@appport/sdk 1.1.19 → 1.1.20

package/vendor/@appport/client/dist/host.d.ts

@@ -0,0 +1,62 @@
+import { type RequestMetadata } from "../../protocol/dist/index.d.ts";
+export interface HostConnectOptions {
+    url: string;
+    fetch?: typeof globalThis.fetch;
+    headers?: Record<string, string>;
+    createTraceId?: () => string;
+}
+export interface HostInvokeOptions {
+    headers?: Record<string, string>;
+    permissions?: readonly string[];
+    scopes?: readonly string[];
+    requestId?: string;
+    traceId?: string;
+    timeoutMs?: number;
+    idempotencyKey?: string;
+    metadata?: RequestMetadata;
+    signal?: AbortSignal;
+}
+export interface HostDiscoveryApplication {
+    id: string;
+    version: string;
+    status: "running" | "stopped";
+    capabilities: string[];
+}
+export interface HostDiscoveryDocument {
+    protocol: "AppPort/host-discovery/1";
+    applications: HostDiscoveryApplication[];
+}
+export interface HostCapabilityReference {
+    application: HostDiscoveryApplication;
+    capability: string;
+    name: string;
+    version: number;
+}
+export declare class AppPortHostDiscovery {
+    #private;
+    readonly applications: readonly HostDiscoveryApplication[];
+    constructor(host: AppPortHost, applications: readonly HostDiscoveryApplication[]);
+    application(id: string): AppPortHostApplication;
+    findCapability(applicationId: string, capability: string): HostCapabilityReference | undefined;
+}
+export declare class AppPortHostApplication {
+    #private;
+    readonly id: string;
+    readonly version: string;
+    readonly status: "running" | "stopped";
+    readonly capabilities: readonly string[];
+    constructor(host: AppPortHost, application: HostDiscoveryApplication);
+    capability(capability: string): HostCapabilityReference;
+    invoke<Output = unknown>(capability: string | HostCapabilityReference, input: unknown, options?: HostInvokeOptions): Promise<Output>;
+}
+export declare class AppPortHost {
+    #private;
+    readonly url: string;
+    constructor(options: HostConnectOptions);
+    discover(options?: {
+        signal?: AbortSignal;
+    }): Promise<AppPortHostDiscovery>;
+    invoke<Output = unknown>(capability: HostCapabilityReference, input: unknown, options?: HostInvokeOptions): Promise<Output>;
+}
+export declare function connect(options: string | HostConnectOptions): Promise<AppPortHost>;
+//# sourceMappingURL=host.d.ts.map

package/vendor/@appport/client/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2E,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGlI,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,0BAA0B,CAAC;IACrC,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,wBAAwB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,oBAAoB;;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,wBAAwB,EAAE,CAAC;gBAG/C,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,wBAAwB,EAAE;IAKhF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB;IAM/C,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;CAK/F;AAED,qBAAa,sBAAsB;;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;gBAG7B,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB;IAQpE,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,uBAAuB;IAOvD,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;CAOrI;AAED,qBAAa,WAAW;;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAKT,OAAO,EAAE,kBAAkB;IAQjC,QAAQ,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAa/E,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;CAmCtI;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAExF"}

package/vendor/@appport/client/dist/host.js

@@ -0,0 +1,139 @@
+import { AppPortError, createRequest, newRequestId, newTraceId } from "../../protocol/dist/index.js";
+import { unwrap } from "./client.js";
+export class AppPortHostDiscovery {
+    applications;
+    #host;
+    constructor(host, applications) {
+        this.#host = host;
+        this.applications = applications;
+    }
+    application(id) {
+        const application = this.applications.find(candidate => candidate.id === id);
+        if (!application)
+            throw new AppPortError("NOT_FOUND", `Application ${id} was not discovered`);
+        return new AppPortHostApplication(this.#host, application);
+    }
+    findCapability(applicationId, capability) {
+        const application = this.applications.find(candidate => candidate.id === applicationId);
+        if (!application || !application.capabilities.includes(capability))
+            return undefined;
+        return capabilityReference(application, capability);
+    }
+}
+export class AppPortHostApplication {
+    id;
+    version;
+    status;
+    capabilities;
+    #host;
+    constructor(host, application) {
+        this.#host = host;
+        this.id = application.id;
+        this.version = application.version;
+        this.status = application.status;
+        this.capabilities = application.capabilities;
+    }
+    capability(capability) {
+        if (!this.capabilities.includes(capability)) {
+            throw new AppPortError("NOT_FOUND", `Capability ${capability} was not discovered for ${this.id}`);
+        }
+        return capabilityReference({ id: this.id, version: this.version, status: this.status, capabilities: [...this.capabilities] }, capability);
+    }
+    invoke(capability, input, options) {
+        const reference = typeof capability === "string" ? this.capability(capability) : capability;
+        if (reference.application.id !== this.id) {
+            throw new AppPortError("INVALID_REQUEST", `Capability ${reference.capability} belongs to ${reference.application.id}, not ${this.id}`);
+        }
+        return this.#host.invoke(reference, input, options);
+    }
+}
+export class AppPortHost {
+    url;
+    #fetch;
+    #headers;
+    #createTraceId;
+    constructor(options) {
+        this.url = options.url.replace(/\/$/, "");
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#headers = options.headers;
+        this.#createTraceId = options.createTraceId ?? newTraceId;
+        if (!this.#fetch)
+            throw new AppPortError("INTERNAL_ERROR", "fetch is not available");
+    }
+    async discover(options = {}) {
+        const response = await this.#request(`${this.url}/.well-known/appport`, {
+            headers: this.#headers,
+            signal: options.signal
+        }, "Host discovery endpoint is unreachable");
+        const document = await readJson(response);
+        if (!response.ok)
+            throw new AppPortError(response.status === 404 ? "NOT_FOUND" : "INTERNAL_ERROR", `Host discovery failed (HTTP ${response.status})`);
+        if (document.protocol !== "AppPort/host-discovery/1" || !Array.isArray(document.applications)) {
+            throw new AppPortError("INVALID_PROTOCOL", "The host discovery document is not compatible with AppPort host discovery");
+        }
+        return new AppPortHostDiscovery(this, document.applications);
+    }
+    async invoke(capability, input, options = {}) {
+        const request = createRequest({
+            requestId: options.requestId ?? newRequestId(),
+            capability: { name: capability.name, version: capability.version },
+            input,
+            traceId: options.traceId ?? this.#createTraceId(),
+            idempotencyKey: options.idempotencyKey,
+            timeoutMs: options.timeoutMs,
+            metadata: options.metadata
+        });
+        const response = await this.#request(`${this.url}/apps/${encodeURIComponent(capability.application.id)}/capabilities/${encodeURIComponent(capability.capability)}`, {
+            method: "POST",
+            headers: {
+                ...this.#headers,
+                ...options.headers,
+                "content-type": "application/json",
+                ...authorizationHeader(options)
+            },
+            body: JSON.stringify(request),
+            signal: options.signal
+        }, "Host invocation endpoint is unreachable");
+        const body = await readJson(response);
+        if (!response.ok) {
+            throw new AppPortError(response.status === 404 ? "NOT_FOUND" : response.status === 403 ? "FORBIDDEN" : "INTERNAL_ERROR", `Host invocation failed (HTTP ${response.status})`);
+        }
+        return unwrap(body);
+    }
+    async #request(url, init, message) {
+        try {
+            return await this.#fetch(url, init);
+        }
+        catch (error) {
+            throw new AppPortError("INTERNAL_ERROR", message, { retryable: true, cause: error });
+        }
+    }
+}
+export async function connect(options) {
+    return new AppPortHost(typeof options === "string" ? { url: options } : options);
+}
+function capabilityReference(application, capability) {
+    const parsed = parseCapability(capability);
+    if (!parsed)
+        throw new AppPortError("INVALID_REQUEST", `Invalid capability reference: ${capability}`);
+    return { application, capability, name: parsed.name, version: parsed.version };
+}
+function parseCapability(capability) {
+    const index = capability.lastIndexOf("@");
+    const name = index > 0 ? capability.slice(0, index) : "";
+    const version = index > 0 ? Number(capability.slice(index + 1)) : NaN;
+    return name && Number.isInteger(version) && version > 0 ? { name, version } : undefined;
+}
+function authorizationHeader(options) {
+    const scopes = [...(options.permissions ?? []), ...(options.scopes ?? [])];
+    return scopes.length ? { "x-appport-scopes": scopes.join(",") } : {};
+}
+async function readJson(response) {
+    try {
+        return await response.json();
+    }
+    catch (error) {
+        throw new AppPortError("INVALID_PROTOCOL", "The host returned an invalid JSON response", { cause: error });
+    }
+}
+//# sourceMappingURL=host.js.map

package/vendor/@appport/client/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAA0C,MAAM,mBAAmB,CAAC;AAClI,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAwCrC,MAAM,OAAO,oBAAoB;IACtB,YAAY,CAAsC;IAClD,KAAK,CAAc;IAE5B,YAAY,IAAiB,EAAE,YAAiD;QAC9E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,eAAe,EAAE,qBAAqB,CAAC,CAAC;QAC9F,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAED,cAAc,CAAC,aAAqB,EAAE,UAAkB;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QACrF,OAAO,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IACxB,EAAE,CAAS;IACX,OAAO,CAAS;IAChB,MAAM,CAAwB;IAC9B,YAAY,CAAoB;IAChC,KAAK,CAAc;IAE5B,YAAY,IAAiB,EAAE,WAAqC;QAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC/C,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,cAAc,UAAU,2BAA2B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,CAAmB,UAA4C,EAAE,KAAc,EAAE,OAA2B;QAChH,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5F,IAAI,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,cAAc,SAAS,CAAC,UAAU,eAAe,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACb,GAAG,CAAS;IACZ,MAAM,CAA0B;IAChC,QAAQ,CAAqC;IAC7C,cAAc,CAAe;IAEtC,YAAY,OAA2B;QACrC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAoC,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,sBAAsB,EAAE;YACtE,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EAAE,wCAAwC,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAwB,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,EAAE,+BAA+B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtJ,IAAI,QAAQ,CAAC,QAAQ,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,2EAA2E,CAAC,CAAC;QAC1H,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CAAmB,UAAmC,EAAE,KAAc,EAAE,UAA6B,EAAE;QACjH,MAAM,OAAO,GAAG,aAAa,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,YAAY,EAAE;YAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;YAClE,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE;YACjD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,SAAS,kBAAkB,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE;YAClK,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,QAAQ;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EAAE,yCAAyC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAc,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,EAAE,gCAAgC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/K,CAAC;QACD,OAAO,MAAM,CAAS,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,IAAiB,EAAE,OAAe;QAC5D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoC;IAChE,OAAO,IAAI,WAAW,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAqC,EAAE,UAAkB;IACpF,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,iCAAiC,UAAU,EAAE,CAAC,CAAC;IACtG,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtE,OAAO,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA0B;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,QAAkB;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,4CAA4C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC"}

package/vendor/@appport/client/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `@appport/client` — the transport-independent application client.
+ *
+ * `await app.documents.save(input)` is valid application code on every runtime.
+ * `if (isElectron) { ... } else { fetch(...) }` is not (§2).
+ */
+export * from "./transport.js";
+export * from "./contract.js";
+export * from "./client.js";
+export * from "./duplex.js";
+export * from "./channel.js";
+export * from "./discovery.js";
+export * from "./host.js";
+//# sourceMappingURL=index.d.ts.map

package/vendor/@appport/client/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}

package/vendor/@appport/client/dist/index.js

@@ -0,0 +1,14 @@
+/**
+ * `@appport/client` — the transport-independent application client.
+ *
+ * `await app.documents.save(input)` is valid application code on every runtime.
+ * `if (isElectron) { ... } else { fetch(...) }` is not (§2).
+ */
+export * from "./transport.js";
+export * from "./contract.js";
+export * from "./client.js";
+export * from "./duplex.js";
+export * from "./channel.js";
+export * from "./discovery.js";
+export * from "./host.js";
+//# sourceMappingURL=index.js.map

package/vendor/@appport/client/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}

package/vendor/@appport/client/dist/transport.d.ts

@@ -0,0 +1,42 @@
+import type { AppEventEnvelope, AppRequest, AppResponse, AppStreamRequest } from "../../protocol/dist/index.d.ts";
+export type Unsubscribe = () => void;
+export type EventHandler = (event: AppEventEnvelope) => void;
+export interface TransportEventFilter {
+    /** Event name, `namespace.*`, or `*` for everything the session may observe. */
+    name: string;
+    version?: number;
+}
+/** A stream of chunks with best-effort cancellation (§21). */
+export interface TransportStream extends AsyncIterable<unknown> {
+    cancel(reason?: string): void;
+}
+/**
+ * The transport contract (specification §22).
+ *
+ * Every transport — in-process, HTTP, WebSocket, Electron IPC, Tauri IPC — is
+ * the same conceptual interface. Application code never sees which one is
+ * mounted; that is the invariant the whole protocol exists to protect (§2).
+ */
+export interface AppTransport {
+    /** `inprocess`, `http`, `websocket`, `ipc`, … */
+    readonly kind: string;
+    connect(): Promise<void>;
+    close(): Promise<void>;
+    request(request: AppRequest): Promise<AppResponse>;
+    /**
+     * Subscribes to server events. Transports without a server-initiated channel
+     * (plain HTTP) reject with `STREAM_ERROR`.
+     */
+    subscribe(handler: EventHandler, filter?: TransportEventFilter): Promise<Unsubscribe>;
+    stream(request: AppStreamRequest): TransportStream;
+    /** Advertised optional features, for capability negotiation and diagnostics. */
+    readonly features?: TransportFeatures;
+}
+export interface TransportFeatures {
+    events: boolean;
+    streams: boolean;
+    /** True when the transport keeps a connection open between requests. */
+    persistent: boolean;
+}
+export declare const DEFAULT_FEATURES: TransportFeatures;
+//# sourceMappingURL=transport.d.ts.map

package/vendor/@appport/client/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErG,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAgB,SAAQ,aAAa,CAAC,OAAO,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAAC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,iBAAqE,CAAC"}

package/vendor/@appport/client/dist/transport.js

@@ -0,0 +1,2 @@
+export const DEFAULT_FEATURES = { events: true, streams: true, persistent: true };
+//# sourceMappingURL=transport.js.map

package/vendor/@appport/client/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AA+CA,MAAM,CAAC,MAAM,gBAAgB,GAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC"}

package/vendor/@appport/client/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@appport/client",
+  "version": "1.0.0",
+  "description": "Transport-independent typed AppPort application client.",
+  "license": "Apache-2.0",
+  "repository": "github:rkendel1/appport",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@appport/protocol": "1.0.0"
+  },
+  "peerDependencies": {
+    "@appport/transport-http": "1.0.0",
+    "@appport/transport-websocket": "1.0.0"
+  },
+  "private": true
+}

package/vendor/@appport/core/README.md

@@ -0,0 +1,91 @@
+# @appport/core
+
+The capability runtime: registry, dispatch pipeline, validation, sessions,
+events, streams, operations and telemetry.
+
+Core knows nothing about HTTP, WebSocket, IPC, or any storage engine.
+
+```ts
+import { createApplication, defineCapability, defineEvent } from "@appport/core";
+import { s } from "@appport/schema";
+
+const application = createApplication({
+  application: { id: "com.example.docs", name: "Docs", version: "1.0.0" },
+  capabilities: [documentsSave],
+  events: [documentsChanged],
+  authorizer: permissionAuthorizer()
+});
+
+const response = await application.handleRequest(envelope, { session, transport: "http" });
+```
+
+## The pipeline
+
+```
+receive -> validate -> authorize -> execute -> serialize -> respond
+```
+
+Authorization always runs before privileged logic. Input is validated before
+authorization, so policies see well-formed input. Output is validated too, so a
+handler cannot silently break its published contract.
+
+## What the runtime provides
+
+- **Registry and manifest** — the application's contract, rendered as JSON Schema.
+- **Application registration** — define an application, verify it, and register for
+  durable tracking with identity, manifest, fingerprint, and verification state.
+- **Events** — at-most-once publication, with payload validation.
+- **Streams** — async iterables or `context.createStream()`, with cancellation.
+- **Sessions** — transport-neutral, pluggable storage.
+- **Idempotency** — replayed responses for capabilities that declare support.
+- **Concurrency** — `parallel`, `serialized`, or `keyed(field)`.
+- **Timeouts** — per capability and per request, clamped by the server.
+- **Operations** — `operations.status`, `operations.cancel`, `operations.events`
+  for work that outlives a request.
+- **Telemetry** — identifiers and outcomes, never credentials or payloads.
+- **Sanitization** — production errors carry no stack traces, paths or secrets.
+
+The reserved `appport.manifest` and `appport.ping` capabilities are registered
+automatically, so discovery works identically on transports that have no URLs.
+
+## Application Registration (PR20)
+
+Define, verify, and register applications for durable tracking:
+
+```ts
+import { defineApplication, ApplicationRegistry, MemoryApplicationStateStore } from "@appport/core";
+
+// 1. Define an application (PR18)
+const application = defineApplication({
+  identity: { id: "invoicing", name: "Invoicing", version: "1.0.0" },
+  provides: [invoiceCreate, invoiceSend],
+  requires: [{ name: "payments.charge", version: 1 }],
+  implementations: { "invoice.create@1": createImpl, "invoice.send@1": sendImpl }
+});
+
+// 2. Verify the application (PR19)
+const verification = application.verify();
+if (!verification.ready) throw new Error("Application verification failed");
+
+// 3. Get the canonical manifest and fingerprint (PR19)
+const manifest = application.manifest();
+const fingerprint = application.fingerprint();
+
+// 4. Register for durable tracking (PR20)
+const store = new MemoryApplicationStateStore();
+const registry = new ApplicationRegistry(store);
+
+const registered = await registry.register({
+  identity: application.identity,
+  manifest,
+  fingerprint,
+  verification
+});
+
+// Tracked application state with identity, manifest, fingerprint, verification
+console.log(registered.id, registered.status, registered.revision);
+```
+
+The registered application state is portable and contains no implementation
+details — only the contract, identity, verification state, and lifecycle.
+