@appport/sdk 1.1.18 → 1.1.19

package/vendor/@appport/core/dist/binding.js

@@ -1,263 +0,0 @@
-/**
- * Authorization-Aware Capability Binding (PR23)
- *
- * Builds on PR22's deterministic dependency resolver to introduce a clean
- * authorization boundary: resolved requirements are evaluated for authorization,
- * and only authorized requirements produce bindings.
- *
- * Key architectural invariant:
- * DISCOVER → COMPATIBLE → RESOLVED → AUTHORIZED → BOUND → [STOP, don't invoke]
- *
- * Authorization is a policy-driven decision applied to resolved requirements only.
- * Unresolved and ambiguous requirements bypass authorization entirely.
- */
-import { transferAuthorizationAttestation, transferResolutionAttestation } from "./authority-attestation.js";
-// Runtime attestation is deliberately module-private. TypeScript interfaces are
-// structural and disappear at runtime; without an issuance check, a caller could
-// manufacture `{ authorization: { kind: "authorized" } }` and bypass the binder.
-const issuedBindings = new WeakSet();
-/** Throws unless the exact binding object was issued by CapabilityBinder. */
-export function assertIssuedAuthorizedBinding(binding) {
-    if (typeof binding !== "object" || binding === null || !issuedBindings.has(binding)) {
-        throw new Error("Authorized capability binding was not issued by CapabilityBinder");
-    }
-}
-/**
- * Default Authorization Policy: permits all authorized consumers.
- *
- * This policy checks the consumer's authorization profile against the capability's
- * authorization requirements. It reuses the canonical AppPort permission semantics.
- *
- * For simple use cases and testing, this is often sufficient.
- * For complex policies (trust services, scope-aware rules, etc.), provide a custom policy.
- */
-export function defaultAuthorizationPolicy() {
-    return {
-        evaluate(_context) {
-            // Default: permit all bindings
-            // This is appropriate for local single-user runtimes and tests
-            // but not for networked multi-principal deployments.
-            return { kind: "authorized" };
-        }
-    };
-}
-/**
- * Allow-all Authorization Policy: permits every binding.
- *
- * Appropriate for local single-user runtimes and tests.
- * Never appropriate for multi-principal deployments.
- */
-export function allowAllAuthorizationPolicy() {
-    return {
-        evaluate() {
-            return { kind: "authorized" };
-        }
-    };
-}
-/**
- * Permission-based Authorization Policy: consumer must have required permissions.
- *
- * Reuses the canonical @appport/authorization permission semantics.
- * A consumer has a set of granted permissions. A capability declares required permissions.
- * The consumer must have all required permissions.
- *
- * Supports wildcard permissions (e.g., "documents.*" matches "documents.read").
- */
-export function permissionAuthorizationPolicy(options) {
-    return {
-        async evaluate(context) {
-            const permissions = await options.resolvePermissions(context.consumer, context.provider);
-            // All bindings permitted if consumer has any permission
-            // In practice, this would check specific capability requirements
-            if (permissions.length > 0) {
-                return { kind: "authorized", grantedScopes: permissions };
-            }
-            return {
-                kind: "denied",
-                reason: "capability_not_permitted",
-                message: `Consumer "${context.consumer.id}" has no permissions to use capability "${context.capabilityName}" from provider "${context.provider.id}"`
-            };
-        }
-    };
-}
-/**
- * Deterministic Binding Identity
- *
- * Generates a deterministic identifier for a binding based on its semantic participants.
- * Used to detect when the same binding would be created multiple times.
- *
- * Binding identity is deterministically derived from:
- * - Consumer application ID
- * - Requirement name
- * - Provider application ID
- * - Capability name + version
- *
- * Does NOT use:
- * - Object identity
- * - Process ID
- * - Timestamp
- * - Random UUID
- * - Handler identity
- */
-export function computeBindingId(binding) {
-    const parts = [
-        binding.consumer.id,
-        binding.requirement.name,
-        binding.provider.id,
-        `${binding.capabilityName}@${binding.capabilityVersion}`
-    ];
-    return parts.join("::");
-}
-/**
- * Authority follows the consumer's own contract: the existence of a provider
- * must not create authority for a capability the consumer never declared.
- *
- * Only consumers whose authoritative manifest is available can be checked;
- * a consumer identity without a registered contract carries no declaration
- * to evaluate.
- */
-function undeclaredRequirementDenial(consumer, result) {
-    const declared = consumer?.manifest?.requires;
-    if (!declared)
-        return undefined;
-    const requirement = result.requirement;
-    if (declared.some((entry) => entry.name === requirement.name && entry.version === requirement.version)) {
-        return undefined;
-    }
-    return {
-        kind: "denied",
-        reason: "capability_not_permitted",
-        message: `Consumer "${consumer.id}" does not declare requirement "${requirement.name}@${requirement.version}" in its contract`
-    };
-}
-/**
- * Capability Binder: Orchestrates authorization-aware capability binding.
- *
- * Flow:
- * 1. Accept resolution results from ApplicationDependencyResolver
- * 2. For each resolved requirement, evaluate authorization policy
- * 3. Produce authorized bindings or explicit denials
- * 4. Preserve unresolved/ambiguous as-is (they bypass authorization)
- *
- * The binder is:
- * - Policy-driven: authorization logic is injected
- * - Side-effect free: no DB, handlers, or runtime invocation
- * - Deterministic: same input produces same binding
- * - Stateless: receives all context as parameters
- */
-export class CapabilityBinder {
-    #policy;
-    constructor(policy = defaultAuthorizationPolicy()) {
-        this.#policy = policy;
-    }
-    /**
-     * Bind a single resolved requirement.
-     *
-     * Returns either an authorized binding or an explicit denial.
-     *
-     * Precondition: result must be a resolved requirement.
-     * This binder does not handle unresolved/ambiguous requirements.
-     */
-    async bindResolution(consumer, result) {
-        const undeclared = undeclaredRequirementDenial(consumer, result);
-        if (undeclared) {
-            return {
-                kind: "denied",
-                requirement: result.requirement,
-                provider: result.provider,
-                authorization: undeclared
-            };
-        }
-        const context = {
-            consumer,
-            provider: result.provider,
-            capabilityName: result.requirement.name,
-            capabilityVersion: result.capability.version
-        };
-        const authResult = await this.#policy.evaluate(context);
-        if (authResult.kind === "authorized") {
-            const binding = {
-                consumer,
-                requirement: result.requirement,
-                provider: result.provider,
-                capability: {
-                    name: result.capability.name,
-                    version: result.capability.version
-                },
-                authorization: authResult,
-                bindingId: computeBindingId({
-                    consumer,
-                    requirement: result.requirement,
-                    provider: result.provider,
-                    capabilityName: result.capability.name,
-                    capabilityVersion: result.capability.version
-                })
-            };
-            issuedBindings.add(binding);
-            transferResolutionAttestation(result, binding);
-            // Authorization is durable authority, not a one-time decision: carry the
-            // authorization's own revalidation onto the binding so every later
-            // execution boundary observes a revocation.
-            transferAuthorizationAttestation(authResult, binding);
-            return { kind: "authorized", binding };
-        }
-        return {
-            kind: "denied",
-            requirement: result.requirement,
-            provider: result.provider,
-            authorization: authResult
-        };
-    }
-    /**
-     * Bind all resolvable requirements for an application.
-     *
-     * Accepts the results from ApplicationDependencyResolver and produces
-     * a complete application binding result.
-     *
-     * Flow for each requirement:
-     * - resolved → evaluate authorization → authorized binding or explicit denial
-     * - unresolved → pass through as-is (nothing to authorize)
-     * - ambiguous → pass through as-is (nothing to authorize)
-     *
-     * Returns a complete ApplicationBindingResult preserving all states.
-     */
-    async bindApplication(consumer, resolutionResults) {
-        const authorized = [];
-        const denied = [];
-        const unresolved = [];
-        const ambiguous = [];
-        const results = [];
-        for (const result of resolutionResults) {
-            if (result.kind === "resolved") {
-                // Evaluate authorization for resolved requirements
-                const bindingResult = await this.bindResolution(consumer, result);
-                results.push(bindingResult);
-                if (bindingResult.kind === "authorized") {
-                    authorized.push(bindingResult.binding);
-                }
-                else {
-                    denied.push(bindingResult);
-                }
-            }
-            else if (result.kind === "unresolved") {
-                // Pass through: no provider to authorize
-                unresolved.push(result);
-                results.push(result);
-            }
-            else if (result.kind === "ambiguous") {
-                // Pass through: cannot select provider to authorize
-                ambiguous.push(result);
-                results.push(result);
-            }
-        }
-        return {
-            application: consumer,
-            authorized,
-            denied,
-            unresolved,
-            ambiguous,
-            results
-        };
-    }
-}
-//# sourceMappingURL=binding.js.map

package/vendor/@appport/core/dist/binding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding.js","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAwH7G,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B,CAAC,OAAoC;IAChF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AA2FD;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,QAAQ,CAAC,QAAkC;YACzC,+BAA+B;YAC/B,+DAA+D;YAC/D,qDAAqD;YACrD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO;QACL,QAAQ;YACN,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAG7C;IACC,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,OAAiC;YAC9C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEzF,wDAAwD;YACxD,iEAAiE;YACjE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;YAC5D,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,aAAa,OAAO,CAAC,QAAQ,CAAC,EAAE,2CAA2C,OAAO,CAAC,cAAc,oBAAoB,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG;aACrJ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAMhC;IACC,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,QAAQ,CAAC,EAAE;QACnB,OAAO,CAAC,WAAW,CAAC,IAAI;QACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;QACnB,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,iBAAiB,EAAE;KACzD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,2BAA2B,CAAC,QAA0B,EAAE,MAA2B;IAC1F,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,aAAa,QAAQ,CAAC,EAAE,mCAAmC,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,OAAO,mBAAmB;KAC/H,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,gBAAgB;IAClB,OAAO,CAAsB;IAEtC,YAAY,SAA8B,0BAA0B,EAAE;QACpE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,QAA0B,EAAE,MAA2B;QAC1E,MAAM,UAAU,GAAG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,UAAU;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA6B;YACxC,QAAQ;YACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI;YACvC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;SAC7C,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,OAAO,GAAgC;gBAC3C,QAAQ;gBACR,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE;oBACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;oBAC5B,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;iBACnC;gBACD,aAAa,EAAE,UAAU;gBACzB,SAAS,EAAE,gBAAgB,CAAC;oBAC1B,QAAQ;oBACR,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;oBACtC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;iBAC7C,CAAC;aACH,CAAC;YAEF,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5B,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,yEAAyE;YACzE,mEAAmE;YACnE,4CAA4C;YAC5C,gCAAgC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEtD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,eAAe,CAAC,QAA0B,EAAE,iBAAkG;QAClJ,MAAM,UAAU,GAAkC,EAAE,CAAC;QACrD,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAsC,EAAE,CAAC;QAEtD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,mDAAmD;gBACnD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAE5B,IAAI,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACzC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACxC,yCAAyC;gBACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACvC,oDAAoD;gBACpD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,UAAU;YACV,MAAM;YACN,UAAU;YACV,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}

package/vendor/@appport/core/dist/builtins.d.ts

@@ -1,18 +0,0 @@
-import type { JsonValue } from "../../protocol/dist/index.d.ts";
-import { type AnyCapability } from "./capability.js";
-/**
- * Reserved `appport.*` capabilities.
- *
- * Discovery over HTTP is a well-known URL (§39), but IPC and in-process
- * runtimes have no URLs. Exposing the manifest as a capability makes discovery
- * work identically on every transport, which is the whole point of the
- * protocol.
- */
-export interface BuiltinOptions {
-    manifest: () => JsonValue;
-    /** Permissions required to read the manifest. Public by default. */
-    authorization?: readonly string[];
-}
-export declare function createBuiltinCapabilities(options: BuiltinOptions): AnyCapability[];
-export declare const BUILTIN_CAPABILITY_NAMES: readonly ["appport.manifest", "appport.ping"];
-//# sourceMappingURL=builtins.d.ts.map

package/vendor/@appport/core/dist/builtins.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../src/builtins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,SAAS,CAAC;IAC1B,oEAAoE;IACpE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,EAAE,CA0ClF;AAED,eAAO,MAAM,wBAAwB,+CAAgD,CAAC"}

package/vendor/@appport/core/dist/builtins.js

@@ -1,38 +0,0 @@
-import { s } from "../../schema/dist/index.js";
-import { defineCapability } from "./capability.js";
-export function createBuiltinCapabilities(options) {
-    const authorization = options.authorization ?? [];
-    const manifest = defineCapability({
-        name: "appport.manifest",
-        version: 1,
-        description: "Returns the application manifest for this deployment.",
-        authorization,
-        input: s.object({}),
-        // The manifest is described structurally rather than as an opaque value, so
-        // a consumer in any language can validate what discovery returns (§32).
-        output: s.object({
-            protocol: s.string(),
-            application: s.object({ id: s.string(), name: s.string(), version: s.string() }, { additionalProperties: true }),
-            capabilities: s.array(s.record(s.unknown())),
-            events: s.array(s.record(s.unknown())),
-            transports: s.array(s.record(s.unknown()))
-        }, { title: "AppPortManifest", additionalProperties: true }),
-        handler() {
-            return options.manifest();
-        }
-    });
-    const ping = defineCapability({
-        name: "appport.ping",
-        version: 1,
-        description: "Liveness probe. Returns the server time.",
-        authorization,
-        input: s.object({}),
-        output: s.object({ timestamp: s.timestamp() }),
-        handler() {
-            return { timestamp: new Date().toISOString() };
-        }
-    });
-    return [manifest, ping];
-}
-export const BUILTIN_CAPABILITY_NAMES = ["appport.manifest", "appport.ping"];
-//# sourceMappingURL=builtins.js.map

package/vendor/@appport/core/dist/builtins.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"builtins.js","sourceRoot":"","sources":["../src/builtins.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,iBAAiB,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,iBAAiB,CAAC;AAgBvE,MAAM,UAAU,yBAAyB,CAAC,OAAuB;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAElD,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,uDAAuD;QACpE,aAAa;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CACd;YACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CACnB,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EACzD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B;YACD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SAC3C,EACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE,CACzD;QACD,OAAO;YACL,OAAO,OAAO,CAAC,QAAQ,EAAW,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC5B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,0CAA0C;QACvD,aAAa;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAU,CAAC"}

package/vendor/@appport/core/dist/capability.d.ts

@@ -1,94 +0,0 @@
-import { type CapabilityKind, type ConcurrencyPolicy, type IdempotencySupport, type JsonValue } from "../../protocol/dist/index.d.ts";
-import { type Schema, type SchemaInput } from "../../schema/dist/index.d.ts";
-import type { CapabilityContext } from "./context.js";
-import type { CapabilityImplementation } from "./implementation.js";
-/** A capability handler: validated input in, output out (§9). */
-export type CapabilityHandler<Input, Output> = (input: Input, context: CapabilityContext) => Output | Promise<Output>;
-/** A stream capability handler: validated input in, a sequence of chunks out (§20). */
-export type StreamHandler<Input, Chunk> = (input: Input, context: CapabilityContext) => AsyncIterable<Chunk> | Promise<AsyncIterable<Chunk>>;
-export interface CapabilityOptions<Input, Output> {
-    /** `<namespace>.<operation>`, never transport-flavoured (§8). */
-    name: string;
-    /** Capability version; part of the capability's identity (§42). */
-    version: number;
-    description?: string;
-    input: SchemaInput<Input>;
-    output: SchemaInput<Output>;
-    /** Permissions required to invoke this capability (§34). */
-    authorization?: readonly string[];
-    /** Declares support for `idempotencyKey` (§44). */
-    idempotency?: IdempotencySupport;
-    /** Execution policy (§45). Defaults to `parallel`. */
-    concurrency?: ConcurrencyPolicy;
-    /** Server-enforced maximum duration in milliseconds (§46). */
-    timeoutMs?: number;
-    /** Events this capability may emit, for the manifest (§30). */
-    emits?: readonly string[];
-    deprecated?: boolean;
-    attributes?: Record<string, JsonValue>;
-    handler: CapabilityHandler<Input, Output>;
-    /** Optional implementation binding for this capability (PR17). */
-    implementation?: CapabilityImplementation<Input, Output>;
-}
-export interface StreamCapabilityOptions<Input, Chunk> extends Omit<CapabilityOptions<Input, Chunk>, "handler" | "output" | "idempotency"> {
-    /** Schema of a single stream chunk. */
-    output: SchemaInput<Chunk>;
-    handler: StreamHandler<Input, Chunk>;
-}
-/** The normalized capability definition held by the registry. */
-export interface CapabilityDefinition<Input = unknown, Output = unknown> {
-    readonly name: string;
-    readonly version: number;
-    readonly kind: CapabilityKind;
-    readonly description?: string;
-    readonly input: Schema<Input>;
-    readonly output: Schema<Output>;
-    readonly authorization: readonly string[];
-    readonly idempotency: IdempotencySupport;
-    readonly concurrency: ConcurrencyPolicy;
-    readonly timeoutMs?: number;
-    readonly emits: readonly string[];
-    readonly deprecated: boolean;
-    readonly attributes?: Record<string, JsonValue>;
-    readonly handler: CapabilityHandler<Input, Output> | StreamHandler<Input, Output>;
-    /** Optional implementation binding for this capability (PR17). */
-    readonly implementation?: CapabilityImplementation<Input, Output>;
-}
-/**
- * Defines a request/response capability.
- *
- * The definition is transport-neutral by construction: nothing in it can
- * reference HTTP, IPC or any other carrier.
- */
-export declare function defineCapability<Input, Output>(options: CapabilityOptions<Input, Output>): CapabilityDefinition<Input, Output>;
-/** Defines a capability that answers with a sequence of values (§20). */
-export declare function defineStreamCapability<Input, Chunk>(options: StreamCapabilityOptions<Input, Chunk>): CapabilityDefinition<Input, Chunk>;
-export interface EventOptions<Payload> {
-    name: string;
-    version: number;
-    description?: string;
-    payload: SchemaInput<Payload>;
-    /** Permissions a session must hold to observe the event. */
-    authorization?: readonly string[];
-    deprecated?: boolean;
-}
-export interface EventDefinition<Payload = unknown> {
-    readonly name: string;
-    readonly version: number;
-    readonly description?: string;
-    readonly payload: Schema<Payload>;
-    readonly authorization: readonly string[];
-    readonly deprecated: boolean;
-}
-/** Defines an event the application may publish (§17). */
-export declare function defineEvent<Payload>(options: EventOptions<Payload>): EventDefinition<Payload>;
-/**
- * A capability of unspecified shape.
- *
- * Collections of capabilities are heterogeneous, and `Schema<T>` is invariant
- * in `T`, so registries and application options work in terms of this alias.
- */
-export type AnyCapability = CapabilityDefinition<any, any>;
-export type AnyEvent = EventDefinition<any>;
-export declare const isStreamCapability: (definition: AnyCapability) => boolean;
-//# sourceMappingURL=capability.d.ts.map

package/vendor/@appport/core/dist/capability.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAY,KAAK,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,iEAAiE;AACjE,MAAM,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,IAAI,CAC7C,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,iBAAiB,KACvB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9B,uFAAuF;AACvF,MAAM,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,IAAI,CACxC,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,iBAAiB,KACvB,aAAa,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAE1D,MAAM,WAAW,iBAAiB,CAAC,KAAK,EAAE,MAAM;IAC9C,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,mDAAmD;IACnD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,sDAAsD;IACtD,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,kEAAkE;IAClE,cAAc,CAAC,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,uBAAuB,CAAC,KAAK,EAAE,KAAK,CACnD,SAAQ,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;IACnF,uCAAuC;IACvC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;CACtC;AAED,iEAAiE;AACjE,MAAM,WAAW,oBAAoB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClF,kEAAkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;CACnE;AAuBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAC5C,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,GACxC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAoBrC;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,KAAK,EACjD,OAAO,EAAE,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,GAC7C,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAoBpC;AAED,MAAM,WAAW,YAAY,CAAC,OAAO;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe,CAAC,OAAO,GAAG,OAAO;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAW7F;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAE3D,MAAM,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;AAE5C,eAAO,MAAM,kBAAkB,GAAI,YAAY,aAAa,KAAG,OAAuC,CAAC"}

package/vendor/@appport/core/dist/capability.js

@@ -1,85 +0,0 @@
-import { errors, validateName } from "../../protocol/dist/index.js";
-import { toSchema } from "../../schema/dist/index.js";
-function assertName(name) {
-    const result = validateName(name);
-    if (!result.valid) {
-        throw errors.invalidRequest(`Invalid capability name "${name}": ${result.reason}`);
-    }
-}
-function assertVersion(name, version) {
-    if (!Number.isInteger(version) || version < 1) {
-        throw errors.invalidRequest(`Capability ${name} must declare a positive integer version`);
-    }
-}
-function normalizeConcurrency(policy) {
-    if (!policy)
-        return { mode: "parallel" };
-    if (policy.mode === "keyed" && !policy.key) {
-        throw errors.invalidRequest("Keyed concurrency requires a key field name");
-    }
-    return policy;
-}
-/**
- * Defines a request/response capability.
- *
- * The definition is transport-neutral by construction: nothing in it can
- * reference HTTP, IPC or any other carrier.
- */
-export function defineCapability(options) {
-    assertName(options.name);
-    assertVersion(options.name, options.version);
-    return {
-        name: options.name,
-        version: options.version,
-        kind: "request",
-        ...(options.description ? { description: options.description } : {}),
-        input: toSchema(options.input),
-        output: toSchema(options.output),
-        authorization: options.authorization ?? [],
-        idempotency: options.idempotency ?? "unsupported",
-        concurrency: normalizeConcurrency(options.concurrency),
-        ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),
-        emits: options.emits ?? [],
-        deprecated: options.deprecated ?? false,
-        ...(options.attributes ? { attributes: options.attributes } : {}),
-        handler: options.handler,
-        ...(options.implementation ? { implementation: options.implementation } : {})
-    };
-}
-/** Defines a capability that answers with a sequence of values (§20). */
-export function defineStreamCapability(options) {
-    assertName(options.name);
-    assertVersion(options.name, options.version);
-    return {
-        name: options.name,
-        version: options.version,
-        kind: "stream",
-        ...(options.description ? { description: options.description } : {}),
-        input: toSchema(options.input),
-        output: toSchema(options.output),
-        authorization: options.authorization ?? [],
-        idempotency: "unsupported",
-        concurrency: normalizeConcurrency(options.concurrency),
-        ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),
-        emits: options.emits ?? [],
-        deprecated: options.deprecated ?? false,
-        ...(options.attributes ? { attributes: options.attributes } : {}),
-        handler: options.handler,
-        ...(options.implementation ? { implementation: options.implementation } : {})
-    };
-}
-/** Defines an event the application may publish (§17). */
-export function defineEvent(options) {
-    assertName(options.name);
-    assertVersion(options.name, options.version);
-    return {
-        name: options.name,
-        version: options.version,
-        ...(options.description ? { description: options.description } : {}),
-        payload: toSchema(options.payload),
-        authorization: options.authorization ?? [],
-        deprecated: options.deprecated ?? false
-    };
-}
-export const isStreamCapability = (definition) => definition.kind === "stream";
-//# sourceMappingURL=capability.js.map

package/vendor/@appport/core/dist/capability.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,YAAY,EAKb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAiC,MAAM,iBAAiB,CAAC;AAoE1E,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,CAAC,cAAc,CAAC,4BAA4B,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,IAAI,0CAA0C,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAyC;IAEzC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,SAAS;QACf,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,EAAE,QAAQ,CAAQ,OAAO,CAAC,KAAK,CAAC;QACrC,MAAM,EAAE,QAAQ,CAAS,OAAO,CAAC,MAAM,CAAC;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;QAC1C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,aAAa;QACjD,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CACpC,OAA8C;IAE9C,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,EAAE,QAAQ,CAAQ,OAAO,CAAC,KAAK,CAAC;QACrC,MAAM,EAAE,QAAQ,CAAQ,OAAO,CAAC,MAAM,CAAC;QACvC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;QAC1C,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAqBD,0DAA0D;AAC1D,MAAM,UAAU,WAAW,CAAU,OAA8B;IACjE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,QAAQ,CAAU,OAAO,CAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;QAC1C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;KACxC,CAAC;AACJ,CAAC;AAYD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAyB,EAAW,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC"}

package/vendor/@appport/core/dist/concurrency.d.ts

@@ -1,16 +0,0 @@
-import { type ConcurrencyPolicy } from "../../protocol/dist/index.d.ts";
-/**
- * Capability concurrency policies (specification §45).
- *
- * `parallel` is the default: requests run concurrently. `serialized` runs one
- * request at a time for the capability. `keyed(field)` serializes per input key
- * value, so `documents.save` never interleaves writes to the same document
- * while staying parallel across different documents.
- */
-export declare class ConcurrencyGate {
-    #private;
-    run<T>(policy: ConcurrencyPolicy, scope: string, input: unknown, fn: () => Promise<T>): Promise<T>;
-    /** Number of keys currently holding queued work. */
-    get activeKeys(): number;
-}
-//# sourceMappingURL=concurrency.d.ts.map

package/vendor/@appport/core/dist/concurrency.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../src/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAOnE;;;;;;;GAOG;AACH,qBAAa,eAAe;;IAGpB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAuBxG,oDAAoD;IACpD,IAAI,UAAU,IAAI,MAAM,CAEvB;CACF"}

package/vendor/@appport/core/dist/concurrency.js

@@ -1,46 +0,0 @@
-import { errors } from "../../protocol/dist/index.js";
-/**
- * Capability concurrency policies (specification §45).
- *
- * `parallel` is the default: requests run concurrently. `serialized` runs one
- * request at a time for the capability. `keyed(field)` serializes per input key
- * value, so `documents.save` never interleaves writes to the same document
- * while staying parallel across different documents.
- */
-export class ConcurrencyGate {
-    #queues = new Map();
-    async run(policy, scope, input, fn) {
-        if (policy.mode === "parallel")
-            return fn();
-        const key = policy.mode === "serialized" ? scope : `${scope}:${keyValue(policy.key, input)}`;
-        const queue = this.#queues.get(key) ?? { tail: Promise.resolve(), waiting: 0 };
-        queue.waiting += 1;
-        this.#queues.set(key, queue);
-        const run = queue.tail.then(fn, fn);
-        // The tail never rejects, so a failing request does not poison the queue.
-        queue.tail = run.then(() => undefined, () => undefined);
-        try {
-            return await run;
-        }
-        finally {
-            queue.waiting -= 1;
-            if (queue.waiting === 0 && this.#queues.get(key) === queue)
-                this.#queues.delete(key);
-        }
-    }
-    /** Number of keys currently holding queued work. */
-    get activeKeys() {
-        return this.#queues.size;
-    }
-}
-function keyValue(field, input) {
-    if (typeof input !== "object" || input === null) {
-        throw errors.invalidRequest(`Keyed concurrency requires an object input with "${field}"`);
-    }
-    const value = input[field];
-    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-        return String(value);
-    }
-    throw errors.invalidRequest(`Keyed concurrency requires a scalar "${field}" in the input`);
-}
-//# sourceMappingURL=concurrency.js.map

package/vendor/@appport/core/dist/concurrency.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../src/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA0B,MAAM,mBAAmB,CAAC;AAOnE;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACjB,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE5C,KAAK,CAAC,GAAG,CAAI,MAAyB,EAAE,KAAa,EAAE,KAAc,EAAE,EAAoB;QACzF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,EAAE,CAAC;QAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/E,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,0EAA0E;QAC1E,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CACnB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACnB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,CAAC,cAAc,CAAC,oDAAoD,KAAK,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,CAAC,cAAc,CAAC,wCAAwC,KAAK,gBAAgB,CAAC,CAAC;AAC7F,CAAC"}