@lssm/lib.contracts-runtime-core 3.0.1

package/dist/native/local-offline.js

@@ -0,0 +1,81 @@
+// src/local-offline.ts
+var MODES = new Set([
+  "online-only",
+  "memory-cache",
+  "offline-capable"
+]);
+var MODE_ALIASES = {
+  "online-only": "online-only",
+  online: "online-only",
+  disabled: "online-only",
+  false: "online-only",
+  off: "online-only",
+  "memory-cache": "memory-cache",
+  memory: "memory-cache",
+  cache: "memory-cache",
+  "offline-capable": "offline-capable",
+  offline: "offline-capable",
+  enabled: "offline-capable",
+  true: "offline-capable",
+  on: "offline-capable"
+};
+function isLocalOfflineMode(value) {
+  return typeof value === "string" && MODES.has(value);
+}
+function resolveLocalOfflinePolicy(options = {}) {
+  const fallback = options.defaultMode === undefined ? {
+    mode: "online-only",
+    source: "default",
+    reason: "No local/offline policy input was supplied."
+  } : normalizePolicy(options.defaultMode, "explicit") ?? {
+    mode: "online-only",
+    source: "explicit"
+  };
+  const env = normalizePolicy(readEnvValue(options.env), "env", {
+    allowUnknown: true
+  });
+  const flag = normalizePolicy(options.flag, "feature-flag");
+  return flag ?? env ?? fallback;
+}
+function readEnvValue(input) {
+  if (typeof input !== "object" || input === null)
+    return input;
+  if ("CONTRACTSPEC_LOCAL_OFFLINE" in input) {
+    return input.CONTRACTSPEC_LOCAL_OFFLINE;
+  }
+  if ("mode" in input)
+    return input;
+  return;
+}
+function normalizePolicy(input, source, options = {}) {
+  if (input === undefined || input === null || input === "")
+    return;
+  if (typeof input === "boolean") {
+    return { mode: input ? "offline-capable" : "online-only", source };
+  }
+  if (typeof input === "string") {
+    const mode = MODE_ALIASES[input.trim().toLowerCase()];
+    if (mode !== undefined)
+      return { mode, source };
+    if (options.allowUnknown)
+      return;
+  }
+  if (typeof input === "object" && input !== null && "mode" in input) {
+    const policy = input;
+    const mode = typeof policy.mode === "string" ? MODE_ALIASES[policy.mode.trim().toLowerCase()] : undefined;
+    if (mode !== undefined) {
+      return {
+        mode,
+        source,
+        ...typeof policy.reason === "string" ? { reason: policy.reason } : {}
+      };
+    }
+    if (options.allowUnknown)
+      return;
+  }
+  throw new Error(`Unsupported localOffline policy value: ${String(input)}`);
+}
+export {
+  isLocalOfflineMode,
+  resolveLocalOfflinePolicy
+};

package/dist/native/observability.js

@@ -0,0 +1,182 @@
+// src/observability.ts
+import { isSafeEconomicEvidenceRefId } from "@lssm/lib.contracts-spec/operations";
+import {
+  createCounter,
+  createHistogram,
+  logger as defaultLogger
+} from "@lssm/lib.observability";
+
+// src/redaction.ts
+var SECRET_KEY_PATTERN = /(?:token|secret|password|passwd|authorization|api[_-]?key|credential|cookie|session)/i;
+var REDACTED = "[REDACTED]";
+function redactSecrets(value) {
+  if (Array.isArray(value))
+    return value.map(redactSecrets);
+  if (value === null || typeof value !== "object")
+    return value;
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactSecrets(child);
+  }
+  return out;
+}
+var identityEncryption = {
+  encrypt: (value) => value,
+  decrypt: (value) => value
+};
+function hashKey(key) {
+  let hash = 2166136261;
+  for (let index = 0;index < key.length; index += 1) {
+    hash ^= key.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+var redactionDoc = {
+  id: "docs.contracts-runtime-core.redaction",
+  title: "Persisted-state redaction + encryption-at-rest seam",
+  summary: "Secret redaction for durable state plus an encryption-at-rest seam and a PII-safe key hash for logs.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/redaction",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "security", "redaction", "encryption"],
+  body: "redactSecrets recursively strips secret-ish keys (token/secret/password/authorization/api-key/credential/cookie/session) so durable cache+queue state never persists secrets (AC12). EncryptionSeam is the encryption-at-rest seam — default identityEncryption (no-op); sensitive entities plug a real cipher transparently to the storage core. hashKey (FNV-1a) lets observability correlate on a stable key id without logging the raw query key (which embeds input/PII)."
+};
+
+// src/observability.ts
+function attachObservability(events, options = {}) {
+  const log = options.logger ?? defaultLogger;
+  const hash = options.hashKeys === false ? (key) => key : hashKey;
+  const cacheHits = createCounter("contracts_runtime_cache_hits_total", "Cache hits");
+  const cacheMisses = createCounter("contracts_runtime_cache_misses_total", "Cache misses");
+  const fetchLatency = createHistogram("contracts_runtime_fetch_latency_ms", "Fetch latency (ms)");
+  const conflicts = createCounter("contracts_runtime_conflicts_total", "Mutation conflicts");
+  const economicEvidenceRefs = createCounter("contracts_runtime_economic_evidence_refs_total", "Safe economic evidence refs attached to runtime operations");
+  const base = options.correlationId === undefined ? {} : { correlationId: options.correlationId };
+  return events.subscribe((event) => {
+    switch (event.type) {
+      case "cache-hit":
+        cacheHits.add(1);
+        log.debug("cache.hit", { ...base, key: hash(event.key) });
+        break;
+      case "cache-miss":
+        cacheMisses.add(1);
+        log.debug("cache.miss", { ...base, key: hash(event.key) });
+        break;
+      case "fetch-success":
+        fetchLatency.record(event.latencyMs);
+        log.info("fetch.success", {
+          ...base,
+          key: hash(event.key),
+          latencyMs: event.latencyMs
+        });
+        break;
+      case "fetch-error":
+        fetchLatency.record(event.latencyMs);
+        log.warn("fetch.error", {
+          ...base,
+          key: hash(event.key),
+          code: event.code,
+          latencyMs: event.latencyMs
+        });
+        break;
+      case "mutation-enqueued":
+        log.info("mutation.enqueued", {
+          ...base,
+          id: event.id,
+          queueDepth: event.queueDepth
+        });
+        break;
+      case "mutation-replayed":
+        log.info("mutation.replayed", {
+          ...base,
+          id: event.id,
+          queueDepth: event.queueDepth
+        });
+        break;
+      case "mutation-conflict":
+        conflicts.add(1, { strategy: event.strategy, outcome: event.outcome });
+        log.warn("mutation.conflict", {
+          ...base,
+          id: event.id,
+          strategy: event.strategy,
+          outcome: event.outcome
+        });
+        break;
+      case "mutation-retry":
+        log.warn("mutation.retry", {
+          ...base,
+          id: event.id,
+          attempt: event.attempt,
+          delayMs: event.delayMs
+        });
+        break;
+      case "mutation-failed":
+        log.error("mutation.failed", {
+          ...base,
+          id: event.id,
+          code: event.code
+        });
+        break;
+      case "economic-evidence-attached": {
+        const evidenceRefs = serializeEconomicEvidenceRuntimeRefs(event.evidenceRefs);
+        economicEvidenceRefs.add(evidenceRefs.length, {
+          operationKey: event.operationKey
+        });
+        log.info("economic.evidence.attached", {
+          ...base,
+          operationKey: event.operationKey,
+          evidenceRefCount: evidenceRefs.length,
+          evidenceRefs,
+          latencyMs: event.latencyMs
+        });
+        break;
+      }
+      case "auth-expired":
+        log.warn("auth.expired", { ...base, id: event.id });
+        break;
+      case "queue-drained":
+        log.info("queue.drained", { ...base, remaining: event.remaining });
+        break;
+      case "gc-collected":
+        log.info("cache.gc", { ...base, evicted: event.evicted });
+        break;
+      case "revalidated":
+        log.debug("cache.revalidated", { ...base, key: hash(event.key) });
+        break;
+    }
+  });
+}
+var ECONOMIC_EVIDENCE_RUNTIME_REF_KINDS = new Set(["usage", "cost", "budget", "replay", "projection"]);
+function serializeEconomicEvidenceRuntimeRefs(refs) {
+  return refs.flatMap((ref) => {
+    if (typeof ref.id !== "string" || !isSafeEconomicEvidenceRefId(ref.id) || !ECONOMIC_EVIDENCE_RUNTIME_REF_KINDS.has(ref.kind)) {
+      return [];
+    }
+    return [
+      {
+        id: ref.id,
+        kind: ref.kind,
+        ...typeof ref.source === "string" ? { source: ref.source } : {}
+      }
+    ];
+  });
+}
+var observabilityDoc = {
+  id: "docs.contracts-runtime-core.observability",
+  title: "Engine observability binding (no PII)",
+  summary: "Binds the engine EngineEvents stream to the observability lib with hashed keys, safe economic evidence refs, and structured metrics.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/observability",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "observability", "metrics", "logging"],
+  body: "attachObservability subscribes to the framework-neutral EngineEvents stream (emitted by the engine, zero deps) and forwards it to @lssm/lib.observability: structured logs via Logger (debug/info/warn/error) and metrics (cache hit/miss counters, fetch-latency histogram, conflict counter tagged by strategy+outcome, economic evidence ref counter). Query keys embed input, so they are hashed (FNV-1a via hashKey) before logging — never raw (AC12, no PII). economic-evidence-attached events are serialized through a deny-by-default allowlist: ref id, kind, and optional source only; raw provider receipts, prompts, payloads, and unrecognized fields are dropped before log/replay sinks consume them. Optional correlationId is attached to every entry. Lives behind the ./observability subpath so the OTel-backed lib stays out of the main entry bundle; no console.* — logging is the lib's concern."
+};
+export {
+  attachObservability,
+  observabilityDoc
+};

package/dist/native/reachability.js

@@ -0,0 +1,28 @@
+// src/reachability.ts
+function isNetworkAllowed(signal) {
+  return signal !== "offline";
+}
+function createStaticReachabilitySource(signal = "online") {
+  const snapshot = { signal, since: Date.now() };
+  return {
+    getSnapshot: () => snapshot,
+    subscribe: () => () => {}
+  };
+}
+var reachabilityPortDoc = {
+  id: "docs.contracts-runtime-core.reachability",
+  title: "Reachability input port (tri-state)",
+  summary: "Engine-owned reachability input port; integrations feed it, the engine never imports them.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/reachability",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "reachability", "offline", "port"],
+  body: "Tri-state OnlineSignal ('online' | 'restricted' | 'offline'). 'online' allows normal fetch + queue drain. 'restricted' is online-degraded: the engine fetches and drains the queue as if online but may mark results stale-eligible; it never suspends network nor activates the offline queue. Only 'offline' suspends outbound network and activates the durable offline mutation queue. The engine reads reachability solely through ReachabilitySource and MUST NOT import integrations/* — concrete sources (runtime-local networkReachability) are wired via an integration→port adapter (plan §2.3/§4.2, Architect finding 1). isNetworkAllowed mirrors runtime-local's outboundNetworkAllowed = reachability !== 'offline'. createStaticReachabilitySource('online') is the B1a default and online test fixture."
+};
+export {
+  createStaticReachabilitySource,
+  isNetworkAllowed,
+  reachabilityPortDoc
+};

package/dist/native/redaction.js

@@ -0,0 +1,44 @@
+// src/redaction.ts
+var SECRET_KEY_PATTERN = /(?:token|secret|password|passwd|authorization|api[_-]?key|credential|cookie|session)/i;
+var REDACTED = "[REDACTED]";
+function redactSecrets(value) {
+  if (Array.isArray(value))
+    return value.map(redactSecrets);
+  if (value === null || typeof value !== "object")
+    return value;
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactSecrets(child);
+  }
+  return out;
+}
+var identityEncryption = {
+  encrypt: (value) => value,
+  decrypt: (value) => value
+};
+function hashKey(key) {
+  let hash = 2166136261;
+  for (let index = 0;index < key.length; index += 1) {
+    hash ^= key.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+var redactionDoc = {
+  id: "docs.contracts-runtime-core.redaction",
+  title: "Persisted-state redaction + encryption-at-rest seam",
+  summary: "Secret redaction for durable state plus an encryption-at-rest seam and a PII-safe key hash for logs.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/redaction",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "security", "redaction", "encryption"],
+  body: "redactSecrets recursively strips secret-ish keys (token/secret/password/authorization/api-key/credential/cookie/session) so durable cache+queue state never persists secrets (AC12). EncryptionSeam is the encryption-at-rest seam — default identityEncryption (no-op); sensitive entities plug a real cipher transparently to the storage core. hashKey (FNV-1a) lets observability correlate on a stable key id without logging the raw query key (which embeds input/PII)."
+};
+export {
+  hashKey,
+  identityEncryption,
+  redactSecrets,
+  redactionDoc
+};

package/dist/native/storage/async-storage.native.js

@@ -0,0 +1,91 @@
+// src/redaction.ts
+var SECRET_KEY_PATTERN = /(?:token|secret|password|passwd|authorization|api[_-]?key|credential|cookie|session)/i;
+var REDACTED = "[REDACTED]";
+function redactSecrets(value) {
+  if (Array.isArray(value))
+    return value.map(redactSecrets);
+  if (value === null || typeof value !== "object")
+    return value;
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactSecrets(child);
+  }
+  return out;
+}
+var identityEncryption = {
+  encrypt: (value) => value,
+  decrypt: (value) => value
+};
+function hashKey(key) {
+  let hash = 2166136261;
+  for (let index = 0;index < key.length; index += 1) {
+    hash ^= key.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+var redactionDoc = {
+  id: "docs.contracts-runtime-core.redaction",
+  title: "Persisted-state redaction + encryption-at-rest seam",
+  summary: "Secret redaction for durable state plus an encryption-at-rest seam and a PII-safe key hash for logs.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/redaction",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "security", "redaction", "encryption"],
+  body: "redactSecrets recursively strips secret-ish keys (token/secret/password/authorization/api-key/credential/cookie/session) so durable cache+queue state never persists secrets (AC12). EncryptionSeam is the encryption-at-rest seam — default identityEncryption (no-op); sensitive entities plug a real cipher transparently to the storage core. hashKey (FNV-1a) lets observability correlate on a stable key id without logging the raw query key (which embeds input/PII)."
+};
+
+// src/storage/keyed-store.ts
+function createKeyedStorage(driver, options = {}) {
+  const encryption = options.encryption ?? identityEncryption;
+  const redact = options.redact;
+  const prefix = options.namespace ?? "";
+  const toDriverKey = (key) => `${prefix}${key}`;
+  const fromDriverKey = (key) => prefix !== "" && key.startsWith(prefix) ? key.slice(prefix.length) : key;
+  return {
+    async get(key) {
+      const raw = await driver.getItem(toDriverKey(key));
+      if (raw === null)
+        return;
+      const json = await encryption.decrypt(raw);
+      return JSON.parse(json);
+    },
+    async set(key, value) {
+      const json = JSON.stringify(redact === undefined ? value : redact(value));
+      await driver.setItem(toDriverKey(key), await encryption.encrypt(json));
+    },
+    async remove(key) {
+      await driver.removeItem(toDriverKey(key));
+    },
+    async keys(filter) {
+      const raw = await driver.keys();
+      const scoped = prefix === "" ? raw : raw.filter((key) => key.startsWith(prefix)).map(fromDriverKey);
+      return filter === undefined ? scoped : scoped.filter((key) => key.startsWith(filter));
+    },
+    async clear() {
+      await driver.clear();
+    }
+  };
+}
+
+// src/storage/async-storage.native.ts
+function asyncStorageDriver(store) {
+  return {
+    getItem: (key) => store.getItem(key),
+    setItem: (key, value) => store.setItem(key, value),
+    removeItem: (key) => store.removeItem(key),
+    keys: async () => [...await store.getAllKeys()],
+    clear: () => store.clear()
+  };
+}
+function createAsyncStorage(store, options = {}) {
+  return createKeyedStorage(asyncStorageDriver(store), {
+    redact: redactSecrets,
+    ...options
+  });
+}
+export {
+  createAsyncStorage
+};

package/dist/native/storage/keyed-store.js

@@ -0,0 +1,74 @@
+// src/redaction.ts
+var SECRET_KEY_PATTERN = /(?:token|secret|password|passwd|authorization|api[_-]?key|credential|cookie|session)/i;
+var REDACTED = "[REDACTED]";
+function redactSecrets(value) {
+  if (Array.isArray(value))
+    return value.map(redactSecrets);
+  if (value === null || typeof value !== "object")
+    return value;
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactSecrets(child);
+  }
+  return out;
+}
+var identityEncryption = {
+  encrypt: (value) => value,
+  decrypt: (value) => value
+};
+function hashKey(key) {
+  let hash = 2166136261;
+  for (let index = 0;index < key.length; index += 1) {
+    hash ^= key.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+var redactionDoc = {
+  id: "docs.contracts-runtime-core.redaction",
+  title: "Persisted-state redaction + encryption-at-rest seam",
+  summary: "Secret redaction for durable state plus an encryption-at-rest seam and a PII-safe key hash for logs.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/redaction",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "security", "redaction", "encryption"],
+  body: "redactSecrets recursively strips secret-ish keys (token/secret/password/authorization/api-key/credential/cookie/session) so durable cache+queue state never persists secrets (AC12). EncryptionSeam is the encryption-at-rest seam — default identityEncryption (no-op); sensitive entities plug a real cipher transparently to the storage core. hashKey (FNV-1a) lets observability correlate on a stable key id without logging the raw query key (which embeds input/PII)."
+};
+
+// src/storage/keyed-store.ts
+function createKeyedStorage(driver, options = {}) {
+  const encryption = options.encryption ?? identityEncryption;
+  const redact = options.redact;
+  const prefix = options.namespace ?? "";
+  const toDriverKey = (key) => `${prefix}${key}`;
+  const fromDriverKey = (key) => prefix !== "" && key.startsWith(prefix) ? key.slice(prefix.length) : key;
+  return {
+    async get(key) {
+      const raw = await driver.getItem(toDriverKey(key));
+      if (raw === null)
+        return;
+      const json = await encryption.decrypt(raw);
+      return JSON.parse(json);
+    },
+    async set(key, value) {
+      const json = JSON.stringify(redact === undefined ? value : redact(value));
+      await driver.setItem(toDriverKey(key), await encryption.encrypt(json));
+    },
+    async remove(key) {
+      await driver.removeItem(toDriverKey(key));
+    },
+    async keys(filter) {
+      const raw = await driver.keys();
+      const scoped = prefix === "" ? raw : raw.filter((key) => key.startsWith(prefix)).map(fromDriverKey);
+      return filter === undefined ? scoped : scoped.filter((key) => key.startsWith(filter));
+    },
+    async clear() {
+      await driver.clear();
+    }
+  };
+}
+export {
+  createKeyedStorage
+};

package/dist/native/storage/memory.js

@@ -0,0 +1,26 @@
+// src/storage/memory.ts
+function createMemoryStorage() {
+  const store = new Map;
+  return {
+    get: async (key) => {
+      const value = store.get(key);
+      return value === undefined ? undefined : structuredClone(value);
+    },
+    set: async (key, value) => {
+      store.set(key, structuredClone(value));
+    },
+    remove: async (key) => {
+      store.delete(key);
+    },
+    keys: async (prefix) => {
+      const all = [...store.keys()];
+      return prefix === undefined ? all : all.filter((key) => key.startsWith(prefix));
+    },
+    clear: async () => {
+      store.clear();
+    }
+  };
+}
+export {
+  createMemoryStorage
+};

package/dist/native/storage/port.js

@@ -0,0 +1,16 @@
+// src/storage/port.ts
+var storagePortDoc = {
+  id: "docs.contracts-runtime-core.storage-port",
+  title: "Durable storage port (I/O-free contract)",
+  summary: "Value-agnostic durable key/value port; platform impls own serialization, redaction, and encryption-at-rest.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/storage-port",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "storage", "persistence", "port"],
+  body: "Durable key/value StoragePort: get/set/remove/keys/clear. Intentionally value-agnostic — the engine layers CacheEntry and MutationQueueEntry shapes on top and namespaces by key prefix. keys(prefix?) supports GC and offline-queue scans. Implementations persist JSON-serializable values and own serialization, per-contract secret redaction, and the encryption-at-rest seam (AC12). B1a ships an in-memory default (createMemoryStorage); IndexedDB (web) and SQLite/AsyncStorage (native) platform variants land in B1b/#7 behind this same contract."
+};
+export {
+  storagePortDoc
+};

package/dist/native/transport.js

@@ -0,0 +1,27 @@
+// src/transport.ts
+var transportPortDoc = {
+  id: "docs.contracts-runtime-core.transport",
+  title: "Transport port + absorbed data-transmission concept map",
+  summary: "One Transport port carries the canonical protocol; each former data-transmission concept has an explicit home.",
+  kind: "reference",
+  visibility: "internal",
+  route: "/docs/contracts-runtime-core/transport",
+  domain: "contracts-runtime-core",
+  owners: ["@contractspec-core"],
+  tags: ["contracts-runtime-core", "transport", "data-transmission", "port"],
+  body: [
+    "The single Transport port: execute(envelope, ctx) → Promise<ContractResult<QueryResultEnvelope>>, plus an optional subscribe(tags, handler) realtime seam. REST/MCP/WebSocket/in-memory are interchangeable adapters behind it.",
+    "",
+    "Absorbed data-transmission concept map (each former concept has exactly one explicit home — no parallel transport types):",
+    "- idempotency → ContractResult success field (ContractResultIdempotency{key,replayed?,firstSeenAt?} on ContractSuccess.idempotency). NOT a transport argument.",
+    "- subscriptions → Transport.subscribe(tags, handler) seam (no spec type, by design); the version token doubles as the realtime invalidation token. Full delivery is a follow-on; the realtime worker migrates onto this seam in Phase 7.",
+    "- invalidation → the InvalidationTag{entity,id?} vocabulary (contracts-spec/query/invalidation) shared by optimistic updates, offline-queue replay, and realtime broadcast; mutations declare the tags they invalidate.",
+    "- consistency levels → the typed QueryEnvelope.consistency request field and ContractSuccess.consistency applied field (QueryConsistency = eventual | read-your-writes | strong, default read-your-writes). Typed, never prose. Subsumes the former DataFetchConsistency incl. read-your-writes.",
+    "",
+    "TransportContext.principal is opaque and carried end-to-end unchanged (AC14, no-strip); policy.auth enforcement stays in authos/identity-rbac."
+  ].join(`
+`)
+};
+export {
+  transportPortDoc
+};

package/dist/node/approval.js

@@ -0,0 +1 @@
+import{OPERATION_EXECUTION_EFFECTS as f}from"@lssm/lib.contracts-spec/operations";function l(e=()=>new Date){let n=new Map;return{async consume(r,t){let o=e().getTime();for(let[p,a]of n)if(a<=o)n.delete(p);if(n.has(r))return!1;return n.set(r,Date.parse(t)),!0}}}function b(e={}){let n=e.now??(()=>new Date),r=e.nonceStore??l(n);return{async authorize(t){let o=await m(t,n(),e.verifyEvidence);if(o)return o;if(!await r.consume(t.receipt.nonce,t.receipt.expiresAt))return{effect:"deny",reason:"replayed_receipt"};return{effect:"allow",receiptId:t.receipt.id,nonce:t.receipt.nonce}}}}async function d(e){let n=new TextEncoder().encode(s(e)),r=await globalThis.crypto.subtle.digest("SHA-256",n);return`sha256:${Array.from(new Uint8Array(r),(t)=>t.toString(16).padStart(2,"0")).join("")}`}async function m(e,n,r){let{receipt:t}=e,o=Date.parse(t.issuedAt),p=Date.parse(t.expiresAt);if(!t.id||!t.nonce||!t.issuer||!t.evidenceRef||!y(t.subject)||t.effects.some((c)=>!f.includes(c))||!Number.isFinite(o)||!Number.isFinite(p)||p<=o)return i("malformed_receipt");if(p<=n.getTime())return i("expired_receipt");if(o>n.getTime())return i("not_yet_valid");if(!u(t.subject,e.subject,["actor","userId"]))return i("wrong_subject");if(!u(t.subject,e.subject,["tenantId","workspaceId","organizationId"]))return i("wrong_tenant");if(t.operation.key!==e.operation.key||t.operation.version!==e.operation.version)return i("wrong_operation");if(t.inputDigest!==await d(e.input))return i("wrong_input");let a=new Set(t.effects);if(e.requiredEffects.some((c)=>!a.has(c)))return i("insufficient_effects");if(!A(t,e))return i("insufficient_cost_ceiling");if(r&&!await r(t))return i("invalid_evidence");return}function u(e,n,r){return r.every((t)=>{let o=n[t];return o==null||e[t]===o})}function A(e,n){if(!n.requestedCost)return!0;if(!Number.isFinite(n.requestedCost.amount)||n.requestedCost.amount<0)return!1;let r=e.costCeiling;if(!r||!Number.isFinite(r.amount)||r.amount<0)return!1;return r.amount>=n.requestedCost.amount&&(!n.requestedCost.currency||r.currency===n.requestedCost.currency)&&(!n.requestedCost.unit||r.unit===n.requestedCost.unit)}function y(e){return Object.values(e).some((n)=>typeof n==="string"&&n.length>0)}function i(e){return{effect:"deny",reason:e}}function s(e){if(e===null||typeof e==="string"||typeof e==="boolean")return JSON.stringify(e);if(typeof e==="number"){if(!Number.isFinite(e))throw TypeError("Approval input is not JSON.");return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(s).join(",")}]`;if(e instanceof Date)return JSON.stringify(e.toISOString());if(typeof e==="object")return`{${Object.entries(e).filter(([,r])=>r!==void 0).sort(([r],[t])=>r.localeCompare(t)).map(([r,t])=>`${JSON.stringify(r)}:${s(t)}`).join(",")}}`;throw TypeError("Approval input is not JSON.")}export{l as createMemoryApprovalNonceStore,b as createOperationApprovalPort,d as operationApprovalInputDigest};

package/dist/node/contracts-runtime-core.feature.js

@@ -0,0 +1 @@
+import{defineFeature as e}from"@lssm/lib.contracts-spec/features";var r=e({meta:{key:"libs.contracts-runtime-core",version:"1.0.0",title:"Contracts Runtime Core",description:"Framework-neutral in-house query/cache/offline engine and Transport port for ContractSpec data fetching.",domain:"contracts-runtime-core",owners:["@contractspec-core"],tags:["package","libs","contracts-runtime-core"],stability:"experimental"}});export{r as ContractsRuntimeCoreFeature};

package/dist/node/engine/backoff.js

@@ -0,0 +1 @@
+function M(n,t={}){let a=t.baseMs??200,e=t.factor??2,r=t.maxMs??30000,c=t.jitter??Math.random,o=Math.max(0,n-1),s=Math.min(r,a*e**o);return Math.round(s*(0.5+c()*0.5))}export{M as backoffDelayMs};

package/dist/node/engine/cache-store.js

@@ -0,0 +1 @@
+import{invalidationTagMatches as h}from"@lssm/lib.contracts-spec/query/invalidation";var c="cache:";function l(e){let i=new Map,a=(t)=>`${c}${t}`;return{read:(t)=>e.get(a(t)),write:async(t)=>{i.set(t.key,t.tags),await e.set(a(t.key),t)},remove:async(t)=>{i.delete(t),await e.remove(a(t))},entries:async()=>{let t=await e.keys(c),r=[];for(let o of t){let n=await e.get(o);if(n!==void 0)r.push(n)}return r},invalidate:async(t,r)=>{let o=[];for(let[n,y]of i.entries()){if(!y.some((d)=>t.some((m)=>h(d,m))))continue;let s=await e.get(a(n));if(s===void 0)continue;await e.set(a(n),{...s,status:"stale",staleAt:r}),o.push(n)}return o}}}export{l as createCacheStore};

package/dist/node/engine/conflict-registry.js

@@ -0,0 +1 @@
+function i(o){let{serverData:e,localData:r}=o,t=o.mergeFields??[];if(typeof e!=="object"||e===null||typeof r!=="object"||r===null)return{outcome:"surface"};let s={...e},c=r;for(let n of t)if(n in c)s[n]=c[n];return{outcome:"merged",data:s}}function l(){let o=new Map;return{register(e,r){o.set(e,r)},has(e){return o.has(e)},async resolve(e){switch(e.strategy){case"server-wins":return{outcome:"use-server",data:e.serverData};case"client-wins":return{outcome:"use-client",data:e.localData};case"field-merge":return i(e);case"surface":return{outcome:"surface"};default:{let r=e.policy.resolver,t=r===void 0?void 0:o.get(r);if(t===void 0)return{outcome:"surface"};return t(e)}}}}}export{l as createConflictResolverRegistry};

package/dist/node/engine/conflict-resolution.js

@@ -0,0 +1 @@
+import{defaultConflictPolicy as u}from"@lssm/lib.contracts-spec/query/conflict-policy";async function l(t,o){for(let e of t)if(e.previous===void 0)await o.remove(e.key);else await o.write(e.previous)}async function m(t,o,e){let i=t.conflictPolicy??u(),n=t.rollback[0]?.key,r=n===void 0?void 0:await e.cache.read(n),s=o.metadata?.serverData,a=await e.resolvers.resolve({strategy:i.strategy,policy:i,localData:r?.data,serverData:s,localVersion:t.versionToken,serverVersion:o.versionToken,mergeFields:i.mergeFields});switch(e.events.emit({type:"mutation-conflict",id:t.id,strategy:i.strategy,outcome:a.outcome}),a.outcome){case"use-server":{await l(t.rollback,e.cache),await e.cache.invalidate(t.tags,e.now());for(let c of t.rollback)await e.queryEngine?.refresh(c.key);return"resolved"}case"use-client":return await e.queue.update({...t,versionToken:o.versionToken,status:"pending"}),"re-enqueued";case"merged":{if(n!==void 0&&r!==void 0)await e.cache.write({...r,data:a.data,versionToken:o.versionToken,status:"warm",storedAt:e.now()}),await e.queryEngine?.refresh(n);return await e.queue.update({...t,versionToken:o.versionToken,status:"pending"}),"re-enqueued"}default:{if(n!==void 0)await e.queryEngine?.emitConflict(n,{versionToken:o.versionToken,serverData:s,clientData:r?.data,strategy:i.strategy});return"resolved"}}}export{m as resolveQueuedConflict,l as restoreSnapshots};

package/dist/node/engine/data-engine-host.js

@@ -0,0 +1 @@
+var ue=new Set(["online-only","memory-cache","offline-capable"]),Y={"online-only":"online-only",online:"online-only",disabled:"online-only",false:"online-only",off:"online-only","memory-cache":"memory-cache",memory:"memory-cache",cache:"memory-cache","offline-capable":"offline-capable",offline:"offline-capable",enabled:"offline-capable",true:"offline-capable",on:"offline-capable"};function ke(e){return typeof e==="string"&&ue.has(e)}function I(e={}){let t=e.defaultMode===void 0?{mode:"online-only",source:"default",reason:"No local/offline policy input was supplied."}:z(e.defaultMode,"explicit")??{mode:"online-only",source:"explicit"},n=z(le(e.env),"env",{allowUnknown:!0});return z(e.flag,"feature-flag")??n??t}function le(e){if(typeof e!=="object"||e===null)return e;if("CONTRACTSPEC_LOCAL_OFFLINE"in e)return e.CONTRACTSPEC_LOCAL_OFFLINE;if("mode"in e)return e;return}function z(e,t,n={}){if(e===void 0||e===null||e==="")return;if(typeof e==="boolean")return{mode:e?"offline-capable":"online-only",source:t};if(typeof e==="string"){let a=Y[e.trim().toLowerCase()];if(a!==void 0)return{mode:a,source:t};if(n.allowUnknown)return}if(typeof e==="object"&&e!==null&&"mode"in e){let a=e,i=typeof a.mode==="string"?Y[a.mode.trim().toLowerCase()]:void 0;if(i!==void 0)return{mode:i,source:t,...typeof a.reason==="string"?{reason:a.reason}:{}};if(n.allowUnknown)return}throw Error(`Unsupported localOffline policy value: ${String(e)}`)}function C(e){return e!=="offline"}function R(e="online"){let t={signal:e,since:Date.now()};return{getSnapshot:()=>t,subscribe:()=>()=>{}}}var Me={id:"docs.contracts-runtime-core.reachability",title:"Reachability input port (tri-state)",summary:"Engine-owned reachability input port; integrations feed it, the engine never imports them.",kind:"reference",visibility:"internal",route:"/docs/contracts-runtime-core/reachability",domain:"contracts-runtime-core",owners:["@contractspec-core"],tags:["contracts-runtime-core","reachability","offline","port"],body:"Tri-state OnlineSignal ('online' | 'restricted' | 'offline'). 'online' allows normal fetch + queue drain. 'restricted' is online-degraded: the engine fetches and drains the queue as if online but may mark results stale-eligible; it never suspends network nor activates the offline queue. Only 'offline' suspends outbound network and activates the durable offline mutation queue. The engine reads reachability solely through ReachabilitySource and MUST NOT import integrations/* — concrete sources (runtime-local networkReachability) are wired via an integration→port adapter (plan §2.3/§4.2, Architect finding 1). isNetworkAllowed mirrors runtime-local's outboundNetworkAllowed = reachability !== 'offline'. createStaticReachabilitySource('online') is the B1a default and online test fixture."};function _(){let e=new Map;return{get:async(t)=>{let n=e.get(t);return n===void 0?void 0:structuredClone(n)},set:async(t,n)=>{e.set(t,structuredClone(n))},remove:async(t)=>{e.delete(t)},keys:async(t)=>{let n=[...e.keys()];return t===void 0?n:n.filter((a)=>a.startsWith(t))},clear:async()=>{e.clear()}}}import{invalidationTagMatches as fe}from"@lssm/lib.contracts-spec/query/invalidation";var Z="cache:";function U(e){let t=new Map,n=(a)=>`${Z}${a}`;return{read:(a)=>e.get(n(a)),write:async(a)=>{t.set(a.key,a.tags),await e.set(n(a.key),a)},remove:async(a)=>{t.delete(a),await e.remove(n(a))},entries:async()=>{let a=await e.keys(Z),i=[];for(let u of a){let r=await e.get(u);if(r!==void 0)i.push(r)}return i},invalidate:async(a,i)=>{let u=[];for(let[r,y]of t.entries()){if(!y.some((h)=>a.some((E)=>fe(h,E))))continue;let T=await e.get(n(r));if(T===void 0)continue;await e.set(n(r),{...T,status:"stale",staleAt:i}),u.push(r)}return u}}}function de(e){let{serverData:t,localData:n}=e,a=e.mergeFields??[];if(typeof t!=="object"||t===null||typeof n!=="object"||n===null)return{outcome:"surface"};let i={...t},u=n;for(let r of a)if(r in u)i[r]=u[r];return{outcome:"merged",data:i}}function F(){let e=new Map;return{register(t,n){e.set(t,n)},has(t){return e.has(t)},async resolve(t){switch(t.strategy){case"server-wins":return{outcome:"use-server",data:t.serverData};case"client-wins":return{outcome:"use-client",data:t.localData};case"field-merge":return de(t);case"surface":return{outcome:"surface"};default:{let n=t.policy.resolver,a=n===void 0?void 0:e.get(n);if(a===void 0)return{outcome:"surface"};return a(t)}}}}}function A(){let e=new Set;return{emit(t){for(let n of e)n(t)},subscribe(t){return e.add(t),()=>{e.delete(t)}}}}function ee(e){return{async collectGarbage(){let t=e.now(),n=0;for(let a of await e.cache.entries())if(a.expiresAt!==void 0&&t>=a.expiresAt)await e.cache.remove(a.key),n+=1;return e.events.emit({type:"gc-collected",evicted:n}),n},async revalidateStale(){let t=e.revalidate;if(t===void 0)return 0;let n=e.now(),a=0;for(let i of await e.cache.entries()){if(!(i.staleAt!==void 0&&n>=i.staleAt)||i.envelope===void 0)continue;await t(i.envelope),e.events.emit({type:"revalidated",key:i.key}),a+=1}return a}}}import{mergeSafeEconomicEvidenceRefIds as me,parseSafeEconomicEvidenceRefId as ye}from"@lssm/lib.contracts-spec/operations";import{defaultConflictPolicy as ge}from"@lssm/lib.contracts-spec/query/conflict-policy";function te(e,t={}){let n=t.baseMs??200,a=t.factor??2,i=t.maxMs??30000,u=t.jitter??Math.random,r=Math.max(0,e-1),y=Math.min(i,n*a**r);return Math.round(y*(0.5+u()*0.5))}import{defaultConflictPolicy as pe}from"@lssm/lib.contracts-spec/query/conflict-policy";async function N(e,t){for(let n of e)if(n.previous===void 0)await t.remove(n.key);else await t.write(n.previous)}async function ne(e,t,n){let a=e.conflictPolicy??pe(),i=e.rollback[0]?.key,u=i===void 0?void 0:await n.cache.read(i),r=t.metadata?.serverData,y=await n.resolvers.resolve({strategy:a.strategy,policy:a,localData:u?.data,serverData:r,localVersion:e.versionToken,serverVersion:t.versionToken,mergeFields:a.mergeFields});switch(n.events.emit({type:"mutation-conflict",id:e.id,strategy:a.strategy,outcome:y.outcome}),y.outcome){case"use-server":{await N(e.rollback,n.cache),await n.cache.invalidate(e.tags,n.now());for(let M of e.rollback)await n.queryEngine?.refresh(M.key);return"resolved"}case"use-client":return await n.queue.update({...e,versionToken:t.versionToken,status:"pending"}),"re-enqueued";case"merged":{if(i!==void 0&&u!==void 0)await n.cache.write({...u,data:y.data,versionToken:t.versionToken,status:"warm",storedAt:n.now()}),await n.queryEngine?.refresh(i);return await n.queue.update({...e,versionToken:t.versionToken,status:"pending"}),"re-enqueued"}default:{if(i!==void 0)await n.queryEngine?.emitConflict(i,{versionToken:t.versionToken,serverData:r,clientData:u?.data,strategy:a.strategy});return"resolved"}}}var ve=5;function W(...e){return me(...e)}function he(e){let t=ye(e);if(!t)throw Error("EconomicEvidenceInvalidRef: unsafe or invalid economic evidence ref");return t}function ae(e){let{transport:t,cache:n,queue:a,reachability:i,resolvers:u,events:r}=e,y=e.now??(()=>Date.now()),M=e.maxAttempts??ve,T={cache:n,queue:a,resolvers:u,events:r,now:y,queryEngine:e.queryEngine},h=!1,E=0,b=null,D=new Map,q=(o,l=o.economicEvidenceRefs)=>({operation:o.operation,input:o.input,tags:o.tags,economicEvidenceRefs:l});async function v(o){let l=[];for(let f of o){let g=await n.read(f.key);l.push({key:f.key,previous:g}),await n.write({key:f.key,data:f.data,versionToken:f.versionToken??g?.versionToken,status:"warm",tags:g?.tags??[],storedAt:y(),staleAt:g?.staleAt,expiresAt:g?.expiresAt}),await e.queryEngine?.refresh(f.key)}return l}async function w(o,l){for(let f of o.rollback){let g=await n.read(f.key);if(g!==void 0)await n.write({...g,versionToken:l.versionToken??g.versionToken,status:"stale",staleAt:y()});await e.queryEngine?.refresh(f.key)}await n.invalidate(o.tags,y())}async function p(o){let l;try{l=W(o.economicEvidenceRefs)}catch{await N(o.rollback,n);for(let S of o.rollback)await e.queryEngine?.refresh(S.key);return await a.remove(o.id),r.emit({type:"mutation-failed",id:o.id,code:"ECONOMIC_EVIDENCE_INVALID_REF"}),D.set(o.id,{id:o.id,status:"failed",problem:{type:"about:blank",title:"Economic evidence ref rejected",status:422,code:"ECONOMIC_EVIDENCE_INVALID_REF",category:"validation",severity:"error",retryable:!1}}),!0}let f=o.attempts+1;await a.update({...o,status:"in-flight",attempts:f});let g=await t.execute(q(o,l),e.contextProvider?.());if(g.ok){let S=W(l,g.data.economicEvidenceRefs);if(await w(o,g.data),await a.remove(o.id),r.emit({type:"mutation-replayed",id:o.id,queueDepth:await a.depth()}),S.length>0)r.emit({type:"economic-evidence-attached",operationKey:o.operation.key,evidenceRefs:S.map(he)});return D.set(o.id,{id:o.id,status:"done",data:g.data.data,economicEvidenceRefs:S}),!0}let{problem:k}=g;if(k.category==="auth"){if(h=!0,await a.update({...o,status:"paused-auth",attempts:f}),r.emit({type:"auth-expired",id:o.id}),D.set(o.id,{id:o.id,status:"paused-auth",problem:k}),e.refreshAuth!==void 0&&await e.refreshAuth())return h=!1,await a.update({...o,status:"pending",attempts:f}),!0;return!1}if(k.category==="conflict"){if(await ne(o,k,T)==="resolved")await a.remove(o.id),D.set(o.id,{id:o.id,status:"done",problem:k});return!0}if(k.retryable&&f<M){let S=te(f,e.backoff);return await a.update({...o,status:"failed",attempts:f}),r.emit({type:"mutation-retry",id:o.id,attempt:f,delayMs:S}),D.set(o.id,{id:o.id,status:"failed",problem:k}),e.schedule?.(()=>{d()},S),!0}await N(o.rollback,n);for(let S of o.rollback)await e.queryEngine?.refresh(S.key);return await a.remove(o.id),r.emit({type:"mutation-failed",id:o.id,code:g.code}),D.set(o.id,{id:o.id,status:"failed",problem:k}),!0}async function c(){if(h)return;if(!C(i.getSnapshot().signal))return;for(let o of await a.list()){if(o.status==="paused-auth")continue;if(!await p(o))return}r.emit({type:"queue-drained",remaining:await a.depth()})}function d(){if(b!==null)return b;return b=c().finally(()=>{b=null}),b}async function s(o,l={}){W(o.economicEvidenceRefs);let f=y();E+=1;let g=`${f}-${E}`,k=l.optimistic?await v(l.optimistic):[];if(await a.enqueue({...o,conflictPolicy:o.conflictPolicy??ge(),id:g,enqueuedAt:f,attempts:0,status:"pending",rollback:k}),r.emit({type:"mutation-enqueued",id:g,queueDepth:await a.depth()}),!h&&C(i.getSnapshot().signal))await d();return D.get(g)??{id:g,status:"pending"}}async function m(){h=!1;for(let o of await a.list())if(o.status==="paused-auth")await a.update({...o,status:"pending"});await d()}let O=i.subscribe((o)=>{if(!h&&C(o.signal))d()});return{mutate:s,drain:d,resume:m,dispose:O}}function oe(e){let t=(a)=>`queue:${a}`;async function n(){let a=await e.keys("queue:"),i=[];for(let u of a){let r=await e.get(u);if(r!==void 0)i.push(r)}return i.sort((u,r)=>u.enqueuedAt===r.enqueuedAt?u.id.localeCompare(r.id):u.enqueuedAt-r.enqueuedAt),i}return{enqueue:(a)=>e.set(t(a.id),a),update:(a)=>e.set(t(a.id),a),remove:(a)=>e.remove(t(a)),list:()=>n(),depth:async()=>(await e.keys("queue:")).length}}import{createQueryKey as G}from"@lssm/lib.contracts-spec/query/key";function x(e,t){if(e?.staleAt===void 0)return!1;return t>=e.staleAt}function L(){return{status:"idle",fetchStatus:"idle",cacheStatus:"empty",isStale:!1,isOffline:!1}}function V(e,t){if(e===void 0)return{status:"loading",fetchStatus:"fetching",cacheStatus:"empty",isStale:!1,isOffline:!1};let n=x(e,t);return{status:"success",fetchStatus:"fetching",data:e.data,cacheStatus:n?"stale":e.status,isStale:n,isOffline:!1,versionToken:e.versionToken,dataUpdatedAt:e.storedAt,...e.pageInfo===void 0?{}:{pageInfo:e.pageInfo}}}function Q(e,t){let n=x(e,t);return{status:"success",fetchStatus:"idle",data:e.data,cacheStatus:n?"stale":e.status,isStale:n,isOffline:!1,versionToken:e.versionToken,dataUpdatedAt:e.storedAt,...e.pageInfo===void 0?{}:{pageInfo:e.pageInfo}}}function j(e,t,n){return{status:"error",fetchStatus:"idle",data:t?.data,error:e,cacheStatus:t===void 0?"empty":t.status,isStale:x(t,n),isOffline:!1,versionToken:t?.versionToken,dataUpdatedAt:t?.storedAt,errorUpdatedAt:n}}function B(e,t,n){return{status:"auth-expired",fetchStatus:"idle",data:t?.data,error:e,cacheStatus:t===void 0?"empty":t.status,isStale:x(t,n),isOffline:!1,versionToken:t?.versionToken,dataUpdatedAt:t?.storedAt,errorUpdatedAt:n}}function K(e,t,n){return{status:e===void 0?"idle":"success",fetchStatus:"idle",data:e?.data,cacheStatus:"conflict",isStale:x(e,n),isOffline:!1,conflict:t,versionToken:t.versionToken??e?.versionToken,dataUpdatedAt:e?.storedAt}}function X(e,t){return{status:e===void 0?"idle":"success",fetchStatus:"idle",data:e?.data,cacheStatus:"offline",isStale:x(e,t),isOffline:!0,versionToken:e?.versionToken,dataUpdatedAt:e?.storedAt,...e?.pageInfo===void 0?{}:{pageInfo:e.pageInfo}}}function ie(e,t){let{transport:n}=e,a=e.advanced??{},i=a.now??(()=>Date.now()),u=a.reachability??R("online"),r=a.events??A(),y=a.resolvers??F(),M=t??I({defaultMode:e.localOffline,env:e.env,flag:e.flag}),T=new Map,h=new Map,E=0;function b(v,w){T.set(v,w);for(let p of h.get(v)??[])p(w)}return{...{async query(v,w){let p=G(v),c=u.getSnapshot().signal;if(!C(c)){let l=X(void 0,i());return b(p,l),l}b(p,V(void 0,i()));let d=i(),s=await n.execute(v,w),m=i();if(!s.ok){r.emit({type:"fetch-error",key:p,code:s.code,latencyMs:m-d});let l=s.problem.category==="auth"?B(s.problem,void 0,m):j(s.problem,void 0,m);return b(p,l),l}r.emit({type:"fetch-success",key:p,latencyMs:m-d});let O={key:p,data:s.data.data,versionToken:s.data.versionToken??s.versionToken,status:c==="restricted"?"warm":"fresh",tags:[],storedAt:m,...s.data.pageInfo===void 0?{}:{pageInfo:s.data.pageInfo}},o=Q(O,m);return b(p,o),o},getState(v){return T.get(G(v))??L()},subscribe(v,w){let p=G(v),c=h.get(p);if(c===void 0)c=new Set,h.set(p,c);return c.add(w),()=>c?.delete(w)},async invalidateTags(){return[]},async refresh(v){let w=T.get(v)??L();return b(v,w),w},async emitConflict(v,w){let p=K(void 0,w,i());return b(v,p),p}},...{async mutate(v,w={}){E+=1;let p=`${i()}-${E}`;if(!C(u.getSnapshot().signal))return{id:p,status:"disabled-offline",problem:Ee()};let c=await n.execute({operation:v.operation,input:v.input,tags:v.tags},w.ctx??a.contextProvider?.());if(c.ok)return{id:p,status:"done",data:c.data.data};if(c.problem.category==="auth")return{id:p,status:"paused-auth",problem:c.problem};return{id:p,status:"failed",problem:c.problem}},async drain(){},async resume(){},dispose(){}},maintenance:{collectGarbage:async()=>0,revalidateStale:async()=>0},events:r,resolvers:y,localOffline:M}}function Ee(){return{type:"about:blank",title:"Offline mutation queue disabled",status:409,code:"OFFLINE_QUEUE_DISABLED",category:"conflict",severity:"warning",retryable:!1,detail:"localOffline=online-only does not cache local data or queue offline mutations."}}import{createQueryKey as H}from"@lssm/lib.contracts-spec/query/key";function re(){let e=new Map;return{run(t,n){let a=e.get(t);if(a!==void 0)return a;let i=n().finally(()=>{e.delete(t)});return e.set(t,i),i},size(){return e.size}}}var we=0;function se(e){let{transport:t}=e,n=e.storage??_(),a=e.reachability??R("online"),i=e.now??(()=>Date.now()),u=e.defaultStaleTimeMs??we,r=e.cacheStore??U(n),y=e.events??A(),M=re(),T=new Map,h=new Map;function E(c,d){T.set(c,d);let s=h.get(c);if(s===void 0)return;for(let m of s)m(d)}async function b(c,d){let s=H(c),m=a.getSnapshot().signal,O=await r.read(s);if(!C(m)){let P=X(O,i());return E(s,P),P}if(O!==void 0&&!x(O,i())){y.emit({type:"cache-hit",key:s});let P=Q(O,i());return E(s,P),P}y.emit({type:"cache-miss",key:s}),E(s,V(O,i()));let o=i(),l=await M.run(s,()=>t.execute(c,d)),f=i();if(!l.ok){y.emit({type:"fetch-error",key:s,code:l.code,latencyMs:f-o});let P=l.problem.category==="auth"?B(l.problem,O,f):j(l.problem,O,f);return E(s,P),P}y.emit({type:"fetch-success",key:s,latencyMs:f-o});let g=c.cache?.staleTimeMs??u,k=c.cache?.cacheTimeMs,S={key:s,data:l.data.data,versionToken:l.data.versionToken??l.versionToken,status:m==="restricted"?"warm":"fresh",tags:c.tags??[],storedAt:f,staleAt:f+g,envelope:c,...k===void 0?{}:{expiresAt:f+k},...l.data.pageInfo===void 0?{}:{pageInfo:l.data.pageInfo}};await r.write(S);let J=Q(S,f);return E(s,J),J}async function D(c){let d=await r.read(c),s=d===void 0?L():Q(d,i());return E(c,s),s}async function q(c,d){let s=await r.read(c),m=K(s,d,i());return E(c,m),m}function v(c){return T.get(H(c))??L()}function w(c,d){let s=H(c),m=h.get(s);if(m===void 0)m=new Set,h.set(s,m);return m.add(d),()=>{h.get(s)?.delete(d)}}async function p(c){let d=await r.invalidate(c,i());for(let s of d){let m=await r.read(s);if(m!==void 0)E(s,Q(m,i()))}return d}return{query:b,getState:v,subscribe:w,invalidateTags:p,refresh:D,emitConflict:q}}function ce(e){Se(e);let t=e.advanced??{},n=I({defaultMode:e.localOffline,env:e.env,flag:e.flag});if(be(n.mode,t),n.mode==="online-only")return ie(e,n);let a=t.now??(()=>Date.now()),i=t.storage??_(),u=t.events??A(),r=t.cacheStore??U(i),y=t.reachability??R("online"),M=t.resolvers??F(),T=oe(i),h=se({...t,transport:e.transport,now:a,storage:i,events:u,cacheStore:r,reachability:y}),E=ae({transport:e.transport,cache:r,queue:T,reachability:y,resolvers:M,events:u,now:a,maxAttempts:t.maxAttempts,queryEngine:h,contextProvider:t.contextProvider,refreshAuth:t.refreshAuth,schedule:t.schedule,backoff:t.backoff}),b=ee({cache:r,events:u,now:a,revalidate:(D)=>h.query(D)});return{...h,...E,maintenance:b,events:u,resolvers:M,localOffline:n}}function be(e,t){if(e==="offline-capable"){if(t.storage===void 0)throw Error("localOffline=offline-capable requires advanced.storage; pass a durable StoragePort or explicit platform storage adapter.");return}if(t.storage!==void 0)throw Error(`localOffline=${e} rejects advanced.storage; this mode must not use durable local persistence.`);if(t.cacheStore!==void 0)throw Error(`localOffline=${e} rejects advanced.cacheStore; this mode owns cache semantics.`)}function Se(e){let t=e;if(t.storage!==void 0)throw Error("Use advanced.storage instead of top-level storage.");if(t.cacheStore!==void 0)throw Error("Use advanced.cacheStore instead of top-level cacheStore.")}function Te(){return globalThis.process?.env}function wt(e){return ce({...e,env:e.env??Te()})}export{wt as createDataEngineFromEnv,Te as readHostEnv};