding.provider.id}"`);
-    }
-    const providerFingerprint = request.binding.provider.fingerprint;
-    if (providerFingerprint && request.artifact.metadata.contractFingerprint !== providerFingerprint) {
-        throw new Error(`Artifact contract "${request.artifact.metadata.contractFingerprint}" does not match authorized provider contract "${providerFingerprint}"`);
-    }
-    // Durable state is owned by an application, so an execution may only carry a
-    // state transaction belonging to a participant of the binding it executes
-    // under. Without this the provider becomes a confused deputy: any caller
-    // could pair a legitimate binding with a third application's transaction.
-    const stateApplicationId = request.stateTransaction?.applicationId;
-    if (stateApplicationId &&
-        stateApplicationId !== request.binding.provider.id &&
-        stateApplicationId !== request.binding.consumer?.id) {
-        throw new Error(`State transaction application "${stateApplicationId}" does not match authorized binding participants "${request.binding.consumer?.id}" and "${request.binding.provider.id}"`);
-    }
-}
-/**
- * Artifact instantiation error: artifact failed validation or instantiation.
- *
- * This includes:
- * - WASM structural errors
- * - Contract fingerprint mismatch
- * - Export/capability mismatch
- * - Forbidden imports
- */
-export class ArtifactInstantiationError extends Error {
-    message;
-    artifactHash;
-    details;
-    constructor(message, artifactHash, details) {
-        super(`Artifact instantiation failed: ${message}`);
-        this.message = message;
-        this.artifactHash = artifactHash;
-        this.details = details;
-        this.name = "ArtifactInstantiationError";
-    }
-}
-/**
- * Missing export error: artifact doesn't export declared capability.
- */
-export class MissingExportError extends Error {
-    capabilityName;
-    artifactHash;
-    availableExports;
-    constructor(capabilityName, artifactHash, availableExports) {
-        super(`Capability '${capabilityName}' not found in artifact exports`);
-        this.capabilityName = capabilityName;
-        this.artifactHash = artifactHash;
-        this.availableExports = availableExports;
-        this.name = "MissingExportError";
-    }
-}
-/**
- * Invalid state transition: instance lifecycle state change is not allowed.
- */
-export class InvalidStateTransitionError extends Error {
-    fromState;
-    toState;
-    constructor(fromState, toState) {
-        super(`Invalid state transition: ${fromState} → ${toState}`);
-        this.fromState = fromState;
-        this.toState = toState;
-        this.name = "InvalidStateTransitionError";
-    }
-}
-//# sourceMappingURL=execution.js.map

package/vendor/@appport/core/dist/execution.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution.js","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;;OAGG;IACH,6CAAmB,CAAA;IAEnB;;;OAGG;IACH,yCAAe,CAAA;IAEf;;;OAGG;IACH,6CAAmB,CAAA;IAEnB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;OAGG;IACH,2CAAiB,CAAA;IAEjB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;OAGG;IACH,iDAAuB,CAAA;IAEvB;;;;OAIG;IACH,iDAAuB,CAAA;AACzB,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAsTD;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAyB;IACvE,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;QAC3D,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,wCAAwC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,CAC/L,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IACxE,IAAI,qBAAqB,IAAI,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,yBAAyB,qBAAqB,yCAAyC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjE,IAAI,mBAAmB,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,kDAAkD,mBAAmB,GAAG,CAC5I,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC;IACnE,IACE,kBAAkB;QAClB,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QAClD,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kCAAkC,kBAAkB,qDAAqD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAC9K,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExB;IACT;IACA;IAHlB,YAC2B,OAAe,EACxB,YAAoB,EACpB,OAAiB;QAEjC,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QAJ1B,YAAO,GAAP,OAAO,CAAQ;QACxB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACA;IACA;IAHlB,YACkB,cAAsB,EACtB,YAAoB,EACpB,gBAAmC;QAEnD,KAAK,CAAC,eAAe,cAAc,iCAAiC,CAAC,CAAC;QAJtD,mBAAc,GAAd,cAAc,CAAQ;QACtB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,qBAAgB,GAAhB,gBAAgB,CAAmB;QAGnD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IAFlB,YACkB,SAAiC,EACjC,OAA+B;QAE/C,KAAK,CAAC,6BAA6B,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAH7C,cAAS,GAAT,SAAS,CAAwB;QACjC,YAAO,GAAP,OAAO,CAAwB;QAG/C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF"}

package/vendor/@appport/core/dist/idempotency.d.ts

@@ -1,36 +0,0 @@
-import type { AppResponse } from "../../protocol/dist/index.d.ts";
-/**
- * Idempotency support (specification §44).
- *
- * A capability that declares `idempotency: "supported"` may be retried with the
- * same `idempotencyKey`; the stored response is replayed rather than the
- * handler being executed twice.
- */
-export interface IdempotencyRecord {
-    key: string;
-    capability: string;
-    version: number;
-    requestId: string;
-    response: AppResponse;
-    storedAt: number;
-    expiresAt: number;
-}
-export interface IdempotencyStore {
-    get(key: string): Promise<IdempotencyRecord | undefined>;
-    set(record: IdempotencyRecord): Promise<void>;
-}
-export declare const DEFAULT_IDEMPOTENCY_TTL_MS: number;
-/** Builds the storage key. Keys are scoped per session and capability version. */
-export declare function idempotencyStorageKey(options: {
-    key: string;
-    capability: string;
-    version: number;
-    sessionId?: string;
-}): string;
-export declare class MemoryIdempotencyStore implements IdempotencyStore {
-    #private;
-    get(key: string): Promise<IdempotencyRecord | undefined>;
-    set(record: IdempotencyRecord): Promise<void>;
-    get size(): number;
-}
-//# sourceMappingURL=idempotency.d.ts.map

package/vendor/@appport/core/dist/idempotency.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACzD,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAE9D,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAET;AAED,qBAAa,sBAAuB,YAAW,gBAAgB;;IAGvD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAUxD,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/vendor/@appport/core/dist/idempotency.js

@@ -1,36 +0,0 @@
-export const DEFAULT_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1000;
-/** Builds the storage key. Keys are scoped per session and capability version. */
-export function idempotencyStorageKey(options) {
-    return `${options.sessionId ?? "anonymous"}|${options.capability}@${options.version}|${options.key}`;
-}
-export class MemoryIdempotencyStore {
-    #records = new Map();
-    async get(key) {
-        const record = this.#records.get(key);
-        if (!record)
-            return undefined;
-        if (record.expiresAt <= Date.now()) {
-            this.#records.delete(key);
-            return undefined;
-        }
-        return record;
-    }
-    async set(record) {
-        this.#records.set(record.key, record);
-        this.#prune();
-    }
-    /** Drops expired records so a long-lived process does not grow unbounded. */
-    #prune() {
-        if (this.#records.size % 128 !== 0)
-            return;
-        const now = Date.now();
-        for (const [key, existing] of this.#records) {
-            if (existing.expiresAt <= now)
-                this.#records.delete(key);
-        }
-    }
-    get size() {
-        return this.#records.size;
-    }
-}
-//# sourceMappingURL=idempotency.js.map

package/vendor/@appport/core/dist/idempotency.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9D,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,OAKrC;IACC,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACvG,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAyB;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC;YAAE,OAAO;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}