@appport/sdk 1.1.18 → 1.1.19

package/vendor/@appport/core/dist/invocation.js

@@ -1,258 +0,0 @@
-/**
- * Capability Invocation Layer (PR24)
- *
- * The canonical invocation abstraction that turns an authorized relationship
- * into an executable invocation without introducing WASM, persistent runtime
- * processes, or remote transports.
- *
- * CRITICAL INVARIANT: A capability cannot be invoked without an AuthorizedCapabilityBinding.
- *
- * Architecture:
- * Discover (PR21) → Resolve (PR22) → Authorize (PR23) → Bind (PR23) → Invoke (PR24)
- *
- * The invocation layer:
- * - Receives an already-authorized binding
- * - Validates binding/context consistency (no re-authorization)
- * - Resolves the capability implementation (no re-discovery)
- * - Validates input before handler execution
- * - Executes the implementation
- * - Validates output after execution
- * - Returns explicit result (SUCCESS, FAILED, CANCELLED, TIMED_OUT)
- * - Never implicitly falls back to another provider
- * - Never retries or changes topology
- * - Remains execution-engine-neutral for future WASM integration
- */
-import { assertIssuedAuthorizedBinding } from "./binding.js";
-import { assertBindingAuthoritative } from "./authority-attestation.js";
-import { errors } from "../../protocol/dist/index.js";
-/**
- * Capability Invoker: executes authorized capabilities with semantic enforcement.
- *
- * The invoker:
- * - Requires AuthorizedCapabilityBinding for every invocation
- * - Validates binding/context consistency
- * - Validates input before handler execution
- * - Executes the capability implementation
- * - Validates output after execution
- * - Returns explicit result types
- * - Never re-discovers providers or re-authorizes
- * - Never implicitly falls back to another provider
- * - Remains execution-engine-neutral
- *
- * Flow:
- * 1. Validate binding matches invocation context
- * 2. Validate input against capability schema
- * 3. Resolve capability definition and implementation
- * 4. Execute implementation with context
- * 5. Validate output against capability schema
- * 6. Return explicit result
- */
-export class CapabilityInvoker {
-    /**
-     * Invoke a capability through an authorized binding.
-     *
-     * @param request The invocation request containing binding and input
-     * @param capabilityDefinition The capability definition from the registry
-     * @param executionContext The execution context (from Application)
-     * @returns The invocation result with explicit outcome
-     */
-    async invoke(request, capabilityDefinition, executionContext) {
-        const invocationId = executionContext.requestId;
-        const { binding, input } = request;
-        const { consumer, provider, capability } = binding;
-        try {
-            assertIssuedAuthorizedBinding(binding);
-            await assertBindingAuthoritative(binding);
-            // STEP 1: Validate binding matches invocation context
-            // This enforces the critical invariant: invocation uses exactly the binding provided.
-            this.#validateBindingConsistency(binding, executionContext, invocationId);
-            // STEP 2: Validate input against capability schema
-            // This MUST happen before implementation executes.
-            // Invalid input immediately produces a failed result without touching the handler.
-            const inputValidation = capabilityDefinition.input.validate(input);
-            if (!inputValidation.ok) {
-                return {
-                    kind: "failed",
-                    invocationId,
-                    consumer,
-                    provider,
-                    capability: { name: capability.name, version: capability.version },
-                    error: {
-                        kind: "invalid_input",
-                        reason: `Input validation failed: ${this.#formatValidationIssues(inputValidation.issues)}`
-                    }
-                };
-            }
-            // STEP 3: Check for cancellation BEFORE execution
-            if (executionContext.signal?.aborted) {
-                return {
-                    kind: "cancelled",
-                    invocationId,
-                    consumer,
-                    provider,
-                    capability: { name: capability.name, version: capability.version },
-                    reason: "Invocation was cancelled before execution"
-                };
-            }
-            // STEP 4: Execute implementation
-            // The implementation is resolved from the capability definition, not re-discovered.
-            let output;
-            try {
-                if (capabilityDefinition.implementation) {
-                    // Execute the bound implementation
-                    output = await capabilityDefinition.implementation.execute(inputValidation.value, executionContext);
-                }
-                else {
-                    // Fall back to the handler (for backward compatibility)
-                    output = await capabilityDefinition.handler(inputValidation.value, executionContext);
-                }
-            }
-            catch (error) {
-                // Handle implementation failure
-                // Do NOT expose internal error details like stack traces, credentials, or error messages.
-                // Use a generic error message instead.
-                return {
-                    kind: "failed",
-                    invocationId,
-                    consumer,
-                    provider,
-                    capability: { name: capability.name, version: capability.version },
-                    error: {
-                        kind: "implementation_failure",
-                        reason: "Implementation execution failed"
-                    }
-                };
-            }
-            // STEP 5: Check for cancellation AFTER execution
-            if (executionContext.signal?.aborted) {
-                return {
-                    kind: "cancelled",
-                    invocationId,
-                    consumer,
-                    provider,
-                    capability: { name: capability.name, version: capability.version },
-                    reason: "Invocation was cancelled after execution"
-                };
-            }
-            // STEP 6: Validate output against capability schema
-            const outputValidation = capabilityDefinition.output.validate(output);
-            if (!outputValidation.ok) {
-                return {
-                    kind: "failed",
-                    invocationId,
-                    consumer,
-                    provider,
-                    capability: { name: capability.name, version: capability.version },
-                    error: {
-                        kind: "invalid_output",
-                        reason: `Output validation failed: ${this.#formatValidationIssues(outputValidation.issues)}`
-                    }
-                };
-            }
-            // SUCCESS
-            return {
-                kind: "success",
-                invocationId,
-                consumer,
-                provider,
-                capability: { name: capability.name, version: capability.version },
-                output: outputValidation.value
-            };
-        }
-        catch (error) {
-            // Unexpected errors in invocation orchestration itself
-            const reason = error instanceof Error ? error.message : String(error);
-            return {
-                kind: "failed",
-                invocationId,
-                consumer: binding.consumer,
-                provider: binding.provider,
-                capability: { name: binding.capability.name, version: binding.capability.version },
-                error: {
-                    kind: "implementation_failure",
-                    reason: `Invocation failed: ${reason}`
-                }
-            };
-        }
-    }
-    /**
-     * Validate that the binding is consistent with the execution context.
-     *
-     * This enforces the critical invariant:
-     * - binding.consumer MUST match the actual caller
-     * - binding.provider MUST match the selected provider
-     * - binding.capability MUST match the capability being invoked
-     *
-     * Throws InvalidBindingError if any consistency check fails.
-     * This error is NOT recovered — it represents an architectural violation.
-     */
-    #validateBindingConsistency(binding, context, invocationId) {
-        // Note: The consumer identity comes from the execution context.
-        // This is the caller identity as established by the application/transport layer.
-        // We validate that it matches the binding consumer.
-        const callerIdentity = context.principal?.id ?? context.session?.principal?.id ?? "unknown";
-        // The binding consumer application ID should match the caller identity context.
-        // This prevents a binding created for one consumer from being used by another.
-        if (binding.consumer.id && context.authorization) {
-            // Binding consumer is an ApplicationState, which has the application ID.
-            // We verify that this binding was intended for invocation in this context.
-            // The authorization context should reflect the binding consumer's permissions.
-            // For now, we verify the structure is present and valid.
-            // Deep validation depends on the specific authorization context format.
-            if (!binding.consumer.id) {
-                throw {
-                    kind: "invalid_binding",
-                    reason: "Binding consumer application identity is missing"
-                };
-            }
-        }
-        // Verify binding capability matches the executing capability
-        // (This is already checked at the binding creation level, but we verify again)
-        if (binding.capability.name && binding.capability.version) {
-            // The capability definition should be for this capability
-            // This check prevents invoking the wrong capability through a binding
-            if (typeof binding.capability.name !== "string" || typeof binding.capability.version !== "number") {
-                throw {
-                    kind: "invalid_binding",
-                    reason: "Binding capability identity is invalid"
-                };
-            }
-        }
-        // Verify binding provider is valid
-        if (!binding.provider || !binding.provider.id) {
-            throw {
-                kind: "invalid_binding",
-                reason: "Binding provider identity is missing or invalid"
-            };
-        }
-        // Verify authorization decision is present and authorized
-        if (!binding.authorization || binding.authorization.kind !== "authorized") {
-            throw {
-                kind: "invalid_binding",
-                reason: "Binding authorization is not authorized (should be denied at binding creation, not invocation)"
-            };
-        }
-    }
-    /**
-     * Format validation issues for error messages.
-     * This helper abstracts the schema validation issue format.
-     */
-    #formatValidationIssues(issues) {
-        if (!issues || issues.length === 0) {
-            return "Unknown validation error";
-        }
-        if (issues.length === 1) {
-            const issue = issues[0];
-            if (typeof issue === "object" && issue !== null && "message" in issue) {
-                return String(issue.message);
-            }
-            return String(issue);
-        }
-        return `${issues.length} validation errors`;
-    }
-}
-/**
- * Default capability invoker: a singleton for common use.
- */
-export const defaultCapabilityInvoker = new CapabilityInvoker();
-//# sourceMappingURL=invocation.js.map

package/vendor/@appport/core/dist/invocation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invocation.js","sourceRoot":"","sources":["../src/invocation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,6BAA6B,EAAoC,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAIxE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAyN3C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C,EAC5C,oBAA2D,EAC3D,gBAA4C;QAE5C,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAChD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAEnD,IAAI,CAAC;YACH,6BAA6B,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;YAC1C,sDAAsD;YACtD,sFAAsF;YACtF,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAE1E,mDAAmD;YACnD,mDAAmD;YACnD,mFAAmF;YACnF,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;gBACxB,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,YAAY;oBACZ,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBAClE,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,MAAM,EAAE,4BAA4B,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE;qBAC3F;iBACF,CAAC;YACJ,CAAC;YAED,kDAAkD;YAClD,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,YAAY;oBACZ,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBAClE,MAAM,EAAE,2CAA2C;iBACpD,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,oFAAoF;YACpF,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,oBAAoB,CAAC,cAAc,EAAE,CAAC;oBACxC,mCAAmC;oBACnC,MAAM,GAAG,MAAM,oBAAoB,CAAC,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBACtG,CAAC;qBAAM,CAAC;oBACN,wDAAwD;oBACxD,MAAM,GAAG,MAAO,oBAAoB,CAAC,OAAyD,CAC5F,eAAe,CAAC,KAAK,EACrB,gBAAgB,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gCAAgC;gBAChC,0FAA0F;gBAC1F,uCAAuC;gBACvC,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,YAAY;oBACZ,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBAClE,KAAK,EAAE;wBACL,IAAI,EAAE,wBAAwB;wBAC9B,MAAM,EAAE,iCAAiC;qBAC1C;iBACF,CAAC;YACJ,CAAC;YAED,iDAAiD;YACjD,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,YAAY;oBACZ,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBAClE,MAAM,EAAE,0CAA0C;iBACnD,CAAC;YACJ,CAAC;YAED,oDAAoD;YACpD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACzB,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,YAAY;oBACZ,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBAClE,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,6BAA6B,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE;qBAC7F;iBACF,CAAC;YACJ,CAAC;YAED,UAAU;YACV,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,YAAY;gBACZ,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;gBAClE,MAAM,EAAE,gBAAgB,CAAC,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uDAAuD;YACvD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,YAAY;gBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;gBAClF,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,MAAM,EAAE,sBAAsB,MAAM,EAAE;iBACvC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,2BAA2B,CACzB,OAAoC,EACpC,OAAmC,EACnC,YAAoB;QAEpB,gEAAgE;QAChE,iFAAiF;QACjF,oDAAoD;QACpD,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,SAAS,CAAC;QAE5F,gFAAgF;QAChF,+EAA+E;QAC/E,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACjD,yEAAyE;YACzE,2EAA2E;YAC3E,+EAA+E;YAE/E,yDAAyD;YACzD,wEAAwE;YACxE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACzB,MAAM;oBACJ,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,kDAAkD;iBACpC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,+EAA+E;QAC/E,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC1D,0DAA0D;YAC1D,sEAAsE;YACtE,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAClG,MAAM;oBACJ,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,wCAAwC;iBAC1B,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM;gBACJ,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,iDAAiD;aACnC,CAAC;QAC3B,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1E,MAAM;gBACJ,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,gGAAgG;aAClF,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,MAA0B;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,0BAA0B,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;gBACtE,OAAO,MAAM,CAAE,KAAiC,CAAC,OAAO,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,MAAM,oBAAoB,CAAC;IAC9C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/vendor/@appport/core/dist/manifest.d.ts

@@ -1,157 +0,0 @@
-/**
- * Application Manifest (PR19)
- *
- * Canonical application identity and contract description.
- *
- * The manifest represents the externally meaningful boundary of an application:
- * what it provides, what it requires, and the contract metadata.
- *
- * CRITICAL: The manifest contains NO implementation details:
- * - No JavaScript functions
- * - No handlers
- * - No runtime closures
- * - No filesystem paths
- * - No process information
- * - No secrets or credentials
- * - No transport-specific bindings
- *
- * This allows the same application contract to be implemented in any language
- * while maintaining an identical manifest, identity, and fingerprint.
- */
-import type { ApplicationAssembly, VerificationResult } from "./assembly.js";
-import type { JsonValue } from "../../protocol/dist/index.d.ts";
-/**
- * Application Identity: uniquely identifies an application version.
- */
-export interface ApplicationIdentity {
-    readonly id: string;
-    readonly name: string;
-    readonly version: string;
-}
-/**
- * Capability manifest entry: semantic contract information for a capability.
- * Contains no implementation details.
- */
-export interface CapabilityManifestEntry {
-    readonly name: string;
-    readonly version: number;
-    readonly kind: "request" | "stream";
-    readonly description?: string;
-    readonly inputSchema: JsonValue;
-    readonly outputSchema: JsonValue;
-    readonly authorization: readonly string[];
-    readonly idempotency?: "supported" | "unsupported";
-    readonly concurrency?: {
-        readonly mode: "parallel" | "serialized" | "keyed";
-        readonly key?: string;
-    };
-    readonly timeoutMs?: number;
-    readonly emits: readonly string[];
-    readonly deprecated: boolean;
-}
-/**
- * Requirement manifest entry: semantic contract information for a required capability.
- * Contains no implementation details.
- *
- * Supports version constraints (e.g., "^1", "~1.2", ">=2") for deterministic
- * capability resolution (PR22).
- */
-export interface RequirementManifestEntry {
-    readonly name: string;
-    readonly version: number;
-    readonly versionConstraint?: string;
-    readonly provider?: {
-        readonly applicationId?: string;
-    };
-}
-/**
- * Canonical application manifest.
- *
- * This describes what an application provides and requires,
- * independent of implementation.
- *
- * The manifest is:
- * - Implementation-agnostic (no code/handlers/functions)
- * - Serializable to deterministic JSON
- * - Hashable for fingerprinting
- * - Suitable for discovery and registration
- */
-export interface ApplicationManifest {
-    readonly protocol: "AppPort/1";
-    readonly application: ApplicationIdentity;
-    readonly metadata?: Readonly<Record<string, JsonValue>>;
-    readonly provides: readonly CapabilityManifestEntry[];
-    readonly requires: readonly RequirementManifestEntry[];
-}
-/**
- * Canonical manifest serialization.
- *
- * Deterministic JSON representation with:
- * - Alphabetical property ordering
- * - Sorted capability lists
- * - Sorted requirement lists
- * - Consistent formatting
- *
- * Equivalent manifests produce identical serializations.
- */
-export declare function serializeManifest(manifest: ApplicationManifest): string;
-/**
- * Calculate deterministic fingerprint of a manifest.
- *
- * The fingerprint is a SHA256 hash of the canonical serialization.
- * Identical application contracts produce identical fingerprints
- * regardless of:
- * - Implementation language
- * - Declaration order
- * - Implementation details
- * - Runtime state
- *
- * The fingerprint CHANGES when:
- * - Capability version changes
- * - Authorization requirements change
- * - Input/output schema changes
- * - Concurrency policy changes
- * - Timeouts change
- * - Required capabilities change
- * - Any contract metadata changes
- *
- * The fingerprint DOES NOT CHANGE when:
- * - Implementation functions change
- * - Handler logic changes
- * - Declaration order changes
- * - Only runtime state changes
- */
-export declare function fingerprintManifest(manifest: ApplicationManifest): string;
-/**
- * Generate a canonical ApplicationManifest from a verified ApplicationAssembly.
- *
- * IMPORTANT: The assembly must be verified and ready before generating the manifest.
- * A manifest should represent a coherent, ready-to-run application.
- *
- * If you need to generate a manifest from an invalid assembly for debugging,
- * use generateManifestUnchecked() instead.
- */
-export declare function generateManifest(assembly: ApplicationAssembly, verification: VerificationResult): ApplicationManifest;
-/**
- * Generate an ApplicationManifest from an ApplicationAssembly without verification.
- *
- * WARNING: This generates a manifest even if the assembly is invalid.
- * Only use this for debugging or testing invalid applications.
- *
- * For production code, use generateManifest() which requires verification.
- */
-export declare function generateManifestUnchecked(assembly: ApplicationAssembly): ApplicationManifest;
-/**
- * Convert a manifest to a JSON-compatible object suitable for serialization.
- *
- * This is equivalent to JSON.parse(serializeManifest(manifest)).
- */
-export declare function manifestToJson(manifest: ApplicationManifest): any;
-/**
- * Verify that two manifests are semantically equivalent.
- *
- * Returns true if they describe the same application contract,
- * regardless of declaration order or other non-semantic differences.
- */
-export declare function manifestsAreEqual(a: ApplicationManifest, b: ApplicationManifest): boolean;
-//# sourceMappingURL=manifest.d.ts.map

package/vendor/@appport/core/dist/manifest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAuB,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGlG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,OAAO,CAAC;QACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;CACH;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAGvE;AAmFD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAGzE;AA6CD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,GAAG,mBAAmB,CAMrH;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,mBAAmB,CAyC5F;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,mBAAmB,GAAG,GAAG,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAEzF"}

package/vendor/@appport/core/dist/manifest.js

@@ -1,255 +0,0 @@
-/**
- * Application Manifest (PR19)
- *
- * Canonical application identity and contract description.
- *
- * The manifest represents the externally meaningful boundary of an application:
- * what it provides, what it requires, and the contract metadata.
- *
- * CRITICAL: The manifest contains NO implementation details:
- * - No JavaScript functions
- * - No handlers
- * - No runtime closures
- * - No filesystem paths
- * - No process information
- * - No secrets or credentials
- * - No transport-specific bindings
- *
- * This allows the same application contract to be implemented in any language
- * while maintaining an identical manifest, identity, and fingerprint.
- */
-import { sha256 } from "./sha256.js";
-/**
- * Canonical manifest serialization.
- *
- * Deterministic JSON representation with:
- * - Alphabetical property ordering
- * - Sorted capability lists
- * - Sorted requirement lists
- * - Consistent formatting
- *
- * Equivalent manifests produce identical serializations.
- */
-export function serializeManifest(manifest) {
-    const canonical = canonicalizeManifest(manifest);
-    return JSON.stringify(canonical);
-}
-/**
- * Convert manifest to canonical form for serialization.
- * Ensures deterministic property and array ordering.
- */
-function canonicalizeManifest(manifest) {
-    return {
-        protocol: manifest.protocol,
-        application: {
-            id: manifest.application.id,
-            name: manifest.application.name,
-            version: manifest.application.version
-        },
-        ...(manifest.metadata !== undefined ? { metadata: canonicalizeJson(manifest.metadata) } : {}),
-        provides: manifest.provides
-            .slice() // Copy to avoid mutation
-            .sort((a, b) => {
-            const nameComp = a.name.localeCompare(b.name);
-            return nameComp !== 0 ? nameComp : a.version - b.version;
-        })
-            .map(canonicalizeCapabilityManifest),
-        requires: manifest.requires
-            .slice() // Copy to avoid mutation
-            .sort((a, b) => {
-            const nameComp = a.name.localeCompare(b.name);
-            return nameComp !== 0 ? nameComp : a.version - b.version;
-        })
-            .map((r) => ({
-            name: r.name,
-            version: r.version,
-            ...(r.versionConstraint !== undefined ? { versionConstraint: r.versionConstraint } : {}),
-            ...(r.provider !== undefined ? { provider: r.provider } : {})
-        }))
-    };
-}
-function canonicalizeJson(value) {
-    if (Array.isArray(value))
-        return value.map(canonicalizeJson);
-    if (value !== null && typeof value === "object") {
-        return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonicalizeJson(value[key])]));
-    }
-    return value;
-}
-/**
- * Canonicalize a capability manifest entry.
- */
-function canonicalizeCapabilityManifest(cap) {
-    const result = {
-        name: cap.name,
-        version: cap.version,
-        kind: cap.kind,
-        inputSchema: canonicalizeJson(cap.inputSchema),
-        outputSchema: canonicalizeJson(cap.outputSchema),
-        authorization: Array.from(cap.authorization).sort()
-    };
-    if (cap.description !== undefined) {
-        result.description = cap.description;
-    }
-    if (cap.idempotency !== undefined) {
-        result.idempotency = cap.idempotency;
-    }
-    if (cap.concurrency !== undefined) {
-        result.concurrency = {
-            mode: cap.concurrency.mode,
-            ...(cap.concurrency.key !== undefined ? { key: cap.concurrency.key } : {})
-        };
-    }
-    if (cap.timeoutMs !== undefined) {
-        result.timeoutMs = cap.timeoutMs;
-    }
-    result.emits = Array.from(cap.emits).sort();
-    result.deprecated = cap.deprecated;
-    return result;
-}
-/**
- * Calculate deterministic fingerprint of a manifest.
- *
- * The fingerprint is a SHA256 hash of the canonical serialization.
- * Identical application contracts produce identical fingerprints
- * regardless of:
- * - Implementation language
- * - Declaration order
- * - Implementation details
- * - Runtime state
- *
- * The fingerprint CHANGES when:
- * - Capability version changes
- * - Authorization requirements change
- * - Input/output schema changes
- * - Concurrency policy changes
- * - Timeouts change
- * - Required capabilities change
- * - Any contract metadata changes
- *
- * The fingerprint DOES NOT CHANGE when:
- * - Implementation functions change
- * - Handler logic changes
- * - Declaration order changes
- * - Only runtime state changes
- */
-export function fingerprintManifest(manifest) {
-    const canonical = serializeManifest(manifest);
-    return sha256(canonical);
-}
-/**
- * Convert a CapabilityDefinition to a CapabilityManifestEntry.
- *
- * Extracts contract information while excluding implementation details:
- * - Excludes handler function
- * - Excludes implementation binding
- * - Preserves all contract metadata
- */
-function capabilityToManifestEntry(capability) {
-    return {
-        name: capability.name,
-        version: capability.version,
-        kind: capability.kind,
-        ...(capability.description ? { description: capability.description } : {}),
-        inputSchema: schemaToJsonValue(capability.input),
-        outputSchema: schemaToJsonValue(capability.output),
-        authorization: capability.authorization,
-        ...(capability.idempotency ? { idempotency: capability.idempotency } : {}),
-        ...(capability.concurrency ? { concurrency: capability.concurrency } : {}),
-        ...(capability.timeoutMs ? { timeoutMs: capability.timeoutMs } : {}),
-        emits: capability.emits,
-        deprecated: capability.deprecated
-    };
-}
-/**
- * Convert a Schema to a JSON-serializable value.
- * This is needed because Schema objects are not directly JSON-serializable.
- */
-function schemaToJsonValue(schema) {
-    // Schemas have a toJSONSchema() method for serialization
-    if (typeof schema === "object" && schema !== null && "toJSONSchema" in schema) {
-        return schema.toJSONSchema();
-    }
-    // Fallback: convert to JSON string and parse (for direct JSON schemas)
-    if (typeof schema === "object" && schema !== null) {
-        return schema;
-    }
-    return schema;
-}
-/**
- * Generate a canonical ApplicationManifest from a verified ApplicationAssembly.
- *
- * IMPORTANT: The assembly must be verified and ready before generating the manifest.
- * A manifest should represent a coherent, ready-to-run application.
- *
- * If you need to generate a manifest from an invalid assembly for debugging,
- * use generateManifestUnchecked() instead.
- */
-export function generateManifest(assembly, verification) {
-    if (!verification.ready) {
-        throw new Error("Cannot generate manifest: application is not verified and ready. Call assembly.verify() first.");
-    }
-    return generateManifestUnchecked(assembly);
-}
-/**
- * Generate an ApplicationManifest from an ApplicationAssembly without verification.
- *
- * WARNING: This generates a manifest even if the assembly is invalid.
- * Only use this for debugging or testing invalid applications.
- *
- * For production code, use generateManifest() which requires verification.
- */
-export function generateManifestUnchecked(assembly) {
-    const provides = [];
-    for (const capability of assembly.provides) {
-        provides.push(capabilityToManifestEntry(capability));
-    }
-    // Sort provides by name then version for determinism
-    provides.sort((a, b) => {
-        const nameComp = a.name.localeCompare(b.name);
-        return nameComp !== 0 ? nameComp : a.version - b.version;
-    });
-    const requires = [];
-    for (const required of assembly.requires) {
-        requires.push({
-            name: required.name,
-            version: required.version,
-            ...(required.versionConstraint ? { versionConstraint: required.versionConstraint } : {}),
-            ...(required.provider ? { provider: required.provider } : {})
-        });
-    }
-    // Sort requires by name then version for determinism
-    requires.sort((a, b) => {
-        const nameComp = a.name.localeCompare(b.name);
-        return nameComp !== 0 ? nameComp : a.version - b.version;
-    });
-    return {
-        protocol: "AppPort/1",
-        application: {
-            id: assembly.identity.id,
-            name: assembly.identity.name,
-            version: assembly.identity.version
-        },
-        ...(assembly.metadata ? { metadata: assembly.metadata } : {}),
-        provides,
-        requires
-    };
-}
-/**
- * Convert a manifest to a JSON-compatible object suitable for serialization.
- *
- * This is equivalent to JSON.parse(serializeManifest(manifest)).
- */
-export function manifestToJson(manifest) {
-    return JSON.parse(serializeManifest(manifest));
-}
-/**
- * Verify that two manifests are semantically equivalent.
- *
- * Returns true if they describe the same application contract,
- * regardless of declaration order or other non-semantic differences.
- */
-export function manifestsAreEqual(a, b) {
-    return fingerprintManifest(a) === fingerprintManifest(b);
-}
-//# sourceMappingURL=manifest.js.map