@appport/sdk 1.1.19 → 1.1.20

package/vendor/@appport/core/dist/context.d.ts

@@ -0,0 +1,59 @@
+import type { CapabilityRef, JsonValue, Principal, RequestMetadata, Session } from "../../protocol/dist/index.d.ts";
+import type { AuthorizationContext } from "../../authorization/dist/index.d.ts";
+import type { StreamContext } from "./streams.js";
+import type { ApplicationStateContext } from "./state-context.js";
+export interface LogFields {
+    [key: string]: JsonValue | undefined;
+}
+export interface Logger {
+    debug(message: string, fields?: LogFields): void;
+    info(message: string, fields?: LogFields): void;
+    warn(message: string, fields?: LogFields): void;
+    error(message: string, fields?: LogFields): void;
+}
+export declare const silentLogger: Logger;
+export declare function consoleLogger(prefix?: string): Logger;
+/** What a handler passes to `context.emit` (§17). */
+export interface EmitEventInput<Payload = unknown> {
+    name: string;
+    /** Defaults to the registered event's version, or 1. */
+    version?: number;
+    payload: Payload;
+}
+/**
+ * The transport-neutral handler context (specification §10).
+ *
+ * Nothing here leaks the carrier: there is no request object, no socket, no IPC
+ * handle. `db` is deliberately optional and untyped in core — a storage
+ * integration supplies it (§66).
+ */
+export interface CapabilityContext<Db = unknown> {
+    readonly requestId: string;
+    /** Correlation identifier across process boundaries (§54). */
+    readonly traceId: string;
+    readonly capability: CapabilityRef;
+    readonly session?: Session;
+    readonly principal?: Principal;
+    readonly authorization: AuthorizationContext;
+    readonly metadata: RequestMetadata;
+    /** Aborted on client cancellation, timeout or shutdown (§21, §46). */
+    readonly signal: AbortSignal;
+    /** Epoch milliseconds after which the request is considered timed out. */
+    readonly deadline?: number;
+    /** Idempotency key supplied by the client, when the capability supports it (§44). */
+    readonly idempotencyKey?: string;
+    readonly logger: Logger;
+    /** Namespaced protocol extension values carried by the request (§71). */
+    readonly extensions: Readonly<Record<string, JsonValue>>;
+    /** Publishes an application event. */
+    emit(event: EmitEventInput): Promise<void>;
+    /** Creates a writable stream for stream capabilities (§20). */
+    createStream<Chunk = unknown>(highWaterMark?: number): StreamContext<Chunk>;
+    /** Application-supplied resources; `undefined` unless an integration sets it. */
+    readonly db?: Db;
+    /** Arbitrary application services injected at application construction. */
+    readonly services: Readonly<Record<string, unknown>>;
+    /** Application state context (PR27). Available if this invocation has state access. */
+    readonly state?: ApplicationStateContext;
+}
+//# sourceMappingURL=context.d.ts.map

package/vendor/@appport/core/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,WAAW,SAAS;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClD;AAED,eAAO,MAAM,YAAY,EAAE,MAK1B,CAAC;AAEF,wBAAgB,aAAa,CAAC,MAAM,SAAY,GAAG,MAAM,CAMxD;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc,CAAC,OAAO,GAAG,OAAO;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB,CAAC,EAAE,GAAG,OAAO;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACzD,sCAAsC;IACtC,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,+DAA+D;IAC/D,YAAY,CAAC,KAAK,GAAG,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC5E,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,uFAAuF;IACvF,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C"}

package/vendor/@appport/core/dist/context.js

@@ -0,0 +1,14 @@
+export const silentLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { }
+};
+export function consoleLogger(prefix = "appport") {
+    const write = (level) => (message, fields) => {
+        const payload = fields ? ` ${JSON.stringify(fields)}` : "";
+        console[level](`[${prefix}] ${message}${payload}`);
+    };
+    return { debug: write("debug"), info: write("info"), warn: write("warn"), error: write("error") };
+}
+//# sourceMappingURL=context.js.map

package/vendor/@appport/core/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,MAAM,GAAG,SAAS;IAC9C,MAAM,KAAK,GAAG,CAAC,KAA0C,EAAE,EAAE,CAAC,CAAC,OAAe,EAAE,MAAkB,EAAE,EAAE;QACpG,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,OAAO,GAAG,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACpG,CAAC"}

package/vendor/@appport/core/dist/contract-artifact.d.ts

@@ -0,0 +1,15 @@
+import { type ApplicationManifest } from "./manifest.js";
+export declare const APPLICATION_CONTRACT_SCHEMA: "appboundry.contract/1";
+/** Portable, implementation-free representation of an AppBoundry contract. */
+export interface ApplicationContractArtifact {
+    readonly schema: typeof APPLICATION_CONTRACT_SCHEMA;
+    readonly fingerprint: string;
+    readonly contract: ApplicationManifest;
+}
+export declare function createApplicationContractArtifact(contract: ApplicationManifest): ApplicationContractArtifact;
+/** Stable, human-readable serialization suitable for appboundry.contract.json. */
+export declare function serializeApplicationContractArtifact(contract: ApplicationManifest | ApplicationContractArtifact): string;
+export declare function parseApplicationContractArtifact(input: string | unknown): ApplicationContractArtifact;
+/** Validate the semantic contract independently from an implementation/runtime manifest. */
+export declare function assertApplicationContract(value: unknown): asserts value is ApplicationManifest;
+//# sourceMappingURL=contract-artifact.d.ts.map

package/vendor/@appport/core/dist/contract-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-artifact.d.ts","sourceRoot":"","sources":["../src/contract-artifact.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E,8EAA8E;AAC9E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,2BAA2B,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC;AAMD,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,mBAAmB,GAAG,2BAA2B,CAQ5G;AAED,kFAAkF;AAClF,wBAAgB,oCAAoC,CAAC,QAAQ,EAAE,mBAAmB,GAAG,2BAA2B,GAAG,MAAM,CAGxH;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,2BAA2B,CAiBrG;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CA6B9F"}

package/vendor/@appport/core/dist/contract-artifact.js

@@ -0,0 +1,161 @@
+import { fingerprintManifest, manifestToJson } from "./manifest.js";
+export const APPLICATION_CONTRACT_SCHEMA = "appboundry.contract/1";
+const SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+const FORBIDDEN_KEY = /(credential|secret|password|token|private.?key|process|worker|filesystem|path|artifact|endpoint|hostname|binding|grant|provider|repository)/i;
+export function createApplicationContractArtifact(contract) {
+    assertApplicationContract(contract);
+    const canonical = manifestToJson(contract);
+    return {
+        schema: APPLICATION_CONTRACT_SCHEMA,
+        fingerprint: fingerprintManifest(canonical),
+        contract: canonical
+    };
+}
+/** Stable, human-readable serialization suitable for appboundry.contract.json. */
+export function serializeApplicationContractArtifact(contract) {
+    const artifact = "schema" in contract ? parseApplicationContractArtifact(contract) : createApplicationContractArtifact(contract);
+    return `${JSON.stringify(artifact, null, 2)}\n`;
+}
+export function parseApplicationContractArtifact(input) {
+    let value = input;
+    if (typeof input === "string") {
+        try {
+            value = JSON.parse(input);
+        }
+        catch (error) {
+            throw new Error(`Invalid AppBoundry contract JSON: ${message(error)}`);
+        }
+    }
+    const artifact = record(value, "AppBoundry contract artifact");
+    exactKeys(artifact, ["schema", "fingerprint", "contract"], "AppBoundry contract artifact");
+    if (artifact.schema !== APPLICATION_CONTRACT_SCHEMA) {
+        throw new Error(`Unsupported AppBoundry contract schema ${JSON.stringify(artifact.schema)}; expected ${APPLICATION_CONTRACT_SCHEMA}`);
+    }
+    if (typeof artifact.fingerprint !== "string" || !SHA256.test(artifact.fingerprint))
+        throw new Error("AppBoundry contract fingerprint must be a lowercase SHA-256 digest");
+    assertApplicationContract(artifact.contract);
+    const contract = manifestToJson(artifact.contract);
+    const expected = fingerprintManifest(contract);
+    if (artifact.fingerprint !== expected)
+        throw new Error(`AppBoundry contract fingerprint mismatch: expected ${expected}`);
+    return { schema: APPLICATION_CONTRACT_SCHEMA, fingerprint: expected, contract };
+}
+/** Validate the semantic contract independently from an implementation/runtime manifest. */
+export function assertApplicationContract(value) {
+    const manifest = record(value, "contract");
+    exactKeys(manifest, ["protocol", "application", "metadata", "provides", "requires"], "contract");
+    if (manifest.protocol !== "AppPort/1")
+        throw new Error("Contract protocol must be AppPort/1");
+    const application = record(manifest.application, "contract.application");
+    exactKeys(application, ["id", "name", "version"], "contract.application");
+    nonempty(application.id, "contract.application.id");
+    if (/\s/.test(application.id))
+        throw new Error("contract.application.id cannot contain whitespace");
+    nonempty(application.name, "contract.application.name");
+    if (typeof application.version !== "string" || !SEMVER.test(application.version))
+        throw new Error("contract.application.version must be semantic versioning");
+    if (manifest.metadata !== undefined)
+        assertSafeJson(manifest.metadata, "contract.metadata");
+    if (!Array.isArray(manifest.provides))
+        throw new Error("contract.provides must be an array");
+    if (!Array.isArray(manifest.requires))
+        throw new Error("contract.requires must be an array");
+    const provides = new Set();
+    for (const item of manifest.provides) {
+        assertCapability(item);
+        const capability = item;
+        const key = `${capability.name}@${capability.version}`;
+        if (provides.has(key))
+            throw new Error(`Duplicate provided capability ${key}`);
+        provides.add(key);
+    }
+    const requires = new Set();
+    for (const item of manifest.requires) {
+        assertRequirement(item);
+        const requirement = item;
+        const key = `${requirement.name}@${requirement.versionConstraint ?? requirement.version}`;
+        if (requires.has(key))
+            throw new Error(`Duplicate required capability ${key}`);
+        requires.add(key);
+    }
+}
+function assertCapability(value) {
+    const cap = record(value, "provided capability");
+    exactKeys(cap, ["name", "version", "kind", "description", "inputSchema", "outputSchema", "authorization", "idempotency", "concurrency", "timeoutMs", "emits", "deprecated"], "provided capability");
+    nonempty(cap.name, "provided capability.name");
+    positiveInteger(cap.version, "provided capability.version");
+    if (cap.kind !== "request" && cap.kind !== "stream")
+        throw new Error("provided capability.kind must be request or stream");
+    if (cap.description !== undefined && typeof cap.description !== "string")
+        throw new Error("provided capability.description must be a string");
+    assertSafeJson(cap.inputSchema, "provided capability.inputSchema", false);
+    assertSafeJson(cap.outputSchema, "provided capability.outputSchema", false);
+    stringArray(cap.authorization, "provided capability.authorization");
+    stringArray(cap.emits, "provided capability.emits");
+    if (typeof cap.deprecated !== "boolean")
+        throw new Error("provided capability.deprecated must be boolean");
+    if (cap.idempotency !== undefined && cap.idempotency !== "supported" && cap.idempotency !== "unsupported")
+        throw new Error("provided capability.idempotency is invalid");
+    if (cap.timeoutMs !== undefined)
+        positiveInteger(cap.timeoutMs, "provided capability.timeoutMs");
+    if (cap.concurrency !== undefined) {
+        const concurrency = record(cap.concurrency, "provided capability.concurrency");
+        exactKeys(concurrency, ["mode", "key"], "provided capability.concurrency");
+        if (!["parallel", "serialized", "keyed"].includes(concurrency.mode))
+            throw new Error("provided capability.concurrency.mode is invalid");
+        if (concurrency.key !== undefined && typeof concurrency.key !== "string")
+            throw new Error("provided capability.concurrency.key must be a string");
+    }
+}
+function assertRequirement(value) {
+    const requirement = record(value, "required capability");
+    exactKeys(requirement, ["name", "version", "versionConstraint"], "required capability");
+    nonempty(requirement.name, "required capability.name");
+    positiveInteger(requirement.version, "required capability.version");
+    if (requirement.versionConstraint !== undefined && typeof requirement.versionConstraint !== "string")
+        throw new Error("required capability.versionConstraint must be a string");
+}
+function assertSafeJson(value, path, inspectKeys = true) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return;
+    if (typeof value === "number" && Number.isFinite(value))
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => assertSafeJson(entry, `${path}[${index}]`, inspectKeys));
+        return;
+    }
+    const object = record(value, path);
+    // Capability identifiers are map keys here, not metadata field names. A
+    // valid operation such as `chat.count.tokens` must not be mistaken for an
+    // embedded credential. The descriptor stored beneath each identifier is
+    // still inspected normally, including all of its nested fields.
+    if (path === "contract.metadata.appportDiscovery.capabilities") {
+        for (const [key, entry] of Object.entries(object))
+            assertSafeJson(entry, `${path}.${key}`, true);
+        return;
+    }
+    for (const [key, entry] of Object.entries(object)) {
+        if (inspectKeys && FORBIDDEN_KEY.test(key))
+            throw new Error(`${path}.${key} is runtime or sensitive data and cannot enter an application contract`);
+        assertSafeJson(entry, `${path}.${key}`, inspectKeys);
+    }
+}
+function record(value, path) {
+    if (!value || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype)
+        throw new Error(`${path} must be an object`);
+    return value;
+}
+function exactKeys(value, allowed, path) {
+    const extra = Object.keys(value).filter(key => !allowed.includes(key));
+    if (extra.length)
+        throw new Error(`${path} contains unsupported field(s): ${extra.join(", ")}`);
+}
+function nonempty(value, path) { if (typeof value !== "string" || !value.trim())
+    throw new Error(`${path} must be a non-empty string`); }
+function positiveInteger(value, path) { if (!Number.isInteger(value) || value < 1)
+    throw new Error(`${path} must be a positive integer`); }
+function stringArray(value, path) { if (!Array.isArray(value) || value.some(item => typeof item !== "string"))
+    throw new Error(`${path} must be an array of strings`); }
+function message(error) { return error instanceof Error ? error.message : String(error); }
+//# sourceMappingURL=contract-artifact.js.map

package/vendor/@appport/core/dist/contract-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-artifact.js","sourceRoot":"","sources":["../src/contract-artifact.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,cAAc,EAIf,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAgC,CAAC;AAS5E,MAAM,MAAM,GAAG,qFAAqF,CAAC;AACrG,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,aAAa,GAAG,8IAA8I,CAAC;AAErK,MAAM,UAAU,iCAAiC,CAAC,QAA6B;IAC7E,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAwB,CAAC;IAClE,OAAO;QACL,MAAM,EAAE,2BAA2B;QACnC,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC;QAC3C,QAAQ,EAAE,SAAS;KACpB,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oCAAoC,CAAC,QAA2D;IAC9G,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,QAAQ,CAAC,CAAC;IACjI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAuB;IACtE,IAAI,KAAK,GAAY,KAAK,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAClC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IAC/D,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC3F,IAAI,QAAQ,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,2BAA2B,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC1K,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAA+B,CAAwB,CAAC;IACjG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;IACzH,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAClF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IACjG,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9F,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IACzE,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC1E,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9G,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9J,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,IAA+B,CAAC;QACnD,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC/E,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,WAAW,GAAG,IAAgC,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QAC1F,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC/E,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IAC/C,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3H,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC9I,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC1E,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;IAC5E,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;IACpE,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzK,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;QAC/E,SAAS,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;QAC3E,IAAI,CAAE,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvJ,IAAI,WAAW,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACzD,SAAS,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACxF,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACvD,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,WAAW,CAAC,iBAAiB,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAClL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY,EAAE,WAAW,GAAG,IAAI;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC/H,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,gEAAgE;IAChE,IAAI,IAAI,KAAK,iDAAiD,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,cAAc,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,WAAW,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,wEAAwE,CAAC,CAAC;QACpJ,cAAc,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACnK,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,SAAS,CAAC,KAA8B,EAAE,OAA0B,EAAE,IAAY;IACzF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY,IAA6B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;IAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC,CAAC,CAAC;AACnL,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,IAA6B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC,CAAC,CAAC;AACjM,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY,IAA+B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC,CAAC,CAAC;AACpN,SAAS,OAAO,CAAC,KAAc,IAAY,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/vendor/@appport/core/dist/contract-attestation.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Contract Attestation (F6)
+ *
+ * A source proves it implements the AppBoundry contract by attesting
+ * `appboundry.contract.json` against the authoritative contract fingerprint.
+ *
+ * Attestation is the only accepted proof. The runtime implementation manifest
+ * is never substituted for the contract document: a contract mismatch must stay
+ * a contract mismatch (`CONTRACT_MISMATCH`) and must prevent the source from
+ * becoming an eligible implementation.
+ */
+import { type AppBoundryContractDocument } from "./appboundry-contract.js";
+import type { ApplicationManifest } from "./manifest.js";
+/** The failure code a source sees when its contract is not the current one. */
+export declare const CONTRACT_MISMATCH = "CONTRACT_MISMATCH";
+/** The failure code a source sees when it claims another application. */
+export declare const IDENTITY_MISMATCH = "IDENTITY_MISMATCH";
+/** The failure code a source sees when it claims an undeclared capability. */
+export declare const UNDECLARED_CAPABILITY = "UNDECLARED_CAPABILITY";
+export type ContractAttestationStatus = "verified" | typeof CONTRACT_MISMATCH | typeof IDENTITY_MISMATCH;
+/** The durable result of comparing a repository contract with AppBoundry. */
+export interface ContractAttestation {
+    readonly status: ContractAttestationStatus;
+    readonly applicationId: string;
+    readonly contractRevision: number;
+    /** Fingerprint AppBoundry considers authoritative. */
+    readonly expectedFingerprint: string;
+    /** Fingerprint canonically derived from the repository contract document. */
+    readonly observedFingerprint: string;
+    readonly attestedAt: string;
+    readonly reasons: readonly string[];
+}
+/** The authoritative contract AppBoundry owns for an application. */
+export interface AuthoritativeContract {
+    readonly fingerprint: string;
+    readonly manifest: ApplicationManifest;
+}
+/** Reads the authoritative contract AppBoundry owns for an application. */
+export interface AuthoritativeApplicationContract {
+    get(applicationId: string): Promise<AuthoritativeContract | undefined>;
+}
+/**
+ * Attest a repository contract document against the authoritative contract.
+ *
+ * The comparison is fingerprint-based and canonical: the document's declared
+ * fingerprint is never trusted on its own.
+ */
+export declare function attestAppBoundryContract(applicationId: string, document: AppBoundryContractDocument, authoritative: AuthoritativeContract, attestedAt?: string): ContractAttestation;
+/** Coverage split into what the contract declares and what it never declared. */
+export interface CoverageEvaluation {
+    /** Claimed coverage that the authoritative contract declares. */
+    readonly covered: readonly string[];
+    /** Claimed coverage the contract never declared: always rejected. */
+    readonly undeclared: readonly string[];
+    /** Contract capabilities this source does not implement. */
+    readonly uncovered: readonly string[];
+    readonly reasons: readonly string[];
+}
+/**
+ * Evaluate implementation coverage against the authoritative contract.
+ *
+ * `source.coveredCapabilities ⊆ application.contract.provides` is enforced here,
+ * before any implementation eligibility exists.
+ */
+export declare function evaluateCoverage(claimed: readonly string[], authoritative: AuthoritativeContract): CoverageEvaluation;
+/** Coverage evaluated directly against a repository contract document. */
+export declare function evaluateCoverageAgainstDocument(claimed: readonly string[], document: AppBoundryContractDocument): CoverageEvaluation;
+//# sourceMappingURL=contract-attestation.d.ts.map

package/vendor/@appport/core/dist/contract-attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-attestation.d.ts","sourceRoot":"","sources":["../src/contract-attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,OAAO,iBAAiB,GAAG,OAAO,iBAAiB,CAAC;AAEzG,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC;AAED,2EAA2E;AAC3E,MAAM,WAAW,gCAAgC;IAC/C,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CACxE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,0BAA0B,EACpC,aAAa,EAAE,qBAAqB,EACpC,UAAU,GAAE,MAAiC,GAC5C,mBAAmB,CAkBrB;AAED,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,aAAa,EAAE,qBAAqB,GACnC,kBAAkB,CAYpB;AAED,0EAA0E;AAC1E,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,QAAQ,EAAE,0BAA0B,GACnC,kBAAkB,CAWpB"}

package/vendor/@appport/core/dist/contract-attestation.js

@@ -0,0 +1,76 @@
+/**
+ * Contract Attestation (F6)
+ *
+ * A source proves it implements the AppBoundry contract by attesting
+ * `appboundry.contract.json` against the authoritative contract fingerprint.
+ *
+ * Attestation is the only accepted proof. The runtime implementation manifest
+ * is never substituted for the contract document: a contract mismatch must stay
+ * a contract mismatch (`CONTRACT_MISMATCH`) and must prevent the source from
+ * becoming an eligible implementation.
+ */
+import { capabilityCoverageKey, contractProvidedCoverage, fingerprintAppBoundryContract } from "./appboundry-contract.js";
+/** The failure code a source sees when its contract is not the current one. */
+export const CONTRACT_MISMATCH = "CONTRACT_MISMATCH";
+/** The failure code a source sees when it claims another application. */
+export const IDENTITY_MISMATCH = "IDENTITY_MISMATCH";
+/** The failure code a source sees when it claims an undeclared capability. */
+export const UNDECLARED_CAPABILITY = "UNDECLARED_CAPABILITY";
+/**
+ * Attest a repository contract document against the authoritative contract.
+ *
+ * The comparison is fingerprint-based and canonical: the document's declared
+ * fingerprint is never trusted on its own.
+ */
+export function attestAppBoundryContract(applicationId, document, authoritative, attestedAt = new Date().toISOString()) {
+    const observedFingerprint = fingerprintAppBoundryContract(document);
+    const identityMatches = document.application.id === applicationId;
+    const contractMatches = observedFingerprint === authoritative.fingerprint;
+    const reasons = [
+        ...(identityMatches ? [] : [`${IDENTITY_MISMATCH}: the contract declares application "${document.application.id}" but the source is connecting "${applicationId}"`]),
+        ...(contractMatches ? [] : [`${CONTRACT_MISMATCH}: expected ${authoritative.fingerprint} but found ${observedFingerprint}`])
+    ];
+    const status = !identityMatches ? IDENTITY_MISMATCH : contractMatches ? "verified" : CONTRACT_MISMATCH;
+    return {
+        status,
+        applicationId,
+        contractRevision: document.contractRevision,
+        expectedFingerprint: authoritative.fingerprint,
+        observedFingerprint,
+        attestedAt,
+        reasons
+    };
+}
+/**
+ * Evaluate implementation coverage against the authoritative contract.
+ *
+ * `source.coveredCapabilities ⊆ application.contract.provides` is enforced here,
+ * before any implementation eligibility exists.
+ */
+export function evaluateCoverage(claimed, authoritative) {
+    const declared = new Set(authoritative.manifest.provides.map(capabilityCoverageKey));
+    const unique = [...new Set(claimed)].sort();
+    const covered = unique.filter((entry) => declared.has(entry));
+    const undeclared = unique.filter((entry) => !declared.has(entry));
+    const uncovered = [...declared].filter((entry) => !covered.includes(entry)).sort();
+    return {
+        covered,
+        undeclared,
+        uncovered,
+        reasons: undeclared.length ? [`${UNDECLARED_CAPABILITY}: ${undeclared.join(", ")} is not declared by the application contract`] : []
+    };
+}
+/** Coverage evaluated directly against a repository contract document. */
+export function evaluateCoverageAgainstDocument(claimed, document) {
+    const declared = new Set(contractProvidedCoverage(document));
+    const unique = [...new Set(claimed)].sort();
+    const covered = unique.filter((entry) => declared.has(entry));
+    const undeclared = unique.filter((entry) => !declared.has(entry));
+    return {
+        covered,
+        undeclared,
+        uncovered: [...declared].filter((entry) => !covered.includes(entry)).sort(),
+        reasons: undeclared.length ? [`${UNDECLARED_CAPABILITY}: ${undeclared.join(", ")} is not declared by the application contract`] : []
+    };
+}
+//# sourceMappingURL=contract-attestation.js.map

package/vendor/@appport/core/dist/contract-attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-attestation.js","sourceRoot":"","sources":["../src/contract-attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAE9B,MAAM,0BAA0B,CAAC;AAGlC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AA4B7D;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAqB,EACrB,QAAoC,EACpC,aAAoC,EACpC,aAAqB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE7C,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,aAAa,CAAC;IAClE,MAAM,eAAe,GAAG,mBAAmB,KAAK,aAAa,CAAC,WAAW,CAAC;IAC1E,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,wCAAwC,QAAQ,CAAC,WAAW,CAAC,EAAE,mCAAmC,aAAa,GAAG,CAAC,CAAC;QACpK,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,cAAc,aAAa,CAAC,WAAW,cAAc,mBAAmB,EAAE,CAAC,CAAC;KAC7H,CAAC;IACF,MAAM,MAAM,GAA8B,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAClI,OAAO;QACL,MAAM;QACN,aAAa;QACb,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,mBAAmB,EAAE,aAAa,CAAC,WAAW;QAC9C,mBAAmB;QACnB,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA0B,EAC1B,aAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,OAAO;QACL,OAAO;QACP,UAAU;QACV,SAAS;QACT,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,qBAAqB,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,EAAE;KACrI,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,+BAA+B,CAC7C,OAA0B,EAC1B,QAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,OAAO;QACP,UAAU;QACV,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC3E,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,qBAAqB,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,EAAE;KACrI,CAAC;AACJ,CAAC"}

package/vendor/@appport/core/dist/crash-injection.d.ts

@@ -0,0 +1,3 @@
+/** Internal deterministic hard-crash hook used only by cross-process tests. */
+export declare function crashAt(point: string): void;
+//# sourceMappingURL=crash-injection.d.ts.map

package/vendor/@appport/core/dist/crash-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-injection.d.ts","sourceRoot":"","sources":["../src/crash-injection.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAK3C"}

package/vendor/@appport/core/dist/crash-injection.js

@@ -0,0 +1,8 @@
+/** Internal deterministic hard-crash hook used only by cross-process tests. */
+export function crashAt(point) {
+    const nodeProcess = globalThis.process;
+    if (nodeProcess?.env?.APPPORT_INTERNAL_CRASH_POINT === point && nodeProcess?.env?.APPPORT_INTERNAL_CRASH_TEST === "pr33") {
+        nodeProcess.kill(nodeProcess.pid, "SIGKILL");
+    }
+}
+//# sourceMappingURL=crash-injection.js.map

package/vendor/@appport/core/dist/crash-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-injection.js","sourceRoot":"","sources":["../src/crash-injection.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,WAAW,GAAI,UAAkB,CAAC,OAAO,CAAC;IAChD,IAAI,WAAW,EAAE,GAAG,EAAE,4BAA4B,KAAK,KAAK,IAAI,WAAW,EAAE,GAAG,EAAE,2BAA2B,KAAK,MAAM,EAAE,CAAC;QACzH,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/vendor/@appport/core/dist/events.d.ts

@@ -0,0 +1,33 @@
+import type { AppEventEnvelope } from "../../protocol/dist/index.d.ts";
+import type { Logger } from "./context.js";
+export type Unsubscribe = () => void;
+export type EventListener = (event: AppEventEnvelope) => void | Promise<void>;
+export interface EventFilter {
+    /** Event name, or `*` for every event. */
+    name: string;
+    /** When set, only this event version is delivered. */
+    version?: number;
+}
+/**
+ * In-process event distribution (specification §17, §19).
+ *
+ * Delivery is at-most-once and best effort: a listener that throws does not
+ * affect other listeners, and nothing is buffered for absent subscribers.
+ * Durable or at-least-once delivery is a different semantic and belongs to an
+ * integration, not to the core bus.
+ */
+export declare class EventBus {
+    #private;
+    constructor(logger?: Logger);
+    get subscriptionCount(): number;
+    subscribe(filter: EventFilter | string, listener: EventListener, id?: string): Unsubscribe;
+    unsubscribe(subscriptionId: string): boolean;
+    /**
+     * Delivers an event to every matching subscriber. Listener failures are
+     * logged and swallowed — an event is one-way and never answered (§17).
+     */
+    publish(envelope: AppEventEnvelope): Promise<void>;
+    /** Drops every subscription; used on shutdown. */
+    clear(): void;
+}
+//# sourceMappingURL=events.d.ts.map

package/vendor/@appport/core/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9E,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAUD;;;;;;;GAOG;AACH,qBAAa,QAAQ;;gBAKP,MAAM,GAAE,MAAqB;IAIzC,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,WAAW;IAe1F,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAI5C;;;OAGG;IACG,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxD,kDAAkD;IAClD,KAAK,IAAI,IAAI;CAGd"}

package/vendor/@appport/core/dist/events.js

@@ -0,0 +1,79 @@
+import { silentLogger } from "./context.js";
+/**
+ * In-process event distribution (specification §17, §19).
+ *
+ * Delivery is at-most-once and best effort: a listener that throws does not
+ * affect other listeners, and nothing is buffered for absent subscribers.
+ * Durable or at-least-once delivery is a different semantic and belongs to an
+ * integration, not to the core bus.
+ */
+export class EventBus {
+    #subscriptions = new Map();
+    #counter = 0;
+    #logger;
+    constructor(logger = silentLogger) {
+        this.#logger = logger;
+    }
+    get subscriptionCount() {
+        return this.#subscriptions.size;
+    }
+    subscribe(filter, listener, id) {
+        const normalized = typeof filter === "string" ? { name: filter } : filter;
+        this.#counter += 1;
+        const subscriptionId = id ?? `local_${this.#counter}`;
+        this.#subscriptions.set(subscriptionId, {
+            id: subscriptionId,
+            filter: normalized,
+            listener,
+            addressed: id !== undefined
+        });
+        return () => {
+            this.#subscriptions.delete(subscriptionId);
+        };
+    }
+    unsubscribe(subscriptionId) {
+        return this.#subscriptions.delete(subscriptionId);
+    }
+    /**
+     * Delivers an event to every matching subscriber. Listener failures are
+     * logged and swallowed — an event is one-way and never answered (§17).
+     */
+    async publish(envelope) {
+        const targets = [];
+        for (const subscription of this.#subscriptions.values()) {
+            if (matches(subscription.filter, envelope))
+                targets.push(subscription);
+        }
+        await Promise.all(targets.map(async (subscription) => {
+            try {
+                // A connection subscribes with its own id and needs it echoed so the
+                // client can route the event; an in-process listener does not, and
+                // stamping one would corrupt an event log or a replay.
+                await subscription.listener(subscription.addressed ? { ...envelope, subscriptionId: subscription.id } : envelope);
+            }
+            catch (error) {
+                this.#logger.warn("event listener failed", {
+                    event: envelope.event.name,
+                    subscription: subscription.id,
+                    reason: error instanceof Error ? error.name : "unknown"
+                });
+            }
+        }));
+    }
+    /** Drops every subscription; used on shutdown. */
+    clear() {
+        this.#subscriptions.clear();
+    }
+}
+function matches(filter, envelope) {
+    if (filter.name !== "*" && filter.name !== envelope.event.name) {
+        // Namespace subscriptions: `documents.*` matches `documents.changed`.
+        if (!(filter.name.endsWith(".*") && envelope.event.name.startsWith(filter.name.slice(0, -1)))) {
+            return false;
+        }
+    }
+    if (filter.version !== undefined && filter.version !== envelope.event.version)
+        return false;
+    return true;
+}
+//# sourceMappingURL=events.js.map

package/vendor/@appport/core/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAqB5C;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IACV,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1D,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,CAAS;IAEhB,YAAY,SAAiB,YAAY;QACvC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,SAAS,CAAC,MAA4B,EAAE,QAAuB,EAAE,EAAW;QAC1E,MAAM,UAAU,GAAgB,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,cAAc,GAAG,EAAE,IAAI,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE;YACtC,EAAE,EAAE,cAAc;YAClB,MAAM,EAAE,UAAU;YAClB,QAAQ;YACR,SAAS,EAAE,EAAE,KAAK,SAAS;SAC5B,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,cAAsB;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,QAA0B;QACtC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;YACjC,IAAI,CAAC;gBACH,qEAAqE;gBACrE,mEAAmE;gBACnE,uDAAuD;gBACvD,MAAM,YAAY,CAAC,QAAQ,CACzB,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CACrF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBACzC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;oBAC1B,YAAY,EAAE,YAAY,CAAC,EAAE;oBAC7B,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,KAAK;QACH,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,OAAO,CAAC,MAAmB,EAAE,QAA0B;IAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/D,sEAAsE;QACtE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/vendor/@appport/core/dist/execution-barrier.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Internal deterministic cross-process execution barrier.
+ *
+ * Used only by falsification tests, exactly like the hard-crash hook: the
+ * barrier is inert unless the internal environment variables are set, grants
+ * no authority, and never changes an execution decision. It exists so a test
+ * can order an external event (for example a durable revocation committed by a
+ * separate process) against a real production execution boundary without
+ * relying on sleeps.
+ */
+/** Block at `point` until an external process releases it. */
+export declare function barrierAt(point: string): void;
+//# sourceMappingURL=execution-barrier.d.ts.map

package/vendor/@appport/core/dist/execution-barrier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-barrier.d.ts","sourceRoot":"","sources":["../src/execution-barrier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,8DAA8D;AAC9D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAiB7C"}