@fabricorg/experience-runtime 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,131 @@
+# Changelog
+
+## 0.2.0
+
+### Minor Changes
+
+- 337e89c: Make offline replay truthful and give three conformance suites teeth.
+
+  Offline replay carried no marker and dropped the capture moment. An adapter had to remember to set
+  `executionReason` for the gateway to apply offline eligibility rules, and capture-authority evidence
+  was stamped at receipt, so it attested a moment nobody was there for. `ExperienceReplayRequest` now
+  carries `executionReason` and `capturedAt` structurally, and the gateway uses the supplied instant,
+  bounded so it must parse and must not be in the future.
+
+  Replay resolved to `completed` or `failed`, which collapsed three outcomes the platform deliberately
+  distinguishes and kept every failure queued. A capture the platform had already applied counted as a
+  failure and retried, when replaying an idempotent action twice is the mechanism working; a capture
+  refused on authority grounds retried until its TTL rather than surfacing. `replay()` now returns
+  `reconciled` alongside the counts, holding each settled refusal and the reason given. Unrecognised
+  errors stay transient, so an unfamiliar failure is retried rather than discarded.
+
+  Gateway conformance accepted any result carrying an `actionInvocationId`, so a replacement that
+  fabricated an id and queried data directly passed; the subject now reports what the governed hosts
+  observed, and reads are certified through `ProjectionHost`. Component-pack certification accepted one
+  placeholder for every declared component and could not see a fresh function per call, because every
+  function stringifies to `undefined`. Renderers must now be distinct per component, undeclared names
+  must resolve to nothing, and determinism compares identity for anything not JSON-representable.
+
+- 9a5b18a: Close what a fifth review found, including a regression the previous fix introduced.
+
+  **Ambiguity fired on legal documents.** Counting every declared view made publishing a view at two
+  versions a hard failure, and view versioning is a first-class pattern: the platform and the usage
+  contract both key a view on `name@version`. It also failed a release over a capability that release
+  never touched. Ambiguity is now reported for _granted_ references only, where a versionless reference
+  genuinely cannot pick between two versions, and a contract supplied twice gets its own finding
+  instead of making every one of its views look ambiguous.
+
+  **A failed replay is `unknown`, not `refused`.** `failed` is reachable after adapter steps succeeded
+  and the domain transaction committed, so telling an operator the action was definitely refused could
+  be as wrong as telling them it was applied. Only policy blocks and validation failures are decided
+  before any effect. A replay adapter that returns nothing is surfaced rather than counted as applied,
+  which was the one line the previous rewrite left untouched.
+
+  **`parked` and `expired` carry their records**, and reconciliation carries the invocation id. Bare
+  counts left nobody able to say which action needs approving or whose work was dropped, and external
+  reconciliation needs the id the type exists to enable.
+
+  Settled-failure classification gained the superseded-action-version case and dropped two it had
+  wrong: a future-dated capture comes good as clocks correct, and a gateway missing its replay window
+  is a deployment mistake somebody will fix. Discarding either would destroy work.
+
+  **`assertPortSuiteHasTeeth` takes a set of broken adapters.** Requiring one stub to trip every check
+  was unsatisfiable for any suite with a fixture-liveness guard, since the guard bites on the
+  complement of what it guards, and two reference ports could not pass their own suites. Port ids now
+  permit a hyphen in the first segment, so a port can be defined for every name a manifest can declare,
+  and `certifyAdapter` validates its definition rather than issuing evidence the gate reports as
+  missing.
+
+- 9b2e55b: Close what a fourth review found: each earlier fix closed one instance of a class and left its
+  siblings.
+
+  **Replay disposition is now exhaustive over `ActionStatus`.** The previous fix enumerated the two
+  statuses that looked like refusals, so `failed`, `validation_failed` and `waiting_for_approval` fell
+  through and were deleted from the queue and reported to the operator as applied — the same bug the
+  fix set out to kill, one layer in. Any returned outcome now means the platform holds the invocation,
+  so the capture leaves the queue either way; what differs is whether a person needs to hear about it.
+  An undeterminable adapter outcome is reported as `unknown` rather than `refused`, because the effect
+  may well have happened. `isSettledReplayFailure` learned the refusals the sibling commit introduced,
+  including a capture rejected for age, which can never come good.
+
+  **A replay without `capturedAt` is refused.** It was reachable only through an untyped cast, so
+  omitting it skipped the age check entirely and stamped receipt time into durable capture evidence.
+
+  **A capability can name a namespaced port.** `definePort` required a dot and the manifest validator
+  forbade one, so no real capability could name a defined port and the certification gate was
+  unreachable. Certification is also checked structurally rather than by the presence of a property, so
+  a hand-written claim no longer satisfies the gate that exists to demand evidence, and a port
+  requirement narrows its candidates as each constraint is applied.
+
+  **`assertPortSuiteHasTeeth` names every vacuous check** rather than returning on the first one that
+  bites, and a reference port is actually run through it. The payments control asserts its result, so
+  an adapter that never charges no longer certifies. The capability-reference grammar matches the
+  platform's own view-name rule instead of being stricter than it, and ambiguity is counted by
+  occurrence across views and intents rather than by comparing names within one contract.
+
+- 0d1f6f6: Close what a third independent review found, including two defects introduced by the previous fix.
+
+  **Offline replay counted refusals as successes.** `PlatformHost` reports a refused capture by
+  _returning_ `reconciliation_required` with the reason, not by throwing, so the queue took its success
+  branch, deleted the capture and reported it applied. The reconciliation path was unreachable. Replay
+  now reads the returned outcome. The already-applied branch is removed entirely: a repeated key
+  returns the original invocation without complaint, and an idempotency _conflict_ means the key was
+  reused for a materially different command, so that capture was never applied and is kept rather than
+  discarded.
+
+  **`deriveAuthorizationGrants` defaulted open and reached the signed artifact.** Requirements are
+  optional metadata, so a capability declaring none granted everything to an actor holding nothing.
+  Grants are also carried onto a release unexamined and promotion signs a route for each, so a surplus
+  grant became a signed route to a capability the screen never renders. Undeclared requirements now
+  withhold by default, and `document` scopes the result to references the screen actually binds.
+
+  Several conformance checks could not fail: a search suite passed an adapter returning nothing, a
+  payments suite passed a double-charger that omitted a provider reference, an identity suite certified
+  timestamps the scope check then rejected on every request, an MFE probe could be refused for an
+  unrelated reason, and a channel check accepted any exception as a refusal. Each now proves what it
+  claims. Promotion configuration rejects anything reading like a key rather than two spellings,
+  rejects unknown fields, and constrains the application name that decides the default output path.
+
+### Patch Changes
+
+- Updated dependencies [8ce5e06]
+- Updated dependencies [a598fb9]
+- Updated dependencies [8f75ac9]
+- Updated dependencies [9a5b18a]
+- Updated dependencies [9b2e55b]
+- Updated dependencies [0d1f6f6]
+- Updated dependencies [274d948]
+  - @fabricorg/sdui-release@0.5.0
+
+## 0.1.0
+
+### Minor Changes
+
+- Add signed channel and release admission, scoped render plans, fragment-event
+  sessions, governed view resolution, public conformance, and encrypted-store-required
+  offline capture contracts.
+
+### Patch Changes
+
+- Updated dependencies
+  - @fabricorg/sdui-release@0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fabric
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,20 @@
+# `@fabricorg/experience-runtime`
+
+The supported experience composition runtime, split by trust:
+
+- `/server` verifies admitted releases and issues scope-bound render plans.
+- `/client` consumes plans through fragment events and named bindings.
+- `/offline` captures eligible events for governed replay.
+- the root export contains serializable contracts only.
+
+Client checks detect accidents. They are not authorization. Server plan resolution,
+ProjectionHost, and PlatformHost remain authoritative.
+
+Offline capture stores no credentials or identity claims and requires an
+encrypted-at-rest adapter in production. A capture expires no later than its scoped
+plan, so applications that support a longer offline window must issue an explicitly
+bounded offline-capable plan. Replay always returns through the gateway and current
+Host authority rules.
+
+Replacement runtimes can run `experienceServerChecks` and replacement clients can run
+`experienceClientChecks` without importing Fabric internals.

package/dist/client.cjs

@@ -0,0 +1,146 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// client.ts
+var client_exports = {};
+__export(client_exports, {
+  createExperienceSession: () => createExperienceSession,
+  experienceClientChecks: () => experienceClientChecks,
+  runExperienceClientChecks: () => runExperienceClientChecks
+});
+module.exports = __toCommonJS(client_exports);
+function createExperienceSession(plan, gateway) {
+  const fragments = indexFragments(plan.root);
+  return {
+    plan,
+    async invoke(fragmentId, eventName, parameters, idempotencyKey) {
+      const fragment = fragments.get(fragmentId);
+      if (!fragment?.events?.includes(eventName)) {
+        throw new Error(`Fragment event "${fragmentId}.${eventName}" is not in the render plan.`);
+      }
+      return gateway.invoke({
+        planId: plan.planId,
+        fragmentId,
+        eventName,
+        parameters,
+        ...idempotencyKey === void 0 ? {} : { idempotencyKey }
+      });
+    },
+    async read(fragmentId, bindingName, parameters) {
+      const fragment = fragments.get(fragmentId);
+      if (!fragment?.bindings?.includes(bindingName)) {
+        throw new Error(`Fragment binding "${fragmentId}.${bindingName}" is not in the render plan.`);
+      }
+      return gateway.read({
+        planId: plan.planId,
+        fragmentId,
+        bindingName,
+        ...parameters === void 0 ? {} : { parameters }
+      });
+    }
+  };
+}
+function experienceClientChecks() {
+  const plan = {
+    formatVersion: 1,
+    planId: "conformance-plan",
+    application: "conformance",
+    channel: "test",
+    releaseDigest: "a".repeat(64),
+    assemblyDigest: "b".repeat(64),
+    treeId: "root",
+    tokenSet: { name: "conformance", version: "1.0.0" },
+    expiresAt: "2099-01-01T00:00:00.000Z",
+    root: { id: "root", component: "Action", events: ["press"], bindings: ["summary"] }
+  };
+  return [
+    {
+      id: "fabric.experience.client-tuple-routing.v1",
+      async run(subject) {
+        const calls = [];
+        const session = subject.create(plan, {
+          async invoke(request) {
+            calls.push(`${request.fragmentId}.${request.eventName}`);
+            return { status: "accepted" };
+          },
+          async read(request) {
+            calls.push(`${request.fragmentId}.${request.bindingName}`);
+            return { data: { ok: true } };
+          }
+        });
+        await session.invoke("root", "press", {});
+        await session.read("root", "summary");
+        if (calls.join(",") !== "root.press,root.summary") throw new Error("Client did not route through fragment-event and fragment-binding tuples.");
+        return calls;
+      }
+    },
+    {
+      id: "fabric.experience.client-plan-denial.v1",
+      async run(subject) {
+        let called = false;
+        const session = subject.create(plan, {
+          async invoke() {
+            called = true;
+            return { status: "accepted" };
+          },
+          async read() {
+            called = true;
+            return { data: null };
+          }
+        });
+        let rejected = false;
+        try {
+          await session.invoke("root", "undeclared", {});
+        } catch {
+          rejected = true;
+        }
+        if (!rejected || called) throw new Error("Client forwarded an event that was absent from the scoped plan.");
+        return ["undeclared event rejected locally"];
+      }
+    }
+  ];
+}
+async function runExperienceClientChecks(subject, checks = experienceClientChecks()) {
+  const results = [];
+  for (const check of checks) {
+    try {
+      results.push({ id: check.id, status: "passed", evidence: await check.run(subject) });
+    } catch (error) {
+      results.push({ id: check.id, status: "failed", evidence: [], error: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return { passed: results.every((result) => result.status === "passed"), checks: results };
+}
+function indexFragments(root) {
+  const fragments = /* @__PURE__ */ new Map();
+  const visit = (fragment) => {
+    if (fragments.has(fragment.id)) throw new Error(`Render plan repeats fragment "${fragment.id}".`);
+    fragments.set(fragment.id, fragment);
+    for (const child of fragment.children ?? []) visit(child);
+  };
+  visit(root);
+  return fragments;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createExperienceSession,
+  experienceClientChecks,
+  runExperienceClientChecks
+});
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../client.ts"],"sourcesContent":["import type {\n\tExperienceGatewayClient,\n\tExperienceSession,\n\tRenderPlanFragment,\n\tScopedRenderPlan,\n} from \"./contracts\";\n\nexport type {\n\tExperienceGatewayClient,\n\tExperienceIntentRequest,\n\tExperienceReadRequest,\n\tExperienceSession,\n\tRenderPlanFragment,\n\tScopedRenderPlan,\n} from \"./contracts\";\n\nexport function createExperienceSession(\n\tplan: ScopedRenderPlan,\n\tgateway: ExperienceGatewayClient,\n): ExperienceSession {\n\tconst fragments = indexFragments(plan.root);\n\treturn {\n\t\tplan,\n\t\tasync invoke(fragmentId, eventName, parameters, idempotencyKey) {\n\t\t\tconst fragment = fragments.get(fragmentId);\n\t\t\tif (!fragment?.events?.includes(eventName)) {\n\t\t\t\tthrow new Error(`Fragment event \"${fragmentId}.${eventName}\" is not in the render plan.`);\n\t\t\t}\n\t\t\treturn gateway.invoke({\n\t\t\t\tplanId: plan.planId,\n\t\t\t\tfragmentId,\n\t\t\t\teventName,\n\t\t\t\tparameters,\n\t\t\t\t...(idempotencyKey === undefined ? {} : { idempotencyKey }),\n\t\t\t});\n\t\t},\n\t\tasync read(fragmentId, bindingName, parameters) {\n\t\t\tconst fragment = fragments.get(fragmentId);\n\t\t\tif (!fragment?.bindings?.includes(bindingName)) {\n\t\t\t\tthrow new Error(`Fragment binding \"${fragmentId}.${bindingName}\" is not in the render plan.`);\n\t\t\t}\n\t\t\treturn gateway.read({\n\t\t\t\tplanId: plan.planId,\n\t\t\t\tfragmentId,\n\t\t\t\tbindingName,\n\t\t\t\t...(parameters === undefined ? {} : { parameters }),\n\t\t\t});\n\t\t},\n\t};\n}\n\nexport interface ExperienceClientConformanceSubject {\n\tcreate(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;\n}\n\nexport interface ExperienceClientCheck {\n\tid: \"fabric.experience.client-tuple-routing.v1\" | \"fabric.experience.client-plan-denial.v1\";\n\trun(subject: ExperienceClientConformanceSubject): Promise<string[]>;\n}\n\nexport function experienceClientChecks(): readonly ExperienceClientCheck[] {\n\tconst plan: ScopedRenderPlan = {\n\t\tformatVersion: 1,\n\t\tplanId: \"conformance-plan\",\n\t\tapplication: \"conformance\",\n\t\tchannel: \"test\",\n\t\treleaseDigest: \"a\".repeat(64),\n\t\tassemblyDigest: \"b\".repeat(64),\n\t\ttreeId: \"root\",\n\t\ttokenSet: { name: \"conformance\", version: \"1.0.0\" },\n\t\texpiresAt: \"2099-01-01T00:00:00.000Z\",\n\t\troot: { id: \"root\", component: \"Action\", events: [\"press\"], bindings: [\"summary\"] },\n\t};\n\treturn [\n\t\t{\n\t\t\tid: \"fabric.experience.client-tuple-routing.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tconst calls: string[] = [];\n\t\t\t\tconst session = subject.create(plan, {\n\t\t\t\t\tasync invoke(request) { calls.push(`${request.fragmentId}.${request.eventName}`); return { status: \"accepted\" }; },\n\t\t\t\t\tasync read(request) { calls.push(`${request.fragmentId}.${request.bindingName}`); return { data: { ok: true } }; },\n\t\t\t\t});\n\t\t\t\tawait session.invoke(\"root\", \"press\", {});\n\t\t\t\tawait session.read(\"root\", \"summary\");\n\t\t\t\tif (calls.join(\",\") !== \"root.press,root.summary\") throw new Error(\"Client did not route through fragment-event and fragment-binding tuples.\");\n\t\t\t\treturn calls;\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tid: \"fabric.experience.client-plan-denial.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tlet called = false;\n\t\t\t\tconst session = subject.create(plan, {\n\t\t\t\t\tasync invoke() { called = true; return { status: \"accepted\" }; },\n\t\t\t\t\tasync read() { called = true; return { data: null }; },\n\t\t\t\t});\n\t\t\t\tlet rejected = false;\n\t\t\t\ttry { await session.invoke(\"root\", \"undeclared\", {}); } catch { rejected = true; }\n\t\t\t\tif (!rejected || called) throw new Error(\"Client forwarded an event that was absent from the scoped plan.\");\n\t\t\t\treturn [\"undeclared event rejected locally\"];\n\t\t\t},\n\t\t},\n\t];\n}\n\nexport async function runExperienceClientChecks(\n\tsubject: ExperienceClientConformanceSubject,\n\tchecks: readonly ExperienceClientCheck[] = experienceClientChecks(),\n): Promise<{ passed: boolean; checks: Array<{ id: ExperienceClientCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> }> {\n\tconst results: Array<{ id: ExperienceClientCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> = [];\n\tfor (const check of checks) {\n\t\ttry { results.push({ id: check.id, status: \"passed\", evidence: await check.run(subject) }); }\n\t\tcatch (error) { results.push({ id: check.id, status: \"failed\", evidence: [], error: error instanceof Error ? error.message : String(error) }); }\n\t}\n\treturn { passed: results.every((result) => result.status === \"passed\"), checks: results };\n}\n\nfunction indexFragments(root: RenderPlanFragment): Map<string, RenderPlanFragment> {\n\tconst fragments = new Map<string, RenderPlanFragment>();\n\tconst visit = (fragment: RenderPlanFragment): void => {\n\t\tif (fragments.has(fragment.id)) throw new Error(`Render plan repeats fragment \"${fragment.id}\".`);\n\t\tfragments.set(fragment.id, fragment);\n\t\tfor (const child of fragment.children ?? []) visit(child);\n\t};\n\tvisit(root);\n\treturn fragments;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBO,SAAS,wBACf,MACA,SACoB;AACpB,QAAM,YAAY,eAAe,KAAK,IAAI;AAC1C,SAAO;AAAA,IACN;AAAA,IACA,MAAM,OAAO,YAAY,WAAW,YAAY,gBAAgB;AAC/D,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,UAAI,CAAC,UAAU,QAAQ,SAAS,SAAS,GAAG;AAC3C,cAAM,IAAI,MAAM,mBAAmB,UAAU,IAAI,SAAS,8BAA8B;AAAA,MACzF;AACA,aAAO,QAAQ,OAAO;AAAA,QACrB,QAAQ,KAAK;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,eAAe;AAAA,MAC1D,CAAC;AAAA,IACF;AAAA,IACA,MAAM,KAAK,YAAY,aAAa,YAAY;AAC/C,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,UAAI,CAAC,UAAU,UAAU,SAAS,WAAW,GAAG;AAC/C,cAAM,IAAI,MAAM,qBAAqB,UAAU,IAAI,WAAW,8BAA8B;AAAA,MAC7F;AACA,aAAO,QAAQ,KAAK;AAAA,QACnB,QAAQ,KAAK;AAAA,QACb;AAAA,QACA;AAAA,QACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MAClD,CAAC;AAAA,IACF;AAAA,EACD;AACD;AAWO,SAAS,yBAA2D;AAC1E,QAAM,OAAyB;AAAA,IAC9B,eAAe;AAAA,IACf,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,SAAS;AAAA,IACT,eAAe,IAAI,OAAO,EAAE;AAAA,IAC5B,gBAAgB,IAAI,OAAO,EAAE;AAAA,IAC7B,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ;AAAA,IAClD,WAAW;AAAA,IACX,MAAM,EAAE,IAAI,QAAQ,WAAW,UAAU,QAAQ,CAAC,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE;AAAA,EACnF;AACA,SAAO;AAAA,IACN;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,cAAM,QAAkB,CAAC;AACzB,cAAM,UAAU,QAAQ,OAAO,MAAM;AAAA,UACpC,MAAM,OAAO,SAAS;AAAE,kBAAM,KAAK,GAAG,QAAQ,UAAU,IAAI,QAAQ,SAAS,EAAE;AAAG,mBAAO,EAAE,QAAQ,WAAW;AAAA,UAAG;AAAA,UACjH,MAAM,KAAK,SAAS;AAAE,kBAAM,KAAK,GAAG,QAAQ,UAAU,IAAI,QAAQ,WAAW,EAAE;AAAG,mBAAO,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE;AAAA,UAAG;AAAA,QAClH,CAAC;AACD,cAAM,QAAQ,OAAO,QAAQ,SAAS,CAAC,CAAC;AACxC,cAAM,QAAQ,KAAK,QAAQ,SAAS;AACpC,YAAI,MAAM,KAAK,GAAG,MAAM,0BAA2B,OAAM,IAAI,MAAM,0EAA0E;AAC7I,eAAO;AAAA,MACR;AAAA,IACD;AAAA,IACA;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,YAAI,SAAS;AACb,cAAM,UAAU,QAAQ,OAAO,MAAM;AAAA,UACpC,MAAM,SAAS;AAAE,qBAAS;AAAM,mBAAO,EAAE,QAAQ,WAAW;AAAA,UAAG;AAAA,UAC/D,MAAM,OAAO;AAAE,qBAAS;AAAM,mBAAO,EAAE,MAAM,KAAK;AAAA,UAAG;AAAA,QACtD,CAAC;AACD,YAAI,WAAW;AACf,YAAI;AAAE,gBAAM,QAAQ,OAAO,QAAQ,cAAc,CAAC,CAAC;AAAA,QAAG,QAAQ;AAAE,qBAAW;AAAA,QAAM;AACjF,YAAI,CAAC,YAAY,OAAQ,OAAM,IAAI,MAAM,iEAAiE;AAC1G,eAAO,CAAC,mCAAmC;AAAA,MAC5C;AAAA,IACD;AAAA,EACD;AACD;AAEA,eAAsB,0BACrB,SACA,SAA2C,uBAAuB,GACkF;AACpJ,QAAM,UAAuH,CAAC;AAC9H,aAAW,SAAS,QAAQ;AAC3B,QAAI;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AAAA,IAAG,SACrF,OAAO;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,CAAC,GAAG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAAG;AAAA,EAChJ;AACA,SAAO,EAAE,QAAQ,QAAQ,MAAM,CAAC,WAAW,OAAO,WAAW,QAAQ,GAAG,QAAQ,QAAQ;AACzF;AAEA,SAAS,eAAe,MAA2D;AAClF,QAAM,YAAY,oBAAI,IAAgC;AACtD,QAAM,QAAQ,CAAC,aAAuC;AACrD,QAAI,UAAU,IAAI,SAAS,EAAE,EAAG,OAAM,IAAI,MAAM,iCAAiC,SAAS,EAAE,IAAI;AAChG,cAAU,IAAI,SAAS,IAAI,QAAQ;AACnC,eAAW,SAAS,SAAS,YAAY,CAAC,EAAG,OAAM,KAAK;AAAA,EACzD;AACA,QAAM,IAAI;AACV,SAAO;AACR;","names":[]}

package/dist/client.d.cts

@@ -0,0 +1,23 @@
+import { ScopedRenderPlan, ExperienceGatewayClient, ExperienceSession } from './contracts.cjs';
+export { ExperienceIntentRequest, ExperienceReadRequest, RenderPlanFragment } from './contracts.cjs';
+
+declare function createExperienceSession(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;
+interface ExperienceClientConformanceSubject {
+    create(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;
+}
+interface ExperienceClientCheck {
+    id: "fabric.experience.client-tuple-routing.v1" | "fabric.experience.client-plan-denial.v1";
+    run(subject: ExperienceClientConformanceSubject): Promise<string[]>;
+}
+declare function experienceClientChecks(): readonly ExperienceClientCheck[];
+declare function runExperienceClientChecks(subject: ExperienceClientConformanceSubject, checks?: readonly ExperienceClientCheck[]): Promise<{
+    passed: boolean;
+    checks: Array<{
+        id: ExperienceClientCheck["id"];
+        status: "passed" | "failed";
+        evidence: string[];
+        error?: string;
+    }>;
+}>;
+
+export { type ExperienceClientCheck, type ExperienceClientConformanceSubject, ExperienceGatewayClient, ExperienceSession, ScopedRenderPlan, createExperienceSession, experienceClientChecks, runExperienceClientChecks };

package/dist/client.d.ts

@@ -0,0 +1,23 @@
+import { ScopedRenderPlan, ExperienceGatewayClient, ExperienceSession } from './contracts.js';
+export { ExperienceIntentRequest, ExperienceReadRequest, RenderPlanFragment } from './contracts.js';
+
+declare function createExperienceSession(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;
+interface ExperienceClientConformanceSubject {
+    create(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;
+}
+interface ExperienceClientCheck {
+    id: "fabric.experience.client-tuple-routing.v1" | "fabric.experience.client-plan-denial.v1";
+    run(subject: ExperienceClientConformanceSubject): Promise<string[]>;
+}
+declare function experienceClientChecks(): readonly ExperienceClientCheck[];
+declare function runExperienceClientChecks(subject: ExperienceClientConformanceSubject, checks?: readonly ExperienceClientCheck[]): Promise<{
+    passed: boolean;
+    checks: Array<{
+        id: ExperienceClientCheck["id"];
+        status: "passed" | "failed";
+        evidence: string[];
+        error?: string;
+    }>;
+}>;
+
+export { type ExperienceClientCheck, type ExperienceClientConformanceSubject, ExperienceGatewayClient, ExperienceSession, ScopedRenderPlan, createExperienceSession, experienceClientChecks, runExperienceClientChecks };

package/dist/client.js

@@ -0,0 +1,119 @@
+// client.ts
+function createExperienceSession(plan, gateway) {
+  const fragments = indexFragments(plan.root);
+  return {
+    plan,
+    async invoke(fragmentId, eventName, parameters, idempotencyKey) {
+      const fragment = fragments.get(fragmentId);
+      if (!fragment?.events?.includes(eventName)) {
+        throw new Error(`Fragment event "${fragmentId}.${eventName}" is not in the render plan.`);
+      }
+      return gateway.invoke({
+        planId: plan.planId,
+        fragmentId,
+        eventName,
+        parameters,
+        ...idempotencyKey === void 0 ? {} : { idempotencyKey }
+      });
+    },
+    async read(fragmentId, bindingName, parameters) {
+      const fragment = fragments.get(fragmentId);
+      if (!fragment?.bindings?.includes(bindingName)) {
+        throw new Error(`Fragment binding "${fragmentId}.${bindingName}" is not in the render plan.`);
+      }
+      return gateway.read({
+        planId: plan.planId,
+        fragmentId,
+        bindingName,
+        ...parameters === void 0 ? {} : { parameters }
+      });
+    }
+  };
+}
+function experienceClientChecks() {
+  const plan = {
+    formatVersion: 1,
+    planId: "conformance-plan",
+    application: "conformance",
+    channel: "test",
+    releaseDigest: "a".repeat(64),
+    assemblyDigest: "b".repeat(64),
+    treeId: "root",
+    tokenSet: { name: "conformance", version: "1.0.0" },
+    expiresAt: "2099-01-01T00:00:00.000Z",
+    root: { id: "root", component: "Action", events: ["press"], bindings: ["summary"] }
+  };
+  return [
+    {
+      id: "fabric.experience.client-tuple-routing.v1",
+      async run(subject) {
+        const calls = [];
+        const session = subject.create(plan, {
+          async invoke(request) {
+            calls.push(`${request.fragmentId}.${request.eventName}`);
+            return { status: "accepted" };
+          },
+          async read(request) {
+            calls.push(`${request.fragmentId}.${request.bindingName}`);
+            return { data: { ok: true } };
+          }
+        });
+        await session.invoke("root", "press", {});
+        await session.read("root", "summary");
+        if (calls.join(",") !== "root.press,root.summary") throw new Error("Client did not route through fragment-event and fragment-binding tuples.");
+        return calls;
+      }
+    },
+    {
+      id: "fabric.experience.client-plan-denial.v1",
+      async run(subject) {
+        let called = false;
+        const session = subject.create(plan, {
+          async invoke() {
+            called = true;
+            return { status: "accepted" };
+          },
+          async read() {
+            called = true;
+            return { data: null };
+          }
+        });
+        let rejected = false;
+        try {
+          await session.invoke("root", "undeclared", {});
+        } catch {
+          rejected = true;
+        }
+        if (!rejected || called) throw new Error("Client forwarded an event that was absent from the scoped plan.");
+        return ["undeclared event rejected locally"];
+      }
+    }
+  ];
+}
+async function runExperienceClientChecks(subject, checks = experienceClientChecks()) {
+  const results = [];
+  for (const check of checks) {
+    try {
+      results.push({ id: check.id, status: "passed", evidence: await check.run(subject) });
+    } catch (error) {
+      results.push({ id: check.id, status: "failed", evidence: [], error: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return { passed: results.every((result) => result.status === "passed"), checks: results };
+}
+function indexFragments(root) {
+  const fragments = /* @__PURE__ */ new Map();
+  const visit = (fragment) => {
+    if (fragments.has(fragment.id)) throw new Error(`Render plan repeats fragment "${fragment.id}".`);
+    fragments.set(fragment.id, fragment);
+    for (const child of fragment.children ?? []) visit(child);
+  };
+  visit(root);
+  return fragments;
+}
+export {
+  createExperienceSession,
+  experienceClientChecks,
+  runExperienceClientChecks
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../client.ts"],"sourcesContent":["import type {\n\tExperienceGatewayClient,\n\tExperienceSession,\n\tRenderPlanFragment,\n\tScopedRenderPlan,\n} from \"./contracts\";\n\nexport type {\n\tExperienceGatewayClient,\n\tExperienceIntentRequest,\n\tExperienceReadRequest,\n\tExperienceSession,\n\tRenderPlanFragment,\n\tScopedRenderPlan,\n} from \"./contracts\";\n\nexport function createExperienceSession(\n\tplan: ScopedRenderPlan,\n\tgateway: ExperienceGatewayClient,\n): ExperienceSession {\n\tconst fragments = indexFragments(plan.root);\n\treturn {\n\t\tplan,\n\t\tasync invoke(fragmentId, eventName, parameters, idempotencyKey) {\n\t\t\tconst fragment = fragments.get(fragmentId);\n\t\t\tif (!fragment?.events?.includes(eventName)) {\n\t\t\t\tthrow new Error(`Fragment event \"${fragmentId}.${eventName}\" is not in the render plan.`);\n\t\t\t}\n\t\t\treturn gateway.invoke({\n\t\t\t\tplanId: plan.planId,\n\t\t\t\tfragmentId,\n\t\t\t\teventName,\n\t\t\t\tparameters,\n\t\t\t\t...(idempotencyKey === undefined ? {} : { idempotencyKey }),\n\t\t\t});\n\t\t},\n\t\tasync read(fragmentId, bindingName, parameters) {\n\t\t\tconst fragment = fragments.get(fragmentId);\n\t\t\tif (!fragment?.bindings?.includes(bindingName)) {\n\t\t\t\tthrow new Error(`Fragment binding \"${fragmentId}.${bindingName}\" is not in the render plan.`);\n\t\t\t}\n\t\t\treturn gateway.read({\n\t\t\t\tplanId: plan.planId,\n\t\t\t\tfragmentId,\n\t\t\t\tbindingName,\n\t\t\t\t...(parameters === undefined ? {} : { parameters }),\n\t\t\t});\n\t\t},\n\t};\n}\n\nexport interface ExperienceClientConformanceSubject {\n\tcreate(plan: ScopedRenderPlan, gateway: ExperienceGatewayClient): ExperienceSession;\n}\n\nexport interface ExperienceClientCheck {\n\tid: \"fabric.experience.client-tuple-routing.v1\" | \"fabric.experience.client-plan-denial.v1\";\n\trun(subject: ExperienceClientConformanceSubject): Promise<string[]>;\n}\n\nexport function experienceClientChecks(): readonly ExperienceClientCheck[] {\n\tconst plan: ScopedRenderPlan = {\n\t\tformatVersion: 1,\n\t\tplanId: \"conformance-plan\",\n\t\tapplication: \"conformance\",\n\t\tchannel: \"test\",\n\t\treleaseDigest: \"a\".repeat(64),\n\t\tassemblyDigest: \"b\".repeat(64),\n\t\ttreeId: \"root\",\n\t\ttokenSet: { name: \"conformance\", version: \"1.0.0\" },\n\t\texpiresAt: \"2099-01-01T00:00:00.000Z\",\n\t\troot: { id: \"root\", component: \"Action\", events: [\"press\"], bindings: [\"summary\"] },\n\t};\n\treturn [\n\t\t{\n\t\t\tid: \"fabric.experience.client-tuple-routing.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tconst calls: string[] = [];\n\t\t\t\tconst session = subject.create(plan, {\n\t\t\t\t\tasync invoke(request) { calls.push(`${request.fragmentId}.${request.eventName}`); return { status: \"accepted\" }; },\n\t\t\t\t\tasync read(request) { calls.push(`${request.fragmentId}.${request.bindingName}`); return { data: { ok: true } }; },\n\t\t\t\t});\n\t\t\t\tawait session.invoke(\"root\", \"press\", {});\n\t\t\t\tawait session.read(\"root\", \"summary\");\n\t\t\t\tif (calls.join(\",\") !== \"root.press,root.summary\") throw new Error(\"Client did not route through fragment-event and fragment-binding tuples.\");\n\t\t\t\treturn calls;\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tid: \"fabric.experience.client-plan-denial.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tlet called = false;\n\t\t\t\tconst session = subject.create(plan, {\n\t\t\t\t\tasync invoke() { called = true; return { status: \"accepted\" }; },\n\t\t\t\t\tasync read() { called = true; return { data: null }; },\n\t\t\t\t});\n\t\t\t\tlet rejected = false;\n\t\t\t\ttry { await session.invoke(\"root\", \"undeclared\", {}); } catch { rejected = true; }\n\t\t\t\tif (!rejected || called) throw new Error(\"Client forwarded an event that was absent from the scoped plan.\");\n\t\t\t\treturn [\"undeclared event rejected locally\"];\n\t\t\t},\n\t\t},\n\t];\n}\n\nexport async function runExperienceClientChecks(\n\tsubject: ExperienceClientConformanceSubject,\n\tchecks: readonly ExperienceClientCheck[] = experienceClientChecks(),\n): Promise<{ passed: boolean; checks: Array<{ id: ExperienceClientCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> }> {\n\tconst results: Array<{ id: ExperienceClientCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> = [];\n\tfor (const check of checks) {\n\t\ttry { results.push({ id: check.id, status: \"passed\", evidence: await check.run(subject) }); }\n\t\tcatch (error) { results.push({ id: check.id, status: \"failed\", evidence: [], error: error instanceof Error ? error.message : String(error) }); }\n\t}\n\treturn { passed: results.every((result) => result.status === \"passed\"), checks: results };\n}\n\nfunction indexFragments(root: RenderPlanFragment): Map<string, RenderPlanFragment> {\n\tconst fragments = new Map<string, RenderPlanFragment>();\n\tconst visit = (fragment: RenderPlanFragment): void => {\n\t\tif (fragments.has(fragment.id)) throw new Error(`Render plan repeats fragment \"${fragment.id}\".`);\n\t\tfragments.set(fragment.id, fragment);\n\t\tfor (const child of fragment.children ?? []) visit(child);\n\t};\n\tvisit(root);\n\treturn fragments;\n}\n"],"mappings":";AAgBO,SAAS,wBACf,MACA,SACoB;AACpB,QAAM,YAAY,eAAe,KAAK,IAAI;AAC1C,SAAO;AAAA,IACN;AAAA,IACA,MAAM,OAAO,YAAY,WAAW,YAAY,gBAAgB;AAC/D,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,UAAI,CAAC,UAAU,QAAQ,SAAS,SAAS,GAAG;AAC3C,cAAM,IAAI,MAAM,mBAAmB,UAAU,IAAI,SAAS,8BAA8B;AAAA,MACzF;AACA,aAAO,QAAQ,OAAO;AAAA,QACrB,QAAQ,KAAK;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,eAAe;AAAA,MAC1D,CAAC;AAAA,IACF;AAAA,IACA,MAAM,KAAK,YAAY,aAAa,YAAY;AAC/C,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,UAAI,CAAC,UAAU,UAAU,SAAS,WAAW,GAAG;AAC/C,cAAM,IAAI,MAAM,qBAAqB,UAAU,IAAI,WAAW,8BAA8B;AAAA,MAC7F;AACA,aAAO,QAAQ,KAAK;AAAA,QACnB,QAAQ,KAAK;AAAA,QACb;AAAA,QACA;AAAA,QACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MAClD,CAAC;AAAA,IACF;AAAA,EACD;AACD;AAWO,SAAS,yBAA2D;AAC1E,QAAM,OAAyB;AAAA,IAC9B,eAAe;AAAA,IACf,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,SAAS;AAAA,IACT,eAAe,IAAI,OAAO,EAAE;AAAA,IAC5B,gBAAgB,IAAI,OAAO,EAAE;AAAA,IAC7B,QAAQ;AAAA,IACR,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ;AAAA,IAClD,WAAW;AAAA,IACX,MAAM,EAAE,IAAI,QAAQ,WAAW,UAAU,QAAQ,CAAC,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE;AAAA,EACnF;AACA,SAAO;AAAA,IACN;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,cAAM,QAAkB,CAAC;AACzB,cAAM,UAAU,QAAQ,OAAO,MAAM;AAAA,UACpC,MAAM,OAAO,SAAS;AAAE,kBAAM,KAAK,GAAG,QAAQ,UAAU,IAAI,QAAQ,SAAS,EAAE;AAAG,mBAAO,EAAE,QAAQ,WAAW;AAAA,UAAG;AAAA,UACjH,MAAM,KAAK,SAAS;AAAE,kBAAM,KAAK,GAAG,QAAQ,UAAU,IAAI,QAAQ,WAAW,EAAE;AAAG,mBAAO,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE;AAAA,UAAG;AAAA,QAClH,CAAC;AACD,cAAM,QAAQ,OAAO,QAAQ,SAAS,CAAC,CAAC;AACxC,cAAM,QAAQ,KAAK,QAAQ,SAAS;AACpC,YAAI,MAAM,KAAK,GAAG,MAAM,0BAA2B,OAAM,IAAI,MAAM,0EAA0E;AAC7I,eAAO;AAAA,MACR;AAAA,IACD;AAAA,IACA;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,YAAI,SAAS;AACb,cAAM,UAAU,QAAQ,OAAO,MAAM;AAAA,UACpC,MAAM,SAAS;AAAE,qBAAS;AAAM,mBAAO,EAAE,QAAQ,WAAW;AAAA,UAAG;AAAA,UAC/D,MAAM,OAAO;AAAE,qBAAS;AAAM,mBAAO,EAAE,MAAM,KAAK;AAAA,UAAG;AAAA,QACtD,CAAC;AACD,YAAI,WAAW;AACf,YAAI;AAAE,gBAAM,QAAQ,OAAO,QAAQ,cAAc,CAAC,CAAC;AAAA,QAAG,QAAQ;AAAE,qBAAW;AAAA,QAAM;AACjF,YAAI,CAAC,YAAY,OAAQ,OAAM,IAAI,MAAM,iEAAiE;AAC1G,eAAO,CAAC,mCAAmC;AAAA,MAC5C;AAAA,IACD;AAAA,EACD;AACD;AAEA,eAAsB,0BACrB,SACA,SAA2C,uBAAuB,GACkF;AACpJ,QAAM,UAAuH,CAAC;AAC9H,aAAW,SAAS,QAAQ;AAC3B,QAAI;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AAAA,IAAG,SACrF,OAAO;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,CAAC,GAAG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAAG;AAAA,EAChJ;AACA,SAAO,EAAE,QAAQ,QAAQ,MAAM,CAAC,WAAW,OAAO,WAAW,QAAQ,GAAG,QAAQ,QAAQ;AACzF;AAEA,SAAS,eAAe,MAA2D;AAClF,QAAM,YAAY,oBAAI,IAAgC;AACtD,QAAM,QAAQ,CAAC,aAAuC;AACrD,QAAI,UAAU,IAAI,SAAS,EAAE,EAAG,OAAM,IAAI,MAAM,iCAAiC,SAAS,EAAE,IAAI;AAChG,cAAU,IAAI,SAAS,IAAI,QAAQ;AACnC,eAAW,SAAS,SAAS,YAAY,CAAC,EAAG,OAAM,KAAK;AAAA,EACzD;AACA,QAAM,IAAI;AACV,SAAO;AACR;","names":[]}

package/dist/contracts.cjs

@@ -0,0 +1,19 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// contracts.ts
+var contracts_exports = {};
+module.exports = __toCommonJS(contracts_exports);
+//# sourceMappingURL=contracts.cjs.map

package/dist/contracts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../contracts.ts"],"sourcesContent":["export interface ExperienceScope {\n\ttenantId: string;\n\tspaceId: string;\n\tactorId: string;\n\tactorType: string;\n}\n\nexport interface RenderPlanFragment {\n\tid: string;\n\tcomponent?: string;\n\tprops?: Record<string, unknown>;\n\tslot?: string;\n\tevents?: readonly string[];\n\tofflineEvents?: readonly string[];\n\tbindings?: readonly string[];\n\tchildren?: readonly RenderPlanFragment[];\n}\n\nexport interface ScopedRenderPlan {\n\tformatVersion: 1;\n\tplanId: string;\n\tapplication: string;\n\tchannel: string;\n\treleaseDigest: string;\n\tassemblyDigest: string;\n\ttreeId: string;\n\troot: RenderPlanFragment;\n\ttokenSet: { name: string; version: string };\n\texpiresAt: string;\n}\n\nexport interface ExperienceIntentRequest {\n\tplanId: string;\n\tfragmentId: string;\n\teventName: string;\n\tparameters: Record<string, unknown>;\n\tidempotencyKey?: string;\n}\n\n/**\n * A replay of an action captured while disconnected.\n *\n * The marker and the capture moment travel with the request rather than by\n * adapter convention. An adapter that forwarded a replay as an ordinary intent\n * would skip the Host's offline eligibility and reconciliation rules, and\n * capture-authority evidence stamped at receipt cannot truthfully attest when\n * the operator actually acted.\n */\nexport interface ExperienceReplayRequest extends ExperienceIntentRequest {\n\texecutionReason: \"offline_replay\";\n\t/** RFC 3339 instant the action was captured on the device. */\n\tcapturedAt: string;\n\tidempotencyKey: string;\n}\n\nexport interface ExperienceReadRequest {\n\tplanId: string;\n\tfragmentId: string;\n\tbindingName: string;\n\tparameters?: Record<string, unknown>;\n}\n\nexport interface ExperienceGatewayClient {\n\tinvoke(request: ExperienceIntentRequest): Promise<unknown>;\n\treplay?(request: ExperienceReplayRequest): Promise<ExperienceInvocationOutcome>;\n\tread(request: ExperienceReadRequest): Promise<{ data: unknown; stale?: boolean }>;\n}\n\n/**\n * What a governed submission comes back as.\n *\n * The Host reports a refusal by *returning* `reconciliation_required` with the\n * reason, not by throwing: a lapsed authority is a business outcome rather than\n * an error. Anything reading only the exception path will count a refusal as a\n * success.\n */\nexport interface ExperienceInvocationOutcome {\n\tstatus?: string;\n\treconciliation?: { kind?: string; message?: string };\n\t/** Present when an adapter's own outcome could not be determined. */\n\tadapterReconciliation?: unknown;\n\t[key: string]: unknown;\n}\n\nexport interface ExperienceSession {\n\treadonly plan: ScopedRenderPlan;\n\tinvoke(fragmentId: string, eventName: string, parameters: Record<string, unknown>, idempotencyKey?: string): Promise<unknown>;\n\tread(fragmentId: string, bindingName: string, parameters?: Record<string, unknown>): Promise<{ data: unknown; stale?: boolean }>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/contracts.d.cts

@@ -0,0 +1,95 @@
+interface ExperienceScope {
+    tenantId: string;
+    spaceId: string;
+    actorId: string;
+    actorType: string;
+}
+interface RenderPlanFragment {
+    id: string;
+    component?: string;
+    props?: Record<string, unknown>;
+    slot?: string;
+    events?: readonly string[];
+    offlineEvents?: readonly string[];
+    bindings?: readonly string[];
+    children?: readonly RenderPlanFragment[];
+}
+interface ScopedRenderPlan {
+    formatVersion: 1;
+    planId: string;
+    application: string;
+    channel: string;
+    releaseDigest: string;
+    assemblyDigest: string;
+    treeId: string;
+    root: RenderPlanFragment;
+    tokenSet: {
+        name: string;
+        version: string;
+    };
+    expiresAt: string;
+}
+interface ExperienceIntentRequest {
+    planId: string;
+    fragmentId: string;
+    eventName: string;
+    parameters: Record<string, unknown>;
+    idempotencyKey?: string;
+}
+/**
+ * A replay of an action captured while disconnected.
+ *
+ * The marker and the capture moment travel with the request rather than by
+ * adapter convention. An adapter that forwarded a replay as an ordinary intent
+ * would skip the Host's offline eligibility and reconciliation rules, and
+ * capture-authority evidence stamped at receipt cannot truthfully attest when
+ * the operator actually acted.
+ */
+interface ExperienceReplayRequest extends ExperienceIntentRequest {
+    executionReason: "offline_replay";
+    /** RFC 3339 instant the action was captured on the device. */
+    capturedAt: string;
+    idempotencyKey: string;
+}
+interface ExperienceReadRequest {
+    planId: string;
+    fragmentId: string;
+    bindingName: string;
+    parameters?: Record<string, unknown>;
+}
+interface ExperienceGatewayClient {
+    invoke(request: ExperienceIntentRequest): Promise<unknown>;
+    replay?(request: ExperienceReplayRequest): Promise<ExperienceInvocationOutcome>;
+    read(request: ExperienceReadRequest): Promise<{
+        data: unknown;
+        stale?: boolean;
+    }>;
+}
+/**
+ * What a governed submission comes back as.
+ *
+ * The Host reports a refusal by *returning* `reconciliation_required` with the
+ * reason, not by throwing: a lapsed authority is a business outcome rather than
+ * an error. Anything reading only the exception path will count a refusal as a
+ * success.
+ */
+interface ExperienceInvocationOutcome {
+    status?: string;
+    reconciliation?: {
+        kind?: string;
+        message?: string;
+    };
+    /** Present when an adapter's own outcome could not be determined. */
+    adapterReconciliation?: unknown;
+    [key: string]: unknown;
+}
+interface ExperienceSession {
+    readonly plan: ScopedRenderPlan;
+    invoke(fragmentId: string, eventName: string, parameters: Record<string, unknown>, idempotencyKey?: string): Promise<unknown>;
+    read(fragmentId: string, bindingName: string, parameters?: Record<string, unknown>): Promise<{
+        data: unknown;
+        stale?: boolean;
+    }>;
+}
+
+export type { ExperienceGatewayClient, ExperienceIntentRequest, ExperienceInvocationOutcome, ExperienceReadRequest, ExperienceReplayRequest, ExperienceScope, ExperienceSession, RenderPlanFragment, ScopedRenderPlan };